288][T21870] RSP: 002b:00007f4495b8e0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 423.428689][T21870] RAX: ffffffffffffffda RBX: 00007f449692af80 RCX: 00007f449680bae9 [ 423.436731][T21870] RDX: 0000000000000001 RSI: 00000000200035c0 RDI: 0000000000000003 [ 423.444689][T21870] RBP: 00007f4495b8e120 R08: 0000000000000000 R09: 0000000000000000 04:39:05 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = creat(0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f00000002c0)='./file0/file0\x00', r1, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) rename(&(0x7f0000000200)='./file0/file0\x00', &(0x7f00000000c0)='./file0\x00') 04:39:05 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = creat(0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f00000002c0)='./file0/file0\x00', r1, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) rename(&(0x7f0000000200)='./file0/file0\x00', &(0x7f00000000c0)='./file0\x00') [ 423.452649][T21870] R10: 0000000004000041 R11: 0000000000000246 R12: 0000000000000001 [ 423.460683][T21870] R13: 000000000000000b R14: 00007f449692af80 R15: 00007fffd3d81f88 [ 423.468647][T21870] 04:39:05 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r7], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x100000002) [ 423.528188][T21867] FAULT_INJECTION: forcing a failure. [ 423.528188][T21867] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 423.541317][T21867] CPU: 0 PID: 21867 Comm: syz-executor.1 Not tainted 6.7.0-rc1-syzkaller-00125-g7475e51b8796 #0 [ 423.551811][T21867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 423.561944][T21867] Call Trace: [ 423.565217][T21867] [ 423.568169][T21867] dump_stack_lvl+0xda/0x130 [ 423.572773][T21867] dump_stack+0x15/0x20 [ 423.576978][T21867] should_fail_ex+0x21f/0x230 [ 423.581738][T21867] should_fail+0xb/0x10 [ 423.585970][T21867] should_fail_usercopy+0x1a/0x20 [ 423.591105][T21867] _copy_from_user+0x1e/0xd0 [ 423.595739][T21867] __se_sys_memfd_create+0x26a/0x610 [ 423.601027][T21867] __x64_sys_memfd_create+0x31/0x40 [ 423.606218][T21867] do_syscall_64+0x44/0x110 [ 423.610811][T21867] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 423.616781][T21867] RIP: 0033:0x7fb8a5d81ae9 [ 423.621187][T21867] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 423.640948][T21867] RSP: 002b:00007fb8a5103df8 EFLAGS: 00000206 ORIG_RAX: 000000000000013f [ 423.649350][T21867] RAX: ffffffffffffffda RBX: 000000000000059e RCX: 00007fb8a5d81ae9 [ 423.657437][T21867] RDX: 00007fb8a5103e7c RSI: 0000000000000000 RDI: 00007fb8a5dcc6ba [ 423.665488][T21867] RBP: 00000000200017c0 R08: 00007fb8a5103b97 R09: 0000000000000000 [ 423.673445][T21867] R10: 000000000000000a R11: 0000000000000206 R12: 0000000000000001 [ 423.681436][T21867] R13: 00007fb8a5103e7c R14: 00007fb8a5103e80 R15: 00007ffd8dc5cde8 [ 423.689414][T21867] [ 423.712074][T21862] FAULT_INJECTION: forcing a failure. [ 423.712074][T21862] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 423.725382][T21862] CPU: 0 PID: 21862 Comm: syz-executor.4 Not tainted 6.7.0-rc1-syzkaller-00125-g7475e51b8796 #0 [ 423.735847][T21862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 423.745893][T21862] Call Trace: [ 423.749162][T21862] [ 423.752081][T21862] dump_stack_lvl+0xda/0x130 [ 423.756676][T21862] dump_stack+0x15/0x20 [ 423.760912][T21862] should_fail_ex+0x21f/0x230 [ 423.765587][T21862] __should_fail_alloc_page+0xfd/0x110 [ 423.771086][T21862] __alloc_pages+0x108/0x340 [ 423.775666][T21862] alloc_pages_mpol+0xb1/0x1d0 [ 423.780437][T21862] folio_alloc+0xea/0x120 [ 423.784759][T21862] filemap_alloc_folio+0x68/0x220 [ 423.789803][T21862] __filemap_get_folio+0x298/0x5a0 [ 423.795004][T21862] ? __rcu_read_unlock+0x4d/0x70 [ 423.800170][T21862] pagecache_get_page+0x2a/0x90 [ 423.805049][T21862] ? fat_block_truncate_page+0x40/0x40 [ 423.810521][T21862] grab_cache_page_write_begin+0x2e/0x40 [ 423.816155][T21862] block_write_begin+0x31/0x170 [ 423.821110][T21862] cont_write_begin+0x479/0x690 [ 423.826071][T21862] fat_write_begin+0x61/0xf0 [ 423.830756][T21862] ? fat_block_truncate_page+0x40/0x40 [ 423.836226][T21862] generic_perform_write+0x1c9/0x410 [ 423.841554][T21862] ? fat_update_time+0x1fe/0x210 [ 423.846564][T21862] ? fat_truncate_time+0x220/0x220 [ 423.851672][T21862] __generic_file_write_iter+0xa1/0x120 [ 423.857258][T21862] generic_file_write_iter+0x7d/0x1c0 [ 423.862624][T21862] vfs_write+0x48a/0x790 [ 423.866910][T21862] ksys_write+0xeb/0x1a0 [ 423.871241][T21862] __x64_sys_write+0x42/0x50 [ 423.875857][T21862] do_syscall_64+0x44/0x110 [ 423.880390][T21862] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 423.886293][T21862] RIP: 0033:0x7fe943067ae9 [ 423.890791][T21862] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 423.910419][T21862] RSP: 002b:00007fe9423ea0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 423.918868][T21862] RAX: ffffffffffffffda RBX: 00007fe943186f80 RCX: 00007fe943067ae9 [ 423.926828][T21862] RDX: 0000000000000012 RSI: 0000000020001980 RDI: 0000000000000005 [ 423.934784][T21862] RBP: 00007fe9423ea120 R08: 0000000000000000 R09: 0000000000000000 [ 423.942752][T21862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.950832][T21862] R13: 000000000000000b R14: 00007fe943186f80 R15: 00007ffe01fcf1f8 [ 423.958859][T21862] 04:39:05 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async, rerun: 64) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async, rerun: 64) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="000900e60bf2ff78407a73b53e1098546c6a0deb96062cabd7f52506fb8cc1edebba0c38e5043022cfcb09f86ccaadc27997979138dfeed9d544cf083021a0ecae9d2c712c9480c78f78131ae8450aea8086300a8d21b7beb43e51e5d4d941a6dfa5b46c3132b5979b4652c62a60b4dc833d19f88d47490f85dab81db8fa5b0a03a54c7b285d3101b0ec80ea1d3c6ae7408931cf59f30a931ffcc06107019f863f700046aeacd3508e0ba4c1aa"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r1}, 0x10) (async) socket$netlink(0x10, 0x3, 0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='sched_wake_idle_without_ipi\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) openat$cgroup_ro(r4, &(0x7f0000000480)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r2}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) write$binfmt_script(r5, &(0x7f0000000480)=ANY=[], 0x208e24b) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000004c0)={0x0, 0x4}, &(0x7f0000000500)=0x8) (async) r6 = socket$rxrpc(0x21, 0x2, 0xa) (async, rerun: 64) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async, rerun: 64) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r11], 0x2c}}, 0x0) (async, rerun: 32) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r9, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r6], 0x4}}, 0x0) (async, rerun: 32) sendfile(r8, r7, 0x0, 0x100000002) 04:39:05 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = creat(0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f00000002c0)='./file0/file0\x00', r1, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) rename(&(0x7f0000000200)='./file0/file0\x00', &(0x7f00000000c0)='./file0\x00') 04:39:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x1}}], 0x1, 0x4000041) (fail_nth: 4) 04:39:05 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001240)='./bus\x00', 0x800000, &(0x7f0000000540)=ANY=[], 0x1, 0x125e, &(0x7f0000001280)="$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") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000001980), 0x12) (fail_nth: 2) 04:39:05 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000009c0), 0xd4ba0ff) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r0, &(0x7f00000002c0)='./file0/file0\x00', r0, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) rename(&(0x7f0000000200)='./file0/file0\x00', &(0x7f00000000c0)='./file0\x00') 04:39:06 executing program 1: mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x0, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) syz_read_part_table(0x59e, &(0x7f00000017c0)="$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") (fail_nth: 3) 04:39:06 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000009c0), 0xd4ba0ff) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r0, &(0x7f00000002c0)='./file0/file0\x00', r0, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) rename(&(0x7f0000000200)='./file0/file0\x00', &(0x7f00000000c0)='./file0\x00') 04:39:06 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="000900e60bf2ff78407a73b53e1098546c6a0deb96062cabd7f52506fb8cc1edebba0c38e5043022cfcb09f86ccaadc27997979138dfeed9d544cf083021a0ecae9d2c712c9480c78f78131ae8450aea8086300a8d21b7beb43e51e5d4d941a6dfa5b46c3132b5979b4652c62a60b4dc833d19f88d47490f85dab81db8fa5b0a03a54c7b285d3101b0ec80ea1d3c6ae7408931cf59f30a931ffcc06107019f863f700046aeacd3508e0ba4c1aa"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r1}, 0x10) (async) socket$netlink(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='sched_wake_idle_without_ipi\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) openat$cgroup_ro(r4, &(0x7f0000000480)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r2}, 0x10) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) write$binfmt_script(r5, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) (async) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000004c0)={0x0, 0x4}, &(0x7f0000000500)=0x8) (async) r6 = socket$rxrpc(0x21, 0x2, 0xa) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r11], 0x2c}}, 0x0) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r9, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r6], 0x4}}, 0x0) (async) sendfile(r8, r7, 0x0, 0x100000002) 04:39:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x1}}], 0x1, 0x4000041) (fail_nth: 5) 04:39:06 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000009c0), 0xd4ba0ff) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r0, &(0x7f00000002c0)='./file0/file0\x00', r0, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) rename(&(0x7f0000000200)='./file0/file0\x00', &(0x7f00000000c0)='./file0\x00') 04:39:06 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) write$cgroup_type(r0, 0x0, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f00000002c0)='./file0/file0\x00', r1, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) rename(&(0x7f0000000200)='./file0/file0\x00', &(0x7f00000000c0)='./file0\x00') [ 424.112794][T21892] loop4: detected capacity change from 0 to 8192 [ 424.204090][T21903] FAULT_INJECTION: forcing a failure. [ 424.204090][T21903] name failslab, interval 1, probability 0, space 0, times 0 [ 424.216841][T21903] CPU: 1 PID: 21903 Comm: syz-executor.1 Not tainted 6.7.0-rc1-syzkaller-00125-g7475e51b8796 #0 [ 424.227188][T21911] FAULT_INJECTION: forcing a failure. [ 424.227188][T21911] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 424.227251][T21903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 424.250402][T21903] Call Trace: [ 424.253674][T21903] [ 424.256589][T21903] dump_stack_lvl+0xda/0x130 [ 424.261251][T21903] dump_stack+0x15/0x20 [ 424.265539][T21903] should_fail_ex+0x21f/0x230 [ 424.270240][T21903] __should_failslab+0x92/0xa0 [ 424.275000][T21903] should_failslab+0x9/0x20 [ 424.279614][T21903] slab_pre_alloc_hook+0x37/0x160 [ 424.284631][T21903] ? shmem_alloc_inode+0x34/0x50 [ 424.289553][T21903] kmem_cache_alloc_lru+0x47/0x200 [ 424.294764][T21903] shmem_alloc_inode+0x34/0x50 [ 424.299532][T21903] ? shmem_match+0xa0/0xa0 [ 424.303942][T21903] alloc_inode+0x38/0x150 [ 424.308277][T21903] new_inode+0x1d/0x120 [ 424.312536][T21903] shmem_get_inode+0x258/0x740 [ 424.317288][T21903] __shmem_file_setup+0x122/0x1f0 [ 424.322408][T21903] shmem_file_setup+0x3b/0x50 [ 424.327069][T21903] __se_sys_memfd_create+0x318/0x610 [ 424.332387][T21903] __x64_sys_memfd_create+0x31/0x40 [ 424.337688][T21903] do_syscall_64+0x44/0x110 [ 424.342226][T21903] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 424.348219][T21903] RIP: 0033:0x7fb8a5d81ae9 [ 424.352620][T21903] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 424.372306][T21903] RSP: 002b:00007fb8a5103df8 EFLAGS: 00000206 ORIG_RAX: 000000000000013f [ 424.380833][T21903] RAX: ffffffffffffffda RBX: 000000000000059e RCX: 00007fb8a5d81ae9 [ 424.388789][T21903] RDX: 00007fb8a5103e7c RSI: 0000000000000000 RDI: 00007fb8a5dcc6ba [ 424.396747][T21903] RBP: 00000000200017c0 R08: 00007fb8a5103b97 R09: 0000000000000000 [ 424.404805][T21903] R10: 000000000000000a R11: 0000000000000206 R12: 0000000000000001 [ 424.412898][T21903] R13: 00007fb8a5103e7c R14: 00007fb8a5103e80 R15: 00007ffd8dc5cde8 [ 424.420859][T21903] [ 424.423865][T21911] CPU: 0 PID: 21911 Comm: syz-executor.4 Not tainted 6.7.0-rc1-syzkaller-00125-g7475e51b8796 #0 [ 424.434358][T21911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 424.444422][T21911] Call Trace: [ 424.447699][T21911] [ 424.450636][T21911] dump_stack_lvl+0xda/0x130 [ 424.455351][T21911] dump_stack+0x15/0x20 [ 424.459522][T21911] should_fail_ex+0x21f/0x230 [ 424.464223][T21911] should_fail+0xb/0x10 [ 424.468391][T21911] should_fail_usercopy+0x1a/0x20 [ 424.473554][T21911] copy_page_from_iter_atomic+0x237/0xd80 [ 424.479313][T21911] ? fat_write_begin+0x61/0xf0 [ 424.484144][T21911] ? fat_block_truncate_page+0x40/0x40 [ 424.489604][T21911] generic_perform_write+0x20c/0x410 [ 424.494882][T21911] ? fat_update_time+0x1fe/0x210 [ 424.499843][T21911] ? fat_truncate_time+0x220/0x220 [ 424.504949][T21911] __generic_file_write_iter+0xa1/0x120 [ 424.510578][T21911] generic_file_write_iter+0x7d/0x1c0 [ 424.515940][T21911] vfs_write+0x48a/0x790 [ 424.520246][T21911] ksys_write+0xeb/0x1a0 [ 424.524481][T21911] __x64_sys_write+0x42/0x50 [ 424.529263][T21911] do_syscall_64+0x44/0x110 [ 424.533801][T21911] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 424.539801][T21911] RIP: 0033:0x7fe943067ae9 [ 424.544213][T21911] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 424.563817][T21911] RSP: 002b:00007fe9423c90c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 424.572234][T21911] RAX: ffffffffffffffda RBX: 00007fe943187050 RCX: 00007fe943067ae9 [ 424.580282][T21911] RDX: 0000000000000012 RSI: 0000000020001980 RDI: 0000000000000005 [ 424.588314][T21911] RBP: 00007fe9423c9120 R08: 0000000000000000 R09: 0000000000000000 [ 424.596336][T21911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 04:39:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x1}}], 0x1, 0x4000041) (fail_nth: 6) 04:39:06 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x19, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000580)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r2}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r3, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0xa) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1ff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x401}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x80) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x8946, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @remote}}}}) write$binfmt_script(r8, &(0x7f00000002c0)={'#! ', './file0', [{}, {0x20, '[%}'}, {0x20, '\x00'}, {0x20, '\x00'}, {0x20, '['}, {0x20, ':^'}], 0xa, "1b3cfa084a47e3e761da977a386e1ce9e347166529712b9ccc7333e1149e2b203377328c78f5371d65d45e87e2f4cf070ef782af04c871f416b10ee295db708cd3bdf4c7a8b6944e6925e0d283"}, 0x66) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r11], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r9, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r7, r6, 0x0, 0x100000002) 04:39:06 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001240)='./bus\x00', 0x800000, &(0x7f0000000540)=ANY=[], 0x1, 0x125e, &(0x7f0000001280)="$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") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000001980), 0x12) (fail_nth: 3) 04:39:06 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) write$cgroup_type(r0, 0x0, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f00000002c0)='./file0/file0\x00', r1, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) rename(&(0x7f0000000200)='./file0/file0\x00', &(0x7f00000000c0)='./file0\x00') [ 424.604376][T21911] R13: 000000000000006e R14: 00007fe943187050 R15: 00007ffe01fcf1f8 [ 424.612342][T21911] 04:39:06 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r7], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x100000002) 04:39:06 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) write$cgroup_type(r0, 0x0, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f00000002c0)='./file0/file0\x00', r1, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) rename(&(0x7f0000000200)='./file0/file0\x00', &(0x7f00000000c0)='./file0\x00') [ 424.668562][T21916] FAULT_INJECTION: forcing a failure. [ 424.668562][T21916] name failslab, interval 1, probability 0, space 0, times 0 [ 424.681297][T21916] CPU: 0 PID: 21916 Comm: syz-executor.5 Not tainted 6.7.0-rc1-syzkaller-00125-g7475e51b8796 #0 [ 424.691726][T21916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 424.701782][T21916] Call Trace: [ 424.705066][T21916] [ 424.708058][T21916] dump_stack_lvl+0xda/0x130 [ 424.712651][T21916] dump_stack+0x15/0x20 [ 424.716855][T21916] should_fail_ex+0x21f/0x230 [ 424.721548][T21916] ? __alloc_skb+0x109/0x2e0 [ 424.726128][T21916] __should_failslab+0x92/0xa0 [ 424.730968][T21916] should_failslab+0x9/0x20 [ 424.735503][T21916] kmem_cache_alloc_node+0x52/0x280 [ 424.740701][T21916] __alloc_skb+0x109/0x2e0 [ 424.745106][T21916] tcp_stream_alloc_skb+0x2f/0x1d0 [ 424.750268][T21916] tcp_connect+0x1616/0x2290 [ 424.754987][T21916] tcp_sendmsg_fastopen+0x1f0/0x4d0 [ 424.760184][T21916] tcp_sendmsg_locked+0x24ac/0x2690 [ 424.765398][T21916] ? mod_objcg_state+0x444/0x580 [ 424.770328][T21916] ? slab_post_alloc_hook+0x82/0x2f0 [ 424.775612][T21916] ? __rcu_read_unlock+0x4d/0x70 [ 424.780602][T21916] ? avc_has_perm_noaudit+0x1c8/0x210 [ 424.785966][T21916] ? avc_has_perm+0xd4/0x150 [ 424.790595][T21916] ? _raw_spin_unlock_bh+0x36/0x40 [ 424.795765][T21916] tcp_sendmsg+0x30/0x50 [ 424.800018][T21916] inet6_sendmsg+0x63/0x80 [ 424.804432][T21916] ? inet6_compat_ioctl+0x260/0x260 [ 424.809897][T21916] ____sys_sendmsg+0x37c/0x4d0 [ 424.814661][T21916] __sys_sendmmsg+0x269/0x500 [ 424.819344][T21916] __x64_sys_sendmmsg+0x57/0x60 [ 424.824238][T21916] do_syscall_64+0x44/0x110 [ 424.828735][T21916] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 424.835730][T21916] RIP: 0033:0x7f449680bae9 [ 424.840137][T21916] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 424.859832][T21916] RSP: 002b:00007f4495b8e0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 424.868309][T21916] RAX: ffffffffffffffda RBX: 00007f449692af80 RCX: 00007f449680bae9 [ 424.876363][T21916] RDX: 0000000000000001 RSI: 00000000200035c0 RDI: 0000000000000003 [ 424.884329][T21916] RBP: 00007f4495b8e120 R08: 0000000000000000 R09: 0000000000000000 [ 424.892292][T21916] R10: 0000000004000041 R11: 0000000000000246 R12: 0000000000000001 [ 424.900259][T21916] R13: 000000000000000b R14: 00007f449692af80 R15: 00007fffd3d81f88 [ 424.908300][T21916] 04:39:06 executing program 1: mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x0, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) syz_read_part_table(0x59e, &(0x7f00000017c0)="$eJzs0r1Le1cYB/CTW9pQ6I/ID8HBDoLBKVaIgw7JIBJDFhWx4uAsOOggODhIJDr78g8ovoG4iHtGUUEU4iQZxbmguGRKqd5SdKpU+0I/n+Vwz/Oc+3D4nsB/WhR+aTabiRBCM/n+0z8fFYZKHaMDY+MhJMJUCKHw4w/PlUTc8ftfT/7YelZKZms7l4OPRy1XnTfn6b0o3q9GISyHEGbv9lN/7Wb8Hxznz1Irq/PFtcX8zG1x6b53urvQvl6Y2+zbzZUn2nKT8cOqRq/PJT5pfrrWf3DdHHnY+jKQCqGRvYj7Mh81kH+Vt/lvt1bqlcZw1+FCT+Zr/bS8Eef+9Cp/jwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPh4x/mz1MrqN/HX0n3vdHehfb0wt9m3mytPtOUmo5dKNfrM+fPFtcX8zG1x6T5d6z+4bo48bH356dvz7xrZi7gvk/ic+fyz3ua/3VqpVxrDXYcLPZmv9dPyRpz7k/wBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD+pMFTqGB0YGw8hEaZCCINRy/5v+83kSz0R953E6/fxWkpmazuXg49HLVedN+fpvdG4vxqFsBxCmL3bT/3dd+H9fg0AAP//iuKA4w==") (fail_nth: 4) 04:39:06 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) r1 = open(0x0, 0x0, 0x0) mkdirat(r1, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f00000002c0)='./file0/file0\x00', r1, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) rename(&(0x7f0000000200)='./file0/file0\x00', &(0x7f00000000c0)='./file0\x00') [ 424.986250][T21923] loop4: detected capacity change from 0 to 8192 04:39:07 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x1}}], 0x1, 0x4000041) (fail_nth: 7) [ 425.112922][T21936] FAULT_INJECTION: forcing a failure. [ 425.112922][T21936] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 425.126304][T21936] CPU: 1 PID: 21936 Comm: syz-executor.4 Not tainted 6.7.0-rc1-syzkaller-00125-g7475e51b8796 #0 [ 425.136770][T21936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 425.139189][T21931] FAULT_INJECTION: forcing a failure. [ 425.139189][T21931] name failslab, interval 1, probability 0, space 0, times 0 [ 425.146821][T21936] Call Trace: [ 425.146831][T21936] [ 425.146845][T21936] dump_stack_lvl+0xda/0x130 [ 425.170289][T21936] dump_stack+0x15/0x20 [ 425.174442][T21936] should_fail_ex+0x21f/0x230 [ 425.179260][T21936] should_fail+0xb/0x10 [ 425.183413][T21936] should_fail_usercopy+0x1a/0x20 [ 425.188470][T21936] _copy_to_user+0x1e/0x90 [ 425.192876][T21936] simple_read_from_buffer+0xa0/0x110 [ 425.198309][T21936] proc_fail_nth_read+0xfc/0x140 [ 425.203395][T21936] ? proc_fault_inject_write+0x210/0x210 [ 425.209068][T21936] vfs_read+0x1a4/0x590 [ 425.213221][T21936] ? mutex_lock+0xd/0x30 [ 425.217492][T21936] ksys_read+0xeb/0x1a0 [ 425.221655][T21936] __x64_sys_read+0x42/0x50 [ 425.226150][T21936] do_syscall_64+0x44/0x110 [ 425.230647][T21936] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 425.236632][T21936] RIP: 0033:0x7fe94306678c [ 425.241101][T21936] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 59 81 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 af 81 02 00 48 [ 425.260803][T21936] RSP: 002b:00007fe9423c90c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 425.269212][T21936] RAX: ffffffffffffffda RBX: 00007fe943187050 RCX: 00007fe94306678c [ 425.277176][T21936] RDX: 000000000000000f RSI: 00007fe9423c9130 RDI: 0000000000000006 [ 425.285176][T21936] RBP: 00007fe9423c9120 R08: 0000000000000000 R09: 0000000000000000 [ 425.293209][T21936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.301174][T21936] R13: 000000000000006e R14: 00007fe943187050 R15: 00007ffe01fcf1f8 [ 425.309141][T21936] [ 425.312187][T21931] CPU: 0 PID: 21931 Comm: syz-executor.1 Not tainted 6.7.0-rc1-syzkaller-00125-g7475e51b8796 #0 [ 425.322612][T21931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 425.332664][T21931] Call Trace: [ 425.335931][T21931] [ 425.338853][T21931] dump_stack_lvl+0xda/0x130 [ 425.343442][T21931] dump_stack+0x15/0x20 [ 425.347601][T21931] should_fail_ex+0x21f/0x230 [ 425.352275][T21931] ? security_inode_alloc+0x32/0xd0 [ 425.357469][T21931] __should_failslab+0x92/0xa0 [ 425.362271][T21931] should_failslab+0x9/0x20 [ 425.366771][T21931] kmem_cache_alloc+0x4e/0x250 [ 425.371528][T21931] security_inode_alloc+0x32/0xd0 [ 425.376613][T21931] inode_init_always+0x3ff/0x440 [ 425.381541][T21931] ? shmem_match+0xa0/0xa0 [ 425.386026][T21931] alloc_inode+0x77/0x150 [ 425.390348][T21931] new_inode+0x1d/0x120 [ 425.394497][T21931] shmem_get_inode+0x258/0x740 [ 425.399341][T21931] __shmem_file_setup+0x122/0x1f0 [ 425.404380][T21931] shmem_file_setup+0x3b/0x50 [ 425.409058][T21931] __se_sys_memfd_create+0x318/0x610 [ 425.414337][T21931] __x64_sys_memfd_create+0x31/0x40 [ 425.419525][T21931] do_syscall_64+0x44/0x110 [ 425.424076][T21931] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 425.430515][T21931] RIP: 0033:0x7fb8a5d81ae9 [ 425.434918][T21931] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 425.455559][T21931] RSP: 002b:00007fb8a5103df8 EFLAGS: 00000206 ORIG_RAX: 000000000000013f 04:39:07 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r7], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x100000002) [ 425.463966][T21931] RAX: ffffffffffffffda RBX: 000000000000059e RCX: 00007fb8a5d81ae9 [ 425.472004][T21931] RDX: 00007fb8a5103e7c RSI: 0000000000000000 RDI: 00007fb8a5dcc6ba [ 425.479966][T21931] RBP: 00000000200017c0 R08: 00007fb8a5103b97 R09: 0000000000000000 [ 425.488004][T21931] R10: 000000000000000a R11: 0000000000000206 R12: 0000000000000001 [ 425.495978][T21931] R13: 00007fb8a5103e7c R14: 00007fb8a5103e80 R15: 00007ffd8dc5cde8 [ 425.503939][T21931] 04:39:07 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001240)='./bus\x00', 0x800000, &(0x7f0000000540)=ANY=[], 0x1, 0x125e, &(0x7f0000001280)="$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") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000001980), 0x12) 04:39:07 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x1}}], 0x1, 0x4000041) (fail_nth: 8) 04:39:07 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) r1 = open(0x0, 0x0, 0x0) mkdirat(r1, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f00000002c0)='./file0/file0\x00', r1, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) rename(&(0x7f0000000200)='./file0/file0\x00', &(0x7f00000000c0)='./file0\x00') [ 425.612373][T21940] FAULT_INJECTION: forcing a failure. [ 425.612373][T21940] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 425.625541][T21940] CPU: 1 PID: 21940 Comm: syz-executor.5 Not tainted 6.7.0-rc1-syzkaller-00125-g7475e51b8796 #0 [ 425.636172][T21940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 425.646225][T21940] Call Trace: [ 425.649500][T21940] [ 425.652419][T21940] dump_stack_lvl+0xda/0x130 [ 425.657190][T21940] dump_stack+0x15/0x20 [ 425.661424][T21940] should_fail_ex+0x21f/0x230 [ 425.666137][T21940] should_fail+0xb/0x10 [ 425.670342][T21940] should_fail_usercopy+0x1a/0x20 [ 425.675382][T21940] _copy_from_iter+0xf2/0xb60 [ 425.681357][T21940] ? kmalloc_reserve+0xfb/0x190 [ 425.686260][T21940] ? __build_skb_around+0x196/0x1f0 [ 425.691516][T21940] ? __alloc_skb+0x21f/0x2e0 [ 425.696111][T21940] copy_page_from_iter+0x14f/0x280 [ 425.701288][T21940] tcp_connect+0x16d8/0x2290 [ 425.705894][T21940] tcp_sendmsg_fastopen+0x1f0/0x4d0 [ 425.711123][T21940] tcp_sendmsg_locked+0x24ac/0x2690 [ 425.716311][T21940] ? __rcu_read_unlock+0x4d/0x70 [ 425.721248][T21940] ? mod_objcg_state+0x357/0x580 [ 425.726254][T21940] ? slab_post_alloc_hook+0x82/0x2f0 [ 425.731533][T21940] ? __rcu_read_unlock+0x4d/0x70 [ 425.736492][T21940] ? avc_has_perm_noaudit+0x1c8/0x210 [ 425.741890][T21940] ? avc_has_perm+0xd4/0x150 [ 425.746518][T21940] ? _raw_spin_unlock_bh+0x36/0x40 [ 425.751629][T21940] tcp_sendmsg+0x30/0x50 [ 425.755911][T21940] inet6_sendmsg+0x63/0x80 [ 425.760437][T21940] ? inet6_compat_ioctl+0x260/0x260 [ 425.765768][T21940] ____sys_sendmsg+0x37c/0x4d0 [ 425.770547][T21940] __sys_sendmmsg+0x269/0x500 [ 425.775223][T21940] __x64_sys_sendmmsg+0x57/0x60 [ 425.780067][T21940] do_syscall_64+0x44/0x110 [ 425.784886][T21940] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 425.790836][T21940] RIP: 0033:0x7f449680bae9 [ 425.795238][T21940] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 425.814832][T21940] RSP: 002b:00007f4495b8e0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 425.823273][T21940] RAX: ffffffffffffffda RBX: 00007f449692af80 RCX: 00007f449680bae9 [ 425.831292][T21940] RDX: 0000000000000001 RSI: 00000000200035c0 RDI: 0000000000000003 [ 425.839261][T21940] RBP: 00007f4495b8e120 R08: 0000000000000000 R09: 0000000000000000 [ 425.847297][T21940] R10: 0000000004000041 R11: 0000000000000246 R12: 0000000000000001 [ 425.855267][T21940] R13: 000000000000000b R14: 00007f449692af80 R15: 00007fffd3d81f88 [ 425.863240][T21940] 04:39:07 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r1}, 0x10) (async, rerun: 32) socket$netlink(0x10, 0x3, 0x0) (rerun: 32) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x19, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000580)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r2}, 0x10) (async, rerun: 64) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async, rerun: 64) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r3, &(0x7f0000000480)=ANY=[], 0x208e24b) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async, rerun: 32) r5 = socket$rxrpc(0x21, 0x2, 0xa) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async, rerun: 64) sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1ff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x401}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x80) (rerun: 64) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x8946, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @remote}}}}) write$binfmt_script(r8, &(0x7f00000002c0)={'#! ', './file0', [{}, {0x20, '[%}'}, {0x20, '\x00'}, {0x20, '\x00'}, {0x20, '['}, {0x20, ':^'}], 0xa, "1b3cfa084a47e3e761da977a386e1ce9e347166529712b9ccc7333e1149e2b203377328c78f5371d65d45e87e2f4cf070ef782af04c871f416b10ee295db708cd3bdf4c7a8b6944e6925e0d283"}, 0x66) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r11], 0x2c}}, 0x0) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r9, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r5], 0x4}}, 0x0) (async) sendfile(r7, r6, 0x0, 0x100000002) 04:39:07 executing program 1: mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x0, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) syz_read_part_table(0x59e, &(0x7f00000017c0)="$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") (fail_nth: 5) 04:39:07 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x1}}], 0x1, 0x4000041) (fail_nth: 9) [ 425.976238][T21950] FAULT_INJECTION: forcing a failure. [ 425.976238][T21950] name failslab, interval 1, probability 0, space 0, times 0 [ 425.989625][T21950] CPU: 1 PID: 21950 Comm: syz-executor.5 Not tainted 6.7.0-rc1-syzkaller-00125-g7475e51b8796 #0 [ 426.000129][T21950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 426.010220][T21950] Call Trace: [ 426.013501][T21950] [ 426.016454][T21950] dump_stack_lvl+0xda/0x130 [ 426.021131][T21950] dump_stack+0x15/0x20 [ 426.025347][T21950] should_fail_ex+0x21f/0x230 [ 426.030029][T21950] ? __nf_conntrack_alloc+0xcd/0x280 [ 426.035315][T21950] __should_failslab+0x92/0xa0 [ 426.040103][T21950] should_failslab+0x9/0x20 [ 426.044719][T21950] kmem_cache_alloc+0x4e/0x250 [ 426.049495][T21950] __nf_conntrack_alloc+0xcd/0x280 [ 426.054617][T21950] init_conntrack+0x191/0x960 [ 426.059393][T21950] nf_conntrack_in+0x899/0xf20 [ 426.064163][T21950] ? ipv4_conntrack_in+0x30/0x30 [ 426.069105][T21950] ipv4_conntrack_local+0xc9/0x150 [ 426.074233][T21950] nf_hook_slow+0x7b/0x190 [ 426.078779][T21950] __ip_local_out+0x2d4/0x300 [ 426.083534][T21950] ? __ip_local_out+0x300/0x300 [ 426.088390][T21950] __ip_queue_xmit+0xacc/0xb30 [ 426.093177][T21950] ip_queue_xmit+0x38/0x40 [ 426.097598][T21950] __tcp_transmit_skb+0x11d9/0x1890 [ 426.102843][T21950] ? kmalloc_reserve+0xfb/0x190 [ 426.107741][T21950] tcp_connect+0x1ccb/0x2290 [ 426.112406][T21950] tcp_sendmsg_fastopen+0x1f0/0x4d0 [ 426.117601][T21950] tcp_sendmsg_locked+0x24ac/0x2690 [ 426.122811][T21950] ? __rcu_read_unlock+0x4d/0x70 [ 426.127740][T21950] ? mod_objcg_state+0x357/0x580 [ 426.132666][T21950] ? slab_post_alloc_hook+0x82/0x2f0 [ 426.137994][T21950] ? __rcu_read_unlock+0x4d/0x70 [ 426.142920][T21950] ? avc_has_perm_noaudit+0x1c8/0x210 [ 426.148280][T21950] ? avc_has_perm+0xd4/0x150 [ 426.152913][T21950] ? _raw_spin_unlock_bh+0x36/0x40 [ 426.158101][T21950] tcp_sendmsg+0x30/0x50 [ 426.162335][T21950] inet6_sendmsg+0x63/0x80 [ 426.166907][T21950] ? inet6_compat_ioctl+0x260/0x260 [ 426.172121][T21950] ____sys_sendmsg+0x37c/0x4d0 [ 426.176876][T21950] __sys_sendmmsg+0x269/0x500 [ 426.181567][T21950] __x64_sys_sendmmsg+0x57/0x60 [ 426.186414][T21950] do_syscall_64+0x44/0x110 [ 426.190915][T21950] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 426.196837][T21950] RIP: 0033:0x7f449680bae9 [ 426.201238][T21950] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 426.221009][T21950] RSP: 002b:00007f4495b8e0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 426.229421][T21950] RAX: ffffffffffffffda RBX: 00007f449692af80 RCX: 00007f449680bae9 [ 426.237392][T21950] RDX: 0000000000000001 RSI: 00000000200035c0 RDI: 0000000000000003 [ 426.245353][T21950] RBP: 00007f4495b8e120 R08: 0000000000000000 R09: 0000000000000000 [ 426.253354][T21950] R10: 0000000004000041 R11: 0000000000000246 R12: 0000000000000001 [ 426.261410][T21950] R13: 000000000000000b R14: 00007f449692af80 R15: 00007fffd3d81f88 [ 426.269432][T21950] 04:39:08 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r8], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x0) [ 426.301980][T21948] loop4: detected capacity change from 0 to 8192 [ 426.326100][T21942] FAULT_INJECTION: forcing a failure. [ 426.326100][T21942] name failslab, interval 1, probability 0, space 0, times 0 [ 426.339402][T21942] CPU: 1 PID: 21942 Comm: syz-executor.1 Not tainted 6.7.0-rc1-syzkaller-00125-g7475e51b8796 #0 [ 426.349868][T21942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 426.359950][T21942] Call Trace: [ 426.363220][T21942] [ 426.366164][T21942] dump_stack_lvl+0xda/0x130 [ 426.370817][T21942] dump_stack+0x15/0x20 [ 426.375038][T21942] should_fail_ex+0x21f/0x230 [ 426.379711][T21942] __should_failslab+0x92/0xa0 [ 426.384604][T21942] should_failslab+0x9/0x20 [ 426.389101][T21942] slab_pre_alloc_hook+0x37/0x160 [ 426.394160][T21942] ? __d_alloc+0x3d/0x380 [ 426.398537][T21942] kmem_cache_alloc_lru+0x47/0x200 [ 426.403715][T21942] __d_alloc+0x3d/0x380 [ 426.407899][T21942] d_alloc_pseudo+0x1e/0x50 [ 426.412493][T21942] alloc_file_pseudo+0x74/0x160 [ 426.417393][T21942] __shmem_file_setup+0x1b6/0x1f0 [ 426.422407][T21942] shmem_file_setup+0x3b/0x50 [ 426.427130][T21942] __se_sys_memfd_create+0x318/0x610 [ 426.432550][T21942] __x64_sys_memfd_create+0x31/0x40 [ 426.437870][T21942] do_syscall_64+0x44/0x110 [ 426.442368][T21942] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 426.448279][T21942] RIP: 0033:0x7fb8a5d81ae9 [ 426.452682][T21942] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 426.472280][T21942] RSP: 002b:00007fb8a5103df8 EFLAGS: 00000206 ORIG_RAX: 000000000000013f [ 426.480802][T21942] RAX: ffffffffffffffda RBX: 000000000000059e RCX: 00007fb8a5d81ae9 [ 426.488763][T21942] RDX: 00007fb8a5103e7c RSI: 0000000000000000 RDI: 00007fb8a5dcc6ba [ 426.496821][T21942] RBP: 00000000200017c0 R08: 00007fb8a5103b97 R09: 0000000000000000 [ 426.504779][T21942] R10: 000000000000000a R11: 0000000000000206 R12: 0000000000000001 [ 426.512746][T21942] R13: 00007fb8a5103e7c R14: 00007fb8a5103e80 R15: 00007ffd8dc5cde8 [ 426.520828][T21942] 04:39:08 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) r1 = open(0x0, 0x0, 0x0) mkdirat(r1, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f00000002c0)='./file0/file0\x00', r1, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) rename(&(0x7f0000000200)='./file0/file0\x00', &(0x7f00000000c0)='./file0\x00') 04:39:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x1}}], 0x1, 0x4000041) (fail_nth: 10) 04:39:08 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x19, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000580)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r2}, 0x10) (async, rerun: 32) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) write$binfmt_script(r3, &(0x7f0000000480)=ANY=[], 0x208e24b) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) r5 = socket$rxrpc(0x21, 0x2, 0xa) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1ff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x401}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x80) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x8946, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @remote}}}}) (async) write$binfmt_script(r8, &(0x7f00000002c0)={'#! ', './file0', [{}, {0x20, '[%}'}, {0x20, '\x00'}, {0x20, '\x00'}, {0x20, '['}, {0x20, ':^'}], 0xa, "1b3cfa084a47e3e761da977a386e1ce9e347166529712b9ccc7333e1149e2b203377328c78f5371d65d45e87e2f4cf070ef782af04c871f416b10ee295db708cd3bdf4c7a8b6944e6925e0d283"}, 0x66) (async) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r11], 0x2c}}, 0x0) (async, rerun: 32) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r9, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r5], 0x4}}, 0x0) (async, rerun: 32) sendfile(r7, r6, 0x0, 0x100000002) 04:39:08 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup/syz1\x00', 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r1}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_route(r8, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@ipv4_newaddr={0x28, 0x14, 0x400, 0x70bd26, 0x25dfdbfb, {0x2, 0x1f, 0x22, 0xff}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x5}, @IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4001000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r9], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x100000002) fadvise64(r4, 0x9b5, 0x9, 0x1) [ 426.632315][T21969] FAULT_INJECTION: forcing a failure. [ 426.632315][T21969] name failslab, interval 1, probability 0, space 0, times 0 [ 426.645660][T21969] CPU: 1 PID: 21969 Comm: syz-executor.5 Not tainted 6.7.0-rc1-syzkaller-00125-g7475e51b8796 #0 [ 426.656192][T21969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 426.666260][T21969] Call Trace: [ 426.669540][T21969] [ 426.672482][T21969] dump_stack_lvl+0xda/0x130 [ 426.677087][T21969] dump_stack+0x15/0x20 [ 426.681259][T21969] should_fail_ex+0x21f/0x230 [ 426.686053][T21969] ? nf_ct_ext_add+0xed/0x1b0 [ 426.690744][T21969] __should_failslab+0x92/0xa0 [ 426.695583][T21969] should_failslab+0x9/0x20 [ 426.700147][T21969] __kmem_cache_alloc_node+0x4e/0x210 [ 426.705571][T21969] ? nf_ct_ext_add+0xed/0x1b0 [ 426.710271][T21969] __kmalloc_node_track_caller+0x96/0x1a0 [ 426.716086][T21969] ? kmem_cache_alloc+0x15a/0x250 [ 426.721149][T21969] krealloc+0x48/0xa0 [ 426.725143][T21969] nf_ct_ext_add+0xed/0x1b0 [ 426.729737][T21969] init_conntrack+0x539/0x960 [ 426.734439][T21969] nf_conntrack_in+0x899/0xf20 [ 426.739285][T21969] ? ipv4_conntrack_in+0x30/0x30 [ 426.744287][T21969] ipv4_conntrack_local+0xc9/0x150 [ 426.749467][T21969] nf_hook_slow+0x7b/0x190 [ 426.753918][T21969] __ip_local_out+0x2d4/0x300 [ 426.758859][T21969] ? __ip_local_out+0x300/0x300 [ 426.763754][T21969] __ip_queue_xmit+0xacc/0xb30 [ 426.768534][T21969] ip_queue_xmit+0x38/0x40 [ 426.773044][T21969] __tcp_transmit_skb+0x11d9/0x1890 [ 426.778244][T21969] ? kmalloc_reserve+0xfb/0x190 [ 426.783088][T21969] tcp_connect+0x1ccb/0x2290 [ 426.787736][T21969] tcp_sendmsg_fastopen+0x1f0/0x4d0 [ 426.792929][T21969] tcp_sendmsg_locked+0x24ac/0x2690 [ 426.798119][T21969] ? memcg_list_lru_alloc+0xd5/0x750 [ 426.803411][T21969] ? mod_objcg_state+0x357/0x580 [ 426.808339][T21969] ? slab_post_alloc_hook+0x82/0x2f0 [ 426.813692][T21969] ? __rcu_read_unlock+0x4d/0x70 [ 426.818629][T21969] ? avc_has_perm_noaudit+0x1c8/0x210 [ 426.824092][T21969] ? avc_has_perm+0xd4/0x150 [ 426.828681][T21969] ? _raw_spin_unlock_bh+0x36/0x40 [ 426.833798][T21969] tcp_sendmsg+0x30/0x50 [ 426.838075][T21969] inet6_sendmsg+0x63/0x80 [ 426.842537][T21969] ? inet6_compat_ioctl+0x260/0x260 [ 426.847731][T21969] ____sys_sendmsg+0x37c/0x4d0 [ 426.852545][T21969] __sys_sendmmsg+0x269/0x500 [ 426.857275][T21969] __x64_sys_sendmmsg+0x57/0x60 [ 426.862231][T21969] do_syscall_64+0x44/0x110 [ 426.866805][T21969] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 426.872709][T21969] RIP: 0033:0x7f449680bae9 [ 426.877198][T21969] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 426.896849][T21969] RSP: 002b:00007f4495b8e0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 426.905252][T21969] RAX: ffffffffffffffda RBX: 00007f449692af80 RCX: 00007f449680bae9 [ 426.913213][T21969] RDX: 0000000000000001 RSI: 00000000200035c0 RDI: 0000000000000003 [ 426.921253][T21969] RBP: 00007f4495b8e120 R08: 0000000000000000 R09: 0000000000000000 [ 426.929236][T21969] R10: 0000000004000041 R11: 0000000000000246 R12: 0000000000000002 [ 426.939196][T21969] R13: 000000000000000b R14: 00007f449692af80 R15: 00007fffd3d81f88 [ 426.947232][T21969] 04:39:08 executing program 1: mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x0, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) syz_read_part_table(0x59e, &(0x7f00000017c0)="$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") (fail_nth: 6) 04:39:08 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001240)='./bus\x00', 0x800000, &(0x7f0000000540)=ANY=[], 0x1, 0x125e, &(0x7f0000001280)="$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") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000001980)=0x2, 0x12) 04:39:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x1}}], 0x1, 0x4000041) (fail_nth: 11) 04:39:09 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r8], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x0) [ 427.079376][T21982] FAULT_INJECTION: forcing a failure. [ 427.079376][T21982] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 427.092617][T21982] CPU: 0 PID: 21982 Comm: syz-executor.5 Not tainted 6.7.0-rc1-syzkaller-00125-g7475e51b8796 #0 [ 427.103138][T21982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 427.113241][T21982] Call Trace: [ 427.116535][T21982] [ 427.119535][T21982] dump_stack_lvl+0xda/0x130 [ 427.124145][T21982] dump_stack+0x15/0x20 [ 427.128307][T21982] should_fail_ex+0x21f/0x230 [ 427.133005][T21982] should_fail+0xb/0x10 [ 427.137183][T21982] should_fail_usercopy+0x1a/0x20 [ 427.142246][T21982] _copy_to_user+0x1e/0x90 [ 427.146682][T21982] simple_read_from_buffer+0xa0/0x110 [ 427.152149][T21982] proc_fail_nth_read+0xfc/0x140 [ 427.157105][T21982] ? proc_fault_inject_write+0x210/0x210 [ 427.162787][T21982] vfs_read+0x1a4/0x590 [ 427.166967][T21982] ? mutex_lock+0xd/0x30 [ 427.171241][T21982] ksys_read+0xeb/0x1a0 [ 427.175433][T21982] __x64_sys_read+0x42/0x50 [ 427.179961][T21982] do_syscall_64+0x44/0x110 [ 427.184561][T21982] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 427.186235][T21978] loop4: detected capacity change from 0 to 8192 [ 427.190463][T21982] RIP: 0033:0x7f449680a78c [ 427.190480][T21982] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 59 81 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 af 81 02 00 48 [ 427.190534][T21982] RSP: 002b:00007f4495b8e0c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 427.190553][T21982] RAX: ffffffffffffffda RBX: 00007f449692af80 RCX: 00007f449680a78c [ 427.190566][T21982] RDX: 000000000000000f RSI: 00007f4495b8e130 RDI: 0000000000000004 [ 427.190579][T21982] RBP: 00007f4495b8e120 R08: 0000000000000000 R09: 0000000000000000 [ 427.190592][T21982] R10: 0000000004000041 R11: 0000000000000246 R12: 0000000000000002 [ 427.190606][T21982] R13: 000000000000000b R14: 00007f449692af80 R15: 00007fffd3d81f88 [ 427.190623][T21982] [ 427.230424][T21975] FAULT_INJECTION: forcing a failure. [ 427.230424][T21975] name failslab, interval 1, probability 0, space 0, times 0 [ 427.286524][T21975] CPU: 0 PID: 21975 Comm: syz-executor.1 Not tainted 6.7.0-rc1-syzkaller-00125-g7475e51b8796 #0 [ 427.296987][T21975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 427.307071][T21975] Call Trace: [ 427.310400][T21975] [ 427.313327][T21975] dump_stack_lvl+0xda/0x130 [ 427.317957][T21975] dump_stack+0x15/0x20 [ 427.322222][T21975] should_fail_ex+0x21f/0x230 [ 427.326908][T21975] ? alloc_empty_file+0xd0/0x310 [ 427.331897][T21975] __should_failslab+0x92/0xa0 [ 427.336721][T21975] should_failslab+0x9/0x20 [ 427.341326][T21975] kmem_cache_alloc+0x4e/0x250 [ 427.346083][T21975] alloc_empty_file+0xd0/0x310 [ 427.350952][T21975] alloc_file+0x3a/0x300 [ 427.355193][T21975] alloc_file_pseudo+0x103/0x160 [ 427.360203][T21975] __shmem_file_setup+0x1b6/0x1f0 [ 427.365216][T21975] shmem_file_setup+0x3b/0x50 [ 427.369883][T21975] __se_sys_memfd_create+0x318/0x610 [ 427.375190][T21975] __x64_sys_memfd_create+0x31/0x40 [ 427.380380][T21975] do_syscall_64+0x44/0x110 [ 427.384897][T21975] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 427.390837][T21975] RIP: 0033:0x7fb8a5d81ae9 [ 427.395256][T21975] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 427.415147][T21975] RSP: 002b:00007fb8a5103df8 EFLAGS: 00000206 ORIG_RAX: 000000000000013f 04:39:09 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f00000002c0)='./file0/file0\x00', r1, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) rename(&(0x7f0000000200)='./file0/file0\x00', &(0x7f00000000c0)='./file0\x00') [ 427.423554][T21975] RAX: ffffffffffffffda RBX: 000000000000059e RCX: 00007fb8a5d81ae9 [ 427.431533][T21975] RDX: 00007fb8a5103e7c RSI: 0000000000000000 RDI: 00007fb8a5dcc6ba [ 427.439494][T21975] RBP: 00000000200017c0 R08: 00007fb8a5103b97 R09: 0000000000000000 [ 427.447472][T21975] R10: 000000000000000a R11: 0000000000000206 R12: 0000000000000001 [ 427.455540][T21975] R13: 00007fb8a5103e7c R14: 00007fb8a5103e80 R15: 00007ffd8dc5cde8 [ 427.463506][T21975] 04:39:09 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001240)='./bus\x00', 0x800000, &(0x7f0000000540)=ANY=[], 0x1, 0x125e, &(0x7f0000001280)="$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") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000001980)=0x3, 0x12) 04:39:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x1}}], 0x1, 0x4000041) 04:39:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x1}}], 0x1, 0x4000041) [ 427.629534][T21990] loop4: detected capacity change from 0 to 8192 04:39:09 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r8], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x0) 04:39:09 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f00000002c0)='./file0/file0\x00', r1, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) rename(&(0x7f0000000200)='./file0/file0\x00', &(0x7f00000000c0)='./file0\x00') 04:39:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x2, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x1}}], 0x1, 0x4000041) 04:39:09 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) socket$netlink(0x10, 0x3, 0x0) (rerun: 64) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup/syz1\x00', 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r1}, 0x10) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000480)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) r3 = socket$rxrpc(0x21, 0x2, 0xa) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_route(r8, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@ipv4_newaddr={0x28, 0x14, 0x400, 0x70bd26, 0x25dfdbfb, {0x2, 0x1f, 0x22, 0xff}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x5}, @IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4001000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r9], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r3], 0x4}}, 0x0) (async) sendfile(r5, r4, 0x0, 0x100000002) (async) fadvise64(r4, 0x9b5, 0x9, 0x1) 04:39:09 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001240)='./bus\x00', 0x800000, &(0x7f0000000540)=ANY=[], 0x1, 0x125e, &(0x7f0000001280)="$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") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000001980)=0x4, 0x12) 04:39:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x3, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x1}}], 0x1, 0x4000041) 04:39:09 executing program 1: mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x0, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) syz_read_part_table(0x59e, &(0x7f00000017c0)="$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") (fail_nth: 7) 04:39:09 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) write$cgroup_type(r0, 0x0, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f00000002c0)='./file0/file0\x00', r1, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) rename(&(0x7f0000000200)='./file0/file0\x00', &(0x7f00000000c0)='./file0\x00') 04:39:09 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async, rerun: 64) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) (async) socket$netlink(0x10, 0x3, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup/syz1\x00', 0x1ff) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r1}, 0x10) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) write$binfmt_script(r2, &(0x7f0000000480)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) r3 = socket$rxrpc(0x21, 0x2, 0xa) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) (rerun: 64) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_route(r8, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@ipv4_newaddr={0x28, 0x14, 0x400, 0x70bd26, 0x25dfdbfb, {0x2, 0x1f, 0x22, 0xff}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x5}, @IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4001000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r9], 0x2c}}, 0x0) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x100000002) (async) fadvise64(r4, 0x9b5, 0x9, 0x1) 04:39:09 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r8], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x100000002) (fail_nth: 1) 04:39:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x4, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x1}}], 0x1, 0x4000041) [ 427.954788][T22008] loop4: detected capacity change from 0 to 8192 [ 428.033197][T22013] FAULT_INJECTION: forcing a failure. [ 428.033197][T22013] name failslab, interval 1, probability 0, space 0, times 0 [ 428.045931][T22013] CPU: 0 PID: 22013 Comm: syz-executor.1 Not tainted 6.7.0-rc1-syzkaller-00125-g7475e51b8796 #0 [ 428.056729][T22013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 428.066795][T22013] Call Trace: [ 428.070144][T22013] [ 428.073080][T22013] dump_stack_lvl+0xda/0x130 [ 428.077697][T22013] dump_stack+0x15/0x20 [ 428.081901][T22013] should_fail_ex+0x21f/0x230 [ 428.086611][T22013] ? security_file_alloc+0x32/0xd0 [ 428.091816][T22013] __should_failslab+0x92/0xa0 [ 428.096587][T22013] should_failslab+0x9/0x20 [ 428.101086][T22013] kmem_cache_alloc+0x4e/0x250 [ 428.105849][T22013] ? alloc_empty_file+0xd0/0x310 [ 428.110805][T22013] security_file_alloc+0x32/0xd0 [ 428.115737][T22013] alloc_empty_file+0x121/0x310 [ 428.120590][T22013] alloc_file+0x3a/0x300 [ 428.124881][T22013] alloc_file_pseudo+0x103/0x160 [ 428.129821][T22013] __shmem_file_setup+0x1b6/0x1f0 [ 428.134839][T22013] shmem_file_setup+0x3b/0x50 [ 428.139505][T22013] __se_sys_memfd_create+0x318/0x610 [ 428.144799][T22013] __x64_sys_memfd_create+0x31/0x40 [ 428.149999][T22013] do_syscall_64+0x44/0x110 [ 428.154527][T22013] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 428.160478][T22013] RIP: 0033:0x7fb8a5d81ae9 [ 428.164894][T22013] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 428.184581][T22013] RSP: 002b:00007fb8a5103df8 EFLAGS: 00000206 ORIG_RAX: 000000000000013f [ 428.193081][T22013] RAX: ffffffffffffffda RBX: 000000000000059e RCX: 00007fb8a5d81ae9 [ 428.201042][T22013] RDX: 00007fb8a5103e7c RSI: 0000000000000000 RDI: 00007fb8a5dcc6ba [ 428.209041][T22013] RBP: 00000000200017c0 R08: 00007fb8a5103b97 R09: 0000000000000000 [ 428.217000][T22013] R10: 000000000000000a R11: 0000000000000206 R12: 0000000000000001 [ 428.224968][T22013] R13: 00007fb8a5103e7c R14: 00007fb8a5103e80 R15: 00007ffd8dc5cde8 04:39:10 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='btrfs_space_reservation\x00', r1}, 0x4) socket$netlink(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000000095000000000000001f1edcd54bf84917726e1be012eb0896b892ef4eae9902db5f93ab0c284415fbb2ff66c487d7059ae6b0cc79c360ec25256910ecff7b232a85cb2337ce2d8e84f1099687afa4336088d7f882e994c8d4414666254723a86a54d500"/114], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000440)='mm_vmscan_lru_shrink_active\x00', r1}, 0xfffffd25) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r2}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r5, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0xa) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xc0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r12}, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@ifindex, 0x37, 0x0, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000480)=[0x0], &(0x7f00000004c0)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)={@map=r7, r0, 0x1e, 0x0, 0x0, @prog_id=r12, r13}, 0x20) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r11], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r9, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r6], 0x4}}, 0x0) sendfile(r8, r7, 0x0, 0x100000002) 04:39:10 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x7, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x1}}], 0x1, 0x4000041) [ 428.232986][T22013] 04:39:10 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f00000002c0)='./file0/file0\x00', r1, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) rename(&(0x7f0000000200)='./file0/file0\x00', &(0x7f00000000c0)='./file0\x00') 04:39:10 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x8, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x1}}], 0x1, 0x4000041) [ 428.337402][T22029] FAULT_INJECTION: forcing a failure. [ 428.337402][T22029] name failslab, interval 1, probability 0, space 0, times 0 [ 428.350160][T22029] CPU: 1 PID: 22029 Comm: syz-executor.3 Not tainted 6.7.0-rc1-syzkaller-00125-g7475e51b8796 #0 [ 428.360675][T22029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 428.370815][T22029] Call Trace: [ 428.374129][T22029] [ 428.377060][T22029] dump_stack_lvl+0xda/0x130 [ 428.381661][T22029] dump_stack+0x15/0x20 04:39:10 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001240)='./bus\x00', 0x800000, &(0x7f0000000540)=ANY=[], 0x1, 0x125e, &(0x7f0000001280)="$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") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000001980)=0x5, 0x12) [ 428.385911][T22029] should_fail_ex+0x21f/0x230 [ 428.390612][T22029] ? alloc_pipe_info+0xaf/0x360 [ 428.395520][T22029] __should_failslab+0x92/0xa0 [ 428.400333][T22029] should_failslab+0x9/0x20 [ 428.404952][T22029] __kmem_cache_alloc_node+0x4e/0x210 [ 428.410430][T22029] ? alloc_pipe_info+0xaf/0x360 [ 428.415321][T22029] kmalloc_trace+0x2a/0xa0 [ 428.419757][T22029] alloc_pipe_info+0xaf/0x360 [ 428.424485][T22029] splice_direct_to_actor+0x636/0x690 [ 428.429943][T22029] ? fsnotify_perm+0x5a/0x380 [ 428.434757][T22029] ? security_file_permission+0x4f/0x70 [ 428.440342][T22029] ? direct_file_splice_eof+0x70/0x70 [ 428.445762][T22029] ? security_file_permission+0x5a/0x70 [ 428.451372][T22029] do_splice_direct+0x10d/0x190 [ 428.456325][T22029] ? do_splice_direct+0x190/0x190 [ 428.461373][T22029] do_sendfile+0x3c4/0x980 [ 428.465815][T22029] __x64_sys_sendfile64+0x110/0x150 [ 428.471048][T22029] do_syscall_64+0x44/0x110 [ 428.475567][T22029] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 428.481549][T22029] RIP: 0033:0x7f49cdee4ae9 [ 428.485962][T22029] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 428.505622][T22029] RSP: 002b:00007f49cd2670c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 428.514051][T22029] RAX: ffffffffffffffda RBX: 00007f49ce003f80 RCX: 00007f49cdee4ae9 [ 428.522139][T22029] RDX: 0000000000000000 RSI: 000000000000000e RDI: 000000000000000f [ 428.530117][T22029] RBP: 00007f49cd267120 R08: 0000000000000000 R09: 0000000000000000 04:39:10 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r1, 0x0, 0x0) renameat2(r1, &(0x7f00000002c0)='./file0/file0\x00', r1, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) rename(&(0x7f0000000200)='./file0/file0\x00', &(0x7f00000000c0)='./file0\x00') [ 428.538135][T22029] R10: 0000000100000002 R11: 0000000000000246 R12: 0000000000000001 [ 428.546114][T22029] R13: 000000000000000b R14: 00007f49ce003f80 R15: 00007ffd7dee5558 [ 428.554212][T22029] [ 428.654482][T22045] loop4: detected capacity change from 0 to 8192 04:39:10 executing program 1: mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x0, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) syz_read_part_table(0x59e, &(0x7f00000017c0)="$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") (fail_nth: 8) 04:39:10 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0xf, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x1}}], 0x1, 0x4000041) 04:39:10 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r8], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x100000002) (fail_nth: 2) 04:39:10 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001240)='./bus\x00', 0x800000, &(0x7f0000000540)=ANY=[], 0x1, 0x125e, &(0x7f0000001280)="$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") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000001980)=0x6, 0x12) 04:39:10 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x4a, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x1}}], 0x1, 0x4000041) [ 428.843671][T22054] loop4: detected capacity change from 0 to 8192 [ 428.875741][T22053] FAULT_INJECTION: forcing a failure. [ 428.875741][T22053] name failslab, interval 1, probability 0, space 0, times 0 [ 428.888451][T22053] CPU: 0 PID: 22053 Comm: syz-executor.3 Not tainted 6.7.0-rc1-syzkaller-00125-g7475e51b8796 #0 [ 428.898882][T22053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 428.909011][T22053] Call Trace: [ 428.912292][T22053] [ 428.915301][T22053] dump_stack_lvl+0xda/0x130 [ 428.919941][T22053] dump_stack+0x15/0x20 [ 428.924191][T22053] should_fail_ex+0x21f/0x230 [ 428.928911][T22053] ? alloc_pipe_info+0x1ca/0x360 [ 428.933869][T22053] __should_failslab+0x92/0xa0 [ 428.938702][T22053] should_failslab+0x9/0x20 [ 428.943221][T22053] __kmem_cache_alloc_node+0x4e/0x210 [ 428.948669][T22053] ? __kmem_cache_alloc_node+0x17f/0x210 [ 428.954370][T22053] ? alloc_pipe_info+0x1ca/0x360 [ 428.959392][T22053] __kmalloc+0x95/0x1a0 [ 428.963568][T22053] ? kmalloc_trace+0x2a/0xa0 [ 428.968240][T22053] alloc_pipe_info+0x1ca/0x360 [ 428.973031][T22053] splice_direct_to_actor+0x636/0x690 [ 428.978452][T22053] ? fsnotify_perm+0x5a/0x380 [ 428.983264][T22053] ? security_file_permission+0x4f/0x70 [ 428.988945][T22053] ? direct_file_splice_eof+0x70/0x70 04:39:10 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r1, 0x0, 0x0) renameat2(r1, &(0x7f00000002c0)='./file0/file0\x00', r1, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) rename(&(0x7f0000000200)='./file0/file0\x00', &(0x7f00000000c0)='./file0\x00') [ 428.994362][T22053] ? security_file_permission+0x5a/0x70 [ 429.000003][T22053] do_splice_direct+0x10d/0x190 [ 429.004897][T22053] ? do_splice_direct+0x190/0x190 [ 429.010042][T22053] do_sendfile+0x3c4/0x980 [ 429.014532][T22053] __x64_sys_sendfile64+0x110/0x150 [ 429.019756][T22053] do_syscall_64+0x44/0x110 [ 429.024294][T22053] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 429.030211][T22053] RIP: 0033:0x7f49cdee4ae9 [ 429.034760][T22053] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 429.054381][T22053] RSP: 002b:00007f49cd2670c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 429.062811][T22053] RAX: ffffffffffffffda RBX: 00007f49ce003f80 RCX: 00007f49cdee4ae9 [ 429.070786][T22053] RDX: 0000000000000000 RSI: 000000000000000e RDI: 000000000000000f [ 429.078766][T22053] RBP: 00007f49cd267120 R08: 0000000000000000 R09: 0000000000000000 [ 429.086846][T22053] R10: 0000000100000002 R11: 0000000000000246 R12: 0000000000000001 [ 429.094914][T22053] R13: 000000000000000b R14: 00007f49ce003f80 R15: 00007ffd7dee5558 [ 429.102906][T22053] [ 429.109391][T22055] FAULT_INJECTION: forcing a failure. [ 429.109391][T22055] name failslab, interval 1, probability 0, space 0, times 0 [ 429.122176][T22055] CPU: 1 PID: 22055 Comm: syz-executor.1 Not tainted 6.7.0-rc1-syzkaller-00125-g7475e51b8796 #0 [ 429.132643][T22055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 429.142768][T22055] Call Trace: [ 429.146126][T22055] [ 429.149060][T22055] dump_stack_lvl+0xda/0x130 [ 429.153664][T22055] dump_stack+0x15/0x20 [ 429.157829][T22055] should_fail_ex+0x21f/0x230 [ 429.162521][T22055] ? vm_area_alloc+0x2c/0x130 [ 429.167234][T22055] __should_failslab+0x92/0xa0 [ 429.172019][T22055] should_failslab+0x9/0x20 [ 429.176530][T22055] kmem_cache_alloc+0x4e/0x250 [ 429.181334][T22055] vm_area_alloc+0x2c/0x130 [ 429.185892][T22055] mmap_region+0x90a/0x16e0 [ 429.190489][T22055] ? security_mmap_addr+0x46/0x60 [ 429.195606][T22055] ? get_unmapped_area+0x250/0x280 [ 429.200769][T22055] do_mmap+0x67e/0xa90 [ 429.204998][T22055] vm_mmap_pgoff+0x12e/0x240 [ 429.209609][T22055] ksys_mmap_pgoff+0xc5/0x330 [ 429.214453][T22055] do_syscall_64+0x44/0x110 [ 429.218966][T22055] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 429.224915][T22055] RIP: 0033:0x7fb8a5d81b23 [ 429.229393][T22055] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 b0 ff ff ff 64 c7 [ 429.249086][T22055] RSP: 002b:00007fb8a5103df8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 429.257514][T22055] RAX: ffffffffffffffda RBX: 000000000000059c RCX: 00007fb8a5d81b23 [ 429.265495][T22055] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 429.273476][T22055] RBP: 00000000200017c2 R08: 00000000ffffffff R09: 0000000000000000 [ 429.281454][T22055] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000006 04:39:11 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='btrfs_space_reservation\x00', r1}, 0x4) (async) socket$netlink(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000000095000000000000001f1edcd54bf84917726e1be012eb0896b892ef4eae9902db5f93ab0c284415fbb2ff66c487d7059ae6b0cc79c360ec25256910ecff7b232a85cb2337ce2d8e84f1099687afa4336088d7f882e994c8d4414666254723a86a54d500"/114], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000440)='mm_vmscan_lru_shrink_active\x00', r1}, 0xfffffd25) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r2}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) write$binfmt_script(r5, &(0x7f0000000480)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0xa) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xc0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r12}, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@ifindex, 0x37, 0x0, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000480)=[0x0], &(0x7f00000004c0)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)={@map=r7, r0, 0x1e, 0x0, 0x0, @prog_id=r12, r13}, 0x20) (async) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r11], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r9, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r6], 0x4}}, 0x0) (async) sendfile(r8, r7, 0x0, 0x100000002) 04:39:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x1f4, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x1}}], 0x1, 0x4000041) 04:39:11 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001240)='./bus\x00', 0x800000, &(0x7f0000000540)=ANY=[], 0x1, 0x125e, &(0x7f0000001280)="$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") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000001980)=0x8, 0x12) 04:39:11 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r1, 0x0, 0x0) renameat2(r1, &(0x7f00000002c0)='./file0/file0\x00', r1, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) rename(&(0x7f0000000200)='./file0/file0\x00', &(0x7f00000000c0)='./file0\x00') [ 429.289440][T22055] R13: 00007fb8a5103e7c R14: 00007fb8a5103e80 R15: 00007ffd8dc5cde8 [ 429.297408][T22055] 04:39:11 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='btrfs_space_reservation\x00', r1}, 0x4) socket$netlink(0x10, 0x3, 0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000000095000000000000001f1edcd54bf84917726e1be012eb0896b892ef4eae9902db5f93ab0c284415fbb2ff66c487d7059ae6b0cc79c360ec25256910ecff7b232a85cb2337ce2d8e84f1099687afa4336088d7f882e994c8d4414666254723a86a54d500"/114], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000440)='mm_vmscan_lru_shrink_active\x00', r1}, 0xfffffd25) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r2}, 0x10) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r5, &(0x7f0000000480)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) (async) r6 = socket$rxrpc(0x21, 0x2, 0xa) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xc0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r12}, 0x4) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@ifindex, 0x37, 0x0, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000480)=[0x0], &(0x7f00000004c0)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)={@map=r7, r0, 0x1e, 0x0, 0x0, @prog_id=r12, r13}, 0x20) (async) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r11], 0x2c}}, 0x0) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r9, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r6], 0x4}}, 0x0) sendfile(r8, r7, 0x0, 0x100000002) 04:39:11 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r8], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x100000002) (fail_nth: 3) [ 429.405322][T22070] loop4: detected capacity change from 0 to 8192 [ 429.550263][T22084] FAULT_INJECTION: forcing a failure. [ 429.550263][T22084] name failslab, interval 1, probability 0, space 0, times 0 [ 429.562999][T22084] CPU: 0 PID: 22084 Comm: syz-executor.3 Not tainted 6.7.0-rc1-syzkaller-00125-g7475e51b8796 #0 [ 429.573516][T22084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 429.583576][T22084] Call Trace: [ 429.586929][T22084] [ 429.589862][T22084] dump_stack_lvl+0xda/0x130 [ 429.594471][T22084] dump_stack+0x15/0x20 04:39:11 executing program 1: mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x0, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) syz_read_part_table(0x59e, &(0x7f00000017c0)="$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") (fail_nth: 9) 04:39:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x20c, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x1}}], 0x1, 0x4000041) 04:39:11 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r1}, 0x10) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x40, 0x64, 0x0, 0xc1, 0x0, 0xfe, 0xa0000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xffffffe1, 0x0, @perf_config_ext={0x5, 0x101}, 0x10, 0x8, 0x3f, 0x2, 0xfffffffffffffff9, 0x10000, 0x2, 0x0, 0x78e3, 0x0, 0x7f}, 0xffffffffffffffff, 0xf, r2, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r3}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r6, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) r7 = socket$rxrpc(0x21, 0x2, 0xa) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r12], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r10, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r7], 0x4}}, 0x0) sendfile(r9, r8, 0x0, 0x100000002) 04:39:11 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001240)='./bus\x00', 0x800000, &(0x7f0000000540)=ANY=[], 0x1, 0x125e, &(0x7f0000001280)="$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") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000001980)=0xa, 0x12) 04:39:11 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000002c0)='./file0/file0\x00', r1, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) rename(&(0x7f0000000200)='./file0/file0\x00', &(0x7f00000000c0)='./file0\x00') [ 429.598716][T22084] should_fail_ex+0x21f/0x230 [ 429.603407][T22084] ? copy_splice_read+0xc7/0x4b0 [ 429.608438][T22084] __should_failslab+0x92/0xa0 [ 429.613203][T22084] should_failslab+0x9/0x20 [ 429.617725][T22084] __kmem_cache_alloc_node+0x4e/0x210 [ 429.623131][T22084] ? copy_splice_read+0xc7/0x4b0 [ 429.628162][T22084] __kmalloc+0x95/0x1a0 [ 429.632337][T22084] copy_splice_read+0xc7/0x4b0 [ 429.637154][T22084] ? fsnotify_perm+0x33f/0x380 [ 429.642005][T22084] ? ext4_release_file+0x1c0/0x1c0 [ 429.647251][T22084] splice_direct_to_actor+0x2aa/0x690 [ 429.652638][T22084] ? direct_file_splice_eof+0x70/0x70 [ 429.658101][T22084] ? security_file_permission+0x5a/0x70 [ 429.663662][T22084] do_splice_direct+0x10d/0x190 [ 429.668538][T22084] ? do_splice_direct+0x190/0x190 [ 429.673582][T22084] do_sendfile+0x3c4/0x980 [ 429.678085][T22084] __x64_sys_sendfile64+0x110/0x150 [ 429.683298][T22084] do_syscall_64+0x44/0x110 [ 429.683888][T22090] loop4: detected capacity change from 0 to 8192 [ 429.687806][T22084] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 429.687877][T22084] RIP: 0033:0x7f49cdee4ae9 [ 429.687892][T22084] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 429.687960][T22084] RSP: 002b:00007f49cd2670c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 429.688049][T22084] RAX: ffffffffffffffda RBX: 00007f49ce003f80 RCX: 00007f49cdee4ae9 [ 429.688124][T22084] RDX: 0000000000000000 RSI: 000000000000000e RDI: 000000000000000f [ 429.688137][T22084] RBP: 00007f49cd267120 R08: 0000000000000000 R09: 0000000000000000 [ 429.688151][T22084] R10: 0000000100000002 R11: 0000000000000246 R12: 0000000000000001 [ 429.688164][T22084] R13: 000000000000000b R14: 00007f49ce003f80 R15: 00007ffd7dee5558 [ 429.688179][T22084] [ 429.816037][T22095] FAULT_INJECTION: forcing a failure. [ 429.816037][T22095] name failslab, interval 1, probability 0, space 0, times 0 [ 429.828794][T22095] CPU: 0 PID: 22095 Comm: syz-executor.1 Not tainted 6.7.0-rc1-syzkaller-00125-g7475e51b8796 #0 [ 429.839215][T22095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 429.849276][T22095] Call Trace: [ 429.852686][T22095] [ 429.855617][T22095] dump_stack_lvl+0xda/0x130 [ 429.860230][T22095] dump_stack+0x15/0x20 [ 429.864475][T22095] should_fail_ex+0x21f/0x230 [ 429.869203][T22095] ? vm_area_alloc+0xac/0x130 [ 429.873981][T22095] __should_failslab+0x92/0xa0 [ 429.878758][T22095] should_failslab+0x9/0x20 [ 429.883286][T22095] kmem_cache_alloc+0x4e/0x250 [ 429.888140][T22095] vm_area_alloc+0xac/0x130 [ 429.892717][T22095] mmap_region+0x90a/0x16e0 [ 429.897295][T22095] ? security_mmap_addr+0x46/0x60 [ 429.902328][T22095] ? get_unmapped_area+0x250/0x280 [ 429.907532][T22095] do_mmap+0x67e/0xa90 [ 429.911613][T22095] vm_mmap_pgoff+0x12e/0x240 [ 429.916214][T22095] ksys_mmap_pgoff+0xc5/0x330 [ 429.920950][T22095] do_syscall_64+0x44/0x110 [ 429.925466][T22095] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 429.931433][T22095] RIP: 0033:0x7fb8a5d81b23 [ 429.935848][T22095] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 b0 ff ff ff 64 c7 [ 429.955465][T22095] RSP: 002b:00007fb8a5103df8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 04:39:11 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000002c0)='./file0/file0\x00', r1, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) rename(&(0x7f0000000200)='./file0/file0\x00', &(0x7f00000000c0)='./file0\x00') 04:39:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x218, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x1}}], 0x1, 0x4000041) [ 429.963937][T22095] RAX: ffffffffffffffda RBX: 000000000000059c RCX: 00007fb8a5d81b23 [ 429.971937][T22095] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 429.979917][T22095] RBP: 00000000200017c2 R08: 00000000ffffffff R09: 0000000000000000 [ 429.987927][T22095] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000006 [ 429.995906][T22095] R13: 00007fb8a5103e7c R14: 00007fb8a5103e80 R15: 00007ffd8dc5cde8 [ 430.003911][T22095] 04:39:12 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001240)='./bus\x00', 0x800000, &(0x7f0000000540)=ANY=[], 0x1, 0x125e, &(0x7f0000001280)="$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") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000001980)=0xc, 0x12) 04:39:12 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r8], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x100000002) (fail_nth: 4) 04:39:12 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x241, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x1}}], 0x1, 0x4000041) [ 430.131349][T22107] loop4: detected capacity change from 0 to 8192 04:39:12 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x300, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x1}}], 0x1, 0x4000041) [ 430.208624][T22110] FAULT_INJECTION: forcing a failure. [ 430.208624][T22110] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 430.222003][T22110] CPU: 0 PID: 22110 Comm: syz-executor.3 Not tainted 6.7.0-rc1-syzkaller-00125-g7475e51b8796 #0 [ 430.232421][T22110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 430.242486][T22110] Call Trace: [ 430.245770][T22110] [ 430.248798][T22110] dump_stack_lvl+0xda/0x130 [ 430.253583][T22110] dump_stack+0x15/0x20 [ 430.257752][T22110] should_fail_ex+0x21f/0x230 [ 430.262459][T22110] __should_fail_alloc_page+0xfd/0x110 [ 430.267975][T22110] __alloc_pages_bulk+0x106/0x6b0 [ 430.273105][T22110] ? __kmalloc+0x95/0x1a0 [ 430.277503][T22110] copy_splice_read+0xfa/0x4b0 [ 430.282280][T22110] ? fsnotify_perm+0x33f/0x380 [ 430.287062][T22110] ? ext4_release_file+0x1c0/0x1c0 [ 430.292292][T22110] splice_direct_to_actor+0x2aa/0x690 [ 430.297708][T22110] ? direct_file_splice_eof+0x70/0x70 [ 430.303097][T22110] ? security_file_permission+0x5a/0x70 04:39:12 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001240)='./bus\x00', 0x800000, &(0x7f0000000540)=ANY=[], 0x1, 0x125e, &(0x7f0000001280)="$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") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000001980)=0xe, 0x12) [ 430.308666][T22110] do_splice_direct+0x10d/0x190 [ 430.313600][T22110] ? do_splice_direct+0x190/0x190 [ 430.318650][T22110] do_sendfile+0x3c4/0x980 [ 430.323163][T22110] __x64_sys_sendfile64+0x110/0x150 [ 430.328390][T22110] do_syscall_64+0x44/0x110 [ 430.332985][T22110] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 430.338904][T22110] RIP: 0033:0x7f49cdee4ae9 [ 430.343394][T22110] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 430.363015][T22110] RSP: 002b:00007f49cd2670c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 430.371446][T22110] RAX: ffffffffffffffda RBX: 00007f49ce003f80 RCX: 00007f49cdee4ae9 [ 430.379442][T22110] RDX: 0000000000000000 RSI: 000000000000000e RDI: 000000000000000f [ 430.387465][T22110] RBP: 00007f49cd267120 R08: 0000000000000000 R09: 0000000000000000 [ 430.395496][T22110] R10: 0000000100000002 R11: 0000000000000246 R12: 0000000000000001 [ 430.403512][T22110] R13: 000000000000000b R14: 00007f49ce003f80 R15: 00007ffd7dee5558 [ 430.411487][T22110] 04:39:12 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r8], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x100000002) (fail_nth: 5) 04:39:12 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000002c0)='./file0/file0\x00', r1, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) rename(&(0x7f0000000200)='./file0/file0\x00', &(0x7f00000000c0)='./file0\x00') 04:39:12 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r1}, 0x10) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x40, 0x64, 0x0, 0xc1, 0x0, 0xfe, 0xa0000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xffffffe1, 0x0, @perf_config_ext={0x5, 0x101}, 0x10, 0x8, 0x3f, 0x2, 0xfffffffffffffff9, 0x10000, 0x2, 0x0, 0x78e3, 0x0, 0x7f}, 0xffffffffffffffff, 0xf, r2, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) (async) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r3}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r6, &(0x7f0000000480)=ANY=[], 0x208e24b) (async) write$binfmt_script(r6, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) socket$rxrpc(0x21, 0x2, 0xa) (async) r7 = socket$rxrpc(0x21, 0x2, 0xa) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000080)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r12], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r10, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r7], 0x4}}, 0x0) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r10, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r7], 0x4}}, 0x0) sendfile(r9, r8, 0x0, 0x100000002) 04:39:12 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x3e8, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x1}}], 0x1, 0x4000041) 04:39:12 executing program 1: mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x0, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) syz_read_part_table(0x59e, &(0x7f00000017c0)="$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") (fail_nth: 10) [ 430.484503][T22120] loop4: detected capacity change from 0 to 8192 04:39:12 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001240)='./bus\x00', 0x800000, &(0x7f0000000540)=ANY=[], 0x1, 0x125e, &(0x7f0000001280)="$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") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000001980)=0x10, 0x12) 04:39:12 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x700, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x1}}], 0x1, 0x4000041) [ 430.642170][T22129] FAULT_INJECTION: forcing a failure. [ 430.642170][T22129] name failslab, interval 1, probability 0, space 0, times 0 [ 430.655351][T22129] CPU: 1 PID: 22129 Comm: syz-executor.1 Not tainted 6.7.0-rc1-syzkaller-00125-g7475e51b8796 #0 [ 430.665778][T22129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 430.675848][T22129] Call Trace: [ 430.679143][T22129] [ 430.682077][T22129] dump_stack_lvl+0xda/0x130 [ 430.686699][T22129] dump_stack+0x15/0x20 [ 430.690505][T22136] FAULT_INJECTION: forcing a failure. [ 430.690505][T22136] name failslab, interval 1, probability 0, space 0, times 0 [ 430.690856][T22129] should_fail_ex+0x21f/0x230 [ 430.708100][T22129] ? mas_alloc_nodes+0x1e2/0x490 [ 430.713059][T22129] __should_failslab+0x92/0xa0 [ 430.717830][T22129] should_failslab+0x9/0x20 [ 430.722330][T22129] kmem_cache_alloc+0x4e/0x250 [ 430.727092][T22129] mas_alloc_nodes+0x1e2/0x490 [ 430.732168][T22129] mas_preallocate+0x6e5/0xb80 [ 430.736988][T22129] mmap_region+0xf4e/0x16e0 [ 430.741500][T22129] ? security_mmap_addr+0x46/0x60 [ 430.746518][T22129] ? get_unmapped_area+0x250/0x280 [ 430.751638][T22129] do_mmap+0x67e/0xa90 [ 430.755709][T22129] vm_mmap_pgoff+0x12e/0x240 [ 430.760457][T22129] ksys_mmap_pgoff+0xc5/0x330 [ 430.765258][T22129] do_syscall_64+0x44/0x110 [ 430.769786][T22129] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 430.775770][T22129] RIP: 0033:0x7fb8a5d81b23 [ 430.780170][T22129] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 b0 ff ff ff 64 c7 [ 430.799839][T22129] RSP: 002b:00007fb8a5103df8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 430.808280][T22129] RAX: ffffffffffffffda RBX: 000000000000059c RCX: 00007fb8a5d81b23 [ 430.816304][T22129] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 430.824264][T22129] RBP: 00000000200017c2 R08: 00000000ffffffff R09: 0000000000000000 [ 430.832244][T22129] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000006 [ 430.840200][T22129] R13: 00007fb8a5103e7c R14: 00007fb8a5103e80 R15: 00007ffd8dc5cde8 [ 430.848161][T22129] [ 430.851250][T22136] CPU: 0 PID: 22136 Comm: syz-executor.3 Not tainted 6.7.0-rc1-syzkaller-00125-g7475e51b8796 #0 [ 430.861763][T22136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 430.871819][T22136] Call Trace: [ 430.875106][T22136] [ 430.878037][T22136] dump_stack_lvl+0xda/0x130 [ 430.882644][T22136] dump_stack+0x15/0x20 [ 430.886808][T22136] should_fail_ex+0x21f/0x230 [ 430.891525][T22136] ? __iomap_dio_rw+0x14e/0x1090 [ 430.896471][T22136] __should_failslab+0x92/0xa0 [ 430.901298][T22136] should_failslab+0x9/0x20 [ 430.905856][T22136] __kmem_cache_alloc_node+0x4e/0x210 [ 430.911247][T22136] ? xa_load+0xb9/0xe0 [ 430.915338][T22136] ? __iomap_dio_rw+0x14e/0x1090 [ 430.920367][T22136] kmalloc_trace+0x2a/0xa0 [ 430.924795][T22136] __iomap_dio_rw+0x14e/0x1090 [ 430.929669][T22136] ? slab_post_alloc_hook+0x82/0x2f0 [ 430.935123][T22136] ? avc_has_perm_noaudit+0x1c8/0x210 [ 430.940520][T22136] iomap_dio_rw+0x40/0x90 [ 430.944929][T22136] ext4_file_read_iter+0x21c/0x2a0 [ 430.950055][T22136] copy_splice_read+0x26b/0x4b0 [ 430.955013][T22136] ? ext4_release_file+0x1c0/0x1c0 [ 430.960277][T22136] splice_direct_to_actor+0x2aa/0x690 [ 430.965710][T22136] ? direct_file_splice_eof+0x70/0x70 [ 430.971101][T22136] ? security_file_permission+0x5a/0x70 [ 430.976761][T22136] do_splice_direct+0x10d/0x190 [ 430.976902][T22140] loop4: detected capacity change from 0 to 8192 [ 430.981789][T22136] ? do_splice_direct+0x190/0x190 [ 430.981817][T22136] do_sendfile+0x3c4/0x980 [ 430.997602][T22136] __x64_sys_sendfile64+0x110/0x150 [ 431.002851][T22136] do_syscall_64+0x44/0x110 [ 431.007367][T22136] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 431.013361][T22136] RIP: 0033:0x7f49cdee4ae9 [ 431.017834][T22136] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 04:39:13 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, 0x0, r1, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) rename(&(0x7f0000000200)='./file0/file0\x00', &(0x7f00000000c0)='./file0\x00') [ 431.037462][T22136] RSP: 002b:00007f49cd2460c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 431.045879][T22136] RAX: ffffffffffffffda RBX: 00007f49ce004050 RCX: 00007f49cdee4ae9 [ 431.053847][T22136] RDX: 0000000000000000 RSI: 000000000000000d RDI: 000000000000000e [ 431.061912][T22136] RBP: 00007f49cd246120 R08: 0000000000000000 R09: 0000000000000000 [ 431.069955][T22136] R10: 0000000100000002 R11: 0000000000000246 R12: 0000000000000001 [ 431.078583][T22136] R13: 000000000000006e R14: 00007f49ce004050 R15: 00007ffd7dee5558 [ 431.086575][T22136] 04:39:13 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0xc02, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x1}}], 0x1, 0x4000041) 04:39:13 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001240)='./bus\x00', 0x800000, &(0x7f0000000540)=ANY=[], 0x1, 0x125e, &(0x7f0000001280)="$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") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000001980)=0x12, 0x12) 04:39:13 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0xf00, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x1}}], 0x1, 0x4000041) 04:39:13 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r8], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x100000002) (fail_nth: 6) 04:39:13 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x1802, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x1}}], 0x1, 0x4000041) [ 431.269408][T22146] loop4: detected capacity change from 0 to 8192 04:39:13 executing program 1: mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x0, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) syz_read_part_table(0x59e, &(0x7f00000017c0)="$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") (fail_nth: 11) [ 431.400368][T22151] FAULT_INJECTION: forcing a failure. [ 431.400368][T22151] name failslab, interval 1, probability 0, space 0, times 0 [ 431.413019][T22151] CPU: 0 PID: 22151 Comm: syz-executor.3 Not tainted 6.7.0-rc1-syzkaller-00125-g7475e51b8796 #0 [ 431.423504][T22151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 431.433563][T22151] Call Trace: [ 431.436843][T22151] [ 431.439771][T22151] dump_stack_lvl+0xda/0x130 [ 431.444378][T22151] dump_stack+0x15/0x20 [ 431.448544][T22151] should_fail_ex+0x21f/0x230 [ 431.453273][T22151] ? ext4_init_io_end+0x31/0xb0 [ 431.458258][T22151] __should_failslab+0x92/0xa0 [ 431.463138][T22151] should_failslab+0x9/0x20 [ 431.467646][T22151] kmem_cache_alloc+0x4e/0x250 [ 431.472431][T22151] ext4_init_io_end+0x31/0xb0 [ 431.477117][T22151] ext4_do_writepages+0x6c5/0x2100 [ 431.482306][T22151] ? __list_del_entry_valid_or_report+0x5f/0xe0 [ 431.488566][T22151] ? __bpf_prog_run32+0x74/0xa0 [ 431.493420][T22151] ? ___bpf_prog_run+0x419d/0x41e0 [ 431.498649][T22151] ? cgroup_rstat_updated+0x8c/0x1c0 [ 431.503971][T22151] ? try_charge_memcg+0xb49/0xd30 [ 431.509091][T22151] ext4_writepages+0x15e/0x2e0 [ 431.513918][T22151] ? ext4_read_folio+0x1b0/0x1b0 [ 431.518940][T22151] do_writepages+0x1c2/0x340 [ 431.523558][T22151] ? memcg_account_kmem+0x121/0x140 [ 431.528854][T22151] ? __rcu_read_unlock+0x4d/0x70 [ 431.533870][T22151] ? _raw_spin_unlock+0x26/0x40 [ 431.538763][T22151] filemap_fdatawrite_wbc+0xdb/0xf0 [ 431.544041][T22151] filemap_write_and_wait_range+0xe0/0x210 [ 431.549967][T22151] kiocb_write_and_wait+0x79/0x110 [ 431.555091][T22151] __iomap_dio_rw+0x4fe/0x1090 [ 431.559885][T22151] iomap_dio_rw+0x40/0x90 [ 431.564290][T22151] ext4_file_read_iter+0x21c/0x2a0 [ 431.569410][T22151] copy_splice_read+0x26b/0x4b0 [ 431.574293][T22151] ? ext4_release_file+0x1c0/0x1c0 [ 431.579447][T22151] splice_direct_to_actor+0x2aa/0x690 [ 431.584844][T22151] ? direct_file_splice_eof+0x70/0x70 [ 431.590394][T22151] ? security_file_permission+0x5a/0x70 [ 431.595960][T22151] do_splice_direct+0x10d/0x190 [ 431.600898][T22151] ? do_splice_direct+0x190/0x190 [ 431.605930][T22151] do_sendfile+0x3c4/0x980 [ 431.610421][T22151] __x64_sys_sendfile64+0x110/0x150 [ 431.615702][T22151] do_syscall_64+0x44/0x110 [ 431.620263][T22151] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 431.626179][T22151] RIP: 0033:0x7f49cdee4ae9 [ 431.630602][T22151] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 431.650395][T22151] RSP: 002b:00007f49cd2670c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 431.658816][T22151] RAX: ffffffffffffffda RBX: 00007f49ce003f80 RCX: 00007f49cdee4ae9 [ 431.666865][T22151] RDX: 0000000000000000 RSI: 000000000000000e RDI: 000000000000000f [ 431.674861][T22151] RBP: 00007f49cd267120 R08: 0000000000000000 R09: 0000000000000000 [ 431.682971][T22151] R10: 0000000100000002 R11: 0000000000000246 R12: 0000000000000001 [ 431.691060][T22151] R13: 000000000000000b R14: 00007f49ce003f80 R15: 00007ffd7dee5558 04:39:13 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001240)='./bus\x00', 0x800000, &(0x7f0000000540)=ANY=[], 0x1, 0x125e, &(0x7f0000001280)="$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") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000001980)=0x204, 0x12) 04:39:13 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r1}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x40, 0x64, 0x0, 0xc1, 0x0, 0xfe, 0xa0000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xffffffe1, 0x0, @perf_config_ext={0x5, 0x101}, 0x10, 0x8, 0x3f, 0x2, 0xfffffffffffffff9, 0x10000, 0x2, 0x0, 0x78e3, 0x0, 0x7f}, 0xffffffffffffffff, 0xf, r2, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r3}, 0x10) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) write$binfmt_script(r6, &(0x7f0000000480)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) (async) r7 = socket$rxrpc(0x21, 0x2, 0xa) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r12], 0x2c}}, 0x0) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r10, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r7], 0x4}}, 0x0) (async) sendfile(r9, r8, 0x0, 0x100000002) 04:39:13 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, 0x0, r1, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) rename(&(0x7f0000000200)='./file0/file0\x00', &(0x7f00000000c0)='./file0\x00') 04:39:13 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x2ee0, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x1}}], 0x1, 0x4000041) [ 431.699042][T22151] [ 431.756646][T22157] FAULT_INJECTION: forcing a failure. [ 431.756646][T22157] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 431.770091][T22157] CPU: 1 PID: 22157 Comm: syz-executor.1 Not tainted 6.7.0-rc1-syzkaller-00125-g7475e51b8796 #0 [ 431.780514][T22157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 431.790644][T22157] Call Trace: [ 431.793929][T22157] [ 431.796848][T22157] dump_stack_lvl+0xda/0x130 [ 431.801462][T22157] dump_stack+0x15/0x20 [ 431.805611][T22157] should_fail_ex+0x21f/0x230 [ 431.810288][T22157] __should_fail_alloc_page+0xfd/0x110 [ 431.815802][T22157] __alloc_pages+0x108/0x340 [ 431.820386][T22157] alloc_pages_mpol+0xb1/0x1d0 [ 431.825149][T22157] alloc_pages+0xe0/0x100 [ 431.829470][T22157] pte_alloc_one+0x32/0xe0 [ 431.833884][T22157] __pte_alloc+0x33/0x270 [ 431.838238][T22157] handle_mm_fault+0x2144/0x2dd0 [ 431.843214][T22157] ? mt_find+0x1d9/0x310 [ 431.847457][T22157] exc_page_fault+0x2f7/0x6c0 [ 431.852134][T22157] asm_exc_page_fault+0x26/0x30 [ 431.856981][T22157] RIP: 0033:0x7fb8a5d2d6e6 [ 431.861405][T22157] Code: f0 72 6e 48 63 cd 48 01 c1 49 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01 [ 431.881094][T22157] RSP: 002b:00007fb8a5103480 EFLAGS: 00010246 [ 431.887190][T22157] RAX: 0000000000000001 RBX: 00007fb8a5103520 RCX: 0000000000000101 [ 431.895235][T22157] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 00007fb8a51035c0 [ 431.903221][T22157] RBP: 0000000000000102 R08: 00007fb89ccc3000 R09: 0000000000000000 [ 431.911260][T22157] R10: 0000000000000000 R11: 00007fb8a5103530 R12: 0000000000000001 [ 431.919225][T22157] R13: 00007fb8a5def5a0 R14: 0000000000000000 R15: 00007fb8a51035c0 [ 431.927249][T22157] [ 431.930316][T22157] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF 04:39:13 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x31ab, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x1}}], 0x1, 0x4000041) 04:39:14 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r1}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x8946, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @remote}}}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r10], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r7, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r6, r5, 0x0, 0x100000002) [ 431.993916][T22164] loop4: detected capacity change from 0 to 8192 [ 432.010544][T22157] loop1: detected capacity change from 0 to 2048 04:39:14 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, 0x0, r1, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) rename(&(0x7f0000000200)='./file0/file0\x00', &(0x7f00000000c0)='./file0\x00') 04:39:14 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x4102, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x1}}], 0x1, 0x4000041) 04:39:14 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001240)='./bus\x00', 0x800000, &(0x7f0000000540)=ANY=[], 0x1, 0x125e, &(0x7f0000001280)="$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") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000001980)=0x300, 0x12) 04:39:14 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r8], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x100000002) 04:39:14 executing program 1: mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x0, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) syz_read_part_table(0x59e, &(0x7f00000017c0)="$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") (fail_nth: 12) 04:39:14 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x4a00, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x1}}], 0x1, 0x4000041) 04:39:14 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0xab31, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x1}}], 0x1, 0x4000041) [ 432.360520][T22186] loop4: detected capacity change from 0 to 8192 04:39:14 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f00000002c0)='./file0/file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) rename(&(0x7f0000000200)='./file0/file0\x00', &(0x7f00000000c0)='./file0\x00') [ 432.442815][T22190] FAULT_INJECTION: forcing a failure. [ 432.442815][T22190] name failslab, interval 1, probability 0, space 0, times 0 [ 432.455560][T22190] CPU: 0 PID: 22190 Comm: syz-executor.1 Not tainted 6.7.0-rc1-syzkaller-00125-g7475e51b8796 #0 [ 432.465976][T22190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 432.476041][T22190] Call Trace: [ 432.479361][T22190] [ 432.482302][T22190] dump_stack_lvl+0xda/0x130 [ 432.486908][T22190] dump_stack+0x15/0x20 04:39:14 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001240)='./bus\x00', 0x800000, &(0x7f0000000540)=ANY=[], 0x1, 0x125e, &(0x7f0000001280)="$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") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000001980)=0x402, 0x12) [ 432.491072][T22190] should_fail_ex+0x21f/0x230 [ 432.495764][T22190] ? __anon_vma_prepare+0x45/0x2b0 [ 432.500901][T22190] __should_failslab+0x92/0xa0 [ 432.505759][T22190] should_failslab+0x9/0x20 [ 432.510281][T22190] kmem_cache_alloc+0x4e/0x250 [ 432.515124][T22190] ? cgroup_rstat_updated+0x8c/0x1c0 [ 432.520450][T22190] __anon_vma_prepare+0x45/0x2b0 [ 432.525404][T22190] do_wp_page+0x1593/0x1f40 [ 432.529923][T22190] ? __rcu_read_lock+0x35/0x50 [ 432.534699][T22190] handle_mm_fault+0xe5d/0x2dd0 [ 432.539616][T22190] ? mt_find+0x1d9/0x310 [ 432.543915][T22190] exc_page_fault+0x2f7/0x6c0 [ 432.548638][T22190] asm_exc_page_fault+0x26/0x30 [ 432.553535][T22190] RIP: 0033:0x7fb8a5d2d643 [ 432.557951][T22190] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 432.577576][T22190] RSP: 002b:00007fb8a5103480 EFLAGS: 00010202 [ 432.583722][T22190] RAX: 00000000000001c0 RBX: 00007fb8a5103520 RCX: 00007fb89ccc3000 04:39:14 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0xcbff, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x1}}], 0x1, 0x4000041) [ 432.591773][T22190] RDX: 00007fb8a51036c0 RSI: 0000000000000001 RDI: 00007fb8a51035c0 [ 432.599758][T22190] RBP: 00000000000000bd R08: 0000000000000006 R09: 0000000000000020 [ 432.607733][T22190] R10: 0000000000000022 R11: 00007fb8a5103520 R12: 0000000000000001 [ 432.615709][T22190] R13: 00007fb8a5def5a0 R14: 0000000000000002 R15: 00007fb8a51035c0 [ 432.623830][T22190] [ 432.627035][T22190] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 432.691002][T22190] loop1: detected capacity change from 0 to 2048 04:39:14 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0xe02e, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x1}}], 0x1, 0x4000041) 04:39:14 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) (async) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async, rerun: 32) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r1}, 0x10) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000480)=ANY=[], 0x208e24b) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async, rerun: 32) r4 = socket$rxrpc(0x21, 0x2, 0xa) (async, rerun: 64) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x8946, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @remote}}}}) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r10], 0x2c}}, 0x0) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r7, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r4], 0x4}}, 0x0) (async) sendfile(r6, r5, 0x0, 0x100000002) [ 432.774997][T22202] loop4: detected capacity change from 0 to 8192 04:39:14 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f00000002c0)='./file0/file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) rename(&(0x7f0000000200)='./file0/file0\x00', &(0x7f00000000c0)='./file0\x00') 04:39:14 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0xe803, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x1}}], 0x1, 0x4000041) 04:39:14 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r1}, 0x10) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) write$binfmt_script(r2, &(0x7f0000000480)=ANY=[], 0x208e24b) (rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) r4 = socket$rxrpc(0x21, 0x2, 0xa) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x8946, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @remote}}}}) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r10], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r7, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r4], 0x4}}, 0x0) (async) sendfile(r6, r5, 0x0, 0x100000002) 04:39:14 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r8], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x100000003) 04:39:15 executing program 1: mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x0, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) syz_read_part_table(0x59e, &(0x7f00000017c0)="$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") (fail_nth: 13) 04:39:15 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001240)='./bus\x00', 0x800000, &(0x7f0000000540)=ANY=[], 0x1, 0x125e, &(0x7f0000001280)="$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") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000001980)=0x406, 0x12) 04:39:15 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0xf401, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x1}}], 0x1, 0x4000041) 04:39:15 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000089e8c54528277aaf46667e10eff95af6cf6b29a8ccd9107cc857b5031b27c56b7e6997142718c83ac2dc2517a002d875807485c91c14f011645761a000a2b0294ee3b"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r2}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000000340)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r3, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r7], 0x2c}}, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x8946, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @remote}}}}) r9 = openat(r0, &(0x7f0000000300)='./file0\x00', 0x4200, 0x13) sendmsg$BATADV_CMD_GET_GATEWAYS(r9, &(0x7f0000007680)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[], 0x4}, 0x1, 0x0, 0x0, 0x20040800}, 0x24000040) sendfile(r5, r4, 0x0, 0x100000002) 04:39:15 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f00000002c0)='./file0/file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) rename(&(0x7f0000000200)='./file0/file0\x00', &(0x7f00000000c0)='./file0\x00') 04:39:15 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0xffcb, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x1}}], 0x1, 0x4000041) [ 433.236624][T22229] loop4: detected capacity change from 0 to 8192 [ 433.358248][T22237] FAULT_INJECTION: forcing a failure. [ 433.358248][T22237] name failslab, interval 1, probability 0, space 0, times 0 [ 433.370891][T22237] CPU: 0 PID: 22237 Comm: syz-executor.1 Not tainted 6.7.0-rc1-syzkaller-00125-g7475e51b8796 #0 [ 433.381316][T22237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 433.391387][T22237] Call Trace: [ 433.394669][T22237] [ 433.397650][T22237] dump_stack_lvl+0xda/0x130 [ 433.402314][T22237] dump_stack+0x15/0x20 04:39:15 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x1000000, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x1}}], 0x1, 0x4000041) [ 433.406495][T22237] should_fail_ex+0x21f/0x230 [ 433.411205][T22237] ? __anon_vma_prepare+0xa2/0x2b0 [ 433.416326][T22237] __should_failslab+0x92/0xa0 [ 433.421111][T22237] should_failslab+0x9/0x20 [ 433.425647][T22237] kmem_cache_alloc+0x4e/0x250 [ 433.430465][T22237] __anon_vma_prepare+0xa2/0x2b0 [ 433.435415][T22237] do_wp_page+0x1593/0x1f40 [ 433.440016][T22237] ? __rcu_read_lock+0x35/0x50 [ 433.444903][T22237] handle_mm_fault+0xe5d/0x2dd0 [ 433.449789][T22237] ? mt_find+0x1d9/0x310 [ 433.454086][T22237] exc_page_fault+0x2f7/0x6c0 [ 433.458808][T22237] asm_exc_page_fault+0x26/0x30 [ 433.463663][T22237] RIP: 0033:0x7fb8a5d2d643 [ 433.468091][T22237] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 433.487832][T22237] RSP: 002b:00007fb8a5103480 EFLAGS: 00010202 [ 433.493918][T22237] RAX: 00000000000001c0 RBX: 00007fb8a5103520 RCX: 00007fb89ccc3000 04:39:15 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001240)='./bus\x00', 0x800000, &(0x7f0000000540)=ANY=[], 0x1, 0x125e, &(0x7f0000001280)="$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") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000001980)=0x500, 0x12) 04:39:15 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f00000002c0)='./file0/file0\x00', r1, 0x0, 0x0) rename(&(0x7f0000000200)='./file0/file0\x00', &(0x7f00000000c0)='./file0\x00') [ 433.501906][T22237] RDX: 00007fb8a51036c0 RSI: 0000000000000001 RDI: 00007fb8a51035c0 [ 433.509889][T22237] RBP: 00000000000000bd R08: 0000000000000006 R09: 0000000000000020 [ 433.517862][T22237] R10: 0000000000000022 R11: 00007fb8a5103520 R12: 0000000000000001 [ 433.525850][T22237] R13: 00007fb8a5def5a0 R14: 0000000000000002 R15: 00007fb8a51035c0 [ 433.533836][T22237] [ 433.537014][T22237] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF 04:39:15 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x2000000, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x1}}], 0x1, 0x4000041) [ 433.572248][T22237] loop1: detected capacity change from 0 to 2048 04:39:15 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x3000000, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x1}}], 0x1, 0x4000041) [ 433.680242][T22248] loop4: detected capacity change from 0 to 8192 04:39:15 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001240)='./bus\x00', 0x800000, &(0x7f0000000540)=ANY=[], 0x1, 0x125e, &(0x7f0000001280)="$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") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000001980)=0x600, 0x12) [ 434.014100][T22255] loop4: detected capacity change from 0 to 8192 04:39:16 executing program 1: mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x0, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) syz_read_part_table(0x59e, &(0x7f00000017c0)="$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") (fail_nth: 14) 04:39:16 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f00000002c0)='./file0/file0\x00', r1, 0x0, 0x0) rename(&(0x7f0000000200)='./file0/file0\x00', &(0x7f00000000c0)='./file0\x00') 04:39:16 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000089e8c54528277aaf46667e10eff95af6cf6b29a8ccd9107cc857b5031b27c56b7e6997142718c83ac2dc2517a002d875807485c91c14f011645761a000a2b0294ee3b"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r1}, 0x10) (async, rerun: 32) socket$netlink(0x10, 0x3, 0x0) (rerun: 32) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r2}, 0x10) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000000340)) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) write$binfmt_script(r3, &(0x7f0000000480)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async, rerun: 64) socket$rxrpc(0x21, 0x2, 0xa) (async, rerun: 64) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r7], 0x2c}}, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x8946, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @remote}}}}) (async, rerun: 64) r9 = openat(r0, &(0x7f0000000300)='./file0\x00', 0x4200, 0x13) (rerun: 64) sendmsg$BATADV_CMD_GET_GATEWAYS(r9, &(0x7f0000007680)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[], 0x4}, 0x1, 0x0, 0x0, 0x20040800}, 0x24000040) sendfile(r5, r4, 0x0, 0x100000002) 04:39:16 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x4000000, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x1}}], 0x1, 0x4000041) 04:39:16 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r8], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x100000004) 04:39:16 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001240)='./bus\x00', 0x800000, &(0x7f0000000540)=ANY=[], 0x1, 0x125e, &(0x7f0000001280)="$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") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000001980)=0x604, 0x12) 04:39:16 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000089e8c54528277aaf46667e10eff95af6cf6b29a8ccd9107cc857b5031b27c56b7e6997142718c83ac2dc2517a002d875807485c91c14f011645761a000a2b0294ee3b"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r1}, 0x10) (async) socket$netlink(0x10, 0x3, 0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r2}, 0x10) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000000340)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r3, &(0x7f0000000480)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) socket$rxrpc(0x21, 0x2, 0xa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r7], 0x2c}}, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x8946, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @remote}}}}) (async) r9 = openat(r0, &(0x7f0000000300)='./file0\x00', 0x4200, 0x13) sendmsg$BATADV_CMD_GET_GATEWAYS(r9, &(0x7f0000007680)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[], 0x4}, 0x1, 0x0, 0x0, 0x20040800}, 0x24000040) (async) sendfile(r5, r4, 0x0, 0x100000002) 04:39:16 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x7000000, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x1}}], 0x1, 0x4000041) 04:39:16 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000f9ff000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r1}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r8], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f00000002c0)=ANY=[@ANYBLOB="46040000a85bc9e4b64fe7225cef1ff65cce5ac7", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x100000002) [ 434.186869][T22262] loop4: detected capacity change from 0 to 8192 [ 434.259515][T22272] FAULT_INJECTION: forcing a failure. [ 434.259515][T22272] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 434.272887][T22272] CPU: 1 PID: 22272 Comm: syz-executor.1 Not tainted 6.7.0-rc1-syzkaller-00125-g7475e51b8796 #0 [ 434.283380][T22272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 434.293456][T22272] Call Trace: [ 434.296752][T22272] [ 434.299701][T22272] dump_stack_lvl+0xda/0x130 [ 434.304318][T22272] dump_stack+0x15/0x20 [ 434.308570][T22272] should_fail_ex+0x21f/0x230 [ 434.313420][T22272] __should_fail_alloc_page+0xfd/0x110 [ 434.318917][T22272] __alloc_pages+0x108/0x340 [ 434.323608][T22272] alloc_pages_mpol+0xb1/0x1d0 [ 434.328469][T22272] vma_alloc_folio+0x166/0x2b0 [ 434.333240][T22272] do_wp_page+0x604/0x1f40 [ 434.337749][T22272] ? __rcu_read_lock+0x35/0x50 [ 434.342532][T22272] handle_mm_fault+0xe5d/0x2dd0 [ 434.347465][T22272] ? mt_find+0x1d9/0x310 [ 434.351774][T22272] exc_page_fault+0x2f7/0x6c0 04:39:16 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001240)='./bus\x00', 0x800000, &(0x7f0000000540)=ANY=[], 0x1, 0x125e, &(0x7f0000001280)="$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") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000001980)=0xa00, 0x12) [ 434.356530][T22272] asm_exc_page_fault+0x26/0x30 [ 434.361446][T22272] RIP: 0033:0x7fb8a5d2d643 [ 434.365868][T22272] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 434.385545][T22272] RSP: 002b:00007fb8a5103480 EFLAGS: 00010202 [ 434.391633][T22272] RAX: 00000000000001c0 RBX: 00007fb8a5103520 RCX: 00007fb89ccc3000 [ 434.399617][T22272] RDX: 00007fb8a51036c0 RSI: 0000000000000001 RDI: 00007fb8a51035c0 04:39:16 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f00000002c0)='./file0/file0\x00', r1, 0x0, 0x0) rename(&(0x7f0000000200)='./file0/file0\x00', &(0x7f00000000c0)='./file0\x00') 04:39:16 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x8000000, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x1}}], 0x1, 0x4000041) [ 434.407652][T22272] RBP: 00000000000000bd R08: 0000000000000006 R09: 0000000000000020 [ 434.415636][T22272] R10: 0000000000000022 R11: 00007fb8a5103520 R12: 0000000000000001 [ 434.423675][T22272] R13: 00007fb8a5def5a0 R14: 0000000000000002 R15: 00007fb8a51035c0 [ 434.431685][T22272] [ 434.434817][T22272] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 434.451360][T22272] loop1: detected capacity change from 0 to 2048 [ 434.551549][T22289] loop4: detected capacity change from 0 to 8192 04:39:16 executing program 1: mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x0, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) syz_read_part_table(0x59e, &(0x7f00000017c0)="$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") (fail_nth: 15) 04:39:16 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0xc020000, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x1}}], 0x1, 0x4000041) 04:39:16 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001240)='./bus\x00', 0x800000, &(0x7f0000000540)=ANY=[], 0x1, 0x125e, &(0x7f0000001280)="$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") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000001980)=0xc00, 0x12) 04:39:16 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f00000002c0)='./file0/file0\x00', r1, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) rename(0x0, &(0x7f00000000c0)='./file0\x00') 04:39:16 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r8], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x100000005) 04:39:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0xf000000, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x1}}], 0x1, 0x4000041) [ 435.135585][T22297] loop4: detected capacity change from 0 to 8192 [ 435.193840][T22308] FAULT_INJECTION: forcing a failure. [ 435.193840][T22308] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 435.207220][T22308] CPU: 1 PID: 22308 Comm: syz-executor.1 Not tainted 6.7.0-rc1-syzkaller-00125-g7475e51b8796 #0 [ 435.217657][T22308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 435.227736][T22308] Call Trace: [ 435.231022][T22308] [ 435.233969][T22308] dump_stack_lvl+0xda/0x130 [ 435.238583][T22308] dump_stack+0x15/0x20 04:39:17 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f00000002c0)='./file0/file0\x00', r1, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) rename(0x0, &(0x7f00000000c0)='./file0\x00') 04:39:17 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000f9ff000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r1}, 0x10) (async, rerun: 64) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async) write$binfmt_script(r2, &(0x7f0000000480)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) r3 = socket$rxrpc(0x21, 0x2, 0xa) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r8], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f00000002c0)=ANY=[@ANYBLOB="46040000a85bc9e4b64fe7225cef1ff65cce5ac7", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x100000002) [ 435.242775][T22308] should_fail_ex+0x21f/0x230 [ 435.247520][T22308] __should_fail_alloc_page+0xfd/0x110 [ 435.253012][T22308] __alloc_pages+0x108/0x340 [ 435.257616][T22308] alloc_pages_mpol+0xb1/0x1d0 [ 435.262396][T22308] vma_alloc_folio+0x166/0x2b0 [ 435.267250][T22308] do_wp_page+0x604/0x1f40 [ 435.271734][T22308] ? cgroup_rstat_updated+0x8c/0x1c0 [ 435.277073][T22308] ? __rcu_read_lock+0x35/0x50 [ 435.281942][T22308] handle_mm_fault+0xe5d/0x2dd0 [ 435.286803][T22308] exc_page_fault+0x3ff/0x6c0 [ 435.291557][T22308] asm_exc_page_fault+0x26/0x30 [ 435.296418][T22308] RIP: 0033:0x7fb8a5d2d643 [ 435.300847][T22308] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 435.320523][T22308] RSP: 002b:00007fb8a50c1480 EFLAGS: 00010206 [ 435.326695][T22308] RAX: 00000000000ea080 RBX: 00007fb8a50c1520 RCX: 00007fb89cca2000 [ 435.334684][T22308] RDX: 00007fb8a50c16c0 RSI: 0000000000000000 RDI: 00007fb8a50c15c0 04:39:17 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001240)='./bus\x00', 0x800000, &(0x7f0000000540)=ANY=[], 0x1, 0x125e, &(0x7f0000001280)="$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") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000001980)=0xe00, 0x12) [ 435.342924][T22308] RBP: 0000000000000052 R08: 0000000000000008 R09: 000000000000009d [ 435.350947][T22308] R10: 00000000000000b4 R11: 00007fb8a50c1520 R12: 0000000000000001 [ 435.358987][T22308] R13: 00007fb8a5def5a0 R14: 00000000000000af R15: 00007fb8a50c15c0 [ 435.366967][T22308] [ 435.370955][T22308] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF 04:39:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x18020000, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x1}}], 0x1, 0x4000041) 04:39:17 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000f9ff000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r1}, 0x10) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) write$binfmt_script(r2, &(0x7f0000000480)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) r3 = socket$rxrpc(0x21, 0x2, 0xa) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r8], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f00000002c0)=ANY=[@ANYBLOB="46040000a85bc9e4b64fe7225cef1ff65cce5ac7", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r3], 0x4}}, 0x0) (async) sendfile(r5, r4, 0x0, 0x100000002) 04:39:17 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r1}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r8], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x100000002) [ 435.400152][T22308] loop1: detected capacity change from 0 to 2048 [ 435.541186][T22329] loop4: detected capacity change from 0 to 8192 04:39:17 executing program 1: mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x0, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) syz_read_part_table(0x59e, &(0x7f00000017c0)="$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") (fail_nth: 16) 04:39:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x41020000, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x1}}], 0x1, 0x4000041) 04:39:17 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f00000002c0)='./file0/file0\x00', r1, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) rename(0x0, &(0x7f00000000c0)='./file0\x00') 04:39:17 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001240)='./bus\x00', 0x800000, &(0x7f0000000540)=ANY=[], 0x1, 0x125e, &(0x7f0000001280)="$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") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000001980)=0xff6, 0x12) 04:39:17 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r8], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x100000006) 04:39:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x4a000000, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x1}}], 0x1, 0x4000041) [ 435.997951][T22336] loop4: detected capacity change from 0 to 8192 04:39:18 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) (async) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r1}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) write$binfmt_script(r2, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r8], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r3], 0x4}}, 0x0) (async) sendfile(r5, r4, 0x0, 0x100000002) 04:39:18 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x71e3f478, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x1}}], 0x1, 0x4000041) 04:39:18 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001240)='./bus\x00', 0x800000, &(0x7f0000000540)=ANY=[], 0x1, 0x125e, &(0x7f0000001280)="$eJzs3U9rI2UcB/Bf2vRf1jZV19VdEB/0oghx24MnL0V2QSwo1S6oIMzaVEPTpDShEBG3njwJvgxRj94E8Q304sWzIIj04nEPYqSdoJs26eK2TRf5fC55eGa+zzN/mIEJ82P2X/lyc2O9VVnP2jFWKERxayKKd1OkGIvxyO3GC7d+/uXpt9559/Wl5eUbKyndXHp74eWU0twzP7z3ybfP/ti+dOu7ue+nYm/+/f0/Fn/du7J3df+vb6LWSrVWajTbKUu3m812drteTWu11kYlpTfr1axVTbVGq7rdt3y93tza6qSssTZb2tqutlopa3TSRrWT2oXU3u6k7MOs1kiVSiXNloLTWP36brfbjeh2J2Iyut1udyZKcSkeidmYi3LMx6PxWDwel+OJuBJPxlNx9XCti95uAAAAAAAAAAAAAAAAAAAA+H+5T/1/Qf0/AAAAAAAAAAAAAAAAAAAAnL+j9f/FCN//BwAAAAAAAAAAAAAAAAAAgBG7z/f/j9T/v6j+HwAAAAAAAAAAAAAAAAAAAM7DdP6zktJ0xObnO6s7q/lv3r+0HrWoRzWuRzn+jMPq/1zevvna8o3r6dB8vLR5p5e/s7M63p9fiHLMFwbmF/J86s9PRene/GKU4/Lg+RcH5qfj+ecO8p/l+UqU46cPohn1WIso9Pb+MP/pQkqvvrE805+/drDeUOPnfFoAAADgLFXSPwY+v1cqw5bn+d7zeeoNVzjh/4Ejz+fFuFa8uP0m1+p8vJHV69XtB2xMDh9n8nQjH2sUIqK/Z67028rB5Gc2xYM2xkc66cTJ65zinEbxITiYZ9D4/at7eqZjtLOP9S6JrL4bEQ/B0Rh6MU6dlBp+zyiM4L7EaPx70i96SwAAAAAAAAAAAPgvBr79NxMRx94H/OhYz25vjP748ZGHz/7FCPYQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+JsdOBYAAAAAEOZvnUbHBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfBUAAP//Q97RDA==") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000001980)=0x1200, 0x12) [ 436.093641][T22340] FAULT_INJECTION: forcing a failure. [ 436.093641][T22340] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 436.107042][T22340] CPU: 1 PID: 22340 Comm: syz-executor.1 Not tainted 6.7.0-rc1-syzkaller-00125-g7475e51b8796 #0 [ 436.117464][T22340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 436.127538][T22340] Call Trace: [ 436.130830][T22340] [ 436.133767][T22340] dump_stack_lvl+0xda/0x130 [ 436.138393][T22340] dump_stack+0x15/0x20 [ 436.142608][T22340] should_fail_ex+0x21f/0x230 [ 436.147398][T22340] __should_fail_alloc_page+0xfd/0x110 [ 436.152961][T22340] __alloc_pages+0x108/0x340 [ 436.157565][T22340] alloc_pages_mpol+0xb1/0x1d0 [ 436.162409][T22340] vma_alloc_folio+0x166/0x2b0 [ 436.167238][T22340] do_wp_page+0x604/0x1f40 [ 436.171718][T22340] ? cgroup_rstat_updated+0x8c/0x1c0 [ 436.177023][T22340] ? __rcu_read_lock+0x35/0x50 [ 436.181795][T22340] handle_mm_fault+0xe5d/0x2dd0 [ 436.186661][T22340] exc_page_fault+0x3ff/0x6c0 [ 436.191441][T22340] asm_exc_page_fault+0x26/0x30 [ 436.196302][T22340] RIP: 0033:0x7fb8a5d2d643 [ 436.200747][T22340] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 436.215600][T22349] loop4: detected capacity change from 0 to 8192 [ 436.220347][T22340] RSP: 002b:00007fb8a5103480 EFLAGS: 00010202 [ 436.220365][T22340] RAX: 00000000000ffe00 RBX: 00007fb8a5103520 RCX: 00007fb89ccc3000 [ 436.220377][T22340] RDX: 00007fb8a51036c0 RSI: 0000000000000003 RDI: 00007fb8a51035c0 [ 436.220389][T22340] RBP: 0000000000000027 R08: 0000000000000007 R09: 000000000000003e [ 436.220400][T22340] R10: 0000000000000048 R11: 00007fb8a5103520 R12: 0000000000000001 [ 436.220411][T22340] R13: 00007fb8a5def5a0 R14: 0000000000000045 R15: 00007fb8a51035c0 [ 436.220427][T22340] [ 436.221137][T22340] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF 04:39:18 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001240)='./bus\x00', 0x800000, &(0x7f0000000540)=ANY=[], 0x1, 0x125e, &(0x7f0000001280)="$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") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000001980)=0x8008, 0x12) 04:39:18 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f00000002c0)='./file0/file0\x00', r1, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) rename(&(0x7f0000000200)='./file0/file0\x00', 0x0) [ 436.350419][T22340] loop1: detected capacity change from 0 to 2048 04:39:18 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x78f4e371, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x1}}], 0x1, 0x4000041) [ 436.496079][T22357] loop4: detected capacity change from 0 to 8192 04:39:18 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001240)='./bus\x00', 0x800000, &(0x7f0000000540)=ANY=[], 0x1, 0x125e, &(0x7f0000001280)="$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") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000001980)=0xf60f, 0x12) 04:39:18 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x91ffffff, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x1}}], 0x1, 0x4000041) 04:39:18 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f00000002c0)='./file0/file0\x00', r1, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) rename(&(0x7f0000000200)='./file0/file0\x00', 0x0) 04:39:18 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r8], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x100000007) 04:39:18 executing program 1: mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x0, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) syz_read_part_table(0x59e, &(0x7f00000017c0)="$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") (fail_nth: 17) 04:39:18 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r1}, 0x10) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000480)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async, rerun: 64) r3 = socket$rxrpc(0x21, 0x2, 0xa) (async, rerun: 64) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r8], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r3], 0x4}}, 0x0) (async) sendfile(r5, r4, 0x0, 0x100000002) 04:39:18 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0xab310000, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x1}}], 0x1, 0x4000041) 04:39:18 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r1}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r8], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff83050000070000ffff", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x100000002) [ 436.870860][T22367] loop4: detected capacity change from 0 to 8192 [ 436.982271][T22389] FAULT_INJECTION: forcing a failure. [ 436.982271][T22389] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 436.995630][T22389] CPU: 0 PID: 22389 Comm: syz-executor.1 Not tainted 6.7.0-rc1-syzkaller-00125-g7475e51b8796 #0 [ 437.006065][T22389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 437.016193][T22389] Call Trace: [ 437.019480][T22389] [ 437.022415][T22389] dump_stack_lvl+0xda/0x130 [ 437.027024][T22389] dump_stack+0x15/0x20 [ 437.031249][T22389] should_fail_ex+0x21f/0x230 [ 437.036019][T22389] __should_fail_alloc_page+0xfd/0x110 [ 437.041532][T22389] __alloc_pages+0x108/0x340 [ 437.046150][T22389] alloc_pages_mpol+0xb1/0x1d0 [ 437.051022][T22389] shmem_get_folio_gfp+0x3b2/0xb40 [ 437.056157][T22389] shmem_write_begin+0xa0/0x1b0 [ 437.061047][T22389] generic_perform_write+0x1c9/0x410 [ 437.066434][T22389] shmem_file_write_iter+0xc8/0xe0 [ 437.071597][T22389] vfs_write+0x48a/0x790 [ 437.075861][T22389] ksys_write+0xeb/0x1a0 04:39:18 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0xcbff0000, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x1}}], 0x1, 0x4000041) 04:39:19 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001240)='./bus\x00', 0x800000, &(0x7f0000000540)=ANY=[], 0x1, 0x125e, &(0x7f0000001280)="$eJzs3U9rI2UcB/Bf2vRf1jZV19VdEB/0oghx24MnL0V2QSwo1S6oIMzaVEPTpDShEBG3njwJvgxRj94E8Q304sWzIIj04nEPYqSdoJs26eK2TRf5fC55eGa+zzN/mIEJ82P2X/lyc2O9VVnP2jFWKERxayKKd1OkGIvxyO3GC7d+/uXpt9559/Wl5eUbKyndXHp74eWU0twzP7z3ybfP/ti+dOu7ue+nYm/+/f0/Fn/du7J3df+vb6LWSrVWajTbKUu3m812drteTWu11kYlpTfr1axVTbVGq7rdt3y93tza6qSssTZb2tqutlopa3TSRrWT2oXU3u6k7MOs1kiVSiXNloLTWP36brfbjeh2J2Iyut1udyZKcSkeidmYi3LMx6PxWDwel+OJuBJPxlNx9XCti95uAAAAAAAAAAAAAAAAAAAA+H+5T/1/Qf0/AAAAAAAAAAAAAAAAAAAAnL+j9f/FCN//BwAAAAAAAAAAAAAAAAAAgBG7z/f/j9T/v6j+HwAAAAAAAAAAAAAAAAAAAM7DdP6zktJ0xObnO6s7q/lv3r+0HrWoRzWuRzn+jMPq/1zevvna8o3r6dB8vLR5p5e/s7M63p9fiHLMFwbmF/J86s9PRene/GKU4/Lg+RcH5qfj+ecO8p/l+UqU46cPohn1WIso9Pb+MP/pQkqvvrE805+/drDeUOPnfFoAAADgLFXSPwY+v1cqw5bn+d7zeeoNVzjh/4Ejz+fFuFa8uP0m1+p8vJHV69XtB2xMDh9n8nQjH2sUIqK/Z67028rB5Gc2xYM2xkc66cTJ65zinEbxITiYZ9D4/at7eqZjtLOP9S6JrL4bEQ/B0Rh6MU6dlBp+zyiM4L7EaPx70i96SwAAAAAAAAAAAPgvBr79NxMRx94H/OhYz25vjP748ZGHz/7FCPYQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+JsdOBYAAAAAEOZvnUbHBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfBUAAP//Q97RDA==") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000001980)=0x20000, 0x12) 04:39:19 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f00000002c0)='./file0/file0\x00', r1, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) rename(&(0x7f0000000200)='./file0/file0\x00', 0x0) [ 437.080153][T22389] __x64_sys_write+0x42/0x50 [ 437.084793][T22389] do_syscall_64+0x44/0x110 [ 437.089396][T22389] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 437.095352][T22389] RIP: 0033:0x7fb8a5d8082f [ 437.099774][T22389] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 437.119399][T22389] RSP: 002b:00007fb8a50c1dd0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 437.127879][T22389] RAX: ffffffffffffffda RBX: 0000000000100000 RCX: 00007fb8a5d8082f [ 437.135940][T22389] RDX: 0000000000100000 RSI: 00007fb89cca2000 RDI: 0000000000000006 [ 437.143926][T22389] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000598 [ 437.151904][T22389] R10: 00000000000003ec R11: 0000000000000293 R12: 0000000000000006 [ 437.159885][T22389] R13: 00007fb8a50c1e7c R14: 00007fb8a50c1e80 R15: 00007fb89cca2000 [ 437.167961][T22389] 04:39:19 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0xd7ffffff, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x1}}], 0x1, 0x4000041) [ 437.281665][T22395] loop4: detected capacity change from 0 to 8192 04:39:19 executing program 1: mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x0, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) syz_read_part_table(0x59e, &(0x7f00000017c0)="$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") (fail_nth: 18) 04:39:19 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001240)='./bus\x00', 0x800000, &(0x7f0000000540)=ANY=[], 0x1, 0x125e, &(0x7f0000001280)="$eJzs3U9rI2UcB/Bf2vRf1jZV19VdEB/0oghx24MnL0V2QSwo1S6oIMzaVEPTpDShEBG3njwJvgxRj94E8Q304sWzIIj04nEPYqSdoJs26eK2TRf5fC55eGa+zzN/mIEJ82P2X/lyc2O9VVnP2jFWKERxayKKd1OkGIvxyO3GC7d+/uXpt9559/Wl5eUbKyndXHp74eWU0twzP7z3ybfP/ti+dOu7ue+nYm/+/f0/Fn/du7J3df+vb6LWSrVWajTbKUu3m812drteTWu11kYlpTfr1axVTbVGq7rdt3y93tza6qSssTZb2tqutlopa3TSRrWT2oXU3u6k7MOs1kiVSiXNloLTWP36brfbjeh2J2Iyut1udyZKcSkeidmYi3LMx6PxWDwel+OJuBJPxlNx9XCti95uAAAAAAAAAAAAAAAAAAAA+H+5T/1/Qf0/AAAAAAAAAAAAAAAAAAAAnL+j9f/FCN//BwAAAAAAAAAAAAAAAAAAgBG7z/f/j9T/v6j+HwAAAAAAAAAAAAAAAAAAAM7DdP6zktJ0xObnO6s7q/lv3r+0HrWoRzWuRzn+jMPq/1zevvna8o3r6dB8vLR5p5e/s7M63p9fiHLMFwbmF/J86s9PRene/GKU4/Lg+RcH5qfj+ecO8p/l+UqU46cPohn1WIso9Pb+MP/pQkqvvrE805+/drDeUOPnfFoAAADgLFXSPwY+v1cqw5bn+d7zeeoNVzjh/4Ejz+fFuFa8uP0m1+p8vJHV69XtB2xMDh9n8nQjH2sUIqK/Z67028rB5Gc2xYM2xkc66cTJ65zinEbxITiYZ9D4/at7eqZjtLOP9S6JrL4bEQ/B0Rh6MU6dlBp+zyiM4L7EaPx70i96SwAAAAAAAAAAAPgvBr79NxMRx94H/OhYz25vjP748ZGHz/7FCPYQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+JsdOBYAAAAAEOZvnUbHBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfBUAAP//Q97RDA==") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000001980)=0x40000, 0x12) 04:39:19 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0xe02e0000, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x1}}], 0x1, 0x4000041) 04:39:19 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETS(r0, 0x540a, 0x0) 04:39:19 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r8], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x100000008) 04:39:19 executing program 0: getgroups(0x2, &(0x7f0000000380)=[0xee00, 0xee00]) 04:39:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x4813) [ 437.754943][T22404] loop4: detected capacity change from 0 to 8192 [ 437.839817][T22410] FAULT_INJECTION: forcing a failure. [ 437.839817][T22410] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 437.852930][T22410] CPU: 1 PID: 22410 Comm: syz-executor.1 Not tainted 6.7.0-rc1-syzkaller-00125-g7475e51b8796 #0 [ 437.863348][T22410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 437.873754][T22410] Call Trace: [ 437.877018][T22410] [ 437.879933][T22410] dump_stack_lvl+0xda/0x130 [ 437.884589][T22410] dump_stack+0x15/0x20 [ 437.888805][T22410] should_fail_ex+0x21f/0x230 [ 437.893487][T22410] should_fail+0xb/0x10 [ 437.897661][T22410] should_fail_usercopy+0x1a/0x20 [ 437.902780][T22410] copy_page_from_iter_atomic+0x237/0xd80 [ 437.908504][T22410] ? shmem_write_begin+0xa0/0x1b0 [ 437.913536][T22410] ? shmem_write_begin+0x10c/0x1b0 [ 437.918649][T22410] generic_perform_write+0x20c/0x410 [ 437.924026][T22410] shmem_file_write_iter+0xc8/0xe0 [ 437.929164][T22410] vfs_write+0x48a/0x790 [ 437.933439][T22410] ksys_write+0xeb/0x1a0 [ 437.937741][T22410] __x64_sys_write+0x42/0x50 [ 437.942328][T22410] do_syscall_64+0x44/0x110 [ 437.946890][T22410] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 437.952845][T22410] RIP: 0033:0x7fb8a5d8082f [ 437.957248][T22410] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 437.976860][T22410] RSP: 002b:00007fb8a5103dd0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 04:39:20 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r1}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r8], 0x2c}}, 0x0) (async) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r8], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff83050000070000ffff", @ANYRES32=r3], 0x4}}, 0x0) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff83050000070000ffff", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x100000002) 04:39:20 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x7, 0xa, 0x801}, 0x14}}, 0x0) 04:39:20 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0xe8030000, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x1}}], 0x1, 0x4000041) 04:39:20 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001240)='./bus\x00', 0x800000, &(0x7f0000000540)=ANY=[], 0x1, 0x125e, &(0x7f0000001280)="$eJzs3U9rI2UcB/Bf2vRf1jZV19VdEB/0oghx24MnL0V2QSwo1S6oIMzaVEPTpDShEBG3njwJvgxRj94E8Q304sWzIIj04nEPYqSdoJs26eK2TRf5fC55eGa+zzN/mIEJ82P2X/lyc2O9VVnP2jFWKERxayKKd1OkGIvxyO3GC7d+/uXpt9559/Wl5eUbKyndXHp74eWU0twzP7z3ybfP/ti+dOu7ue+nYm/+/f0/Fn/du7J3df+vb6LWSrVWajTbKUu3m812drteTWu11kYlpTfr1axVTbVGq7rdt3y93tza6qSssTZb2tqutlopa3TSRrWT2oXU3u6k7MOs1kiVSiXNloLTWP36brfbjeh2J2Iyut1udyZKcSkeidmYi3LMx6PxWDwel+OJuBJPxlNx9XCti95uAAAAAAAAAAAAAAAAAAAA+H+5T/1/Qf0/AAAAAAAAAAAAAAAAAAAAnL+j9f/FCN//BwAAAAAAAAAAAAAAAAAAgBG7z/f/j9T/v6j+HwAAAAAAAAAAAAAAAAAAAM7DdP6zktJ0xObnO6s7q/lv3r+0HrWoRzWuRzn+jMPq/1zevvna8o3r6dB8vLR5p5e/s7M63p9fiHLMFwbmF/J86s9PRene/GKU4/Lg+RcH5qfj+ecO8p/l+UqU46cPohn1WIso9Pb+MP/pQkqvvrE805+/drDeUOPnfFoAAADgLFXSPwY+v1cqw5bn+d7zeeoNVzjh/4Ejz+fFuFa8uP0m1+p8vJHV69XtB2xMDh9n8nQjH2sUIqK/Z67028rB5Gc2xYM2xkc66cTJ65zinEbxITiYZ9D4/at7eqZjtLOP9S6JrL4bEQ/B0Rh6MU6dlBp+zyiM4L7EaPx70i96SwAAAAAAAAAAAPgvBr79NxMRx94H/OhYz25vjP748ZGHz/7FCPYQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+JsdOBYAAAAAEOZvnUbHBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfBUAAP//Q97RDA==") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000001980)=0x60000, 0x12) [ 437.985336][T22410] RAX: ffffffffffffffda RBX: 0000000000100000 RCX: 00007fb8a5d8082f [ 437.993333][T22410] RDX: 0000000000100000 RSI: 00007fb89ccc3000 RDI: 0000000000000006 [ 438.001335][T22410] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000598 [ 438.009295][T22410] R10: 00000000000003ec R11: 0000000000000293 R12: 0000000000000006 [ 438.017327][T22410] R13: 00007fb8a5103e7c R14: 00007fb8a5103e80 R15: 00007fb89ccc3000 [ 438.025376][T22410] 04:39:20 executing program 0: getresgid(&(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)) [ 438.089676][T22410] loop1: detected capacity change from 0 to 2048 [ 438.119563][T22419] loop4: detected capacity change from 0 to 8192 04:39:20 executing program 1: mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x0, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) syz_read_part_table(0x59e, &(0x7f00000017c0)="$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") (fail_nth: 19) 04:39:20 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) recvmmsg$unix(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12000, 0x0) 04:39:20 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0xf4010000, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x1}}], 0x1, 0x4000041) 04:39:20 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001240)='./bus\x00', 0x800000, &(0x7f0000000540)=ANY=[], 0x1, 0x125e, &(0x7f0000001280)="$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") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000001980)=0x80000, 0x12) 04:39:20 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r8], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x10000000b) 04:39:20 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0xffffff7f, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x1}}], 0x1, 0x4000041) [ 438.607933][T22438] loop4: detected capacity change from 0 to 8192 04:39:20 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001240)='./bus\x00', 0x800000, &(0x7f0000000540)=ANY=[], 0x1, 0x125e, &(0x7f0000001280)="$eJzs3U9rI2UcB/Bf2vRf1jZV19VdEB/0oghx24MnL0V2QSwo1S6oIMzaVEPTpDShEBG3njwJvgxRj94E8Q304sWzIIj04nEPYqSdoJs26eK2TRf5fC55eGa+zzN/mIEJ82P2X/lyc2O9VVnP2jFWKERxayKKd1OkGIvxyO3GC7d+/uXpt9559/Wl5eUbKyndXHp74eWU0twzP7z3ybfP/ti+dOu7ue+nYm/+/f0/Fn/du7J3df+vb6LWSrVWajTbKUu3m812drteTWu11kYlpTfr1axVTbVGq7rdt3y93tza6qSssTZb2tqutlopa3TSRrWT2oXU3u6k7MOs1kiVSiXNloLTWP36brfbjeh2J2Iyut1udyZKcSkeidmYi3LMx6PxWDwel+OJuBJPxlNx9XCti95uAAAAAAAAAAAAAAAAAAAA+H+5T/1/Qf0/AAAAAAAAAAAAAAAAAAAAnL+j9f/FCN//BwAAAAAAAAAAAAAAAAAAgBG7z/f/j9T/v6j+HwAAAAAAAAAAAAAAAAAAAM7DdP6zktJ0xObnO6s7q/lv3r+0HrWoRzWuRzn+jMPq/1zevvna8o3r6dB8vLR5p5e/s7M63p9fiHLMFwbmF/J86s9PRene/GKU4/Lg+RcH5qfj+ecO8p/l+UqU46cPohn1WIso9Pb+MP/pQkqvvrE805+/drDeUOPnfFoAAADgLFXSPwY+v1cqw5bn+d7zeeoNVzjh/4Ejz+fFuFa8uP0m1+p8vJHV69XtB2xMDh9n8nQjH2sUIqK/Z67028rB5Gc2xYM2xkc66cTJ65zinEbxITiYZ9D4/at7eqZjtLOP9S6JrL4bEQ/B0Rh6MU6dlBp+zyiM4L7EaPx70i96SwAAAAAAAAAAAPgvBr79NxMRx94H/OhYz25vjP748ZGHz/7FCPYQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+JsdOBYAAAAAEOZvnUbHBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfBUAAP//Q97RDA==") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000001980)=0xa0000, 0x12) 04:39:20 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r1}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000480)=ANY=[], 0x208e24b) (async) write$binfmt_script(r2, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r8], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff83050000070000ffff", @ANYRES32=r3], 0x4}}, 0x0) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff83050000070000ffff", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x100000002) (async) sendfile(r5, r4, 0x0, 0x100000002) 04:39:20 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0xffffff91, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x1}}], 0x1, 0x4000041) [ 438.768101][T22441] FAULT_INJECTION: forcing a failure. [ 438.768101][T22441] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 438.781386][T22441] CPU: 0 PID: 22441 Comm: syz-executor.1 Not tainted 6.7.0-rc1-syzkaller-00125-g7475e51b8796 #0 [ 438.791816][T22441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 438.801877][T22441] Call Trace: [ 438.805166][T22441] [ 438.808144][T22441] dump_stack_lvl+0xda/0x130 [ 438.812748][T22441] dump_stack+0x15/0x20 [ 438.816915][T22441] should_fail_ex+0x21f/0x230 [ 438.821651][T22441] __should_fail_alloc_page+0xfd/0x110 [ 438.825436][T22447] loop4: detected capacity change from 0 to 8192 [ 438.827116][T22441] __alloc_pages+0x108/0x340 [ 438.838122][T22441] alloc_pages_mpol+0xb1/0x1d0 [ 438.842905][T22441] shmem_get_folio_gfp+0x3b2/0xb40 [ 438.848072][T22441] shmem_write_begin+0xa0/0x1b0 [ 438.852940][T22441] generic_perform_write+0x1c9/0x410 [ 438.858243][T22441] ? shmem_write_begin+0x1b0/0x1b0 [ 438.863522][T22441] shmem_file_write_iter+0xc8/0xe0 [ 438.868724][T22441] vfs_write+0x48a/0x790 [ 438.873009][T22441] ksys_write+0xeb/0x1a0 [ 438.877254][T22441] __x64_sys_write+0x42/0x50 [ 438.881902][T22441] do_syscall_64+0x44/0x110 [ 438.886407][T22441] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 438.892463][T22441] RIP: 0033:0x7fb8a5d8082f [ 438.896905][T22441] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 438.916512][T22441] RSP: 002b:00007fb8a5103dd0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 438.924913][T22441] RAX: ffffffffffffffda RBX: 0000000000100000 RCX: 00007fb8a5d8082f [ 438.932872][T22441] RDX: 0000000000100000 RSI: 00007fb89ccc3000 RDI: 0000000000000006 [ 438.940831][T22441] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000598 [ 438.948865][T22441] R10: 00000000000003ec R11: 0000000000000293 R12: 0000000000000006 [ 438.956899][T22441] R13: 00007fb8a5103e7c R14: 00007fb8a5103e80 R15: 00007fb89ccc3000 [ 438.964939][T22441] 04:39:20 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001240)='./bus\x00', 0x800000, &(0x7f0000000540)=ANY=[], 0x1, 0x125e, &(0x7f0000001280)="$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") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000001980)=0xc0000, 0x12) 04:39:20 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0xffffffd7, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x1}}], 0x1, 0x4000041) 04:39:21 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r1}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$inet(r2, &(0x7f0000000340)={&(0x7f00000002c0)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000400)="dfc1a251eb83a38c7ab8e0e01dcde8cdbd6fdc3bfce668c9fefea92d32a2a2b0569f4dc7d54dfa3963c469a0f56ed5680adcf3da5169a96e2f20146ded854311fd4dee3ecd01f1ae42500b7d7a192278c2b9706976d84c1776124caee7d1b50c961790ebebab5b69d175dd3019710b8bf0a8fae67aec81fc35d56b07c2cc49af69049454c85da60c126c52f76aa8a1ea8244bf0811c394f9eace41fb4fc022f3", 0xa0}, {&(0x7f00000004c0)="5e3b53a3bc50be6accfae0fe985a620b0ca082b0424ca85805fcb1a3e96d0a2563a6f5c93bc45093bbdad1bac030c92351fbf8e4b6158c02a25eec33f1d0fdce4eaf7483e48e934f318189ea7a34bc543d27fa5ce4fbe2b76a00b871c72af42e9a14f724e4579547d8a9b2943fcbe255918de8afab84e7375ff1479368db9ad7edf933cc3fd760944b581b", 0x8b}, {&(0x7f00000005c0)="3ee77fef5a849a6c22b936f0b6be4a2a09e5b5fada4fd06f49a35350a945b98f45b4f98a55d1943bbc85367f5c94c0c91dd09e859a8c4a413c05c51018685e6860fb473bd2ceb758f16b39ff7338283c98b4f9b8af61c31765417706a72fd71d3f31dc067a3093d1404057a335f7cd303aaaf341ca70533368016459567b0c1001e253371f611f80e34bd80e179c4a8dcbe2eb02aba6f8c33b035466deac5bae100adce44c2f712d4a691c5611c0e2d1034e1411f49c11096416d461b669e32dde1239cad699546350b9f44ec1bbeb84040d", 0xd2}], 0x3}, 0x4044004) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r8], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x100000002) [ 439.145020][T22459] loop4: detected capacity change from 0 to 8192 04:39:21 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001240)='./bus\x00', 0x800000, &(0x7f0000000540)=ANY=[], 0x1, 0x125e, &(0x7f0000001280)="$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") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000001980)=0xe0000, 0x12) 04:39:21 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)="f8", 0x1}], 0x1}}], 0x1, 0x4000041) 04:39:21 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', 0x0}) 04:39:21 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r8], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x10000000c) 04:39:21 executing program 1: mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x0, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) syz_read_part_table(0x59e, &(0x7f00000017c0)="$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") (fail_nth: 20) 04:39:21 executing program 0: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000c80)={@map, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 04:39:21 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x2}], 0x1}}], 0x1, 0x4000041) 04:39:21 executing program 0: dup(0xffffffffffffffff) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000600)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(r2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$unix(r2, &(0x7f0000000380)=[{{&(0x7f0000000580)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000240)="8d591a064dc9ea4ec1e30a15a3ed9ec58a8573f3273ff4dca83bc091da901005411b4a0cc39c8351ac3c78595d536562213f1a08baed54060e", 0x39}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="14000000000000000100000001000000149dfc91e2ece4ed52b3b9aead54a71e587327e93070b08030c6cc1486757230a6cab88fab75179ea4fb7be82d3aaa7dc2471b9860", @ANYRES32=r1, @ANYRES32=r1], 0x18, 0x20000000}}], 0x1, 0x4000000) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYRES8, @ANYBLOB="5d870c31f4d719a0db2f1e80097387bdf3029e0dea000000000000fc896a8f3f08577f9f1a0c2da75c9f243ad3ca91de42113f532eea2da662c1000000000000", @ANYRESDEC=r4], 0x28}}, 0x4040815) sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000440)={0x68, 0x10, 0x1, 0x70bd25, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @generic="deef1ba7d2d108692c7efa1a26edac8b7681e5ce6ef606dfa0d34754277682953d5fb6cf4c0211219cdb206cc68610e706"]}, 0x68}], 0x1}, 0x0) process_vm_readv(r0, &(0x7f0000001d80)=[{&(0x7f0000000980)=""/185, 0xb9}, {&(0x7f0000000740)=""/11, 0xb}, {&(0x7f0000001e80)=""/210, 0xd2}, {&(0x7f0000000b40)=""/189, 0xbd}, {&(0x7f0000001e40)=""/63, 0x3f}, {&(0x7f0000000c00)=""/64, 0x40}, {&(0x7f0000000c40)=""/224, 0xe0}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/34, 0x22}], 0x9, 0x0, 0x0, 0x0) 04:39:21 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x3}], 0x1}}], 0x1, 0x4000041) [ 439.583121][T22471] loop4: detected capacity change from 0 to 8192 04:39:21 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001240)='./bus\x00', 0x800000, &(0x7f0000000540)=ANY=[], 0x1, 0x125e, &(0x7f0000001280)="$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") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000001980)=0x100000, 0x12) [ 439.644590][T22475] loop1: detected capacity change from 0 to 2048 04:39:21 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x4}], 0x1}}], 0x1, 0x4000041) [ 439.713906][T22488] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 439.722124][T22488] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'. [ 439.781108][T22490] loop4: detected capacity change from 0 to 8192 [ 440.404603][T22488] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 440.436574][T22488] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 440.628706][T22488] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.638186][T22488] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.647106][T22488] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.655977][T22488] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 04:39:22 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) (async) socket$netlink(0x10, 0x3, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r1}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) write$binfmt_script(r2, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) sendmsg$inet(r2, &(0x7f0000000340)={&(0x7f00000002c0)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000400)="dfc1a251eb83a38c7ab8e0e01dcde8cdbd6fdc3bfce668c9fefea92d32a2a2b0569f4dc7d54dfa3963c469a0f56ed5680adcf3da5169a96e2f20146ded854311fd4dee3ecd01f1ae42500b7d7a192278c2b9706976d84c1776124caee7d1b50c961790ebebab5b69d175dd3019710b8bf0a8fae67aec81fc35d56b07c2cc49af69049454c85da60c126c52f76aa8a1ea8244bf0811c394f9eace41fb4fc022f3", 0xa0}, {&(0x7f00000004c0)="5e3b53a3bc50be6accfae0fe985a620b0ca082b0424ca85805fcb1a3e96d0a2563a6f5c93bc45093bbdad1bac030c92351fbf8e4b6158c02a25eec33f1d0fdce4eaf7483e48e934f318189ea7a34bc543d27fa5ce4fbe2b76a00b871c72af42e9a14f724e4579547d8a9b2943fcbe255918de8afab84e7375ff1479368db9ad7edf933cc3fd760944b581b", 0x8b}, {&(0x7f00000005c0)="3ee77fef5a849a6c22b936f0b6be4a2a09e5b5fada4fd06f49a35350a945b98f45b4f98a55d1943bbc85367f5c94c0c91dd09e859a8c4a413c05c51018685e6860fb473bd2ceb758f16b39ff7338283c98b4f9b8af61c31765417706a72fd71d3f31dc067a3093d1404057a335f7cd303aaaf341ca70533368016459567b0c1001e253371f611f80e34bd80e179c4a8dcbe2eb02aba6f8c33b035466deac5bae100adce44c2f712d4a691c5611c0e2d1034e1411f49c11096416d461b669e32dde1239cad699546350b9f44ec1bbeb84040d", 0xd2}], 0x3}, 0x4044004) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r8], 0x2c}}, 0x0) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x100000002) 04:39:22 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001240)='./bus\x00', 0x800000, &(0x7f0000000540)=ANY=[], 0x1, 0x125e, &(0x7f0000001280)="$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") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000001980)=0x1000000, 0x12) 04:39:22 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x5}], 0x1}}], 0x1, 0x4000041) 04:39:22 executing program 1: mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x0, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) syz_read_part_table(0x59e, &(0x7f00000017c0)="$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") (fail_nth: 21) 04:39:22 executing program 0: pipe2$watch_queue(&(0x7f0000007680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) connect$nfc_llcp(r0, 0x0, 0xfffffffffffffc37) 04:39:22 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r8], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x10000000d) 04:39:22 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, &(0x7f0000000080)) 04:39:22 executing program 0: bpf$BPF_PROG_QUERY(0x1e, &(0x7f0000000c80)={@map, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 04:39:22 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001540)={0x4, 0x20000011, &(0x7f00000001c0)=@raw=[@alu], 0x0}, 0x90) 04:39:22 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x7}], 0x1}}], 0x1, 0x4000041) [ 440.873331][T22498] loop4: detected capacity change from 0 to 8192 [ 440.937337][T22503] FAULT_INJECTION: forcing a failure. [ 440.937337][T22503] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 440.950671][T22503] CPU: 0 PID: 22503 Comm: syz-executor.1 Not tainted 6.7.0-rc1-syzkaller-00125-g7475e51b8796 #0 [ 440.961129][T22503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 440.971304][T22503] Call Trace: [ 440.974582][T22503] [ 440.977514][T22503] dump_stack_lvl+0xda/0x130 [ 440.982124][T22503] dump_stack+0x15/0x20 04:39:22 executing program 0: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000c80)={@map, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 04:39:22 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001240)='./bus\x00', 0x800000, &(0x7f0000000540)=ANY=[], 0x1, 0x125e, &(0x7f0000001280)="$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") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000001980)=0x2000000, 0x12) [ 440.986356][T22503] should_fail_ex+0x21f/0x230 [ 440.991112][T22503] should_fail+0xb/0x10 [ 440.995338][T22503] should_fail_usercopy+0x1a/0x20 [ 441.000380][T22503] copy_page_from_iter_atomic+0x237/0xd80 [ 441.006236][T22503] ? shmem_write_begin+0xa0/0x1b0 [ 441.011308][T22503] ? shmem_write_begin+0x10c/0x1b0 [ 441.016451][T22503] generic_perform_write+0x20c/0x410 [ 441.021760][T22503] ? shmem_write_begin+0x1b0/0x1b0 [ 441.026897][T22503] shmem_file_write_iter+0xc8/0xe0 [ 441.032022][T22503] vfs_write+0x48a/0x790 [ 441.036288][T22503] ksys_write+0xeb/0x1a0 [ 441.040556][T22503] __x64_sys_write+0x42/0x50 [ 441.045222][T22503] do_syscall_64+0x44/0x110 [ 441.049728][T22503] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 441.055720][T22503] RIP: 0033:0x7fb8a5d8082f [ 441.060131][T22503] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 441.079832][T22503] RSP: 002b:00007fb8a5103dd0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 441.088338][T22503] RAX: ffffffffffffffda RBX: 0000000000100000 RCX: 00007fb8a5d8082f [ 441.096302][T22503] RDX: 0000000000100000 RSI: 00007fb89ccc3000 RDI: 0000000000000006 [ 441.104405][T22503] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000598 [ 441.112400][T22503] R10: 00000000000003ec R11: 0000000000000293 R12: 0000000000000006 [ 441.120376][T22503] R13: 00007fb8a5103e7c R14: 00007fb8a5103e80 R15: 00007fb89ccc3000 [ 441.128381][T22503] 04:39:23 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r1}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r1}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$inet(r2, &(0x7f0000000340)={&(0x7f00000002c0)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000400)="dfc1a251eb83a38c7ab8e0e01dcde8cdbd6fdc3bfce668c9fefea92d32a2a2b0569f4dc7d54dfa3963c469a0f56ed5680adcf3da5169a96e2f20146ded854311fd4dee3ecd01f1ae42500b7d7a192278c2b9706976d84c1776124caee7d1b50c961790ebebab5b69d175dd3019710b8bf0a8fae67aec81fc35d56b07c2cc49af69049454c85da60c126c52f76aa8a1ea8244bf0811c394f9eace41fb4fc022f3", 0xa0}, {&(0x7f00000004c0)="5e3b53a3bc50be6accfae0fe985a620b0ca082b0424ca85805fcb1a3e96d0a2563a6f5c93bc45093bbdad1bac030c92351fbf8e4b6158c02a25eec33f1d0fdce4eaf7483e48e934f318189ea7a34bc543d27fa5ce4fbe2b76a00b871c72af42e9a14f724e4579547d8a9b2943fcbe255918de8afab84e7375ff1479368db9ad7edf933cc3fd760944b581b", 0x8b}, {&(0x7f00000005c0)="3ee77fef5a849a6c22b936f0b6be4a2a09e5b5fada4fd06f49a35350a945b98f45b4f98a55d1943bbc85367f5c94c0c91dd09e859a8c4a413c05c51018685e6860fb473bd2ceb758f16b39ff7338283c98b4f9b8af61c31765417706a72fd71d3f31dc067a3093d1404057a335f7cd303aaaf341ca70533368016459567b0c1001e253371f611f80e34bd80e179c4a8dcbe2eb02aba6f8c33b035466deac5bae100adce44c2f712d4a691c5611c0e2d1034e1411f49c11096416d461b669e32dde1239cad699546350b9f44ec1bbeb84040d", 0xd2}], 0x3}, 0x4044004) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r8], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x100000002) 04:39:23 executing program 0: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000c80)={@map, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 04:39:23 executing program 0: r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x3, r0, 0x0, 0x0) keyctl$chown(0x4, r0, 0x0, 0xee00) [ 441.137318][T22503] loop1: detected capacity change from 0 to 2048 [ 441.245612][T22532] loop4: detected capacity change from 0 to 8192 04:39:23 executing program 1: mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x0, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) syz_read_part_table(0x59e, &(0x7f00000017c0)="$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") (fail_nth: 22) 04:39:23 executing program 0: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) 04:39:23 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x8}], 0x1}}], 0x1, 0x4000041) 04:39:23 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r8], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x10000000e) 04:39:23 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001240)='./bus\x00', 0x800000, &(0x7f0000000540)=ANY=[], 0x1, 0x125e, &(0x7f0000001280)="$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") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000001980)=0x2040000, 0x12) 04:39:23 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x400d01, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="0102a1000000000000000000", @ANYRES32=r2, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file0\x00']) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r6 = open(&(0x7f0000000300)='./file1\x00', 0x40, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x15, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@generic={0x8, 0x1, 0x7, 0x0, 0x8}, @map_fd={0x18, 0x3, 0x1, 0x0, r6}, @btf_id={0x18, 0x31724c562856279d, 0x3, 0x0, 0x5}, @alu={0x7, 0x1, 0x3af7ced4f853464f, 0x9, 0x1, 0x6, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1d}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r7}, 0x10) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r9, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0) r11 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000340)=0xffffffffffffffff, 0x4) sendfile(r10, r11, 0x0, 0x171) r12 = socket$rxrpc(0x21, 0x2, 0xa) r13 = openat$cgroup_ro(r8, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r16 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r16, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d010000000000000008b9df3646674b5084c4ba9520d2ee93a46a4f6986000500000008000700", @ANYRES32=r17], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r10, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r15, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r12], 0x4}}, 0x0) sendfile(r14, r13, 0x0, 0x100000002) 04:39:23 executing program 0: r0 = socket(0x11, 0x2, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 04:39:23 executing program 0: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x8921, &(0x7f0000000000)) 04:39:23 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x9}], 0x1}}], 0x1, 0x4000041) 04:39:23 executing program 0: pipe2$watch_queue(&(0x7f0000007680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) [ 441.748714][T22541] loop4: detected capacity change from 0 to 8192 04:39:23 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x400d01, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="0102a1000000000000000000", @ANYRES32=r2, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file0\x00']) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) (async, rerun: 64) r6 = open(&(0x7f0000000300)='./file1\x00', 0x40, 0x0) (rerun: 64) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x15, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@generic={0x8, 0x1, 0x7, 0x0, 0x8}, @map_fd={0x18, 0x3, 0x1, 0x0, r6}, @btf_id={0x18, 0x31724c562856279d, 0x3, 0x0, 0x5}, @alu={0x7, 0x1, 0x3af7ced4f853464f, 0x9, 0x1, 0x6, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1d}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) (async, rerun: 32) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r7}, 0x10) (async) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async, rerun: 32) r10 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) write$binfmt_script(r9, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0) (async) r11 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000340)=0xffffffffffffffff, 0x4) sendfile(r10, r11, 0x0, 0x171) (async, rerun: 64) r12 = socket$rxrpc(0x21, 0x2, 0xa) (rerun: 64) r13 = openat$cgroup_ro(r8, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) (async, rerun: 32) r16 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r16, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d010000000000000008b9df3646674b5084c4ba9520d2ee93a46a4f6986000500000008000700", @ANYRES32=r17], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r10, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r15, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r12], 0x4}}, 0x0) (async) sendfile(r14, r13, 0x0, 0x100000002) 04:39:23 executing program 0: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000c80)={@map, 0x0, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 441.851640][T22561] FAULT_INJECTION: forcing a failure. [ 441.851640][T22561] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 441.865008][T22561] CPU: 1 PID: 22561 Comm: syz-executor.1 Not tainted 6.7.0-rc1-syzkaller-00125-g7475e51b8796 #0 [ 441.875461][T22561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 441.885515][T22561] Call Trace: [ 441.888787][T22561] [ 441.891705][T22561] dump_stack_lvl+0xda/0x130 [ 441.896357][T22561] dump_stack+0x15/0x20 [ 441.900509][T22561] should_fail_ex+0x21f/0x230 [ 441.905201][T22561] __should_fail_alloc_page+0xfd/0x110 [ 441.910663][T22561] __alloc_pages+0x108/0x340 [ 441.915263][T22561] alloc_pages_mpol+0xb1/0x1d0 [ 441.920041][T22561] shmem_get_folio_gfp+0x3b2/0xb40 [ 441.925162][T22561] shmem_write_begin+0xa0/0x1b0 [ 441.930053][T22561] generic_perform_write+0x1c9/0x410 [ 441.935496][T22561] ? shmem_write_begin+0x1b0/0x1b0 [ 441.940675][T22561] shmem_file_write_iter+0xc8/0xe0 [ 441.945779][T22561] vfs_write+0x48a/0x790 [ 441.950061][T22561] ksys_write+0xeb/0x1a0 [ 441.954328][T22561] __x64_sys_write+0x42/0x50 [ 441.959133][T22561] do_syscall_64+0x44/0x110 [ 441.963627][T22561] ? irqentry_exit+0x12/0x40 [ 441.968397][T22561] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 441.974402][T22561] RIP: 0033:0x7fb8a5d8082f [ 441.978802][T22561] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 441.998414][T22561] RSP: 002b:00007fb8a50c1dd0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 442.006823][T22561] RAX: ffffffffffffffda RBX: 0000000000100000 RCX: 00007fb8a5d8082f [ 442.014847][T22561] RDX: 0000000000100000 RSI: 00007fb89cca2000 RDI: 0000000000000006 [ 442.022825][T22561] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000598 [ 442.030798][T22561] R10: 00000000000003ec R11: 0000000000000293 R12: 0000000000000006 [ 442.038842][T22561] R13: 00007fb8a50c1e7c R14: 00007fb8a50c1e80 R15: 00007fb89cca2000 [ 442.046951][T22561] 04:39:24 executing program 1: mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x0, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) syz_read_part_table(0x59e, &(0x7f00000017c0)="$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") (fail_nth: 23) 04:39:24 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x400d01, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x400d01, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="0102a1000000000000000000", @ANYRES32=r2, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file0\x00']) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) (async) r5 = dup(r4) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) (async) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) open(&(0x7f0000000300)='./file1\x00', 0x40, 0x0) (async) r6 = open(&(0x7f0000000300)='./file1\x00', 0x40, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x15, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@generic={0x8, 0x1, 0x7, 0x0, 0x8}, @map_fd={0x18, 0x3, 0x1, 0x0, r6}, @btf_id={0x18, 0x31724c562856279d, 0x3, 0x0, 0x5}, @alu={0x7, 0x1, 0x3af7ced4f853464f, 0x9, 0x1, 0x6, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1d}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r7}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r9, &(0x7f0000000480)=ANY=[], 0x208e24b) (async) write$binfmt_script(r9, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0) r11 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000340)=0xffffffffffffffff, 0x4) sendfile(r10, r11, 0x0, 0x171) r12 = socket$rxrpc(0x21, 0x2, 0xa) r13 = openat$cgroup_ro(r8, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r16 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r16, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d010000000000000008b9df3646674b5084c4ba9520d2ee93a46a4f6986000500000008000700", @ANYRES32=r17], 0x2c}}, 0x0) (async) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d010000000000000008b9df3646674b5084c4ba9520d2ee93a46a4f6986000500000008000700", @ANYRES32=r17], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r10, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r15, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r12], 0x4}}, 0x0) sendfile(r14, r13, 0x0, 0x100000002) (async) sendfile(r14, r13, 0x0, 0x100000002) 04:39:24 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0xa}], 0x1}}], 0x1, 0x4000041) 04:39:24 executing program 0: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000c80)={@map, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 04:39:24 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001240)='./bus\x00', 0x800000, &(0x7f0000000540)=ANY=[], 0x1, 0x125e, &(0x7f0000001280)="$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") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000001980)=0x3000000, 0x12) 04:39:24 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r8], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x10000000f) 04:39:24 executing program 0: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000c80)={@map, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 04:39:24 executing program 0: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5452, 0x0) 04:39:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}]}, 0x2c}}, 0x0) 04:39:24 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r1}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r8], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x100000002) 04:39:24 executing program 0: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000c80)={@map, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 04:39:24 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0xb}], 0x1}}], 0x1, 0x4000041) [ 442.680855][T22576] loop4: detected capacity change from 0 to 8192 [ 442.755191][T22586] FAULT_INJECTION: forcing a failure. [ 442.755191][T22586] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 442.768675][T22586] CPU: 0 PID: 22586 Comm: syz-executor.1 Not tainted 6.7.0-rc1-syzkaller-00125-g7475e51b8796 #0 [ 442.779153][T22586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 442.789584][T22586] Call Trace: [ 442.792876][T22586] [ 442.795977][T22586] dump_stack_lvl+0xda/0x130 [ 442.800597][T22586] dump_stack+0x15/0x20 [ 442.804822][T22586] should_fail_ex+0x21f/0x230 [ 442.809587][T22586] should_fail+0xb/0x10 [ 442.813819][T22586] should_fail_usercopy+0x1a/0x20 [ 442.818928][T22586] copy_page_from_iter_atomic+0x237/0xd80 [ 442.824741][T22586] ? shmem_write_begin+0xa0/0x1b0 [ 442.829792][T22586] ? shmem_write_begin+0x10c/0x1b0 [ 442.834992][T22586] generic_perform_write+0x20c/0x410 [ 442.840354][T22586] ? shmem_write_begin+0x1b0/0x1b0 [ 442.845491][T22586] shmem_file_write_iter+0xc8/0xe0 [ 442.850627][T22586] vfs_write+0x48a/0x790 [ 442.854926][T22586] ksys_write+0xeb/0x1a0 [ 442.859307][T22586] __x64_sys_write+0x42/0x50 [ 442.863923][T22586] do_syscall_64+0x44/0x110 [ 442.868546][T22586] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 442.874564][T22586] RIP: 0033:0x7fb8a5d8082f [ 442.878982][T22586] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 442.898662][T22586] RSP: 002b:00007fb8a5103dd0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 442.907109][T22586] RAX: ffffffffffffffda RBX: 0000000000100000 RCX: 00007fb8a5d8082f [ 442.915381][T22586] RDX: 0000000000100000 RSI: 00007fb89ccc3000 RDI: 0000000000000006 [ 442.923400][T22586] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000598 [ 442.931377][T22586] R10: 00000000000003ec R11: 0000000000000293 R12: 0000000000000006 [ 442.939444][T22586] R13: 00007fb8a5103e7c R14: 00007fb8a5103e80 R15: 00007fb89ccc3000 [ 442.947526][T22586] [ 442.954614][T22586] loop1: detected capacity change from 0 to 2048 04:39:25 executing program 1: mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x0, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) syz_read_part_table(0x59e, &(0x7f00000017c0)="$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") (fail_nth: 24) 04:39:25 executing program 0: bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@cgroup, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 04:39:25 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001240)='./bus\x00', 0x800000, &(0x7f0000000540)=ANY=[], 0x1, 0x125e, &(0x7f0000001280)="$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") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000001980)=0x4000000, 0x12) 04:39:25 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x3d}], 0x1}}], 0x1, 0x4000041) 04:39:25 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r8], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x100000010) 04:39:25 executing program 0: bpf$BPF_PROG_QUERY(0x3, &(0x7f0000000c80)={@map, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 04:39:25 executing program 0: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 04:39:25 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x300}], 0x1}}], 0x1, 0x4000041) 04:39:25 executing program 0: r0 = gettid() rt_sigqueueinfo(r0, 0x17, &(0x7f00000003c0)={0x0, 0x0, 0x8}) [ 443.570404][T22600] loop4: detected capacity change from 0 to 8192 04:39:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r1, @ANYBLOB="01062dbd7000ffdbdf25130000002c000180140002"], 0xac}}, 0x0) 04:39:25 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1001}], 0x1}}], 0x1, 0x4000041) 04:39:25 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 32) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r1}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) write$binfmt_script(r2, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) (async, rerun: 32) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r8], 0x2c}}, 0x0) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r3], 0x4}}, 0x0) (async) sendfile(r5, r4, 0x0, 0x100000002) [ 443.666127][T22608] FAULT_INJECTION: forcing a failure. [ 443.666127][T22608] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 443.679526][T22608] CPU: 0 PID: 22608 Comm: syz-executor.1 Not tainted 6.7.0-rc1-syzkaller-00125-g7475e51b8796 #0 [ 443.684486][T22621] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 443.689947][T22608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 443.689962][T22608] Call Trace: [ 443.689968][T22608] [ 443.689975][T22608] dump_stack_lvl+0xda/0x130 [ 443.690028][T22608] dump_stack+0x15/0x20 [ 443.690092][T22608] should_fail_ex+0x21f/0x230 [ 443.690122][T22608] __should_fail_alloc_page+0xfd/0x110 [ 443.734553][T22608] __alloc_pages+0x108/0x340 [ 443.739156][T22608] alloc_pages_mpol+0xb1/0x1d0 [ 443.744063][T22608] shmem_get_folio_gfp+0x3b2/0xb40 [ 443.749259][T22608] shmem_write_begin+0xa0/0x1b0 [ 443.754170][T22608] generic_perform_write+0x1c9/0x410 [ 443.759476][T22608] ? shmem_write_begin+0x1b0/0x1b0 [ 443.764616][T22608] shmem_file_write_iter+0xc8/0xe0 [ 443.769777][T22608] vfs_write+0x48a/0x790 [ 443.774021][T22608] ksys_write+0xeb/0x1a0 [ 443.778298][T22608] __x64_sys_write+0x42/0x50 [ 443.783004][T22608] do_syscall_64+0x44/0x110 [ 443.787505][T22608] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 443.793477][T22608] RIP: 0033:0x7fb8a5d8082f [ 443.797945][T22608] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 443.817590][T22608] RSP: 002b:00007fb8a5103dd0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 443.826096][T22608] RAX: ffffffffffffffda RBX: 0000000000100000 RCX: 00007fb8a5d8082f [ 443.834082][T22608] RDX: 0000000000100000 RSI: 00007fb89ccc3000 RDI: 0000000000000006 [ 443.842057][T22608] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000598 [ 443.850026][T22608] R10: 00000000000003ec R11: 0000000000000293 R12: 0000000000000006 [ 443.858001][T22608] R13: 00007fb8a5103e7c R14: 00007fb8a5103e80 R15: 00007fb89ccc3000 [ 443.865964][T22608] 04:39:26 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r0, &(0x7f0000000040)=""/70, 0x46) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x7, 0x401}, 0x14}}, 0x0) 04:39:26 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001240)='./bus\x00', 0x800000, &(0x7f0000000540)=ANY=[], 0x1, 0x125e, &(0x7f0000001280)="$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") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000001980)=0x5000000, 0x12) 04:39:26 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0xfffffdef}], 0x1}}], 0x1, 0x4000041) 04:39:26 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async, rerun: 64) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) (async) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r1}, 0x10) (async, rerun: 32) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) write$binfmt_script(r2, &(0x7f0000000480)=ANY=[], 0x208e24b) (rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) (rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r8], 0x2c}}, 0x0) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x100000002) 04:39:26 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r8], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x100000064) 04:39:26 executing program 1: mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x0, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) syz_read_part_table(0x59e, &(0x7f00000017c0)="$eJzs0r1Le1cYB/CTW9pQ6I/ID8HBDoLBKVaIgw7JIBJDFhWx4uAsOOggODhIJDr78g8ovoG4iHtGUUEU4iQZxbmguGRKqd5SdKpU+0I/n+Vwz/Oc+3D4nsB/WhR+aTabiRBCM/n+0z8fFYZKHaMDY+MhJMJUCKHw4w/PlUTc8ftfT/7YelZKZms7l4OPRy1XnTfn6b0o3q9GISyHEGbv9lN/7Wb8Hxznz1Irq/PFtcX8zG1x6b53urvQvl6Y2+zbzZUn2nKT8cOqRq/PJT5pfrrWf3DdHHnY+jKQCqGRvYj7Mh81kH+Vt/lvt1bqlcZw1+FCT+Zr/bS8Eef+9Cp/jwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPh4x/mz1MrqN/HX0n3vdHehfb0wt9m3mytPtOUmo5dKNfrM+fPFtcX8zG1x6T5d6z+4bo48bH356dvz7xrZi7gvk/ic+fyz3ua/3VqpVxrDXYcLPZmv9dPyRpz7k/wBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD+pMFTqGB0YGw8hEaZCCINRy/5v+83kSz0R953E6/fxWkpmazuXg49HLVedN+fpvdG4vxqFsBxCmL3bT/3dd+H9fg0AAP//iuKA4w==") (fail_nth: 25) 04:39:26 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000040000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r1}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r8], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x100000002) 04:39:26 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0x10, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xb, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX, @IEEE802154_ATTR_DEV_INDEX={0x16}, @IEEE802154_ATTR_DEV_INDEX, @IEEE802154_ATTR_DEV_NAME={0x0, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR]}, 0x3c}}, 0x0) [ 444.404821][ T27] audit: type=1400 audit(1700195966.343:542): avc: denied { read } for pid=22631 comm="syz-executor.0" path="socket:[75985]" dev="sockfs" ino=75985 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 04:39:26 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001500)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 04:39:26 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x2}}], 0x1, 0x4000041) [ 444.471263][T22637] loop4: detected capacity change from 0 to 8192 [ 444.531497][T22650] FAULT_INJECTION: forcing a failure. [ 444.531497][T22650] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 444.545241][T22650] CPU: 1 PID: 22650 Comm: syz-executor.1 Not tainted 6.7.0-rc1-syzkaller-00125-g7475e51b8796 #0 [ 444.555679][T22650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 444.565749][T22650] Call Trace: [ 444.569093][T22650] [ 444.572033][T22650] dump_stack_lvl+0xda/0x130 [ 444.576742][T22650] dump_stack+0x15/0x20 [ 444.580920][T22650] should_fail_ex+0x21f/0x230 [ 444.585655][T22650] should_fail+0xb/0x10 [ 444.589829][T22650] should_fail_usercopy+0x1a/0x20 [ 444.594970][T22650] copy_page_from_iter_atomic+0x237/0xd80 [ 444.600752][T22650] ? shmem_write_begin+0xa0/0x1b0 [ 444.605877][T22650] ? shmem_write_begin+0x10c/0x1b0 [ 444.611063][T22650] generic_perform_write+0x20c/0x410 [ 444.616371][T22650] ? shmem_write_begin+0x1b0/0x1b0 [ 444.621564][T22650] shmem_file_write_iter+0xc8/0xe0 [ 444.626695][T22650] vfs_write+0x48a/0x790 04:39:26 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), r0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000080002"], 0x1c}}, 0x0) 04:39:26 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001240)='./bus\x00', 0x800000, &(0x7f0000000540)=ANY=[], 0x1, 0x125e, &(0x7f0000001280)="$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") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000001980)=0x6000000, 0x12) 04:39:26 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict]}}, 0x0, 0x26, 0x0, 0x1}, 0x20) [ 444.630978][T22650] ksys_write+0xeb/0x1a0 [ 444.635277][T22650] __x64_sys_write+0x42/0x50 [ 444.640011][T22650] do_syscall_64+0x44/0x110 [ 444.644650][T22650] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 444.650644][T22650] RIP: 0033:0x7fb8a5d8082f [ 444.655056][T22650] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 04:39:26 executing program 0: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000000c0)={r0, 0xffff, 0x20}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0)={r1, 0x2d7e}, &(0x7f0000000200)=0x8) io_uring_setup(0x3455, &(0x7f0000001ec0)={0x0, 0xd7ce, 0x8, 0x3, 0x7a}) 04:39:26 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x0) 04:39:26 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={0x0}, 0x1, 0x0, 0x28}, 0x0) [ 444.674824][T22650] RSP: 002b:00007fb8a50c1dd0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 444.683248][T22650] RAX: ffffffffffffffda RBX: 0000000000100000 RCX: 00007fb8a5d8082f [ 444.691382][T22650] RDX: 0000000000100000 RSI: 00007fb89cca2000 RDI: 0000000000000006 [ 444.699376][T22650] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000598 [ 444.707352][T22650] R10: 00000000000003ec R11: 0000000000000293 R12: 0000000000000006 [ 444.715362][T22650] R13: 00007fb8a50c1e7c R14: 00007fb8a50c1e80 R15: 00007fb89cca2000 [ 444.723364][T22650] [ 444.744029][T22650] loop1: detected capacity change from 0 to 2048 [ 444.795889][T22667] loop4: detected capacity change from 0 to 8192 04:39:27 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0x480, 0x0, 0x2, 0x201, 0x0, 0x0, {}, [@CTA_EXPECT_NAT={0x1cc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x88, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_NAT_TUPLE={0x40, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x2a}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @empty}}}]}, @CTA_EXPECT_NAT_TUPLE={0x7c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, @CTA_EXPECT_MASTER={0x4, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x7, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x2d}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_NAT={0x110, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x0, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE, @CTA_TUPLE_ZONE, @CTA_TUPLE_PROTO, @CTA_TUPLE_ZONE, @CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv6={{0x0, 0x3, @remote}, {0x0, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv6={{0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x0, 0x4, @local}}}]}, @CTA_EXPECT_NAT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @loopback}}}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_EXPECT_NAT_TUPLE={0x58, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_NAT_TUPLE={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_MASK={0xa0, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @broadcast}}}]}, @CTA_EXPECT_NAT={0x54, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x480}}, 0x0) 04:39:27 executing program 1: mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x0, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) syz_read_part_table(0x59e, &(0x7f00000017c0)="$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") (fail_nth: 26) [ 445.229425][T22669] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 445.237555][T22669] netlink: 520 bytes leftover after parsing attributes in process `syz-executor.0'. 04:39:27 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000040000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) (async) socket$netlink(0x10, 0x3, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r1}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async) write$binfmt_script(r2, &(0x7f0000000480)=ANY=[], 0x208e24b) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async, rerun: 64) r3 = socket$rxrpc(0x21, 0x2, 0xa) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r8], 0x2c}}, 0x0) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x100000002) 04:39:27 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0x480, 0x2, 0x2, 0x201, 0x0, 0x0, {}, [@CTA_EXPECT_NAT={0x1cc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x88, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_NAT_TUPLE={0x40, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x2a}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @empty}}}]}, @CTA_EXPECT_NAT_TUPLE={0x7c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, @CTA_EXPECT_MASTER={0x84, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x2d}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_NAT={0x110, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x0, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE, @CTA_TUPLE_ZONE, @CTA_TUPLE_PROTO, @CTA_TUPLE_ZONE, @CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv6={{0x0, 0x3, @remote}, {0x0, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv6={{0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x0, 0x4, @local}}}]}, @CTA_EXPECT_NAT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @loopback}}}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_EXPECT_NAT_TUPLE={0x58, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_NAT_TUPLE={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_MASK={0xa0, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @broadcast}}}]}, @CTA_EXPECT_NAT={0x54, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x480}}, 0x0) 04:39:27 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001240)='./bus\x00', 0x800000, &(0x7f0000000540)=ANY=[], 0x1, 0x125e, &(0x7f0000001280)="$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") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000001980)=0x6040000, 0x12) 04:39:27 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x3}}], 0x1, 0x4000041) 04:39:27 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r8], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x100000082) [ 445.383386][T22678] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 445.392453][T22678] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.0'. [ 445.412242][T22671] FAULT_INJECTION: forcing a failure. [ 445.412242][T22671] name fail_page_alloc, interval 1, probability 0, space 0, times 0 04:39:27 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r1, 0x596223c30eacc76b}, 0x14}}, 0x0) [ 445.426224][T22671] CPU: 1 PID: 22671 Comm: syz-executor.1 Not tainted 6.7.0-rc1-syzkaller-00125-g7475e51b8796 #0 [ 445.436803][T22671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 445.446864][T22671] Call Trace: [ 445.450176][T22671] [ 445.453159][T22671] dump_stack_lvl+0xda/0x130 [ 445.457766][T22671] dump_stack+0x15/0x20 [ 445.461940][T22671] should_fail_ex+0x21f/0x230 [ 445.466727][T22671] __should_fail_alloc_page+0xfd/0x110 [ 445.472299][T22671] __alloc_pages+0x108/0x340 [ 445.477049][T22671] alloc_pages_mpol+0xb1/0x1d0 [ 445.481822][T22671] shmem_get_folio_gfp+0x3b2/0xb40 [ 445.486962][T22671] shmem_write_begin+0xa0/0x1b0 [ 445.491840][T22671] generic_perform_write+0x1c9/0x410 [ 445.497234][T22671] ? shmem_write_begin+0x1b0/0x1b0 [ 445.502359][T22671] shmem_file_write_iter+0xc8/0xe0 [ 445.507648][T22671] vfs_write+0x48a/0x790 [ 445.511899][T22671] ksys_write+0xeb/0x1a0 [ 445.513189][T22679] loop4: detected capacity change from 0 to 8192 [ 445.516145][T22671] __x64_sys_write+0x42/0x50 [ 445.527155][T22671] do_syscall_64+0x44/0x110 [ 445.531770][T22671] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 445.537688][T22671] RIP: 0033:0x7fb8a5d8082f [ 445.542269][T22671] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 445.561977][T22671] RSP: 002b:00007fb8a5103dd0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 445.570454][T22671] RAX: ffffffffffffffda RBX: 0000000000100000 RCX: 00007fb8a5d8082f 04:39:27 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001240)='./bus\x00', 0x800000, &(0x7f0000000540)=ANY=[], 0x1, 0x125e, &(0x7f0000001280)="$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") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000001980)=0x8000000, 0x12) 04:39:27 executing program 0: keyctl$set_reqkey_keyring(0x2, 0xfffffffffffffffb) 04:39:27 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), r1) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0x4, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x2c}}, 0x0) 04:39:27 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 64) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000040000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r1}, 0x10) (async, rerun: 32) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) write$binfmt_script(r2, &(0x7f0000000480)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) r3 = socket$rxrpc(0x21, 0x2, 0xa) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r8], 0x2c}}, 0x0) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r3], 0x4}}, 0x0) (async) sendfile(r5, r4, 0x0, 0x100000002) 04:39:27 executing program 0: bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002700), 0x48) [ 445.578465][T22671] RDX: 0000000000100000 RSI: 00007fb89ccc3000 RDI: 0000000000000006 [ 445.586449][T22671] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000598 [ 445.594425][T22671] R10: 00000000000003ec R11: 0000000000000293 R12: 0000000000000006 [ 445.602447][T22671] R13: 00007fb8a5103e7c R14: 00007fb8a5103e80 R15: 00007fb89ccc3000 [ 445.610445][T22671] [ 445.722490][T22700] loop4: detected capacity change from 0 to 8192 04:39:28 executing program 1: mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x0, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) syz_read_part_table(0x59e, &(0x7f00000017c0)="$eJzs0r1Le1cYB/CTW9pQ6I/ID8HBDoLBKVaIgw7JIBJDFhWx4uAsOOggODhIJDr78g8ovoG4iHtGUUEU4iQZxbmguGRKqd5SdKpU+0I/n+Vwz/Oc+3D4nsB/WhR+aTabiRBCM/n+0z8fFYZKHaMDY+MhJMJUCKHw4w/PlUTc8ftfT/7YelZKZms7l4OPRy1XnTfn6b0o3q9GISyHEGbv9lN/7Wb8Hxznz1Irq/PFtcX8zG1x6b53urvQvl6Y2+zbzZUn2nKT8cOqRq/PJT5pfrrWf3DdHHnY+jKQCqGRvYj7Mh81kH+Vt/lvt1bqlcZw1+FCT+Zr/bS8Eef+9Cp/jwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPh4x/mz1MrqN/HX0n3vdHehfb0wt9m3mytPtOUmo5dKNfrM+fPFtcX8zG1x6T5d6z+4bo48bH356dvz7xrZi7gvk/ic+fyz3ua/3VqpVxrDXYcLPZmv9dPyRpz7k/wBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD+pMFTqGB0YGw8hEaZCCINRy/5v+83kSz0R953E6/fxWkpmazuXg49HLVedN+fpvdG4vxqFsBxCmL3bT/3dd+H9fg0AAP//iuKA4w==") (fail_nth: 27) 04:39:28 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)={0x28, 0x0, 0x2, 0x201, 0x0, 0x0, {}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}]}, 0x28}}, 0x0) 04:39:28 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x4}}], 0x1, 0x4000041) 04:39:28 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000340)={'bond_slave_0\x00', @remote}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r2}, 0x10) socket$netlink(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r3}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r4, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0xa) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) fsync(r5) r8 = socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_subtree(r1, &(0x7f0000000400)={[{0x2b, 'memory'}]}, 0x8) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r11], 0x2c}}, 0x0) r12 = syz_open_dev$sg(&(0x7f00000002c0), 0x8aa, 0x300) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000300)={{0x1, 0x1, 0x18, r12, {0x7}}, './file0\x00'}) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r9, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r6], 0x4}}, 0x0) sendfile(r8, r7, 0x0, 0x100000002) 04:39:28 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001240)='./bus\x00', 0x800000, &(0x7f0000000540)=ANY=[], 0x1, 0x125e, &(0x7f0000001280)="$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") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000001980)=0x8800000, 0x12) 04:39:28 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r8], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x10000010d) 04:39:28 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0) sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r1, 0x1, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) 04:39:28 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x5}}], 0x1, 0x4000041) [ 446.181299][T22713] loop4: detected capacity change from 0 to 8192 04:39:28 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) bind$can_raw(r2, 0x0, 0x0) [ 446.260112][T22712] FAULT_INJECTION: forcing a failure. [ 446.260112][T22712] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 446.273862][T22712] CPU: 1 PID: 22712 Comm: syz-executor.1 Not tainted 6.7.0-rc1-syzkaller-00125-g7475e51b8796 #0 [ 446.274335][ T27] audit: type=1400 audit(1700195968.223:543): avc: denied { bind } for pid=22720 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 04:39:28 executing program 0: write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter, 0x9e) 04:39:28 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, &(0x7f0000000140)=0x10) [ 446.284266][T22712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 446.284278][T22712] Call Trace: [ 446.284285][T22712] [ 446.284291][T22712] dump_stack_lvl+0xda/0x130 [ 446.284320][T22712] dump_stack+0x15/0x20 [ 446.284417][T22712] should_fail_ex+0x21f/0x230 [ 446.334889][T22712] should_fail+0xb/0x10 [ 446.339128][T22712] should_fail_usercopy+0x1a/0x20 [ 446.344176][T22712] copy_page_from_iter_atomic+0x237/0xd80 [ 446.349958][T22712] ? shmem_write_begin+0xa0/0x1b0 [ 446.355010][T22712] ? shmem_write_begin+0x10c/0x1b0 04:39:28 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0x480, 0x0, 0x2, 0x201, 0x0, 0x0, {}, [@CTA_EXPECT_NAT={0x1cc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x88, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_NAT_TUPLE={0x40, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x2a}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @empty}}}]}, @CTA_EXPECT_NAT_TUPLE={0x7c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, @CTA_EXPECT_MASTER={0x84, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x2d}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_NAT={0x110, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x0, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE, @CTA_TUPLE_ZONE={0x0, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO, @CTA_TUPLE_ZONE, @CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv6={{0x0, 0x3, @remote}, {0x0, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv6={{0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x0, 0x4, @local}}}]}, @CTA_EXPECT_NAT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @loopback}}}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_EXPECT_NAT_TUPLE={0x58, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_NAT_TUPLE={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_MASK={0xa0, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @broadcast}}}]}, @CTA_EXPECT_NAT={0x54, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x480}}, 0x0) [ 446.360269][T22712] generic_perform_write+0x20c/0x410 [ 446.365639][T22712] ? shmem_write_begin+0x1b0/0x1b0 [ 446.370837][T22712] shmem_file_write_iter+0xc8/0xe0 [ 446.375959][T22712] vfs_write+0x48a/0x790 [ 446.377201][T22730] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 446.380269][T22712] ksys_write+0xeb/0x1a0 [ 446.388417][T22730] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.0'. [ 446.392628][T22712] __x64_sys_write+0x42/0x50 [ 446.406692][T22712] do_syscall_64+0x44/0x110 [ 446.411288][T22712] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 446.417203][T22712] RIP: 0033:0x7fb8a5d8082f [ 446.421626][T22712] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 446.441242][T22712] RSP: 002b:00007fb8a5103dd0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 446.449647][T22712] RAX: ffffffffffffffda RBX: 0000000000100000 RCX: 00007fb8a5d8082f [ 446.457627][T22712] RDX: 0000000000100000 RSI: 00007fb89ccc3000 RDI: 0000000000000006 [ 446.465605][T22712] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000598 [ 446.473625][T22712] R10: 00000000000003ec R11: 0000000000000293 R12: 0000000000000006 [ 446.481591][T22712] R13: 00007fb8a5103e7c R14: 00007fb8a5103e80 R15: 00007fb89ccc3000 [ 446.489641][T22712] [ 446.501142][T22712] loop1: detected capacity change from 0 to 2048 04:39:28 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), r1) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0xb}]}, 0x2c}}, 0x0) 04:39:28 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001240)='./bus\x00', 0x800000, &(0x7f0000000540)=ANY=[], 0x1, 0x125e, &(0x7f0000001280)="$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") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000001980)=0xfffffff, 0x12) 04:39:28 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x7}}], 0x1, 0x4000041) [ 446.999913][T22737] netlink: 'syz-executor.0': attribute type 11 has an invalid length. 04:39:29 executing program 1: mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x0, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) syz_read_part_table(0x59e, &(0x7f00000017c0)="$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") (fail_nth: 28) 04:39:29 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x11}, 0x8c) [ 447.043989][T22736] loop4: detected capacity change from 0 to 8192 [ 447.184565][T22741] FAULT_INJECTION: forcing a failure. [ 447.184565][T22741] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 447.197972][T22741] CPU: 0 PID: 22741 Comm: syz-executor.1 Not tainted 6.7.0-rc1-syzkaller-00125-g7475e51b8796 #0 [ 447.208440][T22741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 447.218497][T22741] Call Trace: [ 447.221827][T22741] [ 447.224756][T22741] dump_stack_lvl+0xda/0x130 [ 447.229366][T22741] dump_stack+0x15/0x20 [ 447.233515][T22741] should_fail_ex+0x21f/0x230 [ 447.238241][T22741] __should_fail_alloc_page+0xfd/0x110 [ 447.243756][T22741] __alloc_pages+0x108/0x340 [ 447.248406][T22741] alloc_pages_mpol+0xb1/0x1d0 [ 447.253285][T22741] shmem_get_folio_gfp+0x3b2/0xb40 [ 447.258452][T22741] shmem_write_begin+0xa0/0x1b0 [ 447.263332][T22741] generic_perform_write+0x1c9/0x410 [ 447.268638][T22741] ? shmem_write_begin+0x1b0/0x1b0 [ 447.273852][T22741] shmem_file_write_iter+0xc8/0xe0 [ 447.279034][T22741] vfs_write+0x48a/0x790 [ 447.283291][T22741] ksys_write+0xeb/0x1a0 [ 447.287531][T22741] __x64_sys_write+0x42/0x50 [ 447.292157][T22741] do_syscall_64+0x44/0x110 [ 447.296658][T22741] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 447.302598][T22741] RIP: 0033:0x7fb8a5d8082f [ 447.307006][T22741] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 447.326644][T22741] RSP: 002b:00007fb8a5103dd0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 04:39:29 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x8}}], 0x1, 0x4000041) 04:39:29 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000340)={'bond_slave_0\x00', @remote}) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r2}, 0x10) socket$netlink(0x10, 0x3, 0x0) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r3}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r4, &(0x7f0000000480)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0xa) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) fsync(r5) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_subtree(r1, &(0x7f0000000400)={[{0x2b, 'memory'}]}, 0x8) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r11], 0x2c}}, 0x0) (async) r12 = syz_open_dev$sg(&(0x7f00000002c0), 0x8aa, 0x300) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000300)={{0x1, 0x1, 0x18, r12, {0x7}}, './file0\x00'}) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r9, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r6], 0x4}}, 0x0) sendfile(r8, r7, 0x0, 0x100000002) 04:39:29 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 04:39:29 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001240)='./bus\x00', 0x800000, &(0x7f0000000540)=ANY=[], 0x1, 0x125e, &(0x7f0000001280)="$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") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000001980)=0x12000000, 0x12) 04:39:29 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r8], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x1000005fe) 04:39:29 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000340)={'bond_slave_0\x00', @remote}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r2}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r2}, 0x10) socket$netlink(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r3}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r4, &(0x7f0000000480)=ANY=[], 0x208e24b) (async) write$binfmt_script(r4, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0xa) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) fsync(r5) r8 = socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_subtree(r1, &(0x7f0000000400)={[{0x2b, 'memory'}]}, 0x8) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000080)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r11], 0x2c}}, 0x0) r12 = syz_open_dev$sg(&(0x7f00000002c0), 0x8aa, 0x300) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000300)={{0x1, 0x1, 0x18, r12, {0x7}}, './file0\x00'}) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r9, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r6], 0x4}}, 0x0) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r9, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r6], 0x4}}, 0x0) sendfile(r8, r7, 0x0, 0x100000002) [ 447.335097][T22741] RAX: ffffffffffffffda RBX: 0000000000100000 RCX: 00007fb8a5d8082f [ 447.343184][T22741] RDX: 0000000000100000 RSI: 00007fb89ccc3000 RDI: 0000000000000006 [ 447.351146][T22741] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000598 [ 447.359168][T22741] R10: 00000000000003ec R11: 0000000000000293 R12: 0000000000000006 [ 447.367131][T22741] R13: 00007fb8a5103e7c R14: 00007fb8a5103e80 R15: 00007fb89ccc3000 [ 447.375124][T22741] 04:39:29 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x10000000, 0x5}, 0x48) 04:39:29 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x10) 04:39:29 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x9}}], 0x1, 0x4000041) 04:39:29 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@restrict, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{}]}]}}, &(0x7f0000000100)=""/75, 0x3e, 0x4b, 0x1}, 0x20) [ 447.489511][T22751] loop4: detected capacity change from 0 to 8192 04:39:29 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0xa}}], 0x1, 0x4000041) 04:39:29 executing program 1: mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x0, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) syz_read_part_table(0x59e, &(0x7f00000017c0)="$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") (fail_nth: 29) 04:39:29 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0xf, &(0x7f0000000000)=@ringbuf, &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240), 0x10}, 0x8f) 04:39:29 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001240)='./bus\x00', 0x800000, &(0x7f0000000540)=ANY=[], 0x1, 0x125e, &(0x7f0000001280)="$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") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000001980)=0x370d1d56, 0x12) 04:39:29 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000002c0)={'pim6reg0\x00', @remote}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r2}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r3, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r9], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r7, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r6, r5, 0x0, 0x100000002) 04:39:29 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000001a00), 0x0, 0x0) 04:39:29 executing program 0: syz_io_uring_setup(0x72fe, &(0x7f0000001a00), &(0x7f0000001a80), &(0x7f0000001ac0)) 04:39:29 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r8], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x100000b35) 04:39:29 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0xb}}], 0x1, 0x4000041) [ 447.971703][T22781] loop4: detected capacity change from 0 to 8192 04:39:29 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x3, &(0x7f0000001700), &(0x7f0000001740)=0x4) [ 448.054092][T22782] FAULT_INJECTION: forcing a failure. [ 448.054092][T22782] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 448.067256][T22782] CPU: 0 PID: 22782 Comm: syz-executor.1 Not tainted 6.7.0-rc1-syzkaller-00125-g7475e51b8796 #0 [ 448.077682][T22782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 448.087747][T22782] Call Trace: [ 448.091031][T22782] [ 448.094029][T22782] dump_stack_lvl+0xda/0x130 [ 448.098641][T22782] dump_stack+0x15/0x20 [ 448.102838][T22782] should_fail_ex+0x21f/0x230 [ 448.107554][T22782] should_fail+0xb/0x10 [ 448.111746][T22782] should_fail_usercopy+0x1a/0x20 [ 448.116823][T22782] copy_page_from_iter_atomic+0x237/0xd80 [ 448.122620][T22782] ? shmem_write_begin+0xa0/0x1b0 [ 448.127649][T22782] ? shmem_write_begin+0x10c/0x1b0 [ 448.132834][T22782] generic_perform_write+0x20c/0x410 [ 448.138658][T22782] ? shmem_write_begin+0x1b0/0x1b0 [ 448.143905][T22782] shmem_file_write_iter+0xc8/0xe0 [ 448.149029][T22782] vfs_write+0x48a/0x790 [ 448.153268][T22782] ksys_write+0xeb/0x1a0 [ 448.157505][T22782] __x64_sys_write+0x42/0x50 [ 448.162097][T22782] do_syscall_64+0x44/0x110 [ 448.166610][T22782] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 448.172551][T22782] RIP: 0033:0x7fb8a5d8082f [ 448.176973][T22782] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 04:39:30 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x894c, 0x0) 04:39:30 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$unix(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000000)="24e5f540bfce84ff90ae90c0c5760010b63474903d9123336b1ecb9f706e84e2d187631eca3f28ba98b4938bab3cc011739680e4e3", 0x35}, {&(0x7f0000000080)="8b730c4048e431ced2df491c5da6333f6db849beefec1d9c8dbb8acd9d674bc86369a1579bbccf85e8a6ca9f2fb6873d94896d2e4fc0d3e6dcbb45e7941c49659cd8a3853f58c958a04b81bd9a5eed59a6efa07ec683cfc26ee17ff1eab363a7ab00a0f63c529c3a9d9a1023ea62e54caf4f923a6ddbb20d847cb762f4bb2ef53ba449947df8c1064861923a55778b49c08f685c227e83219c2bd0c3f8c8b0e642cdac5a0bc47be76be6ecaa84d2d382556ef275ba94236b05c4cf1575e0c25ed47c938344c6673bb5704b8a7ed03fb30164dc553f3d", 0xd6}, {&(0x7f0000000180)="49150b2fc0472817054e6b9142f2f42e2a5a8bcd096d85ac75f1da2d56eae7890821f150fab41ea0bbbc67fd3b3b696e4b738506c1653a37c24a7be15adbc3c3963c038714190e", 0x47}, {&(0x7f0000000200)="46460ac9cefbdc5fe48845c13f70975e6bc63d3bd524b373b6bd0ba8390f27ec65a14e4d8a96a0447f83afcbcf8ee94099d75c2fb1eb08a1efe725c1bf0b48e8704a47863c8c460997d3a6da7c3480e92af56a54aca92012b49c98ecd7bcfae018fd8e962d3ae8cb1b7be21475ce3224f65e6051d65103b63d204db66eee6c6532c9557fe4690f0462124dde2d4472442c2ec095104a20e0a12f86116fbcb810f9aa99f6e58b5c0d8d642af1e9e464be89ecfcad3a03362218095fc202d1264c34556ecae7817e5f3eeb225f2da30a49637161ac8ccab440a5421fb5af4de6c2fc42b07eb4183df219", 0xe9}, {&(0x7f0000000300)="9691d84d64eaa23d8f00a8b9d6fbd20b13a9bc701cbdbd471a7f036f6d9d75ab782d5d3b36ced94b200c5d87d23df5e6c541eda2b398a26260c12017852884de8556429a29897e082a01913524fe951b652f785407d85c68e313f81613a6fe1e6f3ee5d5d884e6c5f03c5373bf416a24d5816029292fd9d07572e87fd06038c447b04d72b7644e27b8f121d2c0519b0da65d5e8feb2cb59918", 0x99}, {&(0x7f0000000400)="8f6612514257079c08a1fa4f655528ed491773b75ec47816a10b1e405c7c90651b8379e75267fa24ce59a2627c5c1eb02613de86052bff0f8898f6b5a2a428c99dd649bec406bc1a332aae0bdcaeffaf3b48aa5efb3ba7e33025a34f166425c333a9157f792337aa0466fcaa0ab0d3decbce0c949c8be9ea18bc198c150be359ccee98ce39ac13ae2a448a709b4de22537dff057fb9cebc05ee0d544419fc2219a15f0c6297d4d135de5a84c8fcb7e275b0c132dff530f0393d5998e0b8fc07ed9a4fac2c2a8765dcdb2a646ff35733bd6a434ce80d595f0", 0xd8}, {&(0x7f0000000500)="170e5eebd377a352bd0fe1", 0xb}, {&(0x7f0000000540)="8ebc9f67ef0c6b89e1632e5e39e45d08ef5eb324569cd38454f952d390c5470297eff76b4cc432bdf97517b454a5e6c94d133f7c9315bdfd943853598d4a8a865ec32e3a0616874ba6e08675b792eb0eb3bd60eb6958cbea2a4a009f0e8ac11259bf42e9f712f2b11f55a8fcaf281c48d635f86e4e0fac3c06fcea033d5a5c927e0c654b5815a3784ce60898db92bccfd35f1402539c314b0749b9c26c61807cf0097e77b748735a75a76eca0bb72658e6b5a62d5895fca53a4e5ef5714864eebc1b0c131bebe22ef89dc3041f6313554b885be4322ddee87b23985584319559d56fc3188a98eb806bd91f", 0xeb}], 0x8, 0x0, 0x0, 0x40}}, {{&(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000900)=[{&(0x7f0000000740)="f523dc0fca1612fe7a0539714bb8e6ce41c082de7261348e96fe2b0e55611617737e55c5a627baa46f9e6ca46027da2320e6dc2182e17706cacb9a70f7317cc0fb5e10efa8f07d1e5da21c4c45adb6ac0f63bc02aee99e87be4ab2189de1b69d6e175bc186c0bb792fa33344a39342b19bd0a258c47197ff034b31bd43269a4d973b59c4b0bd5bae7c54fc67b0be68e2dcbe3026f134396f92ff61", 0x9b}, {&(0x7f0000000800)="db712004c2452a8e4ee5c17cea1872a5ac229f81e649a3336c748726eb5007f191542d08d1454f9849999c547989910b327038df1e", 0x35}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000840)="0484a9b23977051cb90d29c56da5f794484679fc72333b3b02c0cddfa03075b9762234fa92c2f7be42d442282529b83a99422e6e9d9bf7fbff645c528823c64b5c657fd5c9f8f30f45e241a622f0705607e59843", 0x54}, {&(0x7f00000008c0)="8fa5b4545ab1faadc81a03c364", 0xd}], 0x5, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38, 0x20000000}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000f00)="854241970cb91036646144ef31a4ba5e1c22e3411091d5a01169ad42f9ac30b7353a52ccff4ddc7b70a9230bea87985acdec9c11e3e1a716082da75726e33e4fcef6a3618d22b8ca96d5ee49babd3da022d79f686d5c93d2ff8a37cc1d3b2a7acb836ba1b348e8a46dc9528e4934", 0x6e}], 0x1, &(0x7f0000001100)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38, 0xc0}}], 0x4, 0x10) 04:39:30 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001240)='./bus\x00', 0x800000, &(0x7f0000000540)=ANY=[], 0x1, 0x125e, &(0x7f0000001280)="$eJzs3U9rI2UcB/Bf2vRf1jZV19VdEB/0oghx24MnL0V2QSwo1S6oIMzaVEPTpDShEBG3njwJvgxRj94E8Q304sWzIIj04nEPYqSdoJs26eK2TRf5fC55eGa+zzN/mIEJ82P2X/lyc2O9VVnP2jFWKERxayKKd1OkGIvxyO3GC7d+/uXpt9559/Wl5eUbKyndXHp74eWU0twzP7z3ybfP/ti+dOu7ue+nYm/+/f0/Fn/du7J3df+vb6LWSrVWajTbKUu3m812drteTWu11kYlpTfr1axVTbVGq7rdt3y93tza6qSssTZb2tqutlopa3TSRrWT2oXU3u6k7MOs1kiVSiXNloLTWP36brfbjeh2J2Iyut1udyZKcSkeidmYi3LMx6PxWDwel+OJuBJPxlNx9XCti95uAAAAAAAAAAAAAAAAAAAA+H+5T/1/Qf0/AAAAAAAAAAAAAAAAAAAAnL+j9f/FCN//BwAAAAAAAAAAAAAAAAAAgBG7z/f/j9T/v6j+HwAAAAAAAAAAAAAAAAAAAM7DdP6zktJ0xObnO6s7q/lv3r+0HrWoRzWuRzn+jMPq/1zevvna8o3r6dB8vLR5p5e/s7M63p9fiHLMFwbmF/J86s9PRene/GKU4/Lg+RcH5qfj+ecO8p/l+UqU46cPohn1WIso9Pb+MP/pQkqvvrE805+/drDeUOPnfFoAAADgLFXSPwY+v1cqw5bn+d7zeeoNVzjh/4Ejz+fFuFa8uP0m1+p8vJHV69XtB2xMDh9n8nQjH2sUIqK/Z67028rB5Gc2xYM2xkc66cTJ65zinEbxITiYZ9D4/at7eqZjtLOP9S6JrL4bEQ/B0Rh6MU6dlBp+zyiM4L7EaPx70i96SwAAAAAAAAAAAPgvBr79NxMRx94H/OhYz25vjP748ZGHz/7FCPYQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+JsdOBYAAAAAEOZvnUbHBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfBUAAP//Q97RDA==") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000001980)=0x561d0d37, 0x12) [ 448.196603][T22782] RSP: 002b:00007fb8a5103dd0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 448.205027][T22782] RAX: ffffffffffffffda RBX: 0000000000100000 RCX: 00007fb8a5d8082f [ 448.212993][T22782] RDX: 0000000000100000 RSI: 00007fb89ccc3000 RDI: 0000000000000006 [ 448.220956][T22782] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000598 [ 448.228939][T22782] R10: 00000000000003ec R11: 0000000000000293 R12: 0000000000000006 [ 448.236939][T22782] R13: 00007fb8a5103e7c R14: 00007fb8a5103e80 R15: 00007fb89ccc3000 [ 448.244913][T22782] [ 448.292713][T22782] loop1: detected capacity change from 0 to 2048 [ 448.342376][T22801] loop4: detected capacity change from 0 to 8192 04:39:30 executing program 1: mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x0, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) syz_read_part_table(0x59e, &(0x7f00000017c0)="$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") (fail_nth: 30) 04:39:30 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x3d}}], 0x1, 0x4000041) 04:39:30 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x36, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x90) mkdir(0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000700)='cpuset.effective_mems\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_clone(0x42000400, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) 04:39:30 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001240)='./bus\x00', 0x800000, &(0x7f0000000540)=ANY=[], 0x1, 0x125e, &(0x7f0000001280)="$eJzs3U9rI2UcB/Bf2vRf1jZV19VdEB/0oghx24MnL0V2QSwo1S6oIMzaVEPTpDShEBG3njwJvgxRj94E8Q304sWzIIj04nEPYqSdoJs26eK2TRf5fC55eGa+zzN/mIEJ82P2X/lyc2O9VVnP2jFWKERxayKKd1OkGIvxyO3GC7d+/uXpt9559/Wl5eUbKyndXHp74eWU0twzP7z3ybfP/ti+dOu7ue+nYm/+/f0/Fn/du7J3df+vb6LWSrVWajTbKUu3m812drteTWu11kYlpTfr1axVTbVGq7rdt3y93tza6qSssTZb2tqutlopa3TSRrWT2oXU3u6k7MOs1kiVSiXNloLTWP36brfbjeh2J2Iyut1udyZKcSkeidmYi3LMx6PxWDwel+OJuBJPxlNx9XCti95uAAAAAAAAAAAAAAAAAAAA+H+5T/1/Qf0/AAAAAAAAAAAAAAAAAAAAnL+j9f/FCN//BwAAAAAAAAAAAAAAAAAAgBG7z/f/j9T/v6j+HwAAAAAAAAAAAAAAAAAAAM7DdP6zktJ0xObnO6s7q/lv3r+0HrWoRzWuRzn+jMPq/1zevvna8o3r6dB8vLR5p5e/s7M63p9fiHLMFwbmF/J86s9PRene/GKU4/Lg+RcH5qfj+ecO8p/l+UqU46cPohn1WIso9Pb+MP/pQkqvvrE805+/drDeUOPnfFoAAADgLFXSPwY+v1cqw5bn+d7zeeoNVzjh/4Ejz+fFuFa8uP0m1+p8vJHV69XtB2xMDh9n8nQjH2sUIqK/Z67028rB5Gc2xYM2xkc66cTJ65zinEbxITiYZ9D4/at7eqZjtLOP9S6JrL4bEQ/B0Rh6MU6dlBp+zyiM4L7EaPx70i96SwAAAAAAAAAAAPgvBr79NxMRx94H/OhYz25vjP748ZGHz/7FCPYQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+JsdOBYAAAAAEOZvnUbHBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfBUAAP//Q97RDA==") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000001980)=0xf60f0000, 0x12) 04:39:30 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r1}, 0x10) (async) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000002c0)={'pim6reg0\x00', @remote}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r2}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) write$binfmt_script(r3, &(0x7f0000000480)=ANY=[], 0x208e24b) (rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r9], 0x2c}}, 0x0) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r7, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r4], 0x4}}, 0x0) (async) sendfile(r6, r5, 0x0, 0x100000002) 04:39:30 executing program 0: futex(&(0x7f0000000040)=0xfffffffe, 0xb, 0x0, &(0x7f0000000080), &(0x7f00000000c0), 0x0) [ 448.862560][T22811] loop4: detected capacity change from 0 to 8192 [ 448.944415][T22820] FAULT_INJECTION: forcing a failure. [ 448.944415][T22820] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 448.958350][T22820] CPU: 1 PID: 22820 Comm: syz-executor.1 Not tainted 6.7.0-rc1-syzkaller-00125-g7475e51b8796 #0 [ 448.968777][T22820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 448.978827][T22820] Call Trace: [ 448.982148][T22820] [ 448.985068][T22820] dump_stack_lvl+0xda/0x130 [ 448.989695][T22820] dump_stack+0x15/0x20 [ 448.993856][T22820] should_fail_ex+0x21f/0x230 [ 448.998635][T22820] __should_fail_alloc_page+0xfd/0x110 [ 449.004124][T22820] __alloc_pages+0x108/0x340 [ 449.008774][T22820] alloc_pages_mpol+0xb1/0x1d0 [ 449.013528][T22820] shmem_get_folio_gfp+0x3b2/0xb40 [ 449.018666][T22820] shmem_write_begin+0xa0/0x1b0 [ 449.023724][T22820] generic_perform_write+0x1c9/0x410 [ 449.029083][T22820] ? shmem_write_begin+0x1b0/0x1b0 [ 449.034285][T22820] shmem_file_write_iter+0xc8/0xe0 [ 449.039529][T22820] vfs_write+0x48a/0x790 [ 449.043838][T22820] ksys_write+0xeb/0x1a0 [ 449.048116][T22820] __x64_sys_write+0x42/0x50 [ 449.052794][T22820] do_syscall_64+0x44/0x110 [ 449.057290][T22820] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 449.063261][T22820] RIP: 0033:0x7fb8a5d8082f [ 449.067664][T22820] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 04:39:31 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r8], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x100001f00) 04:39:31 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x300}}], 0x1, 0x4000041) 04:39:31 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) 04:39:31 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001240)='./bus\x00', 0x800000, &(0x7f0000000540)=ANY=[], 0x1, 0x125e, &(0x7f0000001280)="$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") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000001980)=0xffffff0f, 0x12) 04:39:31 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r1}, 0x10) (async) socket$netlink(0x10, 0x3, 0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000002c0)={'pim6reg0\x00', @remote}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r2}, 0x10) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r3, &(0x7f0000000480)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r9], 0x2c}}, 0x0) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r7, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r4], 0x4}}, 0x0) (async) sendfile(r6, r5, 0x0, 0x100000002) [ 449.087373][T22820] RSP: 002b:00007fb8a50c1dd0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 449.095817][T22820] RAX: ffffffffffffffda RBX: 0000000000100000 RCX: 00007fb8a5d8082f [ 449.103867][T22820] RDX: 0000000000100000 RSI: 00007fb89cca2000 RDI: 0000000000000006 [ 449.111843][T22820] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000598 [ 449.119884][T22820] R10: 00000000000003ec R11: 0000000000000293 R12: 0000000000000006 [ 449.127894][T22820] R13: 00007fb8a50c1e7c R14: 00007fb8a50c1e80 R15: 00007fb89cca2000 [ 449.135864][T22820] 04:39:31 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x301804, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) [ 449.260266][T22836] loop4: detected capacity change from 0 to 8192 04:39:31 executing program 1: mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x0, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) syz_read_part_table(0x59e, &(0x7f00000017c0)="$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") (fail_nth: 31) 04:39:31 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x1, &(0x7f00000000c0)=@framed, &(0x7f00000006c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r1}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r3, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = dup2(r0, r2) openat$cgroup_ro(r6, &(0x7f00000002c0)='cgroup.freeze\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r8], 0x2c}}, 0x0) sendfile(r5, r4, 0x0, 0x100000002) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001280)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4788}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) epoll_create1(0x0) getsockname$packet(r10, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x2, &(0x7f0000000580)=ANY=[@ANYBLOB="1817f8ff39e58171a95b31315de55af6fc000000090000000000000006000000"], &(0x7f0000000340)='GPL\x00', 0x100, 0xff, &(0x7f0000000400)=""/255, 0x41100, 0x4c, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000000500)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x3, 0xc, 0x19c12932, 0x1000}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r10], 0x0, 0x10, 0xfffffffe}, 0x90) 04:39:31 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 04:39:31 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x1001}}], 0x1, 0x4000041) 04:39:31 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001240)='./bus\x00', 0x800000, &(0x7f0000000540)=ANY=[], 0x1, 0x125e, &(0x7f0000001280)="$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") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000001980)=0x800800000000, 0x12) 04:39:31 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={0x0}, 0x1, 0x0, 0xd43d0000}, 0x0) 04:39:31 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xfffffffffffffe7b, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT], 0x4e0}}, 0x0) 04:39:31 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0xfffffdef}}], 0x1, 0x4000041) [ 449.777799][T22845] loop4: detected capacity change from 0 to 8192 [ 449.820422][T22848] FAULT_INJECTION: forcing a failure. [ 449.820422][T22848] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 449.833530][T22848] CPU: 0 PID: 22848 Comm: syz-executor.1 Not tainted 6.7.0-rc1-syzkaller-00125-g7475e51b8796 #0 [ 449.844003][T22848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 449.854168][T22848] Call Trace: [ 449.857452][T22848] [ 449.860385][T22848] dump_stack_lvl+0xda/0x130 [ 449.865003][T22848] dump_stack+0x15/0x20 [ 449.869172][T22848] should_fail_ex+0x21f/0x230 [ 449.874078][T22848] should_fail+0xb/0x10 [ 449.878252][T22848] should_fail_usercopy+0x1a/0x20 [ 449.883357][T22848] copy_page_from_iter_atomic+0x237/0xd80 [ 449.889266][T22848] ? shmem_write_begin+0xa0/0x1b0 [ 449.894403][T22848] ? shmem_write_begin+0x10c/0x1b0 [ 449.899520][T22848] generic_perform_write+0x20c/0x410 [ 449.904801][T22848] ? shmem_write_begin+0x1b0/0x1b0 [ 449.909935][T22848] shmem_file_write_iter+0xc8/0xe0 [ 449.915059][T22848] vfs_write+0x48a/0x790 [ 449.919298][T22848] ksys_write+0xeb/0x1a0 [ 449.923542][T22848] __x64_sys_write+0x42/0x50 [ 449.928170][T22848] do_syscall_64+0x44/0x110 [ 449.932668][T22848] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 449.938673][T22848] RIP: 0033:0x7fb8a5d8082f [ 449.943166][T22848] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 449.962806][T22848] RSP: 002b:00007fb8a5103dd0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 04:39:31 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000005c0)=@newtfilter={0x40e8, 0x2c, 0x800, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x2, 0xd}, {0x1, 0xa}, {0x0, 0xfff1}}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_tcindex={{0xc}, {0x40a0, 0x2, [@TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}, @TCA_TCINDEX_POLICE={0x58, 0x6, [@TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9e05}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3ec1f9e0, 0xffffffffffffffff, 0x5b2a, 0x4, 0x5, {0x80, 0x0, 0x1, 0x5, 0x1f, 0x3}, {0x2, 0x1, 0x7fff, 0x4, 0x2e0a, 0x9}, 0x9, 0x8, 0x1ff}}]}, @TCA_TCINDEX_POLICE={0xa0, 0x6, [@TCA_POLICE_RESULT={0x8, 0x5, 0xfffff801}, @TCA_POLICE_RATE64={0xc, 0x8, 0x60800}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x8, 0x2c6, 0x9, {0x0, 0x2, 0x6, 0x3, 0x9, 0x6}, {0x7, 0x0, 0x7, 0x1, 0x9, 0x2eb}, 0x0, 0x6, 0x3}}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x6, 0x101, 0x1, 0x8, {0x7, 0x0, 0x0, 0x40, 0x6, 0x7ff}, {0x8, 0x0, 0x0, 0xffff, 0x80, 0x7ff}, 0x40, 0x3, 0x7}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}]}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x5}, @TCA_TCINDEX_POLICE={0xca4, 0x6, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0xd4, 0x6, 0x3, 0xa5b3, 0x8, 0x3ff, 0x2, 0x3, 0x2, 0x2, 0x1ff, 0x1, 0x9, 0x3, 0x8, 0x4, 0xa0, 0x5, 0x55b, 0x20, 0x8001, 0x2, 0x64, 0x3f, 0x2, 0x7, 0x400, 0x3, 0x903, 0x5, 0x5, 0x6ca, 0x10001, 0x6, 0x7, 0x1f, 0x1, 0x10001, 0x4, 0x7fffffff, 0x0, 0xfffffc00, 0x7f, 0x1000, 0x80000001, 0x8, 0x6, 0xfffffff7, 0x6, 0xa8, 0x81, 0xfdd, 0x400, 0xfffff001, 0x7, 0x1, 0x4, 0x7e6, 0x3, 0x5, 0x10000, 0xa18, 0x101, 0x100000, 0x3170401b, 0x7, 0x4, 0x161df594, 0x6b11f21c, 0x9, 0x401, 0x4, 0x8, 0x9, 0x80, 0xff, 0x578f, 0x3f, 0x964d, 0x8, 0xffff, 0xcad, 0x0, 0x7, 0x5, 0x4, 0x9, 0x4, 0x8, 0x1, 0x3, 0x8, 0x80000000, 0x80000001, 0x7f, 0x7, 0x5, 0x2, 0x3, 0x6, 0x80000001, 0x4, 0x38, 0x3d75, 0x7, 0x5, 0x9, 0x13585c94, 0x10000, 0xab7f, 0x1ff, 0x0, 0x0, 0x5, 0x0, 0x8, 0x2, 0xff, 0x6dc, 0x8, 0x484, 0xfff, 0x9b, 0x8, 0x7ff, 0x6, 0xef87c804, 0xff, 0x525f4ba1, 0x3, 0xd261b34f, 0x8000, 0x10000, 0xff, 0x1000, 0x3, 0x7fff, 0x5f0, 0x1, 0x81, 0xfffffff9, 0x9, 0x5, 0x5, 0x4, 0x0, 0x80, 0x6, 0x6, 0x4, 0xecb2, 0x3a5, 0x3ff, 0x5, 0x9, 0x4, 0x92a6, 0x8ba, 0xe518, 0x5, 0x6, 0x0, 0x4, 0x2, 0xff, 0x6bd, 0x6a97, 0x0, 0x80, 0xfffff800, 0x7f, 0x1, 0x2, 0x4, 0x6, 0xffff8001, 0x6, 0x3, 0x400, 0x2, 0x6, 0x1, 0x7b, 0x10001, 0x8, 0x2, 0x2, 0x1, 0x7fffffff, 0x8f42, 0xf2, 0x7fff, 0xf602, 0x1f, 0x6, 0x9818, 0xfffffffe, 0x8e, 0x8, 0x3, 0x4, 0x2, 0x5, 0x0, 0xff, 0x0, 0x9, 0x4, 0x1000, 0x0, 0x3, 0x4, 0x0, 0x5, 0x200, 0x0, 0x4, 0xa, 0x5, 0x47a, 0x4000000, 0x3ff, 0x2, 0xf4000000, 0x59, 0x7, 0xab8, 0x5, 0x7fff, 0x401, 0xe2, 0x20, 0x1ff, 0x8610, 0x9, 0xde3c, 0xffff, 0x63, 0x2, 0x7, 0x3, 0x79bc3abb, 0x7, 0xc00000, 0x7fffffff, 0x0, 0xfffff801, 0x4, 0x7ff, 0x3, 0xffff0001, 0x0, 0x2, 0x401, 0x401]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x3, 0x1000, 0x9, 0x3c, 0x8, 0x6e0, 0x3f, 0x3, 0x307e, 0x101, 0x0, 0x4e, 0x1ff, 0x8, 0x7ff, 0x8, 0x2, 0x4, 0x842d, 0x28, 0x6, 0x80000001, 0xfff, 0x6, 0x2, 0x6, 0x3, 0x4, 0xff, 0xfffffe01, 0x0, 0x9, 0x4, 0x2, 0x20000, 0xcc, 0x14c6, 0x1, 0x7, 0x9, 0x7fff, 0x4, 0x23b, 0x1, 0x0, 0x1, 0x3827, 0x8, 0x667c, 0x6, 0x5, 0x8001, 0x8, 0x1, 0xfffffff7, 0x200, 0x5, 0x5a71, 0xfffffffa, 0x4, 0x80000000, 0x2, 0x1, 0x9, 0x4, 0x5, 0x1, 0x2, 0x6, 0x9, 0x80000001, 0x4, 0x3, 0x2, 0x7ff, 0x81, 0x37, 0x1, 0x4, 0xde, 0x4, 0x40, 0xd7, 0x6, 0x9, 0x1ed, 0x8, 0x7f, 0x0, 0x3, 0x0, 0x4, 0x81, 0x80000000, 0x80000001, 0x0, 0x9, 0x0, 0x0, 0x3, 0x883, 0x7, 0x6, 0x2, 0x58, 0x4, 0x3, 0x6, 0x200, 0xfff, 0x5, 0xfffffff1, 0x9, 0x84, 0x8, 0x4, 0x7ff, 0x8, 0x3ff, 0x7fffffff, 0x2, 0x3, 0x7, 0x401, 0x8001, 0x6, 0x4, 0x1, 0x5155, 0xc8, 0x1, 0x1f, 0x9, 0x0, 0x4, 0x50cf49e0, 0x5, 0xfffffffe, 0xfffffffc, 0x0, 0x3f, 0x8, 0x8, 0x3, 0x800, 0x2, 0x6, 0x1281, 0x1ff, 0xf584, 0x0, 0x2, 0x9, 0xfffffff7, 0x6, 0x0, 0x7e, 0x8, 0x7ff, 0x8, 0x3ff, 0x2, 0x1f, 0xfffffffa, 0x6, 0x6, 0xfffffff7, 0x5, 0xe, 0x5, 0x0, 0xff, 0xf59, 0x1, 0xe33, 0xfff, 0x8000, 0x9485, 0x7, 0x1, 0x4, 0xe08, 0xfff, 0x7, 0x2, 0x100, 0x1, 0x627212c5, 0xfffff001, 0x5, 0x9, 0x800, 0x7a, 0x0, 0x74c000, 0x9, 0x101, 0x2, 0x8, 0x7fffffff, 0x800, 0x6, 0xbf40, 0x0, 0x9, 0x0, 0x4, 0x80000000, 0x7031, 0x800, 0x9, 0x5, 0x7, 0x4, 0xffc000, 0x400, 0x9ba5, 0x0, 0x142c, 0xabc174a7, 0x3, 0x7fffffff, 0x1, 0xd842, 0x401, 0x5, 0x9, 0x10001, 0x0, 0x6fe0, 0x7, 0x6, 0x7, 0x4, 0x5, 0x2, 0x7, 0x7d9c7657, 0x40000000, 0x2, 0x4, 0x9, 0x4, 0x2, 0x1, 0x7ff, 0x2, 0x7f, 0x9, 0x10001, 0x1, 0x4, 0x9, 0x8, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10001, 0x2, 0x10000, 0x400, 0x37f0, 0x5, 0x8, 0x1f, 0x2, 0x4, 0x7, 0x7, 0x5, 0x1, 0x0, 0x10001, 0x10001, 0x5, 0x6, 0x9, 0xffffff01, 0x0, 0xfffffff8, 0x200, 0x5, 0x80, 0x3f, 0x2, 0x40, 0x1f, 0x809, 0x100, 0x7, 0x2, 0x6, 0x6, 0x6, 0x0, 0x5, 0xffffffc0, 0x6a54, 0x9, 0xfe7, 0x2, 0x10001, 0x3f, 0x80000001, 0xfffffff8, 0x9, 0x1f, 0x9, 0x4, 0x2, 0x0, 0x200000, 0xfff, 0xfffffffc, 0x9, 0x5, 0x200, 0x7, 0x9, 0x6, 0x1, 0x2, 0x1, 0x17, 0x5, 0xff, 0x4, 0x1, 0x1, 0xd9a, 0x7, 0x5, 0xfff, 0x10000, 0x9, 0x0, 0x477, 0xffffffff, 0x8000, 0x7, 0x0, 0x0, 0x5, 0x8, 0x30000, 0x0, 0x9, 0x1, 0x7f, 0x200, 0x0, 0x8, 0x81, 0x401, 0x9, 0x0, 0x2, 0x4, 0x2, 0x6, 0x3, 0x1, 0x2, 0xa56b, 0x0, 0x10000, 0x40, 0x5, 0x7, 0x4, 0x1f, 0x6, 0x7fffffff, 0xffffff43, 0x0, 0x1, 0x8, 0xaf, 0xfff, 0x400, 0x5, 0x3, 0x3, 0x64, 0x1, 0x0, 0x109a5478, 0xe80, 0x0, 0x7fff, 0x8001, 0x4, 0x101, 0x80000000, 0x7, 0x3, 0x401, 0x10000, 0x6000000, 0x8, 0x0, 0x5, 0x8, 0x6, 0x7fff, 0x8, 0x1, 0x7ff, 0x7, 0x8, 0x1, 0xd7, 0x5c7, 0x0, 0x86d, 0x3, 0x7ff, 0x2, 0x4, 0x0, 0x1, 0x3, 0x400, 0x1, 0x10000, 0x7f, 0x0, 0xfffffff8, 0x101, 0x4, 0x9, 0x10000, 0x8, 0x3, 0xf49, 0xffff, 0x40, 0xfffffff4, 0x8, 0x80000001, 0x3, 0x77a, 0x80000001, 0xb, 0x20, 0x3, 0x4, 0xe589, 0x9, 0x1, 0x8, 0x7fff, 0x0, 0x7fff, 0x8e, 0x7, 0x282, 0x7, 0x7, 0x3, 0x100, 0x1, 0x9, 0x5, 0xffffda6c, 0x7, 0x2, 0x401, 0x1, 0x80000001, 0x7f, 0x6, 0x8, 0x10001, 0x480000, 0x7ff, 0xfffffffa, 0x5, 0x8, 0x2, 0x1, 0x8c851b9, 0xff, 0x2db6, 0x4, 0x28f53e60, 0x3, 0x9, 0xf2, 0xffff, 0x5c, 0x800, 0xfffff140, 0x0, 0xffffffff, 0xffff0c8a, 0xa4b, 0x4000000, 0x5, 0x0, 0x3, 0x7fff, 0x62, 0x7, 0xffff, 0x4, 0x8, 0xfffffffd, 0x5, 0x1a0, 0x8000, 0x10000, 0x80]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0xffffffffffffffff, 0x8001, 0x1f, 0x9d, {0xb5, 0x1, 0x4, 0x4, 0x3, 0x6}, {0x8, 0x1, 0x4, 0x8000, 0x294, 0xffff}, 0x3, 0x7, 0x7}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8001, 0x6, 0x101, 0x80000001, 0x0, {0x0, 0x2, 0x800, 0x44e1, 0x40, 0x8}, {0x3, 0x0, 0x8001, 0x8, 0x6, 0x4}, 0x80000001, 0x8000, 0x8}}]}, @TCA_TCINDEX_HASH={0x8, 0x1, 0x7da0}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x7}, @TCA_TCINDEX_ACT={0x32d8, 0x7, [@m_pedit={0x313c, 0x1c, 0x0, 0x0, {{0xa}, {0x30d8, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x14c, 0x5, 0x0, 0x1, [{0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x8, 0x80000001, 0x3, 0x0, 0x7}, 0x3f, 0x6f, [{0x8, 0x10000, 0x8, 0x3f, 0x3f, 0x8}]}, [{0x2, 0x0, 0x6, 0x1f, 0x4, 0x1}, {0x1, 0x3, 0x401, 0x80000000, 0x7, 0x25e0cdb4}, {0x10000, 0x9, 0x0, 0xfff, 0xc7, 0x101}, {0x8, 0x7, 0x800, 0x6, 0x8e9, 0xfffffffa}, {0x0, 0x10001, 0x6, 0x200, 0x3, 0x401}, {0x6, 0x800, 0x5, 0x2, 0x5, 0x3}, {0x101, 0x4, 0xfffff801, 0x1, 0x3, 0x9c17}, {0x5, 0x4, 0x800, 0x8, 0x8, 0x1}, {0x7, 0x0, 0x4, 0x2, 0xff, 0x975}, {0x1, 0x3, 0x0, 0x5, 0x9, 0x2}, {0xfff, 0x7, 0x0, 0xfffffffa, 0x0, 0x6}, {0xf4, 0x80000000, 0xd51, 0x8, 0x5, 0x7}, {0xff9c, 0x0, 0x2, 0x8ec4, 0x9, 0x4}, {0x1, 0x7, 0x7, 0x10001, 0x6, 0x3ff}, {0x101, 0x0, 0x28000000, 0x4, 0x4, 0x3}, {0x805, 0xfffeffff, 0x3, 0x7fff, 0x3e, 0x6}, {0x1, 0x6, 0xfffff801, 0x4, 0x2, 0x9255}, {0x9, 0x4, 0x8, 0x1, 0x6, 0x7}, {0x6, 0xfffffffe, 0x7ff, 0x80, 0x7, 0xffff}, {0x100, 0x5, 0x1, 0x15, 0x9, 0x7}, {0xe328, 0x8000, 0x6, 0x5}, {0x9, 0x2, 0x0, 0x9, 0x2, 0x7}, {0x7, 0x400, 0x2, 0x7, 0x6, 0x5}, {0x1, 0x40, 0x6, 0x6, 0x1, 0x4a9}, {0xffffffff, 0x7dbc5125, 0x80, 0x0, 0x6, 0x1}, {0x3c, 0x1, 0x1ff, 0x40, 0x4, 0xfffffff7}, {0x1, 0x4, 0x1, 0x804, 0x3, 0x20}, {0x28f5, 0x0, 0x1000, 0x0, 0x1, 0x7}, {0x6, 0x2, 0x934a, 0x9, 0x6d50, 0x1}, {0xf4, 0x7fffffff, 0xe327, 0x1f, 0xffffffc5, 0x2000000}, {0x1ff, 0x5, 0x2, 0x5, 0xdad, 0x6}, {0x7fff, 0x1, 0x0, 0x6, 0x2, 0x1}, {0x6, 0x80000001, 0x6e8f855b, 0x7, 0x80, 0x401}, {0x1ff, 0x1, 0x1f, 0x4, 0x2, 0x4}, {0x7ff, 0x8001, 0x2, 0x7cb, 0x80000001, 0x3}, {0x7, 0x401, 0x800, 0x3, 0x2, 0x4}, {0x700000, 0x100, 0x3, 0x200, 0x1, 0x33091867}, {0x3f, 0xe1, 0x101, 0x80000000, 0x7ff, 0x20}, {0x7ff, 0x0, 0x401, 0x9, 0x4, 0x3}, {0xe700, 0x0, 0x8ea9, 0xdc, 0x8, 0x3}, {0x0, 0x80, 0x1, 0xe797, 0x0, 0x4}, {0x8001, 0x0, 0x0, 0xffffffc0, 0x78d, 0x1ff}, {0x70, 0x101, 0x923f, 0x6, 0x9, 0x1f}, {0x1, 0xfffffe00, 0x4, 0x1000, 0x9, 0x4}, {0x6, 0xfffffffe, 0x1, 0x400, 0x7ff}, {0x1ff, 0x0, 0x1, 0x80000000, 0x8001}, {0x5, 0x3, 0x0, 0xffffffff, 0x400, 0xffffffff}, {0x8000, 0x401, 0x10001, 0x4, 0x1, 0x81}, {0x0, 0x6, 0x1f, 0x3, 0x1d9d, 0x200}, {0x4, 0x4, 0x1, 0x3, 0x1, 0x7fff}, {0xe0000000, 0xff, 0xffff, 0x8001, 0x4, 0x1ff}, {0x951, 0x4, 0x40, 0xff, 0x6, 0xfffffffa}, {0xfffff414, 0x9, 0x0, 0x60cc, 0x1, 0x17}, {0xffffffe1, 0x8, 0x2f6, 0x8001, 0x80000001, 0x10001}, {0x4, 0x9, 0x9, 0x4, 0x642, 0xca27}, {0x5, 0x5b6, 0x6, 0x1, 0xc517, 0x9}, {0x7fff, 0x6, 0xfffffffb, 0x5, 0xde, 0x80000000}, {0xd896, 0x7, 0x9, 0x9, 0x401}, {0x0, 0xfffffff7, 0x6, 0x7fffffff, 0x8, 0x9}, {0x7, 0x8, 0x1, 0xcc, 0x10000}, {0x0, 0x401, 0x9, 0x7, 0x83, 0x3}, {0x10000, 0x2, 0x3, 0x4, 0x7ff, 0x3ff}, {0x7fff, 0x7ff, 0x3, 0x4, 0x80000000, 0x7fff}, {0x80000001, 0x10000, 0x8, 0x1000, 0x81, 0x48f5}, {0x10000, 0x5, 0x1000, 0x4, 0x800, 0x200}, {0x3, 0xfffff001, 0x7b, 0x3f, 0x7f, 0x71c17023}, {0x1f, 0x1, 0xffffff05, 0x1000, 0x4}, {0x5c8, 0x6, 0xfffff000, 0x3, 0x0, 0x401}, {0xffffffff, 0x10001, 0x0, 0x9937, 0xf626, 0x7}, {0x1, 0x7ff, 0xce, 0xe51, 0x6, 0xdc9e}, {0xdc0b, 0x8, 0x5, 0xfffff800, 0x4, 0x7}, {0x8, 0x4, 0x81, 0x1, 0x8001, 0x3ff}, {0x2, 0x9, 0xfffff000, 0x8, 0x7fffffff, 0x7}, {0x4, 0x6, 0x3, 0x81, 0x7, 0x6}, {0x101, 0x5, 0x13a, 0x8, 0xfff, 0x82bb}, {0x1, 0x200, 0x6, 0xa1, 0xfffffffe, 0xf}, {0x0, 0x1, 0x7dc, 0x7, 0x9, 0x3ff}, {0x10000, 0x9, 0x9, 0x3, 0x4e1e, 0x6}, {0x18, 0x8, 0x9259, 0x8, 0x8, 0x401}, {0x5, 0x3f, 0x8, 0x0, 0x811b, 0x7fff}, {0x6, 0x10001, 0x0, 0x1f, 0x1ff, 0xff}, {0x8, 0x7f, 0x7, 0xaf1c, 0x4, 0x7}, {0x101, 0x1, 0x6, 0x6, 0x3, 0x2}, {0x2, 0x2, 0x9, 0x2, 0x800, 0x2}, {0x40, 0x8d4, 0x40, 0x7, 0x80000001, 0x20000}, {0x3, 0x1, 0x9, 0x1, 0x2, 0x4}, {0x9, 0x10000, 0x8, 0xdd5, 0x1, 0x1}, {0x2, 0x7f, 0x200000, 0x7, 0x5, 0x7ec}, {0x5, 0x5, 0x6, 0x1000, 0xffffff00, 0x8001}, {0x1, 0x7f, 0x0, 0x81, 0x100, 0x4b}, {0x5, 0x68, 0x9b00, 0xfffffff8, 0x1, 0x4}, {0x10001, 0xfff, 0x0, 0x1, 0x3f, 0x5}, {0x3f, 0x3f, 0x9, 0x3, 0xa37, 0x7}, {0x200, 0x5, 0x3e50, 0x20, 0x400, 0x5}, {0xfffffffe, 0x1000, 0x9, 0xccb, 0x3, 0x90ee}, {0x5, 0x8, 0x4, 0x1, 0xa7, 0x3}, {0x4, 0x20, 0x0, 0x401, 0x8, 0x42cb}, {0x9, 0xc4, 0xfffffeff, 0x6, 0x88a9, 0x3}, {0x0, 0x5, 0xfffffff9, 0x84a, 0x38, 0x800000}, {0x400, 0x7ff, 0x80000000, 0x2, 0x5d397efb, 0x25e}, {0x74d, 0x3000, 0x3f, 0x8000, 0xb0, 0x6}, {0xb5f, 0x4ae, 0x7, 0x7ff, 0x5, 0x3}, {0xb5, 0x4, 0x5, 0xffffffff, 0xee58, 0x8000}, {0x3, 0x0, 0x40, 0x5, 0xffffff1c, 0x7}, {0x7fff, 0x3, 0x2, 0x6, 0x7, 0x5}, {0x6, 0x0, 0x5, 0x8, 0x40, 0x6}, {0x7, 0x81, 0x3ef, 0x8, 0x569bda0, 0x101}, {0x401, 0x3710, 0x8, 0x2, 0x5, 0xfffffff7}, {0x9, 0x7ff, 0x100, 0x1, 0x12dd, 0x1}, {0x200, 0x40, 0x7fffffff, 0x81, 0x9, 0x3}, {0x9, 0x10001, 0x8, 0x2, 0x6, 0x9}, {0x1, 0x9, 0x8, 0x0, 0x7fffffff, 0x81}, {0x8, 0xc60, 0x7e, 0x3f, 0x6, 0x2}, {0x7, 0x10000, 0x8, 0x100, 0x7fffffff, 0x5e41}, {0x0, 0x3ff, 0x8001, 0x655f, 0x6, 0x7}, {0x11aaedd6, 0x3ac, 0x3f, 0xfffffffb, 0x20, 0x9}, {0x4, 0x20, 0x5, 0x247, 0x8001}, {0x8, 0x0, 0x7, 0x3, 0x4, 0xff}, {0xb, 0xca, 0xde1, 0x9, 0x3b32, 0x7}, {0x7fff, 0x4, 0x3d01, 0x1ff, 0x1, 0xffffffff}, {0x7fff, 0x1, 0x1, 0xcf5, 0x3, 0x6}, {0x10001, 0xd6, 0x401, 0x1000, 0x62, 0x81}, {0xfffffff7, 0xfff, 0x7, 0xfffffffa}, {0x1, 0xfff, 0x2, 0x8109, 0x2, 0xd7}, {0x4, 0xa98, 0x2, 0x9, 0x8, 0xfffffff7}, {0xd100, 0x9, 0x1, 0x7, 0x0, 0x5}, {0x7, 0x1f, 0x5, 0xd1, 0x6, 0x6}, {0x8001, 0x8, 0x7fff, 0x7f, 0x2, 0x4}], [{0x4}, {0x6}, {0x3}, {0x3}, {0x3}, {0x5}, {0x5}, {0x5}, {0x1, 0x1}, {0x4}, {0x1}, {0x5}, {0x1}, {0x3, 0x1}, {0x5}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {}, {0x0, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x79b996b20e5867f6, 0x1}, {0x3}, {0x4, 0x1}, {0x2}, {0x5}, {0x3}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x5, 0xab0c09fd00c3093f}, {0x1}, {0x4}, {0x4}, {0x2}, {0x3, 0x1}, {0x9, 0x1}, {0x4}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0xcf9ff0669b6d9b54}, {0x4}, {0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x7, 0x1}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x12c, 0x5, 0x0, 0x1, [{0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_KEYS_EX={0x14c, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x7}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}]}, @TCA_PEDIT_KEYS_EX={0x78, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS={0xe80, 0x2, {{{0x6, 0x3f, 0x7, 0x777d, 0x80}, 0xff, 0xc2, [{0x9, 0xfffe00, 0x3, 0x8, 0xacb, 0x3}, {0x40, 0x1, 0x1ff, 0x2, 0xfff, 0xcd}, {0x7fff, 0x101, 0x259, 0xd361, 0x7, 0x6}, {0x3, 0x3, 0x101, 0x5, 0x6, 0x80000001}]}, [{0x6, 0x400, 0x3, 0x1000, 0x3f, 0x80}, {0x3, 0x3, 0x9e31, 0xf5, 0x0, 0x80000001}, {0x6, 0x3ff, 0x80000000, 0x400, 0x10000, 0xfffffff7}, {0x0, 0x1, 0x1, 0xdf, 0xfffffffe, 0xa2e0}, {0x6, 0x8, 0x7, 0x10001, 0x6, 0x7}, {0xfffffe01, 0x4, 0x5, 0x6, 0x1, 0x1}, {0x5, 0x5, 0x1, 0x5, 0x4, 0x2}, {0xfffffffb, 0x4, 0x0, 0x81, 0x2, 0x3ff}, {0xfffff800, 0x4, 0x3, 0x5, 0x80000001}, {0xfffffbec, 0x6, 0x8, 0x4, 0x7, 0xff}, {0x8, 0x5, 0x2, 0xf5a, 0xffffff7f, 0x7}, {0x1, 0x0, 0x6, 0x1ff, 0x0, 0x6}, {0x4, 0x0, 0xe2, 0x40, 0xffff, 0x101}, {0x0, 0xbf7, 0x9, 0x4, 0x6, 0x40}, {0x1, 0x5, 0x1ff, 0x40, 0x8000, 0x2}, {0x10000, 0x7f, 0x100, 0x7fffffff, 0x0, 0x3}, {0x7, 0x2, 0x80000000, 0x7a, 0x8, 0x81}, {0x6, 0xfffffffe, 0x7, 0x800, 0x7, 0x5}, {0x5, 0x6, 0x4, 0x7a17b11f, 0x2, 0x7fffffff}, {0x0, 0x3f, 0x8, 0x6, 0x7, 0x7fff}, {0x9837, 0x5, 0x80000000, 0x3, 0x3, 0x4}, {0x7, 0xc2, 0x1ff, 0x4b, 0x3, 0x8}, {0x7, 0x1ff, 0xf11, 0x5, 0x3, 0x7f}, {0x8, 0xffff651d, 0x3, 0xc0000, 0xb25, 0x2}, {0x10000, 0x80000001, 0xdc07, 0x0, 0xfffffffe, 0x47d08a35}, {0x8, 0xf58c, 0x9, 0x60, 0x8, 0x1}, {0x1ff, 0x1, 0x1, 0x9, 0x5, 0xfffffffe}, {0x2, 0x5, 0x7, 0x8, 0xa0f, 0x8}, {0x6, 0x1000, 0x1, 0x8, 0x9f, 0xf57c}, {0x4, 0x401, 0xffffff7f, 0x8, 0x2, 0x5}, {0x5, 0x9, 0x9, 0x8, 0xfffffff9, 0x6}, {0x6, 0x3, 0x7, 0xf518, 0x6, 0x2}, {0x0, 0x3ff, 0x6, 0x8, 0x6, 0xf3}, {0x3, 0x1ff, 0xfffffffa, 0x9, 0x1ff, 0x9}, {0x5, 0x8001, 0x5, 0x8001, 0x3, 0x93}, {0x0, 0x4a46f1af, 0x0, 0x4, 0x7fffffff, 0x2}, {0x0, 0x1000, 0x8, 0x200, 0xffffffff, 0x3}, {0xfff, 0x5, 0x9, 0x7, 0x10001, 0x3}, {0x0, 0xc2a, 0x1, 0x9, 0x7, 0x4}, {0xffffffff, 0xfffffff8, 0x1856, 0xfe88, 0x5, 0x400}, {0x0, 0x2, 0xfffffff9, 0x7f, 0x9}, {0x1, 0x5, 0x9, 0x2, 0x6, 0x1}, {0xfffffffc, 0x4, 0x8001, 0x1, 0x0, 0x4}, {0x4, 0x3f, 0x6, 0x4, 0x1, 0x6}, {0x9, 0x4, 0x4, 0x401, 0x61, 0x6}, {0x3, 0x4, 0x401, 0x8, 0xff, 0xfffffffe}, {0xa85, 0x7fffffff, 0xc0000000, 0x100, 0x0, 0x9}, {0x0, 0x0, 0x5, 0xffffffff, 0x401, 0x5}, {0x1, 0xfff, 0x4a, 0x7, 0x2, 0x9c}, {0x9, 0x73c, 0x9, 0x2b, 0x100, 0x81}, {0x40000000, 0x5, 0xbc82, 0x3, 0x40, 0xffffff81}, {0x7, 0x1, 0x800, 0x6, 0x7ff}, {0xe77, 0x7, 0x6, 0x8, 0x8, 0x4}, {0x3ff, 0x4, 0x7f, 0x2, 0x2, 0x7f}, {0x200, 0x3, 0x1ff, 0x6, 0x8000, 0x5}, {0x9, 0xb9, 0x7, 0x5, 0xfffffff7, 0x9}, {0x8, 0xfffff801, 0x0, 0x2e104805, 0x3ff, 0x1000}, {0x3f, 0x6, 0xfffeffff, 0x5, 0x401, 0x94e}, {0x9, 0x6, 0x0, 0x0, 0x4, 0x100}, {0x3, 0x4, 0xffff, 0xfffffffb, 0xffffff2f, 0x9}, {0x3, 0x5e721550, 0x4, 0x12400, 0x7fffffff, 0x7b3}, {0x3, 0x7e000, 0xd2, 0x6, 0x1, 0x9}, {0x1, 0xf9, 0x80000001, 0x1, 0x3ff, 0x1}, {0x3, 0x3, 0xfff, 0x6, 0x9, 0x60}, {0x7, 0x3, 0x7, 0x81, 0xffff2bf5, 0x2}, {0x5, 0xffffffff, 0x3, 0x6, 0x10001, 0x3}, {0x0, 0x8, 0x7, 0x1, 0x9, 0x9}, {0x2, 0x200, 0x8, 0x1ff, 0xc471, 0x8}, {0x401, 0x4, 0x4, 0xfffffffa, 0x1, 0x1ff}, {0x20, 0x7fffffff, 0x9, 0x1ff, 0x5e, 0x4}, {0x7fffffff, 0x2000000, 0x10, 0x5, 0xfffffffa, 0x3}, {0x10000, 0xe97, 0xfffffffa, 0x4, 0x7}, {0x6, 0xfffffffb, 0x8, 0xfff, 0x20, 0x20}, {0x9, 0x1f, 0x8, 0x0, 0x2, 0x81}, {0x7, 0x1, 0x9, 0x2, 0xec9, 0x80000000}, {0x10000, 0x6, 0xfffffffd, 0x8, 0x3, 0x8}, {0xfff, 0x3, 0x3, 0x0, 0x2, 0x10000}, {0x3, 0x6, 0x80000001, 0xa87, 0x8001, 0x7}, {0x7, 0x5, 0x6, 0x0, 0x40, 0x3ff}, {0x65c, 0xc89, 0xffff, 0x6, 0x9, 0x5}, {0x1, 0x1000, 0x1, 0x4a07, 0x4, 0xfffffff8}, {0x1ff, 0x80000000, 0x6, 0xfff, 0x33, 0x1}, {0x7f, 0x3f, 0x9, 0x6a2, 0xfffff272, 0x76d8d4a1}, {0x20, 0x3ff, 0x1, 0x0, 0x0, 0x800}, {0x9, 0x8001, 0xff, 0x6, 0x1286, 0x6}, {0x3ff, 0x200, 0x9, 0xe57, 0x6, 0xa40}, {0x7ff, 0x20, 0x2d7, 0x8, 0x4, 0x680}, {0x5, 0x8001, 0xffff, 0x3, 0x1, 0x100}, {0x5, 0x6, 0x3, 0x1ff, 0x7fffffff, 0x6}, {0x7, 0x7, 0x800, 0x3, 0x3f}, {0x9, 0x4, 0xfffffff9, 0x95d, 0x0, 0xffff}, {0x4, 0x2fa, 0x6, 0x401, 0x45c, 0x7}, {0x0, 0x1, 0x8000, 0x401, 0xfffffa9d}, {0x6, 0x6, 0x5, 0x9, 0xffff, 0x3f800000}, {0x3, 0x9, 0x7, 0x7, 0x1, 0x1}, {0x3, 0x80, 0x2, 0x7, 0x800, 0x4}, {0x9, 0x3, 0x7, 0x80000001, 0x3}, {0x1, 0x5, 0x1ff, 0xfffffffb, 0x3, 0x2d5}, {0x200, 0xcf07, 0x68b, 0x3, 0x7, 0x9}, {0x7, 0x29, 0x9, 0x5, 0x3, 0x1}, {0x0, 0x3f, 0x101, 0x52, 0x1, 0x101}, {0xffffff7f, 0x6, 0xff, 0xff, 0x7, 0x7}, {0x2, 0x200, 0x1000, 0x6, 0x80000001}, {0xfffffffc, 0x8, 0x2, 0x1, 0x7f, 0xfffffcbe}, {0x80, 0x3f, 0xfff, 0x5, 0x6598, 0x9}, {0x8, 0x4, 0x9, 0x2, 0x9, 0x7f}, {0x7fff, 0x200000, 0x7, 0x80, 0x0, 0x400}, {0x8, 0x80000000, 0x36a, 0x7fffffff, 0x6, 0xe4}, {0x7fff, 0x80000000, 0x100, 0x3f, 0x0, 0x7fffffff}, {0xeb7, 0x3, 0x4, 0x2, 0x8001, 0x9}, {0x1ff, 0x7ff, 0x71, 0x401, 0x2, 0x2f}, {0x9, 0x7, 0x72c, 0x4, 0x100, 0x7}, {0x1f, 0x9, 0x8, 0x5, 0xffffff51, 0x5}, {0x3, 0x1, 0x8, 0xdb8e, 0x1, 0x3}, {0x9, 0xcff8, 0x3, 0x7, 0x6, 0x7}, {0x7, 0x200, 0x40, 0x9, 0x3}, {0x800, 0x4, 0x9, 0xfffeffff, 0x4, 0x8000}, {0x7fff, 0x200, 0x0, 0x6, 0x4, 0x7fffffff}, {0x2, 0x64acd2f4, 0x2, 0x0, 0x1, 0x8}, {0x69cd9c63, 0x8, 0x1f2a, 0x5, 0x7fff, 0x200}, {0x3, 0x7ff, 0x2, 0x4, 0x12, 0x3}, {0x2, 0x4, 0x3, 0x7, 0x6, 0x7}, {0xfef, 0x9, 0x81, 0xff, 0x1, 0x1bb}, {0x6, 0x3, 0x4, 0x1800000, 0x7ff, 0x4}, {0x0, 0x6, 0x3f, 0x7f, 0x1f, 0x7fff}, {0x9, 0x1, 0x800, 0x2, 0xc8d, 0x9}, {0x20, 0x8, 0xb0, 0x1f, 0x5, 0xff}, {0x4, 0x9, 0x4, 0x6, 0x3, 0x401}], [{}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {}, {0x2, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x9a33700b40bb241e}, {0x0, 0x1}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x7, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x6, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x4}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x1}, {}, {0x2}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x6}, {}, {0x2}, {0x3}, {0x1}, {}, {0x3, 0x1}, {0xcb1504946723a79b}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0xeca82027c89ececc}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x4}, {0x4, 0x1}, {}, {0x5}, {0x5}, {0x7, 0x1}, {}, {0x2}, {0x2, 0x1}, {0x2}, {0x1}, {0x5, 0x1}, {0x4, 0x2}, {0x1, 0x1}, {0x1}, {0x2}, {0x3}, {0x2}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x10c, 0x5, 0x0, 0x1, [{0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}]}, @TCA_PEDIT_KEYS_EX={0x84, 0x5, 0x0, 0x1, [{0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x54, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x9, 0x40, 0x6, 0x7e7, 0x7505db40}, 0xa2, 0x6, [{0x9, 0x9, 0x0, 0x10000, 0x1, 0x9}, {0x0, 0x8, 0x40, 0x200, 0x8001, 0x9}]}, [{0xa40000, 0x9, 0x97, 0x8001, 0xfff, 0xa8}, {0x101, 0x8, 0x1f, 0x1, 0x5c, 0x80000000}, {0xff, 0xfffffff7, 0x7, 0xfff, 0x6, 0xffff}, {0x7, 0x7, 0x8, 0x21de, 0x1, 0x800}, {0x3, 0x5, 0xb804, 0xbb4, 0x3f, 0x800}, {0x2, 0x8000, 0x7, 0x2, 0x3, 0x2}, {0xffffffff, 0x0, 0x101, 0x9, 0x1ff, 0x36f}, {0x7, 0x3, 0x0, 0xfff, 0x100, 0x81}, {0x7fffffff, 0x3f719303, 0x200, 0x100, 0x9, 0x8}, {0x9, 0x7, 0x0, 0x9, 0x3b3, 0x1ff}, {0x7f, 0x937, 0x3, 0x3, 0x8, 0x1d6}, {0x5, 0x9, 0x7, 0x9, 0x0, 0x5}, {0x543, 0x7, 0x6, 0x7, 0x8, 0x5}, {0xc210, 0x5, 0x0, 0x8, 0x8409, 0xd38}, {0x3, 0x40, 0xffffffff, 0x3f, 0x8, 0x7fff}, {0xde, 0x7, 0x5, 0x0, 0x805c, 0x5}, {0x200, 0x2, 0x4, 0x6, 0x401, 0x5}, {0x4f8, 0x1, 0x4, 0x401, 0xd4, 0x101}, {0x3, 0x20, 0x3, 0x7fff, 0xffffffe3, 0x800}, {0x6, 0x0, 0x80000000, 0x3c000000, 0xffff, 0x3}, {0xacacedc, 0x1880, 0x8, 0x7, 0xffffffff, 0x5}, {0x8, 0x0, 0x5, 0xd7, 0x8, 0xfffffff7}, {0x74b, 0x99, 0x7, 0x8000800, 0x86, 0xffffffff}, {0x3, 0x0, 0x8, 0xfffffffa, 0x3, 0x1}, {0x4, 0x100, 0x80000000, 0x8, 0x40, 0x7}, {0xffffffff, 0x39, 0x1, 0x8497, 0xd2, 0x7f}, {0x3, 0x5938, 0x1000, 0xfffffffc, 0x200, 0x7fffffff}, {0x8000, 0x1, 0x101, 0x3ff, 0x15, 0x200}, {0x1, 0x4, 0x0, 0x4, 0x3, 0x8}, {0xcf, 0x5, 0x8000, 0x1, 0x1000000, 0xffffffe0}, {0x6, 0x5, 0x2, 0x9, 0x3, 0x9}, {0x9, 0x3, 0x8, 0x7, 0x8, 0x7}, {0x1000, 0x3, 0x93ab, 0xffff, 0x4658, 0xc9d}, {0xffffffff, 0x80000000, 0x6, 0x3, 0x2, 0x1}, {0x5, 0x2, 0x1000000, 0x2, 0x3, 0xb1}, {0x4, 0x6, 0x0, 0x1ff, 0xe163, 0x9}, {0x2, 0xc26, 0x80, 0x1ff, 0x4a2ce85a, 0x3}, {0x9, 0x8, 0x6, 0x400, 0xffffffe1}, {0x401, 0xffff3005, 0x200, 0x4, 0x7fffffff, 0x8000}, {0x7b, 0x7fffffff, 0x7c0a, 0x3ff, 0x8000, 0x15e274f1}, {0x5, 0x5, 0x6, 0x9, 0x2}, {0xe52, 0x9e, 0xa6, 0x4, 0x9}, {0x3ff, 0xffffffff, 0xffffff00, 0x3, 0x41, 0x200}, {0x5, 0xfffff000, 0x898b, 0xff, 0x3c5}, {0x18, 0x5, 0x8001, 0x7, 0x7fff, 0x6}, {0x6, 0x9, 0x4, 0xfffffffa, 0xfffff577, 0x9d9}, {0x9, 0xfffffffd, 0xdb, 0x100, 0x6, 0x400}, {0x8, 0x5, 0x4, 0x101, 0x1, 0x3}, {0x10000, 0x1, 0x7, 0x80000000, 0x2, 0x6af9}, {0x18d, 0xfffff000, 0x3, 0xffff8949, 0x20}, {0x81, 0x101, 0x5, 0xf2, 0x0, 0x1f}, {0x2080, 0x10001, 0xfffffffd, 0x5, 0x7f, 0x5}, {0xffffffff, 0x1f, 0x7, 0x2, 0x200, 0x1}, {0x1ff, 0xbc, 0x4, 0x437e, 0x8, 0x2}, {0x9, 0x7fffffff, 0x6, 0x7, 0x3, 0x10000}, {0xa8, 0x7fffffff, 0x6, 0x3f, 0x6, 0x2}, {0x7fffffff, 0x7fffffff, 0x0, 0x7fffffff, 0x9, 0x5}, {0x6, 0x1, 0x2, 0x7ff, 0x800, 0x6e4}, {0xff, 0x7, 0x9, 0x7, 0x7, 0x20}, {0xc71, 0xe0000000, 0xd52, 0x18, 0x1, 0x5f960000}, {0x401, 0x1, 0x400, 0x5, 0x5}, {0x3f, 0x6, 0x17, 0x7fff, 0x79be, 0x6}, {0x100000, 0x324a, 0x8, 0x9, 0x8000, 0x9}, {0x80000001, 0x0, 0x9, 0x3f, 0x0, 0x3f}, {0xa0000, 0x10001, 0x10b3, 0x80, 0x2, 0x3}, {0x200, 0x81, 0x6, 0x8, 0x8, 0x4fb112eb}, {0x3ff, 0x0, 0x10000, 0x0, 0x0, 0xffffff01}, {0x0, 0x10001, 0x8, 0x469, 0x983, 0x3}, {0x5f, 0x0, 0x3e9000, 0x6, 0x40, 0x56}, {0x1, 0x6, 0x1, 0x8, 0xbbf0, 0xffffffff}, {0x80000000, 0x9, 0x1ff, 0xfffffffe, 0x5, 0x200}, {0x3, 0x7ae, 0xe39, 0x4, 0x8, 0x1}, {0x2, 0x1, 0x8, 0xffff, 0x0, 0x6}, {0xdb0e, 0x9, 0x2, 0x0, 0x7, 0x8}, {0x8, 0x1000, 0x1, 0x5, 0x0, 0x7}, {0x2c9, 0x6, 0x66, 0x3, 0x4}, {0xfa4, 0x9, 0x6, 0x27, 0x20000000, 0x8}, {0xf1, 0x3, 0x101, 0x6, 0x0, 0x6b3f}, {0x6, 0x3, 0x7, 0x4, 0x10000, 0x7ff}, {0x3, 0x8, 0x9, 0xe70a, 0x40, 0x401}, {0x7, 0x7, 0x7, 0xd1, 0x80, 0xff}, {0x221, 0xfffffffe, 0x10001, 0xc01, 0x308, 0x9}, {0xffffff7f, 0x2, 0x33, 0x2, 0x78fa, 0x73}, {0xe12, 0x1, 0x9, 0x8, 0x8, 0x80000000}, {0x2640, 0xffff60bf, 0x80, 0x3f, 0x3ff, 0x2}, {0x6, 0x9, 0x1, 0x80000000, 0x10001, 0x100}, {0x2, 0x3, 0x9, 0x0, 0x68, 0x5}, {0x2, 0x418, 0xb834, 0xc7, 0x9, 0x6}, {0xffffffa0, 0x40, 0x2, 0x7, 0x6, 0x3}, {0x3f, 0x97, 0xfffffff7, 0x5, 0x7fff, 0x6}, {0x3, 0x20, 0x101, 0x400, 0x7, 0x1}, {0x0, 0x7, 0x3, 0x6, 0x7, 0x9}, {0x7f, 0x2, 0x401, 0x2, 0x7ff, 0xfffff6e9}, {0x80000001, 0x6, 0x6, 0x4, 0x1029, 0x8}, {0xffff9857, 0x4, 0x81, 0x5e000000, 0x4}, {0x0, 0x1, 0xfffffbff, 0x10000, 0x4, 0x8}, {0x6, 0x10000, 0x401, 0x3, 0x8d, 0x800}, {0x71dd, 0xa9, 0x4, 0x6, 0x1f, 0x2}, {0x7, 0x7, 0x8, 0x0, 0x2, 0x1000}, {0x2, 0x900000, 0x3ff, 0x7fffffff, 0x6, 0x8}, {0x1, 0x5, 0x80, 0xfff, 0x40, 0x52}, {0x5, 0x2, 0x6, 0x9, 0x7, 0x4f}, {0x7, 0x9, 0x1, 0x3, 0x100, 0xb8c8}, {0x65, 0x0, 0xbeb, 0x8, 0x20000000, 0x2}, {0x401, 0xffffff57, 0x7, 0x2, 0x9, 0x1}, {0xfffffffc, 0x8, 0x1, 0x200, 0x3, 0x4}, {0x0, 0x9, 0x86, 0xafbd, 0xfa45, 0x800}, {0xfffffff7, 0x5, 0x200000, 0x8, 0xffff, 0x80000000}, {0x5, 0x8d2, 0xfff, 0x80, 0x1ff, 0x401}, {0x80, 0x0, 0x4, 0xa000, 0x76a6, 0x7e}, {0x100, 0x0, 0x9, 0x1, 0xd426, 0x80000001}, {0xffff63d7, 0x8000, 0x401, 0x8000, 0x0, 0x7}, {0x0, 0x9, 0x9, 0x100, 0x5, 0x6}, {0x100, 0x5, 0xb97, 0x6, 0x1, 0x2ac}, {0x9, 0x7, 0x5, 0x8000, 0x1f, 0x8000}, {0xf96, 0x5, 0x9, 0x3, 0x2, 0x98}, {0x1000, 0x166, 0x7807, 0x2, 0xaac, 0x80000000}, {0x7ff, 0x7fffffff, 0x2, 0x0, 0x200, 0xbdf}, {0xe8, 0x8, 0x7, 0x81, 0x3, 0x2}, {0x4, 0x8, 0x401, 0x7f, 0x6, 0xffffff33}, {0x5, 0x3, 0x0, 0x6, 0x9, 0x400}, {0x1, 0xc3fb, 0x7, 0xfffff000, 0x7f, 0x3}, {0x8, 0x3, 0x1, 0x7fff, 0x4, 0xc}, {0x0, 0xfffffff8, 0x800, 0x7f, 0x1, 0x7}, {0x3ff, 0x80000001, 0x7656, 0x1df, 0x40, 0x3}, {0x94, 0x3, 0x696, 0x20, 0x1, 0x307}, {0x2, 0xff, 0x4, 0x1ff, 0x7, 0x4}, {0x8001, 0x4, 0x4, 0x9, 0xffffffff, 0x7}], [{0x5}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x1}, {0x3}, {}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {}, {}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x1}, {0x6}, {0x4, 0x1}, {0x4}, {0x1}, {0x81048a022870cc07}, {0x3}, {0x1, 0xb238a431259d9139}, {0x2}, {0x2, 0x1}, {0x3}, {0x4}, {0x4, 0x1}, {0x5}, {0x5}, {0x5, 0x1}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x5, 0x39e2192240427c43}, {0x4}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x4}, {0x3}, {0x1}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1}, {0x5}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {}, {0x2, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x2}, {0x4, 0x1}], 0x1}}]}, {0x39, 0x6, "753ba7caf6757461151d3330db3ed04ef04702ca9bca066ffe4ff61172a5b946159d1e2b2b010f9f6708fea10d16f7afa976c97cee"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_ct={0xd4, 0x5, 0x0, 0x0, {{0x7}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @mcast1}, @TCA_CT_ZONE={0x6, 0x4, 0x2}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private2={0xfc, 0x2, '\x00', 0x1}}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}]}, {0x74, 0x6, "28bf098e09ae02ea7f2bc68a92ab62b7ea42c79d6e0b2dc537e42914d3084d32dc7a2fa8e7e6b663b766155fd8baa31dee7ee404edbb681c436830035a35942f5506cbea3c93949e3bb85aedde344fbcc45092f252e43bef4e1b0dd5d49a445065b853da8f70c76e72561eeb4a9e3703"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_vlan={0xc4, 0x1f, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x76, 0x6, "215dc4b5681b6810cf81b5cbe4f5468c1f924071dd0a60b2bd235dae99e0c2884598a00155772c438fb04c10e1ace033714b4b4921e9c0695030049e4a9d71e6c3f2085209b504ab01fcf4a276845013c3fadd62deeee4acaee2943294576e19e05c7ae671bd7e8ae56741c410785d68c423"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_TCINDEX_SHIFT={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x7ff}, @TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x40e8}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004800)={0x18, 0x5, &(0x7f0000000540)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x5}, @ldst={0x2, 0x1, 0x0, 0x7, 0x0, 0x4, 0xfffffffffffffffc}, @generic={0x8f, 0x9, 0x6, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff9}], &(0x7f00000046c0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000004700)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000004740)={0x5, 0xc, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000004780)=[r0], &(0x7f00000047c0)=[{0x4, 0x5, 0x8, 0x2}, {0x0, 0x4, 0xd, 0x3}, {0x3, 0x3, 0xb, 0x8}], 0x10, 0x3ff}, 0x90) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r3, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001280)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x4788}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)=@bridge_newvlan={0x68, 0x70, 0x200, 0x70bd27, 0x25dfdbfe, {0x7, 0x0, 0x0, r10}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x11}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x48, 0x2}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x1}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x9}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x7}}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x8004) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r12, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r13], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r11, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r6, r5, 0x0, 0x100000002) 04:39:31 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={&(0x7f0000000000), 0xf8, &(0x7f00000003c0)={&(0x7f0000000440)={0x480, 0x0, 0x2, 0x0, 0x0, 0x0, {}, [@CTA_EXPECT_NAT={0x1cc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x88, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_NAT_TUPLE={0x40, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x2a}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @empty}}}]}, @CTA_EXPECT_NAT_TUPLE={0x7c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, @CTA_EXPECT_MASTER={0x84, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x2d}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_NAT={0x110, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x0, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE, @CTA_TUPLE_ZONE, @CTA_TUPLE_PROTO, @CTA_TUPLE_ZONE, @CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv6={{0x0, 0x3, @remote}, {0x0, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv6={{0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x0, 0x4, @local}}}]}, @CTA_EXPECT_NAT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @loopback}}}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_EXPECT_NAT_TUPLE={0x58, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_NAT_TUPLE={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_MASK={0xa0, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @broadcast}}}]}, @CTA_EXPECT_NAT={0x54, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x480}}, 0x0) [ 449.971228][T22848] RAX: ffffffffffffffda RBX: 0000000000100000 RCX: 00007fb8a5d8082f [ 449.979190][T22848] RDX: 0000000000100000 RSI: 00007fb89ccc3000 RDI: 0000000000000006 [ 449.987179][T22848] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000598 [ 449.995139][T22848] R10: 00000000000003ec R11: 0000000000000293 R12: 0000000000000006 [ 450.003104][T22848] R13: 00007fb8a5103e7c R14: 00007fb8a5103e80 R15: 00007fb89ccc3000 [ 450.011218][T22848] 04:39:32 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001240)='./bus\x00', 0x800000, &(0x7f0000000540)=ANY=[], 0x1, 0x125e, &(0x7f0000001280)="$eJzs3U9rI2UcB/Bf2vRf1jZV19VdEB/0oghx24MnL0V2QSwo1S6oIMzaVEPTpDShEBG3njwJvgxRj94E8Q304sWzIIj04nEPYqSdoJs26eK2TRf5fC55eGa+zzN/mIEJ82P2X/lyc2O9VVnP2jFWKERxayKKd1OkGIvxyO3GC7d+/uXpt9559/Wl5eUbKyndXHp74eWU0twzP7z3ybfP/ti+dOu7ue+nYm/+/f0/Fn/du7J3df+vb6LWSrVWajTbKUu3m812drteTWu11kYlpTfr1axVTbVGq7rdt3y93tza6qSssTZb2tqutlopa3TSRrWT2oXU3u6k7MOs1kiVSiXNloLTWP36brfbjeh2J2Iyut1udyZKcSkeidmYi3LMx6PxWDwel+OJuBJPxlNx9XCti95uAAAAAAAAAAAAAAAAAAAA+H+5T/1/Qf0/AAAAAAAAAAAAAAAAAAAAnL+j9f/FCN//BwAAAAAAAAAAAAAAAAAAgBG7z/f/j9T/v6j+HwAAAAAAAAAAAAAAAAAAAM7DdP6zktJ0xObnO6s7q/lv3r+0HrWoRzWuRzn+jMPq/1zevvna8o3r6dB8vLR5p5e/s7M63p9fiHLMFwbmF/J86s9PRene/GKU4/Lg+RcH5qfj+ecO8p/l+UqU46cPohn1WIso9Pb+MP/pQkqvvrE805+/drDeUOPnfFoAAADgLFXSPwY+v1cqw5bn+d7zeeoNVzjh/4Ejz+fFuFa8uP0m1+p8vJHV69XtB2xMDh9n8nQjH2sUIqK/Z67028rB5Gc2xYM2xkc66cTJ65zinEbxITiYZ9D4/at7eqZjtLOP9S6JrL4bEQ/B0Rh6MU6dlBp+zyiM4L7EaPx70i96SwAAAAAAAAAAAPgvBr79NxMRx94H/OhYz25vjP748ZGHz/7FCPYQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+JsdOBYAAAAAEOZvnUbHBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfBUAAP//Q97RDA==") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000001980)=0x2000000000000, 0x12) 04:39:32 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@cb_func]}, &(0x7f0000000080)='syzkaller\x00', 0x6, 0xff, &(0x7f0000000380)=""/255}, 0x90) [ 450.032923][T22848] loop1: detected capacity change from 0 to 2048 [ 450.149273][T22867] loop4: detected capacity change from 0 to 8192 04:39:32 executing program 1: mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x0, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) syz_read_part_table(0x59e, &(0x7f00000017c0)="$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") (fail_nth: 32) 04:39:32 executing program 0: syz_clone(0xf0003000, 0x0, 0x0, &(0x7f00000022c0), 0x0, 0x0) getegid() 04:39:32 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x1, 0x0, 0x2}}], 0x1, 0x4000041) 04:39:32 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001240)='./bus\x00', 0x800000, &(0x7f0000000540)=ANY=[], 0x1, 0x125e, &(0x7f0000001280)="$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") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000001980)=0x4000000000000, 0x12) 04:39:32 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x1, &(0x7f00000000c0)=@framed, &(0x7f00000006c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r1}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r3, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = dup2(r0, r2) openat$cgroup_ro(r6, &(0x7f00000002c0)='cgroup.freeze\x00', 0x0, 0x0) (async) openat$cgroup_ro(r6, &(0x7f00000002c0)='cgroup.freeze\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r8], 0x2c}}, 0x0) sendfile(r5, r4, 0x0, 0x100000002) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001280)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4788}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r9) (async) r10 = dup(r9) epoll_create1(0x0) (async) epoll_create1(0x0) getsockname$packet(r10, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x2, &(0x7f0000000580)=ANY=[@ANYBLOB="1817f8ff39e58171a95b31315de55af6fc000000090000000000000006000000"], &(0x7f0000000340)='GPL\x00', 0x100, 0xff, &(0x7f0000000400)=""/255, 0x41100, 0x4c, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000000500)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x3, 0xc, 0x19c12932, 0x1000}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r10], 0x0, 0x10, 0xfffffffe}, 0x90) 04:39:32 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x23, 0x0, &(0x7f0000001740)) 04:39:32 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x1, 0x0, 0x3}}], 0x1, 0x4000041) 04:39:32 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001000)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0xf, &(0x7f0000000100)=ANY=[@ANYRESDEC=r0], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) [ 450.621482][T22876] loop4: detected capacity change from 0 to 8192 [ 450.735048][T22881] FAULT_INJECTION: forcing a failure. [ 450.735048][T22881] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 450.748363][T22881] CPU: 0 PID: 22881 Comm: syz-executor.1 Not tainted 6.7.0-rc1-syzkaller-00125-g7475e51b8796 #0 [ 450.758820][T22881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 450.768883][T22881] Call Trace: [ 450.772164][T22881] [ 450.775080][T22881] dump_stack_lvl+0xda/0x130 [ 450.779739][T22881] dump_stack+0x15/0x20 [ 450.783920][T22881] should_fail_ex+0x21f/0x230 [ 450.788613][T22881] __should_fail_alloc_page+0xfd/0x110 [ 450.794168][T22881] __alloc_pages+0x108/0x340 [ 450.798793][T22881] alloc_pages_mpol+0xb1/0x1d0 [ 450.803604][T22881] shmem_get_folio_gfp+0x3b2/0xb40 [ 450.808874][T22881] shmem_write_begin+0xa0/0x1b0 [ 450.815745][T22881] generic_perform_write+0x1c9/0x410 [ 450.821037][T22881] ? shmem_write_begin+0x1b0/0x1b0 [ 450.826803][T22881] shmem_file_write_iter+0xc8/0xe0 [ 450.831917][T22881] vfs_write+0x48a/0x790 [ 450.836218][T22881] ksys_write+0xeb/0x1a0 [ 450.840572][T22881] __x64_sys_write+0x42/0x50 [ 450.845165][T22881] do_syscall_64+0x44/0x110 [ 450.849721][T22881] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 450.855680][T22881] RIP: 0033:0x7fb8a5d8082f [ 450.860124][T22881] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 04:39:32 executing program 0: socket(0x2, 0x0, 0xfffffb96) 04:39:32 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x1, 0x0, 0x4}}], 0x1, 0x4000041) [ 450.879756][T22881] RSP: 002b:00007fb8a5103dd0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 450.888242][T22881] RAX: ffffffffffffffda RBX: 0000000000100000 RCX: 00007fb8a5d8082f [ 450.896357][T22881] RDX: 0000000000100000 RSI: 00007fb89ccc3000 RDI: 0000000000000006 [ 450.904373][T22881] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000598 [ 450.912365][T22881] R10: 00000000000003ec R11: 0000000000000293 R12: 0000000000000006 [ 450.920375][T22881] R13: 00007fb8a5103e7c R14: 00007fb8a5103e80 R15: 00007fb89ccc3000 [ 450.928613][T22881] 04:39:32 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001240)='./bus\x00', 0x800000, &(0x7f0000000540)=ANY=[], 0x1, 0x125e, &(0x7f0000001280)="$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") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000001980)=0x6000000000000, 0x12) 04:39:32 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000005c0)=@newtfilter={0x40e8, 0x2c, 0x800, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x2, 0xd}, {0x1, 0xa}, {0x0, 0xfff1}}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_tcindex={{0xc}, {0x40a0, 0x2, [@TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}, @TCA_TCINDEX_POLICE={0x58, 0x6, [@TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9e05}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3ec1f9e0, 0xffffffffffffffff, 0x5b2a, 0x4, 0x5, {0x80, 0x0, 0x1, 0x5, 0x1f, 0x3}, {0x2, 0x1, 0x7fff, 0x4, 0x2e0a, 0x9}, 0x9, 0x8, 0x1ff}}]}, @TCA_TCINDEX_POLICE={0xa0, 0x6, [@TCA_POLICE_RESULT={0x8, 0x5, 0xfffff801}, @TCA_POLICE_RATE64={0xc, 0x8, 0x60800}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x8, 0x2c6, 0x9, {0x0, 0x2, 0x6, 0x3, 0x9, 0x6}, {0x7, 0x0, 0x7, 0x1, 0x9, 0x2eb}, 0x0, 0x6, 0x3}}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x6, 0x101, 0x1, 0x8, {0x7, 0x0, 0x0, 0x40, 0x6, 0x7ff}, {0x8, 0x0, 0x0, 0xffff, 0x80, 0x7ff}, 0x40, 0x3, 0x7}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}]}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x5}, @TCA_TCINDEX_POLICE={0xca4, 0x6, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0xd4, 0x6, 0x3, 0xa5b3, 0x8, 0x3ff, 0x2, 0x3, 0x2, 0x2, 0x1ff, 0x1, 0x9, 0x3, 0x8, 0x4, 0xa0, 0x5, 0x55b, 0x20, 0x8001, 0x2, 0x64, 0x3f, 0x2, 0x7, 0x400, 0x3, 0x903, 0x5, 0x5, 0x6ca, 0x10001, 0x6, 0x7, 0x1f, 0x1, 0x10001, 0x4, 0x7fffffff, 0x0, 0xfffffc00, 0x7f, 0x1000, 0x80000001, 0x8, 0x6, 0xfffffff7, 0x6, 0xa8, 0x81, 0xfdd, 0x400, 0xfffff001, 0x7, 0x1, 0x4, 0x7e6, 0x3, 0x5, 0x10000, 0xa18, 0x101, 0x100000, 0x3170401b, 0x7, 0x4, 0x161df594, 0x6b11f21c, 0x9, 0x401, 0x4, 0x8, 0x9, 0x80, 0xff, 0x578f, 0x3f, 0x964d, 0x8, 0xffff, 0xcad, 0x0, 0x7, 0x5, 0x4, 0x9, 0x4, 0x8, 0x1, 0x3, 0x8, 0x80000000, 0x80000001, 0x7f, 0x7, 0x5, 0x2, 0x3, 0x6, 0x80000001, 0x4, 0x38, 0x3d75, 0x7, 0x5, 0x9, 0x13585c94, 0x10000, 0xab7f, 0x1ff, 0x0, 0x0, 0x5, 0x0, 0x8, 0x2, 0xff, 0x6dc, 0x8, 0x484, 0xfff, 0x9b, 0x8, 0x7ff, 0x6, 0xef87c804, 0xff, 0x525f4ba1, 0x3, 0xd261b34f, 0x8000, 0x10000, 0xff, 0x1000, 0x3, 0x7fff, 0x5f0, 0x1, 0x81, 0xfffffff9, 0x9, 0x5, 0x5, 0x4, 0x0, 0x80, 0x6, 0x6, 0x4, 0xecb2, 0x3a5, 0x3ff, 0x5, 0x9, 0x4, 0x92a6, 0x8ba, 0xe518, 0x5, 0x6, 0x0, 0x4, 0x2, 0xff, 0x6bd, 0x6a97, 0x0, 0x80, 0xfffff800, 0x7f, 0x1, 0x2, 0x4, 0x6, 0xffff8001, 0x6, 0x3, 0x400, 0x2, 0x6, 0x1, 0x7b, 0x10001, 0x8, 0x2, 0x2, 0x1, 0x7fffffff, 0x8f42, 0xf2, 0x7fff, 0xf602, 0x1f, 0x6, 0x9818, 0xfffffffe, 0x8e, 0x8, 0x3, 0x4, 0x2, 0x5, 0x0, 0xff, 0x0, 0x9, 0x4, 0x1000, 0x0, 0x3, 0x4, 0x0, 0x5, 0x200, 0x0, 0x4, 0xa, 0x5, 0x47a, 0x4000000, 0x3ff, 0x2, 0xf4000000, 0x59, 0x7, 0xab8, 0x5, 0x7fff, 0x401, 0xe2, 0x20, 0x1ff, 0x8610, 0x9, 0xde3c, 0xffff, 0x63, 0x2, 0x7, 0x3, 0x79bc3abb, 0x7, 0xc00000, 0x7fffffff, 0x0, 0xfffff801, 0x4, 0x7ff, 0x3, 0xffff0001, 0x0, 0x2, 0x401, 0x401]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x3, 0x1000, 0x9, 0x3c, 0x8, 0x6e0, 0x3f, 0x3, 0x307e, 0x101, 0x0, 0x4e, 0x1ff, 0x8, 0x7ff, 0x8, 0x2, 0x4, 0x842d, 0x28, 0x6, 0x80000001, 0xfff, 0x6, 0x2, 0x6, 0x3, 0x4, 0xff, 0xfffffe01, 0x0, 0x9, 0x4, 0x2, 0x20000, 0xcc, 0x14c6, 0x1, 0x7, 0x9, 0x7fff, 0x4, 0x23b, 0x1, 0x0, 0x1, 0x3827, 0x8, 0x667c, 0x6, 0x5, 0x8001, 0x8, 0x1, 0xfffffff7, 0x200, 0x5, 0x5a71, 0xfffffffa, 0x4, 0x80000000, 0x2, 0x1, 0x9, 0x4, 0x5, 0x1, 0x2, 0x6, 0x9, 0x80000001, 0x4, 0x3, 0x2, 0x7ff, 0x81, 0x37, 0x1, 0x4, 0xde, 0x4, 0x40, 0xd7, 0x6, 0x9, 0x1ed, 0x8, 0x7f, 0x0, 0x3, 0x0, 0x4, 0x81, 0x80000000, 0x80000001, 0x0, 0x9, 0x0, 0x0, 0x3, 0x883, 0x7, 0x6, 0x2, 0x58, 0x4, 0x3, 0x6, 0x200, 0xfff, 0x5, 0xfffffff1, 0x9, 0x84, 0x8, 0x4, 0x7ff, 0x8, 0x3ff, 0x7fffffff, 0x2, 0x3, 0x7, 0x401, 0x8001, 0x6, 0x4, 0x1, 0x5155, 0xc8, 0x1, 0x1f, 0x9, 0x0, 0x4, 0x50cf49e0, 0x5, 0xfffffffe, 0xfffffffc, 0x0, 0x3f, 0x8, 0x8, 0x3, 0x800, 0x2, 0x6, 0x1281, 0x1ff, 0xf584, 0x0, 0x2, 0x9, 0xfffffff7, 0x6, 0x0, 0x7e, 0x8, 0x7ff, 0x8, 0x3ff, 0x2, 0x1f, 0xfffffffa, 0x6, 0x6, 0xfffffff7, 0x5, 0xe, 0x5, 0x0, 0xff, 0xf59, 0x1, 0xe33, 0xfff, 0x8000, 0x9485, 0x7, 0x1, 0x4, 0xe08, 0xfff, 0x7, 0x2, 0x100, 0x1, 0x627212c5, 0xfffff001, 0x5, 0x9, 0x800, 0x7a, 0x0, 0x74c000, 0x9, 0x101, 0x2, 0x8, 0x7fffffff, 0x800, 0x6, 0xbf40, 0x0, 0x9, 0x0, 0x4, 0x80000000, 0x7031, 0x800, 0x9, 0x5, 0x7, 0x4, 0xffc000, 0x400, 0x9ba5, 0x0, 0x142c, 0xabc174a7, 0x3, 0x7fffffff, 0x1, 0xd842, 0x401, 0x5, 0x9, 0x10001, 0x0, 0x6fe0, 0x7, 0x6, 0x7, 0x4, 0x5, 0x2, 0x7, 0x7d9c7657, 0x40000000, 0x2, 0x4, 0x9, 0x4, 0x2, 0x1, 0x7ff, 0x2, 0x7f, 0x9, 0x10001, 0x1, 0x4, 0x9, 0x8, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10001, 0x2, 0x10000, 0x400, 0x37f0, 0x5, 0x8, 0x1f, 0x2, 0x4, 0x7, 0x7, 0x5, 0x1, 0x0, 0x10001, 0x10001, 0x5, 0x6, 0x9, 0xffffff01, 0x0, 0xfffffff8, 0x200, 0x5, 0x80, 0x3f, 0x2, 0x40, 0x1f, 0x809, 0x100, 0x7, 0x2, 0x6, 0x6, 0x6, 0x0, 0x5, 0xffffffc0, 0x6a54, 0x9, 0xfe7, 0x2, 0x10001, 0x3f, 0x80000001, 0xfffffff8, 0x9, 0x1f, 0x9, 0x4, 0x2, 0x0, 0x200000, 0xfff, 0xfffffffc, 0x9, 0x5, 0x200, 0x7, 0x9, 0x6, 0x1, 0x2, 0x1, 0x17, 0x5, 0xff, 0x4, 0x1, 0x1, 0xd9a, 0x7, 0x5, 0xfff, 0x10000, 0x9, 0x0, 0x477, 0xffffffff, 0x8000, 0x7, 0x0, 0x0, 0x5, 0x8, 0x30000, 0x0, 0x9, 0x1, 0x7f, 0x200, 0x0, 0x8, 0x81, 0x401, 0x9, 0x0, 0x2, 0x4, 0x2, 0x6, 0x3, 0x1, 0x2, 0xa56b, 0x0, 0x10000, 0x40, 0x5, 0x7, 0x4, 0x1f, 0x6, 0x7fffffff, 0xffffff43, 0x0, 0x1, 0x8, 0xaf, 0xfff, 0x400, 0x5, 0x3, 0x3, 0x64, 0x1, 0x0, 0x109a5478, 0xe80, 0x0, 0x7fff, 0x8001, 0x4, 0x101, 0x80000000, 0x7, 0x3, 0x401, 0x10000, 0x6000000, 0x8, 0x0, 0x5, 0x8, 0x6, 0x7fff, 0x8, 0x1, 0x7ff, 0x7, 0x8, 0x1, 0xd7, 0x5c7, 0x0, 0x86d, 0x3, 0x7ff, 0x2, 0x4, 0x0, 0x1, 0x3, 0x400, 0x1, 0x10000, 0x7f, 0x0, 0xfffffff8, 0x101, 0x4, 0x9, 0x10000, 0x8, 0x3, 0xf49, 0xffff, 0x40, 0xfffffff4, 0x8, 0x80000001, 0x3, 0x77a, 0x80000001, 0xb, 0x20, 0x3, 0x4, 0xe589, 0x9, 0x1, 0x8, 0x7fff, 0x0, 0x7fff, 0x8e, 0x7, 0x282, 0x7, 0x7, 0x3, 0x100, 0x1, 0x9, 0x5, 0xffffda6c, 0x7, 0x2, 0x401, 0x1, 0x80000001, 0x7f, 0x6, 0x8, 0x10001, 0x480000, 0x7ff, 0xfffffffa, 0x5, 0x8, 0x2, 0x1, 0x8c851b9, 0xff, 0x2db6, 0x4, 0x28f53e60, 0x3, 0x9, 0xf2, 0xffff, 0x5c, 0x800, 0xfffff140, 0x0, 0xffffffff, 0xffff0c8a, 0xa4b, 0x4000000, 0x5, 0x0, 0x3, 0x7fff, 0x62, 0x7, 0xffff, 0x4, 0x8, 0xfffffffd, 0x5, 0x1a0, 0x8000, 0x10000, 0x80]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0xffffffffffffffff, 0x8001, 0x1f, 0x9d, {0xb5, 0x1, 0x4, 0x4, 0x3, 0x6}, {0x8, 0x1, 0x4, 0x8000, 0x294, 0xffff}, 0x3, 0x7, 0x7}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8001, 0x6, 0x101, 0x80000001, 0x0, {0x0, 0x2, 0x800, 0x44e1, 0x40, 0x8}, {0x3, 0x0, 0x8001, 0x8, 0x6, 0x4}, 0x80000001, 0x8000, 0x8}}]}, @TCA_TCINDEX_HASH={0x8, 0x1, 0x7da0}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x7}, @TCA_TCINDEX_ACT={0x32d8, 0x7, [@m_pedit={0x313c, 0x1c, 0x0, 0x0, {{0xa}, {0x30d8, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x14c, 0x5, 0x0, 0x1, [{0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x8, 0x80000001, 0x3, 0x0, 0x7}, 0x3f, 0x6f, [{0x8, 0x10000, 0x8, 0x3f, 0x3f, 0x8}]}, [{0x2, 0x0, 0x6, 0x1f, 0x4, 0x1}, {0x1, 0x3, 0x401, 0x80000000, 0x7, 0x25e0cdb4}, {0x10000, 0x9, 0x0, 0xfff, 0xc7, 0x101}, {0x8, 0x7, 0x800, 0x6, 0x8e9, 0xfffffffa}, {0x0, 0x10001, 0x6, 0x200, 0x3, 0x401}, {0x6, 0x800, 0x5, 0x2, 0x5, 0x3}, {0x101, 0x4, 0xfffff801, 0x1, 0x3, 0x9c17}, {0x5, 0x4, 0x800, 0x8, 0x8, 0x1}, {0x7, 0x0, 0x4, 0x2, 0xff, 0x975}, {0x1, 0x3, 0x0, 0x5, 0x9, 0x2}, {0xfff, 0x7, 0x0, 0xfffffffa, 0x0, 0x6}, {0xf4, 0x80000000, 0xd51, 0x8, 0x5, 0x7}, {0xff9c, 0x0, 0x2, 0x8ec4, 0x9, 0x4}, {0x1, 0x7, 0x7, 0x10001, 0x6, 0x3ff}, {0x101, 0x0, 0x28000000, 0x4, 0x4, 0x3}, {0x805, 0xfffeffff, 0x3, 0x7fff, 0x3e, 0x6}, {0x1, 0x6, 0xfffff801, 0x4, 0x2, 0x9255}, {0x9, 0x4, 0x8, 0x1, 0x6, 0x7}, {0x6, 0xfffffffe, 0x7ff, 0x80, 0x7, 0xffff}, {0x100, 0x5, 0x1, 0x15, 0x9, 0x7}, {0xe328, 0x8000, 0x6, 0x5}, {0x9, 0x2, 0x0, 0x9, 0x2, 0x7}, {0x7, 0x400, 0x2, 0x7, 0x6, 0x5}, {0x1, 0x40, 0x6, 0x6, 0x1, 0x4a9}, {0xffffffff, 0x7dbc5125, 0x80, 0x0, 0x6, 0x1}, {0x3c, 0x1, 0x1ff, 0x40, 0x4, 0xfffffff7}, {0x1, 0x4, 0x1, 0x804, 0x3, 0x20}, {0x28f5, 0x0, 0x1000, 0x0, 0x1, 0x7}, {0x6, 0x2, 0x934a, 0x9, 0x6d50, 0x1}, {0xf4, 0x7fffffff, 0xe327, 0x1f, 0xffffffc5, 0x2000000}, {0x1ff, 0x5, 0x2, 0x5, 0xdad, 0x6}, {0x7fff, 0x1, 0x0, 0x6, 0x2, 0x1}, {0x6, 0x80000001, 0x6e8f855b, 0x7, 0x80, 0x401}, {0x1ff, 0x1, 0x1f, 0x4, 0x2, 0x4}, {0x7ff, 0x8001, 0x2, 0x7cb, 0x80000001, 0x3}, {0x7, 0x401, 0x800, 0x3, 0x2, 0x4}, {0x700000, 0x100, 0x3, 0x200, 0x1, 0x33091867}, {0x3f, 0xe1, 0x101, 0x80000000, 0x7ff, 0x20}, {0x7ff, 0x0, 0x401, 0x9, 0x4, 0x3}, {0xe700, 0x0, 0x8ea9, 0xdc, 0x8, 0x3}, {0x0, 0x80, 0x1, 0xe797, 0x0, 0x4}, {0x8001, 0x0, 0x0, 0xffffffc0, 0x78d, 0x1ff}, {0x70, 0x101, 0x923f, 0x6, 0x9, 0x1f}, {0x1, 0xfffffe00, 0x4, 0x1000, 0x9, 0x4}, {0x6, 0xfffffffe, 0x1, 0x400, 0x7ff}, {0x1ff, 0x0, 0x1, 0x80000000, 0x8001}, {0x5, 0x3, 0x0, 0xffffffff, 0x400, 0xffffffff}, {0x8000, 0x401, 0x10001, 0x4, 0x1, 0x81}, {0x0, 0x6, 0x1f, 0x3, 0x1d9d, 0x200}, {0x4, 0x4, 0x1, 0x3, 0x1, 0x7fff}, {0xe0000000, 0xff, 0xffff, 0x8001, 0x4, 0x1ff}, {0x951, 0x4, 0x40, 0xff, 0x6, 0xfffffffa}, {0xfffff414, 0x9, 0x0, 0x60cc, 0x1, 0x17}, {0xffffffe1, 0x8, 0x2f6, 0x8001, 0x80000001, 0x10001}, {0x4, 0x9, 0x9, 0x4, 0x642, 0xca27}, {0x5, 0x5b6, 0x6, 0x1, 0xc517, 0x9}, {0x7fff, 0x6, 0xfffffffb, 0x5, 0xde, 0x80000000}, {0xd896, 0x7, 0x9, 0x9, 0x401}, {0x0, 0xfffffff7, 0x6, 0x7fffffff, 0x8, 0x9}, {0x7, 0x8, 0x1, 0xcc, 0x10000}, {0x0, 0x401, 0x9, 0x7, 0x83, 0x3}, {0x10000, 0x2, 0x3, 0x4, 0x7ff, 0x3ff}, {0x7fff, 0x7ff, 0x3, 0x4, 0x80000000, 0x7fff}, {0x80000001, 0x10000, 0x8, 0x1000, 0x81, 0x48f5}, {0x10000, 0x5, 0x1000, 0x4, 0x800, 0x200}, {0x3, 0xfffff001, 0x7b, 0x3f, 0x7f, 0x71c17023}, {0x1f, 0x1, 0xffffff05, 0x1000, 0x4}, {0x5c8, 0x6, 0xfffff000, 0x3, 0x0, 0x401}, {0xffffffff, 0x10001, 0x0, 0x9937, 0xf626, 0x7}, {0x1, 0x7ff, 0xce, 0xe51, 0x6, 0xdc9e}, {0xdc0b, 0x8, 0x5, 0xfffff800, 0x4, 0x7}, {0x8, 0x4, 0x81, 0x1, 0x8001, 0x3ff}, {0x2, 0x9, 0xfffff000, 0x8, 0x7fffffff, 0x7}, {0x4, 0x6, 0x3, 0x81, 0x7, 0x6}, {0x101, 0x5, 0x13a, 0x8, 0xfff, 0x82bb}, {0x1, 0x200, 0x6, 0xa1, 0xfffffffe, 0xf}, {0x0, 0x1, 0x7dc, 0x7, 0x9, 0x3ff}, {0x10000, 0x9, 0x9, 0x3, 0x4e1e, 0x6}, {0x18, 0x8, 0x9259, 0x8, 0x8, 0x401}, {0x5, 0x3f, 0x8, 0x0, 0x811b, 0x7fff}, {0x6, 0x10001, 0x0, 0x1f, 0x1ff, 0xff}, {0x8, 0x7f, 0x7, 0xaf1c, 0x4, 0x7}, {0x101, 0x1, 0x6, 0x6, 0x3, 0x2}, {0x2, 0x2, 0x9, 0x2, 0x800, 0x2}, {0x40, 0x8d4, 0x40, 0x7, 0x80000001, 0x20000}, {0x3, 0x1, 0x9, 0x1, 0x2, 0x4}, {0x9, 0x10000, 0x8, 0xdd5, 0x1, 0x1}, {0x2, 0x7f, 0x200000, 0x7, 0x5, 0x7ec}, {0x5, 0x5, 0x6, 0x1000, 0xffffff00, 0x8001}, {0x1, 0x7f, 0x0, 0x81, 0x100, 0x4b}, {0x5, 0x68, 0x9b00, 0xfffffff8, 0x1, 0x4}, {0x10001, 0xfff, 0x0, 0x1, 0x3f, 0x5}, {0x3f, 0x3f, 0x9, 0x3, 0xa37, 0x7}, {0x200, 0x5, 0x3e50, 0x20, 0x400, 0x5}, {0xfffffffe, 0x1000, 0x9, 0xccb, 0x3, 0x90ee}, {0x5, 0x8, 0x4, 0x1, 0xa7, 0x3}, {0x4, 0x20, 0x0, 0x401, 0x8, 0x42cb}, {0x9, 0xc4, 0xfffffeff, 0x6, 0x88a9, 0x3}, {0x0, 0x5, 0xfffffff9, 0x84a, 0x38, 0x800000}, {0x400, 0x7ff, 0x80000000, 0x2, 0x5d397efb, 0x25e}, {0x74d, 0x3000, 0x3f, 0x8000, 0xb0, 0x6}, {0xb5f, 0x4ae, 0x7, 0x7ff, 0x5, 0x3}, {0xb5, 0x4, 0x5, 0xffffffff, 0xee58, 0x8000}, {0x3, 0x0, 0x40, 0x5, 0xffffff1c, 0x7}, {0x7fff, 0x3, 0x2, 0x6, 0x7, 0x5}, {0x6, 0x0, 0x5, 0x8, 0x40, 0x6}, {0x7, 0x81, 0x3ef, 0x8, 0x569bda0, 0x101}, {0x401, 0x3710, 0x8, 0x2, 0x5, 0xfffffff7}, {0x9, 0x7ff, 0x100, 0x1, 0x12dd, 0x1}, {0x200, 0x40, 0x7fffffff, 0x81, 0x9, 0x3}, {0x9, 0x10001, 0x8, 0x2, 0x6, 0x9}, {0x1, 0x9, 0x8, 0x0, 0x7fffffff, 0x81}, {0x8, 0xc60, 0x7e, 0x3f, 0x6, 0x2}, {0x7, 0x10000, 0x8, 0x100, 0x7fffffff, 0x5e41}, {0x0, 0x3ff, 0x8001, 0x655f, 0x6, 0x7}, {0x11aaedd6, 0x3ac, 0x3f, 0xfffffffb, 0x20, 0x9}, {0x4, 0x20, 0x5, 0x247, 0x8001}, {0x8, 0x0, 0x7, 0x3, 0x4, 0xff}, {0xb, 0xca, 0xde1, 0x9, 0x3b32, 0x7}, {0x7fff, 0x4, 0x3d01, 0x1ff, 0x1, 0xffffffff}, {0x7fff, 0x1, 0x1, 0xcf5, 0x3, 0x6}, {0x10001, 0xd6, 0x401, 0x1000, 0x62, 0x81}, {0xfffffff7, 0xfff, 0x7, 0xfffffffa}, {0x1, 0xfff, 0x2, 0x8109, 0x2, 0xd7}, {0x4, 0xa98, 0x2, 0x9, 0x8, 0xfffffff7}, {0xd100, 0x9, 0x1, 0x7, 0x0, 0x5}, {0x7, 0x1f, 0x5, 0xd1, 0x6, 0x6}, {0x8001, 0x8, 0x7fff, 0x7f, 0x2, 0x4}], [{0x4}, {0x6}, {0x3}, {0x3}, {0x3}, {0x5}, {0x5}, {0x5}, {0x1, 0x1}, {0x4}, {0x1}, {0x5}, {0x1}, {0x3, 0x1}, {0x5}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {}, {0x0, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x79b996b20e5867f6, 0x1}, {0x3}, {0x4, 0x1}, {0x2}, {0x5}, {0x3}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x5, 0xab0c09fd00c3093f}, {0x1}, {0x4}, {0x4}, {0x2}, {0x3, 0x1}, {0x9, 0x1}, {0x4}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0xcf9ff0669b6d9b54}, {0x4}, {0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x7, 0x1}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x12c, 0x5, 0x0, 0x1, [{0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_KEYS_EX={0x14c, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x7}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}]}, @TCA_PEDIT_KEYS_EX={0x78, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS={0xe80, 0x2, {{{0x6, 0x3f, 0x7, 0x777d, 0x80}, 0xff, 0xc2, [{0x9, 0xfffe00, 0x3, 0x8, 0xacb, 0x3}, {0x40, 0x1, 0x1ff, 0x2, 0xfff, 0xcd}, {0x7fff, 0x101, 0x259, 0xd361, 0x7, 0x6}, {0x3, 0x3, 0x101, 0x5, 0x6, 0x80000001}]}, [{0x6, 0x400, 0x3, 0x1000, 0x3f, 0x80}, {0x3, 0x3, 0x9e31, 0xf5, 0x0, 0x80000001}, {0x6, 0x3ff, 0x80000000, 0x400, 0x10000, 0xfffffff7}, {0x0, 0x1, 0x1, 0xdf, 0xfffffffe, 0xa2e0}, {0x6, 0x8, 0x7, 0x10001, 0x6, 0x7}, {0xfffffe01, 0x4, 0x5, 0x6, 0x1, 0x1}, {0x5, 0x5, 0x1, 0x5, 0x4, 0x2}, {0xfffffffb, 0x4, 0x0, 0x81, 0x2, 0x3ff}, {0xfffff800, 0x4, 0x3, 0x5, 0x80000001}, {0xfffffbec, 0x6, 0x8, 0x4, 0x7, 0xff}, {0x8, 0x5, 0x2, 0xf5a, 0xffffff7f, 0x7}, {0x1, 0x0, 0x6, 0x1ff, 0x0, 0x6}, {0x4, 0x0, 0xe2, 0x40, 0xffff, 0x101}, {0x0, 0xbf7, 0x9, 0x4, 0x6, 0x40}, {0x1, 0x5, 0x1ff, 0x40, 0x8000, 0x2}, {0x10000, 0x7f, 0x100, 0x7fffffff, 0x0, 0x3}, {0x7, 0x2, 0x80000000, 0x7a, 0x8, 0x81}, {0x6, 0xfffffffe, 0x7, 0x800, 0x7, 0x5}, {0x5, 0x6, 0x4, 0x7a17b11f, 0x2, 0x7fffffff}, {0x0, 0x3f, 0x8, 0x6, 0x7, 0x7fff}, {0x9837, 0x5, 0x80000000, 0x3, 0x3, 0x4}, {0x7, 0xc2, 0x1ff, 0x4b, 0x3, 0x8}, {0x7, 0x1ff, 0xf11, 0x5, 0x3, 0x7f}, {0x8, 0xffff651d, 0x3, 0xc0000, 0xb25, 0x2}, {0x10000, 0x80000001, 0xdc07, 0x0, 0xfffffffe, 0x47d08a35}, {0x8, 0xf58c, 0x9, 0x60, 0x8, 0x1}, {0x1ff, 0x1, 0x1, 0x9, 0x5, 0xfffffffe}, {0x2, 0x5, 0x7, 0x8, 0xa0f, 0x8}, {0x6, 0x1000, 0x1, 0x8, 0x9f, 0xf57c}, {0x4, 0x401, 0xffffff7f, 0x8, 0x2, 0x5}, {0x5, 0x9, 0x9, 0x8, 0xfffffff9, 0x6}, {0x6, 0x3, 0x7, 0xf518, 0x6, 0x2}, {0x0, 0x3ff, 0x6, 0x8, 0x6, 0xf3}, {0x3, 0x1ff, 0xfffffffa, 0x9, 0x1ff, 0x9}, {0x5, 0x8001, 0x5, 0x8001, 0x3, 0x93}, {0x0, 0x4a46f1af, 0x0, 0x4, 0x7fffffff, 0x2}, {0x0, 0x1000, 0x8, 0x200, 0xffffffff, 0x3}, {0xfff, 0x5, 0x9, 0x7, 0x10001, 0x3}, {0x0, 0xc2a, 0x1, 0x9, 0x7, 0x4}, {0xffffffff, 0xfffffff8, 0x1856, 0xfe88, 0x5, 0x400}, {0x0, 0x2, 0xfffffff9, 0x7f, 0x9}, {0x1, 0x5, 0x9, 0x2, 0x6, 0x1}, {0xfffffffc, 0x4, 0x8001, 0x1, 0x0, 0x4}, {0x4, 0x3f, 0x6, 0x4, 0x1, 0x6}, {0x9, 0x4, 0x4, 0x401, 0x61, 0x6}, {0x3, 0x4, 0x401, 0x8, 0xff, 0xfffffffe}, {0xa85, 0x7fffffff, 0xc0000000, 0x100, 0x0, 0x9}, {0x0, 0x0, 0x5, 0xffffffff, 0x401, 0x5}, {0x1, 0xfff, 0x4a, 0x7, 0x2, 0x9c}, {0x9, 0x73c, 0x9, 0x2b, 0x100, 0x81}, {0x40000000, 0x5, 0xbc82, 0x3, 0x40, 0xffffff81}, {0x7, 0x1, 0x800, 0x6, 0x7ff}, {0xe77, 0x7, 0x6, 0x8, 0x8, 0x4}, {0x3ff, 0x4, 0x7f, 0x2, 0x2, 0x7f}, {0x200, 0x3, 0x1ff, 0x6, 0x8000, 0x5}, {0x9, 0xb9, 0x7, 0x5, 0xfffffff7, 0x9}, {0x8, 0xfffff801, 0x0, 0x2e104805, 0x3ff, 0x1000}, {0x3f, 0x6, 0xfffeffff, 0x5, 0x401, 0x94e}, {0x9, 0x6, 0x0, 0x0, 0x4, 0x100}, {0x3, 0x4, 0xffff, 0xfffffffb, 0xffffff2f, 0x9}, {0x3, 0x5e721550, 0x4, 0x12400, 0x7fffffff, 0x7b3}, {0x3, 0x7e000, 0xd2, 0x6, 0x1, 0x9}, {0x1, 0xf9, 0x80000001, 0x1, 0x3ff, 0x1}, {0x3, 0x3, 0xfff, 0x6, 0x9, 0x60}, {0x7, 0x3, 0x7, 0x81, 0xffff2bf5, 0x2}, {0x5, 0xffffffff, 0x3, 0x6, 0x10001, 0x3}, {0x0, 0x8, 0x7, 0x1, 0x9, 0x9}, {0x2, 0x200, 0x8, 0x1ff, 0xc471, 0x8}, {0x401, 0x4, 0x4, 0xfffffffa, 0x1, 0x1ff}, {0x20, 0x7fffffff, 0x9, 0x1ff, 0x5e, 0x4}, {0x7fffffff, 0x2000000, 0x10, 0x5, 0xfffffffa, 0x3}, {0x10000, 0xe97, 0xfffffffa, 0x4, 0x7}, {0x6, 0xfffffffb, 0x8, 0xfff, 0x20, 0x20}, {0x9, 0x1f, 0x8, 0x0, 0x2, 0x81}, {0x7, 0x1, 0x9, 0x2, 0xec9, 0x80000000}, {0x10000, 0x6, 0xfffffffd, 0x8, 0x3, 0x8}, {0xfff, 0x3, 0x3, 0x0, 0x2, 0x10000}, {0x3, 0x6, 0x80000001, 0xa87, 0x8001, 0x7}, {0x7, 0x5, 0x6, 0x0, 0x40, 0x3ff}, {0x65c, 0xc89, 0xffff, 0x6, 0x9, 0x5}, {0x1, 0x1000, 0x1, 0x4a07, 0x4, 0xfffffff8}, {0x1ff, 0x80000000, 0x6, 0xfff, 0x33, 0x1}, {0x7f, 0x3f, 0x9, 0x6a2, 0xfffff272, 0x76d8d4a1}, {0x20, 0x3ff, 0x1, 0x0, 0x0, 0x800}, {0x9, 0x8001, 0xff, 0x6, 0x1286, 0x6}, {0x3ff, 0x200, 0x9, 0xe57, 0x6, 0xa40}, {0x7ff, 0x20, 0x2d7, 0x8, 0x4, 0x680}, {0x5, 0x8001, 0xffff, 0x3, 0x1, 0x100}, {0x5, 0x6, 0x3, 0x1ff, 0x7fffffff, 0x6}, {0x7, 0x7, 0x800, 0x3, 0x3f}, {0x9, 0x4, 0xfffffff9, 0x95d, 0x0, 0xffff}, {0x4, 0x2fa, 0x6, 0x401, 0x45c, 0x7}, {0x0, 0x1, 0x8000, 0x401, 0xfffffa9d}, {0x6, 0x6, 0x5, 0x9, 0xffff, 0x3f800000}, {0x3, 0x9, 0x7, 0x7, 0x1, 0x1}, {0x3, 0x80, 0x2, 0x7, 0x800, 0x4}, {0x9, 0x3, 0x7, 0x80000001, 0x3}, {0x1, 0x5, 0x1ff, 0xfffffffb, 0x3, 0x2d5}, {0x200, 0xcf07, 0x68b, 0x3, 0x7, 0x9}, {0x7, 0x29, 0x9, 0x5, 0x3, 0x1}, {0x0, 0x3f, 0x101, 0x52, 0x1, 0x101}, {0xffffff7f, 0x6, 0xff, 0xff, 0x7, 0x7}, {0x2, 0x200, 0x1000, 0x6, 0x80000001}, {0xfffffffc, 0x8, 0x2, 0x1, 0x7f, 0xfffffcbe}, {0x80, 0x3f, 0xfff, 0x5, 0x6598, 0x9}, {0x8, 0x4, 0x9, 0x2, 0x9, 0x7f}, {0x7fff, 0x200000, 0x7, 0x80, 0x0, 0x400}, {0x8, 0x80000000, 0x36a, 0x7fffffff, 0x6, 0xe4}, {0x7fff, 0x80000000, 0x100, 0x3f, 0x0, 0x7fffffff}, {0xeb7, 0x3, 0x4, 0x2, 0x8001, 0x9}, {0x1ff, 0x7ff, 0x71, 0x401, 0x2, 0x2f}, {0x9, 0x7, 0x72c, 0x4, 0x100, 0x7}, {0x1f, 0x9, 0x8, 0x5, 0xffffff51, 0x5}, {0x3, 0x1, 0x8, 0xdb8e, 0x1, 0x3}, {0x9, 0xcff8, 0x3, 0x7, 0x6, 0x7}, {0x7, 0x200, 0x40, 0x9, 0x3}, {0x800, 0x4, 0x9, 0xfffeffff, 0x4, 0x8000}, {0x7fff, 0x200, 0x0, 0x6, 0x4, 0x7fffffff}, {0x2, 0x64acd2f4, 0x2, 0x0, 0x1, 0x8}, {0x69cd9c63, 0x8, 0x1f2a, 0x5, 0x7fff, 0x200}, {0x3, 0x7ff, 0x2, 0x4, 0x12, 0x3}, {0x2, 0x4, 0x3, 0x7, 0x6, 0x7}, {0xfef, 0x9, 0x81, 0xff, 0x1, 0x1bb}, {0x6, 0x3, 0x4, 0x1800000, 0x7ff, 0x4}, {0x0, 0x6, 0x3f, 0x7f, 0x1f, 0x7fff}, {0x9, 0x1, 0x800, 0x2, 0xc8d, 0x9}, {0x20, 0x8, 0xb0, 0x1f, 0x5, 0xff}, {0x4, 0x9, 0x4, 0x6, 0x3, 0x401}], [{}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {}, {0x2, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x9a33700b40bb241e}, {0x0, 0x1}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x7, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x6, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x4}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x1}, {}, {0x2}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x6}, {}, {0x2}, {0x3}, {0x1}, {}, {0x3, 0x1}, {0xcb1504946723a79b}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0xeca82027c89ececc}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x4}, {0x4, 0x1}, {}, {0x5}, {0x5}, {0x7, 0x1}, {}, {0x2}, {0x2, 0x1}, {0x2}, {0x1}, {0x5, 0x1}, {0x4, 0x2}, {0x1, 0x1}, {0x1}, {0x2}, {0x3}, {0x2}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x10c, 0x5, 0x0, 0x1, [{0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}]}, @TCA_PEDIT_KEYS_EX={0x84, 0x5, 0x0, 0x1, [{0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x54, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x9, 0x40, 0x6, 0x7e7, 0x7505db40}, 0xa2, 0x6, [{0x9, 0x9, 0x0, 0x10000, 0x1, 0x9}, {0x0, 0x8, 0x40, 0x200, 0x8001, 0x9}]}, [{0xa40000, 0x9, 0x97, 0x8001, 0xfff, 0xa8}, {0x101, 0x8, 0x1f, 0x1, 0x5c, 0x80000000}, {0xff, 0xfffffff7, 0x7, 0xfff, 0x6, 0xffff}, {0x7, 0x7, 0x8, 0x21de, 0x1, 0x800}, {0x3, 0x5, 0xb804, 0xbb4, 0x3f, 0x800}, {0x2, 0x8000, 0x7, 0x2, 0x3, 0x2}, {0xffffffff, 0x0, 0x101, 0x9, 0x1ff, 0x36f}, {0x7, 0x3, 0x0, 0xfff, 0x100, 0x81}, {0x7fffffff, 0x3f719303, 0x200, 0x100, 0x9, 0x8}, {0x9, 0x7, 0x0, 0x9, 0x3b3, 0x1ff}, {0x7f, 0x937, 0x3, 0x3, 0x8, 0x1d6}, {0x5, 0x9, 0x7, 0x9, 0x0, 0x5}, {0x543, 0x7, 0x6, 0x7, 0x8, 0x5}, {0xc210, 0x5, 0x0, 0x8, 0x8409, 0xd38}, {0x3, 0x40, 0xffffffff, 0x3f, 0x8, 0x7fff}, {0xde, 0x7, 0x5, 0x0, 0x805c, 0x5}, {0x200, 0x2, 0x4, 0x6, 0x401, 0x5}, {0x4f8, 0x1, 0x4, 0x401, 0xd4, 0x101}, {0x3, 0x20, 0x3, 0x7fff, 0xffffffe3, 0x800}, {0x6, 0x0, 0x80000000, 0x3c000000, 0xffff, 0x3}, {0xacacedc, 0x1880, 0x8, 0x7, 0xffffffff, 0x5}, {0x8, 0x0, 0x5, 0xd7, 0x8, 0xfffffff7}, {0x74b, 0x99, 0x7, 0x8000800, 0x86, 0xffffffff}, {0x3, 0x0, 0x8, 0xfffffffa, 0x3, 0x1}, {0x4, 0x100, 0x80000000, 0x8, 0x40, 0x7}, {0xffffffff, 0x39, 0x1, 0x8497, 0xd2, 0x7f}, {0x3, 0x5938, 0x1000, 0xfffffffc, 0x200, 0x7fffffff}, {0x8000, 0x1, 0x101, 0x3ff, 0x15, 0x200}, {0x1, 0x4, 0x0, 0x4, 0x3, 0x8}, {0xcf, 0x5, 0x8000, 0x1, 0x1000000, 0xffffffe0}, {0x6, 0x5, 0x2, 0x9, 0x3, 0x9}, {0x9, 0x3, 0x8, 0x7, 0x8, 0x7}, {0x1000, 0x3, 0x93ab, 0xffff, 0x4658, 0xc9d}, {0xffffffff, 0x80000000, 0x6, 0x3, 0x2, 0x1}, {0x5, 0x2, 0x1000000, 0x2, 0x3, 0xb1}, {0x4, 0x6, 0x0, 0x1ff, 0xe163, 0x9}, {0x2, 0xc26, 0x80, 0x1ff, 0x4a2ce85a, 0x3}, {0x9, 0x8, 0x6, 0x400, 0xffffffe1}, {0x401, 0xffff3005, 0x200, 0x4, 0x7fffffff, 0x8000}, {0x7b, 0x7fffffff, 0x7c0a, 0x3ff, 0x8000, 0x15e274f1}, {0x5, 0x5, 0x6, 0x9, 0x2}, {0xe52, 0x9e, 0xa6, 0x4, 0x9}, {0x3ff, 0xffffffff, 0xffffff00, 0x3, 0x41, 0x200}, {0x5, 0xfffff000, 0x898b, 0xff, 0x3c5}, {0x18, 0x5, 0x8001, 0x7, 0x7fff, 0x6}, {0x6, 0x9, 0x4, 0xfffffffa, 0xfffff577, 0x9d9}, {0x9, 0xfffffffd, 0xdb, 0x100, 0x6, 0x400}, {0x8, 0x5, 0x4, 0x101, 0x1, 0x3}, {0x10000, 0x1, 0x7, 0x80000000, 0x2, 0x6af9}, {0x18d, 0xfffff000, 0x3, 0xffff8949, 0x20}, {0x81, 0x101, 0x5, 0xf2, 0x0, 0x1f}, {0x2080, 0x10001, 0xfffffffd, 0x5, 0x7f, 0x5}, {0xffffffff, 0x1f, 0x7, 0x2, 0x200, 0x1}, {0x1ff, 0xbc, 0x4, 0x437e, 0x8, 0x2}, {0x9, 0x7fffffff, 0x6, 0x7, 0x3, 0x10000}, {0xa8, 0x7fffffff, 0x6, 0x3f, 0x6, 0x2}, {0x7fffffff, 0x7fffffff, 0x0, 0x7fffffff, 0x9, 0x5}, {0x6, 0x1, 0x2, 0x7ff, 0x800, 0x6e4}, {0xff, 0x7, 0x9, 0x7, 0x7, 0x20}, {0xc71, 0xe0000000, 0xd52, 0x18, 0x1, 0x5f960000}, {0x401, 0x1, 0x400, 0x5, 0x5}, {0x3f, 0x6, 0x17, 0x7fff, 0x79be, 0x6}, {0x100000, 0x324a, 0x8, 0x9, 0x8000, 0x9}, {0x80000001, 0x0, 0x9, 0x3f, 0x0, 0x3f}, {0xa0000, 0x10001, 0x10b3, 0x80, 0x2, 0x3}, {0x200, 0x81, 0x6, 0x8, 0x8, 0x4fb112eb}, {0x3ff, 0x0, 0x10000, 0x0, 0x0, 0xffffff01}, {0x0, 0x10001, 0x8, 0x469, 0x983, 0x3}, {0x5f, 0x0, 0x3e9000, 0x6, 0x40, 0x56}, {0x1, 0x6, 0x1, 0x8, 0xbbf0, 0xffffffff}, {0x80000000, 0x9, 0x1ff, 0xfffffffe, 0x5, 0x200}, {0x3, 0x7ae, 0xe39, 0x4, 0x8, 0x1}, {0x2, 0x1, 0x8, 0xffff, 0x0, 0x6}, {0xdb0e, 0x9, 0x2, 0x0, 0x7, 0x8}, {0x8, 0x1000, 0x1, 0x5, 0x0, 0x7}, {0x2c9, 0x6, 0x66, 0x3, 0x4}, {0xfa4, 0x9, 0x6, 0x27, 0x20000000, 0x8}, {0xf1, 0x3, 0x101, 0x6, 0x0, 0x6b3f}, {0x6, 0x3, 0x7, 0x4, 0x10000, 0x7ff}, {0x3, 0x8, 0x9, 0xe70a, 0x40, 0x401}, {0x7, 0x7, 0x7, 0xd1, 0x80, 0xff}, {0x221, 0xfffffffe, 0x10001, 0xc01, 0x308, 0x9}, {0xffffff7f, 0x2, 0x33, 0x2, 0x78fa, 0x73}, {0xe12, 0x1, 0x9, 0x8, 0x8, 0x80000000}, {0x2640, 0xffff60bf, 0x80, 0x3f, 0x3ff, 0x2}, {0x6, 0x9, 0x1, 0x80000000, 0x10001, 0x100}, {0x2, 0x3, 0x9, 0x0, 0x68, 0x5}, {0x2, 0x418, 0xb834, 0xc7, 0x9, 0x6}, {0xffffffa0, 0x40, 0x2, 0x7, 0x6, 0x3}, {0x3f, 0x97, 0xfffffff7, 0x5, 0x7fff, 0x6}, {0x3, 0x20, 0x101, 0x400, 0x7, 0x1}, {0x0, 0x7, 0x3, 0x6, 0x7, 0x9}, {0x7f, 0x2, 0x401, 0x2, 0x7ff, 0xfffff6e9}, {0x80000001, 0x6, 0x6, 0x4, 0x1029, 0x8}, {0xffff9857, 0x4, 0x81, 0x5e000000, 0x4}, {0x0, 0x1, 0xfffffbff, 0x10000, 0x4, 0x8}, {0x6, 0x10000, 0x401, 0x3, 0x8d, 0x800}, {0x71dd, 0xa9, 0x4, 0x6, 0x1f, 0x2}, {0x7, 0x7, 0x8, 0x0, 0x2, 0x1000}, {0x2, 0x900000, 0x3ff, 0x7fffffff, 0x6, 0x8}, {0x1, 0x5, 0x80, 0xfff, 0x40, 0x52}, {0x5, 0x2, 0x6, 0x9, 0x7, 0x4f}, {0x7, 0x9, 0x1, 0x3, 0x100, 0xb8c8}, {0x65, 0x0, 0xbeb, 0x8, 0x20000000, 0x2}, {0x401, 0xffffff57, 0x7, 0x2, 0x9, 0x1}, {0xfffffffc, 0x8, 0x1, 0x200, 0x3, 0x4}, {0x0, 0x9, 0x86, 0xafbd, 0xfa45, 0x800}, {0xfffffff7, 0x5, 0x200000, 0x8, 0xffff, 0x80000000}, {0x5, 0x8d2, 0xfff, 0x80, 0x1ff, 0x401}, {0x80, 0x0, 0x4, 0xa000, 0x76a6, 0x7e}, {0x100, 0x0, 0x9, 0x1, 0xd426, 0x80000001}, {0xffff63d7, 0x8000, 0x401, 0x8000, 0x0, 0x7}, {0x0, 0x9, 0x9, 0x100, 0x5, 0x6}, {0x100, 0x5, 0xb97, 0x6, 0x1, 0x2ac}, {0x9, 0x7, 0x5, 0x8000, 0x1f, 0x8000}, {0xf96, 0x5, 0x9, 0x3, 0x2, 0x98}, {0x1000, 0x166, 0x7807, 0x2, 0xaac, 0x80000000}, {0x7ff, 0x7fffffff, 0x2, 0x0, 0x200, 0xbdf}, {0xe8, 0x8, 0x7, 0x81, 0x3, 0x2}, {0x4, 0x8, 0x401, 0x7f, 0x6, 0xffffff33}, {0x5, 0x3, 0x0, 0x6, 0x9, 0x400}, {0x1, 0xc3fb, 0x7, 0xfffff000, 0x7f, 0x3}, {0x8, 0x3, 0x1, 0x7fff, 0x4, 0xc}, {0x0, 0xfffffff8, 0x800, 0x7f, 0x1, 0x7}, {0x3ff, 0x80000001, 0x7656, 0x1df, 0x40, 0x3}, {0x94, 0x3, 0x696, 0x20, 0x1, 0x307}, {0x2, 0xff, 0x4, 0x1ff, 0x7, 0x4}, {0x8001, 0x4, 0x4, 0x9, 0xffffffff, 0x7}], [{0x5}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x1}, {0x3}, {}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {}, {}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x1}, {0x6}, {0x4, 0x1}, {0x4}, {0x1}, {0x81048a022870cc07}, {0x3}, {0x1, 0xb238a431259d9139}, {0x2}, {0x2, 0x1}, {0x3}, {0x4}, {0x4, 0x1}, {0x5}, {0x5}, {0x5, 0x1}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x5, 0x39e2192240427c43}, {0x4}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x4}, {0x3}, {0x1}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1}, {0x5}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {}, {0x2, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x2}, {0x4, 0x1}], 0x1}}]}, {0x39, 0x6, "753ba7caf6757461151d3330db3ed04ef04702ca9bca066ffe4ff61172a5b946159d1e2b2b010f9f6708fea10d16f7afa976c97cee"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_ct={0xd4, 0x5, 0x0, 0x0, {{0x7}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @mcast1}, @TCA_CT_ZONE={0x6, 0x4, 0x2}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private2={0xfc, 0x2, '\x00', 0x1}}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}]}, {0x74, 0x6, "28bf098e09ae02ea7f2bc68a92ab62b7ea42c79d6e0b2dc537e42914d3084d32dc7a2fa8e7e6b663b766155fd8baa31dee7ee404edbb681c436830035a35942f5506cbea3c93949e3bb85aedde344fbcc45092f252e43bef4e1b0dd5d49a445065b853da8f70c76e72561eeb4a9e3703"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_vlan={0xc4, 0x1f, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x76, 0x6, "215dc4b5681b6810cf81b5cbe4f5468c1f924071dd0a60b2bd235dae99e0c2884598a00155772c438fb04c10e1ace033714b4b4921e9c0695030049e4a9d71e6c3f2085209b504ab01fcf4a276845013c3fadd62deeee4acaee2943294576e19e05c7ae671bd7e8ae56741c410785d68c423"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_TCINDEX_SHIFT={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x7ff}, @TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x40e8}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r2}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004800)={0x18, 0x5, &(0x7f0000000540)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x5}, @ldst={0x2, 0x1, 0x0, 0x7, 0x0, 0x4, 0xfffffffffffffffc}, @generic={0x8f, 0x9, 0x6, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff9}], &(0x7f00000046c0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000004700)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000004740)={0x5, 0xc, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000004780)=[r0], &(0x7f00000047c0)=[{0x4, 0x5, 0x8, 0x2}, {0x0, 0x4, 0xd, 0x3}, {0x3, 0x3, 0xb, 0x8}], 0x10, 0x3ff}, 0x90) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) write$binfmt_script(r3, &(0x7f0000000480)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001280)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x4788}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)=@bridge_newvlan={0x68, 0x70, 0x200, 0x70bd27, 0x25dfdbfe, {0x7, 0x0, 0x0, r10}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x11}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x48, 0x2}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x1}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x9}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x7}}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x8004) (async) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r12, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r13], 0x2c}}, 0x0) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r11, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r6, r5, 0x0, 0x100000002) [ 451.033846][T22897] loop4: detected capacity change from 0 to 8192 04:39:33 executing program 1: mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x0, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) syz_read_part_table(0x59e, &(0x7f00000017c0)="$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") (fail_nth: 33) 04:39:33 executing program 0: recvfrom$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) io_setup(0x6, &(0x7f0000001580)) 04:39:33 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000005c0)=@newtfilter={0x40e8, 0x2c, 0x800, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x2, 0xd}, {0x1, 0xa}, {0x0, 0xfff1}}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_tcindex={{0xc}, {0x40a0, 0x2, [@TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}, @TCA_TCINDEX_POLICE={0x58, 0x6, [@TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9e05}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3ec1f9e0, 0xffffffffffffffff, 0x5b2a, 0x4, 0x5, {0x80, 0x0, 0x1, 0x5, 0x1f, 0x3}, {0x2, 0x1, 0x7fff, 0x4, 0x2e0a, 0x9}, 0x9, 0x8, 0x1ff}}]}, @TCA_TCINDEX_POLICE={0xa0, 0x6, [@TCA_POLICE_RESULT={0x8, 0x5, 0xfffff801}, @TCA_POLICE_RATE64={0xc, 0x8, 0x60800}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x8, 0x2c6, 0x9, {0x0, 0x2, 0x6, 0x3, 0x9, 0x6}, {0x7, 0x0, 0x7, 0x1, 0x9, 0x2eb}, 0x0, 0x6, 0x3}}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x6, 0x101, 0x1, 0x8, {0x7, 0x0, 0x0, 0x40, 0x6, 0x7ff}, {0x8, 0x0, 0x0, 0xffff, 0x80, 0x7ff}, 0x40, 0x3, 0x7}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}]}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x5}, @TCA_TCINDEX_POLICE={0xca4, 0x6, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0xd4, 0x6, 0x3, 0xa5b3, 0x8, 0x3ff, 0x2, 0x3, 0x2, 0x2, 0x1ff, 0x1, 0x9, 0x3, 0x8, 0x4, 0xa0, 0x5, 0x55b, 0x20, 0x8001, 0x2, 0x64, 0x3f, 0x2, 0x7, 0x400, 0x3, 0x903, 0x5, 0x5, 0x6ca, 0x10001, 0x6, 0x7, 0x1f, 0x1, 0x10001, 0x4, 0x7fffffff, 0x0, 0xfffffc00, 0x7f, 0x1000, 0x80000001, 0x8, 0x6, 0xfffffff7, 0x6, 0xa8, 0x81, 0xfdd, 0x400, 0xfffff001, 0x7, 0x1, 0x4, 0x7e6, 0x3, 0x5, 0x10000, 0xa18, 0x101, 0x100000, 0x3170401b, 0x7, 0x4, 0x161df594, 0x6b11f21c, 0x9, 0x401, 0x4, 0x8, 0x9, 0x80, 0xff, 0x578f, 0x3f, 0x964d, 0x8, 0xffff, 0xcad, 0x0, 0x7, 0x5, 0x4, 0x9, 0x4, 0x8, 0x1, 0x3, 0x8, 0x80000000, 0x80000001, 0x7f, 0x7, 0x5, 0x2, 0x3, 0x6, 0x80000001, 0x4, 0x38, 0x3d75, 0x7, 0x5, 0x9, 0x13585c94, 0x10000, 0xab7f, 0x1ff, 0x0, 0x0, 0x5, 0x0, 0x8, 0x2, 0xff, 0x6dc, 0x8, 0x484, 0xfff, 0x9b, 0x8, 0x7ff, 0x6, 0xef87c804, 0xff, 0x525f4ba1, 0x3, 0xd261b34f, 0x8000, 0x10000, 0xff, 0x1000, 0x3, 0x7fff, 0x5f0, 0x1, 0x81, 0xfffffff9, 0x9, 0x5, 0x5, 0x4, 0x0, 0x80, 0x6, 0x6, 0x4, 0xecb2, 0x3a5, 0x3ff, 0x5, 0x9, 0x4, 0x92a6, 0x8ba, 0xe518, 0x5, 0x6, 0x0, 0x4, 0x2, 0xff, 0x6bd, 0x6a97, 0x0, 0x80, 0xfffff800, 0x7f, 0x1, 0x2, 0x4, 0x6, 0xffff8001, 0x6, 0x3, 0x400, 0x2, 0x6, 0x1, 0x7b, 0x10001, 0x8, 0x2, 0x2, 0x1, 0x7fffffff, 0x8f42, 0xf2, 0x7fff, 0xf602, 0x1f, 0x6, 0x9818, 0xfffffffe, 0x8e, 0x8, 0x3, 0x4, 0x2, 0x5, 0x0, 0xff, 0x0, 0x9, 0x4, 0x1000, 0x0, 0x3, 0x4, 0x0, 0x5, 0x200, 0x0, 0x4, 0xa, 0x5, 0x47a, 0x4000000, 0x3ff, 0x2, 0xf4000000, 0x59, 0x7, 0xab8, 0x5, 0x7fff, 0x401, 0xe2, 0x20, 0x1ff, 0x8610, 0x9, 0xde3c, 0xffff, 0x63, 0x2, 0x7, 0x3, 0x79bc3abb, 0x7, 0xc00000, 0x7fffffff, 0x0, 0xfffff801, 0x4, 0x7ff, 0x3, 0xffff0001, 0x0, 0x2, 0x401, 0x401]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x3, 0x1000, 0x9, 0x3c, 0x8, 0x6e0, 0x3f, 0x3, 0x307e, 0x101, 0x0, 0x4e, 0x1ff, 0x8, 0x7ff, 0x8, 0x2, 0x4, 0x842d, 0x28, 0x6, 0x80000001, 0xfff, 0x6, 0x2, 0x6, 0x3, 0x4, 0xff, 0xfffffe01, 0x0, 0x9, 0x4, 0x2, 0x20000, 0xcc, 0x14c6, 0x1, 0x7, 0x9, 0x7fff, 0x4, 0x23b, 0x1, 0x0, 0x1, 0x3827, 0x8, 0x667c, 0x6, 0x5, 0x8001, 0x8, 0x1, 0xfffffff7, 0x200, 0x5, 0x5a71, 0xfffffffa, 0x4, 0x80000000, 0x2, 0x1, 0x9, 0x4, 0x5, 0x1, 0x2, 0x6, 0x9, 0x80000001, 0x4, 0x3, 0x2, 0x7ff, 0x81, 0x37, 0x1, 0x4, 0xde, 0x4, 0x40, 0xd7, 0x6, 0x9, 0x1ed, 0x8, 0x7f, 0x0, 0x3, 0x0, 0x4, 0x81, 0x80000000, 0x80000001, 0x0, 0x9, 0x0, 0x0, 0x3, 0x883, 0x7, 0x6, 0x2, 0x58, 0x4, 0x3, 0x6, 0x200, 0xfff, 0x5, 0xfffffff1, 0x9, 0x84, 0x8, 0x4, 0x7ff, 0x8, 0x3ff, 0x7fffffff, 0x2, 0x3, 0x7, 0x401, 0x8001, 0x6, 0x4, 0x1, 0x5155, 0xc8, 0x1, 0x1f, 0x9, 0x0, 0x4, 0x50cf49e0, 0x5, 0xfffffffe, 0xfffffffc, 0x0, 0x3f, 0x8, 0x8, 0x3, 0x800, 0x2, 0x6, 0x1281, 0x1ff, 0xf584, 0x0, 0x2, 0x9, 0xfffffff7, 0x6, 0x0, 0x7e, 0x8, 0x7ff, 0x8, 0x3ff, 0x2, 0x1f, 0xfffffffa, 0x6, 0x6, 0xfffffff7, 0x5, 0xe, 0x5, 0x0, 0xff, 0xf59, 0x1, 0xe33, 0xfff, 0x8000, 0x9485, 0x7, 0x1, 0x4, 0xe08, 0xfff, 0x7, 0x2, 0x100, 0x1, 0x627212c5, 0xfffff001, 0x5, 0x9, 0x800, 0x7a, 0x0, 0x74c000, 0x9, 0x101, 0x2, 0x8, 0x7fffffff, 0x800, 0x6, 0xbf40, 0x0, 0x9, 0x0, 0x4, 0x80000000, 0x7031, 0x800, 0x9, 0x5, 0x7, 0x4, 0xffc000, 0x400, 0x9ba5, 0x0, 0x142c, 0xabc174a7, 0x3, 0x7fffffff, 0x1, 0xd842, 0x401, 0x5, 0x9, 0x10001, 0x0, 0x6fe0, 0x7, 0x6, 0x7, 0x4, 0x5, 0x2, 0x7, 0x7d9c7657, 0x40000000, 0x2, 0x4, 0x9, 0x4, 0x2, 0x1, 0x7ff, 0x2, 0x7f, 0x9, 0x10001, 0x1, 0x4, 0x9, 0x8, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10001, 0x2, 0x10000, 0x400, 0x37f0, 0x5, 0x8, 0x1f, 0x2, 0x4, 0x7, 0x7, 0x5, 0x1, 0x0, 0x10001, 0x10001, 0x5, 0x6, 0x9, 0xffffff01, 0x0, 0xfffffff8, 0x200, 0x5, 0x80, 0x3f, 0x2, 0x40, 0x1f, 0x809, 0x100, 0x7, 0x2, 0x6, 0x6, 0x6, 0x0, 0x5, 0xffffffc0, 0x6a54, 0x9, 0xfe7, 0x2, 0x10001, 0x3f, 0x80000001, 0xfffffff8, 0x9, 0x1f, 0x9, 0x4, 0x2, 0x0, 0x200000, 0xfff, 0xfffffffc, 0x9, 0x5, 0x200, 0x7, 0x9, 0x6, 0x1, 0x2, 0x1, 0x17, 0x5, 0xff, 0x4, 0x1, 0x1, 0xd9a, 0x7, 0x5, 0xfff, 0x10000, 0x9, 0x0, 0x477, 0xffffffff, 0x8000, 0x7, 0x0, 0x0, 0x5, 0x8, 0x30000, 0x0, 0x9, 0x1, 0x7f, 0x200, 0x0, 0x8, 0x81, 0x401, 0x9, 0x0, 0x2, 0x4, 0x2, 0x6, 0x3, 0x1, 0x2, 0xa56b, 0x0, 0x10000, 0x40, 0x5, 0x7, 0x4, 0x1f, 0x6, 0x7fffffff, 0xffffff43, 0x0, 0x1, 0x8, 0xaf, 0xfff, 0x400, 0x5, 0x3, 0x3, 0x64, 0x1, 0x0, 0x109a5478, 0xe80, 0x0, 0x7fff, 0x8001, 0x4, 0x101, 0x80000000, 0x7, 0x3, 0x401, 0x10000, 0x6000000, 0x8, 0x0, 0x5, 0x8, 0x6, 0x7fff, 0x8, 0x1, 0x7ff, 0x7, 0x8, 0x1, 0xd7, 0x5c7, 0x0, 0x86d, 0x3, 0x7ff, 0x2, 0x4, 0x0, 0x1, 0x3, 0x400, 0x1, 0x10000, 0x7f, 0x0, 0xfffffff8, 0x101, 0x4, 0x9, 0x10000, 0x8, 0x3, 0xf49, 0xffff, 0x40, 0xfffffff4, 0x8, 0x80000001, 0x3, 0x77a, 0x80000001, 0xb, 0x20, 0x3, 0x4, 0xe589, 0x9, 0x1, 0x8, 0x7fff, 0x0, 0x7fff, 0x8e, 0x7, 0x282, 0x7, 0x7, 0x3, 0x100, 0x1, 0x9, 0x5, 0xffffda6c, 0x7, 0x2, 0x401, 0x1, 0x80000001, 0x7f, 0x6, 0x8, 0x10001, 0x480000, 0x7ff, 0xfffffffa, 0x5, 0x8, 0x2, 0x1, 0x8c851b9, 0xff, 0x2db6, 0x4, 0x28f53e60, 0x3, 0x9, 0xf2, 0xffff, 0x5c, 0x800, 0xfffff140, 0x0, 0xffffffff, 0xffff0c8a, 0xa4b, 0x4000000, 0x5, 0x0, 0x3, 0x7fff, 0x62, 0x7, 0xffff, 0x4, 0x8, 0xfffffffd, 0x5, 0x1a0, 0x8000, 0x10000, 0x80]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0xffffffffffffffff, 0x8001, 0x1f, 0x9d, {0xb5, 0x1, 0x4, 0x4, 0x3, 0x6}, {0x8, 0x1, 0x4, 0x8000, 0x294, 0xffff}, 0x3, 0x7, 0x7}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8001, 0x6, 0x101, 0x80000001, 0x0, {0x0, 0x2, 0x800, 0x44e1, 0x40, 0x8}, {0x3, 0x0, 0x8001, 0x8, 0x6, 0x4}, 0x80000001, 0x8000, 0x8}}]}, @TCA_TCINDEX_HASH={0x8, 0x1, 0x7da0}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x7}, @TCA_TCINDEX_ACT={0x32d8, 0x7, [@m_pedit={0x313c, 0x1c, 0x0, 0x0, {{0xa}, {0x30d8, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x14c, 0x5, 0x0, 0x1, [{0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x8, 0x80000001, 0x3, 0x0, 0x7}, 0x3f, 0x6f, [{0x8, 0x10000, 0x8, 0x3f, 0x3f, 0x8}]}, [{0x2, 0x0, 0x6, 0x1f, 0x4, 0x1}, {0x1, 0x3, 0x401, 0x80000000, 0x7, 0x25e0cdb4}, {0x10000, 0x9, 0x0, 0xfff, 0xc7, 0x101}, {0x8, 0x7, 0x800, 0x6, 0x8e9, 0xfffffffa}, {0x0, 0x10001, 0x6, 0x200, 0x3, 0x401}, {0x6, 0x800, 0x5, 0x2, 0x5, 0x3}, {0x101, 0x4, 0xfffff801, 0x1, 0x3, 0x9c17}, {0x5, 0x4, 0x800, 0x8, 0x8, 0x1}, {0x7, 0x0, 0x4, 0x2, 0xff, 0x975}, {0x1, 0x3, 0x0, 0x5, 0x9, 0x2}, {0xfff, 0x7, 0x0, 0xfffffffa, 0x0, 0x6}, {0xf4, 0x80000000, 0xd51, 0x8, 0x5, 0x7}, {0xff9c, 0x0, 0x2, 0x8ec4, 0x9, 0x4}, {0x1, 0x7, 0x7, 0x10001, 0x6, 0x3ff}, {0x101, 0x0, 0x28000000, 0x4, 0x4, 0x3}, {0x805, 0xfffeffff, 0x3, 0x7fff, 0x3e, 0x6}, {0x1, 0x6, 0xfffff801, 0x4, 0x2, 0x9255}, {0x9, 0x4, 0x8, 0x1, 0x6, 0x7}, {0x6, 0xfffffffe, 0x7ff, 0x80, 0x7, 0xffff}, {0x100, 0x5, 0x1, 0x15, 0x9, 0x7}, {0xe328, 0x8000, 0x6, 0x5}, {0x9, 0x2, 0x0, 0x9, 0x2, 0x7}, {0x7, 0x400, 0x2, 0x7, 0x6, 0x5}, {0x1, 0x40, 0x6, 0x6, 0x1, 0x4a9}, {0xffffffff, 0x7dbc5125, 0x80, 0x0, 0x6, 0x1}, {0x3c, 0x1, 0x1ff, 0x40, 0x4, 0xfffffff7}, {0x1, 0x4, 0x1, 0x804, 0x3, 0x20}, {0x28f5, 0x0, 0x1000, 0x0, 0x1, 0x7}, {0x6, 0x2, 0x934a, 0x9, 0x6d50, 0x1}, {0xf4, 0x7fffffff, 0xe327, 0x1f, 0xffffffc5, 0x2000000}, {0x1ff, 0x5, 0x2, 0x5, 0xdad, 0x6}, {0x7fff, 0x1, 0x0, 0x6, 0x2, 0x1}, {0x6, 0x80000001, 0x6e8f855b, 0x7, 0x80, 0x401}, {0x1ff, 0x1, 0x1f, 0x4, 0x2, 0x4}, {0x7ff, 0x8001, 0x2, 0x7cb, 0x80000001, 0x3}, {0x7, 0x401, 0x800, 0x3, 0x2, 0x4}, {0x700000, 0x100, 0x3, 0x200, 0x1, 0x33091867}, {0x3f, 0xe1, 0x101, 0x80000000, 0x7ff, 0x20}, {0x7ff, 0x0, 0x401, 0x9, 0x4, 0x3}, {0xe700, 0x0, 0x8ea9, 0xdc, 0x8, 0x3}, {0x0, 0x80, 0x1, 0xe797, 0x0, 0x4}, {0x8001, 0x0, 0x0, 0xffffffc0, 0x78d, 0x1ff}, {0x70, 0x101, 0x923f, 0x6, 0x9, 0x1f}, {0x1, 0xfffffe00, 0x4, 0x1000, 0x9, 0x4}, {0x6, 0xfffffffe, 0x1, 0x400, 0x7ff}, {0x1ff, 0x0, 0x1, 0x80000000, 0x8001}, {0x5, 0x3, 0x0, 0xffffffff, 0x400, 0xffffffff}, {0x8000, 0x401, 0x10001, 0x4, 0x1, 0x81}, {0x0, 0x6, 0x1f, 0x3, 0x1d9d, 0x200}, {0x4, 0x4, 0x1, 0x3, 0x1, 0x7fff}, {0xe0000000, 0xff, 0xffff, 0x8001, 0x4, 0x1ff}, {0x951, 0x4, 0x40, 0xff, 0x6, 0xfffffffa}, {0xfffff414, 0x9, 0x0, 0x60cc, 0x1, 0x17}, {0xffffffe1, 0x8, 0x2f6, 0x8001, 0x80000001, 0x10001}, {0x4, 0x9, 0x9, 0x4, 0x642, 0xca27}, {0x5, 0x5b6, 0x6, 0x1, 0xc517, 0x9}, {0x7fff, 0x6, 0xfffffffb, 0x5, 0xde, 0x80000000}, {0xd896, 0x7, 0x9, 0x9, 0x401}, {0x0, 0xfffffff7, 0x6, 0x7fffffff, 0x8, 0x9}, {0x7, 0x8, 0x1, 0xcc, 0x10000}, {0x0, 0x401, 0x9, 0x7, 0x83, 0x3}, {0x10000, 0x2, 0x3, 0x4, 0x7ff, 0x3ff}, {0x7fff, 0x7ff, 0x3, 0x4, 0x80000000, 0x7fff}, {0x80000001, 0x10000, 0x8, 0x1000, 0x81, 0x48f5}, {0x10000, 0x5, 0x1000, 0x4, 0x800, 0x200}, {0x3, 0xfffff001, 0x7b, 0x3f, 0x7f, 0x71c17023}, {0x1f, 0x1, 0xffffff05, 0x1000, 0x4}, {0x5c8, 0x6, 0xfffff000, 0x3, 0x0, 0x401}, {0xffffffff, 0x10001, 0x0, 0x9937, 0xf626, 0x7}, {0x1, 0x7ff, 0xce, 0xe51, 0x6, 0xdc9e}, {0xdc0b, 0x8, 0x5, 0xfffff800, 0x4, 0x7}, {0x8, 0x4, 0x81, 0x1, 0x8001, 0x3ff}, {0x2, 0x9, 0xfffff000, 0x8, 0x7fffffff, 0x7}, {0x4, 0x6, 0x3, 0x81, 0x7, 0x6}, {0x101, 0x5, 0x13a, 0x8, 0xfff, 0x82bb}, {0x1, 0x200, 0x6, 0xa1, 0xfffffffe, 0xf}, {0x0, 0x1, 0x7dc, 0x7, 0x9, 0x3ff}, {0x10000, 0x9, 0x9, 0x3, 0x4e1e, 0x6}, {0x18, 0x8, 0x9259, 0x8, 0x8, 0x401}, {0x5, 0x3f, 0x8, 0x0, 0x811b, 0x7fff}, {0x6, 0x10001, 0x0, 0x1f, 0x1ff, 0xff}, {0x8, 0x7f, 0x7, 0xaf1c, 0x4, 0x7}, {0x101, 0x1, 0x6, 0x6, 0x3, 0x2}, {0x2, 0x2, 0x9, 0x2, 0x800, 0x2}, {0x40, 0x8d4, 0x40, 0x7, 0x80000001, 0x20000}, {0x3, 0x1, 0x9, 0x1, 0x2, 0x4}, {0x9, 0x10000, 0x8, 0xdd5, 0x1, 0x1}, {0x2, 0x7f, 0x200000, 0x7, 0x5, 0x7ec}, {0x5, 0x5, 0x6, 0x1000, 0xffffff00, 0x8001}, {0x1, 0x7f, 0x0, 0x81, 0x100, 0x4b}, {0x5, 0x68, 0x9b00, 0xfffffff8, 0x1, 0x4}, {0x10001, 0xfff, 0x0, 0x1, 0x3f, 0x5}, {0x3f, 0x3f, 0x9, 0x3, 0xa37, 0x7}, {0x200, 0x5, 0x3e50, 0x20, 0x400, 0x5}, {0xfffffffe, 0x1000, 0x9, 0xccb, 0x3, 0x90ee}, {0x5, 0x8, 0x4, 0x1, 0xa7, 0x3}, {0x4, 0x20, 0x0, 0x401, 0x8, 0x42cb}, {0x9, 0xc4, 0xfffffeff, 0x6, 0x88a9, 0x3}, {0x0, 0x5, 0xfffffff9, 0x84a, 0x38, 0x800000}, {0x400, 0x7ff, 0x80000000, 0x2, 0x5d397efb, 0x25e}, {0x74d, 0x3000, 0x3f, 0x8000, 0xb0, 0x6}, {0xb5f, 0x4ae, 0x7, 0x7ff, 0x5, 0x3}, {0xb5, 0x4, 0x5, 0xffffffff, 0xee58, 0x8000}, {0x3, 0x0, 0x40, 0x5, 0xffffff1c, 0x7}, {0x7fff, 0x3, 0x2, 0x6, 0x7, 0x5}, {0x6, 0x0, 0x5, 0x8, 0x40, 0x6}, {0x7, 0x81, 0x3ef, 0x8, 0x569bda0, 0x101}, {0x401, 0x3710, 0x8, 0x2, 0x5, 0xfffffff7}, {0x9, 0x7ff, 0x100, 0x1, 0x12dd, 0x1}, {0x200, 0x40, 0x7fffffff, 0x81, 0x9, 0x3}, {0x9, 0x10001, 0x8, 0x2, 0x6, 0x9}, {0x1, 0x9, 0x8, 0x0, 0x7fffffff, 0x81}, {0x8, 0xc60, 0x7e, 0x3f, 0x6, 0x2}, {0x7, 0x10000, 0x8, 0x100, 0x7fffffff, 0x5e41}, {0x0, 0x3ff, 0x8001, 0x655f, 0x6, 0x7}, {0x11aaedd6, 0x3ac, 0x3f, 0xfffffffb, 0x20, 0x9}, {0x4, 0x20, 0x5, 0x247, 0x8001}, {0x8, 0x0, 0x7, 0x3, 0x4, 0xff}, {0xb, 0xca, 0xde1, 0x9, 0x3b32, 0x7}, {0x7fff, 0x4, 0x3d01, 0x1ff, 0x1, 0xffffffff}, {0x7fff, 0x1, 0x1, 0xcf5, 0x3, 0x6}, {0x10001, 0xd6, 0x401, 0x1000, 0x62, 0x81}, {0xfffffff7, 0xfff, 0x7, 0xfffffffa}, {0x1, 0xfff, 0x2, 0x8109, 0x2, 0xd7}, {0x4, 0xa98, 0x2, 0x9, 0x8, 0xfffffff7}, {0xd100, 0x9, 0x1, 0x7, 0x0, 0x5}, {0x7, 0x1f, 0x5, 0xd1, 0x6, 0x6}, {0x8001, 0x8, 0x7fff, 0x7f, 0x2, 0x4}], [{0x4}, {0x6}, {0x3}, {0x3}, {0x3}, {0x5}, {0x5}, {0x5}, {0x1, 0x1}, {0x4}, {0x1}, {0x5}, {0x1}, {0x3, 0x1}, {0x5}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {}, {0x0, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x79b996b20e5867f6, 0x1}, {0x3}, {0x4, 0x1}, {0x2}, {0x5}, {0x3}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x5, 0xab0c09fd00c3093f}, {0x1}, {0x4}, {0x4}, {0x2}, {0x3, 0x1}, {0x9, 0x1}, {0x4}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0xcf9ff0669b6d9b54}, {0x4}, {0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x7, 0x1}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x12c, 0x5, 0x0, 0x1, [{0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_KEYS_EX={0x14c, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x7}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}]}, @TCA_PEDIT_KEYS_EX={0x78, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS={0xe80, 0x2, {{{0x6, 0x3f, 0x7, 0x777d, 0x80}, 0xff, 0xc2, [{0x9, 0xfffe00, 0x3, 0x8, 0xacb, 0x3}, {0x40, 0x1, 0x1ff, 0x2, 0xfff, 0xcd}, {0x7fff, 0x101, 0x259, 0xd361, 0x7, 0x6}, {0x3, 0x3, 0x101, 0x5, 0x6, 0x80000001}]}, [{0x6, 0x400, 0x3, 0x1000, 0x3f, 0x80}, {0x3, 0x3, 0x9e31, 0xf5, 0x0, 0x80000001}, {0x6, 0x3ff, 0x80000000, 0x400, 0x10000, 0xfffffff7}, {0x0, 0x1, 0x1, 0xdf, 0xfffffffe, 0xa2e0}, {0x6, 0x8, 0x7, 0x10001, 0x6, 0x7}, {0xfffffe01, 0x4, 0x5, 0x6, 0x1, 0x1}, {0x5, 0x5, 0x1, 0x5, 0x4, 0x2}, {0xfffffffb, 0x4, 0x0, 0x81, 0x2, 0x3ff}, {0xfffff800, 0x4, 0x3, 0x5, 0x80000001}, {0xfffffbec, 0x6, 0x8, 0x4, 0x7, 0xff}, {0x8, 0x5, 0x2, 0xf5a, 0xffffff7f, 0x7}, {0x1, 0x0, 0x6, 0x1ff, 0x0, 0x6}, {0x4, 0x0, 0xe2, 0x40, 0xffff, 0x101}, {0x0, 0xbf7, 0x9, 0x4, 0x6, 0x40}, {0x1, 0x5, 0x1ff, 0x40, 0x8000, 0x2}, {0x10000, 0x7f, 0x100, 0x7fffffff, 0x0, 0x3}, {0x7, 0x2, 0x80000000, 0x7a, 0x8, 0x81}, {0x6, 0xfffffffe, 0x7, 0x800, 0x7, 0x5}, {0x5, 0x6, 0x4, 0x7a17b11f, 0x2, 0x7fffffff}, {0x0, 0x3f, 0x8, 0x6, 0x7, 0x7fff}, {0x9837, 0x5, 0x80000000, 0x3, 0x3, 0x4}, {0x7, 0xc2, 0x1ff, 0x4b, 0x3, 0x8}, {0x7, 0x1ff, 0xf11, 0x5, 0x3, 0x7f}, {0x8, 0xffff651d, 0x3, 0xc0000, 0xb25, 0x2}, {0x10000, 0x80000001, 0xdc07, 0x0, 0xfffffffe, 0x47d08a35}, {0x8, 0xf58c, 0x9, 0x60, 0x8, 0x1}, {0x1ff, 0x1, 0x1, 0x9, 0x5, 0xfffffffe}, {0x2, 0x5, 0x7, 0x8, 0xa0f, 0x8}, {0x6, 0x1000, 0x1, 0x8, 0x9f, 0xf57c}, {0x4, 0x401, 0xffffff7f, 0x8, 0x2, 0x5}, {0x5, 0x9, 0x9, 0x8, 0xfffffff9, 0x6}, {0x6, 0x3, 0x7, 0xf518, 0x6, 0x2}, {0x0, 0x3ff, 0x6, 0x8, 0x6, 0xf3}, {0x3, 0x1ff, 0xfffffffa, 0x9, 0x1ff, 0x9}, {0x5, 0x8001, 0x5, 0x8001, 0x3, 0x93}, {0x0, 0x4a46f1af, 0x0, 0x4, 0x7fffffff, 0x2}, {0x0, 0x1000, 0x8, 0x200, 0xffffffff, 0x3}, {0xfff, 0x5, 0x9, 0x7, 0x10001, 0x3}, {0x0, 0xc2a, 0x1, 0x9, 0x7, 0x4}, {0xffffffff, 0xfffffff8, 0x1856, 0xfe88, 0x5, 0x400}, {0x0, 0x2, 0xfffffff9, 0x7f, 0x9}, {0x1, 0x5, 0x9, 0x2, 0x6, 0x1}, {0xfffffffc, 0x4, 0x8001, 0x1, 0x0, 0x4}, {0x4, 0x3f, 0x6, 0x4, 0x1, 0x6}, {0x9, 0x4, 0x4, 0x401, 0x61, 0x6}, {0x3, 0x4, 0x401, 0x8, 0xff, 0xfffffffe}, {0xa85, 0x7fffffff, 0xc0000000, 0x100, 0x0, 0x9}, {0x0, 0x0, 0x5, 0xffffffff, 0x401, 0x5}, {0x1, 0xfff, 0x4a, 0x7, 0x2, 0x9c}, {0x9, 0x73c, 0x9, 0x2b, 0x100, 0x81}, {0x40000000, 0x5, 0xbc82, 0x3, 0x40, 0xffffff81}, {0x7, 0x1, 0x800, 0x6, 0x7ff}, {0xe77, 0x7, 0x6, 0x8, 0x8, 0x4}, {0x3ff, 0x4, 0x7f, 0x2, 0x2, 0x7f}, {0x200, 0x3, 0x1ff, 0x6, 0x8000, 0x5}, {0x9, 0xb9, 0x7, 0x5, 0xfffffff7, 0x9}, {0x8, 0xfffff801, 0x0, 0x2e104805, 0x3ff, 0x1000}, {0x3f, 0x6, 0xfffeffff, 0x5, 0x401, 0x94e}, {0x9, 0x6, 0x0, 0x0, 0x4, 0x100}, {0x3, 0x4, 0xffff, 0xfffffffb, 0xffffff2f, 0x9}, {0x3, 0x5e721550, 0x4, 0x12400, 0x7fffffff, 0x7b3}, {0x3, 0x7e000, 0xd2, 0x6, 0x1, 0x9}, {0x1, 0xf9, 0x80000001, 0x1, 0x3ff, 0x1}, {0x3, 0x3, 0xfff, 0x6, 0x9, 0x60}, {0x7, 0x3, 0x7, 0x81, 0xffff2bf5, 0x2}, {0x5, 0xffffffff, 0x3, 0x6, 0x10001, 0x3}, {0x0, 0x8, 0x7, 0x1, 0x9, 0x9}, {0x2, 0x200, 0x8, 0x1ff, 0xc471, 0x8}, {0x401, 0x4, 0x4, 0xfffffffa, 0x1, 0x1ff}, {0x20, 0x7fffffff, 0x9, 0x1ff, 0x5e, 0x4}, {0x7fffffff, 0x2000000, 0x10, 0x5, 0xfffffffa, 0x3}, {0x10000, 0xe97, 0xfffffffa, 0x4, 0x7}, {0x6, 0xfffffffb, 0x8, 0xfff, 0x20, 0x20}, {0x9, 0x1f, 0x8, 0x0, 0x2, 0x81}, {0x7, 0x1, 0x9, 0x2, 0xec9, 0x80000000}, {0x10000, 0x6, 0xfffffffd, 0x8, 0x3, 0x8}, {0xfff, 0x3, 0x3, 0x0, 0x2, 0x10000}, {0x3, 0x6, 0x80000001, 0xa87, 0x8001, 0x7}, {0x7, 0x5, 0x6, 0x0, 0x40, 0x3ff}, {0x65c, 0xc89, 0xffff, 0x6, 0x9, 0x5}, {0x1, 0x1000, 0x1, 0x4a07, 0x4, 0xfffffff8}, {0x1ff, 0x80000000, 0x6, 0xfff, 0x33, 0x1}, {0x7f, 0x3f, 0x9, 0x6a2, 0xfffff272, 0x76d8d4a1}, {0x20, 0x3ff, 0x1, 0x0, 0x0, 0x800}, {0x9, 0x8001, 0xff, 0x6, 0x1286, 0x6}, {0x3ff, 0x200, 0x9, 0xe57, 0x6, 0xa40}, {0x7ff, 0x20, 0x2d7, 0x8, 0x4, 0x680}, {0x5, 0x8001, 0xffff, 0x3, 0x1, 0x100}, {0x5, 0x6, 0x3, 0x1ff, 0x7fffffff, 0x6}, {0x7, 0x7, 0x800, 0x3, 0x3f}, {0x9, 0x4, 0xfffffff9, 0x95d, 0x0, 0xffff}, {0x4, 0x2fa, 0x6, 0x401, 0x45c, 0x7}, {0x0, 0x1, 0x8000, 0x401, 0xfffffa9d}, {0x6, 0x6, 0x5, 0x9, 0xffff, 0x3f800000}, {0x3, 0x9, 0x7, 0x7, 0x1, 0x1}, {0x3, 0x80, 0x2, 0x7, 0x800, 0x4}, {0x9, 0x3, 0x7, 0x80000001, 0x3}, {0x1, 0x5, 0x1ff, 0xfffffffb, 0x3, 0x2d5}, {0x200, 0xcf07, 0x68b, 0x3, 0x7, 0x9}, {0x7, 0x29, 0x9, 0x5, 0x3, 0x1}, {0x0, 0x3f, 0x101, 0x52, 0x1, 0x101}, {0xffffff7f, 0x6, 0xff, 0xff, 0x7, 0x7}, {0x2, 0x200, 0x1000, 0x6, 0x80000001}, {0xfffffffc, 0x8, 0x2, 0x1, 0x7f, 0xfffffcbe}, {0x80, 0x3f, 0xfff, 0x5, 0x6598, 0x9}, {0x8, 0x4, 0x9, 0x2, 0x9, 0x7f}, {0x7fff, 0x200000, 0x7, 0x80, 0x0, 0x400}, {0x8, 0x80000000, 0x36a, 0x7fffffff, 0x6, 0xe4}, {0x7fff, 0x80000000, 0x100, 0x3f, 0x0, 0x7fffffff}, {0xeb7, 0x3, 0x4, 0x2, 0x8001, 0x9}, {0x1ff, 0x7ff, 0x71, 0x401, 0x2, 0x2f}, {0x9, 0x7, 0x72c, 0x4, 0x100, 0x7}, {0x1f, 0x9, 0x8, 0x5, 0xffffff51, 0x5}, {0x3, 0x1, 0x8, 0xdb8e, 0x1, 0x3}, {0x9, 0xcff8, 0x3, 0x7, 0x6, 0x7}, {0x7, 0x200, 0x40, 0x9, 0x3}, {0x800, 0x4, 0x9, 0xfffeffff, 0x4, 0x8000}, {0x7fff, 0x200, 0x0, 0x6, 0x4, 0x7fffffff}, {0x2, 0x64acd2f4, 0x2, 0x0, 0x1, 0x8}, {0x69cd9c63, 0x8, 0x1f2a, 0x5, 0x7fff, 0x200}, {0x3, 0x7ff, 0x2, 0x4, 0x12, 0x3}, {0x2, 0x4, 0x3, 0x7, 0x6, 0x7}, {0xfef, 0x9, 0x81, 0xff, 0x1, 0x1bb}, {0x6, 0x3, 0x4, 0x1800000, 0x7ff, 0x4}, {0x0, 0x6, 0x3f, 0x7f, 0x1f, 0x7fff}, {0x9, 0x1, 0x800, 0x2, 0xc8d, 0x9}, {0x20, 0x8, 0xb0, 0x1f, 0x5, 0xff}, {0x4, 0x9, 0x4, 0x6, 0x3, 0x401}], [{}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {}, {0x2, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x9a33700b40bb241e}, {0x0, 0x1}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x7, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x6, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x4}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x1}, {}, {0x2}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x6}, {}, {0x2}, {0x3}, {0x1}, {}, {0x3, 0x1}, {0xcb1504946723a79b}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0xeca82027c89ececc}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x4}, {0x4, 0x1}, {}, {0x5}, {0x5}, {0x7, 0x1}, {}, {0x2}, {0x2, 0x1}, {0x2}, {0x1}, {0x5, 0x1}, {0x4, 0x2}, {0x1, 0x1}, {0x1}, {0x2}, {0x3}, {0x2}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x10c, 0x5, 0x0, 0x1, [{0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}]}, @TCA_PEDIT_KEYS_EX={0x84, 0x5, 0x0, 0x1, [{0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x54, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x9, 0x40, 0x6, 0x7e7, 0x7505db40}, 0xa2, 0x6, [{0x9, 0x9, 0x0, 0x10000, 0x1, 0x9}, {0x0, 0x8, 0x40, 0x200, 0x8001, 0x9}]}, [{0xa40000, 0x9, 0x97, 0x8001, 0xfff, 0xa8}, {0x101, 0x8, 0x1f, 0x1, 0x5c, 0x80000000}, {0xff, 0xfffffff7, 0x7, 0xfff, 0x6, 0xffff}, {0x7, 0x7, 0x8, 0x21de, 0x1, 0x800}, {0x3, 0x5, 0xb804, 0xbb4, 0x3f, 0x800}, {0x2, 0x8000, 0x7, 0x2, 0x3, 0x2}, {0xffffffff, 0x0, 0x101, 0x9, 0x1ff, 0x36f}, {0x7, 0x3, 0x0, 0xfff, 0x100, 0x81}, {0x7fffffff, 0x3f719303, 0x200, 0x100, 0x9, 0x8}, {0x9, 0x7, 0x0, 0x9, 0x3b3, 0x1ff}, {0x7f, 0x937, 0x3, 0x3, 0x8, 0x1d6}, {0x5, 0x9, 0x7, 0x9, 0x0, 0x5}, {0x543, 0x7, 0x6, 0x7, 0x8, 0x5}, {0xc210, 0x5, 0x0, 0x8, 0x8409, 0xd38}, {0x3, 0x40, 0xffffffff, 0x3f, 0x8, 0x7fff}, {0xde, 0x7, 0x5, 0x0, 0x805c, 0x5}, {0x200, 0x2, 0x4, 0x6, 0x401, 0x5}, {0x4f8, 0x1, 0x4, 0x401, 0xd4, 0x101}, {0x3, 0x20, 0x3, 0x7fff, 0xffffffe3, 0x800}, {0x6, 0x0, 0x80000000, 0x3c000000, 0xffff, 0x3}, {0xacacedc, 0x1880, 0x8, 0x7, 0xffffffff, 0x5}, {0x8, 0x0, 0x5, 0xd7, 0x8, 0xfffffff7}, {0x74b, 0x99, 0x7, 0x8000800, 0x86, 0xffffffff}, {0x3, 0x0, 0x8, 0xfffffffa, 0x3, 0x1}, {0x4, 0x100, 0x80000000, 0x8, 0x40, 0x7}, {0xffffffff, 0x39, 0x1, 0x8497, 0xd2, 0x7f}, {0x3, 0x5938, 0x1000, 0xfffffffc, 0x200, 0x7fffffff}, {0x8000, 0x1, 0x101, 0x3ff, 0x15, 0x200}, {0x1, 0x4, 0x0, 0x4, 0x3, 0x8}, {0xcf, 0x5, 0x8000, 0x1, 0x1000000, 0xffffffe0}, {0x6, 0x5, 0x2, 0x9, 0x3, 0x9}, {0x9, 0x3, 0x8, 0x7, 0x8, 0x7}, {0x1000, 0x3, 0x93ab, 0xffff, 0x4658, 0xc9d}, {0xffffffff, 0x80000000, 0x6, 0x3, 0x2, 0x1}, {0x5, 0x2, 0x1000000, 0x2, 0x3, 0xb1}, {0x4, 0x6, 0x0, 0x1ff, 0xe163, 0x9}, {0x2, 0xc26, 0x80, 0x1ff, 0x4a2ce85a, 0x3}, {0x9, 0x8, 0x6, 0x400, 0xffffffe1}, {0x401, 0xffff3005, 0x200, 0x4, 0x7fffffff, 0x8000}, {0x7b, 0x7fffffff, 0x7c0a, 0x3ff, 0x8000, 0x15e274f1}, {0x5, 0x5, 0x6, 0x9, 0x2}, {0xe52, 0x9e, 0xa6, 0x4, 0x9}, {0x3ff, 0xffffffff, 0xffffff00, 0x3, 0x41, 0x200}, {0x5, 0xfffff000, 0x898b, 0xff, 0x3c5}, {0x18, 0x5, 0x8001, 0x7, 0x7fff, 0x6}, {0x6, 0x9, 0x4, 0xfffffffa, 0xfffff577, 0x9d9}, {0x9, 0xfffffffd, 0xdb, 0x100, 0x6, 0x400}, {0x8, 0x5, 0x4, 0x101, 0x1, 0x3}, {0x10000, 0x1, 0x7, 0x80000000, 0x2, 0x6af9}, {0x18d, 0xfffff000, 0x3, 0xffff8949, 0x20}, {0x81, 0x101, 0x5, 0xf2, 0x0, 0x1f}, {0x2080, 0x10001, 0xfffffffd, 0x5, 0x7f, 0x5}, {0xffffffff, 0x1f, 0x7, 0x2, 0x200, 0x1}, {0x1ff, 0xbc, 0x4, 0x437e, 0x8, 0x2}, {0x9, 0x7fffffff, 0x6, 0x7, 0x3, 0x10000}, {0xa8, 0x7fffffff, 0x6, 0x3f, 0x6, 0x2}, {0x7fffffff, 0x7fffffff, 0x0, 0x7fffffff, 0x9, 0x5}, {0x6, 0x1, 0x2, 0x7ff, 0x800, 0x6e4}, {0xff, 0x7, 0x9, 0x7, 0x7, 0x20}, {0xc71, 0xe0000000, 0xd52, 0x18, 0x1, 0x5f960000}, {0x401, 0x1, 0x400, 0x5, 0x5}, {0x3f, 0x6, 0x17, 0x7fff, 0x79be, 0x6}, {0x100000, 0x324a, 0x8, 0x9, 0x8000, 0x9}, {0x80000001, 0x0, 0x9, 0x3f, 0x0, 0x3f}, {0xa0000, 0x10001, 0x10b3, 0x80, 0x2, 0x3}, {0x200, 0x81, 0x6, 0x8, 0x8, 0x4fb112eb}, {0x3ff, 0x0, 0x10000, 0x0, 0x0, 0xffffff01}, {0x0, 0x10001, 0x8, 0x469, 0x983, 0x3}, {0x5f, 0x0, 0x3e9000, 0x6, 0x40, 0x56}, {0x1, 0x6, 0x1, 0x8, 0xbbf0, 0xffffffff}, {0x80000000, 0x9, 0x1ff, 0xfffffffe, 0x5, 0x200}, {0x3, 0x7ae, 0xe39, 0x4, 0x8, 0x1}, {0x2, 0x1, 0x8, 0xffff, 0x0, 0x6}, {0xdb0e, 0x9, 0x2, 0x0, 0x7, 0x8}, {0x8, 0x1000, 0x1, 0x5, 0x0, 0x7}, {0x2c9, 0x6, 0x66, 0x3, 0x4}, {0xfa4, 0x9, 0x6, 0x27, 0x20000000, 0x8}, {0xf1, 0x3, 0x101, 0x6, 0x0, 0x6b3f}, {0x6, 0x3, 0x7, 0x4, 0x10000, 0x7ff}, {0x3, 0x8, 0x9, 0xe70a, 0x40, 0x401}, {0x7, 0x7, 0x7, 0xd1, 0x80, 0xff}, {0x221, 0xfffffffe, 0x10001, 0xc01, 0x308, 0x9}, {0xffffff7f, 0x2, 0x33, 0x2, 0x78fa, 0x73}, {0xe12, 0x1, 0x9, 0x8, 0x8, 0x80000000}, {0x2640, 0xffff60bf, 0x80, 0x3f, 0x3ff, 0x2}, {0x6, 0x9, 0x1, 0x80000000, 0x10001, 0x100}, {0x2, 0x3, 0x9, 0x0, 0x68, 0x5}, {0x2, 0x418, 0xb834, 0xc7, 0x9, 0x6}, {0xffffffa0, 0x40, 0x2, 0x7, 0x6, 0x3}, {0x3f, 0x97, 0xfffffff7, 0x5, 0x7fff, 0x6}, {0x3, 0x20, 0x101, 0x400, 0x7, 0x1}, {0x0, 0x7, 0x3, 0x6, 0x7, 0x9}, {0x7f, 0x2, 0x401, 0x2, 0x7ff, 0xfffff6e9}, {0x80000001, 0x6, 0x6, 0x4, 0x1029, 0x8}, {0xffff9857, 0x4, 0x81, 0x5e000000, 0x4}, {0x0, 0x1, 0xfffffbff, 0x10000, 0x4, 0x8}, {0x6, 0x10000, 0x401, 0x3, 0x8d, 0x800}, {0x71dd, 0xa9, 0x4, 0x6, 0x1f, 0x2}, {0x7, 0x7, 0x8, 0x0, 0x2, 0x1000}, {0x2, 0x900000, 0x3ff, 0x7fffffff, 0x6, 0x8}, {0x1, 0x5, 0x80, 0xfff, 0x40, 0x52}, {0x5, 0x2, 0x6, 0x9, 0x7, 0x4f}, {0x7, 0x9, 0x1, 0x3, 0x100, 0xb8c8}, {0x65, 0x0, 0xbeb, 0x8, 0x20000000, 0x2}, {0x401, 0xffffff57, 0x7, 0x2, 0x9, 0x1}, {0xfffffffc, 0x8, 0x1, 0x200, 0x3, 0x4}, {0x0, 0x9, 0x86, 0xafbd, 0xfa45, 0x800}, {0xfffffff7, 0x5, 0x200000, 0x8, 0xffff, 0x80000000}, {0x5, 0x8d2, 0xfff, 0x80, 0x1ff, 0x401}, {0x80, 0x0, 0x4, 0xa000, 0x76a6, 0x7e}, {0x100, 0x0, 0x9, 0x1, 0xd426, 0x80000001}, {0xffff63d7, 0x8000, 0x401, 0x8000, 0x0, 0x7}, {0x0, 0x9, 0x9, 0x100, 0x5, 0x6}, {0x100, 0x5, 0xb97, 0x6, 0x1, 0x2ac}, {0x9, 0x7, 0x5, 0x8000, 0x1f, 0x8000}, {0xf96, 0x5, 0x9, 0x3, 0x2, 0x98}, {0x1000, 0x166, 0x7807, 0x2, 0xaac, 0x80000000}, {0x7ff, 0x7fffffff, 0x2, 0x0, 0x200, 0xbdf}, {0xe8, 0x8, 0x7, 0x81, 0x3, 0x2}, {0x4, 0x8, 0x401, 0x7f, 0x6, 0xffffff33}, {0x5, 0x3, 0x0, 0x6, 0x9, 0x400}, {0x1, 0xc3fb, 0x7, 0xfffff000, 0x7f, 0x3}, {0x8, 0x3, 0x1, 0x7fff, 0x4, 0xc}, {0x0, 0xfffffff8, 0x800, 0x7f, 0x1, 0x7}, {0x3ff, 0x80000001, 0x7656, 0x1df, 0x40, 0x3}, {0x94, 0x3, 0x696, 0x20, 0x1, 0x307}, {0x2, 0xff, 0x4, 0x1ff, 0x7, 0x4}, {0x8001, 0x4, 0x4, 0x9, 0xffffffff, 0x7}], [{0x5}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x1}, {0x3}, {}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {}, {}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x1}, {0x6}, {0x4, 0x1}, {0x4}, {0x1}, {0x81048a022870cc07}, {0x3}, {0x1, 0xb238a431259d9139}, {0x2}, {0x2, 0x1}, {0x3}, {0x4}, {0x4, 0x1}, {0x5}, {0x5}, {0x5, 0x1}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x5, 0x39e2192240427c43}, {0x4}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x4}, {0x3}, {0x1}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1}, {0x5}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {}, {0x2, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x2}, {0x4, 0x1}], 0x1}}]}, {0x39, 0x6, "753ba7caf6757461151d3330db3ed04ef04702ca9bca066ffe4ff61172a5b946159d1e2b2b010f9f6708fea10d16f7afa976c97cee"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_ct={0xd4, 0x5, 0x0, 0x0, {{0x7}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @mcast1}, @TCA_CT_ZONE={0x6, 0x4, 0x2}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private2={0xfc, 0x2, '\x00', 0x1}}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}]}, {0x74, 0x6, "28bf098e09ae02ea7f2bc68a92ab62b7ea42c79d6e0b2dc537e42914d3084d32dc7a2fa8e7e6b663b766155fd8baa31dee7ee404edbb681c436830035a35942f5506cbea3c93949e3bb85aedde344fbcc45092f252e43bef4e1b0dd5d49a445065b853da8f70c76e72561eeb4a9e3703"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_vlan={0xc4, 0x1f, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x76, 0x6, "215dc4b5681b6810cf81b5cbe4f5468c1f924071dd0a60b2bd235dae99e0c2884598a00155772c438fb04c10e1ace033714b4b4921e9c0695030049e4a9d71e6c3f2085209b504ab01fcf4a276845013c3fadd62deeee4acaee2943294576e19e05c7ae671bd7e8ae56741c410785d68c423"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_TCINDEX_SHIFT={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x7ff}, @TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x40e8}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r1}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004800)={0x18, 0x5, &(0x7f0000000540)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x5}, @ldst={0x2, 0x1, 0x0, 0x7, 0x0, 0x4, 0xfffffffffffffffc}, @generic={0x8f, 0x9, 0x6, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff9}], &(0x7f00000046c0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000004700)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000004740)={0x5, 0xc, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000004780)=[r0], &(0x7f00000047c0)=[{0x4, 0x5, 0x8, 0x2}, {0x0, 0x4, 0xd, 0x3}, {0x3, 0x3, 0xb, 0x8}], 0x10, 0x3ff}, 0x90) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r3, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) (async) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001280)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x4788}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)=@bridge_newvlan={0x68, 0x70, 0x200, 0x70bd27, 0x25dfdbfe, {0x7, 0x0, 0x0, r10}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x11}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x48, 0x2}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x1}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x9}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x7}}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x8004) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) (async) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r12, 0x8933, &(0x7f0000000080)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r12, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r13], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r11, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r4], 0x4}}, 0x0) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r11, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r6, r5, 0x0, 0x100000002) 04:39:33 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x1, 0x0, 0x7}}], 0x1, 0x4000041) 04:39:33 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x1, &(0x7f00000000c0)=@framed, &(0x7f00000006c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r1}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r3, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) socket$rxrpc(0x21, 0x2, 0xa) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = dup2(r0, r2) openat$cgroup_ro(r6, &(0x7f00000002c0)='cgroup.freeze\x00', 0x0, 0x0) (async) openat$cgroup_ro(r6, &(0x7f00000002c0)='cgroup.freeze\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r8], 0x2c}}, 0x0) sendfile(r5, r4, 0x0, 0x100000002) (async) sendfile(r5, r4, 0x0, 0x100000002) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001280)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4788}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) epoll_create1(0x0) getsockname$packet(r10, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x2, &(0x7f0000000580)=ANY=[@ANYBLOB="1817f8ff39e58171a95b31315de55af6fc000000090000000000000006000000"], &(0x7f0000000340)='GPL\x00', 0x100, 0xff, &(0x7f0000000400)=""/255, 0x41100, 0x4c, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000000500)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x3, 0xc, 0x19c12932, 0x1000}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r10], 0x0, 0x10, 0xfffffffe}, 0x90) 04:39:33 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001240)='./bus\x00', 0x800000, &(0x7f0000000540)=ANY=[], 0x1, 0x125e, &(0x7f0000001280)="$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") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000001980)=0x8000000000000, 0x12) 04:39:33 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12}, 0x8c) 04:39:33 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x1, 0x0, 0x8}}], 0x1, 0x4000041) 04:39:33 executing program 0: bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=0xffffffffffffffff, 0x4) [ 451.544744][T22909] loop4: detected capacity change from 0 to 8192 04:39:33 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x2c}}, 0x0) [ 451.595683][T22921] FAULT_INJECTION: forcing a failure. [ 451.595683][T22921] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 451.609476][T22921] CPU: 1 PID: 22921 Comm: syz-executor.1 Not tainted 6.7.0-rc1-syzkaller-00125-g7475e51b8796 #0 [ 451.619990][T22921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 451.630049][T22921] Call Trace: [ 451.633392][T22921] [ 451.636362][T22921] dump_stack_lvl+0xda/0x130 [ 451.640959][T22921] dump_stack+0x15/0x20 [ 451.645190][T22921] should_fail_ex+0x21f/0x230 [ 451.649934][T22921] should_fail+0xb/0x10 [ 451.654138][T22921] should_fail_usercopy+0x1a/0x20 [ 451.659277][T22921] copy_page_from_iter_atomic+0x237/0xd80 [ 451.665018][T22921] ? shmem_write_begin+0xa0/0x1b0 [ 451.670076][T22921] ? shmem_write_begin+0x10c/0x1b0 [ 451.675242][T22921] generic_perform_write+0x20c/0x410 [ 451.680524][T22921] ? shmem_write_begin+0x1b0/0x1b0 [ 451.685718][T22921] shmem_file_write_iter+0xc8/0xe0 [ 451.690823][T22921] vfs_write+0x48a/0x790 [ 451.695102][T22921] ksys_write+0xeb/0x1a0 [ 451.699421][T22921] __x64_sys_write+0x42/0x50 [ 451.704008][T22921] do_syscall_64+0x44/0x110 [ 451.708509][T22921] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 451.714403][T22921] RIP: 0033:0x7fb8a5d8082f [ 451.718911][T22921] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 451.738602][T22921] RSP: 002b:00007fb8a50c1dd0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 451.747005][T22921] RAX: ffffffffffffffda RBX: 0000000000100000 RCX: 00007fb8a5d8082f [ 451.754967][T22921] RDX: 0000000000100000 RSI: 00007fb89cca2000 RDI: 0000000000000006 [ 451.762927][T22921] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000598 [ 451.770888][T22921] R10: 00000000000003ec R11: 0000000000000293 R12: 0000000000000006 [ 451.778849][T22921] R13: 00007fb8a50c1e7c R14: 00007fb8a50c1e80 R15: 00007fb89cca2000 [ 451.786814][T22921] 04:39:33 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x1, 0x0, 0xf}}], 0x1, 0x4000041) 04:39:33 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000395b2d05a3f5a97100004000000000000000001000"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r1}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r8], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x100000002) [ 451.796096][T22921] loop1: detected capacity change from 0 to 2048 [ 451.857730][T14246] ================================================================== [ 451.865839][T14246] BUG: KCSAN: data-race in _copy_to_iter / fat12_ent_put [ 451.872889][T14246] [ 451.875217][T14246] write to 0xffff888141670515 of 1 bytes by task 22909 on cpu 0: [ 451.882936][T14246] fat12_ent_put+0x7a/0x180 [ 451.887454][T14246] fat_alloc_clusters+0x4b5/0xa60 [ 451.892493][T14246] fat_get_block+0x25c/0x5e0 [ 451.897094][T14246] __block_write_begin_int+0x3b7/0xf40 [ 451.902543][T14246] block_write_begin+0x7b/0x170 [ 451.907386][T14246] cont_write_begin+0x479/0x690 [ 451.912238][T14246] fat_write_begin+0x61/0xf0 [ 451.916828][T14246] generic_perform_write+0x1c9/0x410 [ 451.922098][T14246] __generic_file_write_iter+0xa1/0x120 [ 451.927632][T14246] generic_file_write_iter+0x7d/0x1c0 [ 451.932988][T14246] vfs_write+0x48a/0x790 [ 451.937222][T14246] ksys_write+0xeb/0x1a0 [ 451.941464][T14246] __x64_sys_write+0x42/0x50 [ 451.946044][T14246] do_syscall_64+0x44/0x110 [ 451.950652][T14246] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 451.956535][T14246] [ 451.958839][T14246] read to 0xffff888141670000 of 1377 bytes by task 14246 on cpu 1: [ 451.966794][T14246] _copy_to_iter+0x126/0xb20 [ 451.971373][T14246] copy_page_to_iter+0x171/0x2b0 [ 451.976314][T14246] filemap_read+0x424/0x680 [ 451.980804][T14246] blkdev_read_iter+0x217/0x2c0 [ 451.985636][T14246] vfs_read+0x3c0/0x590 [ 451.989779][T14246] ksys_read+0xeb/0x1a0 [ 451.993932][T14246] __x64_sys_read+0x42/0x50 [ 451.998447][T14246] do_syscall_64+0x44/0x110 [ 452.002985][T14246] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 452.008964][T14246] [ 452.011271][T14246] Reported by Kernel Concurrency Sanitizer on: [ 452.017404][T14246] CPU: 1 PID: 14246 Comm: udevd Not tainted 6.7.0-rc1-syzkaller-00125-g7475e51b8796 #0 [ 452.027057][T14246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 452.037124][T14246] ================================================================== 04:39:34 executing program 1: mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x0, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) syz_read_part_table(0x59e, &(0x7f00000017c0)="$eJzs0r1Le1cYB/CTW9pQ6I/ID8HBDoLBKVaIgw7JIBJDFhWx4uAsOOggODhIJDr78g8ovoG4iHtGUUEU4iQZxbmguGRKqd5SdKpU+0I/n+Vwz/Oc+3D4nsB/WhR+aTabiRBCM/n+0z8fFYZKHaMDY+MhJMJUCKHw4w/PlUTc8ftfT/7YelZKZms7l4OPRy1XnTfn6b0o3q9GISyHEGbv9lN/7Wb8Hxznz1Irq/PFtcX8zG1x6b53urvQvl6Y2+zbzZUn2nKT8cOqRq/PJT5pfrrWf3DdHHnY+jKQCqGRvYj7Mh81kH+Vt/lvt1bqlcZw1+FCT+Zr/bS8Eef+9Cp/jwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPh4x/mz1MrqN/HX0n3vdHehfb0wt9m3mytPtOUmo5dKNfrM+fPFtcX8zG1x6T5d6z+4bo48bH356dvz7xrZi7gvk/ic+fyz3ua/3VqpVxrDXYcLPZmv9dPyRpz7k/wBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD+pMFTqGB0YGw8hEaZCCINRy/5v+83kSz0R953E6/fxWkpmazuXg49HLVedN+fpvdG4vxqFsBxCmL3bT/3dd+H9fg0AAP//iuKA4w==") (fail_nth: 34) 04:39:34 executing program 0: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) 04:39:34 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r1}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r3, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000080)) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES8=r2], 0x2c}}, 0x841) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r7, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r6, r5, 0x0, 0x100000002) 04:39:34 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001240)='./bus\x00', 0x800000, &(0x7f0000000540)=ANY=[], 0x1, 0x125e, &(0x7f0000001280)="$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") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000001980)=0xa000000000000, 0x12) 04:39:34 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x1, 0x0, 0x4a}}], 0x1, 0x4000041) 04:39:34 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000280), &(0x7f00000002c0)=0x4) 04:39:34 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x8, 0x6, 0x801}, 0x14}}, 0x0) 04:39:34 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) getsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, 0x0, 0x0) [ 452.398131][T22944] sctp: [Deprecated]: syz-executor.0 (pid 22944) Use of int in maxseg socket option. [ 452.398131][T22944] Use struct sctp_assoc_value instead [ 452.431251][T22942] loop4: detected capacity change from 0 to 8192 04:39:34 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x1, 0x0, 0x1f4}}], 0x1, 0x4000041) 04:39:34 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000000e0601080000000000000000000000400500010007000000050001"], 0x24}}, 0x0) [ 452.498133][ T27] audit: type=1400 audit(1700195974.443:544): avc: denied { getopt } for pid=22950 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 452.532901][T22940] FAULT_INJECTION: forcing a failure. [ 452.532901][T22940] name fail_page_alloc, interval 1, probability 0, space 0, times 0 04:39:34 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5}, 0x8c) [ 452.546282][T22940] CPU: 1 PID: 22940 Comm: syz-executor.1 Not tainted 6.7.0-rc1-syzkaller-00125-g7475e51b8796 #0 [ 452.556768][T22940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 452.566835][T22940] Call Trace: [ 452.570122][T22940] [ 452.573055][T22940] dump_stack_lvl+0xda/0x130 [ 452.577664][T22940] dump_stack+0x15/0x20 [ 452.581922][T22940] should_fail_ex+0x21f/0x230 [ 452.586644][T22940] __should_fail_alloc_page+0xfd/0x110 [ 452.592161][T22940] __alloc_pages+0x108/0x340 [ 452.596740][T22940] alloc_pages_mpol+0xb1/0x1d0 [ 452.601583][T22940] shmem_get_folio_gfp+0x3b2/0xb40 [ 452.606707][T22940] shmem_write_begin+0xa0/0x1b0 [ 452.611636][T22940] generic_perform_write+0x1c9/0x410 [ 452.616934][T22940] ? shmem_write_begin+0x1b0/0x1b0 [ 452.622058][T22940] shmem_file_write_iter+0xc8/0xe0 [ 452.627161][T22940] vfs_write+0x48a/0x790 [ 452.631407][T22940] ksys_write+0xeb/0x1a0 [ 452.635644][T22940] __x64_sys_write+0x42/0x50 [ 452.640332][T22940] do_syscall_64+0x44/0x110 [ 452.644824][T22940] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 452.650710][T22940] RIP: 0033:0x7fb8a5d8082f [ 452.655108][T22940] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 452.674776][T22940] RSP: 002b:00007fb8a5103dd0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 452.683177][T22940] RAX: ffffffffffffffda RBX: 0000000000100000 RCX: 00007fb8a5d8082f [ 452.691140][T22940] RDX: 0000000000100000 RSI: 00007fb89ccc3000 RDI: 0000000000000006 [ 452.699111][T22940] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000598 [ 452.707123][T22940] R10: 00000000000003ec R11: 0000000000000293 R12: 0000000000000006 [ 452.715141][T22940] R13: 00007fb8a5103e7c R14: 00007fb8a5103e80 R15: 00007fb89ccc3000 [ 452.723112][T22940] 04:39:34 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) (async) socket$netlink(0x10, 0x3, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000395b2d05a3f5a97100004000000000000000001000"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r1}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) write$binfmt_script(r2, &(0x7f0000000480)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) r3 = socket$rxrpc(0x21, 0x2, 0xa) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r8], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r3], 0x4}}, 0x0) (async) sendfile(r5, r4, 0x0, 0x100000002) 04:39:35 executing program 1: mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x0, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) syz_read_part_table(0x59e, &(0x7f00000017c0)="$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") (fail_nth: 35) 04:39:35 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001240)='./bus\x00', 0x800000, &(0x7f0000000540)=ANY=[], 0x1, 0x125e, &(0x7f0000001280)="$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") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000001980)=0xc000000000000, 0x12) 04:39:35 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x6d, 0x0, &(0x7f0000001740)) 04:39:35 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x1, 0x0, 0x20c}}], 0x1, 0x4000041) 04:39:35 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) (async) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r1}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) write$binfmt_script(r3, &(0x7f0000000480)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) r4 = socket$rxrpc(0x21, 0x2, 0xa) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000080)) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES8=r2], 0x2c}}, 0x841) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r7, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r4], 0x4}}, 0x0) (async) sendfile(r6, r5, 0x0, 0x100000002) 04:39:35 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) (async) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000395b2d05a3f5a97100004000000000000000001000"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r1}, 0x10) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000480)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) r3 = socket$rxrpc(0x21, 0x2, 0xa) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r8], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r3], 0x4}}, 0x0) (async) sendfile(r5, r4, 0x0, 0x100000002) 04:39:35 executing program 0: keyctl$set_reqkey_keyring(0x7, 0xffffffffffffffff) 04:39:35 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async, rerun: 64) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) (async) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r1}, 0x10) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) write$binfmt_script(r3, &(0x7f0000000480)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async, rerun: 64) r4 = socket$rxrpc(0x21, 0x2, 0xa) (async, rerun: 64) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000080)) (async) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES8=r2], 0x2c}}, 0x841) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r7, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r6, r5, 0x0, 0x100000002) 04:39:35 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000e7ff00000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r1}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r8], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r3], 0x4}}, 0x0) fdatasync(r7) sendfile(r5, r4, 0x0, 0x100000002) 04:39:35 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0xa, 0x0, &(0x7f0000001740)) 04:39:35 executing program 0: socket(0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) 04:39:35 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x1, 0x0, 0x218}}], 0x1, 0x4000041) [ 453.291073][T22980] loop4: detected capacity change from 0 to 8192 [ 453.386420][T23010] FAULT_INJECTION: forcing a failure. [ 453.386420][T23010] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 453.399588][T23010] CPU: 0 PID: 23010 Comm: syz-executor.1 Not tainted 6.7.0-rc1-syzkaller-00125-g7475e51b8796 #0 [ 453.410043][T23010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 453.420108][T23010] Call Trace: [ 453.423415][T23010] [ 453.426397][T23010] dump_stack_lvl+0xda/0x130 [ 453.431087][T23010] dump_stack+0x15/0x20 [ 453.435257][T23010] should_fail_ex+0x21f/0x230 [ 453.440019][T23010] should_fail+0xb/0x10 [ 453.444201][T23010] should_fail_usercopy+0x1a/0x20 [ 453.449296][T23010] copy_page_from_iter_atomic+0x237/0xd80 [ 453.455092][T23010] ? shmem_write_begin+0xa0/0x1b0 [ 453.460145][T23010] ? shmem_write_begin+0x10c/0x1b0 [ 453.465279][T23010] generic_perform_write+0x20c/0x410 [ 453.470579][T23010] ? shmem_write_begin+0x1b0/0x1b0 [ 453.475768][T23010] shmem_file_write_iter+0xc8/0xe0 [ 453.480896][T23010] vfs_write+0x48a/0x790 [ 453.485225][T23010] ksys_write+0xeb/0x1a0 [ 453.489494][T23010] __x64_sys_write+0x42/0x50 [ 453.494130][T23010] do_syscall_64+0x44/0x110 [ 453.498663][T23010] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 453.504632][T23010] RIP: 0033:0x7fb8a5d8082f [ 453.509110][T23010] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 453.528830][T23010] RSP: 002b:00007fb8a50c1dd0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 453.537327][T23010] RAX: ffffffffffffffda RBX: 0000000000100000 RCX: 00007fb8a5d8082f [ 453.545311][T23010] RDX: 0000000000100000 RSI: 00007fb89cca2000 RDI: 0000000000000006 [ 453.553276][T23010] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000598 [ 453.561764][T23010] R10: 00000000000003ec R11: 0000000000000293 R12: 0000000000000006 [ 453.569737][T23010] R13: 00007fb8a50c1e7c R14: 00007fb8a50c1e80 R15: 00007fb89cca2000 [ 453.577897][T23010] [ 453.584928][T23010] loop1: detected capacity change from 0 to 2048 04:39:36 executing program 1: mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x0, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) syz_read_part_table(0x59e, &(0x7f00000017c0)="$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") (fail_nth: 36) 04:39:36 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140), 0x95) 04:39:36 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="faffffff0000000000000000000000009500000000000000"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(r2, &(0x7f0000000500)='memory.swap.events\x00', 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000400)={0x10, 0x0, 0x25dfdbff, 0x80000}, 0xc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r9], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f00000005c0)=ANY=[@ANYBLOB="46040000", @ANYRES16=r7, @ANYBLOB="ff830500000700ffffff", @ANYBLOB="75f7f72a89e1fb8e52f708622cfca8fa65d22e49beca28bfba0539c0ba668cfc8a4123fddfff9651fb06616296cebc5e75b809cdca058b47f3cc7b9e46aa8db7"], 0x4}}, 0x4004050) sendfile(r6, r5, 0x0, 0x100000002) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000440)={'wg1\x00'}) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000640)={0xfc, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x0, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x0, 0x8, 0x2000000}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x7f, 0x3}}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x2}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x101}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x20}}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80000000}]}, @IPVS_CMD_ATTR_DAEMON={0x36, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3ff}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nicvf0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x40}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xb6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 04:39:36 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001240)='./bus\x00', 0x800000, &(0x7f0000000540)=ANY=[], 0x1, 0x125e, &(0x7f0000001280)="$eJzs3U9rI2UcB/Bf2vRf1jZV19VdEB/0oghx24MnL0V2QSwo1S6oIMzaVEPTpDShEBG3njwJvgxRj94E8Q304sWzIIj04nEPYqSdoJs26eK2TRf5fC55eGa+zzN/mIEJ82P2X/lyc2O9VVnP2jFWKERxayKKd1OkGIvxyO3GC7d+/uXpt9559/Wl5eUbKyndXHp74eWU0twzP7z3ybfP/ti+dOu7ue+nYm/+/f0/Fn/du7J3df+vb6LWSrVWajTbKUu3m812drteTWu11kYlpTfr1axVTbVGq7rdt3y93tza6qSssTZb2tqutlopa3TSRrWT2oXU3u6k7MOs1kiVSiXNloLTWP36brfbjeh2J2Iyut1udyZKcSkeidmYi3LMx6PxWDwel+OJuBJPxlNx9XCti95uAAAAAAAAAAAAAAAAAAAA+H+5T/1/Qf0/AAAAAAAAAAAAAAAAAAAAnL+j9f/FCN//BwAAAAAAAAAAAAAAAAAAgBG7z/f/j9T/v6j+HwAAAAAAAAAAAAAAAAAAAM7DdP6zktJ0xObnO6s7q/lv3r+0HrWoRzWuRzn+jMPq/1zevvna8o3r6dB8vLR5p5e/s7M63p9fiHLMFwbmF/J86s9PRene/GKU4/Lg+RcH5qfj+ecO8p/l+UqU46cPohn1WIso9Pb+MP/pQkqvvrE805+/drDeUOPnfFoAAADgLFXSPwY+v1cqw5bn+d7zeeoNVzjh/4Ejz+fFuFa8uP0m1+p8vJHV69XtB2xMDh9n8nQjH2sUIqK/Z67028rB5Gc2xYM2xkc66cTJ65zinEbxITiYZ9D4/at7eqZjtLOP9S6JrL4bEQ/B0Rh6MU6dlBp+zyiM4L7EaPx70i96SwAAAAAAAAAAAPgvBr79NxMRx94H/OhYz25vjP748ZGHz/7FCPYQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+JsdOBYAAAAAEOZvnUbHBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfBUAAP//Q97RDA==") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000001980)=0xe000000000000, 0x12) 04:39:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x1, 0x0, 0x241}}], 0x1, 0x4000041) 04:39:36 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@restrict={0x1}]}, {0x0, [0x2e]}}, &(0x7f0000000100)=""/75, 0x27, 0x4b, 0x1}, 0x20) 04:39:36 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x0, 0x0, 0x0, 0x2}, 0x8c) 04:39:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x1, 0x0, 0x300}}], 0x1, 0x4000041) [ 454.168912][ T27] audit: type=1400 audit(1700195976.113:545): avc: denied { bind } for pid=23015 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 454.194360][T23019] loop4: detected capacity change from 0 to 8192 [ 454.223429][ T27] audit: type=1400 audit(1700195976.163:546): avc: denied { ioctl } for pid=23015 comm="syz-executor.3" path="socket:[76611]" dev="sockfs" ino=76611 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 454.261085][T23023] FAULT_INJECTION: forcing a failure. 04:39:36 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000e7ff00000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) (async) socket$netlink(0x10, 0x3, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r1}, 0x10) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000480)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r8], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r3], 0x4}}, 0x0) (async) fdatasync(r7) sendfile(r5, r4, 0x0, 0x100000002) 04:39:36 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x2c, &(0x7f0000000000)=[@in={0x2, 0x4e21, @local}, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, &(0x7f0000000140)=0x10) 04:39:36 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x300}, 0x0) [ 454.261085][T23023] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 454.274440][T23023] CPU: 0 PID: 23023 Comm: syz-executor.1 Not tainted 6.7.0-rc1-syzkaller-00125-g7475e51b8796 #0 [ 454.284993][T23023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 454.295119][T23023] Call Trace: [ 454.298401][T23023] [ 454.301334][T23023] dump_stack_lvl+0xda/0x130 [ 454.306000][T23023] dump_stack+0x15/0x20 [ 454.310209][T23023] should_fail_ex+0x21f/0x230 [ 454.314902][T23023] __should_fail_alloc_page+0xfd/0x110 [ 454.320386][T23023] __alloc_pages+0x108/0x340 [ 454.324983][T23023] alloc_pages_mpol+0xb1/0x1d0 [ 454.329819][T23023] shmem_get_folio_gfp+0x3b2/0xb40 [ 454.334950][T23023] shmem_write_begin+0xa0/0x1b0 [ 454.339853][T23023] generic_perform_write+0x1c9/0x410 [ 454.345130][T23023] ? shmem_write_begin+0x1b0/0x1b0 [ 454.350296][T23023] shmem_file_write_iter+0xc8/0xe0 [ 454.355448][T23023] vfs_write+0x48a/0x790 [ 454.359764][T23023] ksys_write+0xeb/0x1a0 [ 454.364069][T23023] __x64_sys_write+0x42/0x50 [ 454.368669][T23023] do_syscall_64+0x44/0x110 [ 454.373270][T23023] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 454.379181][T23023] RIP: 0033:0x7fb8a5d8082f [ 454.383606][T23023] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 454.403232][T23023] RSP: 002b:00007fb8a5103dd0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 454.411635][T23023] RAX: ffffffffffffffda RBX: 0000000000100000 RCX: 00007fb8a5d8082f 04:39:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x1, 0x0, 0x3e8}}], 0x1, 0x4000041) [ 454.419610][T23023] RDX: 0000000000100000 RSI: 00007fb89ccc3000 RDI: 0000000000000006 [ 454.427578][T23023] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000598 [ 454.435542][T23023] R10: 00000000000003ec R11: 0000000000000293 R12: 0000000000000006 [ 454.443570][T23023] R13: 00007fb8a5103e7c R14: 00007fb8a5103e80 R15: 00007fb89ccc3000 [ 454.451615][T23023] 04:39:36 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000e7ff00000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r1}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) socket$rxrpc(0x21, 0x2, 0xa) (async) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r8], 0x2c}}, 0x0) (async) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r8], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r3], 0x4}}, 0x0) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r3], 0x4}}, 0x0) fdatasync(r7) (async) fdatasync(r7) sendfile(r5, r4, 0x0, 0x100000002) (async) sendfile(r5, r4, 0x0, 0x100000002) 04:39:36 executing program 1: mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x0, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) syz_read_part_table(0x59e, &(0x7f00000017c0)="$eJzs0r1Le1cYB/CTW9pQ6I/ID8HBDoLBKVaIgw7JIBJDFhWx4uAsOOggODhIJDr78g8ovoG4iHtGUUEU4iQZxbmguGRKqd5SdKpU+0I/n+Vwz/Oc+3D4nsB/WhR+aTabiRBCM/n+0z8fFYZKHaMDY+MhJMJUCKHw4w/PlUTc8ftfT/7YelZKZms7l4OPRy1XnTfn6b0o3q9GISyHEGbv9lN/7Wb8Hxznz1Irq/PFtcX8zG1x6b53urvQvl6Y2+zbzZUn2nKT8cOqRq/PJT5pfrrWf3DdHHnY+jKQCqGRvYj7Mh81kH+Vt/lvt1bqlcZw1+FCT+Zr/bS8Eef+9Cp/jwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPh4x/mz1MrqN/HX0n3vdHehfb0wt9m3mytPtOUmo5dKNfrM+fPFtcX8zG1x6T5d6z+4bo48bH356dvz7xrZi7gvk/ic+fyz3ua/3VqpVxrDXYcLPZmv9dPyRpz7k/wBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD+pMFTqGB0YGw8hEaZCCINRy/5v+83kSz0R953E6/fxWkpmazuXg49HLVedN+fpvdG4vxqFsBxCmL3bT/3dd+H9fg0AAP//iuKA4w==") (fail_nth: 37) 04:39:36 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001240)='./bus\x00', 0x800000, &(0x7f0000000540)=ANY=[], 0x1, 0x125e, &(0x7f0000001280)="$eJzs3U9rI2UcB/Bf2vRf1jZV19VdEB/0oghx24MnL0V2QSwo1S6oIMzaVEPTpDShEBG3njwJvgxRj94E8Q304sWzIIj04nEPYqSdoJs26eK2TRf5fC55eGa+zzN/mIEJ82P2X/lyc2O9VVnP2jFWKERxayKKd1OkGIvxyO3GC7d+/uXpt9559/Wl5eUbKyndXHp74eWU0twzP7z3ybfP/ti+dOu7ue+nYm/+/f0/Fn/du7J3df+vb6LWSrVWajTbKUu3m812drteTWu11kYlpTfr1axVTbVGq7rdt3y93tza6qSssTZb2tqutlopa3TSRrWT2oXU3u6k7MOs1kiVSiXNloLTWP36brfbjeh2J2Iyut1udyZKcSkeidmYi3LMx6PxWDwel+OJuBJPxlNx9XCti95uAAAAAAAAAAAAAAAAAAAA+H+5T/1/Qf0/AAAAAAAAAAAAAAAAAAAAnL+j9f/FCN//BwAAAAAAAAAAAAAAAAAAgBG7z/f/j9T/v6j+HwAAAAAAAAAAAAAAAAAAAM7DdP6zktJ0xObnO6s7q/lv3r+0HrWoRzWuRzn+jMPq/1zevvna8o3r6dB8vLR5p5e/s7M63p9fiHLMFwbmF/J86s9PRene/GKU4/Lg+RcH5qfj+ecO8p/l+UqU46cPohn1WIso9Pb+MP/pQkqvvrE805+/drDeUOPnfFoAAADgLFXSPwY+v1cqw5bn+d7zeeoNVzjh/4Ejz+fFuFa8uP0m1+p8vJHV69XtB2xMDh9n8nQjH2sUIqK/Z67028rB5Gc2xYM2xkc66cTJ65zinEbxITiYZ9D4/at7eqZjtLOP9S6JrL4bEQ/B0Rh6MU6dlBp+zyiM4L7EaPx70i96SwAAAAAAAAAAAPgvBr79NxMRx94H/OhYz25vjP748ZGHz/7FCPYQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+JsdOBYAAAAAEOZvnUbHBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfBUAAP//Q97RDA==") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000001980)=0x10000000000000, 0x12) 04:39:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x1, 0x0, 0x700}}], 0x1, 0x4000041) 04:39:36 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async, rerun: 64) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="faffffff0000000000000000000000009500000000000000"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r1}, 0x10) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(r2, &(0x7f0000000500)='memory.swap.events\x00', 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000480)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) r3 = socket$rxrpc(0x21, 0x2, 0xa) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000400)={0x10, 0x0, 0x25dfdbff, 0x80000}, 0xc) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) (async, rerun: 32) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r9], 0x2c}}, 0x0) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f00000005c0)=ANY=[@ANYBLOB="46040000", @ANYRES16=r7, @ANYBLOB="ff830500000700ffffff", @ANYBLOB="75f7f72a89e1fb8e52f708622cfca8fa65d22e49beca28bfba0539c0ba668cfc8a4123fddfff9651fb06616296cebc5e75b809cdca058b47f3cc7b9e46aa8db7"], 0x4}}, 0x4004050) (async) sendfile(r6, r5, 0x0, 0x100000002) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000440)={'wg1\x00'}) (async) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000640)={0xfc, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x0, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x0, 0x8, 0x2000000}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x7f, 0x3}}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x2}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x101}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x20}}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80000000}]}, @IPVS_CMD_ATTR_DAEMON={0x36, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3ff}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nicvf0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x40}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xb6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 04:39:36 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1a}, 0x8c) 04:39:36 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0100020000000000000001"], 0x1c}}, 0x0) 04:39:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x1, 0x0, 0xc02}}], 0x1, 0x4000041) 04:39:37 executing program 0: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x891d, &(0x7f0000000000)) [ 455.021191][T23060] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 04:39:37 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async, rerun: 64) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="faffffff0000000000000000000000009500000000000000"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async, rerun: 32) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r1}, 0x10) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$cgroup_ro(r2, &(0x7f0000000500)='memory.swap.events\x00', 0x0, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000480)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000400)={0x10, 0x0, 0x25dfdbff, 0x80000}, 0xc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r9], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f00000005c0)=ANY=[@ANYBLOB="46040000", @ANYRES16=r7, @ANYBLOB="ff830500000700ffffff", @ANYBLOB="75f7f72a89e1fb8e52f708622cfca8fa65d22e49beca28bfba0539c0ba668cfc8a4123fddfff9651fb06616296cebc5e75b809cdca058b47f3cc7b9e46aa8db7"], 0x4}}, 0x4004050) (async, rerun: 64) sendfile(r6, r5, 0x0, 0x100000002) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000440)={'wg1\x00'}) (async) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000640)={0xfc, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x0, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x0, 0x8, 0x2000000}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x7f, 0x3}}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x2}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x101}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x20}}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80000000}]}, @IPVS_CMD_ATTR_DAEMON={0x36, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3ff}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nicvf0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x40}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xb6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x44001}, 0x0) [ 455.099591][T23051] loop4: detected capacity change from 0 to 8192 [ 455.116294][T23054] FAULT_INJECTION: forcing a failure. [ 455.116294][T23054] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 455.130126][T23054] CPU: 1 PID: 23054 Comm: syz-executor.1 Not tainted 6.7.0-rc1-syzkaller-00125-g7475e51b8796 #0 [ 455.140555][T23054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 455.150611][T23054] Call Trace: [ 455.153886][T23054] [ 455.156805][T23054] dump_stack_lvl+0xda/0x130 [ 455.161594][T23054] dump_stack+0x15/0x20 [ 455.165742][T23054] should_fail_ex+0x21f/0x230 [ 455.170511][T23054] should_fail+0xb/0x10 [ 455.175106][T23054] should_fail_usercopy+0x1a/0x20 [ 455.180130][T23054] copy_page_from_iter_atomic+0x237/0xd80 [ 455.185856][T23054] ? shmem_write_begin+0xa0/0x1b0 [ 455.190875][T23054] ? shmem_write_begin+0x10c/0x1b0 [ 455.196040][T23054] generic_perform_write+0x20c/0x410 [ 455.201323][T23054] ? shmem_write_begin+0x1b0/0x1b0 [ 455.206458][T23054] shmem_file_write_iter+0xc8/0xe0 [ 455.211561][T23054] vfs_write+0x48a/0x790 [ 455.215800][T23054] ksys_write+0xeb/0x1a0 [ 455.220172][T23054] __x64_sys_write+0x42/0x50 [ 455.224856][T23054] do_syscall_64+0x44/0x110 [ 455.229541][T23054] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 455.235584][T23054] RIP: 0033:0x7fb8a5d8082f [ 455.239994][T23054] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 455.259693][T23054] RSP: 002b:00007fb8a5103dd0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 455.268208][T23054] RAX: ffffffffffffffda RBX: 0000000000100000 RCX: 00007fb8a5d8082f [ 455.276176][T23054] RDX: 0000000000100000 RSI: 00007fb89ccc3000 RDI: 0000000000000006 [ 455.284203][T23054] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000598 [ 455.292225][T23054] R10: 00000000000003ec R11: 0000000000000293 R12: 0000000000000006 04:39:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x1, 0x0, 0xf00}}], 0x1, 0x4000041) 04:39:37 executing program 0: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000c80)={@map, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 455.300294][T23054] R13: 00007fb8a5103e7c R14: 00007fb8a5103e80 R15: 00007fb89ccc3000 [ 455.308333][T23054] [ 455.370799][T23054] loop1: detected capacity change from 0 to 2048 04:39:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x1, 0x0, 0x1802}}], 0x1, 0x4000041) 04:39:37 executing program 1: mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x0, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) syz_read_part_table(0x59e, &(0x7f00000017c0)="$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") (fail_nth: 38) 04:39:37 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1832e8a8b4748a0eff95000000000000005b9c30e3d81b51f4037ed8dd7c9114dfe677d94d0504bf1429455d5657dd803aa92c484ff7a0a0ecb0adc9def6658574cd843971e9fbc67a261771f4680493d147035fef7b0cf56aac47da18fe33aa"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r8], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x100000002) 04:39:37 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001540)={0x1c, 0x2, &(0x7f00000001c0)=@raw=[@map_idx_val], 0x0}, 0x90) 04:39:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x1, 0x0, 0x2ee0}}], 0x1, 0x4000041) 04:39:37 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001240)='./bus\x00', 0x800000, &(0x7f0000000540)=ANY=[], 0x1, 0x125e, &(0x7f0000001280)="$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") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000001980)=0x100000000000000, 0x12) 04:39:37 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="100000000008000000000000009500"/24], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001280)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x4788}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x368, 0x24, 0x200, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x8, 0xffff}, {0x4, 0x1}, {0xfff3, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x40, 0x71}}, @TCA_STAB={0x74, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x70, 0x7f, 0x0, 0xc262, 0x2, 0x9, 0xcb2e, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x80, 0x2, 0x101, 0x60b28570, 0x0, 0xa609, 0x0, 0x1}}, {0x6, 0x2, [0x8be]}}, {{0x1c, 0x1, {0x7f, 0x5, 0x33, 0x6, 0x1, 0x2, 0x6, 0x3}}, {0xa, 0x2, [0xfc00, 0x5, 0x7]}}]}, @TCA_STAB={0x34, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x80, 0x5029, 0x1ff, 0x2, 0x100000, 0x3ff, 0x7}}, {0x12, 0x2, [0x8, 0x200, 0x5, 0x6, 0x0, 0x1ff, 0x9]}}]}, @TCA_STAB={0x84, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x17, 0x8, 0x8, 0x0, 0x0, 0xffff, 0x6, 0x4}}, {0xc, 0x2, [0x5, 0xfe01, 0x20, 0xfffd]}}, {{0x1c, 0x1, {0x7f, 0x40, 0x4, 0x4, 0x0, 0x5, 0x5, 0x6}}, {0x10, 0x2, [0x0, 0x8001, 0xac, 0x8, 0x5, 0x5]}}, {{0x1c, 0x1, {0x0, 0x5a, 0xe37b, 0x8, 0x2, 0x40, 0x6, 0x5}}, {0xe, 0x2, [0x7, 0x7fff, 0x0, 0x7f, 0x9]}}]}, @qdisc_kind_options=@q_drr={0x8}, @TCA_STAB={0x144, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0x2b, 0x5, 0x3, 0x0, 0xf5, 0x6, 0x1}}, {0x6, 0x2, [0xe4]}}, {{0x1c, 0x1, {0x2, 0x9, 0xa0, 0x7f, 0x0, 0x5843, 0x4, 0x6}}, {0x10, 0x2, [0x6, 0x5, 0x7ff, 0x6, 0x0, 0x4]}}, {{0x1c, 0x1, {0xfb, 0x3, 0x7, 0xe68, 0x0, 0x5, 0x3, 0x2}}, {0x8, 0x2, [0x3, 0x7ff]}}, {{0x1c, 0x1, {0x8, 0x8, 0xff, 0xfffffe01, 0x1, 0x92, 0x2, 0x3}}, {0xa, 0x2, [0x9, 0x1f, 0x7]}}, {{0x1c, 0x1, {0xfc, 0x6, 0x4, 0xfffffff7, 0x0, 0x7ff, 0x5, 0x2}}, {0x8, 0x2, [0x6, 0x0]}}, {{0x1c, 0x1, {0x4, 0x3, 0x400, 0x401, 0x2, 0x6, 0x4, 0x5}}, {0xe, 0x2, [0x6, 0xa7, 0x6, 0x6f5e, 0x21]}}, {{0x1c, 0x1, {0x0, 0x0, 0x5, 0x5, 0x1, 0x81, 0x3, 0x6}}, {0x10, 0x2, [0x1, 0x8, 0x20, 0xf801, 0x3, 0x80]}}, {{0x1c, 0x1, {0x0, 0x26, 0x4, 0xffff, 0x0, 0x6, 0x1, 0x3}}, {0xa, 0x2, [0x200, 0x96, 0x2]}}]}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x3a, 0x10000, 0x7ff, 0x9, 0x0, 0x7, 0x80000000, 0x9}}}}, @TCA_STAB={0x80, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x0, 0xa8f4, 0x0, 0x2, 0x3, 0x1000, 0xa}}, {0x18, 0x2, [0x8000, 0x1f, 0x42, 0x100, 0x8, 0x5f26, 0x6, 0x4, 0x5, 0x176]}}, {{0x1c, 0x1, {0x8, 0x1, 0x3, 0x7ff, 0x0, 0x3, 0x7, 0x2}}, {0x8, 0x2, [0x2, 0x8]}}, {{0x1c, 0x1, {0x3, 0x6, 0x0, 0x1, 0x2, 0x8, 0x3ff, 0x2}}, {0x8, 0x2, [0x5b, 0x200]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x368}, 0x1, 0x0, 0x0, 0x44000}, 0x4000001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r1}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r3, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYRES8=r4, @ANYRES32=r7, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r9], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r7, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r4], 0x4}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup(r10) getsockname$packet(r11, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) fsmount(r11, 0x0, 0xc) sendfile(r6, r5, 0x0, 0x100000002) 04:39:37 executing program 0: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000c80)={@map, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 04:39:37 executing program 0: bpf$BPF_PROG_QUERY(0x12, &(0x7f0000000c80)={@map, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 04:39:37 executing program 0: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x89a1, 0x0) 04:39:37 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xb, 0x0, 0x0, 0x5}, 0x48) 04:39:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x1, 0x0, 0x31ab}}], 0x1, 0x4000041) 04:39:37 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001540)={0x6, 0x2, &(0x7f00000001c0)=@raw=[@map_idx_val], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2}, 0x90) [ 455.929365][T23088] loop4: detected capacity change from 0 to 8192 04:39:37 executing program 0: bpf$BPF_PROG_QUERY(0x15, &(0x7f0000000c80)={@map, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 456.035036][T23096] FAULT_INJECTION: forcing a failure. [ 456.035036][T23096] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 456.048616][T23096] CPU: 0 PID: 23096 Comm: syz-executor.1 Not tainted 6.7.0-rc1-syzkaller-00125-g7475e51b8796 #0 [ 456.059046][T23096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 456.069180][T23096] Call Trace: [ 456.072506][T23096] [ 456.075468][T23096] dump_stack_lvl+0xda/0x130 [ 456.080166][T23096] dump_stack+0x15/0x20 [ 456.084444][T23096] should_fail_ex+0x21f/0x230 [ 456.089255][T23096] __should_fail_alloc_page+0xfd/0x110 [ 456.094739][T23096] __alloc_pages+0x108/0x340 [ 456.099418][T23096] alloc_pages_mpol+0xb1/0x1d0 [ 456.104242][T23096] shmem_get_folio_gfp+0x3b2/0xb40 [ 456.109379][T23096] shmem_write_begin+0xa0/0x1b0 [ 456.114260][T23096] generic_perform_write+0x1c9/0x410 [ 456.119561][T23096] ? shmem_write_begin+0x1b0/0x1b0 [ 456.124699][T23096] shmem_file_write_iter+0xc8/0xe0 [ 456.129859][T23096] vfs_write+0x48a/0x790 [ 456.134204][T23096] ksys_write+0xeb/0x1a0 [ 456.138470][T23096] __x64_sys_write+0x42/0x50 [ 456.143116][T23096] do_syscall_64+0x44/0x110 [ 456.147619][T23096] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 456.153705][T23096] RIP: 0033:0x7fb8a5d8082f [ 456.158129][T23096] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 456.177839][T23096] RSP: 002b:00007fb8a5103dd0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 456.186281][T23096] RAX: ffffffffffffffda RBX: 0000000000100000 RCX: 00007fb8a5d8082f [ 456.194282][T23096] RDX: 0000000000100000 RSI: 00007fb89ccc3000 RDI: 0000000000000006 [ 456.202255][T23096] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000598 [ 456.210255][T23096] R10: 00000000000003ec R11: 0000000000000293 R12: 0000000000000006 [ 456.218463][T23096] R13: 00007fb8a5103e7c R14: 00007fb8a5103e80 R15: 00007fb89ccc3000 [ 456.226455][T23096] 04:39:38 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)='c', 0x1}], 0x1, 0x0, 0x4102}}], 0x1, 0x4000041) 04:39:38 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="100000000008000000000000009500"/24], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="100000000008000000000000009500"/24], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001280)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x4788}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x368, 0x24, 0x200, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x8, 0xffff}, {0x4, 0x1}, {0xfff3, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x40, 0x71}}, @TCA_STAB={0x74, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x70, 0x7f, 0x0, 0xc262, 0x2, 0x9, 0xcb2e, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x80, 0x2, 0x101, 0x60b28570, 0x0, 0xa609, 0x0, 0x1}}, {0x6, 0x2, [0x8be]}}, {{0x1c, 0x1, {0x7f, 0x5, 0x33, 0x6, 0x1, 0x2, 0x6, 0x3}}, {0xa, 0x2, [0xfc00, 0x5, 0x7]}}]}, @TCA_STAB={0x34, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x80, 0x5029, 0x1ff, 0x2, 0x100000, 0x3ff, 0x7}}, {0x12, 0x2, [0x8, 0x200, 0x5, 0x6, 0x0, 0x1ff, 0x9]}}]}, @TCA_STAB={0x84, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x17, 0x8, 0x8, 0x0, 0x0, 0xffff, 0x6, 0x4}}, {0xc, 0x2, [0x5, 0xfe01, 0x20, 0xfffd]}}, {{0x1c, 0x1, {0x7f, 0x40, 0x4, 0x4, 0x0, 0x5, 0x5, 0x6}}, {0x10, 0x2, [0x0, 0x8001, 0xac, 0x8, 0x5, 0x5]}}, {{0x1c, 0x1, {0x0, 0x5a, 0xe37b, 0x8, 0x2, 0x40, 0x6, 0x5}}, {0xe, 0x2, [0x7, 0x7fff, 0x0, 0x7f, 0x9]}}]}, @qdisc_kind_options=@q_drr={0x8}, @TCA_STAB={0x144, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0x2b, 0x5, 0x3, 0x0, 0xf5, 0x6, 0x1}}, {0x6, 0x2, [0xe4]}}, {{0x1c, 0x1, {0x2, 0x9, 0xa0, 0x7f, 0x0, 0x5843, 0x4, 0x6}}, {0x10, 0x2, [0x6, 0x5, 0x7ff, 0x6, 0x0, 0x4]}}, {{0x1c, 0x1, {0xfb, 0x3, 0x7, 0xe68, 0x0, 0x5, 0x3, 0x2}}, {0x8, 0x2, [0x3, 0x7ff]}}, {{0x1c, 0x1, {0x8, 0x8, 0xff, 0xfffffe01, 0x1, 0x92, 0x2, 0x3}}, {0xa, 0x2, [0x9, 0x1f, 0x7]}}, {{0x1c, 0x1, {0xfc, 0x6, 0x4, 0xfffffff7, 0x0, 0x7ff, 0x5, 0x2}}, {0x8, 0x2, [0x6, 0x0]}}, {{0x1c, 0x1, {0x4, 0x3, 0x400, 0x401, 0x2, 0x6, 0x4, 0x5}}, {0xe, 0x2, [0x6, 0xa7, 0x6, 0x6f5e, 0x21]}}, {{0x1c, 0x1, {0x0, 0x0, 0x5, 0x5, 0x1, 0x81, 0x3, 0x6}}, {0x10, 0x2, [0x1, 0x8, 0x20, 0xf801, 0x3, 0x80]}}, {{0x1c, 0x1, {0x0, 0x26, 0x4, 0xffff, 0x0, 0x6, 0x1, 0x3}}, {0xa, 0x2, [0x200, 0x96, 0x2]}}]}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x3a, 0x10000, 0x7ff, 0x9, 0x0, 0x7, 0x80000000, 0x9}}}}, @TCA_STAB={0x80, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x0, 0xa8f4, 0x0, 0x2, 0x3, 0x1000, 0xa}}, {0x18, 0x2, [0x8000, 0x1f, 0x42, 0x100, 0x8, 0x5f26, 0x6, 0x4, 0x5, 0x176]}}, {{0x1c, 0x1, {0x8, 0x1, 0x3, 0x7ff, 0x0, 0x3, 0x7, 0x2}}, {0x8, 0x2, [0x2, 0x8]}}, {{0x1c, 0x1, {0x3, 0x6, 0x0, 0x1, 0x2, 0x8, 0x3ff, 0x2}}, {0x8, 0x2, [0x5b, 0x200]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x368}, 0x1, 0x0, 0x0, 0x44000}, 0x4000001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r1}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r3, &(0x7f0000000480)=ANY=[], 0x208e24b) (async) write$binfmt_script(r3, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYRES8=r4, @ANYRES32=r7, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r9], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r7, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r4], 0x4}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r10) (async) r11 = dup(r10) getsockname$packet(r11, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) fsmount(r11, 0x0, 0xc) (async) fsmount(r11, 0x0, 0xc) sendfile(r6, r5, 0x0, 0x100000002) 04:39:38 executing program 1: mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x0, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) syz_read_part_table(0x59e, &(0x7f00000017c0)="$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") (fail_nth: 39) 04:39:38 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001240)='./bus\x00', 0x800000, &(0x7f0000000540)=ANY=[], 0x1, 0x125e, &(0x7f0000001280)="$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") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000001980)=0x200000000000000, 0x12) 04:39:38 executing program 0: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x8932, &(0x7f0000000000)) 04:39:38 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1832e8a8b4748a0eff95000000000000005b9c30e3d81b51f4037ed8dd7c9114dfe677d94d0504bf1429455d5657dd803aa92c484ff7a0a0ecb0adc9def6658574cd843971e9fbc67a261771f4680493d147035fef7b0cf56aac47da18fe33aa"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) (async) socket$netlink(0x10, 0x3, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='subflow_check_data_avail\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) write$binfmt_script(r2, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) r3 = socket$rxrpc(0x21, 0x2, 0xa) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000000000000500000008000300", @ANYRES32=r8], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r3], 0x4}}, 0x0) (async) sendfile(r5, r4, 0x0, 0x100000002) 04:39:38 executing program 0: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x8943, &(0x7f0000000000)) 04:39:38 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xb, &(0x7f0000000280)=0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmmsg$inet6(r0, &(0x