0 [ 226.094135][T25410] __alloc_pages+0x102/0x320 [ 226.098783][T25410] alloc_pages_vma+0x391/0x660 [ 226.103538][T25410] ? follow_page_mask+0xceb/0x1040 [ 226.108637][T25410] do_anonymous_page+0x16e/0x8a0 [ 226.113631][T25410] ? strlcpy+0x65/0x80 [ 226.117762][T25410] handle_mm_fault+0x966/0x1a60 [ 226.122770][T25410] ? perf_trace_mmap_lock_acquire_returned+0x1e0/0x210 [ 226.129637][T25410] do_user_addr_fault+0x609/0xc00 [ 226.134643][T25410] exc_page_fault+0x91/0x220 [ 226.139214][T25410] asm_exc_page_fault+0x1e/0x30 [ 226.144047][T25410] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 226.150620][T25410] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 83 f8 [ 226.170265][T25410] RSP: 0018:ffffc90000483ce0 EFLAGS: 00010206 [ 226.176323][T25410] RAX: ffff88812f9e0a60 RBX: 0000000000001000 RCX: 0000000000000040 [ 226.184273][T25410] RDX: 0000000000001000 RSI: ffff8881075ecfc0 RDI: 0000000020007000 [ 226.192244][T25410] RBP: 0000000000001000 R08: 0000000000000000 R09: 0001ffffffffffff [ 226.200279][T25410] R10: 00018881075ecfff R11: ffff88812f9e0080 R12: 00007ffffffff000 [ 226.208412][T25410] R13: 0000000020007040 R14: ffff8881075ec000 R15: 0000000020006040 [ 226.216422][T25410] _copy_to_user+0x77/0x90 [ 226.220843][T25410] environ_read+0x248/0x340 [ 226.225329][T25410] do_iter_read+0x2be/0x4b0 [ 226.229811][T25410] do_preadv+0x13b/0x230 [ 226.234039][T25410] ? __cond_resched+0x11/0x40 [ 226.238696][T25410] ? fput+0x2d/0x130 [ 226.242702][T25410] ? ksys_write+0x157/0x180 [ 226.247216][T25410] __x64_sys_preadv+0x54/0x60 [ 226.251979][T25410] do_syscall_64+0x3d/0x90 [ 226.256396][T25410] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 226.262275][T25410] RIP: 0033:0x4665d9 [ 226.266148][T25410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 13:43:15 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) dup(r0) r1 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) dup3(r2, r1, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)={'syz0', "743ce03725248f6b35c175106d9713b6f1851a90c470a97515025cbd15e9b06c41ca27479c5a0c57d5b44832c81d44a7a15844f272812d51ae46d5ce479a1b199734177dc21fbe8a881dcec228c00cae2629"}, 0x56) [ 226.285733][T25410] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 226.294123][T25410] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 226.302072][T25410] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 [ 226.310107][T25410] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 226.318058][T25410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 226.326056][T25410] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 13:43:15 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090007ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:15 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x300, 0x0, 0x0) [ 226.345937][T25408] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 13:43:15 executing program 3: r0 = perf_event_open(&(0x7f0000000280)={0x2, 0xfffffffffffffe93, 0x10, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000000)={0x0, @aes256, 0x0, @desc3}) dup3(r1, r0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r1, 0xf505, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) accept4$packet(r3, &(0x7f0000000040), &(0x7f0000000080)=0x14, 0x0) 13:43:15 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x400000000000000}, 0x0) 13:43:15 executing program 5: r0 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) dup3(r1, r0, 0x0) 13:43:15 executing program 3: r0 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup3(r1, r0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x34) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x2, 0x1f, 0x6, 0xfd, 0x0, 0x6, 0xc1c81, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd8f0, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x40, 0x200, 0x3, 0x0, 0x0, 0x5, 0x4, 0x0, 0xec, 0x0, 0x20}, r3, 0xd, r2, 0x8) fcntl$setlease(r0, 0x400, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) preadv(r4, &(0x7f00000026c0)=[{&(0x7f0000000100)=""/22, 0x16}, {&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f0000000140)=""/19, 0x13}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f0000000180)=""/12, 0xc}, {&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f00000025c0)=""/231, 0xe7}], 0x7, 0x3511, 0x6ef0) close(r0) r5 = fcntl$getown(r1, 0x9) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x1, 0x1, 0x8, 0x0, 0x0, 0x0, 0x1000, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xd68, 0x2, @perf_config_ext={0x1000, 0x5}, 0x15000, 0x1, 0x8, 0x1, 0xd49, 0x2, 0x5, 0x0, 0x10000, 0x0, 0x40}, r5, 0xc, r2, 0x2) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"/265], 0x100}, 0x1, 0x0, 0x0, 0x20000090}, 0x20000001) 13:43:15 executing program 5: r0 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) dup3(r1, r0, 0x0) [ 226.458221][T25427] loop2: detected capacity change from 0 to 264192 13:43:15 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x406000000000000}, 0x0) [ 226.498715][T25427] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 13:43:15 executing program 1 (fault-call:2 fault-nth:16): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 13:43:15 executing program 3: r0 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x2}, 0x8416, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) dup3(r1, r0, 0x0) 13:43:15 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090009ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:16 executing program 5: r0 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup3(r1, r0, 0x0) preadv(r2, &(0x7f0000000380)=[{&(0x7f0000000000)=""/183, 0xb7}, {&(0x7f00000000c0)=""/209, 0xd1}, {&(0x7f00000001c0)=""/11, 0xb}, {&(0x7f0000000200)=""/33, 0x21}, {&(0x7f0000000240)=""/57, 0x39}, {&(0x7f0000000300)=""/68, 0x44}], 0x6, 0x400, 0x579) 13:43:16 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x500000000000000}, 0x0) [ 226.619875][T25462] FAULT_INJECTION: forcing a failure. [ 226.619875][T25462] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.632950][T25462] CPU: 0 PID: 25462 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 226.634880][T25467] loop2: detected capacity change from 0 to 264192 [ 226.641357][T25462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 226.641369][T25462] Call Trace: [ 226.641375][T25462] dump_stack_lvl+0xb7/0x103 [ 226.652337][T25467] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 226.657914][T25462] dump_stack+0x11/0x1a [ 226.657941][T25462] should_fail+0x23c/0x250 [ 226.683319][T25462] should_fail_usercopy+0x16/0x20 [ 226.688345][T25462] _copy_to_user+0x1c/0x90 [ 226.692814][T25462] environ_read+0x248/0x340 [ 226.697379][T25462] do_iter_read+0x2be/0x4b0 [ 226.701929][T25462] do_preadv+0x13b/0x230 [ 226.706178][T25462] ? __cond_resched+0x11/0x40 [ 226.710840][T25462] ? fput+0x2d/0x130 [ 226.714718][T25462] ? ksys_write+0x157/0x180 [ 226.719282][T25462] __x64_sys_preadv+0x54/0x60 [ 226.724032][T25462] do_syscall_64+0x3d/0x90 [ 226.728432][T25462] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 226.734324][T25462] RIP: 0033:0x4665d9 [ 226.738284][T25462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 226.757965][T25462] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 13:43:16 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) 13:43:16 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="04080009000aff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000002bc0)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002b80)={&(0x7f0000002a80)={0x100, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xba, 0xac, "0ab9b583718fb3814171b0382b17dff332f83a6ef028908ead837de1b7870cf8a565e86c7bb3bdb8ca06d20806941875cf080de7d085d27a76a3d604a365f12d22fe864b4b33d9aad8181d72eb0737689cc6ead7529febe72f32a04b2e5c3d5e97d719fa1d09dbfee4f4ff6f98e55975cb6637dd0d77f2d064ef879f1e5f83481ce6313d254bc8a1b0d9280bf123f1e33f90e3b7fb81258b7a71e4b2c61b077b3e286d0a128afb9aece3b09091fa9267c099fee76bfd"}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x7}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}]}, 0x100}, 0x1, 0x0, 0x0, 0x20000004}, 0x8040) r1 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) dup3(r2, r1, 0x0) [ 226.766372][T25462] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 226.774322][T25462] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 [ 226.782272][T25462] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 226.790229][T25462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 226.798873][T25462] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 13:43:16 executing program 3: r0 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = accept$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) readv(r2, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/16, 0x10}, {&(0x7f0000000100)=""/9, 0x9}, {&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000180)=""/37, 0x25}], 0x4) dup3(r1, r0, 0x0) 13:43:16 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x600000000000000}, 0x0) 13:43:16 executing program 3: r0 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8b57}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x14, 0xfffe}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) dup3(r1, r0, 0x0) 13:43:16 executing program 1 (fault-call:2 fault-nth:17): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 13:43:16 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x700000000000000}, 0x0) [ 226.878226][T25477] loop2: detected capacity change from 0 to 264192 [ 226.910420][T25477] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 13:43:16 executing program 5: r0 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x1a0, 0x0, 0x1, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_TUPLE_ORIG={0x60, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}, @CTA_LABELS_MASK={0x10, 0x17, [0x7, 0x0, 0x3]}, @CTA_TUPLE_REPLY={0x60, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @private=0xa010101}}}]}, @CTA_STATUS={0x8}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_PROTOINFO={0x58, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x54, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x40}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x20, 0x1f}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x40}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x7, 0x8}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x2}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x5, 0x5}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x40, 0x7}}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x5}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xb7, 0x6}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x20}]}}, @CTA_SEQ_ADJ_ORIG={0x3c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1d}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x40000}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x80000000}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x8080}, 0x400c0) dup3(r1, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000b, 0x10, r2, 0x66553000) [ 226.966817][T25497] FAULT_INJECTION: forcing a failure. [ 226.966817][T25497] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 226.980063][T25497] CPU: 1 PID: 25497 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 226.988478][T25497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 226.998538][T25497] Call Trace: [ 227.001848][T25497] dump_stack_lvl+0xb7/0x103 [ 227.006595][T25497] dump_stack+0x11/0x1a [ 227.010838][T25497] should_fail+0x23c/0x250 13:43:16 executing program 5: r0 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendfile(r1, r0, &(0x7f0000000100)=0xc, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) dup3(r2, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x801, 0x0, 0x0, {0x5, 0x0, 0x8}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x80) [ 227.015325][T25497] __alloc_pages+0x102/0x320 [ 227.019916][T25497] alloc_pages_vma+0x391/0x660 [ 227.024689][T25497] ? follow_page_mask+0xceb/0x1040 [ 227.029803][T25497] do_anonymous_page+0x16e/0x8a0 [ 227.034746][T25497] ? strlcpy+0x65/0x80 [ 227.038872][T25497] handle_mm_fault+0x966/0x1a60 [ 227.043748][T25497] ? perf_trace_mmap_lock_acquire_returned+0x1e0/0x210 [ 227.050739][T25497] do_user_addr_fault+0x609/0xc00 [ 227.055762][T25497] exc_page_fault+0x91/0x220 [ 227.060388][T25497] asm_exc_page_fault+0x1e/0x30 13:43:16 executing program 5: r0 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup3(r1, r0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000040)={0x20, @tick, 0x2, {0x7, 0x80}, 0x4, 0x2, 0x3}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) dup2(r2, r3) 13:43:16 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x2, 0x0) [ 227.065252][T25497] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 227.071875][T25497] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 83 f8 [ 227.091583][T25497] RSP: 0018:ffffc90000927ce0 EFLAGS: 00010206 [ 227.097647][T25497] RAX: ffff88812fc19a20 RBX: 0000000000001000 RCX: 0000000000000040 [ 227.105643][T25497] RDX: 0000000000001000 RSI: ffff888109237fc0 RDI: 0000000020008000 13:43:16 executing program 5: r0 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup3(r1, r0, 0x0) mmap(&(0x7f0000fee000/0x10000)=nil, 0x10000, 0x100000a, 0x13, r2, 0x4b9f4000) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x1, 0x3, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_TUPLE_MASTER={0x30, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x40040) [ 227.113689][T25497] RBP: 0000000000001000 R08: 0000000000000000 R09: 0001ffffffffffff [ 227.121658][T25497] R10: 0001888109237fff R11: ffff88812fc19040 R12: 00007ffffffff000 [ 227.129699][T25497] R13: 0000000020008040 R14: ffff888109237000 R15: 0000000020007040 [ 227.137666][T25497] _copy_to_user+0x77/0x90 [ 227.142109][T25497] environ_read+0x248/0x340 [ 227.146693][T25497] do_iter_read+0x2be/0x4b0 [ 227.151197][T25497] do_preadv+0x13b/0x230 [ 227.155436][T25497] ? __cond_resched+0x11/0x40 [ 227.160180][T25497] ? fput+0x2d/0x130 [ 227.164197][T25497] ? ksys_write+0x157/0x180 [ 227.168699][T25497] __x64_sys_preadv+0x54/0x60 [ 227.173362][T25497] do_syscall_64+0x3d/0x90 [ 227.177788][T25497] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 227.183729][T25497] RIP: 0033:0x4665d9 [ 227.187625][T25497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 227.207499][T25497] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 13:43:16 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="04080009000bff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:16 executing program 5: r0 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) dup3(r1, r0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xc0, 0x0, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'netbios-ns\x00'}}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @private2}}}]}, @CTA_TUPLE_REPLY={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x24004100}, 0x84080) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f00000001c0)={'TPROXY\x00'}, &(0x7f0000000200)=0x1e) 13:43:16 executing program 3: r0 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) dup3(r1, r0, 0x0) 13:43:16 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x900000000000000}, 0x0) [ 227.215994][T25497] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 227.223962][T25497] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 [ 227.231977][T25497] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 227.239956][T25497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 227.248158][T25497] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 13:43:16 executing program 3: r0 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) dup3(r1, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x7, 0x5, 0x80, 0x18, 0x0, 0x8, 0x40000, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0xf11f, 0x0, @perf_config_ext={0x55c6b754, 0xfffffffffffffffc}, 0x4, 0xdd7, 0x3, 0x3, 0x100000000, 0x1, 0x101, 0x0, 0x9, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r3, 0x12) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r2, 0xf505, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) statx(r4, &(0x7f0000000200)='./file0\x00', 0x2000, 0x400, &(0x7f0000000400)) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/204, 0xcc}, {&(0x7f0000000300)=""/197, 0xc5}], 0x2, 0x3ff, 0x0) 13:43:16 executing program 1 (fault-call:2 fault-nth:18): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 13:43:16 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x10, 0x0) 13:43:16 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x2800000000000000}, 0x0) [ 227.355747][T25533] loop2: detected capacity change from 0 to 264192 13:43:16 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = signalfd(r0, &(0x7f0000000140)={[0xdb50]}, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000180)='$\x00') r3 = getpid() perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0xef, 0xff, 0xf4, 0x7, 0x0, 0x571, 0x1100, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1, @perf_bp={&(0x7f0000000080), 0x2}, 0x840, 0x101, 0xfffffffc, 0x2, 0x141c, 0x65, 0x2, 0x0, 0x6, 0x0, 0x80000001}, r3, 0xe, 0xffffffffffffffff, 0x4) dup3(r1, r0, 0x0) [ 227.402096][T25533] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 227.433593][T25549] FAULT_INJECTION: forcing a failure. [ 227.433593][T25549] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 227.446750][T25549] CPU: 1 PID: 25549 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 227.455582][T25549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 227.465809][T25549] Call Trace: [ 227.469089][T25549] dump_stack_lvl+0xb7/0x103 [ 227.473694][T25549] dump_stack+0x11/0x1a [ 227.477925][T25549] should_fail+0x23c/0x250 [ 227.482346][T25549] should_fail_usercopy+0x16/0x20 [ 227.487380][T25549] _copy_to_user+0x1c/0x90 [ 227.491807][T25549] environ_read+0x248/0x340 [ 227.496349][T25549] do_iter_read+0x2be/0x4b0 13:43:16 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="04080009000cff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) [ 227.500905][T25549] do_preadv+0x13b/0x230 [ 227.505155][T25549] ? __cond_resched+0x11/0x40 [ 227.509834][T25549] ? fput+0x2d/0x130 [ 227.513767][T25549] ? ksys_write+0x157/0x180 [ 227.518296][T25549] __x64_sys_preadv+0x54/0x60 [ 227.523142][T25549] do_syscall_64+0x3d/0x90 [ 227.527651][T25549] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 227.534014][T25549] RIP: 0033:0x4665d9 [ 227.537910][T25549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 227.557804][T25549] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 227.567274][T25549] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 227.575599][T25549] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 [ 227.583660][T25549] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 227.591655][T25549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 13:43:17 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x2c00000000000000}, 0x0) [ 227.599652][T25549] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 13:43:17 executing program 1 (fault-call:2 fault-nth:19): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 13:43:17 executing program 3: r0 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r1, r1, &(0x7f0000000000)=0x2, 0x718443c6) dup3(r1, r0, 0x0) [ 227.691790][T25564] loop2: detected capacity change from 0 to 264192 [ 227.699300][T25566] FAULT_INJECTION: forcing a failure. [ 227.699300][T25566] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 227.712716][T25566] CPU: 0 PID: 25566 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 227.721264][T25566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 227.731315][T25566] Call Trace: [ 227.734666][T25566] dump_stack_lvl+0xb7/0x103 [ 227.739262][T25566] dump_stack+0x11/0x1a [ 227.743445][T25566] should_fail+0x23c/0x250 [ 227.747973][T25566] __alloc_pages+0x102/0x320 [ 227.752561][T25566] alloc_pages_vma+0x391/0x660 [ 227.757324][T25566] ? follow_page_mask+0xceb/0x1040 [ 227.762438][T25566] do_anonymous_page+0x16e/0x8a0 [ 227.767378][T25566] ? strlcpy+0x65/0x80 [ 227.771516][T25566] handle_mm_fault+0x966/0x1a60 [ 227.776497][T25566] ? perf_trace_mmap_lock_acquire_returned+0x1e0/0x210 [ 227.783355][T25566] do_user_addr_fault+0x609/0xc00 [ 227.788386][T25566] exc_page_fault+0x91/0x220 [ 227.792977][T25566] asm_exc_page_fault+0x1e/0x30 [ 227.797827][T25566] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 227.804422][T25566] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 83 f8 [ 227.824552][T25566] RSP: 0018:ffffc900010b3ce0 EFLAGS: 00010206 [ 227.830697][T25566] RAX: ffff88812f97da20 RBX: 0000000000001000 RCX: 0000000000000040 [ 227.838664][T25566] RDX: 0000000000001000 RSI: ffff888133c93fc0 RDI: 0000000020009000 [ 227.847688][T25566] RBP: 0000000000001000 R08: 0000000000000000 R09: 0001ffffffffffff [ 227.855665][T25566] R10: 0001888133c93fff R11: ffff88812f97d040 R12: 00007ffffffff000 [ 227.863657][T25566] R13: 0000000020009040 R14: ffff888133c93000 R15: 0000000020008040 [ 227.873891][T25566] _copy_to_user+0x77/0x90 [ 227.878450][T25566] environ_read+0x248/0x340 [ 227.882959][T25566] do_iter_read+0x2be/0x4b0 [ 227.887492][T25566] do_preadv+0x13b/0x230 [ 227.891996][T25566] ? __cond_resched+0x11/0x40 [ 227.896706][T25566] ? fput+0x2d/0x130 [ 227.900604][T25566] ? ksys_write+0x157/0x180 [ 227.905512][T25566] __x64_sys_preadv+0x54/0x60 [ 227.911604][T25566] do_syscall_64+0x3d/0x90 [ 227.916025][T25566] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 227.922003][T25566] RIP: 0033:0x4665d9 [ 227.925893][T25566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 227.945515][T25566] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 227.953932][T25566] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 227.961905][T25566] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 [ 227.969961][T25566] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 227.977975][T25566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 227.985965][T25566] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 [ 228.011422][T25564] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 13:43:17 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="04080009000dff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:17 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xef, 0x0) 13:43:17 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x8000000000000000}, 0x0) 13:43:17 executing program 3: r0 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x80010, r1, 0x1675000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) preadv(0xffffffffffffffff, &(0x7f0000000bc0)=[{&(0x7f0000000940)=""/5, 0x5}, {&(0x7f0000000980)=""/64, 0x40}, {&(0x7f00000009c0)=""/198, 0xc6}, {&(0x7f0000000ac0)=""/200, 0xc8}], 0x4, 0x6, 0x4) dup3(r2, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000880)={'filter\x00', 0x0, [0xfffffff8, 0x4, 0xfffff801]}, &(0x7f0000000900)=0x44) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/141, 0x8d}, {&(0x7f00000000c0)=""/215, 0xd7}, {&(0x7f00000001c0)=""/75, 0x4b}], 0x3, 0x1000, 0x3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r4, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB="c4000000010205000000000000000000010000080800084000000003a8000a800c000280060003400000000008000140000000015800028006000340000000000c00028005000100110000002c00018014000300fe88000000000000000000000000010114000400ff0200000000000000000000000000011400018008000100ac1414bb08000200ffffffff180002801400018008000100ac1414bb08000200ac1414bb0c00028006000000000000000800014000000000080001400000000004000280"], 0xc4}, 0x1, 0x0, 0x0, 0x20000094}, 0x4080) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x70, 0x2, 0x1, 0x101, 0x0, 0x0, {0x1}, [@CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x4}}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x6}, @CTA_MARK_MASK={0x8}, @CTA_ZONE={0x6}, @CTA_TUPLE_ORIG={0x34, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r5, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xfff}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0x2aa3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40842}, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x7f, 0x7f, 0x0, 0x9, 0x0, 0x7f, 0x40000, 0x4, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000480), 0x8}, 0x1, 0x1f, 0x2acb, 0x8, 0x100000000, 0x6, 0x1, 0x0, 0x10001, 0x0, 0x81}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000840), 0x2100, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000002, 0x110, r6, 0x442cb000) 13:43:17 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x9effffff00000000}, 0x0) 13:43:17 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="04080009000eff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) [ 228.156875][T25583] loop2: detected capacity change from 0 to 264192 [ 228.176846][T25583] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 13:43:17 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x2, 0x0, 0x0) 13:43:17 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0xc00e000000000000}, 0x0) 13:43:17 executing program 1 (fault-call:2 fault-nth:20): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 228.287159][T25600] loop2: detected capacity change from 0 to 264192 [ 228.311828][T25600] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 228.337678][T25609] FAULT_INJECTION: forcing a failure. [ 228.337678][T25609] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 228.350887][T25609] CPU: 1 PID: 25609 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 228.359313][T25609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 228.369521][T25609] Call Trace: [ 228.372801][T25609] dump_stack_lvl+0xb7/0x103 [ 228.377403][T25609] dump_stack+0x11/0x1a [ 228.381654][T25609] should_fail+0x23c/0x250 [ 228.386076][T25609] should_fail_usercopy+0x16/0x20 [ 228.391110][T25609] _copy_to_user+0x1c/0x90 [ 228.395711][T25609] environ_read+0x248/0x340 [ 228.400263][T25609] do_iter_read+0x2be/0x4b0 [ 228.404763][T25609] do_preadv+0x13b/0x230 [ 228.408999][T25609] ? __cond_resched+0x11/0x40 [ 228.413771][T25609] ? fput+0x2d/0x130 [ 228.417677][T25609] ? ksys_write+0x157/0x180 [ 228.422267][T25609] __x64_sys_preadv+0x54/0x60 [ 228.426968][T25609] do_syscall_64+0x3d/0x90 [ 228.431493][T25609] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 228.437396][T25609] RIP: 0033:0x4665d9 [ 228.441329][T25609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 228.460942][T25609] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 228.469359][T25609] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 228.477390][T25609] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 13:43:17 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x2000, 0x0) 13:43:17 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0xefffffff00000000}, 0x0) [ 228.485365][T25609] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 228.493341][T25609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 228.501316][T25609] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 13:43:17 executing program 1 (fault-call:2 fault-nth:21): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 13:43:17 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="04080009010eff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) [ 228.603888][T25628] FAULT_INJECTION: forcing a failure. [ 228.603888][T25628] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 228.617208][T25628] CPU: 0 PID: 25628 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 228.625699][T25628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 228.627589][T25629] loop2: detected capacity change from 0 to 264192 [ 228.635750][T25628] Call Trace: [ 228.635760][T25628] dump_stack_lvl+0xb7/0x103 [ 228.650137][T25628] dump_stack+0x11/0x1a [ 228.654345][T25628] should_fail+0x23c/0x250 [ 228.658774][T25628] __alloc_pages+0x102/0x320 [ 228.663407][T25628] alloc_pages_vma+0x391/0x660 [ 228.668168][T25628] ? follow_page_mask+0xceb/0x1040 [ 228.673281][T25628] do_anonymous_page+0x16e/0x8a0 [ 228.678224][T25628] ? strlcpy+0x65/0x80 [ 228.682299][T25628] handle_mm_fault+0x966/0x1a60 [ 228.682759][T25629] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 228.687150][T25628] ? perf_trace_mmap_lock_acquire_returned+0x1e0/0x210 [ 228.687231][T25628] do_user_addr_fault+0x609/0xc00 [ 228.708014][T25628] exc_page_fault+0x91/0x220 [ 228.712608][T25628] asm_exc_page_fault+0x1e/0x30 [ 228.717474][T25628] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 228.724295][T25628] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 83 f8 [ 228.744013][T25628] RSP: 0018:ffffc900013b7ce0 EFLAGS: 00010206 [ 228.750081][T25628] RAX: ffff8881077f9a20 RBX: 0000000000001000 RCX: 0000000000000040 [ 228.758051][T25628] RDX: 0000000000001000 RSI: ffff88813123cfc0 RDI: 000000002000a000 [ 228.766021][T25628] RBP: 0000000000001000 R08: 0000000000000000 R09: 0001ffffffffffff [ 228.773993][T25628] R10: 000188813123cfff R11: ffff8881077f9040 R12: 00007ffffffff000 [ 228.781965][T25628] R13: 000000002000a040 R14: ffff88813123c000 R15: 0000000020009040 [ 228.789943][T25628] _copy_to_user+0x77/0x90 [ 228.794365][T25628] environ_read+0x248/0x340 [ 228.798869][T25628] do_iter_read+0x2be/0x4b0 [ 228.803387][T25628] do_preadv+0x13b/0x230 [ 228.807664][T25628] ? __cond_resched+0x11/0x40 [ 228.812345][T25628] ? fput+0x2d/0x130 [ 228.816312][T25628] ? ksys_write+0x157/0x180 [ 228.820820][T25628] __x64_sys_preadv+0x54/0x60 [ 228.825519][T25628] do_syscall_64+0x3d/0x90 [ 228.826536][T25635] loop3: detected capacity change from 0 to 264192 [ 228.829968][T25628] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 228.842338][T25628] RIP: 0033:0x4665d9 [ 228.846239][T25628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 228.866717][T25628] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 228.867919][T25635] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 228.875130][T25628] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 228.875145][T25628] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 13:43:18 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="04080009030eff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:18 executing program 3: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="04080009c303ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:18 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0xf0ffffff00000000}, 0x0) [ 228.900051][T25628] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 228.908023][T25628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 228.916000][T25628] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 13:43:18 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) 13:43:18 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x6, 0x2000) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000005, 0x50, r1, 0xa3be5000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0xffffd000) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = openat(r0, &(0x7f0000000040)='./file0\x00', 0xb27fce534ffdf6bb, 0x0) mount_setattr(r2, &(0x7f0000000080)='./file0\x00', 0x9800, &(0x7f00000000c0)={0x72, 0x100001, 0x40000, {r0}}, 0x20) r3 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7ff, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d22, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup3(r5, r3, 0x0) 13:43:18 executing program 1 (fault-call:2 fault-nth:22): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 229.017600][T25645] loop2: detected capacity change from 0 to 264192 [ 229.050324][T25645] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 229.072336][T25659] FAULT_INJECTION: forcing a failure. [ 229.072336][T25659] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.085421][T25659] CPU: 0 PID: 25659 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 229.093834][T25659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 229.103892][T25659] Call Trace: [ 229.107170][T25659] dump_stack_lvl+0xb7/0x103 [ 229.111769][T25659] dump_stack+0x11/0x1a [ 229.115941][T25659] should_fail+0x23c/0x250 [ 229.120356][T25659] should_fail_usercopy+0x16/0x20 [ 229.125582][T25659] _copy_to_user+0x1c/0x90 [ 229.130055][T25659] environ_read+0x248/0x340 [ 229.134656][T25659] do_iter_read+0x2be/0x4b0 [ 229.139222][T25659] do_preadv+0x13b/0x230 [ 229.143476][T25659] ? __cond_resched+0x11/0x40 [ 229.148159][T25659] ? fput+0x2d/0x130 [ 229.152123][T25659] ? ksys_write+0x157/0x180 [ 229.156627][T25659] __x64_sys_preadv+0x54/0x60 [ 229.161312][T25659] do_syscall_64+0x3d/0x90 [ 229.165868][T25659] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 229.171869][T25659] RIP: 0033:0x4665d9 [ 229.175764][T25659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 229.195416][T25659] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 229.203831][T25659] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 229.211815][T25659] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 13:43:18 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0xffffffff00000000}, 0x0) 13:43:18 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x6, 0x2000) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000005, 0x50, r1, 0xa3be5000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0xffffd000) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = openat(r0, &(0x7f0000000040)='./file0\x00', 0xb27fce534ffdf6bb, 0x0) mount_setattr(r2, &(0x7f0000000080)='./file0\x00', 0x9800, &(0x7f00000000c0)={0x72, 0x100001, 0x40000, {r0}}, 0x20) r3 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7ff, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d22, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup3(r5, r3, 0x0) [ 229.219805][T25659] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 229.227785][T25659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 229.235768][T25659] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 13:43:18 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x4000, 0x0) 13:43:18 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="04080009000fff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:18 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x6, 0x2000) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000005, 0x50, r1, 0xa3be5000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0xffffd000) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = openat(r0, &(0x7f0000000040)='./file0\x00', 0xb27fce534ffdf6bb, 0x0) mount_setattr(r2, &(0x7f0000000080)='./file0\x00', 0x9800, &(0x7f00000000c0)={0x72, 0x100001, 0x40000, {r0}}, 0x20) r3 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7ff, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d22, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup3(r5, r3, 0x0) 13:43:18 executing program 1 (fault-call:2 fault-nth:23): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 13:43:18 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x0) [ 229.365084][T25676] loop2: detected capacity change from 0 to 264192 [ 229.368626][T25677] FAULT_INJECTION: forcing a failure. [ 229.368626][T25677] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 229.385668][T25677] CPU: 1 PID: 25677 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 229.394636][T25677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 229.404964][T25677] Call Trace: [ 229.408448][T25677] dump_stack_lvl+0xb7/0x103 [ 229.415079][T25677] dump_stack+0x11/0x1a [ 229.419401][T25677] should_fail+0x23c/0x250 [ 229.423861][T25677] __alloc_pages+0x102/0x320 [ 229.428612][T25677] alloc_pages_vma+0x391/0x660 [ 229.433433][T25677] ? follow_page_mask+0xceb/0x1040 [ 229.439252][T25677] do_anonymous_page+0x16e/0x8a0 [ 229.445626][T25677] ? strlcpy+0x65/0x80 [ 229.451534][T25677] handle_mm_fault+0x966/0x1a60 [ 229.456385][T25677] ? perf_trace_mmap_lock_acquire_returned+0x1e0/0x210 [ 229.463810][T25677] do_user_addr_fault+0x609/0xc00 [ 229.469280][T25677] exc_page_fault+0x91/0x220 [ 229.475186][T25677] asm_exc_page_fault+0x1e/0x30 [ 229.480115][T25677] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 229.487535][T25677] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 83 f8 [ 229.508602][T25677] RSP: 0018:ffffc900013a7ce0 EFLAGS: 00010206 [ 229.514817][T25677] RAX: ffff88812f9969e0 RBX: 0000000000001000 RCX: 0000000000000040 [ 229.523359][T25677] RDX: 0000000000001000 RSI: ffff888108b4ffc0 RDI: 000000002000b000 [ 229.531472][T25677] RBP: 0000000000001000 R08: 0000000000000000 R09: 0001ffffffffffff [ 229.540393][T25677] R10: 0001888108b4ffff R11: ffff88812f996000 R12: 00007ffffffff000 [ 229.550407][T25677] R13: 000000002000b040 R14: ffff888108b4f000 R15: 000000002000a040 [ 229.558798][T25677] _copy_to_user+0x77/0x90 [ 229.563557][T25677] environ_read+0x248/0x340 [ 229.568408][T25677] do_iter_read+0x2be/0x4b0 [ 229.573000][T25677] do_preadv+0x13b/0x230 [ 229.579416][T25677] ? __cond_resched+0x11/0x40 [ 229.585186][T25677] ? fput+0x2d/0x130 [ 229.589611][T25677] ? ksys_write+0x157/0x180 [ 229.594938][T25677] __x64_sys_preadv+0x54/0x60 [ 229.599858][T25677] do_syscall_64+0x3d/0x90 [ 229.604282][T25677] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 229.610248][T25677] RIP: 0033:0x4665d9 [ 229.614148][T25677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 229.634008][T25677] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 229.642454][T25677] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 229.650604][T25677] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 [ 229.658572][T25677] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 229.666624][T25677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 229.674618][T25677] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 13:43:19 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x2}, 0x0) 13:43:19 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x400000f1}], 0x1, 0x0, 0x0) 13:43:19 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x3}, 0x0) 13:43:19 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xefff, 0x0) 13:43:19 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) 13:43:19 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x0) 13:43:19 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="04080009030fff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) [ 230.053478][T25676] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 13:43:19 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x6}, 0x0) 13:43:19 executing program 3: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000340)='./file0\x00', 0x3, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000240)='./file0\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000440)) 13:43:19 executing program 1 (fault-call:2 fault-nth:24): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 230.173327][T25714] loop2: detected capacity change from 0 to 264192 [ 230.200126][T25717] FAT-fs (loop3): bogus number of reserved sectors [ 230.206719][T25717] FAT-fs (loop3): Can't find a valid FAT filesystem [ 230.220092][T25714] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 230.229645][T25720] FAULT_INJECTION: forcing a failure. [ 230.229645][T25720] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.242748][T25720] CPU: 1 PID: 25720 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 230.251166][T25720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 230.261221][T25720] Call Trace: [ 230.264503][T25720] dump_stack_lvl+0xb7/0x103 [ 230.269173][T25720] dump_stack+0x11/0x1a [ 230.273344][T25720] should_fail+0x23c/0x250 [ 230.277768][T25720] should_fail_usercopy+0x16/0x20 [ 230.282798][T25720] _copy_to_user+0x1c/0x90 [ 230.287220][T25720] environ_read+0x248/0x340 [ 230.291729][T25720] do_iter_read+0x2be/0x4b0 [ 230.296222][T25720] do_preadv+0x13b/0x230 [ 230.300456][T25720] ? __cond_resched+0x11/0x40 [ 230.305127][T25720] ? fput+0x2d/0x130 [ 230.309108][T25720] ? ksys_write+0x157/0x180 [ 230.313980][T25720] __x64_sys_preadv+0x54/0x60 [ 230.318639][T25720] do_syscall_64+0x3d/0x90 [ 230.323047][T25720] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 230.328949][T25720] RIP: 0033:0x4665d9 [ 230.332839][T25720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 230.352546][T25720] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 230.360959][T25720] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 13:43:19 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800092010ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:19 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x7}, 0x0) 13:43:19 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xffef, 0x0) [ 230.368931][T25720] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 [ 230.376899][T25720] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 230.384849][T25720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 230.392799][T25720] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 13:43:19 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x9}, 0x0) [ 230.441663][T25717] FAT-fs (loop3): Unrecognized mount option "./file0" or missing value 13:43:19 executing program 3: timer_settime(0x0, 0x0, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x8a, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8000400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000002c0)) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x3938700}}, 0x0) timer_gettime(0x0, &(0x7f0000000400)) timer_create(0x4, &(0x7f00000000c0)={0x0, 0x10, 0x4, @thr={&(0x7f00000001c0)="09878980d31d1072f6f5bb5dcce7d533bf97b9e64c4cfcb50a09a3511473bb8caba2a034f356512bab37a7434e673c56b974e59a28fea08459346620cff5d5a962e43085e8f5547f1bcd3086770f65f64676adad8f1e297b326713e4a28b902a71e83b976352f707c1d7e77ddc55f0945831b38dea629a87e89825c69d08254ae63c432d6c147453d666167b757a73c9ec21a4cee6c2ce2767fce294832db7fd47516a47d283ae4136b30bb79eb0c0355dae8b602430c0245b71dd", &(0x7f0000000340)="092a08b1a9442978ca9ce7d0d72d76fb507727e4eea22bd04a786b4c489e926c183833bb6cf2199227bc1f28f68837be73cfb1e19340b2a20063e44ceb2a6264d5ca0f4cc5f56204566e0b1779cc42fdcd01a97745dc16d64c335543448f6fbf10b68c77077b8d448c5427ac9d15d026022994113fb954873b32c800e1e5a4ca253cd9cc53f96a47d5738b218fa166091969367edb214ea4d7d5c4e735977d4e2ef44f676265b7248853d0fa2474"}}, &(0x7f0000000140)=0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) timer_settime(r2, 0x1, &(0x7f0000000440)={{r3, r4+60000000}, {0x0, 0x3938700}}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) socket$nl_generic(0x10, 0x3, 0x10) 13:43:19 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x28}, 0x0) [ 230.486931][T25732] loop2: detected capacity change from 0 to 264192 [ 230.496169][T25732] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 13:43:19 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090011ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:20 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x2c}, 0x0) 13:43:20 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="04080009a911ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) [ 230.607891][T25754] loop2: detected capacity change from 0 to 264192 [ 230.621034][T25754] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 13:43:20 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x300}, 0x0) 13:43:20 executing program 1 (fault-call:2 fault-nth:25): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 230.741262][T25773] loop2: detected capacity change from 0 to 264192 [ 230.744404][T25775] FAULT_INJECTION: forcing a failure. [ 230.744404][T25775] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 230.761298][T25775] CPU: 1 PID: 25775 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 230.764711][T25773] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 230.769730][T25775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 230.769742][T25775] Call Trace: [ 230.769749][T25775] dump_stack_lvl+0xb7/0x103 [ 230.796718][T25775] dump_stack+0x11/0x1a [ 230.800965][T25775] should_fail+0x23c/0x250 [ 230.805390][T25775] __alloc_pages+0x102/0x320 [ 230.810008][T25775] alloc_pages_vma+0x391/0x660 [ 230.814781][T25775] ? follow_page_mask+0xceb/0x1040 [ 230.819898][T25775] do_anonymous_page+0x16e/0x8a0 [ 230.824847][T25775] ? strlcpy+0x65/0x80 [ 230.828999][T25775] handle_mm_fault+0x966/0x1a60 [ 230.833849][T25775] ? perf_trace_mmap_lock_acquire_returned+0x1e0/0x210 [ 230.840784][T25775] do_user_addr_fault+0x609/0xc00 [ 230.845819][T25775] exc_page_fault+0x91/0x220 [ 230.850425][T25775] asm_exc_page_fault+0x1e/0x30 [ 230.855275][T25775] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 230.861876][T25775] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 83 f8 [ 230.881486][T25775] RSP: 0018:ffffc900015d7ce0 EFLAGS: 00010206 [ 230.887556][T25775] RAX: ffff888109bb2a60 RBX: 0000000000001000 RCX: 0000000000000040 [ 230.895635][T25775] RDX: 0000000000001000 RSI: ffff888101d0bfc0 RDI: 000000002000c000 [ 230.903745][T25775] RBP: 0000000000001000 R08: 0000000000000000 R09: 0001ffffffffffff [ 230.911724][T25775] R10: 0001888101d0bfff R11: ffff888109bb2080 R12: 00007ffffffff000 [ 230.919912][T25775] R13: 000000002000c040 R14: ffff888101d0b000 R15: 000000002000b040 [ 230.927902][T25775] _copy_to_user+0x77/0x90 [ 230.932332][T25775] environ_read+0x248/0x340 [ 230.936891][T25775] do_iter_read+0x2be/0x4b0 13:43:20 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x100000, 0x0) [ 230.941484][T25775] do_preadv+0x13b/0x230 [ 230.945738][T25775] ? __cond_resched+0x11/0x40 [ 230.950427][T25775] ? fput+0x2d/0x130 [ 230.954319][T25775] ? ksys_write+0x157/0x180 [ 230.958823][T25775] __x64_sys_preadv+0x54/0x60 [ 230.963513][T25775] do_syscall_64+0x3d/0x90 [ 230.967967][T25775] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 230.973880][T25775] RIP: 0033:0x4665d9 [ 230.977778][T25775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 230.997395][T25775] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 231.005813][T25775] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 231.014002][T25775] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 [ 231.022020][T25775] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 231.030008][T25775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 13:43:20 executing program 1 (fault-call:2 fault-nth:26): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 231.037985][T25775] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 13:43:20 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x406}, 0x0) 13:43:20 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090012ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) [ 231.129746][T25789] FAULT_INJECTION: forcing a failure. [ 231.129746][T25789] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 231.142388][T25790] loop2: detected capacity change from 0 to 264192 [ 231.142832][T25789] CPU: 0 PID: 25789 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 231.157699][T25789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 231.167747][T25789] Call Trace: [ 231.172926][T25789] dump_stack_lvl+0xb7/0x103 [ 231.177591][T25789] dump_stack+0x11/0x1a [ 231.181753][T25789] should_fail+0x23c/0x250 [ 231.186167][T25789] should_fail_usercopy+0x16/0x20 [ 231.191199][T25789] _copy_to_user+0x1c/0x90 [ 231.195615][T25789] environ_read+0x248/0x340 [ 231.200165][T25789] do_iter_read+0x2be/0x4b0 [ 231.204673][T25789] do_preadv+0x13b/0x230 [ 231.208957][T25789] ? __cond_resched+0x11/0x40 [ 231.213736][T25789] ? fput+0x2d/0x130 [ 231.217622][T25789] ? ksys_write+0x157/0x180 [ 231.222123][T25789] __x64_sys_preadv+0x54/0x60 [ 231.226805][T25789] do_syscall_64+0x3d/0x90 [ 231.231232][T25789] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 231.237143][T25789] RIP: 0033:0x4665d9 [ 231.241036][T25789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 231.260648][T25789] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 231.269111][T25789] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 231.277100][T25789] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 [ 231.285849][T25789] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 231.293824][T25789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 231.301826][T25789] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 [ 231.316790][T25790] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 13:43:20 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x200000, 0x0) 13:43:22 executing program 3: r0 = syz_open_dev$rtc(0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000080)={0x1a, 0x23, 0x14, 0xf, 0x2, 0x7ff, 0x4, 0x1d}) syz_io_uring_setup(0x7494, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, &(0x7f00006b0000/0x2000)=nil, &(0x7f0000e67000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x14d6, &(0x7f00000013c0)={0x0, 0xe294}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f000097a000/0x2000)=nil, &(0x7f0000001440), 0x0) clone3(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 13:43:22 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090020ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:22 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x500}, 0x0) 13:43:22 executing program 1 (fault-call:2 fault-nth:27): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 13:43:22 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) 13:43:22 executing program 5: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x30, r2, 0x2, 0x0, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0x1aaa0}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x20}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048051}, 0x8810) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x54, r2, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040080}, 0x4000000) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MIN_BE={0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000000}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x240288c1) r4 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup3(r5, r4, 0x0) [ 233.560974][T25815] FAULT_INJECTION: forcing a failure. [ 233.560974][T25815] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 233.570120][T25820] loop2: detected capacity change from 0 to 264192 [ 233.574263][T25815] CPU: 0 PID: 25815 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 233.581486][T25820] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 233.589135][T25815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 13:43:23 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x2000000, 0x0) [ 233.589148][T25815] Call Trace: [ 233.589155][T25815] dump_stack_lvl+0xb7/0x103 [ 233.616079][T25815] dump_stack+0x11/0x1a [ 233.620296][T25815] should_fail+0x23c/0x250 [ 233.624812][T25815] __alloc_pages+0x102/0x320 [ 233.629407][T25815] alloc_pages_vma+0x391/0x660 [ 233.634175][T25815] ? follow_page_mask+0xceb/0x1040 [ 233.639290][T25815] do_anonymous_page+0x16e/0x8a0 [ 233.644226][T25815] ? strlcpy+0x65/0x80 [ 233.648291][T25815] handle_mm_fault+0x966/0x1a60 [ 233.653133][T25815] ? perf_trace_mmap_lock_acquire_returned+0x1e0/0x210 13:43:23 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) 13:43:23 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) [ 233.659988][T25815] do_user_addr_fault+0x609/0xc00 [ 233.665025][T25815] exc_page_fault+0x91/0x220 [ 233.669643][T25815] asm_exc_page_fault+0x1e/0x30 [ 233.674496][T25815] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 233.681078][T25815] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 83 f8 [ 233.700741][T25815] RSP: 0018:ffffc900016dbce0 EFLAGS: 00010206 13:43:23 executing program 5: r0 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000000201010200000000000000000c00080306001240000400003c001080080002400000f0320800015869cd541ede521ac8f4dfdfa7c4020800014000008000080003200000000000000040ffe000000800034000000001080000000002"], 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x10001) dup3(r1, r0, 0x0) 13:43:23 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x10000000, 0x0) [ 233.706808][T25815] RAX: ffff8881076c1a20 RBX: 0000000000001000 RCX: 0000000000000040 [ 233.714822][T25815] RDX: 0000000000001000 RSI: ffff888101ca1fc0 RDI: 000000002000d000 [ 233.722792][T25815] RBP: 0000000000001000 R08: 0000000000000000 R09: 0001ffffffffffff [ 233.730764][T25815] R10: 0001888101ca1fff R11: ffff8881076c1040 R12: 00007ffffffff000 [ 233.738741][T25815] R13: 000000002000d040 R14: ffff888101ca1000 R15: 000000002000c040 [ 233.746717][T25815] _copy_to_user+0x77/0x90 [ 233.751137][T25815] environ_read+0x248/0x340 [ 233.755658][T25815] do_iter_read+0x2be/0x4b0 13:43:23 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) [ 233.760226][T25815] do_preadv+0x13b/0x230 [ 233.764512][T25815] ? __cond_resched+0x11/0x40 [ 233.769269][T25815] ? fput+0x2d/0x130 [ 233.773162][T25815] ? ksys_write+0x157/0x180 [ 233.777666][T25815] __x64_sys_preadv+0x54/0x60 [ 233.782337][T25815] do_syscall_64+0x3d/0x90 [ 233.786764][T25815] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 233.792707][T25815] RIP: 0033:0x4665d9 13:43:23 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) preadv(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) [ 233.796597][T25815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 233.816209][T25815] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 233.824614][T25815] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 233.832586][T25815] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 [ 233.840560][T25815] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 233.848541][T25815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 233.856552][T25815] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 13:43:23 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800091020ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:23 executing program 5: sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0xa, 0xa, 0x401, 0x0, 0x0, {0xc, 0x0, 0x8}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x40}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r0 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$AUDIT_ADD_RULE(r1, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x424, 0x3f3, 0x4, 0x70bd2b, 0x25dfdbfc, {0x1, 0x1, 0xd, [0x1, 0xb3, 0x8000, 0x5980, 0x8, 0xfffffff8, 0x0, 0xfcfe, 0x1, 0x4, 0x1, 0x40, 0x5af0, 0x7ff, 0x3, 0x5ad983c9, 0x400, 0x3, 0x820, 0x0, 0xb013, 0x10001, 0x1, 0xfff, 0x7, 0x9, 0xa01, 0x400, 0x7, 0x1000, 0x1000, 0x0, 0x8, 0x0, 0x9, 0x4, 0xdee, 0xfffffffc, 0x48a, 0x3ff, 0x8000, 0x8, 0xf3d, 0xfffff002, 0x8, 0xffffffbc, 0x9, 0xdab2, 0x7, 0x7, 0x80, 0x800, 0x4, 0x1, 0xff, 0xff, 0x2, 0x6f147f41, 0x8, 0xe8, 0xffff, 0x81, 0x0, 0xffff], [0x7f, 0x5311b874, 0x8, 0x81, 0x5212, 0x8, 0x0, 0x5, 0x1, 0x1ff, 0x7, 0x1f, 0x6, 0x80000000, 0x5, 0x0, 0x7f, 0x6, 0x6d, 0x7fff, 0x80000000, 0x3ff, 0xffffff7f, 0x1f, 0x5, 0x0, 0x3, 0x9, 0x81, 0x880f, 0x0, 0x2d0faf5, 0x9, 0x4, 0xdad, 0x5, 0x0, 0x0, 0x0, 0x80000001, 0xfffffffa, 0x3, 0x1ff, 0x3, 0x10001, 0x9, 0x7ff, 0x5, 0x1, 0x800, 0x8001, 0x1, 0x99, 0x3f, 0x2, 0x6, 0x4, 0xfffc0000, 0x0, 0x5, 0x70a, 0x6, 0x2, 0x40], [0x0, 0xff, 0x81, 0x5, 0x6, 0x89e, 0x5, 0x0, 0x5, 0x3446, 0x5, 0x5, 0x0, 0x7, 0x2, 0x7f, 0x8, 0x4, 0x3, 0x401, 0x400, 0x3, 0x7, 0xfffffeff, 0x7b, 0x3, 0x1000, 0x1, 0x4, 0x7, 0x2775, 0x4, 0x1f, 0x3, 0xbf, 0x42, 0xe9, 0x4, 0x7, 0x6, 0x8000, 0x7, 0x9, 0x8, 0xdc3, 0x6, 0x80000001, 0x20, 0x2, 0x80000, 0x0, 0x1, 0x3f, 0x1f, 0x1, 0x1ff, 0xfffffffc, 0x3, 0x1c4c, 0x1, 0x1, 0x8, 0x5, 0x5], [0x4, 0x19d, 0x5f, 0x6, 0x7, 0xdae, 0x0, 0x585f44c4, 0x1, 0x6, 0x0, 0x1, 0x7, 0xffff, 0x800, 0x800, 0xc5, 0x2, 0xe0000, 0x800, 0x6, 0x9, 0x6, 0x8, 0x647, 0x6, 0x0, 0x7, 0x3, 0x8, 0x20, 0x9, 0x2, 0xb3, 0x2, 0x7, 0x3f, 0x9, 0x200, 0x0, 0x2, 0x4, 0x100, 0x8, 0x9, 0x10001, 0x5, 0x5, 0x1, 0x7f, 0x80000001, 0x0, 0x9, 0xfffffff9, 0x5, 0x8b2, 0x4, 0x8000, 0x3, 0x712, 0x52d, 0x9, 0x7, 0x3], 0x4, ['.}]\x00']}, ["", "", "", "", "", "", "", "", "", ""]}, 0x424}, 0x1, 0x0, 0x0, 0x8000}, 0x4081) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000740)="c80fd86946a7a45fe76d944d4fd4da68d41b3eb82534dcb824e5e002f667ae7b86e67d7d669709e4944627af02d1b76fea73a309fe359833303800b408a77a190361ec7957e1f053aff85fdbcf512515d225b046845ded6febbff4b561d1078203652a84bb4e6bfd7cc18df8c0e42ba1033251ab5d9792ded3261a3b9b980b564cc6cb395f051e691a2246d100a3d0afce5b3ddfce71f126b1f37faedac186898dace335166bda1d846760825b09a965179ecd602c18edc6303f819bb9ef7e6184f0a0a806cb807baedf1e394f1afbafeda5", 0xd2}, {&(0x7f0000000840)="dd9ce5e701659ffa1653eb61f8d84c9b04fef958a668e3671af00726649bd4445a2828a789e5fda285f8caed030e28bacfbdb5e61b5a044a92a0735792dcb4e4538db7bdd1e0168649af2fd5dc95f066a048a18e9000e414ec9e28f71427a616300b7bc87e66bd32fc74aa0e2dc4d8cda721ca6f76f68a791ab060b1b929e56964e5dc177d9c78da25854070710791117b568f95c382472199f7425d526660a03af79109c337312aea5d2176a3da4e10b27929479c26c6c33453da1f8c570038fb17fc560a986263d698", 0xca}, {&(0x7f00000001c0)}, {&(0x7f0000000200)="4808363a58dba3b532e512ca228443eacca0e2e6d6972fd55b33ac6b83d931d72beb3d1568be8634bb7a1c6eb2b6b2144134", 0x32}], 0x4, 0x7) dup3(r2, r0, 0x0) 13:43:23 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x40000000, 0x0) 13:43:23 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x600}, 0x0) 13:43:23 executing program 1 (fault-call:2 fault-nth:28): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 13:43:23 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) preadv(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) [ 233.922933][T25820] loop2: detected capacity change from 0 to 264192 [ 233.977505][T25870] FAULT_INJECTION: forcing a failure. [ 233.977505][T25870] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.990731][T25870] CPU: 1 PID: 25870 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 233.999966][T25870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 234.010021][T25870] Call Trace: [ 234.013300][T25870] dump_stack_lvl+0xb7/0x103 [ 234.017903][T25870] dump_stack+0x11/0x1a [ 234.022057][T25870] should_fail+0x23c/0x250 13:43:23 executing program 5: ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000300)={0x0, "10fd14e0847be3ed23fdc3df3ae83ee7"}) r0 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) dup3(r1, r0, 0x0) 13:43:23 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) preadv(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) 13:43:23 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) 13:43:23 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xefffffff, 0x0) [ 234.026471][T25870] should_fail_usercopy+0x16/0x20 [ 234.031497][T25870] _copy_to_user+0x1c/0x90 [ 234.035915][T25870] environ_read+0x248/0x340 [ 234.040449][T25870] do_iter_read+0x2be/0x4b0 [ 234.044960][T25870] do_preadv+0x13b/0x230 [ 234.049200][T25870] ? __cond_resched+0x11/0x40 [ 234.053951][T25870] ? fput+0x2d/0x130 [ 234.057852][T25870] ? ksys_write+0x157/0x180 [ 234.062357][T25870] __x64_sys_preadv+0x54/0x60 [ 234.067042][T25870] do_syscall_64+0x3d/0x90 [ 234.071464][T25870] entry_SYSCALL_64_after_hwframe+0x44/0xae 13:43:23 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) [ 234.077361][T25870] RIP: 0033:0x4665d9 [ 234.081241][T25870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 234.100855][T25870] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 234.109280][T25870] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 234.117354][T25870] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 13:43:23 executing program 5: r0 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x9, 0x801, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFCTH_STATUS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000081}, 0x40440d0) r2 = dup3(r1, r0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x7, 0x4, 0x3e, 0x0, 0x0, 0x2, 0x40100, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x5, @perf_bp={&(0x7f0000000100), 0x2}, 0x0, 0x0, 0x40, 0x4, 0xb269, 0x3e, 0x3, 0x0, 0x6aab, 0x0, 0x8}, r3, 0x3, r4, 0xb) [ 234.125325][T25870] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 234.133318][T25870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 234.141287][T25870] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 13:43:23 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090022ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:23 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xffffffef, 0x0) 13:43:23 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) 13:43:23 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x604}, 0x0) 13:43:23 executing program 1 (fault-call:2 fault-nth:29): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 13:43:23 executing program 5: r0 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = fsmount(0xffffffffffffffff, 0x1, 0x70) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x50, r2, 0xd109b000) dup3(r1, r0, 0x0) [ 234.176745][T25873] loop2: detected capacity change from 0 to 264192 [ 234.193246][T25873] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 234.259464][T25913] FAULT_INJECTION: forcing a failure. [ 234.259464][T25913] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 234.267700][T25915] loop2: detected capacity change from 0 to 264192 [ 234.272718][T25913] CPU: 1 PID: 25913 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 234.281086][T25915] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 234.287557][T25913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 234.287569][T25913] Call Trace: 13:43:23 executing program 3: prctl$PR_SET_MM(0x23, 0x0, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) 13:43:23 executing program 5: r0 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) dup3(r1, r0, 0x0) [ 234.287576][T25913] dump_stack_lvl+0xb7/0x103 [ 234.314466][T25913] dump_stack+0x11/0x1a [ 234.318629][T25913] should_fail+0x23c/0x250 [ 234.323061][T25913] __alloc_pages+0x102/0x320 [ 234.327650][T25913] alloc_pages_vma+0x391/0x660 [ 234.332414][T25913] ? follow_page_mask+0xceb/0x1040 [ 234.337533][T25913] do_anonymous_page+0x16e/0x8a0 [ 234.342514][T25913] ? strlcpy+0x65/0x80 [ 234.346676][T25913] handle_mm_fault+0x966/0x1a60 [ 234.351620][T25913] ? perf_trace_mmap_lock_acquire_returned+0x1e0/0x210 13:43:23 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xffffffff, 0x0) 13:43:23 executing program 3: prctl$PR_SET_MM(0x23, 0x0, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) [ 234.358473][T25913] do_user_addr_fault+0x609/0xc00 [ 234.363567][T25913] exc_page_fault+0x91/0x220 [ 234.368163][T25913] asm_exc_page_fault+0x1e/0x30 [ 234.373013][T25913] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 234.379613][T25913] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 83 f8 [ 234.399216][T25913] RSP: 0018:ffffc90001dcfce0 EFLAGS: 00010206 [ 234.405280][T25913] RAX: ffff888133ca79e0 RBX: 0000000000001000 RCX: 0000000000000040 [ 234.413297][T25913] RDX: 0000000000001000 RSI: ffff888133c77fc0 RDI: 000000002000e000 [ 234.421361][T25913] RBP: 0000000000001000 R08: 0000000000000000 R09: 0001ffffffffffff [ 234.429332][T25913] R10: 0001888133c77fff R11: ffff888133ca7000 R12: 00007ffffffff000 [ 234.437301][T25913] R13: 000000002000e040 R14: ffff888133c77000 R15: 000000002000d040 [ 234.445283][T25913] _copy_to_user+0x77/0x90 [ 234.449702][T25913] environ_read+0x248/0x340 [ 234.454210][T25913] do_iter_read+0x2be/0x4b0 13:43:23 executing program 3: prctl$PR_SET_MM(0x23, 0x0, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) 13:43:23 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) [ 234.458792][T25913] do_preadv+0x13b/0x230 [ 234.463043][T25913] ? __cond_resched+0x11/0x40 [ 234.467720][T25913] ? fput+0x2d/0x130 [ 234.471614][T25913] ? ksys_write+0x157/0x180 [ 234.476119][T25913] __x64_sys_preadv+0x54/0x60 [ 234.480909][T25913] do_syscall_64+0x3d/0x90 [ 234.485326][T25913] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 234.491388][T25913] RIP: 0033:0x4665d9 [ 234.495279][T25913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 234.514996][T25913] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 234.523407][T25913] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 234.531377][T25913] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 [ 234.539339][T25913] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 234.547310][T25913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 234.555288][T25913] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 13:43:24 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090025ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:24 executing program 5: r0 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup3(r1, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_inet_SIOCDELRT(r3, 0x890c, &(0x7f0000000140)={0x0, {0x2, 0x4e21, @private=0xa010100}, {0x2, 0x4e22, @local}, {0x2, 0x4e20, @remote}, 0x204, 0x0, 0x0, 0x0, 0x81, &(0x7f0000000100)='bond_slave_0\x00', 0x200, 0x101, 0x1}) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x2, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x44090) 13:43:24 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) 13:43:24 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x700}, 0x0) 13:43:24 executing program 1 (fault-call:2 fault-nth:30): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 13:43:24 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) [ 234.673083][T25956] loop2: detected capacity change from 0 to 264192 [ 234.705899][T25956] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 234.724956][T25968] FAULT_INJECTION: forcing a failure. [ 234.724956][T25968] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 234.738042][T25968] CPU: 0 PID: 25968 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 234.746459][T25968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 234.756513][T25968] Call Trace: [ 234.759787][T25968] dump_stack_lvl+0xb7/0x103 [ 234.764388][T25968] dump_stack+0x11/0x1a [ 234.768617][T25968] should_fail+0x23c/0x250 13:43:24 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x2) 13:43:24 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x900}, 0x0) 13:43:24 executing program 5: r0 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) dup3(r1, r0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 13:43:24 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) [ 234.773040][T25968] should_fail_usercopy+0x16/0x20 [ 234.778068][T25968] _copy_to_user+0x1c/0x90 [ 234.782523][T25968] environ_read+0x248/0x340 [ 234.787037][T25968] do_iter_read+0x2be/0x4b0 [ 234.791547][T25968] do_preadv+0x13b/0x230 [ 234.795787][T25968] ? __cond_resched+0x11/0x40 [ 234.800465][T25968] ? fput+0x2d/0x130 [ 234.804361][T25968] ? ksys_write+0x157/0x180 [ 234.808856][T25968] __x64_sys_preadv+0x54/0x60 [ 234.813532][T25968] do_syscall_64+0x3d/0x90 [ 234.817996][T25968] entry_SYSCALL_64_after_hwframe+0x44/0xae 13:43:24 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) [ 234.823954][T25968] RIP: 0033:0x4665d9 [ 234.827898][T25968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 234.847511][T25968] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 234.855915][T25968] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 234.863888][T25968] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 13:43:24 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) [ 234.871865][T25968] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 234.879836][T25968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 234.887803][T25968] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 13:43:24 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="04080009003fff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:24 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xec0}, 0x0) 13:43:24 executing program 5: r0 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x58, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) dup3(r1, r0, 0x0) 13:43:24 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) 13:43:24 executing program 1 (fault-call:2 fault-nth:31): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 13:43:24 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, 0x0, 0x0, 0x1000000, 0x0) [ 235.007369][T26007] loop2: detected capacity change from 0 to 264192 [ 235.016125][T26011] FAULT_INJECTION: forcing a failure. [ 235.016125][T26011] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 235.029371][T26011] CPU: 0 PID: 26011 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 235.037866][T26011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 235.047921][T26011] Call Trace: [ 235.051199][T26011] dump_stack_lvl+0xb7/0x103 [ 235.055801][T26011] dump_stack+0x11/0x1a [ 235.058701][T26007] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 235.059964][T26011] should_fail+0x23c/0x250 [ 235.060004][T26011] __alloc_pages+0x102/0x320 [ 235.060020][T26011] alloc_pages_vma+0x391/0x660 [ 235.082734][T26011] ? follow_page_mask+0xceb/0x1040 [ 235.088026][T26011] do_anonymous_page+0x16e/0x8a0 [ 235.092970][T26011] ? strlcpy+0x65/0x80 [ 235.097129][T26011] handle_mm_fault+0x966/0x1a60 [ 235.101989][T26011] ? perf_trace_mmap_lock_acquire_returned+0x1e0/0x210 [ 235.108835][T26011] do_user_addr_fault+0x609/0xc00 [ 235.113861][T26011] exc_page_fault+0x91/0x220 [ 235.118451][T26011] asm_exc_page_fault+0x1e/0x30 [ 235.123314][T26011] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 235.129909][T26011] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 83 f8 [ 235.149692][T26011] RSP: 0018:ffffc90001da7ce0 EFLAGS: 00010206 13:43:24 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x10) 13:43:24 executing program 5: r0 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) dup3(r1, r0, 0x0) r2 = getpgid(0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x20, 0x8, 0x2, 0x2, 0x0, 0x9, 0x1018, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0xffff, 0x5}, 0x3b28b02bf878007e, 0x7, 0x7fff, 0x2, 0xfffffffffffff069, 0x99, 0xfff7, 0x0, 0x8001, 0x0, 0x3}, r2, 0xffffffffffffffff, r3, 0x0) 13:43:24 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x2800}, 0x0) 13:43:24 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, 0x0, 0x0, 0x1000000, 0x0) [ 235.155750][T26011] RAX: ffff88812feda9e0 RBX: 0000000000001000 RCX: 0000000000000040 [ 235.163708][T26011] RDX: 0000000000001000 RSI: ffff8881078f4fc0 RDI: 000000002000f000 [ 235.171686][T26011] RBP: 0000000000001000 R08: 0000000000000000 R09: 0001ffffffffffff [ 235.179655][T26011] R10: 00018881078f4fff R11: ffff88812feda000 R12: 00007ffffffff000 [ 235.187628][T26011] R13: 000000002000f040 R14: ffff8881078f4000 R15: 000000002000e040 [ 235.195599][T26011] _copy_to_user+0x77/0x90 [ 235.200016][T26011] environ_read+0x248/0x340 13:43:24 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, 0x0, 0x0, 0x1000000, 0x0) [ 235.204548][T26011] do_iter_read+0x2be/0x4b0 [ 235.209048][T26011] do_preadv+0x13b/0x230 [ 235.213283][T26011] ? __cond_resched+0x11/0x40 [ 235.218004][T26011] ? fput+0x2d/0x130 [ 235.221928][T26011] ? ksys_write+0x157/0x180 [ 235.226421][T26011] __x64_sys_preadv+0x54/0x60 [ 235.231145][T26011] do_syscall_64+0x3d/0x90 [ 235.235565][T26011] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 235.241476][T26011] RIP: 0033:0x4665d9 13:43:24 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400), 0x0, 0x1000000, 0x0) [ 235.245441][T26011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 235.265045][T26011] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 235.273574][T26011] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 235.281545][T26011] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 [ 235.289519][T26011] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 235.297488][T26011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 235.305469][T26011] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 13:43:24 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090040ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:24 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400), 0x0, 0x1000000, 0x0) 13:43:24 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x2c00}, 0x0) 13:43:24 executing program 5: r0 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_bp={0x0, 0x8}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x40, 0x1, 0x4, 0x5, 0x0, 0xfff, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7ff, 0x2, @perf_config_ext={0x6, 0x7}, 0x880, 0xa51d827, 0x7fff, 0x6, 0x8, 0x800, 0x8, 0x0, 0x9, 0x0, 0x1f}, r1, 0x8, r0, 0xa) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) dup3(r2, r0, 0x0) 13:43:24 executing program 1 (fault-call:2 fault-nth:32): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 13:43:24 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400), 0x0, 0x1000000, 0x0) [ 235.419723][T26050] loop2: detected capacity change from 0 to 264192 [ 235.445790][T26050] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 235.471544][T26057] FAULT_INJECTION: forcing a failure. [ 235.471544][T26057] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.484622][T26057] CPU: 0 PID: 26057 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 235.493035][T26057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 235.503086][T26057] Call Trace: [ 235.506368][T26057] dump_stack_lvl+0xb7/0x103 [ 235.510960][T26057] dump_stack+0x11/0x1a [ 235.515116][T26057] should_fail+0x23c/0x250 13:43:24 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0xef) 13:43:24 executing program 5: r0 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000000)={0x7, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000040)={0x1, 0x0, [0x0]}) dup3(r1, r0, 0x0) 13:43:24 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090048ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:24 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{0x0}], 0x1, 0x1000000, 0x0) [ 235.519551][T26057] should_fail_usercopy+0x16/0x20 [ 235.524579][T26057] _copy_to_user+0x1c/0x90 [ 235.529075][T26057] environ_read+0x248/0x340 [ 235.533578][T26057] do_iter_read+0x2be/0x4b0 [ 235.538085][T26057] do_preadv+0x13b/0x230 [ 235.542322][T26057] ? __cond_resched+0x11/0x40 [ 235.547009][T26057] ? fput+0x2d/0x130 [ 235.550897][T26057] ? ksys_write+0x157/0x180 [ 235.555384][T26057] __x64_sys_preadv+0x54/0x60 [ 235.560063][T26057] do_syscall_64+0x3d/0x90 [ 235.564466][T26057] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 235.570347][T26057] RIP: 0033:0x4665d9 [ 235.574242][T26057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 235.594062][T26057] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 235.602457][T26057] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 235.610416][T26057] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 13:43:25 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc00e}, 0x0) 13:43:25 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{0x0}], 0x1, 0x1000000, 0x0) [ 235.618395][T26057] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 235.626401][T26057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 235.634368][T26057] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 13:43:25 executing program 5: r0 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) dup3(r2, r0, 0x0) 13:43:25 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x34000}, 0x0) 13:43:25 executing program 5: r0 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x3, 0x0, 0x0, {0xc, 0x0, 0x4}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x894) dup3(r1, r0, 0x0) 13:43:25 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{0x0}], 0x1, 0x1000000, 0x0) 13:43:25 executing program 1 (fault-call:2 fault-nth:33): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 235.763956][T26083] loop2: detected capacity change from 0 to 264192 [ 235.804136][T26095] FAULT_INJECTION: forcing a failure. [ 235.804136][T26095] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 235.817507][T26095] CPU: 1 PID: 26095 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 235.823067][T26083] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 235.825929][T26095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 235.825940][T26095] Call Trace: [ 235.825948][T26095] dump_stack_lvl+0xb7/0x103 [ 235.852965][T26095] dump_stack+0x11/0x1a [ 235.857254][T26095] should_fail+0x23c/0x250 [ 235.861681][T26095] __alloc_pages+0x102/0x320 [ 235.866263][T26095] alloc_pages_vma+0x391/0x660 [ 235.871027][T26095] ? follow_page_mask+0xceb/0x1040 [ 235.876258][T26095] do_anonymous_page+0x16e/0x8a0 [ 235.881241][T26095] ? strlcpy+0x65/0x80 [ 235.885319][T26095] handle_mm_fault+0x966/0x1a60 [ 235.890206][T26095] ? perf_trace_mmap_lock_acquire_returned+0x1e0/0x210 [ 235.897095][T26095] do_user_addr_fault+0x609/0xc00 13:43:25 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) 13:43:25 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x2000) 13:43:25 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x400300}, 0x0) [ 235.902125][T26095] exc_page_fault+0x91/0x220 [ 235.906729][T26095] asm_exc_page_fault+0x1e/0x30 [ 235.911649][T26095] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 235.918255][T26095] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 83 f8 [ 235.937852][T26095] RSP: 0018:ffffc9000e2fbce0 EFLAGS: 00010206 [ 235.943947][T26095] RAX: ffff888133cb3aa0 RBX: 0000000000001000 RCX: 0000000000000040 [ 235.951993][T26095] RDX: 0000000000001000 RSI: ffff8881074c0fc0 RDI: 0000000020010000 [ 235.960065][T26095] RBP: 0000000000001000 R08: 0000000000000000 R09: 0001ffffffffffff [ 235.968037][T26095] R10: 00018881074c0fff R11: ffff888133cb30c0 R12: 00007ffffffff000 [ 235.976009][T26095] R13: 0000000020010040 R14: ffff8881074c0000 R15: 000000002000f040 [ 235.983980][T26095] _copy_to_user+0x77/0x90 [ 235.988390][T26095] environ_read+0x248/0x340 [ 235.992922][T26095] do_iter_read+0x2be/0x4b0 [ 235.997410][T26095] do_preadv+0x13b/0x230 [ 236.001640][T26095] ? __cond_resched+0x11/0x40 [ 236.006303][T26095] ? fput+0x2d/0x130 [ 236.010190][T26095] ? ksys_write+0x157/0x180 [ 236.014683][T26095] __x64_sys_preadv+0x54/0x60 [ 236.019348][T26095] do_syscall_64+0x3d/0x90 [ 236.023862][T26095] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 236.029753][T26095] RIP: 0033:0x4665d9 [ 236.033642][T26095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 13:43:25 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="04080009004cff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:25 executing program 5: r0 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x810, r1, 0x82d8d000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) dup3(r2, r0, 0x0) 13:43:25 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) [ 236.053244][T26095] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 236.061667][T26095] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 236.069640][T26095] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 [ 236.077684][T26095] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 236.085657][T26095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 236.093627][T26095] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 13:43:25 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) 13:43:25 executing program 1 (fault-call:2 fault-nth:34): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 13:43:25 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) [ 236.190821][T26123] loop2: detected capacity change from 0 to 264192 [ 236.214818][T26129] FAULT_INJECTION: forcing a failure. [ 236.214818][T26129] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 236.220113][T26123] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 13:43:25 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x34, 0x1, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xb0, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_TUPLE_ORIG={0x4c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x10a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_REPLY={0x14, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0xfffffffe]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9b8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2d6}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xffffff80}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x10}, 0x4000014) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x5, 0x1, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40814) [ 236.228040][T26129] CPU: 1 PID: 26129 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 236.245416][T26129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 236.255467][T26129] Call Trace: [ 236.258745][T26129] dump_stack_lvl+0xb7/0x103 [ 236.263354][T26129] dump_stack+0x11/0x1a [ 236.267515][T26129] should_fail+0x23c/0x250 [ 236.272017][T26129] should_fail_usercopy+0x16/0x20 [ 236.277047][T26129] _copy_to_user+0x1c/0x90 [ 236.281463][T26129] environ_read+0x248/0x340 [ 236.286133][T26129] do_iter_read+0x2be/0x4b0 [ 236.290687][T26129] do_preadv+0x13b/0x230 [ 236.294931][T26129] ? __cond_resched+0x11/0x40 [ 236.299610][T26129] ? fput+0x2d/0x130 [ 236.303504][T26129] ? ksys_write+0x157/0x180 [ 236.308003][T26129] __x64_sys_preadv+0x54/0x60 [ 236.312676][T26129] do_syscall_64+0x3d/0x90 [ 236.317170][T26129] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 236.323194][T26129] RIP: 0033:0x4665d9 13:43:25 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) [ 236.327088][T26129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 236.346743][T26129] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 236.355432][T26129] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 236.363518][T26129] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 [ 236.371598][T26129] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 236.379570][T26129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 13:43:25 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x4000) 13:43:25 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x3000000}, 0x0) [ 236.387625][T26129] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 13:43:25 executing program 5: r0 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) dup3(r1, r0, 0x0) 13:43:25 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090056ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:25 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 13:43:25 executing program 5: perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x1, 0x4, 0x801, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x9}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xfffff801}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x3c}}, 0x8040) 13:43:25 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090060ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) [ 236.491039][T26157] loop2: detected capacity change from 0 to 264192 [ 236.506027][T26157] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 13:43:25 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x2002, 0x194) r1 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x16020, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffffffffffffd, r0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x7, 0x4, 0x6, 0x1f, 0x0, 0x7, 0x40000, 0x4, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x1, @perf_config_ext={0xde, 0x7fff}, 0x110, 0x4, 0xcffb, 0x9, 0x4, 0x3, 0x1000, 0x0, 0x9, 0x0, 0x7}, 0xffffffffffffffff, 0xa, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) close(r1) r3 = openat$incfs(r2, &(0x7f00000000c0)='.log\x00', 0x101000, 0x20) fchmodat(r3, &(0x7f0000000100)='./file0\x00', 0x15) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(r2, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) 13:43:26 executing program 1 (fault-call:2 fault-nth:35): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 13:43:26 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4060000}, 0x0) 13:43:26 executing program 5: r0 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r0, 0x5, 0x0, 0x9}) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x2, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_EXPECT_HELP_NAME={0xf, 0x6, 'tftp-20000\x00'}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'pptp\x00'}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x1}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x3ff}, @CTA_EXPECT_MASK={0x34, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x10000}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x4c}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20048805}, 0x329694bc3fa3d46f) dup3(r1, r0, 0x0) 13:43:26 executing program 3 (fault-call:2 fault-nth:0): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) [ 236.606748][T26168] loop2: detected capacity change from 0 to 264192 [ 236.639286][T26168] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 236.698010][T26182] FAULT_INJECTION: forcing a failure. [ 236.698010][T26182] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 236.712164][T26186] FAULT_INJECTION: forcing a failure. [ 236.712164][T26186] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 236.714460][T26182] CPU: 0 PID: 26182 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 236.736313][T26182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 236.746357][T26182] Call Trace: [ 236.749626][T26182] dump_stack_lvl+0xb7/0x103 [ 236.754243][T26182] dump_stack+0x11/0x1a [ 236.758423][T26182] should_fail+0x23c/0x250 [ 236.763015][T26182] __alloc_pages+0x102/0x320 [ 236.767723][T26182] alloc_pages_vma+0x391/0x660 [ 236.772630][T26182] ? follow_page_mask+0xceb/0x1040 [ 236.777732][T26182] do_anonymous_page+0x16e/0x8a0 [ 236.782763][T26182] ? strlcpy+0x65/0x80 [ 236.786891][T26182] handle_mm_fault+0x966/0x1a60 [ 236.791882][T26182] ? perf_trace_mmap_lock_acquire_returned+0x1e0/0x210 [ 236.798766][T26182] do_user_addr_fault+0x609/0xc00 [ 236.803773][T26182] exc_page_fault+0x91/0x220 [ 236.808364][T26182] asm_exc_page_fault+0x1e/0x30 [ 236.813216][T26182] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 236.819789][T26182] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 83 f8 [ 236.839485][T26182] RSP: 0018:ffffc9000e4b7ce0 EFLAGS: 00010206 [ 236.845528][T26182] RAX: ffff88812fff4aa0 RBX: 0000000000001000 RCX: 0000000000000040 [ 236.853573][T26182] RDX: 0000000000001000 RSI: ffff88812fdbbfc0 RDI: 0000000020011000 [ 236.861543][T26182] RBP: 0000000000001000 R08: 0000000000000000 R09: 0001ffffffffffff [ 236.869594][T26182] R10: 000188812fdbbfff R11: ffff88812fff40c0 R12: 00007ffffffff000 [ 236.877986][T26182] R13: 0000000020011040 R14: ffff88812fdbb000 R15: 0000000020010040 [ 236.885946][T26182] _copy_to_user+0x77/0x90 [ 236.890377][T26182] environ_read+0x248/0x340 [ 236.894900][T26182] do_iter_read+0x2be/0x4b0 [ 236.899383][T26182] do_preadv+0x13b/0x230 [ 236.903744][T26182] ? __cond_resched+0x11/0x40 [ 236.908419][T26182] ? fput+0x2d/0x130 [ 236.912347][T26182] ? ksys_write+0x157/0x180 [ 236.916827][T26182] __x64_sys_preadv+0x54/0x60 [ 236.921667][T26182] do_syscall_64+0x3d/0x90 [ 236.926097][T26182] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 236.932045][T26182] RIP: 0033:0x4665d9 [ 236.935915][T26182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 236.955770][T26182] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 236.964170][T26182] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 236.972239][T26182] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 [ 236.980192][T26182] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 236.988255][T26182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 236.996204][T26182] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 [ 237.004168][T26186] CPU: 1 PID: 26186 Comm: syz-executor.3 Not tainted 5.13.0-syzkaller #0 [ 237.012693][T26186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 237.022748][T26186] Call Trace: [ 237.026021][T26186] dump_stack_lvl+0xb7/0x103 [ 237.030776][T26186] dump_stack+0x11/0x1a [ 237.034928][T26186] should_fail+0x23c/0x250 [ 237.039423][T26186] should_fail_usercopy+0x16/0x20 [ 237.044452][T26186] _copy_from_user+0x1c/0xd0 13:43:26 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0xefff) 13:43:26 executing program 5: r0 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000000)="05428af0479fdf3a9be9cacbdd4a9c094208879bb15813fac7181734ec8c147d8f35b1b67288690a6d39e55243bcfb5121934a748847e9c8ffa614d1105c3bee7d1987a318e63ee9032c88ae6d7344e5b2809b20274b70b2c62e18a9cd5242d8713c28801c0fd992fabed3097c85d237054b9366069bf5384c689b53d031c989afd1cc297df18a47c3bb44ad438813c03425f3c03590feeca383681de8b6826598c20c661d11373a6b", 0xa9) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x1c8, 0x0, 0x1, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_LABELS_MASK={0x18, 0x17, [0x7fffffff, 0xffff834e, 0x101, 0x7, 0x0]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_NAT_SRC={0x64, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @CTA_NAT_V6_MINIP={0x14, 0x4, @empty}, @CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x36}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x40}}]}, @CTA_NAT_SRC={0x98, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}, @CTA_NAT_V6_MINIP={0x14, 0x4, @empty}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast2}]}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xea4}]}, @CTA_NAT_DST={0x74, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0xf}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @remote}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}, @CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x8000}, 0x1) dup3(r1, r0, 0x0) 13:43:26 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090068ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:26 executing program 1 (fault-call:2 fault-nth:36): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 237.049128][T26186] iovec_from_user+0xc4/0x2d0 [ 237.053807][T26186] __import_iovec+0x49/0x270 [ 237.058387][T26186] ? fsnotify_perm+0x59/0x2e0 [ 237.063061][T26186] ? __fsnotify_parent+0x32f/0x430 [ 237.068158][T26186] import_iovec+0x69/0x80 [ 237.072502][T26186] do_preadv+0x109/0x230 [ 237.076809][T26186] ? __fget_light+0x21b/0x260 [ 237.081546][T26186] ? __cond_resched+0x11/0x40 [ 237.086220][T26186] ? fput+0x2d/0x130 [ 237.090111][T26186] ? ksys_write+0x157/0x180 [ 237.094616][T26186] __x64_sys_preadv+0x54/0x60 [ 237.099291][T26186] do_syscall_64+0x3d/0x90 [ 237.103710][T26186] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 237.109769][T26186] RIP: 0033:0x4665d9 [ 237.113767][T26186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 237.123170][T26195] FAULT_INJECTION: forcing a failure. [ 237.123170][T26195] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.133824][T26186] RSP: 002b:00007fa800ded188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 237.133846][T26186] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 237.166057][T26186] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 [ 237.174044][T26186] RBP: 00007fa800ded1d0 R08: 0000000000000000 R09: 0000000000000000 [ 237.181997][T26186] R10: 0000000001000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.190144][T26186] R13: 00007ffd7de0ee4f R14: 00007fa800ded300 R15: 0000000000022000 [ 237.198139][T26195] CPU: 0 PID: 26195 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 237.206558][T26195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 237.216623][T26195] Call Trace: [ 237.219951][T26195] dump_stack_lvl+0xb7/0x103 [ 237.224636][T26195] dump_stack+0x11/0x1a [ 237.228827][T26195] should_fail+0x23c/0x250 [ 237.233390][T26195] should_fail_usercopy+0x16/0x20 [ 237.238414][T26195] _copy_to_user+0x1c/0x90 [ 237.242827][T26195] environ_read+0x248/0x340 [ 237.247328][T26195] do_iter_read+0x2be/0x4b0 [ 237.251881][T26195] do_preadv+0x13b/0x230 [ 237.256114][T26195] ? __cond_resched+0x11/0x40 [ 237.260831][T26195] ? fput+0x2d/0x130 [ 237.264711][T26195] ? ksys_write+0x157/0x180 [ 237.269203][T26195] __x64_sys_preadv+0x54/0x60 [ 237.273891][T26195] do_syscall_64+0x3d/0x90 [ 237.278452][T26195] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 237.284354][T26195] RIP: 0033:0x4665d9 13:43:26 executing program 3 (fault-call:2 fault-nth:1): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) 13:43:26 executing program 5: r0 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="66530700ae897094e71b0fa1f147a8378f3657cdcf86db93aa6ed9cbc6a9e00b9e626aa995d690c8a2372286677850ab8e9b75839f0715a567dafe306f0818fd861ff11495d58553d8c11c606e13da9b8d26a566833fe1f9c73899301d879b51848164e7b98888", 0x67}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x5) tkill(r2, 0x1e) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000010004000000000002000100", @ANYRES32, @ANYBLOB="040004000000000008000400", @ANYRES32, @ANYBLOB="08000500", @ANYRES32, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0xee00, @ANYBLOB="01000000", @ANYRES32, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="08000500", @ANYRES32=0xee00, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=0xee01, @ANYBLOB="08000400", @ANYRES32=0xee01, @ANYBLOB="08000500", @ANYRES32, @ANYBLOB="1000020000000000"], 0x7c, 0x0) ptrace$cont(0x18, r2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) exit_group(0x0) dup3(r1, r0, 0x0) [ 237.288524][T26195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 237.308222][T26195] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 237.316634][T26195] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 237.324712][T26195] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 [ 237.332738][T26195] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 237.340702][T26195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 13:43:26 executing program 5: r0 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x9fb4ce3, 0x0, 0x0, 0x4}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup3(r1, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000000140)=""/39, 0x27}, {&(0x7f0000000440)=""/200, 0xc8}, {&(0x7f0000000300)=""/49, 0x31}], 0x3, 0x1, 0x1001) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x38, 0x0, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x5}, @CTA_PROTOINFO={0x14, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x10, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x7}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8045}, 0x800) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000000)=0x5) r4 = inotify_init1(0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000009, 0x12, r4, 0xca796000) [ 237.348670][T26195] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 13:43:26 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0xffef) [ 237.404073][T26213] loop2: detected capacity change from 0 to 264192 [ 237.404410][T26215] FAULT_INJECTION: forcing a failure. [ 237.404410][T26215] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 237.423984][T26215] CPU: 0 PID: 26215 Comm: syz-executor.3 Not tainted 5.13.0-syzkaller #0 [ 237.425231][T26213] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 237.432660][T26215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 13:43:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x20, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x4c}}}}}, 0x30}}, 0x0) r2 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r4) dup3(r3, r2, 0x0) [ 237.432675][T26215] Call Trace: [ 237.432686][T26215] dump_stack_lvl+0xb7/0x103 [ 237.432774][T26215] dump_stack+0x11/0x1a [ 237.432791][T26215] should_fail+0x23c/0x250 [ 237.468663][T26215] __alloc_pages+0x102/0x320 [ 237.473261][T26215] alloc_pages+0x21d/0x310 [ 237.477709][T26215] __get_free_pages+0x8/0x30 [ 237.482329][T26215] environ_read+0x7d/0x340 [ 237.486748][T26215] ? security_file_permission+0x87/0xa0 [ 237.492347][T26215] ? rw_verify_area+0x136/0x250 [ 237.497194][T26215] do_iter_read+0x2be/0x4b0 13:43:26 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x5000000}, 0x0) 13:43:26 executing program 5: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 237.501809][T26215] do_preadv+0x13b/0x230 [ 237.506050][T26215] ? __cond_resched+0x11/0x40 [ 237.510745][T26215] ? fput+0x2d/0x130 [ 237.514700][T26215] ? ksys_write+0x157/0x180 [ 237.519231][T26215] __x64_sys_preadv+0x54/0x60 [ 237.523908][T26215] do_syscall_64+0x3d/0x90 [ 237.528321][T26215] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 237.534214][T26215] RIP: 0033:0x4665d9 13:43:27 executing program 1 (fault-call:2 fault-nth:37): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 237.538099][T26215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 237.557761][T26215] RSP: 002b:00007fa800ded188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 237.566185][T26215] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 237.574357][T26215] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 [ 237.582333][T26215] RBP: 00007fa800ded1d0 R08: 0000000000000000 R09: 0000000000000000 [ 237.590295][T26215] R10: 0000000001000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.598261][T26215] R13: 00007ffd7de0ee4f R14: 00007fa800ded300 R15: 0000000000022000 [ 237.638786][T26236] FAULT_INJECTION: forcing a failure. [ 237.638786][T26236] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 237.652728][T26236] CPU: 1 PID: 26236 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 237.661785][T26236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 237.672260][T26236] Call Trace: [ 237.675542][T26236] dump_stack_lvl+0xb7/0x103 [ 237.680560][T26236] dump_stack+0x11/0x1a [ 237.684901][T26236] should_fail+0x23c/0x250 [ 237.689332][T26236] __alloc_pages+0x102/0x320 [ 237.693935][T26236] alloc_pages_vma+0x391/0x660 [ 237.698717][T26236] ? follow_page_mask+0xceb/0x1040 [ 237.703890][T26236] do_anonymous_page+0x16e/0x8a0 [ 237.709132][T26236] ? strlcpy+0x65/0x80 [ 237.713201][T26236] handle_mm_fault+0x966/0x1a60 [ 237.718045][T26236] ? perf_trace_mmap_lock_acquire_returned+0x1e0/0x210 [ 237.724953][T26236] do_user_addr_fault+0x609/0xc00 [ 237.729975][T26236] exc_page_fault+0x91/0x220 [ 237.734556][T26236] asm_exc_page_fault+0x1e/0x30 13:43:27 executing program 3 (fault-call:2 fault-nth:2): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) 13:43:27 executing program 5: ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) r0 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup3(r1, r0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="0102000000c8330413361418746900000000000c0000"], 0x1c}}, 0x814) sendmsg$nl_netfilter(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000300)={0x298, 0x6, 0x7, 0x101, 0x70bd29, 0x25dfdbfe, {0x3, 0x0, 0xa}, [@typed={0xad, 0x7b, 0x0, 0x0, @binary="38f30fed3bab2dd8b5e60dc1d44ca3172a3f6b4379cf943121c532cd55c834523d160a62fcb78048c25231b6b4ce27986a3337598ba3c3ffe5c9a58b4e5e51b6603840030772e57b1587548b6911361469bafeb49df073ec895fe593027a5afc4a80bd97de4f8cc2400b4cd16daca8081caa303c6aec95541fde6f767b9f18b3df26ab4a599cfe85d8a33b583e53e3553547c56a703f62fcafe11edd7a41e867be60a08bd19ec4fe5b"}, @generic="9dff5beaea8e0547926f94c69342a244764e0d7704d63796feaf122c3e4e7c8df8595d30e8837157cf50bd68e13be462f762fc6240fc4e272e44c5046a4411a6a7e7427d5b832b3f4b0818640e5c097e03c87a8c2a14827bd1407fbc205e45978fefd928", @typed={0xc, 0x21, 0x0, 0x0, @u64=0x81}, @nested={0x163, 0x40, 0x0, 0x1, [@generic="ed555f4ca631b53c8f931ad5726083adedc9298f636d21ecf5d70c2425a1358025b4b21047d240d2ee06808fd1ec4e0a0b7f2b1e91ce952c556b980d8aebaa3e3d093fea889dd3", @typed={0x14, 0x39, 0x0, 0x0, @ipv6=@mcast1}, @generic="538c4e648db4263e3a555dc4b2191e51824c64a754ae752b199f0f12348d6187d78adf9104b5ad961f1a7b51c7bf08195c9e32426880c909adf2064cb2320987c35d04b3e5ce9b129655192e58ba6fa1470adeff45dae83d6ab98e77c221db1753a27cbb7ba8bca7d73d61664f1a6cecea4e252fdb1826f09a072b5e84f5b84d46d56b2aa7c4020906964b1fc2aa8c2e543676f1acf60ffa493b2c58c4ac5935c9f6d808d9cb0b4b7ac4bb6ccc99782d741d8cb68b6fb520649774104170161dba7726cfdfad6125519b6f1f12b32aba665b6c6b2d51cfd9299013f0", @generic="8726e0b0dacd32e8168d754ff8fab2c2ef5b5e23c16141dc28c0489f05f76bd1", @typed={0x8, 0x24, 0x0, 0x0, @pid=0xffffffffffffffff}]}]}, 0x298}, 0x1, 0x0, 0x0, 0x40050}, 0x1) 13:43:27 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="04080009006cff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:27 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x100000) [ 237.739400][T26236] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 237.746056][T26236] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 83 f8 [ 237.765654][T26236] RSP: 0018:ffffc9000e6a7ce0 EFLAGS: 00010206 [ 237.771744][T26236] RAX: ffff888109d54a60 RBX: 0000000000001000 RCX: 0000000000000040 [ 237.779952][T26236] RDX: 0000000000001000 RSI: ffff888106ac4fc0 RDI: 0000000020012000 [ 237.787937][T26236] RBP: 0000000000001000 R08: 0000000000000000 R09: 0001ffffffffffff [ 237.792061][T26254] FAULT_INJECTION: forcing a failure. [ 237.792061][T26254] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.795906][T26236] R10: 0001888106ac4fff R11: ffff888109d54080 R12: 00007ffffffff000 [ 237.795921][T26236] R13: 0000000020012040 R14: ffff888106ac4000 R15: 0000000020011040 [ 237.795936][T26236] _copy_to_user+0x77/0x90 [ 237.829780][T26236] environ_read+0x248/0x340 [ 237.834967][T26236] do_iter_read+0x2be/0x4b0 [ 237.839618][T26236] do_preadv+0x13b/0x230 [ 237.844034][T26236] ? __cond_resched+0x11/0x40 [ 237.848694][T26236] ? fput+0x2d/0x130 [ 237.852581][T26236] ? ksys_write+0x157/0x180 [ 237.857063][T26236] __x64_sys_preadv+0x54/0x60 [ 237.861719][T26236] do_syscall_64+0x3d/0x90 [ 237.866197][T26236] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 237.872115][T26236] RIP: 0033:0x4665d9 [ 237.875989][T26236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 237.896251][T26236] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 237.904661][T26236] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 237.912612][T26236] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 [ 237.920562][T26236] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 237.928513][T26236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 237.936476][T26236] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 [ 237.944429][T26254] CPU: 0 PID: 26254 Comm: syz-executor.3 Not tainted 5.13.0-syzkaller #0 [ 237.953695][T26254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 237.963750][T26254] Call Trace: [ 237.967026][T26254] dump_stack_lvl+0xb7/0x103 [ 237.971632][T26254] dump_stack+0x11/0x1a [ 237.975793][T26254] should_fail+0x23c/0x250 [ 237.980221][T26254] should_fail_usercopy+0x16/0x20 [ 237.985293][T26254] _copy_to_user+0x1c/0x90 [ 237.989704][T26254] simple_read_from_buffer+0xab/0x120 [ 237.995072][T26254] proc_fail_nth_read+0xf6/0x140 [ 237.997204][T26250] loop2: detected capacity change from 0 to 264192 [ 238.000015][T26254] ? rw_verify_area+0x136/0x250 [ 238.000036][T26254] ? proc_fault_inject_write+0x200/0x200 [ 238.016966][T26254] vfs_read+0x154/0x5d0 [ 238.021117][T26254] ? __fget_light+0x21b/0x260 [ 238.025799][T26254] ? __cond_resched+0x11/0x40 [ 238.030504][T26254] ksys_read+0xce/0x180 [ 238.034659][T26254] __x64_sys_read+0x3e/0x50 [ 238.039158][T26254] do_syscall_64+0x3d/0x90 [ 238.043571][T26254] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 238.049513][T26254] RIP: 0033:0x41935c [ 238.053394][T26254] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 238.073295][T26254] RSP: 002b:00007fa800ded170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 238.081868][T26254] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000041935c [ 238.089836][T26254] RDX: 000000000000000f RSI: 00007fa800ded1e0 RDI: 0000000000000004 [ 238.097804][T26254] RBP: 00007fa800ded1d0 R08: 0000000000000000 R09: 0000000000000000 [ 238.105817][T26254] R10: 0000000001000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.113784][T26254] R13: 00007ffd7de0ee4f R14: 00007fa800ded300 R15: 0000000000022000 13:43:27 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x6000000}, 0x0) 13:43:27 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x200000) [ 238.138081][T26250] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 13:43:27 executing program 1 (fault-call:2 fault-nth:38): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 238.203371][T26250] loop2: detected capacity change from 0 to 264192 13:43:27 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) 13:43:27 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090074ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) [ 238.270803][T26271] FAULT_INJECTION: forcing a failure. [ 238.270803][T26271] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 238.283936][T26271] CPU: 0 PID: 26271 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 238.292355][T26271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 238.302411][T26271] Call Trace: [ 238.305691][T26271] dump_stack_lvl+0xb7/0x103 [ 238.310315][T26271] dump_stack+0x11/0x1a [ 238.314477][T26271] should_fail+0x23c/0x250 [ 238.318895][T26271] should_fail_usercopy+0x16/0x20 [ 238.323927][T26271] _copy_to_user+0x1c/0x90 [ 238.328350][T26271] environ_read+0x248/0x340 [ 238.332905][T26271] do_iter_read+0x2be/0x4b0 [ 238.337417][T26271] do_preadv+0x13b/0x230 [ 238.341671][T26271] ? __cond_resched+0x11/0x40 [ 238.346374][T26271] ? fput+0x2d/0x130 [ 238.350397][T26271] ? ksys_write+0x157/0x180 [ 238.354941][T26271] __x64_sys_preadv+0x54/0x60 [ 238.359644][T26271] do_syscall_64+0x3d/0x90 [ 238.364066][T26271] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 238.370010][T26271] RIP: 0033:0x4665d9 [ 238.373901][T26271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 238.393683][T26271] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 238.402107][T26271] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 238.410389][T26271] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 [ 238.418393][T26271] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 238.426378][T26271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 238.434361][T26271] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 13:43:27 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x9000000}, 0x0) 13:43:27 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x1000000) 13:43:28 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090078ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) [ 238.518292][T26281] loop2: detected capacity change from 0 to 264192 [ 238.535629][T26281] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 238.623261][T26292] loop2: detected capacity change from 0 to 264192 [ 238.641912][T26292] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 13:43:28 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) 13:43:28 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x28000000}, 0x0) 13:43:28 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="04080009007aff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:28 executing program 1 (fault-call:2 fault-nth:39): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 13:43:28 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x2000000) [ 238.863514][T26311] loop2: detected capacity change from 0 to 264192 [ 238.873742][T26310] FAULT_INJECTION: forcing a failure. [ 238.873742][T26310] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 238.887070][T26310] CPU: 0 PID: 26310 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 238.895559][T26310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 238.905645][T26310] Call Trace: [ 238.909001][T26310] dump_stack_lvl+0xb7/0x103 [ 238.913592][T26310] dump_stack+0x11/0x1a [ 238.917838][T26310] should_fail+0x23c/0x250 [ 238.922266][T26310] __alloc_pages+0x102/0x320 [ 238.926837][T26310] alloc_pages_vma+0x391/0x660 [ 238.931605][T26310] ? follow_page_mask+0xceb/0x1040 [ 238.936720][T26310] do_anonymous_page+0x16e/0x8a0 [ 238.941643][T26310] ? strlcpy+0x65/0x80 [ 238.945772][T26310] handle_mm_fault+0x966/0x1a60 [ 238.950739][T26310] ? perf_trace_mmap_lock_acquire_returned+0x1e0/0x210 [ 238.957588][T26310] do_user_addr_fault+0x609/0xc00 [ 238.962701][T26310] exc_page_fault+0x91/0x220 [ 238.967561][T26310] asm_exc_page_fault+0x1e/0x30 [ 238.972585][T26310] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 238.979162][T26310] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 83 f8 [ 238.999284][T26310] RSP: 0018:ffffc9000e7e7ce0 EFLAGS: 00010206 [ 239.005436][T26310] RAX: ffff888131198aa0 RBX: 0000000000001000 RCX: 0000000000000040 [ 239.013483][T26310] RDX: 0000000000001000 RSI: ffff8881077dcfc0 RDI: 0000000020013000 [ 239.021439][T26310] RBP: 0000000000001000 R08: 0000000000000000 R09: 0001ffffffffffff [ 239.029583][T26310] R10: 00018881077dcfff R11: ffff8881311980c0 R12: 00007ffffffff000 [ 239.037630][T26310] R13: 0000000020013040 R14: ffff8881077dc000 R15: 0000000020012040 [ 239.045681][T26310] _copy_to_user+0x77/0x90 [ 239.050353][T26310] environ_read+0x248/0x340 [ 239.054950][T26310] do_iter_read+0x2be/0x4b0 [ 239.059782][T26310] do_preadv+0x13b/0x230 [ 239.064531][T26310] ? __cond_resched+0x11/0x40 [ 239.069234][T26310] ? fput+0x2d/0x130 [ 239.073130][T26310] ? ksys_write+0x157/0x180 [ 239.077648][T26310] __x64_sys_preadv+0x54/0x60 [ 239.082358][T26310] do_syscall_64+0x3d/0x90 [ 239.086819][T26310] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 239.092782][T26310] RIP: 0033:0x4665d9 13:43:28 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x400000f1}], 0x1, 0x1000000, 0x0) [ 239.096669][T26310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 239.116326][T26310] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 239.124854][T26310] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 239.132804][T26310] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 [ 239.140927][T26310] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 239.148908][T26310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 239.156900][T26310] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 13:43:28 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x2c000000}, 0x0) 13:43:28 executing program 1 (fault-call:2 fault-nth:40): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 13:43:28 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x7ffff000}], 0x1, 0x1000000, 0x0) [ 239.269850][T26328] FAULT_INJECTION: forcing a failure. [ 239.269850][T26328] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.283049][T26328] CPU: 1 PID: 26328 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 239.297088][T26328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 239.307143][T26328] Call Trace: [ 239.310426][T26328] dump_stack_lvl+0xb7/0x103 [ 239.315175][T26328] dump_stack+0x11/0x1a [ 239.319362][T26328] should_fail+0x23c/0x250 [ 239.323832][T26328] should_fail_usercopy+0x16/0x20 [ 239.328866][T26328] _copy_to_user+0x1c/0x90 [ 239.333481][T26328] environ_read+0x248/0x340 [ 239.338119][T26328] do_iter_read+0x2be/0x4b0 [ 239.342635][T26328] do_preadv+0x13b/0x230 [ 239.346872][T26328] ? __cond_resched+0x11/0x40 [ 239.351602][T26328] ? fput+0x2d/0x130 [ 239.355526][T26328] ? ksys_write+0x157/0x180 [ 239.360024][T26328] __x64_sys_preadv+0x54/0x60 [ 239.364695][T26328] do_syscall_64+0x3d/0x90 [ 239.369112][T26328] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 239.375013][T26328] RIP: 0033:0x4665d9 [ 239.378898][T26328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 239.398658][T26328] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 239.407098][T26328] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 13:43:28 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x10000000) 13:43:28 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x9effffff}, 0x0) 13:43:28 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0xffffffffffffffff}], 0x1, 0x1000000, 0x0) [ 239.415177][T26328] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 [ 239.423242][T26328] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 239.431217][T26328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 239.439192][T26328] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 13:43:28 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc00e0000}, 0x0) 13:43:28 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x3, 0x1000000, 0x0) 13:43:29 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="0408000903a8ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:29 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xefffffff}, 0x0) 13:43:29 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x8, 0x1000000, 0x0) [ 239.608325][T26311] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 13:43:29 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x40000000) 13:43:29 executing program 1 (fault-call:2 fault-nth:41): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 13:43:29 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0) [ 239.699999][T26367] loop2: detected capacity change from 0 to 264192 [ 239.719919][T26371] FAULT_INJECTION: forcing a failure. [ 239.719919][T26371] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 239.733181][T26371] CPU: 1 PID: 26371 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 239.741676][T26371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 239.751719][T26371] Call Trace: [ 239.754986][T26371] dump_stack_lvl+0xb7/0x103 [ 239.759608][T26371] dump_stack+0x11/0x1a [ 239.763749][T26371] should_fail+0x23c/0x250 [ 239.768147][T26371] __alloc_pages+0x102/0x320 [ 239.772834][T26371] alloc_pages_vma+0x391/0x660 [ 239.777611][T26371] ? follow_page_mask+0xceb/0x1040 [ 239.782706][T26371] do_anonymous_page+0x16e/0x8a0 [ 239.787688][T26371] ? strlcpy+0x65/0x80 [ 239.791912][T26371] handle_mm_fault+0x966/0x1a60 [ 239.796743][T26371] ? perf_trace_mmap_lock_acquire_returned+0x1e0/0x210 [ 239.803575][T26371] do_user_addr_fault+0x609/0xc00 [ 239.808579][T26371] exc_page_fault+0x91/0x220 [ 239.813161][T26371] asm_exc_page_fault+0x1e/0x30 [ 239.818007][T26371] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 239.824577][T26371] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 83 f8 [ 239.844161][T26371] RSP: 0018:ffffc9000e8dfce0 EFLAGS: 00010206 [ 239.850234][T26371] RAX: ffff888133c53a20 RBX: 0000000000001000 RCX: 0000000000000040 [ 239.858184][T26371] RDX: 0000000000001000 RSI: ffff88812fcf5fc0 RDI: 0000000020014000 [ 239.866915][T26371] RBP: 0000000000001000 R08: 0000000000000000 R09: 0001ffffffffffff [ 239.874878][T26371] R10: 000188812fcf5fff R11: ffff888133c53040 R12: 00007ffffffff000 [ 239.882830][T26371] R13: 0000000020014040 R14: ffff88812fcf5000 R15: 0000000020013040 [ 239.890781][T26371] _copy_to_user+0x77/0x90 [ 239.895180][T26371] environ_read+0x248/0x340 [ 239.899705][T26371] do_iter_read+0x2be/0x4b0 [ 239.904188][T26371] do_preadv+0x13b/0x230 [ 239.908433][T26371] ? __cond_resched+0x11/0x40 [ 239.913092][T26371] ? fput+0x2d/0x130 [ 239.917033][T26371] ? ksys_write+0x157/0x180 [ 239.921520][T26371] __x64_sys_preadv+0x54/0x60 [ 239.926191][T26371] do_syscall_64+0x3d/0x90 [ 239.930671][T26371] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 239.936627][T26371] RIP: 0033:0x4665d9 [ 239.940499][T26371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 239.960113][T26371] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 239.968765][T26371] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 239.976715][T26371] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 [ 239.984664][T26371] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 239.992628][T26371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 13:43:29 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x300, 0x1000000, 0x0) [ 240.000603][T26371] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 13:43:29 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) 13:43:29 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x40000, 0x0) 13:43:29 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xffffff9e}, 0x0) 13:43:29 executing program 1 (fault-call:2 fault-nth:42): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 240.177338][T26399] FAULT_INJECTION: forcing a failure. [ 240.177338][T26399] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 240.190443][T26399] CPU: 1 PID: 26399 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 240.198855][T26399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 240.208996][T26399] Call Trace: [ 240.212272][T26399] dump_stack_lvl+0xb7/0x103 [ 240.217008][T26399] dump_stack+0x11/0x1a [ 240.221341][T26399] should_fail+0x23c/0x250 [ 240.225772][T26399] should_fail_usercopy+0x16/0x20 [ 240.230959][T26399] _copy_to_user+0x1c/0x90 [ 240.235374][T26399] environ_read+0x248/0x340 [ 240.239882][T26399] do_iter_read+0x2be/0x4b0 [ 240.244445][T26399] do_preadv+0x13b/0x230 [ 240.248755][T26399] ? __cond_resched+0x11/0x40 [ 240.253472][T26399] ? fput+0x2d/0x130 [ 240.257401][T26399] ? ksys_write+0x157/0x180 [ 240.261895][T26399] __x64_sys_preadv+0x54/0x60 [ 240.266560][T26399] do_syscall_64+0x3d/0x90 [ 240.271067][T26399] entry_SYSCALL_64_after_hwframe+0x44/0xae 13:43:29 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xffffffef}, 0x0) [ 240.276969][T26399] RIP: 0033:0x4665d9 [ 240.281006][T26399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 240.300618][T26399] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 240.309106][T26399] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 240.318662][T26399] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 [ 240.326689][T26399] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 240.334755][T26399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 240.342727][T26399] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 13:43:30 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x0) 13:43:30 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="0408000911a9ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:30 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0xefffffff) 13:43:30 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000002, 0x0) 13:43:30 executing program 1 (fault-call:2 fault-nth:43): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 13:43:30 executing program 5: r0 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000004ac0)=""/102389, 0x18ff5}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0], 0xc63b9e35) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000001f00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000000380)=ANY=[@ANYBLOB="44050000", @ANYRES16=r0, @ANYBLOB="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"], 0x5c4}, 0x1, 0x0, 0x0, 0x48040}, 0x40091) r1 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x3, 0x7, 0x301, 0x0, 0x0, {0xa}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x46}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x800}, @NFACCT_FLAGS={0x8}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x5}]}, 0x54}}, 0x4000011) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = open_tree(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x9000) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000001840)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001800)={&(0x7f0000001f40)=ANY=[@ANYBLOB="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"], 0x1480}, 0x1, 0x0, 0x0, 0x8004810}, 0x44000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001880)=ANY=[@ANYBLOB="01000000", @ANYRES16=r6, @ANYBLOB="2d630000010000000000060000000500b9fcc7000000262b722d84fb91f7acb9974d"], 0x1c}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000003d40)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000003cc0)={0x58, r6, 0x0, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="fad4296249df"}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xf4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80000001}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x8040}, 0x1) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) r7 = getpgrp(0xffffffffffffffff) sendmsg$nl_netfilter(r2, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f000001dac0)={0x3c00, 0x7, 0x9, 0x201, 0x70bd2d, 0x25dfdbfe, {0x5, 0x0, 0x5}, [@typed={0x4, 0x3e}, @nested={0x1dc, 0x8b, 0x0, 0x1, [@typed={0x87, 0x75, 0x0, 0x0, @binary="c88ff30c2d75674ab7d2384549631952d1a4eb6d524b85e6c14e7c69fed1a630acf3dcc6faf046207fba9e56785923e6f1e6d1a533cf4d70ee53bca9e39aaaa84353d127e0b20c18a863e8ee22b1a48e4077edf4cf02f4a0492e47da68b7c0ecfe882e2ebdd9a2b01428c1c0bf29fae0aab22ba9a45f97f540cbfb5b295df669d56bb5"}, @generic="752487c862bb8926ea5dc246db851689390982ad5aa91b9f0ea60060571741e9338d923e3c7bc11b8ca8cc90ff49d2b8259988bc6643395e3d2400c098046213b66d4920ca39d5251407b29e4dce9fce2b54c80149f7520cad0a1012cad4cc525a3e9e02b23729fb3deb221b8099", @generic="438fa73a6111414501060294b134ba0ee35ea3110c46dc69e37554511ed7eaa6e3c12cfd4247c20aec7295b87f5866144bfee3371346a3764a1b0f3f73a93dd2e3cf74fd8947e5a80cef2f2c40cd67ebb8cb23eb1273dc4767ebeff92775d025a49e156e369647a443751cb1105d4e171a822b7f355b0e55e1d86afe5918748162b02917a41e8f74cea75497916e0a2d06bec9703afa2090607dd16b293e7e36a63a232c44ae82616c19e27bfa0c996297baac4e396f9f419d2c6b9a7b930c9af76d51f18e69406cfa3e6dad373b0208037cba6ad0e255f989619ae250ef17e55f6c"]}, @generic="3d28c08d0728fbf0b45dd6acc9f445e153fbcce748da0915bf528ab0de6494a746c38a3d5ef0d216881d5d929fa3837f163eac41e707602706ed4fd93129e3bea70a046d7022a652e976e61b97b682033d104e4a6d17b8998f87bbb4cd19992f5ff2dda4e99d61099b37183291cca071c0bae4450442511495b3fbb86edb03cf5494615644de47086bed012ec0083a331196c1a197d1abca801953d2b0e14fea1bdcc9b11fd9d313d8db0a4dfd950461190276a1077fc1c6d6ea5874197e4df2b74130dd83d2a26725c8ecc7ba84266f55", @nested={0x115c, 0x2, 0x0, 0x1, [@generic="ce705a050e4a8fbbce5ab7974bd1381c6c169e9d04a37706fe642cdab0d3a64e0b0d02125090bf643b6c28cf28bf06cc1f94830346a39061057362b77fc76803ece1b352e329310d96a7fd8f0571f9f03c73d7c3d30f17166b9e4484a0cbfde1a880d6d7b0a4fabece7026b789af563dea714557d30d3e4dfa1aeac0dd6ea3638c144fda2217bf72f738913af2dec85684517a7276106080a59943717a44d211a177c24e9679bf51357339c408ff4b44e645a9e57f2d2e842ac997ea4475831226a6a74f41f9fde6f7c964506619535899052b1b3c5a5dacb6e24cd89494e23e1150492eb76e6f6b7992f9d56be8f6c5b5dda63a575254", @typed={0x4, 0x22}, @generic="63697fa6c8488cd9a6db585f26be111e7f84ce3b6961adeb146a352f73ada40dbd2e9d14aaf436ae89de6e3c8f0ef60a768f5413d74168383876fffd523cf3f8bf20b0f0ee67aaa0184d4ecd7636cb0504f8ee1d6f", @generic="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", @typed={0x8, 0x5e, 0x0, 0x0, @fd=r2}]}, @nested={0x2f5, 0x14, 0x0, 0x1, [@generic="af4b42c23ac44bc21e4ea378cf74ddf1c69e5d5c11f1b8f1ed6db63eaf65a8391ac9d5c59a962a4f8b8ceb82a3fbf50f2b0134adfa809036d0b804d4a7995a897cd4b1481d4284795cb76067889269879922e6b3c20759aeafed5fb8b8e17f016b644cf58317aec63421a826a02fc72c5b11f6306790c99641cfd5e056369b77d1138a05b4e571223ccf3ee2cc4b19b2500f0d3d677f0b6299dd8fb4d7b7e83f01eb5e65d667153993b29b0d", @typed={0x8, 0x2a, 0x0, 0x0, @u32=0xb138}, @typed={0x8, 0x90, 0x0, 0x0, @pid}, @generic="0ee01fe8cd3ed73e5ffb542b5a3c6239a0f7fde41f99a245eefdba4715b6d7a67434d2e5572dc62011a94cc08445cff66cc94c9591157760a84af96b795ab917888b771aed4b68cd5a16682d33a4104c91a959d6", @generic="310b159133120b2461011527ac46b41d8e3d92e4be032a9f5ee1432f35dbfe6c2234f04d6bc6401fa45673152f897aa72eeb5377adc5b41201000100fa49d373bed776d36b47f99a6f17770652f4134c94c5724147ed0b6eb3457cc9c739e763015b2856035bd79201e33844c7b4f31ee545ada1c48ff8c89f9f08ed26edc59993926b7594571fd7b8bac2ac5435f3ef7742b498b5bde4ed551cb5bbf4484213652ba6a28052d343dd508d9ea3d5c05aec3237f6ab07946cca64e00480b25995b8456903b0a084f695f482602a4a359d87367e8b0000", @generic="550507dd10f2ac0c89f94d34f6f6ea495fa4a009c6c81a4d4f836268743b1f08df29134d1d799656f05b77dd19a0ecc657921f30f6311c29b336e1d15e603dbf85e86666fe6bcc7429c3d87c99f8512c2087882fe1c2022296c971270902beaba290d8d248fce9d97ea01a9cd351ecafb32102474de568", @typed={0x5, 0x9, 0x0, 0x0, @str='\x00'}, @generic="aa36380df207f9ab4c09d1e627454e023e8e2a338cf34e52b309d9e6994a4567d1", @typed={0x8, 0x9, 0x0, 0x0, @u32=0xc0}, @generic="5e36f2c9546bd66335170c94bbf0de801dc0a7e780b26bb969b8ee193464dbcee6d7b920a445651b7bf3c2cdd9be80c31f980e5402c65ef8337c3d6a0d86325429c0461555a91200f1dfe31e063cc2507ed194988a8139c85314941c63d5cd19dc9e0c"]}, @nested={0x48, 0x73, 0x0, 0x1, [@typed={0x42, 0xd, 0x0, 0x0, @binary="22bcf71f23a3392b971c2de75cb672c606fd7fead158a271eb42736a5988a2cdaaae4174dc8bcca8058f949f92ebc9be52b7f94db2b029f46024810aa612"}]}, @nested={0x2d8, 0x37, 0x0, 0x1, [@typed={0x14, 0x75, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @generic="bf46d0e9ab0526118281b03bdf852817ab8cf098a207932dae001d0e45d5e2a73e65ae6d4ac92a38434f66813be26cb0f473ae53729f6441dd90d1231c4668f96e69287442961b99ed0ec93baaddbeb1ba6b42ea2bb9d6982e861723d2eee62c0ad3b69c92ec89c873dd2ae07b406e5433cceed9f913ad3d9f50c0264d3b18c0bda00584e6f64779e7f86a0732935f48c00b8960deac146dc68f048a96fdada64c46ec03c943217bd892d46e2676984c772be1a029a4a37d028ca8332f4d252be840487b476a7b4fda34a88fa9d281b7f1643434a959b3e40ba23a5bb526ec48fd3f4d9557c38cfb52875352a96c14d89958b607fc38", @typed={0x8, 0x5c, 0x0, 0x0, @u32=0x3}, @typed={0x8, 0x60, 0x0, 0x0, @ipv4=@empty}, @typed={0x14, 0x18, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3c}}, @generic="98ae923c3455dc1e9a2eb2e0e123f6ac18a96de2fe3a075b2a386ff219b5324628be60e7ef4c5766dd69b2000d1f4cc4115321de9658b93394d51e14570cd57b0bab925ffeac430197a4cc8a25964344cf77e354abe47c172cbb35816487863751afb131d6119e6c0d61461f792b2da543c78f60885cdd4916c1cd3f5b9aefc9283b54f716fce1f558cac20dbe40364a3ba4955de5aaaf70f29da3fd7cd9d3fc8132ce636e510b6476ec5e55fdcb3284620ddcb812", @generic="276ceb9129a9635913c4cb8beab3b13ee8ac2e4849ce07af582ad248692bc37d50d13e579f8dc78b9e9da1c86a578ddfdf2f121218c64026f18e632e5c515c75cab8e9bb976352d2f2f928e25be6eb75b4d0e0fd3fe9c247ad337328e4350156bcd71b09eadb56696ac920f622210a75ae70267ba23a3aaf7e89e6d4e8c8db82ce4912549c55ce0de0818b5b2fed4d60ba0b6e273615d956a551351ee55c21f32efb7a3228447236b110060a84be2e169200239048a079a42fefefebbe1ff43364f9169599cedf859474a6137dfbc3eeb368e81a0bb371fc8b96f105f531cb89ba4cee094da300f822e845ce6aa8837530"]}, @nested={0x1044, 0x7a, 0x0, 0x1, [@typed={0x12, 0x85, 0x0, 0x0, @binary="f935930c374d4c4aae670ccbf901"}, @typed={0x8, 0x95, 0x0, 0x0, @u32=0x5}, @generic="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", @typed={0x8, 0x1, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @typed={0x6, 0x59, 0x0, 0x0, @str='+\x00'}, @typed={0x14, 0x86, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @generic="95af605ede3cb8f603343aa3060981fb3abb71563c46bdc0111b9f0c752f42e5e9dc9a96daefb2a6fa44abaa28e9c85a1ef8b3334064b7d58a369bb1d70937cb600a274d4197ad00a89c34145d243e5cbaf87f149c48ab0b8898d5eeb2b9977535e193aab3775e8b8ce0b0cbef05333061bce25aaff7ee234b12a227cc79b0c724be21ab2bfa705975298db42ffdd7e3b7b541dc15d6f6575a28f0a979ed2af9056b2a3d1f77d6472ad7acdf2b193151419f072296d0749ec53d15720d09cd08ad485ea01515243480a50a935a86775330ddacaacb7fe28a032a299330b0976200fd75f42a5cdea3f1fbb89a3f428ff61925c38947f9814d3382d4a000addbeb59b0d11b910b7a75554514af3f42b0696f1cdc08e48cbb7aca7788587b643b45e4e1682337b47ec49dee834c3d8dd310e2c857401f213fe3cf1efa9e46271ad9b834118802fb84927185d88852a7e86cc51816cf23b2218c7ecaedbfe5a9bcb750b479c2ccd89f7adc00cb6422e6e5523213aa0caed4e25a5f2a3ea7a5a8edc15b3e576aea427cf16077aec703ba894e0fc7d75660b3a1b9eb68ac67cb57ba6a3ac2b1a0687fbc1a530a7053625e519fff35859f95044b63fdb6b2eb71719bc742372b29d27df5aac658e1d3a86f72d1e893516ec680cd2ed408d17a4f1b943bc53ce712286a1b096b26a11b73e1033d5b8ad7a5d4253175ff0af63a94eb9bd6ef3b7367afbf7a329056c258eac86d9433842be653102d2897755bc6f6579d67064f7201844b998e1314831586a827f8ec7b2e12327f29cfe17d455667b9aa34225ca34d84c9b89389c8f63ea1c17986a38175cb3910bca0f334f5569f22027d1c2676f50bdca824c0b86ef4c866a4f772c10bb5098999b0957c0d409464cccf2ecca985fc617bdd9f0ad567906e020bb90f7197cea2180728fb2886d03b85e959361518ed0db34a551f7d098b09b37462bad74ee9138b45b329f9220cf9d3868193e03817f490d843ae81a1f1a5a2fd832592da20c1a140bc6980ad4d5936968f093f7c6836d9435761bc007826ff4bf10619fde91ec275325bd01b089ddb08a986c8f61daa6d5b4dacea2253c63ddc75f75d0a37245e3f70a5c9cf62b8d01add922441fb7844aecea109b64c6daacd45b2f93e8066d59db83ca8b3c61d0b28f6616f596f10231aca99178498f7afc35ae6e5ea460617ec155d69f6ec7dacd337759d07d7b38512e608e33599508b7299f82e5b81c757739b4910e95803ac89d8dbe5426a874e369f19c84bcd6874af98860dc8a63b444afc99a91b8eaa47bb40ca9773925335898c01847a2db9a74b01700538cb0e99311442de62b248c10329dc7ca327888e67467e8e1b09f24c05992ba08e0cf94eef028255274adf66fd3bda8f7c1d9db202b76b308368d6a8455e6760a0300aefc5ab03c888573391390ea3a7817da6381580a2ae32795a3dda3e2e255dfb690e6b11ff975c94ee8d8013a02030872cce24985179713ed489b8ae2e00ebc1c8a619b6a01c58d1e1a96f0a2dc521a99b7041c45a571b94c95b67b2cd07447ea0862225c1d4ac7033cd9ffece4d95aac138a742d8b654bf5911e058635bf11705dc1d8741ceda8c36b792c20cfab3a61b556a871e5f979280fb980506ed17c2935630b3e46f3004779c970b3bd392915fcecd13f2d84bdc0830eb3cb696d0834ff328be8157239c3037c3717865111574335aea8237a7c8573f33c53492852dc03924e353be2280d6c27ad243b19cef88d6eefad7e9e5954cea1f0cad725e1e35a4dbfee0f100beedc0027b73804daee45445e4280d54920ba8f4f4e5f1909509ebec3f79c5bb2b4de0be6d1e663c518b42521993a1890136ec11a5a57b41f1296d8b8d18ffc6cb756b19c2edab69229b0cfe7b73a1957ed02c9b75232aae406b11a29c947660b96fd204ed7ac424eeecfbd3cf0fe32772ad0f43965bd885ba0801a84d0ba8180c8f73ef727ca456695cb3abbe90f71b473604fd44bb4b7a197cb90ea730d126b59da8f2f975605d28e5ad21cacb690827b43bf77df0261a98a94be42b7ce8c4c889db6860dabd6d840962da31a1b7f17328a3d1bca0d3e7d86ce7cea4fa6c8faa74e1170eaa77fc0d7bf6d83dac9f8c8af4855a01e00b57d833d2d387a4f27890dd082beaa32105b153bf30dc825b1fb96539c17281ac4b5c48166888c38ac09c530fd1d0708918182371316acd95cead78537aea0dad7335a07b44d56fbaeb68673327eb342298dea32b25f7be9c679d74bac980228edc731160b70143fbf9c8100a3b3e1ca5a855798191444bc6f0baf649113212d8bf8efd570dd2676c7716002d23e4b78b60b2892d99fac67de7ed9548221e7367661f1076694bdbe9c9fcf1a50e2a0addf4168abd7d69ff4b66f010045bbf00b9defdae08d2e29e77d93bf55439c6cb86d0dbd1508dbde2d0a81dda6934cbbbcbd4726126ea1bff7c43272bba65deb6537a022ed66fed0492fe10a60ce61efcc23a8f63acaabdaddca304278c9096d5729db7a701e5c55fefcf80c1c944e18074a455a57c7db234a5f850f129aa3ad792c1c090a200ebbf6a5317db86d40662f6b6d95147548529f015a470f326bd9ba99dfb0c8e751cbf555038538740d45e9341cd827f2905e8be5a555d76363d01703cc0c85745e00f988d047004fe2030ac3ab14165c00b0906f23d9bb4b730994e2a4bd04f71a074f06dae0211d2c95ff87c891f14bab2f98d485c58af0b10c9dd89022b0ef1ddec706899298c1b3155b81e5f272c5a11df5f04d5c314f2d68425a7cbf982d7e2c6c5ea874b39ea959e5040d9dc7a9e9965fbdd3791c9dcb070123531250ce57b131bc4792c28ff2129316df7bb3d7d9fbe2a479cb998065b7e59ea1f3c84767526b503583f1f0a81bcef0b46038b2d62ae23b8585c29291f9eedf8aeb87fad1f69251921f3c2e54a0ebe6b2da75e47fb574f14c8f9f3957e7e5e0332cf2a840124b67b0a29caf406c9f382d1cedf16190f37e62d407e71e4f66345948db35bab600778c08e1fe8b8e94ccd84d631df096bcf35e01342d46faa49c55d2272d08ea1d8b46b91169ec4de0d84cbc61524e15a5f58d5e22afd07ebf8d620b4450b784e602bbd1622302e9ea5509b63e31034d8e53978a364ca37d6fd0e98e1b971a6d8cf1afb1fd44704af44b4a42206553e4e3edcebb46e1da221ff03c906767465164ce87380b3e75018d73145a78f58c164dd17b51f3a5209ff1e47f8b539a67ceb251a57a1145807145d5799280f6714ed00f1f9ac79e6d5078dcadd9791490f33564192c290f5e5eb736059d5a29bad9bad4c44db58a09c9e88c19a03164b4b8d565fbbd4df119140b8ed67de7ae732ddc8baa397ba60c97966aa29d3b4a57509deb7a7f7855ff2599bb9ea110a658f51585869e93859c04aaa0c5d27d61c9e74bee71167e7493665602217a477f8fa7fb77d245eb7d4396e7b0891593c31e336ab98ab5c22ff5b9b2cc6589fde4af437a9b588334d5f319fda6619f3a9c41fcd65eaaa7ca285fbe411ae4ffda1c57baccb0db6afd705e053d98f84f494a7c92ebcecdffc87377d9a9d8822ddc1296df25fa841228cc3b12da2d95d53986c4532cc7641413a6ca8c21d7e6e25104b86dcf0fbde6b93eadc2dbc28511b00f12ddad8873c32960e85264766a757362aae0b108ed25c9e4065f720a58566bb1dafc95f27796cdb7acacd0c807dd781b60a76d4f21853db3b90eb2ad82aec54f00ee7e120fac3a13b1db885adaeb500165399c13713d021a4fedf5249716abf29cfb56a794b2ccf83677fb6d8b4bc6ed174ee8987e004fc65c7956992f24129781db0fbc2a7ef52bd9e2df04dd7716f56411a1cd9d829ce07f5bfe0c1530bfb89abfcb06943a71c05487e6c5f3c4ad2b22fee0246fded50112f44a96ed0c2ce30675461369ecd4e9be3edd7a4569a187502298792ce09fa8f237570be3d67e93978cd1d1cbf6352ba62577e3e3c4063cd452b6b441aa60c7243a5d0b55f2896b62355f7eb1bb2b3989920e1614b58703e406bb6c33cab4f392f842a106c1ecb9b40faf3830f8544ee593d29664c15be7c828ce01446b3bfe579e8140435b67efea130902b942dace250ed42c4013a5369de0ed9dacc74a97742aa8362453ffe1049aada54f9a3c60690723fab1e13066dc47d01af55a4cc6b22f04051dccb08ba5ecb4d445bc0168da68083d1716c295b55e56b9f5961501c3704d71a208b16e55f20d2c4d05e89c0609078cbd35d718bdb045419537c01dc50f38bca8613677126eed613ade53687779066c11247bac8b01ed1869455a1880a5ef668fe93cbfcacadc132eff108552a4f3bc95e1bb2de712183a6500cc384593cbd9731e504839aab1516c1bc2b0756545320b301ed1263ef63ae9bf2b793eb73b06656dfff3a6dfd5795c0c3e3ccd3cd0d4cee2d47388ea0a235a59b49f61cfc1686bae58203ae4e032255812067a797668329460104db912b6f972717880f0d1694df012b8043b796160c63822e9e8a102bba7b69ac1b5939adb198e42bfeb017c512d931b53623a47a1c311e96382e70bd295d81133033be669836fba679d159aebdc55d374336066662fa9c6dd4bcb286cf21a16a7e2157e595f10288a0b2d9ea3593864140467e9f4522ff685b06cb3f86f4e4db5faf75b617aa4bfe1de12358023bc0d778abe07875e7133fb5fbaccdd96ee90d17c9869a5cbdf8fd150a118ed55aa55eda218bc74e6d110b02c69bfae1039834729df2120312cd5b4b00c224e281325466c426017be98e9b81c21807006e550163f48f269fba520641438c4ab4d867bf06acbc6299f856ab4d9a3a53c71eb3c82e1a931dc862f3630d784dc6abc0fc255ad37d46214abfb1a9f06f61ec503f6cebfa7bd2c15c9cb2b3c89b7d498517aaa70fdd4833f6873e69271764dbd056b3421738eb2edc16977f4d32a674a75c2343c15e529344194b93bc955ae8102e3b461c11d3da0c71df17581ff8c5cd32eb14597651895bf792fae05ef8fd3c004abe42f5d444128d21589c58a70a8eae43a7adf3d1762d38f17ea0b294c52b9715bde44b3adac6034a448d15cc59f053492de98d56f8e57e598e8ed5e4eb46e581622e3bde434f4961ff8d90210d4875bf2348b09ff73a9945ebb2c1d56c9c4ae273374bba571d7198fa772b169acc6b01af25277e17a7107c567d0ceb6667b6d8e189520d6e5c7cafe80b326b39cca14d73443154daf4694ab7619800c799d25f14bd811838d9deaa255956c541eb8aad6a438f3b96a5297080c0158aaa90bea54b4a4582e37ceca33a7faed14a5ed4050245398e6c4e44be2fe6d05cec76ab38b56e30f67aabcd2858a950755b149172f2dc321d375d3b10692883d9742f7a4d454d0627e96e87f64312a670d22ff2366e63bd110562a9c650c95a81058ca1df7665148c0871d4b1c2d74e705a2263da4cc44aae347633d807f713e4edfa5ad16a84cf2248fb6d1e0b67780b77718825c7e1ce810043b8a568cacc1616f224d46e98fec84a4238b7260e0ac3112c74c38e54b0c1a26a5c2794a645058484d982ca35bf833c10a52687670be1450bc590fa6c50a17a7f687e768406136fd10013eb65563466a84fb54a7a857a82f9ed38243abefc01c6755f6d3d61563496edeea2f9692ef6e9ab6ab30d0aca621250c45108acde7b39283a3e74d275effd260320966302f060b251367cac7c1ce99b050b32b452413a5d7619c70b3cc59b807c6c6daff47ad410ee", @typed={0xc, 0x8c, 0x0, 0x0, @str='.\x1d\x81:*]/\x00'}, @nested={0x123, 0x7c, 0x0, 0x1, [@typed={0x4, 0x2e}, @generic="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", @typed={0x6, 0x42, 0x0, 0x0, @str='@\x00'}, @generic, @typed={0x8, 0x35, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x8, 0x77, 0x0, 0x0, @pid=r7}, @typed={0x8, 0x3b, 0x0, 0x0, @ipv4=@loopback}]}, @generic="68e51c7798a5e8b5decdcfa87933bd69e2571aa790a89164328d9b80f968aa5b8733cdafd346f3962d954b10d1b96a1c157bbae48a768212cf96d6778e822a673928592c3d80abcff1bc931f69b9b4b001394c"]}, 0x3c00}, 0x1, 0x0, 0x0, 0x40800}, 0x8040) dup3(r2, r1, 0x0) [ 240.572558][T26367] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 13:43:30 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x2) [ 240.667702][T26425] FAULT_INJECTION: forcing a failure. [ 240.667702][T26425] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 240.681179][T26425] CPU: 1 PID: 26425 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 240.689776][T26425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 240.699825][T26425] Call Trace: [ 240.703102][T26425] dump_stack_lvl+0xb7/0x103 [ 240.708454][T26425] dump_stack+0x11/0x1a [ 240.712607][T26425] should_fail+0x23c/0x250 13:43:30 executing program 5: r0 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup3(r1, r0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000001880)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001840)={&(0x7f00000017c0)={0x54, 0x1, 0x2, 0x401, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xfffffff7}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASTER={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x61ac}]}, 0x54}, 0x1, 0x0, 0x0, 0x501cda5a1016dbaa}, 0x8040) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000140)='/dev/snapshot\x00') r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x22840, 0x0) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) signalfd4(r2, &(0x7f0000000240)={[0x7]}, 0x8, 0x80800) tkill(r4, 0x34) ptrace$cont(0x18, r4, 0x0, 0x0) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r4, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x8, 0x92, 0x3, 0x1, 0x0, 0x3f, 0xd1c24303d71fffc3, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x4, @perf_bp={&(0x7f0000000180), 0x1}, 0x520, 0x8, 0x400, 0x7, 0xc7ca, 0xfffffffa, 0x7ff, 0x0, 0xbe4d, 0x0, 0x94}, r4, 0x2, 0xffffffffffffffff, 0x8) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000018c0)={r1, 0x2, 0x1, 0x8}) fcntl$dupfd(r1, 0x406, r3) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x7fffffff, 0x6, 0x1, 0x5, 0x3, 0xe6}) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000300)={0x1478, 0xd, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x1440, 0x3, 0x0, 0x1, [{0x143c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x1414, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x8000000000000002}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x25, 0x1, "cb468a7147aa89b6fc1e4119d295ff5d0b7480c666bfae4428fc00e8971c3fbf0d"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0xd4, 0x1, "ac6de5c17b693595f71856f6ab07846686ccc39939c8e85a51ef117ba2057a5526e6cfe1371096b7fae5039f009de98b47dc8bff1c17f1ac241970ff75d8589339992e5e282928f414c71e72274e40a9abeb3d9a4a143329ce2b4647e6d68cb9da9e657883aaa854e707eafa1b69bf536ff227df119ca46eadad02a509e47281cf7d92507ce39aa77a87d58e14ab2c837f2454be42eeca65b2e4a9a686f0a1023e37f686deac9aaa7dc254dafaa1ff9afe2de21387f12d7970c545d66d3dcfce49f5a45b161152b9aeaeceb05cffa83d"}, @NFTA_DATA_VALUE={0xb3, 0x1, "1fbe69b26c10e4289993dee1d088a9f1ff7f71a2bfa68c94eb8ac1630fdf3bdee59247c9c5c4a6c1e1ae5b4b24a4e7b7d7d2ecc450b780d3bf0e3f1be0bc340a537883f55af3ecfa783ff3d2fb1d789398e9a305fcbf9ab33ca15be2426abb1621e7a890d10417a0cee5b8be0240b42787bf2aa81656ee0b7a153bae37e88d3a0db31b93e38d54faa7089723e995592a3bdbb1b5fd67625600714650d740e7db196cea9191926d9ebf42c095d24ac0"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffa}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xfe, 0x1, "6d73744b12c912ee6a5554bfa337b96fb8346a9bd6f50de96ef0e569631ef6da3c115bd86b84ac5c6893628bfa0fbaaf1b9a9e79ead3d2fd1c35f8f4c5de6e9e03c54eb9f1c61bcda4bd46de8ed67cbaeaccb7a19f0698b0628a45eb0772ba9cc8f0f34a05ecbfba38bbccbdbc95ea8b9d18fe59c1679f9f95df9896372ecc281bfd04eabba3d8b18c8be4f4bed18fd5c8c02370dc2682206fb352c2d005cb71898f94d8612dd45abc225e42848ccbc231a06cdcac275715310e517d931352ee31922f572a071f4b95ef62b1c64b00cd9bb99c2f1ced92ad19ca8241778db12d88a464bfdc532e105528f2a6f74741c042001d1ae750a4767e26"}, @NFTA_DATA_VERDICT={0x6c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY_END={0x10, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_FLAGS={0x8}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x80}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}, 0x1478}, 0x1, 0x0, 0x0, 0x81}, 0x4000084) [ 240.717030][T26425] __alloc_pages+0x102/0x320 [ 240.721698][T26425] alloc_pages_vma+0x391/0x660 [ 240.726485][T26425] ? follow_page_mask+0xceb/0x1040 [ 240.731955][T26425] do_anonymous_page+0x16e/0x8a0 [ 240.736895][T26425] ? strlcpy+0x65/0x80 [ 240.740980][T26425] handle_mm_fault+0x966/0x1a60 [ 240.745821][T26425] ? perf_trace_mmap_lock_acquire_returned+0x1e0/0x210 [ 240.752773][T26425] do_user_addr_fault+0x609/0xc00 [ 240.757796][T26425] exc_page_fault+0x91/0x220 [ 240.762383][T26425] asm_exc_page_fault+0x1e/0x30 13:43:30 executing program 5: r0 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) readv(r0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/236, 0xec}, {&(0x7f0000000100)=""/74, 0x4a}, {&(0x7f0000000180)=""/139, 0x8b}, {&(0x7f0000000300)=""/185, 0xb9}, {&(0x7f00000003c0)=""/84, 0x54}], 0x5) dup3(r1, r0, 0x0) [ 240.767229][T26425] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 240.773851][T26425] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 83 f8 [ 240.785089][T26443] loop2: detected capacity change from 0 to 264192 [ 240.793476][T26425] RSP: 0018:ffffc9000ea13ce0 EFLAGS: 00010206 [ 240.793494][T26425] RAX: ffff888105295a20 RBX: 0000000000001000 RCX: 0000000000000040 [ 240.793504][T26425] RDX: 0000000000001000 RSI: ffff88812ff74fc0 RDI: 0000000020015000 [ 240.793515][T26425] RBP: 0000000000001000 R08: 0000000000000000 R09: 0001ffffffffffff [ 240.830974][T26425] R10: 000188812ff74fff R11: ffff888105295040 R12: 00007ffffffff000 [ 240.838986][T26425] R13: 0000000020015040 R14: ffff88812ff74000 R15: 0000000020014040 [ 240.846947][T26425] _copy_to_user+0x77/0x90 [ 240.851350][T26425] environ_read+0x248/0x340 [ 240.855860][T26425] do_iter_read+0x2be/0x4b0 [ 240.860428][T26425] do_preadv+0x13b/0x230 [ 240.864774][T26425] ? __cond_resched+0x11/0x40 [ 240.869430][T26425] ? fput+0x2d/0x130 [ 240.873332][T26425] ? ksys_write+0x157/0x180 [ 240.877813][T26425] __x64_sys_preadv+0x54/0x60 [ 240.882466][T26425] do_syscall_64+0x3d/0x90 [ 240.886936][T26425] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 240.892811][T26425] RIP: 0033:0x4665d9 [ 240.896682][T26425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 13:43:30 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x3000000, 0x0) [ 240.916268][T26425] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 240.927832][T26425] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 240.935787][T26425] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 [ 240.943738][T26425] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 240.951689][T26425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 240.959639][T26425] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 13:43:30 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x3) 13:43:30 executing program 5: r0 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x3, 0x3, 0xfe, 0x6, 0x0, 0x81, 0x4402a, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x5, 0x1f}, 0x10c, 0x0, 0x8001, 0x8, 0x0, 0xfffffa43, 0x401, 0x0, 0x0, 0x0, 0x6}, r2, 0x8, r0, 0x2) dup3(r1, r0, 0x0) 13:43:30 executing program 1 (fault-call:2 fault-nth:44): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 241.059516][T26462] FAULT_INJECTION: forcing a failure. [ 241.059516][T26462] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.072603][T26462] CPU: 1 PID: 26462 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 241.081024][T26462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 241.091080][T26462] Call Trace: [ 241.094354][T26462] dump_stack_lvl+0xb7/0x103 [ 241.098950][T26462] dump_stack+0x11/0x1a 13:43:30 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="0408000903b4ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:30 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0xffffffef) 13:43:30 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x4) 13:43:30 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x8000000, 0x0) [ 241.103017][T26443] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 241.103098][T26462] should_fail+0x23c/0x250 [ 241.116538][T26462] should_fail_usercopy+0x16/0x20 [ 241.121634][T26462] _copy_to_user+0x1c/0x90 [ 241.126110][T26462] environ_read+0x248/0x340 [ 241.130607][T26462] do_iter_read+0x2be/0x4b0 [ 241.135112][T26462] do_preadv+0x13b/0x230 [ 241.139419][T26462] ? __cond_resched+0x11/0x40 [ 241.144093][T26462] ? fput+0x2d/0x130 [ 241.147980][T26462] ? ksys_write+0x157/0x180 [ 241.152523][T26462] __x64_sys_preadv+0x54/0x60 [ 241.157202][T26462] do_syscall_64+0x3d/0x90 [ 241.161717][T26462] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 241.167619][T26462] RIP: 0033:0x4665d9 [ 241.171522][T26462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 241.191128][T26462] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 241.199530][T26462] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 13:43:30 executing program 5: r0 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000000)={0x0, 0x2}) dup3(r1, r0, 0x0) 13:43:30 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xffffffff, 0x0) [ 241.207488][T26462] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 [ 241.215441][T26462] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 241.223398][T26462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 241.231357][T26462] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 13:43:30 executing program 1 (fault-call:2 fault-nth:45): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 13:43:30 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) 13:43:30 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x5) [ 241.301955][T26484] loop2: detected capacity change from 0 to 264192 [ 241.315239][T26484] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 13:43:30 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x2) 13:43:30 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="0408000903b5ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:30 executing program 5: r0 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2041, 0x0) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0xd9, 0x8, 0x4a, 0x86, 0x0, 0x7f, 0x0, 0x4, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5816, 0x4, @perf_config_ext={0x7, 0x6}, 0x4410, 0x0, 0xfff, 0x5, 0x5, 0xff, 0xfffd, 0x0, 0x10000, 0x0, 0xfffffffffffffffe}, 0x0, 0x3, r1, 0x8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x5, 0x3, 0x40, 0x1, 0x0, 0x0, 0x8202, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x400, 0x2, @perf_config_ext={0x8, 0xffffffffffffff7a}, 0x2200, 0x81, 0x80000000, 0x2, 0x2, 0x6, 0x1, 0x0, 0x3f, 0x0, 0x27d800000}, 0xffffffffffffffff, 0x0, r0, 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xfe, 0x3f, 0x1, 0x7f, 0x0, 0x10000, 0xa8a40, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000000), 0xc}, 0x8000, 0x0, 0x6170, 0x6, 0x4, 0xcb7, 0x200, 0x0, 0x401, 0x0, 0x7e}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0xb) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) dup3(r3, r0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/sit', 0x800, 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f0000000300)='\x00', &(0x7f0000000340)='./file0\x00', r5) 13:43:30 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x1000000) [ 241.395716][T26497] FAULT_INJECTION: forcing a failure. [ 241.395716][T26497] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 241.409050][T26497] CPU: 1 PID: 26497 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 241.417461][T26497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 241.427555][T26497] Call Trace: [ 241.430836][T26497] dump_stack_lvl+0xb7/0x103 [ 241.435446][T26497] dump_stack+0x11/0x1a [ 241.439593][T26497] should_fail+0x23c/0x250 [ 241.444091][T26497] __alloc_pages+0x102/0x320 [ 241.448722][T26497] alloc_pages_vma+0x391/0x660 [ 241.453533][T26497] ? follow_page_mask+0xceb/0x1040 [ 241.458674][T26497] do_anonymous_page+0x16e/0x8a0 [ 241.463598][T26497] ? strlcpy+0x65/0x80 [ 241.467656][T26497] handle_mm_fault+0x966/0x1a60 [ 241.472496][T26497] ? perf_trace_mmap_lock_acquire_returned+0x1e0/0x210 [ 241.479455][T26497] do_user_addr_fault+0x609/0xc00 [ 241.484482][T26497] exc_page_fault+0x91/0x220 [ 241.489085][T26497] asm_exc_page_fault+0x1e/0x30 13:43:30 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0xffffffff) [ 241.493984][T26497] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 241.500618][T26497] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 83 f8 [ 241.520463][T26497] RSP: 0018:ffffc9000eb5fce0 EFLAGS: 00010206 [ 241.526522][T26497] RAX: ffff88812f99caa0 RBX: 0000000000001000 RCX: 0000000000000040 [ 241.534534][T26497] RDX: 0000000000001000 RSI: ffff88812fc96fc0 RDI: 0000000020016000 13:43:30 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x2000000) [ 241.542502][T26497] RBP: 0000000000001000 R08: 0000000000000000 R09: 0001ffffffffffff [ 241.550507][T26497] R10: 000188812fc96fff R11: ffff88812f99c0c0 R12: 00007ffffffff000 [ 241.558594][T26497] R13: 0000000020016040 R14: ffff88812fc96000 R15: 0000000020015040 [ 241.566610][T26497] _copy_to_user+0x77/0x90 [ 241.571027][T26497] environ_read+0x248/0x340 [ 241.575532][T26497] do_iter_read+0x2be/0x4b0 [ 241.580032][T26497] do_preadv+0x13b/0x230 [ 241.584278][T26497] ? __cond_resched+0x11/0x40 [ 241.588960][T26497] ? fput+0x2d/0x130 [ 241.592889][T26497] ? ksys_write+0x157/0x180 [ 241.597391][T26497] __x64_sys_preadv+0x54/0x60 [ 241.602082][T26497] do_syscall_64+0x3d/0x90 [ 241.606561][T26497] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 241.612452][T26497] RIP: 0033:0x4665d9 [ 241.616344][T26497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 241.635950][T26497] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 13:43:31 executing program 5: r0 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) dup3(r1, r0, 0x0) 13:43:31 executing program 1 (fault-call:2 fault-nth:46): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 241.644363][T26497] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 241.652419][T26497] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 [ 241.660389][T26497] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 241.668370][T26497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 241.676338][T26497] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 13:43:31 executing program 4: prctl$PR_SET_MM(0x23, 0x1, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) syz_io_uring_setup(0x457f, &(0x7f0000000300)={0x0, 0x25c1, 0x0, 0x0, 0x1a4, 0x0, r1}, &(0x7f0000573000/0x3000)=nil, &(0x7f000016f000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000100)=0xe8) fchownat(r2, &(0x7f00000000c0)='./file0\x00', r3, 0xffffffffffffffff, 0x800) ioctl$RTC_AIE_OFF(r1, 0x7002) write(r1, &(0x7f0000000280)="8a339c9c89f1ade4a270f16a4798e1b7c7ad3e2e806ee0f105d1c1e9fe9c901bb3622626e0c66ed519292b7a6ccef56ee5ab1c271176bcc0a6bae1b1202e2cc964ea3acc1e49d3f852735d9b5dd85de4815b9e8f1f0d27", 0x57) 13:43:31 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x200000b1) [ 241.752585][T26529] FAULT_INJECTION: forcing a failure. [ 241.752585][T26529] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.765680][T26529] CPU: 0 PID: 26529 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 241.774102][T26529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 241.782692][T26532] loop2: detected capacity change from 0 to 264192 [ 241.784195][T26529] Call Trace: [ 241.784203][T26529] dump_stack_lvl+0xb7/0x103 [ 241.798543][T26529] dump_stack+0x11/0x1a [ 241.802701][T26529] should_fail+0x23c/0x250 [ 241.807122][T26529] should_fail_usercopy+0x16/0x20 [ 241.812217][T26529] _copy_to_user+0x1c/0x90 [ 241.816720][T26529] environ_read+0x248/0x340 [ 241.821366][T26529] do_iter_read+0x2be/0x4b0 [ 241.825873][T26529] do_preadv+0x13b/0x230 [ 241.830118][T26529] ? __cond_resched+0x11/0x40 [ 241.834784][T26529] ? fput+0x2d/0x130 [ 241.838676][T26529] ? ksys_write+0x157/0x180 [ 241.843360][T26529] __x64_sys_preadv+0x54/0x60 [ 241.848039][T26529] do_syscall_64+0x3d/0x90 13:43:31 executing program 5: r0 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x400000, 0x108) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) dup3(r2, r0, 0x0) 13:43:31 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x6) 13:43:31 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/113, 0x71}], 0x1, 0x0, 0x0) [ 241.852475][T26529] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 241.858440][T26529] RIP: 0033:0x4665d9 [ 241.862379][T26529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 241.868750][T26532] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 241.881985][T26529] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 13:43:31 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="0408000903b6ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:31 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0xb1000020) [ 241.882007][T26529] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 241.882017][T26529] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 [ 241.882084][T26529] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 241.882093][T26529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 241.882101][T26529] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 13:43:31 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/113, 0x71}], 0x1, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) close(r1) 13:43:31 executing program 5: r0 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xa0, 0x1, 0x1, 0x5, 0x0, 0x0, {0xc, 0x0, 0xa}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_NAT_DST={0x7c, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010102}, @CTA_NAT_PROTO={0x4c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010101}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4}, 0x800) dup3(r1, r0, 0x0) 13:43:31 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x7) 13:43:31 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) prctl$PR_SET_MM(0x23, 0x5, &(0x7f00002d5000/0x4000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) 13:43:31 executing program 1 (fault-call:2 fault-nth:47): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 13:43:31 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7, 0x80) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x77, 0x20, 0x3, 0x2, 0x5a, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x80, 0x7fff, 0x7fff}}) r1 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) dup3(r2, r1, 0x0) [ 242.057007][T26573] loop2: detected capacity change from 0 to 264192 [ 242.070699][T26573] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 242.092585][T26583] FAULT_INJECTION: forcing a failure. [ 242.092585][T26583] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 242.105847][T26583] CPU: 1 PID: 26583 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 242.114265][T26583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 242.124315][T26583] Call Trace: [ 242.127582][T26583] dump_stack_lvl+0xb7/0x103 [ 242.132162][T26583] dump_stack+0x11/0x1a [ 242.136408][T26583] should_fail+0x23c/0x250 [ 242.140806][T26583] __alloc_pages+0x102/0x320 [ 242.145377][T26583] alloc_pages_vma+0x391/0x660 [ 242.150121][T26583] ? follow_page_mask+0xceb/0x1040 [ 242.155286][T26583] do_anonymous_page+0x16e/0x8a0 [ 242.160277][T26583] ? strlcpy+0x65/0x80 [ 242.164326][T26583] handle_mm_fault+0x966/0x1a60 [ 242.169174][T26583] ? perf_trace_mmap_lock_acquire_returned+0x1e0/0x210 [ 242.176087][T26583] do_user_addr_fault+0x609/0xc00 [ 242.181092][T26583] exc_page_fault+0x91/0x220 [ 242.185660][T26583] asm_exc_page_fault+0x1e/0x30 [ 242.190491][T26583] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 242.197063][T26583] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 83 f8 [ 242.217694][T26583] RSP: 0018:ffffc9000eab3ce0 EFLAGS: 00010206 [ 242.223739][T26583] RAX: ffff888101ca0a20 RBX: 0000000000001000 RCX: 0000000000000040 [ 242.231698][T26583] RDX: 0000000000001000 RSI: ffff8881311f2fc0 RDI: 0000000020017000 [ 242.240660][T26583] RBP: 0000000000001000 R08: 0000000000000000 R09: 0001ffffffffffff [ 242.248609][T26583] R10: 00018881311f2fff R11: ffff888101ca0040 R12: 00007ffffffff000 [ 242.256647][T26583] R13: 0000000020017040 R14: ffff8881311f2000 R15: 0000000020016040 [ 242.264603][T26583] _copy_to_user+0x77/0x90 [ 242.269000][T26583] environ_read+0x248/0x340 [ 242.273504][T26583] do_iter_read+0x2be/0x4b0 [ 242.277988][T26583] do_preadv+0x13b/0x230 [ 242.282229][T26583] ? __cond_resched+0x11/0x40 [ 242.286900][T26583] ? fput+0x2d/0x130 [ 242.290774][T26583] ? ksys_write+0x157/0x180 [ 242.295259][T26583] __x64_sys_preadv+0x54/0x60 [ 242.299924][T26583] do_syscall_64+0x3d/0x90 [ 242.304344][T26583] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 242.310318][T26583] RIP: 0033:0x4665d9 [ 242.314197][T26583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 242.333822][T26583] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 242.342225][T26583] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 242.350177][T26583] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 13:43:31 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="0408000903b7ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:31 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0xffffffff) [ 242.358137][T26583] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 242.366098][T26583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 242.374057][T26583] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 13:43:31 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x9) 13:43:31 executing program 5: set_mempolicy(0x1, &(0x7f0000000180)=0x7ff, 0x6) clone3(&(0x7f0000000300)={0x14d080000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) set_mempolicy(0x4000, &(0x7f0000000000)=0xe236, 0x5) 13:43:31 executing program 1 (fault-call:2 fault-nth:48): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 13:43:31 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x28) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x5, 0x4) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='coredump_filter\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) 13:43:31 executing program 4: prctl$PR_SET_MM(0x23, 0x8, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) ioctl$EVIOCGKEYCODE(r1, 0xc020662a, &(0x7f0000000440)=""/7) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/168, 0xa8}], 0x1, 0x0, 0xcf3) 13:43:31 executing program 4: r0 = msgget$private(0x0, 0x2) msgrcv(r0, &(0x7f0000000180)={0x0, ""/242}, 0xfa, 0x0, 0x2000) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) [ 242.506069][T26605] FAULT_INJECTION: forcing a failure. [ 242.506069][T26605] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.519180][T26605] CPU: 1 PID: 26605 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 242.527591][T26605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 242.537737][T26605] Call Trace: [ 242.541087][T26605] dump_stack_lvl+0xb7/0x103 [ 242.545773][T26605] dump_stack+0x11/0x1a [ 242.549945][T26605] should_fail+0x23c/0x250 13:43:32 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x28) [ 242.554470][T26605] should_fail_usercopy+0x16/0x20 [ 242.560306][T26605] _copy_to_user+0x1c/0x90 [ 242.564803][T26605] environ_read+0x248/0x340 [ 242.573913][T26605] do_iter_read+0x2be/0x4b0 [ 242.578492][T26605] do_preadv+0x13b/0x230 [ 242.582736][T26605] ? __cond_resched+0x11/0x40 [ 242.587409][T26605] ? fput+0x2d/0x130 [ 242.591337][T26605] ? ksys_write+0x157/0x180 [ 242.595919][T26605] __x64_sys_preadv+0x54/0x60 [ 242.600595][T26605] do_syscall_64+0x3d/0x90 13:43:32 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000d00000019000000900100000f000000000000000000000004000000000002000020000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0xfffffffffffffffe}}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) [ 242.605104][T26605] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 242.611108][T26605] RIP: 0033:0x4665d9 [ 242.615001][T26605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 242.634850][T26605] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 242.636226][T26624] loop3: detected capacity change from 0 to 4 [ 242.643288][T26605] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 242.643301][T26605] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 [ 242.665625][T26605] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 242.673597][T26605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 242.681657][T26605] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 13:43:32 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x2c) 13:43:32 executing program 1 (fault-call:2 fault-nth:49): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 242.721534][T26624] loop3: detected capacity change from 0 to 4 [ 242.755445][T26636] loop2: detected capacity change from 0 to 264192 [ 242.765693][T26640] FAULT_INJECTION: forcing a failure. [ 242.765693][T26640] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 242.779673][T26640] CPU: 0 PID: 26640 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 242.788083][T26640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 242.798228][T26640] Call Trace: [ 242.801624][T26640] dump_stack_lvl+0xb7/0x103 [ 242.806365][T26640] dump_stack+0x11/0x1a [ 242.810538][T26640] should_fail+0x23c/0x250 [ 242.814959][T26640] __alloc_pages+0x102/0x320 [ 242.819587][T26640] alloc_pages_vma+0x391/0x660 [ 242.824476][T26640] ? follow_page_mask+0xceb/0x1040 [ 242.829671][T26640] do_anonymous_page+0x16e/0x8a0 [ 242.834614][T26640] ? strlcpy+0x65/0x80 [ 242.838687][T26640] handle_mm_fault+0x966/0x1a60 [ 242.843534][T26640] ? perf_trace_mmap_lock_acquire_returned+0x1e0/0x210 [ 242.850647][T26640] do_user_addr_fault+0x609/0xc00 [ 242.855682][T26640] exc_page_fault+0x91/0x220 [ 242.860281][T26640] asm_exc_page_fault+0x1e/0x30 [ 242.865140][T26640] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 242.871900][T26640] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 83 f8 [ 242.891649][T26640] RSP: 0018:ffffc9000edd3ce0 EFLAGS: 00010206 [ 242.897799][T26640] RAX: ffff88812f9d79e0 RBX: 0000000000001000 RCX: 0000000000000040 [ 242.905959][T26640] RDX: 0000000000001000 RSI: ffff888106b6efc0 RDI: 0000000020018000 [ 242.914010][T26640] RBP: 0000000000001000 R08: 0000000000000000 R09: 0001ffffffffffff [ 242.921997][T26640] R10: 0001888106b6efff R11: ffff88812f9d7000 R12: 00007ffffffff000 [ 242.934723][T26640] R13: 0000000020018040 R14: ffff888106b6e000 R15: 0000000020017040 [ 242.936445][T26636] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 242.942726][T26640] _copy_to_user+0x77/0x90 [ 242.942750][T26640] environ_read+0x248/0x340 [ 242.942769][T26640] do_iter_read+0x2be/0x4b0 [ 242.965271][T26640] do_preadv+0x13b/0x230 [ 242.969573][T26640] ? __cond_resched+0x11/0x40 [ 242.974251][T26640] ? fput+0x2d/0x130 [ 242.993082][T26640] ? ksys_write+0x157/0x180 [ 242.997718][T26640] __x64_sys_preadv+0x54/0x60 [ 243.002444][T26640] do_syscall_64+0x3d/0x90 [ 243.006861][T26640] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 243.012787][T26640] RIP: 0033:0x4665d9 [ 243.016814][T26640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 243.036598][T26640] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 243.045087][T26640] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 243.053042][T26640] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 [ 243.061111][T26640] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 243.069067][T26640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 243.077023][T26640] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 13:43:32 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="0408000903b8ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:32 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYRES16=r1], 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xf8, r1, 0x800, 0x70bd25, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x5}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40824}, 0x40010) set_mempolicy(0x1, &(0x7f0000000000)=0x9, 0x5) r2 = socket$inet6(0xa, 0x2, 0x0) set_mempolicy(0x0, &(0x7f0000000240)=0x8, 0x4) sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x7, {0x0, @empty}}}], 0x20}}], 0x1, 0x0) 13:43:32 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000180)=""/201, 0xc9}], 0x1, 0x8, 0xaea) 13:43:32 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x300) 13:43:32 executing program 1 (fault-call:2 fault-nth:50): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 13:43:32 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="40000000000101040000000000000000020000002400028014000180070001"], 0x40}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0xb00000000065808, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4b16) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000300) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000140)) [ 243.172579][T26658] loop2: detected capacity change from 0 to 264192 [ 243.195240][T26664] FAULT_INJECTION: forcing a failure. [ 243.195240][T26664] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.208495][T26664] CPU: 0 PID: 26664 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 243.213508][T26658] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 243.216919][T26664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 243.216931][T26664] Call Trace: [ 243.216938][T26664] dump_stack_lvl+0xb7/0x103 [ 243.216962][T26664] dump_stack+0x11/0x1a [ 243.248212][T26664] should_fail+0x23c/0x250 [ 243.252638][T26664] should_fail_usercopy+0x16/0x20 [ 243.258008][T26664] _copy_to_user+0x1c/0x90 [ 243.262519][T26664] environ_read+0x248/0x340 [ 243.267268][T26664] do_iter_read+0x2be/0x4b0 13:43:32 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="0408000903b9ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) [ 243.272171][T26664] do_preadv+0x13b/0x230 [ 243.277500][T26664] ? __cond_resched+0x11/0x40 [ 243.282540][T26664] ? fput+0x2d/0x130 [ 243.286582][T26664] ? ksys_write+0x157/0x180 [ 243.292490][T26664] __x64_sys_preadv+0x54/0x60 [ 243.297279][T26664] do_syscall_64+0x3d/0x90 [ 243.302223][T26664] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 243.308134][T26664] RIP: 0033:0x4665d9 [ 243.312031][T26664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 243.331643][T26664] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 243.340404][T26664] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 243.348527][T26664] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 [ 243.356744][T26664] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 243.364939][T26664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 243.372903][T26664] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 [ 243.399834][T26678] loop2: detected capacity change from 0 to 264192 [ 243.407259][T26678] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 13:43:32 executing program 4: prctl$PR_SET_MM(0x23, 0x3, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) 13:43:32 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x406) 13:43:32 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001080), 0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x11, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) accept4(r3, &(0x7f0000000140)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f0000000200)=0x80, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01"], 0x34}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x100007800) 13:43:32 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/rt_acct\x00') ioctl$FITHAW(r0, 0xc0045878) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x200) preadv(r1, &(0x7f0000000280)=[{&(0x7f0000000040)=""/242, 0xf2}, {&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000180)=""/214, 0xd6}], 0x3, 0x0, 0x40) 13:43:32 executing program 1 (fault-call:2 fault-nth:51): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 13:43:32 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="0408000903baff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:33 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x500) [ 243.577240][T26695] loop2: detected capacity change from 0 to 264192 [ 243.586172][T26697] FAULT_INJECTION: forcing a failure. [ 243.586172][T26697] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 243.599841][T26697] CPU: 0 PID: 26697 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 243.606910][T26695] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 243.608437][T26697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 13:43:33 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') ioctl$CHAR_RAW_FRASET(r0, 0x1264, &(0x7f0000000000)=0xfff) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x1000000, 0xffffffffffffffff) [ 243.627628][T26697] Call Trace: [ 243.630965][T26697] dump_stack_lvl+0xb7/0x103 [ 243.635570][T26697] dump_stack+0x11/0x1a [ 243.639739][T26697] should_fail+0x23c/0x250 [ 243.644273][T26697] __alloc_pages+0x102/0x320 [ 243.648869][T26697] alloc_pages_vma+0x391/0x660 [ 243.653791][T26697] ? follow_page_mask+0xceb/0x1040 [ 243.658909][T26697] do_anonymous_page+0x16e/0x8a0 [ 243.663958][T26697] ? strlcpy+0x65/0x80 [ 243.668030][T26697] handle_mm_fault+0x966/0x1a60 [ 243.672930][T26697] ? perf_trace_mmap_lock_acquire_returned+0x1e0/0x210 [ 243.680196][T26697] do_user_addr_fault+0x609/0xc00 [ 243.685314][T26697] exc_page_fault+0x91/0x220 [ 243.689905][T26697] asm_exc_page_fault+0x1e/0x30 [ 243.694760][T26697] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 243.701357][T26697] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 83 f8 [ 243.721155][T26697] RSP: 0018:ffffc9000ef0fce0 EFLAGS: 00010206 [ 243.727262][T26697] RAX: ffff88812fa889e0 RBX: 0000000000001000 RCX: 0000000000000040 [ 243.735327][T26697] RDX: 0000000000001000 RSI: ffff8881078b3fc0 RDI: 0000000020019000 [ 243.744289][T26697] RBP: 0000000000001000 R08: 0000000000000000 R09: 0001ffffffffffff [ 243.752384][T26697] R10: 00018881078b3fff R11: ffff88812fa88000 R12: 00007ffffffff000 [ 243.761138][T26697] R13: 0000000020019040 R14: ffff8881078b3000 R15: 0000000020018040 [ 243.769190][T26697] _copy_to_user+0x77/0x90 [ 243.773614][T26697] environ_read+0x248/0x340 [ 243.778127][T26697] do_iter_read+0x2be/0x4b0 [ 243.782640][T26697] do_preadv+0x13b/0x230 [ 243.786899][T26697] ? __cond_resched+0x11/0x40 [ 243.791580][T26697] ? fput+0x2d/0x130 [ 243.795495][T26697] ? ksys_write+0x157/0x180 [ 243.799998][T26697] __x64_sys_preadv+0x54/0x60 [ 243.804755][T26697] do_syscall_64+0x3d/0x90 [ 243.809188][T26697] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 243.815091][T26697] RIP: 0033:0x4665d9 [ 243.818995][T26697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 243.838606][T26697] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 243.847015][T26697] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 243.855062][T26697] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 [ 243.863037][T26697] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 243.871094][T26697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 243.880136][T26697] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 13:43:33 executing program 1 (fault-call:2 fault-nth:52): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 13:43:33 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="0408000903bbff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:33 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0xfffffffffffffffd, 0x0) tkill(r0, 0x38) syz_open_procfs(r0, &(0x7f0000000000)='net/rt_cache\x00') 13:43:33 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x600) [ 243.974466][T26723] FAULT_INJECTION: forcing a failure. [ 243.974466][T26723] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.978401][T26725] loop2: detected capacity change from 0 to 264192 [ 243.987699][T26723] CPU: 1 PID: 26723 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 243.987718][T26723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 243.987726][T26723] Call Trace: [ 243.987733][T26723] dump_stack_lvl+0xb7/0x103 [ 244.020486][T26723] dump_stack+0x11/0x1a [ 244.024652][T26723] should_fail+0x23c/0x250 [ 244.029078][T26723] should_fail_usercopy+0x16/0x20 [ 244.034107][T26723] _copy_to_user+0x1c/0x90 [ 244.038524][T26723] environ_read+0x248/0x340 [ 244.043029][T26723] do_iter_read+0x2be/0x4b0 [ 244.047528][T26723] do_preadv+0x13b/0x230 [ 244.051835][T26723] ? __cond_resched+0x11/0x40 [ 244.056632][T26723] ? fput+0x2d/0x130 [ 244.060580][T26723] ? ksys_write+0x157/0x180 [ 244.066219][T26723] __x64_sys_preadv+0x54/0x60 [ 244.071079][T26723] do_syscall_64+0x3d/0x90 [ 244.075512][T26723] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 244.081477][T26723] RIP: 0033:0x4665d9 [ 244.085377][T26723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 244.104990][T26723] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 244.113409][T26723] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 13:43:33 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ae0000/0x2000)=nil, 0x2000, 0x0, r0) r1 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f00002d6000/0x4000)=nil, 0x4000, 0x3000009, r1) pkey_mprotect(&(0x7f00002d5000/0x1000)=nil, 0x1000, 0x1000000, r0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r2, &(0x7f0000001400)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x7fff00, 0x0) [ 244.121400][T26723] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 [ 244.129813][T26723] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 244.137789][T26723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 244.145766][T26723] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 [ 244.157441][T26725] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 13:43:33 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="0408000903bcff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) [ 244.266459][T26740] loop2: detected capacity change from 0 to 264192 [ 244.282240][T26740] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 13:43:33 executing program 5: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000180)=""/201, 0xc9}], 0x1, 0x8, 0xaea) 13:43:33 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) preadv(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x480000, 0x2}, 0x18) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000100)=0x6) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000200)={'security\x00', 0x0, [0xffff, 0x6, 0x2, 0x4, 0x2c]}, &(0x7f0000000140)=0x54) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[r1, r2], 0x2) openat$cgroup_ro(r1, &(0x7f00000001c0)='cpuacct.usage_user\x00', 0x0, 0x0) 13:43:33 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x604) 13:43:33 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) mmap(&(0x7f00002d6000/0x3000)=nil, 0x3000, 0x1000000, 0x1010, r1, 0x9d6dd000) 13:43:33 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="0408000903bdff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:33 executing program 1 (fault-call:2 fault-nth:53): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 244.495312][T26757] FAULT_INJECTION: forcing a failure. [ 244.495312][T26757] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 244.499612][T26758] loop2: detected capacity change from 0 to 264192 [ 244.508687][T26757] CPU: 0 PID: 26757 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 244.508709][T26757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 244.508718][T26757] Call Trace: [ 244.508723][T26757] dump_stack_lvl+0xb7/0x103 [ 244.541491][T26757] dump_stack+0x11/0x1a [ 244.545693][T26757] should_fail+0x23c/0x250 [ 244.550091][T26757] __alloc_pages+0x102/0x320 [ 244.554663][T26757] alloc_pages_vma+0x391/0x660 [ 244.559404][T26757] ? follow_page_mask+0xceb/0x1040 [ 244.564555][T26757] do_anonymous_page+0x16e/0x8a0 [ 244.569471][T26757] ? strlcpy+0x65/0x80 [ 244.573597][T26757] handle_mm_fault+0x966/0x1a60 [ 244.578485][T26757] ? perf_trace_mmap_lock_acquire_returned+0x1e0/0x210 [ 244.585546][T26757] do_user_addr_fault+0x609/0xc00 [ 244.590631][T26757] exc_page_fault+0x91/0x220 [ 244.595199][T26757] asm_exc_page_fault+0x1e/0x30 [ 244.600075][T26757] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 244.606647][T26757] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 83 f8 [ 244.626243][T26757] RSP: 0018:ffffc9000fb1bce0 EFLAGS: 00010206 [ 244.632295][T26757] RAX: ffff88812fc19a20 RBX: 0000000000001000 RCX: 0000000000000040 [ 244.640333][T26757] RDX: 0000000000001000 RSI: ffff888108b5afc0 RDI: 000000002001a000 [ 244.648285][T26757] RBP: 0000000000001000 R08: 0000000000000000 R09: 0001ffffffffffff [ 244.656237][T26757] R10: 0001888108b5afff R11: ffff88812fc19040 R12: 00007ffffffff000 [ 244.664189][T26757] R13: 000000002001a040 R14: ffff888108b5a000 R15: 0000000020019040 [ 244.672153][T26757] _copy_to_user+0x77/0x90 [ 244.676569][T26757] environ_read+0x248/0x340 [ 244.681226][T26757] do_iter_read+0x2be/0x4b0 [ 244.685835][T26757] do_preadv+0x13b/0x230 [ 244.690056][T26757] ? __cond_resched+0x11/0x40 [ 244.694774][T26757] ? fput+0x2d/0x130 [ 244.698716][T26757] ? ksys_write+0x157/0x180 [ 244.703262][T26757] __x64_sys_preadv+0x54/0x60 [ 244.707919][T26757] do_syscall_64+0x3d/0x90 [ 244.712318][T26757] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 244.718336][T26757] RIP: 0033:0x4665d9 [ 244.722224][T26757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 13:43:34 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f00000000c0)=""/117, 0x75}], 0x1, 0x8, 0x0) [ 244.741809][T26757] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 244.750264][T26757] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 244.758220][T26757] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 [ 244.766169][T26757] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 244.774133][T26757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 244.782084][T26757] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 13:43:34 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x700) 13:43:34 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="0408000903beff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) [ 244.813592][T26758] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 13:43:34 executing program 5: perf_event_open(0x0, 0x0, 0x1000000, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10490}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r0 = open(&(0x7f0000000100)='./bus\x00', 0x10600c2, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) r2 = openat$incfs(r1, &(0x7f0000000080)='.pending_reads\x00', 0x100, 0x104) execveat(r2, &(0x7f0000000180)='./bus\x00', &(0x7f00000001c0), &(0x7f0000000400)=[&(0x7f00000000c0)='s\x8c\a\x00\x00\x00\x00\x00\x00\x00\xd6\"\xbb-', &(0x7f0000000300)='comm\x00', &(0x7f0000000340)='y\az\x04\xc5', &(0x7f0000000380)='-\x00'], 0x800) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x10, 0xffffffffffffffff, 0x0) ftruncate(r1, 0x208200) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000000)=0x1704, 0x4) sendfile(0xffffffffffffffff, r0, 0x0, 0x8000fffffffe) r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x7) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) mmap(&(0x7f00005cb000/0x4000)=nil, 0x4000, 0x3000006, 0x12, 0xffffffffffffffff, 0x2000) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$dupfd(r3, 0x406, r4) 13:43:34 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x900) 13:43:34 executing program 1 (fault-call:2 fault-nth:54): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 13:43:34 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000140)='attr/exec\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/116, 0x74}, {&(0x7f0000000180)=""/255, 0xff}], 0x2, 0x0, 0x0) preadv(r2, &(0x7f0000002700)=[{&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000000040)=""/60, 0x3c}, {&(0x7f0000001280)=""/229, 0xe5}, {&(0x7f0000001380)=""/248, 0xf8}, {&(0x7f0000001480)=""/187, 0xbb}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/203, 0xcb}, {&(0x7f0000000080)=""/19, 0x13}, {&(0x7f0000002640)=""/164, 0xa4}], 0x9, 0xc2b, 0x4ad0811a) [ 244.931005][T26780] loop2: detected capacity change from 0 to 264192 [ 244.956564][T26780] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 244.987241][T26793] FAULT_INJECTION: forcing a failure. [ 244.987241][T26793] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 245.000371][T26793] CPU: 1 PID: 26793 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 245.008786][T26793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 245.018847][T26793] Call Trace: [ 245.022130][T26793] dump_stack_lvl+0xb7/0x103 [ 245.026998][T26793] dump_stack+0x11/0x1a [ 245.031166][T26793] should_fail+0x23c/0x250 [ 245.035640][T26793] should_fail_usercopy+0x16/0x20 [ 245.040687][T26793] _copy_to_user+0x1c/0x90 [ 245.045144][T26793] environ_read+0x248/0x340 [ 245.049719][T26793] do_iter_read+0x2be/0x4b0 [ 245.054236][T26793] do_preadv+0x13b/0x230 [ 245.058489][T26793] ? __cond_resched+0x11/0x40 [ 245.063265][T26793] ? fput+0x2d/0x130 [ 245.067173][T26793] ? ksys_write+0x157/0x180 [ 245.071678][T26793] __x64_sys_preadv+0x54/0x60 [ 245.076362][T26793] do_syscall_64+0x3d/0x90 [ 245.080792][T26793] entry_SYSCALL_64_after_hwframe+0x44/0xae 13:43:34 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ae0000/0x2000)=nil, 0x2000, 0x0, r0) pkey_mprotect(&(0x7f00002d5000/0x4000)=nil, 0x4000, 0x1, r0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) 13:43:34 executing program 5: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) mmap(&(0x7f00002d6000/0x3000)=nil, 0x3000, 0x1000000, 0x1010, r1, 0x9d6dd000) 13:43:34 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="0408000903bfff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:34 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0xec0) 13:43:34 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000540)=""/117, 0x75}, {&(0x7f0000000180)=""/244, 0xf4}, {&(0x7f0000000280)=""/135, 0x87}, {&(0x7f0000000340)=""/213, 0xd5}, {&(0x7f0000000440)=""/225, 0xe1}], 0x5, 0x0, 0x5b56) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0xffffffffffffffff) [ 245.086697][T26793] RIP: 0033:0x4665d9 [ 245.090594][T26793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 245.110203][T26793] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 245.118618][T26793] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 245.126592][T26793] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 13:43:34 executing program 5: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) r1 = accept4$inet(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x800) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) dup2(r1, r2) r3 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_tcp(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) [ 245.134558][T26793] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 245.142610][T26793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 245.150576][T26793] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 [ 245.177684][T26812] 9pnet_virtio: no channels available for device 127.0.0.1 13:43:34 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x2800) 13:43:34 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) mmap(&(0x7f00002d4000/0x4000)=nil, 0x4000, 0x0, 0x101011, r0, 0x54cf6000) 13:43:34 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x2, 0x1) ptrace$cont(0x9, r0, 0x0, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000140)='net/if_inet6\x00') preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/139, 0x8b}], 0x1, 0x1000000, 0xffff) prctl$PR_SET_MM(0x23, 0x6, &(0x7f00002d5000/0x4000)=nil) 13:43:34 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x60, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3f80, 0x58}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@pspoll={{}, @default, @initial, @device_b}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000810}, 0x800) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@getpolicy={0x58, 0x15, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@private1}}, [@XFRMA_IF_ID={0x8}]}, 0x58}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 13:43:34 executing program 1 (fault-call:2 fault-nth:55): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 245.185619][T26814] 9pnet_virtio: no channels available for device 127.0.0.1 [ 245.202427][T26819] loop2: detected capacity change from 0 to 264192 13:43:34 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000400)) r1 = fork() r2 = syz_open_procfs(r1, &(0x7f00000000c0)='net/netfilter\x00') preadv(r2, &(0x7f0000000100)=[{&(0x7f0000000040)=""/109, 0x6d}, {&(0x7f0000000180)=""/224, 0xe0}, {&(0x7f0000000000)=""/46, 0x2e}, {&(0x7f0000000280)=""/207, 0xcf}], 0x4, 0x1000000, 0x0) [ 245.241122][T26819] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 245.260349][T26831] FAULT_INJECTION: forcing a failure. [ 245.260349][T26831] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 245.273618][T26831] CPU: 0 PID: 26831 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 245.282045][T26831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 245.292357][T26831] Call Trace: [ 245.295677][T26831] dump_stack_lvl+0xb7/0x103 [ 245.300322][T26831] dump_stack+0x11/0x1a [ 245.304516][T26831] should_fail+0x23c/0x250 [ 245.308938][T26831] __alloc_pages+0x102/0x320 [ 245.313523][T26831] alloc_pages_vma+0x391/0x660 [ 245.318335][T26831] ? follow_page_mask+0xceb/0x1040 [ 245.323573][T26831] do_anonymous_page+0x16e/0x8a0 [ 245.328546][T26831] ? strlcpy+0x65/0x80 [ 245.332615][T26831] handle_mm_fault+0x966/0x1a60 [ 245.337460][T26831] ? perf_trace_mmap_lock_acquire_returned+0x1e0/0x210 [ 245.344413][T26831] do_user_addr_fault+0x609/0xc00 [ 245.349480][T26831] exc_page_fault+0x91/0x220 [ 245.354067][T26831] asm_exc_page_fault+0x1e/0x30 [ 245.358910][T26831] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 245.365515][T26831] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 83 f8 [ 245.385120][T26831] RSP: 0018:ffffc9000fbdfce0 EFLAGS: 00010206 [ 245.391189][T26831] RAX: ffff8881076c1a20 RBX: 0000000000001000 RCX: 0000000000000040 [ 245.399155][T26831] RDX: 0000000000001000 RSI: ffff88812ffe5fc0 RDI: 000000002001b000 [ 245.407125][T26831] RBP: 0000000000001000 R08: 0000000000000000 R09: 0001ffffffffffff [ 245.415141][T26831] R10: 000188812ffe5fff R11: ffff8881076c1040 R12: 00007ffffffff000 [ 245.423111][T26831] R13: 000000002001b040 R14: ffff88812ffe5000 R15: 000000002001a040 [ 245.431084][T26831] _copy_to_user+0x77/0x90 [ 245.435500][T26831] environ_read+0x248/0x340 13:43:34 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/igmp6\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/69, 0x45}], 0x1, 0x1, 0xffffffff) 13:43:34 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x200000bad]}, 0x8) fcntl$setstatus(r0, 0x4, 0x400) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r1, 0x3312, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) r3 = dup3(r0, r2, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x3000)=nil) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000180)=""/213) unshare(0x480) r4 = creat(&(0x7f0000000700)='./file0\x00', 0x0) signalfd(r4, &(0x7f0000000000), 0x8) prctl$PR_SET_MM(0x23, 0x7, &(0x7f00002d7000/0x1000)=nil) accept$unix(r3, 0x0, &(0x7f00000000c0)) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r5, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x200, 0x0) connect$inet(r6, &(0x7f0000000300)={0x2, 0x4e21, @remote}, 0x10) [ 245.440007][T26831] do_iter_read+0x2be/0x4b0 [ 245.444509][T26831] do_preadv+0x13b/0x230 [ 245.448781][T26831] ? __cond_resched+0x11/0x40 [ 245.453452][T26831] ? fput+0x2d/0x130 [ 245.457348][T26831] ? ksys_write+0x157/0x180 [ 245.461854][T26831] __x64_sys_preadv+0x54/0x60 [ 245.467391][T26831] do_syscall_64+0x3d/0x90 [ 245.471821][T26831] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 245.477723][T26831] RIP: 0033:0x4665d9 [ 245.481741][T26831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 245.501614][T26831] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 245.510028][T26831] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 245.518183][T26831] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 [ 245.526151][T26831] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 245.534116][T26831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 13:43:35 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="0408000903c0ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:35 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') pkey_mprotect(&(0x7f00002d5000/0x2000)=nil, 0x2000, 0x1000001, 0xffffffffffffffff) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) 13:43:35 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x2c00) [ 245.542256][T26831] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 13:43:35 executing program 1 (fault-call:2 fault-nth:56): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 245.629427][T26868] loop2: detected capacity change from 0 to 264192 [ 245.632725][T26870] FAULT_INJECTION: forcing a failure. [ 245.632725][T26870] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 245.649120][T26870] CPU: 1 PID: 26870 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 245.657534][T26870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 245.667583][T26870] Call Trace: [ 245.670871][T26870] dump_stack_lvl+0xb7/0x103 [ 245.675453][T26870] dump_stack+0x11/0x1a [ 245.679685][T26870] should_fail+0x23c/0x250 [ 245.684097][T26870] should_fail_usercopy+0x16/0x20 [ 245.689104][T26870] _copy_to_user+0x1c/0x90 [ 245.693502][T26870] environ_read+0x248/0x340 [ 245.697987][T26870] do_iter_read+0x2be/0x4b0 [ 245.702470][T26870] do_preadv+0x13b/0x230 [ 245.706691][T26870] ? __cond_resched+0x11/0x40 [ 245.711348][T26870] ? fput+0x2d/0x130 [ 245.715301][T26870] ? ksys_write+0x157/0x180 [ 245.719796][T26870] __x64_sys_preadv+0x54/0x60 [ 245.724452][T26870] do_syscall_64+0x3d/0x90 [ 245.728850][T26870] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 245.734793][T26870] RIP: 0033:0x4665d9 [ 245.738667][T26870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 245.758339][T26870] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 245.767855][T26870] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 13:43:35 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f00000000c0)={0x3, 0x3, 0x9, 0x1, 0x5, "833ac8e2104ed2d1"}) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) 13:43:35 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0xc00e) [ 245.776266][T26870] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 [ 245.785293][T26870] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 245.794323][T26870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 245.802649][T26870] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 13:43:35 executing program 1 (fault-call:2 fault-nth:57): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 245.870672][T26868] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 245.932146][T26887] FAULT_INJECTION: forcing a failure. [ 245.932146][T26887] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 245.945528][T26887] CPU: 0 PID: 26887 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 245.954041][T26887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 245.964530][T26887] Call Trace: [ 245.967889][T26887] dump_stack_lvl+0xb7/0x103 [ 245.972507][T26887] dump_stack+0x11/0x1a [ 245.976659][T26887] should_fail+0x23c/0x250 [ 245.981219][T26887] __alloc_pages+0x102/0x320 [ 245.985811][T26887] alloc_pages_vma+0x391/0x660 [ 245.990925][T26887] ? follow_page_mask+0xceb/0x1040 [ 245.996096][T26887] do_anonymous_page+0x16e/0x8a0 [ 246.001395][T26887] ? strlcpy+0x65/0x80 [ 246.005510][T26887] handle_mm_fault+0x966/0x1a60 [ 246.010358][T26887] ? perf_trace_mmap_lock_acquire_returned+0x1e0/0x210 [ 246.017208][T26887] do_user_addr_fault+0x609/0xc00 [ 246.022224][T26887] exc_page_fault+0x91/0x220 [ 246.026824][T26887] asm_exc_page_fault+0x1e/0x30 [ 246.031673][T26887] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 246.038281][T26887] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 83 f8 [ 246.058221][T26887] RSP: 0018:ffffc9000fd67ce0 EFLAGS: 00010206 [ 246.064411][T26887] RAX: ffff888133cbaa60 RBX: 0000000000001000 RCX: 0000000000000040 [ 246.072887][T26887] RDX: 0000000000001000 RSI: ffff88812f9bffc0 RDI: 000000002001c000 [ 246.081189][T26887] RBP: 0000000000001000 R08: 0000000000000000 R09: 0001ffffffffffff [ 246.089181][T26887] R10: 000188812f9bffff R11: ffff888133cba080 R12: 00007ffffffff000 [ 246.097150][T26887] R13: 000000002001c040 R14: ffff88812f9bf000 R15: 000000002001b040 [ 246.105209][T26887] _copy_to_user+0x77/0x90 [ 246.109630][T26887] environ_read+0x248/0x340 [ 246.114328][T26887] do_iter_read+0x2be/0x4b0 [ 246.119090][T26887] do_preadv+0x13b/0x230 [ 246.123339][T26887] ? __cond_resched+0x11/0x40 [ 246.128033][T26887] ? fput+0x2d/0x130 13:43:35 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000380)) timer_settime(r1, 0x1, 0x0, &(0x7f0000000400)) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) timer_gettime(r1, &(0x7f00000001c0)) poll(0x0, 0x0, 0x201) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x4df3, 0x0) mq_notify(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, @thr={0x0, &(0x7f0000000040)="4ffb90075ded8e3846255e06c6263d9f4556f671c2e9a894"}}) syz_open_dev$tty20(0xc, 0x4, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) 13:43:35 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) prctl$PR_SET_MM(0x23, 0x5, &(0x7f00002d5000/0x3000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) 13:43:35 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x34000) 13:43:35 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) mlock2(&(0x7f00002d7000/0x3000)=nil, 0x3000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)=""/113, 0xfffffffffffffd3f}], 0x1, 0x1000000, 0x8001) prctl$PR_SET_MM(0x23, 0x1, &(0x7f00002d6000/0x2000)=nil) mlock(&(0x7f00002d5000/0x1000)=nil, 0x1000) r1 = openat$cgroup(r0, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000240)=0x5) r3 = open_tree(r0, &(0x7f00000000c0)='./file0\x00', 0x8002) vmsplice(r3, &(0x7f0000000100)=[{&(0x7f0000000180)="150b710f4537d152699165f31ed84a46d4d91e748bf89956308cbf17e570746ab1e4a3f5bc559ddfcec8d5859ccdfaac47c30599b07cab3d98dd500c0b06fd69851fe80eac950ad157d3ef62d4fc84e26ed1cb68660c852c6d0de5cfdea3ca8a47", 0x61}], 0x1, 0x2) [ 246.131935][T26887] ? ksys_write+0x157/0x180 [ 246.136497][T26887] __x64_sys_preadv+0x54/0x60 [ 246.141357][T26887] do_syscall_64+0x3d/0x90 [ 246.145814][T26887] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 246.151724][T26887] RIP: 0033:0x4665d9 [ 246.155707][T26887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 13:43:35 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="0408000903c1ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) [ 246.175491][T26887] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 246.183905][T26887] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 246.191876][T26887] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 [ 246.200139][T26887] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 246.208196][T26887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 246.216244][T26887] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 13:43:35 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x400300) 13:43:35 executing program 3: prctl$PR_SET_MM(0x23, 0x7, &(0x7f00002d6000/0x4000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x71}], 0x1, 0x8, 0xcb) 13:43:35 executing program 3: prctl$PR_SET_MM(0x23, 0x9, &(0x7f00002d6000/0x2000)=nil) prctl$PR_SET_MM(0x23, 0x9, &(0x7f00002d6000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000000000), 0x0, 0x1000000, 0x0) 13:43:35 executing program 1 (fault-call:2 fault-nth:58): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 13:43:35 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x1000000) [ 246.293505][T26912] loop2: detected capacity change from 0 to 264192 [ 246.334013][T26922] FAULT_INJECTION: forcing a failure. [ 246.334013][T26922] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.347254][T26922] CPU: 0 PID: 26922 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 246.355747][T26922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 246.365877][T26922] Call Trace: [ 246.369157][T26922] dump_stack_lvl+0xb7/0x103 [ 246.373791][T26922] dump_stack+0x11/0x1a [ 246.377950][T26922] should_fail+0x23c/0x250 [ 246.382366][T26922] should_fail_usercopy+0x16/0x20 [ 246.387520][T26922] _copy_to_user+0x1c/0x90 [ 246.387640][T26912] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 246.391935][T26922] environ_read+0x248/0x340 [ 246.391957][T26922] do_iter_read+0x2be/0x4b0 [ 246.409995][T26922] do_preadv+0x13b/0x230 [ 246.414244][T26922] ? __cond_resched+0x11/0x40 [ 246.418923][T26922] ? fput+0x2d/0x130 [ 246.422814][T26922] ? ksys_write+0x157/0x180 [ 246.427322][T26922] __x64_sys_preadv+0x54/0x60 13:43:35 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000180)={"57e8dd372a83e64e4d9e80bcc167c897", 0x0, 0x0, {0x80, 0x3672c779}, {0x9, 0x800}, 0x100000001, [0x9, 0x5, 0x101, 0x200, 0x8, 0x8001, 0x8, 0x6, 0x3ff, 0xa0, 0x6, 0x4, 0x5ed, 0x2]}) 13:43:35 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000002440)=[{&(0x7f0000000180)=""/205, 0xcd}, {&(0x7f00000000c0)=""/69, 0x45}, {&(0x7f0000000280)=""/127, 0x7f}, {&(0x7f0000000300)=""/137, 0x89}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f0000001440)=""/4096, 0x1000}], 0x6, 0xff, 0x960) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000024c0)=""/108, 0x6c}, {&(0x7f0000002540)=""/148, 0x94}, {&(0x7f0000002600)=""/88, 0x58}, {&(0x7f0000002680)=""/245, 0xf5}], 0x4) close_range(r0, r0, 0x0) [ 246.431995][T26922] do_syscall_64+0x3d/0x90 [ 246.436510][T26922] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 246.442405][T26922] RIP: 0033:0x4665d9 [ 246.446293][T26922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 246.465891][T26922] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 246.474430][T26922] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 246.482401][T26922] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 [ 246.490364][T26922] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 246.498417][T26922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 246.506438][T26922] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 13:43:36 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000380)) timer_settime(r1, 0x1, 0x0, &(0x7f0000000400)) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) timer_gettime(r1, &(0x7f00000001c0)) poll(0x0, 0x0, 0x201) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x4df3, 0x0) mq_notify(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, @thr={0x0, &(0x7f0000000040)="4ffb90075ded8e3846255e06c6263d9f4556f671c2e9a894"}}) syz_open_dev$tty20(0xc, 0x4, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) 13:43:36 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="0408000903c2ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:36 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x2000000) 13:43:36 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000000)={0x0, 0x1, 0x11}) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) 13:43:36 executing program 1 (fault-call:2 fault-nth:59): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 13:43:36 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) r2 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ae0000/0x2000)=nil, 0x2000, 0x0, r2) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000412000/0x2000)=nil) pkey_mprotect(&(0x7f000063e000/0x3000)=nil, 0x3000, 0x1000008, r2) syncfs(r1) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap$perf(&(0x7f00002d5000/0x2000)=nil, 0x2000, 0x3000001, 0x12, r1, 0x4587) [ 246.816047][T26964] loop2: detected capacity change from 0 to 264192 [ 246.822055][T26967] FAULT_INJECTION: forcing a failure. [ 246.822055][T26967] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 246.835830][T26967] CPU: 1 PID: 26967 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 246.844251][T26967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 246.854308][T26967] Call Trace: [ 246.857687][T26967] dump_stack_lvl+0xb7/0x103 [ 246.862281][T26967] dump_stack+0x11/0x1a [ 246.866440][T26967] should_fail+0x23c/0x250 [ 246.870869][T26967] __alloc_pages+0x102/0x320 [ 246.875450][T26967] alloc_pages_vma+0x391/0x660 [ 246.880246][T26967] ? follow_page_mask+0xceb/0x1040 [ 246.885446][T26967] do_anonymous_page+0x16e/0x8a0 [ 246.890443][T26967] ? strlcpy+0x65/0x80 [ 246.894508][T26967] handle_mm_fault+0x966/0x1a60 [ 246.899355][T26967] ? perf_trace_mmap_lock_acquire_returned+0x1e0/0x210 [ 246.906270][T26967] do_user_addr_fault+0x609/0xc00 [ 246.911297][T26967] exc_page_fault+0x91/0x220 [ 246.915903][T26967] asm_exc_page_fault+0x1e/0x30 [ 246.920799][T26967] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 246.927385][T26967] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 83 f8 [ 246.947054][T26967] RSP: 0018:ffffc90010f97ce0 EFLAGS: 00010206 [ 246.953209][T26967] RAX: ffff8881311c59e0 RBX: 0000000000001000 RCX: 0000000000000040 [ 246.961357][T26967] RDX: 0000000000001000 RSI: ffff8881074b7fc0 RDI: 000000002001d000 [ 246.969311][T26967] RBP: 0000000000001000 R08: 0000000000000000 R09: 0001ffffffffffff [ 246.977350][T26967] R10: 00018881074b7fff R11: ffff8881311c5000 R12: 00007ffffffff000 [ 246.985420][T26967] R13: 000000002001d040 R14: ffff8881074b7000 R15: 000000002001c040 [ 246.993379][T26967] _copy_to_user+0x77/0x90 [ 246.997824][T26967] environ_read+0x248/0x340 [ 247.002328][T26967] do_iter_read+0x2be/0x4b0 [ 247.006817][T26967] do_preadv+0x13b/0x230 [ 247.011141][T26967] ? __cond_resched+0x11/0x40 [ 247.015972][T26967] ? fput+0x2d/0x130 [ 247.019926][T26967] ? ksys_write+0x157/0x180 [ 247.024407][T26967] __x64_sys_preadv+0x54/0x60 [ 247.029084][T26967] do_syscall_64+0x3d/0x90 [ 247.033483][T26967] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 247.039420][T26967] RIP: 0033:0x4665d9 [ 247.043404][T26967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 13:43:36 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000180)=""/129, 0x81}], 0x1, 0xffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000000)={0x0, 0x8, [0x2, 0x2, 0x4eb8, 0x0, 0xe00000000000, 0x7]}) [ 247.063006][T26967] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 247.072209][T26967] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 247.080163][T26967] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 [ 247.088139][T26967] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 247.096110][T26967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 247.104275][T26967] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 13:43:36 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x200000) sendfile(r0, 0xffffffffffffffff, &(0x7f00000000c0)=0xc4e, 0xffffffffffffffe1) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) 13:43:36 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x3000000) 13:43:36 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/106, 0x6a}, {&(0x7f00000000c0)=""/59, 0x3b}], 0x2, 0x10, 0x1) [ 247.116761][T26964] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 13:43:36 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="0408000903c3ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:36 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x71}], 0x1, 0x20000000, 0x0) [ 247.226872][T26996] loop2: detected capacity change from 0 to 264192 [ 247.238359][T26996] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 13:43:36 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x71}], 0x1, 0x1000000, 0x0) 13:43:36 executing program 1 (fault-call:2 fault-nth:60): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 13:43:36 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x4000000) 13:43:36 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x10080, 0x0) ioctl$BLKROGET(r1, 0x125e, &(0x7f00000000c0)) r2 = socket(0x25, 0x6, 0x5) preadv(r2, &(0x7f0000000380)=[{&(0x7f0000000100)=""/45, 0x2d}, {&(0x7f0000000180)=""/251, 0xfb}, {&(0x7f0000000280)=""/237, 0xed}], 0x3, 0xf7, 0x6) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) 13:43:36 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/116, 0x74}, {&(0x7f00000000c0)=""/53, 0x35}, {&(0x7f0000000100)=""/159, 0x9f}, {&(0x7f00000001c0)=""/180, 0xb4}, {&(0x7f0000000280)=""/69, 0x45}, {&(0x7f0000000300)=""/9, 0x9}, {&(0x7f0000000440)=""/83, 0x53}], 0x7, 0xd9f, 0x0) clone(0x66100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$netlink(0xa, 0x3, 0x0) 13:43:36 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="0408000900f0ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:36 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/140, 0x8c}, {&(0x7f0000000180)=""/212, 0xd4}, {&(0x7f0000000280)=""/129, 0x81}, {&(0x7f00000004c0)=""/213, 0xd5}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x5, 0x1000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) preadv(r1, &(0x7f00000017c0)=[{&(0x7f0000000100)=""/7, 0x7}, {&(0x7f0000000340)=""/97, 0x61}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/93, 0x5d}, {&(0x7f00000015c0)=""/202, 0xca}, {&(0x7f00000016c0)=""/203, 0xcb}], 0x6, 0x7ff, 0x2) [ 247.351277][T27019] loop2: detected capacity change from 0 to 264192 [ 247.359265][T27018] FAULT_INJECTION: forcing a failure. [ 247.359265][T27018] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.372351][T27018] CPU: 1 PID: 27018 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 247.380849][T27018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 247.390978][T27018] Call Trace: [ 247.394264][T27018] dump_stack_lvl+0xb7/0x103 [ 247.398872][T27018] dump_stack+0x11/0x1a [ 247.403038][T27018] should_fail+0x23c/0x250 [ 247.407460][T27018] should_fail_usercopy+0x16/0x20 [ 247.412492][T27018] _copy_to_user+0x1c/0x90 [ 247.416917][T27018] environ_read+0x248/0x340 [ 247.419806][T27019] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 247.421419][T27018] do_iter_read+0x2be/0x4b0 [ 247.434946][T27018] do_preadv+0x13b/0x230 [ 247.439178][T27018] ? __cond_resched+0x11/0x40 [ 247.443864][T27018] ? fput+0x2d/0x130 [ 247.447874][T27018] ? ksys_write+0x157/0x180 [ 247.452451][T27018] __x64_sys_preadv+0x54/0x60 [ 247.457108][T27018] do_syscall_64+0x3d/0x90 [ 247.461598][T27018] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 247.467477][T27018] RIP: 0033:0x4665d9 [ 247.471350][T27018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 247.491082][T27018] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 13:43:36 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x4060000) 13:43:36 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') mmap(&(0x7f00002d5000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0xabaaf000) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/113, 0x71}, {&(0x7f00000000c0)=""/105, 0x69}, {&(0x7f0000000180)=""/183, 0xb7}], 0x3, 0x1000000, 0x0) 13:43:36 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)='stat\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x71}], 0x1, 0x1000000, 0x0) [ 247.499483][T27018] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 247.507462][T27018] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 [ 247.515528][T27018] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 247.523492][T27018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 247.531458][T27018] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 13:43:37 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x5000000) 13:43:37 executing program 5: r0 = fork() r1 = pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x9, 0x0, 0x0) waitid$P_PIDFD(0x3, r1, 0x0, 0xc, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0xff) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000430000/0x1000)=nil, 0x1000, 0x1800003, 0x8010, r1, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 13:43:37 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000180)={0x0, 0x0, "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", "6ab4488678b6b0d8f0b2ae3b88d9d731eefb5d3a44f33f006e607be96f527668ba4e6aa6ee702934049afa89cba48989427216148c99bf9047dee043a15baa72baf5a99b46d9ce4a095d404f402e778c804e007cbcf00826f6c23137f9589f74a99df6008c85dbea1b58f531cdeef95959ef0b93226b2b8238a9166fca24dfdc7866e18513c21bf09914a2c1c5108e5dbc6ab641e67e64a16d29ced7cfacd8d94bd0a802cf30bbedbda6a65a186e299c4450ea448fd722905e22c69367f62d8ed6680ab17c1593a8373fdac66770d57185f226eac906fafb699c365b65587ab0145c2f0261ebba8997ae014384bfecd46f2c3e1d48d6b4c1205b34b6a66f62d90db1f22e30552892a6fed377d5e05329d0602e1c901a3f8b97ff7acaff329555539979cea9be895814fb1c82b38b79acbd99b853cba276325cb6b8d70798b997161ebf6c87b643d377e0c4a290417a241ac33ec0896f0349a8e5e082cf4653cbb0c50f37523e6e66ef435c0199d066213d84c4daa95dac9fee10d761410ef1034306e131295b31180791dcc23b85736d12dff895a365637bed366497adc091f12017c2d464bd8c38eb84176707f50d461a0e407b8852498960fe858ef0ab559a1fc6a7efba1aa4a860b8ee961d7bc0ba4c9fd742c33cd3312eb9592cb87326073c74abbc97b825359055ec212b821ce0cea85497270b8c762833660e909a0c18a0572ed1757cf90b7ebd47ce9c960d012c1469097df64d7d9ba9a43a242d9add9d35723732fc656912b5272dbefbaed34474d62599e703900b3a48ba208715ef6b8a31849ff91affbd55c7f2c72f8586d8dd78de55555e7c39d97e6f5cb3dde5d86249b7763948f3fb5720685ca67742c70d00532b923fdcc76b2ccc541039206fa82bb34ad291b03ae99aa205cb973375591b6ecae8ec79f6e8d47d1ee5f72d62bc7a3f6f71b06dd82d85a5c5244d123f20937ec46ce382fa1cbb11c0a669b6e4100fcc01643d65e15630537dea05af892b5aca5be59ddd517728b9bafd5739212e25ea04de2c6c46d07b1e3d47d0e372f2b5913afb59935f5f2dbbce045c68b177ab24c7e2f84a1cce8e7f7db93651698a9bbda8980d582d4550afc5c924e46a36c6e61f119e84bc756f0cabf99e1fcfc3203b3e2cf7cf0548118d8539acc32f7476381054709a3f0c7ecc7a0d5b841caaa77a5b53bb3a5af20b6e612a099337cb0ba9347de7057a0c515450b0ddad46077ed9d2b6c5dff27621209bf2fccadc40dca912b4ea53d7e3eddf57cdbcf7ba27fbf756c105ee67f2c1a13bbf62ae5135c5a2240ebc6459bb8a65bf990911f0a17c04af72ba5852b9b054ec19effdd84e57e6bd32d3d2c5571e55e226c8a73ba8eab92aae042b75b9b771616eed48b66b5c83268dfea56e2d3a633e2e6a6a181ac3c85067591aa3ab6828dfcf38f0fa35c6194ec733451776c735b0db4a7677f1f23477116c5949a25d7e2bd3545617107a55d84d406d111cdc6d2a8584718442788922f242cd3e16a2277fd101da937a80b7f464618824f26a3d10a1197b6c840c9e449dca99cda61b0e668625fcdb4a7c1df6555f3af7a2c1a7056f2c35a8a1d4899f81fa83ae1f477581ea8d7ae3b83fb0d5381fd7951aa3e01b49c5413fb36675911545f68e209e0d666dbd2881ebac9af170c0c3442fe488d0c1453b8bca131bf8838af53ed82ae7199c7ee2743a59f33ef765b6b072210cfb645cb60bd8a28378fd0f9a3df22372651c47374f675b358cbb5f3e140f5cbd3df9a263a2d1d9276c1306f58d43ab5848355bcd269359323a01d4324728512d4c2ce177108eb48a8631492e61d38887db1a922e8786bdf498b4764eaf79f5db693082de8172dbd53b762b92e539d5976b82bea59fa92c7c684f5f899db935df6e50b473cc490cbab34df7c0e752ad38416c09caf217a9d4813de7e6675b2599c89dd88f86770824b604ad8d7f485187712a53966b6e88f49a3e06b7f91d2bf26e20095d3e03f47eddcd072520a6a7291ac80df4b6b5eb76c902b084020cec181ac2f2d9d3296508eeacab1bb5509e46b2d9547d0697734799df8905028f2c7a98f64ac4eaf2132baa03d6582dd292bdfef72f39f7e782b5376351e77d2bd17b402213015f4a5eb1f691aac730d6b0977c9fa7f4986874fe3528785fb018a96bf152474c6ea39708a4f55a26ebf77d3d473c29b9c6687472bd59040f8580286bada3c1cdd67240e8a29cdfec0867ea574a56793849ddf60162391b9ac01f9c14c5d5ecd7bf62727de4c169023405e114aea740afa893625a81e6920f37af875d148be380bce54c20e5ee963088c5da516d1cf4f0a001cde172f772beaa5bb67c0df59bd7d8e4f8abe6dd0b44cd9b45abc470fa9cd8bebbe8e23f562c178ae3b8ca33437979c2543013949b7e2b1e1b539f40bece244f475c5d4ee6a3be77f8a4b5df0efc1edb2013c9936338244904ae6425712d7d29a3e963c9da6b72d0b2ae07c3386eec5d5d13cb7d59df071c3838e8fe4b95ed0be54f22b755eef6155e8158c2db33beac846c82bf1eb637daffc2077035bb87c797d5ff0aab0a990d0478a2a4f3349269ebed6fccf34201a8f38e87f5db103532a7cca302daf4fc64252850ecba1c0a22056215682fa8dd6b77e54a21a2136b1894ac7eb9f3b12b85332e40901e513d5d1de98bcb15f4e2c0366378a6ba6a077ad9e4d45c3c46a97ea04381effa75627bd609579d8957f780f321ffcc9b3b81056160fa4666a9fe027ab4fb78e3c7e5e4796e36da003e7ec4c32425d4fe35912396d56dfb7a03da50b8e3f177cf45452d74fd600adb66eb10fe69ce09757a6ba7d0bb51cf4b5c56503c73ce6e83b03172a881b76beefa121afacc7614b8ee24d8d427167b025cecf43453fbdad81ebe5313d4fccdd30b3e955c115aad3fe2ca31f31d4c0bc52045645598b951351fae9bf341d9d663d8dc2cca0270d1ddea1c141f2350c0b4716dd32433b09af73a5b93e49e5e4ec90bcaadfca2c7f8e053857e213a8b8dc8dfc087d66938926d11b7032139a1d8e0dfa9a9c37b6b6a49e5bab1cfdb4390da9a740b2be407397490dc47627c81b44844ad94d5ea9afb284353587d3943723749779494b8f6eca35a9df383452264489aafe017295b3c278c5a483ffb55c9e938ed0522d7b00855ba1add437bc3032b03c8b4a125ffe5677046130fe6f4d2c886c2a18d0b5f6ae04e5e6352b6985d1419f89bfc00e3c90b5c6fec5a8bc00e980685f5d2c400b98d32b17808e8bbb1f92d7b0747d494b9a8fc6d05b07022e3709182373912f069a95ebdea45bcb1af43e96a4913babe2b7fb2495185570ab441d5a98fdad1c6a93fca477928eaa1aaa0bb8ea60b0c31fb2fe44640e30656b33dbf21292e5464a32b9eff09eaa3faa94300bac04aded96d4df4d94ed820444de379ecad2265205e9fdc4fa69f3ea836d2db436799b2d9e249a9c38413067e5ba945a9d3bc26d75518336658ba93a1721b15b5ef7adfd999ff0e7332a002ff16157420e30e58b97a8e64e97832cbc66abdccf824689b7d6a735c34f4c118d7ff49d48169f82315f95ac9eb1d1c66847e2ac006b5c28cd7fba56153bfc34dfdff07121c734ff778c790f141e85a9165c04c16cb481af799feef1e55474d75e336b5d37e34ea394b64ffee2ae102107bfe495ca280a0081c66e314068ea6968cfc0c9a3aa6bde22841dbb124f1d23cc2f9af53f0a35c51e57f9863a21ba13e65a3078db0c2fa06e70919ee385a15dfd329be7c557e3a8902a485f5d0f32637aebfc989640f5803300e8cfb90cc8fb2f6a726bfa6b6b09236fd48bbf06ec9f0ff5ca83faf679b494dd11ca53ca7237154476774f2a575841eb7a89db1879246206a51dc9d8c58b27147aab611946b42dbdff5be1ee35e79c2035f4816b853755ba00432d724086fd4f1fb50a3977142cd2044f7685753931f3e3dae2269565fd9bcc7a1559b6db9787b564355d705e5b1469ab7f2339cab34a053ea3980e3af5a4ff93a1ced20ca00eeb909fb99c310790e397d881f59ea1eb3d4460139c8f7e344840cfd2f8c0072fcb4427758443ef4a016043536a6a0ab339e4b9d7f7c934b5aff3449c3685c0b73b149dcab045cf05fd18295f8978ec08f0687f3e8cb38c244bb41b38e912bf2ab0343e015b0d7e6f2a933d278c9172fafc1d64d15239966387dcf4f8187773b76c8903519586b9a9f1836e6ba73cd457db563e620ad79259107899d21fada274a56a8a69c2a8cef636a0b9de76a3220bf3c8304eab5af90be59e16c40487fd762dfafeeb6f7fbac2d7c479a71d7e2521e9bbed5b79df09e7665eeca247d2ae83871a307ddfcf8d1f5d27d91d07a4752788ac975f6d904fbc7baba9a018b5525c2053d626c4baa1a171cf15e85899d35744aeefebdb19b10c2e2bbe681436fe3797dc0631da04d760e048bc1c0bb63fb185e08013ba5413efcb23277852e1f673b24df34f811e2549771ca7d63bb025bfa9107912921e792a5334fb68031e2f3c07e3168f6f946370ca05dc15496ad91d6c009d186ac3cd4f38ce3da905af2580b60e6c72051e693158b6d73abd26df6d3da6aacd658be0ea12dc8f9e0c15ad75f6beebdfbff81a2e40e5d07d8abfc7fad40269ccdd3d94cb9ecce1bf6eb9b41adbbcc50949dab57b67eff971cd27e7c201dd01db8a6f657556d2baf35bb24b36fc3d765f829f13706eb58933fa99ce291d5222b99231c6223d16f09ea83eb8efd2e9c5ee139b4e4f186d89df97b4e58850a1bf6b5e2a64a1e4af41667f55d8f30c5ee856f007ebc55b94b133a1462ae21279f2ab97d7a093db05a262f7933de515bb4df07205787d8b3a566143162bfbb265e5f17a86b314dd28db89d2ebcf015048da0543a9af5cc23bc6e106a4f95c8067f6b31eedd8abb189e8c4d5409aa4518386216c5a1dceaf8c21a80310526f656fe6644b39d40924ad531dc08dde0a81db616b033481edf24c2c0906f82eadee65ed68833c2c55e25c1eb98049da882f0203c4ca5bacbf5edbf47e50d1a4b028308e1732e04e4d486cd811f930ef545b053e975234096708c53e6230300a169d2a9f813714e833f8f897a8d1ad0e6383a7cbf55261380cc2e6e56741ca3aaca8133871391c9733dd2f218e67853b03834f9d1edb18ed4c766e465ed49477c2aef9aa5225f9ef5224384709065fc9a1fc52e7c26b14f6fdbbb412aa077ccac691bd1aab80c1c1e42924da6f26a5625c4f889caaac1c2834e3f3012413b64303b03024a51f04a5dd888093db2804ec812886a9d0c7e64eb8f46da5e48b15022084e1a740758039d8f1d7047499f99414ad58af777260835b25cc838ecde64d872afaedf3797c5ee522edb42f1736343680f4f"}) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) 13:43:37 executing program 1 (fault-call:2 fault-nth:61): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 13:43:37 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="0408000900f1ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) [ 247.722865][T27081] loop2: detected capacity change from 0 to 264192 [ 247.734044][T27081] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 247.734398][T27082] FAULT_INJECTION: forcing a failure. [ 247.734398][T27082] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 247.756429][T27082] CPU: 0 PID: 27082 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 13:43:37 executing program 4: ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, &(0x7f0000000000)) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') r1 = openat2(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x521401, 0x0, 0xc}, 0x18) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xe244a) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/bus/i2c', 0x2000, 0xaf) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x881) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x1f}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x3f}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x1ff}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x7}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x80}]}, 0x58}, 0x1, 0x0, 0x0, 0x20048814}, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x74, 0x0, 0x20, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3d}, @NL80211_ATTR_PMKID={0x14, 0x55, "2efe96653de0610fc99cd48de9cc6048"}, @NL80211_ATTR_SSID={0x24, 0x34, @random="527037c73c2241c50b44e868ea6cc9e1d9bee730629f8fd165a0e8cbf5bfc783"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}]}, 0x74}, 0x1, 0x0, 0x0, 0x51}, 0x24040000) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) 13:43:37 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x10080, 0x84) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180)=""/225, 0xe1}, 0x6}, {{&(0x7f0000000280)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000001980)=[{&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/96, 0x60}, {&(0x7f0000001440)=""/144, 0x90}, {&(0x7f0000001500)=""/148, 0x94}, {&(0x7f00000015c0)=""/145, 0x91}, {&(0x7f0000001380)=""/98, 0x62}, {&(0x7f0000001680)=""/153, 0x99}, {&(0x7f0000001740)=""/95, 0x5f}, {&(0x7f00000017c0)=""/146, 0x92}, {&(0x7f0000001880)=""/204, 0xcc}], 0xa, &(0x7f0000001a40)=""/101, 0x65}, 0x101}], 0x2, 0x40000002, &(0x7f0000001b40)={r2, r3+60000000}) 13:43:37 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x6000000) 13:43:37 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="0408000902fbff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) [ 247.764838][T27082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 247.774973][T27082] Call Trace: [ 247.778249][T27082] dump_stack_lvl+0xb7/0x103 [ 247.782954][T27082] dump_stack+0x11/0x1a [ 247.787234][T27082] should_fail+0x23c/0x250 [ 247.791753][T27082] __alloc_pages+0x102/0x320 [ 247.796370][T27082] alloc_pages_vma+0x391/0x660 [ 247.801143][T27082] ? follow_page_mask+0xceb/0x1040 [ 247.806290][T27082] do_anonymous_page+0x16e/0x8a0 [ 247.811322][T27082] ? strlcpy+0x65/0x80 [ 247.815502][T27082] handle_mm_fault+0x966/0x1a60 [ 247.820369][T27082] ? perf_trace_mmap_lock_acquire_returned+0x1e0/0x210 [ 247.827228][T27082] do_user_addr_fault+0x609/0xc00 [ 247.832270][T27082] exc_page_fault+0x91/0x220 [ 247.836869][T27082] asm_exc_page_fault+0x1e/0x30 [ 247.841757][T27082] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 247.849142][T27082] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 83 f8 [ 247.868753][T27082] RSP: 0018:ffffc90011043ce0 EFLAGS: 00010206 [ 247.874846][T27082] RAX: ffff888133c689e0 RBX: 0000000000001000 RCX: 0000000000000040 [ 247.882811][T27082] RDX: 0000000000001000 RSI: ffff888107ce0fc0 RDI: 000000002001e000 [ 247.890814][T27082] RBP: 0000000000001000 R08: 0000000000000000 R09: 0001ffffffffffff [ 247.899730][T27082] R10: 0001888107ce0fff R11: ffff888133c68000 R12: 00007ffffffff000 [ 247.907796][T27082] R13: 000000002001e040 R14: ffff888107ce0000 R15: 000000002001d040 [ 247.915818][T27082] _copy_to_user+0x77/0x90 13:43:37 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffa000/0x4000)=nil) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) preadv(r0, &(0x7f0000001540)=[{&(0x7f00000000c0)=""/114, 0x72}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/140, 0x8c}, {&(0x7f0000001240)=""/219, 0xdb}, {&(0x7f0000001340)=""/178, 0xb2}, {&(0x7f0000001440)=""/240, 0xf0}, {&(0x7f0000000000)=""/27, 0x1b}], 0x7, 0x23, 0xfffffff7) [ 247.920240][T27082] environ_read+0x248/0x340 [ 247.924814][T27082] do_iter_read+0x2be/0x4b0 [ 247.929586][T27082] do_preadv+0x13b/0x230 [ 247.933843][T27082] ? __cond_resched+0x11/0x40 [ 247.938567][T27082] ? fput+0x2d/0x130 [ 247.942509][T27082] ? ksys_write+0x157/0x180 [ 247.947108][T27082] __x64_sys_preadv+0x54/0x60 [ 247.951790][T27082] do_syscall_64+0x3d/0x90 [ 247.956385][T27082] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 247.962289][T27082] RIP: 0033:0x4665d9 13:43:37 executing program 4: prctl$PR_SET_MM(0x23, 0x1, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000011c0)={{{@in6=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@initdev}}, &(0x7f00000012c0)=0xe8) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000001340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001300)={&(0x7f0000003440)={0x118, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x58, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x2c}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x4000000}, 0x40080) 13:43:37 executing program 5: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x10080, 0x0) ioctl$BLKROGET(r1, 0x125e, &(0x7f00000000c0)) r2 = socket(0x25, 0x6, 0x5) preadv(r2, &(0x7f0000000380)=[{&(0x7f0000000100)=""/45, 0x2d}, {&(0x7f0000000180)=""/251, 0xfb}, {&(0x7f0000000280)=""/237, 0xed}], 0x3, 0xf7, 0x6) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) 13:43:37 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffd000/0x3000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) [ 247.966169][T27082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 247.985766][T27082] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 247.994179][T27082] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 248.002228][T27082] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 [ 248.010203][T27082] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 13:43:37 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) mremap(&(0x7f00002d5000/0x1000)=nil, 0x1000, 0x3000, 0x7, &(0x7f00002d2000/0x3000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0x5, 0x4}, {0xf8, 0x4}, {0x8, 0x2}]}) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x2, &(0x7f00002d6000/0x1000)=nil) write$binfmt_elf32(r0, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0xfa, 0x6, 0x9, 0x1f, 0x2, 0x3e, 0x3f, 0x368, 0x38, 0x2ab, 0x7, 0x87d, 0x20, 0x1, 0xb2, 0x20, 0x9}, [{0x60000000, 0x800, 0x1000, 0xfffffffd, 0x4, 0x83, 0xffffffff, 0x1f}], "6893e2c4e77e7f530bf9cede47a9769fd9a67157967f710533c2a82a2d83f3c0574d81fb49086c218125b833c897296744ce2af535858559a4458dbd47474a5da2c951ba4c1540558d8ef290f37cfc0b140400eb7e07f13982d424cd24af5abab01242dbd3e3541d0f73f1938c52aa9b62c1121ce5d2e98b0fb6411e3dd08318cce6888c745756940b05f7fe5936c1a14850", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x7ea) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000001440)=""/4096, 0x1000}], 0x1, 0xfff, 0x4) prctl$PR_SET_MM(0x23, 0x2, &(0x7f00002d3000/0x3000)=nil) 13:43:37 executing program 1 (fault-call:2 fault-nth:62): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 13:43:37 executing program 5: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x10080, 0x0) ioctl$BLKROGET(r1, 0x125e, &(0x7f00000000c0)) r2 = socket(0x25, 0x6, 0x5) preadv(r2, &(0x7f0000000380)=[{&(0x7f0000000100)=""/45, 0x2d}, {&(0x7f0000000180)=""/251, 0xfb}, {&(0x7f0000000280)=""/237, 0xed}], 0x3, 0xf7, 0x6) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) [ 248.018174][T27082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 248.026147][T27082] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 [ 248.038356][T27091] loop2: detected capacity change from 0 to 264192 [ 248.051636][T27091] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 13:43:37 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="04080009fffeff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:37 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x7000000) 13:43:37 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) prctl$PR_SET_MM(0x23, 0x1, &(0x7f00002d5000/0x1000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) [ 248.136138][T27129] FAULT_INJECTION: forcing a failure. [ 248.136138][T27129] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.149238][T27129] CPU: 0 PID: 27129 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 248.157652][T27129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 248.167874][T27129] Call Trace: [ 248.171148][T27129] dump_stack_lvl+0xb7/0x103 [ 248.175781][T27129] dump_stack+0x11/0x1a [ 248.179938][T27129] should_fail+0x23c/0x250 [ 248.184372][T27129] should_fail_usercopy+0x16/0x20 [ 248.189402][T27129] _copy_to_user+0x1c/0x90 [ 248.193820][T27129] environ_read+0x248/0x340 [ 248.198335][T27129] do_iter_read+0x2be/0x4b0 [ 248.201334][T27131] loop2: detected capacity change from 0 to 264192 [ 248.202833][T27129] do_preadv+0x13b/0x230 [ 248.202854][T27129] ? __cond_resched+0x11/0x40 [ 248.218205][T27129] ? fput+0x2d/0x130 [ 248.222197][T27129] ? ksys_write+0x157/0x180 [ 248.226680][T27129] __x64_sys_preadv+0x54/0x60 [ 248.231341][T27129] do_syscall_64+0x3d/0x90 [ 248.235795][T27129] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 248.241732][T27129] RIP: 0033:0x4665d9 [ 248.245607][T27129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 248.265295][T27129] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 248.273786][T27129] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 13:43:37 executing program 5: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x10080, 0x0) ioctl$BLKROGET(r1, 0x125e, &(0x7f00000000c0)) r2 = socket(0x25, 0x6, 0x5) preadv(r2, &(0x7f0000000380)=[{&(0x7f0000000100)=""/45, 0x2d}, {&(0x7f0000000180)=""/251, 0xfb}, {&(0x7f0000000280)=""/237, 0xed}], 0x3, 0xf7, 0x6) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) 13:43:37 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x9000000) [ 248.281738][T27129] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 [ 248.289712][T27129] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 248.297663][T27129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 248.305614][T27129] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 13:43:37 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x7fff, 0x8000) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000002400)={0x0, 0x0, 0x8000}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000002800)={r2, 0x5, 0x8}) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000300)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000400)=""/4096, 0x7e, 0x0, 0x0, 0x0) socket(0x12, 0x80000, 0x7) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket(0x11, 0x800000003, 0x0) vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000001400)="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", 0x1000}], 0x1, 0x8) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000400)={r6, 0x3, 0x6, @broadcast}, 0x10) r7 = socket$inet6(0x10, 0x2, 0x0) sendto$inet6(r7, &(0x7f00000000c0)="1ba0000010001d0200fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740c00000000d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) [ 248.357886][T27131] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 13:43:37 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x28000000) 13:43:37 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x2c000000) [ 248.400766][T27154] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 248.414307][T27154] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 248.434524][T27154] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 248.460773][T27154] netlink: 40027 bytes leftover after parsing attributes in process `syz-executor.5'. [ 248.473254][T27154] device sit0 entered promiscuous mode [ 248.481890][T27154] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 248.491750][T27154] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 248.501489][T27162] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 13:43:37 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x9effffff) 13:43:37 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='children\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = dup2(r0, r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r3, 0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_FONT(r4, 0x4b60, &(0x7f0000000340)=""/120) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) io_submit(0x0, 0x3, &(0x7f0000000300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0xec, r1, &(0x7f0000000000)="b2", 0x1, 0x80000000, 0x0, 0x1, r0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x7fff, r2, &(0x7f0000000180)="d2965f6975570921a2b03ad2183160a0cd10e723c48afda2ca042f22d577318a73f95a0e5e8f6f9e4a5697e22207bb6a8f020c7e58fae2a1b6e094fc8cbdb3426109fa918c3f83b10fca57ab1a1bf323219a90bc122117de08e6612965759073623cfc88d5c448470181fdadc2b47c4b", 0x70, 0x80, 0x0, 0x2, r3}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0x3, r5, &(0x7f0000000200)="88feffa3ffbf21b5a736b2e520a37ac7c1949c0b6612ab22de59c9c8272c29b698b8d2481eccc3f4a0231caa1257efd8abb8e93cae6d62a7c8373b5af986696b56d289df3b77f1c3f450f08f41e9e4fa07118d2e3261ee140120e753a3a940cd4646eccd221eac40352cbf70f3119d33abde67ca8291fed3f6b2ebf81c54cb5681f91b4f32deb0697724ab93a46c55ee1fa9a3dc8d67eb339b326bc0f2ccf4c8", 0xa0, 0x8, 0x0, 0x2, r0}]) [ 248.532647][T27167] netlink: 40027 bytes leftover after parsing attributes in process `syz-executor.5'. 13:43:38 executing program 1 (fault-call:2 fault-nth:63): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 13:43:38 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090fffff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:38 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0xc00e0000) 13:43:38 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x34) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x0, 0x6, 0x7, 0x0, 0x0, 0x10000, 0x10800, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfff, 0x2, @perf_config_ext={0x400, 0x9}, 0x480, 0x6, 0x81, 0x5, 0x7ff, 0x3, 0x5, 0x0, 0x2, 0x0, 0x7}, r2, 0x8001, 0xffffffffffffffff, 0xa) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3, 0xff, 0xf6, 0xe0, 0x0, 0x1, 0x100, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_config_ext={0x1000, 0x8001}, 0x8010, 0x6, 0x6, 0x0, 0x1f, 0x0, 0x401, 0x0, 0x9, 0x0, 0x7fff}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 248.730638][T27184] FAULT_INJECTION: forcing a failure. [ 248.730638][T27184] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 248.743948][T27184] CPU: 1 PID: 27184 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 248.752398][T27184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 248.762455][T27184] Call Trace: [ 248.765735][T27184] dump_stack_lvl+0xb7/0x103 [ 248.770335][T27184] dump_stack+0x11/0x1a [ 248.774527][T27184] should_fail+0x23c/0x250 [ 248.778950][T27184] __alloc_pages+0x102/0x320 [ 248.783548][T27184] alloc_pages_vma+0x391/0x660 [ 248.788578][T27184] ? follow_page_mask+0xceb/0x1040 [ 248.793787][T27184] do_anonymous_page+0x16e/0x8a0 [ 248.798960][T27184] ? strlcpy+0x65/0x80 [ 248.803226][T27184] handle_mm_fault+0x966/0x1a60 [ 248.808079][T27184] ? perf_trace_mmap_lock_acquire_returned+0x1e0/0x210 [ 248.814954][T27184] do_user_addr_fault+0x609/0xc00 [ 248.819986][T27184] exc_page_fault+0x91/0x220 [ 248.824670][T27184] asm_exc_page_fault+0x1e/0x30 [ 248.829539][T27184] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 248.836145][T27184] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 83 f8 [ 248.855754][T27184] RSP: 0018:ffffc90011253ce0 EFLAGS: 00010206 [ 248.862045][T27184] RAX: ffff88812f977aa0 RBX: 0000000000001000 RCX: 0000000000000040 [ 248.870018][T27184] RDX: 0000000000001000 RSI: ffff88812feeafc0 RDI: 000000002001f000 [ 248.877998][T27184] RBP: 0000000000001000 R08: 0000000000000000 R09: 0001ffffffffffff [ 248.885421][T27189] loop2: detected capacity change from 0 to 264192 [ 248.885967][T27184] R10: 000188812feeafff R11: ffff88812f9770c0 R12: 00007ffffffff000 [ 248.885982][T27184] R13: 000000002001f040 R14: ffff88812feea000 R15: 000000002001e040 [ 248.908456][T27184] _copy_to_user+0x77/0x90 [ 248.912862][T27184] environ_read+0x248/0x340 [ 248.917359][T27184] do_iter_read+0x2be/0x4b0 [ 248.921848][T27184] do_preadv+0x13b/0x230 [ 248.926141][T27184] ? __cond_resched+0x11/0x40 [ 248.930798][T27184] ? fput+0x2d/0x130 [ 248.934673][T27184] ? ksys_write+0x157/0x180 [ 248.939217][T27184] __x64_sys_preadv+0x54/0x60 [ 248.943873][T27184] do_syscall_64+0x3d/0x90 [ 248.948289][T27184] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 248.954349][T27184] RIP: 0033:0x4665d9 [ 248.958222][T27184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 13:43:38 executing program 3: prctl$PR_SET_MM(0x23, 0x9, &(0x7f00002d6000/0x4000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ae0000/0x2000)=nil, 0x2000, 0x0, r2) pkey_mprotect(&(0x7f0000163000/0x2000)=nil, 0x2000, 0x0, r2) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write(r1, &(0x7f0000000180)="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", 0xfc) 13:43:38 executing program 5: socket$packet(0x11, 0xa, 0x300) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x11, 0x6558, r3, 0x1, 0x0, 0x6, @remote}, 0x14) read(r2, &(0x7f0000000100)=""/97, 0x61) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@mcast1, @empty, @remote, 0x4, 0x8000, 0x3, 0x580, 0x59, 0x80, r3}) [ 248.977917][T27184] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 248.988339][T27184] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 248.996344][T27184] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 [ 249.004308][T27184] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 249.012316][T27184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 249.020267][T27184] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 13:43:38 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0xefffffff) 13:43:38 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) prctl$PR_SET_MM(0x23, 0x0, &(0x7f00002d4000/0x4000)=nil) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) r1 = fcntl$getown(0xffffffffffffffff, 0x9) r2 = syz_open_procfs(r1, &(0x7f0000000040)='net/ip_mr_vif\x00') preadv(r2, &(0x7f0000001400)=[{&(0x7f00000000c0)=""/113, 0x71}], 0x1, 0x1000000, 0x0) 13:43:38 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0xf0ffffff) [ 249.076639][T27189] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 13:43:38 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffb000/0x3000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) 13:43:38 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="04080009feffff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:38 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0xffffff7f) 13:43:38 executing program 1 (fault-call:2 fault-nth:64): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 249.171934][T27217] loop2: detected capacity change from 0 to 264192 [ 249.187024][T27217] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 13:43:38 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0xffffff9e) 13:43:38 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090002ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) [ 249.249916][T27230] FAULT_INJECTION: forcing a failure. [ 249.249916][T27230] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 249.263004][T27230] CPU: 1 PID: 27230 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 249.271431][T27230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 249.281505][T27230] Call Trace: [ 249.284786][T27230] dump_stack_lvl+0xb7/0x103 [ 249.289395][T27230] dump_stack+0x11/0x1a [ 249.293715][T27230] should_fail+0x23c/0x250 13:43:38 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) r1 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ae0000/0x2000)=nil, 0x2000, 0x0, r1) pkey_mprotect(&(0x7f00002d5000/0x4000)=nil, 0x4000, 0x1, r1) [ 249.298144][T27230] should_fail_usercopy+0x16/0x20 [ 249.303285][T27230] _copy_to_user+0x1c/0x90 [ 249.307779][T27230] environ_read+0x248/0x340 [ 249.312408][T27230] do_iter_read+0x2be/0x4b0 [ 249.317126][T27230] do_preadv+0x13b/0x230 [ 249.321376][T27230] ? __cond_resched+0x11/0x40 [ 249.326065][T27230] ? fput+0x2d/0x130 [ 249.330009][T27230] ? ksys_write+0x157/0x180 [ 249.334516][T27230] __x64_sys_preadv+0x54/0x60 [ 249.339202][T27230] do_syscall_64+0x3d/0x90 [ 249.343763][T27230] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 249.350367][T27230] RIP: 0033:0x4665d9 [ 249.354260][T27230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 249.374131][T27230] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 249.382550][T27230] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 249.390651][T27230] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 13:43:38 executing program 1 (fault-call:2 fault-nth:65): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 249.398666][T27230] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 249.406646][T27230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 249.415320][T27230] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 [ 249.459408][T27240] FAULT_INJECTION: forcing a failure. [ 249.459408][T27240] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 249.472694][T27240] CPU: 1 PID: 27240 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 249.481117][T27240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 249.491181][T27240] Call Trace: [ 249.494464][T27240] dump_stack_lvl+0xb7/0x103 [ 249.499070][T27240] dump_stack+0x11/0x1a [ 249.503300][T27240] should_fail+0x23c/0x250 [ 249.507729][T27240] __alloc_pages+0x102/0x320 [ 249.512323][T27240] alloc_pages_vma+0x391/0x660 [ 249.517140][T27240] ? follow_page_mask+0xceb/0x1040 [ 249.522259][T27240] do_anonymous_page+0x16e/0x8a0 [ 249.527207][T27240] ? strlcpy+0x65/0x80 [ 249.531381][T27240] handle_mm_fault+0x966/0x1a60 [ 249.536418][T27240] ? perf_trace_mmap_lock_acquire_returned+0x1e0/0x210 [ 249.543462][T27240] do_user_addr_fault+0x609/0xc00 [ 249.548935][T27240] exc_page_fault+0x91/0x220 [ 249.553684][T27240] asm_exc_page_fault+0x1e/0x30 [ 249.558640][T27240] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 249.565766][T27240] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 83 f8 [ 249.585381][T27240] RSP: 0018:ffffc9001141fce0 EFLAGS: 00010206 [ 249.591537][T27240] RAX: ffff88812fb2faa0 RBX: 0000000000001000 RCX: 0000000000000040 [ 249.599514][T27240] RDX: 0000000000001000 RSI: ffff888108c3efc0 RDI: 0000000020020000 [ 249.607496][T27240] RBP: 0000000000001000 R08: 0000000000000000 R09: 0001ffffffffffff [ 249.615561][T27240] R10: 0001888108c3efff R11: ffff88812fb2f0c0 R12: 00007ffffffff000 [ 249.623655][T27240] R13: 0000000020020040 R14: ffff888108c3e000 R15: 000000002001f040 [ 249.631633][T27240] _copy_to_user+0x77/0x90 [ 249.636060][T27240] environ_read+0x248/0x340 [ 249.640573][T27240] do_iter_read+0x2be/0x4b0 [ 249.645124][T27240] do_preadv+0x13b/0x230 [ 249.649369][T27240] ? __cond_resched+0x11/0x40 [ 249.654047][T27240] ? fput+0x2d/0x130 [ 249.657944][T27240] ? ksys_write+0x157/0x180 [ 249.662446][T27240] __x64_sys_preadv+0x54/0x60 [ 249.667218][T27240] do_syscall_64+0x3d/0x90 [ 249.671733][T27240] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 249.678082][T27240] RIP: 0033:0x4665d9 [ 249.682052][T27240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 249.702099][T27240] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 249.710516][T27240] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 249.718565][T27240] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 [ 249.726543][T27240] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 249.734522][T27240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 249.742498][T27240] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 [ 249.766663][T27232] loop2: detected capacity change from 0 to 264192 [ 249.819095][T27232] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 13:43:39 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap(&(0x7f000021d000/0x3000)=nil, 0x3000, 0x800006, 0x12, r1, 0x3000) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FITRIM(r2, 0x40047211, &(0x7f00000000c0)) 13:43:39 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0xffffffef) 13:43:39 executing program 3: r0 = socket(0x21, 0x1, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x15}, 0x1) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='P\"\x00\x00', @ANYRES16=0x0, @ANYBLOB="000227bd7000ffdbdf258100000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000200000039000000060066000888000004006700040067000e003300c4000300ffffffffffff000006006600f8000000"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x2, &(0x7f0000000240)=[{0x64}, {0x1f}]}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x40, r1, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20048800}, 0x0) pipe(0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r2, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) openat(r2, &(0x7f0000000300)='./file0\x00', 0x402000, 0x0) 13:43:39 executing program 1 (fault-call:2 fault-nth:66): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 13:43:39 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090003ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) [ 250.023191][T27259] loop2: detected capacity change from 0 to 264192 [ 250.027334][T27260] FAULT_INJECTION: forcing a failure. [ 250.027334][T27260] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 250.042959][T27260] CPU: 1 PID: 27260 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 250.051450][T27260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 250.061532][T27260] Call Trace: [ 250.064802][T27260] dump_stack_lvl+0xb7/0x103 [ 250.069435][T27260] dump_stack+0x11/0x1a [ 250.073572][T27260] should_fail+0x23c/0x250 [ 250.077975][T27260] should_fail_usercopy+0x16/0x20 [ 250.082995][T27260] _copy_to_user+0x1c/0x90 [ 250.087405][T27260] environ_read+0x248/0x340 [ 250.091893][T27260] do_iter_read+0x2be/0x4b0 [ 250.096398][T27260] do_preadv+0x13b/0x230 [ 250.100629][T27260] ? __cond_resched+0x11/0x40 [ 250.105287][T27260] ? fput+0x2d/0x130 [ 250.109200][T27260] ? ksys_write+0x157/0x180 [ 250.113715][T27260] __x64_sys_preadv+0x54/0x60 [ 250.118466][T27260] do_syscall_64+0x3d/0x90 [ 250.122879][T27260] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 250.128853][T27260] RIP: 0033:0x4665d9 [ 250.132787][T27260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 250.152409][T27260] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 250.160812][T27260] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 13:43:39 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0xfffffff0) 13:43:39 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000202050000000000000000000a0000003c0002800c00028005000100110000002c00de7f14000300fe8000000000000000000000000000bb1400040000000000400000000000ffffe0000002"], 0x50}}, 0x0) 13:43:39 executing program 5: io_setup(0x7, &(0x7f0000000040)=0x0) r1 = socket(0x1, 0x1, 0x0) io_submit(r0, 0x1, &(0x7f0000000400)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x2}]) io_setup(0x3, &(0x7f0000000000)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x34) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000440)=0x0) wait4(r5, &(0x7f0000000480), 0x8, &(0x7f00000004c0)) ptrace$cont(0x18, r4, 0x0, 0x0) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r4, 0x0, 0x0) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f00000003c0)=r4) r6 = openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.pending_reads\x00', 0x480000, 0x28) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x450980, 0x0) io_submit(r2, 0x3, &(0x7f0000000380)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000180)="e6c187cd936fa33dfec8f2ff6c35c53aa73739e509bf6725c855689269db4c38c1d71ee32ed7aef94b962dc01a685c2b131819ab7699a3aad532e9aebfa22d6a7fb08833421e6da4f54005570cf9e5542a20f1026683e1e019f1e95775c3d9dfaf134a97e29e6e52b3832a48dd47038864d8ff24e2d1d1aa0388f4b7d330d776389033ba96ddd9bd033ce8bea3c522fcdab1b1f831be15807cb1cd282505ac94400f823ee25ea6926f2d061d1345aa8fec109f4aa8c9b869b0c3a3b2f98a527332f77d12b5d1c4014671f6296af3ef48a0757f0e467b2177a2e751adbe54b6940ac71d8319fe2e7914a57d08a5278a24564a6d375c7fb014a2ae78457f0588", 0xff, 0x2, 0x0, 0x1, r6}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2, 0x3, r7, &(0x7f0000000280)="1a46be2f9c283492aa1f16b71ab682815f1a50e6c6b7adc01bae4cc5ba", 0x1d, 0xd70d, 0x0, 0x3}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0xb33c, r1, &(0x7f0000000300)="0cd432928468bc3e1e72e0a56aae7ae2b8ac9f", 0x13, 0x101, 0x0, 0x3}]) 13:43:39 executing program 1 (fault-call:2 fault-nth:67): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 250.168798][T27260] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 [ 250.176757][T27260] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 250.184723][T27260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 250.192781][T27260] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 13:43:39 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) 13:43:39 executing program 4: prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffd000/0x1000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/vlan/vlan0\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001400)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRESHEX, @ANYRES32, @ANYRESOCT, @ANYRES64, @ANYRESHEX], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000500)={0x6, 0x4, {0x3, @struct={0x0, 0x5}, 0x0, 0x7, 0x6, 0x10001, 0x7, 0x7bc2, 0x4, @struct={0x2, 0x2}, 0x5, 0x1, [0x4, 0x7, 0xfffffffffffffff8, 0x0, 0x4, 0x40c]}, {0x4a, @usage=0x2, 0x0, 0x3, 0x800, 0x0, 0x8, 0x81, 0x428, @struct={0x1, 0x20}, 0x0, 0x2, [0x100000001, 0x1, 0x5, 0x1, 0x8000, 0x9]}, {0x7, @usage=0xffffffff, 0x0, 0x2, 0x0, 0x0, 0x4, 0x1f, 0x90, @usage=0x102, 0xe0000000, 0x6, [0x8000, 0x9d86, 0x2, 0xf4e, 0x1, 0x3]}, {0x0, 0x9adb, 0x5f2}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000540)={0x0, 0x5, {0x6fdf, @usage=0x8, 0x0, 0x5, 0x55e, 0x8, 0x3, 0x9, 0x20, @usage, 0xffffff00, 0x7, [0x100000001, 0x0, 0x7, 0x1, 0xfffffffffffffffe, 0xa45]}, {0x2, @usage=0xfffffffffffffffe, 0x0, 0xfffffffffffffbff, 0x3, 0x100000000, 0x8, 0x0, 0x448, @struct={0x3b64, 0x3}, 0x800, 0x7fff, [0x3, 0x4, 0x0, 0x2, 0xff, 0x100000000]}, {0x9, @usage=0x7e47cf27, 0x0, 0xe1, 0x4, 0x5, 0x1, 0x3, 0x67, @usage=0x7, 0x2, 0x3, [0xfff, 0x5, 0x0, 0x101, 0xe2b, 0x8]}, {0x78d, 0x40, 0x3}}) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000100)={0x0, 0x1, 0x2000000401, 0x1}) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001a40)={0x0, ""/256, 0x0, 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000001480), 0x121401, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000001c40)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') sendmsg$NLBL_CIPSOV4_C_REMOVE(r7, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001400)=ANY=[@ANYRES32=r6, @ANYRESOCT, @ANYRESHEX, @ANYRES32=r4, @ANYRESOCT, @ANYRES64, @ANYRESHEX=r3], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000500)={0x6, 0x4, {0x3, @struct={0x0, 0x5}, 0x0, 0x7, 0x6, 0x10001, 0x7, 0x7bc2, 0x4, @struct={0x2, 0x2}, 0x5, 0x1, [0x4, 0x7, 0xfffffffffffffff8, 0x0, 0x4, 0x40c]}, {0x4a, @usage=0x2, r2, 0x3, 0x800, 0x0, 0x8, 0x81, 0x428, @struct={0x1, 0x20}, 0x0, 0x2, [0x100000001, 0x1, 0x5, 0x1, 0x8000, 0x9]}, {0x7, @usage=0xffffffff, r6, 0x2, 0x0, 0x0, 0x4, 0x1f, 0x90, @usage=0x102, 0xe0000000, 0x6, [0x8000, 0x9d86, 0x2, 0xf4e, 0x1, 0x3]}, {0x0, 0x9adb, 0x5f2}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000540)={0x0, 0x5, {0x6fdf, @usage=0x8, 0x0, 0x5, 0x55e, 0x8, 0x3, 0x9, 0x20, @usage, 0xffffff00, 0x7, [0x100000001, 0x0, 0x7, 0x1, 0xfffffffffffffffe, 0xa45]}, {0x2, @usage=0xfffffffffffffffe, 0x0, 0xfffffffffffffbff, 0x3, 0x100000000, 0x8, 0x0, 0x448, @struct={0x3b64, 0x3}, 0x800, 0x7fff, [0x3, 0x4, 0x0, 0x2, 0xff, 0x100000000]}, {0x9, @usage=0x7e47cf27, r6, 0xe1, 0x4, 0x5, 0x1, 0x3, 0x67, @usage=0x7, 0x2, 0x3, [0xfff, 0x5, 0x0, 0x101, 0xe2b, 0x8]}, {0x78d, 0x40, 0x3}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000100)={0x2, 0x3, {0xfff, @struct={0xb3, 0x6}, 0x0, 0x8, 0x7fffffff, 0x1, 0x9, 0x8, 0x0, @usage=0x239e, 0x4, 0xba, [0x1ca2, 0x5, 0x5, 0x40, 0xfffffffffffffff9, 0x2897697]}, {0x3ff, @usage=0x5, 0x0, 0x8000, 0x800, 0x1, 0x6, 0x6, 0x40, @usage=0x8000, 0xfffffeff, 0x0, [0x1, 0x1, 0x6, 0xefa0, 0x8, 0x5]}, {0x0, @usage=0x8001, r6, 0x6, 0x5, 0x100000001, 0xae, 0x6, 0x0, @struct={0x2, 0x1f}, 0x4ebf, 0x1, [0x8, 0xffffffffffff8786, 0x2, 0x0, 0x81, 0x7fffffff]}, {0x0, 0x10000, 0xd4}}) fcntl$getown(r0, 0x9) [ 250.273530][T27280] FAULT_INJECTION: forcing a failure. [ 250.273530][T27280] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 250.286798][T27280] CPU: 1 PID: 27280 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 250.295321][T27280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 250.306164][T27280] Call Trace: [ 250.309531][T27280] dump_stack_lvl+0xb7/0x103 [ 250.314134][T27280] dump_stack+0x11/0x1a [ 250.318424][T27280] should_fail+0x23c/0x250 13:43:39 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x1000000000000) [ 250.321593][T27259] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 250.322846][T27280] __alloc_pages+0x102/0x320 [ 250.336441][T27280] alloc_pages_vma+0x391/0x660 [ 250.341248][T27280] ? follow_page_mask+0xceb/0x1040 [ 250.346360][T27280] do_anonymous_page+0x16e/0x8a0 [ 250.351351][T27280] ? strlcpy+0x65/0x80 [ 250.355421][T27280] ? sync_mm_rss+0x136/0x150 [ 250.360018][T27280] handle_mm_fault+0x966/0x1a60 [ 250.364887][T27280] ? perf_trace_mmap_lock_acquire_returned+0x1e0/0x210 [ 250.371744][T27280] do_user_addr_fault+0x609/0xc00 [ 250.377032][T27280] exc_page_fault+0x91/0x220 [ 250.381665][T27280] asm_exc_page_fault+0x1e/0x30 [ 250.386519][T27280] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 250.393117][T27280] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 83 f8 [ 250.412729][T27280] RSP: 0018:ffffc900114cfce0 EFLAGS: 00010206 [ 250.418827][T27280] RAX: ffff88812fb5a9e0 RBX: 0000000000001000 RCX: 0000000000000040 [ 250.426803][T27280] RDX: 0000000000001000 RSI: ffff88812ffc7fc0 RDI: 0000000020021000 [ 250.435032][T27280] RBP: 0000000000001000 R08: 0000000000000000 R09: 0001ffffffffffff [ 250.443047][T27280] R10: 000188812ffc7fff R11: ffff88812fb5a000 R12: 00007ffffffff000 [ 250.451026][T27280] R13: 0000000020021040 R14: ffff88812ffc7000 R15: 0000000020020040 [ 250.459007][T27280] _copy_to_user+0x77/0x90 [ 250.463433][T27280] environ_read+0x248/0x340 [ 250.468009][T27280] do_iter_read+0x2be/0x4b0 13:43:39 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') r1 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ae0000/0x2000)=nil, 0x2000, 0x0, r1) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, r1) r2 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00002d5000/0x2000)=nil, 0x2000, 0x2000000, r2) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) 13:43:39 executing program 3: r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1000) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f00000000c0)={0x9, 0xa8e5}) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='limits\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x71}], 0x1, 0xffffff, 0x0) [ 250.472524][T27280] do_preadv+0x13b/0x230 [ 250.476771][T27280] ? __cond_resched+0x11/0x40 [ 250.481459][T27280] ? fput+0x2d/0x130 [ 250.485448][T27280] ? ksys_write+0x157/0x180 [ 250.489955][T27280] __x64_sys_preadv+0x54/0x60 [ 250.494659][T27280] do_syscall_64+0x3d/0x90 [ 250.499083][T27280] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 250.505001][T27280] RIP: 0033:0x4665d9 13:43:39 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000000080)=[{}, {&(0x7f0000000040)=""/56, 0x38}], 0x2, 0x1000000, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x119) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f00002d6000/0x1000)=nil, 0x1000}, &(0x7f0000000100)=0x10) 13:43:39 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) prctl$PR_SET_MM(0x23, 0x3, &(0x7f00002d5000/0x4000)=nil) [ 250.508895][T27280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 250.528620][T27280] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 250.537036][T27280] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 250.545009][T27280] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 [ 250.552984][T27280] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 250.561069][T27280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 13:43:40 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090004ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:40 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x40030000000000) 13:43:40 executing program 1 (fault-call:2 fault-nth:68): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 13:43:40 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x1000000000000) [ 250.569045][T27280] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 [ 250.577180][T27293] device lo entered promiscuous mode [ 250.583843][T27295] Y­4`Ò˜: renamed from lo [ 250.653428][T27325] FAULT_INJECTION: forcing a failure. [ 250.653428][T27325] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 250.666527][T27325] CPU: 0 PID: 27325 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 250.674946][T27325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 250.685008][T27325] Call Trace: [ 250.688300][T27325] dump_stack_lvl+0xb7/0x103 [ 250.693218][T27325] dump_stack+0x11/0x1a [ 250.697393][T27325] should_fail+0x23c/0x250 13:43:40 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip_vs\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000000)) 13:43:40 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x7, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) bind$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000300)={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @broadcast}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, &(0x7f0000000340)=0x3, 0x4) r2 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmmsg(r1, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000004ac0)=""/102389, 0x18ff5}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r2], 0xc63b9e35) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x180, r2, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3af}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "cb5ae092ef193b177cc2a97f31cee83e23a81d5165f2ec3b7aa34734"}}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_BEARER={0xd8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x800, @remote, 0x3ff}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @empty, 0x80000001}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x11e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x20004016}, 0x4040805) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) [ 250.701822][T27325] should_fail_usercopy+0x16/0x20 [ 250.706961][T27325] _copy_to_user+0x1c/0x90 [ 250.711378][T27325] environ_read+0x248/0x340 [ 250.715891][T27325] do_iter_read+0x2be/0x4b0 [ 250.720558][T27325] do_preadv+0x13b/0x230 [ 250.724810][T27325] ? __cond_resched+0x11/0x40 [ 250.729521][T27325] ? fput+0x2d/0x130 [ 250.733460][T27325] ? ksys_write+0x157/0x180 [ 250.737954][T27325] __x64_sys_preadv+0x54/0x60 [ 250.742634][T27325] do_syscall_64+0x3d/0x90 [ 250.747133][T27325] entry_SYSCALL_64_after_hwframe+0x44/0xae 13:43:40 executing program 5: r0 = socket(0x2, 0x80802, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x20000009}) epoll_create1(0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x80000000, 0x0, 0xfdffffff00000000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = signalfd(r1, &(0x7f0000000000)={[0x3ff]}, 0x8) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f00000000c0)={0x2000}) shutdown(r0, 0x0) [ 250.753041][T27325] RIP: 0033:0x4665d9 [ 250.756936][T27325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 250.771177][T27324] loop2: detected capacity change from 0 to 264192 [ 250.776718][T27325] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 250.776761][T27325] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 13:43:40 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) pkey_mprotect(&(0x7f00002d5000/0x4000)=nil, 0x4000, 0xa, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x6, r1) fstatfs(r0, &(0x7f0000000180)=""/225) 13:43:40 executing program 1 (fault-call:2 fault-nth:69): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 250.776771][T27325] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 [ 250.776780][T27325] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 250.776789][T27325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 250.776798][T27325] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 [ 250.853440][T27354] FAULT_INJECTION: forcing a failure. [ 250.853440][T27354] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 250.866855][T27354] CPU: 1 PID: 27354 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 250.875263][T27354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 250.885316][T27354] Call Trace: [ 250.888597][T27354] dump_stack_lvl+0xb7/0x103 [ 250.893246][T27354] dump_stack+0x11/0x1a [ 250.897621][T27354] should_fail+0x23c/0x250 [ 250.902044][T27354] __alloc_pages+0x102/0x320 [ 250.906648][T27354] alloc_pages_vma+0x391/0x660 [ 250.911422][T27354] ? follow_page_mask+0xceb/0x1040 [ 250.916543][T27354] do_anonymous_page+0x16e/0x8a0 [ 250.921538][T27354] ? strlcpy+0x65/0x80 [ 250.925615][T27354] handle_mm_fault+0x966/0x1a60 [ 250.930465][T27354] ? perf_trace_mmap_lock_acquire_returned+0x1e0/0x210 [ 250.937405][T27354] do_user_addr_fault+0x609/0xc00 [ 250.942431][T27354] exc_page_fault+0x91/0x220 [ 250.947028][T27354] asm_exc_page_fault+0x1e/0x30 [ 250.951882][T27354] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 250.958650][T27354] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 83 f8 [ 250.978351][T27354] RSP: 0018:ffffc900114cfce0 EFLAGS: 00010206 [ 250.984470][T27354] RAX: ffff8881311eca60 RBX: 0000000000001000 RCX: 0000000000000040 [ 250.992478][T27354] RDX: 0000000000001000 RSI: ffff888107906fc0 RDI: 0000000020022000 [ 251.002768][T27354] RBP: 0000000000001000 R08: 0000000000000000 R09: 0001ffffffffffff [ 251.010856][T27354] R10: 0001888107906fff R11: ffff8881311ec080 R12: 00007ffffffff000 [ 251.018825][T27354] R13: 0000000020022040 R14: ffff888107906000 R15: 0000000020021040 [ 251.026836][T27354] _copy_to_user+0x77/0x90 [ 251.031255][T27354] environ_read+0x248/0x340 [ 251.035797][T27354] do_iter_read+0x2be/0x4b0 [ 251.040297][T27354] do_preadv+0x13b/0x230 [ 251.044583][T27354] ? __cond_resched+0x11/0x40 [ 251.049259][T27354] ? fput+0x2d/0x130 13:43:40 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x100000000000000) 13:43:40 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') r1 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ae0000/0x2000)=nil, 0x2000, 0x0, r1) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, r1) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) 13:43:40 executing program 5: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) pkey_mprotect(&(0x7f00002d5000/0x4000)=nil, 0x4000, 0xa, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x6, r1) fstatfs(r0, &(0x7f0000000180)=""/225) [ 251.053142][T27354] ? ksys_write+0x157/0x180 [ 251.057742][T27354] __x64_sys_preadv+0x54/0x60 [ 251.062413][T27354] do_syscall_64+0x3d/0x90 [ 251.066821][T27354] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 251.072887][T27354] RIP: 0033:0x4665d9 [ 251.076767][T27354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 251.094620][T27324] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 251.096990][T27354] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 251.097010][T27354] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 251.097048][T27354] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 [ 251.097058][T27354] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 251.097068][T27354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 251.146417][T27354] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 13:43:40 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090005ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:40 executing program 5: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) pkey_mprotect(&(0x7f00002d5000/0x4000)=nil, 0x4000, 0xa, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x6, r1) fstatfs(r0, &(0x7f0000000180)=""/225) 13:43:40 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='sched\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) 13:43:40 executing program 1 (fault-call:2 fault-nth:70): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 13:43:40 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x200000000000000) [ 251.214544][T27387] FAULT_INJECTION: forcing a failure. [ 251.214544][T27387] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 251.226463][T27393] loop2: detected capacity change from 0 to 264192 [ 251.227618][T27387] CPU: 0 PID: 27387 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 251.242664][T27387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 251.252709][T27387] Call Trace: [ 251.255992][T27387] dump_stack_lvl+0xb7/0x103 [ 251.260662][T27387] dump_stack+0x11/0x1a [ 251.264904][T27387] should_fail+0x23c/0x250 [ 251.269306][T27387] should_fail_usercopy+0x16/0x20 [ 251.274317][T27387] _copy_to_user+0x1c/0x90 [ 251.278729][T27387] environ_read+0x248/0x340 [ 251.283220][T27387] do_iter_read+0x2be/0x4b0 [ 251.288536][T27387] do_preadv+0x13b/0x230 [ 251.292808][T27387] ? __cond_resched+0x11/0x40 [ 251.297477][T27387] ? fput+0x2d/0x130 [ 251.301386][T27387] ? ksys_write+0x157/0x180 [ 251.305897][T27387] __x64_sys_preadv+0x54/0x60 [ 251.310553][T27387] do_syscall_64+0x3d/0x90 [ 251.314953][T27387] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 251.320862][T27387] RIP: 0033:0x4665d9 [ 251.325194][T27387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 251.344864][T27387] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 251.353260][T27387] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 251.361362][T27387] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 [ 251.369319][T27387] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 251.377409][T27387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 251.385379][T27387] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 [ 251.414102][T27393] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 13:43:41 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) mremap(&(0x7f00002d4000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00002d6000/0x2000)=nil) 13:43:41 executing program 5: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) pkey_mprotect(&(0x7f00002d5000/0x4000)=nil, 0x4000, 0xa, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x6, r1) fstatfs(r0, &(0x7f0000000180)=""/225) 13:43:41 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x300000000000000) 13:43:41 executing program 1 (fault-call:2 fault-nth:71): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 13:43:41 executing program 3: prctl$PR_SET_MM(0x23, 0x4, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') r1 = openat(r0, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x80) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x0, 0x0) preadv(r2, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/69, 0x45}, {&(0x7f0000000180)=""/144, 0x90}, {&(0x7f0000000240)=""/201, 0xc9}, {&(0x7f0000000340)=""/113, 0x71}, {&(0x7f00000003c0)=""/4, 0x4}, {&(0x7f0000000400)=""/87, 0x57}, {&(0x7f0000000480)}], 0x7, 0xfffff64c, 0x100) mmap(&(0x7f0000050000/0x1000)=nil, 0x1000, 0x1000002, 0x810, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000040)={0x1, 0x6, 0x800}) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000640)=0x2c000) preadv(r0, &(0x7f0000001400), 0x0, 0xfffffc, 0x0) read(r1, &(0x7f0000000680)=""/152, 0x98) syz_io_uring_setup(0x4725, &(0x7f0000000540)={0x0, 0xb776, 0x1, 0x2, 0x39c, 0x0, r2}, &(0x7f00002d6000/0x4000)=nil, &(0x7f00002d7000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000005c0)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000600)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd_index=0x7, 0x8, 0x0, 0x27ee, 0x4, 0x1}, 0x20) 13:43:41 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090006ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) [ 251.660670][T27416] loop2: detected capacity change from 0 to 264192 [ 251.677474][T27416] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 251.679686][T27420] FAULT_INJECTION: forcing a failure. [ 251.679686][T27420] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 251.700051][T27420] CPU: 1 PID: 27420 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 251.708457][T27420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 251.718509][T27420] Call Trace: [ 251.721784][T27420] dump_stack_lvl+0xb7/0x103 [ 251.726422][T27420] dump_stack+0x11/0x1a [ 251.730572][T27420] should_fail+0x23c/0x250 [ 251.734987][T27420] __alloc_pages+0x102/0x320 [ 251.739567][T27420] alloc_pages_vma+0x391/0x660 [ 251.744358][T27420] ? follow_page_mask+0xceb/0x1040 [ 251.749490][T27420] do_anonymous_page+0x16e/0x8a0 [ 251.754422][T27420] ? strlcpy+0x65/0x80 13:43:41 executing program 5: openat2(0xffffffffffffff9c, &(0x7f0000001f80)='./file0\x00', &(0x7f0000000000)={0x1a9dc2}, 0x18) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)='system_u:object_r:dhcpc_state_t:s0\x00', 0x23, 0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000a, 0x12, r0, 0x0) open(&(0x7f0000001080)='./file0\x00', 0x400000, 0x1a8) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) writev(r2, &(0x7f00000014c0)=[{&(0x7f0000000080)="b8", 0x1}, {&(0x7f0000001640)="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", 0x140}, {&(0x7f0000000140)="f0f94bea9cc2033ba9e51efd4a2670ebb40fb2631faf85c202c2baa2f21e4bf41bda1953e3c6942d4f3157d2de52db3be7a8efaea480ad0fa051540ce3073e887894e8c4588b053ef0a2303749947ca87f18c8e84797cdce99a6dd290b9de24dc5dcf0757eb5f3bd0f6c5fac900b74372ad6903bba5cb297f877f6a4630da7341da99e23460e503a21b57096e7016cd7eacc95d07e318800db754ff7916bf0fc71632458597a9e4a0e9e7346b3aaae9cbf810a650b01ae6efa3becc5efc8be84c47ff90e937894a2efeb27b0387e89d785333c06d749b95a8b2331b8ec4b859c33f8a804b21f76c6652650c3dc11d8c3e848239e2086fe6a39b00d931a08ec00c692805051d8b56f7912245c349eb08d0287d48b82cf3be99b8103f5f4055978e128204159bf26fb69476f2c82e066d581057cbd884b9bf7bcf6ec1fd7c4f8b8b2be3416fb6ab78b91bd21845b3bb74e873f86eb588727d19744423b212e14264996878fc6a893eb4c6917067827a5dc968089ae5e99f6714fa58cc4aac7de69f72b7acffc9abb1b76f0d06feffcc51e660280c709db8bbca37ca061d38449a79beec16f8bed21a2a0e7174ac7befd246e163bf701956696fc189c35be486c081ca4fa37c520d84fc5394325282d93125c71cec21e184de97a34c4d10fd7ba7486ac4a302e6caef07139a8592805cc976223aaf5e3e12053ce189bc368e0bb436ec854f9777adb0152964dca7cc67105b6d9b8750e14c2f67b94145a870fff1a244ee46350d0932cbeab4e17c5884a5e54e9489d90d3c8562d7801495f9dec282f8f831a5b3540857b148993f4beba32820de89c1b714e05f957a837d54e11a848d32a23ad5cc2d1b6b6428d62921ac935fbf9a73f4c6a95ae060b0925c41cc1b6afd46c74f3c646a3a6776b178603c512e7da1e4fa9a95c6ccafdb3762e843db24fc7d8530e1a7b5fd4b4eaf54f2cc8c064d6090658bcba497e1023e7aa0bc2005f8cbaadf45376035bc52c40338096deaddfb49477b8d1c7bcdda732d062b0bbfa9515d16e526f9feacaacd37baea4411c7dc862b66c8966c1303ac519013efa877c0470822c2ff1425e4e6d177c7ac4782e60fa26e9d63d3e5c3c933a4b3685b0e74beea3b6b1e2a3454dd910e6844e6055bbac0a2b1f50ef633b634a247e56fdedfabc07992d7d7e3cdd5a3760d571522da4a15a9f793588a8a39be1be80c4025d3975d1e1c7181eb3ddd686db13301d5eacf2e9465d52baab3692bb0afbf1553d52666647d4dd1e338eea8c9a9dc7326d5cb810eb833d8fc54e300f3eb68446fdd68907353b198d4f59ef2e7d0c7c393a20607ae0b1c0a20fd6190975755e48f49db19a4408246085894a8d86a2438a0eeb53a466a21b90206ff41f9c77c2587cdb4f4f932fc2972bcda3f7eec8b33bc19ef05c2bf6eb3f4b9d301c234a92038b08b583580d717e0cf7f9c23d7054357f7d99d61828488e771d97da1f981fbeaff481d275af108164846a264ca7a7547205633c8c31e5a775552593856d31999183275bfa9d58f8488c402fe187a200f2d0dcdd5a67461841a4be167bce9ec64ba51e7c5bf1108353246a0de6755a7c786c4e37c75c5c2d793becd5a100621480ae7d86150408a1d270bedd1a5ee539f3ce262fbc754cdf67922bd6b5c92c4a4cc892f8956697c623b90dea42c0c46ce21948d80c2e92c2c525a700d7c5dfa75de87d234b9767022f716833d3aa7158ef34e91c30f20f306aab4e664e3c5217f782de1aeb094893fc37f6f8e5af5e9c77cb85f8acfff9bf4ba2fc2834a1187b1414ac0ad88acaa02941ec5ce4e4af690d9261713ea28c82a1f3a105853ecfe1ef2c72ec4c1c840dbbb8511771fd45fe73436c39a43d6ced289654ccd707a13c694474b6ab2b1cb05348d1d438c689af61f33994e4605e88330da5416edb0f1e056252090c4ca9a567afbc3a903f47cd2646cb085399306cc0e65eb6436c2642c8660f05e9a900a17a524bd35af061b7cf2db8a9a666f36cdc35bbe35c705bd234afd5bf5d3af388bcc1ca8cac261c5aeeee233172cbee3f6abf9bcc6b06c322a658ea299f254d469f9bab831407e23e5450d1c3809e511338c22d722fc400afab569a31f00d1143be5437e804166ebf74af93c99d28990ee12c4734af69f55c7301d3ba33c58d49183ad17934b1db529b748f8dbc982cd976434a62d2432ca407be2ca57a6203120beb8128a7c8c8ddcc43d1d98f68aca47dafd7ed8e3356c2dac293ff6866d597bbcb8e43958a4363da5aa09fac976b674d8364f41ecbca15b7177792a156de6a802cd0e2b1c3118e9c9e396b3155da21c3fe89dbd3affef6c1a81941b7631a94f12b0dab5debc198482ca29b36cf5076f69fe6d1408c89f23bf788b246fe5e3cf91c659c6bfe714ea3108c3027a352352d7ad7455a4aed68000d6a7f23824f4263d5cc8142c5833b8ef58fb186fb52c6818c714d83771b62ecd1d6e7c7893f2383f79f47d014fef37ed18557a63cec78d6e92becb23160bb8806a8292f34efbcc8ef1689f573d6d875bbd9dfe9c587536ec03aa83f1458383b1897da24249a5b4bde761e0c449b1cd8f0db5c9889936dbd5a52cf64f9e0bf60aa5ebde2d8fba8db73a8bc9cedd0ce8e60bb3fff6226203ab8f4c2e5ad05587787647929763795a93ae049d9ce34d7a71988b5342ed87f5e2231552081a401bb0e8b8587b56295d91415fbd919ae713a2de1bd7f2351432b46f7e4b3fe282addbce24ec7527fa4bec7731e98ca3beae6748c6d13a487924a9e5ed3787a1c76b1f61a997dd149b9e5e9b56885a11713afcc16be1853ef0f28c28b10ee68084ca29dfa795b869ccc18cc60cb3de42feb8fa57a7d4dbbf61c593edbfbb82ce733a35390e2919ac5a93aa075d713cf8c4fa9ab381bf51e745a7b63bc8190b9967d3060e47904360b27ee1a434faf2152ad880cdc18797537d21e7950a5e30df346737321cb69a9cc51c2f44257e5d3b8556ff473fbe57be6ddd423a85726924943d0611bef058dab3f5a0c322874c000a1cd071421115650add8f49cb38c06733b96d4be03183740e46bdf4ad81de95f70448ce71aed3459df45b102a42e30db8934ce2d4a2454bb0d0fb98a8d6ef76203857d5c8fe533bacd2723bc92e962dff3015d062ec3f10f07be1a8110978a09b815ea624bee57f20cb86fc588188398d8bcc80ecd2233e8e13a366ee9fcaf01507844393048acfc936cff9ea057c7d76ae21858c17bacf7ef38bfdb46fa2a7b8b442f84b786e3cff32412e6d02200388c5d142a5b9d4460d82f48e5fe4714f52472c0116a7457fc8db45f67c7c6cb843f7e5ff4a4a2b999bac9bdc121bae1017218f9cac8085622a23aeee1f588468e415c171da330d537afccebac9dcbfc6abffeaa4104b58de01aff95b4713ccdf93bba65e23945acb19c8c4f12a9f727224b2c7130578caba5fd3ebdafafd2fea8c01ba24acaf2e9dd3553ed6e9f92ffff69eaf00e2dac4b75f6c5037c6f3a734fda8beaf786051dc86307086c96611e3a860c8a133b5c9b716d2af06fa2913b8bc4c7a170ea0151eccc20ce6a9ea1c7f5d3069e858df173761327321a21e724dade0d5b930183c750bb5bdf1d366a93b2bdde6e856b65023e428d979354c116a12c815ec90188cf9db5ddd97a6c723914e75973d343af8d54899abb59d3664f6197c16c396df01123155a142ba5acf5b613e4f9dc425f98d5f3f9a4b9794ea114a4c6a8dc5c62cdff5c43b0c6f4c5149638ec943213c1a42fb312896c3d56617a9a1fe223453ac0b5cf3443e564928e7a8248967e5bae7c7fcf15dcf4f5b7eb6e95bf4e3c9a0159fc68f2811495828b5317b48f9e2f45d9c6b258fb459431dc42cfca05df13ba588ad002f72bf0303b151de19f0b09dc56caa057a4bbf89cd45ad05acb8d2b739c80dc4c74c98d8bf1acd051afbb5e1f5b30327e237299cf7c5129a134e8aae2ad8085ccb2bf88194a285f5c6aea78343e9478de187207984986b41be59d485d740afd5c0fa72adecacfb717e4a9b7597bdb5524a26193ef0a12d0af6741f576976e8fbf09a4558368a0dadcfb9d8119eda58f14f8b5826d835f992c3dbb58ee57870eb3d5ebb4a4c92c59d44a60623f32c1236e2a80e8f5fda1f44d17f0d057227c5ffcf887b3514c86ec5b314d979d374d692f9c0aab2f16cdf9e23c3a20144837498dd6feaed7b85d868f891645f023fb3756d3769ddc11ccaf2fd232cf057d88929d059811919b9c41790b0994a19b738a66b76868bd2a76cf82c3d950b58ef256ef6a4eb220be2086418b221ad7189abe9afc249b8b34b1c7739b79ae47fc90841fecc20598cee63b19af6195f557a346884821fafc6924b34953f0f096fca29c804aaed325d2d0923f2e21f9e4cfe234edccb239656a8f975887ceab084648fc238e41025ae4dd196f35f43269edaa96c1d92b8c7a5e46ae356ffc20496aa8006f322e1f151f413e08b1a9205b2d9915a5462aadcb46f6aeb79d4ce931dde89efce996f32209e5fa68205a9f5eacac171b55ccee03b2e34858949f3ea9c04ca77e5a42b6a0e52ab2f3bf7e9ab8ea3c31ee47504c50ec5d232f6be57913f07f3fe81cc83cb1724ab94462e5f47334319b1c0942ef720b36bb249c514455566aa8cd4b1bfbf738acbe65001f87cd345e0833e45f059e8f54dfd57e252373d4818c3faf91a627de4c665611cbbf880daee97f6581f4e1db9db040f8c31cee8027a53eb439523511860553555ccc47619dfa403b434aa780a32b5dcc5a949664ab2fa9b7593e2a123ae04614e6ed063978c61f9627107fab0e7f4e57e0d6dfea727648816244d6a2bda21820e8315fdee28719e139c7699cd35d24a5fa0695652bf6254c7009789afd0e926055a5650d330c405d7c85fe35da9561a915d036cc3b6b21bfab4f56a38cbf43f616b92b4e5060a033ddaf3a007e56efae176df140f8ef06dafbf5167c45316e8fcd25acd413ed696804be3a526797d034333d16f0942d94a3bd943bf9f891ed7134ee7ba3c09a44d7f64a12c5318ffaa02133d0047eebde319337befb15e369ebc316476f0bd760b64c6eb8f38e7c3989e0d03c11a04bee1876138f7d1c17bc4a8d64b8610a8d5ca71cf77cace109c82ca6115a39b88c648eee6409c707e4b680e731ad3023462bcd53e572dcd9ad7cbfc32dea97bd98b3e29bc0de65e7282eb0edd52e8330fbbf6a7c5fadfa5607f508117e2e017a62d1c7b45f9a3a2e128b459edfd6789a18c3d786d67307315696610c5eebad0a579a8160d76adc4e49ca56dc7fbde062fd454c4c25ae9d51", 0xec1}, {0x0}, {&(0x7f0000002fc0)='R', 0x1}], 0x5) listxattr(&(0x7f0000001040)='./file0\x00', &(0x7f0000001fc0)=""/4096, 0x1000) 13:43:41 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') r1 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f00002d2000/0x4000)=nil, 0x4000, 0xc, r1) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) 13:43:41 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f00002d5000/0x1000)=nil, 0x1000, 0xe, r1) openat(r0, &(0x7f0000000240)='./file0\x00', 0x50000, 0x14a) r2 = accept$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000002c0)=0x1c) mmap(&(0x7f00002d6000/0x3000)=nil, 0x3000, 0x2000000, 0x1010, r2, 0xacf2a000) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="a8008000d0f93ff92a2d6ae151a61d1b", @ANYRES16=0x0, @ANYBLOB="000429bd7000fcdbdf252e0000000c009900080000004f0000000a00c8006492e0bf5d480000dbff42000100000010009d00040000000900ffff0008020005001901090000000a000600bf15773ff1de00000400cc000600fb00020000000600fb00000100001a00fc006325f1b1e713ab140a77d7c1280000000e00f9008819a6ef2111af43d8b9000005001901020000000800350004000000"], 0xa8}, 0x1, 0x0, 0x0, 0x80}, 0x8805) [ 251.758497][T27420] handle_mm_fault+0x966/0x1a60 [ 251.763348][T27420] ? perf_trace_mmap_lock_acquire_returned+0x1e0/0x210 [ 251.770265][T27420] do_user_addr_fault+0x609/0xc00 [ 251.775289][T27420] exc_page_fault+0x91/0x220 [ 251.779875][T27420] asm_exc_page_fault+0x1e/0x30 [ 251.784729][T27420] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 251.791326][T27420] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 83 f8 13:43:41 executing program 3: prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffa000/0x3000)=nil) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x1, 0x2, 0x6, 0x3, 0x0, 0x6, 0x8010c, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_config_ext={0x7ff, 0xfffffffffffffffd}, 0x2, 0x80, 0x9, 0x1, 0xb, 0xfe, 0x3, 0x0, 0x2, 0x0, 0x1}, r0, 0xa, 0xffffffffffffffff, 0x9) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) pkey_mprotect(&(0x7f00002d6000/0x4000)=nil, 0x4000, 0x1, 0xffffffffffffffff) [ 251.811192][T27420] RSP: 0018:ffffc900117ebce0 EFLAGS: 00010206 [ 251.817317][T27420] RAX: ffff88812f9daa60 RBX: 0000000000001000 RCX: 0000000000000040 [ 251.825295][T27420] RDX: 0000000000001000 RSI: ffff88810757afc0 RDI: 0000000020023000 [ 251.833265][T27420] RBP: 0000000000001000 R08: 0000000000000000 R09: 0001ffffffffffff [ 251.841238][T27420] R10: 000188810757afff R11: ffff88812f9da080 R12: 00007ffffffff000 [ 251.849303][T27420] R13: 0000000020023040 R14: ffff88810757a000 R15: 0000000020022040 [ 251.857273][T27420] _copy_to_user+0x77/0x90 13:43:41 executing program 5: unshare(0x6c060000) unshare(0xa020000) unshare(0x3a050700) set_mempolicy(0x3, &(0x7f0000000100)=0xa1a3, 0x1f) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000000)={'mangle\x00', 0x21880}, &(0x7f0000000080)=0x54) unshare(0x400) [ 251.861809][T27420] environ_read+0x248/0x340 [ 251.862394][ T25] audit: type=1400 audit(1625838221.114:1240): avc: denied { setattr } for pid=27410 comm="syz-executor.3" path="/proc/27410/task/27421/environ" dev="proc" ino=63298 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=file permissive=1 [ 251.866316][T27420] do_iter_read+0x2be/0x4b0 [ 251.896513][T27420] do_preadv+0x13b/0x230 [ 251.900783][T27420] ? __cond_resched+0x11/0x40 [ 251.905465][T27420] ? fput+0x2d/0x130 [ 251.909362][T27420] ? ksys_write+0x157/0x180 [ 251.913864][T27420] __x64_sys_preadv+0x54/0x60 [ 251.918540][T27420] do_syscall_64+0x3d/0x90 [ 251.922958][T27420] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 251.928874][T27420] RIP: 0033:0x4665d9 [ 251.932755][T27420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 251.952378][T27420] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 13:43:41 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x400000000000000) 13:43:41 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) r1 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f00002d6000/0x1000)=nil, 0x1000, 0x9, r1) [ 251.960775][T27420] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 251.968735][T27420] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 [ 251.976716][T27420] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 251.984691][T27420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 251.992657][T27420] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 13:43:41 executing program 5: syz_mount_image$iso9660(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="7e9408000000000000003078303030303030303030303030300d34642c7362736563746f727cc0d725fa66c68e3ccc4424cbb968625837bfd296544647add477620cf4625556a2e32028b4d8f47b83f9291a277686fe9f4d91311df41e48086db95e20dfd6a0166652f7"]) 13:43:41 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090007ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:41 executing program 1 (fault-call:2 fault-nth:72): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 13:43:41 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) 13:43:41 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x406000000000000) 13:43:41 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) prctl$PR_SET_MM(0x23, 0x0, &(0x7f00002d5000/0x1000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) 13:43:41 executing program 5: sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="c5b8aa26958db7d05eb5b2"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102385, 0xfff7}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20001, 0xa9) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000040)="046428267d6705d3b16d5ec4cf5859141bb234254f78e869224b11d4d09e64c96518151322d54c9f4ddcd3d2de5cd29fe4", 0x31}, {&(0x7f00000003c0)="a6400cefa552773b6f04301b18f30b251c7931f09115d8d35baa3b947dc5190d53d6596bd4da5289ccf2254979300ef5bfb85088e11233227edeb20ed85c53f41f61e4c76ff35f5356a3fbc4ae913269bf2bb1a880944bdb9c1c498bc0179b267d6b0a1ad70c8b375ae70dd06da5df533f24eca91fb155e81bac17c3a1d8b13a1be69109b83a0809e528c18ece937fefb2669acdd094892f00935af7bddd90b3f78513aed3b23f1194be432b1ebb007b4fd4d0d62a73c66dc8c974840a7653b39db6affb893c1e75f17ef76dab1ced2f43f91c1d7ebd0e2795ba54d49d81ea594fdcfba55c224aadca91e00916b1aa8ee15bf8630ab4a30529260e382a931d6197830cd6263eb0a3f987cf1ce0ac3f9feb4766283e678bc5e96dc50def6fa61c493e549cae9791ef92ff3e7b1f7d1b8fa171da16afc6cb45b1c45858487287991077eeae7b7477cc73ff17a406a0005b3db80c6332414d5d0f9da28ebbc1bcca4c6709274a41bd53b070039e795beac011d801b74c2a4a23f7115fe99509902343e566f831b10c6fc1ca3676b1b46a46b9af43fd973fb6c9e10a2228545dd04b33d631543533edc1eed329ae3e058b652b5a9107112808e2f5b5e7f8031237837579eff74cb07166bb59fa917828be5c205614cfdb5fdc35db4476b469f3021b4e591da5dbb3805992fa34a70f26a6e949cf5c7025b84efdfb84ea3b3450761c345e84e2211d7756ab9b8263084e41195a69641858b10258b177b31d711e53eb5f9296d054ae9bb470b09fca71189523834e12050a0d5b6148eb135a2d53a36a078adafc61c09b9be3168ebe715d86a96f5c163c8b4e475529459efcce04a8a79b49a8b1b5a97cbd613fb8ba81c7e6d8437d589b3d221518fdeb04816392693d966a44d5919fb416161d5bd819a4fe4fdb936e470b64d38b4e73d80fd304a989a89d77b2f1f6920c6cddcfd1b987c68f77e57fb2e8810e89de385eeac6d92b08d1357468149d6063ca0286549de26676a861230fa9a1988c12d21d9c692a63d943b260cd0ae369c15d9dd24448e8e2b481e827ee3a64e381ecedf2f2849fda9e6e5c7d2f2365cae3bc3faf08f735ccc6f10534ae55e78a3f1f1f1f8dd95b01dfcf0a65ed557727f3d7a8e45e3a5e4e96e47baf148e63d5316fc4853c4b5c71e4007ff36e2754ba26f328f5290bd7e185c500ede4b004c6c4c2f24eb9528ebf1e2d7c333d7a3bf140ddf8617ea90ea393ee0271e619406f662b274da82a28e32f17971a0732cf12a7183c6723ff7e220aae7180f39b5ce465db6f75a34ba03d0fc7ca42eabc8231468a6618deb0d45fe641b500a9f33e54a2a90e6b8b92765112f7800ccaf4a5d4bff9e1d6d745b0993ce0d2ecc1935ec0587429eb1c5e2e05a95b0f5a54c0b51159574948cf51d3711d8986aff70cc0ac4acc80c527a11934168bb33d5d212726d154159c31f70f0405f8ff648f582c47bf99a437b31b2eb9413fe1fc805ec64d459919b198b697b72236e4da404d31ac03374d5d4e513c799cf002218ac80fbd682ba46c9463f245bab45cf019277652b6aadd64297982f416e349e20e01275a725f4455560794a81a8791948cef7c94a3b79016d39dfcf9032685d2c695b5f5df17caf1bec1c04b677d299d24148e305a932b969576a2e82a95896de1b437f8c87b692de601d14aad6bde07ce3803d85a8c2962e7e3597bfb30e966b65370fbb6e162c9ed53784f9490501b4aec09bed2abfd633a6aaeee30a724a77e604775d675d00104c15c7de13dca5766b894405fcd2f581cd3fa5d19bb0138a0ee9fcd18289c517fae68a9abfc0a6525de30b1040ab300620a2317d63b6d68782cb88f11c11ff8d59581a561a362f1a622f7536017b6b61bc21a71fbd496b1e424b6f309a00a92a63734f0fb8518f05befab90aa551e96f0333d90b316328b137ef15a0ff55ae55b5e4648e61b17f738f68c677a927fd22eb209737724ed7fea0316706b4b9cee5031ec93de7ed699602a6be665a49c073d1b32a44ce67198c579cfb423838854a26c5828ae2a836e1ee67afbbabaca228075c1ef78299f1b81092a43b552eea80bf586ec69fda2d07ff7c2d626de2e0bf31537a8662caa574e19ffb0d60f132162b88cb99da1271843da45ad5046ea734da5ff6b45ac7fb413e8e9dacbc5e60e08f033e19fcebbaa2cdf434176279328e3f6007aa02c09d559cbb3f0abe5e08b4513a45ff8a8282efcd7ed10043bad3c56039b2a0171feb6b25b3351aba9608507ef3337fb81848ebea4d001c089663134bf6b4b7caec2761183167de4c0f14f8e00384389b37bc1e33fc6b1f3b32d0d0189178887c8189856ff44d10094431888c66a2ba95cfe2ecc1bb019a8b9a8ea408cab8884e09f616170e8d3120910306a2f60ed59a8d78ac03ccb855f00e7b1ce24616e0bf70d92704641ec5bff0f212a141ddb7709be2b0afe9dcdfb4568c14608ee8913efd0696534eca2edf1d0edccb3619e2690c9cf6cdc495a4302a5a89805a1b74e270f08cd7ad20d29ba73d1741ef0acd723b34ded16c14366f528cdf1616b2f11893572fe9ddbfa23d9f1807c5c45940af14753c1628a869ba9491af5f402d5061d4fa68f434cc485d43db2fdb3817d68cbc8646e469c931fda017c59014c4df2fcba257d5e71e9295ddae6df9c6817478713e85442351a8798c0545ab1180e7ff61cf3ee9bcfd87313ac03a3822f792be9b9bebb4e52a4e9b64a5edba2386500400ee252820fbab9b24c4e21747da60d9cd0fb510d00922930a00164a7c014038b34eb09b296db7bb9e6420f156c488a23ef4588fcadbb7edbd13ed3338795006588a82f206f09199734b8f2329bcd08ea883194d11b52468af80d09ff58ad8597298f483b906dddcb574715f02d50e1d2962def47768dc7f3dcf447360e68d5773e355718597796559d33c2784ed52cb359b469c07402d852e4e595b304abc1b549966cc1126095aecaacd382ae9f772e369381d4f19d0a70488a58fd1fc729e87fdb4d5821685805e90a6c8de2eb1caea7e704c09fe811bd85bedcdf170943515c6db30832e0ff67230567fe1111b7a72518cadbacd413204f02073ead30ea299f6b1aefa0fe4e4a3c514d0fda33e684cfcc872284cf4420e4800e8dbff955d012e27f678ae5521a802f029deb49c87e4c182bd063898ea8c6e8cc279df410a2bc4644cccead4fc2f35a053e5f31f1fe9355c4df3a18c3c28274459ebb20ada84ceaa17ca42d5c57bb623d69ecb1555d22e9cb14c1ef6ec57c266c765f3947ef6406733034d18cd71507086411867294a34934f4e654bcfe16e43cb10262c4fd1cbfe9566362f4a83fb199f6522a3c8a84b572b61b56633b5663b17539fdc78637030d54e11a577e42bda948a9f6eadc366df10e9b885d81d3db6bd7bcf4755120a584e0bac2c2023d011a217421fa8ba41ecf3d8ecd89498218fa69d3172f064eb45b169f31a951d34db688bc16fcb28e0eb2b683c0d950c696539a5ccc30a1aa4c2bf90cae2c1e06c31d76a5078069b86724b481117d136edae01aac6a3fe4723ab3faa8d69c3aab696afba1c8dec96078959771b7649a20cffd3da36072ffe1e5d8d399f4cb0f11a4e9c245c9bd7ea49ef7a20fcd5efc591f0afd7eef3d8a482b9b61ef3ca954078c3bd8bee95d3735ec0320ecb3ad5e16e83a90f911ecfb3cd26aa3feffecf1b70916d87e0b4c4c2eb09005a8aaececb648b0f2a3d8c2651accf10323f921ba826b54dfc51bcf5db4264b83e1a90d347289f3b7b07f6d29118d854b8531ddfab49553baace9a7ce068a65f9e39314a7e8d2b51fcd35d6442111dfe29e247c53f5569ba8094a466599d0884db3a9a1f1db2b4ad54fe5fe7b8edb66d31edbc6c25a33233686797bd788ae0ccae21e6bb2dde2a33480e859ddd66c6f56948179a018d6d8f12b631264fc3c1660cfbcf7ec3db2a8182c8bf27d357a673695bf01a0eb6eded7718ae441cc69085ca3dd14af901f32a9bc9a99d0602305818762e8de2b5bbdf546466e89a273fbffea7de4703cd4b4d8cdce8b197e7ab9d2ce3c75a1b81b269ac2eb107f5000b2a4bbc1c16f65fca7d2f82cb39936d02d35320401a84ff4b29ca4f935e44fe5e1b2f391be9ee0eee2b3190d0b3364275680556d81223b7bee043e2213107245826ba04230f3def146561c70e6c48ef0e0c95cd73c545881c9084a09c05bf994c7fa38025fd3b7a7cbd5a5d0d17d68a7246a670b27e3ae8473f4cc3ac234e97fea025b7b5c999dc60bdf2afbcb9b7c0d8fc78da420a9b4f70418557b73fefba5aafe241dcbfbb9133fac095a6960195853b591780dca3af33b652e283e808ce831eaf66e10c8373f083aa4a12b8e8df763150bcffc1a73ad96d7b13d03523785d78792057557b90c75695f852be1c4566ea4d687b790d9a7cf55a1ab98ec9113112a8a32d69670b658cafa34eaf16528d44c9887d1d3134fbfed9bb5aa57372e723c0391015ac759f1318ce1837e10ea47d0ee9ce6c62b1bc7a19d764540206848433303cc970b760ce8162b1d50e3dce9806a8c34e7fcf5c9c56169bd15751ff5897348c3f39d08736de00c6fda27ea98ebf45abce23e0b8791f1752d85a3b42b0514753f996da13c24743963d4c16ecb70343876112ff181b8c8d2cad125e207725ba24c097c6917d24d2cbf950fda884922a071c05255bb48f74fc00330a2a5075e3369e8f585c98b4a2ca4cc5bf3bb50c6bd316bfc5a758eb42078b33d9ac245337682dafd16e117bf0a1adabfa7db6c090ca68e2d92fda1cc71ea271ddab63d60cd74f54382c0fbe19329ce67f949a7ea8cd3c2044e8eca54df75b75b6e85772aac3661f245f87c8735860b7a3db0fa9fec702db6844f3878fb6b26f10bea324dd30d239ae0f495702890c3bad93a167fa9a485b23210ced326aa6e519680a5422cfb9ae3a4c7c1f11402f4e6a354288e74f012e750a5186616f1bec0089d8b7cb2f99dd121bea09efca891adfa34817395977a155ba67b47884ad51a43d96bb2642b550276479d29af9658c206ab634997f7a48b457161dc0e87b92ad7d5c14b827328671e2a6119c9cc29ab550d0c128617186c697a95c50d618d4c45f516cc2357cf310739a0897fbbf4c1cd6250ea542036d2022f37923308168069a6ff89d4085fa16d3e07fc36d20380708f47b66e98afe87fe7ef231f14b5b699e34016fa540a010d89336b7f6e03aebe83904727c7a90f891da9b98b88bd9052c543ff1443293a2ceeafbea3dc2f7c60afc0b90563e6cb6a359540081521d6cc04c4485540143b0bfc0b03be18109626e2182c13ff0fe9a39163779c6c3a2358e058ba8fcfb86cd88231f9ea9401a907d98b28627825b999c25b17e33cc9f9f53d68843f2da3f02144bca664d82eb203c444f7e74c284acb3ba907e6c50c78b88f1eac0d8a95adfeb2526e4be9afa3c2c2c91c0764b233eeaf1bd7464e70ddd65a2181512084baa98deece29e122fb17b52a4f433586c0b2c002725450e1d7c840bdf2365d9ca0e9d47c6451c918f108b3c89ffb955ab55db63656bc3a03a62678ee7a1f568e35b10a321cc8ec6fa871eaaafd47655164779b3d53e433ac9d7004b707c901c4c0f1a0ddb3d46647656cbecf4fa6a270bc38cdba21a8cbfa09329e108e2efaa6698b66172969d77d1b2074ee501b174563c9d551ea7975737e1b9d0dc56375f255e11f1998fda8e677d3537f442abd863dbb11fa2d6410860d9439275e35851306ad2e3284a7a7", 0x1000}, {&(0x7f0000000140)="0bbd1228c5dfd601ef17e351d32ac432a90670f38130cc128d2dbd0adbabafcde11d939d2071e652171968600aa9b8414e3e7c16", 0x34}], 0x3) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 13:43:41 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090008ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) [ 252.073998][T27459] loop2: detected capacity change from 0 to 264192 [ 252.087402][T27459] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 13:43:41 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000000c0)=0x2) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) [ 252.145323][T27467] FAULT_INJECTION: forcing a failure. [ 252.145323][T27467] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.158480][T27467] CPU: 1 PID: 27467 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 252.166886][T27467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 252.176938][T27467] Call Trace: [ 252.180211][T27467] dump_stack_lvl+0xb7/0x103 [ 252.184842][T27467] dump_stack+0x11/0x1a [ 252.189003][T27467] should_fail+0x23c/0x250 [ 252.193428][T27467] should_fail_usercopy+0x16/0x20 [ 252.198468][T27467] _copy_to_user+0x1c/0x90 [ 252.202882][T27467] environ_read+0x248/0x340 [ 252.207399][T27467] do_iter_read+0x2be/0x4b0 [ 252.211907][T27467] do_preadv+0x13b/0x230 [ 252.216263][T27467] ? __cond_resched+0x11/0x40 [ 252.220946][T27467] ? fput+0x2d/0x130 [ 252.224913][T27467] ? ksys_write+0x157/0x180 [ 252.229402][T27467] __x64_sys_preadv+0x54/0x60 [ 252.234079][T27467] do_syscall_64+0x3d/0x90 [ 252.238495][T27467] entry_SYSCALL_64_after_hwframe+0x44/0xae 13:43:41 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="66530700ae897094e71b0fa1f107000000364602812c66538d750f6ee1d001f43f0500bb9fb045f2d1eaa302ab6c2fef2308003ea1315b9532f3af2f5e153eb78020fa00eb298802d8f6c1f3b18d6d352507f7018b31a53bad1ec3533c791a753a1fef2c560001000000000000fb8005128e7e4d939955f8ac396203784000400f573fbf000000000000000761f35e959f130dec95128ce7ec033dc0a380543bdd63f10b4b", 0xa5}], 0x4, 0x0) syz_io_uring_setup(0x59cc, &(0x7f0000000080), &(0x7f0000395000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x1e) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20044804) [ 252.244390][T27467] RIP: 0033:0x4665d9 [ 252.248284][T27467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 252.267887][T27467] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 252.276402][T27467] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 252.284450][T27467] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 13:43:41 executing program 4: setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f00000000c0)={0x1, 'veth1_vlan\x00', 0x1}, 0xffffff8b) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendto$inet(r1, &(0x7f0000000180)="a19c3a8fe32520d791fffabbbed3f29f0496f3beee1d7cbe1818f40f22e196c03b14d3dc7014402d23fe174a4aff1b8b5d14455a7785ed1f986f109f19dbf3f30d75cc10a7195d5f6fad0e4579a1417071ad7ae95582ca86f4619c141d406bd95f83ad47575e5cc184353e9b54e8e84c411d92971f4c380b52fe294f3298742dfb56cbac0cf831011cf4f0975d7ca499980a23b16247c42ce2c3dba7be37b2e9b4a754d85dad2ec554629d8798", 0xad, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) [ 252.292419][T27467] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 252.300386][T27467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 252.308345][T27467] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 [ 252.326779][T27481] loop2: detected capacity change from 0 to 264192 13:43:41 executing program 1 (fault-call:2 fault-nth:73): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 13:43:41 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x3000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400), 0x0, 0x1000000, 0x5) 13:43:41 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x500000000000000) [ 252.342645][T27481] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 252.392996][T27504] FAULT_INJECTION: forcing a failure. [ 252.392996][T27504] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 252.406437][T27504] CPU: 1 PID: 27504 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 252.419712][T27504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 252.429939][T27504] Call Trace: [ 252.433214][T27504] dump_stack_lvl+0xb7/0x103 [ 252.437812][T27504] dump_stack+0x11/0x1a [ 252.441972][T27504] should_fail+0x23c/0x250 [ 252.446472][T27504] __alloc_pages+0x102/0x320 [ 252.451344][T27504] alloc_pages_vma+0x391/0x660 [ 252.456152][T27504] ? follow_page_mask+0xceb/0x1040 [ 252.461270][T27504] do_anonymous_page+0x16e/0x8a0 [ 252.466235][T27504] ? strlcpy+0x65/0x80 [ 252.470403][T27504] handle_mm_fault+0x966/0x1a60 [ 252.475365][T27504] ? perf_trace_mmap_lock_acquire_returned+0x1e0/0x210 [ 252.482524][T27504] do_user_addr_fault+0x609/0xc00 [ 252.487675][T27504] exc_page_fault+0x91/0x220 13:43:41 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f000065b000/0x4000)=nil, 0x4000, 0x1, 0x10, r0, 0xee1df000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c010000", @ANYRES16=0x0, @ANYBLOB="000127bd5000ffdb611addc04214e2cadf256d0000000c0003a0", @ANYRES32=0x0, @ANYBLOB="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"], 0x11c}, 0x1, 0x0, 0x0, 0x48000}, 0x800) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) 13:43:41 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000180)='./bus\x00', 0x1e3542, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r1, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) madvise(&(0x7f00004f7000/0x1000)=nil, 0x1000, 0x0) r3 = creat(&(0x7f0000000240)='./file1\x00', 0x0) openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000080), 0xfffffe58) [ 252.492316][T27504] asm_exc_page_fault+0x1e/0x30 [ 252.497174][T27504] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 252.503772][T27504] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 83 f8 [ 252.523858][T27504] RSP: 0018:ffffc90011863ce0 EFLAGS: 00010206 [ 252.529980][T27504] RAX: ffff888101ca1aa0 RBX: 0000000000001000 RCX: 0000000000000040 13:43:41 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090009ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:41 executing program 4: r0 = inotify_init() readv(r0, &(0x7f0000000000)=[{&(0x7f0000000600)=""/4096, 0x1000}], 0x1) inotify_add_watch(r0, &(0x7f00000005c0)='.\x00', 0x60000f6) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fork() fcntl$setstatus(r0, 0x4, 0x2800) open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000894000/0x2000)=nil) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') mremap(&(0x7f0000894000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000892000/0x3000)=nil) [ 252.538096][T27504] RDX: 0000000000001000 RSI: ffff8881077cbfc0 RDI: 0000000020024000 [ 252.546246][T27504] RBP: 0000000000001000 R08: 0000000000000000 R09: 0001ffffffffffff [ 252.554321][T27504] R10: 00018881077cbfff R11: ffff888101ca10c0 R12: 00007ffffffff000 [ 252.562296][T27504] R13: 0000000020024040 R14: ffff8881077cb000 R15: 0000000020023040 [ 252.570272][T27504] _copy_to_user+0x77/0x90 [ 252.574735][T27504] environ_read+0x248/0x340 [ 252.579248][T27504] do_iter_read+0x2be/0x4b0 [ 252.583794][T27504] do_preadv+0x13b/0x230 [ 252.588038][T27504] ? __cond_resched+0x11/0x40 [ 252.592727][T27504] ? fput+0x2d/0x130 [ 252.596623][T27504] ? ksys_write+0x157/0x180 [ 252.601260][T27504] __x64_sys_preadv+0x54/0x60 [ 252.606025][T27504] do_syscall_64+0x3d/0x90 [ 252.610527][T27504] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 252.616432][T27504] RIP: 0033:0x4665d9 [ 252.620370][T27504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 252.640008][T27504] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 252.648454][T27504] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 252.656428][T27504] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 [ 252.664405][T27504] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 252.672823][T27504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 252.680791][T27504] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 13:43:42 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x600000000000000) [ 252.728660][T27529] loop2: detected capacity change from 0 to 264192 [ 252.756976][T27529] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 13:43:42 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="04080009000aff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:42 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x700000000000000) 13:43:42 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x900000000000000) [ 252.878570][T27542] loop2: detected capacity change from 0 to 264192 [ 252.902764][T27542] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 13:43:42 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x2800000000000000) 13:43:42 executing program 1 (fault-call:2 fault-nth:74): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 13:43:42 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ff9000/0x4000)=nil) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000002dc0)=[{&(0x7f0000000180)=""/138, 0x8a}, {&(0x7f0000002a80)=""/249, 0xf9}, {&(0x7f0000002b80)=""/132, 0x84}, {&(0x7f0000002c40)=""/111, 0x6f}, {&(0x7f0000002cc0)=""/249, 0xf9}], 0x5, 0xd9f, 0x0) r1 = openat(r0, &(0x7f0000001300)='./file0\x00', 0x1, 0xcc) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f00000000c0), 0x2, 0x0) preadv(r2, &(0x7f00000000c0), 0x0, 0x1, 0xff) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) preadv(r3, &(0x7f00000028c0)=[{&(0x7f0000001340)=""/192, 0xc0}, {&(0x7f0000001440)=""/73, 0x49}, {&(0x7f00000014c0)=""/165, 0xa5}, {&(0x7f0000001580)=""/7, 0x7}, {&(0x7f00000015c0)=""/63, 0x3f}, {&(0x7f0000001600)=""/237, 0xed}, {&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/157, 0x9d}, {&(0x7f00000027c0)=""/21, 0x15}, {&(0x7f0000002800)=""/148, 0x94}], 0xa, 0x1, 0xf8000000) pread64(r3, &(0x7f0000000300)=""/4096, 0x1000, 0x0) mmap$perf(&(0x7f00002d7000/0x2000)=nil, 0x2000, 0x2, 0x131, r1, 0x4) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r4, &(0x7f0000002a40)=[{&(0x7f0000000040)=""/126, 0x86}, {&(0x7f0000002980)=""/156}], 0x1, 0x1000000, 0x0) signalfd(r4, &(0x7f0000000280)={[0x2]}, 0x8) 13:43:42 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="04080009000bff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:42 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x18}, 0x9) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4}, 0x0) r4 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) preadv(r0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/255, 0xff}, {&(0x7f00000001c0)=""/30, 0x1e}, {&(0x7f00000004c0)=""/165, 0xa5}, {&(0x7f0000001440)=""/4096, 0x1000}], 0x4, 0x6, 0xfffffff9) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0x0, 0x18}, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4}, 0x0) syz_io_uring_setup(0x83, &(0x7f0000000080), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000640), &(0x7f0000000680)='./file0\x00', 0x40}, 0x0) r9 = syz_io_uring_setup(0x4ba2, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000100)) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x2004, @fd_index=0x5, 0x0, 0xc77, 0xaa2c, 0x8, 0x0, {0x1, r10}}, 0x0) syz_io_uring_submit(r2, r6, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x3, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1, {0x0, r10}}, 0xfffffffa) [ 253.119962][T27564] FAULT_INJECTION: forcing a failure. [ 253.119962][T27564] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 253.125638][T27563] loop2: detected capacity change from 0 to 264192 [ 253.133858][T27564] CPU: 0 PID: 27564 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 253.148806][T27564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 253.158855][T27564] Call Trace: [ 253.162124][T27564] dump_stack_lvl+0xb7/0x103 [ 253.166710][T27564] dump_stack+0x11/0x1a [ 253.170858][T27564] should_fail+0x23c/0x250 [ 253.175552][T27564] should_fail_usercopy+0x16/0x20 [ 253.180634][T27564] _copy_to_user+0x1c/0x90 [ 253.185045][T27564] environ_read+0x248/0x340 [ 253.189549][T27564] do_iter_read+0x2be/0x4b0 [ 253.194047][T27564] do_preadv+0x13b/0x230 [ 253.198283][T27564] ? __cond_resched+0x11/0x40 [ 253.202971][T27564] ? fput+0x2d/0x130 [ 253.206843][T27564] ? ksys_write+0x157/0x180 [ 253.211324][T27564] __x64_sys_preadv+0x54/0x60 [ 253.216080][T27564] do_syscall_64+0x3d/0x90 [ 253.220494][T27564] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 253.226374][T27564] RIP: 0033:0x4665d9 [ 253.230246][T27564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 253.249829][T27564] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 253.258331][T27564] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 253.266280][T27564] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 [ 253.274241][T27564] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 253.282192][T27564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 253.290152][T27564] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 [ 253.302193][T27563] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 13:43:42 executing program 5: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r0, &(0x7f0000000000), 0x2000) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x105000, 0x0) read(r1, &(0x7f0000000000), 0x2000) close(r1) munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000000)={0x80000018}) 13:43:42 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x2c00000000000000) 13:43:42 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = gettid() mremap(&(0x7f00002d5000/0x1000)=nil, 0x1000, 0x2000, 0x2, &(0x7f0000ffc000/0x2000)=nil) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)='uid_map\x00') openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.log\x00', 0x400040, 0x2) preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) 13:43:42 executing program 1 (fault-call:2 fault-nth:75): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 13:43:42 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="04080009000cff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:42 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/sem\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@ipv4={""/10, ""/2, @loopback}, @in6=@dev}}, {{@in=@multicast2}, 0x0, @in=@private}}, &(0x7f00000000c0)=0xe8) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) 13:43:42 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') mremap(&(0x7f00002d6000/0x3000)=nil, 0x3000, 0x4000, 0x6, &(0x7f00002d7000/0x4000)=nil) preadv(r0, &(0x7f0000001400)=[{&(0x7f00000000c0)=""/125, 0x200000b1}], 0x51, 0x3000000, 0x0) 13:43:42 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0x7f, 0x0, 0x7fffffff, 0x0, 0x0, "deb8ce21916120cfb1db4472f0f0356c2d4d05"}) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000006, 0x30, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x5, 0x4000, @fd_index=0x9, 0x4875, &(0x7f00000000c0)="cda443e7d7b6cbff49828d947b83c8f8619e977e374cbda6495cf5dfadc3416ee3bcae9e30b97bf9e91ec846b7e8b188eced089bdd7b2a1f5a16b48010f386499b0987e19fc8b22cf58a920d0339af40f07457dc5a212ca79d29147a4c54831840eb869d65c99ea275d596f757d48f14507679fc6775faf3073423ad1aac2fd2f2859817a8dd4994c9fd7183ebf2722d9551a8663a30f94a3bbea7605f91551b654f03d9d34c2cd37bdab975c7194e83d3ea0742078fe5a015c71a6d51c4dd870093036f1678b32e114c00", 0xcb, 0xe}, 0x2) [ 253.455812][T27589] FAULT_INJECTION: forcing a failure. [ 253.455812][T27589] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 253.469067][T27589] CPU: 1 PID: 27589 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 253.477480][T27589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 253.487538][T27589] Call Trace: [ 253.490816][T27589] dump_stack_lvl+0xb7/0x103 [ 253.495438][T27589] dump_stack+0x11/0x1a [ 253.499607][T27589] should_fail+0x23c/0x250 [ 253.504033][T27589] __alloc_pages+0x102/0x320 [ 253.508619][T27589] alloc_pages_vma+0x391/0x660 [ 253.513394][T27589] ? follow_page_mask+0xceb/0x1040 [ 253.516721][T27587] loop2: detected capacity change from 0 to 264192 [ 253.518597][T27589] do_anonymous_page+0x16e/0x8a0 [ 253.518616][T27589] ? strlcpy+0x65/0x80 [ 253.534099][T27589] handle_mm_fault+0x966/0x1a60 [ 253.538941][T27589] ? perf_trace_mmap_lock_acquire_returned+0x1e0/0x210 [ 253.545785][T27589] do_user_addr_fault+0x609/0xc00 [ 253.550802][T27589] exc_page_fault+0x91/0x220 [ 253.555373][T27589] asm_exc_page_fault+0x1e/0x30 [ 253.560293][T27589] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 253.566882][T27589] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 83 f8 [ 253.586483][T27589] RSP: 0018:ffffc9000081fce0 EFLAGS: 00010206 [ 253.592561][T27589] RAX: ffff888106b809e0 RBX: 0000000000001000 RCX: 0000000000000040 [ 253.600665][T27589] RDX: 0000000000001000 RSI: ffff8881077d8fc0 RDI: 0000000020025000 [ 253.609213][T27589] RBP: 0000000000001000 R08: 0000000000000000 R09: 0001ffffffffffff [ 253.617249][T27589] R10: 00018881077d8fff R11: ffff888106b80000 R12: 00007ffffffff000 [ 253.625221][T27589] R13: 0000000020025040 R14: ffff8881077d8000 R15: 0000000020024040 [ 253.633193][T27589] _copy_to_user+0x77/0x90 [ 253.637639][T27589] environ_read+0x248/0x340 [ 253.642191][T27589] do_iter_read+0x2be/0x4b0 [ 253.646676][T27589] do_preadv+0x13b/0x230 [ 253.650915][T27589] ? __cond_resched+0x11/0x40 [ 253.655659][T27589] ? fput+0x2d/0x130 [ 253.659532][T27589] ? ksys_write+0x157/0x180 [ 253.664071][T27589] __x64_sys_preadv+0x54/0x60 [ 253.668728][T27589] do_syscall_64+0x3d/0x90 [ 253.673152][T27589] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 253.679030][T27589] RIP: 0033:0x4665d9 [ 253.682901][T27589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 13:43:43 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x8000000000000000) [ 253.702488][T27589] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 253.710943][T27589] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 253.719001][T27589] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 [ 253.727658][T27589] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 253.735613][T27589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 253.743623][T27589] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 13:43:43 executing program 5: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x1e, &(0x7f0000000140)="8d31e183556939000000e28c0b1dd2a357b264c8745b78376e18cd3d3dfc"}}], 0x1c) gettid() wait4(0x0, 0x0, 0x8, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x34) 13:43:43 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000001b, 0x4, &(0x7f0000000140)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000000c0)="00000000a438008eb219edf24e3f472a24ff73fc53705bcba639f4959dccd5f3ae", 0x21, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f0000000040)={[{@usrjquota_path={'usrjquota', 0x3d, './file0'}}]}) 13:43:43 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x292e, 0x0, 0x0, 0x7ffc0001}]}) r1 = getpgrp(0xffffffffffffffff) sched_getparam(r1, &(0x7f0000000080)) shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000388000/0x4000)=nil) preadv(r0, &(0x7f0000000000), 0x0, 0x1200000, 0x0) r2 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r2, &(0x7f0000000000/0x13000)=nil, 0x7000) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x1000) 13:43:43 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x9effffff00000000) 13:43:43 executing program 1 (fault-call:2 fault-nth:76): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 13:43:43 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fffff7e}]}) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16, @ANYBLOB="00ee0c0079a91e38d362b5"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) r1 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000180)) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r1) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102385, 0xfff7}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x5) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r2 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r2, 0x1e) [ 253.884522][T27629] FAULT_INJECTION: forcing a failure. [ 253.884522][T27629] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 253.897889][T27629] CPU: 0 PID: 27629 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 253.906354][T27629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 253.916529][T27629] Call Trace: [ 253.919818][T27629] dump_stack_lvl+0xb7/0x103 [ 253.924422][T27629] dump_stack+0x11/0x1a [ 253.928658][T27629] should_fail+0x23c/0x250 [ 253.933107][T27629] should_fail_usercopy+0x16/0x20 [ 253.938199][T27629] _copy_to_user+0x1c/0x90 [ 253.942701][T27629] environ_read+0x248/0x340 [ 253.947244][T27629] do_iter_read+0x2be/0x4b0 [ 253.951737][T27629] do_preadv+0x13b/0x230 [ 253.956046][T27629] ? __cond_resched+0x11/0x40 [ 253.960723][T27629] ? fput+0x2d/0x130 [ 253.964664][T27629] ? ksys_write+0x157/0x180 [ 253.969149][T27629] __x64_sys_preadv+0x54/0x60 [ 253.973933][T27629] do_syscall_64+0x3d/0x90 [ 253.978427][T27629] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 253.984346][T27629] RIP: 0033:0x4665d9 [ 253.988235][T27629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 254.007928][T27629] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 254.016328][T27629] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 254.024741][T27629] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 13:43:43 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000fff000/0x1000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/106, 0x6a}], 0x1, 0x1000000, 0x0) [ 254.032706][T27629] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 254.040925][T27629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 254.048886][T27629] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 [ 254.087136][T27587] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 13:43:43 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="04080009000dff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:43 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0xc00e000000000000) 13:43:43 executing program 1 (fault-call:2 fault-nth:77): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 13:43:43 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') sendto$inet(r0, &(0x7f0000000180)="7a5702ab2c802987c177e29e50eb5c02a40b59a3b899fb28646db421af09799d3f8ecb98934acd134ccb685df36bfb47e35fb9d9d080eab5bbfea4e949597cfc97b674adf5a4cb8fdf1ad74b8b4b493866769700a41681be63a10e45133fc3305dd6435f3e045bc65829abd972e667e5dc114ab775f8b5c9714109db74e0b20f2e177bf90d3cf55fdfb2d8c3eee94fcbbcc42b97e0999d32b20e1fc00992fb317f84112ad9c28963d145d70087824bed3228f6cce554e65739c5aa28764f2faa248c2ec85fd6720b4056f274830133ac03", 0xd1, 0x20004840, &(0x7f0000000000)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) [ 254.230078][T27651] loop2: detected capacity change from 0 to 264192 [ 254.250526][T27651] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 254.262205][T27656] FAULT_INJECTION: forcing a failure. [ 254.262205][T27656] name fail_page_alloc, interval 1, probability 0, space 0, times 0 13:43:43 executing program 3: pkey_mprotect(&(0x7f00002d6000/0x4000)=nil, 0x4000, 0x2000001, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip6_flowlabel\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140), &(0x7f00000002c0)=0xc) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f0000000180)={0x0, 0x20, [0x81, 0x18e7114e, 0xfffffffffffffffe, 0x6eb, 0x6, 0x2]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) setsockopt$inet6_tcp_int(r2, 0x6, 0x42, &(0x7f0000000240)=0x7ff, 0x4) r4 = gettid() r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/consoles\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(0x0, 0x27) ptrace$cont(0x18, r3, 0x8, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)=0x0) wait4(r6, &(0x7f0000000200), 0x80000000, 0x0) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r4, 0x0, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000000)={0x0, 0x3, 0x6, 0xfffffffffffffffd, r4}) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x1000004, 0x0) [ 254.275468][T27656] CPU: 1 PID: 27656 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 254.284139][T27656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 254.294219][T27656] Call Trace: [ 254.297494][T27656] dump_stack_lvl+0xb7/0x103 [ 254.302096][T27656] dump_stack+0x11/0x1a [ 254.306258][T27656] should_fail+0x23c/0x250 [ 254.310683][T27656] __alloc_pages+0x102/0x320 [ 254.315282][T27656] alloc_pages_vma+0x391/0x660 [ 254.320128][T27656] ? follow_page_mask+0xceb/0x1040 [ 254.325250][T27656] do_anonymous_page+0x16e/0x8a0 13:43:43 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) pkey_mprotect(&(0x7f00002d7000/0x3000)=nil, 0x3000, 0x1000000, 0xffffffffffffffff) pkey_mprotect(&(0x7f00002d5000/0x3000)=nil, 0x3000, 0x8, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x1008000, 0x17) pkey_mprotect(&(0x7f00002d6000/0x4000)=nil, 0x4000, 0x8, 0xffffffffffffffff) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x143401, 0x0) [ 254.330472][T27656] ? kcsan_setup_watchpoint+0x231/0x3e0 [ 254.336110][T27656] handle_mm_fault+0x966/0x1a60 [ 254.340961][T27656] ? perf_trace_mmap_lock_acquire_returned+0x1e0/0x210 [ 254.347944][T27656] do_user_addr_fault+0x609/0xc00 [ 254.352979][T27656] exc_page_fault+0x91/0x220 [ 254.357579][T27656] asm_exc_page_fault+0x1e/0x30 [ 254.362433][T27656] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 254.369038][T27656] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 83 f8 [ 254.388788][T27656] RSP: 0018:ffffc90000507ce0 EFLAGS: 00010206 [ 254.394868][T27656] RAX: ffff8881076469e0 RBX: 0000000000001000 RCX: 0000000000000040 [ 254.402854][T27656] RDX: 0000000000001000 RSI: ffff888133c49fc0 RDI: 0000000020026000 [ 254.410826][T27656] RBP: 0000000000001000 R08: 0000000000000000 R09: 0001ffffffffffff [ 254.419664][T27656] R10: 0001888133c49fff R11: ffff888107646000 R12: 00007ffffffff000 [ 254.427638][T27656] R13: 0000000020026040 R14: ffff888133c49000 R15: 0000000020025040 [ 254.435617][T27656] _copy_to_user+0x77/0x90 [ 254.440045][T27656] environ_read+0x248/0x340 [ 254.444557][T27656] do_iter_read+0x2be/0x4b0 [ 254.449068][T27656] do_preadv+0x13b/0x230 [ 254.453347][T27656] ? __cond_resched+0x11/0x40 [ 254.458069][T27656] ? fput+0x2d/0x130 [ 254.462041][T27656] ? ksys_write+0x157/0x180 [ 254.466545][T27656] __x64_sys_preadv+0x54/0x60 [ 254.471285][T27656] do_syscall_64+0x3d/0x90 [ 254.475712][T27656] entry_SYSCALL_64_after_hwframe+0x44/0xae 13:43:43 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="04080009000eff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) [ 254.481617][T27656] RIP: 0033:0x4665d9 [ 254.485547][T27656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 254.505159][T27656] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 254.513654][T27656] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 254.521639][T27656] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 13:43:43 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/nf_conntrack\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendto$packet(r0, &(0x7f0000000180)="f501c6cc82f035642d1b258e2f111e8c232a81e1109c846240e9bcca8101bcd4e7db7042546c5e573f89bb17403cd9c7eaea57ab561dd90b77fa2fc49f03ed5494981a26cd43b09d1da5c65694a0c484048387590737f01eb523f02706dd6ddf9763f1d970fc1897b3b1c2a0345715ee5c6d6ec7ed1d0bd01febee0ac810cc7691c89d6be17a375827dc9137e3e0be927165a1d84496e0acfcffe2b88b505802c3f580c247", 0xa5, 0x1, 0x0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000240)=""/128, 0x80}], 0x1, 0x1000000, 0xfffffffc) 13:43:44 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="04080009000fff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) [ 254.529613][T27656] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 254.537627][T27656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 254.545598][T27656] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 13:43:44 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0xefffffff00000000) 13:43:44 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f00000000c0)=""/117, 0x75}], 0x1, 0x1000000, 0x0) 13:43:44 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0xf0ffffff00000000) 13:43:44 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090010ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:44 executing program 1 (fault-call:2 fault-nth:78): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 254.628187][T27678] loop2: detected capacity change from 0 to 264192 [ 254.646274][T27678] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 13:43:44 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) ioctl$INCFS_IOC_FILL_BLOCKS(r1, 0x80106720, &(0x7f00000013c0)={0x5, &(0x7f0000001300)=[{0x9, 0x59, &(0x7f00000000c0)="726d33ba2491c4f98962d68cec7a7e3b5d31cabb718baa3b2a371bd89db464fdf45a3df2288038aee1b4603d13aaf394cff0c6b137da04864786c633967644c6436305681f0c0552aba0117c41cfea41b22e2e85644d0f73be", 0x1, 0x1}, {0x5, 0x10, &(0x7f0000000000)="b31a5f504c5b41be3de11071a9f49ac3", 0x1}, {0x4, 0xbb, &(0x7f0000000180)="7e86493a69eb3b9f2efd10d40dcf3e9398c3779a04f08bc6da14dd5622dbfda7ab155a8876574871ddf7dbcee4ee333821bdeead223e08a6f3cd471d05af9f1acffdf95a3e3643fc11ca8b08e3a8431086ca930968061d695592a847d233727b06d6cd565dfadfcf6f28df459a59044952215d2b87d626be474b89c47aa152d096ac66e12529fcfe5778fdb8337851f5cc48aea4197808b2e6f409f34c08972a550f99d3049a649136f40b55c9d0895eafda34038faa380557281f", 0x1}, {0x0, 0x1000, &(0x7f0000000240)="56f0fdf5b1fb9516bd11e0ce5ef9e55c62ec0900a0bdc5f6f97719284f99a7d7ba7d9e83d8f6293ffea2309cd5903f9fef9c5849647d6aefd3110c4c56729c599f36dec82a3897b1243eac6dd25fc27287fb657eb3518117a41f3aa1769d83c2a25769ab628aa1694aced9f7b2a8bae0a588c642e77b8f2f96a41297ee6dd011ec346d5521895d404634fdc37d47d2b41fa7151d2d3743e67e07a82acf04dd24e452d627d18be092cf3f1d6c9dcdb3b7730247cbd0c4e21a1e6a04573fc40a2e6e93036502e2bcf88c14f626e2c1bde490e8f68486f971512491b2f58a36a2938319f0c39e5d2e05e3d9a312ca948ff6889d4ac2aff8036d9c9635ba430712309c62ff8c7d39f3df9fef4371f311cef0d7d16f3852e2c6518749bc1bf99614bef9175006f5fbfab71f79b0c80a04fae4eb64703353c9bddb77d9a6b6e45b56723665e01e8cc783d30fdf165ff8f784199a6e21207a58661d16724d1f2b0837ad21eed8f9195e4b43845a124e12574b01dad687937a723dbbc99a1a343871e59bf01732bbddaa68aec491beb3f42dd0106559282c10a010a77baf203863ab44e3892d7653b0c6fbba8183f834f1aa19bb7b062ed4ce7da13b1b469665dd7bc58f8658f17b04f181d1c840a80dfe3391514c7342a27fd1e0b552ca4a3a22f48c48ec749039950dc4045b8c98d05edfc84adb564d623ea434fb5c40d382e239bd6f3b23f64e0c02196098236c5b788b539bf51603515c14e559c1c5183f6f4b89cba80a49c02e1f2b74f5a1c2c4cddf8b1eb1461fe8314a0a938b2414145940f80539b535fa9103a3f2de0683dfbb3b8376b26970abdeb143e151864ac5575ce1da0a9864d31c106e242ff640ab19116599992bee79b7de5545ba9e8361e8b92f057f795a5f89a3b23c5ef937efc47711d53748609638489a3cc0d1de142691866f4744215364a75234e5271df297261dccdfeeab29a531dda0d9bc246fd1746cbb12e4b2905e70e7eb09f43d480d975b6a174c9ad8f793201875dad8977bce447e85bac8642cdc1226ea508ec881f5a9acef0191be71d8f4420c03b767d43c04ac9cb27d1eee1f36043a79ac705095f1307183eec713ef1d38cb9d7bac2082bac12ef87b0534190c716eb7ebfb012c2f1ab39e8fd0b99f705006a7964cfa6f730e37a109bd466050ed6c2e36dfa9e83680a38378e4f29570408814c0c7e7cd6c1fd8b1f5eee5d290e3d095f83ed6254cb8ab79d1b7b6e261f66eeb1139412ecf5eb0ea32e474b29675be6a668d65e29e1a69f0adad29467e291504af1b4a1aea473a1767ed5ebc1ba91bd631d60baaaa21de69649babcbc569a7334748fbced43fbab7e8c488f17562faec0a37c61c76479299772d029c2bb085232876b9f3334b824a0878836041e5aa338ecdc44cdfaad7aee6d9053c848dd60a88f173c6d832d9665542846d9275c60538a811edf77fb3cb864c9c8f5b514ad1df89ec1524788963fff2b895c0e57874ab7adfb2d30634719bfbd714cf5f3cb9f10eef8e751c8e44d824dd7da4ccdd9e77f42cc3b94e65840448627a5cad2d40b11818665772a39ad284e60bf60964f56f38523a696136db035202ca2c51a8e9d4678960f1f4c3f43affd6e157569730b0df19cd4c81a5d0d2632e7f462199d37fbfce5ee8d8cf9eea3fb0cd385d2f98e46b57ce909db1abc3469ea19d6d30669c8832ed84b5ba433c80ac1aeff45fe7de615960686e6aa930a0a3de362f007d4ef2f1f621f5c0ecf901d1b4d889a9bd13eceecbc86b93e2e041c01e9c01b78848b45e4bbb27eff8014b80577169b5f3fd1f189193b8208490fa73620d6c31ea74091c7da90a63665be4bc837a64458819ec2147803cc5233cf685d9ad36bf510b2648243059c1fdd5c7d8e93abaafca817303983a641d200249fdd1c0b0d094064c3131705601e2a3f267987e9727dab101ae0a96c9f59161e5730443c1a6dfa190bb0cfb9759b1e1376b0f3c9a0993e5d694b87ba59352c5f49f46325efe2d7dab4e8cdb8423af8e18c47f6cb350d0b228a805de8b5c4783dcd4200dc171ef5fcb38c3ee694fa69aa9182f846e0228a472ae7fa6302e8bfaf2630d105de07120209029bf19589c8da5523953f59a660bb4d48f108ae56e9a22484fdded8e59d95d07d8130383fbcf3ffddbc8b8d8e85f545e096d9a905494ad1646c0189dfd3bf9eeecd04d6f094918ebe8c407593c213b2593c43ba4db935e81e83300886efed3df55920286cd9cbf57c7bf586a4e1ed07228cf0707a8d6da035c7710c538bcf539dccb13cb736287b6904786b6083c183929b02321872f4081c2eac96806639d16d3821f2cf584197a34e9bc35515a81428e132f08f4acb94b3a6f7854fba1d46409d409e96b77a27243130ffc7522a96e08db410927f7f092202c9af301e9cb8e007782252ecc6ae8ca2971b6e128b105a124244552f89d7345812c58d7902dd39f746924688bd0d4ba64a78e905039eddcab65ea2a00bc24995bedc81926d912bd67e029d0ad4aef81ad0d8573c4312b9875c4ae46416ee19a48f81e74709242e3be27ddcdd440c7053b20ff7c5e955a575a3af7a0a9ecf62118c485a72e1231478985289ddc64125972ddbe9b5bec9ea8c026e4670e5cddf3c876e0b2027d1c2e4fbe0009f3573274c62c03c257d486cc94ec985b6dd6e9c3fd78712b115996e233148a7d6cecc3fc27305182f285e49610474368eb0af3286aa90e4178a2a572e8d42ddebb84a386f51f42d66ea56d9e6ef22aecb5757432f4e3a403c153dade5edc24ad195f8911b85374a50398d625ca6d148614406e2c8cd0515772e4be01397ed5268963acb0e08ac03dad24e64e4407bce95c2a17061862d40b3c9fc6c961ce147842c43c914cabbd7a42cfdef048c328acad816bfd421ffde53efdf51902c46a48ef599d65094b20c3e71f11e913edb3d8c0374ed7631b921f9ceebf1a70b2d78545fb264a17b32b905c03a242d26ff3c2c024b4f046003797f963c5b1ab4321b4a70b37a6aca15f400761878ac8e01294b60a9df38c63293fbc46c0561a04f5e27359bfaecb56b4936637ed5b1ed7ef1ddbedd4f7fdaf9e5055d2db77999715df2843d1b380d4f72c12eacb757aef7d03b9bfe11a96ba57fecba88139b239658c736b05bbb9aaebe11bfb7c8b02806453ed9b2273da205ad842196b5844f76298a08f7457e8c222abd8b473d131427282dfd49e1c2834866112122ebb582e72348cce6e2a1615d8f7b5aaa7a10b6af60c68d5e5692b40ada746d0d056736ef2f416954c956ff8002696449f1a3e471662e6639e1e926222b1f0babe855337553ea894f2b27ff1ace3598acb6a7f5addd74269958237dfcd516a6ec00922fb3fa00db0a562fdcc73fbc924fc3a755a8a632288a6809eca15cfd24a4446b1a6ade7d57d10d8148cdf88d5169d1b9112a49fce6a7ad87250fee3a5987e76e04775cc82ed4646d5bb4bfa3df37a9b9e7efe233c06369a296187faaa2f181b347af9705aec33a7479a7cafd3517516254b94d3635d2f02342bd5fd3ab1deb09f8cfdd13fb09849a42ba24c5e26b07ba088604ea294b7df01f7049a4e7e275ba65e212e07825b943b6b0af50680b19dad821a28a90101620dba189a4a8f88067e2f17106bf1e69ebca0e5b03f1cf59ac387f5063485c2d966c04f730a5545d898146da0c693137ea9529fd0d6d709038c0f21b269bf9b0b1454fde8831f542c3994d3209c7efae12ef55a0f20495f09cd4aa8ec2278ade781fbb1b2f9be3efeffe0a27abcc0edb0cbbf8dfdeee3335733657e6e1f235573f4a6ac7c7794300ece6998ea9bf5b5928b9de15ae747da50e5d40a36f037de8d470c53445d02a526dfc032a62e73ace23b88a18f5b31b9e1fb460faf7af7dfc00b71da39f593a8901b1b2d082c220bfa58e9be3c34280cfd878faad8bf14a895f9437cf81f399e4912b6688991744738b4f82316841af3a24b2361daede99df14e9269d69d88b964d7130f8d93afbdbb0df99b3495c71b8b86e38304ac8d65c0bf167827caab753a92251f9595a9dcaa9b886c28277d27771b0b964d7465af3cb32fb3b2e204926131ff44ae81d7e9b120ec4bb2922bc15f962fa03bf582e72621db9ca1dff19fd277bf3fbf826f0e1ce0822148f798d87d45154389dd5bdf8012ee707eb8ad69868f89a3270312d5d565a08a050642ffb069ab40da543077ec7158ef4cc8a751fd4c257517e69699dc59bb071c69593d1a806923552ed5f44bad515874d99f786b88a92ee42d8ad0f34ceaf9af4f93af3aa2c0bafc73a7fa7d4b57cc64d5b39eed44fd5b2cc6065a7d50443db9ec9ad43cc711d9a48fc70f71993bf3ce469d35271c4494bcc62190e48ccb423c27139edfaf6ce672eac3b1f1e6e3f6d6e57477bb1784b4c2b544d709ec6263d64e7a2616c2f373c22a4d89dda19f22bba74fd8cdd53c399ed0d0f9eaa7be24ba3294a140e44b27edaf8339f76c398695421b313f8eae400c2cdb20a4c6078cdcbdd58b62596cc67444444874dd2ff52b9d3d717091b3b50a1cf1da88d2b2be4656c1b0f595b03c0ce69e1de92962880d255b6e39443cccdd594f11a6e1cc67109528b11e48f4119890947d1ad70a6d01daa8583cfb23e3e0161c85c00a3b4e47570cf7acd007184e0782fec49af967714480a17da33baa55f12839861b2db1b3abb00384c14f334c64a493a189a3899bbb91c0b4fdfab708183caa4bfa3bcb4e00ff7f316e2bf30fb4a6e29c56660437d0d0a3b9fadd741295f5be0adba5202bfef171ff4ac15c73d75dd9d04d685a8210edc439cc2b7c043772853dd6c5b6a7d59af124f1371726876dc1487d1194c242ecf87853f4d8bb9d6d3f47f1076d1c5d5da6b82211b2ec99929cdfbb3e2e5687320f1e8879025b1d21efe3fd4a581da8c4b48c7b27002a70cb2e8eb88664a14be823e1f5da5fbee3d0503ed675151b38e6ba0569e577c15f417533817e6d470134fa28de87b494089eb15d9cf8526499b3259d513eacc13cf59c97ae7bb906f4c0928635732e1b60dc58646424fe6eb344300a29e415ff856915abdf0a797a5bfdad4fa937661ae2fd81ed5c91bff3f4f8ac411d2050e6dd0d87579c53afa4ee786a07da9d10209a849a2f86501653ca800b4679b5d9e8b990730961a809f5de9ddfb6fca6ee237a31da29158a21461de4298c4ba5cf0bcc46e31e79ca94fc450ac20e6886f3dd4818524e13bf4ebcd6e1cba8e43967c37e4f5f262ae7de5390d418be3cd7d46730709b88421f157dd1ad49d211fb3b2ca9a6ff91832005ff6c819289c9b5c6d1fa69b6d64cdd419735ed28082c1dc80f411dc8bc775d0b5737692549b3a9f1a49d80e53c3a0e5a2b1c8d965495a4fbf8d850138f8d9224efa20b24b6500748c8b3167e6f4a6dc10fc8a5b62837728015ba7dc682c6ed3124c9227d7546f5c16f4e970ff778461b0ea20c1cf544bacff7ae601758f8ca929a9b4c35a7640100660263cd9193eb9a07b1e5243a0ff2eb17a398493428eec15bd46bfeaf81240acb11f3178f37135cb5a5e121a00530f352c80ed363cd9e25ddd7dd99278602aee7487791de5a441994fbc43b313a5c96a7842ab4a9b517f71f8c7a9bc685594cfdb83d593acb4b12dc4401d3637f984babc50941e8f09ca2256a96e715fd8d00729e2ee4d65739c7da9a5ea584c1e0dc4e3ebcb234e7e0a084832e667cfc05d8657c8065b9c4e57968b4dd21485a66958b363a60a17b6865e15e2bab1ecd97"}, {0x4ad4, 0x94, &(0x7f0000001240)="e1a537f6ae0e0df8eb86ac02963064e60abb9cf7db096a0a8328e65abeb721b0c4ca9175e58d1c429d35fa7df84fd79660beb4514a2f2c4dc1ea86e511c23c5c9ffb7c0d4cf28fc8446c5aae3d0d4bf3fcfdae59275c749f0476279397239035269ef69ab08db7b25331cad86c4ad54f49fb30f58c911ad6831fb647d7e98bf5cfcf2e3109e8070c66cc16ce4a7d302c1e593bf9", 0x1}]}) [ 254.729637][T27698] loop2: detected capacity change from 0 to 264192 [ 254.737879][T27699] FAULT_INJECTION: forcing a failure. [ 254.737879][T27699] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 254.750950][T27699] CPU: 1 PID: 27699 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 254.759667][T27699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 254.769808][T27699] Call Trace: [ 254.773085][T27699] dump_stack_lvl+0xb7/0x103 [ 254.777763][T27699] dump_stack+0x11/0x1a [ 254.781924][T27699] should_fail+0x23c/0x250 [ 254.786428][T27699] should_fail_usercopy+0x16/0x20 [ 254.791516][T27699] _copy_to_user+0x1c/0x90 [ 254.796542][T27699] environ_read+0x248/0x340 [ 254.801051][T27699] do_iter_read+0x2be/0x4b0 [ 254.805559][T27699] do_preadv+0x13b/0x230 [ 254.809808][T27699] ? __cond_resched+0x11/0x40 [ 254.814490][T27699] ? fput+0x2d/0x130 [ 254.818390][T27699] ? ksys_write+0x157/0x180 [ 254.822891][T27699] __x64_sys_preadv+0x54/0x60 [ 254.827604][T27699] do_syscall_64+0x3d/0x90 [ 254.832101][T27699] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 254.838102][T27699] RIP: 0033:0x4665d9 [ 254.842036][T27699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 254.861764][T27699] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 254.870184][T27699] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 13:43:44 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0xffffff7f00000000) [ 254.878241][T27699] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 [ 254.886310][T27699] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 254.894284][T27699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 254.902260][T27699] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 [ 254.911118][T27698] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 13:43:44 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x4042, 0x0) 13:43:44 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0xffffffff00000000) 13:43:44 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090011ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:44 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ff0000/0x10000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f00002d6000/0x4000)=nil, &(0x7f0000fef000/0xa000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fed000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000000)="7182aec733f9023240d430cddc8f4b6255a19501049fd011aaa9d9f1ca9e78f02728a9ef4c47753ad13771773b8e2ed97653da0f45eacf5cbb347e6ca3cc2f53c7c9b97ec39b8b4b25971d79bd1d55067227441d163cb5bf2fc4ce487585a763f93667a1f3fa87272d670b2b83b7473debefc261621acb119aed31a1db08b96121c97553822aba273f2e9d474239852a53f9a5bb7ecf3f89e6d29bc4bd00fdc084d3b00300", 0xa5, r0}, 0x68) prctl$PR_SET_MM(0x23, 0x3, &(0x7f00002d5000/0x1000)=nil) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') 13:43:44 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000240)=""/201, 0xc9}, {&(0x7f0000000340)=""/75, 0x4b}, {&(0x7f00000003c0)=""/73, 0x49}, {&(0x7f0000000440)=""/65, 0x41}], 0x4, 0xd9d, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r2 = socket(0x5, 0x800000003, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0xfffffffffffffff3, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, r5, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80081}, 0x11) [ 255.055819][T27724] loop2: detected capacity change from 0 to 264192 [ 255.072336][T27724] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 13:43:44 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090012ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:44 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4200, r0, 0x0, 0x61) tkill(0x0, 0x23) ptrace$cont(0x18, r1, 0x0, 0x4) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x10000, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0xffff, 0x0) tkill(r2, 0x34) ptrace$cont(0x7, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_targets\x00') preadv(r3, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x71}], 0x1, 0x5, 0x0) 13:43:44 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f00000000c0)=""/122, 0x7a}], 0x1, 0x1000000, 0x1) [ 255.167577][T27737] loop2: detected capacity change from 0 to 264192 [ 255.186902][T27737] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 13:43:44 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090022ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:44 executing program 1 (fault-call:2 fault-nth:79): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 13:43:44 executing program 3: prctl$PR_SET_MM(0x23, 0x3, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') mmap$IORING_OFF_CQ_RING(&(0x7f00002d6000/0x1000)=nil, 0x1000, 0x4, 0x10, 0xffffffffffffffff, 0x8000000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) preadv(r0, &(0x7f0000001400)=[{&(0x7f00000000c0)=""/113, 0x71}], 0x1, 0xffffff, 0x0) [ 255.305869][T27753] loop2: detected capacity change from 0 to 264192 [ 255.332008][T27753] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 13:43:44 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090025ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) [ 255.396398][T27761] FAULT_INJECTION: forcing a failure. [ 255.396398][T27761] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 255.409709][T27761] CPU: 0 PID: 27761 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 255.418178][T27761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 255.428412][T27761] Call Trace: [ 255.431695][T27761] dump_stack_lvl+0xb7/0x103 [ 255.436293][T27761] dump_stack+0x11/0x1a [ 255.440459][T27761] should_fail+0x23c/0x250 [ 255.444884][T27761] __alloc_pages+0x102/0x320 [ 255.449476][T27761] alloc_pages_vma+0x391/0x660 [ 255.454678][T27761] ? follow_page_mask+0xceb/0x1040 [ 255.459868][T27761] do_anonymous_page+0x16e/0x8a0 [ 255.464808][T27761] ? strlcpy+0x65/0x80 [ 255.468939][T27761] handle_mm_fault+0x966/0x1a60 [ 255.473875][T27761] ? perf_trace_mmap_lock_acquire_returned+0x1e0/0x210 [ 255.480767][T27761] do_user_addr_fault+0x609/0xc00 [ 255.485797][T27761] exc_page_fault+0x91/0x220 [ 255.490477][T27761] asm_exc_page_fault+0x1e/0x30 13:43:44 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x7, &(0x7f00002d4000/0x3000)=nil) lseek(r0, 0x0, 0x0) mremap(&(0x7f00002d6000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f00002d6000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r1, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/128, 0xa}, {&(0x7f0000000040)=""/118, 0x76}, {&(0x7f00000000c0)=""/91, 0x58}, {&(0x7f0000000200)=""/2, 0x2}, {&(0x7f0000000240)=""/4096, 0xc43}], 0x5, 0x1001000, 0x0) [ 255.495349][T27761] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 255.501945][T27761] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 83 f8 [ 255.521849][T27761] RSP: 0018:ffffc900008ffce0 EFLAGS: 00010206 [ 255.527915][T27761] RAX: ffff8881076469e0 RBX: 0000000000001000 RCX: 0000000000000040 [ 255.535900][T27761] RDX: 0000000000001000 RSI: ffff88813122bfc0 RDI: 0000000020027000 [ 255.543872][T27761] RBP: 0000000000001000 R08: 0000000000000000 R09: 0001ffffffffffff [ 255.552650][T27761] R10: 000188813122bfff R11: ffff888107646000 R12: 00007ffffffff000 [ 255.561157][T27761] R13: 0000000020027040 R14: ffff88813122b000 R15: 0000000020026040 [ 255.569138][T27761] _copy_to_user+0x77/0x90 [ 255.573803][T27761] environ_read+0x248/0x340 [ 255.578767][T27761] do_iter_read+0x2be/0x4b0 [ 255.583288][T27761] do_preadv+0x13b/0x230 [ 255.587595][T27761] ? fput+0x2d/0x130 [ 255.591616][T27761] ? __fpregs_load_activate+0x100/0x1b0 [ 255.597174][T27761] __x64_sys_preadv+0x54/0x60 [ 255.601903][T27761] do_syscall_64+0x3d/0x90 [ 255.606389][T27761] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 255.612379][T27761] RIP: 0033:0x4665d9 [ 255.616278][T27761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 255.635991][T27761] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 255.644406][T27761] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 255.652407][T27761] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 [ 255.660386][T27761] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 255.668403][T27761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 255.676387][T27761] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 [ 255.712231][T27774] loop2: detected capacity change from 0 to 264192 [ 255.719277][T27774] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 13:43:45 executing program 1 (fault-call:2 fault-nth:80): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 13:43:45 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090048ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) [ 255.854436][T27783] loop2: detected capacity change from 0 to 264192 [ 255.861868][T27784] FAULT_INJECTION: forcing a failure. [ 255.861868][T27784] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 255.874945][T27784] CPU: 1 PID: 27784 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 255.883432][T27784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 255.886874][T27783] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 255.893486][T27784] Call Trace: [ 255.893495][T27784] dump_stack_lvl+0xb7/0x103 [ 255.910329][T27784] dump_stack+0x11/0x1a [ 255.914745][T27784] should_fail+0x23c/0x250 [ 255.919190][T27784] should_fail_usercopy+0x16/0x20 [ 255.924216][T27784] _copy_to_user+0x1c/0x90 [ 255.928620][T27784] environ_read+0x248/0x340 [ 255.933130][T27784] do_iter_read+0x2be/0x4b0 [ 255.937618][T27784] do_preadv+0x13b/0x230 [ 255.941893][T27784] ? __cond_resched+0x11/0x40 [ 255.946550][T27784] ? fput+0x2d/0x130 [ 255.950460][T27784] ? ksys_write+0x157/0x180 [ 255.954943][T27784] __x64_sys_preadv+0x54/0x60 [ 255.959599][T27784] do_syscall_64+0x3d/0x90 [ 255.964096][T27784] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 255.970089][T27784] RIP: 0033:0x4665d9 [ 255.973967][T27784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 255.993946][T27784] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 256.002338][T27784] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 256.010290][T27784] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 [ 256.018251][T27784] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 256.026216][T27784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 256.034275][T27784] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 [ 256.092864][T27783] loop2: detected capacity change from 0 to 264192 13:43:45 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="04080009004cff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:45 executing program 1 (fault-call:2 fault-nth:81): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 256.184913][T27796] FAULT_INJECTION: forcing a failure. [ 256.184913][T27796] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 256.198718][T27796] CPU: 0 PID: 27796 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 256.207142][T27796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 256.209954][T27798] loop2: detected capacity change from 0 to 264192 [ 256.217190][T27796] Call Trace: [ 256.217200][T27796] dump_stack_lvl+0xb7/0x103 [ 256.217227][T27796] dump_stack+0x11/0x1a [ 256.235816][T27796] should_fail+0x23c/0x250 [ 256.240236][T27796] __alloc_pages+0x102/0x320 [ 256.244871][T27796] alloc_pages_vma+0x391/0x660 [ 256.249640][T27796] ? follow_page_mask+0xceb/0x1040 [ 256.254763][T27796] do_anonymous_page+0x16e/0x8a0 [ 256.259705][T27796] ? strlcpy+0x65/0x80 [ 256.263847][T27796] handle_mm_fault+0x966/0x1a60 [ 256.269393][T27796] ? perf_trace_mmap_lock_acquire_returned+0x1e0/0x210 [ 256.276269][T27796] do_user_addr_fault+0x609/0xc00 [ 256.281392][T27796] exc_page_fault+0x91/0x220 [ 256.285986][T27796] asm_exc_page_fault+0x1e/0x30 [ 256.290841][T27796] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 256.297440][T27796] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 83 f8 [ 256.317050][T27796] RSP: 0018:ffffc90000f83ce0 EFLAGS: 00010206 [ 256.323211][T27796] RAX: ffff88812fb809e0 RBX: 0000000000001000 RCX: 0000000000000040 [ 256.331187][T27796] RDX: 0000000000001000 RSI: ffff88812fde8fc0 RDI: 0000000020028000 [ 256.339180][T27796] RBP: 0000000000001000 R08: 0000000000000000 R09: 0001ffffffffffff [ 256.347211][T27796] R10: 000188812fde8fff R11: ffff88812fb80000 R12: 00007ffffffff000 [ 256.355445][T27796] R13: 0000000020028040 R14: ffff88812fde8000 R15: 0000000020027040 [ 256.363425][T27796] _copy_to_user+0x77/0x90 [ 256.367882][T27796] environ_read+0x248/0x340 [ 256.372466][T27796] do_iter_read+0x2be/0x4b0 [ 256.377027][T27796] do_preadv+0x13b/0x230 [ 256.381342][T27796] ? __cond_resched+0x11/0x40 [ 256.386060][T27796] ? fput+0x2d/0x130 [ 256.390110][T27796] ? ksys_write+0x157/0x180 [ 256.394704][T27796] __x64_sys_preadv+0x54/0x60 [ 256.399390][T27796] do_syscall_64+0x3d/0x90 [ 256.403817][T27796] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 256.409738][T27796] RIP: 0033:0x4665d9 [ 256.413633][T27796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 256.433670][T27796] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 256.442092][T27796] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 256.450073][T27796] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 [ 256.458048][T27796] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 256.466067][T27796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 256.474046][T27796] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 [ 256.486614][T27798] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 13:43:46 executing program 1 (fault-call:2 fault-nth:82): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 13:43:46 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090056ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) [ 256.635222][T27808] FAULT_INJECTION: forcing a failure. [ 256.635222][T27808] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 256.648331][T27808] CPU: 1 PID: 27808 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 256.656749][T27808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 256.666810][T27808] Call Trace: [ 256.670091][T27808] dump_stack_lvl+0xb7/0x103 [ 256.674724][T27808] dump_stack+0x11/0x1a [ 256.678897][T27808] should_fail+0x23c/0x250 [ 256.683317][T27808] should_fail_usercopy+0x16/0x20 [ 256.688416][T27808] _copy_to_user+0x1c/0x90 [ 256.692842][T27808] environ_read+0x248/0x340 [ 256.697366][T27808] do_iter_read+0x2be/0x4b0 [ 256.701855][T27808] do_preadv+0x13b/0x230 [ 256.706083][T27808] ? __cond_resched+0x11/0x40 [ 256.710765][T27808] ? fput+0x2d/0x130 [ 256.714645][T27808] ? ksys_write+0x157/0x180 [ 256.719128][T27808] __x64_sys_preadv+0x54/0x60 [ 256.723820][T27808] do_syscall_64+0x3d/0x90 [ 256.728332][T27808] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 256.734210][T27808] RIP: 0033:0x4665d9 [ 256.738218][T27808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 256.757804][T27808] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 256.766370][T27808] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 256.774337][T27808] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 [ 256.782288][T27808] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 256.790299][T27808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 256.798249][T27808] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 [ 256.816833][T27812] loop2: detected capacity change from 0 to 264192 [ 256.832403][T27812] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 13:43:46 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090060ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:46 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090068ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) [ 256.950055][T27819] loop2: detected capacity change from 0 to 264192 [ 256.969289][T27819] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 13:43:46 executing program 1 (fault-call:2 fault-nth:83): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 257.099887][T27827] loop2: detected capacity change from 0 to 264192 [ 257.107102][T27827] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 257.126666][T27831] FAULT_INJECTION: forcing a failure. [ 257.126666][T27831] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 257.140038][T27831] CPU: 0 PID: 27831 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 257.148461][T27831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 257.158516][T27831] Call Trace: [ 257.161795][T27831] dump_stack_lvl+0xb7/0x103 [ 257.166439][T27831] dump_stack+0x11/0x1a [ 257.170614][T27831] should_fail+0x23c/0x250 [ 257.175032][T27831] __alloc_pages+0x102/0x320 [ 257.179623][T27831] alloc_pages_vma+0x391/0x660 [ 257.184387][T27831] ? follow_page_mask+0xceb/0x1040 [ 257.189576][T27831] do_anonymous_page+0x16e/0x8a0 [ 257.194522][T27831] ? strlcpy+0x65/0x80 [ 257.198696][T27831] handle_mm_fault+0x966/0x1a60 [ 257.203621][T27831] ? perf_trace_mmap_lock_acquire_returned+0x1e0/0x210 [ 257.210483][T27831] do_user_addr_fault+0x609/0xc00 [ 257.215569][T27831] exc_page_fault+0x91/0x220 [ 257.220162][T27831] asm_exc_page_fault+0x1e/0x30 [ 257.225017][T27831] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 257.231617][T27831] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 83 f8 [ 257.251274][T27831] RSP: 0018:ffffc90000ffbce0 EFLAGS: 00010206 [ 257.257342][T27831] RAX: ffff88812f9daa60 RBX: 0000000000001000 RCX: 0000000000000040 [ 257.265319][T27831] RDX: 0000000000001000 RSI: ffff8881312f8fc0 RDI: 0000000020029000 [ 257.273295][T27831] RBP: 0000000000001000 R08: 0000000000000000 R09: 0001ffffffffffff [ 257.281274][T27831] R10: 00018881312f8fff R11: ffff88812f9da080 R12: 00007ffffffff000 [ 257.289247][T27831] R13: 0000000020029040 R14: ffff8881312f8000 R15: 0000000020028040 [ 257.297222][T27831] _copy_to_user+0x77/0x90 [ 257.301737][T27831] environ_read+0x248/0x340 [ 257.306254][T27831] do_iter_read+0x2be/0x4b0 [ 257.310763][T27831] do_preadv+0x13b/0x230 [ 257.315069][T27831] ? fput+0x2d/0x130 [ 257.319029][T27831] ? ksys_write+0x157/0x180 [ 257.323537][T27831] __x64_sys_preadv+0x54/0x60 [ 257.328278][T27831] do_syscall_64+0x3d/0x90 [ 257.332766][T27831] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 257.338685][T27831] RIP: 0033:0x4665d9 [ 257.342578][T27831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 257.362186][T27831] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 257.370604][T27831] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 257.378582][T27831] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 [ 257.386562][T27831] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 13:43:46 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) r1 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x80800) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x78, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r1}, {0x8, 0x1, r2}, {0x8}, {0x8, 0x1, r3}, {0x8}, {0x8, 0x1, r4}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x46}, @NBD_ATTR_SOCKETS={0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x4010}, 0x80) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r5, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) 13:43:46 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="04080009006cff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) [ 257.394535][T27831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 257.402544][T27831] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 13:43:46 executing program 1 (fault-call:2 fault-nth:84): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 257.496093][T27839] loop2: detected capacity change from 0 to 264192 [ 257.511167][T27839] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 257.557722][T27848] FAULT_INJECTION: forcing a failure. [ 257.557722][T27848] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 257.570892][T27848] CPU: 0 PID: 27848 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 257.579378][T27848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 257.589437][T27848] Call Trace: [ 257.592726][T27848] dump_stack_lvl+0xb7/0x103 [ 257.597327][T27848] dump_stack+0x11/0x1a [ 257.601491][T27848] should_fail+0x23c/0x250 13:43:47 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090074ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) [ 257.605915][T27848] should_fail_usercopy+0x16/0x20 [ 257.610943][T27848] _copy_to_user+0x1c/0x90 [ 257.615364][T27848] environ_read+0x248/0x340 [ 257.620140][T27848] do_iter_read+0x2be/0x4b0 [ 257.624663][T27848] do_preadv+0x13b/0x230 [ 257.628910][T27848] ? __cond_resched+0x11/0x40 [ 257.633592][T27848] ? fput+0x2d/0x130 [ 257.637536][T27848] ? ksys_write+0x157/0x180 [ 257.642108][T27848] __x64_sys_preadv+0x54/0x60 [ 257.646842][T27848] do_syscall_64+0x3d/0x90 [ 257.651266][T27848] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 257.657167][T27848] RIP: 0033:0x4665d9 [ 257.661058][T27848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 257.680663][T27848] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 257.689081][T27848] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 257.697059][T27848] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 13:43:47 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x71}], 0x1, 0x0, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f00002d5000/0x3000)=nil, &(0x7f00002d6000/0x1000)=nil, &(0x7f00002d5000/0x1000)=nil, &(0x7f0000fee000/0x10000)=nil, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00002d6000/0x2000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000)="a0a65481581ecebd07a7f108ab5f8cdd72008151d87447e3e3c33820ab6b7bb4a44555d9a356ed2ffd6236e4e357409483af5d7d", 0x34, r0}, 0x68) [ 257.705033][T27848] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 257.713008][T27848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 257.720983][T27848] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 13:43:47 executing program 1 (fault-call:2 fault-nth:85): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 257.773330][T27855] loop2: detected capacity change from 0 to 264192 [ 257.792344][T27855] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 13:43:47 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') r1 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f00002d5000/0x3000)=nil, 0x3000, 0x2000000, r1) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000000)={{r0}, 0x5, 0x8e28, 0x130}) preadv(r0, &(0x7f0000001400), 0x0, 0x0, 0xffff) 13:43:47 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090078ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) [ 257.831396][T27862] FAULT_INJECTION: forcing a failure. [ 257.831396][T27862] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 257.844693][T27862] CPU: 0 PID: 27862 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 257.853122][T27862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 257.863267][T27862] Call Trace: [ 257.866555][T27862] dump_stack_lvl+0xb7/0x103 [ 257.871158][T27862] dump_stack+0x11/0x1a [ 257.875323][T27862] should_fail+0x23c/0x250 [ 257.879791][T27862] __alloc_pages+0x102/0x320 [ 257.884431][T27862] alloc_pages_vma+0x391/0x660 [ 257.889197][T27862] ? follow_page_mask+0xceb/0x1040 [ 257.894419][T27862] do_anonymous_page+0x16e/0x8a0 [ 257.899384][T27862] ? strlcpy+0x65/0x80 [ 257.903458][T27862] handle_mm_fault+0x966/0x1a60 [ 257.908309][T27862] ? perf_trace_mmap_lock_acquire_returned+0x1e0/0x210 [ 257.915183][T27862] do_user_addr_fault+0x609/0xc00 [ 257.920214][T27862] exc_page_fault+0x91/0x220 [ 257.924841][T27862] asm_exc_page_fault+0x1e/0x30 13:43:47 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="04080009007aff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) [ 257.929696][T27862] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 257.936293][T27862] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 83 f8 [ 257.955919][T27862] RSP: 0018:ffffc9000106bce0 EFLAGS: 00010206 [ 257.961995][T27862] RAX: ffff888108be9aa0 RBX: 0000000000001000 RCX: 0000000000000040 [ 257.969975][T27862] RDX: 0000000000001000 RSI: ffff8881313d2fc0 RDI: 000000002002a000 13:43:47 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="0408000900f0ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) [ 257.978732][T27862] RBP: 0000000000001000 R08: 0000000000000000 R09: 0001ffffffffffff [ 257.986743][T27862] R10: 00018881313d2fff R11: ffff888108be90c0 R12: 00007ffffffff000 [ 257.994714][T27862] R13: 000000002002a040 R14: ffff8881313d2000 R15: 0000000020029040 [ 258.002730][T27862] _copy_to_user+0x77/0x90 [ 258.007195][T27862] environ_read+0x248/0x340 [ 258.011705][T27862] do_iter_read+0x2be/0x4b0 [ 258.016215][T27862] do_preadv+0x13b/0x230 [ 258.020508][T27862] ? __cond_resched+0x11/0x40 [ 258.025202][T27862] ? fput+0x2d/0x130 [ 258.029101][T27862] ? ksys_write+0x157/0x180 [ 258.033650][T27862] __x64_sys_preadv+0x54/0x60 [ 258.038320][T27862] do_syscall_64+0x3d/0x90 [ 258.042739][T27862] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 258.048731][T27862] RIP: 0033:0x4665d9 [ 258.052643][T27862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 258.072375][T27862] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 258.080790][T27862] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 258.088763][T27862] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 [ 258.096738][T27862] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 258.104708][T27862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 258.112687][T27862] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 13:43:47 executing program 4: prctl$PR_SET_MM(0x23, 0x4, &(0x7f00002d3000/0x3000)=nil) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='stat\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = open_tree(r0, &(0x7f0000000000)='./file0\x00', 0x8000) preadv(r1, &(0x7f0000001200)=[{&(0x7f0000000100)=""/100, 0x64}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/57, 0x39}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/22, 0x16}], 0x5, 0xa7, 0x8001) 13:43:47 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="0408000900f1ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:47 executing program 1 (fault-call:2 fault-nth:86): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 258.246828][T27884] loop2: detected capacity change from 0 to 264192 [ 258.252866][T27888] FAULT_INJECTION: forcing a failure. [ 258.252866][T27888] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 258.266384][T27888] CPU: 0 PID: 27888 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 258.274801][T27888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 258.284857][T27888] Call Trace: [ 258.287987][T27884] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 258.288170][T27888] dump_stack_lvl+0xb7/0x103 [ 258.301753][T27888] dump_stack+0x11/0x1a [ 258.305986][T27888] should_fail+0x23c/0x250 [ 258.310407][T27888] should_fail_usercopy+0x16/0x20 [ 258.315439][T27888] _copy_to_user+0x1c/0x90 [ 258.319863][T27888] environ_read+0x248/0x340 [ 258.324407][T27888] do_iter_read+0x2be/0x4b0 [ 258.328914][T27888] do_preadv+0x13b/0x230 [ 258.333155][T27888] ? __cond_resched+0x11/0x40 [ 258.337830][T27888] ? fput+0x2d/0x130 [ 258.341790][T27888] ? ksys_write+0x157/0x180 [ 258.346292][T27888] __x64_sys_preadv+0x54/0x60 [ 258.351038][T27888] do_syscall_64+0x3d/0x90 [ 258.355469][T27888] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 258.361446][T27888] RIP: 0033:0x4665d9 [ 258.365407][T27888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 258.385017][T27888] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 13:43:47 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000028060001001a"], 0x1c}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) recvmmsg(r1, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000680)=""/4096, 0xff8}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000003300), 0x200, 0x0) io_uring_setup(0x11c6, &(0x7f0000003340)={0x0, 0xdaff, 0x10, 0x1, 0x3c5, 0x0, r3}) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r4, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r5, 0x56957000) openat(0xffffffffffffff9c, &(0x7f00000032c0)='./file0\x00', 0x0, 0x120) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) recvmmsg(r5, &(0x7f00000031c0)=[{{&(0x7f0000000180)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000000200)=""/109, 0x6d}, {&(0x7f0000000280)=""/240, 0xf0}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/106, 0x6a}, {&(0x7f0000001440)=""/104, 0x68}, {&(0x7f00000014c0)=""/210, 0xd2}], 0x6}, 0x6}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f0000001740)=""/184, 0xb8}, {&(0x7f0000001800)=""/234, 0xea}, {&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000002900)=""/223, 0xdf}, {&(0x7f0000002a00)=""/214, 0xd6}, {&(0x7f0000002b00)=""/235, 0xeb}], 0x7}, 0x8fc9}, {{&(0x7f0000002c80)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002d00)=""/57, 0x39}, {&(0x7f0000002d40)=""/235, 0xeb}, {&(0x7f0000002e40)=""/99, 0x63}, {&(0x7f0000002ec0)=""/154, 0x9a}, {&(0x7f0000002f80)=""/168, 0xa8}], 0x5, &(0x7f00000030c0)=""/193, 0xc1}, 0x52}], 0x3, 0x220, &(0x7f0000003280)) 13:43:47 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/devices\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="73797a311d48c8590900000000000000a0d847d556f83dbfa334e8933f17a978fe225a2ab16d7ec4cfae71e5973409b23b137286f30cd4439518dca7c3485613921c519c83261fae0200000000000000dbf4cf1ee9313a94c55645378e924884ab2a938861d60a9f60dc1965318fac7058501a"], 0x73) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x2000)=nil) [ 258.393431][T27888] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 258.401408][T27888] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 [ 258.409417][T27888] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 258.417539][T27888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 258.425583][T27888] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 13:43:47 executing program 1 (fault-call:2 fault-nth:87): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 13:43:47 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="0408000900feff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) [ 258.545603][T27906] FAULT_INJECTION: forcing a failure. [ 258.545603][T27906] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 258.558865][T27906] CPU: 1 PID: 27906 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 258.567303][T27906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 258.577363][T27906] Call Trace: [ 258.580644][T27906] dump_stack_lvl+0xb7/0x103 [ 258.585244][T27906] dump_stack+0x11/0x1a [ 258.589468][T27906] should_fail+0x23c/0x250 [ 258.593915][T27906] __alloc_pages+0x102/0x320 [ 258.598609][T27906] alloc_pages_vma+0x391/0x660 [ 258.603461][T27906] ? follow_page_mask+0xceb/0x1040 [ 258.608580][T27906] do_anonymous_page+0x16e/0x8a0 [ 258.613519][T27906] ? strlcpy+0x65/0x80 [ 258.617922][T27906] handle_mm_fault+0x966/0x1a60 [ 258.622826][T27906] ? perf_trace_mmap_lock_acquire_returned+0x1e0/0x210 [ 258.629769][T27906] do_user_addr_fault+0x609/0xc00 [ 258.634846][T27906] exc_page_fault+0x91/0x220 [ 258.639512][T27906] asm_exc_page_fault+0x1e/0x30 [ 258.644400][T27906] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 258.651004][T27906] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 83 f8 [ 258.670716][T27906] RSP: 0018:ffffc9000133fce0 EFLAGS: 00010206 [ 258.676881][T27906] RAX: ffff88812ffe99e0 RBX: 0000000000001000 RCX: 0000000000000040 [ 258.684948][T27906] RDX: 0000000000001000 RSI: ffff888108acefc0 RDI: 000000002002b000 [ 258.692993][T27906] RBP: 0000000000001000 R08: 0000000000000000 R09: 0001ffffffffffff [ 258.701328][T27906] R10: 0001888108acefff R11: ffff88812ffe9000 R12: 00007ffffffff000 [ 258.709303][T27906] R13: 000000002002b040 R14: ffff888108ace000 R15: 000000002002a040 [ 258.717366][T27906] _copy_to_user+0x77/0x90 [ 258.721835][T27906] environ_read+0x248/0x340 [ 258.726413][T27906] do_iter_read+0x2be/0x4b0 [ 258.730991][T27906] do_preadv+0x13b/0x230 [ 258.735239][T27906] ? __cond_resched+0x11/0x40 [ 258.739969][T27906] ? fput+0x2d/0x130 [ 258.743862][T27906] ? ksys_write+0x157/0x180 [ 258.748406][T27906] __x64_sys_preadv+0x54/0x60 [ 258.753085][T27906] do_syscall_64+0x3d/0x90 [ 258.757510][T27906] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 258.763426][T27906] RIP: 0033:0x4665d9 [ 258.767315][T27906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 258.787031][T27906] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 13:43:48 executing program 0: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r2 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x10000, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x9}, 0x10) r4 = dup2(r3, r3) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r5, 0x4, 0x70bd28, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x8, @link='broadcast-link\x00'}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x68}}, 0x0) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r5, 0x10, 0x70bd26, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000140)=0xc) setresuid(r8, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="992cc5514e8e440ead1ff1e8b3461a2bcd1feb26ac6537ec4c578e0a7277cb28ad71fa427c6c4925df5a0e59cd35f6b1d2b737aea2", @ANYRES16=r1, @ANYBLOB="150b00000c0001800800010d", @ANYRESDEC=r8, @ANYBLOB="3d1d585283092088d427252dfe16bad0ae34e58d5c2323f0f92efed2c5795c21413fd9fecb682a6db9fccfbaf6372cd39706dd3a55d6f7fb050a02cb3d831fac6549230ec9e34001819d664b8808c298cb3f346930619d47e837c2ef4bf7d628f9ebd2cd008ecc0b1a51139eed4e613fbbed95ea57abb5840c7a0585f0da016a5af73170048e"], 0x20}, 0x1, 0x0, 0x0, 0x200000c4}, 0x40080) 13:43:48 executing program 4: prctl$PR_SET_MM(0x23, 0x2, &(0x7f00002d5000/0x2000)=nil) munmap(&(0x7f00002d5000/0x3000)=nil, 0x3000) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0xffffffffffffffff) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') mremap(&(0x7f00002d5000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f00002d5000/0x2000)=nil) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000000)=0xffff7fff, 0x4) [ 258.795466][T27906] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 258.803442][T27906] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 [ 258.811420][T27906] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 258.819393][T27906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 258.827370][T27906] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 [ 258.841270][T27907] loop2: detected capacity change from 0 to 264192 [ 258.855358][T27907] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 258.865125][T27918] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27918 comm=syz-executor.0 13:43:48 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090000ff02e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) [ 258.904155][T27918] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27918 comm=syz-executor.0 13:43:48 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="150b00000000000000001c0000000c00018008000100", @ANYRES32=r4, @ANYBLOB="847a666598d2486a514cebdd2670c3deaa98cad002cbb82af3f742a817a6cc57b0dc13c1feb46f5cae1c2d75a3a6e24d3e117bc5dc35a8a6ba87174ab06394eecea2a1fe25ac6d629138d04b003007b13321e72c49f6cca7062176a3f0ca02e7cd25959b1ef76d6f579f980b"], 0x20}}, 0x0) 13:43:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x13) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x122}, 0x80) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000630000/0x4000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') pkey_mprotect(&(0x7f0000465000/0x4000)=nil, 0x4000, 0x4, 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(r3, &(0x7f0000000040)='./file0\x00', 0x8000, 0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000000)) preadv(r1, &(0x7f0000001400), 0x0, 0x0, 0x0) 13:43:48 executing program 1 (fault-call:2 fault-nth:88): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 258.993833][T27928] loop2: detected capacity change from 0 to 264192 [ 259.018230][T27928] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 259.028739][T27934] FAULT_INJECTION: forcing a failure. [ 259.028739][T27934] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 259.041848][T27934] CPU: 0 PID: 27934 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 259.050273][T27934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 259.060362][T27934] Call Trace: [ 259.063639][T27934] dump_stack_lvl+0xb7/0x103 [ 259.068269][T27934] dump_stack+0x11/0x1a [ 259.072495][T27934] should_fail+0x23c/0x250 [ 259.076930][T27934] should_fail_usercopy+0x16/0x20 [ 259.082132][T27934] _copy_to_user+0x1c/0x90 [ 259.087017][T27934] environ_read+0x248/0x340 [ 259.091540][T27934] do_iter_read+0x2be/0x4b0 [ 259.096029][T27934] do_preadv+0x13b/0x230 [ 259.100265][T27934] ? __cond_resched+0x11/0x40 [ 259.104945][T27934] ? fput+0x2d/0x130 [ 259.108832][T27934] ? ksys_write+0x157/0x180 [ 259.113324][T27934] __x64_sys_preadv+0x54/0x60 [ 259.118060][T27934] do_syscall_64+0x3d/0x90 [ 259.122484][T27934] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 259.128437][T27934] RIP: 0033:0x4665d9 [ 259.132318][T27934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 259.151904][T27934] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 259.160293][T27934] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 259.168246][T27934] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 [ 259.176260][T27934] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 259.184279][T27934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 13:43:48 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090000ff03e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) [ 259.192228][T27934] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 13:43:48 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) readlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=""/58, 0x3a) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x0) 13:43:48 executing program 1 (fault-call:2 fault-nth:89): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 259.237176][ T25] audit: type=1400 audit(1625838228.654:1241): avc: denied { execmod } for pid=27929 comm="syz-executor.4" path="/root/syz-executor.4" dev="sda1" ino=13852 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 [ 259.279574][T27943] loop2: detected capacity change from 0 to 264192 13:43:48 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) r1 = syz_open_procfs(r0, &(0x7f00000000c0)='net/dev\x00') ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000000)) preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) [ 259.304118][T27951] FAULT_INJECTION: forcing a failure. [ 259.304118][T27951] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 259.317480][T27951] CPU: 0 PID: 27951 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 259.323088][T27943] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 259.325894][T27951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 259.344950][T27951] Call Trace: [ 259.348234][T27951] dump_stack_lvl+0xb7/0x103 [ 259.352835][T27951] dump_stack+0x11/0x1a [ 259.357004][T27951] should_fail+0x23c/0x250 [ 259.361425][T27951] __alloc_pages+0x102/0x320 [ 259.366024][T27951] alloc_pages_vma+0x391/0x660 [ 259.370920][T27951] ? follow_page_mask+0xceb/0x1040 [ 259.376140][T27951] do_anonymous_page+0x16e/0x8a0 [ 259.381185][T27951] ? strlcpy+0x65/0x80 [ 259.385454][T27951] handle_mm_fault+0x966/0x1a60 [ 259.390390][T27951] ? perf_trace_mmap_lock_acquire_returned+0x1e0/0x210 [ 259.397387][T27951] do_user_addr_fault+0x609/0xc00 13:43:48 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) preadv(r1, &(0x7f0000000480)=[{&(0x7f0000000000)=""/21, 0x15}, {&(0x7f0000000040)=""/107, 0x6b}, {&(0x7f0000000180)=""/147, 0x93}, {&(0x7f00000000c0)=""/74, 0x4a}, {&(0x7f0000000240)=""/130, 0x82}, {&(0x7f0000000300)=""/121, 0x79}, {&(0x7f0000000380)=""/12, 0xc}, {&(0x7f00000003c0)=""/186, 0xba}], 0x8, 0x2, 0x1) prctl$PR_SET_MM(0x23, 0xb, &(0x7f00002d5000/0x1000)=nil) [ 259.402428][T27951] exc_page_fault+0x91/0x220 [ 259.407023][T27951] asm_exc_page_fault+0x1e/0x30 [ 259.411873][T27951] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 259.418552][T27951] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 83 f8 [ 259.438353][T27951] RSP: 0018:ffffc9000136fce0 EFLAGS: 00010206 [ 259.444420][T27951] RAX: ffff88812fb369e0 RBX: 0000000000001000 RCX: 0000000000000040 [ 259.452477][T27951] RDX: 0000000000001000 RSI: ffff88812fdb3fc0 RDI: 000000002002c000 [ 259.460653][T27951] RBP: 0000000000001000 R08: 0000000000000000 R09: 0001ffffffffffff [ 259.468625][T27951] R10: 000188812fdb3fff R11: ffff88812fb36000 R12: 00007ffffffff000 [ 259.481581][T27951] R13: 000000002002c040 R14: ffff88812fdb3000 R15: 000000002002b040 [ 259.489559][T27951] _copy_to_user+0x77/0x90 [ 259.493981][T27951] environ_read+0x248/0x340 [ 259.498534][T27951] do_iter_read+0x2be/0x4b0 [ 259.503127][T27951] do_preadv+0x13b/0x230 [ 259.507373][T27951] ? __cond_resched+0x11/0x40 [ 259.512124][T27951] ? fput+0x2d/0x130 [ 259.516195][T27951] ? ksys_write+0x157/0x180 [ 259.520707][T27951] __x64_sys_preadv+0x54/0x60 [ 259.525561][T27951] do_syscall_64+0x3d/0x90 [ 259.530082][T27951] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 259.535989][T27951] RIP: 0033:0x4665d9 [ 259.539875][T27951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 259.559620][T27951] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 259.568242][T27951] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 259.576215][T27951] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 [ 259.584209][T27951] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 259.592264][T27951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 259.600237][T27951] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 13:43:49 executing program 0: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="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"], 0x18}, 0x1, 0x0, 0x0, 0x6004}, 0x20000000) 13:43:49 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090000ff04e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:49 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000100)=0x200) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) vmsplice(r2, &(0x7f0000003840)=[{&(0x7f0000002580)="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", 0x1000}, {&(0x7f0000003580)="308dd04ffc7795325645164a655e95ad524daac4108edf25c2b49bf76d5b84369813ff2df2287cd062f6c2388e2d48a4626318350f7d5f8e345c33f5da7a83053c447bc5639f508734085387070f06b532108451e43cdeac4163", 0x5a}, {&(0x7f0000003600)="d3b366b8f8df53a64fa83ad9cde9b3e577e77b01c1848ec2a71ca3ac157083e6bfe78c359f85a8075f57d9877b7e097d5734781dfc254da92c72bb98b18387b235edc039b72baaa3f5f1f65a31eed16ebbbaf8b3c24d831ea4fca51cfc05416a610f47477f31206e8d226952e8de21dbc7b87748c92745895cd97b718ebed276d1051d2851", 0x85}, {&(0x7f00000036c0)="d8cbaa32f1461821ad6b20e8b584b762b189e7da4482ca7b4e4a46de5255941727aad5d22fb3626d67342e4db50471c27d953b5b596319fca3ae2f4d1594db6c3642f34fdc4b856ac2d18cefcd00f8212d376497d567aa47e2e18fe25bdc04be4dc619e959b862a0ed698be9f0cb283d76e024e2c4cbcb20751a89e803fa492f3b59df3ed85017f1983b005dd5b1ebcc652afcce28d620e1955fdfd377b7911eeae0cd901df0729b6ee4ea94b82bf446", 0xb0}, {&(0x7f0000003780)="bf0704c5d6b2f1f9319de93e059b1557f5237ebabc1b77f0a0cde3997c6196d12c6fdb004f194992dcad41c3926fc437d2a73a01eb89f50f1cd92f35102e037c9428315aa8a97da26153474231fd5df898a785429390ccc879d31d32ac0c9ef9447bb2e55d77a2495449aa9ed7315f7116ff1338eeeacd764df1bcd46ae920f4e0ef5a63e0a50e8bafbc1e4a282a1124f61ab8eef21f94e9ac", 0x99}], 0x5, 0x0) preadv(r1, &(0x7f0000002500)=[{&(0x7f0000000180)=""/146, 0x92}, {&(0x7f0000000000)=""/12, 0xc}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/14, 0xe}, {&(0x7f0000001240)=""/85, 0x55}, {&(0x7f00000012c0)=""/233, 0xe9}, {&(0x7f0000002440)=""/140, 0x8c}], 0x8, 0x6, 0x8) 13:43:49 executing program 1 (fault-call:2 fault-nth:90): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 259.718876][T27971] device lo entered promiscuous mode [ 259.726571][T27972] loop2: detected capacity change from 0 to 264192 [ 259.733436][T27968] device lo left promiscuous mode [ 259.747386][T27972] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 259.756835][T27971] device lo entered promiscuous mode [ 259.758858][T27978] FAULT_INJECTION: forcing a failure. [ 259.758858][T27978] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 259.762277][T27971] device lo left promiscuous mode [ 259.775240][T27978] CPU: 0 PID: 27978 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 259.775261][T27978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 259.775271][T27978] Call Trace: [ 259.802154][T27978] dump_stack_lvl+0xb7/0x103 [ 259.806857][T27978] dump_stack+0x11/0x1a [ 259.811122][T27978] should_fail+0x23c/0x250 [ 259.815546][T27978] should_fail_usercopy+0x16/0x20 [ 259.820566][T27978] _copy_to_user+0x1c/0x90 [ 259.824985][T27978] environ_read+0x248/0x340 [ 259.829492][T27978] do_iter_read+0x2be/0x4b0 [ 259.834054][T27978] do_preadv+0x13b/0x230 [ 259.838354][T27978] ? __cond_resched+0x11/0x40 [ 259.843036][T27978] ? fput+0x2d/0x130 [ 259.847017][T27978] ? ksys_write+0x157/0x180 [ 259.851598][T27978] __x64_sys_preadv+0x54/0x60 [ 259.856287][T27978] do_syscall_64+0x3d/0x90 [ 259.860707][T27978] entry_SYSCALL_64_after_hwframe+0x44/0xae 13:43:49 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x9) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$AUDIT_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3e8, 0x20, 0x70bd25, 0x25dfdbff, "", ["", "", ""]}, 0x10}}, 0x4001) prctl$PR_SET_MM(0x23, 0x2, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r3, 0x85b35f7921e1632d, 0x0, 0x0, {0x6}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xc7}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x6c, r3, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7f8b0d7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x5}}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4008080}, 0x40010) preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) [ 259.866660][T27978] RIP: 0033:0x4665d9 [ 259.870549][T27978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 259.890459][T27978] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 259.898966][T27978] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 259.907004][T27978] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 13:43:49 executing program 5: sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x4000040) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x5d, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(r3, &(0x7f0000000180)='cgroup.events\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) write$cgroup_int(r2, &(0x7f0000000200), 0x43408) 13:43:49 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090000ff06e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:49 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x0) [ 259.915059][T27978] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 259.923187][T27978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 259.931186][T27978] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 13:43:49 executing program 1 (fault-call:2 fault-nth:91): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 260.009436][T27989] loop2: detected capacity change from 0 to 264192 [ 260.018818][T27989] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 13:43:49 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xb, &(0x7f00002c9000/0x10000)=nil) 13:43:49 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x8}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}]}, 0x60}}, 0x40000) execveat(r4, &(0x7f0000000380)='./file0\x00', &(0x7f0000000400)=[&(0x7f00000003c0)=';\x00'], &(0x7f0000000480)=[&(0x7f0000000440)='\xff\xff\xff\xff\xff\xff'], 0x1000) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x400100, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r5, 0xc010f508, &(0x7f0000000140)={0x5, 0x6}) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}}, 0x0) [ 260.050368][T28002] FAULT_INJECTION: forcing a failure. [ 260.050368][T28002] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 260.063709][T28002] CPU: 0 PID: 28002 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 260.072227][T28002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 260.082375][T28002] Call Trace: [ 260.085660][T28002] dump_stack_lvl+0xb7/0x103 [ 260.090250][T28002] dump_stack+0x11/0x1a [ 260.094470][T28002] should_fail+0x23c/0x250 13:43:49 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000040)=0xc) dup2(r1, r2) [ 260.098877][T28002] __alloc_pages+0x102/0x320 [ 260.103558][T28002] alloc_pages_vma+0x391/0x660 [ 260.108371][T28002] ? follow_page_mask+0xceb/0x1040 [ 260.113676][T28002] do_anonymous_page+0x16e/0x8a0 [ 260.118715][T28002] ? strlcpy+0x65/0x80 [ 260.122872][T28002] handle_mm_fault+0x966/0x1a60 [ 260.127712][T28002] ? perf_trace_mmap_lock_acquire_returned+0x1e0/0x210 [ 260.134657][T28002] do_user_addr_fault+0x609/0xc00 [ 260.139763][T28002] exc_page_fault+0x91/0x220 [ 260.144353][T28002] asm_exc_page_fault+0x1e/0x30 13:43:49 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090000ff07e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) [ 260.149203][T28002] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 260.155927][T28002] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 83 f8 [ 260.175762][T28002] RSP: 0018:ffffc9000141fce0 EFLAGS: 00010206 [ 260.181822][T28002] RAX: ffff8881079019e0 RBX: 0000000000001000 RCX: 0000000000000040 [ 260.189902][T28002] RDX: 0000000000001000 RSI: ffff888109d50fc0 RDI: 000000002002d000 13:43:49 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x1000000, 0x1) 13:43:49 executing program 5: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x1, &(0x7f0000000800)=[{&(0x7f0000000180)="a1", 0x1, 0xffffefff00000001}], 0x0, 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0x7fff) [ 260.198028][T28002] RBP: 0000000000001000 R08: 0000000000000000 R09: 0001ffffffffffff [ 260.205998][T28002] R10: 0001888109d50fff R11: ffff888107901000 R12: 00007ffffffff000 [ 260.213985][T28002] R13: 000000002002d040 R14: ffff888109d50000 R15: 000000002002c040 [ 260.222492][T28002] _copy_to_user+0x77/0x90 [ 260.226931][T28002] environ_read+0x248/0x340 [ 260.231431][T28002] do_iter_read+0x2be/0x4b0 [ 260.236034][T28002] do_preadv+0x13b/0x230 [ 260.240334][T28002] ? __cond_resched+0x11/0x40 [ 260.245008][T28002] ? fput+0x2d/0x130 13:43:49 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={[{@size={'size', 0x3d, [0x38, 0x25]}}]}) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f0000000280)) r0 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x174, 0x20482) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000100)) [ 260.249183][T28002] ? ksys_write+0x157/0x180 [ 260.253776][T28002] __x64_sys_preadv+0x54/0x60 [ 260.258542][T28002] do_syscall_64+0x3d/0x90 [ 260.262997][T28002] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 260.268900][T28002] RIP: 0033:0x4665d9 [ 260.272788][T28002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 260.292549][T28002] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 13:43:49 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) sigaltstack(&(0x7f00002d6000/0x4000)=nil, &(0x7f00000000c0)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_score\x00') mremap(&(0x7f00002d9000/0x7000)=nil, 0x7000, 0x3000, 0x0, &(0x7f00002dc000/0x3000)=nil) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f00002d5000/0x2000)=nil, 0x2000, 0x8, r1) [ 260.300967][T28002] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 260.308989][T28002] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 [ 260.316967][T28002] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 260.325016][T28002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 260.333056][T28002] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 13:43:49 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000fff000/0x1000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) 13:43:49 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0xfd) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000040), 0x0, 0xd9f, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket(0x18, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="3f630362", @ANYRES16=r2, @ANYBLOB="150b00000000000000001c0000000c00018008000100", @ANYRES32=r4, @ANYBLOB="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"], 0x20}}, 0x0) 13:43:49 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090000ff08e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) [ 260.387040][T28028] loop2: detected capacity change from 0 to 264192 [ 260.397409][T28028] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 260.492491][T28046] loop2: detected capacity change from 0 to 264192 [ 260.506411][T28046] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 13:43:49 executing program 1 (fault-call:2 fault-nth:92): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 13:43:49 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_dev$rtc(&(0x7f00000002c0), 0x10000, 0x40801) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000300)={{r1}, {@void, @max}}) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) writev(r3, &(0x7f0000000280)=[{&(0x7f00000000c0)="933d0d17511a8093eaaeaeb474c8ebef2d2e8676246eb64f14e5cab525f8cb4cd0532e918146154d0d30127e0149c3f0c4602934dbbd9a7961680d07c92504bb626841f1b477b6b70aad278751d9db4717b7e43edad5e49bc4df27fc1239e869197cf09fee51753ee33aff37821e26d666222bb6ebc95290203c96", 0x7b}, {&(0x7f0000000000)="02b2cfe527d60ee8fb6871e8283b", 0xe}, {&(0x7f0000000180)="12c3579ff64007b75e5a287e18249bacf8792da88b7f7329272769f005fec22c2c9321f005f5ab9915d3b82c4fe836d8d3bef626f14df5eb3391c227a57d5ee18d81ce971ffc85fb400d5efba96ebd55920356c520b1e14d2d184c987681720597d8718b7b4c841dc961920b87d2bff4d58f563d6af610e87ee372261ff10caf754c24a64926e6ade661c121e29840b19534ed25513fae50e2f0892ed63dbb7490a0999c4d0a5b3ae903c5cda9dcabd1b1a53c3abb7c260f86c1e517f8db57332f5c151228b8c5b976", 0xc9}], 0x3) r4 = open$dir(&(0x7f0000000340)='./file0\x00', 0x12600, 0xa0) mmap(&(0x7f00003d9000/0x4000)=nil, 0x4000, 0x0, 0x4010, r4, 0x3e108000) preadv(r2, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) 13:43:49 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="150b00000000000000001c0000000c0001800800010028d60b64873b00abec5d38a56ff414e9b37d33ebb943eb42f0c47a8c242d9ca6d3630cf0e95c6600dcecd3e05c5f188a9bad4d48cfe47e8df566f1ce4d7c55d2d98a4d21c7b2da859e8d20fa563adf9a90f5ac1369af3f23cf13c28277f6ca4db62a8d35f4b707cf6375df7db4be180b0ec44c539d0335c5f26321d06c2e824de5ec7542071abd5e50571f0047ae351662eda25ed886", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00022cbd7000fbdbdf25140000a38000030001010000a5f6a791458535f00800140001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) munlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="811bbded", @ANYRES16=r2, @ANYBLOB="000200000000000000001c00000002ff018008000100", @ANYRES32=r8, @ANYBLOB="683180cf07994cf50f251f00008efea19c1e2755cc04ceba4c89c8810b2903147e53337597e006348a5f39c358519ad47d22be4e79cbd3b391bd358749b0c4ad8b0a89eefaabc5a368025497b7d36110dafae1539c"], 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) 13:43:49 executing program 5: readv(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/84, 0x54}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000240)=""/28, 0x1c}, {&(0x7f0000000280)=""/92, 0x5c}, {&(0x7f0000000300)}], 0x6) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x0) shmdt(0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50e}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) r2 = shmget(0x0, 0x4000, 0x10, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ffa000/0x3000)=nil, 0x0) r3 = socket(0x10, 0x3, 0x0) shmat(0x0, &(0x7f0000298000/0x2000)=nil, 0x0) perf_event_open(0x0, 0x0, 0x6, r1, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="4c0000001000fff1fefefd956f76c9b724a6008000000000000000683440150024001b0000000000000000593ab782115ed9043d51d7e88dc62b2ca654a6613b6a080000001cbc882b079881", 0x4c}], 0x1}, 0x0) shmctl$IPC_RMID(r2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000260000/0x4000)=nil) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x50, 0xb9, 0x2, 0x20, 0x0, 0x2, 0x4000, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x100, 0x1, @perf_config_ext={0xf2c, 0x77}, 0xc2084, 0x44, 0x1, 0x4, 0x6, 0x2, 0x800, 0x0, 0x4, 0x0, 0x129b}, 0xffffffffffffffff, 0x6, r0, 0x0) shmget$private(0x0, 0x1000, 0x8, &(0x7f00000cd000/0x1000)=nil) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x2004, @fd_index=0x5, 0x0, 0xc77, 0xaa2c, 0x8, 0x0, {0x1}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_CLOSE={0x13, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) 13:43:49 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090000ff0ae66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:50 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) prctl$PR_SET_MM(0x23, 0xb, &(0x7f00002d6000/0x2000)=nil) syz_io_uring_setup(0x257d, &(0x7f00000000c0)={0x0, 0xfba7, 0x20, 0x0, 0x1cf}, &(0x7f00002d7000/0x1000)=nil, &(0x7f00002d5000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0xffffffffffffffff) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r2 = syz_io_uring_complete(r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}]}, 0x1c}}, 0x20008010) [ 260.618963][T28062] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 260.622117][T28064] loop2: detected capacity change from 0 to 264192 [ 260.627273][T28062] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 260.636052][T28064] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 260.650069][T28069] FAULT_INJECTION: forcing a failure. [ 260.650069][T28069] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 260.665189][T28069] CPU: 0 PID: 28069 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 260.673621][T28069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 260.683759][T28069] Call Trace: [ 260.687058][T28069] dump_stack_lvl+0xb7/0x103 [ 260.691653][T28069] dump_stack+0x11/0x1a [ 260.695814][T28069] should_fail+0x23c/0x250 [ 260.700239][T28069] should_fail_usercopy+0x16/0x20 [ 260.705344][T28069] _copy_to_user+0x1c/0x90 [ 260.709763][T28069] environ_read+0x248/0x340 [ 260.714264][T28069] do_iter_read+0x2be/0x4b0 13:43:50 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) madvise(&(0x7f0000fef000/0x4000)=nil, 0x4000, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000fec000/0x7000)=nil) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) pkey_mprotect(&(0x7f0000ff2000/0x1000)=nil, 0x1000, 0x2000004, 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x2) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2321202e2f66696c65300ae8406c9b885c56e93fe8fd2b8fb84e02649ce432e0845404d0b7a2bcec96180f6fe0dd5ec00df3ea39fe01d51cb0a75a2948a4982f1a726f728be3ddf735b1047ba8022ff9ecbd2f779926a3590f34187aff01a5a2da"], 0x61) [ 260.718772][T28069] do_preadv+0x13b/0x230 [ 260.723015][T28069] ? __cond_resched+0x11/0x40 [ 260.724875][T28077] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 260.728945][T28069] ? fput+0x2d/0x130 [ 260.728967][T28069] ? ksys_write+0x157/0x180 [ 260.728984][T28069] __x64_sys_preadv+0x54/0x60 [ 260.737223][T28077] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 260.741011][T28069] do_syscall_64+0x3d/0x90 13:43:50 executing program 3: prctl$PR_SET_MM(0x23, 0x5, &(0x7f00002d5000/0x2000)=nil) prctl$PR_SET_MM(0x23, 0x8, &(0x7f00002d5000/0x1000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) 13:43:50 executing program 5: readv(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/84, 0x54}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000240)=""/28, 0x1c}, {&(0x7f0000000280)=""/92, 0x5c}, {&(0x7f0000000300)}], 0x6) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x0) shmdt(0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50e}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) r2 = shmget(0x0, 0x4000, 0x10, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ffa000/0x3000)=nil, 0x0) r3 = socket(0x10, 0x3, 0x0) shmat(0x0, &(0x7f0000298000/0x2000)=nil, 0x0) perf_event_open(0x0, 0x0, 0x6, r1, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$IPC_RMID(0x0, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="4c0000001000fff1fefefd956f76c9b724a6008000000000000000683440150024001b0000000000000000593ab782115ed9043d51d7e88dc62b2ca654a6613b6a080000001cbc882b079881", 0x4c}], 0x1}, 0x0) shmctl$IPC_RMID(r2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000260000/0x4000)=nil) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x50, 0xb9, 0x2, 0x20, 0x0, 0x2, 0x4000, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x100, 0x1, @perf_config_ext={0xf2c, 0x77}, 0xc2084, 0x44, 0x1, 0x4, 0x6, 0x2, 0x800, 0x0, 0x4, 0x0, 0x129b}, 0xffffffffffffffff, 0x6, r0, 0x0) shmget$private(0x0, 0x1000, 0x8, &(0x7f00000cd000/0x1000)=nil) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x2004, @fd_index=0x5, 0x0, 0xc77, 0xaa2c, 0x8, 0x0, {0x1}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_CLOSE={0x13, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) [ 260.763728][T28069] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 260.770422][T28069] RIP: 0033:0x4665d9 [ 260.774317][T28069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 260.793928][T28069] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 260.802341][T28069] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 260.810308][T28069] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 [ 260.818607][T28069] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 260.827348][T28069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 260.835322][T28069] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 13:43:50 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, &(0x7f0000000140)={0x18000, 0x9, 0x1, 0x1, 0x3, [0x4, 0x7, 0xfffffffa, 0xfffffffd]}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="150b00000000000000001c0000000c00018008000100", @ANYRES32=r5, @ANYBLOB="7018f92c6ede8bb8ee1b6cf229e5377a95d2a29a423ebbbe82950bd112702040d3fdc11a2708e38928393850093c357b8ae79d006e235545f09e78a35e80e31878dcec381ef588c783df64"], 0x20}}, 0x0) 13:43:50 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090000ff0ce66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) [ 260.861639][T28086] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 260.869919][T28086] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 13:43:50 executing program 1 (fault-call:2 fault-nth:93): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 13:43:50 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff018}, {0x80000006}]}, 0x10) r1 = syz_open_dev$vcsu(&(0x7f0000000a40), 0x6687c223, 0x101000) sendmmsg(r0, &(0x7f0000002040)=[{{&(0x7f0000000000)=@x25, 0x80, &(0x7f00000001c0)=[{&(0x7f0000002100)="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", 0x11d}, {&(0x7f0000000140)="30a8313e672891a993fced50c442334745a0dedf0574b178331aee43ee01dcf6987593e1d024c370758dabba73343bc32926924704a711bd90d22f601137db631bd0f04511632bda43a96f80665afe9cf2", 0x51}], 0x2, &(0x7f0000000200)=[{0x50, 0x111, 0x1, "77cf07673cd98a9b0899860687bbde7edb63e16c3f12aeb4bbc31efcf9e2ead7783d270afd2311954191eb85275a738a50eb430daf4b8b18e4886967d051b7fa"}, {0x68, 0x10a, 0x1, "3297a0f578efaf446b3d2d3229212a2dd66cd2f491909b97fed32e218d385828929dbc7669675433c24d85303d0e7f3e8bfdc31bead7ca6f455e1b9554d0f532b2d017dd319d6e3638f2a2053f828db21e4f5ed944b95a"}, {0xd0, 0x10d, 0xfff, "45a68d5a9bcf128010993c38cf7f469dc6b235df6e9c6bee3c264067270b70c8574709918ec8a9bae652eea3952c5cb2d2e5d0a8332369273515a46a813211e51d79e5e2c4a176e879d405530d78701b448e6734fbd603d751ed707b11efbf5b7e4eb27d0a16cbdd5ee340589640f6a805e4cd1aa8a356f608d1fcf254d575f88aa2cdab1e07805021d2a107f74bceb5af6907ea02744fc5f53f8492d03e9a05134dd2a6f47d6041a02960430933b8245be9b263bf49039c62b72e7f6a"}, {0x58, 0x113, 0x1, "9f6e48396edb222b458b843ed7a2d510d1ce4c9eeed32f9c48a285410a6a382f5ddd7ce3ce5f05a9de796a8914a08c044bbb6987b2a6f62681c1308643ac5e520ce10d"}, {0x98, 0x104, 0x20, "3bc38024b7a7792a193fc004af5d613f9b752524839793ecbf4715d591b19d4e26067fa56246e389a2657e64be152ebfb5a1cf06eb66f6418d9afaf11436126dd3b44fa266afe60a65c0df86c1af7a9bb5e3ddc59fe9ae2cde0349802aa81680a9adae83a7b0ce23ecb11c3a209144cf369dfbafe2ba822704d50ac17e31c7eff7c56185"}, {0xb8, 0x109, 0x8, "dc5c0ce8209e816caa9131e98554c5a1ae5bb93acc3c32fac90fbb7303dac416452c88154b1672f19e67630e7a6bad43833bce66b10489cb59604986b816d4291baf855c5de63027583b00edff9c533ab69f70f207c4e53b00f6a69f57691ace80deb93775dc94b58912c91b1252cc1d427f8d749a1a661fe0f7b78b47449c2c3b59096b008fa3f53377ed352998cf1fa3bf5a30caf51ab64963039d79b244c8ea8ff1"}, {0xc0, 0x10e, 0x5, "38bf0a53430b42b3c57f9f22e3ffd341874cb00625eee34e8cda352e2ca72b7215662f4be589f1091d2dc7f41ef4354a5312b971c03b8f009c263cdd2bd6bf96ede253b5aef66bb39f1a64ed940c224fefa343d23dd7709a67d80cf4bbbcfedd833e627ae0345dd69019935c69ecb03737d1d0b87a38181e0c94c83bc0b8c058d1f56dba9b2390e64808c6c71460edb14717cb4a048cef39520b81162816f8f0bf01d79d6a757b9be1"}], 0x3f0}}, {{&(0x7f0000000600)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @remote}, 0x1, 0x1}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)="fcbcd48942410c3d4310851c3f014c2bd7b89f7e7725cfbf90ba6ba23a58d2", 0x1f}, {&(0x7f0000002240)="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", 0x13f}], 0x2, &(0x7f00000007c0)=[{0x68, 0x10a, 0x0, "63de33aa5395191d4e239297dcc6680074f1a37251ad4d4f62d1fe292d1fdc4c2011069f99c6326095fa6682c31bc8fe5c3239bcecd000469fe3a38b92f65ae4ae37ef87a888bee8c6d6b326bdbf2c0ea658d9c8c524fc91"}, {0x98, 0x88, 0x5c92, "3debd5a7c7fc794ebeebf61bea08b7caf3d152c30822b7663bb23eaee9feabfa66cb4d7d96ffff421687c91626a43043fe24b651dfbc4ea4ef3ff8c30cbd6876473daffc3a8de25e56541eac038bf13e28f4a54e708e60132ddc9f8a40b3ed3545ecbe84eeb0ebce7e9e8821ce2e513d6fe6b46fb789431b50a88cf12783c3039a8e"}, {0x70, 0x10b, 0x6, "ecbd5a2ef020faed395b53724b1c92b264554d44c211ddcf53b641bbddbf6708292632b1ab8d7f4713fd3ad02c6cdc8a70bae2179d92b6ea86f0d1badaac2930800e3a275c0fc7707463e0caa737c5ab25220bc7b60bba8483b55b"}, {0x108, 0x10a, 0x7, "3af89170565e70badae28c047f567d8b641aa3b2fce8ca3e2915f4e528a1f28d32f8e0ab763c440bf2d8be91f90cff0e96d38d3ef66887dd1666887c2320368add3801a2399ae8a500c3d368a9fff167335ae18333f8de1ba558da714182d3f259a96a0a4ec7fca50bfcae9ecad960b5826aab8eb9486fc50e9246e741958d5926b51123b33d64fa37375be311f1234cbe7a938ef322e86e47278a67cec91b1e170a5cc5efdf8137f8cd8ac46bd46b4f01019c810a23f20fb9c5656c0d5a1b8d7955f2e9fab90d83782ca0a0fa71e5fab67975dd22218e93c32736774503c4038be5ff520bf6cae547714911c61527f9321fa3dcbe"}], 0x278}}, {{&(0x7f0000000a80)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x0, 0x0, 0x3, 0x3, {0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000b00)="76e6ef3066d54e4f53d746f34a0a46a8fb1263aec9fc54bb2c19618400197cb2cbf706056c2e825cae2c577ab95522b8c83abd178f13b479929c2b", 0x3b}, {&(0x7f0000000b40)="2111ca6b861daf0c3e414e0ce20bef25b453393b067a20dc689fe136a8752b7bc9377e331bab7b048f01ae0b781759a5edbb1b43fd2e3b84bec8ec607ab9c09062b0afe6c27c506db29bb1fa19a07c2a40c16798422e51a77dde0fe12555b23fbc912ecaad80bb46ea3912d4c6ab0b4ec2cb6af32926d205cb7801e70f15328d721628db179c67096ea1b373c757d6a4c897f6f957ff1f204e1264e9fc0bb9b9ddca32ce", 0xa4}, {&(0x7f0000000c00)="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", 0x1000}, {&(0x7f0000000080)="11923822f358e5d74f0230fe4b2227b027292dcde9bc4c8efad1eab84dad435cfe218f61734566e759c52a0c264d805d60357fb5843f3876b717097540086063bf9167859964257b1b56f52de972a3f1a0a2b7704405973099264e6ce21de1f89c4abdb0e6d8c877871d9a48cbb89476e99d16fe5ab6a9", 0x77}, {&(0x7f0000001c40)="0618f63461c27a2ad407a274d2e1c7f79ad3d10636d3a0147ff7f6bae1c520c436c0f61c7efd8c2932074d41a4ce6cdda32fa6aafeffbc92edc64960e46870a4e0c2ef8144ce9310dd21026148e51bb31860e2a52c9de6923983037f5cd27361d3f836c8061f1bbb3841c608ff05", 0x6e}], 0x5, &(0x7f0000001d40)=[{0xa0, 0x114, 0x9, "1392be86c89f48c6b9c9398574756b9c5aada85971bc0710d0cb38bc2c33aa438f38bbd1515ed8b5cc235407d3f7394bdd36bc793ed54b762299227fc11e432827bb3ce1f7e38b6054ec231943b2e2fde692397619ff1aa0b2557eba3dce12287d052049e7626682756623b793df46a01b766bf8dca6ee306b4e1933e2ce3f281c650d02371e84fa8d2e0ef06299f436"}, {0xe0, 0x10c, 0x3fc4, "d2e981dc13322d63771120bed58b1c1991d47683b9746814d1f94cdf158fecc96df92c305a2470b87806b8488cdeb99fdf3dea50f6a6abdeb34766279e14ff08e952b0c7de5659d4fb7ce5c2be4c9cc78e33871e4cc5e54715e0effc4bd8185534641668119a3def866a3c013920959253ec93f24d9272c2d20337e1a015f2f386c03047b9d77a252b7fa6d46d84676f85ed3202c4eb763fc6263f4c658e06e160f9925b99e15833fc13a7628a4a328ab773485976bfccd5c16deca907f777e4b215868127d40ace0dc1e0"}, {0x70, 0x115, 0xc16, "77bdbd7aea68e1b5a326adc1a051c85d168529119b118333d1e28e93f3916c558818873b020bcd28c3326c46421b12536c6201424a51783a85389d489854f835f2fd0cd19b75ff7fa6455607a5f1ff12603e6d455e3c23c5be303272036527"}, {0xc0, 0x10f, 0x7f, "f069edda0da12e723a2f4189d1eab0494a9bb05c8fa79b9164bab5077d8daff8bede83fcbced12936e0987613961c0c93622f33c70c28f9525a7e976d65bf664110aa958bef3bf9083f56fe6af55a0a04b62a690a3ddacb879d0680d63b4d45b6654d0aa5f5217cedfa45153318fb0e93e43c71fc304acf529bbefff5275c5a74508ef745294c78a19829f00ed9ef189b1cf543011e685e9d3da6e62dca075e4df2b98cd161543e01181be"}, {0x28, 0x116, 0x1, "d4381f4c905d30c75bf89eca75ea75f8b6dd05"}], 0x2d8}}], 0x3, 0x80) 13:43:50 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) socketpair(0x28, 0x2, 0x3, &(0x7f0000000040)={0xffffffffffffffff}) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x20}}, 0x0) 13:43:50 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/4096}], 0x1, 0x20f8, 0x0) 13:43:50 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$notify(r0, 0x402, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) recvmsg(r1, &(0x7f0000000540)={&(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/132, 0x84}, {&(0x7f0000000240)=""/15, 0xf}, {&(0x7f0000000280)=""/253, 0xfd}, {&(0x7f0000000380)=""/84, 0x54}], 0x4, &(0x7f0000000440)=""/241, 0xf1}, 0x15751ae1a14ea373) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) preadv(r3, &(0x7f0000001400)=[{&(0x7f0000000040)=""/112, 0x70}], 0x1, 0x2, 0x0) [ 260.984222][T28106] FAULT_INJECTION: forcing a failure. [ 260.984222][T28106] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 260.984841][T28099] loop2: detected capacity change from 0 to 264192 [ 260.997640][T28106] CPU: 0 PID: 28106 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 261.012598][T28106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 261.022648][T28106] Call Trace: [ 261.025926][T28106] dump_stack_lvl+0xb7/0x103 13:43:50 executing program 5: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x4d, &(0x7f0000000280)="8d31e183156939000000e28c0b1dd2a357b264c8745b78376e18cd3d3dfcb946cf885a21539a0c4a081ceeb24ac13830c1beaa1b4dc69190f8d2802fab69347b9a915308c4829b4b43353c485f"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000580)=[{0x30, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(0x0, 0x0, 0x0, 0x0) r2 = gettid() tkill(r2, 0x29) wait4(r2, &(0x7f0000000140), 0x8, &(0x7f0000000180)) wait4(0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000240)='/proc/self/exe\x00', 0x80100, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000080)) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 261.030524][T28106] dump_stack+0x11/0x1a [ 261.034734][T28106] should_fail+0x23c/0x250 [ 261.039152][T28106] __alloc_pages+0x102/0x320 [ 261.044165][T28106] alloc_pages_vma+0x391/0x660 [ 261.048938][T28106] ? follow_page_mask+0xceb/0x1040 [ 261.053008][T28099] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 261.054087][T28106] do_anonymous_page+0x16e/0x8a0 [ 261.054175][T28106] ? strlcpy+0x65/0x80 [ 261.072526][T28106] handle_mm_fault+0x966/0x1a60 [ 261.077382][T28106] ? perf_trace_mmap_lock_acquire_returned+0x1e0/0x210 [ 261.084293][T28106] do_user_addr_fault+0x609/0xc00 [ 261.089323][T28106] exc_page_fault+0x91/0x220 [ 261.093922][T28106] asm_exc_page_fault+0x1e/0x30 [ 261.098781][T28106] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 261.105384][T28106] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 83 f8 [ 261.124984][T28106] RSP: 0018:ffffc90001b2fce0 EFLAGS: 00010206 [ 261.131150][T28106] RAX: ffff888108cf9a20 RBX: 0000000000001000 RCX: 0000000000000040 [ 261.139103][T28106] RDX: 0000000000001000 RSI: ffff888133cb2fc0 RDI: 000000002002e000 [ 261.147125][T28106] RBP: 0000000000001000 R08: 0000000000000000 R09: 0001ffffffffffff [ 261.155084][T28106] R10: 0001888133cb2fff R11: ffff888108cf9040 R12: 00007ffffffff000 [ 261.163038][T28106] R13: 000000002002e040 R14: ffff888133cb2000 R15: 000000002002d040 [ 261.171055][T28106] _copy_to_user+0x77/0x90 [ 261.175705][T28106] environ_read+0x248/0x340 [ 261.180201][T28106] do_iter_read+0x2be/0x4b0 [ 261.184685][T28106] do_preadv+0x13b/0x230 [ 261.188954][T28106] ? __cond_resched+0x11/0x40 [ 261.193618][T28106] ? fput+0x2d/0x130 [ 261.197591][T28106] ? ksys_write+0x157/0x180 [ 261.202189][T28106] __x64_sys_preadv+0x54/0x60 [ 261.206875][T28106] do_syscall_64+0x3d/0x90 [ 261.211285][T28106] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 261.217210][T28106] RIP: 0033:0x4665d9 [ 261.221108][T28106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 261.240886][T28106] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 261.249289][T28106] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 261.257261][T28106] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 [ 261.265245][T28106] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 261.273205][T28106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 13:43:50 executing program 5: ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f0000000000)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000100)={{0x1b, 0x5b, 0x7, 0x7, 0x3f, 0x0, 0x36, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 13:43:50 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090000ff0fe66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) [ 261.281168][T28106] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 13:43:50 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x15) preadv(r1, &(0x7f0000000400)=[{&(0x7f0000000200)=""/185, 0xb9}, {&(0x7f0000000140)=""/33, 0x21}, {&(0x7f00000002c0)=""/174, 0xae}, {&(0x7f0000000380)=""/50, 0x32}, {&(0x7f00000003c0)=""/20, 0x14}], 0x5, 0xfffffffe, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="20007184", @ANYRES16=r3, @ANYBLOB="150b00000000000000001c0000000c00018008000100", @ANYRES32=r5, @ANYBLOB="c891"], 0x20}}, 0x0) ftruncate(r4, 0x7) 13:43:50 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f00002d5000/0x4000)=nil, 0x4000, 0x2, r0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='projid_map\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) 13:43:50 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400), 0x0, 0x9, 0x0) 13:43:50 executing program 5: unshare(0x40000400) unshare(0x10000000) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x50, r1, 0xc017e000) unshare(0x1c030080) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x10, 0x0, 0xc04a01) 13:43:50 executing program 1 (fault-call:2 fault-nth:94): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 13:43:50 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000001c0)={'syz1', "a3eabe58eec4d16893ff4be7bf7a13780044a518b1842ebb7b068c89b0bec349534330131b925641201e575578b225d2c8f0727e3f24244a7613cb5e71060fcd19d8ffd3ce3559d05779ff1488f7b7225fc5f814fe9a6fd57edc737724efcfedb3ae0ca14b696a5a2985b23970486cc030b64185aef00a85e037d5ca9e896d1dd0aaad6fc08907ea0c79f9fd3158bdfcd4723e641777520d6b8fcae0ef0b9a5ee0a83d5e7ef7bfd2a03add0b7138b118e51c2c1eb962e76d8708635a3e37503e057f289702b0fcf926ebe7f1e91cda"}, 0xd3) vmsplice(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="589bc3c467b6b1e3c8a865ac3d2f2b855b4f442e476814233c2089681e82380d9fb01fed6f143e34d7687d6864771b81f4dc04e5c98e3e5663965d", 0x3b}, {&(0x7f00000000c0)="1e2c7b5bff2fb215f5b6c456f27ddbd6b22856ee50c46f56480dd2c8d99b46073dc27843d1de06797fda4773cf00a41a22ceb23c20f4fcbaa63c4639545d5a150f501b292460b112d3c0410343829d022494", 0x52}], 0x2, 0x2) r1 = accept(r0, &(0x7f00000002c0)=@qipcrtr, &(0x7f0000000340)=0x80) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000380)) 13:43:50 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') r1 = memfd_create(&(0x7f0000000100)='O\x12\xd4i*@$!\x00\x95\x00\nE\x06\x81\xfd,>#5\xd23\xbeZ\xabpk\xb4\x97=\x16RS\xc4+\x89\xc4\xa3\xa3\xbc\xf3\xf9\x10\xea\xbaX\x01\x9c\xfc\xda|', 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="30c5af8cb331f7a179beea2af249de2e4288a91c68f415ca710e4888fdc68abc8ef9556bd4529815fb8e415c561846b64fb0b38f5e424bf49ab2d2b1a7e143a1c470373b6c211d515b37ea3c55f8be34a7cebd648e38ed6586438b259782e94797e0bb71810abfc634a32b9ed72f0237f89c1d1486e8f2de512f89228a41898da2aac3f1bcd3f961d84125485cd3b0cc51c9d9c6b62ef258261fce1350273b15f7ac38b1949a80d119a947ffb70fb7099f6cba54933de06931c69fbd", 0xbc}, {&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="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", 0xfe}], 0x3) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) 13:43:50 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090000ff14e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) [ 261.378862][T28136] loop2: detected capacity change from 0 to 264192 [ 261.400259][T28136] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 13:43:50 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r5, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x14, r2, 0x514, 0x70bd2c, 0x25dfdbfe}, 0x14}}, 0x4000) 13:43:50 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000000)={0x40001011}) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) r1 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f00002d4000/0x3000)=nil, 0x3000, 0x1000001, r1) prctl$PR_SET_MM(0x23, 0x7, &(0x7f00002d4000/0x4000)=nil) [ 261.497531][T28170] loop2: detected capacity change from 0 to 264192 [ 261.517019][T28170] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 261.535684][T28174] FAULT_INJECTION: forcing a failure. 13:43:50 executing program 5: syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0xffffffffffffffb1, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d20202020202020202020202020202020202020202020202020202000000000000000002301000000000123000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000180d010000000000000000010f0000000022001501", 0xa0, 0x7ffe}, {&(0x7f0000000140)="880015010000000001150008000054ec974b7809140b2a3a0802000001000001010053500701beef005252f6ff80505824016d4100000000416d03000000000000e5ffff88ff", 0x46, 0x8a840}], 0x0, &(0x7f0000000000)=ANY=[@ANYRESOCT]) recvmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000280)=@un=@abs, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/166, 0xa6}, {&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000400)=""/213, 0xd5}, {&(0x7f0000000500)=""/150, 0x96}, {&(0x7f00000005c0)=""/166, 0xa6}, {&(0x7f00000000c0)=""/21, 0x15}, {&(0x7f0000000680)=""/61, 0x3d}], 0x7, &(0x7f0000000740)=""/180, 0xb4}, 0x40) [ 261.535684][T28174] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 261.548782][T28174] CPU: 0 PID: 28174 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 261.557215][T28174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 261.567339][T28174] Call Trace: [ 261.570612][T28174] dump_stack_lvl+0xb7/0x103 [ 261.575211][T28174] dump_stack+0x11/0x1a [ 261.579527][T28174] should_fail+0x23c/0x250 [ 261.584210][T28174] should_fail_usercopy+0x16/0x20 [ 261.589242][T28174] _copy_to_user+0x1c/0x90 [ 261.593662][T28174] environ_read+0x248/0x340 13:43:51 executing program 5: r0 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0xfffffffd, 0x8}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='./file0\x00', 0x0, 0x1000, 0x0) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x7f}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0/../file0/file0\x00'}, 0x32, &(0x7f0000007380), 0x0, &(0x7f0000000600), 0x0, 0x803e}}], 0x2, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x34) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x4, 0x80, 0x20, 0x5, 0x0, 0x19, 0x0, 0x8, 0x800, 0xe, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x9, 0x0, @perf_bp, 0x70006, 0x2, 0x5, 0x3, 0x200, 0x7fff, 0x81, 0x0, 0xff, 0x0, 0x2}, r2, 0x7, r0, 0x3) [ 261.598198][T28174] do_iter_read+0x2be/0x4b0 [ 261.602699][T28174] do_preadv+0x13b/0x230 [ 261.606993][T28174] ? __cond_resched+0x11/0x40 [ 261.611672][T28174] ? fput+0x2d/0x130 [ 261.615575][T28174] ? ksys_write+0x157/0x180 [ 261.620073][T28174] __x64_sys_preadv+0x54/0x60 [ 261.624752][T28174] do_syscall_64+0x3d/0x90 [ 261.629172][T28174] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 261.635064][T28174] RIP: 0033:0x4665d9 [ 261.638958][T28174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 261.658583][T28174] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 261.666987][T28174] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 261.674976][T28174] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 [ 261.683721][T28174] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 13:43:51 executing program 1 (fault-call:2 fault-nth:95): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 13:43:51 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090000ff64e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) [ 261.691705][T28174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 261.699701][T28174] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 13:43:51 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) pkey_mprotect(&(0x7f00002d6000/0x3000)=nil, 0x3000, 0x4, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001340)=[{&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/103, 0x67}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/143, 0x8f}, {&(0x7f0000002440)=""/253, 0xfd}, {}, {&(0x7f0000002540)=""/4096, 0x1000}, {&(0x7f0000003540)=""/228, 0xe4}, {&(0x7f0000003640)=""/222, 0xde}], 0xa, 0x9, 0x3) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) 13:43:51 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1c00000000000000000000369654ad40", @ANYRES32=0x0, @ANYBLOB="ac1414aa0000000000624a54519ec7d69e0000000000000007000000014404ad030000001c000000000000000000000008000000", @ANYRESHEX, @ANYBLOB="e00080020a0101010000000075722ea415864220e032e428880d0e04920e2f30b2887857f6d98eb6bc3ff38130a6a5af825e163bfae41e4a47cb14bdbbd618c3fea8f5da156cafd65e73200704f174835c9c4e8a47fe24154bc33c5e626dccb305dfed3e2dbb6e77"], 0x58}, 0x20040000) r2 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x2, 0x701a1884fb105c50) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f0000000100)={'geneve0\x00', {0x2, 0x0, @private}}) bind(r0, &(0x7f0000000140)=@nl=@kern={0x10, 0x0, 0x0, 0x40000000}, 0x80) [ 261.781440][T28205] FAULT_INJECTION: forcing a failure. [ 261.781440][T28205] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 261.794765][T28205] CPU: 0 PID: 28205 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 261.803172][T28205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 261.813238][T28205] Call Trace: [ 261.816545][T28205] dump_stack_lvl+0xb7/0x103 [ 261.821207][T28205] dump_stack+0x11/0x1a [ 261.825375][T28205] should_fail+0x23c/0x250 13:43:51 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x8) ftruncate(r0, 0x1) r1 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) fallocate(r1, 0x20, 0x0, 0xfffffeff000) fallocate(r1, 0x0, 0x0, 0x10000101) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) lseek(r1, 0x3ef, 0x1) sendfile(r0, r2, 0x0, 0x8400fffffffa) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) lseek(r0, 0x0, 0x4) [ 261.829787][T28205] __alloc_pages+0x102/0x320 [ 261.834378][T28205] alloc_pages_vma+0x391/0x660 [ 261.839138][T28205] ? follow_page_mask+0xceb/0x1040 [ 261.844254][T28205] do_anonymous_page+0x16e/0x8a0 [ 261.849261][T28205] ? strlcpy+0x65/0x80 [ 261.853341][T28205] handle_mm_fault+0x966/0x1a60 [ 261.858231][T28205] ? perf_trace_mmap_lock_acquire_returned+0x1e0/0x210 [ 261.865090][T28205] do_user_addr_fault+0x609/0xc00 [ 261.870110][T28205] exc_page_fault+0x91/0x220 [ 261.874710][T28205] asm_exc_page_fault+0x1e/0x30 [ 261.879623][T28205] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 261.886229][T28205] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 83 f8 [ 261.905830][T28205] RSP: 0018:ffffc9000052fce0 EFLAGS: 00010206 [ 261.911959][T28205] RAX: ffff888106b809e0 RBX: 0000000000001000 RCX: 0000000000000040 [ 261.919933][T28205] RDX: 0000000000001000 RSI: ffff888139c86fc0 RDI: 000000002002f000 [ 261.927993][T28205] RBP: 0000000000001000 R08: 0000000000000000 R09: 0001ffffffffffff [ 261.936048][T28205] R10: 0001888139c86fff R11: ffff888106b80000 R12: 00007ffffffff000 [ 261.944026][T28205] R13: 000000002002f040 R14: ffff888139c86000 R15: 000000002002e040 [ 261.952071][T28205] _copy_to_user+0x77/0x90 [ 261.956514][T28205] environ_read+0x248/0x340 [ 261.961018][T28205] do_iter_read+0x2be/0x4b0 [ 261.965513][T28205] do_preadv+0x13b/0x230 [ 261.969747][T28205] ? __cond_resched+0x11/0x40 [ 261.974514][T28205] ? fput+0x2d/0x130 13:43:51 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/dev_snmp6\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) [ 261.978450][T28205] ? ksys_write+0x157/0x180 [ 261.982952][T28205] __x64_sys_preadv+0x54/0x60 [ 261.987636][T28205] do_syscall_64+0x3d/0x90 [ 261.992059][T28205] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 261.998025][T28205] RIP: 0033:0x4665d9 [ 262.001911][T28205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 262.021528][T28205] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 13:43:51 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) mbind(&(0x7f0000feb000/0x13000)=nil, 0x13000, 0x8000, &(0x7f00000001c0)=0x9, 0x5, 0x6) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f00000000c0)={{0x2f, @local, 0x4e21, 0x4, 'nq\x00', 0x4, 0x8, 0x2b}, {@private=0xa010101, 0xbc, 0x1, 0x101, 0x94, 0x6}}, 0x44) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x71}], 0x1, 0xfffffffe, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) prctl$PR_SET_MM(0x23, 0x6, &(0x7f00002d6000/0x1000)=nil) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendfile(r2, r0, &(0x7f0000000180)=0x9b, 0xc87) syncfs(r1) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0) [ 262.029941][T28205] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 262.038011][T28205] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 [ 262.045979][T28205] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 262.053949][T28205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 262.061957][T28205] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 13:43:51 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x10000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r6, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000001940)=ANY=[@ANYBLOB="5c120000", @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="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"/304], 0x125c}, 0x1, 0x0, 0x0, 0x41}, 0x4000052) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r10 = openat$cgroup_type(r0, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r10, 0x5000940e, &(0x7f0000000940)={{r0}, "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"}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x20}}, 0x0) 13:43:51 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffa000/0x3000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000180)={{r0}, 0x0, 0x8, @unused=[0x8, 0x9, 0x4ae, 0x8], @subvolid=0x206a}) 13:43:51 executing program 1 (fault-call:2 fault-nth:96): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 262.090284][T28224] loop2: detected capacity change from 0 to 264192 [ 262.121414][T28224] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 13:43:51 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f0000001400), 0x0, 0x1, 0x0) 13:43:51 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap$IORING_OFF_SQES(&(0x7f00007ab000/0x4000)=nil, 0x4000, 0x4, 0x100010, r1, 0x10000000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r3, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}}, 0x0) 13:43:51 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x71}], 0x1, 0x0, 0x0) [ 262.229741][T28247] FAULT_INJECTION: forcing a failure. [ 262.229741][T28247] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 262.242924][T28247] CPU: 0 PID: 28247 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 262.251343][T28247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 262.261399][T28247] Call Trace: [ 262.264678][T28247] dump_stack_lvl+0xb7/0x103 [ 262.269278][T28247] dump_stack+0x11/0x1a [ 262.273442][T28247] should_fail+0x23c/0x250 13:43:51 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090000fffee66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) [ 262.277857][T28247] should_fail_usercopy+0x16/0x20 [ 262.282875][T28247] _copy_to_user+0x1c/0x90 [ 262.287287][T28247] environ_read+0x248/0x340 [ 262.291786][T28247] do_iter_read+0x2be/0x4b0 [ 262.296287][T28247] do_preadv+0x13b/0x230 [ 262.300594][T28247] ? __cond_resched+0x11/0x40 [ 262.305266][T28247] ? fput+0x2d/0x130 [ 262.309183][T28247] ? ksys_write+0x157/0x180 [ 262.313700][T28247] __x64_sys_preadv+0x54/0x60 [ 262.318373][T28247] do_syscall_64+0x3d/0x90 [ 262.320220][T28255] loop2: detected capacity change from 0 to 264192 [ 262.322873][T28247] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 262.322903][T28247] RIP: 0033:0x4665d9 [ 262.322914][T28247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 262.350446][T28255] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 262.359618][T28247] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 13:43:51 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x408000, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0x8, 0x2) preadv(r0, &(0x7f0000001400), 0x0, 0x1000000, 0x0) 13:43:51 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000000, 0x40010, r1, 0xd8aa9000) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) [ 262.359641][T28247] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 262.359653][T28247] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 [ 262.359663][T28247] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 262.402927][T28247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 262.411409][T28247] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 [ 262.451528][T28255] loop2: detected capacity change from 0 to 264192 13:43:52 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) write(r1, &(0x7f0000000200)="a6c9aee063a19d066cfacfc56b739d84b7a3e3398454c87298e5dd40377c435fc76f76ce30f572c5fc6fca80c1b7764871d88f0d23934d3d33d1ef4d9fd41151c99dcb45ef99138f787cda244d551b6798ec0dc5374aa83b27ea79616c5eef9fb0bee4a5f295f42181090a13cfabaf3c4cbc26a09b213f3eb5b4c1bae2dded98f19631e2dbcc13138462de17cde1c4a545ca213292aa85c72c4d39", 0x9b) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="73c0c5a0ea8099d10becdc4b107dfb734e6dbf74b734dbbf35b27810b623b005b26e650ff499ca159b5aa6a4d47a1240b1b8dfe309a0a241b2eebacbc064266b10be1e8b53362e76659d14ee59d9d98c022431142d56ae7bf29f33dc560c623183ade791a330f581f806d01a21f607b5b0c95cdcfe59a92efe73c7aa13a51ae4e0a8ac50175d1ed714589aaa8f56d88bb49f4870bb530dc99d273cc214995a154af21160b50f1444b03c7044664a5a864489193fe6e1dead252114c785d597e7ba4f2e42ae88efd20bbbd7"], 0x20}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, 0x0, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vxcan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r9 = socket(0x11, 0x800000003, 0x0) bind(r9, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r8, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000001c40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001c00)={&(0x7f0000000440)=ANY=[@ANYBLOB="60010000", @ANYRES16=r2, @ANYBLOB="200028bd7000fcdbdf25170000005800018008000100", @ANYRES32=r4, @ANYBLOB="1400020076657468315f6d616376746170000000140002006261746164765f736c6176655f310000080003000000000014000200776c616e30000000000000000000000008000100", @ANYRES32=r5, @ANYBLOB="180001801400020076657468315f746f5f7465616d0000006c00018008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000300020000001400020076657468315f746f5f626f6e640000000800030002000000"], 0x160}, 0x1, 0x0, 0x0, 0x8801}, 0x20000800) 13:43:52 executing program 1 (fault-call:2 fault-nth:97): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 13:43:52 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x6, &(0x7f0000000200)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000012800)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d}], 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x16) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x400000, 0x8) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f0000000280)) 13:43:52 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8002) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="8c3a85364d07c01177248ceff1b94ca70c95feec9ff8c4d477a5a6a93fa2496ebd2fdf32723860668fe2b0dbdce63c3f813241c29716fcb4ebbdcabd5d69a0c115c75a3e195d293d7e28f5c3fd05eabe0f138fdbcb641140cf4cfaeb7dc29212cd5c061e244ddf3b349024bcebf5fb3a6fcc573e77d5dcb7ba0b1fd409bfa433cb73f3a328e46d", 0x87}], 0x1) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) 13:43:52 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090000ff01e60a74000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:52 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f00002d6000/0x3000)=nil, 0x3000, 0x1, r0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r1, &(0x7f0000000000), 0x0, 0x0, 0x2) [ 262.792696][T28295] loop2: detected capacity change from 0 to 264192 [ 262.800076][T28298] FAULT_INJECTION: forcing a failure. [ 262.800076][T28298] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 262.813428][T28298] CPU: 1 PID: 28298 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 262.822030][T28298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 262.832821][T28298] Call Trace: [ 262.836182][T28298] dump_stack_lvl+0xb7/0x103 [ 262.840779][T28298] dump_stack+0x11/0x1a [ 262.844954][T28298] should_fail+0x23c/0x250 [ 262.849400][T28298] __alloc_pages+0x102/0x320 [ 262.853996][T28298] alloc_pages_vma+0x391/0x660 [ 262.858794][T28298] ? follow_page_mask+0xceb/0x1040 [ 262.864089][T28298] do_anonymous_page+0x16e/0x8a0 [ 262.869033][T28298] ? strlcpy+0x65/0x80 [ 262.873158][T28298] handle_mm_fault+0x966/0x1a60 [ 262.878018][T28298] ? perf_trace_mmap_lock_acquire_returned+0x1e0/0x210 [ 262.884880][T28298] do_user_addr_fault+0x609/0xc00 [ 262.889935][T28298] exc_page_fault+0x91/0x220 [ 262.894565][T28298] asm_exc_page_fault+0x1e/0x30 [ 262.899429][T28298] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 262.906192][T28298] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 83 f8 [ 262.925934][T28298] RSP: 0018:ffffc90000febce0 EFLAGS: 00010206 [ 262.931992][T28298] RAX: ffff88812fb5a9e0 RBX: 0000000000001000 RCX: 0000000000000040 [ 262.939946][T28298] RDX: 0000000000001000 RSI: ffff88812ff41fc0 RDI: 0000000020030000 [ 262.947985][T28298] RBP: 0000000000001000 R08: 0000000000000000 R09: 0001ffffffffffff [ 262.955941][T28298] R10: 000188812ff41fff R11: ffff88812fb5a000 R12: 00007ffffffff000 [ 262.963894][T28298] R13: 0000000020030040 R14: ffff88812ff41000 R15: 000000002002f040 [ 262.971850][T28298] _copy_to_user+0x77/0x90 [ 262.976254][T28298] environ_read+0x248/0x340 [ 262.980739][T28298] do_iter_read+0x2be/0x4b0 [ 262.985221][T28298] do_preadv+0x13b/0x230 [ 262.989447][T28298] ? __cond_resched+0x11/0x40 [ 262.994104][T28298] ? fput+0x2d/0x130 [ 262.997989][T28298] ? ksys_write+0x157/0x180 [ 263.002491][T28298] __x64_sys_preadv+0x54/0x60 [ 263.007147][T28298] do_syscall_64+0x3d/0x90 [ 263.011607][T28298] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 263.017488][T28298] RIP: 0033:0x4665d9 [ 263.021364][T28298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 13:43:52 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) remap_file_pages(&(0x7f00002d6000/0x1000)=nil, 0x1000, 0xe, 0x100000000, 0x8000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) 13:43:52 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) r2 = open(&(0x7f0000000f00)='./file0\x00', 0x640, 0x20) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(0x0, 0x8, &(0x7f0000001100)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0x1, 0xffffffffffffffff, &(0x7f0000000200)="fb6d5e6bc62cb56a33767b8b2217cbed0e36829387870ff08e5b31b032b9aae5251395bdd8c5f2810c1394263d7e2e59592756f6a10f4ea488bcef4a06644a2361a52f", 0x43, 0x401}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x4, 0x8, 0xffffffffffffffff, &(0x7f0000000780)="09fb83b309bd4acad5261417df0b62740d1aa976", 0x14, 0x100, 0x0, 0x3}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x2, 0x101, r1, &(0x7f0000000840)="6e4e6afe063d3e1aba86c404497e555ec727eac00b3a0a56e434eef48057f563acce0db6c4b75239970803dcf0061b902e3b3b74", 0x34, 0x7}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x1, 0x6, 0xffffffffffffffff, &(0x7f0000000900)="2d4ec9168f54ff4d68f841be74cc21a09748b3cddbdff4b48fa12cef971eec0150931c8cc604a6618ca43185365924b7a4ea32", 0x33, 0x8c1}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x100, 0xffffffffffffffff, &(0x7f00000009c0)="ec27fd1a70895d99caa3e02a40e68bcb3dc17862016141e4c34460538f0719fa4a55443fdfda5989d5d019594819be32dbd52496e1b1621de49aed342b4c7f2a4b55d352e7a5af0250c6605be0bf734f2899e04bff0737deddc8020232e849bc004d962507b5c216190076f6", 0x6c, 0x5, 0x0, 0x4, r1}, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x3, 0x1, 0xffffffffffffffff, &(0x7f0000000e00)="c7cb120d3a015590c3e67671f682023529635775b44a415779f2466539a6eaf553b230961066218a55fcb88e171c053200a683263d81f5e51d7fc9be8b63a191e28a4da50e7275137fcf127fb742e4f927b50ee6e49df5ea170978d3b184303ef9c86ba0cb88d0509fa096138ab04795e17644baee6bf35f2b305e762e9802d2e532cf7876ea7de5c2d3f127991badaa2e88891ea365b635aad8af691051a1f5ba257c2e304a22f0e958613c1449fa1ef9d650518f806dc17f83c93983c8d817c9d06036e9d5f52d79f4fa89c9ca2b3a8cc29a30b309c11444560ada239cfb507e5128a3ae0270d8a328a824ed2f66ef9ccf29", 0xf3, 0xff, 0x0, 0x0, r2}, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x7, 0xc3cd, r3, &(0x7f0000000f80)="0b9ed22e532acfc386b650f66c99ab6d57c90f729f0bb467b83500aecdf0a77562627675e9c029e15fbe1b230564058480040ada291361a94985b2dcd13eb3f0377f860073", 0x45, 0xfff, 0x0, 0x2}, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x101, r4, &(0x7f0000001040)="368f625f5c618cbd4f14e4d5b51f4245341638992127c6af0604d218094facc060b36e90627a7c953e6e096a5a37923936045f4f6f1e4497144891fd20516d52f55174232f27d56732667e8ed0152494b9e7cf", 0x53, 0x1000, 0x0, 0x3}]) r5 = signalfd4(r1, &(0x7f0000000140), 0x8, 0x1000) move_mount(r5, &(0x7f0000000180)='./file0\x00', r1, &(0x7f00000001c0)='./file0\x00', 0x22) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x3e0, 0x12, 0x1, 0x70bd2d, 0x25dfdbff, {0x26, 0x6, 0x80, 0x3f, {0x4e20, 0x4e23, [0x6, 0xa07, 0x81, 0x50000000], [0x38, 0x101, 0xff], 0x0, [0x7ff, 0xa0]}, 0x13, 0x3}, [@INET_DIAG_REQ_BYTECODE={0xca, 0x1, "274a440dc30b61303b5599c64106fb25fcc5cdae38b5c238e16c9a9ee66d821139cb99ea8d8df9936e99640ee3f5418e6d62381cc0c728f09c5d5fd637b339d24182b83c1b11c4f3ee4868c59cba5264be953d1c65df6ccae7b85499ff120ec9057457f78dc78ddec53bdf34bd83273ed45ecf3d1a3ee940e692a1353dc404ae7c89f3329a2265ced6b561ccd1baf5fb7217aa4f80b4a184458dec2088b7091df4a9f908d3830e22d85452563ce1695b7b832a5f0786e9cd299c91c3688fa0222bdc712e352d"}, @INET_DIAG_REQ_BYTECODE={0xe9, 0x1, "4d5a9788a65cd61d8557ac00d371a4010133e0d303e632cd5206c290bfc36b8d1246ca71e0c6a3d947969ecfa402f1b31eb6156965dadb89caf7dc29996597c13940c284ed32276b36770a3fb7a97101f268de0ee46b274bdf7626493209ec5aff3fdaa335c2cf7d87d5ae017e97a0fe5236d5e71b013827797635b2c7517ac4b9520cfc397947fd9ac2886c639f65aa3d384d71b9b46913f655fcb1d13817652d910678fb05c89a56d5d4adfa2e587137a77c945f17987c79049d5ab430a1ea873a9df396bff03df3a0a6759cc9bd9f5ac30cc772c0c48f178a956a17e091ac625154c02b"}, @INET_DIAG_REQ_BYTECODE={0xfa, 0x1, "6b7c42af6b9a4771fda3ef0419cddbcc4ed584c4128efb6bbf79824ae4160812c909e261159deab749af49b39a1791f035b2a21f84cb1cb6f3e3c36f0d829d0d0aeeee87e7625a121a8518cfe7ce966754cbe07a61ad5660302d747666b645a1733e46c75e9ab8a5ac09b8bb9a787abf6bd2fd051172c222ad3686cef6ed8a6f7e5e757f366c96d7ead6c05fae5e92743c97ab29e4eab0531b35cdcfc1569a2e8d33b1e9a917871833467d870a09fcf2c4c1fc65a7b0385d4a368663a1c9b98ddd1e6bd7fdd2b0a33f4495ef5528506943475f3d3b677835eaf697335944a2f439b81307d99ec00cde764efb0b4fb89395bd058e595a"}, @INET_DIAG_REQ_BYTECODE={0xe0, 0x1, "2a6e83547c226c7991be711b593482f647899694bca65c776deec286465c722d1f57b71cb2e176ba01d693a9e7496db5e5077bd7e97e6aae32d093e629615998334eb81536c39ec2a73cd439aa9dddcc429091bfe65f4045c4c9cbb68d9db078d76eb86390f05ca3e2f04e788c0d9fa2ac93f469f39f762c14b831414c08dfd541f1247b92dd76ff064552962693695420fdaf1b2e42ca03917c3607b7b07a9aa644fd61183f895f479aff1ab8f6115699b932c3c8f2ca7223e9da0b06666ee9bd81143caa6d33fe580f8e4742b55ed24218ef02bfe70bc5d63dad53"}]}, 0x3e0}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80d00, 0x6, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000000002000019000020600100000f2d0000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f00000000c0)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000cdf4655fddf4655fddf4655f00000000e5c700000800000010000800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}], 0x81, &(0x7f00000001c0)=ANY=[]) r6 = socket$unix(0x1, 0xd5fa3287635e31f5, 0x0) mmap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x1, 0x20010, r6, 0x5dd4a000) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) pipe(0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) openat$null(0xffffff9c, 0x0, 0x0, 0x0) 13:43:52 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/113, 0xfffffffffffffe9c}, {&(0x7f0000000180)=""/250}, {&(0x7f0000000280)=""/4081}, {&(0x7f0000001280)=""/215}, {&(0x7f0000000080)=""/55}], 0x10000270, 0x1000000, 0x8) 13:43:52 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000017000/0x2000)=nil) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000180)={0x7fff, {{0x2, 0x4e20, @multicast2}}, 0x1, 0x8, [{{0x2, 0x4e24, @remote}}, {{0x2, 0x4e21, @local}}, {{0x2, 0x4e23, @multicast2}}, {{0x2, 0x4e23, @local}}, {{0x2, 0x4e24, @local}}, {{0x2, 0x4e22, @remote}}, {{0x2, 0x4e24, @loopback}}, {{0x2, 0x4e22, @local}}]}, 0x490) 13:43:52 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000180)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000000c0)=""/91, 0x5b}) [ 263.040948][T28298] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 263.049338][T28298] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 263.057464][T28298] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 [ 263.065416][T28298] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 263.073415][T28298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 263.081653][T28298] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 13:43:52 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = getpgrp(0xffffffffffffffff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) setresuid(r6, 0x0, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000002c00)={0x0, 0x0, 0x0}, &(0x7f0000005140)=0xc) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x20, &(0x7f0000000240)={[{@gid={'gid', 0x3d, r8}}]}) sendmsg$unix(r3, &(0x7f0000000580)={&(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000004c0)=[{&(0x7f00000002c0)="9e109c8903aabfb3b9708afdfad7c8e888748d090ebbf8319425ac0e9573dccccd6245240b39c5034d2d717db56dfb6fe6f5dbdf6df39a4b9dd2bdb7fa5799dc8b11b1a0886bc58473923fd0728f4e1cc3e9a48f3670ec0502b3b8a34dececfbe871061125578319e65e86104651c582c1db406d3dc9ae54f5eac95883af92ff18404bcad6b5c605d74b2d7e1ebcdb685a98970f8b49bcbcea4f42062d26251d3eb674bf17df7965ac2c076d3620060fec6cd62edf74", 0xb6}, {&(0x7f0000000040)="96ae60fbae3b8677c7da5c43d744a165af3962037301f37a2bb5da57cf83ee3991aa230dc0215a69", 0x28}, {&(0x7f0000000940)="0370ec8feb335acca1af435e01a54899fe4771af2f84fde1f6fd0c51150f6dade0dc9a7b33293f5565eea3286d11b90d92b9d9d45f7a42b99ce6d841e899dc967543249e1f26131d1b6ec2df83876ccd8b7049f9cdde7a951f46c826990b27153c4494e3979f58ea6f364a1f285ff60d58c8e00885fa9b7d8f09069ed90d44a2c6d4e1bab4ae2f65ad0d66ef957c99efeaac9dc5b52b1d06d4780f7c2212b6cde691831890dee356a06eec8fdade431d2d847485c4cd3a1dc254333c225c98a3ac5bf3f460659fcf04c858e27647222ed6fce8b5d46571137bc67a84ad98d63f76061a3b2f3b56dbd522ac9a5cc1fb092700971f0ad3a2236962b123ba6ce458d33d79ca43e5b17622adaeb70a45fdebb0ed1da7871c658aa0a05b77948a6e1dadcb465efe0c79156f71fcb888a1c1eb9578b12a94bb3c900a7a4577cdbadacc660a6fc6831dbc373f79007c0b2c36db8a4fea14cefa18af441fc855a36d73e88ce07bcb50e4a9a1b5567d959210d5235bf51b767b315d04a040ede830c5e9f9b7177b9a780ff8965458f18f126716535dbf0676e060bdc5d989da3452daa0a528afb0ebf327a9d374d0e8f672fef223c181dd21ea4e96dead394a77a08c7ecb89f308e818039dacad1070f725c7ebcf139860f5a71808edbcf1c441537d5948865a15ce145b76b76440483b60ee051408255a0f26f894da8b6721c5daa78cd1bfee066e6a3851c0e045cb0bbb527c70a18ffa631a86ecdf9d47caec6d7e0515cb2a52c9d48e899caaa6b048e46ab84e918a2d6ff5ac6d74c4abf7747f62fe05c3d91917dacd1e3f040b6ec0a38394329ce9f8a8582d40c9f761d369e249cc394b77dfd64728c7b95f887dcafbec06722ffd8fab504dc59f9ec1a793a5ffbdb600f6704e9fba87c3f244695bfae9d27cb391ecdb14bac8947c2d99d928effd8b96825d269cf37ed9339c695ebbbfa72b1671a97ec96ebcc91a3cf682029a132e68566474c143380514f85973d79699d6946afb8ee2b3802cb5b4af49046a69b2a3f45215a4d77eb5fb23e059bded6c43f42420cbfa32624b3074bd6b4e16bceca58c3debee094f354977f6fca31ec5ba553473ca3ba55614141482ee6753f528cb95835ac9ba55f1a7f62941348faddb11b3df272f46a10462252b5de0bbaa2f54abc65caa4c884296704553367a6c26055af924eb7df188a2b52e292c88dc677016b43c8e09a46276a518deafe0357d27681f66f2acb26859ba0011546909b43e755c8db8c96335119b792f3467eb532fb221040adc4b913d38bc3715d5b6388622576ff8d1f2080d7caaa4065eca87db81962b21b5a3c3f8fbf20ccb2fa7330b923df962720f711f97d28993d8bd6f2383ccdfa61e47d94602e18938c19051ee0f04739dda4ad585a743c1b01abdc671aa6b3375629c583fd55733335d9395f3a50f13f2a406d61b186b306940397d6d82ad283984e8fc6e94ef978821e94ead5d1c8ccdd8520425850ba7b5532209c12c8a2b73d2a812e26c377dbf8dd833352782f482a6fe0645ab608c4ce6cfb255afbaec553f2613aab83520fbc34c2b140cc9635d3d3dd1cd6dc0ea7ba9f87ef76a79cfc27ae942aa4192865db4f601a77a32f4f47c495d0e0902e47c0cb89a3f6be5513a253e27e00910f992326cae2c49cafbd1281c4f9dacf85fbaa90752227fcab09d399bea69e1e68deed39816ffba57dd54e86e024b75c5edf8d2a1d6319a3d8e462812ae33c62b7788518ebe6593d16c9a2ee13a1daf5ddc720b3d43e3daeb192e666fc6031e806cb0aea55449cfd10726f43bd0f4a93313f2db89a9079d23d881ae6d2013129a6dcb7d6fa2d4d1f76e6b7189fdf5c807c72e22f77eb9a9ebff404e0507b9d4cf0f121f06c6fe13412f02f188a335c3c5f56b2cd1cd5755f27d26e5f12e7b0317afa208d2753e939ba8f6a4746f8ba1b4d93ec07da15f88d60508b45152e54f5b283d71d1c3137bc44389186c9039d483c6160a9007b587a2623a9681ab823a67e3a0263c0d4505c8909dc368d497265c4774fe597209256db578c3b0be05ccd525e796117769d7bb59ba429c119082bf966e2450c07f1e204a8a0650c8bd4b861a570186df4c8d28f557a95d234aacf65fdf74a4be708698db49e5c01f73d9e672b12944c4663b4ae3ea206e7c43adc387ca7b3681d5dffbf2bdcab733cbe6b5ff439a0f943b4496864b91208db8e59b2d4589ec9225a1b19e8db34acfffd6524089be73e58dbd1c89d98a248aaffc968029d0e677716947b7919f49c7798df6f952fec1c5726669e4222dbb0d47e63481efdc863ff8ecbbd52ddea1e3047b383cfa280f2bff7c14a4de5ab877d8f0f7117b607a92ef9ea63815312a4efd70514254ee3ec52e387b2508399dc757e3c6b3c96fd991bc00f21ecfc4d6128ccd46580ac0296d7ed389cbf3b6957e2cc5b650cee01509e2e2a67dd4a384465322081c4b6426f73ab11215c6d4635fd2bf3002270f9cc54b32de631b96d03d2c5aa688924b23d1073a826a0365355dcb6c39a01cb87b674330ebe71c850bd85e293ab25a6391353b2dbd4fda2bcc03a891d3aed1e471402f79d2ddae5d405354e35d247fd4475226f70d4bcc6fee687f5cb2c54cc60257c079d74bf0485027a92f68472ecf242f4742706dabcc6f3e71aca1e9d5dba8c862963feb938f4dcf1fe254fffe5e7e5a11f05b2746b6db96ac0b42665ef2a6c8d4ea7b54f3e362714ba7ff0930812778a630cda9299dd55f12c265bd6f26bb951b21b5a20af96818ca6e9269bc9be5172458a9e8c3443462b340a68419886289f555d8927f44097acd87edf4c1a0a32884a72630954034bd1ad7e91f27db6cdb7edc134dac4780e69a3aa3d028631ce1cb14c27c26846b686389a11a86ebbe2df775f0fb2db4243a2aa09121372d30e53ffe8aa52ab8979b5a1ec0a8d7aa2310545c7748552bf48a4e2fac2aaf58c4bece586f2a860b818a004a423c992393b8d8bed356318d8e624165cf64ee918b68920a5cc26c5fc594d56cb633c26450fa0e42342d3863003b2426ace484e470e40df81d8a7cb31d05b5bb109988ebf1a4fbc28ee8db9186db6dfe4ccc25d2d83486f17455de186e116ee12729da16f999e1ede75f4973654eed09bcb8bb30eb2efc8405d7cfc606affefff0814542dadd04e02dd6c7652838ddec7da1ad28b4610509fab6ec38bbe16bc59969553b3293c62bdf3b62bf8f312e6c1a3e0d65a19b14fa011c86490ed7c961ee6c4001f4d9e2bd329240fd96f736a9e2acdbb0583d008041e3b1c23250ffe1f160014c3712c7e57b5e48aeffebbd633b0b0dfda25ec266723e1cb98bc74a7f31d33a4c1d10f0adbb8ac05749ade4a6d3d588bcf49af25a28d7bc66ea5ace7a06eb1c6af8ce997df27948773724be101f1197549a8c27cb910f590566a8cdf8d47dc9f525a05de0d6cce8bc0771e812e08f6ed03e189b090e5b57caf9063820c39993272998ad5d3c659e2f401741d72855f9fe4540db525b932cb8b2d6fb8ef2929464f94ec43c6f98671d95269152ffeee0c49deccd5f07748ca3fbd4441f52db9353f1884c815eed9a4faa07886bcfc9eb7db3d9c494d509d8371fa1f494298965c9fbbcbcc99c0c15ee61d9465bcaaa07251919318ba5f6d6745f4a38dc2efb343d394e92d912c128bb3d00d8edd6b200a575bbb9ed16119f7c6c19c2a78262e679d9203bd6b41e859c9f2501ed4f5a36562de924b229e20e2bc0ad3786c159c147eaeb10e355568be0a015fb5f9b3e194c4f37cd23231d32df1292427eb8f6bcba65eee99e14e73b4e8fb5d8792384d58eb3f3f8cc0a5cd8694707bb2b4f79b2018816d76e5f40e8e62c3b6b0784b12b1e90bba30a20a8c464c41584f80beaba4af85383108093f62cf4d6fda772777705480747e1c6ec4c84224ae2a2ec87dad26898af5c47e306137e69d291ec77ad6b887779c0d63d05096119e8b095a9dfe51695c7acf41e7d3e860caab14de5ba50f7f741c1a16cd21c9e60d836dd0fede2021ef95e616c5bfeac3c36b67ddb23e89e3f578c90fff9e49ca9c571562bee33383ce7982978d02eae9b85dce58fc78714ed1b3cf23b6794746986f0598f5c2b2f10a6574469e0a523f65619339c0a1a84eb6b51c60718bd31a0f6ecbf9c8b505f171d48826bcc31cbd0f57d89c6f35e1927545bdc30a1c616d9340a4d5dd0f39ea4a0b457cab421162bae8e01d836a79c7a71ff451ca6d341fab572f3a01b24ec293996846820fc888225a40aa23f54d71f1f1520da985dd5c1cfd1243b6c9ca5a5e71daeaea953f50b5dc2315b5718ea03a2bdb79fadff19b689952a7f9fd60435d5b625756d4521a3f111068ea82426f1e7223f20d72f14819b9d43e149b49fbc34b15a0989674330b3d725bdd38acfcf7d01d3ee0f56d3f05c8891112f1571eac0b6792a4ea4eb2514943b42a9a20cfdd1bca201b0f0cfa22faf654a58c344d0b7b748082ac96ebac4519a61b47644619b4b4d1bdd3ff05cd3851467da436816c47e12eec256be0a8dcd9fbf41000c1805345921e8384b8e7777e0703fcd7f54fe097962cd40ec17c6836484b3fedcc356ca9766f675ce4eb270e8c21f2092ac5dc755d1fc47e93c5951b00ded6a5cba4d5cb3b648328ecb00de9ac65da442c0be33fc5b282712ad3bf256fac920909e72f17a8617f05bb137ac3ce45cdf2fc17201fea086d93b85be0e47569d3092a740f65fead9315ba59bfcfcc1d8a178a90267b5364ccb0611280d14bae791bbe69efa9da68eacb226d2a05f00903c237e2cc5e4d9028ec0a58148003e7cb78debab96f37f33b0bed4d6a93d1a27bf37d3a9c5da1f4037fc7a537c94209b50bb859259231b25c82947f1a1608844b7943dbffcb8a81a8a7c2612516138507882c0a2557d0cd25fff837ce4f98df37a3cf3b12ead2a5096d3d16a5d07a8f753ba9a91f144e1f741a973082013c1afe30e821b9b33770c196b2568e50df3dca30bfefd24ce6e8e2ee7e02819ed3b5e4d817903d0c77fe81303844889a48e2576cb971b9b649e223e0147b7885027ed68c43153cabc2ea72e1c0a403884728bf95aa0c1b71da474c7d3f0f7b2af627a8a5acb3ec45e7fe661b3814aa59f3b15b0c097be23414e93228dd5e34d4980578d37a3034ca947fa84b70fe803fbb7197b40c53be36492d91b454a3bacc7a01581ed62a1d10b60c55453b0e5dc38e53f4db11ef6e8e5b24e54b89817965eddd43a0cef36ec62ad8268f8dd1f175f34121387113f92eac8ffed7bd9afa362914ec26342761c80ccb1be851317b727a23000770db054305e1a20390380d0a7606b3c247152d9f96eab65fc6ec4a381c837f444aace68b611b7fc753eab7c4de73645b9d07d101291c54d3875adc8d92f3c6a6686ae5df2b0b834a17afb29f9e45ba4cacaa195fd32df0f56c7cb1c0c0426ca2c1afbea30b2a3767dcf7b29faa3921ea5b86817881aec5d032d42a8bf9dcdd644a727f27aa6b2752cb35fe56cfcdf58707fcbbb7f6a76a6d0c8c83a4813a0e72baa947dd2c0375536eebb24e75897483db2c63a84ea6b14a10458820265d0a7282d5801bbe59120faeface19d1186b7f7b385ac1f327d5466e1a52c51456f9021aae9d493f159348ecb7d7e17ef713591b3d6236cec56bf92fd21b0e2df48dbad0ed96a9cb37d6f925bbd55d24e6167d321d38b737095179a8d7f15f143b026c1b6ca75f41e37d5aced10252bc67fcb3204a68711d09b3422888f0cb59e60b9055c", 0x1000}, {&(0x7f0000000140)="e5f1c4d0b55aa655ccaa795e18b55b8742478b050cd703d1f138163f", 0x1c}, {&(0x7f0000000380)="77f57389835fe8deddbce7354c47b62f623ccb0f9be5b4881cd7479e1ca3dc37861749d43d2c4730e41dea4f4f4778ef7163bab5f9753d04749172abef8c1a3059a2a977ee87511961367c65197e7451ac79ef5460762640977351f2e9fe6ae4def8b23f0598b607e57def2a7267f1b780a24644a145944c1cb3c1474fb5d6c7fab2540b2a4a2fefada8d2a73324f6921b8d75104377ce7836306bb1facd973bb645089b0acea9e950f860363d4fe0e5cb6208d01f7738f53b119c1285ca09b83dc2c44dafb224def3c57ebc15f8a32d2377872fb2cc056f5a3dd906dd7197914f10be160d", 0xe5}, {&(0x7f0000001940)="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", 0x1000}, {&(0x7f0000000480)="54ee2163e4ae6d7e6365892ee7a16a85da96e4d06f0b990efc93bb3e2eede5b865f7fa99a86b56f98323a0285aed8c530fb9", 0x32}], 0x7, &(0x7f0000000540)=[@cred={{0x1c, 0x1, 0x2, {r4, r6, r8}}}], 0x20, 0x24004841}, 0x18840) r9 = socket(0x11, 0x800000003, 0x0) bind(r9, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x20}}, 0x0) 13:43:52 executing program 3: timerfd_gettime(0xffffffffffffffff, &(0x7f00000000c0)) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000000)) 13:43:52 executing program 1 (fault-call:2 fault-nth:98): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 13:43:52 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @mss={0x2, 0x4}], 0x2) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_elf64(r0, &(0x7f0000001240)=ANY=[@ANYBLOB="7f454c4600000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000003800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004773fe1d5f2fcb5e788055627c251d69b3f4dab6e0848203c9212afa43ef15608f8f7767eb4d612cdd8e5d49585c560b8da3ae17f949bb2d1fa5260dd99d4717a0c9149afda073937268981318c270a11fc61035a398358a7d23cb7df4973e346ba92a46e12d88f260f2642c8759209a12d74ad7710b7c7b9518978d1be69fb9b027098d118bf4c608000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d00"/2561], 0xa01) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) sendmsg$inet(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000900)="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", 0x2f4}], 0x1}, 0x8000) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x4d}, 0x100) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="794335b65f038b1a6d4cead4b03d3b828f99924555797a525c5bb081c4845b33778a8512fc04997dfc91f03c9d62752bbb2c11a29d888cf0c362a5786ab2808f7544ca9ee522d717c8fe2d8900"/93, @ANYRES64], 0x100000530) 13:43:52 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x0, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x2a, 0x5, 0x5) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x0) 13:43:52 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000180)) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) 13:43:52 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090000ff01e62274000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) [ 263.202954][T28295] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 13:43:52 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) openat(r0, &(0x7f0000000140)='./file0\x00', 0x80000, 0x57) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x0) 13:43:52 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) pkey_mprotect(&(0x7f00002d6000/0x1000)=nil, 0x1000, 0x200000a, 0xffffffffffffffff) [ 263.309619][T28355] FAULT_INJECTION: forcing a failure. [ 263.309619][T28355] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 263.322074][T28356] loop2: detected capacity change from 0 to 264192 [ 263.322820][T28355] CPU: 1 PID: 28355 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 263.337692][T28355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 263.347738][T28355] Call Trace: [ 263.351008][T28355] dump_stack_lvl+0xb7/0x103 [ 263.355629][T28355] dump_stack+0x11/0x1a [ 263.359779][T28355] should_fail+0x23c/0x250 [ 263.364182][T28355] should_fail_usercopy+0x16/0x20 [ 263.369189][T28355] _copy_to_user+0x1c/0x90 [ 263.373675][T28355] environ_read+0x248/0x340 [ 263.378266][T28355] do_iter_read+0x2be/0x4b0 [ 263.382825][T28355] do_preadv+0x13b/0x230 [ 263.387173][T28355] ? __cond_resched+0x11/0x40 [ 263.391845][T28355] ? fput+0x2d/0x130 [ 263.395822][T28355] ? ksys_write+0x157/0x180 [ 263.400350][T28355] __x64_sys_preadv+0x54/0x60 [ 263.405029][T28355] do_syscall_64+0x3d/0x90 [ 263.409454][T28355] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 263.415442][T28355] RIP: 0033:0x4665d9 [ 263.419326][T28355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 263.439033][T28355] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 263.447449][T28355] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 13:43:52 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="150b00000000000000001c0000000c00018008000100", @ANYRES32=r4, @ANYBLOB="79787b7642c9e63e04c9835a6e0bae5992a65dfc385a9c18f1853dcbe373ee80bbbc993c38d36c1c93423d0e3171960cd2eda8e12630f42211456ad8f209cfd7ba13d1fa73ac4a7152cf594e7d8694020069243a45857dde4390160621"], 0x20}}, 0x0) 13:43:52 executing program 1 (fault-call:2 fault-nth:99): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 263.455411][T28355] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 [ 263.463377][T28355] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 263.472821][T28355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 263.480792][T28355] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 13:43:52 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) preadv(r0, &(0x7f0000001340)=[{&(0x7f0000000000)=""/29, 0x1d}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/89, 0x59}, {&(0x7f0000001180)=""/223, 0xdf}, {&(0x7f0000001280)=""/168, 0xa8}], 0x5, 0xbf, 0x2) syz_io_uring_setup(0x7666, &(0x7f0000001440)={0x0, 0x14c1, 0x4, 0x3, 0x3d1, 0x0, r0}, &(0x7f00002d5000/0x2000)=nil, &(0x7f00002d5000/0x1000)=nil, &(0x7f00000013c0)=0x0, &(0x7f00000014c0)) r2 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0x0, 0x18}, 0x9) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) syz_io_uring_submit(r1, r4, &(0x7f0000003d80)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r5, 0x0, &(0x7f0000003d40)={&(0x7f0000001500)=@sco={0x1f, @none}, 0x80, &(0x7f0000001780)=[{&(0x7f0000001580)="59c5811e3a72ded5796a3a52410d8a4aeb083683d6d7cd67482bde76bb975759c9b75040e9bcd20a36926afebfbd688a90444abef2434b2c19f8ab673c5886292c98d16aa23d", 0x46}, {&(0x7f0000001600)="55bc5e7c7f002eed6000cb7312c9b58efbeeaa99227b64b0d94add50d7d6", 0x1e}, {&(0x7f0000001640)="49ff20625e0c2502445ac5c0b533fd4315831735d4a1e1d22d0bdcd16e9d7e33cc4a1056e5890b25055a36450143e84c93d42a88212c8ddaed00d48d9a57be1dc3643e9551d3b56a5f1a3b6d746d9d76f4d140e0fcb5e4", 0x57}, {&(0x7f00000016c0)="5bf8", 0x2}, {&(0x7f0000001700)="8e59d033a17c8e52d5f38b6d8062303fe9b462574da9ea4f51a7692a8b0d5e3343f459c4a62a36eb1dc67675e55072b15591885c8c90e0295cab617d04291136623e8f74e507b7eb60d796bb", 0x4c}], 0x5, &(0x7f0000001800)=[{0x98, 0x0, 0x6, "3eb5fdb0132a88829de2f51c4be79561e7f2d2e300b97c2063562b103416b986c76dd37c90b07796475349f465c948e9e945a500b045a160584f7a4b81cb6c3e95487f9d83aa4ac5c1406d22f912f24c9e40b2271da745d25bdf4cbc8d7a5942332bef22f751396e72e4d09dee6132748c3ed1e8cc7e21ce1db0754b123122c239b095bbeb8758"}, {0xf8, 0x10d, 0x9, "c5f1e8cc8476c0f8ab12f49fa88ced172ef4a71c8ae282b8c641e7ba1f9e47817fabe7219d23f681e2e6b8c6a9d7bdc40f7ce05a59a987015b01a00fb85600733badfe9cbb3d1fa92c40b002e521f266d652a81874f068020bb2d669e75afa9fc8bad82fcf1c016748ad2d821e32a80b322f7bbddb0575153d1da73a01e52b95672d86b6581e3865042c1ba0f64ed82e98b50a2decf8d3a1ef75113d5d7e2c30f6a1bce7c2043709594d153bbf8fc90823b883d629afdbb3995c04966cd4a2c26b1f4d04cbd6283c7cd7c47bc2ca428c88fd85315439afd01b9cb5471ebea400256f3b4f104ae5d6"}, {0x90, 0x10a, 0x1, "5bc8ebd3dd2c9a3075790091238dacc35e707a834733690693be83342e75389cc8965edbc0c0180d7100c4abd048ddeea9da1acef805d0fc15899bf2cc535d501a849fd0ef409138cb42d2cedd18fb547d2443a53d5b2ce323cc9d93440147c947555bd90084e8c29283b74f810ca144c716b5eae43a43ecaf8c4e31"}, {0xe8, 0x101, 0x9, "9ae92abbd5f3263479b291acfdc5bad76c8bc69289528d95c0f33ae4ea9b13912aab57518b13154ea37d057dde418a5bfe7c06f267b9298eaefbcbce1e2542c67d3f54cc261f6660c38aa08ce9251db204ff84702ef31358bf1b32788d4d740b319923ac1124b2355e6bfd3fae749d06fc2bd1cb01a48611d4a2ffecc6a6923820a3a2200e04e34a832f2ca1694c2c2da6e5b141e53f266b0d4a4609bb3f4587a08c00a6b0cfd36e285fb96fdc30379f0cd59bec5a06dffc37ffe6fb148940ddd66dea77bc107f0b24461d98a56deea0b5dc"}, {0xe0, 0x107, 0x80000001, "76217385b77fb0347b09f23095cccc1bd1ab97dc613b0fa467af00496152f838a3ab7c2ba7cf2b95b224a8e2e2520072df58b853b0d39392b836b0590deb5584c615d90d9b7fe88ac5c942be8ff6220a4540d2daae3c737d79eca04c967a6e4744960dd5e5ee4d6159f248862a9bea1f8c8b74abc273ffcf2a998f3f477b925f3b5bcfac3985565a897b8546d28a97c6b378384c3919fae9524aea6999e93781168c7c0e682e4a2dd57cb3908ac2f0feafeb8635de61b0d80c0702070656504500c58aaa7b1e168801928b"}, {0x1010, 0x117, 0x9, "c371f35c5b6bae910da98b01533cc21cb9abfe07056b724ff746fa5fee192d340472c0eeae87800e096c839988d02b564b8e8822b4510c27ba89c3fee02807443bb4dfaab3a5bbc7f3a88cdce9b908dd26e7dfed449eaa247c20f03e74a792b443c1f8e81075c2668223f0b27191849583a271aab48a2e7d519192e0f3f9fdda38122c8b0d928914ebcf228e2d02655d668cf58a1b3068624b6552828783bd623320f25e54b3fd64a6f960f227759e6697672603a44c21ec44414c37a8e7963ec2d8e3f04a6ec02bbc26aa58dd248f9ec42d1038f6c8f0e7782bc2dc15098200d0e874bb83777f5fa8e833c52d2bda0205801638d091a294ef7c6df704c50e1baa1229e0c1adbdd3dd6053efad5b82111ae72328bac769ed3f824691fd7e0d8e1d5e3110dba76b5e159ed8328092bc4d4309560a72deb421785598b0406e826c3c8bb4f42fff9715e2face4a9f6c28adf50b874dd2135f2ba324e02ce9be54f5382dc6dc244485a5380561cd14e19109705340030d56935b0cef1291674edc80fb17aaff586aca34fa1c07b45479b07c8b6d8e357e3e2856e107a0ce260a63a16c0bf4a58b6492ba5b8408fefeb22b8c8ec9d317063696506518d8b8aa7a2572fa2a1f5cb4fd590d42c9086210b68216274c9ead3209feb64dc66bea2bb7d3cb1142a7fcd9425e6a55bf7059eaeaee714d314167030aa21a4ac875bf39d8ed4e01d5abb0c810d91e264fb7c9c7b1fe9371049ba5650880486aa313cc27fa949c0c043a6d1324605225c198d30e0ce73cd84b33adc36c312e4f144ec4b9b5711efd1b155d0d7ae40a72bd555e3aebe9a183c48c477f8a4eaaf4c67690a90475eb1fe867e3b981a56dd42f253368abdb0ea03634cb4897947ceb33654fe74115967c3142ee8b8e659cc790899a6193a4280e833a5f50649284bdbd1be7dc5bbdeb306a1741db39061cfe6de38a872ee88a884cf8394335890edb4cc27da690676f4d86b2e38cc89d187455cb4a492e10a8146bd5d3e6e27baa9ed5a9fb5b0e90ba2854d8ab3fbc1dea85705598ed9115395806ccc22d41a5aacfa842f7dda74d2291408f961a016e4913aaba9c34d73f85b527d84ffce9fc1e5f73865fb05ef0c16c55f4e61426333c6e15fcf1f1b69858c91c3c3036040cd87ee89eaddc910db8244d06b72542ccd91683d97cef93b7779e1454e6efb00ed486e0b55a24490694b3ada44df53c5d2b0a48b524ec2c168fd3421122ab226ee5ef1bc123b2753af86cd1461073b4f6aa1bc465e5e2a48f58a0d23bb5cd3fafddf16041ca08e400e0b3c377695ee87a747e8c08bb540409b2f7b8b8ea553a65aa40de99cd49db2320b74e281d7ec8dbc2133c1ad75f389ad7c28d8abf3a2024aa0886e6339826af0bc0bf6b2d3eb11675c7a689fe740c8a1c27b68a56ea6712fff1263e7ba3513281444cab5727bffc002fd8a641aa0833dbec645796ccb052d362ec6265175a4a3ab0d4838d4d56f63fe868d697163274170e0a0227ef13dc8103d90028a9c482aa9a71191573956e6298ee418898cb025ae966b40ac1c85c16a18c421355dde1b94c4ac41cf7c9ce35233da97d0b22dd77984f520a557585c7cf1d14dc1e80c822930db025470c7594a688efcf2f99b11243a07f0a7da4e246be69881e9b53c28d74b62f492fb249219b47bf7cb5f28583a5400bf7f3ad926f3af51db2c0c9f0289a5e9c726bfba839d96511027925eac457ec1a71b51245c7f5798c021975ce1609057c154e9fbcec3a922148c63d4ebe8ffa1fbb92d036d433e38d665a31f8bb873ff86590f083106cd5b1c5aa8bdbbace3c85ef8cb0ced84df1564cd1117780629e48e45f6ac9c6292d36ab9428035fa586a86a70c9019414926332a5a7ed9d6be6b641e30dfd62f25872edb9befddab16734465719403e0adae61e2fe6ee939b79fccf0c301170c05c2877ea946396e0259ac105f4e82ea9a99d59dbfbe449cc8d35663089b2f3ddcb0f0593b7d9923fcf3ee62953e4f47c4436cc603c51d6604a57a54d497ef9ca97e578b253cb61a2c89c1ff93e86cf0150a2e3c5bb863830498d003350d89cb7ef1909ded658c46aac804795dae097559a89c378b31e57959efc8d25abbc608b5a5e6fa6a9cd6ee944ba4a54fd7cae4c7b5c292dc61e028207637ea40d45b4603c9ee16b63e3ef7440294ea0f59ac4ef06a2fba1cdac9308f65903b86873e21467c9b5846ce93a0eec5e82048314d14d1060cfd24333c31e11b4e71b873fc83a9d90d73e2fc31454f63da0a9f60cee8930d4153eeb4041265dbe5b06541a6f17b11b912763c2daf8f30fc9805e04735d23c140d135ce146b64b2e717fb33d0967f41b38b5013f253ceb525790d0ab5ccddf4b8ca1562730359e5b27c98b67de3bdcccf9862973b3d1555196daa6020850caa3a56940c17ac67e493e8c773aa0dabceae06a2331f888354e375b918a7bacccc3789a7f9ebd21bd1c8530a6e8620456ab85d29c661f715a87a3107f27ac91479fac269364225188ee9fc9d1f17f60cf8111cb24ac3428dfe572b367c7faa7eef5eab5b8c7e4e10b29449482f742900081c208b92037f23670e15fd2f685ba169e22a5383f23f8b01ac22c16f4f636e59270c2002c2be3ecd46b7515b72acc803ea0937eb4b544d5bce902d0779c33bf67ea11aa60e7eac4c4b0cd52c67616efeeda39fe4247940d76e3349252ea193cf5568d494749a13ce22b018904762fab1e65a78ed7fd9091099337770fd0e3fcbad77c7ef13da379f3ccbbcd7c158c9dcfcb586f632b53ae461497e1a207cae8495cfba2bed3d4628ea87d0f61c54ab04a9a9eaecffadbdea856c27acf573c9d25fef623939bb1001fa1c38ffeacb5611caf5af0026ac4fbaf5c4b000bc12af8c2c4e8dcad90ac1388728826d216898f0bdcca3eb7a0dd08d32a803d2346fc387ce350320f72acf58476f29e0850eb2c480cf3ee228a17cb08cbad15dbac3ba10108cf8c26c37fad555aa9f70bccbc09886ed2a2384c922bc7154fc06bcaf4baa6e4eed265f8b7d9bfcc32bf1f6806636984c4dadaf05d8af04b37fb740cf2a23835a8cdaf311d7c3dcf2481b723e0163a1999c98b3864efbeaa9f0e1cbe5f3d1f0161e8d417516a9ba8f3f65f92de2550a99b80916719993a691e62bee73745b04607760ef26c50365bf4ef277433dee55cb9ece9751ef2e3fe5bba08d9c955f90fabddd3fce62e3649277dc79d367829c7451d63c92a1c37d92d2b5e2a89825a92d8ceb3d3c0168279f24d086c9bdeae3c15aa57740ef55204f9b2c7bcc3646f66000c273fe61b303ebc0ab8d013bfb11752eeff212fc97ac52ddb000ca796b22aa96a0da3d49f7e294ac4c27ce3db4d379c33ae785c5e4d1f3c9b766c8c3d1b43937ee6612c879e7a7d07cb03a9eaa55cadb6b74703e12e544f39f1bf788825724de512dd26de7c502e2e812e2390d4dd6dd7f1a7e1284e59e61977fe098286fc29b5e56f15395b23c05628d94e9dddb27016ae28ed0e53ae797b929342460f6243fc687c2bee49f7bbd4d8c5c7161fea4449cd930fe3437afe57c930b1293572a5f1368aa2012df57760203874d7bba09e73cb649dffb16db0274eab89e14fa646465b17432de8f3a69930eac8594db3024bfa0772162b2a6ba454c344d53b99dec48e2bd69d9ddf045b88126d1e0f0e14c006f31e8e71f2a97b61e56d49aea74ae68ab0214f6b3e552c77b56dc4360d1abbd4d29f83fbb9295695fd65b690261449c45a9bd4d0c5461ea1ffeb9819e5725b2fb36a0fa21eb7a05eb74c26cdf59ead29643c986810f2478aecebc0952950706f2a982faa1975f9dabcdf24999459949b71454682e840e1e623f791f169ae5202879aec4e9af43c212d83e582cc84d61f55f2acca866d98e398f6bbcac44d2eecc6072c3971f33fe1cb780f4bb8b7e38adb1f3db267fca57bb956eb42cf3c21299b6a50bbccf3842e7f6593d91d99729b1cdf3998b5541fca2cd0da8aeb26d7ad64a07d86f7565580782078af5529113e5657b8622009931898a23a21e586b839ad2eca8bf9891d254168661daadbe8ccfd2144c799607118986d9700f3c4aebfa4cc69289869b3470137c8671edbde9f94e9220dedf631b321cc13e2a5d06bcdd34ffdd9ca880dcb75645b0e19e1a98b15de9a3e5e2960706266fd3e20e49dce593db75d85ec025432739deb4e836e1433ca0658e4ee4866be881c5c35c8081cf7df8255cf83c74e726112d594e884c32f0f2956cba2cf4fdb18394220734c2d2337210119c05f486c211c2e08b9500c0394738c5790745e055c4cdcb990b98b6c036d97988174a3853bede76c8521904ec4b5847c232c6d6d1d43464934379b882b22d81230f6a31c62d04cded78f53d952fa7542cc3f2b578e3062e39ef6b44e49ab236087c2d3d9b1d7acd7e6bd32ebbe5cb00369b945aa292406ac2ea75d5aece2a277c0bf2c9279bd3d473a2fc5f2c2a55ccf31aa9e0f6a857b695ac5e601ab144c69825af507f707bdb17a6e97a460edccee2600103883735912d9e8aca994409ce7d98b45edbc159479076f5dff9898e5b2a263b7c1f6b9ab05fa5830b3c7b5cf824b8435dc751842608f9c52a8cca0579bde35b73a0a7b0857e018482d3eb1480e6bf1768bf1e62ed0dd9cb069bbaf31f3615b3c342cc6358e79188a94333e9d02416b212d29f5e1365e3c2ac0a29655e87a67a89b273d5795ce87a92b2b135088b84449f152900fdb2f538d8e24f5b945bb148f99c83da489fdb4455b058c6c7872adfa9356d9f92ac719d1c38bfc032015f37c2ac504a6d8f90048ad4c6a29b3978838bb3df231a01eb9c43c8485a806879adc0d7d0498642ee794766059aca324b212be8809daa47a992c4dca1d4445fcaae3a73228fd3479a40bc66efcd755fb4b51889e912e250ba6d5cdee5bea0d68e223b374bd196927b7041a58b1314f65f974ff8a5dc876d489ed29d5c5a3c5b40ea601e057ce22dc4d6fa2a6a66adfa999ab2b850884ea017b2e16c76d0f617eec63ed793007137eabe5ee1119252df5b58dbfc21804b8fc9d5c54aa9c238b4ab829b949863bb93e6b23fa530865d9afc8da09be0cc2302a81b6b84471def357f82f622aa4b073175c76c4bf361f89950370a0b5f6365de9f9c7e9de81d40cecd0b356e0339399d45285e531138484a4b988b818bc612bfa895f0d62d0e64cdff4f545fe744b75d7ba31ef5f6ca7d8fd3aa73eddb9d36fe372b0e760d5ac68d2401990fefaed799b2ee775e8fd7dcc18c084a58edef0d3e1bc8fba132ef0310f40e57aaca54d4cdc58f1c2b090d3aabc95749d60b2045388fdb9d6cfb57062f9f408df84f5c7234cca9b984e122f3610b906ad099e09388163e1d080639480efc9d23e9ede2b6ed2ae14b2675444d8fcc4ca10031db90e82ccab8e8706cbd781bd8774696d2e0f113d41141a6a1e6f0f80949ec19bf6bb559113f0aaba94340f66f2e474b654a24862aee5699c804ae4ce74214859759e1fc7b62263e13970d4d137ad66fb84bf76749dfb186b8425781e0ded5cd179e1c60f13387b870c0efc4d54afe560422fa3a3a47a10b3699e9129f657d60e4f7ac9654866e518a252fd8cc47f7c7243c12438ddb663dd4e2f16dcd3707af815b4936cf26361ec1d83cf94fb59aa25b7f9e42a59dc143cd287c937fc237cee456bf69085765858a76b458892f191f916333b2d641a206c5895250cb290d95f9a31cc790855a582682be0f45038d606d282dc9d2a5"}, {0x110, 0x29, 0x5, "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"}, {0x1010, 0x115, 0x800000, "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"}], 0x2518}, 0x0, 0x80, 0x1}, 0x1000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x83, &(0x7f0000000080), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000640), &(0x7f0000000680)='./file0\x00', 0x40}, 0x0) r8 = syz_io_uring_setup(0x4ba2, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000100)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x2004, @fd_index=0x5, 0x0, 0xc77, 0xaa2c, 0x8, 0x0, {0x1, r9}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000003e00)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x5, &(0x7f0000003dc0)=[r2, 0xffffffffffffffff], 0x2, 0x0, 0x0, {0x0, r9}}, 0x5) 13:43:52 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090000ff01e62574000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) [ 263.532746][T28356] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 263.566387][T28375] FAULT_INJECTION: forcing a failure. [ 263.566387][T28375] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 263.579647][T28375] CPU: 0 PID: 28375 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 263.588059][T28375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 263.598114][T28375] Call Trace: [ 263.601396][T28375] dump_stack_lvl+0xb7/0x103 [ 263.606074][T28375] dump_stack+0x11/0x1a [ 263.610262][T28375] should_fail+0x23c/0x250 [ 263.614680][T28375] __alloc_pages+0x102/0x320 [ 263.619366][T28375] alloc_pages_vma+0x391/0x660 [ 263.624121][T28375] ? follow_page_mask+0xceb/0x1040 [ 263.629219][T28375] do_anonymous_page+0x16e/0x8a0 [ 263.634139][T28375] ? strlcpy+0x65/0x80 [ 263.638191][T28375] handle_mm_fault+0x966/0x1a60 [ 263.643023][T28375] ? perf_trace_mmap_lock_acquire_returned+0x1e0/0x210 [ 263.649897][T28375] do_user_addr_fault+0x609/0xc00 [ 263.654909][T28375] exc_page_fault+0x91/0x220 [ 263.659479][T28375] asm_exc_page_fault+0x1e/0x30 [ 263.664310][T28375] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 263.670907][T28375] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 83 f8 [ 263.690615][T28375] RSP: 0018:ffffc90000febce0 EFLAGS: 00010206 [ 263.696689][T28375] RAX: ffff88813128ea60 RBX: 0000000000001000 RCX: 0000000000000040 [ 263.704651][T28375] RDX: 0000000000001000 RSI: ffff888107538fc0 RDI: 0000000020031000 [ 263.712617][T28375] RBP: 0000000000001000 R08: 0000000000000000 R09: 0001ffffffffffff [ 263.720688][T28375] R10: 0001888107538fff R11: ffff88813128e080 R12: 00007ffffffff000 [ 263.728833][T28375] R13: 0000000020031040 R14: ffff888107538000 R15: 0000000020030040 [ 263.737619][T28375] _copy_to_user+0x77/0x90 [ 263.742359][T28375] environ_read+0x248/0x340 [ 263.746915][T28375] do_iter_read+0x2be/0x4b0 [ 263.751505][T28375] do_preadv+0x13b/0x230 [ 263.755838][T28375] ? __cond_resched+0x11/0x40 [ 263.760507][T28375] ? fput+0x2d/0x130 [ 263.764495][T28375] ? ksys_write+0x157/0x180 [ 263.769078][T28375] __x64_sys_preadv+0x54/0x60 [ 263.774844][T28375] do_syscall_64+0x3d/0x90 [ 263.779493][T28375] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 263.785426][T28375] RIP: 0033:0x4665d9 [ 263.789492][T28375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 263.809339][T28375] RSP: 002b:00007f53c420b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 263.818189][T28375] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 263.826242][T28375] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000003 13:43:53 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090000ff01e62c74000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:53 executing program 1: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 263.834378][T28375] RBP: 00007f53c420b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 263.842333][T28375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 263.850294][T28375] R13: 00007fff0f13dd8f R14: 00007f53c420b300 R15: 0000000000022000 [ 264.035353][T28394] loop2: detected capacity change from 0 to 264192 [ 264.054056][T28394] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 13:43:53 executing program 5: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) pkey_mprotect(&(0x7f00002d6000/0x1000)=nil, 0x1000, 0x200000a, 0xffffffffffffffff) 13:43:53 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r6, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x58, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PAUSE_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x58}}, 0x40001) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0x100, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r9, 0x0) preadv(r9, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$cgroup_netprio_ifpriomap(r9, &(0x7f0000000040)={'veth1_to_bridge', 0x32, 0x39}, 0x12) 13:43:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r1, 0x1, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000580)={0x520, r1, 0x800, 0x70bd2b, 0x25dfdc01, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0x50c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TX_MATCH_FILTER={0x3cc, 0xe, 0x0, 0x1, [{0x77, 0x0, "e5d3c71d0869a92a7aebb0bc1cc66f770894a0d5dee1f7630ce04e18bb6f0cee7af1c8f9a558d29bd35cd03441eb44d809ed604f2feedae0d74796ecb01b83cc528bcfabbaa3852735119d3282a73b55760836ca679e67c45d3481870203bedfa027b82d96e409eda3057b3ee559010e9f2bef"}, {0x34, 0x0, "a1f79bdc1d769c17982cb22bbc251e0319f1ddb254c5b85040b12098ca627de193c8bd020230f59e54fad449002086b2"}, {0xce, 0x0, "790f204dfd3d0996b6fbc3e34be3e06ef0e60ed9f3fff21eb88431ba301ea0f46f6b59a7fe36ab3e9ceecf9b613a3bdb37c141e0b9ca5057c1ae6a1c04af66148ddb8ad0e43142451a360aee4422a201db6538fd23c963343164bb9a99f79a0021b0d123f20e3ec63f36dcb2628e688b15002c2f65e819406bf0d6c8e3b4d91cc4b8a5dd85c5e945789beb7e267882ec79da1de0702039bfed9ba468c268c8f34f18beabe80eb70589d90b97c4683d03802111e4bf8997d9b8281cfef440b097bf36371a29f11bb31af9"}, {0xc2, 0x0, "8f899dc8f5b084e1de11e7237d59410ac4b974722b8adc061100198c4bd3c0d011424c566c350823db894e17c2cce82b9c83cf7862334ad7afbf558fd70889bd56d8e0be2e2eb7ed26becab6da892051514a1a1b67e9c12fa64346964184a3089ae8ce2004a015326211a1d13f869a4534463404da45b3909da1d00e3ed5795ae37fa409ce0a07818362c8728ae648c542bfc7a4f7c2e109e76be17e7a4a2ff06d87247e68c2093e55183def6e78788a26262c27ac1c00572eeb7d745d87"}, {0x8e, 0x0, "82b2471facac68f4137f2d8d42648309ef8b83c6cd7e68d9c3c4c90bf407a0c3fd9272061621afb453f64881840373f82aa584946879d01b34fc4c0cfc1fa3aeb028e323967485b5cdfbced9fdaad461a7b656ffb4d0b8f1be6b1445f2254886c6fefa3596aa96284f9de80542774d98c35ea3006fc1434dab4b4453eb2f5a6270a01a60e1bbb8acf894"}, {0x5b, 0x0, "e680e91e612856b7ee6cad75663ec8ee61b3471a147d54c54760871f37f7cd52390ed22438e095dff3349afc899c7629e489feaf8eb4b02353cccf7aa843d3f29ff2060c149e387f26acbe6ec7b7b628cda197f7b5ffc1"}, {0x9c, 0x0, "eb235fd9e0cc7c9e6d48db44e8d851a8b454c2e7670de0766d5718dc569a780ded5ccc1c745b67e38964c6e373e357a2cf8e1ec9bb071254e7fbffe324735dbc640c15b771e7f0a0b1cc56578b67b685b00c9a039f278f8e9dd4d46aa7e417b02629c1d8498b35eecc690f0f7134f47451c57685f14117d78fbfa16b5c5a81d3dc39413e0731af0cb23b2083a2bf13062609c3995e7c82e8"}]}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x130, 0xe, 0x0, 0x1, [{0x1f, 0x0, "b4b0cd20befa3a5c03360036dec01901d043348a59265c420801de"}, {0x10, 0x0, "2ef9e46c92d1d0597c15285f"}, {0xfa, 0x0, "eb425294060af9e8eb946ff167d0db712643666f650dc78f55fdcaa068124de56eb3c9f45dce66e0629ebd8dadd2933a35d9aaf9df06e59347fae02f0fd732c62b4c4390e5ccbf52df056b5ff067134b5bfcd2549b78d20423f06181b6b64980747cc5dea40e287b2f21248dc8e3d9053c99a3b622d4ebd5d79807948a297dbbc304011751b4aa431e5b98ac88148e5916ba61bd28aa99b1825279784ebdaa585bd7322f22d0f72bfd467f0be1a5737e035f8873bbcabda5bdef7b398a6796d2dd0849454a0958b78f43fa556e578083b542611c2a42f51ffe477f1bc74f56023499ec82e750f24a6fe3759c1c880863838b4f9fd77a"}]}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}]}]}, 0x520}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000, 0x4, &(0x7f00002d6000/0x2000)=nil) preadv(r2, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) 13:43:53 executing program 1: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x400000f1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 13:43:53 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090000ff01e6610a000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:53 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000240)=""/99, 0xfffffffffffffe4a}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/67, 0x43}, {&(0x7f0000002940)=""/235, 0xeb}, {&(0x7f0000000440)=""/66, 0x42}, {&(0x7f0000000800)=""/204, 0xcc}, {&(0x7f0000000340)=""/184, 0xb8}, {&(0x7f00000004c0)=""/247, 0xf0}, {&(0x7f0000001940)=""/4096, 0x1000}], 0x9, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) write$sndseq(r0, &(0x7f00000005c0)=[{0x38, 0x82, 0xfd, 0x80, @tick=0x1, {0x6, 0x9}, {0x0, 0x8}, @addr={0xdc, 0x4}}, {0x7, 0xff, 0x8, 0xff, @tick=0x3, {0x7}, {0x7b}, @raw8={"9b2a9fa820777d5d4912abe8"}}, {0x1f, 0xde, 0x1, 0x3, @time={0x101, 0x1ff}, {0x9, 0x20}, {0x0, 0x6}, @result={0xfffffffa, 0x7}}, {0x81, 0xe1, 0x3, 0x5, @time={0x73, 0x7c}, {0x7, 0x6}, {0x9}, @result={0xffffffff, 0x1}}, {0x0, 0xe7, 0x42, 0x80, @tick=0x7, {0x0, 0x6}, {0x7, 0x9}, @raw32={[0x5, 0x7, 0x7]}}, {0x9, 0x1e, 0x40, 0x70, @tick=0x40000000, {0x1, 0x7}, {0x1, 0x1}, @result={0x6, 0x40}}, {0x80, 0x1, 0x0, 0x7, @tick=0x6, {0x1, 0x3}, {0x0, 0x6b}, @connect={{0x3, 0x7}, {0x5, 0x1}}}, {0x7, 0x20, 0x6, 0x81, @time, {0x9, 0x40}, {0x80}, @queue={0x6, {0x4, 0x8}}}, {0x4c, 0x8, 0x20, 0x0, @time={0xc00000, 0x2}, {0x0, 0x3}, {0x1, 0x1}, @time=@time={0x6, 0xe30}}], 0xfc) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="150b00000000000000003c0000000c00018008000100", @ANYRES32=r4, @ANYBLOB], 0x20}}, 0x0) [ 264.194602][T28406] loop2: detected capacity change from 0 to 264192 [ 264.203340][T28409] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 264.226222][T28406] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 13:43:53 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090000ff01e66122000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:53 executing program 1: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x7ffff000}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 13:43:53 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r5 = fsopen(&(0x7f0000000040)='xfs\x00', 0x1) preadv(r5, &(0x7f0000000140)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000000240)=""/225, 0xe1}, {&(0x7f0000000340)=""/181, 0xb5}], 0x3, 0xdc1, 0x2a) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x0) 13:43:53 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090000ff01e66125000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) [ 264.354668][T28424] loop2: detected capacity change from 0 to 264192 [ 264.381634][T28424] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 13:43:53 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000180)) fcntl$notify(r3, 0x402, 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000040)) fcntl$notify(r4, 0x402, 0xb1c661d318500c51) fcntl$setownex(r4, 0xf, &(0x7f0000001080)) preadv(r3, 0x0, 0x0, 0x0, 0x0) r5 = socket(0x11, 0x800000003, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) openat$incfs(r0, &(0x7f0000000040)='.pending_reads\x00', 0x2, 0x8a) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x20}}, 0x0) 13:43:53 executing program 1: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0xffffffffffffffff}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 264.453858][T28435] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 264.487188][T28436] loop2: detected capacity change from 0 to 264192 [ 264.516805][T28436] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 13:43:54 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090000ff01e6612c000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:54 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="150b00000000000000001c0000000c00018008000100", @ANYRES32=r3, @ANYBLOB="3a4c2ac9422ebc2e0e771a17873390da74b2b5cc8dc6f00799170ed4cd86985468a5b89647fb6108eac2936d7171fd108920a753a69b0af7172a3c5c5ee63e9651c964d11cef5f6b6e4381a56597cb81f25b1e9432645c9d6e3ee0d40f230ca016ba764850eb7700000000000000459a3029b79c8bd411b6714991a883f0ce12bec8fa33cb9b5042da88f830f5d68530a39550aca256cf2722cf929c3b455efef35fcc2848509a973c14d2e3bae63b8282016e4cdaf1d975a9f1320c1da0b9c8eadb8820"], 0x20}}, 0x0) 13:43:54 executing program 4: r0 = eventfd2(0x100, 0x0) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f00000002c0)=0x14) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)=[{&(0x7f0000000180)={0x118, 0x10, 0x100, 0x70bd2d, 0x25dfdbff, "", [@generic="1f39037b1137a9b00dab7406b2781741ba4bcd6c98a29483d1be9ad40cc3b1e7fea916ec571259bbbd8388a7c2df5cb9615b45e87b92310fd480058787d1acdaa3f24cee8ddd8899de9a4aed2c3a5483782b773d8e1eb8a1242d1de353929eeb261f5227360cbed549ecd8e44ba92e2638ba0ae577c6cb3ec5429c9a73aec2eec43b54857e1a5b4423e37aafb36b3bafdc4e5f65d1f5a2424d00f54f5ff0841e71f2b8022fcfee4019bc120150d3973025f74dcb9d9892f1be0477de6408ecc1218eceb635d3f5c814c569f1c1b06fc554e9731d9bd1eda1848881ec81a750badb4ba702b2324d0da9a9b4c53c33781dbcbde1", @generic="481651f0734985eb49b46aa0c2ed71f22dab59ef"]}, 0x118}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32, @ANYRES32=r2, @ANYRES32], 0x28, 0x41}, 0x1000) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x34) tkill(r3, 0x17) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) syz_open_procfs(r3, &(0x7f0000000380)='fd/3\x00') 13:43:54 executing program 1: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x2, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 13:43:54 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffd000/0x3000)=nil) prctl$PR_SET_MM(0x23, 0x0, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x71}], 0x1, 0x10, 0x0) 13:43:54 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x200, 0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap(&(0x7f0000115000/0x4000)=nil, 0x4000, 0x9, 0x8010, r1, 0xdf530000) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRESDEC, @ANYBLOB="78d83377e1113081b17983001a1c0000000c00018008000100", @ANYRES32=r4, @ANYBLOB], 0x20}}, 0x0) [ 264.656378][T28456] loop2: detected capacity change from 0 to 264192 [ 264.695068][T28456] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 13:43:54 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) pkey_mprotect(&(0x7f00002d4000/0x4000)=nil, 0x4000, 0x1, 0xffffffffffffffff) ioctl$TIOCSCTTY(r0, 0x540e, 0x6) r1 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ae0000/0x2000)=nil, 0x2000, 0x0, r1) pkey_mprotect(&(0x7f00002d4000/0x3000)=nil, 0x3000, 0x6000000, r1) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x800, 0x100, 0x81, 0x5}) 13:43:54 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090000ff01e66174020004090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:54 executing program 1: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x3, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 13:43:54 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') preadv(r0, &(0x7f0000000700)=[{&(0x7f00000007c0)=""/106, 0x6a}, {&(0x7f0000000440)=""/87, 0x57}, {&(0x7f0000000b80)=""/247, 0xf7}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000280)=""/166, 0xa6}, {&(0x7f0000000340)=""/137, 0x89}, {&(0x7f0000000840)=""/224, 0xe0}, {&(0x7f0000000500)=""/18, 0x12}, {&(0x7f0000000540)=""/220, 0xdc}, {&(0x7f0000000640)=""/149, 0x95}], 0xa, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000940)=@delsa={0x228, 0x11, 0x20, 0x70bd29, 0x25dfdbfe, {@in=@multicast1, 0x4d6, 0x2, 0x3c}, [@srcaddr={0x14, 0xd, @in=@broadcast}, @policy_type={0xa}, @tmpl={0x144, 0x5, [{{@in=@loopback, 0x4d5, 0x32}, 0xa, @in6=@private0, 0x3504, 0x1, 0x6a830f386a76a190, 0x1, 0x7f, 0x8001, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x4d4, 0x6c}, 0xa, @in6=@rand_addr=' \x01\x00', 0x3502, 0x3, 0x1, 0x0, 0x3, 0x7e91, 0x80000001}, {{@in=@broadcast, 0x4d5, 0x6c}, 0x2, @in6=@mcast1, 0x0, 0x2, 0x0, 0x3, 0x6, 0x6, 0x1}, {{@in6=@mcast1, 0x4d5, 0x32}, 0xa, @in=@rand_addr=0x64010101, 0x3503, 0x0, 0x1, 0x1f, 0x5, 0x4, 0x10001}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d5, 0x2b}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x34ff, 0x2, 0x3, 0x27, 0x5, 0x8, 0xffff}]}, @algo_auth={0x80, 0x1, {{'sha224-arm64-neon\x00'}, 0x1c0, "d397b54b8ad555f3ff12eae467d68ff0d795dfa6109cb7130db4e008efc558d2fcc26e382a9019a95528ce25ceb16c9dd304209ce48eba5f"}}, @coaddr={0x14, 0xe, @in6=@local}, @proto={0x5, 0x19, 0x33}]}, 0x228}, 0x1, 0x0, 0x0, 0x4008884}, 0x24001004) prctl$PR_SET_MM(0x23, 0xb, &(0x7f00002d6000/0x2000)=nil) 13:43:54 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x4000880) [ 264.820782][T28481] loop2: detected capacity change from 0 to 264192 [ 264.843392][T28481] FAT-fs (loop2): bogus logical sector size 2 [ 264.849524][T28481] FAT-fs (loop2): Can't find a valid FAT filesystem 13:43:54 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x4, 0x2, 0x1, 0x0, 0x11, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x80, 0x3, 0x1}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r3, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xa0, 0x0, 0xb00, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x6}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}, @ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xb88}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8801}, 0x841) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r8 = socket(0x11, 0x800000003, 0x0) bind(r8, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r7, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x20}}, 0x0) 13:43:54 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090000ff01e661744d0004090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:54 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) mmap$IORING_OFF_CQ_RING(&(0x7f00002d6000/0x3000)=nil, 0x3000, 0x2, 0x10, 0xffffffffffffffff, 0x8000000) prctl$PR_SET_MM(0x23, 0x4, &(0x7f00002d8000/0x2000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) 13:43:54 executing program 4: prctl$PR_SET_MM(0x23, 0x1, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) 13:43:54 executing program 1: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x4, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 13:43:54 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB, @ANYRES32=r4, @ANYBLOB], 0x20}}, 0x0) 13:43:54 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/99, 0x63}], 0x1, 0x1000000, 0x0) process_vm_writev(0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/88, 0x58}, {&(0x7f0000000000)=""/19, 0x13}], 0x2, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/255, 0xff}], 0x1, 0x0) [ 264.985388][T28506] loop2: detected capacity change from 0 to 264192 [ 265.017847][T28506] FAT-fs (loop2): bogus logical sector size 77 [ 265.024046][T28506] FAT-fs (loop2): Can't find a valid FAT filesystem 13:43:54 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090000ff01e66174660004090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:54 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x3, 0x6, &(0x7f0000000600)=[{&(0x7f0000000240)="e86b4a426b8de91928658c2ad6a6e749b97f2a5626b75f579ef13ae844ded253ae6f895a83e229f3c46c4f1f3123bc28e0545bd61b7f07bfed97aa132ef668abfa0c28fb4fdf15e0958bb2ddbeed4aa3eeb4489a52fbb39d616d4cfc20373dd31c2c6fe1a6995dde7910a65ba54f3031b3e35189c9ea7112fec03f93dfac1f008cb0573e888b75", 0x87, 0x1}, {&(0x7f0000000300)="34d505e91d6510b6ebc870c176c995a3ed5415f86997cbb0ea2af7f39321a9440de088694723c581d5f0afe9e3730e0d9bf09963ef8da31772f44d56c0703a251a39691cc83ff9bc7b34e091d6d16b9f90f21a6490b35a6f8f05845fb78d5e3e44b93dff8ee106dff555c2f6d20750a5f013d0bd3337e7805794ce56b9a05643d13f2e0920f5004c3381315c349e71162fe36e1e93217bf6f467e249188bf29998d1ce90c0d143ca1b04c0bb5c622597da7ddc0df8ce68d26aa787604f16bde61485", 0xc2, 0x2}, {&(0x7f0000000400)="781110b12ad56e582fc08c692af99d2f3e958ed26e7b4c96d102239e0c6d089959efcdda11e5f03dea7b7c7400526ae5739a005f00", 0x35, 0x1}, {&(0x7f0000000440)="2a131aeb58d1512ae8be3be944db32177b0fc72615b888005a1bd93310107bfcb020b4187e8c521efc8371ae00a0ea683ab752ef9923bcc979221239276c0a371d5720f8ecb6a5128a5d", 0x4a, 0x20000000000}, {&(0x7f00000004c0)="c3e65f65a255562a22f21808cc1e912c3fc122cd61ec0d36cacaecad3b5e4dd238f1ce0eaec357c478325e3f0ce60d63fe1026e0e30d2516a19d6b28d42f8fa5838d9087d585766ccae7c969f830e25df6ea2eb36465ad30ff9e71147c1e2a00335a5bb0eebf6889a14acbbcb5cd84c7d77a8ad79481063e6efcf06a41d9342b4d5ede9d3b87d1bdb811afebe290e259f4cd30cf77164d4e9f44408b7e21ee97fc5dc63eec0b34a1191d3fd652907f592ad30b45138ef76323df6df3639a0929fb81e4832fe8d609ded7f923cd6976c36487830484209259ac4f3d7f5ca34a7d92918f32adc44bb4a2", 0xe9, 0x1}, {&(0x7f00000005c0)="64ed596350a9264112c6d8c449bfa8cc7a64be7c4fe14c91ac56a6958db6fd65b233a8d62f37f8447e", 0x29, 0x7}], 0x8, &(0x7f00000006c0)={[{@jqfmt_vfsold}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@commit={'commit', 0x3d, 0x8}}], [{@measure}, {@context={'context', 0x3d, 'system_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\xfdK'}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@fowner_eq}]}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x0) 13:43:54 executing program 1: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x8, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 13:43:54 executing program 3: prctl$PR_SET_MM(0x23, 0x0, &(0x7f00002d5000/0x3000)=nil) r0 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x100000b, r0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r1, &(0x7f0000001400), 0x0, 0x8, 0x6) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000000)=0x101, 0x20, 0x2) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x1000)=nil) 13:43:54 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r4, 0x5201) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}}, 0x8000) [ 265.138808][T28527] loop2: detected capacity change from 0 to 264192 [ 265.165290][T28527] FAT-fs (loop2): bogus logical sector size 102 [ 265.171590][T28527] FAT-fs (loop2): Can't find a valid FAT filesystem 13:43:54 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x7, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) bind$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) r2 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x2, 0x24e23, @multicast1}, 0x10) fcntl$notify(r1, 0x402, 0x10) recvmmsg(r1, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000004ac0)=""/102389, 0x18ff5}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYRESHEX], 0xc63b9e35) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000600)=[@window={0x3, 0x1, 0x1}, @mss={0x2, 0x279141a5}, @window={0x3, 0x8, 0x7fff}, @sack_perm, @window={0x3, 0x1ff, 0x7}, @timestamp, @window={0x3, 0x8000, 0xfffa}, @timestamp, @window={0x3, 0x5, 0x977}, @sack_perm], 0xa) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b69ca5c42021ff90ee55a706aa537f6a0ba1288bf3417d37cd88f02a90294074c9ae0ea429bb5402005df3cc8fa239e6", @ANYRES16=r2, @ANYBLOB="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"], 0x28c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4080) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000680)={0x3, &(0x7f0000000440)=[{0x4d15, 0xef, 0x8, 0x80000001}, {0xfff, 0x23, 0x3, 0x8001}, {0x2, 0x5, 0x0, 0x640}]}, 0x10) 13:43:54 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090000ff01e66174c00004090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:54 executing program 4: r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f0000000100)={0x3, &(0x7f0000000340)=[{0x7, 0xc9, &(0x7f0000000180)="05133f9e3e0c9fe149878ef4a326611e94237d7b1638b0c7df5a3f305a0c52d2f3d3c5e33d3d5cddba95a0d836b7b4fc052770f8fd2e98ff99d170a52e6ae5ca73616b0e6788b0bf5387279171e3a28cf18e2e9a4527f307ca2d17b3a06332e9773938c5ac8185ff3368f6390175188855c5c8574375a2fb7f1dbb1f7c815da7113e21b6d04947af07d64c7ede4e1e469b4e6e84729e12c54cd6d29636bc6a880426c8553c7a57014d3d30a0c53673ef77dfccda57ac7af87f88811b85ce5572067adb7c802ae24cf0"}, {0x1, 0xab, &(0x7f0000000280)="8640a14724b5fbf76f96ce0768b5118dcc4acda6575afd566a9eed2c7144d8a3cf44eb9347630fae84a8cad5b4948e2aa9cf04ae849ac1759e848101d4d13a0c72defaca0b5ad9385d2885d96c13ad7872a35f718d592d84ac659b627a900660f6893a944df0b54e0728352efc63181028c0b6e3a2b11acc822897990956bc3f9a78e6ea88fa10154cba3bed62c80cae0e5a5e97809ef66a987c86c4b81c85f85b0649153606717775cdc0", 0x1}, {0x7, 0x10, &(0x7f00000000c0)="00dce43eae87c76cd33b62398e827ce1", 0x1}]}) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) 13:43:54 executing program 1: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0xf, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 13:43:54 executing program 3: ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)={0x6, 0x8, 0x8, 0x10001, 0x8, "b2b84aefba5b4697b8c349f93f95f51abff427", 0x7, 0xfff}) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') pkey_mprotect(&(0x7f00002d6000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f00002d5000/0x1000)=nil, 0x1000, 0x2000008, 0xffffffffffffffff) preadv(r0, &(0x7f0000001400), 0x0, 0x1000000, 0x0) [ 265.285215][T28553] loop2: detected capacity change from 0 to 264192 [ 265.298189][T28553] FAT-fs (loop2): bogus logical sector size 192 [ 265.304458][T28553] FAT-fs (loop2): Can't find a valid FAT filesystem 13:43:54 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090000ff01e66174100104090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:54 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/udplite6\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) 13:43:54 executing program 1: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x300, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 265.436812][T28569] loop2: detected capacity change from 0 to 264192 [ 265.463891][T28569] FAT-fs (loop2): bogus logical sector size 272 [ 265.470224][T28569] FAT-fs (loop2): Can't find a valid FAT filesystem 13:43:54 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090000ff01e66174110104090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:55 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090000ff01e66174130104090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:55 executing program 3: getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, 0x0, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}]}, 0x20}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r6, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x20}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in=@multicast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000280)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000380)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)={0x218, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x218}, 0x1, 0x0, 0x0, 0x40014}, 0x4000000) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r11, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) 13:43:55 executing program 1: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 265.596832][T28584] loop2: detected capacity change from 0 to 264192 [ 265.611746][T28584] FAT-fs (loop2): bogus logical sector size 273 [ 265.618023][T28584] FAT-fs (loop2): Can't find a valid FAT filesystem 13:43:55 executing program 3: ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) 13:43:55 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090000ff01e66174fc0204090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) [ 265.707802][T28593] loop2: detected capacity change from 0 to 264192 [ 265.721892][T28593] FAT-fs (loop2): bogus logical sector size 275 [ 265.728216][T28593] FAT-fs (loop2): Can't find a valid FAT filesystem 13:43:55 executing program 1: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 13:43:55 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f00002d6000/0x2000)=nil, 0x2000}, &(0x7f00000000c0)=0x10) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000040)=""/100, 0x64}, {&(0x7f0000000180)=""/120, 0x78}, {&(0x7f0000000200)=""/69, 0x45}], 0x3, 0x1000000, 0x0) [ 265.837804][T28609] loop2: detected capacity change from 0 to 264192 [ 265.853905][T28609] FAT-fs (loop2): bogus logical sector size 764 [ 265.860210][T28609] FAT-fs (loop2): Can't find a valid FAT filesystem 13:43:55 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090000ff01e66174000304090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:55 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000000000), 0x0, 0x1000000, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x4440, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000180)={0x1, 0x2, 0x0, 0x1a5, 0x7, [{0x8, 0x2, 0x4, '\x00', 0x1008}, {0x100000000, 0x5, 0x3349faff, '\x00', 0x2008}, {0xffffffffffffff00, 0x4, 0x7f, '\x00', 0x200}, {0xfffffffffffffbff, 0xdc8, 0xfffffffffffffffe, '\x00', 0x100}, {0xffff, 0x5, 0x2}, {0x9, 0xffffffff00000001, 0x1000}, {0x4, 0x5, 0xd7, '\x00', 0x1000}]}) [ 265.989134][T28625] loop2: detected capacity change from 0 to 264192 [ 266.020921][T28625] FAT-fs (loop2): bogus logical sector size 768 [ 266.027221][T28625] FAT-fs (loop2): Can't find a valid FAT filesystem 13:43:55 executing program 1: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x10, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 13:43:55 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090000ff01e661740e0304090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:55 executing program 1: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xef, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 266.235643][T28640] loop2: detected capacity change from 0 to 264192 [ 266.247564][T28640] FAT-fs (loop2): bogus logical sector size 782 [ 266.253845][T28640] FAT-fs (loop2): Can't find a valid FAT filesystem 13:43:55 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090000ff01e661740f0304090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:55 executing program 1: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x2000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 13:43:55 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) r2 = syz_open_procfs(r1, &(0x7f00000000c0)='net/udp\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r4, 0x1, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x881) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x1f}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x3f}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x1ff}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x7}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x80}]}, 0x58}, 0x1, 0x0, 0x0, 0x20048814}, 0x10) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r4, 0x2, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x40}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}]}, 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x20000000) preadv(r2, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) [ 266.405186][T28654] loop2: detected capacity change from 0 to 264192 [ 266.421619][T28654] FAT-fs (loop2): bogus logical sector size 783 [ 266.427922][T28654] FAT-fs (loop2): Can't find a valid FAT filesystem 13:43:55 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000ffe000/0x1000)=nil) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) 13:43:55 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090000ff01e66174100304090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:55 executing program 1: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 13:43:56 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x71}], 0x1, 0x1000000, 0x3f) [ 266.585934][T28672] loop2: detected capacity change from 0 to 264192 [ 266.606045][T28672] FAT-fs (loop2): bogus logical sector size 784 [ 266.612411][T28672] FAT-fs (loop2): Can't find a valid FAT filesystem 13:43:56 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090000ff01e66174400304090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:56 executing program 1: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xefff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 13:43:56 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = pkey_alloc(0x0, 0x6) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x80000a, r0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) 13:43:56 executing program 3: prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000180)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x400, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x804) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, r1, 0x800, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(r3, &(0x7f00000000c0)='./file0\x00', 0x800, 0x110) [ 266.759842][T28692] loop2: detected capacity change from 0 to 264192 [ 266.771613][T28692] FAT-fs (loop2): bogus logical sector size 832 [ 266.777895][T28692] FAT-fs (loop2): Can't find a valid FAT filesystem 13:43:56 executing program 1: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xffef, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 13:43:56 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090000ff01e66174800304090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) [ 266.873648][T28708] loop2: detected capacity change from 0 to 264192 [ 266.891756][T28708] FAT-fs (loop2): bogus logical sector size 896 [ 266.898069][T28708] FAT-fs (loop2): Can't find a valid FAT filesystem 13:43:56 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090000ff01e66174a80304090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:56 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) read$char_raw(r0, &(0x7f0000000800)={""/21518}, 0x5600) r1 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2200000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f00000000c0)="000000000000000000000000e2aa000000000000846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000000680)="ed41000010001200000004008000000000000800050000000af3010004000000000000000000010009", 0x29, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) openat(r1, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 13:43:56 executing program 1: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x100000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 267.002117][T28721] loop2: detected capacity change from 0 to 264192 [ 267.003048][T28720] loop3: detected capacity change from 0 to 69632 [ 267.018498][T28721] FAT-fs (loop2): bogus logical sector size 936 [ 267.024785][T28721] FAT-fs (loop2): Can't find a valid FAT filesystem [ 267.035315][T28720] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 267.055564][T28720] EXT4-fs error (device loop3): ext4_map_blocks:594: inode #2: block 9: comm syz-executor.3: lblock 0 mapped to illegal pblock 9 (length 1) 13:43:56 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090000ff01e66174aa0304090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:56 executing program 1: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x200000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 13:43:56 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xffef, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 267.193997][T28737] loop2: detected capacity change from 0 to 264192 [ 267.218076][T28737] FAT-fs (loop2): bogus logical sector size 938 [ 267.224384][T28737] FAT-fs (loop2): Can't find a valid FAT filesystem 13:43:56 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090000ff01e66174020404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:56 executing program 1: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x1000000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 13:43:56 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xffef, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 267.378164][T28754] loop2: detected capacity change from 0 to 264192 [ 267.408444][T28754] FAT-fs (loop2): bogus logical sector size 1026 [ 267.414798][T28754] FAT-fs (loop2): Can't find a valid FAT filesystem 13:43:56 executing program 1: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x2000000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 13:43:56 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090000ff01e66174030404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:56 executing program 1: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x10000000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 13:43:57 executing program 3: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xffef, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 267.547152][T28771] loop2: detected capacity change from 0 to 264192 [ 267.571817][T28771] FAT-fs (loop2): bogus logical sector size 1027 [ 267.578376][T28771] FAT-fs (loop2): Can't find a valid FAT filesystem 13:43:57 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090000ff01e66174040404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:57 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') r1 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ae0000/0x2000)=nil, 0x2000, 0x0, r1) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x180000c, r1) r2 = pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x3) r3 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ae0000/0x2000)=nil, 0x2000, 0x3000000, r3) pkey_mprotect(&(0x7f00002d6000/0x2000)=nil, 0x2000, 0xa, r2) pkey_mprotect(&(0x7f0000ae1000/0x1000)=nil, 0x1000, 0x8, r1) preadv(r0, &(0x7f0000001400)=[{&(0x7f00000000c0)=""/116, 0x74}], 0x1, 0x8000, 0x0) 13:43:57 executing program 1: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x40000000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 267.681849][T28788] loop2: detected capacity change from 0 to 264192 [ 267.698508][T28788] FAT-fs (loop2): bogus logical sector size 1028 [ 267.704878][T28788] FAT-fs (loop2): Can't find a valid FAT filesystem 13:43:57 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000000)=0x8, 0x4) 13:43:57 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090000ff01e66174050404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:57 executing program 1: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xefffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 13:43:57 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x10000, 0x1d, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b00000000", 0x60, 0x7e0}, {&(0x7f0000010160)="ffff05000c000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001022e000000020000000c0002022e2e00000b000000dc030a026c6f73742b666f756e6400"/1088, 0x440, 0xc00}, {&(0x7f00000105a0)="0000000000000000000000000000000000000000000000000c0000de46b807b70b0000000c0001022e00000002000000e80302022e2e00"/64, 0x40, 0x13e0}, {&(0x7f00000105e0)="0000000000000000000000000000000000000000000000000c0000de5551aadd00000000f40300"/64, 0x40, 0x17e0}, {&(0x7f0000010620)="0000000000000000000000000000000000000000000000000c0000de2b607f2900000000f40300"/64, 0x40, 0x1be0}, {&(0x7f0000010660)="0000000000000000000000000000000000000000000000000c0000de2b607f2900000000f40300"/64, 0x40, 0x1fe0}, {&(0x7f00000106a0)="0000000000000000000000000000000000000000000000000c0000de2b607f2900000000f40300"/64, 0x40, 0x23e0}, {&(0x7f00000106e0)="0000000000000000000000000000000000000000000000000c0000de2b607f2900000000f40300"/64, 0x40, 0x27e0}, {&(0x7f0000010720)="0000000000000000000000000000000000000000000000000c0000de2b607f2900000000f40300"/64, 0x40, 0x2be0}, {&(0x7f0000010760)="0000000000000000000000000000000000000000000000000c0000de2b607f2900000000f40300"/64, 0x40, 0x2fe0}, {&(0x7f00000107a0)="0000000000000000000000000000000000000000000000000c0000de2b607f2900000000f40300"/64, 0x40, 0x33e0}, {&(0x7f00000107e0)="0000000000000000000000000000000000000000000000000c0000de2b607f2900000000f40300"/64, 0x40, 0x37e0}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000c0000de2b607f2900000000f40300"/64, 0x40, 0x3be0}, {&(0x7f0000010860)="0000000000000000000000000000000000000000000000000c0000de2b607f2900000000f40300"/64, 0x40, 0x3fe0}, {&(0x7f00000108a0)="0000000000000000000000000000000000000000000000000c0000de2b607f29", 0x20, 0x43e0}, {&(0x7f00000108c0)="ff07ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x400, 0x4c00}, {&(0x7f0000010cc0)="00000000000000009f09c75f9f09c75f9f09c75f00"/32, 0x20, 0x8c00}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af3010004000000000000000000000001000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005c1f0000", 0xa0, 0x8c60}, {&(0x7f0000010d80)="00000000000000000000000000000000000000000000000000000000acff0000", 0x20, 0x8d60}, {&(0x7f0000010da0)="000000000000000000000000000000000000000000000000000000000ee30000", 0x20, 0x8de0}, {&(0x7f0000010dc0)="00000000000000000000000000000000000000000000000000000000ce1e0000", 0x20, 0x8e60}, {&(0x7f0000010de0)="000000000000000000000000000000000000000000000000000000007f6e000080810000003004049f09c75f9f09c75f9f09c75f000000000000010002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000005620000", 0xa0, 0x8ee0}, {&(0x7f0000010e80)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00;W\x00\x00', 0x20, 0x8fe0}, {&(0x7f0000010ea0)="00000000000000000000000000000000000000000000000000000000fbaa0000", 0x20, 0x9060}, {&(0x7f0000010ec0)="000000000000000000000000000000000000000000000000000000004ada0000c0410000003000009f09c75f9f09c75f9f09c75f00000000000002001800000000000800000000000af301000400000000000000000000000c0000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070fa0000", 0xa0, 0x90e0}], 0x0, &(0x7f0000010f60)) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='mnt', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000140)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0x1c0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='mnt/encrypted_dir\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000540)=@v2={0x2, @aes256, 0x0, '\x00', @a}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(r2, &(0x7f0000000040)='mnt/encrypted_dir\x00', 0xa0000, 0x184) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='mnt/encrypted_dir/file\x00', 0x42, 0x180) write(r3, &(0x7f00000005c0)='foo', 0x3) 13:43:57 executing program 1: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xffffffef, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 267.852285][T28812] loop2: detected capacity change from 0 to 264192 [ 267.858995][T28814] loop3: detected capacity change from 0 to 144 [ 267.876755][T28812] FAT-fs (loop2): bogus logical sector size 1029 [ 267.883125][T28812] FAT-fs (loop2): Can't find a valid FAT filesystem 13:43:57 executing program 1: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 13:43:57 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090000ff01e66174060404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:57 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x10000, 0x1d, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b00000000", 0x60, 0x7e0}, {&(0x7f0000010160)="ffff05000c000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001022e000000020000000c0002022e2e00000b000000dc030a026c6f73742b666f756e6400"/1088, 0x440, 0xc00}, {&(0x7f00000105a0)="0000000000000000000000000000000000000000000000000c0000de46b807b70b0000000c0001022e00000002000000e80302022e2e00"/64, 0x40, 0x13e0}, {&(0x7f00000105e0)="0000000000000000000000000000000000000000000000000c0000de5551aadd00000000f40300"/64, 0x40, 0x17e0}, {&(0x7f0000010620)="0000000000000000000000000000000000000000000000000c0000de2b607f2900000000f40300"/64, 0x40, 0x1be0}, {&(0x7f0000010660)="0000000000000000000000000000000000000000000000000c0000de2b607f2900000000f40300"/64, 0x40, 0x1fe0}, {&(0x7f00000106a0)="0000000000000000000000000000000000000000000000000c0000de2b607f2900000000f40300"/64, 0x40, 0x23e0}, {&(0x7f00000106e0)="0000000000000000000000000000000000000000000000000c0000de2b607f2900000000f40300"/64, 0x40, 0x27e0}, {&(0x7f0000010720)="0000000000000000000000000000000000000000000000000c0000de2b607f2900000000f40300"/64, 0x40, 0x2be0}, {&(0x7f0000010760)="0000000000000000000000000000000000000000000000000c0000de2b607f2900000000f40300"/64, 0x40, 0x2fe0}, {&(0x7f00000107a0)="0000000000000000000000000000000000000000000000000c0000de2b607f2900000000f40300"/64, 0x40, 0x33e0}, {&(0x7f00000107e0)="0000000000000000000000000000000000000000000000000c0000de2b607f2900000000f40300"/64, 0x40, 0x37e0}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000c0000de2b607f2900000000f40300"/64, 0x40, 0x3be0}, {&(0x7f0000010860)="0000000000000000000000000000000000000000000000000c0000de2b607f2900000000f40300"/64, 0x40, 0x3fe0}, {&(0x7f00000108a0)="0000000000000000000000000000000000000000000000000c0000de2b607f29", 0x20, 0x43e0}, {&(0x7f00000108c0)="ff07ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x400, 0x4c00}, {&(0x7f0000010cc0)="00000000000000009f09c75f9f09c75f9f09c75f00"/32, 0x20, 0x8c00}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af3010004000000000000000000000001000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005c1f0000", 0xa0, 0x8c60}, {&(0x7f0000010d80)="00000000000000000000000000000000000000000000000000000000acff0000", 0x20, 0x8d60}, {&(0x7f0000010da0)="000000000000000000000000000000000000000000000000000000000ee30000", 0x20, 0x8de0}, {&(0x7f0000010dc0)="00000000000000000000000000000000000000000000000000000000ce1e0000", 0x20, 0x8e60}, {&(0x7f0000010de0)="000000000000000000000000000000000000000000000000000000007f6e000080810000003004049f09c75f9f09c75f9f09c75f000000000000010002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000005620000", 0xa0, 0x8ee0}, {&(0x7f0000010e80)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00;W\x00\x00', 0x20, 0x8fe0}, {&(0x7f0000010ea0)="00000000000000000000000000000000000000000000000000000000fbaa0000", 0x20, 0x9060}, {&(0x7f0000010ec0)="000000000000000000000000000000000000000000000000000000004ada0000c0410000003000009f09c75f9f09c75f9f09c75f00000000000002001800000000000800000000000af301000400000000000000000000000c0000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070fa0000", 0xa0, 0x90e0}], 0x0, &(0x7f0000010f60)) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='mnt', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000140)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0x1c0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='mnt/encrypted_dir\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000540)=@v2={0x2, @aes256, 0x0, '\x00', @a}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(r2, &(0x7f0000000040)='mnt/encrypted_dir\x00', 0xa0000, 0x184) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='mnt/encrypted_dir/file\x00', 0x42, 0x180) write(r3, &(0x7f00000005c0)='foo', 0x3) 13:43:57 executing program 4: prctl$PR_SET_MM(0x23, 0x2, &(0x7f00002d5000/0x3000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) pkey_mprotect(&(0x7f00002d6000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) [ 267.915235][T28814] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 267.927551][T28814] ext4 filesystem being mounted at /root/syzkaller-testdir500975246/syzkaller.HSXAXa/1000/mnt supports timestamps until 2038 (0x7fffffff) 13:43:57 executing program 1: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 268.017924][T28836] loop2: detected capacity change from 0 to 264192 [ 268.051825][T28836] FAT-fs (loop2): bogus logical sector size 1030 [ 268.058213][T28836] FAT-fs (loop2): Can't find a valid FAT filesystem 13:43:57 executing program 4: prctl$PR_SET_MM(0x23, 0x6, &(0x7f00002da000/0x3000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) [ 268.064181][T28846] loop3: detected capacity change from 0 to 144 13:43:57 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090000ff01e66174070404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) [ 268.123282][T28846] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 13:43:57 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d4000/0x4000)=nil) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000100)='net/sockstat6\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_PLL_SET(r2, 0x40207012, &(0x7f00000000c0)={0x136d, 0x7fff, 0x0, 0x4, 0x63c0, 0x1}) [ 268.164567][T28846] ext4 filesystem being mounted at /root/syzkaller-testdir500975246/syzkaller.HSXAXa/1001/mnt supports timestamps until 2038 (0x7fffffff) [ 268.179388][T28861] loop2: detected capacity change from 0 to 264192 [ 268.189699][T28861] FAT-fs (loop2): bogus logical sector size 1031 [ 268.196053][T28861] FAT-fs (loop2): Can't find a valid FAT filesystem 13:43:57 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090000ff01e66174080404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:57 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x10000, 0x1d, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b00000000", 0x60, 0x7e0}, {&(0x7f0000010160)="ffff05000c000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001022e000000020000000c0002022e2e00000b000000dc030a026c6f73742b666f756e6400"/1088, 0x440, 0xc00}, {&(0x7f00000105a0)="0000000000000000000000000000000000000000000000000c0000de46b807b70b0000000c0001022e00000002000000e80302022e2e00"/64, 0x40, 0x13e0}, {&(0x7f00000105e0)="0000000000000000000000000000000000000000000000000c0000de5551aadd00000000f40300"/64, 0x40, 0x17e0}, {&(0x7f0000010620)="0000000000000000000000000000000000000000000000000c0000de2b607f2900000000f40300"/64, 0x40, 0x1be0}, {&(0x7f0000010660)="0000000000000000000000000000000000000000000000000c0000de2b607f2900000000f40300"/64, 0x40, 0x1fe0}, {&(0x7f00000106a0)="0000000000000000000000000000000000000000000000000c0000de2b607f2900000000f40300"/64, 0x40, 0x23e0}, {&(0x7f00000106e0)="0000000000000000000000000000000000000000000000000c0000de2b607f2900000000f40300"/64, 0x40, 0x27e0}, {&(0x7f0000010720)="0000000000000000000000000000000000000000000000000c0000de2b607f2900000000f40300"/64, 0x40, 0x2be0}, {&(0x7f0000010760)="0000000000000000000000000000000000000000000000000c0000de2b607f2900000000f40300"/64, 0x40, 0x2fe0}, {&(0x7f00000107a0)="0000000000000000000000000000000000000000000000000c0000de2b607f2900000000f40300"/64, 0x40, 0x33e0}, {&(0x7f00000107e0)="0000000000000000000000000000000000000000000000000c0000de2b607f2900000000f40300"/64, 0x40, 0x37e0}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000c0000de2b607f2900000000f40300"/64, 0x40, 0x3be0}, {&(0x7f0000010860)="0000000000000000000000000000000000000000000000000c0000de2b607f2900000000f40300"/64, 0x40, 0x3fe0}, {&(0x7f00000108a0)="0000000000000000000000000000000000000000000000000c0000de2b607f29", 0x20, 0x43e0}, {&(0x7f00000108c0)="ff07ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x400, 0x4c00}, {&(0x7f0000010cc0)="00000000000000009f09c75f9f09c75f9f09c75f00"/32, 0x20, 0x8c00}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af3010004000000000000000000000001000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005c1f0000", 0xa0, 0x8c60}, {&(0x7f0000010d80)="00000000000000000000000000000000000000000000000000000000acff0000", 0x20, 0x8d60}, {&(0x7f0000010da0)="000000000000000000000000000000000000000000000000000000000ee30000", 0x20, 0x8de0}, {&(0x7f0000010dc0)="00000000000000000000000000000000000000000000000000000000ce1e0000", 0x20, 0x8e60}, {&(0x7f0000010de0)="000000000000000000000000000000000000000000000000000000007f6e000080810000003004049f09c75f9f09c75f9f09c75f000000000000010002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000005620000", 0xa0, 0x8ee0}, {&(0x7f0000010e80)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00;W\x00\x00', 0x20, 0x8fe0}, {&(0x7f0000010ea0)="00000000000000000000000000000000000000000000000000000000fbaa0000", 0x20, 0x9060}, {&(0x7f0000010ec0)="000000000000000000000000000000000000000000000000000000004ada0000c0410000003000009f09c75f9f09c75f9f09c75f00000000000002001800000000000800000000000af301000400000000000000000000000c0000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070fa0000", 0xa0, 0x90e0}], 0x0, &(0x7f0000010f60)) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='mnt', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000140)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0x1c0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='mnt/encrypted_dir\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000540)=@v2={0x2, @aes256, 0x0, '\x00', @a}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(r2, &(0x7f0000000040)='mnt/encrypted_dir\x00', 0xa0000, 0x184) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='mnt/encrypted_dir/file\x00', 0x42, 0x180) write(r3, &(0x7f00000005c0)='foo', 0x3) 13:43:57 executing program 1: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 13:43:57 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffa000/0x4000)=nil) [ 268.309732][T28872] loop2: detected capacity change from 0 to 264192 13:43:57 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090000ff01e66174090404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:57 executing program 1: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 268.353608][T28883] loop3: detected capacity change from 0 to 144 [ 268.367086][T28872] FAT-fs (loop2): bogus logical sector size 1032 [ 268.373438][T28872] FAT-fs (loop2): Can't find a valid FAT filesystem [ 268.391884][T28883] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 268.432887][T28883] ext4 filesystem being mounted at /root/syzkaller-testdir500975246/syzkaller.HSXAXa/1002/mnt supports timestamps until 2038 (0x7fffffff) [ 268.512117][T28895] loop2: detected capacity change from 0 to 264192 [ 268.543867][T28895] FAT-fs (loop2): bogus logical sector size 1033 [ 268.550259][T28895] FAT-fs (loop2): Can't find a valid FAT filesystem 13:43:58 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="22000000370200020300"/24, @ANYRES32=0x0, @ANYBLOB="040028400040"], 0x22) sched_setattr(r1, &(0x7f0000000180)={0x38, 0x0, 0x13, 0x401, 0x7, 0x10000, 0xf1, 0x1, 0x1, 0x8}, 0x0) prlimit64(r0, 0x7, &(0x7f00000000c0)={0x7ad0, 0x10000}, &(0x7f0000000140)) creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000100)='./file1\x00') lchown(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) creat(&(0x7f0000000200)='./file0/file0\x00', 0x0) 13:43:58 executing program 1: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0xef) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 13:43:58 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090000ff01e661740a0404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:58 executing program 3: creat(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100), &(0x7f0000000180)='./file0\x00', 0x8, 0x1) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_tcp(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000000c0)={'trans=tcp,', {}, 0x2c, {[], [], 0x22}}) 13:43:58 executing program 1: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x2000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 268.713041][T28918] loop2: detected capacity change from 0 to 264192 [ 268.727668][T28918] FAT-fs (loop2): bogus logical sector size 1034 [ 268.734040][T28918] FAT-fs (loop2): Can't find a valid FAT filesystem 13:43:58 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090000ff01e661740b0404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:58 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) r4 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x121401, 0x1c8) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x3, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x20004011) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x9}, 0x10) r7 = dup2(r6, r6) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_SET_LINK_PRI(r7, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r8, 0x4, 0x70bd28, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x8, @link='broadcast-link\x00'}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x68}}, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x28000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r8, 0xc29, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}}, 0x0) 13:43:58 executing program 3: socket$packet(0x11, 0x3, 0x300) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x6, 0x0, "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030cf00"}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000018c0)=""/4097, 0x1001}], 0x1}, 0x100) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x45, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x1c}}, 0x2000c801) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000200)=0xc) r2 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYRES16=0x0, @ANYRESOCT=r2], 0x1000001bd) [ 268.845310][T28925] 9pnet: p9_fd_create_tcp (28925): problem connecting socket to 127.0.0.1 [ 268.853972][T28927] 9pnet: p9_fd_create_tcp (28927): problem connecting socket to 127.0.0.1 [ 268.878008][T28934] loop2: detected capacity change from 0 to 264192 13:43:58 executing program 1: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x4000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 268.910606][T28934] FAT-fs (loop2): bogus logical sector size 1035 [ 268.917000][T28934] FAT-fs (loop2): Can't find a valid FAT filesystem 13:43:58 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090000ff01e661740c0404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) [ 268.960719][T28944] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28944 comm=syz-executor.0 [ 269.007057][T28948] loop2: detected capacity change from 0 to 264192 [ 269.020335][T28949] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28949 comm=syz-executor.0 [ 269.020377][T28944] ================================================================== [ 269.020402][T28944] BUG: KCSAN: data-race in netlink_insert / netlink_sendmsg [ 269.048471][T28944] [ 269.050785][T28944] write to 0xffff888106aadb28 of 1 bytes by task 28949 on cpu 1: [ 269.058493][T28944] netlink_insert+0x5cc/0x7f0 [ 269.063163][T28944] netlink_autobind+0xa9/0x150 [ 269.067914][T28944] netlink_sendmsg+0x47c/0x7c0 [ 269.072664][T28944] ____sys_sendmsg+0x360/0x4d0 [ 269.077410][T28944] __sys_sendmsg+0x1ed/0x270 [ 269.081978][T28944] __x64_sys_sendmsg+0x42/0x50 [ 269.086720][T28944] do_syscall_64+0x3d/0x90 [ 269.091120][T28944] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 269.096998][T28944] [ 269.099301][T28944] read to 0xffff888106aadb28 of 1 bytes by task 28944 on cpu 0: [ 269.106907][T28944] netlink_sendmsg+0x26c/0x7c0 [ 269.111653][T28944] __sys_sendto+0x2a8/0x370 [ 269.116134][T28944] __x64_sys_sendto+0x74/0x90 [ 269.120788][T28944] do_syscall_64+0x3d/0x90 [ 269.125189][T28944] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 269.131758][T28944] [ 269.134059][T28944] value changed: 0x00 -> 0x01 [ 269.138710][T28944] [ 269.141010][T28944] Reported by Kernel Concurrency Sanitizer on: [ 269.147133][T28944] CPU: 0 PID: 28944 Comm: syz-executor.0 Not tainted 5.13.0-syzkaller #0 [ 269.155522][T28944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 269.165565][T28944] ================================================================== 13:43:58 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) ioctl(0xffffffffffffffff, 0x7fffffff, &(0x7f0000000300)="b76b9dbedb23995b34d75b907518390d762cb904234bf3f0fb0e1e5d53ebb6c2357940872df04db2be20014bec63b8d9698a83dc99ba06e4a363b759b0f34c9a8f954bfbaa70deed4a2ff5d0af6a16423a2fcf6886887c1e4a8f9811") syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x18}, 0x9) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4}, 0x0) clock_gettime(0x0, &(0x7f0000000100)) syz_io_uring_setup(0x83, &(0x7f0000000080), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000640), &(0x7f0000000680)='./file0\x00', 0x40}, 0x0) r6 = syz_io_uring_setup(0x4ba2, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000100)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x2004, @fd_index=0x5, 0x0, 0xc77, 0xaa2c, 0x8, 0x0, {0x1, r8}}, 0x0) syz_io_uring_submit(r7, r3, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x8, &(0x7f0000000180), 0x1, 0x1, 0x1, {0x0, r8}}, 0x7) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x52c, 0x61, 0x2}) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x71}], 0x1, 0x0, 0xfffffffd) 13:43:58 executing program 1: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0xefff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 13:43:58 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) prctl$PR_SET_MM(0x23, 0x4, &(0x7f00002d3000/0x4000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) 13:43:58 executing program 1: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0xffef) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 13:43:58 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x0) r5 = dup3(r3, r3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000240)={'ip6tnl0\x00', r4, 0x2f, 0x5, 0x81, 0x8001, 0x2, @remote, @mcast2, 0x8, 0x7800, 0x1, 0x200}}) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000140)={@remote, r6}, 0x14) 13:43:58 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f00002da000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00002d8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00002dc000/0x2000)=nil, &(0x7f00002df000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00002da000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00002d7000/0x2000)=nil, &(0x7f00002d4000/0x4000)=nil, &(0x7f0000000240)="f6cb32fe31c33ceca9fe1f0958a40c11b3321c3f37b61e75c501b9500af5dd878dd8ba7497ba8b1131f633cd9bf11755afd24ca3e9ceb131b91fde43bc3022a99aaf5115dd0972de", 0x48, r0}, 0x68) r1 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f00007ab000/0x1000)=nil, 0x1000, 0x1000002, r1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000199000/0x2000)=nil, &(0x7f000041d000/0x3000)=nil, &(0x7f0000343000/0x2000)=nil, &(0x7f00002d6000/0x2000)=nil, &(0x7f00002d5000/0x4000)=nil, &(0x7f00002d8000/0x4000)=nil, &(0x7f00002db000/0x3000)=nil, &(0x7f00002dc000/0x3000)=nil, &(0x7f00002dd000/0x4000)=nil, &(0x7f00002db000/0x2000)=nil, &(0x7f0000231000/0x2000)=nil, &(0x7f0000000180)="c39a2621f29e235b38db836ea9c5115f64271d24640ade51fb0dd692535967c8fecad179540b46a71331266ccb6c93d7e58beb0055443566abfb8bb4610d61001daf47439d108ecd6597ba8aafc546c18a87a85a321f7326dbd5ff479a0d28cc0ec7a371427905e004a438ca415498610a9ad5c4e9eeccbb3be12a5ef6c4310bd5387242bb1d9243", 0x88}, 0x68) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/class/bsg', 0x88002, 0x4) openat(r2, &(0x7f0000000380)='./file0\x00', 0x20040, 0x24) prctl$PR_SET_MM(0x23, 0x5, &(0x7f00002d5000/0x3000)=nil) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r3, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) 13:43:58 executing program 1: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x100000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 269.498870][T28948] FAT-fs (loop2): bogus logical sector size 1036 [ 269.505245][T28948] FAT-fs (loop2): Can't find a valid FAT filesystem 13:43:58 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fsmount(r0, 0x1, 0x130) openat(r1, &(0x7f0000000040)='./file0\x00', 0x0, 0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r3, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}}, 0x0) 13:43:59 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090000ff01e661740d0404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) [ 269.661922][T29001] loop2: detected capacity change from 0 to 264192 [ 269.689611][T29001] FAT-fs (loop2): bogus logical sector size 1037 [ 269.696787][T29001] FAT-fs (loop2): Can't find a valid FAT filesystem 13:43:59 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r4, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="040100004fd9983f28bd7000ffdbdf25d0000100000000000000000000000000ac1414aa0000000000000000000000004e23001f4e2100000a00200000000000", @ANYRES32=r6, @ANYRES32, @ANYBLOB="7f000001000000000000000000000000000004d4ff000000ff02000000000000000000000000000100000000000000000600000000000000189200000000000000000000000000001f000000000000000300000000000000ff00000000000000030000000000000000000000000000000300000000000000030000000000000002000000000000000004000005000000060000002cbd70000735000000000420200000000000000001fcffff010000000c001c00", @ANYRES32=0x0, @ANYBLOB="02100000"], 0x104}, 0x1, 0x0, 0x0, 0x4048040}, 0x8014) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414bb0000000000000000000000000000000000000000000000000000000000000000000000000200000033000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000013442357000000000000001c00"/112], 0xb8}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r8, r7, 0x0, 0x100000002) 13:43:59 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x12, r0, 0xcd0ff000) pipe(&(0x7f0000000540)={0xffffffffffffffff}) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f0000000580)={0x9, 0x80, 0x80000000, 0x4}, 0x10) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}}, 0x0) 13:43:59 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00004ce000/0x1000)=nil) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pkey_mprotect(&(0x7f0000461000/0x4000)=nil, 0x4000, 0x1000008, 0xffffffffffffffff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000640)=0xffffffc6) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) preadv(r1, &(0x7f0000001400)=[{&(0x7f00000000c0)=""/120, 0xffffffffffffffab}], 0x1, 0x0, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}, &(0x7f00000001c0)=0x10) r3 = inotify_init() prctl$PR_SET_MM(0x23, 0x9, &(0x7f00002ce000/0x2000)=nil) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x18c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7e3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8c80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffe1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}]}, 0x18c}}, 0x802) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$SG_GET_REQUEST_TABLE(r4, 0x2286, &(0x7f0000000200)) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000080)=0x679a) 13:43:59 executing program 1: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x200000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 13:43:59 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090000ff01e661740e0404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) [ 269.868249][T29025] loop2: detected capacity change from 0 to 264192 [ 269.886561][T29025] FAT-fs (loop2): bogus logical sector size 1038 [ 269.892925][T29025] FAT-fs (loop2): Can't find a valid FAT filesystem 13:43:59 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090000ff01e661740f0404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:43:59 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe4000, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000280)={'erspan0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x7, 0xb1, 0x2, 0x1, {{0x5, 0x4, 0x1, 0x2, 0x14, 0x65, 0x0, 0x5c, 0x4, 0x0, @rand_addr=0x64010102, @private=0xa010100}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000440)={'batadv_slave_0\x00'}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@private0, @in=@remote}}, {{@in=@dev}, 0x0, @in6=@dev}}, &(0x7f00000002c0)=0xe8) sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x40, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c410}, 0x2000a055) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r6, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x20}}, 0x0) 13:43:59 executing program 1: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x1000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 269.936672][T29024] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=18432 sclass=netlink_xfrm_socket pid=29024 comm=syz-executor.3 [ 269.973938][T29024] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=35144 sclass=netlink_xfrm_socket pid=29024 comm=syz-executor.3 [ 270.014113][T29024] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=51016 sclass=netlink_xfrm_socket pid=29024 comm=syz-executor.3 [ 270.041840][T29044] loop2: detected capacity change from 0 to 264192 13:43:59 executing program 1: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x2000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 270.052617][T29024] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=17766 sclass=netlink_xfrm_socket pid=29024 comm=syz-executor.3 [ 270.066559][T29044] FAT-fs (loop2): bogus logical sector size 1039 [ 270.072915][T29044] FAT-fs (loop2): Can't find a valid FAT filesystem [ 270.093701][T29024] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=3942 sclass=netlink_xfrm_socket pid=29024 comm=syz-executor.3 13:43:59 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="150b00000000000000001c0000000c000180080001000fa720d65d5e509fcb98b021d19dad4f4d4230d1043e158a0897a5f7d770a0a64707d87178ea157e51def589047cab42b6a9b36b4cc7509e715e80c5a3ab1811304c908e6830af88226547c2837207d8a8941c5dccc8cd06e89476961f2cac3089b83fbec9e66255dd54ac519ddec070a2dac8fd0a73af63ffc57aa79227517ea57380d9bacb1ed50dba32a973cf7e03d1087d37bbf6b761d090adbd4741e28fdb2fcdf66d324290326bd3cf433650659bbc6f17150ee0589f", @ANYRES32=r4, @ANYBLOB], 0x20}}, 0x0) [ 270.147997][T29024] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=65466 sclass=netlink_xfrm_socket pid=29024 comm=syz-executor.3 13:43:59 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090000ff01e66174100404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) [ 270.188564][T29024] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=19456 sclass=netlink_xfrm_socket pid=29024 comm=syz-executor.3 [ 270.219303][T29024] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=34125 sclass=netlink_xfrm_socket pid=29024 comm=syz-executor.3 13:43:59 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) mmap(&(0x7f0000186000/0x2000)=nil, 0x2000, 0x1000004, 0x20010, r0, 0x6bdfa000) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="150b00000000000000001c006e57cb9af37c94328900000c000180080001713fd37ddfad4a47", @ANYRES32=r4, @ANYBLOB="b034bb854f111f4f4cdf6b0da45ebe224794b274f9ebbead12ca"], 0x20}}, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x8) [ 270.246731][T29067] loop2: detected capacity change from 0 to 264192 [ 270.254467][T29067] FAT-fs (loop2): bogus logical sector size 1040 [ 270.260873][T29067] FAT-fs (loop2): Can't find a valid FAT filesystem 13:43:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) sched_setattr(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000400)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{0x0}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) getpeername$unix(r0, &(0x7f00000001c0)=@abs, &(0x7f0000000040)=0x6e) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x275) sendfile(r0, r1, 0x0, 0x1c500) socket$inet_udp(0x2, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000100)=""/112, 0x70}, {&(0x7f0000000180)=""/15, 0xf}, {0x0}], 0x3, 0x0, 0x3) 13:43:59 executing program 1: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x10000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 13:43:59 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090000ff01e66174110404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) [ 270.373467][T29076] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 270.412572][T29076] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 270.421373][T29084] loop2: detected capacity change from 0 to 264192 [ 270.430163][T29085] loop3: detected capacity change from 0 to 264192 [ 270.437619][T29084] FAT-fs (loop2): bogus logical sector size 1041 [ 270.444145][T29084] FAT-fs (loop2): Can't find a valid FAT filesystem [ 270.457234][T29085] FAT-fs (loop3): bogus number of reserved sectors [ 270.463825][T29085] FAT-fs (loop3): Can't find a valid FAT filesystem 13:43:59 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090000ff01e66174120404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:44:00 executing program 1: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x40000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 13:44:00 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x24) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r2, @ANYRESDEC, @ANYBLOB="150b00000000000000001c0000000c00018008000100", @ANYRES32=r3, @ANYRESOCT], 0x20}}, 0x0) [ 270.610881][T29099] loop2: detected capacity change from 0 to 264192 [ 270.641660][T29099] FAT-fs (loop2): bogus logical sector size 1042 [ 270.648078][T29099] FAT-fs (loop2): Can't find a valid FAT filesystem 13:44:00 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000240)=""/152, 0x98}, {&(0x7f0000000300)=""/120, 0x78}, {&(0x7f0000000040)=""/29, 0x1d}, {&(0x7f0000000140)=""/30, 0x1e}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/64, 0x40}], 0x6, 0x2, 0x10000) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x0) 13:44:00 executing program 1: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0xefffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 13:44:00 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090000ff01e66174220404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:44:00 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000040), &(0x7f0000000140)=@sha1={0x1, "50292bc2f6a60328cdbb5e72a3d97b62b80c8ea7"}, 0x15, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="54b4ae57", @ANYRES16=r2, @ANYBLOB="150b00000000000000001c0000000c00018008000100", @ANYRES32=r4, @ANYBLOB="4979075b7dd4151f7fec129130493420b7a5641f5589ea96"], 0x20}}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e21, 0x5, 0x4e22, 0x67, 0xa, 0x0, 0x80, 0x1d, 0x0, 0xffffffffffffffff}, {0x9, 0x40, 0x3, 0xfaa6, 0xc19c, 0x6, 0xae06, 0xfffffffffffffff7}, {0xffffffff, 0xffffffff, 0x8, 0x31}, 0xffffffff, 0x6e6bb0, 0x1, 0xb8a61c0ff1da1fb2, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d2, 0x2b}, 0xa, @in=@rand_addr=0x64010101, 0x3506, 0x1, 0x1, 0x80, 0x8, 0x20, 0x101}}, 0xe8) 13:44:00 executing program 1: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0xffffffef) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 270.837685][T29118] loop2: detected capacity change from 0 to 264192 [ 270.861556][T29118] FAT-fs (loop2): bogus logical sector size 1058 [ 270.868057][T29118] FAT-fs (loop2): Can't find a valid FAT filesystem 13:44:00 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090000ff01e66174250404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) [ 270.993632][T29092] loop3: detected capacity change from 0 to 264192 [ 271.003538][T29092] FAT-fs (loop3): bogus number of reserved sectors [ 271.010078][T29092] FAT-fs (loop3): Can't find a valid FAT filesystem 13:44:00 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$TIOCNXCL(r1, 0x540d) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r2, 0x0) flock(r2, 0x1) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c30d9b712f00c51c638e6aea4a8dee825286b31a260e60482bb0b4179b3173", 0xff7c}], 0x1) 13:44:00 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000140)=0x8001) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x280000, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r3) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r4, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}}, 0x0) io_uring_enter(r1, 0xe6f, 0x433d, 0x5, &(0x7f0000000040)={[0x426]}, 0x8) 13:44:00 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8, r0) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000003, r0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f00002d4000/0x3000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) [ 271.036756][T29134] loop2: detected capacity change from 0 to 264192 [ 271.056953][T29134] FAT-fs (loop2): bogus logical sector size 1061 [ 271.063391][T29134] FAT-fs (loop2): Can't find a valid FAT filesystem 13:44:00 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090000ff01e66174480404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:44:00 executing program 1: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0xffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 13:44:00 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/dev\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "44944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="0000008e123e9c00783bc21f0baf39c98642ef308837dfe74bae979336b2aa1434ca6f68f1bd2a5638cb0ea0eb4e5f853b4177a447", @ANYRES16=r2, @ANYBLOB="150b00000000000000001c0000000c00018008000100", @ANYRES32=r4, @ANYRES16], 0x20}}, 0x0) 13:44:00 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendto$unix(r0, &(0x7f00000003c0)="e75e1313bbbaf7d7f6c4d8e2a21adf2ce1d25d2c47c2b0e00327d4a4a51c03ac19b22cd92ca22866beac6d392bec8a3d93339023b38242b781bd0c2ac21bb48bdeefdc0d412838f3007f5ed2d85e24cf1069cc50c5fa", 0x56, 0x40, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x59cc, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000395000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x100) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="150b00000000000000001c0000000c00018008000100", @ANYRES32=r8, @ANYBLOB="46ef613b4030bb441a456a59f4e91718841e364478163675af18c969b79b6ee26600ba8017d5a26c09dcb937f3070c3109911509903c6904047749f590889655a3af57e4d77344f7315f96b74b62adcec00735bea7ccec76"], 0x20}}, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000380)=0x14) mmap(&(0x7f000063b000/0x5000)=nil, 0x5000, 0x1000000, 0x100010, 0xffffffffffffffff, 0x4280f000) [ 271.224304][T29154] loop2: detected capacity change from 0 to 264192 [ 271.225799][T29154] FAT-fs (loop2): bogus logical sector size 1096 [ 271.237408][T29154] FAT-fs (loop2): Can't find a valid FAT filesystem 13:44:00 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090000ff01e661744c0404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:44:00 executing program 1: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f00000000c0)) 13:44:00 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000540)=[{&(0x7f0000000480)=""/163, 0xa3}], 0x1, 0x6, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r5, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r5, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x6c, r6, 0x0, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x1, 0x65}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20004040}, 0x40) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r5, 0x0, 0x484, &(0x7f0000000240)=""/151, &(0x7f0000000040)=0x97) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x0) 13:44:00 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090000ff01e66174560404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:44:00 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/sctp\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40448c5}, 0x4000804) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) [ 271.357043][T29165] loop2: detected capacity change from 0 to 264192 [ 271.358597][T29165] FAT-fs (loop2): bogus logical sector size 1100 [ 271.358609][T29165] FAT-fs (loop2): Can't find a valid FAT filesystem [ 271.427367][T29180] loop2: detected capacity change from 0 to 264192 [ 271.438791][T29180] FAT-fs (loop2): bogus logical sector size 1110 [ 271.445363][T29180] FAT-fs (loop2): Can't find a valid FAT filesystem 13:44:01 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() read(0xffffffffffffffff, 0x0, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r0) r1 = inotify_init1(0x0) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r0, 0x8, r2) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) mkdir(&(0x7f0000000080)='./control\x00', 0x0) rt_sigtimedwait(&(0x7f00000002c0)={[0xfffffffffffffff6]}, 0x0, 0x0, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) epoll_pwait(r3, &(0x7f00000000c0)=[{}, {}, {}], 0x3, 0x3, &(0x7f0000000140)={[0x100000000]}, 0x8) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0x2000131) signalfd(0xffffffffffffffff, &(0x7f0000000200)={[0x7fffffff]}, 0x8) rmdir(&(0x7f0000000100)='./control\x00') 13:44:01 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0xfffffffffffffd23) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'gretap0\x00', &(0x7f0000000040)={'tunl0\x00', r5, 0x40, 0x20, 0x66e, 0x7, {{0x6, 0x4, 0x3, 0x8, 0x18, 0x67, 0x0, 0x7, 0x29, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end]}}}}}) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r4, 0xf507, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}}, 0x0) 13:44:01 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) pkey_mprotect(&(0x7f00002d4000/0x2000)=nil, 0x2000, 0x1000000, 0xffffffffffffffff) r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14, 0x2d992f7c9543ab60) mmap(&(0x7f00002d4000/0x2000)=nil, 0x2000, 0x2000008, 0x10010, r0, 0x6699c000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') r1 = syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x3, 0x3, &(0x7f0000000280)=[{&(0x7f0000000100)="3187dcb135d78d7da5a7c863ae7a147c80aecb8dc7876090f6364593d4dc25eb638862540cf30036f81bdde2bbaaa239a66d588aab7d12672de7fe3233ac", 0x3e, 0x7fff}, {&(0x7f0000000180)="4978e6b28ba9ac5b308fb38b85c5e009fad0bf33a6ba3cd974aa2e7f0ea609d32325ddf3c467e3bdb708161e54c7afa4b354bdb711a85d660033fda666c848d296898fb66a43356dfb7dd782c3ba29231f0ef151703501071b46514a4fbcbef5fb32f17335f1f4695e4ac1746db2e63f66d02c91b2ede7483ef7", 0x7a, 0x100}, {&(0x7f0000000200)="619c64815e2c65c09610c0fb8194ede88efbefd4bb67e4533367d6548635fba0d6677c1fb0aa333779f28c5cf4b5ba038caf112c420fd53f66a05458925d4d3afc7f49210a247f63cedcf27873a22804b2e26c64c34f5961c7ac88bfb060259ac0ad26d1ccae70", 0x67}], 0x482, &(0x7f0000000300)={[{'environ\x00'}, {'&#*$%\x97'}, {}, {}, {':(!^'}, {'environ\x00'}, {'environ\x00'}, {'environ\x00'}], [{@euid_lt={'euid<', 0xee00}}]}) preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x71}], 0x1, 0xfffffffd, 0x0) 13:44:01 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090000ff01e66174600404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:44:01 executing program 1: ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') fcntl$getflags(r0, 0x3) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000180)=0xc) preadv(r2, &(0x7f0000000280), 0x0, 0xd9f, 0x0) [ 271.867038][T29200] loop4: detected capacity change from 0 to 127 [ 271.885769][T29200] nfs4: Unknown parameter 'environ' [ 271.892272][T29206] loop2: detected capacity change from 0 to 264192 13:44:01 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x5, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="150b0000000000000000040000000c00018008ec0000bed605ad100007098d3b7e3b5948c9702eba884dda1c1c272c0f8fdde6", @ANYRES32=r4, @ANYBLOB], 0x20}}, 0x0) 13:44:01 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090000ff01e66174680404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) [ 271.913184][T29206] FAT-fs (loop2): bogus logical sector size 1120 [ 271.919571][T29206] FAT-fs (loop2): Can't find a valid FAT filesystem [ 271.971144][T29200] loop4: detected capacity change from 0 to 127 [ 272.003483][T29221] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 13:44:01 executing program 1: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/222, 0xde}, {&(0x7f0000000280)=""/215, 0xd7}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001440)=""/227, 0xe3}, {&(0x7f0000001540)=""/214, 0xd6}, {&(0x7f0000001640)=""/186, 0xba}], 0x6, 0x337, 0x8000) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 13:44:01 executing program 3: r0 = creat(&(0x7f0000000280)='./file0\x00', 0xc0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000740)={0xffff, 0xffffffff, 0x3, 0x7, 0x8, [{0x55, 0x101, 0x20000, '\x00', 0x100}, {0xfffffffffffffffc, 0xb1f8, 0xa38b, '\x00', 0x1100}, {0x2bf4bcd1, 0x2, 0x10000, '\x00', 0x404}, {0x9, 0xffffffffffffc2c7, 0x1, '\x00', 0x1208}, {0x7, 0x0, 0x2, '\x00', 0x100}, {0x3ff, 0x3, 0x100, '\x00', 0x1100}, {0x0, 0x800, 0xfff, '\x00', 0x100}, {0x0, 0x1fe1, 0x400}]}) close(r0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0)=[&(0x7f0000000600)='\xfc|\xf5\x13\xd4\xf6P\xc5DF\xc1Z\x87\xf0\x9b1\xaa\x8d\x7f\xfb;\xca\x8b\xc5s\xda\xde\xf1~\x9e\xe0$\x8d\x95\x80=l\x1d\x1db\xfb8MI\xd1\x140x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000240)=""/182, 0xb6}], 0x1, 0x80, 0x5f) 13:44:01 executing program 3: lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)={{}, {}, [{0x2, 0x0, 0xee01}, {0x2, 0x0, 0xee00}, {0x2, 0x0, 0xee00}, {}], {}, [{}, {}, {}]}, 0x5c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) kcmp(r1, 0xffffffffffffffff, 0x6, r2, r3) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdir(&(0x7f00000003c0)='./bus\x00', 0x0) creat(&(0x7f0000000280)='./file1\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000140), 0x24, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r4, 0x8905, &(0x7f0000000180)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fdatasync(r5) 13:44:01 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="150b00000000000000001c0000200c00018008000100bdf1e80c257546a4f64ec671735e9849aa3b1478ecadd50de23c3d4508c214ea6f5cb62c8a08cd089c7e8754bc75208d184111f70fe83b0584caab989f435fa42afc6b0b6b9ad07ef98d299e3820529f5976a0da6fa25d028ba2fcaccda4265f0efb514b444813b6fdf1ab6948c70b917632cf644421d5e6e2f008ac461d6d03de54167b63b097f2311d90fcd978996adae428b8badf7e542d7884c3dedbdc9ae522556d830a0e739c8744d2bd25bfd2dfdf062a9d445507a63c17dfd0e5c546f2d4cf95f455ecc7c7a569b806c1cce8341fa4a39d6ba1122a39ee8b4f", @ANYRES32=r4, @ANYBLOB], 0x20}}, 0x0) [ 272.209995][T29249] loop2: detected capacity change from 0 to 264192 [ 272.242679][T29249] FAT-fs (loop2): bogus logical sector size 1132 [ 272.249193][T29249] FAT-fs (loop2): Can't find a valid FAT filesystem 13:44:01 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090000ff01e66174740404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:44:01 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) r4 = openat$incfs(r0, &(0x7f0000000040)='.pending_reads\x00', 0x402000, 0x44) bind$unix(r4, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="150b00000000000000001c0000000c000180080001004a77363db628219ab584e4e0ae082fefe149389652d5ab0ee39eb314f2e0a2f6a5140aee0979a78318b2a66c4ff8626799cf6f00aeade05d35b960c81a", @ANYRES32=r5, @ANYBLOB="dfc9ab64367d31675a8b51d7636f515e8cf066f2b8503c73b8a81963ef06db729003629eba5fe92243ef40dd66dc427c492902bd443e4e3a1ef289f0fa6874e3d85b4727e39cc21d78e59795d906a6d23af3ef"], 0x20}}, 0x0) 13:44:01 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090000ff01e66174780404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) [ 272.374302][T29266] loop2: detected capacity change from 0 to 264192 [ 272.400951][T29266] FAT-fs (loop2): bogus logical sector size 1140 [ 272.407493][T29266] FAT-fs (loop2): Can't find a valid FAT filesystem 13:44:01 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x1, 0x4) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x80010, 0xffffffffffffffff, 0x10000000) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000001, 0x2010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4e10, &(0x7f0000000100)={0x0, 0x8a48, 0x4, 0x1, 0x223}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=0x0) syz_io_uring_setup(0x83, &(0x7f0000000080), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000640), &(0x7f0000000680)='./file0\x00', 0x40}, 0x0) r6 = syz_io_uring_setup(0x4ba2, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000100)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x2004, @fd_index=0x5, 0x0, 0xc77, 0xaa2c, 0x8, 0x0, {0x1, r7}}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0xd, 0x0, 0xf, 0x0, &(0x7f0000000200)="4764fc027645d32448fe02cee76510406123347d234d59043cb5a8df902459c65f94dfa396f9708b3b272713f07869b5c91be189", 0x4, 0x0, 0x1, {0x0, r7}}, 0x1) r8 = open$dir(&(0x7f0000000040)='./file0\x00', 0x20440, 0x4) syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb367a9ee) sendto$inet6(r0, 0x0, 0xf0ff7f, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) 13:44:01 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') [ 272.484141][T29275] loop2: detected capacity change from 0 to 264192 [ 272.523394][T29275] FAT-fs (loop2): bogus logical sector size 1144 13:44:01 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="150b00000000013ccbd740de7ec1b600018008000100", @ANYRES32=r4, @ANYBLOB], 0x20}}, 0x0) [ 272.529784][T29275] FAT-fs (loop2): Can't find a valid FAT filesystem 13:44:02 executing program 4: prctl$PR_SET_MM(0x23, 0xb, &(0x7f00002d5000/0x3000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r1, 0x400, 0x1) 13:44:02 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090000ff01e661747a0404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:44:02 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x181) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000200), 0x5, 0x8000) preadv(r1, &(0x7f0000000380), 0x0, 0x675f, 0x1) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r3, 0x400, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0xcd4b34fe2a743278) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r6 = socket(0x11, 0x800000003, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000940)={0x364, r7, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3734}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7e7}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfa4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfff}]}, @TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x54bf}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA={0x9c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4229}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdb1b07cb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfc3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffc01}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_LINK={0xf4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ec6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x91900000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_LINK={0x9c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3d}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x843}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x467a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x43c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x364}, 0x1, 0x0, 0x0, 0x1}, 0x80) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000005}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xd0, 0x3, 0x8, 0x5, 0x0, 0x0, {0xc}, [@CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0xfffffffb}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x8d34}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x8c8}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0xffff}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0xca}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x1ff}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x374e465c}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f7}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0xd0}, 0x1, 0x0, 0x0, 0x55}, 0x4000000) getsockname$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="150b000800010036c652ac76da639c486041e7242cbc7d032cdb92f747bb326e45453e6ce7b697bc3bab", @ANYRES32=r8, @ANYBLOB], 0x20}}, 0x0) 13:44:02 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) preadv(r1, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/220, 0xdc}, {&(0x7f0000000100)=""/80, 0x50}, {&(0x7f0000000300)=""/154, 0x9a}, {&(0x7f0000000040)=""/50, 0x32}, {&(0x7f00000003c0)=""/104, 0x68}, {&(0x7f0000000440)=""/103, 0x67}, {&(0x7f0000000180)=""/57, 0x39}], 0x7, 0x0, 0x5) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[], 0x208e24b) write(r2, &(0x7f0000000540)="0021958d604cf5276c3674ec5d5b305f03ca3ff04ae851d4710682ab9fd96da53b3cce2965449ad395f8b7817dc08e38c14563c78ae9aa37163f92f4f439b45d0dd225c3afb5d68544540a5b748e06b6752316ebe66c1d043f6b25a5b25c83e9d447cf149500af3c6dc27c8a4c381900d468954ca47af812f1a74074eebbc3d557de9c501b812035c0b3f055f0b5a3128406af9d6276fe70cf9191a54b3d45d164bf5a34", 0xa4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000600)='cpuacct.usage_user\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00?', @ANYRES16=r6, @ANYBLOB="0100000000000000000016000000"], 0x14}}, 0x0) sendfile(r5, r4, 0x0, 0x100000002) 13:44:02 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_mr_vif\x00') openat(r0, &(0x7f0000000100)='./file0\x00', 0x0, 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$incfs(r1, &(0x7f00000000c0)='.pending_reads\x00', 0x141200, 0x80) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) 13:44:02 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090000ff01e66174f00404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) [ 272.670713][T29299] loop2: detected capacity change from 0 to 264192 [ 272.692472][T29299] FAT-fs (loop2): bogus logical sector size 1146 [ 272.698854][T29299] FAT-fs (loop2): Can't find a valid FAT filesystem 13:44:02 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) munmap(&(0x7f00002d5000/0x4000)=nil, 0x4000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') munmap(&(0x7f00002d8000/0x1000)=nil, 0x1000) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x71}], 0x1, 0x3, 0x0) mlock(&(0x7f00002d6000/0x4000)=nil, 0x4000) ftruncate(0xffffffffffffffff, 0x8) 13:44:02 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000000940)={{r0}, "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"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x0) 13:44:02 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000002b40)=[{{&(0x7f00000000c0)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x80, &(0x7f0000001440)=[{&(0x7f0000000180)="5038101ecbea08c048e6309188ab1a75d57933531c58e9bffcd7d10fa7d13b30efa2e4a7b75fc0db4a22ce9916037dd4c421c3e4302646f805f2091bc4a664bd5d469a9e2f2bc9440f2761b358", 0x4d}, {&(0x7f0000000200)="5fda755fcf0a7e238ff196650304a26618b8a1f99283c301b8dad964b55724bc31552bd429869ef68ff3d3a147e7acdce574ca0a844010e41532a77ea9469b9e49c9d27619d525ad11f54975a8f9d505b279df9e5052f638c160aab924338d85701366df5ec1163d03ebb90ceddc7474d63c984bc42d8bfb210bd5f127a911bea816153839f10ffd3a1f2828ea7e7f295d86c14decab4e7c3a91bce5cdf856e93551bbd1981db830e28f2f8fdcd9883a1f8ce3da948d378cc4ad554a9bba7261d63dbebc847b57f3c97aa628b257", 0xce}, {&(0x7f0000000000)="54ff139726a6d654dc970d6fe5fcece62ec8568bce91aa2733da1a50fb0126de8a6e1dee2ed8", 0x26}, {&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000001300)="591a68455dfe390748775b08e43123a4fd6d1a79a37f8de8b2587e1b5a54196a32d3ddecb44c06c91a9961636c5232c98afd0e64c44c788619f78d81c1a01b3a1bcc954157e64e97d8fd93a750b5d21ca156858619e3905e06ca478301d611b3e5b93c863da28630787a324a8856577f9c4ebca27950e65c05f5ca7c6897cc1e3565ff5b44a4e3f3b8646a72dfe8e14ee06e018250cd88a258ab99ee01d05e2c32829092b52c9b2ed191d158a9399a94f0750bb40ce3e9ffe8574e25711c3888b4c91d341454ca62a18e44e619a82b84b9a47aeabc74246d12c8828843689c4df06c929f980f123db5361ec9", 0xec}], 0x5, &(0x7f00000014c0)}}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002980)="a81d6f1741b5a0344d3e64f77ca1d99144d13f8c5e58b6ceb8c101d8ed01900ed0a9833466136793a329ed57e1956fc9a08c8e7b82ed6af989a646d632a2a9a671b78e715eb85174fb82f3af5da2be", 0x4f}, {&(0x7f0000002a00)="c07335521da904c6bd4895416997ef0f199e8833779cd0210adb95196531689eb5a890112df5dc7cc25d0a3ee3ae6a13a4c75e057b74b64062ce51d478be7f01de86d8a94d28e2de32279c84c230d9bf0956fdd77ae7273a37f1", 0x5a}, {&(0x7f0000002a80)="0a54ff8a8d949f453b6c69d6bf6cf576e2ee340b75f9229d0959333f0a09ccba5d84f0a84f3c632640b977fc636723e605d65f7f26ecd84d8a6ae1b4368ce0bbca7df911504c22", 0x47}], 0x3}}], 0x2, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_mount_image$vfat(&(0x7f00000014c0), &(0x7f0000001500)='./file0\x00', 0x1f, 0x1, &(0x7f0000001640)=[{&(0x7f0000001540)="750256caaef26262a16572b1aab74e72d7b2c0e6e3908a0a9603a66b2f07d8fd678554ce6cab48d05be7ddbd1726dca82753c12a61f0862dfa4f7a315d8a9a80cfa8e7c44b2bae25b7f27c2b3c9d2e63e2690bdad9b33a56d54f3a905139277635e3b52b2100c9d36638a2275af7dfd3f0c43315217fdad99e155f04355f67ed00bb5104e4542b07f6924c46e1ec1ff52e3faf7da324fe1faf5953a61b574661f9d2bce686fa111e75e14bec6133231042607b979ee2d03fccd423df8f9c395a21179122b952b025c0af8730ce050fa03b7b5cefaa8bb8bd8170dbbc09a33dd6c71a03c74e6cba4d54240d489defefa1a0257508", 0xf4, 0x1}], 0x80000, &(0x7f0000001680)={[{@utf8}, {@nonumtail}, {@uni_xlate}, {@shortname_lower}, {@shortname_lower}, {@utf8}], [{@uid_lt={'uid<', 0xee00}}, {@pcr={'pcr', 0x3d, 0x9}}, {@smackfsfloor}, {@fowner_gt}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@smackfsroot={'smackfsroot', 0x3d, 'hash\x00'}}, {@smackfshat={'smackfshat', 0x3d, '}'}}, {@fowner_gt={'fowner>', 0xee00}}, {@context={'context', 0x3d, 'system_u'}}]}) openat(r2, &(0x7f00000017c0)='./file0\x00', 0x109480, 0x4) mmap$usbmon(&(0x7f00002d4000/0x4000)=nil, 0x4000, 0x2000000, 0x11, r1, 0x40) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) [ 272.811231][T29317] loop2: detected capacity change from 0 to 264192 [ 272.836651][T29317] FAT-fs (loop2): bogus logical sector size 1264 [ 272.843016][T29317] FAT-fs (loop2): Can't find a valid FAT filesystem 13:44:02 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r2, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x0) 13:44:02 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090000ff01e66174f10404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) 13:44:02 executing program 3: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x10303e, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6000) io_setup(0x1, &(0x7f0000000080)=0x0) ftruncate(r3, 0x81fd) fallocate(r3, 0x0, 0x0, 0x7) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x2010, r0, 0x86969000) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) creat(&(0x7f0000000380)='./bus\x00', 0x104) io_submit(r4, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x16000}]) ftruncate(r2, 0x208200) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r6 = eventfd2(0x2, 0x0) r7 = openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000200), 0x2, 0x0) io_submit(r4, 0x3, &(0x7f0000000340)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x7f, 0xffffffffffffffff, &(0x7f00000007c0)="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", 0x1000, 0x9, 0x0, 0x2, r6}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xef8, r1, &(0x7f00000017c0)="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", 0x1000, 0x101}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x6, 0x5, r7, &(0x7f0000000240)="2c1c43ef1d5a705a27216974d859bb4e8d1b71fed9d99fa94b251bd5da3a72bf2bdedf05b4ecd2c2b5bfdb73fc620b5a1f8f93a9c9afbb44b61ed32b5d08b254f5130c5d82a2659bbab523d27f3d4f1a41b0958ae08949fdf5c3d3534a31efe159c93ea8a363115cc3f72dd37f2c4e09ad12d6358a21c4ed77bc37d4c090c2c6d786313679c1901f647257aa4e9328a982a9", 0x92, 0xff, 0x0, 0x2, r0}]) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r5, 0x0) preadv(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0xd9f, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x37ffff6, 0x4002011, r1, 0x0) 13:44:02 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES64=r1, @ANYRES32=r2, @ANYRES32=r3, @ANYRESOCT=r2], 0x20}}, 0x800) 13:44:02 executing program 1: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000100)={0x0, 0x1, 0x2000000401, 0x1}) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001a40)={0x0, ""/256, 0x0, 0x0}) openat$full(0xffffffffffffff9c, &(0x7f0000001480), 0x121401, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') sendmsg$NLBL_CIPSOV4_C_REMOVE(r6, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001400)=ANY=[@ANYRES32=r5, @ANYRESOCT, @ANYRESHEX, @ANYRES32=r4, @ANYRESOCT, @ANYRES64, @ANYRESHEX=r3], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000500)={0x6, 0x4, {0x3, @struct={0x0, 0x5}, 0x0, 0x7, 0x6, 0x10001, 0x7, 0x7bc2, 0x4, @struct={0x2, 0x2}, 0x5, 0x1, [0x4, 0x7, 0xfffffffffffffff8, 0x0, 0x4, 0x40c]}, {0x4a, @usage=0x2, r2, 0x3, 0x800, 0x0, 0x8, 0x81, 0x428, @struct={0x1, 0x20}, 0x0, 0x2, [0x100000001, 0x1, 0x5, 0x1, 0x8000, 0x9]}, {0x7, @usage=0xffffffff, r5, 0x2, 0x0, 0x0, 0x4, 0x1f, 0x90, @usage=0x102, 0xe0000000, 0x6, [0x8000, 0x9d86, 0x2, 0xf4e, 0x1, 0x3]}, {0x0, 0x9adb, 0x5f2}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000540)={0x0, 0x5, {0x6fdf, @usage=0x8, 0x0, 0x5, 0x55e, 0x8, 0x3, 0x9, 0x20, @usage, 0xffffff00, 0x7, [0x100000001, 0x0, 0x7, 0x1, 0xfffffffffffffffe, 0xa45]}, {0x2, @usage=0xfffffffffffffffe, 0x0, 0xfffffffffffffbff, 0x3, 0x100000000, 0x8, 0x0, 0x448, @struct={0x3b64, 0x3}, 0x800, 0x7fff, [0x3, 0x4, 0x0, 0x2, 0xff, 0x100000000]}, {0x9, @usage=0x7e47cf27, r5, 0xe1, 0x4, 0x5, 0x1, 0x3, 0x67, @usage=0x7, 0x2, 0x3, [0xfff, 0x5, 0x0, 0x101, 0xe2b, 0x8]}, {0x78d, 0x40, 0x3}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000001440)={r5, 0x100000001, 0xf0, 0x1}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r7, 0x0) preadv(r7, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f0000001300)=[{&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/213, 0xd5}, {&(0x7f00000000c0)=""/69, 0x45}, {&(0x7f0000001280)=""/4, 0x4}, {&(0x7f00000012c0)=""/25, 0x19}], 0x5, 0x80000001, 0x9) 13:44:02 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x0, 0x8, 0x2, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20008001) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_POWER_SAVE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r3, 0x1, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000