d IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1176.926151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1176.954401] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1176.959794] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 09:36:47 executing program 5: semctl$IPC_RMID(0x0, 0x0, 0x0) semctl$SEM_INFO(0xffffffffffffffff, 0x3, 0x13, &(0x7f0000000140)=""/42) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x16, &(0x7f00000006c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e36313130373331373200"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000da61426b81ed44a9ac5d6d8d66d52a0c010000000c00000000000000d4f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000000000003900000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0000000000000000000000000000000000000000010400"/32, 0x20}, {&(0x7f0000000080)="02000000030000000400000030000f00030004000000000000000000f84bc40f008ec4", 0x23, 0x1000}, {&(0x7f0000010500)="ffff000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff2000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff976a34afd77d3dbeffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000d4f4655fd4f4655fd4f4655f00"/8218, 0x201a, 0x2000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f00000000000004000800000000000000050000000800"/64, 0x40, 0x4200}, {&(0x7f0000000040)="200000001cc2eb501cc2eb5000000000d4f4655f00"/32, 0x20, 0x4280}, {&(0x7f0000012800)="c041000000300000d4f4655fd4f4655fd4f4655f0000000000000200180000000000000000000000090000000a0000000b00"/64, 0x40, 0x5400}, {&(0x7f0000000440)="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", 0x11c, 0x5480}, {&(0x7f0000012a00)="ed4100003c000000d5f4655fd5f4655fd5f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c6531000000000000000000000000000000000000000000000000000000b698e28d000000000000000000000000000000000000000000000000200000001cc2eb501cc2eb501cc2eb50d5f4655f1cc2eb500000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x5600}, {&(0x7f0000012b00)="ed8100001a040000d5f4655fd5f4655fd5f4655f00000000000001000800000000000000010000000c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a20e8d2000000000000000000000000000000000000000000000000200000001cc2eb501cc2eb501cc2eb50d5f4655f1cc2eb500000000000000000", 0xa0, 0x5800}, {&(0x7f0000012c00)="ffa1000026000000d5f4655fd5f4655fd5f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3631313037333137322f66696c65302f66696c65300000000000000000000000000000000000000000000015d4476a000000000000000000000000000000000000000000000000200000001cc2eb501cc2eb501cc2eb50d5f4655f1cc2eb500000000000000000", 0xa0, 0x5a00}, {&(0x7f0000000580)="ed8100000a000000d5f4655fd5f4655fd5f4655f000000000000010000000000000000100100000073797a6b616c6c657273000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008851284000000000000000000000000000000000000000000000000200000001cc2eb501cc2eb501cc2eb50d5f4655f1cc2eb500000000000000000000002ea04070000000000000000000000000000646174610601540100000000060000000000000006014c010000000006000000000000007861747472320000000000da00c8d22500"/258, 0x102, 0x5c00}, {&(0x7f0000012e00)="0000000000000000000000000000000078617474723200007861747472310000ed81000028230000d5f4655fd5f4655fd5f4655f00000000000002001800000000000000010000000d0000000e0000000f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2c222a9000000000000000000000000000000000000000000000000200000001cc2eb501cc2eb501cc2eb50d5f4655f1cc2eb500000000000000000", 0xc0, 0x5ddd}, {&(0x7f0000012f00)="ed81000064000000d5f4655fd5f4655fd5f4655f000000000000010000000000000000100100000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c1705df1d000000000000000000000000000000000000000000000000200000001cc2eb501cc2eb501cc2eb50d5f4655f1cc2eb500000000000000000000002ea04073401000000002800000000000000646174610000000000000000", 0xc0, 0x6000}, {&(0x7f0000013000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lersyzkallersyzkallersyzkallers\b\x00\x00\x00llers', 0x40, 0x61c0}, {&(0x7f0000013100)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c653300000011000000940f090166696c652e636f6c64000000", 0x80, 0x8000}, {&(0x7f0000013200)="0b0000000c0001022e000000020000000c0002022e2e000000000000e80f0000", 0x20, 0x9000}, {&(0x7f0000013300)="00000000001000"/32, 0x20, 0x100000001}, {&(0x7f0000013400)="00000000001000"/32, 0x20, 0xb000}, {&(0x7f0000013500)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0xc000}], 0x3088000, &(0x7f00000000c0)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}) 09:36:47 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000040)='./file1\x00', 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) 09:36:47 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000010000)="eb58906d6b66732e66617400021e20000400000004f8", 0x16}, {0x0, 0x0, 0x4000}], 0x100c000, &(0x7f0000000040)) (fail_nth: 5) [ 1177.063321] loop0: detected capacity change from 0 to 40 [ 1177.067289] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 1177.070148] loop5: detected capacity change from 0 to 264192 09:36:47 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) connect$inet6(r0, &(0x7f0000001580)={0xa, 0x4e21, 0x7ff, @remote}, 0x1c) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004bc0)=[{{&(0x7f0000000040), 0x6e, &(0x7f0000001440)=[{&(0x7f00000000c0)=""/144, 0x90}, {&(0x7f0000000180)=""/47, 0x2f}, {&(0x7f00000001c0)=""/4094, 0xffe}, {&(0x7f00000011c0)=""/84, 0x54}, {&(0x7f0000004cc0)=""/154, 0x9a}, {&(0x7f0000001300)=""/17, 0x11}, {&(0x7f0000001340)=""/64, 0x40}, {&(0x7f0000001380)=""/136, 0x88}], 0x8, &(0x7f00000014c0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000001500), 0x6e, &(0x7f0000001580), 0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000f500000000000000fdff000001000000", @ANYRES32=0xffffffffffffffff, @ANYRES32], 0x58}}, {{&(0x7f0000001640), 0x6e, &(0x7f0000004940)=[{&(0x7f00000016c0)}, {&(0x7f0000001700)=""/50, 0x32}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000002740)=""/65, 0x41}, {&(0x7f00000027c0)=""/63, 0x3f}, {&(0x7f0000002800)=""/103, 0x67}, {&(0x7f0000002880)=""/83, 0x53}, {&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000003900)=""/4096, 0x1000}, {&(0x7f0000004900)}], 0xa}}, {{&(0x7f0000004a00), 0x6e, &(0x7f0000004b80)=[{&(0x7f0000004a80)=""/207, 0xcf}], 0x1}}], 0x4, 0x30142, 0x0) sendmmsg(r1, &(0x7f0000000200), 0x0, 0x0) [ 1177.080414] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1177.081212] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1177.086439] FAT-fs (loop0): invalid media value (0x00) [ 1177.087053] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1177.090464] syz-executor.4: attempt to access beyond end of device [ 1177.090464] loop4: rw=34817, want=256, limit=255 09:36:47 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYRESHEX=r2, @ANYRES32=r3, @ANYBLOB="2f003300d0800000ffffffffffff08021100000050505050505000000000000000042503000000760600000000000000"], 0x4c}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r4, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) sendfile(r4, r4, 0x0, 0xffffffff000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) [ 1177.116591] loop5: detected capacity change from 0 to 264192 [ 1177.150390] syz-executor.4: attempt to access beyond end of device [ 1177.150390] loop4: rw=34817, want=256, limit=255 [ 1177.160825] FAULT_INJECTION: forcing a failure. [ 1177.160825] name failslab, interval 1, probability 0, space 0, times 0 [ 1177.163345] CPU: 0 PID: 8722 Comm: syz-executor.1 Not tainted 5.17.0-next-20220401 #1 [ 1177.164999] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1177.167323] Call Trace: [ 1177.167837] [ 1177.168282] dump_stack_lvl+0x8b/0xb3 [ 1177.169098] should_fail.cold+0x5/0xa [ 1177.169882] ? create_object.isra.0+0x3a/0xa20 [ 1177.170802] should_failslab+0x5/0x10 [ 1177.171575] kmem_cache_alloc+0x5b/0x480 [ 1177.172395] create_object.isra.0+0x3a/0xa20 [ 1177.173278] ? kasan_unpoison+0x23/0x50 [ 1177.174104] kmem_cache_alloc_lru+0x2d3/0x7c0 [ 1177.175004] ? shmem_alloc_inode+0x23/0x50 [ 1177.175858] shmem_alloc_inode+0x23/0x50 [ 1177.176664] ? shmem_destroy_inode+0x70/0x70 [ 1177.177552] alloc_inode+0x63/0x240 [ 1177.178287] new_inode+0x23/0x240 [ 1177.178991] shmem_get_inode+0x18b/0xcb0 [ 1177.179813] __shmem_file_setup+0xb8/0x310 [ 1177.180682] __do_sys_memfd_create+0x1c6/0x4e0 [ 1177.181620] do_syscall_64+0x3b/0x90 [ 1177.182370] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1177.183398] RIP: 0033:0x7f72f8f58b19 [ 1177.184142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1177.187868] RSP: 002b:00007f72f64cdf48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1177.189379] RAX: ffffffffffffffda RBX: 00000000200004c0 RCX: 00007f72f8f58b19 09:36:47 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000040)='./file1\x00', 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) [ 1177.190820] RDX: 0000000000008000 RSI: 0000000000000000 RDI: 00007f72f8fb20fb [ 1177.192352] RBP: 0000000000000002 R08: 0000000000004000 R09: ffffffffffffffff [ 1177.193793] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000008100000 [ 1177.195206] R13: 0000000020000100 R14: 0000000000008000 R15: 0000000020000040 [ 1177.196641] [ 1177.226832] loop1: detected capacity change from 0 to 64 09:36:47 executing program 6: creat(&(0x7f0000000480)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4d, 0x3, &(0x7f0000000080)=[{&(0x7f00000004c0)="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", 0x17d, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="67727069642c6a6f75726e616c5f696f7072696f3d3016de6f1d26c45b6a3e7cbb78303030303030303030303030303030382c6d696e697864662c6f726c6f762c61626f72742c00c7"]) 09:36:47 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1b) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r2, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) sendfile(r2, r2, 0x0, 0xffffffff000) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000000)={0x6, 0x5, 0x9, 0x1, 0x7, "f2ecc8d8d04e0d0d"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)) [ 1177.274826] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1177.279903] loop6: detected capacity change from 0 to 66 [ 1177.283914] ext4: Bad value for 'journal_ioprio' [ 1177.310679] loop0: detected capacity change from 0 to 40 09:36:47 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2800890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') mkdirat(r0, &(0x7f0000000040)='./file2\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x8000000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$AUTOFS_IOC_EXPIRE(r4, 0x810c9365, &(0x7f0000000340)={{0x8000, 0x8c6}, 0x100, './file1\x00'}) sendfile(r2, r3, 0x0, 0x7fffffff) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file1\x00'}) openat(r5, &(0x7f0000000140)='./file2\x00', 0x191040, 0x1) [ 1177.346691] FAT-fs (loop0): invalid media value (0x00) [ 1177.348074] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1177.400755] loop4: detected capacity change from 0 to 255 09:36:47 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000010000)="eb58906d6b66732e66617400021e20000400000004f8", 0x16}, {0x0, 0x0, 0x4000}], 0x100c000, &(0x7f0000000040)) (fail_nth: 6) 09:36:47 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) sendfile(r0, r0, 0x0, 0xffffffff000) recvfrom$inet(r0, &(0x7f0000000100)=""/4096, 0x1000, 0x11122, &(0x7f0000001100)={0x2, 0x4e22, @local}, 0x10) syz_emit_ethernet(0xfe, &(0x7f0000000000)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "2ddc20", 0xc8, 0x3a, 0xff, @local, @local, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x5, 0x16, "f3ee2f95a1639903e0e4b3284b70b92bda2ba69452b7e345cc6763ba2e15e9eb55d9339722b99de9524fcfe8473137f0aa725dc6faf492e282acff85b837f2b736741d500720410be87b430791b02a43bc6cc9acd0cd771ca56e4643e01db2e01fa2cb667920e9e38e77e190f488807ddf8e6ceb6c792ecc1b6572f3a122476c12b237cbc531c683d1d203a3eac79406a662c617774ccaa28fc57da5c1d1af52481db6076ac2421d14aea9385d3b"}, {0x5, 0x1, "632f713282f8"}]}}}}}}, 0x0) [ 1177.457939] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1177.474570] FAULT_INJECTION: forcing a failure. [ 1177.474570] name failslab, interval 1, probability 0, space 0, times 0 [ 1177.477027] CPU: 0 PID: 8738 Comm: syz-executor.1 Not tainted 5.17.0-next-20220401 #1 [ 1177.478626] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1177.480810] Call Trace: [ 1177.481311] [ 1177.481756] dump_stack_lvl+0x8b/0xb3 [ 1177.482522] should_fail.cold+0x5/0xa [ 1177.483272] ? security_inode_alloc+0x34/0x160 [ 1177.484158] should_failslab+0x5/0x10 [ 1177.484898] kmem_cache_alloc+0x5b/0x480 [ 1177.485726] security_inode_alloc+0x34/0x160 [ 1177.486583] inode_init_always+0x5d8/0xd20 [ 1177.487407] alloc_inode+0x84/0x240 [ 1177.488120] new_inode+0x23/0x240 [ 1177.488797] shmem_get_inode+0x18b/0xcb0 [ 1177.489646] __shmem_file_setup+0xb8/0x310 [ 1177.490474] __do_sys_memfd_create+0x1c6/0x4e0 [ 1177.491391] do_syscall_64+0x3b/0x90 [ 1177.492115] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1177.493162] RIP: 0033:0x7f72f8f58b19 [ 1177.493925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1177.497655] RSP: 002b:00007f72f64cdf48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1177.499191] RAX: ffffffffffffffda RBX: 00000000200004c0 RCX: 00007f72f8f58b19 [ 1177.500633] RDX: 0000000000008000 RSI: 0000000000000000 RDI: 00007f72f8fb20fb [ 1177.502067] RBP: 0000000000000002 R08: 0000000000004000 R09: ffffffffffffffff [ 1177.503486] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000008100000 [ 1177.504902] R13: 0000000020000100 R14: 0000000000008000 R15: 0000000020000040 [ 1177.506358] [ 1177.725841] syz-executor.4: attempt to access beyond end of device [ 1177.725841] loop4: rw=34817, want=256, limit=255 09:36:48 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000040)='./file1\x00', 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) [ 1177.849049] loop0: detected capacity change from 0 to 40 [ 1177.859918] FAT-fs (loop0): invalid media value (0x00) [ 1177.860660] FAT-fs (loop0): Can't find a valid FAT filesystem 09:36:48 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000010000)="eb58906d6b66732e66617400021e20000400000004f8", 0x16}, {0x0, 0x0, 0x4000}], 0x100c000, &(0x7f0000000040)) (fail_nth: 7) 09:36:48 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, 0x0) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x5) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x8000000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) 09:36:48 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x5) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x8000000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) [ 1177.871692] FAULT_INJECTION: forcing a failure. [ 1177.871692] name failslab, interval 1, probability 0, space 0, times 0 [ 1177.874151] CPU: 0 PID: 8745 Comm: syz-executor.1 Not tainted 5.17.0-next-20220401 #1 [ 1177.875813] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1177.878023] Call Trace: [ 1177.878535] [ 1177.878992] dump_stack_lvl+0x8b/0xb3 [ 1177.879784] should_fail.cold+0x5/0xa [ 1177.880560] ? create_object.isra.0+0x3a/0xa20 [ 1177.881542] should_failslab+0x5/0x10 [ 1177.882300] kmem_cache_alloc+0x5b/0x480 [ 1177.883139] create_object.isra.0+0x3a/0xa20 [ 1177.884020] ? kasan_unpoison+0x23/0x50 [ 1177.884821] kmem_cache_alloc+0x239/0x480 [ 1177.885681] security_inode_alloc+0x34/0x160 [ 1177.886569] inode_init_always+0x5d8/0xd20 [ 1177.887426] alloc_inode+0x84/0x240 [ 1177.888163] new_inode+0x23/0x240 [ 1177.888863] shmem_get_inode+0x18b/0xcb0 [ 1177.889709] __shmem_file_setup+0xb8/0x310 [ 1177.890570] __do_sys_memfd_create+0x1c6/0x4e0 [ 1177.891495] do_syscall_64+0x3b/0x90 [ 1177.892244] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1177.893275] RIP: 0033:0x7f72f8f58b19 [ 1177.894010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1177.897730] RSP: 002b:00007f72f64cdf48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1177.899246] RAX: ffffffffffffffda RBX: 00000000200004c0 RCX: 00007f72f8f58b19 [ 1177.900678] RDX: 0000000000008000 RSI: 0000000000000000 RDI: 00007f72f8fb20fb [ 1177.902111] RBP: 0000000000000002 R08: 0000000000004000 R09: ffffffffffffffff [ 1177.903539] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000008100000 [ 1177.904981] R13: 0000000020000100 R14: 0000000000008000 R15: 0000000020000040 [ 1177.906439] 09:36:48 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, 0x0) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x5) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x8000000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) [ 1177.945989] loop1: detected capacity change from 0 to 64 [ 1177.955572] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1178.020296] loop3: detected capacity change from 0 to 255 09:36:48 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000010000)="eb58906d6b66732e66617400021e20000400000004f8", 0x16}, {0x0, 0x0, 0x4000}], 0x100c000, &(0x7f0000000040)) (fail_nth: 8) 09:36:48 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000040)='./file1\x00', 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) [ 1178.073012] loop4: detected capacity change from 0 to 255 [ 1178.110417] loop2: detected capacity change from 0 to 255 [ 1178.126575] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1178.151855] loop0: detected capacity change from 0 to 40 [ 1178.154519] FAULT_INJECTION: forcing a failure. [ 1178.154519] name failslab, interval 1, probability 0, space 0, times 0 [ 1178.155808] CPU: 1 PID: 8757 Comm: syz-executor.1 Not tainted 5.17.0-next-20220401 #1 [ 1178.156815] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1178.158356] Call Trace: [ 1178.158650] [ 1178.158980] dump_stack_lvl+0x8b/0xb3 [ 1178.159405] should_fail.cold+0x5/0xa [ 1178.159862] should_failslab+0x5/0x10 [ 1178.160349] kmem_cache_alloc_lru+0x60/0x7c0 [ 1178.160979] ? __d_alloc+0x31/0x990 [ 1178.161449] ? lockdep_hardirqs_on+0x79/0x100 [ 1178.161943] __d_alloc+0x31/0x990 [ 1178.162323] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1178.162930] d_alloc_pseudo+0x19/0x70 [ 1178.163336] alloc_file_pseudo+0xce/0x250 [ 1178.163783] ? alloc_file+0x580/0x580 [ 1178.164217] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1178.164882] ? shmem_get_inode+0x619/0xcb0 [ 1178.165331] __shmem_file_setup+0x144/0x310 [ 1178.165795] __do_sys_memfd_create+0x1c6/0x4e0 [ 1178.166285] do_syscall_64+0x3b/0x90 [ 1178.166704] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1178.167352] RIP: 0033:0x7f72f8f58b19 [ 1178.167888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1178.169959] RSP: 002b:00007f72f64cdf48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1178.170837] RAX: ffffffffffffffda RBX: 00000000200004c0 RCX: 00007f72f8f58b19 [ 1178.171623] RDX: 0000000000008000 RSI: 0000000000000000 RDI: 00007f72f8fb20fb [ 1178.172358] RBP: 0000000000000002 R08: 0000000000004000 R09: ffffffffffffffff [ 1178.173109] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000008100000 [ 1178.173884] R13: 0000000020000100 R14: 0000000000008000 R15: 0000000020000040 [ 1178.174683] [ 1178.196852] FAT-fs (loop0): invalid media value (0x00) [ 1178.197497] FAT-fs (loop0): Can't find a valid FAT filesystem 09:36:48 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="20002870938160bd68de8141a5bd703392824a8b06a5da00"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x41) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x4c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @broadcast}}, @channel_switch={0x0, 0x4, {{}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x130, r4, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xff, 0x2c}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x200}, @NL80211_ATTR_FRAME_MATCH={0xf5, 0x5b, "01b28647c8482334d9e606d34930fdaacc12652e18172159e827e636761822751b0817d0ab9cf768ee8ce512c83f7f2ea99319df2e324bde2b0cb182df9b470d8709a030c14a05ad96c5a9a453335bd4c05a9a0bcc8f20b022ac82b88ee7021f9edb794e63a69390c5d37d75bb3a9a96dee5591b7ea523dd9b83f71b9fc47dc21d9e6b0394239d942bfcf2a0de09b2bd6356d4c9d7c51bbbd498e8955fb95b13d9d894c16b9f6def34a915a33339c52202f730fb1ec92d09c22009812a9b35903af52ebba77ac37154e7d6701e0011d04ee1c1b115e1a03b46fbf9a08c44f5523a55736406e3b8697de0da024af18b3c39"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6c9e}]}, 0x130}, 0x1, 0x0, 0x0, 0x2000000}, 0xc0000) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, r1, 0x800, 0x4, 0x0, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3, 0x65}}}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @broadcast}, @ver_80211n={0x0, 0x4}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1, 0x2}, @void}}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x48013}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000540)={{0x1, 0x1, 0x18, r2, {0x5, 0x7}}, './file0\x00'}) sendmsg$NL80211_CMD_DEL_PMKSA(r9, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x120}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x48, r1, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x37}}}}, [@NL80211_ATTR_SSID={0x12, 0x34, @random="49845aec996e56f3095619ac90d0"}, @NL80211_ATTR_PMKID={0x14, 0x55, "2074ebcba699711ec67ef32f2b93e065"}]}, 0x48}, 0x1, 0x0, 0x0, 0x4080}, 0x20044010) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r7) [ 1179.261465] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 09:37:02 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000010000)="eb58906d6b66732e66617400021e20000400000004f8", 0x16}, {0x0, 0x0, 0x4000}], 0x100c000, &(0x7f0000000040)) (fail_nth: 9) 09:37:02 executing program 4: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000280), 0x4, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x4400) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) sendfile(r5, r5, 0x0, 0xffffffff000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) sendfile(r6, r6, 0x0, 0xffffffff000) ioctl$LOOP_SET_FD(r4, 0x4c00, r6) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), r7) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYRES16=r7, @ANYRESOCT=r2], 0x13) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000080)={0x0, 0x7, 0x3e7}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000025c0), 0x210b458, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRESHEX=r1, @ANYBLOB="2c7766646e6f3d7ed70aead3d66027a80920cc3c292c7d341d933a830da2e611e6353a1f149100000abab7bcab5e456a189c3112e4a1638dc16e5ff3dfce41cd6b4e2999743c25f32ea84ee9b38e202dcc586c9e541424b24958a61f1841ccff00000000000000d7fb9e88bb744ec459e25dea5dfbd46b3cbffe", @ANYRESHEX=r2, @ANYBLOB=',cache=mmap,access=', @ANYRESDEC=0xee00, @ANYBLOB='4\x00']) 09:37:02 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1b) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r2, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) sendfile(r2, r2, 0x0, 0xffffffff000) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000000)={0x6, 0x5, 0x9, 0x1, 0x7, "f2ecc8d8d04e0d0d"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)) 09:37:02 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x5) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x8000000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) 09:37:02 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYRESHEX=r2, @ANYRES32=r3, @ANYBLOB="2f003300d0800000ffffffffffff08021100000050505050505000000000000000042503000000760600000000000000"], 0x4c}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r4, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) sendfile(r4, r4, 0x0, 0xffffffff000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) 09:37:02 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r2 = gettid() process_vm_writev(r2, &(0x7f0000002580)=[{&(0x7f0000000140)=""/89, 0x59}, {&(0x7f00000001c0)=""/175, 0xaf}, {&(0x7f0000000280)=""/4096, 0x1000}], 0x3, &(0x7f0000003840)=[{&(0x7f0000002640)=""/105, 0x69}, {0xfffffffffffffffe, 0x10}], 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x4c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @broadcast}}, @channel_switch={0x0, 0x4, {{}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x965bc3355ad73aca}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x48}, @void, @val={0xc, 0x99, {0x0, 0x78}}}}, [@NL80211_ATTR_PID={0x8, 0x52, r2}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000091}, 0x800) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x4c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @broadcast}}, @channel_switch={0x0, 0x4, {{}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) 09:37:02 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, 0x0) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x5) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x8000000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) 09:37:02 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000040)='./file1\x00', 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) [ 1191.732946] loop2: detected capacity change from 0 to 255 [ 1191.739003] loop3: detected capacity change from 0 to 255 [ 1191.741780] loop0: detected capacity change from 0 to 40 [ 1191.767831] FAT-fs (loop0): bogus number of FAT sectors [ 1191.768466] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1191.770310] FAULT_INJECTION: forcing a failure. [ 1191.770310] name failslab, interval 1, probability 0, space 0, times 0 [ 1191.773300] CPU: 1 PID: 8787 Comm: syz-executor.1 Not tainted 5.17.0-next-20220401 #1 09:37:02 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000006b91ec2dbe5a9bcca338869feff160094eaf1c146a44699b5169534f3543a6ad9fef5613f18786674964a1114e56558296", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="2f003300d0800000ffffffffffff08021100000050505050505000000000000000042500000000760600000000000000"], 0x4c}}, 0x0) [ 1191.775170] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1191.777555] Call Trace: [ 1191.778131] [ 1191.778625] dump_stack_lvl+0x8b/0xb3 [ 1191.779452] should_fail.cold+0x5/0xa [ 1191.780284] ? create_object.isra.0+0x3a/0xa20 [ 1191.781287] should_failslab+0x5/0x10 [ 1191.782113] kmem_cache_alloc+0x5b/0x480 [ 1191.782987] create_object.isra.0+0x3a/0xa20 [ 1191.783908] ? kasan_unpoison+0x23/0x50 [ 1191.784766] kmem_cache_alloc_lru+0x2d3/0x7c0 [ 1191.785721] ? __d_alloc+0x31/0x990 [ 1191.786513] __d_alloc+0x31/0x990 [ 1191.787244] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1191.788444] d_alloc_pseudo+0x19/0x70 [ 1191.789227] alloc_file_pseudo+0xce/0x250 [ 1191.790141] ? alloc_file+0x580/0x580 [ 1191.790943] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1191.792114] ? shmem_get_inode+0x619/0xcb0 [ 1191.793034] __shmem_file_setup+0x144/0x310 [ 1191.793982] __do_sys_memfd_create+0x1c6/0x4e0 [ 1191.794949] do_syscall_64+0x3b/0x90 [ 1191.795733] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1191.796817] RIP: 0033:0x7f72f8f58b19 [ 1191.797594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1191.802168] RSP: 002b:00007f72f64cdf48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1191.804161] RAX: ffffffffffffffda RBX: 00000000200004c0 RCX: 00007f72f8f58b19 [ 1191.806217] RDX: 0000000000008000 RSI: 0000000000000000 RDI: 00007f72f8fb20fb [ 1191.808106] RBP: 0000000000000002 R08: 0000000000004000 R09: ffffffffffffffff [ 1191.809945] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000008100000 [ 1191.811643] R13: 0000000020000100 R14: 0000000000008000 R15: 0000000020000040 [ 1191.813216] [ 1191.825799] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 09:37:02 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, 0x0) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x5) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x8000000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) 09:37:02 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000040)='./file1\x00', 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) [ 1192.063643] loop3: detected capacity change from 0 to 255 [ 1192.064242] loop1: detected capacity change from 0 to 64 09:37:02 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x44, r4, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x5764}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4c081}, 0x4008000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x4c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @broadcast}}, @channel_switch={0x0, 0x4, {{}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) 09:37:02 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000010000)="eb58906d6b66732e66617400021e20000400000004f8", 0x16}, {0x0, 0x0, 0x4000}], 0x100c000, &(0x7f0000000040)) (fail_nth: 10) 09:37:02 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000040)='./file1\x00', 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) [ 1192.261600] FAULT_INJECTION: forcing a failure. [ 1192.261600] name failslab, interval 1, probability 0, space 0, times 0 [ 1192.264339] CPU: 1 PID: 8806 Comm: syz-executor.1 Not tainted 5.17.0-next-20220401 #1 [ 1192.265933] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1192.268218] Call Trace: [ 1192.268737] [ 1192.269231] dump_stack_lvl+0x8b/0xb3 [ 1192.270106] should_fail.cold+0x5/0xa [ 1192.270899] ? memcg_alloc_slab_cgroups+0x7a/0x120 [ 1192.271898] should_failslab+0x5/0x10 [ 1192.272679] __kmalloc_node+0x76/0x470 [ 1192.273473] memcg_alloc_slab_cgroups+0x7a/0x120 [ 1192.274436] allocate_slab+0xd6/0x300 [ 1192.275205] ___slab_alloc+0x913/0xee0 [ 1192.275987] ? __d_alloc+0x31/0x990 [ 1192.276743] ? __d_alloc+0x31/0x990 [ 1192.277479] __slab_alloc.constprop.0+0x45/0x80 [ 1192.278436] kmem_cache_alloc_lru+0x51a/0x7c0 [ 1192.279332] ? __d_alloc+0x31/0x990 [ 1192.280072] __d_alloc+0x31/0x990 [ 1192.280771] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1192.281903] d_alloc_pseudo+0x19/0x70 [ 1192.282651] alloc_file_pseudo+0xce/0x250 [ 1192.283481] ? alloc_file+0x580/0x580 [ 1192.284235] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1192.285354] ? shmem_get_inode+0x619/0xcb0 [ 1192.286202] __shmem_file_setup+0x144/0x310 [ 1192.287084] __do_sys_memfd_create+0x1c6/0x4e0 [ 1192.287992] do_syscall_64+0x3b/0x90 [ 1192.288743] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1192.289793] RIP: 0033:0x7f72f8f58b19 [ 1192.290529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1192.294298] RSP: 002b:00007f72f64cdf48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1192.295807] RAX: ffffffffffffffda RBX: 00000000200004c0 RCX: 00007f72f8f58b19 [ 1192.297206] RDX: 0000000000008000 RSI: 0000000000000000 RDI: 00007f72f8fb20fb [ 1192.298623] RBP: 0000000000000002 R08: 0000000000004000 R09: ffffffffffffffff [ 1192.300040] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000008100000 [ 1192.301457] R13: 0000000020000100 R14: 0000000000008000 R15: 0000000020000040 [ 1192.302898] 09:37:02 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000020000003b000000080003000bb397cc6a860a8609e77509eec5587949fcad5206cc537fc3374df19e9c9895c6260ffa05c203f4b80c722f096a15419c68297b8235f549b6501934e84d168e58e31fc436b29a2dd6c37c64042134a7235908ef85a9984b4bd582636a36fbbb36ecc75ef49164ef262b595244cc83d4ec79f4f45373fb71ff927e9b008ae576072f6cd94c2d4cca832ce7750e9cc9f9affb0b99b4ea83cbf2bc58e3ef7e0a07130b016a6f1f9bd865ab291d0b4b49", @ANYRES32=r3, @ANYBLOB="2f003300d0800000ffffffffffff08021100000050505050505000000000000000042500000000760600000000000000"], 0x4c}}, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x64200, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) [ 1192.378192] loop1: detected capacity change from 0 to 64 09:37:02 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000010000)="eb58906d6b66732e66617400021e20000400000004f8", 0x16}, {0x0, 0x0, 0x4000}], 0x100c000, &(0x7f0000000040)) (fail_nth: 11) [ 1192.506416] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1192.581959] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.7'. 09:37:02 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x5) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x8000000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) [ 1192.630805] FAULT_INJECTION: forcing a failure. [ 1192.630805] name failslab, interval 1, probability 0, space 0, times 0 [ 1192.633160] CPU: 1 PID: 8813 Comm: syz-executor.1 Not tainted 5.17.0-next-20220401 #1 [ 1192.634741] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1192.637420] Call Trace: [ 1192.637951] [ 1192.638403] dump_stack_lvl+0x8b/0xb3 [ 1192.639367] should_fail.cold+0x5/0xa [ 1192.640296] ? create_object.isra.0+0x3a/0xa20 [ 1192.641224] should_failslab+0x5/0x10 [ 1192.642000] kmem_cache_alloc+0x5b/0x480 [ 1192.643001] create_object.isra.0+0x3a/0xa20 [ 1192.643937] ? kasan_unpoison+0x23/0x50 [ 1192.644789] kmem_cache_alloc+0x239/0x480 [ 1192.645780] __alloc_file+0x21/0x230 [ 1192.646735] alloc_empty_file+0x6d/0x170 [ 1192.647553] alloc_file+0x59/0x580 [ 1192.648330] alloc_file_pseudo+0x16a/0x250 [ 1192.649175] ? alloc_file+0x580/0x580 [ 1192.649942] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1192.651055] ? shmem_get_inode+0x619/0xcb0 [ 1192.651958] __shmem_file_setup+0x144/0x310 [ 1192.652904] __do_sys_memfd_create+0x1c6/0x4e0 [ 1192.653958] do_syscall_64+0x3b/0x90 [ 1192.654924] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1192.656052] RIP: 0033:0x7f72f8f58b19 [ 1192.656792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1192.660737] RSP: 002b:00007f72f64cdf48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1192.662513] RAX: ffffffffffffffda RBX: 00000000200004c0 RCX: 00007f72f8f58b19 [ 1192.664074] RDX: 0000000000008000 RSI: 0000000000000000 RDI: 00007f72f8fb20fb [ 1192.665810] RBP: 0000000000000002 R08: 0000000000004000 R09: ffffffffffffffff [ 1192.667232] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000008100000 [ 1192.668823] R13: 0000000020000100 R14: 0000000000008000 R15: 0000000020000040 [ 1192.670397] [ 1192.792490] loop1: detected capacity change from 0 to 64 [ 1192.866982] loop0: detected capacity change from 0 to 262144 [ 1192.878242] loop2: detected capacity change from 0 to 255 [ 1192.899608] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1210.212877] loop3: detected capacity change from 0 to 255 09:37:20 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000010000)="eb58906d6b66732e66617400021e20000400000004f8", 0x16}, {0x0, 0x0, 0x4000}], 0x100c000, &(0x7f0000000040)) (fail_nth: 12) 09:37:20 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000040)='./file1\x00', 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) 09:37:20 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="2f003300d0800000ffffffffffff080211000000505050502315eb8183795d505000000000000000042500000000760665f9f6dd8ab7b1c8068b9c3c48ddba25c6bde71bddc8f77eda0853f3763ba46d61d1ead6dcc61f247c3ba9df9cec456afea9715c95461405ad6fe25b68e7ebfe883ab59f4930f77000"/136], 0x4c}}, 0x0) 09:37:20 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, 0x0) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x5) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x8000000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) 09:37:20 executing program 5: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @dev}, {0x16, 0x0, 0x0, @multicast2}}}}}, 0x0) syz_emit_ethernet(0x1f8, &(0x7f0000000040)={@random="30264fd2972e", @local, @void, {@ipv6={0x86dd, @dccp_packet={0xb, 0x6, "164907", 0x1c2, 0x21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x13}, {[@srh={0x3c, 0xc, 0x4, 0x6, 0x71, 0x10, 0x8, [@private0, @remote, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, @remote]}, @hopopts={0x5c, 0x2, '\x00', [@hao={0xc9, 0x10, @mcast1}]}, @routing={0x2b, 0x10, 0x1, 0x4, 0x0, [@mcast1, @mcast1, @mcast1, @private1, @mcast1, @mcast1, @mcast2, @mcast2]}, @fragment={0x67, 0x0, 0x1, 0x1, 0x0, 0x17, 0x64}], {{0x4e20, 0x4e23, 0x4, 0x1, 0x8, 0x0, 0x0, 0x1, 0x0, "d6e380", 0x4, "4a88f4"}, "531eaa174f84bf163b6dd8a94390ec6c3fe9c041177baa4d183b1cfaab268aafc60a30b6c9a19425824a5c8c266935f30b5f8d6c65ec28871b21561a70064ccb30653b4b4bbc7fd3cff4bd6157c4107f71b678b1665bff308cb62a2767bbe0edcfd777381a37563e7155ce65ee5b8c5a184b28ac8497a318b5fa109ec442553ec5254a48f7682375944fc4c4f43d0f4a7eb0a9c3772bbd08d0d7"}}}}}}, &(0x7f0000000240)={0x1, 0x2, [0x73, 0x2c1, 0xf63, 0x736]}) 09:37:20 executing program 4: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000280), 0x4, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x4400) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) sendfile(r5, r5, 0x0, 0xffffffff000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) sendfile(r6, r6, 0x0, 0xffffffff000) ioctl$LOOP_SET_FD(r4, 0x4c00, r6) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), r7) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYRES16=r7, @ANYRESOCT=r2], 0x13) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000080)={0x0, 0x7, 0x3e7}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000025c0), 0x210b458, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRESHEX=r1, @ANYBLOB="2c7766646e6f3d7ed70aead3d66027a80920cc3c292c7d341d933a830da2e611e6353a1f149100000abab7bcab5e456a189c3112e4a1638dc16e5ff3dfce41cd6b4e2999743c25f32ea84ee9b38e202dcc586c9e541424b24958a61f1841ccff00000000000000d7fb9e88bb744ec459e25dea5dfbd46b3cbffe", @ANYRESHEX=r2, @ANYBLOB=',cache=mmap,access=', @ANYRESDEC=0xee00, @ANYBLOB='4\x00']) 09:37:20 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x5) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x8000000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) 09:37:20 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x5) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x8000000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) [ 1210.228129] loop6: detected capacity change from 0 to 255 [ 1210.231187] FAULT_INJECTION: forcing a failure. [ 1210.231187] name failslab, interval 1, probability 0, space 0, times 0 [ 1210.233133] CPU: 0 PID: 8837 Comm: syz-executor.1 Not tainted 5.17.0-next-20220401 #1 [ 1210.234498] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1210.236460] Call Trace: [ 1210.236907] [ 1210.237293] dump_stack_lvl+0x8b/0xb3 [ 1210.237977] should_fail.cold+0x5/0xa [ 1210.238691] ? security_file_alloc+0x34/0x170 [ 1210.239493] should_failslab+0x5/0x10 [ 1210.240172] kmem_cache_alloc+0x5b/0x480 [ 1210.240916] security_file_alloc+0x34/0x170 [ 1210.241692] __alloc_file+0xb6/0x230 [ 1210.242384] alloc_empty_file+0x6d/0x170 [ 1210.243114] alloc_file+0x59/0x580 [ 1210.243773] alloc_file_pseudo+0x16a/0x250 [ 1210.244529] ? alloc_file+0x580/0x580 [ 1210.245175] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1210.246166] ? shmem_get_inode+0x619/0xcb0 [ 1210.246905] __shmem_file_setup+0x144/0x310 [ 1210.247679] __do_sys_memfd_create+0x1c6/0x4e0 [ 1210.248474] do_syscall_64+0x3b/0x90 [ 1210.249126] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1210.250054] RIP: 0033:0x7f72f8f58b19 [ 1210.250695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1210.254003] RSP: 002b:00007f72f64cdf48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1210.255306] RAX: ffffffffffffffda RBX: 00000000200004c0 RCX: 00007f72f8f58b19 [ 1210.256572] RDX: 0000000000008000 RSI: 0000000000000000 RDI: 00007f72f8fb20fb [ 1210.257845] RBP: 0000000000000002 R08: 0000000000004000 R09: ffffffffffffffff [ 1210.259107] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000008100000 [ 1210.260330] R13: 0000000020000100 R14: 0000000000008000 R15: 0000000020000040 [ 1210.261623] [ 1210.263283] loop2: detected capacity change from 0 to 255 [ 1210.278466] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1210.305258] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 09:37:20 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000010000)="eb58906d6b66732e66617400021e20000400000004f8", 0x16}, {0x0, 0x0, 0x4000}], 0x100c000, &(0x7f0000000040)) (fail_nth: 13) [ 1210.359152] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 09:37:20 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x5) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x8000000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) [ 1210.378725] loop0: detected capacity change from 0 to 262144 09:37:20 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) openat(r0, &(0x7f0000000080)='./file0\x00', 0x200, 0x40) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0x40305839, &(0x7f0000000040)=ANY=[@ANYBLOB="0600000000fddda784adff18000000000000002b00000000000000000000000000000000948e8f10691f4b7b202a2c359658e9e468cfa7a5aebe293317bf"]) [ 1210.422335] FAULT_INJECTION: forcing a failure. [ 1210.422335] name failslab, interval 1, probability 0, space 0, times 0 [ 1210.424787] CPU: 0 PID: 8851 Comm: syz-executor.1 Not tainted 5.17.0-next-20220401 #1 [ 1210.426363] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1210.428616] Call Trace: [ 1210.429122] [ 1210.429563] dump_stack_lvl+0x8b/0xb3 [ 1210.430354] should_fail.cold+0x5/0xa [ 1210.431142] ? create_object.isra.0+0x3a/0xa20 [ 1210.432043] should_failslab+0x5/0x10 [ 1210.432805] kmem_cache_alloc+0x5b/0x480 [ 1210.433620] create_object.isra.0+0x3a/0xa20 [ 1210.434509] ? kasan_unpoison+0x23/0x50 [ 1210.435296] kmem_cache_alloc+0x239/0x480 [ 1210.436129] security_file_alloc+0x34/0x170 [ 1210.436982] __alloc_file+0xb6/0x230 [ 1210.437722] alloc_empty_file+0x6d/0x170 [ 1210.438538] alloc_file+0x59/0x580 [ 1210.439256] alloc_file_pseudo+0x16a/0x250 [ 1210.439553] loop2: detected capacity change from 0 to 255 [ 1210.440099] ? alloc_file+0x580/0x580 [ 1210.440121] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1210.442559] ? shmem_get_inode+0x619/0xcb0 [ 1210.443415] __shmem_file_setup+0x144/0x310 [ 1210.444289] __do_sys_memfd_create+0x1c6/0x4e0 [ 1210.445215] do_syscall_64+0x3b/0x90 [ 1210.445952] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1210.446981] RIP: 0033:0x7f72f8f58b19 [ 1210.447715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1210.451402] RSP: 002b:00007f72f64cdf48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1210.452903] RAX: ffffffffffffffda RBX: 00000000200004c0 RCX: 00007f72f8f58b19 [ 1210.454329] RDX: 0000000000008000 RSI: 0000000000000000 RDI: 00007f72f8fb20fb [ 1210.455741] RBP: 0000000000000002 R08: 0000000000004000 R09: ffffffffffffffff [ 1210.457147] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000008100000 [ 1210.458554] R13: 0000000020000100 R14: 0000000000008000 R15: 0000000020000040 [ 1210.459987] 09:37:20 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x4c0a02, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x3, 0x8000, 0x7ff]}]}, 0x28}}, 0x0) [ 1210.468743] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1210.537350] loop1: detected capacity change from 0 to 64 09:37:20 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x5) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x8000000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) [ 1210.590257] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 09:37:21 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000010000)="eb58906d6b66732e66617400021e20000400000004f8", 0x16}, {0x0, 0x0, 0x4000}], 0x100c000, &(0x7f0000000040)) (fail_nth: 14) 09:37:21 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000040)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x4c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @broadcast}, @ver_80211n={0x0, 0x80}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) [ 1210.667627] loop2: detected capacity change from 0 to 255 [ 1210.696968] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1210.711340] FAULT_INJECTION: forcing a failure. [ 1210.711340] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 1210.713921] CPU: 0 PID: 8866 Comm: syz-executor.1 Not tainted 5.17.0-next-20220401 #1 [ 1210.715475] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1210.717664] Call Trace: [ 1210.718167] [ 1210.718606] dump_stack_lvl+0x8b/0xb3 [ 1210.719360] should_fail.cold+0x5/0xa [ 1210.720116] prepare_alloc_pages+0x17b/0x500 [ 1210.720977] __alloc_pages+0x131/0x4e0 [ 1210.721740] ? __alloc_pages_slowpath.constprop.0+0x1f10/0x1f10 [ 1210.722917] ? lock_release+0x3b2/0x6f0 [ 1210.723732] ? avc_has_perm_noaudit+0x1c8/0x390 [ 1210.724719] ? find_held_lock+0x2c/0x110 [ 1210.725643] ? lock_release+0x3b2/0x6f0 [ 1210.726425] ? __filemap_get_folio+0x2d4/0xfe0 [ 1210.727321] ? __sanitizer_cov_trace_cmp2+0x22/0x80 [ 1210.728307] alloc_pages_vma+0xde/0x500 [ 1210.729084] shmem_alloc_page+0x107/0x1d0 [ 1210.729895] ? shmem_add_to_page_cache+0x1650/0x1650 [ 1210.730907] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1210.731981] ? percpu_counter_add_batch+0xb4/0x170 [ 1210.732940] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1210.733907] ? __vm_enough_memory+0x184/0x360 [ 1210.734850] shmem_getpage_gfp.constprop.0+0x651/0x2190 [ 1210.735940] ? shmem_unuse_inode+0xde0/0xde0 [ 1210.736816] ? ktime_get_coarse_real_ts64+0x159/0x190 [ 1210.737838] ? fault_in_readable+0x18a/0x250 [ 1210.738736] ? fault_in_writeable+0x1d0/0x1d0 [ 1210.739639] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 1210.740660] shmem_write_begin+0xfd/0x1d0 [ 1210.741494] generic_perform_write+0x24c/0x570 [ 1210.742436] ? folio_unlock+0xb0/0xb0 [ 1210.743192] ? discard_new_inode+0x190/0x190 [ 1210.744072] ? generic_write_checks+0x25f/0x390 [ 1210.745003] __generic_file_write_iter+0x2d6/0x480 [ 1210.746020] generic_file_write_iter+0xd7/0x220 [ 1210.746963] ? iov_iter_init+0x45/0x1b0 [ 1210.747768] new_sync_write+0x390/0x560 [ 1210.748580] ? new_sync_read+0x5f0/0x5f0 [ 1210.749397] ? x86_pmu_enable+0xc10/0xd90 [ 1210.750247] ? lock_release+0x6f0/0x6f0 [ 1210.751054] ? lock_is_held_type+0xd7/0x130 [ 1210.751931] vfs_write+0x7b9/0xac0 [ 1210.752641] __x64_sys_pwrite64+0x1f7/0x250 [ 1210.753499] ? vfs_write+0xac0/0xac0 [ 1210.754254] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1210.755386] do_syscall_64+0x3b/0x90 [ 1210.756126] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1210.757157] RIP: 0033:0x7f72f8f0bab7 [ 1210.757896] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 1210.761562] RSP: 002b:00007f72f64cdf20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 1210.763063] RAX: ffffffffffffffda RBX: 00007f72f8fa2970 RCX: 00007f72f8f0bab7 [ 1210.764472] RDX: 0000000000000016 RSI: 0000000020010000 RDI: 0000000000000004 [ 1210.765880] RBP: 0000000000000002 R08: 0000000000000000 R09: ffffffffffffffff [ 1210.767309] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 1210.768707] R13: 0000000000000004 R14: 00000000200004c0 R15: 0000000000000000 [ 1210.770147] [ 1210.826176] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 1210.848785] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1210.850258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:37:21 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) openat(r0, &(0x7f0000000080)='./file0\x00', 0x200, 0x40) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0x40305839, &(0x7f0000000040)=ANY=[@ANYBLOB="0600000000fddda784adff18000000000000002b00000000000000000000000000000000948e8f10691f4b7b202a2c359658e9e468cfa7a5aebe293317bf"]) 09:37:21 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x5) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x8000000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) [ 1210.891805] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1210.918660] loop1: detected capacity change from 0 to 64 [ 1211.114308] loop2: detected capacity change from 0 to 255 [ 1211.137175] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1211.212679] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1211.570095] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 1211.580610] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1211.581495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:37:40 executing program 4: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xfff}}, './file0\x00'}) open(&(0x7f0000000000)='./file0\x00', 0x80, 0x100) mount$cgroup2(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x401, 0x0) clone3(&(0x7f0000000640)={0x112363500, &(0x7f00000000c0), 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:37:40 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000010000)="eb58906d6b66732e66617400021e20000400000004f8", 0x16}, {0x0, 0x0, 0x4000}], 0x100c000, &(0x7f0000000040)) (fail_nth: 15) [ 1230.316342] FAULT_INJECTION: forcing a failure. [ 1230.316342] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1230.318743] CPU: 1 PID: 8884 Comm: syz-executor.1 Not tainted 5.17.0-next-20220401 #1 [ 1230.320344] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1230.322640] Call Trace: [ 1230.323165] [ 1230.323611] dump_stack_lvl+0x8b/0xb3 [ 1230.324450] should_fail.cold+0x5/0xa [ 1230.325325] copy_page_from_iter_atomic+0x4e4/0x1b10 [ 1230.326404] ? iov_iter_get_pages_alloc+0x15a0/0x15a0 [ 1230.327447] ? fault_in_readable+0x18a/0x250 [ 1230.328365] ? fault_in_writeable+0x1d0/0x1d0 [ 1230.329282] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 1230.330312] ? shmem_write_begin+0xfd/0x1d0 [ 1230.331190] ? shmem_write_begin+0x106/0x1d0 [ 1230.332118] generic_perform_write+0x2c2/0x570 [ 1230.333150] ? folio_unlock+0xb0/0xb0 [ 1230.333924] ? discard_new_inode+0x190/0x190 [ 1230.334868] ? generic_write_checks+0x25f/0x390 [ 1230.335856] __generic_file_write_iter+0x2d6/0x480 [ 1230.336872] generic_file_write_iter+0xd7/0x220 [ 1230.337823] ? iov_iter_init+0x45/0x1b0 [ 1230.338693] new_sync_write+0x390/0x560 [ 1230.339571] ? new_sync_read+0x5f0/0x5f0 [ 1230.340411] ? x86_pmu_enable+0xc10/0xd90 [ 1230.341268] ? lock_release+0x6f0/0x6f0 [ 1230.342112] ? lock_is_held_type+0xd7/0x130 [ 1230.343018] vfs_write+0x7b9/0xac0 [ 1230.343755] __x64_sys_pwrite64+0x1f7/0x250 09:37:40 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x5) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x8000000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) 09:37:40 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000040)='./file1\x00', 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) 09:37:40 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x4c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @broadcast}}, @channel_switch={0x0, 0x4, {{}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)={0x284, r4, 0x105, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x28}}}}, [@crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x2e, 0x115, "30e1d85b50c870433b7d24c97975e7a5c3a2e77ca367197dd7fd637bca170bccfe5e79e9203b5bd255ca"}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x18, 0x49, [0xfac00, 0xfac0b, 0xfac00, 0x0, 0xfac06]}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x2}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0xf6}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88f5}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}], @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x3, 0x3, 0x0, {0x2, 0x2, 0x0, 0x5, 0x0, 0x1, 0x1, 0x3, 0x1}, 0x400, 0x800, 0x5c}}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x401}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0xb980a3e4988e57c5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x8, {0x916a, 0x4, 0x9f, 0x101}}}, @NL80211_ATTR_USE_RRM={0x4}, @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xeb}, @NL80211_ATTR_FILS_ERP_USERNAME={0xe, 0xf9, "c1e321a15b972df51e82"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x14, 0xf9, "31fc255b6c000000a79ad6a8d62c42a9"}, @NL80211_ATTR_FILS_ERP_REALM={0x77, 0xfa, "d893d9e4a7a2a03feb31d7eced65d0797b480350b3fae30f2310992025492a3c529fc82050beeee4c85913a2d7c97bf1ccfeed4d751df3ce79f12f38580ae45122bfb99fe9cf38ded00fcef580a81bdca02fb60c7b10f984f69aa5092c14935781236f83c7c67fa11cd5cba3efb80d6d0b75af"}, @NL80211_ATTR_FILS_ERP_RRK={0x46, 0xfc, "1442c74c0cbac3769d1ed3da450cc5b6eba31e1173e84f7e9521ea67fdb523f2745e968a6a46f7704f4eaa48e5d5eee524528f1c376ca34c8024a8eb79339ef6794d"}, @NL80211_ATTR_FILS_ERP_RRK={0xb2, 0xfc, "1ab6f973c49694edf35d48b42a25bad1bea513ac625036523da3e3191f6fcd09333db5d514b5f96dcdca28e189d2c6f715c38c63a8144f0344ea67cabae226d2fdc213254e4696d7f113472998801a1579257ffbdbaa9bd3861780a93a67329eaf7ce38bcaf6ee4850dc0e6e9610316883cf2803770b3f8033e522bfe13dcb6ab20c3fb2e9556fbb431a780e6bca702b6af72988bb06895d3cf2087d975c2fe785e4c03e75f2176e6d85e7366966"}], @NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, @random=0x14c8}]}, 0x284}, 0x1, 0x0, 0x0, 0x4c000}, 0x4040042) 09:37:40 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0xba1, 0x7) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2000, 0x0) pwritev(r0, &(0x7f0000001640)=[{&(0x7f00000012c0)="a7", 0x1}], 0x1, 0x0, 0x0) 09:37:40 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x5) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x8000000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) [ 1230.344706] ? vfs_write+0xac0/0xac0 [ 1230.345695] ? syscall_enter_from_user_mode+0x1d/0x50 09:37:40 executing program 6: r0 = openat$sr(0xffffffffffffff9c, 0x0, 0x818c03, 0x0) faccessat2(r0, &(0x7f00000001c0)='\x00', 0x2, 0x1100) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x40b01, 0x0) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000680)={0xa61, "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"}) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000100)={'\x00', 0x3f, 0x2, 0x1, 0x2}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000280), 0xcc00000000, 0x80000) r3 = openat(r2, &(0x7f0000000100)='./file0\x00', 0x20440, 0x0) pwritev(r3, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) sendfile(r3, r3, 0x0, 0xffffffff000) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x688000, 0x0, 0xc}, 0x18) mknodat$loop(r3, &(0x7f0000000380)='./file1\x00', 0x10, 0x1) openat2(r4, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x400340, 0x0, 0x2}, 0x18) ioctl$CDROMREADAUDIO(r1, 0x530e, &(0x7f0000000040)={@lba, 0x2, 0x1, &(0x7f0000000000)=""/1}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) sendfile(r5, r5, 0x0, 0xffffffff000) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f0000000300)=0x1) [ 1230.346903] do_syscall_64+0x3b/0x90 [ 1230.347811] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1230.349107] RIP: 0033:0x7f72f8f0bab7 [ 1230.349898] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 1230.353736] RSP: 002b:00007f72f64cdf20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 1230.354801] loop3: detected capacity change from 0 to 255 [ 1230.355280] RAX: ffffffffffffffda RBX: 00007f72f8fa2970 RCX: 00007f72f8f0bab7 [ 1230.357441] RDX: 0000000000000016 RSI: 0000000020010000 RDI: 0000000000000004 [ 1230.358883] RBP: 0000000000000002 R08: 0000000000000000 R09: ffffffffffffffff [ 1230.360326] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 1230.361762] R13: 0000000000000004 R14: 00000000200004c0 R15: 0000000000000000 [ 1230.363328] 09:37:40 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000280)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000000c0)="0a61e54954af", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1800) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x76, 0x7, @buffer={0x0, 0x1000, &(0x7f0000001040)=""/4096}, &(0x7f0000000040)="7993b1e9de555c030fa180bb9e9b4799fa1179c031f57fa3f3003709eefa11d5b47b3969324f464d1017998bb2a9ebe256253bb1a58dc40ca06d0d4f4f0ecb17cce10eb12afb23ba8a6e4ada9e7655cc4adb1bf95db76163a5fd5c3da2a5dd5095b52de906567b922f209ec5d1bda0d07749ea7b204f", &(0x7f0000000100)=""/157, 0x78, 0x0, 0x0, &(0x7f00000001c0)}) [ 1230.371469] loop1: detected capacity change from 0 to 64 [ 1230.376887] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1230.396667] loop2: detected capacity change from 0 to 255 [ 1230.401306] loop0: detected capacity change from 0 to 40 [ 1230.411001] blktrace: Concurrent blktraces are not allowed on sr0 09:37:40 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000010000)="eb58906d6b66732e66617400021e20000400000004f8", 0x16}, {0x0, 0x0, 0x4000}], 0x100c000, &(0x7f0000000040)) (fail_nth: 16) [ 1230.430610] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 09:37:40 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x2b, 0x33, @action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x1f}, @device_b, @broadcast, @initial, {0x9, 0x6}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x48}}, 0x0) [ 1230.516585] FAULT_INJECTION: forcing a failure. [ 1230.516585] name failslab, interval 1, probability 0, space 0, times 0 [ 1230.517872] CPU: 0 PID: 8910 Comm: syz-executor.1 Not tainted 5.17.0-next-20220401 #1 [ 1230.518709] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1230.519903] Call Trace: [ 1230.520176] [ 1230.520416] dump_stack_lvl+0x8b/0xb3 [ 1230.520829] should_fail.cold+0x5/0xa [ 1230.521233] ? getname_flags.part.0+0x50/0x4f0 [ 1230.521716] should_failslab+0x5/0x10 [ 1230.522118] kmem_cache_alloc+0x5b/0x480 [ 1230.522576] getname_flags.part.0+0x50/0x4f0 [ 1230.523030] getname+0x8e/0xd0 [ 1230.523378] do_sys_openat2+0xf5/0x4c0 [ 1230.523793] ? build_open_flags+0x6f0/0x6f0 [ 1230.524243] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1230.524824] __x64_sys_openat+0x13f/0x1f0 [ 1230.525262] ? __x64_sys_open+0x1c0/0x1c0 [ 1230.525711] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1230.526261] do_syscall_64+0x3b/0x90 [ 1230.526661] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1230.527201] RIP: 0033:0x7f72f8f0ba04 [ 1230.527620] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1230.529501] RSP: 002b:00007f72f64cded0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1230.530338] RAX: ffffffffffffffda RBX: 00007f72f8fa2970 RCX: 00007f72f8f0ba04 [ 1230.531076] RDX: 0000000000000002 RSI: 00007f72f64ce000 RDI: 00000000ffffff9c [ 1230.531812] RBP: 00007f72f64ce000 R08: 0000000000000000 R09: ffffffffffffffff [ 1230.532557] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1230.533341] R13: 0000000000000004 R14: 00000000200004f0 R15: 0000000000000002 [ 1230.534127] [ 1230.553137] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 09:37:40 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000040)='./file1\x00', 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) 09:37:40 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x5) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x8000000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) [ 1230.578580] loop0: detected capacity change from 0 to 40 [ 1230.617263] loop2: detected capacity change from 0 to 255 [ 1230.644955] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 09:37:41 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x4c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @broadcast}}, @channel_switch={0x0, 0x4, {{}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000040)=[{&(0x7f0000000200)=""/135, 0x87}, {&(0x7f00000002c0)=""/139, 0x8b}], 0x2, &(0x7f0000000380)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}, 0x12020) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r2) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x58, r5, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_SELECT={0x40, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x8}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x40}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x2}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x1, 0xff}}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x400}]}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x40040}, 0x24040084) 09:37:41 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000040)='./file1\x00', 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) [ 1230.725597] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 09:37:41 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x8000000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) [ 1230.787445] loop2: detected capacity change from 0 to 255 [ 1230.792894] loop0: detected capacity change from 0 to 40 [ 1230.804811] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1230.987995] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 09:37:59 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000010000)="eb58906d6b66732e66617400021e20000400000004f8", 0x16}, {0x0, 0x0, 0x4000}], 0x100c000, &(0x7f0000000040)) (fail_nth: 17) 09:37:59 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="2f003300d0800000ffffffffffff0802110000005050505050500000000000000004250000000076060000df00000000"], 0x4c}}, 0x0) 09:37:59 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x5) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x8000000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) 09:37:59 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x8000000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) 09:37:59 executing program 5: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001740)={0xb40, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x9}}}}, [@NL80211_ATTR_TID_CONFIG={0x31c, 0x11d, 0x0, 0x1, [{0x2dc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x45c10000}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2a0, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x4, 0x4}, {0x5, 0x8}, {0x6, 0x1}, {0x7, 0x5}, {0x1, 0x5}, {0x2, 0x4}, {0x2, 0x4}, {0x7, 0x8}, {0x1, 0x3}, {0x0, 0x9}, {}, {0x6, 0x8}, {0x4}, {}, {0x6, 0xa}, {0x3, 0x6}, {0x0, 0x2}, {0x6, 0x9}, {0x7, 0x9}, {0x4, 0x4}, {0x0, 0x4}, {0x2, 0x5}, {0x7, 0x9}, {0x2}, {0x4, 0xa}, {0x0, 0x9}, {0x6, 0x1}, {0x3, 0xa}, {0x4, 0x2}, {0x6}, {0x1, 0x8}, {0x4, 0x5}, {}, {0x5, 0x6}, {0x1, 0x8}, {0x0, 0x9}, {0x4, 0x6}, {0x6, 0x7}, {0x5, 0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x3}, {0x5, 0x9}, {0x3, 0x5}, {0x0, 0xa}, {0x6}, {0x0, 0x2}, {0x7, 0x8}, {0x2, 0x3}, {0x4, 0xa}, {0x0, 0x3}, {0x7, 0x8}, {0x7, 0x4}, {0x1}, {0x6, 0x6}, {0x1, 0x2}, {0x7, 0x9}, {0x4, 0x9}, {0x0, 0x7}, {0x5, 0xa}, {0x7, 0x6}, {0x0, 0x2}, {0x5, 0x8}, {0x3, 0x9}, {0x3, 0x2}, {0x0, 0xa}, {0x3, 0x4}, {0x0, 0x6}, {0x0, 0x9}, {0x2, 0x5}, {0x0, 0x9}, {0x4, 0x1}]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x1, 0x30]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x36, 0x2, 0x30, 0x16, 0x18, 0x36, 0x2, 0x1, 0x12, 0x0, 0x1b, 0x12, 0xc, 0xb, 0x6c, 0x9, 0x12, 0x36, 0x9, 0x6]}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2f, 0x2, [{0x5, 0x9}, {0x0, 0x3}, {0x4, 0x7}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x4}, {0x2, 0x7}, {0x0, 0x8}, {0x7, 0x1}, {0x7, 0xa}, {0x4, 0x7}, {0x1, 0x3}, {0x4, 0x6}, {0x1, 0x6}, {0x5}, {0x0, 0x4}, {0x5, 0x7}, {0x3, 0xa}, {0x7, 0x6}, {0x0, 0x9}, {0x2, 0x6}, {0x3}, {}, {0x4, 0x2}, {0x4, 0x8}, {0x2, 0x6}, {0x0, 0x2}, {0x2, 0xa}, {0x4, 0x8}, {0x7, 0x9}, {0x0, 0x5}, {0x7, 0xa}, {0x7, 0x3}, {0x2, 0x5}, {0x7, 0x3}, {0x4, 0x9}, {0x5, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x6}, {0x0, 0x2}, {0x5, 0x6}, {0x1, 0x1}]}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0xffff, 0x2, 0x7f, 0x101, 0x400, 0x1ff, 0x400]}}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x3, 0x6, 0x1b, 0xc, 0x36, 0x24, 0x19, 0x6, 0x3d, 0x36, 0x5, 0x63, 0x1, 0x4, 0x6, 0x24]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0xc9a1bb8397f159d6}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0xd8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x16, 0x18, 0x1, 0x2, 0x4, 0x1, 0x60, 0x18, 0x2, 0x9, 0x30, 0x6, 0xb, 0x5, 0xc, 0x1b]}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x2}, {0x5, 0x7}, {0x5, 0xa}, {0x4, 0x2}, {0x4, 0x2}, {0x2, 0x5}, {0x4, 0x7}, {0x3, 0x8}, {0x5, 0x6}, {0x1, 0x8}, {0x5, 0x7}, {0x0, 0x7}, {0x1, 0x5}, {0x2, 0x2}, {0x7}, {0x5, 0x5}, {0x3, 0x7}, {0x3}, {0x1, 0x8}, {0x1, 0x6}, {0x5, 0x4}, {0x7, 0x2}, {0x4, 0x1}, {0x1, 0x7}, {0x1, 0x3}, {0x6, 0x2}, {0x5, 0x6}, {0x1, 0x3}, {0x6, 0xa}, {0x4, 0x5}, {0x7, 0x5}, {0x3, 0x9}, {0x7}, {0x7, 0x5}, {0x5}, {0x3, 0x7}, {0x4, 0x2}, {0x3, 0x1}, {0x4, 0x2}, {0x5}, {0x6, 0x9}, {0x2, 0x1}, {0x0, 0x7}, {0x3, 0x4}, {0x0, 0x3}, {0x0, 0x4}, {0x0, 0x5}, {0x4}, {0x0, 0x1}, {0x7}, {0x3}, {0x6, 0x4}, {0x5, 0x9}, {0x0, 0x9}, {0x7, 0xa}, {0x6, 0x3}, {0x7, 0x9}, {0x4}, {0x5, 0xa}, {0x6, 0x7}, {0x7}, {0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x12, 0x8001, 0x29d8, 0x1, 0x100, 0x9, 0x584]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x79, 0x3, 0x0, 0x0, 0xfff, 0x3, 0x200]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x9, 0x5, 0x0, 0x3, 0x800, 0x8, 0x6]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x11, 0x36, 0xb, 0x1, 0x1b, 0x5321205391159b81, 0x48, 0x36, 0x18, 0xb, 0x0, 0x1, 0x1b, 0x16, 0x18, 0x1, 0x4, 0x3, 0x24, 0x60, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x101, 0x7, 0x4536, 0x800, 0x8001, 0x2, 0x7]}}]}, @NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x24, 0x30, 0x16, 0x1, 0x30, 0x20, 0x1, 0x30, 0xb, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x7, 0x0, 0x100, 0x4e0b, 0x383e, 0x8, 0x8]}}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x7, 0x8}, {0x0, 0x9}, {0x2, 0x3}, {0x5}, {0x2, 0x3}, {0x2, 0x2}, {0x2, 0x6}, {0x6, 0x3}, {0x6, 0x4}, {0x4, 0x5}, {0x7, 0x2}, {0x3, 0x2}, {0x6, 0x1}, {0x6, 0x7}, {}, {0x0, 0x8}, {0x5, 0x2}, {0x7, 0x5}, {0x6}, {0x1, 0x4}, {0x0, 0x2}, {0x1}, {0x3, 0x9}, {0x6, 0x5}, {0x2, 0x2}, {0x3, 0x4}, {0x5, 0x7}, {0x7, 0xa}, {0x4, 0x7}, {0x5, 0xa}, {0x1, 0x9}, {0x5, 0x1}, {0x1, 0x9}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf714, 0x9, 0x72b, 0x0, 0xf5b2, 0x1e6, 0x3, 0x4]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x30, 0x31, 0x18, 0x2, 0x3, 0x30, 0x2, 0x24, 0x2, 0x1b, 0xc]}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x5, 0x2}, {0x7, 0x2}, {}, {0x4, 0x4}, {0x4, 0xa}, {0x3, 0x3}, {0x5, 0xa}, {0x2, 0x7}, {0x0, 0x1}, {0x5, 0xa}, {0x2, 0x7}, {0x3, 0xa}]}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x4, 0x1b, 0x4, 0x36, 0x0, 0xb, 0x18, 0xb, 0x6c, 0x2, 0x6c, 0xc, 0x48, 0x18, 0x30, 0x1d]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x11, 0x792, 0x1, 0x2, 0xf9fd, 0x80, 0x7f, 0x9]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xbe}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x10000}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x27}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8000}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x744, 0x11d, 0x0, 0x1, [{0x33c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x324, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x36, 0x30, 0x36, 0x48, 0x16, 0xc, 0x0, 0x16, 0x2, 0x1b, 0x6, 0x18, 0x6c, 0x5, 0x12, 0x74, 0x18, 0x36, 0x18, 0x1b, 0x16, 0x60, 0x24, 0x1, 0x48, 0x36, 0xc, 0x1]}, @NL80211_TXRATE_HT={0x32, 0x2, [{}, {0x0, 0x2}, {0x7, 0x4}, {0x5, 0x9}, {0x6, 0x6}, {0x4, 0xa}, {0x4, 0xa}, {0x1, 0x2}, {0x4, 0x8}, {0x3, 0x3}, {0x0, 0x7}, {0x0, 0x2}, {0x2, 0xa}, {0x7, 0x9}, {0x4, 0x8}, {0x6, 0x3}, {0x1, 0x3}, {0x1, 0x6}, {0x6, 0x9}, {0x0, 0x1}, {0x3, 0xa}, {0x0, 0x7}, {0x3, 0x6}, {0x4, 0x7}, {0x6, 0x8}, {0x2, 0x8}, {0x0, 0x4}, {0x4, 0x9}, {0x5, 0x9}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x8}, {0x0, 0x8}, {0x1, 0x5}, {0x7, 0x5}, {0x2, 0xa}, {}, {0x1, 0x6}, {0x7, 0x2}, {0x1, 0x6}, {0x6, 0x6}, {0x0, 0x9}, {0x5, 0x6}, {0x4, 0x7}, {0x1, 0x2}, {0x3, 0x3}]}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x4, 0x7}, {0x0, 0x8}, {0x4, 0x6}, {0x1, 0x8}, {0x5, 0x8}, {0x3, 0x4}, {0x0, 0x2}, {0x5, 0x8}, {0x0, 0x9}, {0x1, 0x4}, {}, {0x2, 0x4}, {0x6, 0x9}]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x1, 0x16, 0x1, 0x2, 0x30, 0x18, 0x30, 0x0, 0x3, 0x12, 0x4, 0x48, 0x16, 0x16, 0x3, 0x16, 0x1, 0x24, 0x18]}]}, @NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x6, 0x8, 0x7fff, 0x5, 0x4, 0xffe0, 0x81]}}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x0, 0x2}, {0x6, 0x8}, {0x4, 0x6}, {0x0, 0xa}, {0x2, 0x2}, {0x0, 0x6}, {0x7, 0x8}, {0x1, 0x3}, {0x3, 0x3}, {0x3, 0x1}, {0x4, 0x6}, {0x1, 0x3}, {0x0, 0x2}, {0x7, 0x7}, {0x7, 0x2}, {0x7, 0x1}, {0x3, 0x5}, {0x1, 0x9}, {0x0, 0x9}, {0x7, 0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x8}, {0x0, 0x1}, {0x2, 0x7}, {0x1, 0x5}, {0x3, 0x1}, {0x1, 0x2}, {0x1, 0x7}, {0x1}, {0x3}, {0x6, 0x9}, {}, {0x1, 0x7}, {0x6, 0x5}, {0x4, 0x6}, {0x4, 0x1}, {0x2, 0x8}, {0x2, 0x9}, {0x3, 0x5}, {0x2, 0x2}, {0x6, 0x8}, {0x5, 0x5}, {0x5, 0x5}, {0x0, 0x6}, {0x2, 0x2}, {0x0, 0x4}, {0x4, 0xa}, {0x5, 0x5}, {0x1, 0x7}, {0x0, 0x7}, {0x0, 0x6}, {0x4, 0x9}, {0x5, 0x8}, {0x1, 0x4}]}]}, @NL80211_BAND_60GHZ={0xb4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x19, 0x2, 0x5, 0x0, 0x9, 0x16, 0x18, 0x9, 0xc, 0x48, 0x24, 0x5, 0x12, 0x12, 0x2, 0x60, 0x16, 0x8, 0x9, 0x30, 0x1, 0xb]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x6, 0x36, 0x59, 0x4, 0x0, 0x18, 0x1b, 0x6, 0x2, 0x60, 0x52, 0x3, 0x0, 0xb, 0x4, 0x3, 0x30, 0x30, 0xc, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x75, 0x7, 0x1f, 0x800, 0xc0, 0x400, 0x8, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x117d, 0x200, 0x0, 0x7, 0x31, 0x101, 0xf2ab, 0xe6]}}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x5, 0x1}, {0x3, 0x4}, {0x1, 0x9}, {0x7, 0x8}, {0x4, 0xa}, {0x3, 0x6}, {0x1, 0x8}, {0x1, 0x5}, {0x5, 0x9}]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x6c, 0x1b, 0x60, 0x9, 0x1b, 0x60, 0x16, 0x24, 0x2, 0x8701409da82cdf30, 0x6, 0xb, 0x16, 0xb, 0x6, 0x1b, 0x3, 0x1b, 0x60, 0x26, 0x6c, 0x5, 0x6, 0x6c, 0x0, 0x48, 0x48, 0xb, 0x1, 0x1b]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0xfc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x49, 0x2, [{0x0, 0xa}, {0x3, 0x5}, {0x1, 0x9}, {0x0, 0xa}, {0x1, 0x5}, {0x3, 0x6}, {0x0, 0x7}, {0x6, 0x8}, {0x7, 0x9}, {0x7}, {0x2, 0x7}, {0x6, 0x3}, {0x4}, {0x0, 0x7}, {0x0, 0x4}, {0x6, 0x5}, {0x6}, {0x2, 0x5}, {0x2}, {0x2, 0x2}, {0x7, 0x9}, {0x6, 0x1}, {0x3, 0x6}, {0x0, 0x2}, {0x2, 0x4}, {0x2, 0x9}, {0x5, 0x2}, {0x4}, {0x4, 0x4}, {0x2, 0xa}, {0x4, 0x7}, {0x2}, {0x1, 0x5}, {0x1, 0x8}, {0x1}, {0x4, 0x1}, {0x4, 0x4}, {0x5, 0x8}, {0x1, 0x3}, {0x1, 0x8}, {0x0, 0x8}, {0x2}, {0x3, 0x2}, {0x7, 0x8}, {0x4, 0x7}, {0x1, 0x5}, {0x3}, {0x4, 0x7}, {0x6, 0x8}, {0x5, 0x1}, {0x3, 0x4}, {0x3, 0x4}, {0x6, 0xa}, {0x7, 0x2}, {0x6, 0x2}, {0x3, 0x7}, {0x0, 0x6}, {0x3, 0x1}, {0x7, 0x8}, {0x3, 0x8}, {0x7, 0x2}, {0x6, 0x7}, {0x7, 0x2}, {0x1, 0x3}, {0x0, 0x9}, {0x1, 0x8}, {0x3, 0x6}, {0x4, 0x5}, {0x1, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x0, 0x9}, {0x4, 0x8}, {0x3, 0x1}, {0x2, 0x5}, {0x7, 0xa}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x2}, {0x0, 0x6}, {0x2, 0x3}, {}, {0x7, 0x5}, {0x0, 0x8}, {0x2, 0x8}, {0x6}, {0x1, 0x4}, {0x1, 0x4}, {0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x3, 0x2}, {0x7, 0xa}, {0x3}, {0x7, 0x2}, {0x4, 0x5}, {0x4, 0x7}, {0x3, 0x4}, {0x6, 0x7}, {0x4, 0x6}, {0x6, 0x6}, {0x2, 0xa}, {0x7, 0x3}, {0x3}, {0x3, 0x7}, {0x4}, {0x3, 0x3}, {0x5, 0x7}, {0x3, 0x6}, {0x0, 0x7}, {0x1, 0x4}, {0x0, 0xa}, {0x0, 0x5}, {0x1, 0xa}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x7, 0x4, 0x7, 0x6, 0x101, 0x40, 0x5]}}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x0, 0xa}, {0x3, 0x4}, {0x2, 0x1}, {0x2}, {0x5, 0x3}, {0x3, 0x7}, {0x1, 0x9}, {0x6, 0x1}, {0x3, 0x6}, {0x2, 0x7}, {0x0, 0x5}, {0x1, 0x9}, {0x1, 0x6}, {0x1, 0x1}, {0x5, 0x3}, {0x0, 0x6}, {}, {0x6, 0xa}, {0x0, 0x3}, {0x1, 0x4}, {0x1}, {0x2, 0x4}, {0x6, 0x6}, {0x6, 0x5}, {0x1, 0xa}, {0x3, 0x7}, {0x4, 0x6}, {0x0, 0x3}, {0x4, 0x1}, {0x2, 0x9}, {0x3, 0xa}, {0x1, 0x8}, {0x0, 0x5}, {0x5, 0x9}, {0x7}, {0x3, 0xa}, {0x1, 0xa}, {0x6, 0x6}, {0x1, 0x5}, {0x4, 0x7}, {0x5, 0x7}, {0x1, 0x4}, {0x7, 0x4}, {0x1, 0x9}, {0x3, 0x9}, {0x0, 0xa}, {0x2, 0x3}, {0x3, 0x4}, {0x4, 0x7}, {0x6, 0x7}, {0x4, 0x4}, {0x5, 0x1}, {0x6, 0x8}, {0x0, 0x1}, {0x0, 0x8}, {0x0, 0x1}, {0x0, 0xa}, {0x1}, {0x7, 0x2}, {0x1, 0x9}, {0x0, 0x8}, {0x7, 0x1}, {0x2, 0x1}, {0x4, 0x5}, {0x7, 0x5}, {0x3, 0x4}, {0x7, 0x4}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x8}, {0x1, 0x2}, {0x6, 0x6}, {0x7, 0x6}]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x88, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x0, 0x8}, {0x0, 0x6}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x3}, {0x1, 0x4}, {0x2, 0x2}, {0x3, 0x8}, {0x7, 0x4}, {0x4, 0x4}, {0x7, 0x7}, {0x5, 0x8}, {0x3, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x2, 0x6}, {0x1, 0xa}, {0x4, 0x8}, {0x2, 0x8}, {0x5, 0x9}, {0x0, 0x1}, {0x6, 0x3}, {0x0, 0x2}, {0x3}, {0x0, 0x5}, {0x7, 0x1}, {0x3, 0x2}, {0x3, 0x3}, {0x1, 0x8}, {0x5, 0x2}, {0x6, 0x4}, {0x4, 0x2}, {0x4, 0xa}, {0x3, 0x4}, {0x0, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x0, 0x8000, 0x2, 0x7, 0x4, 0x4, 0x80]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x0, 0x3}, {0x0, 0x2}, {0x1, 0x3}, {0x3, 0x3}, {0x2, 0x4}, {0x6, 0x3}, {0x1}, {0x1, 0xa}, {0x1, 0x3}, {0x7, 0xa}, {0x0, 0x9}, {0x0, 0x4}, {0x6, 0x5}, {0x7, 0xa}, {0x5}, {0x1, 0xa}, {0x2, 0x4}, {0x6, 0x7}, {0x4, 0x3}, {0x0, 0x6}, {0x0, 0x4}, {0x4, 0x2}, {0x3, 0x8}, {0x3}, {0x2, 0x4}, {0x5, 0xa}, {0x6, 0x1}, {0x7, 0x3}, {0x1, 0x3}, {0x0, 0x5}, {0x4, 0x5}, {0x7, 0x9}, {0x7, 0x9}, {0x0, 0x6}, {0x1}, {0x5, 0x1}, {0x0, 0x7}, {0x2, 0x8}, {0x5, 0x9}, {0x1, 0x5}, {0x4, 0x5}, {0x4, 0x7}, {0x4}, {0x0, 0x3}, {0x6, 0x6}, {0x1, 0x6}, {0x4, 0x2}, {0x0, 0x2}, {0x5, 0x8}, {0x1, 0x8}, {0x2, 0xa}]}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x20}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9e}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xfa}]}, {0x4}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5a}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x90}]}, {0x2f4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xbc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2a4, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x88, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xf55, 0x5, 0x1, 0x101, 0x81, 0x3, 0x9, 0x7f]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x5, 0xa}, {0x2, 0x3}, {0x6, 0xa}, {0x1, 0x8}, {0x0, 0xa}, {0x3, 0x8}, {0x7, 0x5}, {0x2, 0x4}, {0x5, 0x9}, {0x1, 0x4}, {0x1, 0x1}, {0x1, 0x2}, {0x0, 0x6}, {0x0, 0x3}, {0x4, 0x8}, {0x2, 0x4}, {0x2, 0x8}, {}, {0x6, 0x4}, {0x4, 0x7}, {0x1, 0x3}, {0x6, 0x1}, {0x4, 0x1}, {0x6}, {0x0, 0x4}]}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x7, 0x6}, {0x1, 0xa}, {0x3, 0x3}, {0x5, 0x6}, {0x7, 0x9}, {0x1, 0xa}, {0x5, 0x9}, {0x4, 0x7}, {0x0, 0x6}, {0x7, 0x4}, {0x7, 0x8}, {0x5, 0x3}, {0x6, 0x3}, {0x1, 0x4}, {0x2, 0xa}, {0x1, 0x8}, {0x4, 0x1}, {0x1, 0x7}, {0x6, 0x2}, {0x5, 0x9}, {0x5, 0x7}, {}, {0x6, 0x8}, {0x3, 0x5}, {0x6}, {0x4, 0x9}, {0x5}, {0x3, 0x9}, {0x0, 0x7}, {0x5, 0x4}, {0x3, 0x7}, {0x4, 0x2}, {0x2, 0xa}, {0x4, 0x9}, {0x4, 0x5}, {0x0, 0x5}, {0x1, 0x4}, {0x6}, {0x1, 0x2}, {0x0, 0x8}, {0x2, 0xa}, {0x1, 0x6}, {0x4}, {0x7, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0x1, 0x60, 0x9, 0x24, 0x36, 0x6, 0x6c, 0x16]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb998, 0x0, 0x1, 0x1f, 0x78c, 0x7ff, 0x7ad0, 0x7]}}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x2, 0xa}, {0x5, 0x2}, {0x1, 0x2}, {0x0, 0x8}, {0x1, 0x1}, {0x4, 0xa}, {0x6, 0x2}, {}, {0x1}, {0x6, 0x2}, {0x6, 0x4}, {0x0, 0x2}, {0x6, 0x7}, {0x7, 0x5}, {0x1, 0x3}, {0x2, 0x8}, {0x1}, {0x3}, {0x7, 0x7}, {0x1, 0x4}, {0x3, 0x9}, {0x6, 0x3}, {0x4, 0x6}, {0x6, 0x1}, {0x3, 0x7}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0x7}, {0x0, 0x3}, {0x4, 0x6}, {0x4}, {0x4, 0x3}, {0x1, 0x9}, {0x1, 0x2}, {0x4, 0x4}, {0x3, 0x2}, {0x7, 0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x7, 0x2}, {0x1, 0x5}, {0x3, 0x3}, {0x4, 0x6}, {0x5, 0x8}, {0x1, 0x3}, {0x0, 0xa}, {0x4, 0x6}]}, @NL80211_TXRATE_HT={0x4}]}, @NL80211_BAND_5GHZ={0x74, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x13, 0x2, [{0x1, 0x1}, {0x4, 0x6}, {0x6, 0x4}, {0x2, 0x1}, {0x0, 0x4}, {0x1, 0x3}, {0x7, 0x7}, {0x1, 0x2}, {0x3, 0x5}, {0x5}, {0x5, 0x2}, {0x5, 0x5}, {0x4, 0x3}, {0x5, 0x1}, {0x7, 0x9}]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x36, 0x48, 0x3, 0x18, 0x5, 0x5, 0x5, 0x9, 0x5, 0x3, 0x48, 0x24, 0x1, 0x1b, 0x48, 0x48, 0x4, 0x38, 0x48, 0x4, 0xc, 0x24, 0x16]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x4, 0x7, 0x7fff, 0xff7f, 0x1, 0x20, 0x4]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x5, 0x8}, {0x2, 0x8}, {0x0, 0x8}, {0x4, 0x3}, {0x4, 0x3}, {0x4, 0x8}, {0x2, 0xa}, {0x4, 0x4}, {0x0, 0x1}, {0x0, 0x2}, {0x7, 0x9}, {0x4}, {0x1, 0x6}, {0x4}, {0x7, 0x6}, {0x6, 0xa}, {0x0, 0x1}, {0x1, 0x9}, {0x4, 0x1}, {0x4, 0x6}, {}, {0x0, 0x9}, {0x7, 0x2}, {0x6, 0x1}, {0x7, 0xa}, {0x3, 0x1}, {0x1, 0x6}, {0x2, 0x2}, {0x1, 0x4}, {0x2, 0x8}, {0x0, 0xa}, {0x3, 0xc}, {0x1, 0x9}, {0x1, 0x2}, {0x1, 0x7}, {0x0, 0x2}, {0x4, 0x4}]}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x38, 0x2, [{0x6, 0x9}, {0x0, 0x9}, {0x5, 0x5}, {0x3, 0x4}, {0x7}, {0x1, 0x5}, {0x7, 0x4}, {0x3, 0x9}, {0x1}, {0x1, 0x1}, {0x5}, {0x5, 0x8}, {0x7, 0x4}, {0x1, 0x7}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x3}, {0x7, 0x1}, {0x4, 0xa}, {0x0, 0x6}, {0x5, 0x9}, {0x7, 0x9}, {0x5, 0x5}, {0x7}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x2}, {0x5, 0x7}, {0x7, 0x1}, {0x1, 0x1}, {0x2, 0x4}, {0x5, 0x8}, {0x6, 0xa}, {0x3, 0x1}, {0x3, 0x3}, {0x6, 0x2}, {0x5, 0x8}, {0x3, 0x5}, {0x3, 0x9}, {}, {0x3, 0x5}, {0x0, 0x5}, {0x5, 0x3}, {0x0, 0x6}, {0x5, 0x9}, {0x5, 0x3}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x1, 0x4}, {0x1, 0x3}, {0x1}]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x30, 0x24, 0x30, 0x24, 0x24]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x36, 0x6c, 0x3, 0x30, 0x24, 0x30, 0x59c93ba1a7255296, 0x6c, 0x60, 0xb, 0x24, 0x60, 0x48, 0x16, 0x5, 0x1b]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x36, 0x18, 0x9, 0x30, 0x3, 0x39, 0x30, 0x30, 0xc, 0x18, 0xb, 0x9, 0xc, 0x2, 0x6]}]}, @NL80211_BAND_6GHZ={0xc0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x6, 0x36, 0xc, 0xb, 0x60, 0x9, 0xc, 0x9, 0x3, 0x5, 0x8fc0414866b25af1, 0x24, 0x30, 0x3, 0x4, 0x9, 0x6, 0xb, 0xb, 0x48, 0x1b, 0x16, 0x1, 0x5, 0x48, 0x60, 0x18, 0x2c, 0x16, 0xa10410485f55c1e5, 0x48]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x81, 0x22, 0x1, 0x34, 0x3f, 0x3f, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x4, 0x4, 0x3e, 0x3, 0x16, 0xb, 0x30, 0x2, 0x48, 0x60, 0x18, 0x6, 0x60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x3f, 0xeba0, 0x1, 0xfff, 0x5, 0x3ff, 0x6]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x5, 0x0, 0x16, 0xb, 0x30, 0x5, 0x24, 0x2, 0x14, 0x60, 0xb, 0x7f]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xf000, 0x4, 0x4, 0x1000, 0x5, 0xd96c, 0x40]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x48, 0x12, 0x18, 0x48, 0xc, 0x30, 0x1b, 0x18, 0x30, 0x5, 0x17, 0x24, 0x36, 0x1b, 0xc, 0x6c, 0xc, 0xc, 0x18, 0x1b, 0x12, 0x4, 0x12, 0x60, 0x24]}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xe, 0x2, [{0x0, 0x7}, {0x6, 0x4}, {0x3, 0x4}, {0x3, 0x9}, {0x4, 0x5}, {0x5, 0x2}, {0x1, 0x4}, {0x4, 0x7}, {0x1, 0x9}, {0x1, 0x9}]}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8000}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x36}]}, {0x6c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x28, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x9, 0x5, 0x4, 0x3, 0x6, 0x1ff, 0x8]}}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xad}]}, {0x4}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9e}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x28}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x26}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x19}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xbf}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x5c, 0x11d, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5a}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5fe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf7}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x86}]}]}, @NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5e}]}]}]}, 0xb40}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="94031c855deb"}, 0x14) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) 09:37:59 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000040)='./file1\x00', 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) [ 1249.526503] loop2: detected capacity change from 0 to 255 [ 1249.545900] FAULT_INJECTION: forcing a failure. [ 1249.545900] name failslab, interval 1, probability 0, space 0, times 0 [ 1249.548151] CPU: 0 PID: 8944 Comm: syz-executor.1 Not tainted 5.17.0-next-20220401 #1 09:37:59 executing program 4: r0 = openat$sr(0xffffffffffffff9c, 0x0, 0x818c03, 0x0) faccessat2(r0, &(0x7f00000001c0)='\x00', 0x2, 0x1100) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x40b01, 0x0) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000680)={0xa61, "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"}) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000100)={'\x00', 0x3f, 0x2, 0x1, 0x2}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000280), 0xcc00000000, 0x80000) r3 = openat(r2, &(0x7f0000000100)='./file0\x00', 0x20440, 0x0) pwritev(r3, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) sendfile(r3, r3, 0x0, 0xffffffff000) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x688000, 0x0, 0xc}, 0x18) mknodat$loop(r3, &(0x7f0000000380)='./file1\x00', 0x10, 0x1) openat2(r4, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x400340, 0x0, 0x2}, 0x18) ioctl$CDROMREADAUDIO(r1, 0x530e, &(0x7f0000000040)={@lba, 0x2, 0x1, &(0x7f0000000000)=""/1}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) sendfile(r5, r5, 0x0, 0xffffffff000) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f0000000300)=0x1) 09:37:59 executing program 6: r0 = openat$sr(0xffffffffffffff9c, 0x0, 0x818c03, 0x0) faccessat2(r0, &(0x7f00000001c0)='\x00', 0x2, 0x1100) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x40b01, 0x0) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000680)={0xa61, "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"}) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000100)={'\x00', 0x3f, 0x2, 0x1, 0x2}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000280), 0xcc00000000, 0x80000) r3 = openat(r2, &(0x7f0000000100)='./file0\x00', 0x20440, 0x0) pwritev(r3, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) sendfile(r3, r3, 0x0, 0xffffffff000) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x688000, 0x0, 0xc}, 0x18) mknodat$loop(r3, &(0x7f0000000380)='./file1\x00', 0x10, 0x1) openat2(r4, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x400340, 0x0, 0x2}, 0x18) ioctl$CDROMREADAUDIO(r1, 0x530e, &(0x7f0000000040)={@lba, 0x2, 0x1, &(0x7f0000000000)=""/1}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) sendfile(r5, r5, 0x0, 0xffffffff000) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f0000000300)=0x1) [ 1249.549679] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1249.552210] Call Trace: [ 1249.552712] [ 1249.553149] dump_stack_lvl+0x8b/0xb3 [ 1249.553915] should_fail.cold+0x5/0xa [ 1249.554683] ? create_object.isra.0+0x3a/0xa20 [ 1249.555582] should_failslab+0x5/0x10 [ 1249.556326] kmem_cache_alloc+0x5b/0x480 [ 1249.557134] create_object.isra.0+0x3a/0xa20 [ 1249.557988] ? kasan_unpoison+0x23/0x50 [ 1249.558842] kmem_cache_alloc+0x239/0x480 [ 1249.559759] getname_flags.part.0+0x50/0x4f0 [ 1249.560724] getname+0x8e/0xd0 [ 1249.561431] do_sys_openat2+0xf5/0x4c0 [ 1249.562292] ? build_open_flags+0x6f0/0x6f0 [ 1249.563263] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1249.564477] __x64_sys_openat+0x13f/0x1f0 [ 1249.565388] ? __x64_sys_open+0x1c0/0x1c0 [ 1249.566308] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1249.567469] do_syscall_64+0x3b/0x90 [ 1249.568290] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1249.569425] RIP: 0033:0x7f72f8f0ba04 [ 1249.570238] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1249.574264] RSP: 002b:00007f72f64cded0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1249.575891] RAX: ffffffffffffffda RBX: 00007f72f8fa2970 RCX: 00007f72f8f0ba04 [ 1249.577266] RDX: 0000000000000002 RSI: 00007f72f64ce000 RDI: 00000000ffffff9c [ 1249.578647] RBP: 00007f72f64ce000 R08: 0000000000000000 R09: ffffffffffffffff [ 1249.580115] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1249.581690] R13: 0000000000000004 R14: 00000000200004f0 R15: 0000000000000002 [ 1249.583319] [ 1249.588791] loop3: detected capacity change from 0 to 255 [ 1249.591902] loop0: detected capacity change from 0 to 40 [ 1249.601701] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1249.630745] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1249.635021] loop1: detected capacity change from 0 to 64 [ 1249.645449] blktrace: Concurrent blktraces are not allowed on sr0 [ 1249.697235] device lo entered promiscuous mode 09:38:00 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000040)='./file1\x00', 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) 09:38:00 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x10c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0xef, 0x33, @probe_request={@wo_ht={{0x0, 0x0, 0x4, 0x0, 0x0, 0x1}, {0x9}, @device_a, @device_a, @from_mac, {0xf, 0xf0c}}, @val={0x0, 0x15, @random="4a7c515d434581ba2d7f528005d7f77c0d2350abfe"}, @val={0x1, 0x1, [{0x48}]}, @val={0x3, 0x1, 0x4e}, @void, @val={0x72, 0x6}, [{0xdd, 0x2c, "a7a73bbde96a67ae1a7b2b67c48cc2d2417e3f73297269ddfad30fec7dcbcb029b24304a60032f41ea64687c"}, {0xdd, 0x1f, "f518693721d5881fec6edb4142d37e48f386b8cb91fc2c904c22a26829c828"}, {0xdd, 0x5d, "8f18f66d0e55023917858d591333acc0ce76a08eea8dc2728cab23addf78f67a032b778412a17161897465a87c114818c4164dfea53fc0baebf6e8feae05f5b0f64326a9c6c96ff8874ad08d9fd1efefa9c2dd8d0ce843c0167fbb25b0"}]}}]}, 0x10c}}, 0x0) 09:38:00 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000010000)="eb58906d6b66732e66617400021e20000400000004f8", 0x16}, {0x0, 0x0, 0x4000}], 0x100c000, &(0x7f0000000040)) (fail_nth: 18) 09:38:00 executing program 5: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001740)={0xb40, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x9}}}}, [@NL80211_ATTR_TID_CONFIG={0x31c, 0x11d, 0x0, 0x1, [{0x2dc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x45c10000}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2a0, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x4, 0x4}, {0x5, 0x8}, {0x6, 0x1}, {0x7, 0x5}, {0x1, 0x5}, {0x2, 0x4}, {0x2, 0x4}, {0x7, 0x8}, {0x1, 0x3}, {0x0, 0x9}, {}, {0x6, 0x8}, {0x4}, {}, {0x6, 0xa}, {0x3, 0x6}, {0x0, 0x2}, {0x6, 0x9}, {0x7, 0x9}, {0x4, 0x4}, {0x0, 0x4}, {0x2, 0x5}, {0x7, 0x9}, {0x2}, {0x4, 0xa}, {0x0, 0x9}, {0x6, 0x1}, {0x3, 0xa}, {0x4, 0x2}, {0x6}, {0x1, 0x8}, {0x4, 0x5}, {}, {0x5, 0x6}, {0x1, 0x8}, {0x0, 0x9}, {0x4, 0x6}, {0x6, 0x7}, {0x5, 0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x3}, {0x5, 0x9}, {0x3, 0x5}, {0x0, 0xa}, {0x6}, {0x0, 0x2}, {0x7, 0x8}, {0x2, 0x3}, {0x4, 0xa}, {0x0, 0x3}, {0x7, 0x8}, {0x7, 0x4}, {0x1}, {0x6, 0x6}, {0x1, 0x2}, {0x7, 0x9}, {0x4, 0x9}, {0x0, 0x7}, {0x5, 0xa}, {0x7, 0x6}, {0x0, 0x2}, {0x5, 0x8}, {0x3, 0x9}, {0x3, 0x2}, {0x0, 0xa}, {0x3, 0x4}, {0x0, 0x6}, {0x0, 0x9}, {0x2, 0x5}, {0x0, 0x9}, {0x4, 0x1}]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x1, 0x30]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x36, 0x2, 0x30, 0x16, 0x18, 0x36, 0x2, 0x1, 0x12, 0x0, 0x1b, 0x12, 0xc, 0xb, 0x6c, 0x9, 0x12, 0x36, 0x9, 0x6]}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2f, 0x2, [{0x5, 0x9}, {0x0, 0x3}, {0x4, 0x7}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x4}, {0x2, 0x7}, {0x0, 0x8}, {0x7, 0x1}, {0x7, 0xa}, {0x4, 0x7}, {0x1, 0x3}, {0x4, 0x6}, {0x1, 0x6}, {0x5}, {0x0, 0x4}, {0x5, 0x7}, {0x3, 0xa}, {0x7, 0x6}, {0x0, 0x9}, {0x2, 0x6}, {0x3}, {}, {0x4, 0x2}, {0x4, 0x8}, {0x2, 0x6}, {0x0, 0x2}, {0x2, 0xa}, {0x4, 0x8}, {0x7, 0x9}, {0x0, 0x5}, {0x7, 0xa}, {0x7, 0x3}, {0x2, 0x5}, {0x7, 0x3}, {0x4, 0x9}, {0x5, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x6}, {0x0, 0x2}, {0x5, 0x6}, {0x1, 0x1}]}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0xffff, 0x2, 0x7f, 0x101, 0x400, 0x1ff, 0x400]}}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x3, 0x6, 0x1b, 0xc, 0x36, 0x24, 0x19, 0x6, 0x3d, 0x36, 0x5, 0x63, 0x1, 0x4, 0x6, 0x24]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0xc9a1bb8397f159d6}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0xd8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x16, 0x18, 0x1, 0x2, 0x4, 0x1, 0x60, 0x18, 0x2, 0x9, 0x30, 0x6, 0xb, 0x5, 0xc, 0x1b]}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x2}, {0x5, 0x7}, {0x5, 0xa}, {0x4, 0x2}, {0x4, 0x2}, {0x2, 0x5}, {0x4, 0x7}, {0x3, 0x8}, {0x5, 0x6}, {0x1, 0x8}, {0x5, 0x7}, {0x0, 0x7}, {0x1, 0x5}, {0x2, 0x2}, {0x7}, {0x5, 0x5}, {0x3, 0x7}, {0x3}, {0x1, 0x8}, {0x1, 0x6}, {0x5, 0x4}, {0x7, 0x2}, {0x4, 0x1}, {0x1, 0x7}, {0x1, 0x3}, {0x6, 0x2}, {0x5, 0x6}, {0x1, 0x3}, {0x6, 0xa}, {0x4, 0x5}, {0x7, 0x5}, {0x3, 0x9}, {0x7}, {0x7, 0x5}, {0x5}, {0x3, 0x7}, {0x4, 0x2}, {0x3, 0x1}, {0x4, 0x2}, {0x5}, {0x6, 0x9}, {0x2, 0x1}, {0x0, 0x7}, {0x3, 0x4}, {0x0, 0x3}, {0x0, 0x4}, {0x0, 0x5}, {0x4}, {0x0, 0x1}, {0x7}, {0x3}, {0x6, 0x4}, {0x5, 0x9}, {0x0, 0x9}, {0x7, 0xa}, {0x6, 0x3}, {0x7, 0x9}, {0x4}, {0x5, 0xa}, {0x6, 0x7}, {0x7}, {0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x12, 0x8001, 0x29d8, 0x1, 0x100, 0x9, 0x584]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x79, 0x3, 0x0, 0x0, 0xfff, 0x3, 0x200]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x9, 0x5, 0x0, 0x3, 0x800, 0x8, 0x6]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x11, 0x36, 0xb, 0x1, 0x1b, 0x5321205391159b81, 0x48, 0x36, 0x18, 0xb, 0x0, 0x1, 0x1b, 0x16, 0x18, 0x1, 0x4, 0x3, 0x24, 0x60, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x101, 0x7, 0x4536, 0x800, 0x8001, 0x2, 0x7]}}]}, @NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x24, 0x30, 0x16, 0x1, 0x30, 0x20, 0x1, 0x30, 0xb, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x7, 0x0, 0x100, 0x4e0b, 0x383e, 0x8, 0x8]}}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x7, 0x8}, {0x0, 0x9}, {0x2, 0x3}, {0x5}, {0x2, 0x3}, {0x2, 0x2}, {0x2, 0x6}, {0x6, 0x3}, {0x6, 0x4}, {0x4, 0x5}, {0x7, 0x2}, {0x3, 0x2}, {0x6, 0x1}, {0x6, 0x7}, {}, {0x0, 0x8}, {0x5, 0x2}, {0x7, 0x5}, {0x6}, {0x1, 0x4}, {0x0, 0x2}, {0x1}, {0x3, 0x9}, {0x6, 0x5}, {0x2, 0x2}, {0x3, 0x4}, {0x5, 0x7}, {0x7, 0xa}, {0x4, 0x7}, {0x5, 0xa}, {0x1, 0x9}, {0x5, 0x1}, {0x1, 0x9}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf714, 0x9, 0x72b, 0x0, 0xf5b2, 0x1e6, 0x3, 0x4]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x30, 0x31, 0x18, 0x2, 0x3, 0x30, 0x2, 0x24, 0x2, 0x1b, 0xc]}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x5, 0x2}, {0x7, 0x2}, {}, {0x4, 0x4}, {0x4, 0xa}, {0x3, 0x3}, {0x5, 0xa}, {0x2, 0x7}, {0x0, 0x1}, {0x5, 0xa}, {0x2, 0x7}, {0x3, 0xa}]}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x4, 0x1b, 0x4, 0x36, 0x0, 0xb, 0x18, 0xb, 0x6c, 0x2, 0x6c, 0xc, 0x48, 0x18, 0x30, 0x1d]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x11, 0x792, 0x1, 0x2, 0xf9fd, 0x80, 0x7f, 0x9]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xbe}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x10000}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x27}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8000}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x744, 0x11d, 0x0, 0x1, [{0x33c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x324, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x36, 0x30, 0x36, 0x48, 0x16, 0xc, 0x0, 0x16, 0x2, 0x1b, 0x6, 0x18, 0x6c, 0x5, 0x12, 0x74, 0x18, 0x36, 0x18, 0x1b, 0x16, 0x60, 0x24, 0x1, 0x48, 0x36, 0xc, 0x1]}, @NL80211_TXRATE_HT={0x32, 0x2, [{}, {0x0, 0x2}, {0x7, 0x4}, {0x5, 0x9}, {0x6, 0x6}, {0x4, 0xa}, {0x4, 0xa}, {0x1, 0x2}, {0x4, 0x8}, {0x3, 0x3}, {0x0, 0x7}, {0x0, 0x2}, {0x2, 0xa}, {0x7, 0x9}, {0x4, 0x8}, {0x6, 0x3}, {0x1, 0x3}, {0x1, 0x6}, {0x6, 0x9}, {0x0, 0x1}, {0x3, 0xa}, {0x0, 0x7}, {0x3, 0x6}, {0x4, 0x7}, {0x6, 0x8}, {0x2, 0x8}, {0x0, 0x4}, {0x4, 0x9}, {0x5, 0x9}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x8}, {0x0, 0x8}, {0x1, 0x5}, {0x7, 0x5}, {0x2, 0xa}, {}, {0x1, 0x6}, {0x7, 0x2}, {0x1, 0x6}, {0x6, 0x6}, {0x0, 0x9}, {0x5, 0x6}, {0x4, 0x7}, {0x1, 0x2}, {0x3, 0x3}]}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x4, 0x7}, {0x0, 0x8}, {0x4, 0x6}, {0x1, 0x8}, {0x5, 0x8}, {0x3, 0x4}, {0x0, 0x2}, {0x5, 0x8}, {0x0, 0x9}, {0x1, 0x4}, {}, {0x2, 0x4}, {0x6, 0x9}]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x1, 0x16, 0x1, 0x2, 0x30, 0x18, 0x30, 0x0, 0x3, 0x12, 0x4, 0x48, 0x16, 0x16, 0x3, 0x16, 0x1, 0x24, 0x18]}]}, @NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x6, 0x8, 0x7fff, 0x5, 0x4, 0xffe0, 0x81]}}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x0, 0x2}, {0x6, 0x8}, {0x4, 0x6}, {0x0, 0xa}, {0x2, 0x2}, {0x0, 0x6}, {0x7, 0x8}, {0x1, 0x3}, {0x3, 0x3}, {0x3, 0x1}, {0x4, 0x6}, {0x1, 0x3}, {0x0, 0x2}, {0x7, 0x7}, {0x7, 0x2}, {0x7, 0x1}, {0x3, 0x5}, {0x1, 0x9}, {0x0, 0x9}, {0x7, 0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x8}, {0x0, 0x1}, {0x2, 0x7}, {0x1, 0x5}, {0x3, 0x1}, {0x1, 0x2}, {0x1, 0x7}, {0x1}, {0x3}, {0x6, 0x9}, {}, {0x1, 0x7}, {0x6, 0x5}, {0x4, 0x6}, {0x4, 0x1}, {0x2, 0x8}, {0x2, 0x9}, {0x3, 0x5}, {0x2, 0x2}, {0x6, 0x8}, {0x5, 0x5}, {0x5, 0x5}, {0x0, 0x6}, {0x2, 0x2}, {0x0, 0x4}, {0x4, 0xa}, {0x5, 0x5}, {0x1, 0x7}, {0x0, 0x7}, {0x0, 0x6}, {0x4, 0x9}, {0x5, 0x8}, {0x1, 0x4}]}]}, @NL80211_BAND_60GHZ={0xb4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x19, 0x2, 0x5, 0x0, 0x9, 0x16, 0x18, 0x9, 0xc, 0x48, 0x24, 0x5, 0x12, 0x12, 0x2, 0x60, 0x16, 0x8, 0x9, 0x30, 0x1, 0xb]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x6, 0x36, 0x59, 0x4, 0x0, 0x18, 0x1b, 0x6, 0x2, 0x60, 0x52, 0x3, 0x0, 0xb, 0x4, 0x3, 0x30, 0x30, 0xc, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x75, 0x7, 0x1f, 0x800, 0xc0, 0x400, 0x8, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x117d, 0x200, 0x0, 0x7, 0x31, 0x101, 0xf2ab, 0xe6]}}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x5, 0x1}, {0x3, 0x4}, {0x1, 0x9}, {0x7, 0x8}, {0x4, 0xa}, {0x3, 0x6}, {0x1, 0x8}, {0x1, 0x5}, {0x5, 0x9}]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x6c, 0x1b, 0x60, 0x9, 0x1b, 0x60, 0x16, 0x24, 0x2, 0x8701409da82cdf30, 0x6, 0xb, 0x16, 0xb, 0x6, 0x1b, 0x3, 0x1b, 0x60, 0x26, 0x6c, 0x5, 0x6, 0x6c, 0x0, 0x48, 0x48, 0xb, 0x1, 0x1b]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0xfc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x49, 0x2, [{0x0, 0xa}, {0x3, 0x5}, {0x1, 0x9}, {0x0, 0xa}, {0x1, 0x5}, {0x3, 0x6}, {0x0, 0x7}, {0x6, 0x8}, {0x7, 0x9}, {0x7}, {0x2, 0x7}, {0x6, 0x3}, {0x4}, {0x0, 0x7}, {0x0, 0x4}, {0x6, 0x5}, {0x6}, {0x2, 0x5}, {0x2}, {0x2, 0x2}, {0x7, 0x9}, {0x6, 0x1}, {0x3, 0x6}, {0x0, 0x2}, {0x2, 0x4}, {0x2, 0x9}, {0x5, 0x2}, {0x4}, {0x4, 0x4}, {0x2, 0xa}, {0x4, 0x7}, {0x2}, {0x1, 0x5}, {0x1, 0x8}, {0x1}, {0x4, 0x1}, {0x4, 0x4}, {0x5, 0x8}, {0x1, 0x3}, {0x1, 0x8}, {0x0, 0x8}, {0x2}, {0x3, 0x2}, {0x7, 0x8}, {0x4, 0x7}, {0x1, 0x5}, {0x3}, {0x4, 0x7}, {0x6, 0x8}, {0x5, 0x1}, {0x3, 0x4}, {0x3, 0x4}, {0x6, 0xa}, {0x7, 0x2}, {0x6, 0x2}, {0x3, 0x7}, {0x0, 0x6}, {0x3, 0x1}, {0x7, 0x8}, {0x3, 0x8}, {0x7, 0x2}, {0x6, 0x7}, {0x7, 0x2}, {0x1, 0x3}, {0x0, 0x9}, {0x1, 0x8}, {0x3, 0x6}, {0x4, 0x5}, {0x1, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x0, 0x9}, {0x4, 0x8}, {0x3, 0x1}, {0x2, 0x5}, {0x7, 0xa}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x2}, {0x0, 0x6}, {0x2, 0x3}, {}, {0x7, 0x5}, {0x0, 0x8}, {0x2, 0x8}, {0x6}, {0x1, 0x4}, {0x1, 0x4}, {0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x3, 0x2}, {0x7, 0xa}, {0x3}, {0x7, 0x2}, {0x4, 0x5}, {0x4, 0x7}, {0x3, 0x4}, {0x6, 0x7}, {0x4, 0x6}, {0x6, 0x6}, {0x2, 0xa}, {0x7, 0x3}, {0x3}, {0x3, 0x7}, {0x4}, {0x3, 0x3}, {0x5, 0x7}, {0x3, 0x6}, {0x0, 0x7}, {0x1, 0x4}, {0x0, 0xa}, {0x0, 0x5}, {0x1, 0xa}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x7, 0x4, 0x7, 0x6, 0x101, 0x40, 0x5]}}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x0, 0xa}, {0x3, 0x4}, {0x2, 0x1}, {0x2}, {0x5, 0x3}, {0x3, 0x7}, {0x1, 0x9}, {0x6, 0x1}, {0x3, 0x6}, {0x2, 0x7}, {0x0, 0x5}, {0x1, 0x9}, {0x1, 0x6}, {0x1, 0x1}, {0x5, 0x3}, {0x0, 0x6}, {}, {0x6, 0xa}, {0x0, 0x3}, {0x1, 0x4}, {0x1}, {0x2, 0x4}, {0x6, 0x6}, {0x6, 0x5}, {0x1, 0xa}, {0x3, 0x7}, {0x4, 0x6}, {0x0, 0x3}, {0x4, 0x1}, {0x2, 0x9}, {0x3, 0xa}, {0x1, 0x8}, {0x0, 0x5}, {0x5, 0x9}, {0x7}, {0x3, 0xa}, {0x1, 0xa}, {0x6, 0x6}, {0x1, 0x5}, {0x4, 0x7}, {0x5, 0x7}, {0x1, 0x4}, {0x7, 0x4}, {0x1, 0x9}, {0x3, 0x9}, {0x0, 0xa}, {0x2, 0x3}, {0x3, 0x4}, {0x4, 0x7}, {0x6, 0x7}, {0x4, 0x4}, {0x5, 0x1}, {0x6, 0x8}, {0x0, 0x1}, {0x0, 0x8}, {0x0, 0x1}, {0x0, 0xa}, {0x1}, {0x7, 0x2}, {0x1, 0x9}, {0x0, 0x8}, {0x7, 0x1}, {0x2, 0x1}, {0x4, 0x5}, {0x7, 0x5}, {0x3, 0x4}, {0x7, 0x4}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x8}, {0x1, 0x2}, {0x6, 0x6}, {0x7, 0x6}]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x88, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x0, 0x8}, {0x0, 0x6}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x3}, {0x1, 0x4}, {0x2, 0x2}, {0x3, 0x8}, {0x7, 0x4}, {0x4, 0x4}, {0x7, 0x7}, {0x5, 0x8}, {0x3, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x2, 0x6}, {0x1, 0xa}, {0x4, 0x8}, {0x2, 0x8}, {0x5, 0x9}, {0x0, 0x1}, {0x6, 0x3}, {0x0, 0x2}, {0x3}, {0x0, 0x5}, {0x7, 0x1}, {0x3, 0x2}, {0x3, 0x3}, {0x1, 0x8}, {0x5, 0x2}, {0x6, 0x4}, {0x4, 0x2}, {0x4, 0xa}, {0x3, 0x4}, {0x0, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x0, 0x8000, 0x2, 0x7, 0x4, 0x4, 0x80]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x0, 0x3}, {0x0, 0x2}, {0x1, 0x3}, {0x3, 0x3}, {0x2, 0x4}, {0x6, 0x3}, {0x1}, {0x1, 0xa}, {0x1, 0x3}, {0x7, 0xa}, {0x0, 0x9}, {0x0, 0x4}, {0x6, 0x5}, {0x7, 0xa}, {0x5}, {0x1, 0xa}, {0x2, 0x4}, {0x6, 0x7}, {0x4, 0x3}, {0x0, 0x6}, {0x0, 0x4}, {0x4, 0x2}, {0x3, 0x8}, {0x3}, {0x2, 0x4}, {0x5, 0xa}, {0x6, 0x1}, {0x7, 0x3}, {0x1, 0x3}, {0x0, 0x5}, {0x4, 0x5}, {0x7, 0x9}, {0x7, 0x9}, {0x0, 0x6}, {0x1}, {0x5, 0x1}, {0x0, 0x7}, {0x2, 0x8}, {0x5, 0x9}, {0x1, 0x5}, {0x4, 0x5}, {0x4, 0x7}, {0x4}, {0x0, 0x3}, {0x6, 0x6}, {0x1, 0x6}, {0x4, 0x2}, {0x0, 0x2}, {0x5, 0x8}, {0x1, 0x8}, {0x2, 0xa}]}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x20}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9e}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xfa}]}, {0x4}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5a}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x90}]}, {0x2f4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xbc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2a4, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x88, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xf55, 0x5, 0x1, 0x101, 0x81, 0x3, 0x9, 0x7f]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x5, 0xa}, {0x2, 0x3}, {0x6, 0xa}, {0x1, 0x8}, {0x0, 0xa}, {0x3, 0x8}, {0x7, 0x5}, {0x2, 0x4}, {0x5, 0x9}, {0x1, 0x4}, {0x1, 0x1}, {0x1, 0x2}, {0x0, 0x6}, {0x0, 0x3}, {0x4, 0x8}, {0x2, 0x4}, {0x2, 0x8}, {}, {0x6, 0x4}, {0x4, 0x7}, {0x1, 0x3}, {0x6, 0x1}, {0x4, 0x1}, {0x6}, {0x0, 0x4}]}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x7, 0x6}, {0x1, 0xa}, {0x3, 0x3}, {0x5, 0x6}, {0x7, 0x9}, {0x1, 0xa}, {0x5, 0x9}, {0x4, 0x7}, {0x0, 0x6}, {0x7, 0x4}, {0x7, 0x8}, {0x5, 0x3}, {0x6, 0x3}, {0x1, 0x4}, {0x2, 0xa}, {0x1, 0x8}, {0x4, 0x1}, {0x1, 0x7}, {0x6, 0x2}, {0x5, 0x9}, {0x5, 0x7}, {}, {0x6, 0x8}, {0x3, 0x5}, {0x6}, {0x4, 0x9}, {0x5}, {0x3, 0x9}, {0x0, 0x7}, {0x5, 0x4}, {0x3, 0x7}, {0x4, 0x2}, {0x2, 0xa}, {0x4, 0x9}, {0x4, 0x5}, {0x0, 0x5}, {0x1, 0x4}, {0x6}, {0x1, 0x2}, {0x0, 0x8}, {0x2, 0xa}, {0x1, 0x6}, {0x4}, {0x7, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0x1, 0x60, 0x9, 0x24, 0x36, 0x6, 0x6c, 0x16]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb998, 0x0, 0x1, 0x1f, 0x78c, 0x7ff, 0x7ad0, 0x7]}}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x2, 0xa}, {0x5, 0x2}, {0x1, 0x2}, {0x0, 0x8}, {0x1, 0x1}, {0x4, 0xa}, {0x6, 0x2}, {}, {0x1}, {0x6, 0x2}, {0x6, 0x4}, {0x0, 0x2}, {0x6, 0x7}, {0x7, 0x5}, {0x1, 0x3}, {0x2, 0x8}, {0x1}, {0x3}, {0x7, 0x7}, {0x1, 0x4}, {0x3, 0x9}, {0x6, 0x3}, {0x4, 0x6}, {0x6, 0x1}, {0x3, 0x7}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0x7}, {0x0, 0x3}, {0x4, 0x6}, {0x4}, {0x4, 0x3}, {0x1, 0x9}, {0x1, 0x2}, {0x4, 0x4}, {0x3, 0x2}, {0x7, 0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x7, 0x2}, {0x1, 0x5}, {0x3, 0x3}, {0x4, 0x6}, {0x5, 0x8}, {0x1, 0x3}, {0x0, 0xa}, {0x4, 0x6}]}, @NL80211_TXRATE_HT={0x4}]}, @NL80211_BAND_5GHZ={0x74, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x13, 0x2, [{0x1, 0x1}, {0x4, 0x6}, {0x6, 0x4}, {0x2, 0x1}, {0x0, 0x4}, {0x1, 0x3}, {0x7, 0x7}, {0x1, 0x2}, {0x3, 0x5}, {0x5}, {0x5, 0x2}, {0x5, 0x5}, {0x4, 0x3}, {0x5, 0x1}, {0x7, 0x9}]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x36, 0x48, 0x3, 0x18, 0x5, 0x5, 0x5, 0x9, 0x5, 0x3, 0x48, 0x24, 0x1, 0x1b, 0x48, 0x48, 0x4, 0x38, 0x48, 0x4, 0xc, 0x24, 0x16]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x4, 0x7, 0x7fff, 0xff7f, 0x1, 0x20, 0x4]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x5, 0x8}, {0x2, 0x8}, {0x0, 0x8}, {0x4, 0x3}, {0x4, 0x3}, {0x4, 0x8}, {0x2, 0xa}, {0x4, 0x4}, {0x0, 0x1}, {0x0, 0x2}, {0x7, 0x9}, {0x4}, {0x1, 0x6}, {0x4}, {0x7, 0x6}, {0x6, 0xa}, {0x0, 0x1}, {0x1, 0x9}, {0x4, 0x1}, {0x4, 0x6}, {}, {0x0, 0x9}, {0x7, 0x2}, {0x6, 0x1}, {0x7, 0xa}, {0x3, 0x1}, {0x1, 0x6}, {0x2, 0x2}, {0x1, 0x4}, {0x2, 0x8}, {0x0, 0xa}, {0x3, 0xc}, {0x1, 0x9}, {0x1, 0x2}, {0x1, 0x7}, {0x0, 0x2}, {0x4, 0x4}]}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x38, 0x2, [{0x6, 0x9}, {0x0, 0x9}, {0x5, 0x5}, {0x3, 0x4}, {0x7}, {0x1, 0x5}, {0x7, 0x4}, {0x3, 0x9}, {0x1}, {0x1, 0x1}, {0x5}, {0x5, 0x8}, {0x7, 0x4}, {0x1, 0x7}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x3}, {0x7, 0x1}, {0x4, 0xa}, {0x0, 0x6}, {0x5, 0x9}, {0x7, 0x9}, {0x5, 0x5}, {0x7}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x2}, {0x5, 0x7}, {0x7, 0x1}, {0x1, 0x1}, {0x2, 0x4}, {0x5, 0x8}, {0x6, 0xa}, {0x3, 0x1}, {0x3, 0x3}, {0x6, 0x2}, {0x5, 0x8}, {0x3, 0x5}, {0x3, 0x9}, {}, {0x3, 0x5}, {0x0, 0x5}, {0x5, 0x3}, {0x0, 0x6}, {0x5, 0x9}, {0x5, 0x3}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x1, 0x4}, {0x1, 0x3}, {0x1}]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x30, 0x24, 0x30, 0x24, 0x24]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x36, 0x6c, 0x3, 0x30, 0x24, 0x30, 0x59c93ba1a7255296, 0x6c, 0x60, 0xb, 0x24, 0x60, 0x48, 0x16, 0x5, 0x1b]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x36, 0x18, 0x9, 0x30, 0x3, 0x39, 0x30, 0x30, 0xc, 0x18, 0xb, 0x9, 0xc, 0x2, 0x6]}]}, @NL80211_BAND_6GHZ={0xc0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x6, 0x36, 0xc, 0xb, 0x60, 0x9, 0xc, 0x9, 0x3, 0x5, 0x8fc0414866b25af1, 0x24, 0x30, 0x3, 0x4, 0x9, 0x6, 0xb, 0xb, 0x48, 0x1b, 0x16, 0x1, 0x5, 0x48, 0x60, 0x18, 0x2c, 0x16, 0xa10410485f55c1e5, 0x48]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x81, 0x22, 0x1, 0x34, 0x3f, 0x3f, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x4, 0x4, 0x3e, 0x3, 0x16, 0xb, 0x30, 0x2, 0x48, 0x60, 0x18, 0x6, 0x60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x3f, 0xeba0, 0x1, 0xfff, 0x5, 0x3ff, 0x6]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x5, 0x0, 0x16, 0xb, 0x30, 0x5, 0x24, 0x2, 0x14, 0x60, 0xb, 0x7f]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xf000, 0x4, 0x4, 0x1000, 0x5, 0xd96c, 0x40]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x48, 0x12, 0x18, 0x48, 0xc, 0x30, 0x1b, 0x18, 0x30, 0x5, 0x17, 0x24, 0x36, 0x1b, 0xc, 0x6c, 0xc, 0xc, 0x18, 0x1b, 0x12, 0x4, 0x12, 0x60, 0x24]}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xe, 0x2, [{0x0, 0x7}, {0x6, 0x4}, {0x3, 0x4}, {0x3, 0x9}, {0x4, 0x5}, {0x5, 0x2}, {0x1, 0x4}, {0x4, 0x7}, {0x1, 0x9}, {0x1, 0x9}]}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8000}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x36}]}, {0x6c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x28, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x9, 0x5, 0x4, 0x3, 0x6, 0x1ff, 0x8]}}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xad}]}, {0x4}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9e}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x28}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x26}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x19}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xbf}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x5c, 0x11d, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5a}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5fe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf7}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x86}]}]}, @NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5e}]}]}]}, 0xb40}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="94031c855deb"}, 0x14) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) [ 1249.969651] loop0: detected capacity change from 0 to 40 [ 1250.026031] FAULT_INJECTION: forcing a failure. [ 1250.026031] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1250.028372] CPU: 1 PID: 8970 Comm: syz-executor.1 Not tainted 5.17.0-next-20220401 #1 [ 1250.029884] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1250.032053] Call Trace: [ 1250.032551] [ 1250.032984] dump_stack_lvl+0x8b/0xb3 [ 1250.033734] should_fail.cold+0x5/0xa [ 1250.034481] strncpy_from_user+0x34/0x3d0 [ 1250.035318] getname_flags.part.0+0x95/0x4f0 [ 1250.036165] getname+0x8e/0xd0 [ 1250.036788] do_sys_openat2+0xf5/0x4c0 [ 1250.037544] ? build_open_flags+0x6f0/0x6f0 [ 1250.038394] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1250.039474] __x64_sys_openat+0x13f/0x1f0 [ 1250.040284] ? __x64_sys_open+0x1c0/0x1c0 [ 1250.041097] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1250.042110] do_syscall_64+0x3b/0x90 [ 1250.042832] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1250.043837] RIP: 0033:0x7f72f8f0ba04 [ 1250.044544] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1250.048032] RSP: 002b:00007f72f64cded0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1250.049454] RAX: ffffffffffffffda RBX: 00007f72f8fa2970 RCX: 00007f72f8f0ba04 [ 1250.050808] RDX: 0000000000000002 RSI: 00007f72f64ce000 RDI: 00000000ffffff9c [ 1250.052139] RBP: 00007f72f64ce000 R08: 0000000000000000 R09: ffffffffffffffff [ 1250.053468] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1250.054801] R13: 0000000000000004 R14: 00000000200004f0 R15: 0000000000000002 [ 1250.056162] [ 1250.099919] device lo left promiscuous mode [ 1250.116329] device lo entered promiscuous mode 09:38:00 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="27003300d0800000ffffffffffff08021100000050505050505000000000000000042503000000009d26eb8a3e40c76f62469510d4c7591da054188c221f8b2c6d4f76dfcbd7165c20b3ae647085373d06a0b34b86d21828887d11ac5cca2711fb43a047859193f3e9622f87a707cf56dcc8542a6f2bb33cfcd2a33617c73a5e871a9508bb549361d7841285ed8e9fbefd74ab33cce80299f029a02ea8d02c6d390732c855c533e60477759e9e6d46999793cbd73983292d94ea810110b5c4caff0100000600cf851cfbf360ad24f4394de76ae928b1cfb7ad46fffb11da50bcc25e55160c700a06d758e5c5"], 0x44}}, 0x40010) 09:38:00 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000040)='./file1\x00', 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) [ 1250.261809] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 1250.277051] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1250.278631] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:38:00 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000010000)="eb58906d6b66732e66617400021e20000400000004f8", 0x16}, {0x0, 0x0, 0x4000}], 0x100c000, &(0x7f0000000040)) (fail_nth: 19) 09:38:00 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000040)='./file1\x00', 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) [ 1250.344708] loop0: detected capacity change from 0 to 40 [ 1250.358492] FAULT_INJECTION: forcing a failure. [ 1250.358492] name failslab, interval 1, probability 0, space 0, times 0 [ 1250.361261] CPU: 0 PID: 8979 Comm: syz-executor.1 Not tainted 5.17.0-next-20220401 #1 [ 1250.363024] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1250.365383] Call Trace: [ 1250.365920] [ 1250.366389] dump_stack_lvl+0x8b/0xb3 [ 1250.367222] should_fail.cold+0x5/0xa [ 1250.368040] ? __alloc_file+0x21/0x230 [ 1250.368860] should_failslab+0x5/0x10 [ 1250.369657] kmem_cache_alloc+0x5b/0x480 [ 1250.370541] __alloc_file+0x21/0x230 [ 1250.371345] alloc_empty_file+0x6d/0x170 [ 1250.372201] path_openat+0xe1/0x2870 [ 1250.373001] ? path_lookupat+0x850/0x850 [ 1250.373853] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1250.374982] ? lock_is_held_type+0xd7/0x130 [ 1250.375900] do_filp_open+0x1aa/0x400 [ 1250.376706] ? may_open_dev+0xf0/0xf0 [ 1250.377509] ? lock_release+0x3b2/0x6f0 [ 1250.378343] ? alloc_fd+0x2f0/0x670 [ 1250.379145] ? lock_downgrade+0x6d0/0x6d0 [ 1250.380030] ? rwlock_bug.part.0+0x90/0x90 [ 1250.380921] loop5: detected capacity change from 0 to 40 [ 1250.380925] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1250.382993] ? _find_next_bit+0x1e5/0x260 [ 1250.383878] ? _raw_spin_unlock+0x24/0x40 [ 1250.384751] ? alloc_fd+0x2f0/0x670 [ 1250.385535] do_sys_openat2+0x16d/0x4c0 [ 1250.386384] ? build_open_flags+0x6f0/0x6f0 [ 1250.387321] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1250.388484] __x64_sys_openat+0x13f/0x1f0 [ 1250.389365] ? __x64_sys_open+0x1c0/0x1c0 [ 1250.390252] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1250.391368] do_syscall_64+0x3b/0x90 [ 1250.392152] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1250.393237] RIP: 0033:0x7f72f8f0ba04 [ 1250.394017] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1250.397844] RSP: 002b:00007f72f64cded0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1250.399437] RAX: ffffffffffffffda RBX: 00007f72f8fa2970 RCX: 00007f72f8f0ba04 [ 1250.400920] RDX: 0000000000000002 RSI: 00007f72f64ce000 RDI: 00000000ffffff9c [ 1250.402407] RBP: 00007f72f64ce000 R08: 0000000000000000 R09: ffffffffffffffff [ 1250.403911] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1250.405390] R13: 0000000000000004 R14: 00000000200004f0 R15: 0000000000000002 [ 1250.406909] 09:38:00 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x8000000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) 09:38:00 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, r4, 0x2, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x41) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x32, 0x33, @action={@with_ht, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1, 0x2}, @val={0x76, 0x6}}}}}]}, 0x50}}, 0x0) [ 1250.570083] kworker/u4:3: attempt to access beyond end of device [ 1250.570083] loop0: rw=1, want=128, limit=40 [ 1250.572254] Buffer I/O error on dev loop0, logical block 31, lost async page write [ 1250.622823] loop2: detected capacity change from 0 to 255 [ 1250.632968] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1250.721911] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 09:38:14 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x4c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @broadcast}}, @channel_switch={0x0, 0x4, {{}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000040)=[{&(0x7f0000000200)=""/135, 0x87}, {&(0x7f00000002c0)=""/139, 0x8b}], 0x2, &(0x7f0000000380)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}, 0x12020) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r2) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x58, r5, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_SELECT={0x40, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x8}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x40}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x2}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x1, 0xff}}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x400}]}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x40040}, 0x24040084) 09:38:14 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x5) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x8000000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) [ 1264.040212] loop5: detected capacity change from 0 to 255 [ 1264.049747] loop0: detected capacity change from 0 to 40 [ 1264.050942] FAULT_INJECTION: forcing a failure. [ 1264.050942] name failslab, interval 1, probability 0, space 0, times 0 [ 1264.053320] CPU: 0 PID: 8999 Comm: syz-executor.1 Not tainted 5.17.0-next-20220401 #1 [ 1264.055206] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1264.057538] Call Trace: [ 1264.058151] [ 1264.058607] dump_stack_lvl+0x8b/0xb3 [ 1264.059417] should_fail.cold+0x5/0xa [ 1264.060197] ? create_object.isra.0+0x3a/0xa20 [ 1264.061116] should_failslab+0x5/0x10 [ 1264.061886] kmem_cache_alloc+0x5b/0x480 [ 1264.062703] create_object.isra.0+0x3a/0xa20 [ 1264.063597] ? kasan_unpoison+0x23/0x50 [ 1264.064406] kmem_cache_alloc+0x239/0x480 [ 1264.065317] __alloc_file+0x21/0x230 [ 1264.066090] alloc_empty_file+0x6d/0x170 [ 1264.066999] path_openat+0xe1/0x2870 [ 1264.067768] ? path_lookupat+0x850/0x850 [ 1264.068760] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1264.069840] ? lock_is_held_type+0xd7/0x130 [ 1264.070689] do_filp_open+0x1aa/0x400 [ 1264.071536] ? may_open_dev+0xf0/0xf0 [ 1264.072328] ? lock_release+0x3b2/0x6f0 [ 1264.073124] ? alloc_fd+0x2f0/0x670 [ 1264.073861] ? lock_downgrade+0x6d0/0x6d0 [ 1264.074727] ? rwlock_bug.part.0+0x90/0x90 [ 1264.075659] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1264.076827] ? _find_next_bit+0x1e5/0x260 [ 1264.077684] ? _raw_spin_unlock+0x24/0x40 [ 1264.078566] ? alloc_fd+0x2f0/0x670 [ 1264.079412] do_sys_openat2+0x16d/0x4c0 [ 1264.080247] ? build_open_flags+0x6f0/0x6f0 [ 1264.081163] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1264.082346] __x64_sys_openat+0x13f/0x1f0 [ 1264.083276] ? __x64_sys_open+0x1c0/0x1c0 [ 1264.084139] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1264.085214] do_syscall_64+0x3b/0x90 [ 1264.086016] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1264.087166] RIP: 0033:0x7f72f8f0ba04 [ 1264.088008] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1264.091641] RSP: 002b:00007f72f64cded0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1264.093153] RAX: ffffffffffffffda RBX: 00007f72f8fa2970 RCX: 00007f72f8f0ba04 [ 1264.094547] RDX: 0000000000000002 RSI: 00007f72f64ce000 RDI: 00000000ffffff9c [ 1264.095979] RBP: 00007f72f64ce000 R08: 0000000000000000 R09: ffffffffffffffff [ 1264.097360] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1264.098780] R13: 0000000000000004 R14: 00000000200004f0 R15: 0000000000000002 [ 1264.100226] 09:38:14 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000010000)="eb58906d6b66732e66617400021e20000400000004f8", 0x16}, {0x0, 0x0, 0x4000}], 0x100c000, &(0x7f0000000040)) (fail_nth: 20) 09:38:14 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x5) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x8000000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) 09:38:14 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000040)='./file1\x00', 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) 09:38:14 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400", 0xc}], 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r2, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) sendfile(r2, r2, 0x0, 0xffffffff000) openat(r2, &(0x7f0000000000)='./file1\x00', 0x111000, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 09:38:14 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="2f003300d0800000ffffffffffff08021100000050505050505000f0ff00000000"], 0x4c}}, 0x0) 09:38:14 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x5) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x8000000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r0, r0, 0x0, 0xffffffff000) [ 1264.126953] loop3: detected capacity change from 0 to 255 [ 1264.129406] loop2: detected capacity change from 0 to 255 [ 1264.150835] kworker/u4:3: attempt to access beyond end of device [ 1264.150835] loop0: rw=1, want=128, limit=40 [ 1264.153230] Buffer I/O error on dev loop0, logical block 31, lost async page write [ 1264.162919] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1264.166657] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 09:38:14 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000040)='./file1\x00', 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) 09:38:14 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x4c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @broadcast, @device_a, @from_mac=@device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) [ 1264.180244] loop1: detected capacity change from 0 to 64 [ 1264.198942] loop0: detected capacity change from 0 to 40 [ 1264.237575] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1264.256052] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1264.283981] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1264.314424] kworker/u4:3: attempt to access beyond end of device [ 1264.314424] loop0: rw=1, want=128, limit=40 [ 1264.315974] Buffer I/O error on dev loop0, logical block 31, lost async page write [ 1278.104733] loop3: detected capacity change from 0 to 255 09:38:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="2f003300d0800000ffffffffffff08021100000050505050505000f0ff00000000"], 0x4c}}, 0x0) 09:38:28 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x4c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @broadcast}}, @channel_switch={0x0, 0x4, {{}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000040)=[{&(0x7f0000000200)=""/135, 0x87}, {&(0x7f00000002c0)=""/139, 0x8b}], 0x2, &(0x7f0000000380)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}, 0x12020) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r2) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x58, r5, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_SELECT={0x40, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x8}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x40}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x2}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x1, 0xff}}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x400}]}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x40040}, 0x24040084) 09:38:28 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x5) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x8000000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) 09:38:28 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x5) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x8000000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r0, r0, 0x0, 0xffffffff000) 09:38:28 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x5) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x8000000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) 09:38:28 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000010000)="eb58906d6b66732e66617400021e20000400000004f8", 0x16}, {0x0, 0x0, 0x4000}], 0x100c000, &(0x7f0000000040)) (fail_nth: 21) 09:38:28 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000002000000003b00000008000300844cbf6f761c7185fcb7d5cfbec99b10d5572f0cdf3127e61411c7bc11856ef56b3143f55cb89a0b61093f2a9b6266592794b6d67dbb6c1cebc4a85e6a6f6768c9f4966e8f5c1cde0ae029a238aee524f6ff4db30d30baf6c0ec62c95444075a33bce051f14baceb1789981b2db3b7d0db4018b9467c94ae80996054052b203dde714e34fc60", @ANYRES32=r3, @ANYBLOB="2f003300d0800000ffffffffffff08021100000050505050505000000000000000042500000000760600000000000000"], 0x4c}}, 0x0) 09:38:28 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000040)='./file1\x00', 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) [ 1278.123437] loop5: detected capacity change from 0 to 255 [ 1278.136186] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1278.138849] loop2: detected capacity change from 0 to 255 [ 1278.141058] loop0: detected capacity change from 0 to 40 [ 1278.157602] FAULT_INJECTION: forcing a failure. [ 1278.157602] name failslab, interval 1, probability 0, space 0, times 0 [ 1278.160151] CPU: 1 PID: 9046 Comm: syz-executor.1 Not tainted 5.17.0-next-20220401 #1 [ 1278.161838] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1278.164251] Call Trace: [ 1278.164798] [ 1278.165275] dump_stack_lvl+0x8b/0xb3 [ 1278.166111] should_fail.cold+0x5/0xa [ 1278.166930] ? security_file_alloc+0x34/0x170 [ 1278.167896] should_failslab+0x5/0x10 [ 1278.168710] kmem_cache_alloc+0x5b/0x480 [ 1278.169590] security_file_alloc+0x34/0x170 [ 1278.170513] __alloc_file+0xb6/0x230 [ 1278.171326] alloc_empty_file+0x6d/0x170 [ 1278.172194] path_openat+0xe1/0x2870 [ 1278.173005] ? path_lookupat+0x850/0x850 [ 1278.173868] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1278.175007] ? lock_is_held_type+0xd7/0x130 [ 1278.175939] do_filp_open+0x1aa/0x400 [ 1278.176754] ? may_open_dev+0xf0/0xf0 [ 1278.177565] ? lock_release+0x3b2/0x6f0 [ 1278.178414] ? alloc_fd+0x2f0/0x670 [ 1278.179205] ? lock_downgrade+0x6d0/0x6d0 [ 1278.180096] ? rwlock_bug.part.0+0x90/0x90 [ 1278.181006] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1278.182193] ? _find_next_bit+0x1e5/0x260 [ 1278.183111] ? _raw_spin_unlock+0x24/0x40 [ 1278.183994] ? alloc_fd+0x2f0/0x670 [ 1278.184792] do_sys_openat2+0x16d/0x4c0 [ 1278.185652] ? build_open_flags+0x6f0/0x6f0 [ 1278.186593] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1278.187798] __x64_sys_openat+0x13f/0x1f0 [ 1278.188679] ? __x64_sys_open+0x1c0/0x1c0 [ 1278.189580] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1278.190693] do_syscall_64+0x3b/0x90 [ 1278.191508] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1278.192613] RIP: 0033:0x7f72f8f0ba04 [ 1278.193421] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1278.197344] RSP: 002b:00007f72f64cded0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1278.198976] RAX: ffffffffffffffda RBX: 00007f72f8fa2970 RCX: 00007f72f8f0ba04 [ 1278.200529] RDX: 0000000000000002 RSI: 00007f72f64ce000 RDI: 00000000ffffff9c [ 1278.202072] RBP: 00007f72f64ce000 R08: 0000000000000000 R09: ffffffffffffffff [ 1278.203631] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1278.205156] R13: 0000000000000004 R14: 00000000200004f0 R15: 0000000000000002 [ 1278.206697] [ 1278.208597] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1278.220365] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1278.228636] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1278.233883] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 09:38:28 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x5) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x8000000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) 09:38:28 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r2, &(0x7f0000000640), 0x0, 0x7fff, 0x0) sendfile(r2, r2, 0x0, 0xffffffff000) pwritev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="36d1971d0bf4a4415f6dc1d5debefa1561587630349e50f24df4a6719ac53112b146990f418105581044bb05e6f4625c76c0ee5b7233cdda236e8b790b03a8ce3a7239cb8e963e212388032e82218187388e6bb33a7e594ccfe18418d2e419472e8827df41bf7f0c20bb1ff342df95016a6fc642e63901bdc5bca0e24f8f1ea380a0555e981e2dce04b5dfb82180365d40523bc578312c7c983082d1033f5a9e16ffc3d78790494e06fd0c5e99c978b55a082304b2e013750d4312ffd20a7a8d7c5358b53b648e4268d45bfbc6c8dfb638", 0xd1}, {&(0x7f0000000180)="5ff34cf2a7a09b9aa0562880ae4e41a9206255a02fbce27bb0f73d56bb712a47b825bf1ce1b54f7beafacce2194def9303f4b69aa95d618250974026dc8a054546aebbac17f045be979bcc6d3a5e1ca98ce120839266989b933f918b9607d12cffe7d56a58faa275cd7cc37ad18f29f0589e7b593904c2abc2e9e6b52fed1fe82bdaf3e4dbec330f7d518f04a7", 0x8d}, {&(0x7f0000000240)="0e662e9addf0a55bd1863d8be386b00c0e13128827de4532afac09caf8a12bac40f8f990d406aa36fb60f3f395280514a6b8ef39c74ee4e0c95a9662d8f004204d5103891d706448575ff596d01525187ce451535cd7f6d4", 0x58}, {&(0x7f00000002c0)="a5bc39b227422640208ad23d9587ddc5059dc0bc582ed2c6d4bfb0e984faf80fb12a4bd19d1477bd5764908feef2b4879157cbba1be9a1fd96cda1fbca74be785a952a43f69b2f8154fd5f9f5707cc", 0x4f}, {&(0x7f0000000340)="800ad44d32b572abdbdba1a3c8e9a3fc418d0ec73d02d3480db1d009cf9ff2caf9f5c7e53b686d24099bc05ec6d449a69553b93a64dd22cc51f8628b290eddfcf7cab1", 0x43}], 0x5, 0x7, 0xff) r3 = fcntl$dupfd(r0, 0x0, r1) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/asound/seq/clients\x00', 0x0, 0x0) openat(r4, &(0x7f0000000480)='./file1\x00', 0x2a20c0, 0x120) ioctl$LOOP_SET_DIRECT_IO(r3, 0x40081271, 0x31a2) [ 1278.240361] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1278.267391] kworker/u4:11: attempt to access beyond end of device [ 1278.267391] loop0: rw=1, want=128, limit=40 [ 1278.269641] Buffer I/O error on dev loop0, logical block 31, lost async page write 09:38:28 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x5) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x8000000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r0, r0, 0x0, 0xffffffff000) [ 1278.278453] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 09:38:28 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x5) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x8000000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) 09:38:28 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000040)='./file1\x00', 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) 09:38:28 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x4c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @broadcast}}, @channel_switch={0x0, 0x4, {{}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000040)=[{&(0x7f0000000200)=""/135, 0x87}, {&(0x7f00000002c0)=""/139, 0x8b}], 0x2, &(0x7f0000000380)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}, 0x12020) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r2) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x58, r5, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_SELECT={0x40, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x8}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x40}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x2}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x1, 0xff}}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x400}]}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x40040}, 0x24040084) 09:38:43 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000010000)="eb58906d6b66732e66617400021e20000400000004f8", 0x16}, {0x0, 0x0, 0x4000}], 0x100c000, &(0x7f0000000040)) (fail_nth: 22) 09:38:43 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000040)='./file1\x00', 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) 09:38:43 executing program 6: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind(r0, &(0x7f0000000000)=@ieee802154={0x24, @short={0x2, 0xffff}}, 0x80) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000000080)="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", 0x1000}, {&(0x7f0000001080)}, {&(0x7f00000010c0)="c4e7fa80d7b7a17904836e6e14daaacfc9d5c6b2b8beb8a1a8928399a50437e5e555adb63e735a6fdc40f0ef2ab3a5f8", 0x30}, {&(0x7f0000001100)="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", 0xfa}, {&(0x7f0000001200)="57c6421fb7e49bc53806c2d9010b4c2204e8516b5fcbfb821fd7226d70aa013b1c603a371689443af72fc5974c8c646569810687787af9f083021942824708ec043a20221843772120893015079d0a16911801ce27f29604781df9326e05a568b02421fa", 0x64}, {&(0x7f0000001280)="d08c46e79467457da774d05928b307001218a6d3cc2b1c5bdda169513115ae8c1bfc7cbf84ae4c8ac2b85f0a266ad828bc9f345cf89b6df5582366a35b9094d8eddb692c0c5ae94c35499809eb1f349303030b04ca9f77ebf581e32aa2bbfef6e9028474f749dc1916336dc4aafbcc8aef8ee7dacb013a1e44c53137877931f02f170960bc101724b5b5d9ef12d5fce44b7d242099d7bbf7f40fe7c9d9f865bc5ab7f78a83eebe3be22ba4457dec28b3a211e938c86f86ddc68527c98621b9e76bf45b2c235c00dac52217e012efb80249bd669eda72f75b2d3b3033bf45311ba283079cbf46b92ced42b1f05f9672b3536111785ac9ac964fd38cd176872ca6a9af6301714d7671ade9a155a77a2d7db8db6194a5716b1bb888da8a135308f5de04095000af9a74fcadf05ef555ef760ae5ec909b01729bed3a5517bee351d872bb2637ac5bcd4915335bc039a1c8e360a5c0a05dd249309da57378a3375fe6435fba5f1b009d9eaec7d9eb2e138d4ec5ce4ac7e9ef09fc793882e72fdc19cf96be6327817b1b4a5b6bf1b7bf93e692b0784bb88176702e0b9e7da07b1fde3907e344d351e9131975d8bb3ebc5da84b4623956659475135af24a7c2e57434130cbf1ad619efe1c3135bbb403f30cefcecc03bddb21be37df32ccb53abbef90facc5cf4c8562af2744c3cbd6b4a1579c56dda61fe5cc7c1d84b485d1a8433237eb5a24ea796616cf9b3724f7314283afc681d1d0721c4fb18d0d23d86c31be6774e7a1f9e132d5d0853a8e61038d4cf878e11e4cd247b8877936ce137639cc109693150297390c892d053c243eb079555090b458a5b10036fa3a545585362b9870a78c5408a34ff0a56dfe9c2caa3772fee932868b385b7b4017190b00dc9fa94b418ece76357acbb4d942a9510705d66fcb1a5bc2ef71746ec20e4c47546cd36e19a557136bc2a678a4a868bfb0b2e23c12e80e73c8d5099b58035ef9bb53924dcb988cb0366167681de951bdb2ff24a1f49ae5d7530e2689459342ba7121fd13f520f7edc9409932cc1bdd29a7a2448dd0e66823405aa3372c8ca5cf1a5db1544d67290ea4085e4929f903bdd0f6d548d593ed590043dd54c201ab18eb29eea322adf52d72f614d3a5ee36c724330825da857b6cd88d030cb56d4ea734a9ef7b7f7dde938c74a5ca2a272eaae9ec1f72a70c70cb44cf5c5cb9d7b2ab6b572304b39226a61c23ad1f9b90fccfb2b3e374d23c31c573bf08787ff812f0349f1677083a323625ad582830760e60ef53aa8e38d229d0e9d168060af0018ca2df77919503c7b6903986a8c98348ed0f38cc782eba032a5c9b5f4bec1d4ba01f97f641f672040f106784d075443271860a19619892817cba32dba0eb04182ed68195e2041b1c61f39e69927afc53d6a003d1765faea16d5ef84c37b06c97fd07e0a928d2a43752375acf7cf36a49037866a3d5e9b4c07160d9b783f0ebdf78f2e4039463abacdd3bc35738100340dce7e715afdfff5f1011efea419ef89af4c034e0cdf4270bde1b00d2c6d78c22effed0ffcc219f62aa0fa9f95a4ffcd071dc20d87a979285d7e2136a9481b108f52f1a1da4d6840443f5cdb1bb4273fc2d8e1a28cb15cb1d639b44444207e0fb9f3d2d17f796540d7aeeac268ff744ed482c00e93ea43a6a62dd72fe6e422e2fb106f7300846eea978b6c633c0fc1f087f19a8a8730582c2a77a4c40cd4a8949f5d89195e0737dfd3c6b8ba79ce980450f1130555aef6709b7f785e6b4e394552033adf161fd5fde0bd3670c2ba0c643a7427471eb1cb7c10c300470f1e0192c48b0ea1dbc11e017002740f5287f516404560ab46e6d7665f6d3c742d46c42a891771685f72f498200eb614c9dcc53beb1fde5fb0bcfd6ec2950aa22b75c7c22429605c1b0b35d4b4b38be38fe537d5c3d4db0244d334bae06b26ef2225353b9a168b169ad0d85ec851bbf682d952ccaf31e1ebe4051cbb277390aa056aa793b2060974003519138f6f19e50fab055872f492ca8977474e899ee947751b625eed6344c73914a1506af3239cfb745f5da9a0929fce49b6d94c59c64e6cf50f9efbb33fc1c7aaf3648366683c5bfc65c797d94ee099d1ba6b323eac3b4d813f8e03562bbbe8e2d1837f2885f8cf0a5e421f800ab3e8664c4156f44590fd6afe9b453df0fed9fa520e21ea88f505d0e2cb94cdfa62b132e15ef2868ac116b6db1c2ea0e6f6c4c01eef21f29ae682dd885707f120df889124bab759e55f3c6991f2a5eb4cf5c5ab971444a219ce2d224f4792a223f2d9454ebaf82a6083a2b699c81d5a3f0850e02f4bd0ee06af1e30e33cbab856b46cd58ba62274873f87930d509b1db34cd9d3fb0dbc367244b3e4f446dfc544064352b5c6f53f7c4642886d245860049f8ca37d71ef743e8eec64d8697caf70cc60b24cfece9c39cce51694eea09b427cdd269a0b08a924d2028434d267ed65bc73246cd9ae47baac5cca0c1fcb6aaace59ff22920a2d01052ac1d00400d364bf963c9977b156586cdcf1fd49527f030b484740d3dcc35781a0cf5b869cdfb8883f22268c75c6be85d9ae6572191de74869f902c525bb41048faebb2c0d41b64ca5bb30aa6eaa50f624bc22ea5a42c046ef6e9f0577eddab81948dddc66dd325ba78127b7e744f928dc2eb503c291440fc3e746cecd7c29c30ba7dcda1d7e0575ff28467eb90d6223e5d25b7c443c20a627616dbba4e889510c4ccef860696d63f9d742bda2c6d89dba8bb7186030116f1189276a7a71230c3b7a6e30f923625962c16e5ddd165360a421a0627ff7c61bad490105507a82bca637e3341092772671e9e1b17ea9432a3caa17e6d8715175f18c37ec38c82cca4762227f145e253445a14dac30f36476109d20bd77559aadd4378cf47ad4f343e13c4f96e9f50ec154ff109d2d9311c476b05e4739cc9180233296b9f2edf30a823f65fd5b680e712a246444f3c1e69e95bf3cce8228fd9f3f874ebfd2e493100082fe326a6506b8ad3bbff609cd8ec81307e4131a67cc1c45f99f49927049fef9ceea59d1bcf40532a5464945483d3079e6c40b8b0474ca360e17786143e3e4f17e39537d750bb9475c1c15058a47c5caae3f64e3bd5f331f90fb876fcc94f5cff9c349ba9432faa450441f94eaf4d5c2c5427b8b283bb339820d3f3bd3b57191975e5b2ac6bc32e128ef3379e7aa0a5fb3987e41c3df40fa6cf7ade7e0ee071f20f0f7ac2c8794c8a7533d1bb50e7f42b4868adf28eda1e7b3133d206f7250eae8f69d6ce8220b5011365b80a4a1d86a761af0223c61ebf7ef0a294642652448bb82c624af7914a4900c44f1ad8a5fd48e5f3158063668705cb67e61f4c7016065c34d91e6e893cbc90ef0062b517001fdcc50b16d604f0ffe0f8cb9614f3f976e8e70e2c2e00b4e7c860510410623ad5f410377b9056dfe456a6bf4965cccef2502d14d31512a7576b87612b24a1891246883a63dbbfb17d66193f2e042510e988aa6321608f6b43748d2dc68f57114850d85dafe93f6d1fb1f019bbeae007d9faf5ff980ae2aeb7000c64c9e07ab43ed0392874b7cd3944ed4841c0338b6571eac08d7bf37d9283d2aaa64b08ea882c6395127cd9b992de011ddbe4eb149e9b0e58fbe417250734600f04383c026728b5b76953303cf44511686c6136148104daa2b82a962d3d5d99078c2897ca1ce60926b3776157aa0ec7c450d2e67d1b2070d738f8d4a7c09be08e761d66ae7ae81133aa32c84cccb48cd79d4f97f32ac5194b645c03eb54e208b3d2fdb25c5eff5b5c83d8443133dd52678f3035b8853035c9c7b763a3f92528a6e2deb34e28c2be3950a3ad080b1c4268b6aa5d25a9b8f56c2e8acf66926c7dc6b5181b86558f2ab951e0e325ef05380eb431657ef300ededf42def3d6ac18346459c8ff17e7319b3a647e4ad43902e8621a307309297d40710792f4c43fb063ea1e53c8f35486738fb636e2476a13c48a66f9b65e92460ff3f56ab83fe9620fa6b8b314741f3c2c60b7ea04bbe270854cd408f561bdd0d6764d4165e4f83384906e702db0fba8bbfbff51fa5d30dd777869a0908bc2cf684e87bf1ade11f429980a1b9dba863881ec9c7d2f223f2ceb3956e43745d0952e8022d537d4ee01945e1e86d1d9b8b741c6f2a7ac26a44849c18f94ff6e7172bbda77b698f7b34a1a18267d632016b244a4a2a1deaa9c48d0fc52f4ec95484f79758bf2ce9c59b0b43cb6bc25e44867e0083058ebf657365495cc90b14fc3e7639e57fe0970cb8668913c5939f54e71124698584cf21c168438fab695ee4cfa12d86bc5a8c05af1790b245449142d8200e6bec38e1caa915466da60b4d79bdf3cb5a5cf3da67eb2f690e35c6adad3afdbeae299619a3b08739b6556c39213be9c25e15614e02be346c1dadbb4494eb1736dc1ca250a33dcc7a093973674cfa7a193ab272b129a5b77ec38e84913520c20900c234838ce23c1d7e6cb55776b6bc8402e0ecd9268301d3ebd171ab9c12c1bb3b326948c35f4886a617fcee22752e2c460558b820034b10c5afc36cddf13ede3508d2149e42f9f27369e5f15371425d431ed2de868953032d2bddc8b166b8a1ca200bf99e5172a993625eec245dd1e25d86f1e3a16e2637460e266a14579bfa112ab113745f1ff5ba487d19d089b1d8dccc287df54a674b2143f99120a209f1d133c565a84717cd3b0f6aed4a38454f993a52ca4d476fca5e882c61dca47644ab3d81e3dfa0f9e49b74b4baad9b28f1ec9e6601db27f6cdd64646eaac3aee8f0943c3a5de3145550f25dd4ddc68f328af0c68e54caa7c6d6045c9a8b0b432757ca9d6e95266ee5eed5ef36eb5961f015fac45331aacdda7a8afb3f64b397dc702a22cab012ed7cf147b278c88aa7a268f5191b9cbfca94e6ea9f20ca8ad34ee2265ab2cc5f77bd2abceb88098d476275a26b6b434e0dc79932d448d55db900b241510f5d0553de872709f3ad2034ebace1e9e59d9b89754910080f9789879400dd7495b27250b3e3196050d82401542767bba2c481601a25c907b7f85f4d4fc03f9b7d242825a2d7a700c4e16173a61b0fe1d8a00b48be238fd6eaf73c839c95528fab73db390cb94699d289f53dd5cc48bd48e9b45290da92f1409a2bfc09176706e88c2436a86783fa42bba4e68754b63cfc854f6c1f79b53b61f26fd775e14e8ed328e61f0e9136b934366a37f8cd170833ed481d0fd93b40ba1a9b354ce2af6c5e8e4a2e593fd14e8d53134fbdcdd64f12f69369bf57ccfbfbc789fe0574232a235f69776b288e1103f0623c76fa19517d5d17c763e603060eea05add77e98faa439770fe5ae54885bb44115f93ec11ef3779d22828b9e31b3c4d94bf89ed386662b9223f3e6c8eefa26fa6c5c045668f695e7336d1eef402e3ffc01e4a4b498f586f4109740b4182cef1c751181ad6d83d5c958687585839beb5ceb90581bbf7bcdc735d1e4597ea920d45ab9650460b9b2664ebd6dabad3b1803a4eef87759f48edbb3ae4552649e49353979c5d9fee64d22a8e8cca72d1c5cec33f39a910c978106cc4fc07064100586c4c109966b23b79fe2c4e713fcc70e7dce82ac9535363dece656c71486fb93cd1a4406c91f7a00fdb6fbcd944ff950f20c3051fa00acf60ae8baa1b591d9c246bc79063aa17efdf7305d6f8528ac0f339994419787e693bc0da639d549e1684bf5c3c232fc2c5ef7418a609993fd0f4c1d9623518bcf16651a13da3e170a3e6c8ba4fdb7ff1325e", 0x1000}], 0x6, &(0x7f0000002300)=[@ip_ttl={{0x14, 0x0, 0x2, 0x40}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4}, @lsrr={0x83, 0xf, 0x34, [@empty, @multicast1, @rand_addr=0x64010100]}, @end]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0xa0}, 0xd0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000001080), 0x80880, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) sendfile(r5, r5, 0x0, 0xffffffff000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) sendfile(r6, r6, 0x0, 0xffffffff000) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000002400)=[r4, r2, r1, r5, r2, r6, r2], 0x7) 09:38:43 executing program 4: prctl$PR_SET_SECUREBITS(0x1c, 0x5) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan1\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="33000000000000002e2f66696c653000000000000000000000000000000000000000000070fee78d056b7b850008000000000000000000003f0000000000000000000000000000000000000000000000000000000000000000000000e70000000000000000000000000000000900000000000000000000000000000000000000000000775ca0cb8a9f690a04305650"]}) 09:38:43 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x5) pwritev(r0, 0x0, 0x0, 0x8000000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) 09:38:43 executing program 5: ioctl$CDROMSEEK(0xffffffffffffffff, 0x5316, &(0x7f0000000000)={0x1, 0x95, 0x9, 0x0, 0x7, 0x3}) ioctl$CDROMRESUME(0xffffffffffffffff, 0x5302) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x2, @lba=0x8001}) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000000080)) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000b00), 0x4000, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000c00), 0x10000, 0x0) write$binfmt_elf64(r0, &(0x7f0000000e00)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x6, 0x4f, 0x2, 0x6, 0x2, 0x3, 0x9, 0x44, 0x40, 0x98, 0x71fc, 0x400, 0x38, 0x1, 0x5, 0xd11, 0x8}, [{0x1, 0x6, 0x6, 0x5, 0x1834d5a8, 0x13, 0x80000001, 0xfffffffffffffcfe}, {0x7, 0x8, 0x0, 0x8000, 0xf7, 0x8, 0x9, 0x2}], "1161b0db26bcc47fdba6090f59d2386d47c944a385c00bd41bd2d81de5f063f66e631aec8582a3327c402769da61815fe7be2fbe1e05b4cd8cee248b64312549920411ae20e643d9cc4f42233ba74392a609deb4794d60a14c0e9186472cacd15cd9d09f968f68ff8d6c87c45bbb46e2f520a0712a2f6771cb513d", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x82b) syz_mount_image$vfat(0x0, &(0x7f0000000bc0)='./file0\x00', 0x40, 0x3, &(0x7f0000000d80)=[{0x0, 0x0, 0x43cf}, {&(0x7f0000000c40)="be5183a7452c327e6389f926a15d9d4b31470c80531261d670583e570a3710fd022901673a7a06f2daf8a96c6d8014e35e9240b23d600b217c2d075f85b8b85eab22d45fd73ad7499e6be3c212cd38a623798436d4036f06f8495b812260beec56760e251b5d31f3d1e35e7157e4a2c53ae6a112c1c31d3c7e75f12e67759a2828ed1e1f012c24fef1c11d487ad5ae5fb7ba6846eb2670e0c97ec1317b3eec08406a54ff57cc2517f73e9b1ee3472f6a2f5b0cb00cf1b18de0fb45a862e73f", 0xbf, 0x5f50}, {&(0x7f00000021c0)="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", 0x175, 0x4}], 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="6ec92114c4c3ae7770d835c42c97542380dc4786e68ef51deec1fd685ddaba42f4df6739e0ec45c4bfe6f8ba442f9a245192f69329c93c36bf50f16546780140a9ef5979f3a8c2c4b3b245fadd000000000000d914aee09584aef0c1be1a"]) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, 0x0, 0x0) ioctl$CDROMREADALL(r0, 0x5318, &(0x7f0000001640)) 09:38:43 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x5) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x8000000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) 09:38:43 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010014000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="27003300d0800000ffffffffffff08021100000050505050505000000000000000042503000000000c00cd000600008008002000"], 0x50}}, 0x0) [ 1293.165277] FAULT_INJECTION: forcing a failure. [ 1293.165277] name failslab, interval 1, probability 0, space 0, times 0 [ 1293.167825] CPU: 0 PID: 9072 Comm: syz-executor.1 Not tainted 5.17.0-next-20220401 #1 [ 1293.169580] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1293.172102] Call Trace: [ 1293.172672] [ 1293.173171] dump_stack_lvl+0x8b/0xb3 [ 1293.174037] should_fail.cold+0x5/0xa [ 1293.174898] ? create_object.isra.0+0x3a/0xa20 [ 1293.175929] loop0: detected capacity change from 0 to 40 [ 1293.175948] should_failslab+0x5/0x10 [ 1293.177385] kmem_cache_alloc+0x5b/0x480 [ 1293.178297] create_object.isra.0+0x3a/0xa20 [ 1293.179269] ? kasan_unpoison+0x23/0x50 [ 1293.180147] kmem_cache_alloc+0x239/0x480 [ 1293.181068] security_file_alloc+0x34/0x170 [ 1293.182031] __alloc_file+0xb6/0x230 [ 1293.182854] alloc_empty_file+0x6d/0x170 [ 1293.183758] path_openat+0xe1/0x2870 [ 1293.184599] ? path_lookupat+0x850/0x850 [ 1293.185504] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1293.186111] loop3: detected capacity change from 0 to 255 [ 1293.186666] ? lock_is_held_type+0xd7/0x130 [ 1293.188215] do_filp_open+0x1aa/0x400 09:38:43 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x70, r1, 0x20, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x52, 0x33, @auth={@wo_ht={{0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x80}, @device_a, @broadcast, @initial, {0x5, 0x6}}, 0x0, 0x0, 0x17, @val={0x10, 0x1, 0xdb}, [{0xdd, 0x2b, "cd32f07177ff815a8e6c1280e5736ce72af0448f971a52365855f19f58e190f29c3213fd92ee002e630db3"}]}}]}, 0x70}}, 0x0) [ 1293.189055] ? may_open_dev+0xf0/0xf0 [ 1293.189982] ? lock_release+0x3b2/0x6f0 [ 1293.190869] ? alloc_fd+0x2f0/0x670 [ 1293.191697] ? lock_downgrade+0x6d0/0x6d0 [ 1293.192617] ? rwlock_bug.part.0+0x90/0x90 [ 1293.193553] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1293.194776] ? _find_next_bit+0x1e5/0x260 [ 1293.195705] ? _raw_spin_unlock+0x24/0x40 [ 1293.196618] ? alloc_fd+0x2f0/0x670 [ 1293.197432] do_sys_openat2+0x16d/0x4c0 [ 1293.198316] ? build_open_flags+0x6f0/0x6f0 [ 1293.199277] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1293.200494] __x64_sys_openat+0x13f/0x1f0 [ 1293.201404] ? __x64_sys_open+0x1c0/0x1c0 [ 1293.202324] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1293.203480] do_syscall_64+0x3b/0x90 [ 1293.204293] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1293.205426] RIP: 0033:0x7f72f8f0ba04 [ 1293.206240] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1293.210224] RSP: 002b:00007f72f64cded0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1293.211868] RAX: ffffffffffffffda RBX: 00007f72f8fa2970 RCX: 00007f72f8f0ba04 [ 1293.213400] RDX: 0000000000000002 RSI: 00007f72f64ce000 RDI: 00000000ffffff9c [ 1293.214929] RBP: 00007f72f64ce000 R08: 0000000000000000 R09: ffffffffffffffff [ 1293.216474] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1293.218015] R13: 0000000000000004 R14: 00000000200004f0 R15: 0000000000000002 [ 1293.219578] [ 1293.222712] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1293.247424] loop2: detected capacity change from 0 to 255 [ 1293.264975] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1293.269059] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1293.276776] kworker/u4:10: attempt to access beyond end of device [ 1293.276776] loop0: rw=1, want=128, limit=40 [ 1293.278060] Buffer I/O error on dev loop0, logical block 31, lost async page write [ 1293.303410] loop1: detected capacity change from 0 to 64 [ 1293.309910] loop5: detected capacity change from 0 to 95 [ 1293.362028] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1293.386866] loop5: detected capacity change from 0 to 95 09:38:58 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x5) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x8000000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) [ 1308.208678] loop5: detected capacity change from 0 to 40 [ 1308.210203] loop0: detected capacity change from 0 to 40 [ 1308.218239] loop2: detected capacity change from 0 to 255 [ 1308.222166] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 09:38:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010014000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="27003300d0800000ffffffffffff08021100000050505050505000000000000000042503000000000c00cd000600008008002000"], 0x50}}, 0x0) 09:38:58 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) sendfile(r5, r5, 0x0, 0xffffffff000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x54, r6, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x56}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "08639a554cdcc5a01ea3556403"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x4c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @broadcast}}, @channel_switch={0x0, 0x4, {{}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r1, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xf9, 0xd}}}}, ["", ""]}, 0x28}}, 0x4) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r7, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) sendfile(r7, r7, 0x0, 0xffffffff000) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x124, r4, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x30}}}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x81}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x318}, @NL80211_ATTR_IE={0xef, 0x2a, [@rann={0x7e, 0x15, {{0x1, 0x7}, 0xf8, 0x1f, @device_a, 0x2, 0x9, 0x3}}, @random={0xfb, 0xcd, "49cfd110c734ee1234ec2f74c0de8ce875e3a2cf2820204d7afc0ab8b6277d40dfd68ee53ac3883c058c456132e9a3f2c02fe281546ccaa316909ccdcee6c0ef8cb492a917b5f7ad14b157f19ac487eef3182b24a626db583db27bf7a6e1ea5805ee1b9b83da89cc853c34d4f6c91814b518270cb80c004677ebbd10c40a2eb16de9f7179de99e1a309e26290d594f928ba720437879455733a6365ec93f49f3dbb995fb7d5a84123a0e0e3aa524ad6acf2c56eafb257c7b65c235f72692bc1289e3147489fb12ee67abe353c3"}, @channel_switch={0x25, 0x3, {0x1, 0x30, 0x3}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x20000001}, 0x4010) 09:38:58 executing program 6: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x80, &(0x7f0000000040)=0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000000080)=0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x3, &(0x7f0000000180)=0x1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2a, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e32383839333038373500"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000001d72581da2224158b58973c82eb77a3b010000000c00000000000000d7f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="0100000000000500110000000000000000000000040000003c00000000000000", 0x20, 0x560}, {&(0x7f0000010300)="030000000400"/32, 0x20, 0x640}, {&(0x7f0000010400)="030000001300000023000000ce000f0003000400"/32, 0x20, 0x800}, {&(0x7f0000010500)="fffffffffcff0700000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009403090166696c652e636f6c64000000", 0x480, 0xc00}, {&(0x7f0000010a00)="0b0000000c0001022e00000002000000f40302022e2e00"/32, 0x20, 0x1400}, {&(0x7f0000010b00)="00000000000400"/32, 0x20, 0x1800}, {&(0x7f0000010c00)="00000000000400"/32, 0x20, 0x1c00}, {&(0x7f0000010d00)="00000000000400"/32, 0x20, 0x2000}, {&(0x7f0000010e00)="00000000000400"/32, 0x20, 0x2400}, {&(0x7f0000010f00)="00000000000400"/32, 0x20, 0x2800}, {&(0x7f0000011000)="00000000000400"/32, 0x20, 0x2c00}, {&(0x7f0000011100)="00000000000400"/32, 0x20, 0x3000}, {&(0x7f0000011200)="00000000000400"/32, 0x20, 0x3400}, {&(0x7f0000011300)="00000000000400"/32, 0x20, 0x3800}, {&(0x7f0000011400)="00000000000400"/32, 0x20, 0x3c00}, {&(0x7f0000011500)="00000000000400"/32, 0x20, 0x4000}, {&(0x7f0000011600)="504d4d00504d4dffd7f4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7033300075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/128, 0x80, 0x4400}, {&(0x7f0000011700)="111fc0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x4800}, {&(0x7f0000011800)="ffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0300"/1056, 0x420, 0x4c00}, {&(0x7f0000011d00)="0400"/32, 0x20, 0x5400}, {&(0x7f0000011e00)="0500"/32, 0x20, 0x5800}, {&(0x7f0000011f00)="00000000000000000100000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000007000"/96, 0x60, 0x5c00}, {&(0x7f0000012000)="0200"/32, 0x20, 0x6000}, {&(0x7f0000012100)="2719c0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x6400}, {&(0x7f0000012200)="0300"/32, 0x20, 0x6800}, {&(0x7f0000012300)="0400"/32, 0x20, 0x6c00}, {&(0x7f0000012400)="0500"/32, 0x20, 0x7000}, {&(0x7f0000012500)="00000000000000000100000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000007000"/96, 0x60, 0x7400}, {&(0x7f0000012600)="0200"/32, 0x20, 0x7800}, {&(0x7f0000012700)="0c0000000c0001022e000000020000000c0002022e2e00000d0000001000050166696c65300000000e000000d803050766696c653100"/64, 0x40, 0x7c00}, {&(0x7f0000012800)="000002ea0100000001000000270f240c000000000000000000000000000000000601f8030000000006000000779b539778617474723100000601f00300000000060000007498539778617474723200"/96, 0x60, 0x8000}, {&(0x7f0000012900)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00xattr2\x00\x00xattr1\x00\x00', 0x20, 0x83e0}, {&(0x7f0000012a00)="0000000000000000d7f4655fd7f4655fd7f4655f00"/32, 0x20, 0x8c00}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f00000000000004000200000000000800050000000af301000400000000000000000000000100000004000000", 0x40, 0x8c80}, {&(0x7f0000012c00)="8081000000180000d7f4655fd7f4655fd7f4655f00000000000001000c00000010000800000000000af303000400000000000000000000000100000012000000010000000100000018000000020000000400000014000000000000000000000000000000000000000000000000000000000000000000000000000000000000008081000000180000d7f4655fd7f4655fd7f4655f00000000000001000c00000010000800000000000af30300040000000000000000000000010000001900000001000000010000001e00000002000000040000001a00"/224, 0xe0, 0x8d00}, {&(0x7f0000012d00)="c041000000300000d7f4655fd7f4655fd7f4655f00000000000002001800000000000800000000000af301000400000000000000000000000c00000005000000", 0x40, 0x9100}, {&(0x7f0000012e00)="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"/768, 0x300, 0x9180}, {&(0x7f0000013100)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x9c00}, {&(0x7f0000013600)='syzkallers\x00'/32, 0x20, 0xa400}, {&(0x7f0000013700)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0xcc00}], 0x0, &(0x7f0000013800)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfbc, 0x10000, &(0x7f0000000140)) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x2, 0x1) 09:38:58 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000040)='./file1\x00', 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) 09:38:58 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000040)='./file1\x00', 0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) 09:38:58 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x5) pwritev(r0, 0x0, 0x0, 0x8000000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) 09:38:58 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000010000)="eb58906d6b66732e66617400021e20000400000004f8", 0x16}, {0x0, 0x0, 0x4000}], 0x100c000, &(0x7f0000000040)) (fail_nth: 23) [ 1308.250644] loop3: detected capacity change from 0 to 255 [ 1308.256841] FAULT_INJECTION: forcing a failure. [ 1308.256841] name failslab, interval 1, probability 0, space 0, times 0 [ 1308.259299] CPU: 1 PID: 9118 Comm: syz-executor.1 Not tainted 5.17.0-next-20220401 #1 [ 1308.260892] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1308.263182] Call Trace: [ 1308.263701] [ 1308.264156] dump_stack_lvl+0x8b/0xb3 [ 1308.264949] should_fail.cold+0x5/0xa [ 1308.265734] ? alloc_workqueue+0x914/0xeb0 [ 1308.266601] should_failslab+0x5/0x10 [ 1308.267377] __kmalloc+0x72/0x440 [ 1308.268105] alloc_workqueue+0x914/0xeb0 [ 1308.268917] ? do_raw_spin_unlock+0x4f/0x210 [ 1308.269817] ? _raw_spin_unlock+0x24/0x40 [ 1308.270654] ? bd_prepare_to_claim+0x164/0x300 [ 1308.271595] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 1308.272618] ? __fget_files+0x287/0x470 [ 1308.273463] ? loop_configure+0x625/0x1940 [ 1308.274336] loop_configure+0x6e6/0x1940 [ 1308.275180] ? __sanitizer_cov_trace_cmp2+0x22/0x80 [ 1308.276235] lo_ioctl+0x782/0x1850 [ 1308.276961] ? __x64_sys_openat+0x13f/0x1f0 [ 1308.277852] ? loop_set_status_old+0x1b0/0x1b0 [ 1308.278784] ? avc_ss_reset+0x180/0x180 [ 1308.279659] ? __lock_acquire+0xbac/0x6120 [ 1308.280604] ? loop_set_status_old+0x1b0/0x1b0 [ 1308.281536] blkdev_ioctl+0x356/0x7f0 [ 1308.282329] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 1308.283312] ? selinux_file_ioctl+0xb1/0x260 [ 1308.284240] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1308.285364] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 1308.286338] __x64_sys_ioctl+0x196/0x210 [ 1308.287181] do_syscall_64+0x3b/0x90 [ 1308.287950] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1308.289021] RIP: 0033:0x7f72f8f588d7 [ 1308.289775] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1308.293551] RSP: 002b:00007f72f64cdf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1308.295119] RAX: ffffffffffffffda RBX: 00007f72f8fa2970 RCX: 00007f72f8f588d7 [ 1308.296606] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1308.298069] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1308.299549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1308.301168] R13: 0000000000000004 R14: 00000000200004f0 R15: 0000000000000002 [ 1308.302671] [ 1308.306785] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 09:38:58 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x40801, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) rename(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000100)='./file0/file0\x00') openat$zero(0xffffffffffffff9c, &(0x7f0000001c00), 0x20082, 0x0) getsockname$packet(r0, &(0x7f0000001c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001c80)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000001d40)={'sit0\x00', &(0x7f0000001d80)={'ip6gre0\x00', r1, 0x4, 0x91, 0x81, 0x6, 0x40, @mcast1, @private0={0xfc, 0x0, '\x00', 0x81}, 0x7800, 0x20, 0x3f}}) truncate(&(0x7f00000000c0)='./file1\x00', 0x0) truncate(&(0x7f0000000080)='./file1\x00', 0x0) recvmsg$unix(r0, &(0x7f0000001a80)={&(0x7f00000001c0), 0x6e, &(0x7f0000001880)=[{&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/33, 0x21}, {&(0x7f0000001280)=""/218, 0xda}, {&(0x7f0000001380)=""/21, 0x15}, {&(0x7f00000013c0)=""/201, 0xc9}, {&(0x7f00000014c0)=""/199, 0xc7}, {&(0x7f00000015c0)=""/44, 0x2c}, {&(0x7f0000001600)=""/178, 0xb2}, {&(0x7f00000016c0)=""/245, 0xf5}, {&(0x7f00000017c0)=""/169, 0xa9}], 0xa, &(0x7f0000001940)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}, 0x41) lsetxattr$trusted_overlay_upper(&(0x7f0000001b00)='./file0/file0\x00', &(0x7f0000001b40), &(0x7f0000001b80)={0x0, 0xfb, 0x5a, 0x4, 0x7, "6e80fa5610eea840d8c68b134100ced2", "a9f0b34204306a1585f3f1f17f11285d4c04231887b797df2738ac3e5fb5ce141f1439fb1bbbba9510aaf23b0dd51a7ff6381d650ef23597886fcfe57437c0bf348db3e8c2"}, 0x5a, 0x0) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000001ac0)) [ 1308.358251] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 09:38:58 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x5) pwritev(r0, 0x0, 0x0, 0x8000000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) [ 1308.393568] kworker/u4:0: attempt to access beyond end of device [ 1308.393568] loop5: rw=1, want=128, limit=40 [ 1308.396023] Buffer I/O error on dev loop5, logical block 31, lost async page write 09:38:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001200010000000000000000000c0000000000000000000000040000000c001d"], 0x2c}], 0x1}, 0x0) [ 1308.421721] audit: type=1326 audit(1648892338.823:25): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9123 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fabebc0db19 code=0x0 09:38:58 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000010000)="eb58906d6b66732e66617400021e20000400000004f8", 0x16}, {0x0, 0x0, 0x4000}], 0x100c000, &(0x7f0000000040)) (fail_nth: 24) 09:38:58 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4000000000003, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="601c6d6b646f737dd8a02b00080101100440002000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000a940)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="280000001e0001a6d745d3230f5843ff070000b4b5"], 0x28}], 0x1}, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xfdde) [ 1308.467920] kworker/u4:0: attempt to access beyond end of device [ 1308.467920] loop0: rw=1, want=128, limit=40 [ 1308.470531] Buffer I/O error on dev loop0, logical block 31, lost async page write 09:38:58 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000040)='./file1\x00', 0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) [ 1308.494367] loop2: detected capacity change from 0 to 255 [ 1308.501613] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 09:38:58 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x5) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x8000000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) [ 1308.542411] netlink: 'syz-executor.5': attribute type 29 has an invalid length. [ 1308.543337] FAULT_INJECTION: forcing a failure. [ 1308.543337] name failslab, interval 1, probability 0, space 0, times 0 [ 1308.546173] CPU: 0 PID: 9132 Comm: syz-executor.1 Not tainted 5.17.0-next-20220401 #1 [ 1308.546342] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1308.547757] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1308.547773] Call Trace: [ 1308.547780] [ 1308.547789] dump_stack_lvl+0x8b/0xb3 [ 1308.547835] should_fail.cold+0x5/0xa [ 1308.547871] ? create_object.isra.0+0x3a/0xa20 [ 1308.555017] should_failslab+0x5/0x10 [ 1308.555785] kmem_cache_alloc+0x5b/0x480 [ 1308.556605] create_object.isra.0+0x3a/0xa20 [ 1308.557476] ? kasan_unpoison+0x23/0x50 [ 1308.558270] __kmalloc+0x25b/0x440 [ 1308.558986] alloc_workqueue+0x914/0xeb0 [ 1308.559813] ? do_raw_spin_unlock+0x4f/0x210 [ 1308.560692] ? _raw_spin_unlock+0x24/0x40 [ 1308.561510] ? bd_prepare_to_claim+0x164/0x300 [ 1308.562423] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 1308.563437] ? __fget_files+0x287/0x470 [ 1308.564252] ? loop_configure+0x625/0x1940 [ 1308.565098] loop_configure+0x6e6/0x1940 [ 1308.565916] ? __sanitizer_cov_trace_cmp2+0x22/0x80 [ 1308.566924] lo_ioctl+0x782/0x1850 [ 1308.567649] ? __x64_sys_openat+0x13f/0x1f0 [ 1308.568518] ? loop_set_status_old+0x1b0/0x1b0 [ 1308.569428] ? avc_ss_reset+0x180/0x180 [ 1308.570242] ? __lock_acquire+0xbac/0x6120 [ 1308.571161] ? loop_set_status_old+0x1b0/0x1b0 [ 1308.572084] blkdev_ioctl+0x356/0x7f0 [ 1308.572853] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 1308.573797] ? selinux_file_ioctl+0xb1/0x260 [ 1308.574679] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1308.575770] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 1308.576717] __x64_sys_ioctl+0x196/0x210 [ 1308.577516] do_syscall_64+0x3b/0x90 [ 1308.578260] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1308.579262] RIP: 0033:0x7f72f8f588d7 [ 1308.579999] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1308.583528] RSP: 002b:00007f72f64cdf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1308.585033] RAX: ffffffffffffffda RBX: 00007f72f8fa2970 RCX: 00007f72f8f588d7 [ 1308.586442] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1308.587867] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1308.589276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1308.590683] R13: 0000000000000004 R14: 00000000200004f0 R15: 0000000000000002 [ 1308.592123] [ 1308.609565] loop4: detected capacity change from 0 to 264192 [ 1308.619497] loop0: detected capacity change from 0 to 40 [ 1308.627355] loop3: detected capacity change from 0 to 255 [ 1308.628647] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1308.637331] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1308.656837] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 09:38:59 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x8000000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) 09:38:59 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000040), 0x0, 0x22140) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r0, 0x0, 0xfffffdef) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2}, './file1\x00'}) fallocate(r0, 0x11, 0x0, 0x9) [ 1308.701718] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1308.731539] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 09:38:59 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x5) pwritev(r0, &(0x7f00000001c0), 0x0, 0x8000000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) [ 1308.771986] kworker/u4:10: attempt to access beyond end of device [ 1308.771986] loop0: rw=1, want=128, limit=40 [ 1308.774120] Buffer I/O error on dev loop0, logical block 31, lost async page write [ 1308.805992] loop1: detected capacity change from 0 to 64 [ 1308.829696] loop3: detected capacity change from 0 to 255 [ 1308.848003] loop2: detected capacity change from 0 to 255 [ 1308.872249] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1308.877218] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1308.995292] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1309.112955] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1309.237545] audit: type=1326 audit(1648892339.639:26): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9123 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fabebc0db19 code=0x0 09:39:15 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4000000000003, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="601c6d6b646f737dd8a02b00080101100440002000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000a940)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="280000001e0001a6d745d3230f5843ff070000b4b5"], 0x28}], 0x1}, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xfdde) 09:39:15 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x8000000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r0, r0, 0x0, 0xffffffff000) 09:39:15 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000040), 0x0, 0x22140) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r0, 0x0, 0xfffffdef) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2}, './file1\x00'}) fallocate(r0, 0x11, 0x0, 0x9) 09:39:15 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000040)='./file1\x00', 0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) [ 1325.304505] loop2: detected capacity change from 0 to 255 09:39:15 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000010000)="eb58906d6b66732e66617400021e20000400000004f8", 0x16}, {0x0, 0x0, 0x4000}], 0x100c000, &(0x7f0000000040)) (fail_nth: 25) 09:39:15 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000040)='./file1\x00', 0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) 09:39:15 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x5) pwritev(r0, &(0x7f00000001c0), 0x0, 0x8000000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) 09:39:15 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @remote, @broadcast}}}], 0x20}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @remote, @broadcast}}}], 0x20}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000700)={'ip6gre0\x00', &(0x7f0000000680)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x7, 0x7fffffff, 0xb, @dev={0xfe, 0x80, '\x00', 0x3d}, @loopback, 0x1, 0x0, 0x6, 0x8}}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000000840)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000200)={{{@in=@multicast1, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@private2}}, &(0x7f0000001b80)=0xe8) getsockname$packet(0xffffffffffffffff, &(0x7f0000001bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001c00)=0x14) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) sendmsg$inet(r9, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @remote, @broadcast}}}], 0x20}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000002500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000024c0)={&(0x7f0000000880)=ANY=[@ANYBLOB='X\b\x00\x00', @ANYRES16=0x0, @ANYBLOB="2e0327bd7000fcdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="f801028038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400030000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="f4000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000500000008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000008000100", @ANYRES32=0x0, @ANYBLOB="e800028038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400040200003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400070000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="700102803c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000000c00040003007f09060000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r1, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="6c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000003c0004000500291f080000000100003f000000009fb101b30588000000000503ff0f000005006405ff03000000002a07f9ffffff0300bf090000ffff08000100", @ANYRES32=0x0, @ANYBLOB="4400028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r5, @ANYBLOB="080007000000000008000100f2b8bbbd69e4728363b1689d8a33fa802cbbc2cfcecde212ea9f8e3fb221af155ddd5c7322995c8361728cc6367f708aeb1431bd27b991d26812c69bf14624a6e6b94c41cb92318bb2d84bfd95a7ea381da8124ef0275e7840b15b03b615ae2648e6212b1b3392f7aa33fedd40e03062e786ba24d43bc2dfd2a0f29d4be50ed8e5d0450a5e1f10b28bc853b3030031330f1c38", @ANYRES32=r6, @ANYBLOB="6c01028044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b7570000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000500000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004001f0000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="c000028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400ba0a000008000700000000003c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400ff7f000008000600", @ANYRES32=0x0, @ANYBLOB], 0x858}, 0x1, 0x0, 0x0, 0x4000}, 0x44000) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"/327, @ANYRES16=r12, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r14, @ANYBLOB="2f003300d0800000ffffffffffff08021100000050505050505000000000000000042500000000760600000000000000"], 0x4c}}, 0x0) [ 1325.325242] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1325.333300] loop6: detected capacity change from 0 to 40 [ 1325.342055] loop4: detected capacity change from 0 to 264192 [ 1325.353778] FAULT_INJECTION: forcing a failure. [ 1325.353778] name failslab, interval 1, probability 0, space 0, times 0 [ 1325.356220] CPU: 0 PID: 9177 Comm: syz-executor.1 Not tainted 5.17.0-next-20220401 #1 [ 1325.357875] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1325.360262] Call Trace: [ 1325.360807] [ 1325.361277] dump_stack_lvl+0x8b/0xb3 [ 1325.362103] should_fail.cold+0x5/0xa [ 1325.362921] ? alloc_workqueue_attrs+0x38/0x80 [ 1325.363917] should_failslab+0x5/0x10 [ 1325.364741] kmem_cache_alloc_trace+0x55/0x3c0 [ 1325.365746] alloc_workqueue_attrs+0x38/0x80 [ 1325.366704] alloc_workqueue+0x939/0xeb0 [ 1325.367589] ? do_raw_spin_unlock+0x4f/0x210 [ 1325.368570] ? _raw_spin_unlock+0x24/0x40 [ 1325.369465] ? bd_prepare_to_claim+0x164/0x300 [ 1325.370457] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 1325.371536] ? __fget_files+0x287/0x470 [ 1325.372406] ? loop_configure+0x625/0x1940 [ 1325.373317] loop_configure+0x6e6/0x1940 [ 1325.374203] ? __sanitizer_cov_trace_cmp2+0x22/0x80 [ 1325.375274] lo_ioctl+0x782/0x1850 [ 1325.376064] ? __x64_sys_openat+0x13f/0x1f0 [ 1325.377006] ? loop_set_status_old+0x1b0/0x1b0 [ 1325.377992] ? avc_ss_reset+0x180/0x180 [ 1325.378880] ? __lock_acquire+0xbac/0x6120 [ 1325.379878] ? loop_set_status_old+0x1b0/0x1b0 [ 1325.380878] blkdev_ioctl+0x356/0x7f0 [ 1325.381719] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 1325.382746] ? selinux_file_ioctl+0xb1/0x260 [ 1325.383700] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1325.384920] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 1325.385952] __x64_sys_ioctl+0x196/0x210 [ 1325.386826] do_syscall_64+0x3b/0x90 [ 1325.387630] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1325.388728] RIP: 0033:0x7f72f8f588d7 [ 1325.389526] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1325.393393] RSP: 002b:00007f72f64cdf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1325.395025] RAX: ffffffffffffffda RBX: 00007f72f8fa2970 RCX: 00007f72f8f588d7 [ 1325.396568] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1325.398063] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1325.399554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1325.401051] R13: 0000000000000004 R14: 00000000200004f0 R15: 0000000000000002 [ 1325.402571] [ 1325.403473] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 09:39:15 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x5) pwritev(r0, &(0x7f00000001c0), 0x0, 0x8000000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) [ 1325.422145] kworker/u4:0: attempt to access beyond end of device [ 1325.422145] loop6: rw=1, want=128, limit=40 [ 1325.423323] Buffer I/O error on dev loop6, logical block 31, lost async page write [ 1325.427060] loop3: detected capacity change from 0 to 255 09:39:15 executing program 6: socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x6) stat(&(0x7f0000000300)='./file1\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x18, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r1}]}, 0x18}], 0x1}, 0x0) [ 1325.429235] loop0: detected capacity change from 0 to 40 [ 1325.433670] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1325.450739] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 09:39:15 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x5) pwritev(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x8000000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) 09:39:15 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000010000)="eb58906d6b66732e66617400021e20000400000004f8", 0x16}, {0x0, 0x0, 0x4000}], 0x100c000, &(0x7f0000000040)) (fail_nth: 26) 09:39:15 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24040855) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x4c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @broadcast}}, @channel_switch={0x0, 0x4, {{}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) [ 1325.575807] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 09:39:15 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x8000000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r0, r0, 0x0, 0xffffffff000) 09:39:15 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000040)='./file1\x00', 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) 09:39:15 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @remote, @broadcast}}}], 0x20}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @remote, @broadcast}}}], 0x20}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000700)={'ip6gre0\x00', &(0x7f0000000680)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x7, 0x7fffffff, 0xb, @dev={0xfe, 0x80, '\x00', 0x3d}, @loopback, 0x1, 0x0, 0x6, 0x8}}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000000840)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000200)={{{@in=@multicast1, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@private2}}, &(0x7f0000001b80)=0xe8) getsockname$packet(0xffffffffffffffff, &(0x7f0000001bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001c00)=0x14) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) sendmsg$inet(r9, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @remote, @broadcast}}}], 0x20}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000002500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000024c0)={&(0x7f0000000880)=ANY=[@ANYBLOB='X\b\x00\x00', @ANYRES16=0x0, @ANYBLOB="2e0327bd7000fcdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="f801028038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400030000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="f4000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000500000008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000008000100", @ANYRES32=0x0, @ANYBLOB="e800028038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400040200003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400070000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="700102803c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000000c00040003007f09060000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r1, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="6c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000003c0004000500291f080000000100003f000000009fb101b30588000000000503ff0f000005006405ff03000000002a07f9ffffff0300bf090000ffff08000100", @ANYRES32=0x0, @ANYBLOB="4400028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r5, @ANYBLOB="080007000000000008000100f2b8bbbd69e4728363b1689d8a33fa802cbbc2cfcecde212ea9f8e3fb221af155ddd5c7322995c8361728cc6367f708aeb1431bd27b991d26812c69bf14624a6e6b94c41cb92318bb2d84bfd95a7ea381da8124ef0275e7840b15b03b615ae2648e6212b1b3392f7aa33fedd40e03062e786ba24d43bc2dfd2a0f29d4be50ed8e5d0450a5e1f10b28bc853b3030031330f1c38", @ANYRES32=r6, @ANYBLOB="6c01028044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b7570000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000500000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004001f0000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="c000028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400ba0a000008000700000000003c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400ff7f000008000600", @ANYRES32=0x0, @ANYBLOB], 0x858}, 0x1, 0x0, 0x0, 0x4000}, 0x44000) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"/327, @ANYRES16=r12, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r14, @ANYBLOB="2f003300d0800000ffffffffffff08021100000050505050505000000000000000042500000000760600000000000000"], 0x4c}}, 0x0) [ 1325.614285] FAULT_INJECTION: forcing a failure. [ 1325.614285] name failslab, interval 1, probability 0, space 0, times 0 [ 1325.616934] CPU: 0 PID: 9195 Comm: syz-executor.1 Not tainted 5.17.0-next-20220401 #1 [ 1325.618541] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1325.620864] Call Trace: [ 1325.621389] [ 1325.621847] dump_stack_lvl+0x8b/0xb3 [ 1325.622692] should_fail.cold+0x5/0xa [ 1325.623552] ? create_object.isra.0+0x3a/0xa20 [ 1325.624508] should_failslab+0x5/0x10 [ 1325.625305] kmem_cache_alloc+0x5b/0x480 [ 1325.626165] create_object.isra.0+0x3a/0xa20 [ 1325.627080] ? kasan_unpoison+0x23/0x50 [ 1325.627940] kmem_cache_alloc_trace+0x22e/0x3c0 [ 1325.628929] alloc_workqueue_attrs+0x38/0x80 [ 1325.629874] alloc_workqueue+0x939/0xeb0 [ 1325.630733] ? do_raw_spin_unlock+0x4f/0x210 [ 1325.631628] ? _raw_spin_unlock+0x24/0x40 09:39:16 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4000000000003, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="601c6d6b646f737dd8a02b00080101100440002000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000a940)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="280000001e0001a6d745d3230f5843ff070000b4b5"], 0x28}], 0x1}, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xfdde) [ 1325.632499] ? bd_prepare_to_claim+0x164/0x300 [ 1325.633543] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 1325.634596] ? __fget_files+0x287/0x470 [ 1325.635434] ? loop_configure+0x625/0x1940 [ 1325.636337] loop_configure+0x6e6/0x1940 [ 1325.637006] loop0: detected capacity change from 0 to 40 [ 1325.637196] ? __sanitizer_cov_trace_cmp2+0x22/0x80 [ 1325.638863] lo_ioctl+0x782/0x1850 [ 1325.639611] ? __x64_sys_openat+0x13f/0x1f0 [ 1325.640542] ? loop_set_status_old+0x1b0/0x1b0 [ 1325.641493] ? avc_ss_reset+0x180/0x180 [ 1325.642367] ? __lock_acquire+0xbac/0x6120 [ 1325.643358] ? loop_set_status_old+0x1b0/0x1b0 [ 1325.644350] blkdev_ioctl+0x356/0x7f0 [ 1325.645162] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 1325.646163] ? selinux_file_ioctl+0xb1/0x260 [ 1325.647087] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1325.648132] loop3: detected capacity change from 0 to 255 [ 1325.648210] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 1325.649767] __x64_sys_ioctl+0x196/0x210 [ 1325.650601] do_syscall_64+0x3b/0x90 [ 1325.651369] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1325.652470] RIP: 0033:0x7f72f8f588d7 [ 1325.653253] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1325.657098] RSP: 002b:00007f72f64cdf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1325.658658] RAX: ffffffffffffffda RBX: 00007f72f8fa2970 RCX: 00007f72f8f588d7 [ 1325.660206] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1325.661753] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1325.663225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1325.664790] R13: 0000000000000004 R14: 00000000200004f0 R15: 0000000000000002 [ 1325.666359] [ 1325.681574] loop1: detected capacity change from 0 to 64 [ 1325.688635] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 09:39:16 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x5) pwritev(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x8000000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) [ 1325.754750] loop4: detected capacity change from 0 to 264192 [ 1325.765918] loop2: detected capacity change from 0 to 255 [ 1325.770867] kworker/u4:11: attempt to access beyond end of device [ 1325.770867] loop0: rw=1, want=128, limit=40 [ 1325.773211] Buffer I/O error on dev loop0, logical block 31, lost async page write [ 1325.780306] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1325.787008] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1325.789582] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1325.863932] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 09:39:33 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}, {0x0, 0x0, 0x2400}], 0x0, &(0x7f0000000140)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)={{0x107, 0x2, 0xfe, 0x271, 0x93, 0x3, 0x3c5, 0x7}, "def981bed71bcde35d570b", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x62b) unlink(&(0x7f0000000140)='./file1\x00') 09:39:33 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x8000000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r0, r0, 0x0, 0xffffffff000) 09:39:33 executing program 5: io_setup(0x7, &(0x7f0000000000)=0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) io_submit(r0, 0x1, &(0x7f0000000300)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) io_cancel(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r2, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) sendfile(r2, r2, 0x0, 0xffffffff000) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000040)={0x0, @aes256, 0x0, @desc4}) 09:39:33 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000040)='./file1\x00', 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) 09:39:33 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000010000)="eb58906d6b66732e66617400021e20000400000004f8", 0x16}, {0x0, 0x0, 0x4000}], 0x100c000, &(0x7f0000000040)) (fail_nth: 27) 09:39:33 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x50}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r3, 0x4, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xe, 0x34, @random="4f2d726b883388838365"}, @key_params=[@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}], @NL80211_ATTR_MAC={0xa}, @key_params=[@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY={0x1c, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_SEQ={0xb, 0x4, "909b67389e7608"}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]]}, 0x68}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="a8da6291b70fdb3897292efcb62f3b8d55b75239cada74799bc99705adef20dd75446a4ae95679dbb44eece9180173910a38a74b1b6ebd438d16b138956d1b546afddabb8e6edb3c72420390f48150505d957cb4d7672013b202bf53821f38679eeed34d6afac51b479a7b672c209d4ec7ef3e8555f8f749cab3e8357e49f853de7cadd560fe04001131bdc480e02bbccab3957bc32d7da64bed069f9a26db88732669cdc0b90b877987557ff423ff27be50f1c1ba759625ca8f9cb6b17840bd27f6", @ANYRES32=0x0, @ANYBLOB="2f003300d0800000ffffffffffff08021100000050585050505000000000000000042503000000760600000000000000"], 0x4c}}, 0x0) 09:39:33 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @remote, @broadcast}}}], 0x20}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @remote, @broadcast}}}], 0x20}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000700)={'ip6gre0\x00', &(0x7f0000000680)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x7, 0x7fffffff, 0xb, @dev={0xfe, 0x80, '\x00', 0x3d}, @loopback, 0x1, 0x0, 0x6, 0x8}}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000000840)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000200)={{{@in=@multicast1, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@private2}}, &(0x7f0000001b80)=0xe8) getsockname$packet(0xffffffffffffffff, &(0x7f0000001bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001c00)=0x14) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) sendmsg$inet(r9, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @remote, @broadcast}}}], 0x20}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000002500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000024c0)={&(0x7f0000000880)=ANY=[@ANYBLOB='X\b\x00\x00', @ANYRES16=0x0, @ANYBLOB="2e0327bd7000fcdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="f801028038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400030000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="f4000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000500000008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000008000100", @ANYRES32=0x0, @ANYBLOB="e800028038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400040200003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400070000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="700102803c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000000c00040003007f09060000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r1, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="6c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000003c0004000500291f080000000100003f000000009fb101b30588000000000503ff0f000005006405ff03000000002a07f9ffffff0300bf090000ffff08000100", @ANYRES32=0x0, @ANYBLOB="4400028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r5, @ANYBLOB="080007000000000008000100f2b8bbbd69e4728363b1689d8a33fa802cbbc2cfcecde212ea9f8e3fb221af155ddd5c7322995c8361728cc6367f708aeb1431bd27b991d26812c69bf14624a6e6b94c41cb92318bb2d84bfd95a7ea381da8124ef0275e7840b15b03b615ae2648e6212b1b3392f7aa33fedd40e03062e786ba24d43bc2dfd2a0f29d4be50ed8e5d0450a5e1f10b28bc853b3030031330f1c38", @ANYRES32=r6, @ANYBLOB="6c01028044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b7570000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000500000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004001f0000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="c000028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400ba0a000008000700000000003c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400ff7f000008000600", @ANYRES32=0x0, @ANYBLOB], 0x858}, 0x1, 0x0, 0x0, 0x4000}, 0x44000) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"/327, @ANYRES16=r12, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r14, @ANYBLOB="2f003300d0800000ffffffffffff08021100000050505050505000000000000000042500000000760600000000000000"], 0x4c}}, 0x0) 09:39:33 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x5) pwritev(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x8000000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) [ 1343.260441] loop4: detected capacity change from 0 to 36 [ 1343.269913] loop0: detected capacity change from 0 to 40 [ 1343.283024] loop3: detected capacity change from 0 to 255 [ 1343.288498] loop2: detected capacity change from 0 to 255 [ 1343.299791] FAULT_INJECTION: forcing a failure. [ 1343.299791] name failslab, interval 1, probability 0, space 0, times 0 [ 1343.302119] CPU: 1 PID: 9228 Comm: syz-executor.1 Not tainted 5.17.0-next-20220401 #1 [ 1343.303674] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1343.305928] Call Trace: [ 1343.306432] [ 1343.306873] dump_stack_lvl+0x8b/0xb3 [ 1343.307652] should_fail.cold+0x5/0xa [ 1343.308427] should_failslab+0x5/0x10 [ 1343.309181] __kmalloc_track_caller+0x79/0x430 [ 1343.310091] ? kasprintf+0xbb/0xf0 [ 1343.310803] kvasprintf+0xb5/0x150 [ 1343.311511] ? bust_spinlocks+0xe0/0xe0 [ 1343.312326] ? queued_spin_lock_slowpath+0xcc/0x930 [ 1343.313311] ? osq_unlock+0x1d0/0x1d0 [ 1343.314057] ? preempt_count_add+0x74/0x140 [ 1343.314905] ? __is_module_percpu_address+0x237/0x300 [ 1343.315974] kasprintf+0xbb/0xf0 [ 1343.316673] ? kvasprintf_const+0x190/0x190 [ 1343.317529] ? save_trace+0xd00/0xd00 [ 1343.318283] ? lockdep_init_map_type+0x21a/0x7e0 [ 1343.319212] alloc_workqueue+0x408/0xeb0 [ 1343.320007] ? do_raw_spin_unlock+0x4f/0x210 [ 1343.320862] ? _raw_spin_unlock+0x24/0x40 [ 1343.321682] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 1343.322670] ? __fget_files+0x287/0x470 [ 1343.323455] ? loop_configure+0x625/0x1940 [ 1343.324294] loop_configure+0x6e6/0x1940 [ 1343.325090] ? __sanitizer_cov_trace_cmp2+0x22/0x80 [ 1343.326069] lo_ioctl+0x782/0x1850 [ 1343.326761] ? __x64_sys_openat+0x13f/0x1f0 [ 1343.327608] ? loop_set_status_old+0x1b0/0x1b0 [ 1343.328505] ? avc_ss_reset+0x180/0x180 [ 1343.329301] ? __lock_acquire+0xbac/0x6120 [ 1343.330205] ? loop_set_status_old+0x1b0/0x1b0 [ 1343.331096] blkdev_ioctl+0x356/0x7f0 [ 1343.331840] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 1343.332773] ? selinux_file_ioctl+0xb1/0x260 [ 1343.333644] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1343.334735] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 1343.335696] __x64_sys_ioctl+0x196/0x210 [ 1343.336539] do_syscall_64+0x3b/0x90 [ 1343.337280] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1343.338289] RIP: 0033:0x7f72f8f588d7 [ 1343.339008] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1343.342580] RSP: 002b:00007f72f64cdf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1343.344064] RAX: ffffffffffffffda RBX: 00007f72f8fa2970 RCX: 00007f72f8f588d7 [ 1343.345474] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1343.346857] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1343.348251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1343.349622] R13: 0000000000000004 R14: 00000000200004f0 R15: 0000000000000002 [ 1343.351015] [ 1343.352721] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1343.369402] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 09:39:33 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x4c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @broadcast}}, @channel_switch={0x0, 0x4, {{}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)={0xb84, r6, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x2, 0x16}}}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @ctrl_frame=@ba={{}, {0x9}, @broadcast, @device_a, @multi={{0x1, 0x1, 0x1, 0x0, 0x3}, [{0x0, 0x0, {0xe, 0xff}, "5cc82693d65f0bab"}, {0x0, 0x3, {0x4, 0x1}, "e1570c2732d7c7a5"}, {0x0, 0x8, {0x3, 0xcf}, "fce3f321f87c936a"}], {0x0, 0x5, {0x0, 0x1f}, "65bffd26f368fd98"}}}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x520, 0x33, @data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xf, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x8fe}, @device_a, @device_b, @random="2221bae4c0c4", {0x3, 0x1}}, {0x4, 0x1, 0x0, 0x0, 0xff}}, {@type01={{0x0, 0x2, 0x9, 0x0, 0x1, 0x0, 0x1}, {0x9}, @device_b, @initial, @initial, {0x0, 0xff}}, {0x6, 0x0, 0x2, 0x1, 0x7}}}, @random="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"}}, @NL80211_ATTR_FRAME={0x5d9, 0x33, @mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x5}, @broadcast, @device_a, @from_mac=@device_b, {0xf, 0x4}}, 0x1f, @random=0x200, 0x20, @void, @void, @val={0x3, 0x1, 0x3c}, @val={0x4, 0x6, {0x5, 0x4, 0x2, 0x9}}, @void, @val={0x2d, 0x1a, {0xc, 0x1, 0x3, 0x0, {0x9, 0x526, 0x0, 0x8, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x8, 0xfff, 0x1}}, @void, @val={0x71, 0x7, {0x0, 0x1, 0x0, 0x1, 0x0, 0x4}}, [{0xdd, 0xed, "556beff9b9628653053d2f55ef0684e96056eccc283a6572f57eb817e8d74b57fe51317c182091bf4a4b76d5f09045f754471f3de30f326b9b49c01fa70b05482d9536a77c29fa12e54bec547224e8131152ba6af612fbb7b670e58c4c612707fe9fd9e04ef71cf74628c7a8b56afe096ea63f17783bc7b96270ea5adb3e32a2aecbebd2a053eefb4c52a1f675c8be227ab6ea80b7ef559b325473bd024229bfcdeff3f2b58cfca9ea4e15b07e9b6667c6ff27bc34119906328c348206c6939e7d377ba35938541f1b4cb195cbd2a0304366c3abb345ed0671478f6e8744fb066cec8d7e32a19bb396d685e7ba"}, {0xdd, 0xce, "efc18d35a5fedfbad8102e14d139a4988cf0019c2044e661d913e82104a4c4a34b23d063d5c126bcd19473412e91535a56e150f7453dd1e305a1d88ecb1f00b59517c63cfdc29d5e94e9d2f6b9ecbdf3788d18c9f90e073447f7ae0ac88a6335a692f0b51beb391c5ec24d364d96777055b5c027a6d2f6b0b1052276f47085c81a4663f9b009949c42aa1a15d1f1c80f08c932c1d85ee5ffda8a2da36c6ccfb084370df6c4156fa63ca8d155b62efea5aeec852fda34e8f4b953b8f30220be7a7680331e201158ed5db4ca512626"}, {0xdd, 0xb3, "f00d9a4f0d71eda8c4206a7660fb686dfe9e9dc6f1da158de14d15aa8dd4d7dfe612f377dfc927437f4adc6c44ede0d8a26caf51f090085531500f1ae4fbb0a10eeb7ad96511340730de1dc8bbf10df4fe307bcacd442fd89e3ea02df86271def03e5120442f054339477c4fcc4afebfb0a28ad776ba086c820c91cd16d7010e5ee035f4504ae5b6fee60cfda0fab528cff90f715addcdbf6e9f970ec23ab9a1958ca917a13e3f598d183c3dd180d8c74181e8"}, {0xdd, 0xb5, "ec2e6a1d0a4d40c884194bc37c1942c9dee7b9800aa516e91d56280715d00bc980489aaad4af72b5fd46bbdf891fbe2855f128fd447a9e4210f769577c41d5eb9f659ee004542a28bd194f6182153d089f16255d80bc2530dbf5380786d516c7d35e921ffca8a903aa3458d03ef0b4ed27672fd8c2de69b04f8ec966c9e2cc7afb7cb63c4d1e9604bbd0cb94223b4e9a7a566ae1ceab814cc1afc8ca208b736b44c03cb2e5e35c596f4470a28ab41eed607c8a3409"}, {0xdd, 0x24, "a5d8a29bf1970d4aa04cd2a7cfc04ad3b7ea4d2ed42c732951dff16ac71f0344c6c39b94"}, {0xdd, 0xd9, "0a22f6e512b846a23986a62a6c1a5357bcb6e1a88fa33cd36586dd71f9626a3e5e10d4cdcf47ce902cd6b91838c72632ef4b8d07f9e82a4df55d9ce088c03eb6a05dc8baaf3af7630a61aa6ff20024d83f1178f6a5725f12a85b903670fb7559db86173e5e4adaf10f97c5b890fd4f38859da58714d475d9f342037c49128caad94b4a313a2e71843438a427f9e0e4ba15a15e8b368b68785a88e1424f9454605b29cf39848ef0dc0e5f3c14f940fecbc1344e34aa3f6ddd107a3c03eab534943bf72f21bb08f517cf45b2bd62192efc611308e1a62945dec5"}, {0xdd, 0xc8, "0d697b8e347a41c99fde9747a5088bea9513d160358e1f97af1413ae2bab5957fd80c5bd7b7e822f0184ab1ab3e5d5af166dea45081253d502db7338af2e85d6a536e7988795541f48bc9c9e4444761bc319a69943a2491b491f14188fec865ca2103de03b5bcd9a98c7fe014f04bb7c157d10899c575caec7addaf1183331a37e635b01a6ff80178db4349acb4af01cdf889cb4993514307b9b1c5acad6d947a0f10a9525b408c29262153d5e0c8ec6f963555589c105ca3be0455aa18b61ac3dcaebae3b5e3c08"}, {0xdd, 0x74, "1d76a043c1cb6e537cb64c51cc7dff2c33ed06c994903b16ea6b26d32f39fe6a959b29ca9d8600f23c34521c8da1772e26f2c47eb943382ff5d0bfa627dd4ed24989f9203e21fe1d68b69baa198c7d48489733d2f1b478e04c5bb2455ce4ceaa1869fb77ee7939ce5f38d2e864feac05f8dc63ae"}, {0xdd, 0x13, "e0568ac94e05bae637cda7f49e27605955d5f8"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0xb84}, 0x1, 0x0, 0x0, 0x40080}, 0x40880) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x38, r2, 0x1, 0x70bd2d, 0x25dfdc03, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x20001, 0x23}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xba6}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x298}]}, 0x38}, 0x1, 0x0, 0x0, 0x408c1}, 0x800) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x4c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @action={@with_ht={{{}, {}, @broadcast}}, @channel_switch={0x0, 0x4, {{}, @void, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) [ 1343.479448] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1343.482663] loop1: detected capacity change from 0 to 64 [ 1343.491796] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 09:39:33 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) fsetxattr$security_selinux(r1, &(0x7f0000000040), &(0x7f0000000080)='/usr/sbin/cupsd\x00', 0x10, 0x3) socketpair(0x2, 0xa, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$devlink(0x0, r0) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040}, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) 09:39:33 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, 0x0, 0x0, 0x8000000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) 09:39:33 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x5) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)}], 0x1, 0x8000000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) [ 1343.582326] loop3: detected capacity change from 0 to 255 09:39:33 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, 0x0, 0x220) truncate(&(0x7f0000000040)='./file1\x00', 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) 09:39:34 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000010000)="eb58906d6b66732e66617400021e20000400000004f8", 0x16}, {0x0, 0x0, 0x4000}], 0x100c000, &(0x7f0000000040)) (fail_nth: 28) [ 1343.624211] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1343.628522] loop2: detected capacity change from 0 to 255 [ 1343.646763] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1343.661724] loop0: detected capacity change from 0 to 40 [ 1343.687043] FAULT_INJECTION: forcing a failure. [ 1343.687043] name failslab, interval 1, probability 0, space 0, times 0 [ 1343.688971] CPU: 1 PID: 9249 Comm: syz-executor.1 Not tainted 5.17.0-next-20220401 #1 09:39:34 executing program 7: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b7000000000000b7000000000000000000000000000000000000000000000000000000000000000001000001010000010508", 0x82, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000011300)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) renameat2(r1, &(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000180)='./file0\x00', 0x7) getdents64(r0, &(0x7f0000000040)=""/187, 0xbb) [ 1343.690224] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1343.692173] Call Trace: [ 1343.692584] [ 1343.692936] dump_stack_lvl+0x8b/0xb3 [ 1343.693565] should_fail.cold+0x5/0xa [ 1343.694187] ? create_object.isra.0+0x3a/0xa20 [ 1343.694911] should_failslab+0x5/0x10 [ 1343.695514] kmem_cache_alloc+0x5b/0x480 [ 1343.696198] create_object.isra.0+0x3a/0xa20 [ 1343.696899] ? kasan_unpoison+0x23/0x50 [ 1343.697576] __kmalloc_track_caller+0x25e/0x430 [ 1343.698320] ? kasprintf+0xbb/0xf0 [ 1343.698926] kvasprintf+0xb5/0x150 [ 1343.699499] ? bust_spinlocks+0xe0/0xe0 [ 1343.700199] ? preempt_count_add+0x74/0x140 [ 1343.700916] ? __is_module_percpu_address+0x237/0x300 [ 1343.701791] kasprintf+0xbb/0xf0 [ 1343.702353] ? kvasprintf_const+0x190/0x190 [ 1343.703060] ? save_trace+0xd00/0xd00 [ 1343.703707] ? lockdep_init_map_type+0x21a/0x7e0 [ 1343.704504] alloc_workqueue+0x408/0xeb0 [ 1343.705199] ? do_raw_spin_unlock+0x4f/0x210 09:39:34 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, 0x0, 0x0, 0x8000000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) [ 1343.705890] ? _raw_spin_unlock+0x24/0x40 [ 1343.706691] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 1343.707519] ? __fget_files+0x287/0x470 [ 1343.708171] ? loop_configure+0x625/0x1940 [ 1343.708851] loop_configure+0x6e6/0x1940 [ 1343.709492] ? __sanitizer_cov_trace_cmp2+0x22/0x80 [ 1343.710341] lo_ioctl+0x782/0x1850 [ 1343.710909] ? __x64_sys_openat+0x13f/0x1f0 [ 1343.711624] ? loop_set_status_old+0x1b0/0x1b0 [ 1343.712364] ? avc_ss_reset+0x180/0x180 [ 1343.713021] ? __lock_acquire+0xbac/0x6120 [ 1343.713774] ? loop_set_status_old+0x1b0/0x1b0 [ 1343.714546] blkdev_ioctl+0x356/0x7f0 [ 1343.715180] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 1343.715987] ? selinux_file_ioctl+0xb1/0x260 [ 1343.716747] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1343.717679] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 1343.718474] __x64_sys_ioctl+0x196/0x210 [ 1343.719169] do_syscall_64+0x3b/0x90 [ 1343.719773] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1343.720657] RIP: 0033:0x7f72f8f588d7 [ 1343.721264] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1343.724395] RSP: 002b:00007f72f64cdf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1343.725608] RAX: ffffffffffffffda RBX: 00007f72f8fa2970 RCX: 00007f72f8f588d7 [ 1343.726793] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1343.727950] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1343.729150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1343.730296] R13: 0000000000000004 R14: 00000000200004f0 R15: 0000000000000002 [ 1343.731465] [ 1343.732293] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1343.734955] SELinux: Context /usr/sbin/cupsd is not valid (left unmapped). [ 1343.741449] loop1: detected capacity change from 0 to 64 [ 1343.761846] loop7: detected capacity change from 0 to 136 [ 1343.775828] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1343.778657] ISOFS: Bad logical zone size 2053 [ 1343.836413] loop3: detected capacity change from 0 to 255 [ 1343.836851] kworker/u4:10: attempt to access beyond end of device [ 1343.836851] loop0: rw=1, want=128, limit=40 [ 1343.839371] Buffer I/O error on dev loop0, logical block 31, lost async page write [ 1343.843268] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1343.946757] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1344.598509] loop7: detected capacity change from 0 to 136 [ 1344.600905] ISOFS: Bad logical zone size 2053 09:39:51 executing program 7: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b7000000000000b7000000000000000000000000000000000000000000000000000000000000000001000001010000010508", 0x82, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000011300)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) renameat2(r1, &(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000180)='./file0\x00', 0x7) getdents64(r0, &(0x7f0000000040)=""/187, 0xbb) 09:39:51 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x5) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)}], 0x1, 0x8000000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) 09:39:51 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400204000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) getdents(r0, &(0x7f0000006180)=""/112, 0x70) getdents(r0, &(0x7f0000000040)=""/110, 0x6e) getdents(r0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x94, 0x0, &(0x7f0000001240)=[@request_death={0x400c630e, 0x1}, @free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x1, 0x3}, @fda={0x66646185, 0x2, 0x1, 0x8}}, &(0x7f00000000c0)={0x0, 0x18, 0x40}}, 0x40}, @clear_death={0x400c630f, 0x2}, @increfs_done={0x40106308, 0x1}, @decrefs={0x40046307, 0x1}], 0xf1, 0x0, &(0x7f0000001300)="aef7638ab17ff371cc8f024d6f396b2bd526d72feb2b6c9627950dda8b27d1b71dc5f287e12b61e603fbabecf8785b012ed9ba8d15c412f4534628d0a36195525c93b3c98b920cff4ef07b935419c9ace8f19808e5ce0aa06c3e47f983085c36e9cb905c40a06a3523fa97435745c6de76e04b7418a6861726796ec96bfb32d206b39aab8a6dc60af1b95bc173a28283cded71a4ce4730f75769bee93499363b804b02f6582b5f1031366e55ffcbb8f60e72fbe6b443a8f7a135bbc8daff6747f3183461cab4688ea49045440ec434e523b5b7f7b250074316d1ca88a38ae8c04d996bf630cf6cbfa020977aa3768b68fb"}) 09:39:51 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000010000)="eb58906d6b66732e66617400021e20000400000004f8", 0x16}, {0x0, 0x0, 0x4000}], 0x100c000, &(0x7f0000000040)) (fail_nth: 29) 09:39:51 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(0x0, 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) 09:39:51 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, 0x0, 0x0, 0x8000000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) 09:39:51 executing program 5: r0 = mq_open(&(0x7f0000000040)='$\\\x00', 0x0, 0x0, 0x0) clone3(&(0x7f0000001500)={0x142100100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff], 0x1}, 0x58) write(r0, &(0x7f0000000100)="a88ea39d57a172724855cc9e6c458d4d22f63e1caa2b98c474cca0a393ecc09be24305aa4f7ca195f260ba1297562344795d6384d4bdcdc8f86e3e6ec0581537285ad40b3f90914f2271d81f5e285dae24ad1578c4a956b70d8debbedd5365ab05b2c87b5fb70e245fb1978a9d8863f824db7db580ecdd4309f221601d2bd4fac8ad0f6c4aa08c6cb7fb5964440fe7d223ea154fee04f794d753ad5406e4a440ce0cc65d296dcdeaf414869f9143aaa371ba25fd6ca990b9886bdf2363e5f5a5c5f74051889f05c5b2bda058c804804f07da2bc8acfc9f1aff99a8", 0xdb) 09:39:51 executing program 4: sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98000000", @ANYRES16=0x0, @ANYBLOB="04002bbd7000ffdbdf25080000000c00038008000100020000000800040002000000400002800800090005000000080004000800000006000e004e22000006000e004e2200001400010064010100000000000000000000000000060002004e23000008000500effb00002800018014000300fe8000000000000000000000000000bb060004004e215f000008000800dae500"], 0x98}, 0x1, 0x0, 0x0, 0x4008004}, 0x48084) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001680), 0x0, &(0x7f0000001780)={[{@size={'size', 0x3d, [0x38, 0x0]}}]}) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket(0x8, 0x7a95778da25338fa, 0x1000) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000007c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f0000000440)={0x74, 0x4, 0x8, 0x0, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xcc6}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1f}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfffff30f}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x928}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1f}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8906}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000080}, 0x2400c840) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @remote, @broadcast}}}], 0x20}, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @remote, @broadcast}}}], 0x20}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'erspan0\x00', &(0x7f0000000240)={'gretap0\x00', 0x0, 0x0, 0x8, 0x718, 0x10001, {{0x29, 0x4, 0x0, 0x1a, 0xa4, 0x68, 0x0, 0x80, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}, @remote, {[@ssrr={0x89, 0x1b, 0x83, [@private=0xa010100, @private=0xa010101, @private=0xa010100, @local, @rand_addr=0x64010101, @multicast2]}, @ssrr={0x89, 0x7, 0x1e, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x10, 0x2a, 0x0, 0xc, [0x5, 0x6, 0x5]}, @timestamp_prespec={0x44, 0x1c, 0x82, 0x3, 0x2, [{@rand_addr=0x64010100, 0xce0d}, {@loopback, 0x58c}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3ff}]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0xf, 0xd9, [@empty, @empty, @empty]}, @ssrr={0x89, 0xb, 0xd0, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop, @ssrr={0x89, 0x17, 0x90, [@dev={0xac, 0x14, 0x14, 0xd}, @private=0xa010100, @multicast1, @private=0xa010100, @multicast1]}, @generic={0x44, 0x9, "ea6277b6b274b3"}]}}}}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x0, 0x7f, 0x20, @private1, @mcast2, 0x40, 0x10, 0xfffffffd, 0x7}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x118, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x400c044}, 0x4000040) [ 1361.303445] loop0: detected capacity change from 0 to 40 [ 1361.308710] FAULT_INJECTION: forcing a failure. [ 1361.308710] name failslab, interval 1, probability 0, space 0, times 0 [ 1361.311693] CPU: 1 PID: 9275 Comm: syz-executor.1 Not tainted 5.17.0-next-20220401 #1 [ 1361.313269] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1361.315495] Call Trace: [ 1361.315993] [ 1361.316442] dump_stack_lvl+0x8b/0xb3 [ 1361.317212] should_fail.cold+0x5/0xa [ 1361.317972] ? apply_wqattrs_prepare+0xab/0x880 [ 1361.318899] should_failslab+0x5/0x10 [ 1361.319654] __kmalloc+0x72/0x440 [ 1361.320349] ? lock_is_held_type+0xd7/0x130 [ 1361.321203] apply_wqattrs_prepare+0xab/0x880 [ 1361.322131] apply_workqueue_attrs_locked+0xc1/0x140 [ 1361.323139] alloc_workqueue+0xb1a/0xeb0 [ 1361.323948] ? do_raw_spin_unlock+0x4f/0x210 [ 1361.324839] ? _raw_spin_unlock+0x24/0x40 [ 1361.325673] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 1361.326674] ? __fget_files+0x287/0x470 [ 1361.327472] ? loop_configure+0x625/0x1940 [ 1361.328321] loop_configure+0x6e6/0x1940 [ 1361.329135] ? __sanitizer_cov_trace_cmp2+0x22/0x80 [ 1361.330142] lo_ioctl+0x782/0x1850 [ 1361.330851] ? __x64_sys_openat+0x13f/0x1f0 [ 1361.331716] ? loop_set_status_old+0x1b0/0x1b0 [ 1361.332632] ? avc_ss_reset+0x180/0x180 [ 1361.333448] ? __lock_acquire+0xbac/0x6120 [ 1361.334372] ? loop_set_status_old+0x1b0/0x1b0 [ 1361.335279] blkdev_ioctl+0x356/0x7f0 [ 1361.336038] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 1361.336984] ? selinux_file_ioctl+0xb1/0x260 [ 1361.337857] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1361.338939] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 1361.339878] __x64_sys_ioctl+0x196/0x210 [ 1361.340702] do_syscall_64+0x3b/0x90 [ 1361.341436] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1361.342457] RIP: 0033:0x7f72f8f588d7 [ 1361.343205] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1361.346814] RSP: 002b:00007f72f64cdf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1361.348326] RAX: ffffffffffffffda RBX: 00007f72f8fa2970 RCX: 00007f72f8f588d7 [ 1361.349720] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1361.351116] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1361.352517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1361.353911] R13: 0000000000000004 R14: 00000000200004f0 R15: 0000000000000002 [ 1361.355335] [ 1361.404435] kworker/u4:1: attempt to access beyond end of device [ 1361.404435] loop0: rw=1, want=128, limit=40 [ 1361.406129] Buffer I/O error on dev loop0, logical block 31, lost async page write 09:39:51 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(0x0, 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) [ 1361.427812] loop3: detected capacity change from 0 to 255 [ 1361.428316] loop7: detected capacity change from 0 to 136 [ 1361.430664] loop6: detected capacity change from 0 to 256 [ 1361.432697] loop2: detected capacity change from 0 to 255 [ 1361.434602] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1361.445443] ISOFS: Bad logical zone size 2053 [ 1361.447635] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1361.453083] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1361.498045] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 09:39:51 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f00000001c0), 0x0, 0x8000000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) 09:39:51 executing program 4: sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98000000", @ANYRES16=0x0, @ANYBLOB="04002bbd7000ffdbdf25080000000c00038008000100020000000800040002000000400002800800090005000000080004000800000006000e004e22000006000e004e2200001400010064010100000000000000000000000000060002004e23000008000500effb00002800018014000300fe8000000000000000000000000000bb060004004e215f000008000800dae500"], 0x98}, 0x1, 0x0, 0x0, 0x4008004}, 0x48084) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001680), 0x0, &(0x7f0000001780)={[{@size={'size', 0x3d, [0x38, 0x0]}}]}) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket(0x8, 0x7a95778da25338fa, 0x1000) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000007c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f0000000440)={0x74, 0x4, 0x8, 0x0, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xcc6}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1f}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfffff30f}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x928}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1f}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8906}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000080}, 0x2400c840) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @remote, @broadcast}}}], 0x20}, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @remote, @broadcast}}}], 0x20}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'erspan0\x00', &(0x7f0000000240)={'gretap0\x00', 0x0, 0x0, 0x8, 0x718, 0x10001, {{0x29, 0x4, 0x0, 0x1a, 0xa4, 0x68, 0x0, 0x80, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}, @remote, {[@ssrr={0x89, 0x1b, 0x83, [@private=0xa010100, @private=0xa010101, @private=0xa010100, @local, @rand_addr=0x64010101, @multicast2]}, @ssrr={0x89, 0x7, 0x1e, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x10, 0x2a, 0x0, 0xc, [0x5, 0x6, 0x5]}, @timestamp_prespec={0x44, 0x1c, 0x82, 0x3, 0x2, [{@rand_addr=0x64010100, 0xce0d}, {@loopback, 0x58c}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3ff}]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0xf, 0xd9, [@empty, @empty, @empty]}, @ssrr={0x89, 0xb, 0xd0, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop, @ssrr={0x89, 0x17, 0x90, [@dev={0xac, 0x14, 0x14, 0xd}, @private=0xa010100, @multicast1, @private=0xa010100, @multicast1]}, @generic={0x44, 0x9, "ea6277b6b274b3"}]}}}}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x0, 0x7f, 0x20, @private1, @mcast2, 0x40, 0x10, 0xfffffffd, 0x7}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x118, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x400c044}, 0x4000040) [ 1361.548488] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 09:39:51 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x5) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)}], 0x1, 0x8000000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) [ 1361.565080] loop3: detected capacity change from 0 to 255 09:39:51 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000010000)="eb58906d6b66732e66617400021e20000400000004f8", 0x16}, {0x0, 0x0, 0x4000}], 0x100c000, &(0x7f0000000040)) (fail_nth: 30) [ 1361.618786] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 09:39:52 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000680)="56623ebe45ec43d4f247c37e3e01a6a623973272f887ebd099d389987f2b23704b3cbb73770fadf1c1c23077ec040d5e278e243e1738ffc4b38765539d4f2e22861560ec7e2abf6ecd875b2e334be7048771b4cdb0a4bede8c77237ccdc17b93550ab9affdd0089a66d932d40a5784af34b043149c7ead58dd9da7305783695beccb5d64443fa90fec82d62166c0a53e29b286efb1e5ce7820e3b85814f24df79a1de830544ab153c0bd228083dfdaa9e713d46271337b31ff440287761e439948c18129d85911385946c22e56f80db029855a63089204361ada100a4a0c2c4a12fd6307b3bce07dcc5a946101cb741b972a463e1f9dd692ed89316fc1eb57820b6849d4fa26ad8e1b26f6164ffa5508934aa1d5ebd09e27d63e5cff888277570e9df32102eaa1ffbe1672dff80b3c077ac0e0e23c1f9fd9d0edd2b962b524493ac2232130abfe07b8c4f1a06c8bf8908553170eab80cb42558a44407dc240260e46d8209fd0f87175dcebb56913792a57273654682279c8b7fb4e3e190335a50bea140beae36b890adc309f8db4a19acab0396e0a1c658435d0392156ef09c881a72ce3e6b39133c9fe3b7139a2c40675224d28fad2c1404d18b8a9dffc019e30ae9ab95ba73aeed550a8ef7a909bb2573cfc863cb262d0b3d909e3571638e2ebd93ed8a274a103b902a2078ba35741fc144757e2f71a8738fd25fd0c116556a5aa7fcdd352054bc9a9593f12543197870fd1c9d53dbf279f07c5f433f029fc05944a2cd9063660f79f32cf82768e8ddab6f3571bfc4b9f87bc05c79a6ee532179ab24cd2b27d26e27dc2bc54308e933bc5ee1ec11357ee020373b93d88ab4ef3c4125dfbee55be8a18098241246963be41b8d1a88ba19144ff756be18d84c467139bad6315133a8be7723a4326615c3330292c44eaa71f107030ceefbcd627af2b9cb899c98b330c91ff6d6d3df4913a3575dc88a5921eaaec7b0833b53619112fd24af9026d271a80ecc30164ac364f74c3363708ff178b7d800072e3eb877db5a040c5e5c24f528afb70a3fc55629572c8efbe70ecc2e6715ab6fad89af25fe4449ca2934adb445a7ea9dce6bb4c697a0df1014f830590cc30cf5e56ed7a590938aa22e676196d62351bec40a152815ff752bede3d513a08aa7ddcafc1a08a3ebda614fb7918f91b1e06930e897c5c5ed9d1e9a9446baf14ed83a7acb39afb859ae8446ea27215f919c3b493913e999499fe2e9a162bfde6189204b87b7701b263bbbc498a60a8b7de6d761d94fe8547f6d8cd02eee4285da1d4f0686f9c1f56525ad842f160e301109c5ae74d5b7bc73a4839640ce1bd50d17d2fae6403d7135614ad801607fb95a2e51bacdf8d4147833a6d72cb242268bf05c63609b8206480ad1aa3910af4bc1c0eb4137eb638b723ab5d2a6af81f8cac5160adc5d709c155aea350a3b5c022e39458bede1015ad0d3f6f63d498f3fc045ea6dd85ebfb043368983b3d595538bcaa60f90845b6558f745d85b72af376458c3225238c2bbf3899c660e2f753dd10352033f1bdb5d296a09e2f83b1161f182a17f8642f27dc2bac23eff40e150954ffd8d9433aaacd4f6f2604954179dbee4db3dd8f96d2e3c1730464fa0ecb2fb69b089245562df50a7eb708e9111cad7f78dc5b4fac993793c98a4a29d161ea19f6057ffbab620d75136e2f30f46457ba4e250536401f8e2535378e2396fac7d213a19911224590e5fe9f4e125b07700184729f7147a1ddf5e65081ad560c95a3032b28933de94a90c497c1c2a27a258b0cca8b3b2ee1d570bc75e95d76891ff9198f543fff0c7e9edd54356e4ea23b2a17498ed8f03fe7f70641dc8bee18dfc005c25214d560be3a6b719853c9d6d6392e8e4b8185fa5796545a20d40ab5eee7e9898888b9fef4aff709b322c969ad930b0dbb2650a1fa6f3833e90ac70c94c9f511d344ceaa34cd2dfca6f484db45d9b255c6539c43e27872569d1d02a3aef7db8e542f10f6c936805141b5351775ac924aca33d094eb9b1e7a3021e32d3bb4128766d8ac0a72087d72cfb6d8e54e6dc1a2b819f730fdf6b98210a146ed7e1a6ee1b644cfd5b88c53cf4db9207d1259d7cc1d1013d5a84ba14829afbb13e5de77a1069ef68e97b5c2e93e65d5b3ad6a946b9ac4b2933ba568068822a6a48bc1e6f417e7b6f51b1da92181ca1bc65a9d29c7f458171363934b5e6a3d6ae4442046c3291c1a37c32264780c01ae57d7e4863bcb0b3539e06c540e03a24886f3e4ee410c01ba3c1d02f37fc418f496613f47974e5f917a54a35347ad69e3eb4d42ebcaeccb3bfdae39de9c0881fdc410f26fd396be3fd2dd9d656939ff4abd97f039ac5e0b0af1d357d5f70dc71079e93b2a01b2e15bd02e62fde13439081227aacdc63b87e9a32a8b3a4efde237024666cc0aeb95ff88361f2b6d66decbe2394e469ae5f3c3c47f6c1dbd17521b21dccbce4b704c16b3972b90b8ca5b855033ad626a11743e08df2703a9313bcc68925ebad3f1b3382d2260400d120fc6bfcda46f13674627c0084f1398377d87fe5ed9e6eb2a5806441a5154374417c4e2996e3fc2d9179da7f862329a70c644dae5c893e63570bdf72daa72e626630e44fbdb10aece08f47fcaa40316d1a51d6d11ffaf797c3be28facd977dddc3ba114907bcf9cd64e6c101831f789b6fb0b1f15648b79a2dc0b23f5b47bbb28f799dd8416b4c2e76c1ffe0d490ffdbc03d621f6c67e842ee305628728b2f5cc177dfe60d2c4b2896bdf4f80266cb004fda2b6a533b888ec8c28e31363bf2358c5eecbcb3b779f4fb9403455631bd262eab911bbeca40ced8137a63cf1c3badb1af5ca19b75a237b8143e0ea177dd26d0072fafcc5f72c9de2082a", 0x801, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) sendfile(r1, r1, 0x0, 0x100000001) ioctl$TCXONC(r2, 0x5437, 0x0) memfd_create(&(0x7f00000000c0)='),+:\\[\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r3, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) sendfile(r3, r3, 0x0, 0xffffffff000) openat(r3, &(0x7f0000000000)='./file1\x00', 0x0, 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) 09:39:52 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(0x0, 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) 09:39:52 executing program 5: r0 = mq_open(&(0x7f0000000040)='$\\\x00', 0x0, 0x0, 0x0) clone3(&(0x7f0000001500)={0x142100100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff], 0x1}, 0x58) write(r0, &(0x7f0000000100)="a88ea39d57a172724855cc9e6c458d4d22f63e1caa2b98c474cca0a393ecc09be24305aa4f7ca195f260ba1297562344795d6384d4bdcdc8f86e3e6ec0581537285ad40b3f90914f2271d81f5e285dae24ad1578c4a956b70d8debbedd5365ab05b2c87b5fb70e245fb1978a9d8863f824db7db580ecdd4309f221601d2bd4fac8ad0f6c4aa08c6cb7fb5964440fe7d223ea154fee04f794d753ad5406e4a440ce0cc65d296dcdeaf414869f9143aaa371ba25fd6ca990b9886bdf2363e5f5a5c5f74051889f05c5b2bda058c804804f07da2bc8acfc9f1aff99a8", 0xdb) [ 1361.675731] loop2: detected capacity change from 0 to 255 [ 1361.676928] FAULT_INJECTION: forcing a failure. [ 1361.676928] name failslab, interval 1, probability 0, space 0, times 0 [ 1361.678307] CPU: 0 PID: 9305 Comm: syz-executor.1 Not tainted 5.17.0-next-20220401 #1 [ 1361.679321] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1361.680525] Call Trace: [ 1361.680798] [ 1361.681031] dump_stack_lvl+0x8b/0xb3 [ 1361.681451] should_fail.cold+0x5/0xa [ 1361.681861] should_failslab+0x5/0x10 [ 1361.682266] __kmalloc_track_caller+0x79/0x430 [ 1361.682752] ? kasprintf+0xbb/0xf0 [ 1361.683135] kvasprintf+0xb5/0x150 [ 1361.683512] ? bust_spinlocks+0xe0/0xe0 [ 1361.683932] ? preempt_count_add+0x74/0x140 [ 1361.684407] ? __is_module_percpu_address+0x237/0x300 [ 1361.684959] kasprintf+0xbb/0xf0 [ 1361.685320] ? kvasprintf_const+0x190/0x190 [ 1361.685778] ? save_trace+0xd00/0xd00 [ 1361.686186] ? lockdep_init_map_type+0x21a/0x7e0 [ 1361.686689] alloc_workqueue+0x408/0xeb0 [ 1361.687118] ? do_raw_spin_unlock+0x4f/0x210 [ 1361.687582] ? _raw_spin_unlock+0x24/0x40 [ 1361.688018] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 1361.688552] ? __fget_files+0x287/0x470 [ 1361.688989] ? loop_configure+0x625/0x1940 [ 1361.689456] loop_configure+0x6e6/0x1940 [ 1361.689891] ? __sanitizer_cov_trace_cmp2+0x22/0x80 [ 1361.690440] lo_ioctl+0x782/0x1850 [ 1361.690824] ? __x64_sys_openat+0x13f/0x1f0 [ 1361.691297] ? loop_set_status_old+0x1b0/0x1b0 [ 1361.691791] ? avc_ss_reset+0x180/0x180 [ 1361.692222] ? __lock_acquire+0xbac/0x6120 [ 1361.692745] ? loop_set_status_old+0x1b0/0x1b0 [ 1361.693247] blkdev_ioctl+0x356/0x7f0 [ 1361.693660] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 1361.694182] ? selinux_file_ioctl+0xb1/0x260 [ 1361.694662] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1361.695266] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 1361.695786] __x64_sys_ioctl+0x196/0x210 [ 1361.696221] do_syscall_64+0x3b/0x90 [ 1361.696640] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1361.697195] RIP: 0033:0x7f72f8f588d7 [ 1361.697591] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1361.699556] RSP: 002b:00007f72f64cdf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1361.700387] RAX: ffffffffffffffda RBX: 00007f72f8fa2970 RCX: 00007f72f8f588d7 [ 1361.701165] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1361.701933] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1361.702702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1361.703470] R13: 0000000000000004 R14: 00000000200004f0 R15: 0000000000000002 [ 1361.704251] [ 1361.715395] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1361.730747] loop0: detected capacity change from 0 to 40 [ 1361.783712] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1361.805010] loop1: detected capacity change from 0 to 64 [ 1361.910521] kworker/u4:0: attempt to access beyond end of device [ 1361.910521] loop0: rw=1, want=128, limit=40 [ 1361.913176] Buffer I/O error on dev loop0, logical block 31, lost async page write [ 1361.917594] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 09:40:07 executing program 7: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29}], 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000003c0)="18419cc68448de3ae8f97ea6a46d823d4f19cecbf569a58b79851d91f3da031fecf4dfebf4ac3b13988a048b4e35761cb05a5d5b28e1ca6ceebae02cbbf7e894098749d5f99cb226f14f00b6034bfb02a7a5af409f531820bd319b9d7c3405022b550d32ad368fdbbddb8ed631d1dde9a4ed", 0xff10, r1) 09:40:07 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x5) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) 09:40:07 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f00000001c0), 0x0, 0x8000000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) 09:40:07 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x200000, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736616e0ca00088020000400000004f80000200040000300000000000000010000000000000002000000010006000000000000000000000000008000"/96, 0x60}, {&(0x7f0000010100)='RRaA\x00'/32, 0x20, 0x800}, {&(0x7f0000010200)="00000000727241610100000007000000000000000000000000000000000055aa", 0x20, 0x9e0}, {&(0x7f0000010300)="601c6d6b646f736616e0ca00088020000400000004f80000200040000300000000000000010000000000000002000000010006000000000000000000000000008000"/96, 0x60, 0x3000}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x10000}, {&(0x7f0000010500)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x10800}, {&(0x7f0000010600)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x11000}, {&(0x7f0000010700)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x11800}, {&(0x7f0000010800)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100061ec70325132510000ec70325103000000000041660069006c00650031000f00100000ffffffffffffffffffff0000ffffffff46494c4531202020202020200061ec70325132510000ec70325105000a00000041660069006c00650032000f00140000ffffffffffffffffffff0000ffffffff46494c4532202020202020200062ec70325132510000ec70325106002823000041660069006c0065002e000f00d263006f006c0064000000ffff0000ffffffff46494c457e312020434f4c200062ec70325132510000ec703251070064000000", 0x120, 0x12000}, {&(0x7f0000010a00)="2e20202020202020202020100061ec70325132510000ec7032510300000000002e2e202020202020202020100061ec70325132510000ec70325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200061ec70325132510000ec70325104001a040000", 0x80, 0x52000}, {&(0x7f0000010b00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x92000}, {&(0x7f0000011000)='syzkallers\x00'/32, 0x20, 0xd2000}, {&(0x7f0000011100)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x152000}], 0x0, &(0x7f0000011200)=ANY=[@ANYBLOB="03"]) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x1, 0x2) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) sendfile(r0, r1, 0x0, 0xb6) 09:40:07 executing program 5: mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[]) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='ns\x00') read$hiddev(r0, &(0x7f0000000000)=""/108, 0x6c) 09:40:07 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000040)='./file1\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) 09:40:07 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000010000)="eb58906d6b66732e66617400021e20000400000004f8", 0x16}, {0x0, 0x0, 0x4000}], 0x100c000, &(0x7f0000000040)) (fail_nth: 31) 09:40:07 executing program 6: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000140)=[{&(0x7f0000000040)="32a9f7b3ae10b9045daea4a88174fe9493364c1a6ae819989c747eacd3035ba96004745a9030159b54a7dc8080521daaf49bd5fa9dc3e951c5ccbec21144db", 0x3f, 0xb2}, {&(0x7f00000000c0)="ca096b06431397f8ad813e2a4055489377dfa11e3fcaf805d62591cf0cd59ef427833fc43b8682effc6a408427dfcb179c61d451eb98fcbccd1bba", 0x3b}], 0x1140004, &(0x7f0000000040)=ANY=[]) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x40, 0x0) [ 1376.794590] FAULT_INJECTION: forcing a failure. [ 1376.794590] name failslab, interval 1, probability 0, space 0, times 0 [ 1376.797631] CPU: 0 PID: 9323 Comm: syz-executor.1 Not tainted 5.17.0-next-20220401 #1 [ 1376.799468] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1376.802127] Call Trace: [ 1376.802683] [ 1376.803170] dump_stack_lvl+0x8b/0xb3 [ 1376.804027] should_fail.cold+0x5/0xa [ 1376.804914] ? alloc_workqueue_attrs+0x38/0x80 [ 1376.805923] should_failslab+0x5/0x10 [ 1376.806756] kmem_cache_alloc_trace+0x55/0x3c0 [ 1376.807769] alloc_workqueue_attrs+0x38/0x80 [ 1376.808747] apply_wqattrs_prepare+0xb3/0x880 [ 1376.809754] apply_workqueue_attrs_locked+0xc1/0x140 [ 1376.810868] alloc_workqueue+0xb1a/0xeb0 [ 1376.811708] ? do_raw_spin_unlock+0x4f/0x210 [ 1376.812592] ? _raw_spin_unlock+0x24/0x40 [ 1376.813416] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 1376.814407] ? __fget_files+0x287/0x470 [ 1376.815206] ? loop_configure+0x625/0x1940 [ 1376.816038] loop_configure+0x6e6/0x1940 [ 1376.816853] ? __sanitizer_cov_trace_cmp2+0x22/0x80 [ 1376.817844] lo_ioctl+0x782/0x1850 [ 1376.818547] ? __x64_sys_openat+0x13f/0x1f0 [ 1376.819403] ? loop_set_status_old+0x1b0/0x1b0 [ 1376.820297] ? avc_ss_reset+0x180/0x180 [ 1376.821114] ? __lock_acquire+0xbac/0x6120 [ 1376.822028] ? loop_set_status_old+0x1b0/0x1b0 [ 1376.822923] blkdev_ioctl+0x356/0x7f0 [ 1376.823678] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 1376.824616] ? selinux_file_ioctl+0xb1/0x260 [ 1376.825483] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1376.826558] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 1376.827496] __x64_sys_ioctl+0x196/0x210 [ 1376.828307] do_syscall_64+0x3b/0x90 [ 1376.829044] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1376.830045] RIP: 0033:0x7f72f8f588d7 [ 1376.830766] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1376.834341] RSP: 002b:00007f72f64cdf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1376.835814] RAX: ffffffffffffffda RBX: 00007f72f8fa2970 RCX: 00007f72f8f588d7 [ 1376.837206] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1376.838591] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1376.839979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1376.841379] R13: 0000000000000004 R14: 00000000200004f0 R15: 0000000000000002 [ 1376.842798] [ 1376.851384] Invalid option length (422) for dns_resolver key [ 1376.858272] loop3: detected capacity change from 0 to 255 [ 1376.860605] loop0: detected capacity change from 0 to 40 [ 1376.865976] loop4: detected capacity change from 0 to 5408 [ 1376.870947] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1376.872161] loop2: detected capacity change from 0 to 255 [ 1376.885544] FAT-fs (loop4): Unrecognized mount option "" or missing value [ 1376.899401] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 09:40:07 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000010000)="eb58906d6b66732e66617400021e20000400000004f8", 0x16}, {0x0, 0x0, 0x4000}], 0x100c000, &(0x7f0000000040)) (fail_nth: 32) 09:40:07 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d9f4655fd9f4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {&(0x7f0000010400)="0200000003000000040000006a000f000300040000000000000000000f00bc0f", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d9f4655fd9f4655fd9f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)={[{@journal_dev={'journal_dev', 0x3d, 0x7}}]}) [ 1376.925423] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 09:40:07 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f00000001c0), 0x0, 0x8000000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) [ 1376.941949] loop4: detected capacity change from 0 to 5408 [ 1376.950881] FAT-fs (loop4): Unrecognized mount option "" or missing value [ 1376.954452] FAULT_INJECTION: forcing a failure. [ 1376.954452] name failslab, interval 1, probability 0, space 0, times 0 [ 1376.955769] CPU: 1 PID: 9343 Comm: syz-executor.1 Not tainted 5.17.0-next-20220401 #1 [ 1376.956633] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1376.957824] Call Trace: [ 1376.958094] [ 1376.958328] dump_stack_lvl+0x8b/0xb3 [ 1376.958760] should_fail.cold+0x5/0xa [ 1376.959173] ? create_object.isra.0+0x3a/0xa20 [ 1376.959678] should_failslab+0x5/0x10 [ 1376.960080] kmem_cache_alloc+0x5b/0x480 [ 1376.960532] create_object.isra.0+0x3a/0xa20 [ 1376.961002] ? kasan_unpoison+0x23/0x50 [ 1376.961435] kmem_cache_alloc_trace+0x22e/0x3c0 [ 1376.961934] alloc_workqueue_attrs+0x38/0x80 [ 1376.962413] apply_wqattrs_prepare+0xb3/0x880 [ 1376.962916] apply_workqueue_attrs_locked+0xc1/0x140 [ 1376.963457] alloc_workqueue+0xb1a/0xeb0 [ 1376.963896] ? do_raw_spin_unlock+0x4f/0x210 [ 1376.964372] ? _raw_spin_unlock+0x24/0x40 [ 1376.964833] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 1376.965384] ? __fget_files+0x287/0x470 [ 1376.965815] ? loop_configure+0x625/0x1940 [ 1376.966284] loop_configure+0x6e6/0x1940 [ 1376.966723] ? __sanitizer_cov_trace_cmp2+0x22/0x80 [ 1376.967269] lo_ioctl+0x782/0x1850 [ 1376.967654] ? __x64_sys_openat+0x13f/0x1f0 [ 1376.968121] ? loop_set_status_old+0x1b0/0x1b0 [ 1376.968627] ? avc_ss_reset+0x180/0x180 [ 1376.969068] ? __lock_acquire+0xbac/0x6120 [ 1376.969586] ? loop_set_status_old+0x1b0/0x1b0 [ 1376.970087] blkdev_ioctl+0x356/0x7f0 [ 1376.970494] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 1376.971003] ? selinux_file_ioctl+0xb1/0x260 [ 1376.971472] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1376.972072] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 1376.972604] __x64_sys_ioctl+0x196/0x210 [ 1376.973046] do_syscall_64+0x3b/0x90 [ 1376.973448] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1376.974008] RIP: 0033:0x7f72f8f588d7 [ 1376.974403] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1376.976370] RSP: 002b:00007f72f64cdf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1376.977188] RAX: ffffffffffffffda RBX: 00007f72f8fa2970 RCX: 00007f72f8f588d7 [ 1376.977947] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1376.978714] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1376.979518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1376.980297] R13: 0000000000000004 R14: 00000000200004f0 R15: 0000000000000002 [ 1376.981094] 09:40:07 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @none}, 0xe) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x8000, 0x108) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed, 0x0, 0x1}, 0xe) open_tree(r1, &(0x7f0000000080)='./file0\x00', 0x8000) 09:40:07 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r2, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) sendfile(r2, r2, 0x0, 0xffffffff000) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) sendfile(r0, r0, 0x0, 0xffffffff000) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000006c0), &(0x7f0000000000)='./file0\x00', 0xfffffefb}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) sendfile(r6, r6, 0x0, 0xffffffff000) r7 = dup(r3) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r6, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r7, {0xdd}}, './file0\x00'}) io_uring_enter(r3, 0x1, 0x0, 0x0, 0x0, 0x0) [ 1377.009691] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 09:40:07 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x5) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) 09:40:07 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000040)='./file1\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) [ 1377.070561] loop1: detected capacity change from 0 to 64 [ 1377.074782] loop6: detected capacity change from 0 to 512 [ 1377.086212] loop3: detected capacity change from 0 to 255 [ 1377.111451] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1377.141366] loop2: detected capacity change from 0 to 255 [ 1377.143038] loop0: detected capacity change from 0 to 40 [ 1377.148453] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1377.148602] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1377.230828] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 09:40:22 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r2, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) sendfile(r2, r2, 0x0, 0xffffffff000) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) sendfile(r0, r0, 0x0, 0xffffffff000) r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000006c0), &(0x7f0000000000)='./file0\x00', 0xfffffefb}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) sendfile(r6, r6, 0x0, 0xffffffff000) r7 = dup(r3) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r6, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r7, {0xdd}}, './file0\x00'}) io_uring_enter(r3, 0x1, 0x0, 0x0, 0x0, 0x0) 09:40:22 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000040)='./file1\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) 09:40:22 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x2200, 0x0) pwritev(r1, &(0x7f0000000340), 0x0, 0x1f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) openat(r0, &(0x7f0000000100)='./file1\x00', 0x8400, 0x14) r2 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)) mq_timedsend(r2, &(0x7f0000000180)="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", 0xff0, 0x5d2, 0x0) 09:40:22 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x8000000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) [ 1392.538120] loop3: detected capacity change from 0 to 255 09:40:22 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000010000)="eb58906d6b66732e66617400021e20000400000004f8", 0x16}, {0x0, 0x0, 0x4000}], 0x100c000, &(0x7f0000000040)) (fail_nth: 33) [ 1392.543294] FAULT_INJECTION: forcing a failure. [ 1392.543294] name failslab, interval 1, probability 0, space 0, times 0 [ 1392.545666] CPU: 0 PID: 9378 Comm: syz-executor.1 Not tainted 5.17.0-next-20220401 #1 09:40:22 executing program 4: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x14000, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d20202020202020202020202020202020202020202020202020202000000000000000002800000000000028000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c0000000000001c00080000000008007809140b2a3a08020000010000010100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202073797a6b616c6c65722020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202047454e49534f494d4147452049534f20393636302f4846532046494c4553595354454d2043524541544f5220284329203139393320452e594f554e4744414c452028432920313939372d32303036204a2e50454152534f4e2f4a2e534348494c4c494e472028432920323030362d32303037204344524b4954205445414d202066696c6533202020202020202020202020202020202020202020202020202020202020202066696c6531202020202020202020202020202020202020202020202020202020202020202066696c6532202020202020202020202020202020202020202020202020202020202020202032303230303932303131343235383030083230323030393230313134323538303008303030303030303030303030303030300032303230303932303131343235383030080100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202000"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d0020002000200020002000200020002000200020002000000000000000002800000000000028252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e0000000000001e00080000000008007809140b2a3a08020000010000010100002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000730079007a006b0061006c006c006500720020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000470045004e00490053004f0049004d004100470045002000490053004f00200039003600360030005f004800460053002000460049004c004500530059005300540045004d002000430052004500410054004f005200200028004300290020003100390039003300200045002e0059004f0055004e004700440041004c004500660069006c0065003300200020002000200020002000200020002000200020002000200000660069006c0065003100200020002000200020002000200020002000200020002000200000660069006c0065003200200020002000200020002000200020002000200020002000200032303230303932303131343235383030083230323030393230313134323538303008303030303030303030303030303030300032303230303932303131343235383030080100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202000"/1408, 0x580, 0x7}, {&(0x7f0000010c00)="ff43443030310100"/32, 0x20, 0x9000}, {&(0x7f0000010d00)="01001c0000000100000005001d000000010046494c4530000000000000000000", 0x20, 0xa000}, {&(0x7f0000010e00)="01000000001c0001000005000000001d000146494c4530000000000000000000", 0x20, 0xb000}, {&(0x7f0000000000)="01001e000000010000000a001f000000010000660069006c0065003000000000", 0x20, 0xc000}, {&(0x7f0000011000)="01000000001e000100000a000000001f000100660069006c0065003000000000", 0x20, 0xd000}, {&(0x7f0000011100)="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"/288, 0x120, 0xe000}, {&(0x7f0000011300)="22001d0000000000001d00080000000008007809140b2a3a0802000001000001010022001c0000000000001c00080000000008007809140b2a3a080200000100000101012a0027000000000000271a0400000000041a7809140b2a3a08000000010000010846494c45302e3b3100"/128, 0x80, 0x400e800}, {&(0x7f0000011400)="22001e0000000000001e00080000000008007809140b2a3a0802000001000001010022001e0000000000001e00080000000008007809140b2a3a080200000100000101013400200000000000002064000000000000647809140b2a3a08000000010000011200660069006c0065002e0063006f006c0064002c001f0000000000001f00080000000008007809140b2a3a08020000010000010a00660069006c00650030002c0021000000000000210a0000000000000a7809140b2a3a08000000010000010a00660069006c00650031002c00220000000000002228230000000023287809140b2a3a08000000010000010a00660069006c00650032002c00220000000000002228230000000023287809140b2a3a08000000010000010a00660069006c0065003300"/320, 0x140, 0x2}, {&(0x7f0000011600)="22001f0000000000001f00080000000008007809140b2a3a0802000001000001010022001e0000000000001e00080000000008007809140b2a3a080200000100000101012c0027000000000000271a0400000000041a7809140b2a3a08000000010000010a00660069006c0065003000"/128, 0x80, 0xf800}, {&(0x7f0000011700)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x10000}, {&(0x7f0000011800)='syzkallers\x00'/32, 0x20, 0x10800}, {&(0x7f0000011900)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x13800}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"]) [ 1392.547356] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1392.549921] Call Trace: [ 1392.550462] [ 1392.550948] dump_stack_lvl+0x8b/0xb3 [ 1392.551770] should_fail.cold+0x5/0xa [ 1392.552574] ? alloc_workqueue_attrs+0x38/0x80 [ 1392.553576] should_failslab+0x5/0x10 [ 1392.554385] kmem_cache_alloc_trace+0x55/0x3c0 [ 1392.555365] alloc_workqueue_attrs+0x38/0x80 [ 1392.556311] apply_wqattrs_prepare+0xbb/0x880 [ 1392.557300] apply_workqueue_attrs_locked+0xc1/0x140 [ 1392.558390] alloc_workqueue+0xb1a/0xeb0 [ 1392.559250] ? do_raw_spin_unlock+0x4f/0x210 [ 1392.560185] ? _raw_spin_unlock+0x24/0x40 [ 1392.561087] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 1392.562163] ? __fget_files+0x287/0x470 [ 1392.563025] ? loop_configure+0x625/0x1940 [ 1392.563941] loop_configure+0x6e6/0x1940 [ 1392.564941] ? __sanitizer_cov_trace_cmp2+0x22/0x80 [ 1392.566026] lo_ioctl+0x782/0x1850 [ 1392.566785] ? __x64_sys_openat+0x13f/0x1f0 [ 1392.567709] ? loop_set_status_old+0x1b0/0x1b0 [ 1392.568674] ? avc_ss_reset+0x180/0x180 [ 1392.569553] ? __lock_acquire+0xbac/0x6120 [ 1392.570536] ? loop_set_status_old+0x1b0/0x1b0 [ 1392.571514] blkdev_ioctl+0x356/0x7f0 [ 1392.572333] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 1392.573363] ? selinux_file_ioctl+0xb1/0x260 [ 1392.574304] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1392.575464] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 1392.576491] __x64_sys_ioctl+0x196/0x210 [ 1392.577375] do_syscall_64+0x3b/0x90 [ 1392.578164] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1392.579269] RIP: 0033:0x7f72f8f588d7 [ 1392.580051] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1392.583931] RSP: 002b:00007f72f64cdf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1392.585561] RAX: ffffffffffffffda RBX: 00007f72f8fa2970 RCX: 00007f72f8f588d7 [ 1392.587065] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1392.588555] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1392.590039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1392.591525] R13: 0000000000000004 R14: 00000000200004f0 R15: 0000000000000002 [ 1392.593064] [ 1392.594607] loop4: detected capacity change from 0 to 262376 09:40:22 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d9f4655fd9f4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {&(0x7f0000010400)="0200000003000000040000006a000f000300040000000000000000000f00bc0f", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d9f4655fd9f4655fd9f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)={[{@journal_dev={'journal_dev', 0x3d, 0x7}}]}) 09:40:22 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x5) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) [ 1392.604705] loop4: detected capacity change from 0 to 262376 [ 1392.623631] loop0: detected capacity change from 0 to 40 [ 1392.623750] loop6: detected capacity change from 0 to 512 [ 1392.627899] loop2: detected capacity change from 0 to 255 [ 1392.645119] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 09:40:23 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x2200, 0x0) pwritev(r1, &(0x7f0000000340), 0x0, 0x1f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) openat(r0, &(0x7f0000000100)='./file1\x00', 0x8400, 0x14) r2 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)) mq_timedsend(r2, &(0x7f0000000180)="b455be25a1d2333ee01665e7b2f743f71d0df785277db708f941130a129382496ac1454f1766851808d812bb2ca0c57564403cd2a60d66ba09ae58f19b4e72cd345b05496125157e73d6b492367a51cb2f5358c3dbc05f133e71bed2fce6d0214761f1d86057bb0cb2caeeb04cc7b01145e4965f8cbff9c2bcf984f701520fea0578bbaa6b1f8f05abd5eb7123d39a1dd360c301306f9608b887902672620105390d9bb9325cc650923abd395490b2137cfdd2a4d8f1da5fc4577e4b60a974f1551d9e82cfcb29bb926bded262831d78f16fd5bcebe4a5a078602b9709e06ac9347a79da79cec5fbe17798525073f6dbc08a2daac7c7c99544e9280a52333182607e94261a9f64a2e9ef64ea6ff013609b88ee7bb9a3e5783bbac3874e223837cc74bec20a00ba1d19cb2049114dc3b28111bd73648b62b70568a93c406a3115244748adef2be8d999c1153ca8c0d4c6360c26cc268ea9e7737dcff6e83a31aa40f513ec2a362d7acf479738eea5af02356be3985a1d2ff7f519ce84ebe6112cbebc8f8de095e72610228831f9ddc76456081bd02d0ae95676493307b98101f16a8aa19d868f567a657038f3b7b3d6b774da710b8da04358844b14b1c563419820a54021054380fddd4188a167878b5ed728f501a24639485d5df8ad4f4d21b35fcec322c5b4feaa93ddcfd4be2548989f56f61b6acd30bd9cd1eab5f41e302d802d3236a8ebcb067283b9a0f880a31a34d7fadfecf7efcfdba329d5b50b7562c8d05aa678da6b6b3bd18287cfda7ad4e61f78100dbd4b91527b186b74b61b929a634347ebe849cef8d754ea32836b8710538460c4ce02f883b4adc89bd3db891cf432c79e5acd8afed96481ee2b314eb8387b3a6ae13e26bce351a9cb71ef1ac37bbafafedf3637d007d5fb25b15c766cfa8f359a4650f1d5691423806caafbbf5c527cf642885d2d2bdb69820a4c3145c24d7d5de5a295ec244234da88d41d1965b2d16349acf52373fc60787675867cb604cde0fe063cf762388af4777190d792d36120314ce51d48ce1c81e96bf41323cff3915cbcb73223044237c02a82a63b0f2878301ec3f85a0b3e46a631ac2a53d20b27834b8f5ef0ce1a496d71f838d259caaa16b2813ab9768c58d38366d19e8c458a1d7ae4cb67698c673aa3ae4e5ff9f2ded3b92c09ebce68de6a91dc1cc80e0a0eb57e8eb720e1a71d6405cc05a57a9eff2971ebe7e79f1db9af3377120a6feb6b83d30944c160b3a32663fdc376fa853b25ff58f2dc2c62f78f23702c80ee1f8661963ba07a44166556c780bdb5a87e618320e9b2eaa5bce45533e107e528790ba02afcdafc22c4a3b4b58d2658af77b38a6072dc835d31da898a0a89fcfd0cef9241a20ff2f7e8468aa333420c44e562c825165f7f943267bbdbc899f263006b0a88c22e5050889e83dbd57fb5c05682e8d722276a17bbf50d779e5d18479dc8bb89a20e0c0bd1a1873e52526a74d74fa78128d1e69136a1d4cb49212dd4fc10e35e0fdf3367c5d97987e33494c052fa89c80dc19b3b27b1b0d34304447b64c00f9155fef3a0c2870e97120a4fffb6f6d9bcf01271c0da27c07f39a300846795eff84d8e11bd54292e11fc476cb0e8c6d7ef0edac6482f8d1dfa4a1c3b87084386b752d30a47a1191221bed46fc7da07cf2f8e12f5647799d1ddd7d342156c4d637ba39e60b3418fc0de4fd639adc6d3d82a28d53e7d10f0d5036ec5a1921a59f1b01c552d2d28a2c9a34e8544f7fcec25c911aae5ed1d99a300102ed142de2bb2b9fb8073a3149f12b79a24ec6f5943f367b5ee0ab9d393eab42097cc321d3b257dc3466a9ef143ca2b90030fe9aae775b1ad150a6c8448170dbb09563855d655e4788a0a7186ad1365a3dcf58ef42d5cc87b58ad50e9af456e9a06048852aeb640fa31c6dd72e7db32797f146cf494ded289b00932e669b9bbc165dc5a263a41691ae0e18c0a4799b9b70cfdca2f7d48713207059d1628ac95e39ad4b23b0640bbba764353b06931cc49aa162e66dbfcb3c03da173260caaee3e87e27ad590865de7aef39c82db9f9de37d4de11595bf4f638b3e7e6cf0c337f0594525194aa7e26ee935f1213654d2c6e4c027ce3f584aa3f9829024b8c53acfce74637d5d83616a8beefb52736023bec5d650a3624b9c6ce626308769d2f3be804d657bfa6def42b210ce5d874977da784744e6a89c975947a39b797bced4b58d001cd93c2817c09f0df2b30feb4b50c84d3c9a1dfc6c43f81e3cd84188dbff963ff5f9ffb61ff7cba836ee6c8a1aee4fc65a0a3a85d968654981d2805f798f91c6b235af1e81e195bcdbd46ea80b0e2cdab3a9cebc6a3a0172172dde13e3dbe4e0f9db12db5850666fca7690af8fca785b27acc4ce4e7d55b26b04603c75d18d257aee756c52b2b4de64fa35a3bcf88d869971af4c7670586fcec4425ad841e302b577048d0cde744993a79b02bf7e5c0a2eebf039b5bc3532657f3f319eef016cc96b55f7aa1dae4023a937da840e3f964e6b4c8d127360ef6695245138f700da429e07ddef3bcd9967c0474821c9f82e1439542496c4803020bf328ab73d7c0b619ed859b8ed8774cc3d431e1c59f984fc09ff0639c1a68c2a8b560ffb79220a2c674dd7f7ecb79b33dbebf82300eb069939ed666c0d01857bc9d821abb2bb82e49630b8491fd2043ac59cacf07c9f7b7199aa61cb97eb014123eb7c631465652f8affb234f54473f8c54144b6bfd073d42737db57b0feb6587abcff4a96ce00aed56305c88043332453df93b6f5e5fa1a0fcc48f502bce6c4cdb3f06521d5e8add3b319675751e579155efc12e53eae3132bf75c013e3115fbb5430e55a530f46342cabf42c0088e2cfb10b7a480630d2a56708b7e8bf21662f5326190bf0b96cdff1aa74c167fd724134c134b644e1efd85d56417b794b0658837f387b0f1e475ee0369380fa7251571404509cfea4daa0f622fcb170179985037deeebce5c015a8c6071c4b0a1df9eec79cdc14f72ad8eb3e943dd13e7239daddeb7a34d508194a6dda91e1dd0e2031250fc23f9ff688c32c81190c36d7db59371617d7dbc55adc1c1226aa4ddb4500f36cc2b61a1ff4d866bf62d14814c3a4e1c434cffc66cd4dd57d2235934a4c504d6ed9a5d290be95a3c6d2ec9c405a5b3592348bb9730c92d4d298abf97ba3375bfff92fb89927b901d5469ca6812582841d7f6c53889440e18c62682ad88f06ae4fb5db67abb0b027b2949de6c8d430c26dc086e801f4711babb6cc6231c9bd3101fa792892a1c2c671acd3035c1b49c0d0217b8fa58f4666a34b5c40cf3a25b42fd95863e09379896f3c9b260f29089b2f45208c70f2f97a140aaf293c1d05f888c2d811dc74ee79ed3d1b4163603ef2570ce9b9210b46ca32411777ba76be6cfa8b0d1628ad6b83da2294e3e8f148dca8d782f5a9d41e5ebb5990590abc0d4afcb5b0179c554b4fa83c8f6cf690b5f0bb0ee368e094d247e58aec8485d3733711d2f5399ff5a3a4a64d4a8d5fe7ce6b089a81c41c03ba1a45c3f320489a252a3d5c3c42d31da2bf9e4148c00bba6afd9d364f72b13922ec41399dcc22e539cde00a7699a5fc12065c9c4dcdb2744efb57ac95e64501e10cbfb6c7c03bf6cd7c21bc2038890eb8f07bd77528af1d08c3932f48f3f5ddd3594bf6cb2aa4a1fb1aef241c5e92c1869277d17c724c847d3419d51a4cc7235e38cc2f452952fa39c03fbfb82da6d77384f89ffcc59c315f679937de7eefcb8f95c603ace26586bc523dbb5b08b6b6e0bad1f9d5c7ed32bea1e4ab8ce19c06a0c4bbd9c9ca096a319dd678c1d09fb9463e29d25b19f16af3ec29a99b703d452b425bf3369d66e56842dcc0061e31cbc36685b6b96ece60b16eb156b7fd42da637e36882a48bd911cde2d482a885cef303b3341fadafba1d13b420537f19daf29c4d6389f24050cadc7c053505f77899fd25f1271a29fd7c70e02b006ed66e3d18f38923f981a02c1bdc4fd7f3694eab5a7ef9c53182a972c5fa0bd75a3352bd39b9927c0f0dbe668f8ccb2e7d22baedfb89fd89d4c502726188a5b7794f2e3a31304e00c55014332bce9f53cc60d774b10dd6a060dfd93bca790c6a7ba1227e31f3bc4f23e8f5972515202607110a28201429906f90dbf578c83b93af097fd2d83f63e3aa4f202f6ee8b4d1f6d8515901001470fd8e311f560e306f542c389335a38c8fb9726f7637cbf01cb67f51bbf188f6744aa0d95d7bf5fb6792729889605b79d3e63d58ccdabf9be7cd0aaae6e3d90db7c1349f66db5a5b03dd46c6b4deb84c3ab058708eccde0f22cd456d8fed1f155a595c4cb0d58d6a3bc30e449d1856d3ba70776030ed8e0f7e9a6d30a9877dc731f8f7fe86dca4856b19b3a4ef4fb6be2bc9bb25fb169bbdcf048b0e7db61ece1e7ccab36d3f63f0c35990b4e9b20e22da4b02199f5162300f51d9104ea0faf52adbed9404e8a598fdb81c7ee740ac7953a4204cb0fee53b0ff20b8db286ef6b0fda15b881d0580aaf6564ef3fbddf80dc3bbab08ca46a09017ddc21e9f956572a087297f3700b3a599d680e34e5c3f466052c32ce225209b34ac1a471e3bfa358e97d8766efcb48d70bb2384b1751c3c59ba30b9f8156ababf3fee0a3367ff9d651ba6943eb25776a008e75b731a076aa5857d8b94443e7780dd9da2a967cdefdd9c607af516777c725a19722b4ad537f30c7b3d0dda18dcb1ee0cb7b0673c169a75683761b02f98f53c713688df0006bbdd109cb68b0272df1e7a7a7a284d66bdb83d839af37ee3de8df7daacb1aa8c05fcd9590e94598f6bbd22ab20ea4363c04497f8a807d629ee5c0162841291defac7b1ab0e1377d8b6606c7d9663a72abd54d9312ab09bd954345c9c76b186b7a1c987c470e9c8687d21f52ebc9bb6854a13e2d111549228350ab17531947561d7b1da6c2c10f5e06b974ddbf42bb645446df68fc472fbc85546d3fd6649f0ec741de14ad7c0ff14fe915db595f41e2335577988467bdea5bb472d0b9e39a63a32671e9d72b9ff66e4251e776b84611733989762fc774b33ba5466c10cd230c9870493c3e7a41842e46775c88aaab229e200a252ec6d9091f3eb7692bd67f47a8a7ff225d35b7eac799feadf7419aa8c1a05c38e426c3b40473b89b8660efbe87c44b12a517be59bc82566f6bcae074021dab7d6a1d54805c04ff6f4208e15fa6b4647a6c1890fcfc0b16699ea6085b16e6aa02f75466a3963f0bf5179024653c66fa48a9ad69d8c22051c280e63936e845d006bbabfe5fdf18870804faeb96b457bbde7e734558735c60f9b74d0f72320a0f218e67590c1723385c1e6cbb0e0875928f66e2823eae91e21fc6c5cfaee9dcf960e40586bf56b4d8559838df1d1ded05043cee70be6737d65bc90f3ac56c16bd655ae266f994d65086cc39acad17a06b579981d028fdfc49b74fcf717cf515f7af2c09c3188fe07fc274d96d70be412ca9a6857184fc1e1e5ba0abcf56986210430e83ad21ea550fb6df97b845001978157d280d3cc1dd4ee232023fec984dccfa630d8f857f5d197923191e60a5c9d07c5b0caa209f3cd07b75b6ca4b06fc38db956f121f50c41f7ef68fa67418e8f0756ba87c94947de6b3989b669040c03f33f7e09ca6c1a29efc8d9a8efa96b5da61f00043f41ab1433917a930289afdd6455efcd6e33d3373893be06bfe1eae24bf03c6e4e5731deb11c258de67e45508a43a70a01882", 0xff0, 0x5d2, 0x0) [ 1392.668228] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1392.696974] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. 09:40:23 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000010000)="eb58906d6b66732e66617400021e20000400000004f8", 0x16}, {0x0, 0x0, 0x4000}], 0x100c000, &(0x7f0000000040)) (fail_nth: 34) 09:40:23 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @loopback, 0x9}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) r3 = accept$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000300)={'gretap0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x700, 0x40, 0x9, 0x3, {{0x36, 0x4, 0x0, 0x3d, 0xd8, 0x68, 0x0, 0x0, 0x4, 0x0, @broadcast, @remote, {[@generic={0x82, 0x11, "79e84142ed04b5aaf8c75f35068d61"}, @rr={0x7, 0xb, 0x4b, [@local, @private=0xa010100]}, @timestamp_addr={0x44, 0x44, 0x77, 0x1, 0x9, [{@multicast1, 0x800}, {@multicast1, 0xfffffffb}, {@remote, 0x4}, {@multicast1, 0x2}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x7}, {@private=0xa010102, 0x4}, {@multicast2, 0x8000}, {@loopback, 0x1}]}, @generic={0x89, 0x3, 'c'}, @rr={0x7, 0x13, 0xcb, [@dev={0xac, 0x14, 0x14, 0x40}, @private=0xa010100, @loopback, @local]}, @lsrr={0x83, 0x1f, 0x4a, [@broadcast, @local, @remote, @remote, @empty, @empty, @empty]}, @timestamp={0x44, 0x24, 0x39, 0x0, 0x7, [0x8, 0x1, 0x2, 0x79, 0x7, 0x1ff, 0x3, 0x8]}, @generic={0x83, 0x9, "184315894b8eb8"}]}}}}}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) sendfile(r5, r5, 0x0, 0xffffffff000) sendfile(r5, r2, &(0x7f0000000180)=0x9, 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r3, 0x80, &(0x7f00000000c0)=@isdn={0x22, 0x1f, 0x7f, 0x81, 0x5}, 0x0, 0x0, 0x1, {0x0, r4}}, 0x3) sendfile(r2, r1, 0x0, 0x9afb) close_range(r0, 0xffffffffffffffff, 0x0) 09:40:23 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x8000000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) 09:40:23 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000040)='./file1\x00', 0x80) r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) 09:40:23 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x5) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) [ 1392.762263] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1392.773899] FAULT_INJECTION: forcing a failure. [ 1392.773899] name failslab, interval 1, probability 0, space 0, times 0 [ 1392.775311] CPU: 1 PID: 9404 Comm: syz-executor.1 Not tainted 5.17.0-next-20220401 #1 [ 1392.776327] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1392.777627] Call Trace: [ 1392.777905] [ 1392.778173] dump_stack_lvl+0x8b/0xb3 [ 1392.778659] should_fail.cold+0x5/0xa [ 1392.779065] ? alloc_workqueue_attrs+0x38/0x80 [ 1392.779692] should_failslab+0x5/0x10 [ 1392.780103] kmem_cache_alloc_trace+0x55/0x3c0 [ 1392.780610] alloc_workqueue_attrs+0x38/0x80 [ 1392.781104] apply_wqattrs_prepare+0xbb/0x880 [ 1392.781721] apply_workqueue_attrs_locked+0xc1/0x140 [ 1392.782469] alloc_workqueue+0xb1a/0xeb0 [ 1392.782979] ? do_raw_spin_unlock+0x4f/0x210 [ 1392.783448] ? _raw_spin_unlock+0x24/0x40 [ 1392.783905] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 1392.784443] ? __fget_files+0x287/0x470 [ 1392.784921] ? loop_configure+0x625/0x1940 [ 1392.785489] loop_configure+0x6e6/0x1940 [ 1392.785926] ? __sanitizer_cov_trace_cmp2+0x22/0x80 [ 1392.786595] lo_ioctl+0x782/0x1850 [ 1392.787116] ? __x64_sys_openat+0x13f/0x1f0 [ 1392.787698] ? loop_set_status_old+0x1b0/0x1b0 [ 1392.788318] ? avc_ss_reset+0x180/0x180 [ 1392.788768] ? __lock_acquire+0xbac/0x6120 [ 1392.789269] ? loop_set_status_old+0x1b0/0x1b0 [ 1392.789890] blkdev_ioctl+0x356/0x7f0 [ 1392.790307] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 1392.790954] ? selinux_file_ioctl+0xb1/0x260 [ 1392.791605] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1392.792309] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 1392.792839] __x64_sys_ioctl+0x196/0x210 [ 1392.793372] do_syscall_64+0x3b/0x90 [ 1392.793771] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1392.794331] RIP: 0033:0x7f72f8f588d7 [ 1392.794733] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1392.796871] RSP: 002b:00007f72f64cdf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1392.797705] RAX: ffffffffffffffda RBX: 00007f72f8fa2970 RCX: 00007f72f8f588d7 [ 1392.798462] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1392.799222] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1392.799977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1392.800898] R13: 0000000000000004 R14: 00000000200004f0 R15: 0000000000000002 [ 1392.801893] 09:40:23 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d9f4655fd9f4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {&(0x7f0000010400)="0200000003000000040000006a000f000300040000000000000000000f00bc0f", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d9f4655fd9f4655fd9f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)={[{@journal_dev={'journal_dev', 0x3d, 0x7}}]}) [ 1392.861010] loop0: detected capacity change from 0 to 40 [ 1392.890027] loop2: detected capacity change from 0 to 255 09:40:23 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x5) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) [ 1392.918115] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1392.925522] loop7: detected capacity change from 0 to 255 [ 1392.930825] loop6: detected capacity change from 0 to 512 [ 1392.958364] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1392.961638] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1393.039226] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1393.071822] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1410.021217] loop3: detected capacity change from 0 to 255 [ 1410.021417] loop2: detected capacity change from 0 to 255 [ 1410.024576] loop6: detected capacity change from 0 to 512 09:40:40 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000040)='./file1\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) 09:40:40 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x8000000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) 09:40:40 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f0000000840)="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", 0xfd}, {&(0x7f0000000940)="0c54e90f3e855603f30426501bead286899790adcfe6b704d313e2c93202750659b08665c7cc0a80cfc4cb464a00eeaba5d5e37c5282d4ff604146df42c064634162c70e6a7f70a72eac7c2054f03f2d7421e56d5b83316a980d053ab9b991c3a8f9100f36b5c9bd91e7050f271fab892fdedbd94e50e2633d64a01fc24bd5c2", 0x80}], 0x2, 0x1, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r3, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) sendfile(r3, r3, 0x0, 0xffffffff000) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x101400, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) sendfile(r5, r5, 0x0, 0xffffffff000) r6 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f00000005c0)='cpu.pressure\x00', 0x2, 0x0) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r1, &(0x7f0000000800)={&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000100)="a403decbc0acc0e28eb36e32ecc784c23890f73573fe12a7cf80b6ad3a2c346c5cb877da8f0e98b6f70ddcd1a73922b1cd9fa0aebd6176b9b9d0c254d9e6242c58b6f719f7c5a2b0875809da2abe263edc53e8f5c0e244a1c8faea21eab8121a323635e02762034de81d043f9173e0bf8c77d282cd40e77434e5cf0f53fac9679debc3020ab5040f4ded6a1f5053308eab69787637d241501868f1a93b4b2a0900eb228bcb8c123a090249dab4ec6f843ad656e1fcf5a7634e853bd4a7e852f83562c62982fd72fb7e4c83b2f4", 0xcd}, {&(0x7f0000000200)="811a01b155afbf90f53c41ab3000d50202af4df00ba8455a6f7e1ba512f1edd2cae45ad6c2a349646b2948c2de168e06e434202bd5f6d69e0e631310f2d8470af2aaac892816d3a627c361937b7096", 0x4f}, {&(0x7f0000000280)="31437b6c151456bfe79d31fca7502849acfed5beb08bfbbe8831a2233bba1c00c9c4a0298f07255ecc1c0aee8e889c0ffdd4018b17f8a3f3860edd9b3d6d9525771ddc9a632b5d93a29a82f0eb503532b35479d58da83d2ebeaf1686ffaf4f9c9ebcc711b68337146b55f95f81f838287347980c2c3723938f6308db60d06281d6db4d3b2ab85e13e6ff93428ffdae6d26677bd0181fd01560", 0x99}, {&(0x7f0000000340)="32d3ded08b639596011928188ed5da4d1816dbd7660f6e1102684f9a2c3ea1d83c3646cdf4fcb38b49c4cb35b332cb14af90ca4a82d99e026a766e8e62d8c75426a587ecc957bc063b312c1c48330e6a4a539e778cca6851c5bcb682b9de1307b8e5568f399e624a4b156c2684067dfc9c3b59bb07774f790c06e0a9c81e79f29b52c986e2f85673b68b9f4220821006f32ea5", 0x93}, {&(0x7f0000000400)="878bc70575ca9783abeabc338b7adabd80c16ea6ac112573d5615e76fe8c5bea1bef4232ab1440ddc6b65d4809ac0c4263118b84b519ff65e83838cc4eef4a5c1d3eca6f54fa69443c1d8cd9ae30416a0c3bbcb3902d6eb9222f1a3d244a7797be91dcf2b24835d1b7a65dc134e44e4dc97e1d013dd455f1df4252bf4ab05358a47c0b35fef727e2cfa4b5b6029ed970c573214f56baba7d92d166e8a0bf432ccef5dc622cbddfef7ef61db07cedd54d65b13c7379b76816c537d8607bdecec64c64698ab668f0ef1c616380b564a00f", 0xd0}], 0x5, &(0x7f0000000780)=[@rights={{0x24, 0x1, 0x1, [r2, 0xffffffffffffffff, r3, r0, r4]}}, @rights={{0x18, 0x1, 0x1, [r5, r6]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, r7}}}], 0x60, 0x80d5}, 0x200000d0) syz_open_procfs$namespace(0x0, &(0x7f0000006080)='ns/pid_for_children\x00') 09:40:40 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000010000)="eb58906d6b66732e66617400021e20000400000004f8", 0x16}, {0x0, 0x0, 0x4000}], 0x100c000, &(0x7f0000000040)) (fail_nth: 35) 09:40:40 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x5) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) 09:40:40 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d9f4655fd9f4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {&(0x7f0000010400)="0200000003000000040000006a000f000300040000000000000000000f00bc0f", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d9f4655fd9f4655fd9f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)={[{@journal_dev={'journal_dev', 0x3d, 0x7}}]}) 09:40:40 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}, {0x0, 0x0, 0x2400}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x100, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) sendfile(r0, r1, &(0x7f0000000180)=0x80, 0x3) pwritev(r0, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2000, 0xa0) openat(r2, &(0x7f0000000140)='./file0\x00', 0x498800, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) truncate(&(0x7f00000000c0)='./file0\x00', 0x7) [ 1410.031397] FAULT_INJECTION: forcing a failure. [ 1410.031397] name failslab, interval 1, probability 0, space 0, times 0 [ 1410.033783] CPU: 0 PID: 9436 Comm: syz-executor.1 Not tainted 5.17.0-next-20220401 #1 [ 1410.035322] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 09:40:40 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000040)='./file1\x00', 0x80) r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) [ 1410.035425] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1410.038731] Call Trace: [ 1410.039270] [ 1410.039734] dump_stack_lvl+0x8b/0xb3 [ 1410.040555] should_fail.cold+0x5/0xa [ 1410.041379] ? alloc_unbound_pwq+0x4ad/0xd70 [ 1410.042316] should_failslab+0x5/0x10 [ 1410.043115] kmem_cache_alloc_node+0x55/0x490 [ 1410.044058] ? lock_is_held_type+0xd7/0x130 [ 1410.044981] alloc_unbound_pwq+0x4ad/0xd70 [ 1410.045903] apply_wqattrs_prepare+0x2a4/0x880 [ 1410.046897] apply_workqueue_attrs_locked+0xc1/0x140 [ 1410.047973] alloc_workqueue+0xb1a/0xeb0 [ 1410.048834] ? do_raw_spin_unlock+0x4f/0x210 [ 1410.049783] ? _raw_spin_unlock+0x24/0x40 [ 1410.050660] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 1410.051730] ? __fget_files+0x287/0x470 [ 1410.052582] ? loop_configure+0x625/0x1940 [ 1410.053494] loop_configure+0x6e6/0x1940 [ 1410.054359] ? __sanitizer_cov_trace_cmp2+0x22/0x80 [ 1410.055427] lo_ioctl+0x782/0x1850 [ 1410.056180] ? __x64_sys_openat+0x13f/0x1f0 [ 1410.057124] ? loop_set_status_old+0x1b0/0x1b0 [ 1410.058083] ? avc_ss_reset+0x180/0x180 [ 1410.058950] ? __lock_acquire+0xbac/0x6120 [ 1410.059934] ? loop_set_status_old+0x1b0/0x1b0 [ 1410.060902] blkdev_ioctl+0x356/0x7f0 [ 1410.061725] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 1410.062728] ? selinux_file_ioctl+0xb1/0x260 [ 1410.063661] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1410.064828] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 1410.065854] __x64_sys_ioctl+0x196/0x210 [ 1410.066977] do_syscall_64+0x3b/0x90 [ 1410.067762] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1410.068849] RIP: 0033:0x7f72f8f588d7 [ 1410.069635] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1410.073493] RSP: 002b:00007f72f64cdf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1410.075079] RAX: ffffffffffffffda RBX: 00007f72f8fa2970 RCX: 00007f72f8f588d7 [ 1410.076568] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1410.078068] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1410.079557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1410.081048] R13: 0000000000000004 R14: 00000000200004f0 R15: 0000000000000002 [ 1410.082568] [ 1410.084008] loop0: detected capacity change from 0 to 40 [ 1410.086293] loop4: detected capacity change from 0 to 40 [ 1410.088291] loop7: detected capacity change from 0 to 36 [ 1410.116483] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1410.145653] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1410.164807] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 09:40:40 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000010000)="eb58906d6b66732e66617400021e20000400000004f8", 0x16}, {0x0, 0x0, 0x4000}], 0x100c000, &(0x7f0000000040)) (fail_nth: 36) 09:40:40 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)}], 0x1, 0x8000000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) [ 1410.194599] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 09:40:40 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x5) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) [ 1410.224676] FAULT_INJECTION: forcing a failure. [ 1410.224676] name failslab, interval 1, probability 0, space 0, times 0 [ 1410.225936] CPU: 1 PID: 9453 Comm: syz-executor.1 Not tainted 5.17.0-next-20220401 #1 [ 1410.226775] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1410.227963] Call Trace: [ 1410.228229] [ 1410.228468] dump_stack_lvl+0x8b/0xb3 [ 1410.228894] should_fail.cold+0x5/0xa [ 1410.229304] ? create_object.isra.0+0x3a/0xa20 [ 1410.229785] should_failslab+0x5/0x10 [ 1410.230192] kmem_cache_alloc+0x5b/0x480 [ 1410.230625] create_object.isra.0+0x3a/0xa20 [ 1410.231085] ? kasan_unpoison+0x23/0x50 [ 1410.231508] kmem_cache_alloc_node+0x248/0x490 [ 1410.231991] alloc_unbound_pwq+0x4ad/0xd70 [ 1410.232460] apply_wqattrs_prepare+0x2a4/0x880 [ 1410.232963] apply_workqueue_attrs_locked+0xc1/0x140 [ 1410.233524] alloc_workqueue+0xb1a/0xeb0 [ 1410.233966] ? do_raw_spin_unlock+0x4f/0x210 [ 1410.234452] ? _raw_spin_unlock+0x24/0x40 [ 1410.234907] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 1410.235460] ? __fget_files+0x287/0x470 [ 1410.235898] ? loop_configure+0x625/0x1940 [ 1410.236365] loop_configure+0x6e6/0x1940 [ 1410.236809] ? __sanitizer_cov_trace_cmp2+0x22/0x80 [ 1410.237366] lo_ioctl+0x782/0x1850 [ 1410.237753] ? __x64_sys_openat+0x13f/0x1f0 [ 1410.238225] ? loop_set_status_old+0x1b0/0x1b0 [ 1410.238718] ? avc_ss_reset+0x180/0x180 [ 1410.239164] ? __lock_acquire+0xbac/0x6120 [ 1410.239695] ? loop_set_status_old+0x1b0/0x1b0 [ 1410.240194] blkdev_ioctl+0x356/0x7f0 [ 1410.240611] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 1410.241140] ? selinux_file_ioctl+0xb1/0x260 [ 1410.241627] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1410.242221] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 1410.242741] __x64_sys_ioctl+0x196/0x210 [ 1410.243184] do_syscall_64+0x3b/0x90 [ 1410.243585] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1410.244140] RIP: 0033:0x7f72f8f588d7 [ 1410.244536] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1410.246507] RSP: 002b:00007f72f64cdf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1410.247328] RAX: ffffffffffffffda RBX: 00007f72f8fa2970 RCX: 00007f72f8f588d7 [ 1410.248089] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1410.248852] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1410.249626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1410.250390] R13: 0000000000000004 R14: 00000000200004f0 R15: 0000000000000002 [ 1410.251177] 09:40:40 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d9f4655fd9f4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {&(0x7f0000010400)="0200000003000000040000006a000f000300040000000000000000000f00bc0f", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d9f4655fd9f4655fd9f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)={[{@journal_dev={'journal_dev', 0x3d, 0x7}}]}) 09:40:40 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000040)='./file1\x00', 0x80) r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) 09:40:40 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x8521e20513e66b2e, &(0x7f0000000180)=ANY=[]) r2 = fork() tkill(r0, 0x37) ptrace(0x10, r2) ptrace$getregs(0xe, r2, 0x7f, &(0x7f0000000480)=""/77) clock_gettime(0x0, &(0x7f00000006c0)) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f0000000840), 0x6e, &(0x7f0000001ac0)=[{&(0x7f0000001b40)=""/212, 0xd4}, {&(0x7f00000009c0)=""/4093, 0xffd}, {&(0x7f00000008c0)=""/208, 0xd0}, {&(0x7f0000000540)=""/89, 0x59}, {&(0x7f0000000740)=""/147, 0x93}], 0x5, &(0x7f00000019c0)}}], 0x1, 0x20001, &(0x7f0000000700)={0x0, 0x989680}) r3 = gettid() process_vm_writev(r3, &(0x7f0000002580)=[{&(0x7f0000000140)=""/89, 0x59}, {&(0x7f00000001c0)=""/175, 0xaf}, {&(0x7f0000000280)=""/4096, 0x1000}], 0x3, &(0x7f0000003840)=[{&(0x7f0000002640)=""/105, 0x69}, {0xfffffffffffffffe, 0x10}], 0x2, 0x0) fcntl$lock(r1, 0x5, &(0x7f0000000180)={0x2, 0x0, 0x75, 0x95, r3}) openat2$dir(0xffffffffffffff9c, &(0x7f00000005c0)='./file1\x00', &(0x7f0000000800)={0x641, 0x9, 0x9}, 0x18) tkill(0x0, 0x20) r4 = fork() ptrace(0x10, r4) getpriority(0x0, r4) ptrace$getregs(0xe, r4, 0x81, &(0x7f0000000480)=""/79) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) clock_gettime(0x3, &(0x7f0000000000)) [ 1410.285830] loop1: detected capacity change from 0 to 64 09:40:40 executing program 7: syz_80211_inject_frame(&(0x7f0000000400)=@broadcast, &(0x7f0000000440)=@data_frame={@no_qos=@type00={{0x0, 0x2, 0x7, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x81}, @device_a, @device_a, @random="927a5ded1361", {0x0, 0x336}}, @a_msdu=[{@broadcast, @device_a, 0xee, "3203950a0f22cfecbc45c59e11cb5717f756ad4bdd81d384ae063ea34e092fd53ff9680f0430c9600ac1ce37bc63dd452dc003dfd6c86e43b8dbec1ec1df6e068e76d51efd8afdaa7c8a3231afe2d02c3c780fb79853dc3580853fa62a96ef79ef48809d6b04a48cb186dee4b617ff74e411801dc879e379b8ded65159cf0c021ddc8d077c462213f4f90bbd7848518e54f6932e8da3ec6f79e1ba9e6dd2a2cfb971db1c9996ff8581257962111d50abbdbdc5ecb0b1a63b4c26d03c2719189d9a415c98473cc811fcaedb7554051d43ef4e6e9e69e594d437d7ddb396ce32ee78597fde1894d09231874c9b6490"}]}, 0x114) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=@ctrl_frame=@bar={{}, {0x2}, @device_b, @device_a, @multi={{0x1, 0x1, 0x1, 0x0, 0x4}, [{0x0, 0x3, {0x5, 0xe9}, "9eb08feb44d860f0"}, {0x0, 0x2, {0x3, 0xd2}, "4708590ceca6c4e2"}, {0x0, 0x6, {0x4, 0x3}, "0531687e447cb155"}, {0x0, 0x0, {0x0, 0x1}, "0fe91858af2a0ec6"}]}}, 0x42) 09:40:40 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d9f4655fd9f4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {&(0x7f0000010400)="0200000003000000040000006a000f000300040000000000000000000f00bc0f", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d9f4655fd9f4655fd9f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)={[{@journal_dev={'journal_dev', 0x3d, 0x7}}]}) 09:40:40 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x5) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) 09:40:40 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d9f4655fd9f4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {&(0x7f0000010400)="0200000003000000040000006a000f000300040000000000000000000f00bc0f", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d9f4655fd9f4655fd9f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)={[{@journal_dev={'journal_dev', 0x3d, 0x7}}]}) [ 1410.436140] loop0: detected capacity change from 0 to 40 [ 1410.444201] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1410.454202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1410.494507] loop2: detected capacity change from 0 to 255 [ 1410.510523] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1410.550135] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1410.760904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1430.241791] loop3: detected capacity change from 0 to 255 [ 1430.247180] loop2: detected capacity change from 0 to 255 [ 1430.247526] loop0: detected capacity change from 0 to 40 09:41:00 executing program 4: r0 = syz_io_uring_setup(0x4d80, &(0x7f0000000000)={0x0, 0x96f4, 0x8, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x808c0, 0x0) io_uring_enter(0xffffffffffffffff, 0x392f, 0xdf08, 0x1, &(0x7f0000001580)={[0x100000001]}, 0x8) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x401}}, './file0\x00'}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000003800)={0x0}, 0x1, 0x0, 0x0, 0x4008845}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r0, 0x10000000) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f00000001c0)={0x2, 0x3ff}) syz_genetlink_get_family_id$batadv(&(0x7f0000003b00), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000003c00)={&(0x7f0000003ac0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003bc0)={0x0}, 0x1, 0x0, 0x0, 0x4048000}, 0x800) 09:41:00 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f0000000840)="371702e58e9e0cad57dad180a26cc2ca56cb6fa4865b71f01a382dfcca1fc475e3b609113f19d78955f058071db04e663deb405d82c842d53a2789115d24618ab083933b17a2903174e5fac0a24465d9d919852dbeb63fc222c9321044599f0a73cece45ddb02b863ae4cdcbfe3373e762ffc9b2b1d6e72cb9be02560d2eb9370914c96475703c7ce66d2e640cc01f246ab1bc9531f3dec2f74ccef445528f7df1d6dce824c029941524395e3948f090718c95b66886d6dbdd2d9428cde0976e21d5b3bb6adfae3f51295a6f1c12d7bed23a87be55a09dcdf87d541b0e8747f24f0c07a92b9afd5958c9ea072c289726247bbe68ee581753b935859b77", 0xfd}, {&(0x7f0000000940)="0c54e90f3e855603f30426501bead286899790adcfe6b704d313e2c93202750659b08665c7cc0a80cfc4cb464a00eeaba5d5e37c5282d4ff604146df42c064634162c70e6a7f70a72eac7c2054f03f2d7421e56d5b83316a980d053ab9b991c3a8f9100f36b5c9bd91e7050f271fab892fdedbd94e50e2633d64a01fc24bd5c2", 0x80}], 0x2, 0x1, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r3, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) sendfile(r3, r3, 0x0, 0xffffffff000) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x101400, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) sendfile(r5, r5, 0x0, 0xffffffff000) r6 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f00000005c0)='cpu.pressure\x00', 0x2, 0x0) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r1, &(0x7f0000000800)={&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000100)="a403decbc0acc0e28eb36e32ecc784c23890f73573fe12a7cf80b6ad3a2c346c5cb877da8f0e98b6f70ddcd1a73922b1cd9fa0aebd6176b9b9d0c254d9e6242c58b6f719f7c5a2b0875809da2abe263edc53e8f5c0e244a1c8faea21eab8121a323635e02762034de81d043f9173e0bf8c77d282cd40e77434e5cf0f53fac9679debc3020ab5040f4ded6a1f5053308eab69787637d241501868f1a93b4b2a0900eb228bcb8c123a090249dab4ec6f843ad656e1fcf5a7634e853bd4a7e852f83562c62982fd72fb7e4c83b2f4", 0xcd}, {&(0x7f0000000200)="811a01b155afbf90f53c41ab3000d50202af4df00ba8455a6f7e1ba512f1edd2cae45ad6c2a349646b2948c2de168e06e434202bd5f6d69e0e631310f2d8470af2aaac892816d3a627c361937b7096", 0x4f}, {&(0x7f0000000280)="31437b6c151456bfe79d31fca7502849acfed5beb08bfbbe8831a2233bba1c00c9c4a0298f07255ecc1c0aee8e889c0ffdd4018b17f8a3f3860edd9b3d6d9525771ddc9a632b5d93a29a82f0eb503532b35479d58da83d2ebeaf1686ffaf4f9c9ebcc711b68337146b55f95f81f838287347980c2c3723938f6308db60d06281d6db4d3b2ab85e13e6ff93428ffdae6d26677bd0181fd01560", 0x99}, {&(0x7f0000000340)="32d3ded08b639596011928188ed5da4d1816dbd7660f6e1102684f9a2c3ea1d83c3646cdf4fcb38b49c4cb35b332cb14af90ca4a82d99e026a766e8e62d8c75426a587ecc957bc063b312c1c48330e6a4a539e778cca6851c5bcb682b9de1307b8e5568f399e624a4b156c2684067dfc9c3b59bb07774f790c06e0a9c81e79f29b52c986e2f85673b68b9f4220821006f32ea5", 0x93}, {&(0x7f0000000400)="878bc70575ca9783abeabc338b7adabd80c16ea6ac112573d5615e76fe8c5bea1bef4232ab1440ddc6b65d4809ac0c4263118b84b519ff65e83838cc4eef4a5c1d3eca6f54fa69443c1d8cd9ae30416a0c3bbcb3902d6eb9222f1a3d244a7797be91dcf2b24835d1b7a65dc134e44e4dc97e1d013dd455f1df4252bf4ab05358a47c0b35fef727e2cfa4b5b6029ed970c573214f56baba7d92d166e8a0bf432ccef5dc622cbddfef7ef61db07cedd54d65b13c7379b76816c537d8607bdecec64c64698ab668f0ef1c616380b564a00f", 0xd0}], 0x5, &(0x7f0000000780)=[@rights={{0x24, 0x1, 0x1, [r2, 0xffffffffffffffff, r3, r0, r4]}}, @rights={{0x18, 0x1, 0x1, [r5, r6]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, r7}}}], 0x60, 0x80d5}, 0x200000d0) syz_open_procfs$namespace(0x0, &(0x7f0000006080)='ns/pid_for_children\x00') 09:41:00 executing program 7: syz_80211_inject_frame(&(0x7f0000000400)=@broadcast, &(0x7f0000000440)=@data_frame={@no_qos=@type00={{0x0, 0x2, 0x7, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x81}, @device_a, @device_a, @random="927a5ded1361", {0x0, 0x336}}, @a_msdu=[{@broadcast, @device_a, 0xee, "3203950a0f22cfecbc45c59e11cb5717f756ad4bdd81d384ae063ea34e092fd53ff9680f0430c9600ac1ce37bc63dd452dc003dfd6c86e43b8dbec1ec1df6e068e76d51efd8afdaa7c8a3231afe2d02c3c780fb79853dc3580853fa62a96ef79ef48809d6b04a48cb186dee4b617ff74e411801dc879e379b8ded65159cf0c021ddc8d077c462213f4f90bbd7848518e54f6932e8da3ec6f79e1ba9e6dd2a2cfb971db1c9996ff8581257962111d50abbdbdc5ecb0b1a63b4c26d03c2719189d9a415c98473cc811fcaedb7554051d43ef4e6e9e69e594d437d7ddb396ce32ee78597fde1894d09231874c9b6490"}]}, 0x114) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=@ctrl_frame=@bar={{}, {0x2}, @device_b, @device_a, @multi={{0x1, 0x1, 0x1, 0x0, 0x4}, [{0x0, 0x3, {0x5, 0xe9}, "9eb08feb44d860f0"}, {0x0, 0x2, {0x3, 0xd2}, "4708590ceca6c4e2"}, {0x0, 0x6, {0x4, 0x3}, "0531687e447cb155"}, {0x0, 0x0, {0x0, 0x1}, "0fe91858af2a0ec6"}]}}, 0x42) 09:41:00 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000040)='./file1\x00', 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) 09:41:00 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d9f4655fd9f4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {&(0x7f0000010400)="0200000003000000040000006a000f000300040000000000000000000f00bc0f", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d9f4655fd9f4655fd9f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)={[{@journal_dev={'journal_dev', 0x3d, 0x7}}]}) 09:41:00 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)}], 0x1, 0x8000000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) 09:41:00 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000010000)="eb58906d6b66732e66617400021e20000400000004f8", 0x16}, {0x0, 0x0, 0x4000}], 0x100c000, &(0x7f0000000040)) (fail_nth: 37) 09:41:00 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x5) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0xffffffff000) [ 1430.261344] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1430.273971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1430.283240] loop6: detected capacity change from 0 to 512 [ 1430.291680] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1430.295343] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1430.304401] FAULT_INJECTION: forcing a failure. [ 1430.304401] name failslab, interval 1, probability 0, space 0, times 0 09:41:00 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)}], 0x1, 0x8000000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) [ 1430.306711] CPU: 1 PID: 9502 Comm: syz-executor.1 Not tainted 5.17.0-next-20220401 #1 [ 1430.308462] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1430.310711] Call Trace: 09:41:00 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000040)='./file1\x00', 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) [ 1430.311218] [ 1430.311740] dump_stack_lvl+0x8b/0xb3 [ 1430.312521] should_fail.cold+0x5/0xa [ 1430.313305] ? kobject_uevent_env+0x236/0xfa0 [ 1430.314207] should_failslab+0x5/0x10 [ 1430.314987] kmem_cache_alloc_trace+0x55/0x3c0 [ 1430.315890] ? lock_is_held_type+0xd7/0x130 [ 1430.316751] kobject_uevent_env+0x236/0xfa0 [ 1430.317607] ? dev_uevent_filter+0xd0/0xd0 [ 1430.318449] ? _raw_spin_unlock+0x24/0x40 [ 1430.319274] disk_event_uevent+0x17b/0x1e0 [ 1430.320118] ? disk_events_async_show+0x10/0x10 [ 1430.321040] ? __fget_files+0x287/0x470 [ 1430.321862] disk_force_media_change+0x1e/0xc0 [ 1430.322770] loop_configure+0x755/0x1940 [ 1430.323584] ? __sanitizer_cov_trace_cmp2+0x22/0x80 [ 1430.324586] lo_ioctl+0x782/0x1850 [ 1430.325293] ? __x64_sys_openat+0x13f/0x1f0 [ 1430.326170] ? loop_set_status_old+0x1b0/0x1b0 [ 1430.327075] ? avc_ss_reset+0x180/0x180 [ 1430.327885] ? __lock_acquire+0xbac/0x6120 [ 1430.328803] ? loop_set_status_old+0x1b0/0x1b0 [ 1430.329731] blkdev_ioctl+0x356/0x7f0 [ 1430.330490] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 1430.331434] ? selinux_file_ioctl+0xb1/0x260 [ 1430.332310] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1430.333405] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 1430.334356] __x64_sys_ioctl+0x196/0x210 [ 1430.335164] do_syscall_64+0x3b/0x90 [ 1430.335899] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1430.336923] RIP: 0033:0x7f72f8f588d7 [ 1430.337664] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1430.341291] RSP: 002b:00007f72f64cdf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1430.342816] RAX: ffffffffffffffda RBX: 00007f72f8fa2970 RCX: 00007f72f8f588d7 [ 1430.344221] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1430.345631] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1430.347031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1430.348432] R13: 0000000000000004 R14: 00000000200004f0 R15: 0000000000000002 [ 1430.349863] [ 1430.350558] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1430.402543] loop1: detected capacity change from 0 to 64 09:41:00 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d9f4655fd9f4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {&(0x7f0000010400)="0200000003000000040000006a000f000300040000000000000000000f00bc0f", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d9f4655fd9f4655fd9f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)={[{@journal_dev={'journal_dev', 0x3d, 0x7}}]}) [ 1430.422924] loop0: detected capacity change from 0 to 40 09:41:00 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x5) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0xffffffff000) [ 1430.475751] loop6: detected capacity change from 0 to 512 09:41:00 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) 09:41:00 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000010000)="eb58906d6b66732e66617400021e20000400000004f8", 0x16}, {0x0, 0x0, 0x4000}], 0x100c000, &(0x7f0000000040)) (fail_nth: 38) 09:41:00 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f0000000840)="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", 0xfd}, {&(0x7f0000000940)="0c54e90f3e855603f30426501bead286899790adcfe6b704d313e2c93202750659b08665c7cc0a80cfc4cb464a00eeaba5d5e37c5282d4ff604146df42c064634162c70e6a7f70a72eac7c2054f03f2d7421e56d5b83316a980d053ab9b991c3a8f9100f36b5c9bd91e7050f271fab892fdedbd94e50e2633d64a01fc24bd5c2", 0x80}], 0x2, 0x1, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r3, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) sendfile(r3, r3, 0x0, 0xffffffff000) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x101400, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) sendfile(r5, r5, 0x0, 0xffffffff000) r6 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f00000005c0)='cpu.pressure\x00', 0x2, 0x0) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r1, &(0x7f0000000800)={&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000100)="a403decbc0acc0e28eb36e32ecc784c23890f73573fe12a7cf80b6ad3a2c346c5cb877da8f0e98b6f70ddcd1a73922b1cd9fa0aebd6176b9b9d0c254d9e6242c58b6f719f7c5a2b0875809da2abe263edc53e8f5c0e244a1c8faea21eab8121a323635e02762034de81d043f9173e0bf8c77d282cd40e77434e5cf0f53fac9679debc3020ab5040f4ded6a1f5053308eab69787637d241501868f1a93b4b2a0900eb228bcb8c123a090249dab4ec6f843ad656e1fcf5a7634e853bd4a7e852f83562c62982fd72fb7e4c83b2f4", 0xcd}, {&(0x7f0000000200)="811a01b155afbf90f53c41ab3000d50202af4df00ba8455a6f7e1ba512f1edd2cae45ad6c2a349646b2948c2de168e06e434202bd5f6d69e0e631310f2d8470af2aaac892816d3a627c361937b7096", 0x4f}, {&(0x7f0000000280)="31437b6c151456bfe79d31fca7502849acfed5beb08bfbbe8831a2233bba1c00c9c4a0298f07255ecc1c0aee8e889c0ffdd4018b17f8a3f3860edd9b3d6d9525771ddc9a632b5d93a29a82f0eb503532b35479d58da83d2ebeaf1686ffaf4f9c9ebcc711b68337146b55f95f81f838287347980c2c3723938f6308db60d06281d6db4d3b2ab85e13e6ff93428ffdae6d26677bd0181fd01560", 0x99}, {&(0x7f0000000340)="32d3ded08b639596011928188ed5da4d1816dbd7660f6e1102684f9a2c3ea1d83c3646cdf4fcb38b49c4cb35b332cb14af90ca4a82d99e026a766e8e62d8c75426a587ecc957bc063b312c1c48330e6a4a539e778cca6851c5bcb682b9de1307b8e5568f399e624a4b156c2684067dfc9c3b59bb07774f790c06e0a9c81e79f29b52c986e2f85673b68b9f4220821006f32ea5", 0x93}, {&(0x7f0000000400)="878bc70575ca9783abeabc338b7adabd80c16ea6ac112573d5615e76fe8c5bea1bef4232ab1440ddc6b65d4809ac0c4263118b84b519ff65e83838cc4eef4a5c1d3eca6f54fa69443c1d8cd9ae30416a0c3bbcb3902d6eb9222f1a3d244a7797be91dcf2b24835d1b7a65dc134e44e4dc97e1d013dd455f1df4252bf4ab05358a47c0b35fef727e2cfa4b5b6029ed970c573214f56baba7d92d166e8a0bf432ccef5dc622cbddfef7ef61db07cedd54d65b13c7379b76816c537d8607bdecec64c64698ab668f0ef1c616380b564a00f", 0xd0}], 0x5, &(0x7f0000000780)=[@rights={{0x24, 0x1, 0x1, [r2, 0xffffffffffffffff, r3, r0, r4]}}, @rights={{0x18, 0x1, 0x1, [r5, r6]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, r7}}}], 0x60, 0x80d5}, 0x200000d0) syz_open_procfs$namespace(0x0, &(0x7f0000006080)='ns/pid_for_children\x00') [ 1430.613221] loop2: detected capacity change from 0 to 255 [ 1430.619468] FAULT_INJECTION: forcing a failure. [ 1430.619468] name failslab, interval 1, probability 0, space 0, times 0 [ 1430.622017] CPU: 0 PID: 9523 Comm: syz-executor.1 Not tainted 5.17.0-next-20220401 #1 [ 1430.623727] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1430.626225] Call Trace: [ 1430.626735] loop3: detected capacity change from 0 to 255 [ 1430.626782] [ 1430.626794] dump_stack_lvl+0x8b/0xb3 [ 1430.629192] should_fail.cold+0x5/0xa 09:41:01 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000040)='./file1\x00', 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) [ 1430.630082] ? create_object.isra.0+0x3a/0xa20 [ 1430.631257] should_failslab+0x5/0x10 [ 1430.632238] kmem_cache_alloc+0x5b/0x480 [ 1430.633137] create_object.isra.0+0x3a/0xa20 [ 1430.634101] ? kasan_unpoison+0x23/0x50 [ 1430.634978] kmem_cache_alloc_trace+0x22e/0x3c0 [ 1430.636014] kobject_uevent_env+0x236/0xfa0 [ 1430.636939] ? dev_uevent_filter+0xd0/0xd0 [ 1430.637906] ? _raw_spin_unlock+0x24/0x40 [ 1430.638825] disk_event_uevent+0x17b/0x1e0 [ 1430.639759] ? disk_events_async_show+0x10/0x10 09:41:01 executing program 7: syz_80211_inject_frame(&(0x7f0000000400)=@broadcast, &(0x7f0000000440)=@data_frame={@no_qos=@type00={{0x0, 0x2, 0x7, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x81}, @device_a, @device_a, @random="927a5ded1361", {0x0, 0x336}}, @a_msdu=[{@broadcast, @device_a, 0xee, "3203950a0f22cfecbc45c59e11cb5717f756ad4bdd81d384ae063ea34e092fd53ff9680f0430c9600ac1ce37bc63dd452dc003dfd6c86e43b8dbec1ec1df6e068e76d51efd8afdaa7c8a3231afe2d02c3c780fb79853dc3580853fa62a96ef79ef48809d6b04a48cb186dee4b617ff74e411801dc879e379b8ded65159cf0c021ddc8d077c462213f4f90bbd7848518e54f6932e8da3ec6f79e1ba9e6dd2a2cfb971db1c9996ff8581257962111d50abbdbdc5ecb0b1a63b4c26d03c2719189d9a415c98473cc811fcaedb7554051d43ef4e6e9e69e594d437d7ddb396ce32ee78597fde1894d09231874c9b6490"}]}, 0x114) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=@ctrl_frame=@bar={{}, {0x2}, @device_b, @device_a, @multi={{0x1, 0x1, 0x1, 0x0, 0x4}, [{0x0, 0x3, {0x5, 0xe9}, "9eb08feb44d860f0"}, {0x0, 0x2, {0x3, 0xd2}, "4708590ceca6c4e2"}, {0x0, 0x6, {0x4, 0x3}, "0531687e447cb155"}, {0x0, 0x0, {0x0, 0x1}, "0fe91858af2a0ec6"}]}}, 0x42) [ 1430.640791] ? __fget_files+0x287/0x470 [ 1430.641750] disk_force_media_change+0x1e/0xc0 [ 1430.642771] loop_configure+0x755/0x1940 [ 1430.643686] ? __sanitizer_cov_trace_cmp2+0x22/0x80 [ 1430.644817] lo_ioctl+0x782/0x1850 [ 1430.645638] ? __x64_sys_openat+0x13f/0x1f0 [ 1430.646612] ? loop_set_status_old+0x1b0/0x1b0 [ 1430.647629] ? avc_ss_reset+0x180/0x180 [ 1430.648529] ? __lock_acquire+0xbac/0x6120 [ 1430.649564] ? loop_set_status_old+0x1b0/0x1b0 [ 1430.650570] blkdev_ioctl+0x356/0x7f0 [ 1430.651432] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 1430.652480] ? selinux_file_ioctl+0xb1/0x260 [ 1430.653473] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1430.654691] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 1430.655759] __x64_sys_ioctl+0x196/0x210 [ 1430.656677] do_syscall_64+0x3b/0x90 [ 1430.657529] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1430.658676] RIP: 0033:0x7f72f8f588d7 [ 1430.659494] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1430.663581] RSP: 002b:00007f72f64cdf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1430.665290] RAX: ffffffffffffffda RBX: 00007f72f8fa2970 RCX: 00007f72f8f588d7 [ 1430.666887] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1430.668469] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1430.670063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1430.671642] R13: 0000000000000004 R14: 00000000200004f0 R15: 0000000000000002 [ 1430.673254] [ 1430.678317] loop1: detected capacity change from 0 to 64 [ 1430.708551] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1430.713083] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1430.812386] loop0: detected capacity change from 0 to 40 [ 1430.821531] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1430.843178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1430.888617] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1430.948492] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 09:41:15 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000040)='./file1\x00', 0x80) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) 09:41:15 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d9f4655fd9f4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {&(0x7f0000010400)="0200000003000000040000006a000f000300040000000000000000000f00bc0f", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d9f4655fd9f4655fd9f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)={[{@journal_dev={'journal_dev', 0x3d, 0x7}}]}) 09:41:15 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x4801, 0x0) write$bt_hci(r0, 0x0, 0xffffffd0) r1 = fsmount(r0, 0x1, 0x4) ioctl$sock_bt_hci(r1, 0x800448d7, &(0x7f0000000000)="bbd8ad4e35285db3c67d6dcf6b47647801076bb4e6a8beda722c46c0a31871c66b65") 09:41:15 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) 09:41:15 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000010000)="eb58906d6b66732e66617400021e20000400000004f8", 0x16}, {0x0, 0x0, 0x4000}], 0x100c000, &(0x7f0000000040)) (fail_nth: 39) 09:41:15 executing program 7: syz_80211_inject_frame(&(0x7f0000000400)=@broadcast, &(0x7f0000000440)=@data_frame={@no_qos=@type00={{0x0, 0x2, 0x7, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x81}, @device_a, @device_a, @random="927a5ded1361", {0x0, 0x336}}, @a_msdu=[{@broadcast, @device_a, 0xee, "3203950a0f22cfecbc45c59e11cb5717f756ad4bdd81d384ae063ea34e092fd53ff9680f0430c9600ac1ce37bc63dd452dc003dfd6c86e43b8dbec1ec1df6e068e76d51efd8afdaa7c8a3231afe2d02c3c780fb79853dc3580853fa62a96ef79ef48809d6b04a48cb186dee4b617ff74e411801dc879e379b8ded65159cf0c021ddc8d077c462213f4f90bbd7848518e54f6932e8da3ec6f79e1ba9e6dd2a2cfb971db1c9996ff8581257962111d50abbdbdc5ecb0b1a63b4c26d03c2719189d9a415c98473cc811fcaedb7554051d43ef4e6e9e69e594d437d7ddb396ce32ee78597fde1894d09231874c9b6490"}]}, 0x114) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=@ctrl_frame=@bar={{}, {0x2}, @device_b, @device_a, @multi={{0x1, 0x1, 0x1, 0x0, 0x4}, [{0x0, 0x3, {0x5, 0xe9}, "9eb08feb44d860f0"}, {0x0, 0x2, {0x3, 0xd2}, "4708590ceca6c4e2"}, {0x0, 0x6, {0x4, 0x3}, "0531687e447cb155"}, {0x0, 0x0, {0x0, 0x1}, "0fe91858af2a0ec6"}]}}, 0x42) 09:41:15 executing program 4: setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001540)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback={0x0, 0x9}}, 0x1c, 0x0}}, {{&(0x7f0000000200)={0xa, 0x4e21, 0x2, @remote, 0x40}, 0x1c, &(0x7f0000000480), 0x3, &(0x7f0000000500)=[@rthdrdstopts={{0x40, 0x29, 0x37, {0x2c, 0x4, '\x00', [@enc_lim={0x4, 0x1, 0x7}, @enc_lim={0x4, 0x1, 0x1}, @enc_lim={0x4, 0x1, 0x9}, @enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x10, {0x0, 0x2, 0x8b, 0xfff9, [0x8]}}, @pad1, @jumbo={0xc2, 0x4, 0x10001}]}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x3c}}}], 0x58}}, {{&(0x7f00000005c0)={0xa, 0x4e22, 0x9, @local, 0x6}, 0x1c, &(0x7f0000000780)=[{&(0x7f00000007c0)="b6549fb29f1924c41612b4589d4078f8aa068ff560175e9dd4c1df596d7fb5d97ec4101a451022f9acdd4f48ab46182c5d071489ecf39262e932597233756cffcd489d3dbead37327777dd29b66902ec8870fe0e3fdf7bec5f9450df6a4ed60631", 0x61}, {&(0x7f0000000680)="ec34c3f8ae246106128a70ecc33fe247912f0c7d1d02c3c71caf813f06331be447f6cd68c18f90541c95c84e693f22274f774fe45a6940694275cdcd000778038fb806554dd16382ed1f032c675e012d7731feb8d06e526d44bc05478e9b2b07fabe7a17a125d8acb3923e3d223209fd1c07ba986f28312ec16c92dd0751af6a3933e65892ecf1b3cc2579a62d0e76fa313693b36ef04d371938231bf9dca4f3706220540b38463eba81904c277e", 0xae}, {&(0x7f0000000740)="04c8c24dd132851dc8d8f54756e6be2ab6a26a103e67c97d42d82aa91980ac28e8e54b829f95066d9b9ba281d0921918836f1df8a71adfbf0ea92db049aabd", 0x3f}], 0x3, &(0x7f00000019c0)=[@tclass={{0x14, 0x29, 0x43, 0x3}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x10000}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @rthdrdstopts={{0x70, 0x29, 0x37, {0x0, 0xa, '\x00', [@hao={0xc9, 0x10, @private0}, @enc_lim={0x4, 0x1, 0x1}, @pad1, @calipso={0x7, 0x30, {0x2, 0xa, 0x93, 0x80, [0x9, 0x6, 0x5, 0x5, 0x80000001]}}, @ra={0x5, 0x2, 0xffff}, @enc_lim={0x4, 0x1, 0x7f}, @ra={0x5, 0x2, 0x7}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x0, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x7f}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x10000}}, @flowinfo={{0x14, 0x29, 0xb, 0x4}}, @tclass={{0x14, 0x29, 0x43, 0x6}}, @rthdr_2292={{0x88, 0x29, 0x39, {0x0, 0xe, 0x0, 0xe0, 0x0, [@empty, @empty, @private1, @private2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}, @mcast1, @dev={0xfe, 0x80, '\x00', 0x38}]}}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x88, 0x6, 0x0, 0xfe, 0x0, [@remote, @remote, @private1]}}}], 0x1f0}}, {{&(0x7f0000000940)={0xa, 0x4e24, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffff9}, 0x1c, &(0x7f0000000a80)=[{&(0x7f0000000980)="68c2c8690dc86397ae7b1402dd28ee8a9def2a15ce8b85619d2c3926653c15d2cd5e6bc01b2195c3a68d766bfe3ce37894458a24ccdd05dc4de61528c9be5f7854a2823eb3a7a04003396b94e38e1ed9a0b7ea705f8250fb49d7777d75031a5b357c3006fa82e16f24f94276c8c64ca973bb926f485a4d9ada1178d0050ddd19afb529a435a9f51793db5ff47384d7265ea02e1edb887a630f8e2fb81968c1596c094cf794c7da3f1ab9a6e7af", 0xad}, {&(0x7f0000000a40)="c0322f6d1d88ba66f4b2cd7a64b92db9", 0x10}], 0x2}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000ac0)="51a9ca3efa021e8d8c10a8e5fdf948e7", 0x10}, {&(0x7f0000000b00)="378376af5476f9ee846ceae7e745090a7bb45d83bc574985b8200c325a16ab69f618a7a0803ec2e4eaa0cc030774aecc4ab90778dacef224c70ff7a9f46a916cf52ca303019b3d2f2e67370195827ea4e6d2968e6e44943af048c86cd000fcd973cffeeb2e9645babf3152db53ff0d837ac997ba0b96918cc59d37904c93b0665abfa01cd45d9421473798dec3023b4d9f39ca4635a079fe55254d5169a099da9cac86062e1526b694bc1961dafac2c3f7c352a5a2e3864b50cb25063c0e2f164b7cec", 0xc3}, {&(0x7f0000000c00)="e56d495ccf253238b6c8ed201e1d00fd117959c8490e8abc23f3acab54ffb4e5ed56fcc5ab9d1dbbbcca0bfc0836bd9cca58a87b09a3cef71e3b548f77b64ab84e2fb625da1f99c80a2f652867a666f3c004fadb481cc1c1700459950e8ed99fb0b0725933c43ad7202d208be35a6ec5a9fe37d2ced61aa3a72ab16684cd6cd432b016dddb250bc1d4ab2116efc5e05a585bb0d62c55bb27ae4ea7014d84957e2ee7451c2adb8982f0bf3342ecbac0f37db81f633799", 0xb6}, {&(0x7f0000000cc0)="0eba8451f768735959f5d3669b27fb0fc56838e88fa7714cbe3615c21d40602e75740475e01802fee5bf7047e2140f2d10459ae96a7fc35bb1db60991e3e27e1d8ecc182b11df785088904", 0x4b}, {&(0x7f0000000d40)="3f489aab2e0a0bf53f6dd0dea9de20207b0f2d466223387936794180544b2b7daeb665697472a1a928a180c6441ff837f8cd349a1009e54f6c52f4fcde25feba61d27d30c8134e", 0x9b}], 0x5, &(0x7f00000016c0)=[@rthdr={{0x88, 0x29, 0x39, {0x2f, 0xe, 0x2, 0x1, 0x0, [@dev={0xfe, 0x80, '\x00', 0x3f}, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x12}, @rand_addr=' \x01\x00', @mcast1, @remote, @mcast2]}}}, @rthdr={{0x18, 0x29, 0x39, {0x67, 0x0, 0x1, 0x26}}}, @hopopts_2292={{0x70, 0x29, 0x36, {0x1, 0xa, '\x00', [@hao={0xc9, 0x10, @local}, @enc_lim={0x4, 0x1, 0x1}, @pad1, @ra={0x5, 0x2, 0x1}, @calipso={0x7, 0x30, {0x0, 0xa, 0x1, 0x2e, [0xfd, 0x6, 0x101, 0x9, 0x82c]}}, @ra={0x5, 0x2, 0x101}]}}}], 0x110}}, {{&(0x7f0000000f80)={0xa, 0x4e24, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x1}, 0x1c, &(0x7f0000001380)=[{&(0x7f0000000fc0)="3def2e87dd18e311e9a0e043861700c47d1ae22d3ced1d4bab5ba1837b8d48af834ba6c194c059f8a5a35a4b4bde688961b4077687a1225bc9ae6611a958d9f235cf67cda5b5cb17895211f07ba0b6d0de353cdfa6faf3f9bbc5f8edb6acc8d5b7a3c022e4610dea781dfa1ce4b205c317a3d81eb7e08c3a71445a079c9125114c56d5459d2de07fcf27c23f09f89e8cf0cea5c92dffa9e6f995ebafba01acdda63eff2ef0c8d54700c2759c6b", 0xad}, {&(0x7f0000001080)="ac333e8830c08b41e4eb34963e2c37fcde43b811b77fd50ac98cbe11925ea98c8f76403b16895c12620b72ba345133a2810f3a26c381e2b5ea6dfc4c8f6900f80baefe4513881cd964891be1d21c448340525152c3d2804e0dac16948f28635394820b5862669ad4d11ce3ccfe470b7e7c9d7e1ac64ddc695a65e0f27be301a109791f0c5cbcbb68bd0edc42daf250b44798caca93c70251d03db3dcf1c25bd7d7f43faeb0bac4", 0xa7}, {&(0x7f0000001140)="edfb5afa641281b996d6fee421d5d1a7867a9fd3a34dde40a733e72ca15684234c0427d9f27293f54db73ed85c9c67b8a77e3f15c79f52cdab20701adc97e4399c35e0b220400cb713c4c264f8771a94a5f4950a6effd1a21c242dab29a7c4308b89eb49792324fbc6ecddb36ae27bcd6bc5be3eff3408dad25b34125c5021b49501ca31f87b6cad06232940b7e6000a90b7cb479fc925a75d3304eb46509a0e21815de8e67c10b9be25084a3da2e59421e1240ef68d6009ed0f655e97b27711b19b9e6b06673b9cd55add549b86bb", 0xcf}, {&(0x7f0000001240)="3af7cae4e5d58ae559d40c97fe2227dd1e413d99c272679c676175236daf1b182c05d7f22f6e06e12234860766184846c0166f98c7067c1dc793ccae9a071274125bbee12d64e7d2c41c30cd30732b0108e883279985013cf4412447f9de6f97e38f6353279b6bd4586134254bcec950d71908fd6eb99a51d53c3165eaf62918d59782ff754997babeb65eb33c12815ba15de025a292c401863b95a2c5bf4d6f3bf00c90c6fc197dcc6aeedc27d6d40756e44f4c8bdd1f6f8815922b78e3f49ef969bde94a11", 0xc6}, {&(0x7f0000001340)="d327b07bebba4bb97725450724d64efbda32461210ab8d51279093b04e42efe6948c21", 0x23}], 0x5, &(0x7f0000001400)=[@hoplimit={{0x14}}, @flowinfo={{0x14, 0x29, 0xb, 0x3}}, @rthdr={{0x28, 0x29, 0x39, {0x16, 0x2, 0x1, 0x25, 0x0, [@remote]}}}, @dstopts={{0xb8, 0x29, 0x37, {0x33, 0x13, '\x00', [@jumbo={0xc2, 0x4, 0x2}, @enc_lim={0x4, 0x1, 0xff}, @pad1, @generic={0x7f, 0x90, "ee357089184581c0cab3a28294b37cadd86e246a031bd25edf8361679dca7dd411bb1ed93b7fab7ead20a0858a321165a7e509898ca1b8925df8b0aae155d5214a893444abecf165ff9c5ab20563feabbb1233f0e0f2ae684a0c9a355934d8f184123aaa03b80c1f959fe08b305bc38d212f45abbe6649c6ac2d27911ac511c374492e63a08613b3575629075594ce55"}]}}}], 0x110}}], 0x6, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000000)=0x10001, 0x4) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f00000000c0)={0x6, {{0xa, 0x4e23, 0x10000, @private1={0xfc, 0x1, '\x00', 0x1}, 0xc63}}, {{0xa, 0x4e24, 0xba, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xb6}}}, 0x108) 09:41:15 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x5) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0xffffffff000) [ 1444.621563] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1444.629294] loop0: detected capacity change from 0 to 40 [ 1444.631829] loop3: detected capacity change from 0 to 255 [ 1444.636286] FAULT_INJECTION: forcing a failure. [ 1444.636286] name failslab, interval 1, probability 0, space 0, times 0 [ 1444.637525] CPU: 0 PID: 9550 Comm: syz-executor.1 Not tainted 5.17.0-next-20220401 #1 [ 1444.638360] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1444.639547] Call Trace: [ 1444.639825] [ 1444.640062] dump_stack_lvl+0x8b/0xb3 [ 1444.640479] should_fail.cold+0x5/0xa [ 1444.640888] ? kobject_get_path+0xc0/0x1d0 [ 1444.641352] should_failslab+0x5/0x10 [ 1444.641828] __kmalloc+0x72/0x440 [ 1444.642202] kobject_get_path+0xc0/0x1d0 [ 1444.642636] kobject_uevent_env+0x25c/0xfa0 [ 1444.643091] ? _raw_spin_unlock+0x24/0x40 [ 1444.643532] disk_event_uevent+0x17b/0x1e0 [ 1444.643978] ? disk_events_async_show+0x10/0x10 [ 1444.644471] ? __fget_files+0x287/0x470 [ 1444.644900] disk_force_media_change+0x1e/0xc0 [ 1444.645382] loop_configure+0x755/0x1940 [ 1444.645829] ? __sanitizer_cov_trace_cmp2+0x22/0x80 [ 1444.646363] lo_ioctl+0x782/0x1850 [ 1444.646738] ? __x64_sys_openat+0x13f/0x1f0 [ 1444.647202] ? loop_set_status_old+0x1b0/0x1b0 [ 1444.647683] ? avc_ss_reset+0x180/0x180 [ 1444.648119] ? lock_is_held_type+0xd7/0x130 [ 1444.648578] ? irqentry_enter+0x26/0x50 [ 1444.649000] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1444.649585] ? lockdep_hardirqs_on+0x79/0x100 [ 1444.650098] ? loop_set_status_old+0x1b0/0x1b0 [ 1444.650587] blkdev_ioctl+0x356/0x7f0 [ 1444.650996] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 1444.651500] ? selinux_file_ioctl+0xb1/0x260 [ 1444.651965] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1444.652548] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 1444.653058] __x64_sys_ioctl+0x196/0x210 [ 1444.653492] do_syscall_64+0x3b/0x90 [ 1444.653888] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1444.654431] RIP: 0033:0x7f72f8f588d7 [ 1444.654821] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1444.656765] RSP: 002b:00007f72f64cdf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1444.657583] RAX: ffffffffffffffda RBX: 00007f72f8fa2970 RCX: 00007f72f8f588d7 [ 1444.657964] loop6: detected capacity change from 0 to 512 [ 1444.658364] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1444.658374] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1444.658382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1444.658389] R13: 0000000000000004 R14: 00000000200004f0 R15: 0000000000000002 [ 1444.658412] [ 1444.659600] loop2: detected capacity change from 0 to 255 [ 1444.675571] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1444.680753] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1444.686434] loop1: detected capacity change from 0 to 64 09:41:15 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000010000)="eb58906d6b66732e66617400021e20000400000004f8", 0x16}, {0x0, 0x0, 0x4000}], 0x100c000, &(0x7f0000000040)) (fail_nth: 40) [ 1444.746486] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 09:41:15 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000040)='./file1\x00', 0x80) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) [ 1444.765493] FAULT_INJECTION: forcing a failure. [ 1444.765493] name failslab, interval 1, probability 0, space 0, times 0 [ 1444.766750] CPU: 0 PID: 9565 Comm: syz-executor.1 Not tainted 5.17.0-next-20220401 #1 [ 1444.767572] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1444.768763] Call Trace: [ 1444.769033] [ 1444.769268] dump_stack_lvl+0x8b/0xb3 [ 1444.769697] should_fail.cold+0x5/0xa [ 1444.770102] ? create_object.isra.0+0x3a/0xa20 [ 1444.770590] should_failslab+0x5/0x10 [ 1444.770993] kmem_cache_alloc+0x5b/0x480 [ 1444.771432] create_object.isra.0+0x3a/0xa20 [ 1444.771891] ? kasan_unpoison+0x23/0x50 [ 1444.772317] __kmalloc+0x25b/0x440 [ 1444.772695] kobject_get_path+0xc0/0x1d0 [ 1444.773134] kobject_uevent_env+0x25c/0xfa0 [ 1444.773592] ? _raw_spin_unlock+0x24/0x40 [ 1444.774029] disk_event_uevent+0x17b/0x1e0 [ 1444.774473] ? disk_events_async_show+0x10/0x10 [ 1444.774959] ? __fget_files+0x287/0x470 [ 1444.775394] disk_force_media_change+0x1e/0xc0 [ 1444.775880] loop_configure+0x755/0x1940 [ 1444.776321] ? __sanitizer_cov_trace_cmp2+0x22/0x80 [ 1444.776860] lo_ioctl+0x782/0x1850 [ 1444.777241] ? __x64_sys_openat+0x13f/0x1f0 [ 1444.777728] ? loop_set_status_old+0x1b0/0x1b0 [ 1444.778213] ? avc_ss_reset+0x180/0x180 [ 1444.778649] ? __lock_acquire+0xbac/0x6120 [ 1444.779141] ? loop_set_status_old+0x1b0/0x1b0 [ 1444.779627] blkdev_ioctl+0x356/0x7f0 [ 1444.780039] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 1444.780547] ? selinux_file_ioctl+0xb1/0x260 [ 1444.781023] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1444.781615] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 1444.782125] __x64_sys_ioctl+0x196/0x210 [ 1444.782560] do_syscall_64+0x3b/0x90 [ 1444.782964] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1444.783509] RIP: 0033:0x7f72f8f588d7 [ 1444.783903] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1444.785927] RSP: 002b:00007f72f64cdf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1444.786758] RAX: ffffffffffffffda RBX: 00007f72f8fa2970 RCX: 00007f72f8f588d7 [ 1444.787536] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1444.788316] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1444.789103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1444.789895] R13: 0000000000000004 R14: 00000000200004f0 R15: 0000000000000002 [ 1444.790649] 09:41:15 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file1\x00', 0x20, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r0, r0, &(0x7f0000000040)=0x2, 0x4) pwritev(r0, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) openat(r0, &(0x7f00000000c0)='./mnt\x00', 0x2, 0x40) sendfile(r0, r0, 0x0, 0xffffffff000) dup(r0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', &(0x7f00000001c0), 0x0) 09:41:15 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x4801, 0x0) write$bt_hci(r0, 0x0, 0xffffffd0) r1 = fsmount(r0, 0x1, 0x4) ioctl$sock_bt_hci(r1, 0x800448d7, &(0x7f0000000000)="bbd8ad4e35285db3c67d6dcf6b47647801076bb4e6a8beda722c46c0a31871c66b65") [ 1444.814837] loop0: detected capacity change from 0 to 40 09:41:15 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d9f4655fd9f4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {&(0x7f0000010400)="0200000003000000040000006a000f000300040000000000000000000f00bc0f", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d9f4655fd9f4655fd9f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)={[{@journal_dev={'journal_dev', 0x3d, 0x7}}]}) [ 1444.827083] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 09:41:15 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) [ 1444.854576] loop1: detected capacity change from 0 to 64 [ 1444.862301] loop6: detected capacity change from 0 to 33 [ 1444.895297] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1444.900987] EXT4-fs (loop6): bad geometry: block count 128 exceeds size of device (8 blocks) 09:41:29 executing program 7: syz_80211_inject_frame(&(0x7f0000000400)=@broadcast, &(0x7f0000000440)=@data_frame={@no_qos=@type00={{0x0, 0x2, 0x7, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x81}, @device_a, @device_a, @random="927a5ded1361", {0x0, 0x336}}, @a_msdu=[{@broadcast, @device_a, 0xee, "3203950a0f22cfecbc45c59e11cb5717f756ad4bdd81d384ae063ea34e092fd53ff9680f0430c9600ac1ce37bc63dd452dc003dfd6c86e43b8dbec1ec1df6e068e76d51efd8afdaa7c8a3231afe2d02c3c780fb79853dc3580853fa62a96ef79ef48809d6b04a48cb186dee4b617ff74e411801dc879e379b8ded65159cf0c021ddc8d077c462213f4f90bbd7848518e54f6932e8da3ec6f79e1ba9e6dd2a2cfb971db1c9996ff8581257962111d50abbdbdc5ecb0b1a63b4c26d03c2719189d9a415c98473cc811fcaedb7554051d43ef4e6e9e69e594d437d7ddb396ce32ee78597fde1894d09231874c9b6490"}]}, 0x114) 09:41:29 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d9f4655fd9f4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {&(0x7f0000010400)="0200000003000000040000006a000f000300040000000000000000000f00bc0f", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d9f4655fd9f4655fd9f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)={[{@journal_dev={'journal_dev', 0x3d, 0x7}}]}) [ 1458.628726] UDC core: couldn't find an available UDC or it's busy: -19 [ 1458.629474] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 09:41:29 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x5) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0xffffffff000) 09:41:29 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) 09:41:29 executing program 5: syz_io_uring_setup(0x3514, &(0x7f0000000040), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x41) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) syz_io_uring_setup(0x37cf, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x17d}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0x1f4) r1 = syz_open_dev$vcsa(&(0x7f0000000200), 0x5, 0x103400) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000240)={0x101, 0x2}) write$sndseq(r0, &(0x7f0000000140)=[{0xff, 0x7, 0x6, 0x61, @time={0x3ff, 0x1}, {0x9, 0x1f}, {0xff, 0x5}, @raw32={[0x5, 0x3ff, 0x5]}}], 0x1c) 09:41:29 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e46f, [{{0x9, 0x2, 0x48}}]}}, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/hci\x00') ioctl$TIOCGWINSZ(r0, 0xc0085504, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r2, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) sendfile(r2, r2, 0x0, 0xffffffff000) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x42b}}, './file1\x00'}) openat(r3, &(0x7f00000001c0)='./file0\x00', 0x2, 0x0) 09:41:29 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000010000)="eb58906d6b66732e66617400021e20000400000004f8", 0x16}, {0x0, 0x0, 0x4000}], 0x100c000, &(0x7f0000000040)) (fail_nth: 41) 09:41:29 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000040)='./file1\x00', 0x80) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) [ 1458.644501] loop6: detected capacity change from 0 to 33 [ 1458.651577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1458.654303] FAULT_INJECTION: forcing a failure. [ 1458.654303] name failslab, interval 1, probability 0, space 0, times 0 [ 1458.655697] CPU: 1 PID: 9589 Comm: syz-executor.1 Not tainted 5.17.0-next-20220401 #1 [ 1458.656458] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1458.657545] Call Trace: [ 1458.657803] [ 1458.658045] dump_stack_lvl+0x8b/0xb3 [ 1458.658435] should_fail.cold+0x5/0xa [ 1458.658821] ? __alloc_skb+0x211/0x340 [ 1458.659245] should_failslab+0x5/0x10 [ 1458.659623] kmem_cache_alloc_node+0x55/0x490 [ 1458.660072] __alloc_skb+0x211/0x340 [ 1458.660440] alloc_uevent_skb+0x7b/0x210 [ 1458.660839] kobject_uevent_env+0xaa4/0xfa0 [ 1458.661301] ? _raw_spin_unlock+0x24/0x40 [ 1458.661714] disk_event_uevent+0x17b/0x1e0 [ 1458.662140] ? disk_events_async_show+0x10/0x10 [ 1458.662651] ? __fget_files+0x287/0x470 [ 1458.663082] disk_force_media_change+0x1e/0xc0 [ 1458.663555] loop_configure+0x755/0x1940 [ 1458.663986] ? __sanitizer_cov_trace_cmp2+0x22/0x80 [ 1458.664522] lo_ioctl+0x782/0x1850 [ 1458.664897] ? __x64_sys_openat+0x13f/0x1f0 [ 1458.665348] ? loop_set_status_old+0x1b0/0x1b0 [ 1458.665849] ? avc_ss_reset+0x180/0x180 [ 1458.666272] ? __lock_acquire+0xbac/0x6120 [ 1458.666759] ? loop_set_status_old+0x1b0/0x1b0 [ 1458.667237] blkdev_ioctl+0x356/0x7f0 [ 1458.667636] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 1458.668129] ? selinux_file_ioctl+0xb1/0x260 [ 1458.668584] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1458.669159] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 1458.669664] __x64_sys_ioctl+0x196/0x210 [ 1458.670110] do_syscall_64+0x3b/0x90 [ 1458.670505] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1458.671039] RIP: 0033:0x7f72f8f588d7 [ 1458.671419] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1458.673285] RSP: 002b:00007f72f64cdf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1458.674074] RAX: ffffffffffffffda RBX: 00007f72f8fa2970 RCX: 00007f72f8f588d7 [ 1458.674804] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1458.675532] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1458.676265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1458.676982] R13: 0000000000000004 R14: 00000000200004f0 R15: 0000000000000002 [ 1458.677722] [ 1458.686397] EXT4-fs (loop6): bad geometry: block count 128 exceeds size of device (8 blocks) [ 1458.687924] loop1: detected capacity change from 0 to 64 [ 1458.689262] loop0: detected capacity change from 0 to 40 [ 1458.691279] loop3: detected capacity change from 0 to 255 [ 1458.692987] loop2: detected capacity change from 0 to 255 [ 1458.707266] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1458.709551] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1458.735954] UDC core: couldn't find an available UDC or it's busy: -19 [ 1458.736651] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 09:41:29 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d9f4655fd9f4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {&(0x7f0000010400)="0200000003000000040000006a000f000300040000000000000000000f00bc0f", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d9f4655fd9f4655fd9f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)={[{@journal_dev={'journal_dev', 0x3d, 0x7}}]}) 09:41:29 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000010000)="eb58906d6b66732e66617400021e20000400000004f8", 0x16}, {0x0, 0x0, 0x4000}], 0x100c000, &(0x7f0000000040)) (fail_nth: 42) [ 1458.805277] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 09:41:29 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000040)='./file1\x00', 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, 0x0, 0x0, 0x8000000, 0x0) 09:41:29 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) 09:41:29 executing program 5: syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file2\x00', 0x6, 0x1, &(0x7f0000000180)=[{&(0x7f0000000240)="0b4985e30ff998a76538f2d693e2850d06e3ba5db72f07253dd5d859d92c68760a82ec56d26993355e9ab47fa76b2fe45c7e84034a90c6a687ef0e71dd7ddea5774f63a437b6ef89e7091d530a408209f8bb1cacb5d3bd33035120e980653ec1ebc24dcd96b049301646f1d3aa4fe03baeb37712", 0x74, 0x9}], 0x40000, &(0x7f0000000300)={[{@mpol={'mpol', 0x3d, {'local', '', @void}}}], [{@dont_hash}, {@measure}, {@fscontext={'fscontext', 0x3d, 'system_u'}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) sendfile(r0, r0, 0x0, 0xffffffff000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x4, 0x8, 0x5, 0x45, @remote, @loopback, 0x40, 0x7, 0x7fff, 0x8000}}) syz_mount_image$nfs4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000640)=[{&(0x7f0000000200)='>', 0x1}, {&(0x7f0000000400)="5f7beb481f77c24110", 0x9, 0xfffffffffffffff8}, {0x0}], 0x0, 0x0) [ 1458.827918] loop6: detected capacity change from 0 to 33 [ 1458.835351] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1458.853891] FAULT_INJECTION: forcing a failure. [ 1458.853891] name failslab, interval 1, probability 0, space 0, times 0 [ 1458.855332] CPU: 1 PID: 9607 Comm: syz-executor.1 Not tainted 5.17.0-next-20220401 #1 [ 1458.856186] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1458.857436] Call Trace: [ 1458.857851] [ 1458.858159] dump_stack_lvl+0x8b/0xb3 [ 1458.858636] should_fail.cold+0x5/0xa [ 1458.859056] ? create_object.isra.0+0x3a/0xa20 [ 1458.859546] should_failslab+0x5/0x10 [ 1458.859959] kmem_cache_alloc+0x5b/0x480 [ 1458.860414] create_object.isra.0+0x3a/0xa20 [ 1458.860894] ? kasan_unpoison+0x23/0x50 [ 1458.861356] kmem_cache_alloc_node+0x248/0x490 [ 1458.861870] __alloc_skb+0x211/0x340 [ 1458.862279] alloc_uevent_skb+0x7b/0x210 [ 1458.862720] kobject_uevent_env+0xaa4/0xfa0 [ 1458.863201] ? _raw_spin_unlock+0x24/0x40 [ 1458.863658] disk_event_uevent+0x17b/0x1e0 [ 1458.864121] ? disk_events_async_show+0x10/0x10 [ 1458.864674] ? __fget_files+0x287/0x470 [ 1458.865155] disk_force_media_change+0x1e/0xc0 [ 1458.865683] loop_configure+0x755/0x1940 [ 1458.866194] ? __sanitizer_cov_trace_cmp2+0x22/0x80 [ 1458.866792] lo_ioctl+0x782/0x1850 [ 1458.867213] ? __x64_sys_openat+0x13f/0x1f0 [ 1458.867720] ? loop_set_status_old+0x1b0/0x1b0 [ 1458.868253] ? avc_ss_reset+0x180/0x180 [ 1458.868732] ? __lock_acquire+0xbac/0x6120 [ 1458.869270] ? loop_set_status_old+0x1b0/0x1b0 [ 1458.869809] blkdev_ioctl+0x356/0x7f0 [ 1458.870267] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 1458.870808] ? selinux_file_ioctl+0xb1/0x260 [ 1458.871328] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1458.871976] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 1458.872531] __x64_sys_ioctl+0x196/0x210 [ 1458.873008] do_syscall_64+0x3b/0x90 [ 1458.873444] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1458.874077] RIP: 0033:0x7f72f8f588d7 [ 1458.874506] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1458.876645] RSP: 002b:00007f72f64cdf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1458.877522] RAX: ffffffffffffffda RBX: 00007f72f8fa2970 RCX: 00007f72f8f588d7 [ 1458.878352] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1458.879181] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1458.880008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1458.880822] R13: 0000000000000004 R14: 00000000200004f0 R15: 0000000000000002 [ 1458.881671] [ 1458.888662] EXT4-fs (loop6): bad geometry: block count 128 exceeds size of device (8 blocks) 09:41:29 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x5) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0xffffffff000) [ 1458.919323] loop0: detected capacity change from 0 to 40 [ 1458.921344] loop3: detected capacity change from 0 to 255 [ 1458.925363] loop2: detected capacity change from 0 to 255 09:41:29 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x0, 0x0, 0x0, &(0x7f0000000180)={[{@journal_dev={'journal_dev', 0x3d, 0x7}}]}) [ 1458.935224] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1458.939590] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1458.945088] loop1: detected capacity change from 0 to 64 [ 1459.011671] loop5: detected capacity change from 0 to 16383 09:41:29 executing program 7: syz_80211_inject_frame(&(0x7f0000000400)=@broadcast, &(0x7f0000000440)=@data_frame={@no_qos=@type00={{0x0, 0x2, 0x7, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x81}, @device_a, @device_a, @random="927a5ded1361", {0x0, 0x336}}, @a_msdu=[{@broadcast, @device_a, 0xee, "3203950a0f22cfecbc45c59e11cb5717f756ad4bdd81d384ae063ea34e092fd53ff9680f0430c9600ac1ce37bc63dd452dc003dfd6c86e43b8dbec1ec1df6e068e76d51efd8afdaa7c8a3231afe2d02c3c780fb79853dc3580853fa62a96ef79ef48809d6b04a48cb186dee4b617ff74e411801dc879e379b8ded65159cf0c021ddc8d077c462213f4f90bbd7848518e54f6932e8da3ec6f79e1ba9e6dd2a2cfb971db1c9996ff8581257962111d50abbdbdc5ecb0b1a63b4c26d03c2719189d9a415c98473cc811fcaedb7554051d43ef4e6e9e69e594d437d7ddb396ce32ee78597fde1894d09231874c9b6490"}]}, 0x114) [ 1459.026834] No source specified 09:41:29 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000040)='./file1\x00', 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, 0x0, 0x0, 0x8000000, 0x0) [ 1459.051337] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1459.078386] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1459.091236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1459.130837] loop0: detected capacity change from 0 to 40 09:41:45 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x5) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0xffffffff000) 09:41:45 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) 09:41:45 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000040)='./file1\x00', 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, 0x0, 0x0, 0x8000000, 0x0) 09:41:45 executing program 5: syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file2\x00', 0x6, 0x1, &(0x7f0000000180)=[{&(0x7f0000000240)="0b4985e30ff998a76538f2d693e2850d06e3ba5db72f07253dd5d859d92c68760a82ec56d26993355e9ab47fa76b2fe45c7e84034a90c6a687ef0e71dd7ddea5774f63a437b6ef89e7091d530a408209f8bb1cacb5d3bd33035120e980653ec1ebc24dcd96b049301646f1d3aa4fe03baeb37712", 0x74, 0x9}], 0x40000, &(0x7f0000000300)={[{@mpol={'mpol', 0x3d, {'local', '', @void}}}], [{@dont_hash}, {@measure}, {@fscontext={'fscontext', 0x3d, 'system_u'}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) sendfile(r0, r0, 0x0, 0xffffffff000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x4, 0x8, 0x5, 0x45, @remote, @loopback, 0x40, 0x7, 0x7fff, 0x8000}}) syz_mount_image$nfs4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000640)=[{&(0x7f0000000200)='>', 0x1}, {&(0x7f0000000400)="5f7beb481f77c24110", 0x9, 0xfffffffffffffff8}, {0x0}], 0x0, 0x0) [ 1474.752404] loop3: detected capacity change from 0 to 255 [ 1474.761900] loop0: detected capacity change from 0 to 40 [ 1474.768950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:41:45 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x0, 0x0, 0x0, &(0x7f0000000180)={[{@journal_dev={'journal_dev', 0x3d, 0x7}}]}) 09:41:45 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000040)='./file1\x00', 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, 0x0, 0x0, 0x8000000, 0x0) 09:41:45 executing program 7: syz_80211_inject_frame(&(0x7f0000000400)=@broadcast, &(0x7f0000000440)=@data_frame={@no_qos=@type00={{0x0, 0x2, 0x7, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x81}, @device_a, @device_a, @random="927a5ded1361", {0x0, 0x336}}, @a_msdu=[{@broadcast, @device_a, 0xee, "3203950a0f22cfecbc45c59e11cb5717f756ad4bdd81d384ae063ea34e092fd53ff9680f0430c9600ac1ce37bc63dd452dc003dfd6c86e43b8dbec1ec1df6e068e76d51efd8afdaa7c8a3231afe2d02c3c780fb79853dc3580853fa62a96ef79ef48809d6b04a48cb186dee4b617ff74e411801dc879e379b8ded65159cf0c021ddc8d077c462213f4f90bbd7848518e54f6932e8da3ec6f79e1ba9e6dd2a2cfb971db1c9996ff8581257962111d50abbdbdc5ecb0b1a63b4c26d03c2719189d9a415c98473cc811fcaedb7554051d43ef4e6e9e69e594d437d7ddb396ce32ee78597fde1894d09231874c9b6490"}]}, 0x114) 09:41:45 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000010000)="eb58906d6b66732e66617400021e20000400000004f8", 0x16}, {0x0, 0x0, 0x4000}], 0x100c000, &(0x7f0000000040)) (fail_nth: 43) [ 1474.781901] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1474.782991] FAULT_INJECTION: forcing a failure. [ 1474.782991] name failslab, interval 1, probability 0, space 0, times 0 [ 1474.784836] CPU: 1 PID: 9642 Comm: syz-executor.1 Not tainted 5.17.0-next-20220401 #1 [ 1474.786082] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1474.787844] Call Trace: [ 1474.788248] [ 1474.788591] dump_stack_lvl+0x8b/0xb3 [ 1474.789211] should_fail.cold+0x5/0xa [ 1474.789824] should_failslab+0x5/0x10 [ 1474.790432] __kmalloc_node_track_caller+0x7e/0x440 [ 1474.791226] ? alloc_uevent_skb+0x7b/0x210 [ 1474.791906] __alloc_skb+0xe3/0x340 [ 1474.792507] alloc_uevent_skb+0x7b/0x210 [ 1474.793182] kobject_uevent_env+0xaa4/0xfa0 [ 1474.793895] ? _raw_spin_unlock+0x24/0x40 [ 1474.794568] disk_event_uevent+0x17b/0x1e0 [ 1474.795235] ? disk_events_async_show+0x10/0x10 [ 1474.795967] ? __fget_files+0x287/0x470 [ 1474.796605] disk_force_media_change+0x1e/0xc0 [ 1474.797361] loop_configure+0x755/0x1940 [ 1474.798024] ? __sanitizer_cov_trace_cmp2+0x22/0x80 [ 1474.798859] lo_ioctl+0x782/0x1850 [ 1474.799435] ? __x64_sys_openat+0x13f/0x1f0 [ 1474.800161] ? loop_set_status_old+0x1b0/0x1b0 [ 1474.800916] ? avc_ss_reset+0x180/0x180 [ 1474.801603] ? __lock_acquire+0xbac/0x6120 [ 1474.802389] ? loop_set_status_old+0x1b0/0x1b0 [ 1474.803147] blkdev_ioctl+0x356/0x7f0 [ 1474.803775] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 1474.804580] ? selinux_file_ioctl+0xb1/0x260 [ 1474.805326] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1474.806263] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 1474.807068] __x64_sys_ioctl+0x196/0x210 [ 1474.807737] do_syscall_64+0x3b/0x90 [ 1474.808360] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1474.809212] RIP: 0033:0x7f72f8f588d7 [ 1474.809836] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1474.812889] RSP: 002b:00007f72f64cdf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1474.814163] RAX: ffffffffffffffda RBX: 00007f72f8fa2970 RCX: 00007f72f8f588d7 [ 1474.815338] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1474.816525] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1474.817702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1474.818889] R13: 0000000000000004 R14: 00000000200004f0 R15: 0000000000000002 [ 1474.820089] [ 1474.835438] No source specified [ 1474.852273] loop4: detected capacity change from 0 to 40 [ 1474.857339] loop2: detected capacity change from 0 to 255 09:41:45 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x0, 0x0, 0x0, &(0x7f0000000180)={[{@journal_dev={'journal_dev', 0x3d, 0x7}}]}) [ 1474.861967] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 09:41:45 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000040)='./file1\x00', 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000640), 0x0, 0x8000000, 0x0) 09:41:45 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) [ 1474.872894] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1474.876289] loop1: detected capacity change from 0 to 64 [ 1474.941869] loop5: detected capacity change from 0 to 16383 09:41:45 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x5) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0x0) 09:41:45 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000010000)="eb58906d6b66732e66617400021e20000400000004f8", 0x16}, {0x0, 0x0, 0x4000}], 0x100c000, &(0x7f0000000040)) (fail_nth: 44) [ 1474.987896] No source specified 09:41:45 executing program 4: migrate_pages(0x0, 0x8, &(0x7f0000000000)=0x2, &(0x7f0000000040)=0x1) tkill(0x0, 0xc) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = getpid() pidfd_open(r1, 0x0) fcntl$lock(r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r1}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) tgkill(0x0, r2, 0x3f) ptrace$peeksig(0x4209, 0xffffffffffffffff, &(0x7f00000004c0)={0x6}, 0x0) [ 1475.103760] FAULT_INJECTION: forcing a failure. [ 1475.103760] name failslab, interval 1, probability 0, space 0, times 0 [ 1475.105083] CPU: 0 PID: 9658 Comm: syz-executor.1 Not tainted 5.17.0-next-20220401 #1 [ 1475.106085] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1475.107357] Call Trace: [ 1475.107674] [ 1475.107926] dump_stack_lvl+0x8b/0xb3 [ 1475.108372] should_fail.cold+0x5/0xa [ 1475.108808] ? create_object.isra.0+0x3a/0xa20 [ 1475.109330] should_failslab+0x5/0x10 [ 1475.109761] kmem_cache_alloc+0x5b/0x480 [ 1475.110246] create_object.isra.0+0x3a/0xa20 [ 1475.110755] ? kasan_unpoison+0x23/0x50 [ 1475.111206] __kmalloc_node_track_caller+0x269/0x440 [ 1475.111778] ? alloc_uevent_skb+0x7b/0x210 [ 1475.112261] __alloc_skb+0xe3/0x340 [ 1475.112683] alloc_uevent_skb+0x7b/0x210 [ 1475.113142] kobject_uevent_env+0xaa4/0xfa0 [ 1475.113635] ? _raw_spin_unlock+0x24/0x40 [ 1475.114116] disk_event_uevent+0x17b/0x1e0 [ 1475.114601] ? disk_events_async_show+0x10/0x10 [ 1475.115131] ? __fget_files+0x287/0x470 [ 1475.115591] disk_force_media_change+0x1e/0xc0 [ 1475.116107] loop_configure+0x755/0x1940 [ 1475.116576] ? __sanitizer_cov_trace_cmp2+0x22/0x80 [ 1475.117153] lo_ioctl+0x782/0x1850 [ 1475.117557] ? __x64_sys_openat+0x13f/0x1f0 [ 1475.118078] ? loop_set_status_old+0x1b0/0x1b0 [ 1475.118599] ? avc_ss_reset+0x180/0x180 [ 1475.119066] ? __lock_acquire+0xbac/0x6120 [ 1475.119596] ? loop_set_status_old+0x1b0/0x1b0 [ 1475.120121] blkdev_ioctl+0x356/0x7f0 [ 1475.120555] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 1475.121096] ? selinux_file_ioctl+0xb1/0x260 [ 1475.121594] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1475.122232] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 1475.122775] __x64_sys_ioctl+0x196/0x210 [ 1475.123241] do_syscall_64+0x3b/0x90 [ 1475.123662] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1475.124243] RIP: 0033:0x7f72f8f588d7 [ 1475.124659] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1475.126722] RSP: 002b:00007f72f64cdf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1475.127568] RAX: ffffffffffffffda RBX: 00007f72f8fa2970 RCX: 00007f72f8f588d7 [ 1475.128369] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1475.129169] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1475.129968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1475.130778] R13: 0000000000000004 R14: 00000000200004f0 R15: 0000000000000002 [ 1475.131593] 09:41:45 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d9f4655fd9f4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {&(0x7f0000010400)="0200000003000000040000006a000f000300040000000000000000000f00bc0f", 0x20, 0x800}], 0x0, &(0x7f0000000180)={[{@journal_dev={'journal_dev', 0x3d, 0x7}}]}) 09:41:45 executing program 7: syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=@ctrl_frame=@bar={{}, {0x2}, @device_b, @device_a, @multi={{0x1, 0x1, 0x1, 0x0, 0x4}, [{0x0, 0x3, {0x5, 0xe9}, "9eb08feb44d860f0"}, {0x0, 0x2, {0x3, 0xd2}, "4708590ceca6c4e2"}, {0x0, 0x6, {0x4, 0x3}, "0531687e447cb155"}, {0x0, 0x0, {0x0, 0x1}, "0fe91858af2a0ec6"}]}}, 0x42) [ 1475.175980] loop2: detected capacity change from 0 to 255 [ 1475.177330] loop1: detected capacity change from 0 to 64 [ 1475.184348] loop6: detected capacity change from 0 to 512 [ 1475.197424] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1475.233271] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1475.239666] EXT4-fs error (device loop6): __ext4_fill_super:5311: inode #2: comm syz-executor.6: iget: root inode unallocated [ 1475.244263] EXT4-fs (loop6): get root inode failed [ 1475.245113] EXT4-fs (loop6): mount failed [ 1475.302650] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 09:41:58 executing program 5: clock_gettime(0x0, 0x0) clock_gettime(0x2, &(0x7f0000000000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) sendfile(r0, r0, 0x0, 0xffffffff000) mq_timedsend(r0, &(0x7f00000089c0)="5c8b822f6321505ba6cc7e811f89e62a556835fc47c57363e63afd2a4276ef57216060c9ad39c54bc0ca79e1c57cc16a0c6e502ccb968f094640e3220f7575754d7708cea99ec80a83c94754bd2b34c9ab780dc9ae4b69c9fd91ab68e9c4e426d549119afc029f94c5466e4efae914c178d72a4123911ac44e5ac2b7e69044862ac5f54c1cd25aa92e938c6e420e4f87d6be4b10a95ff0808e2fc79a59a93315afbb45eae60087c97ab15d012d3b551edf1f763e32a4aadcc03992d2d00e93a975", 0xc1, 0x6, &(0x7f0000008ac0)) clock_getres(0x2, 0x0) pselect6(0x0, 0x0, &(0x7f00000000c0)={0x8000, 0x0, 0xc18, 0x8, 0x0, 0x7fff, 0x6, 0x8}, &(0x7f0000000100)={0x0, 0x2248, 0x0, 0x0, 0x2, 0x5, 0x5, 0x400}, &(0x7f0000000180), &(0x7f0000000200)={&(0x7f00000001c0), 0x8}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pselect6(0x40, &(0x7f0000000040)={0x9, 0x314c, 0x10000, 0x9, 0x6, 0x6, 0x8001, 0x7d6a}, &(0x7f0000000080)={0x80, 0xfff, 0x20, 0x9, 0x10000, 0x0, 0x4, 0x6}, &(0x7f0000000140)={0xffffffff, 0x79e, 0x4, 0xa82f, 0x0, 0x3, 0x100, 0x6b60}, &(0x7f0000008900)={0x77359400}, &(0x7f0000008980)={&(0x7f0000008940)={[0x6]}, 0x8}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mlockall(0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f0000000240)=ANY=[@ANYBLOB="9c05000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060d81fbec5772118802bd3240b00"/34480]) 09:41:58 executing program 7: syz_80211_inject_frame(0x0, &(0x7f0000000040)=@ctrl_frame=@bar={{}, {0x2}, @device_b, @device_a, @multi={{0x1, 0x1, 0x1, 0x0, 0x4}, [{0x0, 0x3, {0x5, 0xe9}, "9eb08feb44d860f0"}, {0x0, 0x2, {0x3, 0xd2}, "4708590ceca6c4e2"}, {0x0, 0x6, {0x4, 0x3}, "0531687e447cb155"}, {0x0, 0x0, {0x0, 0x1}, "0fe91858af2a0ec6"}]}}, 0x42) 09:41:58 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d9f4655fd9f4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {&(0x7f0000010400)="0200000003000000040000006a000f000300040000000000000000000f00bc0f", 0x20, 0x800}], 0x0, &(0x7f0000000180)={[{@journal_dev={'journal_dev', 0x3d, 0x7}}]}) 09:41:58 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000040)='./file1\x00', 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000640), 0x0, 0x8000000, 0x0) 09:41:58 executing program 4: migrate_pages(0x0, 0x8, &(0x7f0000000000)=0x2, &(0x7f0000000040)=0x1) tkill(0x0, 0xc) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = getpid() pidfd_open(r1, 0x0) fcntl$lock(r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r1}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) tgkill(0x0, r2, 0x3f) ptrace$peeksig(0x4209, 0xffffffffffffffff, &(0x7f00000004c0)={0x6}, 0x0) 09:41:58 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x5) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0x0) 09:41:58 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000010000)="eb58906d6b66732e66617400021e20000400000004f8", 0x16}, {0x0, 0x0, 0x4000}], 0x100c000, &(0x7f0000000040)) (fail_nth: 45) 09:41:58 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0xffffffff000) [ 1488.276437] FAULT_INJECTION: forcing a failure. [ 1488.276437] name failslab, interval 1, probability 0, space 0, times 0 [ 1488.277649] CPU: 1 PID: 9678 Comm: syz-executor.1 Not tainted 5.17.0-next-20220401 #1 [ 1488.278485] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1488.279697] Call Trace: [ 1488.279971] [ 1488.280206] dump_stack_lvl+0x8b/0xb3 [ 1488.280623] should_fail.cold+0x5/0xa [ 1488.281024] ? skb_clone+0x170/0x3c0 [ 1488.281421] should_failslab+0x5/0x10 [ 1488.281828] kmem_cache_alloc+0x5b/0x480 [ 1488.282275] skb_clone+0x170/0x3c0 [ 1488.282661] netlink_broadcast+0x9b1/0xd70 [ 1488.283116] ? alloc_uevent_skb+0x1c2/0x210 [ 1488.283579] kobject_uevent_env+0xa6b/0xfa0 [ 1488.284041] ? _raw_spin_unlock+0x24/0x40 [ 1488.284493] disk_event_uevent+0x17b/0x1e0 [ 1488.284935] ? disk_events_async_show+0x10/0x10 [ 1488.285430] ? __fget_files+0x287/0x470 [ 1488.285880] disk_force_media_change+0x1e/0xc0 [ 1488.286374] loop_configure+0x755/0x1940 [ 1488.286815] ? __sanitizer_cov_trace_cmp2+0x22/0x80 [ 1488.287355] lo_ioctl+0x782/0x1850 [ 1488.287731] ? __x64_sys_openat+0x13f/0x1f0 [ 1488.288200] ? loop_set_status_old+0x1b0/0x1b0 [ 1488.288693] ? avc_ss_reset+0x180/0x180 [ 1488.289130] ? __lock_acquire+0xbac/0x6120 [ 1488.289631] ? loop_set_status_old+0x1b0/0x1b0 [ 1488.290115] blkdev_ioctl+0x356/0x7f0 [ 1488.290539] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 1488.291046] ? selinux_file_ioctl+0xb1/0x260 [ 1488.291513] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1488.292099] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 1488.292611] __x64_sys_ioctl+0x196/0x210 [ 1488.293047] do_syscall_64+0x3b/0x90 [ 1488.293441] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1488.293984] RIP: 0033:0x7f72f8f588d7 [ 1488.294387] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1488.296313] RSP: 002b:00007f72f64cdf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1488.297116] RAX: ffffffffffffffda RBX: 00007f72f8fa2970 RCX: 00007f72f8f588d7 [ 1488.297863] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1488.298638] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1488.299380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1488.300126] R13: 0000000000000004 R14: 00000000200004f0 R15: 0000000000000002 [ 1488.300884] [ 1488.304607] loop6: detected capacity change from 0 to 512 [ 1488.307822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1488.308963] loop0: detected capacity change from 0 to 40 [ 1488.316979] loop1: detected capacity change from 0 to 64 [ 1488.331407] loop3: detected capacity change from 0 to 255 [ 1488.335897] loop2: detected capacity change from 0 to 255 [ 1488.353668] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1488.359201] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1488.363344] EXT4-fs error (device loop6): __ext4_fill_super:5311: inode #2: comm syz-executor.6: iget: root inode unallocated [ 1488.374567] EXT4-fs (loop6): get root inode failed [ 1488.375790] EXT4-fs (loop6): mount failed 09:41:58 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000010000)="eb58906d6b66732e66617400021e20000400000004f8", 0x16}, {0x0, 0x0, 0x4000}], 0x100c000, &(0x7f0000000040)) (fail_nth: 46) 09:41:58 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000040)='./file1\x00', 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000640), 0x0, 0x8000000, 0x0) 09:41:58 executing program 4: chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getpeername$unix(r0, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) [ 1488.452174] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 09:41:58 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0xffffffff000) 09:41:58 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d9f4655fd9f4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {&(0x7f0000010400)="0200000003000000040000006a000f000300040000000000000000000f00bc0f", 0x20, 0x800}], 0x0, &(0x7f0000000180)={[{@journal_dev={'journal_dev', 0x3d, 0x7}}]}) [ 1488.470340] loop0: detected capacity change from 0 to 40 [ 1488.491266] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 09:41:58 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x5) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0x0) [ 1488.496744] FAULT_INJECTION: forcing a failure. [ 1488.496744] name failslab, interval 1, probability 0, space 0, times 0 [ 1488.499406] CPU: 0 PID: 9695 Comm: syz-executor.1 Not tainted 5.17.0-next-20220401 #1 [ 1488.501025] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1488.503241] Call Trace: [ 1488.503742] [ 1488.504180] dump_stack_lvl+0x8b/0xb3 [ 1488.504948] should_fail.cold+0x5/0xa [ 1488.505712] ? create_object.isra.0+0x3a/0xa20 [ 1488.506621] should_failslab+0x5/0x10 [ 1488.507372] kmem_cache_alloc+0x5b/0x480 [ 1488.508187] create_object.isra.0+0x3a/0xa20 [ 1488.509047] ? kasan_unpoison+0x23/0x50 [ 1488.509836] kmem_cache_alloc+0x239/0x480 [ 1488.510687] skb_clone+0x170/0x3c0 [ 1488.511395] netlink_broadcast+0x9b1/0xd70 [ 1488.512241] ? alloc_uevent_skb+0x1c2/0x210 [ 1488.513097] kobject_uevent_env+0xa6b/0xfa0 [ 1488.513945] ? _raw_spin_unlock+0x24/0x40 [ 1488.514778] disk_event_uevent+0x17b/0x1e0 [ 1488.515610] ? disk_events_async_show+0x10/0x10 [ 1488.516530] ? __fget_files+0x287/0x470 [ 1488.517325] disk_force_media_change+0x1e/0xc0 [ 1488.518230] loop_configure+0x755/0x1940 [ 1488.519040] ? __sanitizer_cov_trace_cmp2+0x22/0x80 [ 1488.520038] lo_ioctl+0x782/0x1850 [ 1488.520749] ? loop_set_status_old+0x1b0/0x1b0 [ 1488.521649] ? avc_ss_reset+0x180/0x180 [ 1488.522476] ? __lock_acquire+0xbac/0x6120 [ 1488.523326] ? lock_is_held_type+0xd7/0x130 [ 1488.524238] ? loop_set_status_old+0x1b0/0x1b0 [ 1488.525145] blkdev_ioctl+0x356/0x7f0 [ 1488.525906] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 1488.526859] ? selinux_file_ioctl+0xb1/0x260 [ 1488.527735] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1488.528816] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 1488.529756] __x64_sys_ioctl+0x196/0x210 [ 1488.530583] do_syscall_64+0x3b/0x90 [ 1488.531313] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1488.532328] RIP: 0033:0x7f72f8f588d7 [ 1488.533053] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1488.536661] RSP: 002b:00007f72f64cdf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1488.538145] RAX: ffffffffffffffda RBX: 00007f72f8fa2970 RCX: 00007f72f8f588d7 [ 1488.539556] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1488.540945] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1488.542351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1488.543740] R13: 0000000000000004 R14: 00000000200004f0 R15: 0000000000000002 [ 1488.545152] [ 1488.546701] loop3: detected capacity change from 0 to 255 [ 1488.548701] loop6: detected capacity change from 0 to 512 [ 1488.554672] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1488.572522] EXT4-fs error (device loop6): __ext4_fill_super:5311: inode #2: comm syz-executor.6: iget: root inode unallocated [ 1488.575898] EXT4-fs (loop6): get root inode failed [ 1488.576475] EXT4-fs (loop6): mount failed 09:41:59 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0xffffffff000) [ 1488.606320] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1488.622206] loop1: detected capacity change from 0 to 64 [ 1488.659980] loop2: detected capacity change from 0 to 255 [ 1488.676173] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 09:41:59 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d9f4655fd9f4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {&(0x7f0000010400)="0200000003000000040000006a000f000300040000000000000000000f00bc0f", 0x20, 0x800}, {0x0, 0x0, 0x2100}], 0x0, &(0x7f0000000180)={[{@journal_dev={'journal_dev', 0x3d, 0x7}}]}) [ 1488.716650] loop6: detected capacity change from 0 to 512 [ 1488.747788] loop3: detected capacity change from 0 to 255 [ 1488.764246] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1488.764462] EXT4-fs error (device loop6): __ext4_fill_super:5311: inode #2: comm syz-executor.6: iget: root inode unallocated [ 1488.772845] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1488.789122] EXT4-fs (loop6): get root inode failed [ 1488.789676] EXT4-fs (loop6): mount failed [ 1488.841183] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 09:42:14 executing program 5: clock_gettime(0x0, 0x0) clock_gettime(0x2, &(0x7f0000000000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) sendfile(r0, r0, 0x0, 0xffffffff000) mq_timedsend(r0, &(0x7f00000089c0)="5c8b822f6321505ba6cc7e811f89e62a556835fc47c57363e63afd2a4276ef57216060c9ad39c54bc0ca79e1c57cc16a0c6e502ccb968f094640e3220f7575754d7708cea99ec80a83c94754bd2b34c9ab780dc9ae4b69c9fd91ab68e9c4e426d549119afc029f94c5466e4efae914c178d72a4123911ac44e5ac2b7e69044862ac5f54c1cd25aa92e938c6e420e4f87d6be4b10a95ff0808e2fc79a59a93315afbb45eae60087c97ab15d012d3b551edf1f763e32a4aadcc03992d2d00e93a975", 0xc1, 0x6, &(0x7f0000008ac0)) clock_getres(0x2, 0x0) pselect6(0x0, 0x0, &(0x7f00000000c0)={0x8000, 0x0, 0xc18, 0x8, 0x0, 0x7fff, 0x6, 0x8}, &(0x7f0000000100)={0x0, 0x2248, 0x0, 0x0, 0x2, 0x5, 0x5, 0x400}, &(0x7f0000000180), &(0x7f0000000200)={&(0x7f00000001c0), 0x8}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pselect6(0x40, &(0x7f0000000040)={0x9, 0x314c, 0x10000, 0x9, 0x6, 0x6, 0x8001, 0x7d6a}, &(0x7f0000000080)={0x80, 0xfff, 0x20, 0x9, 0x10000, 0x0, 0x4, 0x6}, &(0x7f0000000140)={0xffffffff, 0x79e, 0x4, 0xa82f, 0x0, 0x3, 0x100, 0x6b60}, &(0x7f0000008900)={0x77359400}, &(0x7f0000008980)={&(0x7f0000008940)={[0x6]}, 0x8}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mlockall(0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f0000000240)=ANY=[@ANYBLOB="9c05000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060d81fbec5772118802bd3240b00"/34480]) 09:42:14 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x5) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) (fail_nth: 1) 09:42:14 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000010000)="eb58906d6b66732e66617400021e20000400000004f8", 0x16}, {0x0, 0x0, 0x4000}], 0x100c000, &(0x7f0000000040)) (fail_nth: 47) 09:42:14 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000040)='./file1\x00', 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000640)=[{0x0}], 0x1, 0x8000000, 0x0) 09:42:14 executing program 7: syz_80211_inject_frame(0x0, &(0x7f0000000040)=@ctrl_frame=@bar={{}, {0x2}, @device_b, @device_a, @multi={{0x1, 0x1, 0x1, 0x0, 0x4}, [{0x0, 0x3, {0x5, 0xe9}, "9eb08feb44d860f0"}, {0x0, 0x2, {0x3, 0xd2}, "4708590ceca6c4e2"}, {0x0, 0x6, {0x4, 0x3}, "0531687e447cb155"}, {0x0, 0x0, {0x0, 0x1}, "0fe91858af2a0ec6"}]}}, 0x42) 09:42:14 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d9f4655fd9f4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {&(0x7f0000010400)="0200000003000000040000006a000f000300040000000000000000000f00bc0f", 0x20, 0x800}, {0x0, 0x0, 0x2100}], 0x0, &(0x7f0000000180)={[{@journal_dev={'journal_dev', 0x3d, 0x7}}]}) 09:42:14 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0xffffffff000) 09:42:14 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x5) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0x0) [ 1504.105478] loop6: detected capacity change from 0 to 512 [ 1504.109271] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1504.109985] loop2: detected capacity change from 0 to 255 [ 1504.112737] FAULT_INJECTION: forcing a failure. [ 1504.112737] name failslab, interval 1, probability 0, space 0, times 0 [ 1504.115093] CPU: 0 PID: 9738 Comm: syz-executor.1 Not tainted 5.17.0-next-20220401 #1 [ 1504.116757] loop3: detected capacity change from 0 to 255 [ 1504.117238] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1504.117265] Call Trace: [ 1504.119475] loop0: detected capacity change from 0 to 40 [ 1504.121004] [ 1504.121018] dump_stack_lvl+0x8b/0xb3 [ 1504.122661] loop4: detected capacity change from 0 to 255 [ 1504.122810] should_fail.cold+0x5/0xa [ 1504.126269] ? __kernfs_new_node+0xd4/0x8b0 [ 1504.127323] should_failslab+0x5/0x10 [ 1504.128087] kmem_cache_alloc+0x5b/0x480 [ 1504.128908] __kernfs_new_node+0xd4/0x8b0 [ 1504.129746] ? kernfs_path_from_node+0x60/0x60 [ 1504.130667] ? selinux_sb_statfs+0x1ba/0x250 [ 1504.131569] ? mark_held_locks+0x9e/0xe0 [ 1504.132430] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1504.133530] ? shmem_statfs+0x1b3/0x3e0 [ 1504.134370] kernfs_create_dir_ns+0x9c/0x220 [ 1504.135298] internal_create_group+0x782/0xb20 [ 1504.136234] ? sysfs_remove_group+0x170/0x170 [ 1504.137153] ? loop_configure+0x1940/0x1940 [ 1504.138059] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 1504.139097] ? __loop_update_dio+0x2a3/0x620 [ 1504.140023] loop_configure+0xe81/0x1940 [ 1504.140879] lo_ioctl+0x782/0x1850 [ 1504.141631] ? __x64_sys_openat+0x13f/0x1f0 [ 1504.142553] ? loop_set_status_old+0x1b0/0x1b0 [ 1504.143487] ? avc_ss_reset+0x180/0x180 [ 1504.144312] ? __lock_acquire+0xbac/0x6120 [ 1504.145246] ? loop_set_status_old+0x1b0/0x1b0 [ 1504.146166] blkdev_ioctl+0x356/0x7f0 [ 1504.146958] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 1504.147910] ? selinux_file_ioctl+0xb1/0x260 [ 1504.148799] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1504.149901] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 1504.150867] __x64_sys_ioctl+0x196/0x210 [ 1504.151698] do_syscall_64+0x3b/0x90 [ 1504.152443] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1504.153479] RIP: 0033:0x7f72f8f588d7 [ 1504.154226] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1504.158025] RSP: 002b:00007f72f64cdf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1504.159603] RAX: ffffffffffffffda RBX: 00007f72f8fa2970 RCX: 00007f72f8f588d7 [ 1504.161043] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1504.162504] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1504.163935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1504.165349] R13: 0000000000000004 R14: 00000000200004f0 R15: 0000000000000002 [ 1504.166796] [ 1504.167508] loop1: detected capacity change from 0 to 64 [ 1504.187312] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1504.189206] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1504.191665] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1504.196806] EXT4-fs error (device loop6): __ext4_fill_super:5311: inode #2: comm syz-executor.6: iget: root inode unallocated [ 1504.223318] EXT4-fs (loop6): get root inode failed [ 1504.224480] EXT4-fs (loop6): mount failed [ 1504.238822] FAULT_INJECTION: forcing a failure. [ 1504.238822] name failslab, interval 1, probability 0, space 0, times 0 [ 1504.241248] CPU: 0 PID: 9743 Comm: syz-executor.4 Not tainted 5.17.0-next-20220401 #1 [ 1504.242897] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1504.245184] Call Trace: [ 1504.245697] [ 1504.246150] dump_stack_lvl+0x8b/0xb3 [ 1504.246936] should_fail.cold+0x5/0xa [ 1504.247705] ? alloc_pipe_info+0x105/0x580 [ 1504.248560] should_failslab+0x5/0x10 [ 1504.249320] kmem_cache_alloc_trace+0x55/0x3c0 [ 1504.250243] alloc_pipe_info+0x105/0x580 [ 1504.251084] splice_direct_to_actor+0x700/0x8e0 [ 1504.252018] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1504.253115] ? pipe_to_sendpage+0x380/0x380 [ 1504.253973] ? inode_security+0x105/0x130 [ 1504.254813] ? avc_policy_seqno+0x9/0x70 [ 1504.255630] ? selinux_file_permission+0x36/0x510 [ 1504.256594] ? do_splice_to+0x240/0x240 [ 1504.257387] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1504.258494] ? security_file_permission+0xb1/0xd0 [ 1504.259462] do_splice_direct+0x1b8/0x280 [ 1504.260293] ? splice_direct_to_actor+0x8e0/0x8e0 [ 1504.261270] ? lock_is_held_type+0xd7/0x130 [ 1504.262140] do_sendfile+0xad7/0x1230 [ 1504.262944] ? __ia32_compat_sys_preadv64+0x2e0/0x2e0 [ 1504.263992] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1504.265092] ? vfs_write+0x422/0xac0 [ 1504.265838] __x64_sys_sendfile64+0x1cd/0x210 [ 1504.266749] ? __ia32_compat_sys_sendfile64+0x210/0x210 [ 1504.267821] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1504.268863] do_syscall_64+0x3b/0x90 [ 1504.269602] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1504.270644] RIP: 0033:0x7f10081d2b19 [ 1504.271377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1504.275018] RSP: 002b:00007f1005748188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1504.276523] RAX: ffffffffffffffda RBX: 00007f10082e5f60 RCX: 00007f10081d2b19 [ 1504.277936] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 1504.279361] RBP: 00007f10057481d0 R08: 0000000000000000 R09: 0000000000000000 [ 1504.280778] R10: 00000ffffffff000 R11: 0000000000000246 R12: 0000000000000001 [ 1504.282186] R13: 00007fff5bac1b9f R14: 00007f1005748300 R15: 0000000000022000 [ 1504.283635] 09:42:14 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000040)='./file1\x00', 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000640)=[{0x0}], 0x1, 0x8000000, 0x0) 09:42:14 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000010000)="eb58906d6b66732e66617400021e20000400000004f8", 0x16}, {0x0, 0x0, 0x4000}], 0x100c000, &(0x7f0000000040)) (fail_nth: 48) [ 1504.370342] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1504.378279] loop0: detected capacity change from 0 to 40 09:42:14 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0xffffffff000) [ 1504.399934] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 09:42:14 executing program 2: request_key(&(0x7f0000000040)='.request_key_auth\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)='ext4\x00', 0xfffffffffffffffe) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$update(0x2, r0, 0x0, 0x0) keyctl$search(0xa, r0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x1}, 0xfffffffffffffffe) keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000002c0)="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", 0x102, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="b3556af1ce259906f91d00216a2921cb00"]) 09:42:14 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d9f4655fd9f4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {&(0x7f0000010400)="0200000003000000040000006a000f000300040000000000000000000f00bc0f", 0x20, 0x800}, {0x0, 0x0, 0x2100}], 0x0, &(0x7f0000000180)={[{@journal_dev={'journal_dev', 0x3d, 0x7}}]}) [ 1504.430915] FAULT_INJECTION: forcing a failure. [ 1504.430915] name failslab, interval 1, probability 0, space 0, times 0 [ 1504.433276] CPU: 0 PID: 9753 Comm: syz-executor.1 Not tainted 5.17.0-next-20220401 #1 [ 1504.434867] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1504.437147] Call Trace: [ 1504.437663] [ 1504.438115] dump_stack_lvl+0x8b/0xb3 [ 1504.438909] should_fail.cold+0x5/0xa [ 1504.439699] ? create_object.isra.0+0x3a/0xa20 [ 1504.440620] should_failslab+0x5/0x10 [ 1504.441393] kmem_cache_alloc+0x5b/0x480 [ 1504.442222] create_object.isra.0+0x3a/0xa20 [ 1504.443125] ? kasan_unpoison+0x23/0x50 [ 1504.443924] kmem_cache_alloc+0x239/0x480 [ 1504.444767] __kernfs_new_node+0xd4/0x8b0 [ 1504.445606] ? kernfs_path_from_node+0x60/0x60 [ 1504.446529] ? selinux_sb_statfs+0x1ba/0x250 [ 1504.447408] ? mark_held_locks+0x9e/0xe0 [ 1504.448248] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1504.449350] ? shmem_statfs+0x1b3/0x3e0 [ 1504.450152] kernfs_create_dir_ns+0x9c/0x220 [ 1504.451069] internal_create_group+0x782/0xb20 [ 1504.451991] ? sysfs_remove_group+0x170/0x170 [ 1504.452890] ? loop_configure+0x1940/0x1940 [ 1504.453759] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 1504.454769] ? __loop_update_dio+0x2a3/0x620 [ 1504.455658] loop_configure+0xe81/0x1940 [ 1504.456496] lo_ioctl+0x782/0x1850 [ 1504.457216] ? __x64_sys_openat+0x13f/0x1f0 [ 1504.458090] ? loop_set_status_old+0x1b0/0x1b0 [ 1504.459014] ? avc_ss_reset+0x180/0x180 [ 1504.459836] ? __lock_acquire+0xbac/0x6120 [ 1504.460768] ? loop_set_status_old+0x1b0/0x1b0 [ 1504.461695] blkdev_ioctl+0x356/0x7f0 [ 1504.462487] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 1504.463439] ? selinux_file_ioctl+0xb1/0x260 [ 1504.464322] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1504.465421] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 1504.466382] __x64_sys_ioctl+0x196/0x210 [ 1504.467213] do_syscall_64+0x3b/0x90 [ 1504.467956] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1504.468985] RIP: 0033:0x7f72f8f588d7 [ 1504.469721] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1504.473390] RSP: 002b:00007f72f64cdf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1504.474910] RAX: ffffffffffffffda RBX: 00007f72f8fa2970 RCX: 00007f72f8f588d7 [ 1504.476339] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1504.477755] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1504.479320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1504.480735] R13: 0000000000000004 R14: 00000000200004f0 R15: 0000000000000002 [ 1504.482178] 09:42:14 executing program 7: syz_80211_inject_frame(0x0, &(0x7f0000000040)=@ctrl_frame=@bar={{}, {0x2}, @device_b, @device_a, @multi={{0x1, 0x1, 0x1, 0x0, 0x4}, [{0x0, 0x3, {0x5, 0xe9}, "9eb08feb44d860f0"}, {0x0, 0x2, {0x3, 0xd2}, "4708590ceca6c4e2"}, {0x0, 0x6, {0x4, 0x3}, "0531687e447cb155"}, {0x0, 0x0, {0x0, 0x1}, "0fe91858af2a0ec6"}]}}, 0x42) [ 1504.493386] loop3: detected capacity change from 0 to 255 [ 1504.510512] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 09:42:14 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x5) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) (fail_nth: 2) [ 1504.533088] loop6: detected capacity change from 0 to 512 [ 1504.535186] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1504.569688] loop2: detected capacity change from 0 to 4 [ 1504.572672] EXT4-fs error (device loop6): __ext4_fill_super:5311: inode #2: comm syz-executor.6: iget: root inode unallocated [ 1504.577198] EXT4-fs (loop6): get root inode failed [ 1504.578299] EXT4-fs (loop6): mount failed [ 1504.583417] loop1: detected capacity change from 0 to 64 [ 1504.583661] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1504.591455] ext4: Unknown parameter '³UjñÎ%™ù' 09:42:14 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000040)='./file1\x00', 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000640)=[{0x0}], 0x1, 0x8000000, 0x0) [ 1504.615786] loop4: detected capacity change from 0 to 255 [ 1504.640421] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1504.649886] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1504.707859] FAULT_INJECTION: forcing a failure. [ 1504.707859] name failslab, interval 1, probability 0, space 0, times 0 [ 1504.710293] CPU: 0 PID: 9765 Comm: syz-executor.4 Not tainted 5.17.0-next-20220401 #1 [ 1504.711910] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1504.714209] Call Trace: [ 1504.714752] [ 1504.715215] dump_stack_lvl+0x8b/0xb3 [ 1504.715781] loop0: detected capacity change from 0 to 40 [ 1504.716027] should_fail.cold+0x5/0xa [ 1504.717910] ? create_object.isra.0+0x3a/0xa20 [ 1504.718835] should_failslab+0x5/0x10 [ 1504.719600] kmem_cache_alloc+0x5b/0x480 [ 1504.720422] create_object.isra.0+0x3a/0xa20 [ 1504.721300] ? kasan_unpoison+0x23/0x50 [ 1504.722103] kmem_cache_alloc_trace+0x22e/0x3c0 [ 1504.723061] alloc_pipe_info+0x105/0x580 [ 1504.723887] splice_direct_to_actor+0x700/0x8e0 [ 1504.724824] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1504.725926] ? pipe_to_sendpage+0x380/0x380 [ 1504.726794] ? inode_security+0x105/0x130 [ 1504.727621] ? avc_policy_seqno+0x9/0x70 [ 1504.728435] ? selinux_file_permission+0x36/0x510 [ 1504.729394] ? do_splice_to+0x240/0x240 [ 1504.730187] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1504.731295] ? security_file_permission+0xb1/0xd0 [ 1504.732262] do_splice_direct+0x1b8/0x280 [ 1504.733090] ? splice_direct_to_actor+0x8e0/0x8e0 [ 1504.734064] ? lock_is_held_type+0xd7/0x130 [ 1504.734951] do_sendfile+0xad7/0x1230 [ 1504.735731] ? __ia32_compat_sys_preadv64+0x2e0/0x2e0 [ 1504.736774] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1504.737869] ? vfs_write+0x422/0xac0 [ 1504.738628] __x64_sys_sendfile64+0x1cd/0x210 [ 1504.739531] ? __ia32_compat_sys_sendfile64+0x210/0x210 [ 1504.740606] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1504.741647] do_syscall_64+0x3b/0x90 [ 1504.742389] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1504.743425] RIP: 0033:0x7f10081d2b19 [ 1504.744159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1504.747972] RSP: 002b:00007f1005748188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1504.749484] RAX: ffffffffffffffda RBX: 00007f10082e5f60 RCX: 00007f10081d2b19 [ 1504.750932] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 1504.752367] RBP: 00007f10057481d0 R08: 0000000000000000 R09: 0000000000000000 [ 1504.753798] R10: 00000ffffffff000 R11: 0000000000000246 R12: 0000000000000001 [ 1504.755253] R13: 00007fff5bac1b9f R14: 00007f1005748300 R15: 0000000000022000 [ 1504.756708] [ 1504.915520] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 09:42:30 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000040)='./file1\x00', 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000640)=[{0x0}], 0x1, 0x8000000, 0x0) 09:42:30 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0xffffffff000) 09:42:30 executing program 7: syz_80211_inject_frame(&(0x7f0000000000)=@device_b, 0x0, 0x0) [ 1519.963575] loop5: detected capacity change from 0 to 40 09:42:30 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d9f4655fd9f4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {&(0x7f0000010400)="0200000003000000040000006a000f000300040000000000000000000f00bc0f", 0x20, 0x800}, {&(0x7f0000011600), 0x0, 0x2100}], 0x0, &(0x7f0000000180)={[{@journal_dev={'journal_dev', 0x3d, 0x7}}]}) 09:42:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="06ffffff", @ANYRES16=r1, @ANYBLOB="010003000000000000000900000008000300", @ANYRES32=0x0, @ANYBLOB="0c006e800400020004000200"], 0x28}}, 0x0) 09:42:30 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000010000)="eb58906d6b66732e66617400021e20000400000004f8", 0x16}, {0x0, 0x0, 0x4000}], 0x100c000, &(0x7f0000000040)) (fail_nth: 49) 09:42:30 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000040)='./file1\x00', 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x8000000, 0x0) 09:42:30 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x5) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) (fail_nth: 3) [ 1519.984062] loop0: detected capacity change from 0 to 40 [ 1519.998572] loop4: detected capacity change from 0 to 255 [ 1519.999251] loop6: detected capacity change from 0 to 512 [ 1520.001302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1520.011534] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1520.016311] loop3: detected capacity change from 0 to 255 [ 1520.029136] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1520.029366] FAULT_INJECTION: forcing a failure. [ 1520.029366] name failslab, interval 1, probability 0, space 0, times 0 09:42:30 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) pipe2$9p(&(0x7f00000000c0), 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @remote, @broadcast}}}], 0x20}, 0x0) [ 1520.032427] CPU: 1 PID: 9795 Comm: syz-executor.1 Not tainted 5.17.0-next-20220401 #1 [ 1520.034433] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1520.036827] Call Trace: [ 1520.037365] [ 1520.037835] dump_stack_lvl+0x8b/0xb3 [ 1520.038791] should_fail.cold+0x5/0xa [ 1520.039720] ? __kernfs_new_node+0xd4/0x8b0 [ 1520.040659] should_failslab+0x5/0x10 [ 1520.041479] kmem_cache_alloc+0x5b/0x480 [ 1520.041944] FAULT_INJECTION: forcing a failure. [ 1520.041944] name failslab, interval 1, probability 0, space 0, times 0 [ 1520.042356] __kernfs_new_node+0xd4/0x8b0 [ 1520.044365] ? kernfs_path_from_node+0x60/0x60 [ 1520.045354] ? find_held_lock+0x2c/0x110 [ 1520.046215] ? lock_release+0x3b2/0x6f0 [ 1520.047078] ? kernfs_add_one+0x3c6/0x550 [ 1520.047965] ? lock_downgrade+0x6d0/0x6d0 [ 1520.048874] ? lock_is_held_type+0xd7/0x130 [ 1520.049796] kernfs_new_node+0x93/0x120 [ 1520.050647] __kernfs_create_file+0x51/0x350 [ 1520.051599] sysfs_add_file_mode_ns+0x218/0x430 [ 1520.052594] ? component_del+0x4c0/0x4c0 [ 1520.053452] internal_create_group+0x322/0xb20 [ 1520.054421] ? sysfs_remove_group+0x170/0x170 [ 1520.055428] ? loop_configure+0x1940/0x1940 [ 1520.056358] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 1520.057439] ? __loop_update_dio+0x2a3/0x620 [ 1520.058395] loop_configure+0xe81/0x1940 [ 1520.059282] lo_ioctl+0x782/0x1850 [ 1520.060058] ? __x64_sys_openat+0x13f/0x1f0 [ 1520.060987] ? loop_set_status_old+0x1b0/0x1b0 [ 1520.061973] ? avc_ss_reset+0x180/0x180 [ 1520.062850] ? __lock_acquire+0xbac/0x6120 [ 1520.063847] ? loop_set_status_old+0x1b0/0x1b0 [ 1520.064822] blkdev_ioctl+0x356/0x7f0 [ 1520.065654] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 1520.066660] ? selinux_file_ioctl+0xb1/0x260 [ 1520.067637] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1520.068805] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 1520.069838] __x64_sys_ioctl+0x196/0x210 [ 1520.070737] do_syscall_64+0x3b/0x90 [ 1520.071537] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1520.072651] RIP: 0033:0x7f72f8f588d7 [ 1520.073445] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1520.077406] RSP: 002b:00007f72f64cdf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1520.079041] RAX: ffffffffffffffda RBX: 00007f72f8fa2970 RCX: 00007f72f8f588d7 [ 1520.080578] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1520.082108] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1520.083645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1520.085171] R13: 0000000000000004 R14: 00000000200004f0 R15: 0000000000000002 [ 1520.086747] [ 1520.087241] CPU: 0 PID: 9789 Comm: syz-executor.4 Not tainted 5.17.0-next-20220401 #1 [ 1520.088069] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1520.089240] Call Trace: [ 1520.089503] [ 1520.089734] dump_stack_lvl+0x8b/0xb3 [ 1520.090148] should_fail.cold+0x5/0xa [ 1520.090822] ? kvmalloc_node+0x3e/0x130 [ 1520.091239] should_failslab+0x5/0x10 [ 1520.091636] __kmalloc_node+0x76/0x470 [ 1520.092052] kvmalloc_node+0x3e/0x130 [ 1520.092457] alloc_pipe_info+0x1e5/0x580 [ 1520.092889] splice_direct_to_actor+0x700/0x8e0 [ 1520.093384] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1520.093962] ? pipe_to_sendpage+0x380/0x380 [ 1520.094415] ? inode_security+0x105/0x130 [ 1520.094854] ? avc_policy_seqno+0x9/0x70 [ 1520.095293] ? selinux_file_permission+0x36/0x510 [ 1520.095802] ? do_splice_to+0x240/0x240 [ 1520.096221] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1520.096799] ? security_file_permission+0xb1/0xd0 [ 1520.097306] do_splice_direct+0x1b8/0x280 [ 1520.097741] ? splice_direct_to_actor+0x8e0/0x8e0 [ 1520.098254] ? lock_is_held_type+0xd7/0x130 [ 1520.098723] do_sendfile+0xad7/0x1230 [ 1520.099134] ? __ia32_compat_sys_preadv64+0x2e0/0x2e0 [ 1520.099679] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1520.100257] ? vfs_write+0x422/0xac0 [ 1520.100644] __x64_sys_sendfile64+0x1cd/0x210 [ 1520.101122] ? __ia32_compat_sys_sendfile64+0x210/0x210 [ 1520.101689] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1520.102231] do_syscall_64+0x3b/0x90 [ 1520.102623] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1520.103180] RIP: 0033:0x7f10081d2b19 [ 1520.103570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1520.105479] RSP: 002b:00007f1005748188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1520.106283] RAX: ffffffffffffffda RBX: 00007f10082e5f60 RCX: 00007f10081d2b19 [ 1520.107030] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 1520.107776] RBP: 00007f10057481d0 R08: 0000000000000000 R09: 0000000000000000 [ 1520.108522] R10: 00000ffffffff000 R11: 0000000000000246 R12: 0000000000000001 [ 1520.109261] R13: 00007fff5bac1b9f R14: 00007f1005748300 R15: 0000000000022000 [ 1520.110022] sendmmsg$inet6(r0, &(0x7f0000006f40)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x400, @ipv4={'\x00', '\xff\xff', @loopback}, 0xd103}, 0x1c, &(0x7f0000001340)=[{&(0x7f0000000140)="bf2e6b3dd3de888b4b35f4179c2c0cbe6cf7f5f534fae038d1d85aa2d8348c055bb59ad36d8e233011778eaef4a51b0cd2a0b7e8ea4a0d202dd84f553bee22dcbd2827725f172061b9b0f6f43107f584845fe3880b4753c416e4950bec101e538257f980335e429d9d65266948ab00e4f2cb34f7e3488ea2da61813faf857cce8aecacf81bd28bc444e2e10f80b84c43a0248f99c6f02a6777d94f54c1f0245781fa0380766b27607d8d022ea04c8327cc67943c1dc9711abcc8d8ed475560d5270569cb30882e79ce68271aa2e8a4d02b6d6ff7d3fbd74ea7b7d073e8d75d6b488589c9a325d35b72", 0xe9}, {&(0x7f0000000240)="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", 0xfe}, {&(0x7f0000000340)="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", 0x1000}], 0x3}}, {{&(0x7f0000001380)={0xa, 0x4e24, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8001}, 0x1c, &(0x7f0000002680)=[{&(0x7f00000013c0)="1fcdad8a48f4a00d40f21bed155e5d58d5fb6f02d50289bc00f87bc85cfa7b51c937c39c605e2c046f092bc35175276e87765eb66e0268baa5d47034b68162e745ba7f8af6409cc108ce505740d1", 0x4e}, {&(0x7f0000001440)="1aed8f59578bc65added306b630d25c69ad908741072af43162cc8c6411e6262415016bd325ab5a13f14c7d2eb649469aee2d12bd0aa2b7bd14106f468ac70085ccf6584cf8d9713766f82524221676bd125856bb665b3d4d1769297dbe86ad7d4e70939aa2d969c7b478ddbdb1ff5ca67fe36385eab998167dccac13d3fa25779ff485cce1cafa8c08b31db9e0a57c82bb4938c0aeb162f176a35ca3797bc0654a2a99ee3d4a60071d3b36445515b4ffccd123093e1d36cc9be9968ced1926e1f2a83bf340f26a631c4662129bfcf9f6d5589ddd514ffd665e33a5525a0a6afa1198ebf4ba07004", 0xe8}, {&(0x7f0000001540)="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", 0x1000}, {&(0x7f0000002540)="eb837c1af3eaa3543603b121dbb798e66337bb0b427c20a61184dd085026bbdf12f2fb84f3e564fc2f12488885940b61d5a683779083e1d8c9f7880a813434780dc7da588297799b731a9400c9af4349dc42c04bcbba486117663fb99a72ae1fb7ac06402bd636224bc4b1dd", 0x6c}, {&(0x7f00000025c0)="f3ef4fae9da5a2cefee03b2c1b5a38c763d5df66b7bad55d3474ddf35e4f8ad3b49d9e37c649da62f632413558b77fa5fd66d801cbd5207ec4b1b0de84583a06446a6f8aec7bb0960f79f6b5aa12545a33a40a28b989fe5a3bcf8b8e352bde0c9c60d62dda25be97f059d5a2d353aa18d721657bc2df23bf48856430c842e94bf779f97f272203f805bfa85616f276d93b4eeeb8", 0x94}], 0x5, &(0x7f0000002700)=[@dstopts_2292={{0xd8, 0x29, 0x4, {0x5e, 0x17, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0xe}}, @generic={0x0, 0xab, "04c21d3b5905fcc519f4855162d809a669104815c9ca19efcb2987cd2fe285da086461c3c7271eead0fac8dd9ba0a257d2728a65f16b2ad2a5e657609a6164ea6b981994ce33c95eb6b5379c80fbd90f73e12735cf9aa30ec2b84ba51b96567354e9c47a6ae430bd06871d8974a22f943cc27b327b61c8367bb44341f4cfc8c5effa7a47463b612325f373bccde79e6bd28f5e5ec6cf1cb188ffdbcfe9f48662ce89de03c11d4a03f1f13c"}]}}}, @rthdr={{0xa8, 0x29, 0x39, {0x29, 0x12, 0x0, 0x0, 0x0, [@private0, @ipv4={'\x00', '\xff\xff', @multicast2}, @empty, @empty, @dev={0xfe, 0x80, '\x00', 0x30}, @private1, @remote, @ipv4={'\x00', '\xff\xff', @broadcast}, @private0={0xfc, 0x0, '\x00', 0x1}]}}}, @dstopts_2292={{0x70, 0x29, 0x4, {0x2b, 0xa, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @ra={0x5, 0x2, 0x1}, @calipso={0x7, 0x10, {0x1, 0x2, 0x7, 0x5, [0x1]}}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @hao={0xc9, 0x10, @mcast2}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}}, @hopopts_2292={{0xf8, 0x29, 0x36, {0xc, 0x1b, '\x00', [@hao={0xc9, 0x10, @loopback}, @hao={0xc9, 0x10, @mcast1}, @jumbo={0xc2, 0x4, 0x1}, @calipso={0x7, 0x50, {0x2, 0x12, 0x1, 0x3ff, [0xb9b7, 0x7, 0x571, 0x80, 0x2, 0x4, 0x0, 0x3, 0x5a60]}}, @hao={0xc9, 0x10, @private0}, @ra, @calipso={0x7, 0x40, {0x0, 0xe, 0x7, 0x3, [0x8, 0x7, 0x3, 0x24, 0x9d, 0x8, 0xb]}}, @enc_lim, @pad1]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x3c, 0x2, 0x0, 0xce, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}]}}}, @rthdr={{0x98, 0x29, 0x39, {0x95, 0x10, 0x2, 0x5, 0x0, [@dev={0xfe, 0x80, '\x00', 0x32}, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x36}, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @private0, @private2={0xfc, 0x2, '\x00', 0x1}]}}}], 0x3a8}}, {{&(0x7f0000002ac0)={0xa, 0x4e23, 0x6, @private0, 0x1a}, 0x1c, &(0x7f0000003000)=[{&(0x7f0000002b00)="85c82e95bbd279dc03bbd55605eaace36b036742dea08d55564d9f8f3a04ae2994832fb5101468bce44a4359b3f98c1740737e244fe07986911ccc44ad68bbedb5b4d6f6d653", 0x46}, {&(0x7f0000002b80)="37a689460777c2bf3adf041021cda6f0d1efbdd0a3248cd5d496f5f1422716a60916beab33506636d73af791ba3be211e21dc974ee78461a12d2e1514c8d77de02dcae94b7eed3588d27ffe5e112cd731c0f26b0d92869ddced4071161756d0ac8fc617ee38b31bffb6c87c240d1891301280446895ed628b0ec61b18341c054eb3bc7bfbbd66ea2a25f6175b02063a5b34ceab5c8cc1d95a8f07424d195cbf5dfc9cf009ec182e0f1befad94f72", 0xae}, {&(0x7f0000002c40)="6de942b572b3149fac07d1183be029c2196a466fa1296634d32f72d475e62a9038b60a48ed6beba65a7b6c6aa60b4d9c11820654c7485928017da339a4f7ebe9210a15c70b97f16de0c649c59586f5eb3237e1725342d27b5383353561fccc0e4c1b836262887dfd5662550d721e8065166e1a975f9d1422d46247e55c586a3493887d93913e0952c2baac51253ac48695bca7c5028ac53e769b96218f9a4bc2628cc5bc15c4c8f0053037bd9d1a5e7a387badbc", 0xb4}, {&(0x7f0000002d00)="5fdfeef9586dda7406bbe40cc8830cf862a363493a6e83e9d6eef9f418014213cd3fbdbcaeff7b6686cbaf749e449cd0b18dc62cfce8db4fa670b35750befb85c92bf28bca0b4116ce5ed08a4869378d992a21c8a0452ac5ce0aba91f693cc957e2a9275a3f31b067816296fb251e3f5b1c0ebcbb0c2462e9ddd4c88186092fd468bca66b85c274c260794ad02d3baabcaa5c9c30b5db3ae3cf1f0d7918472b8be10274abd2903e995964a2474b9d80b00100f56af1164b7a26451052f45ce8be43f3402e363c96b20f55073c9c1f42143d7e476b0a140a3ae8e46820aabd2b18877119b26d7b65691cb432463b3b83e", 0xf0}, {&(0x7f0000002e00)="efb0e33ed2f14ca8943c7fd4fea7f4165205638deb4e37091ed14889f88754d131206f13e48ac467175c2fb9e3335a351d841d8066069f62e76c5f1b54e6ae900a4925de7d4334606663729c", 0x4c}, {&(0x7f0000002e80)="72a83fc95bf85fcd218d80b99cca5ad13d5400371609132fdcb3167a2932fa21ec629929582bedd35143f0ccbb7d82dfdc15b6644707423fd5e44621f3865413369bec1468f97b8892155435f53bedbbb09bfc83520616f507336f85b3ac69c57e1836ab17681b2633a54945991164c5e13f869e52c50200dcbac59e1f0cdf2f83e3cc963bf5f0596e99f39b3175e65fac9fa9efb1657ca3fca53b121a1d22c17a1e1aa78c2ac4b9a40d8da19d3f924f", 0xb0}, {&(0x7f0000002f40)="accda189c8adb677a58533921f6a8150acb04c1f0cd00af7c4fcd154094a24c523e3f302bd52a17d6f5dabcde99bb68d", 0x30}, {&(0x7f0000002f80)="771342fba89b380ca6ed068642bee206fcc34628eaf72459ca8145b29ae471a0dfd0fa1d7b273b8d2f28e82f465928d531da7add40a4aafbaa49ca96c1dbac1cc5f83ca53722728c", 0x48}], 0x8, &(0x7f0000003080)=[@hopopts={{0x20, 0x29, 0x36, {0x8, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x3f}, @enc_lim]}}}, @pktinfo={{0x24, 0x29, 0x32, {@remote, r3}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0xff, 0x4, 0x2, 0x8, 0x0, [@dev={0xfe, 0x80, '\x00', 0x19}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}], 0x98}}, {{&(0x7f0000003140)={0xa, 0x4e24, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xb1}, 0x1c, &(0x7f0000004440)=[{&(0x7f0000003180)="508300829fac84e5936298f0a9d47080de897a219231a1b8aaccf9154727526d313603b35e0878696618a08ae948f26bbb55f88d5079881b68eefb700da96a08da07942f8079f5f1ef0fee0fff2d2854a421a4274b2ba855db6af7b4e2b5fd621ceb9e9fbdee120404d58d7134234a899120f7b05b4f51ffd2652c34cfffbc8d42cc0844b18f77b360a101541b47a423d6d361c6f50a803cc0ed4be79dc445b1cfcedd07006db4167697bd", 0xab}, {&(0x7f0000003240)="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", 0x1000}, {&(0x7f0000004240)="668ce89d6707bbb5004ead4d572416fbf8930277927549dc5978fd0a9891a4d481278b12f2f40e41d34566bb5511d53d1d567b82558954bb3b652affaa9ac827028799caac27471ff0220af54f43b211f01f9b2cd56ae8f7d6c5078f11459eae93489bddb45486487eea8bba6543a5be09db429be4d8d73681ea5c3867db8183dc404f2d9d731f848108f528", 0x8c}, {&(0x7f0000004300)="9786641ded9711eb6021834128e21cf148cb8911a758233cb2f8c0afc9b2faa920f93558f6a93e084ced7d4883742803c75259d649f6a4e8", 0x38}, {&(0x7f0000004340)}, {&(0x7f0000004380)="f0f3bd22e28fc766f26009bac80b60da8d54b4feba7948c8d9b7ec6ebc5b2b1bc2a5e07da43ab0ce84d133a69f2c6abf8a78d6d2e47e46980f913f58d415c726a7f48ff31b0825ffb16f5ffb609df19b57557de9537520bee0c485fb51d6bca2948aaf3a2dd5b15a389cd6e218969d3deba5e465bda45016df9469ae0cf2cf44f3953f1199c2992bd94ea5318bb7d688760562cdae5ba4bbd27a5c", 0x9b}], 0x6, &(0x7f00000044c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x1}}], 0x18}}, {{&(0x7f0000004500)={0xa, 0x4e22, 0x88, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x6}, 0x1c, &(0x7f0000004680)=[{&(0x7f0000004540)="66462a18e2ae0c3a7cedc833315fe02f8d06261b7043abb244e3d2a7f3dd09e67fc45b891464b59baf7acdaa2963b7857a177dba93deb7996748f2142c9d5dffd41b2e50a22336a5ceb2f3835f24cbebdfec5397a7c5a693331049903961a09e74f981fcddb10e9dfe63109297ba943ad95729dfa1338187a8ec8279909d1dd55335843e971e7f3edb946d826d18abc530ffbb3c554569c3e1bce78ffe2eedc585253df3845fdfc0915f5b6bba60635d8bb98319f865d9589ace1bb866c72a5d809eef72cc0516a02247b7e37415d2c5fa96fb7ffbcbf93629a0e68e4ff4dfd80ffa9f71fdf5cf", 0xe7}, {&(0x7f0000004640)="05aed4d49840e73e57b7180d4de495c76d40c24e6b3c6f5d5a63", 0x1a}], 0x2}}, {{&(0x7f00000046c0)={0xa, 0x4e21, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0x3}, 0x1c, &(0x7f0000004900)=[{&(0x7f0000004700)="7fd0b9370c90dfd887afccca7eb8e498f8c4630a1c5dff934f0401162813ef72eabebd3cc46e21537d401f299617f99667af9db12ce373634241d178046719f3137f25eb1e0be2942b44fba9b1bda3c98190ebcac867c3b5f5229fc38a586a5decd40049d9d68c7831e6f4ce660ee6a1497b384c90f0f5c835807c608134f53f6021f2795f38d5312ad41df04ac73a4e9f127af2f23ed927896a1647d977bb8f794e5e64969d9f8a261fa04e5f05f4941c0b16c645b0845d3832d9f63b492a99eba28b8b7317d41f36db104589af91d07466501d5b", 0xd5}, {&(0x7f0000004800)="e4cfdf8aaa25ab55e37cc806f145e2fe3ecd644423dae4097a5a033ec9e75edf2147d0b0ea8378b56f85964d63b42ce202c0f2db19ae0c3f5ef5d61b05bbeb849359292866b408924bdb5b48cbefffd2f24ef3091baa2c3cf710cb204f4c80d346fe7b40e4c2ff5fdc91c8805f391eef510b7403d7e497a7fa3a9a952ec9bd2778feebef87baa3228ddd19ff2e7e037230c3ccc82742dde5756a8f94289170f3c024fb216bc30ebabc77cbdb6fc796c37b2904dc854d20d42bb4b8993e05cb084173645652eb66ae47210e57a400dbd78b99fdae026eb195e6a22e009818244876a99830eb7ddb47c9a049aee5c4ef", 0xef}], 0x2, &(0x7f0000004940)=[@tclass={{0x14, 0x29, 0x43, 0x13c7}}, @dontfrag={{0x14, 0x29, 0x3e, 0x29c}}, @hoplimit={{0x14, 0x29, 0x34, 0x8000}}, @dstopts_2292={{0x170, 0x29, 0x4, {0x1f, 0x2a, '\x00', [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x400, [0xf1ec]}}, @hao={0xc9, 0x10, @loopback}, @generic={0xd1, 0xfd, "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"}, @jumbo={0xc2, 0x4, 0x1}, @pad1, @calipso={0x7, 0x20, {0x3, 0x6, 0x20, 0xfff, [0x0, 0x2, 0x9]}}, @jumbo={0xc2, 0x4, 0xffffff52}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x6}}, @tclass={{0x14, 0x29, 0x43, 0x7}}], 0x1e8}}, {{&(0x7f0000004b40)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, &(0x7f0000005c80)=[{&(0x7f0000004b80)="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", 0x1000}, {&(0x7f0000005b80)="4ed94debd178aa6d669d301d57ff3937ec46e414870e496ca2e70c6a6f2a24c97fb7bf23a082dcba6d9e6c9f2ff177e508afbaa8e2e568ff73a6c2bbe17baa180efb8eed0f5307fa271155d669601955c03f09e04206103a01a9cb9b7ed4f5bb32d01300de4383f993190a1b4b6ba2731c608c35dcd104da6d67b514ff851ce42e5808b50de3e7aa8eaf5debceaa5106f039b85886525671a60e328478d80cb7d98ded207aa4bc26e67ab20d69723befb8fa28c8ae574be429886207e3043a479d4aea7a21315d2803c0f079", 0xcc}], 0x2, &(0x7f0000005cc0)=[@hopopts={{0x1020, 0x29, 0x36, {0x16, 0x200, '\x00', [@generic={0xc9, 0x1000, "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"}]}}}, @rthdr={{0x68, 0x29, 0x39, {0x32, 0xa, 0x1, 0x3, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0xf}, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x40}}, @flowinfo={{0x14, 0x29, 0xb, 0x3}}, @hopopts_2292={{0x40, 0x29, 0x36, {0x8, 0x4, '\x00', [@enc_lim={0x4, 0x1, 0x3}, @pad1, @enc_lim={0x4, 0x1, 0x8}, @calipso={0x7, 0x18, {0x0, 0x4, 0x1, 0x0, [0x9, 0x6]}}]}}}, @rthdr_2292={{0x18, 0x29, 0x39, {0x1, 0x0, 0x0, 0x42}}}, @hopopts_2292={{0x38, 0x29, 0x36, {0x6, 0x3, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @enc_lim={0x4, 0x1, 0x1}, @jumbo={0xc2, 0x4, 0x7f}, @enc_lim={0x4, 0x1, 0x8}]}}}, @rthdr_2292={{0x78, 0x29, 0x39, {0xff, 0xc, 0x1, 0x0, 0x0, [@mcast2, @dev={0xfe, 0x80, '\x00', 0x15}, @dev={0xfe, 0x80, '\x00', 0x15}, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, @private2]}}}, @rthdrdstopts={{0x98, 0x29, 0x37, {0x3b, 0xf, '\x00', [@jumbo={0xc2, 0x4, 0x2}, @enc_lim={0x4, 0x1, 0x7}, @generic={0x9, 0x6d, "0aca8c0a3680463c19e529f813b0459546133e3e9dfac658a76b2b6fed3bb705ee80ada853ff2926da6bd2c0fa8e1c8bbfdc217bdeaa18c34ae87c88afe8f7d4a11acdd05af20bb6da2c0287112252a0268b86c6f61c79f416841427cbe8df350aade87fbed0f6bf955529ac97"}, @ra={0x5, 0x2, 0xedfe}]}}}], 0x1258}}], 0x7, 0x4c000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r4, &(0x7f00000000c0)='9', 0x1, 0x8040000) pwrite64(r0, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040c00) [ 1520.117965] EXT4-fs error (device loop6): __ext4_fill_super:5311: inode #2: comm syz-executor.6: iget: root inode unallocated 09:42:30 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r2, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) sendfile(r2, r2, 0x0, 0xffffffff000) sendmmsg$inet6(r2, &(0x7f0000000580)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x55e}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000100)="305e18a9911c35fab237ff34ae5d677f7b7a7dd04ae9228c6462c5fbe22d1520c10bb360f52ea8a59f5ea2a59bd320104784b9a567a8734cb37239f90f4b2c369189eaba5a96", 0x46}, {&(0x7f0000000180)="c147cfffab173b5661de248a39314f6a6304ac17bc5aa835e9d17b452d922f0d0fe0000bdd7d503a5b09214b9e21b41ff8adb967f95b5ca0401d0ed1c4e48355d21b06c3661452bffa53aa52e9dcd11158de31c0105b4d6c893d682ba9953b9eb8840372412c63502df61ef6e89d63dd64bc39502477925ca25abd3bff0a5a429b9253b02a15e33382d90dfc20f9740a8f9968f3b85d141b866eaff988e7eb", 0x9f}, {&(0x7f0000000240)="5fa0ec3a11be1c7cd1fb5c8d2788dd997a603d38d693fc06df077a88d724d44e113ce221af283a8d6b3cae1aa9de76926303340b83112cea5fcde26c01a08a28475a629d845a4a3318dee624798b3595bfa9172545eb9141480832509631a4fde1272c4ae452f96363a335996e26903ec43f70f9eb3075372b4384ab3e8252e64abaf8c93fafbfb41b4a9024fe17ff9145b373c76bd16439a0c3eea384f1bf0c815428790bb82fd8d33c4f1e362bd892636d74f34e9152d0a435f6c7", 0xbc}, {&(0x7f0000000300)="12c632f5c1f68601f91ec9cae7ff06b2d9acb783992b90ff00974c943560385c03be8beaf39400e3570d6e230e089072b87b75ef0db587c0b55eff5bcafb2394ec2dcb37591bff869c4b761ee7e00fc41f5d1d1671fb2cbe52d6a9bbc048fc4631a4f48adb9e40f36977f98593c0f7418e8fd8ef7a837fb776463efd6974129c805f57dbfcdca56e4509bd2db5bf418013c27ed5ddbb974a81236c", 0x9b}, {&(0x7f0000000080)}], 0x5, &(0x7f0000000480)=[@hopopts={{0x20, 0x29, 0x36, {0x0, 0x0, '\x00', [@ra={0x5, 0x2, 0x4}, @enc_lim={0x4, 0x1, 0xdd}]}}}, @tclass={{0x14, 0x29, 0x43, 0x4}}, @rthdr={{0xb8, 0x29, 0x39, {0x6e, 0x14, 0x1, 0xff, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast2}, @local, @private1, @private2, @private2, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, @private0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}]}}}], 0xf0}}], 0x1, 0x4000000) sendmmsg$inet(r1, &(0x7f0000000e80)=[{{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x57}}], 0x18}}], 0x1, 0x0) [ 1520.133474] EXT4-fs (loop6): get root inode failed [ 1520.134604] EXT4-fs (loop6): mount failed 09:42:30 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x5) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) (fail_nth: 4) [ 1520.144198] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 09:42:30 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000040)='./file1\x00', 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x8000000, 0x0) [ 1520.183752] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 09:42:30 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0x0) 09:42:30 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d9f4655fd9f4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {&(0x7f0000010400)="0200000003000000040000006a000f000300040000000000000000000f00bc0f", 0x20, 0x800}, {&(0x7f0000011600), 0x0, 0x2100}], 0x0, &(0x7f0000000180)={[{@journal_dev={'journal_dev', 0x3d, 0x7}}]}) [ 1520.230154] loop4: detected capacity change from 0 to 255 [ 1520.240451] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1520.242389] loop3: detected capacity change from 0 to 255 [ 1520.246551] loop0: detected capacity change from 0 to 40 [ 1520.254154] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1520.264662] loop1: detected capacity change from 0 to 64 [ 1520.273217] loop6: detected capacity change from 0 to 512 [ 1520.275147] FAULT_INJECTION: forcing a failure. [ 1520.275147] name failslab, interval 1, probability 0, space 0, times 0 [ 1520.277584] CPU: 1 PID: 9806 Comm: syz-executor.4 Not tainted 5.17.0-next-20220401 #1 [ 1520.279243] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1520.281603] Call Trace: [ 1520.282141] [ 1520.282611] dump_stack_lvl+0x8b/0xb3 [ 1520.283459] should_fail.cold+0x5/0xa [ 1520.284293] ? create_object.isra.0+0x3a/0xa20 [ 1520.285279] should_failslab+0x5/0x10 [ 1520.286109] kmem_cache_alloc+0x5b/0x480 [ 1520.287030] create_object.isra.0+0x3a/0xa20 [ 1520.287975] ? kasan_unpoison+0x23/0x50 [ 1520.288839] __kmalloc_node+0x26f/0x470 [ 1520.289709] kvmalloc_node+0x3e/0x130 [ 1520.290535] alloc_pipe_info+0x1e5/0x580 [ 1520.291424] splice_direct_to_actor+0x700/0x8e0 [ 1520.292437] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1520.293596] ? pipe_to_sendpage+0x380/0x380 [ 1520.294524] ? inode_security+0x105/0x130 [ 1520.295409] ? avc_policy_seqno+0x9/0x70 [ 1520.296289] ? selinux_file_permission+0x36/0x510 [ 1520.297305] ? do_splice_to+0x240/0x240 [ 1520.298164] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1520.299342] ? security_file_permission+0xb1/0xd0 [ 1520.300375] do_splice_direct+0x1b8/0x280 [ 1520.301267] ? splice_direct_to_actor+0x8e0/0x8e0 [ 1520.302297] ? lock_is_held_type+0xd7/0x130 [ 1520.303240] do_sendfile+0xad7/0x1230 [ 1520.304074] ? __ia32_compat_sys_preadv64+0x2e0/0x2e0 [ 1520.305203] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1520.306361] ? vfs_write+0x422/0xac0 [ 1520.307169] __x64_sys_sendfile64+0x1cd/0x210 [ 1520.308136] ? __ia32_compat_sys_sendfile64+0x210/0x210 [ 1520.309310] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1520.310437] do_syscall_64+0x3b/0x90 [ 1520.311252] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1520.312364] RIP: 0033:0x7f10081d2b19 [ 1520.313157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1520.317121] RSP: 002b:00007f1005748188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1520.318753] RAX: ffffffffffffffda RBX: 00007f10082e5f60 RCX: 00007f10081d2b19 [ 1520.320279] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 1520.321801] RBP: 00007f10057481d0 R08: 0000000000000000 R09: 0000000000000000 [ 1520.323331] R10: 00000ffffffff000 R11: 0000000000000246 R12: 0000000000000001 [ 1520.324844] R13: 00007fff5bac1b9f R14: 00007f1005748300 R15: 0000000000022000 [ 1520.326397] [ 1520.346781] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 09:42:30 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0x0) 09:42:30 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000040)='./file1\x00', 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x8000000, 0x0) [ 1520.371927] loop3: detected capacity change from 0 to 255 [ 1520.376634] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 09:42:30 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0x0) [ 1520.406660] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 09:42:30 executing program 7: syz_80211_inject_frame(&(0x7f0000000000)=@device_b, 0x0, 0x0) [ 1520.456673] loop0: detected capacity change from 0 to 40 [ 1520.461470] EXT4-fs error (device loop6): __ext4_fill_super:5311: inode #2: comm syz-executor.6: iget: root inode unallocated 09:42:30 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000010000)="eb58906d6b66732e66617400021e20000400000004f8", 0x16}, {0x0, 0x0, 0x4000}], 0x100c000, &(0x7f0000000040)) (fail_nth: 50) [ 1520.477245] EXT4-fs (loop6): get root inode failed [ 1520.478325] EXT4-fs (loop6): mount failed [ 1520.483489] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1520.509405] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1520.509485] loop3: detected capacity change from 0 to 255 [ 1520.530445] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1520.590623] FAULT_INJECTION: forcing a failure. [ 1520.590623] name failslab, interval 1, probability 0, space 0, times 0 [ 1520.593085] CPU: 0 PID: 9824 Comm: syz-executor.1 Not tainted 5.17.0-next-20220401 #1 [ 1520.594758] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1520.596974] Call Trace: [ 1520.597474] [ 1520.597913] dump_stack_lvl+0x8b/0xb3 [ 1520.598691] should_fail.cold+0x5/0xa [ 1520.599454] ? create_object.isra.0+0x3a/0xa20 [ 1520.600369] should_failslab+0x5/0x10 [ 1520.601126] kmem_cache_alloc+0x5b/0x480 [ 1520.601943] create_object.isra.0+0x3a/0xa20 [ 1520.602826] ? kasan_unpoison+0x23/0x50 [ 1520.603614] kmem_cache_alloc+0x239/0x480 [ 1520.604445] __kernfs_new_node+0xd4/0x8b0 [ 1520.605271] ? kernfs_path_from_node+0x60/0x60 [ 1520.606170] ? find_held_lock+0x2c/0x110 [ 1520.607010] ? lock_release+0x3b2/0x6f0 [ 1520.607789] ? kernfs_add_one+0x3c6/0x550 [ 1520.608633] ? lock_downgrade+0x6d0/0x6d0 [ 1520.609464] ? lock_is_held_type+0xd7/0x130 [ 1520.610322] kernfs_new_node+0x93/0x120 [ 1520.611137] __kernfs_create_file+0x51/0x350 [ 1520.612020] sysfs_add_file_mode_ns+0x218/0x430 [ 1520.612961] ? component_del+0x4c0/0x4c0 [ 1520.613767] internal_create_group+0x322/0xb20 [ 1520.614674] ? sysfs_remove_group+0x170/0x170 [ 1520.615576] ? loop_configure+0x1940/0x1940 [ 1520.616455] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 1520.617443] ? __loop_update_dio+0x2a3/0x620 [ 1520.618338] loop_configure+0xe81/0x1940 [ 1520.619201] lo_ioctl+0x782/0x1850 [ 1520.619928] ? __x64_sys_openat+0x13f/0x1f0 [ 1520.620796] ? loop_set_status_old+0x1b0/0x1b0 [ 1520.621726] ? avc_ss_reset+0x180/0x180 [ 1520.622537] ? __lock_acquire+0xbac/0x6120 [ 1520.623495] ? loop_set_status_old+0x1b0/0x1b0 [ 1520.624405] blkdev_ioctl+0x356/0x7f0 [ 1520.625165] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 1520.626107] ? selinux_file_ioctl+0xb1/0x260 [ 1520.626985] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1520.628073] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 1520.629014] __x64_sys_ioctl+0x196/0x210 [ 1520.629821] do_syscall_64+0x3b/0x90 [ 1520.630550] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1520.631587] RIP: 0033:0x7f72f8f588d7 [ 1520.632316] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1520.635923] RSP: 002b:00007f72f64cdf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1520.637408] RAX: ffffffffffffffda RBX: 00007f72f8fa2970 RCX: 00007f72f8f588d7 [ 1520.638816] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1520.640210] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1520.641603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1520.643025] R13: 0000000000000004 R14: 00000000200004f0 R15: 0000000000000002 [ 1520.644472] [ 1520.647751] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1520.723086] loop1: detected capacity change from 0 to 64 09:42:48 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x5) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) (fail_nth: 5) 09:42:48 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000040)='./file1\x00', 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x8000000, 0x0) [ 1538.214614] loop2: detected capacity change from 0 to 40 [ 1538.245793] loop0: detected capacity change from 0 to 40 [ 1538.245957] loop4: detected capacity change from 0 to 255 09:42:48 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) pipe2$9p(&(0x7f00000000c0), 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @remote, @broadcast}}}], 0x20}, 0x0) [ 1538.249147] FAULT_INJECTION: forcing a failure. [ 1538.249147] name failslab, interval 1, probability 0, space 0, times 0 [ 1538.251726] CPU: 1 PID: 9847 Comm: syz-executor.1 Not tainted 5.17.0-next-20220401 #1 [ 1538.253392] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1538.255792] Call Trace: [ 1538.256339] [ 1538.256816] dump_stack_lvl+0x8b/0xb3 [ 1538.257390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1538.257650] should_fail.cold+0x5/0xa [ 1538.260434] ? __kernfs_new_node+0xd4/0x8b0 [ 1538.261363] should_failslab+0x5/0x10 [ 1538.262181] kmem_cache_alloc+0x5b/0x480 [ 1538.263079] __kernfs_new_node+0xd4/0x8b0 [ 1538.264042] ? kernfs_add_one+0x3c6/0x550 [ 1538.265107] ? kernfs_path_from_node+0x60/0x60 [ 1538.266258] ? lock_is_held_type+0xd7/0x130 [ 1538.267194] ? up_write+0x148/0x460 [ 1538.267966] ? kernfs_activate+0x1c4/0x240 [ 1538.269042] kernfs_new_node+0x93/0x120 [ 1538.269908] __kernfs_create_file+0x51/0x350 [ 1538.270996] sysfs_add_file_mode_ns+0x218/0x430 [ 1538.272007] ? component_del+0x4c0/0x4c0 sendmmsg$inet6(r0, &(0x7f0000006f40)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x400, @ipv4={'\x00', '\xff\xff', @loopback}, 0xd103}, 0x1c, &(0x7f0000001340)=[{&(0x7f0000000140)="bf2e6b3dd3de888b4b35f4179c2c0cbe6cf7f5f534fae038d1d85aa2d8348c055bb59ad36d8e233011778eaef4a51b0cd2a0b7e8ea4a0d202dd84f553bee22dcbd2827725f172061b9b0f6f43107f584845fe3880b4753c416e4950bec101e538257f980335e429d9d65266948ab00e4f2cb34f7e3488ea2da61813faf857cce8aecacf81bd28bc444e2e10f80b84c43a0248f99c6f02a6777d94f54c1f0245781fa0380766b27607d8d022ea04c8327cc67943c1dc9711abcc8d8ed475560d5270569cb30882e79ce68271aa2e8a4d02b6d6ff7d3fbd74ea7b7d073e8d75d6b488589c9a325d35b72", 0xe9}, {&(0x7f0000000240)="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", 0xfe}, {&(0x7f0000000340)="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", 0x1000}], 0x3}}, {{&(0x7f0000001380)={0xa, 0x4e24, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8001}, 0x1c, &(0x7f0000002680)=[{&(0x7f00000013c0)="1fcdad8a48f4a00d40f21bed155e5d58d5fb6f02d50289bc00f87bc85cfa7b51c937c39c605e2c046f092bc35175276e87765eb66e0268baa5d47034b68162e745ba7f8af6409cc108ce505740d1", 0x4e}, {&(0x7f0000001440)="1aed8f59578bc65added306b630d25c69ad908741072af43162cc8c6411e6262415016bd325ab5a13f14c7d2eb649469aee2d12bd0aa2b7bd14106f468ac70085ccf6584cf8d9713766f82524221676bd125856bb665b3d4d1769297dbe86ad7d4e70939aa2d969c7b478ddbdb1ff5ca67fe36385eab998167dccac13d3fa25779ff485cce1cafa8c08b31db9e0a57c82bb4938c0aeb162f176a35ca3797bc0654a2a99ee3d4a60071d3b36445515b4ffccd123093e1d36cc9be9968ced1926e1f2a83bf340f26a631c4662129bfcf9f6d5589ddd514ffd665e33a5525a0a6afa1198ebf4ba07004", 0xe8}, {&(0x7f0000001540)="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", 0x1000}, {&(0x7f0000002540)="eb837c1af3eaa3543603b121dbb798e66337bb0b427c20a61184dd085026bbdf12f2fb84f3e564fc2f12488885940b61d5a683779083e1d8c9f7880a813434780dc7da588297799b731a9400c9af4349dc42c04bcbba486117663fb99a72ae1fb7ac06402bd636224bc4b1dd", 0x6c}, {&(0x7f00000025c0)="f3ef4fae9da5a2cefee03b2c1b5a38c763d5df66b7bad55d3474ddf35e4f8ad3b49d9e37c649da62f632413558b77fa5fd66d801cbd5207ec4b1b0de84583a06446a6f8aec7bb0960f79f6b5aa12545a33a40a28b989fe5a3bcf8b8e352bde0c9c60d62dda25be97f059d5a2d353aa18d721657bc2df23bf48856430c842e94bf779f97f272203f805bfa85616f276d93b4eeeb8", 0x94}], 0x5, &(0x7f0000002700)=[@dstopts_2292={{0xd8, 0x29, 0x4, {0x5e, 0x17, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0xe}}, @generic={0x0, 0xab, "04c21d3b5905fcc519f4855162d809a669104815c9ca19efcb2987cd2fe285da086461c3c7271eead0fac8dd9ba0a257d2728a65f16b2ad2a5e657609a6164ea6b981994ce33c95eb6b5379c80fbd90f73e12735cf9aa30ec2b84ba51b96567354e9c47a6ae430bd06871d8974a22f943cc27b327b61c8367bb44341f4cfc8c5effa7a47463b612325f373bccde79e6bd28f5e5ec6cf1cb188ffdbcfe9f48662ce89de03c11d4a03f1f13c"}]}}}, @rthdr={{0xa8, 0x29, 0x39, {0x29, 0x12, 0x0, 0x0, 0x0, [@private0, @ipv4={'\x00', '\xff\xff', @multicast2}, @empty, @empty, @dev={0xfe, 0x80, '\x00', 0x30}, @private1, @remote, @ipv4={'\x00', '\xff\xff', @broadcast}, @private0={0xfc, 0x0, '\x00', 0x1}]}}}, @dstopts_2292={{0x70, 0x29, 0x4, {0x2b, 0xa, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @ra={0x5, 0x2, 0x1}, @calipso={0x7, 0x10, {0x1, 0x2, 0x7, 0x5, [0x1]}}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @hao={0xc9, 0x10, @mcast2}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}}, @hopopts_2292={{0xf8, 0x29, 0x36, {0xc, 0x1b, '\x00', [@hao={0xc9, 0x10, @loopback}, @hao={0xc9, 0x10, @mcast1}, @jumbo={0xc2, 0x4, 0x1}, @calipso={0x7, 0x50, {0x2, 0x12, 0x1, 0x3ff, [0xb9b7, 0x7, 0x571, 0x80, 0x2, 0x4, 0x0, 0x3, 0x5a60]}}, @hao={0xc9, 0x10, @private0}, @ra, @calipso={0x7, 0x40, {0x0, 0xe, 0x7, 0x3, [0x8, 0x7, 0x3, 0x24, 0x9d, 0x8, 0xb]}}, @enc_lim, @pad1]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x3c, 0x2, 0x0, 0xce, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}]}}}, @rthdr={{0x98, 0x29, 0x39, {0x95, 0x10, 0x2, 0x5, 0x0, [@dev={0xfe, 0x80, '\x00', 0x32}, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x36}, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @private0, @private2={0xfc, 0x2, '\x00', 0x1}]}}}], 0x3a8}}, {{&(0x7f0000002ac0)={0xa, 0x4e23, 0x6, @private0, 0x1a}, 0x1c, &(0x7f0000003000)=[{&(0x7f0000002b00)="85c82e95bbd279dc03bbd55605eaace36b036742dea08d55564d9f8f3a04ae2994832fb5101468bce44a4359b3f98c1740737e244fe07986911ccc44ad68bbedb5b4d6f6d653", 0x46}, {&(0x7f0000002b80)="37a689460777c2bf3adf041021cda6f0d1efbdd0a3248cd5d496f5f1422716a60916beab33506636d73af791ba3be211e21dc974ee78461a12d2e1514c8d77de02dcae94b7eed3588d27ffe5e112cd731c0f26b0d92869ddced4071161756d0ac8fc617ee38b31bffb6c87c240d1891301280446895ed628b0ec61b18341c054eb3bc7bfbbd66ea2a25f6175b02063a5b34ceab5c8cc1d95a8f07424d195cbf5dfc9cf009ec182e0f1befad94f72", 0xae}, {&(0x7f0000002c40)="6de942b572b3149fac07d1183be029c2196a466fa1296634d32f72d475e62a9038b60a48ed6beba65a7b6c6aa60b4d9c11820654c7485928017da339a4f7ebe9210a15c70b97f16de0c649c59586f5eb3237e1725342d27b5383353561fccc0e4c1b836262887dfd5662550d721e8065166e1a975f9d1422d46247e55c586a3493887d93913e0952c2baac51253ac48695bca7c5028ac53e769b96218f9a4bc2628cc5bc15c4c8f0053037bd9d1a5e7a387badbc", 0xb4}, {&(0x7f0000002d00)="5fdfeef9586dda7406bbe40cc8830cf862a363493a6e83e9d6eef9f418014213cd3fbdbcaeff7b6686cbaf749e449cd0b18dc62cfce8db4fa670b35750befb85c92bf28bca0b4116ce5ed08a4869378d992a21c8a0452ac5ce0aba91f693cc957e2a9275a3f31b067816296fb251e3f5b1c0ebcbb0c2462e9ddd4c88186092fd468bca66b85c274c260794ad02d3baabcaa5c9c30b5db3ae3cf1f0d7918472b8be10274abd2903e995964a2474b9d80b00100f56af1164b7a26451052f45ce8be43f3402e363c96b20f55073c9c1f42143d7e476b0a140a3ae8e46820aabd2b18877119b26d7b65691cb432463b3b83e", 0xf0}, {&(0x7f0000002e00)="efb0e33ed2f14ca8943c7fd4fea7f4165205638deb4e37091ed14889f88754d131206f13e48ac467175c2fb9e3335a351d841d8066069f62e76c5f1b54e6ae900a4925de7d4334606663729c", 0x4c}, {&(0x7f0000002e80)="72a83fc95bf85fcd218d80b99cca5ad13d5400371609132fdcb3167a2932fa21ec629929582bedd35143f0ccbb7d82dfdc15b6644707423fd5e44621f3865413369bec1468f97b8892155435f53bedbbb09bfc83520616f507336f85b3ac69c57e1836ab17681b2633a54945991164c5e13f869e52c50200dcbac59e1f0cdf2f83e3cc963bf5f0596e99f39b3175e65fac9fa9efb1657ca3fca53b121a1d22c17a1e1aa78c2ac4b9a40d8da19d3f924f", 0xb0}, {&(0x7f0000002f40)="accda189c8adb677a58533921f6a8150acb04c1f0cd00af7c4fcd154094a24c523e3f302bd52a17d6f5dabcde99bb68d", 0x30}, {&(0x7f0000002f80)="771342fba89b380ca6ed068642bee206fcc34628eaf72459ca8145b29ae471a0dfd0fa1d7b273b8d2f28e82f465928d531da7add40a4aafbaa49ca96c1dbac1cc5f83ca53722728c", 0x48}], 0x8, &(0x7f0000003080)=[@hopopts={{0x20, 0x29, 0x36, {0x8, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x3f}, @enc_lim]}}}, @pktinfo={{0x24, 0x29, 0x32, {@remote, r3}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0xff, 0x4, 0x2, 0x8, 0x0, [@dev={0xfe, 0x80, '\x00', 0x19}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}], 0x98}}, {{&(0x7f0000003140)={0xa, 0x4e24, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xb1}, 0x1c, &(0x7f0000004440)=[{&(0x7f0000003180)="508300829fac84e5936298f0a9d47080de897a219231a1b8aaccf9154727526d313603b35e0878696618a08ae948f26bbb55f88d5079881b68eefb700da96a08da07942f8079f5f1ef0fee0fff2d2854a421a4274b2ba855db6af7b4e2b5fd621ceb9e9fbdee120404d58d7134234a899120f7b05b4f51ffd2652c34cfffbc8d42cc0844b18f77b360a101541b47a423d6d361c6f50a803cc0ed4be79dc445b1cfcedd07006db4167697bd", 0xab}, {&(0x7f0000003240)="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", 0x1000}, {&(0x7f0000004240)="668ce89d6707bbb5004ead4d572416fbf8930277927549dc5978fd0a9891a4d481278b12f2f40e41d34566bb5511d53d1d567b82558954bb3b652affaa9ac827028799caac27471ff0220af54f43b211f01f9b2cd56ae8f7d6c5078f11459eae93489bddb45486487eea8bba6543a5be09db429be4d8d73681ea5c3867db8183dc404f2d9d731f848108f528", 0x8c}, {&(0x7f0000004300)="9786641ded9711eb6021834128e21cf148cb8911a758233cb2f8c0afc9b2faa920f93558f6a93e084ced7d4883742803c75259d649f6a4e8", 0x38}, {&(0x7f0000004340)}, {&(0x7f0000004380)="f0f3bd22e28fc766f26009bac80b60da8d54b4feba7948c8d9b7ec6ebc5b2b1bc2a5e07da43ab0ce84d133a69f2c6abf8a78d6d2e47e46980f913f58d415c726a7f48ff31b0825ffb16f5ffb609df19b57557de9537520bee0c485fb51d6bca2948aaf3a2dd5b15a389cd6e218969d3deba5e465bda45016df9469ae0cf2cf44f3953f1199c2992bd94ea5318bb7d688760562cdae5ba4bbd27a5c", 0x9b}], 0x6, &(0x7f00000044c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x1}}], 0x18}}, {{&(0x7f0000004500)={0xa, 0x4e22, 0x88, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x6}, 0x1c, &(0x7f0000004680)=[{&(0x7f0000004540)="66462a18e2ae0c3a7cedc833315fe02f8d06261b7043abb244e3d2a7f3dd09e67fc45b891464b59baf7acdaa2963b7857a177dba93deb7996748f2142c9d5dffd41b2e50a22336a5ceb2f3835f24cbebdfec5397a7c5a693331049903961a09e74f981fcddb10e9dfe63109297ba943ad95729dfa1338187a8ec8279909d1dd55335843e971e7f3edb946d826d18abc530ffbb3c554569c3e1bce78ffe2eedc585253df3845fdfc0915f5b6bba60635d8bb98319f865d9589ace1bb866c72a5d809eef72cc0516a02247b7e37415d2c5fa96fb7ffbcbf93629a0e68e4ff4dfd80ffa9f71fdf5cf", 0xe7}, {&(0x7f0000004640)="05aed4d49840e73e57b7180d4de495c76d40c24e6b3c6f5d5a63", 0x1a}], 0x2}}, {{&(0x7f00000046c0)={0xa, 0x4e21, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0x3}, 0x1c, &(0x7f0000004900)=[{&(0x7f0000004700)="7fd0b9370c90dfd887afccca7eb8e498f8c4630a1c5dff934f0401162813ef72eabebd3cc46e21537d401f299617f99667af9db12ce373634241d178046719f3137f25eb1e0be2942b44fba9b1bda3c98190ebcac867c3b5f5229fc38a586a5decd40049d9d68c7831e6f4ce660ee6a1497b384c90f0f5c835807c608134f53f6021f2795f38d5312ad41df04ac73a4e9f127af2f23ed927896a1647d977bb8f794e5e64969d9f8a261fa04e5f05f4941c0b16c645b0845d3832d9f63b492a99eba28b8b7317d41f36db104589af91d07466501d5b", 0xd5}, {&(0x7f0000004800)="e4cfdf8aaa25ab55e37cc806f145e2fe3ecd644423dae4097a5a033ec9e75edf2147d0b0ea8378b56f85964d63b42ce202c0f2db19ae0c3f5ef5d61b05bbeb849359292866b408924bdb5b48cbefffd2f24ef3091baa2c3cf710cb204f4c80d346fe7b40e4c2ff5fdc91c8805f391eef510b7403d7e497a7fa3a9a952ec9bd2778feebef87baa3228ddd19ff2e7e037230c3ccc82742dde5756a8f94289170f3c024fb216bc30ebabc77cbdb6fc796c37b2904dc854d20d42bb4b8993e05cb084173645652eb66ae47210e57a400dbd78b99fdae026eb195e6a22e009818244876a99830eb7ddb47c9a049aee5c4ef", 0xef}], 0x2, &(0x7f0000004940)=[@tclass={{0x14, 0x29, 0x43, 0x13c7}}, @dontfrag={{0x14, 0x29, 0x3e, 0x29c}}, @hoplimit={{0x14, 0x29, 0x34, 0x8000}}, @dstopts_2292={{0x170, 0x29, 0x4, {0x1f, 0x2a, '\x00', [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x400, [0xf1ec]}}, @hao={0xc9, 0x10, @loopback}, @generic={0xd1, 0xfd, "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"}, @jumbo={0xc2, 0x4, 0x1}, @pad1, @calipso={0x7, 0x20, {0x3, 0x6, 0x20, 0xfff, [0x0, 0x2, 0x9]}}, @jumbo={0xc2, 0x4, 0xffffff52}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x6}}, @tclass={{0x14, 0x29, 0x43, 0x7}}], 0x1e8}}, {{&(0x7f0000004b40)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, &(0x7f0000005c80)=[{&(0x7f0000004b80)="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", 0x1000}, {&(0x7f0000005b80)="4ed94debd178aa6d669d301d57ff3937ec46e414870e496ca2e70c6a6f2a24c97fb7bf23a082dcba6d9e6c9f2ff177e508afbaa8e2e568ff73a6c2bbe17baa180efb8eed0f5307fa271155d669601955c03f09e04206103a01a9cb9b7ed4f5bb32d01300de4383f993190a1b4b6ba2731c608c35dcd104da6d67b514ff851ce42e5808b50de3e7aa8eaf5debceaa5106f039b85886525671a60e328478d80cb7d98ded207aa4bc26e67ab20d69723befb8fa28c8ae574be429886207e3043a479d4aea7a21315d2803c0f079", 0xcc}], 0x2, &(0x7f0000005cc0)=[@hopopts={{0x1020, 0x29, 0x36, {0x16, 0x200, '\x00', [@generic={0xc9, 0x1000, "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"}]}}}, @rthdr={{0x68, 0x29, 0x39, {0x32, 0xa, 0x1, 0x3, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0xf}, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x40}}, @flowinfo={{0x14, 0x29, 0xb, 0x3}}, @hopopts_2292={{0x40, 0x29, 0x36, {0x8, 0x4, '\x00', [@enc_lim={0x4, 0x1, 0x3}, @pad1, @enc_lim={0x4, 0x1, 0x8}, @calipso={0x7, 0x18, {0x0, 0x4, 0x1, 0x0, [0x9, 0x6]}}]}}}, @rthdr_2292={{0x18, 0x29, 0x39, {0x1, 0x0, 0x0, 0x42}}}, @hopopts_2292={{0x38, 0x29, 0x36, {0x6, 0x3, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @enc_lim={0x4, 0x1, 0x1}, @jumbo={0xc2, 0x4, 0x7f}, @enc_lim={0x4, 0x1, 0x8}]}}}, @rthdr_2292={{0x78, 0x29, 0x39, {0xff, 0xc, 0x1, 0x0, 0x0, [@mcast2, @dev={0xfe, 0x80, '\x00', 0x15}, @dev={0xfe, 0x80, '\x00', 0x15}, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, @private2]}}}, @rthdrdstopts={{0x98, 0x29, 0x37, {0x3b, 0xf, '\x00', [@jumbo={0xc2, 0x4, 0x2}, @enc_lim={0x4, 0x1, 0x7}, @generic={0x9, 0x6d, "0aca8c0a3680463c19e529f813b0459546133e3e9dfac658a76b2b6fed3bb705ee80ada853ff2926da6bd2c0fa8e1c8bbfdc217bdeaa18c34ae87c88afe8f7d4a11acdd05af20bb6da2c0287112252a0268b86c6f61c79f416841427cbe8df350aade87fbed0f6bf955529ac97"}, @ra={0x5, 0x2, 0xedfe}]}}}], 0x1258}}], 0x7, 0x4c000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r4, &(0x7f00000000c0)='9', 0x1, 0x8040000) pwrite64(r0, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040c00) 09:42:48 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000040)='./file1\x00', 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x8000000, 0x0) 09:42:48 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000040)='./file1\x00', 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x0, 0x0) 09:42:48 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d9f4655fd9f4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {&(0x7f0000010400)="0200000003000000040000006a000f000300040000000000000000000f00bc0f", 0x20, 0x800}, {&(0x7f0000011600), 0x0, 0x2100}], 0x0, &(0x7f0000000180)={[{@journal_dev={'journal_dev', 0x3d, 0x7}}]}) 09:42:48 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000010000)="eb58906d6b66732e66617400021e20000400000004f8", 0x16}, {0x0, 0x0, 0x4000}], 0x100c000, &(0x7f0000000040)) (fail_nth: 51) 09:42:48 executing program 7: syz_80211_inject_frame(&(0x7f0000000000)=@device_b, 0x0, 0x0) [ 1538.272885] internal_create_group+0x322/0xb20 [ 1538.273987] ? sysfs_remove_group+0x170/0x170 [ 1538.274994] ? loop_configure+0x1940/0x1940 [ 1538.275916] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 1538.277002] ? __loop_update_dio+0x2a3/0x620 [ 1538.277942] loop_configure+0xe81/0x1940 [ 1538.278846] lo_ioctl+0x782/0x1850 [ 1538.279616] ? __x64_sys_openat+0x13f/0x1f0 [ 1538.280563] ? loop_set_status_old+0x1b0/0x1b0 [ 1538.281536] ? avc_ss_reset+0x180/0x180 [ 1538.282427] ? __lock_acquire+0xbac/0x6120 [ 1538.283428] ? loop_set_status_old+0x1b0/0x1b0 [ 1538.284418] blkdev_ioctl+0x356/0x7f0 [ 1538.285238] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 1538.286262] ? selinux_file_ioctl+0xb1/0x260 [ 1538.287210] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1538.288398] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 1538.289413] __x64_sys_ioctl+0x196/0x210 [ 1538.290295] do_syscall_64+0x3b/0x90 [ 1538.291107] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1538.292215] RIP: 0033:0x7f72f8f588d7 [ 1538.293004] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1538.296934] RSP: 002b:00007f72f64cdf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1538.298531] RAX: ffffffffffffffda RBX: 00007f72f8fa2970 RCX: 00007f72f8f588d7 [ 1538.300059] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1538.301574] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1538.303104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1538.304616] R13: 0000000000000004 R14: 00000000200004f0 R15: 0000000000000002 [ 1538.306154] [ 1538.308372] loop6: detected capacity change from 0 to 512 [ 1538.315055] loop3: detected capacity change from 0 to 40 [ 1538.339772] FAULT_INJECTION: forcing a failure. [ 1538.339772] name failslab, interval 1, probability 0, space 0, times 0 [ 1538.342399] CPU: 1 PID: 9853 Comm: syz-executor.4 Not tainted 5.17.0-next-20220401 #1 [ 1538.344064] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1538.346432] Call Trace: [ 1538.346977] [ 1538.347450] dump_stack_lvl+0x8b/0xb3 [ 1538.348277] should_fail.cold+0x5/0xa [ 1538.349093] ? jbd2__journal_start+0x18c/0x8d0 [ 1538.350074] should_failslab+0x5/0x10 [ 1538.350892] kmem_cache_alloc+0x5b/0x480 [ 1538.352064] jbd2__journal_start+0x18c/0x8d0 [ 1538.353165] __ext4_journal_start_sb+0x392/0x470 [ 1538.354307] ? ext4_setattr+0x2070/0x2070 [ 1538.355471] ext4_dirty_inode+0x9d/0x110 [ 1538.356475] __mark_inode_dirty+0x425/0xeb0 [ 1538.357495] ? __mnt_want_write+0x1fa/0x2e0 [ 1538.358518] touch_atime+0x640/0x700 [ 1538.359438] ? atime_needs_update+0x870/0x870 [ 1538.360513] ? filemap_read+0x8f8/0xba0 [ 1538.361464] filemap_read+0x9de/0xba0 [ 1538.362407] ? filemap_get_pages+0x1680/0x1680 [ 1538.363516] ? kasan_save_stack+0x2e/0x40 [ 1538.364508] ? kasan_save_stack+0x1e/0x40 [ 1538.365496] ? __kasan_kmalloc+0x81/0xa0 [ 1538.366465] ? kvmalloc_node+0x3e/0x130 [ 1538.367419] ? alloc_pipe_info+0x1e5/0x580 [ 1538.368433] ? splice_direct_to_actor+0x700/0x8e0 [ 1538.369577] ? do_splice_direct+0x1b8/0x280 [ 1538.370601] ? do_sendfile+0xad7/0x1230 [ 1538.371585] ? __x64_sys_sendfile64+0x1cd/0x210 [ 1538.372607] ? do_syscall_64+0x3b/0x90 [ 1538.373422] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1538.374560] generic_file_read_iter+0x3c9/0x530 [ 1538.375555] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1538.376731] ? __fsnotify_parent+0x498/0xa60 [ 1538.377681] ext4_file_read_iter+0x184/0x3f0 [ 1538.378629] generic_file_splice_read+0x3b9/0x5d0 [ 1538.379660] ? pipe_to_user+0x170/0x170 [ 1538.380540] ? security_file_permission+0xb1/0xd0 [ 1538.381560] ? pipe_to_user+0x170/0x170 [ 1538.382420] do_splice_to+0x1bc/0x240 [ 1538.383259] splice_direct_to_actor+0x2c7/0x8e0 [ 1538.384267] ? pipe_to_sendpage+0x380/0x380 [ 1538.385188] ? do_splice_to+0x240/0x240 [ 1538.386046] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1538.387209] ? security_file_permission+0xb1/0xd0 [ 1538.388248] do_splice_direct+0x1b8/0x280 [ 1538.389138] ? splice_direct_to_actor+0x8e0/0x8e0 [ 1538.390185] ? lock_is_held_type+0xd7/0x130 [ 1538.391135] do_sendfile+0xad7/0x1230 [ 1538.391979] ? __ia32_compat_sys_preadv64+0x2e0/0x2e0 [ 1538.393102] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1538.394270] ? vfs_write+0x422/0xac0 09:42:48 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) (fail_nth: 1) [ 1538.395073] __x64_sys_sendfile64+0x1cd/0x210 [ 1538.396267] ? __ia32_compat_sys_sendfile64+0x210/0x210 09:42:48 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000040)='./file1\x00', 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x0, 0x0) [ 1538.397417] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1538.398642] do_syscall_64+0x3b/0x90 [ 1538.399453] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1538.400555] RIP: 0033:0x7f10081d2b19 [ 1538.401339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1538.405215] RSP: 002b:00007f1005727188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1538.406818] RAX: ffffffffffffffda RBX: 00007f10082e6020 RCX: 00007f10081d2b19 [ 1538.408328] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 1538.409821] RBP: 00007f10057271d0 R08: 0000000000000000 R09: 0000000000000000 [ 1538.411343] R10: 00000ffffffff000 R11: 0000000000000246 R12: 0000000000000001 [ 1538.412291] loop1: detected capacity change from 0 to 64 [ 1538.412972] R13: 00007fff5bac1b9f R14: 00007f1005727300 R15: 0000000000022000 [ 1538.415646] [ 1538.419048] EXT4-fs error (device loop6): __ext4_fill_super:5311: inode #2: comm syz-executor.6: iget: root inode unallocated [ 1538.426268] EXT4-fs (loop6): get root inode failed [ 1538.427386] EXT4-fs (loop6): mount failed [ 1538.435263] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 09:42:48 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d9f4655fd9f4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {&(0x7f0000010400)="0200000003000000040000006a000f000300040000000000000000000f00bc0f", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d9f4655fd9f465", 0xf, 0x2100}], 0x0, &(0x7f0000000180)={[{@journal_dev={'journal_dev', 0x3d, 0x7}}]}) [ 1538.552792] loop0: detected capacity change from 0 to 40 [ 1538.563127] FAULT_INJECTION: forcing a failure. [ 1538.563127] name failslab, interval 1, probability 0, space 0, times 0 [ 1538.565655] CPU: 1 PID: 9857 Comm: syz-executor.2 Not tainted 5.17.0-next-20220401 #1 [ 1538.567403] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1538.569869] Call Trace: [ 1538.570431] [ 1538.570922] dump_stack_lvl+0x8b/0xb3 [ 1538.571803] should_fail.cold+0x5/0xa 09:42:48 executing program 3: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001fc0)={0x160022100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) [ 1538.572646] ? alloc_pipe_info+0x105/0x580 [ 1538.573688] should_failslab+0x5/0x10 [ 1538.574517] kmem_cache_alloc_trace+0x55/0x3c0 [ 1538.575533] alloc_pipe_info+0x105/0x580 [ 1538.576437] splice_direct_to_actor+0x700/0x8e0 [ 1538.577446] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1538.578669] ? pipe_to_sendpage+0x380/0x380 [ 1538.579598] ? inode_security+0x105/0x130 [ 1538.580492] ? avc_policy_seqno+0x9/0x70 [ 1538.581367] ? selinux_file_permission+0x36/0x510 [ 1538.582405] ? do_splice_to+0x240/0x240 [ 1538.583285] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1538.584456] ? security_file_permission+0xb1/0xd0 [ 1538.585497] do_splice_direct+0x1b8/0x280 [ 1538.586384] ? splice_direct_to_actor+0x8e0/0x8e0 [ 1538.587430] ? lock_is_held_type+0xd7/0x130 [ 1538.588362] do_sendfile+0xad7/0x1230 [ 1538.589205] ? __ia32_compat_sys_preadv64+0x2e0/0x2e0 [ 1538.590323] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1538.591501] ? vfs_write+0x422/0xac0 [ 1538.592293] __x64_sys_sendfile64+0x1cd/0x210 [ 1538.593246] ? __ia32_compat_sys_sendfile64+0x210/0x210 [ 1538.594382] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1538.595506] do_syscall_64+0x3b/0x90 [ 1538.596292] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1538.597384] RIP: 0033:0x7fdc09c89b19 [ 1538.598168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1538.602088] RSP: 002b:00007fdc071ff188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1538.603703] RAX: ffffffffffffffda RBX: 00007fdc09d9cf60 RCX: 00007fdc09c89b19 [ 1538.605264] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 1538.606803] RBP: 00007fdc071ff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1538.608386] R10: 00000ffffffff000 R11: 0000000000000246 R12: 0000000000000001 [ 1538.609931] R13: 00007ffd3c98ba1f R14: 00007fdc071ff300 R15: 0000000000022000 [ 1538.611502] [ 1538.656339] loop6: detected capacity change from 0 to 512 [ 1538.670740] EXT4-fs error (device loop6): __ext4_fill_super:5311: inode #2: comm syz-executor.6: iget: root inode unallocated [ 1538.674231] EXT4-fs (loop6): get root inode failed [ 1538.675339] EXT4-fs (loop6): mount failed 09:42:49 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x5) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) (fail_nth: 6) 09:42:49 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000010000)="eb58906d6b66732e66617400021e20000400000004f8", 0x16}, {0x0, 0x0, 0x4000}], 0x100c000, &(0x7f0000000040)) (fail_nth: 52) [ 1538.721734] loop4: detected capacity change from 0 to 255 [ 1538.746700] FAULT_INJECTION: forcing a failure. [ 1538.746700] name failslab, interval 1, probability 0, space 0, times 0 [ 1538.749087] CPU: 0 PID: 9867 Comm: syz-executor.1 Not tainted 5.17.0-next-20220401 #1 [ 1538.750636] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1538.752797] Call Trace: [ 1538.753292] [ 1538.753719] dump_stack_lvl+0x8b/0xb3 [ 1538.754490] should_fail.cold+0x5/0xa [ 1538.755261] ? create_object.isra.0+0x3a/0xa20 [ 1538.756168] should_failslab+0x5/0x10 [ 1538.756905] kmem_cache_alloc+0x5b/0x480 [ 1538.757724] create_object.isra.0+0x3a/0xa20 [ 1538.758577] ? kasan_unpoison+0x23/0x50 [ 1538.759376] kmem_cache_alloc+0x239/0x480 [ 1538.760484] __kernfs_new_node+0xd4/0x8b0 [ 1538.761305] ? kernfs_add_one+0x3c6/0x550 [ 1538.762119] ? kernfs_path_from_node+0x60/0x60 [ 1538.763033] ? lock_is_held_type+0xd7/0x130 [ 1538.763889] ? up_write+0x148/0x460 [ 1538.764597] ? kernfs_activate+0x1c4/0x240 [ 1538.765443] kernfs_new_node+0x93/0x120 [ 1538.766233] __kernfs_create_file+0x51/0x350 [ 1538.767119] sysfs_add_file_mode_ns+0x218/0x430 [ 1538.768046] ? component_del+0x4c0/0x4c0 [ 1538.768839] internal_create_group+0x322/0xb20 [ 1538.769739] ? sysfs_remove_group+0x170/0x170 [ 1538.770613] ? loop_configure+0x1940/0x1940 [ 1538.771466] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 1538.772439] ? __loop_update_dio+0x2a3/0x620 [ 1538.773302] loop_configure+0xe81/0x1940 [ 1538.774128] lo_ioctl+0x782/0x1850 [ 1538.774815] ? __x64_sys_openat+0x13f/0x1f0 [ 1538.775687] ? loop_set_status_old+0x1b0/0x1b0 [ 1538.776576] ? avc_ss_reset+0x180/0x180 [ 1538.777384] ? __lock_acquire+0xbac/0x6120 [ 1538.778287] ? loop_set_status_old+0x1b0/0x1b0 [ 1538.779202] blkdev_ioctl+0x356/0x7f0 [ 1538.779944] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 1538.780877] ? selinux_file_ioctl+0xb1/0x260 [ 1538.781747] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1538.782810] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 1538.783765] __x64_sys_ioctl+0x196/0x210 [ 1538.784566] do_syscall_64+0x3b/0x90 [ 1538.785289] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1538.786294] RIP: 0033:0x7f72f8f588d7 [ 1538.787023] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1538.790588] RSP: 002b:00007f72f64cdf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1538.792075] RAX: ffffffffffffffda RBX: 00007f72f8fa2970 RCX: 00007f72f8f588d7 [ 1538.793453] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1538.794836] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1538.796228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1538.797604] R13: 0000000000000004 R14: 00000000200004f0 R15: 0000000000000002 [ 1538.799012] [ 1538.817080] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1538.838297] loop1: detected capacity change from 0 to 64 [ 1538.842887] FAULT_INJECTION: forcing a failure. [ 1538.842887] name failslab, interval 1, probability 0, space 0, times 0 [ 1538.845416] CPU: 0 PID: 9865 Comm: syz-executor.4 Not tainted 5.17.0-next-20220401 #1 [ 1538.846981] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1538.849622] Call Trace: [ 1538.850141] [ 1538.850666] dump_stack_lvl+0x8b/0xb3 [ 1538.851462] should_fail.cold+0x5/0xa [ 1538.852374] ? create_object.isra.0+0x3a/0xa20 [ 1538.853287] should_failslab+0x5/0x10 [ 1538.854073] kmem_cache_alloc+0x5b/0x480 [ 1538.854893] create_object.isra.0+0x3a/0xa20 [ 1538.855764] ? kasan_unpoison+0x23/0x50 [ 1538.856548] kmem_cache_alloc+0x239/0x480 [ 1538.857377] jbd2__journal_start+0x18c/0x8d0 [ 1538.858407] __ext4_journal_start_sb+0x392/0x470 [ 1538.859469] ? ext4_setattr+0x2070/0x2070 [ 1538.860297] ext4_dirty_inode+0x9d/0x110 [ 1538.861108] __mark_inode_dirty+0x425/0xeb0 [ 1538.861956] ? __mnt_want_write+0x1fa/0x2e0 [ 1538.862806] touch_atime+0x640/0x700 [ 1538.863559] ? atime_needs_update+0x870/0x870 [ 1538.864450] ? filemap_read+0x8f8/0xba0 [ 1538.865241] filemap_read+0x9de/0xba0 [ 1538.866013] ? filemap_get_pages+0x1680/0x1680 [ 1538.866925] ? kasan_save_stack+0x2e/0x40 [ 1538.867763] ? kasan_save_stack+0x1e/0x40 [ 1538.868583] ? __kasan_kmalloc+0x81/0xa0 [ 1538.869380] ? kvmalloc_node+0x3e/0x130 [ 1538.870158] ? alloc_pipe_info+0x1e5/0x580 [ 1538.871005] ? splice_direct_to_actor+0x700/0x8e0 [ 1538.871962] ? do_splice_direct+0x1b8/0x280 [ 1538.872813] ? do_sendfile+0xad7/0x1230 [ 1538.873601] ? __x64_sys_sendfile64+0x1cd/0x210 [ 1538.874522] ? do_syscall_64+0x3b/0x90 [ 1538.875295] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1538.876355] generic_file_read_iter+0x3c9/0x530 [ 1538.877276] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1538.878370] ? __fsnotify_parent+0x498/0xa60 [ 1538.879268] ext4_file_read_iter+0x184/0x3f0 [ 1538.880149] generic_file_splice_read+0x3b9/0x5d0 [ 1538.881124] ? pipe_to_user+0x170/0x170 [ 1538.881945] ? security_file_permission+0xb1/0xd0 [ 1538.882908] ? pipe_to_user+0x170/0x170 [ 1538.883721] do_splice_to+0x1bc/0x240 [ 1538.884484] splice_direct_to_actor+0x2c7/0x8e0 [ 1538.885407] ? pipe_to_sendpage+0x380/0x380 [ 1538.886264] ? do_splice_to+0x240/0x240 [ 1538.887063] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1538.888148] ? security_file_permission+0xb1/0xd0 [ 1538.889098] do_splice_direct+0x1b8/0x280 [ 1538.889918] ? splice_direct_to_actor+0x8e0/0x8e0 [ 1538.890878] ? lock_is_held_type+0xd7/0x130 [ 1538.891754] do_sendfile+0xad7/0x1230 [ 1538.892525] ? __ia32_compat_sys_preadv64+0x2e0/0x2e0 [ 1538.893561] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1538.894639] ? vfs_write+0x422/0xac0 [ 1538.895381] __x64_sys_sendfile64+0x1cd/0x210 [ 1538.896271] ? __ia32_compat_sys_sendfile64+0x210/0x210 [ 1538.897342] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1538.898370] do_syscall_64+0x3b/0x90 [ 1538.899121] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1538.900135] RIP: 0033:0x7f10081d2b19 [ 1538.900857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1538.904456] RSP: 002b:00007f1005748188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1538.905923] RAX: ffffffffffffffda RBX: 00007f10082e5f60 RCX: 00007f10081d2b19 [ 1538.907311] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 1538.908687] RBP: 00007f10057481d0 R08: 0000000000000000 R09: 0000000000000000 [ 1538.910069] R10: 00000ffffffff000 R11: 0000000000000246 R12: 0000000000000001 [ 1538.911462] R13: 00007fff5bac1b9f R14: 00007f1005748300 R15: 0000000000022000 [ 1538.912867] [ 1553.140812] loop6: detected capacity change from 0 to 512 09:43:03 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000040)='./file1\x00', 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x0, 0x0) 09:43:03 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x5) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) (fail_nth: 7) 09:43:03 executing program 7: syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=@ctrl_frame=@bar={{}, {}, @device_b, @device_a, @multi={{0x1, 0x1, 0x1, 0x0, 0x4}, [{0x0, 0x3, {0x5, 0xe9}, "9eb08feb44d860f0"}, {0x0, 0x2, {0x3, 0xd2}, "4708590ceca6c4e2"}, {0x0, 0x6, {0x4, 0x3}, "0531687e447cb155"}, {0x0, 0x0, {0x0, 0x1}, "0fe91858af2a0ec6"}]}}, 0x42) 09:43:03 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000040)='./file1\x00', 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x0, 0x0) 09:43:03 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d9f4655fd9f4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {&(0x7f0000010400)="0200000003000000040000006a000f000300040000000000000000000f00bc0f", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d9f4655fd9f465", 0xf, 0x2100}], 0x0, &(0x7f0000000180)={[{@journal_dev={'journal_dev', 0x3d, 0x7}}]}) 09:43:03 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) (fail_nth: 2) 09:43:03 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000010000)="eb58906d6b66732e66617400021e20000400000004f8", 0x16}, {0x0, 0x0, 0x4000}], 0x100c000, &(0x7f0000000040)) (fail_nth: 53) 09:43:03 executing program 3: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001fc0)={0x160022100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) [ 1553.154076] loop5: detected capacity change from 0 to 40 [ 1553.173120] EXT4-fs error (device loop6): __ext4_fill_super:5311: inode #2: comm syz-executor.6: iget: root inode unallocated [ 1553.176958] EXT4-fs (loop6): get root inode failed [ 1553.177571] EXT4-fs (loop6): mount failed [ 1553.178805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1553.194750] loop4: detected capacity change from 0 to 255 [ 1553.198255] loop2: detected capacity change from 0 to 255 [ 1553.200621] FAULT_INJECTION: forcing a failure. [ 1553.200621] name failslab, interval 1, probability 0, space 0, times 0 [ 1553.203217] CPU: 0 PID: 9898 Comm: syz-executor.1 Not tainted 5.17.0-next-20220401 #1 [ 1553.204971] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1553.207458] Call Trace: [ 1553.208012] [ 1553.208520] dump_stack_lvl+0x8b/0xb3 [ 1553.209377] should_fail.cold+0x5/0xa [ 1553.210233] ? __kernfs_new_node+0xd4/0x8b0 [ 1553.211172] should_failslab+0x5/0x10 [ 1553.212017] kmem_cache_alloc+0x5b/0x480 [ 1553.212908] __kernfs_new_node+0xd4/0x8b0 [ 1553.213807] ? kernfs_add_one+0x3c6/0x550 [ 1553.214713] ? kernfs_path_from_node+0x60/0x60 [ 1553.215734] ? lock_is_held_type+0xd7/0x130 [ 1553.216697] ? up_write+0x148/0x460 [ 1553.217480] ? kernfs_activate+0x1c4/0x240 [ 1553.218396] kernfs_new_node+0x93/0x120 [ 1553.219274] __kernfs_create_file+0x51/0x350 [ 1553.220235] sysfs_add_file_mode_ns+0x218/0x430 [ 1553.221286] ? component_del+0x4c0/0x4c0 [ 1553.222337] internal_create_group+0x322/0xb20 [ 1553.223355] ? sysfs_remove_group+0x170/0x170 [ 1553.224430] ? loop_configure+0x1940/0x1940 [ 1553.225571] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 1553.226857] ? __loop_update_dio+0x2a3/0x620 [ 1553.228052] loop_configure+0xe81/0x1940 [ 1553.229164] lo_ioctl+0x782/0x1850 [ 1553.230110] ? __x64_sys_openat+0x13f/0x1f0 [ 1553.231275] ? loop_set_status_old+0x1b0/0x1b0 [ 1553.232464] ? avc_ss_reset+0x180/0x180 [ 1553.233553] ? __lock_acquire+0xbac/0x6120 [ 1553.234799] ? loop_set_status_old+0x1b0/0x1b0 09:43:03 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d9f4655fd9f4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {&(0x7f0000010400)="0200000003000000040000006a000f000300040000000000000000000f00bc0f", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d9f4655fd9f465", 0xf, 0x2100}], 0x0, &(0x7f0000000180)={[{@journal_dev={'journal_dev', 0x3d, 0x7}}]}) [ 1553.236031] blkdev_ioctl+0x356/0x7f0 [ 1553.237227] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 1553.238472] ? selinux_file_ioctl+0xb1/0x260 [ 1553.239654] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1553.241085] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 1553.242301] __x64_sys_ioctl+0x196/0x210 [ 1553.243379] do_syscall_64+0x3b/0x90 [ 1553.244347] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1553.245681] RIP: 0033:0x7f72f8f588d7 [ 1553.246629] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1553.251246] RSP: 002b:00007f72f64cdf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1553.252164] loop6: detected capacity change from 0 to 512 [ 1553.252744] RAX: ffffffffffffffda RBX: 00007f72f8fa2970 RCX: 00007f72f8f588d7 [ 1553.252764] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1553.256144] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1553.257630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1553.259246] R13: 0000000000000004 R14: 00000000200004f0 R15: 0000000000000002 [ 1553.260878] 09:43:03 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="b77ac4a6f3e9b9ed2a2ed029f73abe93c2776e100bf8787d8f502ab5adef08a4637b1e0b895d1278ce38b3d1906e18393cc793", 0x33}], 0x1, 0xfff, 0x85) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x210000, 0x0) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) [ 1553.265795] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1553.269251] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1553.271735] loop0: detected capacity change from 0 to 40 [ 1553.300599] FAULT_INJECTION: forcing a failure. [ 1553.300599] name failslab, interval 1, probability 0, space 0, times 0 [ 1553.301875] CPU: 1 PID: 9896 Comm: syz-executor.2 Not tainted 5.17.0-next-20220401 #1 [ 1553.302706] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1553.303880] Call Trace: [ 1553.304178] [ 1553.304414] dump_stack_lvl+0x8b/0xb3 [ 1553.304836] should_fail.cold+0x5/0xa [ 1553.305241] ? create_object.isra.0+0x3a/0xa20 [ 1553.305718] should_failslab+0x5/0x10 [ 1553.306123] kmem_cache_alloc+0x5b/0x480 [ 1553.306559] create_object.isra.0+0x3a/0xa20 [ 1553.307017] ? kasan_unpoison+0x23/0x50 [ 1553.307441] kmem_cache_alloc_trace+0x22e/0x3c0 [ 1553.307936] alloc_pipe_info+0x105/0x580 [ 1553.308372] splice_direct_to_actor+0x700/0x8e0 [ 1553.308862] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1553.309446] ? pipe_to_sendpage+0x380/0x380 [ 1553.309897] ? inode_security+0x105/0x130 [ 1553.310342] ? avc_policy_seqno+0x9/0x70 [ 1553.310770] ? selinux_file_permission+0x36/0x510 [ 1553.311293] ? do_splice_to+0x240/0x240 [ 1553.311712] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1553.312291] ? security_file_permission+0xb1/0xd0 [ 1553.312806] do_splice_direct+0x1b8/0x280 [ 1553.313263] ? splice_direct_to_actor+0x8e0/0x8e0 [ 1553.313796] ? lock_is_held_type+0xd7/0x130 [ 1553.314270] do_sendfile+0xad7/0x1230 [ 1553.314680] ? __ia32_compat_sys_preadv64+0x2e0/0x2e0 [ 1553.315249] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1553.315824] ? vfs_write+0x422/0xac0 [ 1553.316224] __x64_sys_sendfile64+0x1cd/0x210 [ 1553.316697] ? __ia32_compat_sys_sendfile64+0x210/0x210 [ 1553.317274] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1553.317835] do_syscall_64+0x3b/0x90 [ 1553.318233] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1553.318786] RIP: 0033:0x7fdc09c89b19 [ 1553.319194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1553.321172] RSP: 002b:00007fdc071ff188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1553.321984] RAX: ffffffffffffffda RBX: 00007fdc09d9cf60 RCX: 00007fdc09c89b19 [ 1553.322760] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 1553.323528] RBP: 00007fdc071ff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1553.324286] R10: 00000ffffffff000 R11: 0000000000000246 R12: 0000000000000001 [ 1553.325040] R13: 00007ffd3c98ba1f R14: 00007fdc071ff300 R15: 0000000000022000 [ 1553.325808] [ 1553.327280] EXT4-fs error (device loop6): __ext4_fill_super:5311: inode #2: comm syz-executor.6: iget: root inode unallocated [ 1553.329191] FAULT_INJECTION: forcing a failure. [ 1553.329191] name failslab, interval 1, probability 0, space 0, times 0 [ 1553.330592] CPU: 1 PID: 9897 Comm: syz-executor.4 Not tainted 5.17.0-next-20220401 #1 [ 1553.331485] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1553.332758] Call Trace: [ 1553.333041] [ 1553.333290] dump_stack_lvl+0x8b/0xb3 [ 1553.333722] should_fail.cold+0x5/0xa [ 1553.334149] ? mempool_alloc+0x148/0x360 [ 1553.334610] ? mempool_free+0x3b0/0x3b0 [ 1553.335058] should_failslab+0x5/0x10 [ 1553.335495] kmem_cache_alloc+0x5b/0x480 [ 1553.335952] ? mempool_free+0x3b0/0x3b0 [ 1553.336398] mempool_alloc+0x148/0x360 [ 1553.336841] ? mempool_resize+0x7d0/0x7d0 [ 1553.337290] ? lock_chain_count+0x20/0x20 [ 1553.337743] ? lock_chain_count+0x20/0x20 [ 1553.338190] ? __lock_acquire+0xbac/0x6120 [ 1553.338642] bio_alloc_bioset+0x396/0x780 [ 1553.339079] loop1: detected capacity change from 0 to 64 [ 1553.339103] ? bvec_alloc+0x200/0x200 [ 1553.340701] ? __kmalloc_node+0xb0/0x470 [ 1553.341153] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1553.341770] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1553.342320] ? zero_user_segments.constprop.0+0x2b0/0x540 [ 1553.342923] __mpage_writepage+0xe13/0x1750 [ 1553.343398] ? mark_lock.part.0+0xef/0x2f60 [ 1553.343874] ? mpage_readpage+0x140/0x140 [ 1553.344339] ? lock_is_held_type+0xd7/0x130 [ 1553.344822] ? find_held_lock+0x2c/0x110 [ 1553.345258] ? lock_release+0x3b2/0x6f0 [ 1553.345705] ? folio_clear_dirty_for_io+0x26e/0x760 [ 1553.346239] ? lock_downgrade+0x6d0/0x6d0 [ 1553.346701] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1553.347288] ? percpu_counter_add_batch+0xb4/0x170 [ 1553.347844] ? lock_is_held_type+0xd7/0x130 [ 1553.348309] write_cache_pages+0x491/0x1180 [ 1553.348803] ? find_held_lock+0x2c/0x110 [ 1553.349235] ? mpage_readpage+0x140/0x140 [ 1553.349710] ? percpu_ref_put_many.constprop.0+0x270/0x270 [ 1553.350309] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1553.350906] ? fat_add_cluster+0xf0/0xf0 [ 1553.351348] ? fat_readahead+0x20/0x20 [ 1553.351784] mpage_writepages+0xd8/0x1a0 [ 1553.352213] ? mpage_end_io+0x2c0/0x2c0 [ 1553.352902] ? fat_add_cluster+0xf0/0xf0 [ 1553.353350] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1553.353936] do_writepages+0x1b0/0x690 [ 1553.354358] ? writeback_set_ratelimit+0x150/0x150 [ 1553.354905] ? lock_release+0x3b2/0x6f0 [ 1553.355331] ? wbc_attach_and_unlock_inode+0x8a/0x8d0 [ 1553.355881] ? lock_downgrade+0x6d0/0x6d0 [ 1553.356350] ? lock_release+0x6f0/0x6f0 [ 1553.356774] ? do_raw_spin_lock+0x121/0x260 [ 1553.357268] ? do_raw_spin_unlock+0x4f/0x210 [ 1553.357738] ? _raw_spin_unlock+0x24/0x40 [ 1553.358204] ? wbc_attach_and_unlock_inode+0x8a/0x8d0 [ 1553.358758] filemap_fdatawrite_wbc+0x143/0x1b0 [ 1553.359305] file_write_and_wait_range+0x163/0x1e0 [ 1553.359864] ? file_fdatawait_range+0x60/0x60 [ 1553.360347] ? do_raw_spin_lock+0x121/0x260 [ 1553.360848] ? rwlock_bug.part.0+0x90/0x90 [ 1553.361332] __generic_file_fsync+0x74/0x1f0 [ 1553.361837] fat_file_fsync+0x73/0x200 [ 1553.362284] ? fat_trim_fs+0xfc0/0xfc0 [ 1553.362703] vfs_fsync_range+0x13d/0x230 [ 1553.363164] generic_file_write_iter+0x195/0x220 [ 1553.363675] do_iter_readv_writev+0x3d8/0x650 [ 1553.364181] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1553.364756] ? new_sync_write+0x560/0x560 [ 1553.365229] ? avc_policy_seqno+0x9/0x70 [ 1553.365667] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 1553.366250] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1553.366842] ? security_file_permission+0xb1/0xd0 [ 1553.367404] do_iter_write+0x187/0x6f0 [ 1553.367820] ? lock_is_held_type+0xd7/0x130 [ 1553.368316] vfs_iter_write+0x70/0xa0 [ 1553.368724] iter_file_splice_write+0x722/0xc90 [ 1553.369278] ? generic_file_splice_read+0x3ea/0x5d0 [ 1553.369821] ? page_cache_pipe_buf_confirm+0x5b0/0x5b0 [ 1553.370419] ? pipe_to_user+0x170/0x170 [ 1553.370834] ? inode_security+0x105/0x130 [ 1553.371328] ? security_file_permission+0xb1/0xd0 [ 1553.371867] ? page_cache_pipe_buf_confirm+0x5b0/0x5b0 [ 1553.372421] direct_splice_actor+0x10f/0x170 [ 1553.372919] splice_direct_to_actor+0x350/0x8e0 [ 1553.373650] ? pipe_to_sendpage+0x380/0x380 [ 1553.374116] ? do_splice_to+0x240/0x240 [ 1553.374561] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1553.375136] ? security_file_permission+0xb1/0xd0 [ 1553.375693] do_splice_direct+0x1b8/0x280 [ 1553.376132] ? splice_direct_to_actor+0x8e0/0x8e0 [ 1553.376702] ? lock_is_held_type+0xd7/0x130 [ 1553.377159] do_sendfile+0xad7/0x1230 [ 1553.377609] ? __ia32_compat_sys_preadv64+0x2e0/0x2e0 [ 1553.378206] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1553.378782] ? vfs_write+0x422/0xac0 [ 1553.379214] __x64_sys_sendfile64+0x1cd/0x210 [ 1553.379726] ? __ia32_compat_sys_sendfile64+0x210/0x210 [ 1553.380295] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1553.380875] do_syscall_64+0x3b/0x90 [ 1553.381265] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1553.381850] RIP: 0033:0x7f10081d2b19 [ 1553.382253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1553.384313] RSP: 002b:00007f1005748188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1553.385097] RAX: ffffffffffffffda RBX: 00007f10082e5f60 RCX: 00007f10081d2b19 [ 1553.385842] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 1553.386641] RBP: 00007f10057481d0 R08: 0000000000000000 R09: 0000000000000000 [ 1553.387398] R10: 00000ffffffff000 R11: 0000000000000246 R12: 0000000000000001 [ 1553.388196] R13: 00007fff5bac1b9f R14: 00007f1005748300 R15: 0000000000022000 [ 1553.389005] [ 1553.395639] EXT4-fs (loop6): get root inode failed [ 1553.396232] EXT4-fs (loop6): mount failed 09:43:03 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d9f4655fd9f4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {&(0x7f0000010400)="0200000003000000040000006a000f000300040000000000000000000f00bc0f", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d9f4655fd9f4655fd9f4655f0000", 0x16, 0x2100}], 0x0, &(0x7f0000000180)={[{@journal_dev={'journal_dev', 0x3d, 0x7}}]}) 09:43:03 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000010000)="eb58906d6b66732e66617400021e20000400000004f8", 0x16}, {0x0, 0x0, 0x4000}], 0x100c000, &(0x7f0000000040)) (fail_nth: 54) 09:43:03 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000280)='./file0\x00', 0xe1d, 0x2, &(0x7f0000000340)=[{&(0x7f00000002c0)="446b9daabbf5a88f0931ec09593c812f89195cc9c60488546dc069443cf5a11473b0b2741e57cf3ebbaebdde9c28f2cbe1880abdd7a41716d592de143b07b8915c4331c885be7cbe716818ebad39e5e88c87e503f1337813340ef69fb506ad1e808f6109f4170d0fda44ce7f2ab496f0d13f9a0e3435d0", 0x77, 0x3}, {&(0x7f0000000500)="efd06dcad6472dd66a80114e567c31a8cf5d2e9f19da9945c0598744b53bffb776204384fdba440ed2785c4c1764900d8a7da6ea37f5a7f681c764fb1711ec55033cdc52629626cdc33f764caa5260f82be3841a655faa7d84eded04688acd2e62a85c9a0668e70e4c736d9c3e3396bd2fcd1623f206fd9fc0e756956a2c0da95ab9744013d70cfec07d99ed5cfbf1b6ea6321762712db7951d0f0980c13f1ec26d3a8b3fd5b0de6b43230042528d2a262a909a12bb41935c06ade4a8d78ed3f471a2e1a5addb3f5b5015394", 0xcc, 0x6}], 0x40008, &(0x7f0000000600)={[{@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@utf8no}, {@shortname_mixed}], [{@subj_role={'subj_role', 0x3d, '/dev/ptmx\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/ptmx\x00'}}]}) poll(&(0x7f00000003c0)=[{0xffffffffffffffff, 0x10}, {r0, 0x1708}], 0x2, 0x2ca) r1 = syz_io_uring_setup(0x6b29, &(0x7f0000000080)={0x0, 0x80, 0x2, 0x2, 0x292, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000140)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r3, &(0x7f0000000000), 0xfffffdef) syz_io_uring_setup(0x6be3, &(0x7f0000000200)={0x0, 0x2, 0x1, 0xfffffffd, 0x20000, 0x0, r1}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0, &(0x7f0000000380)=0x0) r5 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x90000) r7 = io_uring_setup(0x2d62, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0x15, 0x0, r8) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000b00)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x2007, @fd_index=0x1, 0x4, &(0x7f0000000a80)=[{&(0x7f0000000680)=""/189, 0xbd}, {&(0x7f0000000740)=""/100, 0x64}, {&(0x7f00000007c0)=""/136, 0x88}, {&(0x7f0000000880)=""/64, 0x40}, {&(0x7f00000008c0)=""/88, 0x58}, {&(0x7f0000000940)=""/120, 0x78}, {&(0x7f00000009c0)=""/59, 0x3b}, {&(0x7f0000000a00)=""/87, 0x57}], 0x8, 0x2}, 0x7f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0x2, 0x6, 0x0, {0x0, r8, r9}}, 0x1) syz_io_uring_submit(r2, 0x0, &(0x7f0000000040)=@IORING_OP_SEND={0x1a, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000b40)="605e547ed4b0c9140025089bbf2df23def251defa991b68381b19ef5d7e2d76f8c8c20fd6893aaa5fd932abe28935e3ebca01885bb34f1e1ba02cf", 0x3b, 0x8010, 0x1, {0x0, r8}}, 0x11) io_uring_enter(r1, 0x7fd6, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) ppoll(&(0x7f0000000400)=[{r1, 0x4082}], 0x1, &(0x7f0000000480)={0x0, r10+10000000}, &(0x7f00000004c0), 0x8) [ 1553.493498] loop6: detected capacity change from 0 to 512 [ 1553.505305] EXT4-fs error (device loop6): __ext4_fill_super:5311: inode #2: comm syz-executor.6: iget: root inode unallocated 09:43:03 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) (fail_nth: 3) 09:43:03 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000040)='./file1\x00', 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) (fail_nth: 1) [ 1553.511107] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1553.513400] EXT4-fs (loop6): get root inode failed [ 1553.513970] EXT4-fs (loop6): mount failed [ 1553.546729] loop3: detected capacity change from 0 to 7 09:43:03 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d9f4655fd9f4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {&(0x7f0000010400)="0200000003000000040000006a000f000300040000000000000000000f00bc0f", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d9f4655fd9f4655fd9f4655f0000", 0x16, 0x2100}], 0x0, &(0x7f0000000180)={[{@journal_dev={'journal_dev', 0x3d, 0x7}}]}) [ 1553.561642] loop2: detected capacity change from 0 to 255 [ 1553.569960] FAULT_INJECTION: forcing a failure. [ 1553.569960] name failslab, interval 1, probability 0, space 0, times 0 [ 1553.571262] CPU: 1 PID: 9919 Comm: syz-executor.1 Not tainted 5.17.0-next-20220401 #1 [ 1553.572102] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1553.573295] Call Trace: [ 1553.573570] [ 1553.573801] dump_stack_lvl+0x8b/0xb3 [ 1553.574224] should_fail.cold+0x5/0xa [ 1553.574634] ? create_object.isra.0+0x3a/0xa20 [ 1553.575120] should_failslab+0x5/0x10 [ 1553.575542] kmem_cache_alloc+0x5b/0x480 [ 1553.576020] create_object.isra.0+0x3a/0xa20 [ 1553.576499] ? kasan_unpoison+0x23/0x50 [ 1553.576923] kmem_cache_alloc+0x239/0x480 [ 1553.577372] __kernfs_new_node+0xd4/0x8b0 [ 1553.577822] ? kernfs_add_one+0x3c6/0x550 [ 1553.578262] ? kernfs_path_from_node+0x60/0x60 [ 1553.578757] ? lock_is_held_type+0xd7/0x130 [ 1553.579232] ? up_write+0x148/0x460 [ 1553.579619] ? kernfs_activate+0x1c4/0x240 [ 1553.580095] kernfs_new_node+0x93/0x120 [ 1553.580535] __kernfs_create_file+0x51/0x350 [ 1553.581008] sysfs_add_file_mode_ns+0x218/0x430 [ 1553.581505] ? component_del+0x4c0/0x4c0 [ 1553.581943] internal_create_group+0x322/0xb20 [ 1553.582442] ? sysfs_remove_group+0x170/0x170 [ 1553.582920] ? loop_configure+0x1940/0x1940 [ 1553.583402] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 1553.583941] ? __loop_update_dio+0x2a3/0x620 [ 1553.584417] loop_configure+0xe81/0x1940 [ 1553.584866] lo_ioctl+0x782/0x1850 [ 1553.585254] ? __x64_sys_openat+0x13f/0x1f0 [ 1553.585718] ? loop_set_status_old+0x1b0/0x1b0 [ 1553.586205] ? avc_ss_reset+0x180/0x180 [ 1553.586643] ? __lock_acquire+0xbac/0x6120 [ 1553.587198] ? loop_set_status_old+0x1b0/0x1b0 [ 1553.587687] blkdev_ioctl+0x356/0x7f0 [ 1553.588130] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 1553.588701] ? selinux_file_ioctl+0xb1/0x260 [ 1553.589248] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1553.589917] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 1553.590461] __x64_sys_ioctl+0x196/0x210 [ 1553.590930] do_syscall_64+0x3b/0x90 [ 1553.591360] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1553.591955] RIP: 0033:0x7f72f8f588d7 [ 1553.592377] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1553.594619] RSP: 002b:00007f72f64cdf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1553.595469] RAX: ffffffffffffffda RBX: 00007f72f8fa2970 RCX: 00007f72f8f588d7 [ 1553.596243] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1553.597007] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1553.597757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1553.598511] R13: 0000000000000004 R14: 00000000200004f0 R15: 0000000000000002 [ 1553.599290] [ 1553.603927] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1553.625438] FAULT_INJECTION: forcing a failure. [ 1553.625438] name failslab, interval 1, probability 0, space 0, times 0 [ 1553.626722] CPU: 1 PID: 9917 Comm: syz-executor.2 Not tainted 5.17.0-next-20220401 #1 [ 1553.627588] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1553.628787] Call Trace: [ 1553.629057] [ 1553.629306] dump_stack_lvl+0x8b/0xb3 [ 1553.629731] should_fail.cold+0x5/0xa [ 1553.630145] ? kvmalloc_node+0x3e/0x130 [ 1553.630567] should_failslab+0x5/0x10 [ 1553.630972] __kmalloc_node+0x76/0x470 [ 1553.631403] kvmalloc_node+0x3e/0x130 [ 1553.631814] alloc_pipe_info+0x1e5/0x580 [ 1553.632283] splice_direct_to_actor+0x700/0x8e0 [ 1553.632803] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1553.633400] ? pipe_to_sendpage+0x380/0x380 [ 1553.633851] ? inode_security+0x105/0x130 [ 1553.634275] loop0: detected capacity change from 0 to 40 [ 1553.634856] ? avc_policy_seqno+0x9/0x70 [ 1553.635301] ? selinux_file_permission+0x36/0x510 [ 1553.635806] ? do_splice_to+0x240/0x240 [ 1553.636232] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1553.636825] ? security_file_permission+0xb1/0xd0 [ 1553.637362] do_splice_direct+0x1b8/0x280 [ 1553.637822] ? splice_direct_to_actor+0x8e0/0x8e0 [ 1553.638361] ? lock_is_held_type+0xd7/0x130 [ 1553.638850] do_sendfile+0xad7/0x1230 [ 1553.639301] ? __ia32_compat_sys_preadv64+0x2e0/0x2e0 [ 1553.639888] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1553.640491] ? vfs_write+0x422/0xac0 [ 1553.640906] __x64_sys_sendfile64+0x1cd/0x210 [ 1553.641403] ? __ia32_compat_sys_sendfile64+0x210/0x210 [ 1553.642000] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1553.642570] do_syscall_64+0x3b/0x90 [ 1553.642977] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1553.643550] RIP: 0033:0x7fdc09c89b19 [ 1553.643953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1553.645986] RSP: 002b:00007fdc071ff188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1553.646844] RAX: ffffffffffffffda RBX: 00007fdc09d9cf60 RCX: 00007fdc09c89b19 [ 1553.647658] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 1553.648466] RBP: 00007fdc071ff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1553.649274] R10: 00000ffffffff000 R11: 0000000000000246 R12: 0000000000000001 [ 1553.650080] R13: 00007ffd3c98ba1f R14: 00007fdc071ff300 R15: 0000000000022000 [ 1553.650901] [ 1553.672724] FAULT_INJECTION: forcing a failure. [ 1553.672724] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1553.675286] CPU: 0 PID: 9925 Comm: syz-executor.0 Not tainted 5.17.0-next-20220401 #1 [ 1553.676943] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1553.679326] Call Trace: [ 1553.679867] [ 1553.680338] dump_stack_lvl+0x8b/0xb3 [ 1553.681163] should_fail.cold+0x5/0xa [ 1553.681983] _copy_from_user+0x2a/0x170 [ 1553.682837] iovec_from_user+0x236/0x3c0 [ 1553.683726] __import_iovec+0x64/0x5c0 [ 1553.684547] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1553.685677] import_iovec+0x83/0xb0 [ 1553.686450] vfs_writev+0xc1/0x630 [ 1553.687223] ? vfs_iter_write+0xa0/0xa0 [ 1553.688076] ? lock_release+0x3b2/0x6f0 [ 1553.688919] ? __fget_files+0x265/0x470 [ 1553.689758] ? lock_downgrade+0x6d0/0x6d0 [ 1553.690645] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 1553.691727] ? __fget_files+0x287/0x470 [ 1553.692594] __x64_sys_pwritev+0x22b/0x310 [ 1553.693501] ? __x64_sys_pwritev2+0x150/0x150 [ 1553.694464] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1553.695574] do_syscall_64+0x3b/0x90 [ 1553.696362] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1553.697455] RIP: 0033:0x7f1a42136b19 [ 1553.698236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1553.702100] RSP: 002b:00007f1a3f6ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 1553.703686] RAX: ffffffffffffffda RBX: 00007f1a42249f60 RCX: 00007f1a42136b19 [ 1553.705176] RDX: 0000000000000001 RSI: 0000000020000640 RDI: 0000000000000004 [ 1553.706655] RBP: 00007f1a3f6ac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1553.708152] R10: 0000000008000000 R11: 0000000000000246 R12: 0000000000000001 [ 1553.709639] R13: 00007ffd501cf4ef R14: 00007f1a3f6ac300 R15: 0000000000022000 [ 1553.711155] [ 1553.716188] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1553.723952] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1553.734899] loop1: detected capacity change from 0 to 64 [ 1554.276429] loop3: detected capacity change from 0 to 7 09:43:20 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x68, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:pam_console_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x68}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x42f, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x1c}}, 0x0) 09:43:20 executing program 5: ioctl$CDROMPLAYTRKIND(0xffffffffffffffff, 0x5304, &(0x7f0000000040)={0xff, 0x7, 0x3f, 0x7}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x1) 09:43:20 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000010000)="eb58906d6b66732e66617400021e20000400000004f8", 0x16}, {0x0, 0x0, 0x4000}], 0x100c000, &(0x7f0000000040)) (fail_nth: 55) 09:43:20 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d9f4655fd9f4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {&(0x7f0000010400)="0200000003000000040000006a000f000300040000000000000000000f00bc0f", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d9f4655fd9f4655fd9f4655f0000", 0x16, 0x2100}], 0x0, &(0x7f0000000180)={[{@journal_dev={'journal_dev', 0x3d, 0x7}}]}) 09:43:20 executing program 7: syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=@ctrl_frame=@bar={{}, {}, @device_b, @device_a, @multi={{0x0, 0x1, 0x1, 0x0, 0x4}, [{0x0, 0x3, {0x5, 0xe9}, "9eb08feb44d860f0"}, {0x0, 0x2, {0x3, 0xd2}, "4708590ceca6c4e2"}, {0x0, 0x6, {0x4, 0x3}, "0531687e447cb155"}, {0x0, 0x0, {0x0, 0x1}, "0fe91858af2a0ec6"}]}}, 0x42) 09:43:20 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x5) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) (fail_nth: 8) 09:43:20 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) (fail_nth: 4) 09:43:20 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000040)='./file1\x00', 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) (fail_nth: 2) [ 1569.704732] FAULT_INJECTION: forcing a failure. [ 1569.704732] name failslab, interval 1, probability 0, space 0, times 0 [ 1569.707213] CPU: 1 PID: 9942 Comm: syz-executor.1 Not tainted 5.17.0-next-20220401 #1 [ 1569.708663] loop6: detected capacity change from 0 to 512 [ 1569.708897] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1569.711878] Call Trace: [ 1569.712417] [ 1569.712881] dump_stack_lvl+0x8b/0xb3 [ 1569.713705] should_fail.cold+0x5/0xa [ 1569.714529] ? __kernfs_new_node+0xd4/0x8b0 [ 1569.715459] should_failslab+0x5/0x10 [ 1569.715674] loop2: detected capacity change from 0 to 255 [ 1569.716264] kmem_cache_alloc+0x5b/0x480 [ 1569.717711] __kernfs_new_node+0xd4/0x8b0 [ 1569.718595] ? kernfs_add_one+0x3c6/0x550 [ 1569.719218] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1569.719486] ? kernfs_path_from_node+0x60/0x60 [ 1569.721369] ? lock_is_held_type+0xd7/0x130 [ 1569.722297] ? up_write+0x148/0x460 [ 1569.723067] ? kernfs_activate+0x1c4/0x240 [ 1569.723996] kernfs_new_node+0x93/0x120 [ 1569.724850] __kernfs_create_file+0x51/0x350 [ 1569.725797] sysfs_add_file_mode_ns+0x218/0x430 [ 1569.726789] ? component_del+0x4c0/0x4c0 [ 1569.727663] internal_create_group+0x322/0xb20 [ 1569.728653] ? sysfs_remove_group+0x170/0x170 [ 1569.729601] ? loop_configure+0x1940/0x1940 [ 1569.730513] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 1569.731585] ? __loop_update_dio+0x2a3/0x620 [ 1569.732521] loop_configure+0xe81/0x1940 [ 1569.733401] lo_ioctl+0x782/0x1850 [ 1569.734154] ? __x64_sys_openat+0x13f/0x1f0 [ 1569.735077] ? loop_set_status_old+0x1b0/0x1b0 [ 1569.736048] ? avc_ss_reset+0x180/0x180 [ 1569.736930] ? __lock_acquire+0xbac/0x6120 [ 1569.737911] ? loop_set_status_old+0x1b0/0x1b0 [ 1569.738892] blkdev_ioctl+0x356/0x7f0 [ 1569.739728] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 1569.740735] ? selinux_file_ioctl+0xb1/0x260 [ 1569.741671] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1569.742837] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 1569.743880] __x64_sys_ioctl+0x196/0x210 [ 1569.744751] do_syscall_64+0x3b/0x90 [ 1569.745552] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1569.746644] RIP: 0033:0x7f72f8f588d7 [ 1569.747456] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1569.751329] RSP: 002b:00007f72f64cdf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1569.752938] RAX: ffffffffffffffda RBX: 00007f72f8fa2970 RCX: 00007f72f8f588d7 [ 1569.754441] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1569.755948] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1569.757437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1569.758935] R13: 0000000000000004 R14: 00000000200004f0 R15: 0000000000000002 [ 1569.760475] [ 1569.762775] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1569.766113] loop0: detected capacity change from 0 to 40 [ 1569.771214] FAULT_INJECTION: forcing a failure. [ 1569.771214] name failslab, interval 1, probability 0, space 0, times 0 [ 1569.772465] CPU: 0 PID: 9948 Comm: syz-executor.2 Not tainted 5.17.0-next-20220401 #1 [ 1569.773293] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1569.774495] Call Trace: [ 1569.774764] [ 1569.775002] dump_stack_lvl+0x8b/0xb3 [ 1569.775420] should_fail.cold+0x5/0xa [ 1569.775837] ? create_object.isra.0+0x3a/0xa20 [ 1569.776322] should_failslab+0x5/0x10 [ 1569.776732] kmem_cache_alloc+0x5b/0x480 [ 1569.777184] create_object.isra.0+0x3a/0xa20 [ 1569.777650] ? kasan_unpoison+0x23/0x50 [ 1569.778088] __kmalloc_node+0x26f/0x470 [ 1569.778517] kvmalloc_node+0x3e/0x130 [ 1569.778925] alloc_pipe_info+0x1e5/0x580 [ 1569.779363] splice_direct_to_actor+0x700/0x8e0 [ 1569.779861] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1569.780452] ? pipe_to_sendpage+0x380/0x380 [ 1569.780931] ? inode_security+0x105/0x130 [ 1569.781395] ? avc_policy_seqno+0x9/0x70 [ 1569.781847] ? selinux_file_permission+0x36/0x510 [ 1569.782386] ? do_splice_to+0x240/0x240 [ 1569.782837] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1569.783476] ? security_file_permission+0xb1/0xd0 [ 1569.784021] do_splice_direct+0x1b8/0x280 [ 1569.784494] ? splice_direct_to_actor+0x8e0/0x8e0 [ 1569.785053] ? lock_is_held_type+0xd7/0x130 [ 1569.785544] do_sendfile+0xad7/0x1230 [ 1569.785984] ? __ia32_compat_sys_preadv64+0x2e0/0x2e0 [ 1569.786576] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1569.787189] ? vfs_write+0x422/0xac0 [ 1569.787619] __x64_sys_sendfile64+0x1cd/0x210 [ 1569.788133] ? __ia32_compat_sys_sendfile64+0x210/0x210 [ 1569.788745] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1569.789336] do_syscall_64+0x3b/0x90 [ 1569.789643] loop4: detected capacity change from 0 to 255 [ 1569.789751] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1569.791494] RIP: 0033:0x7fdc09c89b19 [ 1569.791902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1569.793967] RSP: 002b:00007fdc071ff188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1569.794822] RAX: ffffffffffffffda RBX: 00007fdc09d9cf60 RCX: 00007fdc09c89b19 [ 1569.795630] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 1569.796431] RBP: 00007fdc071ff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1569.797227] R10: 00000ffffffff000 R11: 0000000000000246 R12: 0000000000000001 [ 1569.798026] R13: 00007ffd3c98ba1f R14: 00007fdc071ff300 R15: 0000000000022000 [ 1569.798839] [ 1569.811227] EXT4-fs error (device loop6): __ext4_fill_super:5311: inode #2: comm syz-executor.6: iget: root inode unallocated [ 1569.813820] EXT4-fs (loop6): get root inode failed [ 1569.814375] EXT4-fs (loop6): mount failed [ 1569.820661] FAULT_INJECTION: forcing a failure. [ 1569.820661] name failslab, interval 1, probability 0, space 0, times 0 [ 1569.822821] loop1: detected capacity change from 0 to 64 [ 1569.823061] CPU: 1 PID: 9951 Comm: syz-executor.0 Not tainted 5.17.0-next-20220401 #1 09:43:20 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) (fail_nth: 5) [ 1569.825228] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1569.827770] Call Trace: [ 1569.828312] [ 1569.828786] dump_stack_lvl+0x8b/0xb3 [ 1569.829613] should_fail.cold+0x5/0xa [ 1569.830441] ? fat_cache_add.part.0+0x5b4/0xb50 [ 1569.831461] should_failslab+0x5/0x10 [ 1569.832278] kmem_cache_alloc+0x5b/0x480 [ 1569.833155] fat_cache_add.part.0+0x5b4/0xb50 [ 1569.834133] fat_get_cluster+0x91a/0xd40 [ 1569.835021] ? fat_cache_inval_inode+0x290/0x290 [ 1569.836081] fat_get_mapped_cluster+0x20e/0x440 [ 1569.837087] ? fat_get_cluster+0xd40/0xd40 [ 1569.838020] fat_bmap+0x1f4/0x460 [ 1569.838775] fat_get_block+0x33a/0x930 [ 1569.839608] ? fat_add_cluster+0xf0/0xf0 [ 1569.840460] ? lock_is_held_type+0xd7/0x130 [ 1569.841370] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1569.842544] ? create_page_buffers+0x14b/0x310 [ 1569.843546] __block_write_begin_int+0x345/0x1540 [ 1569.844573] ? fat_add_cluster+0xf0/0xf0 [ 1569.845450] ? invalidate_bh_lrus_cpu+0x120/0x120 [ 1569.846471] ? lock_chain_count+0x20/0x20 [ 1569.847361] ? mark_lock.part.0+0xef/0x2f60 [ 1569.848289] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1569.849472] ? PageHeadHuge+0x166/0x1a0 [ 1569.850322] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1569.851508] ? fat_add_cluster+0xf0/0xf0 [ 1569.852371] block_write_begin+0xbb/0x440 [ 1569.853255] cont_write_begin+0x46a/0x5e0 [ 1569.854158] ? fat_add_cluster+0xf0/0xf0 [ 1569.855016] ? block_write_begin+0x440/0x440 [ 1569.855969] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1569.857079] ? lock_chain_count+0x20/0x20 [ 1569.857966] fat_write_begin+0x89/0x180 [ 1569.858817] ? fat_add_cluster+0xf0/0xf0 [ 1569.859687] cont_write_begin+0x291/0x5e0 [ 1569.860600] ? fat_add_cluster+0xf0/0xf0 [ 1569.861458] ? block_write_begin+0x440/0x440 [ 1569.862410] ? ktime_get_coarse_real_ts64+0x159/0x190 [ 1569.863514] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1569.863548] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1569.864585] ? fault_in_readable+0x18a/0x250 [ 1569.864626] ? fault_in_writeable+0x1d0/0x1d0 [ 1569.867393] fat_write_begin+0x89/0x180 [ 1569.868255] ? fat_add_cluster+0xf0/0xf0 [ 1569.869138] generic_perform_write+0x24c/0x570 [ 1569.870139] ? folio_unlock+0xb0/0xb0 [ 1569.870954] ? discard_new_inode+0x190/0x190 [ 1569.871924] ? generic_write_checks+0x25f/0x390 [ 1569.872934] __generic_file_write_iter+0x2d6/0x480 [ 1569.874003] generic_file_write_iter+0xd7/0x220 [ 1569.875016] do_iter_readv_writev+0x3d8/0x650 [ 1569.876006] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1569.877172] ? new_sync_write+0x560/0x560 [ 1569.878071] ? avc_policy_seqno+0x9/0x70 [ 1569.878932] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 1569.880025] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1569.881182] ? security_file_permission+0xb1/0xd0 [ 1569.882227] do_iter_write+0x187/0x6f0 [ 1569.883063] ? lock_is_held_type+0xd7/0x130 [ 1569.884011] vfs_writev+0x1aa/0x630 [ 1569.884807] ? vfs_iter_write+0xa0/0xa0 [ 1569.885668] ? lock_release+0x3b2/0x6f0 [ 1569.886519] ? __fget_files+0x265/0x470 [ 1569.887390] ? x86_pmu_enable+0xc10/0xd90 [ 1569.888312] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 1569.889386] ? __fget_files+0x287/0x470 [ 1569.890264] __x64_sys_pwritev+0x22b/0x310 [ 1569.891182] ? __x64_sys_pwritev2+0x150/0x150 [ 1569.892164] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1569.893264] do_syscall_64+0x3b/0x90 [ 1569.894049] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1569.895133] RIP: 0033:0x7f1a42136b19 [ 1569.895915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1569.899841] RSP: 002b:00007f1a3f6ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 1569.901447] RAX: ffffffffffffffda RBX: 00007f1a42249f60 RCX: 00007f1a42136b19 [ 1569.902968] RDX: 0000000000000001 RSI: 0000000020000640 RDI: 0000000000000004 [ 1569.904497] RBP: 00007f1a3f6ac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1569.906020] R10: 0000000008000000 R11: 0000000000000246 R12: 0000000000000001 [ 1569.907551] R13: 00007ffd501cf4ef R14: 00007f1a3f6ac300 R15: 0000000000022000 [ 1569.909093] [ 1569.909805] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1569.946302] FAULT_INJECTION: forcing a failure. [ 1569.946302] name failslab, interval 1, probability 0, space 0, times 0 [ 1569.947574] CPU: 0 PID: 9953 Comm: syz-executor.4 Not tainted 5.17.0-next-20220401 #1 [ 1569.948402] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1569.949592] Call Trace: [ 1569.949857] [ 1569.950089] dump_stack_lvl+0x8b/0xb3 [ 1569.950504] should_fail.cold+0x5/0xa [ 1569.950911] ? create_object.isra.0+0x3a/0xa20 [ 1569.951401] should_failslab+0x5/0x10 [ 1569.951814] kmem_cache_alloc+0x5b/0x480 [ 1569.952249] create_object.isra.0+0x3a/0xa20 [ 1569.952709] ? kasan_unpoison+0x23/0x50 [ 1569.953129] kmem_cache_alloc+0x239/0x480 [ 1569.953571] ? mempool_free+0x3b0/0x3b0 [ 1569.953996] mempool_alloc+0x148/0x360 [ 1569.954424] ? mempool_resize+0x7d0/0x7d0 [ 1569.954862] ? lock_chain_count+0x20/0x20 [ 1569.955305] ? lock_chain_count+0x20/0x20 [ 1569.955753] ? __lock_acquire+0xbac/0x6120 [ 1569.956229] bio_alloc_bioset+0x396/0x780 [ 1569.956702] ? bvec_alloc+0x200/0x200 [ 1569.957129] ? __kmalloc_node+0xb0/0x470 [ 1569.957582] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1569.958189] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1569.958741] ? zero_user_segments.constprop.0+0x2b0/0x540 [ 1569.959348] __mpage_writepage+0xe13/0x1750 [ 1569.959834] ? mark_lock.part.0+0xef/0x2f60 [ 1569.960317] ? mpage_readpage+0x140/0x140 [ 1569.960782] ? lock_is_held_type+0xd7/0x130 [ 1569.961250] ? find_held_lock+0x2c/0x110 [ 1569.961701] ? lock_release+0x3b2/0x6f0 [ 1569.962139] ? folio_clear_dirty_for_io+0x26e/0x760 [ 1569.962687] ? lock_downgrade+0x6d0/0x6d0 [ 1569.963152] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1569.963762] ? percpu_counter_add_batch+0xb4/0x170 [ 1569.964309] ? lock_is_held_type+0xd7/0x130 [ 1569.964785] write_cache_pages+0x491/0x1180 [ 1569.965255] ? find_held_lock+0x2c/0x110 [ 1569.965698] ? mpage_readpage+0x140/0x140 [ 1569.966159] ? percpu_ref_put_many.constprop.0+0x270/0x270 [ 1569.966782] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1569.967366] ? fat_add_cluster+0xf0/0xf0 [ 1569.967825] ? fat_readahead+0x20/0x20 [ 1569.968255] mpage_writepages+0xd8/0x1a0 [ 1569.968698] ? mpage_end_io+0x2c0/0x2c0 [ 1569.969134] ? fat_add_cluster+0xf0/0xf0 [ 1569.969589] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1569.970186] do_writepages+0x1b0/0x690 [ 1569.970618] ? writeback_set_ratelimit+0x150/0x150 [ 1569.971163] ? lock_release+0x3b2/0x6f0 [ 1569.971615] ? wbc_attach_and_unlock_inode+0x8a/0x8d0 [ 1569.972180] ? lock_downgrade+0x6d0/0x6d0 [ 1569.972637] ? lock_release+0x6f0/0x6f0 [ 1569.973073] ? do_raw_spin_lock+0x121/0x260 [ 1569.973545] ? do_raw_spin_unlock+0x4f/0x210 [ 1569.974027] ? _raw_spin_unlock+0x24/0x40 [ 1569.974479] ? wbc_attach_and_unlock_inode+0x8a/0x8d0 [ 1569.975050] filemap_fdatawrite_wbc+0x143/0x1b0 [ 1569.975572] file_write_and_wait_range+0x163/0x1e0 [ 1569.976039] I/O error, dev loop1, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1569.976112] ? file_fdatawait_range+0x60/0x60 [ 1569.977881] Buffer I/O error on dev loop1, logical block 1, async page read [ 1569.978338] ? do_raw_spin_lock+0x121/0x260 [ 1569.978355] ? rwlock_bug.part.0+0x90/0x90 [ 1569.980717] __generic_file_fsync+0x74/0x1f0 [ 1569.981207] fat_file_fsync+0x73/0x200 [ 1569.981625] ? fat_trim_fs+0xfc0/0xfc0 [ 1569.982058] vfs_fsync_range+0x13d/0x230 [ 1569.982524] generic_file_write_iter+0x195/0x220 [ 1569.983036] do_iter_readv_writev+0x3d8/0x650 [ 1569.983544] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1569.984144] ? new_sync_write+0x560/0x560 [ 1569.984597] ? avc_policy_seqno+0x9/0x70 [ 1569.985049] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 1569.985612] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1569.986211] ? security_file_permission+0xb1/0xd0 [ 1569.986741] do_iter_write+0x187/0x6f0 [ 1569.987166] ? lock_is_held_type+0xd7/0x130 [ 1569.987655] vfs_iter_write+0x70/0xa0 [ 1569.988095] iter_file_splice_write+0x722/0xc90 [ 1569.988619] ? generic_file_splice_read+0x3ea/0x5d0 [ 1569.989177] ? page_cache_pipe_buf_confirm+0x5b0/0x5b0 [ 1569.989753] ? pipe_to_user+0x170/0x170 [ 1569.990182] ? inode_security+0x105/0x130 [ 1569.990645] ? security_file_permission+0xb1/0xd0 [ 1569.991173] ? page_cache_pipe_buf_confirm+0x5b0/0x5b0 [ 1569.991782] direct_splice_actor+0x10f/0x170 [ 1569.992267] splice_direct_to_actor+0x350/0x8e0 [ 1569.992790] ? pipe_to_sendpage+0x380/0x380 [ 1569.993265] ? do_splice_to+0x240/0x240 [ 1569.993708] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1569.994327] ? security_file_permission+0xb1/0xd0 [ 1569.994849] do_splice_direct+0x1b8/0x280 [ 1569.995306] ? splice_direct_to_actor+0x8e0/0x8e0 [ 1569.995862] ? lock_is_held_type+0xd7/0x130 [ 1569.996333] do_sendfile+0xad7/0x1230 [ 1569.996754] ? __ia32_compat_sys_preadv64+0x2e0/0x2e0 [ 1569.997321] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1569.997926] ? vfs_write+0x422/0xac0 [ 1569.998328] __x64_sys_sendfile64+0x1cd/0x210 [ 1569.998834] ? __ia32_compat_sys_sendfile64+0x210/0x210 [ 1569.999437] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1570.000008] do_syscall_64+0x3b/0x90 [ 1570.000410] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1570.000971] RIP: 0033:0x7f10081d2b19 [ 1570.001368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1570.003361] RSP: 002b:00007f1005748188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1570.004215] RAX: ffffffffffffffda RBX: 00007f10082e5f60 RCX: 00007f10081d2b19 [ 1570.004983] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 1570.005762] RBP: 00007f10057481d0 R08: 0000000000000000 R09: 0000000000000000 [ 1570.006551] R10: 00000ffffffff000 R11: 0000000000000246 R12: 0000000000000001 [ 1570.007354] R13: 00007fff5bac1b9f R14: 00007f1005748300 R15: 0000000000022000 [ 1570.008178] [ 1570.009023] kworker/u4:2: attempt to access beyond end of device [ 1570.009023] loop0: rw=1, want=128, limit=40 [ 1570.011260] Buffer I/O error on dev loop0, logical block 31, lost async page write 09:43:20 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000040)='./file1\x00', 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) (fail_nth: 3) 09:43:20 executing program 5: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x114) setxattr$trusted_overlay_redirect(&(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), &(0x7f0000000b80)='./file0\x00', 0x8, 0x1) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000c40)=@v2={0x2, @adiantum, 0x1, '\x00', @b}) setxattr$trusted_overlay_origin(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000bc0), &(0x7f0000000e40), 0x2, 0x0) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x501000, 0x21) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) ioctl$DVD_WRITE_STRUCT(r1, 0x530c, &(0x7f0000000240)=@type=0x2) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000040)="0000000000000000000030ee7fdbd1e001000000ecb75dda9613a8c214491f4faf89680c0000182e7b414a630f51b1", 0x2f, 0x4e1}, {&(0x7f0000000d40)="000000000000000000320d3cd80a959e5f8ff9388eef19bc1f31a2e9c727ca6f852177d1d9f7453bc56236647a264a16feab58752b05fefeb7a9fa2f61ec6eabab8c8605704596225d2c7f5c73fac38075873de717b601b33db24b83", 0x5c, 0xff}, {&(0x7f0000000ac0)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x401, &(0x7f0000000dc0)={[{@noload}, {@errors_continue}, {@noacl}, {@lazytime}]}) r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x7, 0x10401) setxattr$security_capability(&(0x7f0000000cc0)='./file0\x00', &(0x7f0000000d00), &(0x7f0000000e00)=@v2={0x2000000, [{0x3, 0x8001}, {0x6, 0x1}]}, 0x14, 0x0) mknodat(r2, &(0x7f0000000c00)='./file1\x00', 0x2, 0x5) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file1\x00', &(0x7f0000000a80), &(0x7f0000000c80), 0x2, 0x0) fork() 09:43:20 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000010000)="eb58906d6b66732e66617400021e20000400000004f8", 0x16}, {0x0, 0x0, 0x4000}], 0x100c000, &(0x7f0000000040)) (fail_nth: 56) 09:43:20 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2a, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e33313930313834363600"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000005566cbb705fc4d7ea1c5dfc95b00bfe3010000000c00000000000000d1f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="0100000000000500110000000000000000000000040000003c00000000000000", 0x20, 0x560}, {&(0x7f0000010300)="030000000400"/32, 0x20, 0x640}, {&(0x7f0000010400)="030000001300000023000000ce000f0003000400"/32, 0x20, 0x800}, {&(0x7f0000010500)="fffffffffcff0700000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009403090166696c652e636f6c64000000", 0x480, 0xc00}, {&(0x7f0000010a00)="0b0000000c0001022e00000002000000f40302022e2e00"/32, 0x20, 0x1400}, {&(0x7f0000010b00)="00000000000400"/32, 0x20, 0x1800}, {&(0x7f0000010c00)="00000000000400"/32, 0x20, 0x1c00}, {&(0x7f0000010d00)="00000000000400"/32, 0x20, 0x2000}, {&(0x7f0000010e00)="00000000000400"/32, 0x20, 0x2400}, {&(0x7f0000010f00)="00000000000400"/32, 0x20, 0x2800}, {&(0x7f0000011000)="00000000000400"/32, 0x20, 0x2c00}, {&(0x7f0000011100)="00000000000400"/32, 0x20, 0x3000}, {&(0x7f0000011200)="00000000000400"/32, 0x20, 0x3400}, {&(0x7f0000011300)="00000000000400"/32, 0x20, 0x3800}, {&(0x7f0000011400)="00000000000400"/32, 0x20, 0x3c00}, {&(0x7f0000011500)="00000000000400"/32, 0x20, 0x4000}, {&(0x7f0000011600)="504d4d00504d4dffd2f4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7033300075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/128, 0x80, 0x4400}, {&(0x7f0000011700)="111fc0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x4800}, {&(0x7f0000011800)="ffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0300"/1056, 0x420, 0x4c00}, {&(0x7f0000000600)="040000000000000000000000000000000000000000000000000000000000000094f35dbb3cff396abac3c4e1729dbc4d6046fcd977de47c4e102df6e1b03abeafed9c2f5f8275b294f180c100fea548f96c28f23697045d4099c61fe341be712730cdc8210bdba8f27189cd6214ff2c32e756a7ebc653575906fac25d2a95858457eb79ce6cb53b49ac1b45581dce1d155ec81f7cd5e41f58bf9d92c1ff44c1021e1b3fb73927be6f85d508930d3a94300be19e847e13100"/195, 0xc3, 0x5400}, {&(0x7f0000011e00)="0500"/32, 0x20, 0x5800}, {&(0x7f0000011f00)="00000000000000000100000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000007000"/96, 0x60, 0x5c00}, {&(0x7f0000012000)="0200"/32, 0x20, 0x6000}, {&(0x7f0000012100)="2719c0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x6400}, {&(0x7f0000012200)="0300"/32, 0x20, 0x6800}, {&(0x7f0000012300)="0400"/32, 0x20, 0x6c00}, {&(0x7f0000012400)="0500"/32, 0x20, 0x7000}, {&(0x7f0000012500)="00000000000000000100000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000007000"/96, 0x60, 0x7400}, {&(0x7f0000012600)="0200"/32, 0x20, 0x7800}, {&(0x7f0000012700)="0c0000000c0001022e000000020000000c0002022e2e00000d0000001000050166696c65300000000e000000d803050766696c653100"/64, 0x40, 0x7c00}, {&(0x7f0000012800)="000002ea0100000001000000270f240c000000000000000000000000000000000601f8030000000006000000779b539778617474723100000601f00300000000060000007498539778617474723200"/96, 0x60, 0x8000}, {&(0x7f0000012900)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00xattr2\x00\x00xattr1\x00\x00', 0x20, 0x8}, {&(0x7f0000012a00)="0000000000000000d1f4655fd1f4655fd1f4655f00"/32, 0x20, 0x8c00}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f00000000000004000200000000000800050000000af301000400000000000000000000000100000004000000", 0x40, 0x8c80}, {&(0x7f0000012c00)="8081000000180000d1f4655fd1f4655fd1f4655f00000000000001000c00000010000800000000000af303000400000000000000000000000100000012000000010000000100000018000000020000000400000014000000000000000000000000000000000000000000000000000000000000000000000000000000000000008081000000180000d1f4655fd1f4655fd1f4655f00000000000001000c00000010000800000000000af30300040000000000000000000000010000001900000001000000010000001e00000002000000040000001a00"/224, 0xe0, 0x8d00}, {&(0x7f0000012d00)="c041000000300000d1f4655fd1f4655fd1f4655f00000000000002001800000000000800000000000af301000400000000000000000000000c00000005000000", 0x40, 0x9100}, {&(0x7f0000012e00)="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"/768, 0x300, 0x9180}, {&(0x7f0000013100)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x9c00}, {&(0x7f0000013600)='syzkallers\x00'/32, 0x20, 0xa400}, {&(0x7f0000013700)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0xcc00}], 0x0, &(0x7f0000013800)=ANY=[@ANYBLOB]) 09:43:20 executing program 7: syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=@ctrl_frame=@bar={{}, {}, @device_b, @device_a, @multi={{0x0, 0x1, 0x1, 0x0, 0x3}, [{0x0, 0x3, {0x5, 0xe9}, "9eb08feb44d860f0"}, {0x0, 0x2, {0x3, 0xd2}, "4708590ceca6c4e2"}, {0x0, 0x6, {0x4, 0x3}, "0531687e447cb155"}]}}, 0x36) 09:43:20 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d9f4655fd9f4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {&(0x7f0000010400)="0200000003000000040000006a000f000300040000000000000000000f00bc0f", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d9f4655fd9f4655fd9f4655f000000000000", 0x1a, 0x2100}], 0x0, &(0x7f0000000180)={[{@journal_dev={'journal_dev', 0x3d, 0x7}}]}) [ 1570.053712] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1570.054674] Buffer I/O error on dev loop1, logical block 2, async page read [ 1570.056343] I/O error, dev loop1, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1570.057378] Buffer I/O error on dev loop1, logical block 3, async page read [ 1570.063063] loop2: detected capacity change from 0 to 255 [ 1570.077091] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 1570.077316] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1570.083025] loop6: detected capacity change from 0 to 512 [ 1570.088651] loop5: detected capacity change from 0 to 512 [ 1570.094281] EXT4-fs error (device loop6): __ext4_fill_super:5311: inode #2: comm syz-executor.6: iget: root inode unallocated [ 1570.096812] EXT4-fs (loop6): get root inode failed [ 1570.097396] EXT4-fs (loop6): mount failed [ 1570.098648] EXT4-fs: Mount option "noacl" will be removed by 3.5 [ 1570.098648] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 1570.098648] [ 1570.107354] FAULT_INJECTION: forcing a failure. 09:43:20 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x5) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) (fail_nth: 9) [ 1570.107354] name failslab, interval 1, probability 0, space 0, times 0 [ 1570.109926] CPU: 1 PID: 9965 Comm: syz-executor.1 Not tainted 5.17.0-next-20220401 #1 [ 1570.109933] I/O error, dev loop1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1570.109955] Buffer I/O error on dev loop1, logical block 4, async page read [ 1570.111605] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1570.111623] Call Trace: [ 1570.111630] [ 1570.111640] dump_stack_lvl+0x8b/0xb3 [ 1570.118134] should_fail.cold+0x5/0xa [ 1570.118949] ? create_object.isra.0+0x3a/0xa20 [ 1570.119941] should_failslab+0x5/0x10 [ 1570.120748] kmem_cache_alloc+0x5b/0x480 [ 1570.121622] create_object.isra.0+0x3a/0xa20 [ 1570.122549] ? kasan_unpoison+0x23/0x50 [ 1570.123396] kmem_cache_alloc+0x239/0x480 [ 1570.124313] __kernfs_new_node+0xd4/0x8b0 [ 1570.125202] ? kernfs_add_one+0x3c6/0x550 [ 1570.126082] ? kernfs_path_from_node+0x60/0x60 [ 1570.127060] ? lock_is_held_type+0xd7/0x130 09:43:20 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d9f4655fd9f4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {&(0x7f0000010400)="0200000003000000040000006a000f000300040000000000000000000f00bc0f", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d9f4655fd9f4655fd9f4655f000000000000", 0x1a, 0x2100}], 0x0, &(0x7f0000000180)={[{@journal_dev={'journal_dev', 0x3d, 0x7}}]}) [ 1570.127997] ? up_write+0x148/0x460 [ 1570.128843] ? kernfs_activate+0x1c4/0x240 [ 1570.129758] kernfs_new_node+0x93/0x120 [ 1570.130083] I/O error, dev loop1, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1570.130613] __kernfs_create_file+0x51/0x350 [ 1570.131569] Buffer I/O error on dev loop1, logical block 5, async page read [ 1570.132458] sysfs_add_file_mode_ns+0x218/0x430 [ 1570.134214] ? component_del+0x4c0/0x4c0 [ 1570.135078] internal_create_group+0x322/0xb20 [ 1570.136065] ? sysfs_remove_group+0x170/0x170 [ 1570.137027] ? loop_configure+0x1940/0x1940 [ 1570.137944] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 1570.139014] ? __loop_update_dio+0x2a3/0x620 [ 1570.139969] loop_configure+0xe81/0x1940 [ 1570.140868] lo_ioctl+0x782/0x1850 [ 1570.141633] ? __x64_sys_openat+0x13f/0x1f0 [ 1570.142569] ? loop_set_status_old+0x1b0/0x1b0 [ 1570.143555] ? avc_ss_reset+0x180/0x180 [ 1570.144430] ? __lock_acquire+0xbac/0x6120 [ 1570.145416] ? loop_set_status_old+0x1b0/0x1b0 [ 1570.146393] blkdev_ioctl+0x356/0x7f0 [ 1570.147211] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 1570.148233] ? selinux_file_ioctl+0xb1/0x260 [ 1570.149171] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1570.150339] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 1570.151354] __x64_sys_ioctl+0x196/0x210 [ 1570.152243] do_syscall_64+0x3b/0x90 [ 1570.153031] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1570.154124] RIP: 0033:0x7f72f8f588d7 [ 1570.154906] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1570.158802] RSP: 002b:00007f72f64cdf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 09:43:20 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d9f4655fd9f4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {&(0x7f0000010400)="0200000003000000040000006a000f000300040000000000000000000f00bc0f", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d9f4655fd9f4655fd9f4655f000000000000", 0x1a, 0x2100}], 0x0, &(0x7f0000000180)={[{@journal_dev={'journal_dev', 0x3d, 0x7}}]}) [ 1570.160424] RAX: ffffffffffffffda RBX: 00007f72f8fa2970 RCX: 00007f72f8f588d7 [ 1570.162028] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1570.163543] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1570.165046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1570.166548] R13: 0000000000000004 R14: 00000000200004f0 R15: 0000000000000002 [ 1570.168094] [ 1570.168562] I/O error, dev loop1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1570.169562] Buffer I/O error on dev loop1, logical block 6, async page read [ 1570.172111] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1570.177388] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1570.178444] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1570.179467] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1570.181355] FAULT_INJECTION: forcing a failure. [ 1570.181355] name failslab, interval 1, probability 0, space 0, times 0 [ 1570.182632] CPU: 0 PID: 9962 Comm: syz-executor.2 Not tainted 5.17.0-next-20220401 #1 [ 1570.183540] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1570.184798] Call Trace: [ 1570.185084] [ 1570.185336] dump_stack_lvl+0x8b/0xb3 [ 1570.185784] should_fail.cold+0x5/0xa [ 1570.186224] ? iter_file_splice_write+0x165/0xc90 [ 1570.186777] should_failslab+0x5/0x10 [ 1570.187201] __kmalloc+0x72/0x440 [ 1570.187616] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1570.188235] iter_file_splice_write+0x165/0xc90 [ 1570.188761] ? generic_file_read_iter+0x3a1/0x530 [ 1570.189307] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 1570.189867] ? generic_file_splice_read+0x3ea/0x5d0 [ 1570.190433] ? page_cache_pipe_buf_confirm+0x5b0/0x5b0 [ 1570.191024] ? pipe_to_user+0x170/0x170 [ 1570.191497] ? inode_security+0x105/0x130 [ 1570.191983] ? security_file_permission+0xb1/0xd0 [ 1570.192532] ? page_cache_pipe_buf_confirm+0x5b0/0x5b0 [ 1570.193131] direct_splice_actor+0x10f/0x170 [ 1570.193628] splice_direct_to_actor+0x350/0x8e0 [ 1570.194158] ? pipe_to_sendpage+0x380/0x380 [ 1570.194653] ? do_splice_to+0x240/0x240 [ 1570.195105] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1570.195736] ? security_file_permission+0xb1/0xd0 [ 1570.196294] do_splice_direct+0x1b8/0x280 [ 1570.196763] ? splice_direct_to_actor+0x8e0/0x8e0 [ 1570.197308] ? lock_is_held_type+0xd7/0x130 [ 1570.197810] do_sendfile+0xad7/0x1230 [ 1570.198260] ? __ia32_compat_sys_preadv64+0x2e0/0x2e0 [ 1570.198854] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1570.199482] ? vfs_write+0x422/0xac0 [ 1570.199906] __x64_sys_sendfile64+0x1cd/0x210 [ 1570.200416] ? __ia32_compat_sys_sendfile64+0x210/0x210 [ 1570.201032] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1570.201621] do_syscall_64+0x3b/0x90 [ 1570.202029] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1570.202613] RIP: 0033:0x7fdc09c89b19 [ 1570.203027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1570.205142] RSP: 002b:00007fdc071ff188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1570.205981] RAX: ffffffffffffffda RBX: 00007fdc09d9cf60 RCX: 00007fdc09c89b19 [ 1570.206780] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 1570.207571] loop3: detected capacity change from 0 to 512 [ 1570.207601] RBP: 00007fdc071ff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1570.207610] R10: 00000ffffffff000 R11: 0000000000000246 R12: 0000000000000001 [ 1570.210367] R13: 00007ffd3c98ba1f R14: 00007fdc071ff300 R15: 0000000000022000 [ 1570.211182] [ 1570.214156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1570.217135] loop0: detected capacity change from 0 to 40 [ 1570.233251] I/O error, dev loop1, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1570.234150] EXT4-fs error (device loop5): __ext4_fill_super:5311: inode #2: comm syz-executor.5: iget: root inode unallocated [ 1570.235167] Buffer I/O error on dev loop1, logical block 7, async page read [ 1570.241826] EXT4-fs (loop5): get root inode failed [ 1570.242389] EXT4-fs (loop5): mount failed [ 1570.247336] loop4: detected capacity change from 0 to 255 [ 1570.253571] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1570.254618] FAULT_INJECTION: forcing a failure. [ 1570.254618] name failslab, interval 1, probability 0, space 0, times 0 [ 1570.257052] CPU: 1 PID: 9977 Comm: syz-executor.0 Not tainted 5.17.0-next-20220401 #1 [ 1570.258723] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1570.261097] Call Trace: [ 1570.261636] [ 1570.262109] dump_stack_lvl+0x8b/0xb3 [ 1570.262942] should_fail.cold+0x5/0xa [ 1570.263776] ? create_object.isra.0+0x3a/0xa20 [ 1570.264749] should_failslab+0x5/0x10 [ 1570.265547] kmem_cache_alloc+0x5b/0x480 09:43:20 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d9f4655fd9f4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {&(0x7f0000010400)="0200000003000000040000006a000f000300040000000000000000000f00bc0f", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d9f4655fd9f4655fd9f4655f0000000000000400", 0x1c, 0x2100}], 0x0, &(0x7f0000000180)={[{@journal_dev={'journal_dev', 0x3d, 0x7}}]}) [ 1570.266424] create_object.isra.0+0x3a/0xa20 [ 1570.267516] ? kasan_unpoison+0x23/0x50 [ 1570.268368] kmem_cache_alloc+0x239/0x480 [ 1570.269251] fat_cache_add.part.0+0x5b4/0xb50 [ 1570.270226] fat_get_cluster+0x91a/0xd40 [ 1570.271113] ? fat_cache_inval_inode+0x290/0x290 [ 1570.272166] fat_get_mapped_cluster+0x20e/0x440 [ 1570.273169] ? fat_get_cluster+0xd40/0xd40 [ 1570.274101] fat_bmap+0x1f4/0x460 [ 1570.274858] fat_get_block+0x33a/0x930 [ 1570.275713] ? fat_add_cluster+0xf0/0xf0 [ 1570.276575] ? lock_is_held_type+0xd7/0x130 [ 1570.277491] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1570.278659] ? create_page_buffers+0x14b/0x310 [ 1570.279643] __block_write_begin_int+0x345/0x1540 [ 1570.280677] ? fat_add_cluster+0xf0/0xf0 [ 1570.281547] ? invalidate_bh_lrus_cpu+0x120/0x120 [ 1570.282572] ? lock_chain_count+0x20/0x20 [ 1570.283471] ? mark_lock.part.0+0xef/0x2f60 [ 1570.284386] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1570.285544] ? PageHeadHuge+0x166/0x1a0 [ 1570.286391] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1570.287570] ? fat_add_cluster+0xf0/0xf0 [ 1570.288427] block_write_begin+0xbb/0x440 [ 1570.289315] cont_write_begin+0x46a/0x5e0 [ 1570.290210] ? fat_add_cluster+0xf0/0xf0 [ 1570.291070] ? block_write_begin+0x440/0x440 [ 1570.292019] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1570.293130] ? lock_chain_count+0x20/0x20 [ 1570.294019] fat_write_begin+0x89/0x180 [ 1570.294859] ? fat_add_cluster+0xf0/0xf0 [ 1570.295762] cont_write_begin+0x291/0x5e0 [ 1570.296660] ? fat_add_cluster+0xf0/0xf0 [ 1570.297520] ? block_write_begin+0x440/0x440 [ 1570.298458] ? ktime_get_coarse_real_ts64+0x159/0x190 [ 1570.299557] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1570.300615] ? fault_in_readable+0x18a/0x250 [ 1570.301555] ? fault_in_writeable+0x1d0/0x1d0 [ 1570.302520] fat_write_begin+0x89/0x180 [ 1570.303359] ? fat_add_cluster+0xf0/0xf0 [ 1570.304231] generic_perform_write+0x24c/0x570 [ 1570.305217] ? folio_unlock+0xb0/0xb0 [ 1570.306026] ? discard_new_inode+0x190/0x190 [ 1570.306959] ? generic_write_checks+0x25f/0x390 [ 1570.307967] __generic_file_write_iter+0x2d6/0x480 [ 1570.309025] generic_file_write_iter+0xd7/0x220 [ 1570.310030] do_iter_readv_writev+0x3d8/0x650 [ 1570.310994] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1570.312178] ? new_sync_write+0x560/0x560 [ 1570.313064] ? avc_policy_seqno+0x9/0x70 [ 1570.313929] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 1570.314995] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1570.316175] ? security_file_permission+0xb1/0xd0 [ 1570.317207] do_iter_write+0x187/0x6f0 [ 1570.318048] ? lock_is_held_type+0xd7/0x130 [ 1570.318974] vfs_writev+0x1aa/0x630 [ 1570.319762] ? vfs_iter_write+0xa0/0xa0 [ 1570.320615] ? lock_release+0x3b2/0x6f0 [ 1570.321458] ? __fget_files+0x265/0x470 [ 1570.322302] ? x86_pmu_enable+0xc10/0xd90 [ 1570.323193] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 1570.324264] ? __fget_files+0x287/0x470 [ 1570.325159] __x64_sys_pwritev+0x22b/0x310 [ 1570.326072] ? __x64_sys_pwritev2+0x150/0x150 [ 1570.327031] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1570.328160] do_syscall_64+0x3b/0x90 [ 1570.328938] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1570.330035] RIP: 0033:0x7f1a42136b19 [ 1570.330814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1570.334714] RSP: 002b:00007f1a3f6ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 1570.336322] RAX: ffffffffffffffda RBX: 00007f1a42249f60 RCX: 00007f1a42136b19 [ 1570.337826] RDX: 0000000000000001 RSI: 0000000020000640 RDI: 0000000000000004 [ 1570.339328] RBP: 00007f1a3f6ac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1570.340846] R10: 0000000008000000 R11: 0000000000000246 R12: 0000000000000001 [ 1570.342345] R13: 00007ffd501cf4ef R14: 00007f1a3f6ac300 R15: 0000000000022000 [ 1570.343881] [ 1570.360488] FAULT_INJECTION: forcing a failure. [ 1570.360488] name failslab, interval 1, probability 0, space 0, times 0 [ 1570.361704] CPU: 0 PID: 9983 Comm: syz-executor.4 Not tainted 5.17.0-next-20220401 #1 [ 1570.361936] loop6: detected capacity change from 0 to 512 [ 1570.362537] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1570.362547] Call Trace: [ 1570.362551] [ 1570.362556] dump_stack_lvl+0x8b/0xb3 [ 1570.362583] should_fail.cold+0x5/0xa [ 1570.364207] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1570.364939] ? mempool_alloc+0x148/0x360 [ 1570.364958] ? mempool_free+0x3b0/0x3b0 [ 1570.364975] should_failslab+0x5/0x10 [ 1570.364989] kmem_cache_alloc+0x5b/0x480 [ 1570.366919] ext4 filesystem being mounted at /syzkaller-testdir192437726/syzkaller.e8kbEX/157/file0 supports timestamps until 2038 (0x7fffffff) [ 1570.367393] ? mempool_free+0x3b0/0x3b0 [ 1570.367411] mempool_alloc+0x148/0x360 [ 1570.367441] ? mempool_resize+0x7d0/0x7d0 [ 1570.367460] ? mempool_resize+0x7d0/0x7d0 [ 1570.372688] ? lock_chain_count+0x20/0x20 [ 1570.373163] ? lock_chain_count+0x20/0x20 [ 1570.373633] bvec_alloc+0x16b/0x200 [ 1570.374053] bio_alloc_bioset+0x420/0x780 [ 1570.374517] ? bvec_alloc+0x200/0x200 [ 1570.374958] ? __kmalloc_node+0xb0/0x470 [ 1570.375411] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1570.376061] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1570.376629] ? zero_user_segments.constprop.0+0x2b0/0x540 [ 1570.377251] __mpage_writepage+0xe13/0x1750 [ 1570.377747] ? mark_lock.part.0+0xef/0x2f60 [ 1570.378236] ? mpage_readpage+0x140/0x140 [ 1570.378702] ? lock_is_held_type+0xd7/0x130 [ 1570.379190] ? find_held_lock+0x2c/0x110 [ 1570.379653] ? lock_release+0x3b2/0x6f0 [ 1570.380103] ? folio_clear_dirty_for_io+0x26e/0x760 [ 1570.380654] ? lock_downgrade+0x6d0/0x6d0 [ 1570.381128] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1570.381753] ? percpu_counter_add_batch+0xb4/0x170 [ 1570.382307] ? lock_is_held_type+0xd7/0x130 [ 1570.382790] write_cache_pages+0x491/0x1180 [ 1570.383273] ? mpage_readpage+0x140/0x140 [ 1570.383775] ? percpu_ref_put_many.constprop.0+0x270/0x270 [ 1570.384427] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1570.385016] ? fat_add_cluster+0xf0/0xf0 [ 1570.385480] ? fat_readahead+0x20/0x20 [ 1570.385906] mpage_writepages+0xd8/0x1a0 [ 1570.386367] ? mpage_end_io+0x2c0/0x2c0 [ 1570.386824] ? fat_add_cluster+0xf0/0xf0 [ 1570.387287] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1570.387890] do_writepages+0x1b0/0x690 [ 1570.388337] ? writeback_set_ratelimit+0x150/0x150 [ 1570.388890] ? lock_release+0x3b2/0x6f0 [ 1570.389343] ? wbc_attach_and_unlock_inode+0x8a/0x8d0 [ 1570.389932] ? lock_downgrade+0x6d0/0x6d0 [ 1570.390407] ? lock_release+0x6f0/0x6f0 [ 1570.390864] ? do_raw_spin_lock+0x121/0x260 [ 1570.391355] ? do_raw_spin_unlock+0x4f/0x210 [ 1570.391860] ? _raw_spin_unlock+0x24/0x40 [ 1570.392330] ? wbc_attach_and_unlock_inode+0x8a/0x8d0 [ 1570.392916] filemap_fdatawrite_wbc+0x143/0x1b0 [ 1570.393440] file_write_and_wait_range+0x163/0x1e0 [ 1570.393990] ? file_fdatawait_range+0x60/0x60 [ 1570.394494] ? do_raw_spin_lock+0x121/0x260 [ 1570.394983] ? rwlock_bug.part.0+0x90/0x90 [ 1570.395481] __generic_file_fsync+0x74/0x1f0 [ 1570.395989] fat_file_fsync+0x73/0x200 [ 1570.396423] ? fat_trim_fs+0xfc0/0xfc0 [ 1570.396857] vfs_fsync_range+0x13d/0x230 [ 1570.397321] generic_file_write_iter+0x195/0x220 [ 1570.397857] do_iter_readv_writev+0x3d8/0x650 [ 1570.398370] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1570.398997] ? new_sync_write+0x560/0x560 [ 1570.399466] ? avc_policy_seqno+0x9/0x70 [ 1570.399935] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 1570.400506] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1570.401137] ? security_file_permission+0xb1/0xd0 [ 1570.401682] do_iter_write+0x187/0x6f0 [ 1570.402127] ? lock_is_held_type+0xd7/0x130 [ 1570.402625] vfs_iter_write+0x70/0xa0 [ 1570.403057] iter_file_splice_write+0x722/0xc90 [ 1570.403596] ? generic_file_splice_read+0x3ea/0x5d0 [ 1570.404145] ? page_cache_pipe_buf_confirm+0x5b0/0x5b0 [ 1570.404734] ? pipe_to_user+0x170/0x170 [ 1570.405174] ? inode_security+0x105/0x130 [ 1570.405642] ? security_file_permission+0xb1/0xd0 [ 1570.406187] ? page_cache_pipe_buf_confirm+0x5b0/0x5b0 [ 1570.406788] direct_splice_actor+0x10f/0x170 [ 1570.407286] splice_direct_to_actor+0x350/0x8e0 [ 1570.407815] ? pipe_to_sendpage+0x380/0x380 [ 1570.408313] ? do_splice_to+0x240/0x240 [ 1570.408761] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1570.409382] ? security_file_permission+0xb1/0xd0 [ 1570.409935] do_splice_direct+0x1b8/0x280 [ 1570.410404] ? splice_direct_to_actor+0x8e0/0x8e0 [ 1570.410956] ? lock_is_held_type+0xd7/0x130 [ 1570.411461] do_sendfile+0xad7/0x1230 [ 1570.411910] ? __ia32_compat_sys_preadv64+0x2e0/0x2e0 [ 1570.412506] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1570.413133] ? vfs_write+0x422/0xac0 [ 1570.413557] __x64_sys_sendfile64+0x1cd/0x210 [ 1570.414057] ? __ia32_compat_sys_sendfile64+0x210/0x210 [ 1570.414665] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1570.415250] do_syscall_64+0x3b/0x90 [ 1570.415677] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1570.416258] RIP: 0033:0x7f10081d2b19 [ 1570.416671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1570.418738] RSP: 002b:00007f1005748188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1570.419609] RAX: ffffffffffffffda RBX: 00007f10082e5f60 RCX: 00007f10081d2b19 [ 1570.420413] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 1570.421210] RBP: 00007f10057481d0 R08: 0000000000000000 R09: 0000000000000000 [ 1570.422014] R10: 00000ffffffff000 R11: 0000000000000246 R12: 0000000000000001 [ 1570.422826] R13: 00007fff5bac1b9f R14: 00007f1005748300 R15: 0000000000022000 [ 1570.423648] [ 1570.450554] loop5: detected capacity change from 0 to 512 [ 1570.452435] kworker/u4:10: attempt to access beyond end of device [ 1570.452435] loop0: rw=1, want=128, limit=40 [ 1570.454666] Buffer I/O error on dev loop0, logical block 31, lost async page write [ 1570.466790] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1570.471424] EXT4-fs: Mount option "noacl" will be removed by 3.5 [ 1570.471424] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 1570.471424] [ 1570.474756] EXT4-fs (loop6): corrupt root inode, run e2fsck [ 1570.475458] EXT4-fs (loop6): mount failed [ 1570.491191] loop1: detected capacity change from 0 to 64 [ 1570.502310] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1570.504264] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1570.506096] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1570.543044] EXT4-fs: failed to create workqueue [ 1570.544175] EXT4-fs (loop5): mount failed [ 1570.650896] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 09:43:34 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d9f4655fd9f4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {&(0x7f0000010400)="0200000003000000040000006a000f000300040000000000000000000f00bc0f", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d9f4655fd9f4655fd9f4655f0000000000000400", 0x1c, 0x2100}], 0x0, &(0x7f0000000180)={[{@journal_dev={'journal_dev', 0x3d, 0x7}}]}) 09:43:34 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000040)='./file1\x00', 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) (fail_nth: 4) [ 1583.748382] loop6: detected capacity change from 0 to 512 [ 1583.756103] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10007 comm=syz-executor.3 [ 1583.764271] loop2: detected capacity change from 0 to 255 09:43:34 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sysvipc/msg\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x8140, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000180)=0x9) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) writev(r0, &(0x7f00000015c0)=[{&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000000080)="dd2c0b56a31ed6fe9dfd097a6dcfb2e72d912728183812001ec240ca5061e3b0119dd9d64849addaf0597ca5bb6902c0b88ff0", 0x33}, {&(0x7f0000001300)="601cf3974f4790e19d7866c7f282ef57d69554ac0cae6df4af29a239dccd53afec0fb89eed15cc5f2b55fad987c710c87d29f919cfb57a587bc40b58262ed910c877e66466d94c106040475ee21fd4bf845f3ab4e5e5ad94c7170016d72c0e8102f1c5b16c0c09407a86213b5f45ad8bccefee10d6bfecf16d1fbabc42cd6078320b0c43c96fe4479fec30bdde021afa2e7f2036e14e2a2b3bb2566135631cb74ecb856514b599f5ca3bf7d8e48f60eb5866400901", 0xb5}, {&(0x7f00000013c0)="a7e5680b03630d6d73f251b72845365c1cb9694976ce4ee4f4c9fc1146ed2cae4479df1ff866a975fe7529b4833761a23b4bd5c45ecc492d8bf09c4fa857bcd47def8046743dfd872bad622255c8343701b4f17a9d37fba80beb44ea7b0e543724db4a8e36592a0db57c760b63dd191d784bf9ef0aa07f071440238bc7189b25f155bef3058afb826084978f47ef1c595360eb90ce86995aa8b5af24859d61e9feb1cc8e33afca754873b4dad1c5a2b75808f2ead9bf01fafa0bced72c4716af7f20ab4925152613757dd8b8dd976e371b33f81d688e9b51502c32fcdd424ffb89e4ba9490d0cc426b54c567bd0ee24ad7bc33a5114a", 0xf6}, {&(0x7f00000014c0)="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", 0xfc}], 0x5) pwrite64(r1, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) r3 = fspick(0xffffffffffffffff, &(0x7f0000000240)='./file1\x00', 0x1) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r3, 0x40047211, &(0x7f0000000280)=0x1) 09:43:34 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x5) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) (fail_nth: 10) 09:43:34 executing program 7: syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=@ctrl_frame=@bar={{}, {}, @device_b, @device_a, @multi={{0x0, 0x1, 0x1, 0x0, 0x2}, [{0x0, 0x3, {0x5, 0xe9}, "9eb08feb44d860f0"}, {0x0, 0x2, {0x3, 0xd2}, "4708590ceca6c4e2"}]}}, 0x2a) 09:43:34 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000010000)="eb58906d6b66732e66617400021e20000400000004f8", 0x16}, {0x0, 0x0, 0x4000}], 0x100c000, &(0x7f0000000040)) (fail_nth: 57) 09:43:34 executing program 3: stat(&(0x7f0000001800)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(r0, r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = msgget$private(0x0, 0x90) stat(&(0x7f0000000300)='./file1\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r5, 0x0) r6 = getegid() keyctl$chown(0x4, 0x0, 0x0, r6) r7 = gettid() process_vm_writev(r7, &(0x7f0000002580)=[{&(0x7f0000000140)=""/89, 0x59}, {&(0x7f00000001c0)=""/175, 0xaf}, {&(0x7f0000000280)=""/4096, 0x1000}], 0x3, &(0x7f0000003840)=[{&(0x7f0000002640)=""/105, 0x69}, {0xfffffffffffffffe, 0x10}], 0x2, 0x0) msgctl$IPC_SET(r4, 0x1, &(0x7f0000000380)={{0x3, r0, r1, r5, r6, 0x19d, 0x1ff}, 0x0, 0x0, 0x3ff, 0x0, 0x20, 0x3, 0x4, 0x3ff, 0x6, 0x0, r7, 0xffffffffffffffff}) r8 = getpid() sendmsg$netlink(r3, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)={0x10}, 0x10}], 0x1, &(0x7f0000007e00)=[@cred={{0x1c, 0x1, 0x2, {r8}}}], 0x20}, 0x0) r9 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0) epoll_pwait(r9, &(0x7f0000000100)=[{}], 0x1, 0x0, &(0x7f0000000140)={[0x1ff]}, 0x8) openat(r9, &(0x7f0000000200)='./file0\x00', 0x400800, 0x14) r10 = fork() r11 = fork() kcmp$KCMP_EPOLL_TFD(r10, r11, 0x7, r9, &(0x7f00000001c0)={r9, 0xffffffffffffffff, 0x7}) 09:43:34 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) (fail_nth: 6) [ 1583.771391] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1583.776716] EXT4-fs (loop6): corrupt root inode, run e2fsck [ 1583.777388] EXT4-fs (loop6): mount failed [ 1583.779082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1583.794543] loop4: detected capacity change from 0 to 255 [ 1583.797308] loop0: detected capacity change from 0 to 40 [ 1583.799173] FAULT_INJECTION: forcing a failure. [ 1583.799173] name failslab, interval 1, probability 0, space 0, times 0 [ 1583.801475] CPU: 0 PID: 10019 Comm: syz-executor.1 Not tainted 5.17.0-next-20220401 #1 [ 1583.803061] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1583.805330] Call Trace: [ 1583.805836] [ 1583.806283] dump_stack_lvl+0x8b/0xb3 [ 1583.807065] should_fail.cold+0x5/0xa [ 1583.807860] ? __kernfs_new_node+0xd4/0x8b0 [ 1583.808718] should_failslab+0x5/0x10 [ 1583.809480] kmem_cache_alloc+0x5b/0x480 [ 1583.810304] __kernfs_new_node+0xd4/0x8b0 [ 1583.811130] ? kernfs_add_one+0x3c6/0x550 [ 1583.811349] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10007 comm=syz-executor.3 [ 1583.811979] ? kernfs_path_from_node+0x60/0x60 [ 1583.814188] ? lock_is_held_type+0xd7/0x130 [ 1583.815063] ? up_write+0x148/0x460 [ 1583.815794] ? kernfs_activate+0x1c4/0x240 [ 1583.816650] kernfs_new_node+0x93/0x120 [ 1583.817454] __kernfs_create_file+0x51/0x350 [ 1583.818335] sysfs_add_file_mode_ns+0x218/0x430 [ 1583.819278] ? component_del+0x4c0/0x4c0 [ 1583.820107] internal_create_group+0x322/0xb20 09:43:34 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d9f4655fd9f4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {&(0x7f0000010400)="0200000003000000040000006a000f000300040000000000000000000f00bc0f", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d9f4655fd9f4655fd9f4655f0000000000000400", 0x1c, 0x2100}], 0x0, &(0x7f0000000180)={[{@journal_dev={'journal_dev', 0x3d, 0x7}}]}) [ 1583.821024] ? sysfs_remove_group+0x170/0x170 [ 1583.822076] ? loop_configure+0x1940/0x1940 [ 1583.822942] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 1583.823956] ? __loop_update_dio+0x2a3/0x620 [ 1583.824842] loop_configure+0xe81/0x1940 [ 1583.825685] lo_ioctl+0x782/0x1850 [ 1583.826398] ? __x64_sys_openat+0x13f/0x1f0 [ 1583.827272] ? loop_set_status_old+0x1b0/0x1b0 [ 1583.828200] ? avc_ss_reset+0x180/0x180 [ 1583.829014] ? __lock_acquire+0xbac/0x6120 [ 1583.829940] ? loop_set_status_old+0x1b0/0x1b0 [ 1583.830867] blkdev_ioctl+0x356/0x7f0 [ 1583.831648] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 1583.832601] ? selinux_file_ioctl+0xb1/0x260 [ 1583.833485] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1583.834594] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 1583.835560] __x64_sys_ioctl+0x196/0x210 [ 1583.836396] do_syscall_64+0x3b/0x90 [ 1583.836508] FAULT_INJECTION: forcing a failure. [ 1583.836508] name failslab, interval 1, probability 0, space 0, times 0 [ 1583.837141] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1583.839437] RIP: 0033:0x7f72f8f588d7 [ 1583.840188] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1583.843876] RSP: 002b:00007f72f64cdf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1583.845385] RAX: ffffffffffffffda RBX: 00007f72f8fa2970 RCX: 00007f72f8f588d7 [ 1583.846781] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1583.848207] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1583.849607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1583.851012] R13: 0000000000000004 R14: 00000000200004f0 R15: 0000000000000002 [ 1583.852447] [ 1583.852908] CPU: 1 PID: 10024 Comm: syz-executor.2 Not tainted 5.17.0-next-20220401 #1 [ 1583.853836] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1583.855121] Call Trace: [ 1583.855401] [ 1583.855657] dump_stack_lvl+0x8b/0xb3 [ 1583.856094] should_fail.cold+0x5/0xa [ 1583.856518] ? create_object.isra.0+0x3a/0xa20 [ 1583.856573] loop1: detected capacity change from 0 to 64 [ 1583.857028] should_failslab+0x5/0x10 [ 1583.857046] kmem_cache_alloc+0x5b/0x480 [ 1583.857069] create_object.isra.0+0x3a/0xa20 [ 1583.857083] ? kasan_unpoison+0x23/0x50 [ 1583.859866] __kmalloc+0x25b/0x440 [ 1583.860262] iter_file_splice_write+0x165/0xc90 [ 1583.860787] ? generic_file_read_iter+0x3a1/0x530 [ 1583.861318] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 1583.861877] ? generic_file_splice_read+0x3ea/0x5d0 [ 1583.862431] ? page_cache_pipe_buf_confirm+0x5b0/0x5b0 [ 1583.863014] ? pipe_to_user+0x170/0x170 [ 1583.863447] ? inode_security+0x105/0x130 [ 1583.863924] ? security_file_permission+0xb1/0xd0 [ 1583.864454] ? page_cache_pipe_buf_confirm+0x5b0/0x5b0 [ 1583.865032] direct_splice_actor+0x10f/0x170 [ 1583.865514] splice_direct_to_actor+0x350/0x8e0 [ 1583.866040] ? pipe_to_sendpage+0x380/0x380 [ 1583.866513] ? do_splice_to+0x240/0x240 [ 1583.866950] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1583.867559] ? security_file_permission+0xb1/0xd0 [ 1583.868103] do_splice_direct+0x1b8/0x280 [ 1583.868562] ? splice_direct_to_actor+0x8e0/0x8e0 [ 1583.869100] ? lock_is_held_type+0xd7/0x130 [ 1583.869581] do_sendfile+0xad7/0x1230 [ 1583.870011] ? __ia32_compat_sys_preadv64+0x2e0/0x2e0 [ 1583.870592] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1583.871184] ? vfs_write+0x422/0xac0 [ 1583.871585] __x64_sys_sendfile64+0x1cd/0x210 [ 1583.872075] ? __ia32_compat_sys_sendfile64+0x210/0x210 [ 1583.872661] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1583.873214] do_syscall_64+0x3b/0x90 [ 1583.873612] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1583.874159] RIP: 0033:0x7fdc09c89b19 [ 1583.874569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1583.876533] RSP: 002b:00007fdc071de188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1583.877361] RAX: ffffffffffffffda RBX: 00007fdc09d9d020 RCX: 00007fdc09c89b19 [ 1583.878149] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 1583.878911] RBP: 00007fdc071de1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1583.879700] R10: 00000ffffffff000 R11: 0000000000000246 R12: 0000000000000001 [ 1583.880476] R13: 00007ffd3c98ba1f R14: 00007fdc071de300 R15: 0000000000022000 [ 1583.881249] [ 1583.883605] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1583.907784] FAULT_INJECTION: forcing a failure. [ 1583.907784] name failslab, interval 1, probability 0, space 0, times 0 [ 1583.909029] CPU: 1 PID: 10017 Comm: syz-executor.4 Not tainted 5.17.0-next-20220401 #1 [ 1583.909904] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1583.911131] Call Trace: [ 1583.911411] [ 1583.911670] dump_stack_lvl+0x8b/0xb3 [ 1583.912126] should_fail.cold+0x5/0xa [ 1583.912577] ? mempool_alloc+0x148/0x360 [ 1583.913053] ? create_object.isra.0+0x3a/0xa20 [ 1583.913547] should_failslab+0x5/0x10 [ 1583.913960] kmem_cache_alloc+0x5b/0x480 [ 1583.914399] create_object.isra.0+0x3a/0xa20 [ 1583.914876] ? kasan_unpoison+0x23/0x50 [ 1583.915306] kmem_cache_alloc+0x239/0x480 [ 1583.915753] ? mempool_free+0x3b0/0x3b0 [ 1583.916179] mempool_alloc+0x148/0x360 [ 1583.916607] ? mempool_resize+0x7d0/0x7d0 [ 1583.917054] ? mempool_resize+0x7d0/0x7d0 [ 1583.917514] ? lock_chain_count+0x20/0x20 [ 1583.917966] ? lock_chain_count+0x20/0x20 [ 1583.918412] bvec_alloc+0x16b/0x200 [ 1583.918819] bio_alloc_bioset+0x420/0x780 [ 1583.919280] ? bvec_alloc+0x200/0x200 [ 1583.919719] ? __kmalloc_node+0xb0/0x470 [ 1583.920165] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1583.920765] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1583.921304] ? zero_user_segments.constprop.0+0x2b0/0x540 [ 1583.921902] __mpage_writepage+0xe13/0x1750 [ 1583.922373] ? mark_lock.part.0+0xef/0x2f60 [ 1583.922846] ? mpage_readpage+0x140/0x140 [ 1583.923300] ? lock_is_held_type+0xd7/0x130 [ 1583.923774] ? find_held_lock+0x2c/0x110 [ 1583.924226] ? lock_release+0x3b2/0x6f0 [ 1583.924663] ? folio_clear_dirty_for_io+0x26e/0x760 [ 1583.925210] ? lock_downgrade+0x6d0/0x6d0 [ 1583.925672] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1583.926275] ? percpu_counter_add_batch+0xb4/0x170 [ 1583.926817] ? lock_is_held_type+0xd7/0x130 [ 1583.927297] write_cache_pages+0x491/0x1180 [ 1583.927769] ? find_held_lock+0x2c/0x110 [ 1583.928208] ? mpage_readpage+0x140/0x140 [ 1583.928664] ? percpu_ref_put_many.constprop.0+0x270/0x270 [ 1583.929271] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1583.929850] ? fat_add_cluster+0xf0/0xf0 [ 1583.930293] ? fat_readahead+0x20/0x20 [ 1583.930713] mpage_writepages+0xd8/0x1a0 [ 1583.931163] ? mpage_end_io+0x2c0/0x2c0 [ 1583.931599] ? fat_add_cluster+0xf0/0xf0 [ 1583.932069] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1583.932639] do_writepages+0x1b0/0x690 [ 1583.933076] ? writeback_set_ratelimit+0x150/0x150 [ 1583.933607] ? lock_release+0x3b2/0x6f0 [ 1583.934027] ? wbc_attach_and_unlock_inode+0x8a/0x8d0 [ 1583.934585] ? lock_downgrade+0x6d0/0x6d0 [ 1583.935038] ? lock_release+0x6f0/0x6f0 [ 1583.935468] ? do_raw_spin_lock+0x121/0x260 [ 1583.935952] ? do_raw_spin_unlock+0x4f/0x210 [ 1583.936433] ? _raw_spin_unlock+0x24/0x40 [ 1583.936874] ? wbc_attach_and_unlock_inode+0x8a/0x8d0 [ 1583.937441] filemap_fdatawrite_wbc+0x143/0x1b0 [ 1583.937948] file_write_and_wait_range+0x163/0x1e0 [ 1583.938483] ? file_fdatawait_range+0x60/0x60 [ 1583.938961] ? do_raw_spin_lock+0x121/0x260 [ 1583.939434] ? rwlock_bug.part.0+0x90/0x90 [ 1583.939896] __generic_file_fsync+0x74/0x1f0 [ 1583.940379] fat_file_fsync+0x73/0x200 [ 1583.940795] ? fat_trim_fs+0xfc0/0xfc0 [ 1583.941205] vfs_fsync_range+0x13d/0x230 [ 1583.941642] generic_file_write_iter+0x195/0x220 [ 1583.942161] do_iter_readv_writev+0x3d8/0x650 [ 1583.942638] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1583.943231] ? new_sync_write+0x560/0x560 [ 1583.943683] ? avc_policy_seqno+0x9/0x70 [ 1583.944131] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 1583.944671] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1583.945268] ? security_file_permission+0xb1/0xd0 [ 1583.945797] do_iter_write+0x187/0x6f0 [ 1583.946212] ? lock_is_held_type+0xd7/0x130 [ 1583.946682] vfs_iter_write+0x70/0xa0 [ 1583.947093] iter_file_splice_write+0x722/0xc90 [ 1583.947599] ? generic_file_splice_read+0x3ea/0x5d0 [ 1583.948142] ? page_cache_pipe_buf_confirm+0x5b0/0x5b0 [ 1583.948701] ? pipe_to_user+0x170/0x170 [ 1583.949135] ? inode_security+0x105/0x130 [ 1583.949582] ? security_file_permission+0xb1/0xd0 [ 1583.950109] ? page_cache_pipe_buf_confirm+0x5b0/0x5b0 [ 1583.950677] direct_splice_actor+0x10f/0x170 [ 1583.951147] splice_direct_to_actor+0x350/0x8e0 [ 1583.951658] ? pipe_to_sendpage+0x380/0x380 [ 1583.952135] ? do_splice_to+0x240/0x240 [ 1583.952567] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1583.953154] ? security_file_permission+0xb1/0xd0 [ 1583.953680] do_splice_direct+0x1b8/0x280 [ 1583.954127] ? splice_direct_to_actor+0x8e0/0x8e0 [ 1583.954661] ? lock_is_held_type+0xd7/0x130 [ 1583.955142] do_sendfile+0xad7/0x1230 [ 1583.955571] ? __ia32_compat_sys_preadv64+0x2e0/0x2e0 [ 1583.956153] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1583.956755] ? vfs_write+0x422/0xac0 [ 1583.957167] __x64_sys_sendfile64+0x1cd/0x210 [ 1583.957667] ? __ia32_compat_sys_sendfile64+0x210/0x210 [ 1583.958258] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1583.958829] do_syscall_64+0x3b/0x90 [ 1583.959228] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1583.959801] RIP: 0033:0x7f10081d2b19 [ 1583.960210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1583.962789] RSP: 002b:00007f1005748188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1583.964514] RAX: ffffffffffffffda RBX: 00007f10082e5f60 RCX: 00007f10081d2b19 [ 1583.965997] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 1583.967485] RBP: 00007f10057481d0 R08: 0000000000000000 R09: 0000000000000000 [ 1583.969028] R10: 00000ffffffff000 R11: 0000000000000246 R12: 0000000000000002 [ 1583.970547] R13: 00007fff5bac1b9f R14: 00007f1005748300 R15: 0000000000022000 [ 1583.972110] [ 1583.981252] loop6: detected capacity change from 0 to 512 [ 1583.999275] EXT4-fs (loop6): corrupt root inode, run e2fsck [ 1584.000940] EXT4-fs (loop6): mount failed [ 1584.131388] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1584.169261] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 09:43:49 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x5) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) (fail_nth: 11) 09:43:49 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d9f4655fd9f4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {&(0x7f0000010400)="0200000003000000040000006a000f000300040000000000000000000f00bc0f", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d9f4655fd9f4655fd9f4655f000000000000040004", 0x1d}], 0x0, &(0x7f0000000180)={[{@journal_dev={'journal_dev', 0x3d, 0x7}}]}) 09:43:49 executing program 3: ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f00000003c0)={0x2}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0xefddf5a77aff70ab) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, &(0x7f0000000440)) bind$unix(r0, &(0x7f0000000c80)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x5b5e2130c374d96a, './file0\x00'}, 0x6e) sendmsg$unix(r0, &(0x7f0000000380)={&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000000)="dee9b6fdf956d65041466c907f92dc0b", 0x10}, {&(0x7f0000000180)="b6008069d8ad12ca5f8cd705ee9a82ac2900967df18c25e9ff084c62723a4e6c1e084365187efcdd9853c394ad03d5a4d23bb99a0ef8ae24a12023f278d31e8a15aee9c43661dd4636e5f3ca88c8a19958e6d9cdad7174078f29371ff5a082b0c48764af510bb5319080d03da0ed2a6e43dc8859770bd6960522c6173b674c5c844e5a81c5a6e4ca28dbdafcf38b27996feebc738b3871ab9f3afd3f0f7da9ba3b8a5ff4fcc6224c23443a6c80e39947c3798cb8f336673f0f", 0xb9}, {&(0x7f0000000240)="2a64cca4273d538c740fa3f97957c3f1dac736157576b043465f5a580356d6090f7a9d8882a7ba1e280227b42b47d520952370093be92908bf9ddd1063346cb775260346a0555833ff6012fa35ee542606405bfe0ef2bb84ec80c4ca8bb9fb7b872b470ae4297d0ccdf9d25302f1e67f90b37cc0c321433946d97f4b01b595a67e91e68db8949ebf9e3f74e0175ca5790a74db89f72f2ca06a9897cfde0c39607ef0423470d8dda1b103019c3b61c97b8600954ccc94a96c0d780b75154307cdbd079fc159ed660215688297a5e7c8a18d7e1f1babf021392faf45513ac4a9b3914daf6df24430b816", 0xe9}], 0x3, 0x0, 0x0, 0x40804}, 0x844) 09:43:49 executing program 7: syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=@ctrl_frame=@bar={{}, {}, @device_b, @device_a, @multi={{0x0, 0x1, 0x1, 0x0, 0x1}, [{0x0, 0x3, {0x5, 0xe9}, "9eb08feb44d860f0"}]}}, 0x1e) 09:43:49 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000010000)="eb58906d6b66732e66617400021e20000400000004f8", 0x16}, {0x0, 0x0, 0x4000}], 0x100c000, &(0x7f0000000040)) (fail_nth: 58) [ 1599.550758] FAULT_INJECTION: forcing a failure. [ 1599.550758] name failslab, interval 1, probability 0, space 0, times 0 [ 1599.553035] CPU: 1 PID: 10044 Comm: syz-executor.1 Not tainted 5.17.0-next-20220401 #1 [ 1599.554595] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1599.555517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1599.556817] Call Trace: [ 1599.556827] [ 1599.556837] dump_stack_lvl+0x8b/0xb3 [ 1599.559650] should_fail.cold+0x5/0xa [ 1599.560421] ? create_object.isra.0+0x3a/0xa20 [ 1599.561322] should_failslab+0x5/0x10 [ 1599.562074] kmem_cache_alloc+0x5b/0x480 [ 1599.562887] create_object.isra.0+0x3a/0xa20 [ 1599.563749] ? kasan_unpoison+0x23/0x50 [ 1599.564543] kmem_cache_alloc+0x239/0x480 [ 1599.565371] __kernfs_new_node+0xd4/0x8b0 09:43:49 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000040)='./file1\x00', 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) 09:43:49 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f00000000c0)='\"', 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r2, &(0x7f0000000640)=[{&(0x7f0000000140)="00005300d6", 0x5}], 0x1, 0x7fffffc, 0x0) sendfile(r1, r1, 0x0, 0x80000000) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000000)=[0x10000, 0x9]) 09:43:49 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) (fail_nth: 7) [ 1599.566190] ? kernfs_add_one+0x3c6/0x550 [ 1599.567177] ? kernfs_path_from_node+0x60/0x60 [ 1599.568215] ? lock_is_held_type+0xd7/0x130 [ 1599.569080] ? up_write+0x148/0x460 [ 1599.569795] ? kernfs_activate+0x1c4/0x240 [ 1599.570642] kernfs_new_node+0x93/0x120 [ 1599.571440] __kernfs_create_file+0x51/0x350 [ 1599.572331] sysfs_add_file_mode_ns+0x218/0x430 [ 1599.573261] ? component_del+0x4c0/0x4c0 [ 1599.574065] internal_create_group+0x322/0xb20 [ 1599.574970] ? sysfs_remove_group+0x170/0x170 [ 1599.575855] ? loop_configure+0x1940/0x1940 [ 1599.576737] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 1599.577725] ? __loop_update_dio+0x2a3/0x620 [ 1599.578604] loop_configure+0xe81/0x1940 [ 1599.579438] lo_ioctl+0x782/0x1850 [ 1599.580158] ? __x64_sys_openat+0x13f/0x1f0 [ 1599.581026] ? loop_set_status_old+0x1b0/0x1b0 [ 1599.581935] ? avc_ss_reset+0x180/0x180 [ 1599.582754] ? __lock_acquire+0xbac/0x6120 [ 1599.583670] ? loop_set_status_old+0x1b0/0x1b0 [ 1599.584585] blkdev_ioctl+0x356/0x7f0 [ 1599.585362] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 1599.586320] ? selinux_file_ioctl+0xb1/0x260 [ 1599.587215] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1599.587570] loop2: detected capacity change from 0 to 255 [ 1599.588337] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 1599.589829] __x64_sys_ioctl+0x196/0x210 [ 1599.590657] do_syscall_64+0x3b/0x90 [ 1599.591400] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1599.592430] RIP: 0033:0x7f72f8f588d7 [ 1599.593171] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1599.596790] RSP: 002b:00007f72f64cdf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1599.598302] RAX: ffffffffffffffda RBX: 00007f72f8fa2970 RCX: 00007f72f8f588d7 [ 1599.599681] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1599.601113] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1599.602531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1599.603962] R13: 0000000000000004 R14: 00000000200004f0 R15: 0000000000000002 [ 1599.604279] loop6: detected capacity change from 0 to 512 [ 1599.605399] [ 1599.611793] loop0: detected capacity change from 0 to 40 [ 1599.616287] EXT4-fs error (device loop6): __ext4_fill_super:5311: inode #2: comm syz-executor.6: iget: root inode unallocated [ 1599.618256] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1599.619688] EXT4-fs (loop6): get root inode failed [ 1599.620281] EXT4-fs (loop6): mount failed [ 1599.628801] FAULT_INJECTION: forcing a failure. [ 1599.628801] name failslab, interval 1, probability 0, space 0, times 0 [ 1599.630160] CPU: 0 PID: 10046 Comm: syz-executor.2 Not tainted 5.17.0-next-20220401 #1 [ 1599.630802] loop4: detected capacity change from 0 to 255 [ 1599.630936] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1599.633148] Call Trace: [ 1599.633399] [ 1599.633617] dump_stack_lvl+0x8b/0xb3 [ 1599.634007] should_fail.cold+0x5/0xa [ 1599.634389] ? mempool_alloc+0x148/0x360 [ 1599.634792] ? mempool_free+0x3b0/0x3b0 [ 1599.635184] should_failslab+0x5/0x10 [ 1599.635563] kmem_cache_alloc+0x5b/0x480 [ 1599.635986] ? mempool_free+0x3b0/0x3b0 [ 1599.636381] mempool_alloc+0x148/0x360 [ 1599.636769] ? mempool_resize+0x7d0/0x7d0 [ 1599.637177] ? lock_chain_count+0x20/0x20 [ 1599.637696] ? lock_chain_count+0x20/0x20 [ 1599.638159] ? __lock_acquire+0xbac/0x6120 [ 1599.638600] bio_alloc_bioset+0x396/0x780 [ 1599.639052] ? bvec_alloc+0x200/0x200 [ 1599.639454] ? __kmalloc_node+0xb0/0x470 [ 1599.639886] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1599.640474] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1599.640997] ? zero_user_segments.constprop.0+0x2b0/0x540 [ 1599.641581] __mpage_writepage+0xe13/0x1750 [ 1599.642039] ? mark_lock.part.0+0xef/0x2f60 [ 1599.642498] ? mpage_readpage+0x140/0x140 [ 1599.642940] ? lock_is_held_type+0xd7/0x130 [ 1599.643395] ? find_held_lock+0x2c/0x110 [ 1599.643823] ? lock_release+0x3b2/0x6f0 [ 1599.644245] ? folio_clear_dirty_for_io+0x26e/0x760 [ 1599.644767] ? lock_downgrade+0x6d0/0x6d0 [ 1599.645203] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1599.645781] ? percpu_counter_add_batch+0xb4/0x170 [ 1599.646300] ? lock_is_held_type+0xd7/0x130 [ 1599.646755] write_cache_pages+0x491/0x1180 [ 1599.647204] ? find_held_lock+0x2c/0x110 [ 1599.647626] ? mpage_readpage+0x140/0x140 [ 1599.648084] ? percpu_ref_put_many.constprop.0+0x270/0x270 [ 1599.648674] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1599.649226] ? fat_add_cluster+0xf0/0xf0 [ 1599.649654] ? fat_readahead+0x20/0x20 [ 1599.650059] mpage_writepages+0xd8/0x1a0 [ 1599.650486] ? mpage_end_io+0x2c0/0x2c0 [ 1599.650905] ? fat_add_cluster+0xf0/0xf0 [ 1599.651340] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1599.651901] do_writepages+0x1b0/0x690 [ 1599.652317] ? writeback_set_ratelimit+0x150/0x150 [ 1599.652831] ? lock_release+0x3b2/0x6f0 [ 1599.653265] ? wbc_attach_and_unlock_inode+0x8a/0x8d0 [ 1599.653806] ? lock_downgrade+0x6d0/0x6d0 [ 1599.654239] ? lock_release+0x6f0/0x6f0 [ 1599.654655] ? do_raw_spin_lock+0x121/0x260 [ 1599.655107] ? do_raw_spin_unlock+0x4f/0x210 [ 1599.655569] ? _raw_spin_unlock+0x24/0x40 [ 1599.656024] ? wbc_attach_and_unlock_inode+0x8a/0x8d0 [ 1599.656561] filemap_fdatawrite_wbc+0x143/0x1b0 [ 1599.657049] file_write_and_wait_range+0x163/0x1e0 [ 1599.657581] ? file_fdatawait_range+0x60/0x60 [ 1599.658058] ? do_raw_spin_lock+0x121/0x260 [ 1599.658507] ? rwlock_bug.part.0+0x90/0x90 [ 1599.658952] __generic_file_fsync+0x74/0x1f0 [ 1599.659415] fat_file_fsync+0x73/0x200 [ 1599.659816] ? fat_trim_fs+0xfc0/0xfc0 [ 1599.660233] vfs_fsync_range+0x13d/0x230 [ 1599.660663] generic_file_write_iter+0x195/0x220 [ 1599.661160] do_iter_readv_writev+0x3d8/0x650 [ 1599.661631] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1599.662203] ? new_sync_write+0x560/0x560 [ 1599.662635] ? avc_policy_seqno+0x9/0x70 [ 1599.663059] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 1599.663580] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1599.664172] ? security_file_permission+0xb1/0xd0 [ 1599.664679] do_iter_write+0x187/0x6f0 [ 1599.665090] ? lock_is_held_type+0xd7/0x130 [ 1599.665542] vfs_iter_write+0x70/0xa0 [ 1599.665944] iter_file_splice_write+0x722/0xc90 [ 1599.666438] ? generic_file_splice_read+0x3ea/0x5d0 [ 1599.666956] ? page_cache_pipe_buf_confirm+0x5b0/0x5b0 [ 1599.667506] ? pipe_to_user+0x170/0x170 [ 1599.667931] ? inode_security+0x105/0x130 [ 1599.668370] ? security_file_permission+0xb1/0xd0 [ 1599.668873] ? page_cache_pipe_buf_confirm+0x5b0/0x5b0 [ 1599.669419] direct_splice_actor+0x10f/0x170 [ 1599.669884] splice_direct_to_actor+0x350/0x8e0 [ 1599.670371] ? pipe_to_sendpage+0x380/0x380 [ 1599.670822] ? do_splice_to+0x240/0x240 [ 1599.671236] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1599.671806] ? security_file_permission+0xb1/0xd0 [ 1599.672324] do_splice_direct+0x1b8/0x280 [ 1599.672756] ? splice_direct_to_actor+0x8e0/0x8e0 [ 1599.673266] ? lock_is_held_type+0xd7/0x130 [ 1599.673719] do_sendfile+0xad7/0x1230 [ 1599.674125] ? __ia32_compat_sys_preadv64+0x2e0/0x2e0 [ 1599.674664] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1599.675234] ? vfs_write+0x422/0xac0 [ 1599.675621] __x64_sys_sendfile64+0x1cd/0x210 [ 1599.676111] ? __ia32_compat_sys_sendfile64+0x210/0x210 [ 1599.676672] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1599.677214] do_syscall_64+0x3b/0x90 [ 1599.677600] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1599.678139] RIP: 0033:0x7fdc09c89b19 [ 1599.678521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1599.680427] RSP: 002b:00007fdc071ff188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1599.681214] RAX: ffffffffffffffda RBX: 00007fdc09d9cf60 RCX: 00007fdc09c89b19 [ 1599.681946] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 1599.682677] RBP: 00007fdc071ff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1599.683411] R10: 00000ffffffff000 R11: 0000000000000246 R12: 0000000000000001 [ 1599.684152] R13: 00007ffd3c98ba1f R14: 00007fdc071ff300 R15: 0000000000022000 [ 1599.684898] 09:43:50 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000008a00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) bind$802154_dgram(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x3, @empty, 0xffffff01}, 0x1c) recvfrom(r0, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="c3", 0x1}], 0x1}}], 0x1, 0x4005) [ 1599.687892] loop1: detected capacity change from 0 to 64 [ 1599.696485] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1599.727736] FAULT_INJECTION: forcing a failure. [ 1599.727736] name failslab, interval 1, probability 0, space 0, times 0 [ 1599.730089] CPU: 1 PID: 10061 Comm: syz-executor.4 Not tainted 5.17.0-next-20220401 #1 [ 1599.731646] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1599.733861] Call Trace: [ 1599.734359] [ 1599.734794] dump_stack_lvl+0x8b/0xb3 [ 1599.735559] should_fail.cold+0x5/0xa [ 1599.736330] ? mempool_alloc+0x148/0x360 [ 1599.737138] ? mempool_free+0x3b0/0x3b0 [ 1599.737927] should_failslab+0x5/0x10 [ 1599.738678] kmem_cache_alloc+0x5b/0x480 [ 1599.739491] ? mempool_free+0x3b0/0x3b0 [ 1599.740304] mempool_alloc+0x148/0x360 [ 1599.741083] ? lock_chain_count+0x20/0x20 [ 1599.741906] ? mempool_resize+0x7d0/0x7d0 [ 1599.742740] ? lock_is_held_type+0xd7/0x130 [ 1599.743592] ? find_held_lock+0x2c/0x110 [ 1599.744410] bio_alloc_bioset+0x396/0x780 [ 1599.745248] ? bvec_alloc+0x200/0x200 [ 1599.746005] ? unlock_page_memcg+0xbe/0x230 [ 1599.746872] ? lock_downgrade+0x6d0/0x6d0 [ 1599.747702] submit_bh_wbc+0x273/0x670 [ 1599.748500] __sync_dirty_buffer+0x168/0x3f0 [ 1599.749375] __fat_write_inode+0x7ca/0x990 [ 1599.750233] ? fat_direct_IO+0x390/0x390 [ 1599.751032] ? do_raw_spin_lock+0x121/0x260 [ 1599.751906] fat_write_inode+0x8f/0x180 09:43:50 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d9f4655fd9f4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {&(0x7f0000010400)="0200000003000000040000006a000f000300040000000000000000000f00bc0f", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d9f4655fd9f4655fd9f4655f000000000000040004", 0x1d}], 0x0, &(0x7f0000000180)={[{@journal_dev={'journal_dev', 0x3d, 0x7}}]}) [ 1599.752694] __writeback_single_inode+0xa8a/0xf60 [ 1599.753826] writeback_single_inode+0x2a5/0x450 [ 1599.754752] sync_inode_metadata+0x93/0xd0 [ 1599.755586] ? write_inode_now+0x1d0/0x1d0 [ 1599.756454] ? rwlock_bug.part.0+0x90/0x90 [ 1599.757294] __generic_file_fsync+0x15f/0x1f0 [ 1599.758188] fat_file_fsync+0x73/0x200 [ 1599.758948] ? fat_trim_fs+0xfc0/0xfc0 [ 1599.759716] vfs_fsync_range+0x13d/0x230 [ 1599.760544] generic_file_write_iter+0x195/0x220 [ 1599.761486] do_iter_readv_writev+0x3d8/0x650 [ 1599.762375] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1599.763465] ? new_sync_write+0x560/0x560 [ 1599.764303] ? avc_policy_seqno+0x9/0x70 [ 1599.765107] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 1599.766098] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1599.767181] ? security_file_permission+0xb1/0xd0 [ 1599.768146] do_iter_write+0x187/0x6f0 [ 1599.768925] ? lock_is_held_type+0xd7/0x130 [ 1599.769790] vfs_iter_write+0x70/0xa0 09:43:50 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000010000)="eb58906d6b66732e66617400021e20000400000004f8", 0x16}, {0x0, 0x0, 0x4000}], 0x100c000, &(0x7f0000000040)) (fail_nth: 59) [ 1599.770555] iter_file_splice_write+0x722/0xc90 [ 1599.771606] ? generic_file_splice_read+0x3ea/0x5d0 [ 1599.772612] ? page_cache_pipe_buf_confirm+0x5b0/0x5b0 [ 1599.773646] ? pipe_to_user+0x170/0x170 [ 1599.774436] ? inode_security+0x105/0x130 [ 1599.775265] ? security_file_permission+0xb1/0xd0 [ 1599.775418] loop6: detected capacity change from 0 to 512 [ 1599.776223] ? page_cache_pipe_buf_confirm+0x5b0/0x5b0 [ 1599.777856] direct_splice_actor+0x10f/0x170 [ 1599.778728] splice_direct_to_actor+0x350/0x8e0 [ 1599.779651] ? pipe_to_sendpage+0x380/0x380 [ 1599.780536] ? do_splice_to+0x240/0x240 [ 1599.781326] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1599.782413] ? security_file_permission+0xb1/0xd0 [ 1599.783370] do_splice_direct+0x1b8/0x280 [ 1599.784199] ? splice_direct_to_actor+0x8e0/0x8e0 [ 1599.785168] ? lock_is_held_type+0xd7/0x130 [ 1599.786028] do_sendfile+0xad7/0x1230 [ 1599.786802] ? __ia32_compat_sys_preadv64+0x2e0/0x2e0 [ 1599.787838] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1599.788938] ? vfs_write+0x422/0xac0 [ 1599.789674] __x64_sys_sendfile64+0x1cd/0x210 [ 1599.790567] ? __ia32_compat_sys_sendfile64+0x210/0x210 [ 1599.791632] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1599.792676] do_syscall_64+0x3b/0x90 [ 1599.793408] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1599.794428] RIP: 0033:0x7f10081d2b19 [ 1599.795160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1599.798766] RSP: 002b:00007f1005748188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1599.800270] RAX: ffffffffffffffda RBX: 00007f10082e5f60 RCX: 00007f10081d2b19 [ 1599.801666] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 1599.803057] RBP: 00007f10057481d0 R08: 0000000000000000 R09: 0000000000000000 [ 1599.804460] R10: 00000ffffffff000 R11: 0000000000000246 R12: 0000000000000002 [ 1599.805856] R13: 00007fff5bac1b9f R14: 00007f1005748300 R15: 0000000000022000 [ 1599.807281] [ 1599.809714] kworker/u4:1: attempt to access beyond end of device [ 1599.809714] loop0: rw=1, want=128, limit=40 [ 1599.810900] Buffer I/O error on dev loop0, logical block 31, lost async page write [ 1599.812273] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 09:43:50 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000040)='./file1\x00', 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x8000000, 0x0) 09:43:50 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) (fail_nth: 8) 09:43:50 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000010000)="eb58906d6b66732e66617400021e20000400000004f8", 0x16}, {0x0, 0x0, 0x4000}], 0x100c000, &(0x7f0000000040)) [ 1599.866585] EXT4-fs error (device loop6): __ext4_fill_super:5311: inode #2: comm syz-executor.6: iget: root inode unallocated [ 1599.869257] EXT4-fs (loop6): get root inode failed [ 1599.869796] EXT4-fs (loop6): mount failed [ 1599.884214] loop0: detected capacity change from 0 to 40 [ 1599.907085] FAULT_INJECTION: forcing a failure. [ 1599.907085] name failslab, interval 1, probability 0, space 0, times 0 [ 1599.909548] CPU: 1 PID: 10076 Comm: syz-executor.2 Not tainted 5.17.0-next-20220401 #1 [ 1599.911143] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1599.913389] Call Trace: [ 1599.913901] [ 1599.914351] dump_stack_lvl+0x8b/0xb3 [ 1599.915130] should_fail.cold+0x5/0xa [ 1599.915905] ? create_object.isra.0+0x3a/0xa20 09:43:50 executing program 7: syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=@ctrl_frame=@bar={{}, {}, @device_b, @device_a, @multi}, 0x12) [ 1599.916821] should_failslab+0x5/0x10 [ 1599.917730] kmem_cache_alloc+0x5b/0x480 [ 1599.918548] create_object.isra.0+0x3a/0xa20 [ 1599.919417] ? kasan_unpoison+0x23/0x50 [ 1599.920221] __kmalloc+0x25b/0x440 [ 1599.920936] iter_file_splice_write+0x165/0xc90 [ 1599.921857] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1599.922961] ? generic_file_splice_read+0x3ea/0x5d0 [ 1599.923960] ? page_cache_pipe_buf_confirm+0x5b0/0x5b0 [ 1599.924997] ? pipe_to_user+0x170/0x170 09:43:50 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x5) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) (fail_nth: 12) [ 1599.925805] ? security_file_permission+0xb1/0xd0 [ 1599.926816] ? page_cache_pipe_buf_confirm+0x5b0/0x5b0 [ 1599.927859] direct_splice_actor+0x10f/0x170 [ 1599.927941] loop1: detected capacity change from 0 to 64 [ 1599.928748] splice_direct_to_actor+0x350/0x8e0 [ 1599.930257] ? pipe_to_sendpage+0x380/0x380 [ 1599.931124] ? do_splice_to+0x240/0x240 [ 1599.931918] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1599.933016] ? security_file_permission+0xb1/0xd0 [ 1599.933974] do_splice_direct+0x1b8/0x280 [ 1599.934796] ? splice_direct_to_actor+0x8e0/0x8e0 [ 1599.935762] ? lock_is_held_type+0xd7/0x130 [ 1599.936642] do_sendfile+0xad7/0x1230 [ 1599.937420] ? __ia32_compat_sys_preadv64+0x2e0/0x2e0 [ 1599.938454] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1599.939541] ? vfs_write+0x422/0xac0 [ 1599.940286] __x64_sys_sendfile64+0x1cd/0x210 [ 1599.941182] ? __ia32_compat_sys_sendfile64+0x210/0x210 [ 1599.942245] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1599.943274] do_syscall_64+0x3b/0x90 [ 1599.944031] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1599.945051] RIP: 0033:0x7fdc09c89b19 [ 1599.945777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1599.949392] RSP: 002b:00007fdc071ff188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1599.950882] RAX: ffffffffffffffda RBX: 00007fdc09d9cf60 RCX: 00007fdc09c89b19 [ 1599.952286] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 1599.953682] RBP: 00007fdc071ff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1599.955078] R10: 00000ffffffff000 R11: 0000000000000246 R12: 0000000000000001 [ 1599.956492] R13: 00007ffd3c98ba1f R14: 00007fdc071ff300 R15: 0000000000022000 [ 1599.957916] [ 1599.959377] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1599.992619] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1600.088314] loop4: detected capacity change from 0 to 255 [ 1600.100087] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1600.121370] FAULT_INJECTION: forcing a failure. [ 1600.121370] name failslab, interval 1, probability 0, space 0, times 0 [ 1600.123604] CPU: 1 PID: 10084 Comm: syz-executor.4 Not tainted 5.17.0-next-20220401 #1 [ 1600.125202] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1600.127432] Call Trace: [ 1600.127954] [ 1600.128400] dump_stack_lvl+0x8b/0xb3 [ 1600.129197] should_fail.cold+0x5/0xa [ 1600.129983] ? create_object.isra.0+0x3a/0xa20 [ 1600.130887] should_failslab+0x5/0x10 [ 1600.131641] kmem_cache_alloc+0x5b/0x480 [ 1600.132479] create_object.isra.0+0x3a/0xa20 [ 1600.133344] ? kasan_unpoison+0x23/0x50 [ 1600.134134] kmem_cache_alloc+0x239/0x480 [ 1600.134960] ? mempool_free+0x3b0/0x3b0 [ 1600.135750] mempool_alloc+0x148/0x360 [ 1600.136536] ? lock_chain_count+0x20/0x20 [ 1600.137359] ? mempool_resize+0x7d0/0x7d0 [ 1600.138194] ? lock_is_held_type+0xd7/0x130 [ 1600.139050] ? find_held_lock+0x2c/0x110 [ 1600.139857] bio_alloc_bioset+0x396/0x780 [ 1600.140716] ? bvec_alloc+0x200/0x200 [ 1600.141472] ? unlock_page_memcg+0xbe/0x230 [ 1600.142332] ? lock_downgrade+0x6d0/0x6d0 [ 1600.143161] submit_bh_wbc+0x273/0x670 [ 1600.143947] __sync_dirty_buffer+0x168/0x3f0 [ 1600.144823] __fat_write_inode+0x7ca/0x990 [ 1600.145676] ? fat_direct_IO+0x390/0x390 [ 1600.146472] ? do_raw_spin_lock+0x121/0x260 [ 1600.147342] fat_write_inode+0x8f/0x180 [ 1600.148135] __writeback_single_inode+0xa8a/0xf60 [ 1600.149093] writeback_single_inode+0x2a5/0x450 [ 1600.150015] sync_inode_metadata+0x93/0xd0 [ 1600.150849] ? write_inode_now+0x1d0/0x1d0 [ 1600.151697] ? rwlock_bug.part.0+0x90/0x90 [ 1600.152561] __generic_file_fsync+0x15f/0x1f0 [ 1600.153462] fat_file_fsync+0x73/0x200 [ 1600.154223] ? fat_trim_fs+0xfc0/0xfc0 [ 1600.154991] vfs_fsync_range+0x13d/0x230 [ 1600.155803] generic_file_write_iter+0x195/0x220 [ 1600.156754] do_iter_readv_writev+0x3d8/0x650 [ 1600.157651] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1600.158745] ? new_sync_write+0x560/0x560 [ 1600.159568] ? avc_policy_seqno+0x9/0x70 [ 1600.160389] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 1600.161382] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1600.162464] ? security_file_permission+0xb1/0xd0 [ 1600.163423] do_iter_write+0x187/0x6f0 [ 1600.164212] ? lock_is_held_type+0xd7/0x130 [ 1600.165079] vfs_iter_write+0x70/0xa0 [ 1600.165843] iter_file_splice_write+0x722/0xc90 [ 1600.166781] ? generic_file_splice_read+0x3ea/0x5d0 [ 1600.167772] ? page_cache_pipe_buf_confirm+0x5b0/0x5b0 [ 1600.168816] ? pipe_to_user+0x170/0x170 [ 1600.169613] ? inode_security+0x105/0x130 [ 1600.170450] ? security_file_permission+0xb1/0xd0 [ 1600.171402] ? page_cache_pipe_buf_confirm+0x5b0/0x5b0 [ 1600.172460] direct_splice_actor+0x10f/0x170 [ 1600.173334] splice_direct_to_actor+0x350/0x8e0 [ 1600.174259] ? pipe_to_sendpage+0x380/0x380 [ 1600.175118] ? do_splice_to+0x240/0x240 [ 1600.175911] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1600.176998] ? security_file_permission+0xb1/0xd0 [ 1600.177954] do_splice_direct+0x1b8/0x280 [ 1600.178775] ? splice_direct_to_actor+0x8e0/0x8e0 [ 1600.179739] ? lock_is_held_type+0xd7/0x130 [ 1600.180620] do_sendfile+0xad7/0x1230 [ 1600.181395] ? __ia32_compat_sys_preadv64+0x2e0/0x2e0 [ 1600.182427] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1600.183516] ? vfs_write+0x422/0xac0 [ 1600.184260] __x64_sys_sendfile64+0x1cd/0x210 [ 1600.185154] ? __ia32_compat_sys_sendfile64+0x210/0x210 [ 1600.186215] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1600.187246] do_syscall_64+0x3b/0x90 [ 1600.187986] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1600.189001] RIP: 0033:0x7f10081d2b19 [ 1600.189729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1600.193634] RSP: 002b:00007f1005748188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1600.195240] RAX: ffffffffffffffda RBX: 00007f10082e5f60 RCX: 00007f10081d2b19 [ 1600.196756] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 1600.198310] RBP: 00007f10057481d0 R08: 0000000000000000 R09: 0000000000000000 [ 1600.199847] R10: 00000ffffffff000 R11: 0000000000000246 R12: 0000000000000002 [ 1600.201342] R13: 00007fff5bac1b9f R14: 00007f1005748300 R15: 0000000000022000 [ 1600.202855] [ 1600.236953] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1614.326311] loop0: detected capacity change from 0 to 40 [ 1614.335918] loop4: detected capacity change from 0 to 255 09:44:04 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x2, 0x2, &(0x7f00000004c0)=[{&(0x7f0000010000)="eb58906d6b66732e66617400021e20000400000004f8", 0x16}, {0x0, 0x0, 0x4000}], 0x100c000, &(0x7f0000000040)) 09:44:04 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='attr\x00') r1 = openat$incfs(r0, &(0x7f0000000000)='.log\x00', 0x727b40, 0x0) socket$unix(0x1, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) fstatfs(r2, &(0x7f00000000c0)=""/46) stat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x9, 0x9, &(0x7f00000006c0)=[{&(0x7f0000000180)="e64ffd2602641bc29e38e386e640a28b96ebbcadbeaba345d21b3af1a433e323e0b0953b14e496d4d95d2aed57ed9d335d251ee66191915f0a2eedad4f840b5114bf57564a22ffbc8e4f76763407fdb7e773e917da6a3cee614f6482a483aabb12edf66e564867d5c6d50057c07333dc6a3b5ad20b858e135cff47e5bb86c80dc04da4d9abf3ae183b", 0x89, 0x7ff}, {&(0x7f0000000240)="329ddae94b6f3734832e2e3e71d4881f9897c46cfebe0cb83e28d4fedf968ab1434ae7b65aa6e59c4718785b153737125160095f764c7edad9c35680d970ef22fbb154c2accad21bc677f99949ac8a65f53da1871dafb987b685e07d", 0x5c, 0x1000}, {&(0x7f00000002c0)="a1bfdc7eca55e3a90665c95ca90e8450390750af4243db2e3e6b3127ba5aa776652cd9344f7e4fecd82e060778e80b725981eaf13a8420a39a692240f20c6b0e4c40f038b3e7fdd72858c4e520709a84db1f098128fc8a412f14896b5a3caaa4815249b050040a05f2a9593abcd691dc6cd0ecb38e646d1364a96898cf01c714578d", 0x82, 0xffffffff}, {&(0x7f0000000380)="32a2ed9d41d80c3f53baaa206ed81f9db9a6e101d8898f3b3a1097012f544b6e61d97afc016e48c93bb73092948a4d07f59b8a5c364c93b5168f06e733e2efa8cb4e3bc316b1e1e014e36577c72bb63574b6d8c87099531fe577e31609182a4104f5f2237ad939c0267821b5854353cc6a6e37d598538d5dc3251d87eb45f09390e97279b4c44022a5b55beeb9d25915062decab38b5", 0x96, 0x2}, {&(0x7f0000000440)="99e11593ff8c657996319904f66ce2c4a24d4bfb4471829ee69a89f3b54aed5b00431c848b0c1f8f99", 0x29, 0x8}, {&(0x7f0000000480)="a5fb1c18d5e0d8d592200d87f59a2c14277f11", 0x13, 0x40}, {&(0x7f00000004c0)="9690a6969bdd6506f86879d7ae880ade57c14891f3153ea4adb3979cedb5b8af32246ae0f721fd7c94347ffc4c06faeda33fb572839877f304c8e1bd66d805b16f1894b916c834863c43b6ea63bdac4ce03bdb4da77744764be3f132fd22930cd60339c39d1d497ad7d3cad772b128c5d0692d8487795a0f1fa987e0abc8103d662067b4ac745ddedfdf3e92b10dbcef54b793890e62ec642fdb3594a50bcb859824fc1d75f633de78a0cc1f9961873a1e107125f0e5ab750f8d63f7b78fa31b48d6245e19bcddc6e7c1382f4cb1f7", 0xcf, 0x80000001}, {&(0x7f00000005c0)="9dcb8e32576d510ed33338ee04940702def48ec04e75f8a9670328b2796e57c5265a3011dce2d050cbd1c96b8058a6cb091635bd9a1cee854ee67d7fc5a1e4deef03dad258997944627865e3fa165630b018c2e3dddeee6b9630fb9238bc071eec2eb85b1b558723e92d81e4860c04d12fae6c6210af8856b67a1d87627002f15ccd2023ba50703ab0", 0x89, 0x5}, {&(0x7f0000000680)="7713f848bfbffdcad9839d36a23450ec687415a2", 0x14, 0x3}], 0xc000, &(0x7f0000000880)={[{@huge_never}, {@huge_advise}, {@nr_blocks={'nr_blocks', 0x3d, [0x25, 0x37, 0x6b]}}, {@gid={'gid', 0x3d, r3}}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x36, 0x31, 0x38]}}], [{@measure}, {@smackfsdef={'smackfsdef', 0x3d, 'attr\x00'}}, {@euid_eq}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}]}) 09:44:04 executing program 7: mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=ANY=[@ANYBLOB="000000080211000001080211000088dde886"], 0x12) 09:44:04 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/psched\x00') io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) tkill(0x0, 0x33) recvmmsg$unix(r1, &(0x7f0000000600)=[{{&(0x7f0000000180), 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000980)=""/102400, 0x19000}, {&(0x7f0000000240)=""/188, 0xbc}, {&(0x7f0000000300)=""/174, 0xae}, {&(0x7f00000003c0)=""/21, 0x15}, {&(0x7f0000000400)=""/131, 0x83}, {&(0x7f0000000740)=""/110, 0x6e}, {&(0x7f0000000540)=""/140, 0x8c}], 0x7, &(0x7f0000019c40)=ANY=[@ANYBLOB="34000010000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c0000100000000001000000020404bd", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRESOCT, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xd0}}], 0x1, 0x1, &(0x7f0000000880)) openat(r1, &(0x7f0000000040)='./file0\x00', 0x4040, 0x121) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0x80085502, 0x0) openat(r0, &(0x7f0000000080)='./file0\x00', 0x2, 0x103) wait4(0x0, &(0x7f0000019c00), 0x80000000, &(0x7f00000008c0)) pread64(0xffffffffffffffff, &(0x7f0000019980)=""/214, 0xd6, 0x7ff) 09:44:04 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d9f4655fd9f4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {&(0x7f0000010400)="0200000003000000040000006a000f000300040000000000000000000f00bc0f", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d9f4655fd9f4655fd9f4655f000000000000040004", 0x1d}], 0x0, &(0x7f0000000180)={[{@journal_dev={'journal_dev', 0x3d, 0x7}}]}) 09:44:04 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000040)='./file1\x00', 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="03", 0x1}], 0x1, 0x8000000, 0x0) 09:44:04 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) (fail_nth: 9) 09:44:04 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x5) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) (fail_nth: 13) [ 1614.344194] loop2: detected capacity change from 0 to 255 [ 1614.348800] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1614.351184] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1614.359580] loop1: detected capacity change from 0 to 64 [ 1614.368564] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1614.378287] FAULT_INJECTION: forcing a failure. [ 1614.378287] name failslab, interval 1, probability 0, space 0, times 0 [ 1614.379530] CPU: 1 PID: 10098 Comm: syz-executor.4 Not tainted 5.17.0-next-20220401 #1 [ 1614.380458] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1614.381768] Call Trace: [ 1614.382043] [ 1614.382288] dump_stack_lvl+0x8b/0xb3 [ 1614.382741] should_fail.cold+0x5/0xa [ 1614.383179] ? mempool_alloc+0x148/0x360 [ 1614.383649] ? create_object.isra.0+0x3a/0xa20 [ 1614.384200] should_failslab+0x5/0x10 [ 1614.384672] kmem_cache_alloc+0x5b/0x480 [ 1614.385145] create_object.isra.0+0x3a/0xa20 [ 1614.385658] ? kasan_unpoison+0x23/0x50 [ 1614.386111] kmem_cache_alloc+0x239/0x480 [ 1614.386594] ? mempool_free+0x3b0/0x3b0 [ 1614.387021] mempool_alloc+0x148/0x360 [ 1614.387459] ? mempool_resize+0x7d0/0x7d0 [ 1614.387935] ? mempool_resize+0x7d0/0x7d0 [ 1614.388423] ? lock_chain_count+0x20/0x20 [ 1614.388914] ? lock_chain_count+0x20/0x20 [ 1614.389396] bvec_alloc+0x16b/0x200 [ 1614.389828] bio_alloc_bioset+0x420/0x780 [ 1614.390314] ? bvec_alloc+0x200/0x200 [ 1614.390760] ? __kmalloc_node+0xb0/0x470 [ 1614.391234] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1614.391815] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1614.392402] ? zero_user_segments.constprop.0+0x2b0/0x540 [ 1614.393042] __mpage_writepage+0xe13/0x1750 [ 1614.393549] ? mark_lock.part.0+0xef/0x2f60 [ 1614.394052] ? mpage_readpage+0x140/0x140 [ 1614.394534] ? lock_is_held_type+0xd7/0x130 [ 1614.395040] ? find_held_lock+0x2c/0x110 [ 1614.395506] ? lock_release+0x3b2/0x6f0 [ 1614.395970] ? folio_clear_dirty_for_io+0x26e/0x760 [ 1614.396509] ? lock_downgrade+0x6d0/0x6d0 [ 1614.396985] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1614.397614] ? percpu_counter_add_batch+0xb4/0x170 [ 1614.398186] ? lock_is_held_type+0xd7/0x130 [ 1614.398681] write_cache_pages+0x491/0x1180 [ 1614.399175] ? find_held_lock+0x2c/0x110 [ 1614.399637] ? mpage_readpage+0x140/0x140 [ 1614.400133] ? percpu_ref_put_many.constprop.0+0x270/0x270 [ 1614.400781] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1614.401392] ? fat_add_cluster+0xf0/0xf0 [ 1614.401827] ? fat_readahead+0x20/0x20 [ 1614.402269] mpage_writepages+0xd8/0x1a0 [ 1614.402700] ? mpage_end_io+0x2c0/0x2c0 [ 1614.403151] ? fat_add_cluster+0xf0/0xf0 [ 1614.403587] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1614.404202] do_writepages+0x1b0/0x690 [ 1614.404653] ? writeback_set_ratelimit+0x150/0x150 [ 1614.405211] ? lock_release+0x3b2/0x6f0 [ 1614.405673] ? wbc_attach_and_unlock_inode+0x8a/0x8d0 [ 1614.406261] ? lock_downgrade+0x6d0/0x6d0 [ 1614.406740] ? lock_release+0x6f0/0x6f0 [ 1614.407199] ? do_raw_spin_lock+0x121/0x260 [ 1614.407660] ? do_raw_spin_unlock+0x4f/0x210 [ 1614.408178] ? _raw_spin_unlock+0x24/0x40 [ 1614.408662] ? wbc_attach_and_unlock_inode+0x8a/0x8d0 [ 1614.409259] filemap_fdatawrite_wbc+0x143/0x1b0 [ 1614.409758] file_write_and_wait_range+0x163/0x1e0 [ 1614.410318] ? file_fdatawait_range+0x60/0x60 [ 1614.410480] loop1: detected capacity change from 0 to 64 [ 1614.410840] ? do_raw_spin_lock+0x121/0x260 [ 1614.412403] loop6: detected capacity change from 0 to 512 [ 1614.412475] ? rwlock_bug.part.0+0x90/0x90 [ 1614.414044] __generic_file_fsync+0x74/0x1f0 [ 1614.414558] fat_file_fsync+0x73/0x200 [ 1614.414974] ? fat_trim_fs+0xfc0/0xfc0 [ 1614.415401] vfs_fsync_range+0x13d/0x230 [ 1614.415870] generic_file_write_iter+0x195/0x220 [ 1614.416432] do_iter_readv_writev+0x3d8/0x650 [ 1614.416942] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1614.417571] ? new_sync_write+0x560/0x560 [ 1614.418012] ? avc_policy_seqno+0x9/0x70 [ 1614.418467] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 1614.419025] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1614.419609] ? security_file_permission+0xb1/0xd0 [ 1614.420169] do_iter_write+0x187/0x6f0 [ 1614.420592] ? lock_is_held_type+0xd7/0x130 [ 1614.421072] vfs_iter_write+0x70/0xa0 [ 1614.421495] iter_file_splice_write+0x722/0xc90 [ 1614.422005] ? generic_file_splice_read+0x3ea/0x5d0 [ 1614.422554] ? page_cache_pipe_buf_confirm+0x5b0/0x5b0 [ 1614.423126] ? pipe_to_user+0x170/0x170 [ 1614.423560] ? inode_security+0x105/0x130 [ 1614.424042] ? security_file_permission+0xb1/0xd0 [ 1614.424604] ? page_cache_pipe_buf_confirm+0x5b0/0x5b0 [ 1614.425154] direct_splice_actor+0x10f/0x170 [ 1614.425645] splice_direct_to_actor+0x350/0x8e0 [ 1614.426160] ? pipe_to_sendpage+0x380/0x380 [ 1614.426639] ? do_splice_to+0x240/0x240 [ 1614.427089] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1614.427709] ? security_file_permission+0xb1/0xd0 [ 1614.428229] do_splice_direct+0x1b8/0x280 [ 1614.428693] ? splice_direct_to_actor+0x8e0/0x8e0 [ 1614.429202] ? lock_is_held_type+0xd7/0x130 [ 1614.429673] do_sendfile+0xad7/0x1230 [ 1614.430103] ? __ia32_compat_sys_preadv64+0x2e0/0x2e0 [ 1614.430675] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1614.431247] ? vfs_write+0x422/0xac0 [ 1614.431651] __x64_sys_sendfile64+0x1cd/0x210 [ 1614.432142] ? __ia32_compat_sys_sendfile64+0x210/0x210 [ 1614.432720] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1614.433261] do_syscall_64+0x3b/0x90 [ 1614.433671] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1614.434235] RIP: 0033:0x7f10081d2b19 [ 1614.434623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1614.436625] RSP: 002b:00007f1005748188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1614.437417] RAX: ffffffffffffffda RBX: 00007f10082e5f60 RCX: 00007f10081d2b19 [ 1614.438195] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 1614.438978] RBP: 00007f10057481d0 R08: 0000000000000000 R09: 0000000000000000 [ 1614.439760] R10: 00000ffffffff000 R11: 0000000000000246 R12: 0000000000000002 [ 1614.440554] R13: 00007fff5bac1b9f R14: 00007f1005748300 R15: 0000000000022000 [ 1614.441346] [ 1614.462649] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 09:44:04 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) [ 1614.486940] loop2: detected capacity change from 0 to 255 [ 1614.491455] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1614.521392] kworker/u4:2: attempt to access beyond end of device [ 1614.521392] loop0: rw=1, want=128, limit=40 [ 1614.523592] Buffer I/O error on dev loop0, logical block 31, lost async page write 09:44:04 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f00000000c0)='\"', 0x1}], 0x1, 0x9e74, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000040), 0x2, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f0000000080)=0x9) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r2, 0x0) syz_io_uring_submit(r4, 0x0, 0x0, 0x0) fadvise64(r2, 0x0, 0x0, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) sendfile(r1, r1, 0x0, 0x22000000) [ 1614.529727] EXT4-fs error (device loop6): __ext4_fill_super:5311: inode #2: comm syz-executor.6: iget: root inode unallocated 09:44:04 executing program 3: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2800890, &(0x7f0000011200)=ANY=[]) move_mount(r0, &(0x7f0000000240)='./file2\x00', r0, &(0x7f0000000280)='./file0\x00', 0x31) chdir(&(0x7f0000000080)='./file0\x00') chdir(&(0x7f00000001c0)='./file2\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) mount$cgroup2(0x0, &(0x7f0000000040)='./file2\x00', &(0x7f00000000c0), 0x204400, &(0x7f0000000140)={[{@subsystem='rdma'}, {@subsystem='cpuacct'}, {@subsystem='pids'}, {@memory_recursiveprot}, {}], [{@dont_appraise}, {@func={'func', 0x3d, 'CREDS_CHECK'}}]}) pwrite64(r1, &(0x7f0000000000)='y', 0xfffffe5f, 0x0) 09:44:04 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000040)='./file1\x00', 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="04", 0x1}], 0x1, 0x8000000, 0x0) [ 1614.531358] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1614.533316] loop3: detected capacity change from 0 to 255 09:44:04 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff002) [ 1614.539548] EXT4-fs (loop6): get root inode failed [ 1614.540266] EXT4-fs (loop6): mount failed [ 1614.566549] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 09:44:04 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x3, 0x2, &(0x7f00000004c0)=[{&(0x7f0000010000)="eb58906d6b66732e66617400021e20000400000004f8", 0x16}, {0x0, 0x0, 0x4000}], 0x100c000, &(0x7f0000000040)) [ 1614.596522] loop1: detected capacity change from 0 to 64 [ 1614.605547] loop0: detected capacity change from 0 to 40 [ 1614.617441] loop2: detected capacity change from 0 to 255 [ 1614.618545] loop1: detected capacity change from 0 to 64 [ 1614.631459] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 09:44:05 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d9f4655fd9f4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {&(0x7f0000011600)="ed41000000080000d9f4655fd9f4655fd9f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)={[{@journal_dev={'journal_dev', 0x3d, 0x7}}]}) 09:44:05 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x5) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) (fail_nth: 14) [ 1614.668778] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1614.725764] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1614.742431] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1614.749920] loop6: detected capacity change from 0 to 512 [ 1614.754380] loop4: detected capacity change from 0 to 255 [ 1614.762549] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1614.764023] EXT4-fs (loop6): group descriptors corrupted! [ 1614.767735] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1614.790048] kworker/u4:3: attempt to access beyond end of device [ 1614.790048] loop0: rw=1, want=128, limit=40 [ 1614.792349] Buffer I/O error on dev loop0, logical block 31, lost async page write [ 1614.804442] FAULT_INJECTION: forcing a failure. [ 1614.804442] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1614.810098] CPU: 0 PID: 10139 Comm: syz-executor.4 Not tainted 5.17.0-next-20220401 #1 [ 1614.811754] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1614.814162] Call Trace: [ 1614.814698] [ 1614.815164] dump_stack_lvl+0x8b/0xb3 [ 1614.815981] should_fail.cold+0x5/0xa [ 1614.816814] _copy_to_user+0x2a/0x140 [ 1614.817624] simple_read_from_buffer+0xcc/0x160 [ 1614.818623] proc_fail_nth_read+0x194/0x220 [ 1614.819539] ? proc_exe_link+0x1d0/0x1d0 [ 1614.820410] ? security_file_permission+0xb1/0xd0 [ 1614.821430] ? proc_exe_link+0x1d0/0x1d0 [ 1614.822290] vfs_read+0x1ea/0x5d0 [ 1614.823031] ksys_read+0x127/0x250 [ 1614.823774] ? __ia32_sys_pwrite64+0x220/0x220 [ 1614.824758] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1614.825860] do_syscall_64+0x3b/0x90 [ 1614.826642] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1614.827729] RIP: 0033:0x7f100818569c [ 1614.828512] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1614.832354] RSP: 002b:00007f1005748170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1614.833937] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f100818569c [ 1614.835435] RDX: 000000000000000f RSI: 00007f10057481e0 RDI: 0000000000000006 [ 1614.836945] RBP: 00007f10057481d0 R08: 0000000000000000 R09: 0000000000000000 [ 1614.838429] R10: 00000ffffffff000 R11: 0000000000000246 R12: 0000000000000002 [ 1614.839917] R13: 00007fff5bac1b9f R14: 00007f1005748300 R15: 0000000000022000 [ 1614.841444] [ 1614.865825] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 09:44:21 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x2, &(0x7f00000004c0)=[{&(0x7f0000010000)="eb58906d6b66732e66617400021e20000400000004f8", 0x16}, {0x0, 0x0, 0x4000}], 0x100c000, &(0x7f0000000040)) 09:44:21 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x5) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) 09:44:21 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d9f4655fd9f4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {&(0x7f0000011600)="ed41000000080000d9f4655fd9f4655fd9f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)={[{@journal_dev={'journal_dev', 0x3d, 0x7}}]}) 09:44:21 executing program 7: syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=@ctrl_frame=@bar={{}, {}, @device_b, @device_a, @multi}, 0x12) syz_80211_inject_frame(&(0x7f0000000080)=@broadcast, &(0x7f00000000c0)=@mgmt_frame=@action_no_ack={@wo_ht={{0x0, 0x0, 0xe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x4}, @device_b, @device_b, @random="e681e0bcfe46", {0x2, 0x7c7}}, @tdls_setup_resp={0xc, 0x1, 0x3f, 0x5, @void, @val={0x1, 0x2, [{0x2, 0x1}, {0x18}]}, @void, @val={0x65, 0x12, {@from_mac, @broadcast}}}}, 0x35) 09:44:21 executing program 5: mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=ANY=[@ANYBLOB="000000080211000001080211000088dde886"], 0x12) 09:44:21 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff003) 09:44:21 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000040)='./file1\x00', 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="05", 0x1}], 0x1, 0x8000000, 0x0) 09:44:21 executing program 3: sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x8040) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socketpair(0x5, 0x80000, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x200, 0x48}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4084}, 0x40d1) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x15, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x1090}, 0x40000c0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffff000) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x0, 0x300, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xfffffff9}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xffff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8804}, 0x8000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r3, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) sendfile(r3, r3, 0x0, 0xffffffff000) ioctl$HIDIOCGSTRING(r3, 0x81044804, &(0x7f0000000340)={0xca, "62be4af6fcc3a5e5522a130e65e74b5ded30cfd6d81afe67785b4a30d41cac6c52eee918aa50400cf0008223b7bad44fa4ee541a3b185f89491ce04998c2b9c5ed4edbd072a697586e2356a29cfc0356f2f8f25632fd794d2a33d18097e02654628c1b4c60faf9adc899da4cd23e63658e52fcbb7d4566bf06c381b51656c6d1937ef49a9306c47d704c520a50c0322ef49a73d3362cac373dad53c058ec908d6bffb358881875d58c0c30a8eb4eb6cec729cb4530459958470497987a657dbd625c70c6fa5e680d3e03"}) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x29}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010102}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040015) syz_80211_join_ibss(&(0x7f0000000cc0)='wlan1\x00', 0x0, 0x0, 0x0) r4 = dup2(r2, r2) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x8}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x4004000) sendmsg$nl_xfrm(r4, &(0x7f0000002780)={&(0x7f00000011c0), 0xc, &(0x7f0000002740)={&(0x7f0000001380)=@newpolicy={0x1010, 0x13, 0x400, 0x70bd2c, 0x25dfdbfb, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, {0x523e, 0x0, 0x0, 0x200, 0x10001, 0x2, 0x7, 0x4}, {0x8}, 0xf8, 0x6e6bc0, 0x0, 0x2067605529564757}, [@lifetime_val={0x24, 0x9, {0x0, 0x0, 0x1}}, @sec_ctx={0xee8, 0x8, {0xee4, 0x8, 0x0, 0x40, 0xedc, "1aa166a51ef1a317204210cdd10c949876918f0f6e5eec5a382bf7008b3f61db3249f34f7ea907ba9d4646aa053241f8186ed52bf1ca6666fb8109680215dc679f79b5b60841fd9b159702920ac762b7e396738900188a593b0a191a2e218d844928c3be4a5816b9147e75b8b5ebd8f5bb6b0a9dfc09edaee92e7b847f2e1f31e345f16c85d5e221f05060f5c9e3071284b59441fbbfe471a6caedbd70eb0dcac9aaf49abd6a7bc21c0cbfce1a6e6f9a46fa1f7b5d3bcdf1d0af2175791531aa17ae000f2ba4866564a87efff0c57658c0862a6d243b0e9f43107d37345ebdae58c3ccf2ba862eca48e6cb31784f049368d984ef647453aaadc6a1a29b8e300e2c2bcb6fda97bab4f1e04b75458131aaa46cf73250da1e696a339cd7555643b855d8a87a5f580c0e8b5a3b928abcdb990415bb96cc675199f867847c8078055fc16dbb133102d20db774b9660a8307a29fa3d90fc39cb2eb9623b1afb7958bed0fc47fff52031e96a242e484fe5ffd720fcea9af0bce394c849c16937dc7491a8d5a000676dbe647f67a12d7c6c10b7be010f443b25ebf6b437ab8ebb9d868d5ea4aab96edda6ae59ec6bf6ea2c96d6b000a5c8d1ba0f72b6f3cbb7abc389aa63a03e823be7bd93db07227cbfde91d926427453c641db6733cba705758b0d2c095b46285367afd4da710051abbfd34f5c079bf25019cacd6d66ef48f08895a78027ed231c34f7c7d97b4f4086820173b6bd4e7a084df8b78c8c3ce6338fdff3d5742c9daff657a8f40feef82cadda92561b14e6b04d413c9b5b0057e8c94575e6a53840050da120e1d6b10d8a7ba799b972613828e459bb2932df4bca358e821430649f70067b3d32da6f183bc4b2d027f9fd3ed5e3f5e56c19a426fc4603b30bb021d27581289d693cb461cc5bfc061886286f2d1dc41e2c900e214eca328abf495c7fd84aff9d503450cc3b31c8f4c6c5ed4acaf7834a5f0b8e0ed8f2f4eb794c3c9a6e532590ba9e4f57166942d551245a0e42cab2ac36c2bf7a7f91c1b00d75694cb12463fa6c39db0393a60c357752af55d451aeba41795ce7506c9c7fe9fb5137c907c5ec9e3953c0ffe7723a07321fa306d91414d2db82a6d1d99ca2fea6ce312440b45f02146c2be29ae55c0c481b0ee160e04bda0be3623e0888b01e82ea409f1329f5caf80e17dcd9128bf38ee43e975a485c0d4be0dac66d7c8a6c76295ee1948fa8c92dea2393ed4038c8e3b389ad21ed01e06ca7e47d9ff0483db271932466a4de9b0fd2ccd2c9ffa3f457698ea8faaac813d1747c695cb1e82ce4375b7f5a3eaf8568266ed97f345c74ecda48b99379b90f9b5f5c3583e0a9f10eb5e27b0ce0ed6e8d43cdf4d8da15d863d73d4751f7edea8c0787239b0afbbb0124c16bf13f3203d7e02bd680597fb11cb9a4629d2b282207c886912a335ada221c1e338afff896ad603703f7334c809fc432f1d87a7cd069f0ff847981e5ea35b44b9ab47cef1c0548327573a2c2f562fa94830fb7e82aa919d1b6ffb6feb742607e668135babcea5d8f120157e4c7ba854a5a59e0975caa310e906280a2a3e0b200639f2221c75c9c676cd7e13347bae021acea5c1c24f6142db373e125acf581637ff4cae111cf54d49248325653429931e0759330299b57bb96283fe6493ca77e9c4a2b8c9ed4eefee810e67b6a8e2c603fd91567d264b3f0a46801589ce98c5a5f24d0ac837ea38b10f8641893ee4d9bc660e25d0712a44004088bd5d60a464cce7fef511a9efdc3d31fa11371d36051df300f5bd202093ef6091b08c91d8c91ff622a7b5c72d403c86a2efa10c76ce715b6c55f0424bc492a08d2bc88bd3a22861769351b2fb11768d75ed30a3443f7165d60a3a1db7fb7d44723b0386eafabb8f6fa142205acbd87b3253e41569834d0153b873419c1bdfbae7141e018f25e4220467ed0a06b30e6129c87d4c393b8e977a3f4fd49f36e40f97adfda05ec147251395e209121f6b898cfed6dc7f462c46040a4ecf52192ed2af850e94d9338450a6b5e3837b33494b8a433652d6b4ec8e49628c88fbfb56c64ab52e183ed0df4cf71ee85bc9857ddf490da3c4063298c3c26b1193b53112b0140a1cb057161f27b3f7d6cd9df870a03ac703d4f88ef37693803329f0b67109507ce07b93eefac1def94c3f860d2ae3a659ff593563625691b2a06bbdf1987a9041008d6a9d7e4069423dc47e2b111f42eab106ffa71747e0553b112a6d4a263c309d43ef5afe8558f648b920746482db6e4ccf2030238d41f2c2bfa8c4dd7cb1dff506d74cbbfc01dd2349440c5a52efb01d1a45be426bc9d26d8c1afffaa77f876cd890f2e7d5666cffa458c78e1e3bc6042c49a7f143a3964074a72e8e66f87872fde466ae40a1b0d8f4a844394350fb00b6e87ed9225a1b80879365397155b4824272ddeddeb166d7554e71c8d5d97e30dd1b589e850eba6d4a9da4bcbcf1a4dcfbda3e32e572d38807e1fe5595d67a3f4544751e795bb6918c49565af39e9e5bcd4be253962e5d6d8219de3780700625c34197eb8c175b1f977e9154abf82f27971fda55b0615ae98aa36e001fbc197fe46727038d653ab467097e6b99dda04a556bcb8e153df1fe2aed689e4538744dd4480c4eff7b1517684c10d5f53367ff25983f274635f7baefffe54b7f6b53ec6bd549a72852f11f6f0dd7ade77eb83cf0bc6d20b9fe1a85689d908c6f94b02ab0180257bde0a18ab79fd50b005a3f4cee27053661e4e5b69b3f7fa9c1badd8edb81316702f914f1740f87ff21576efd90dccca0dd8a4826863aa2c6633ad200bb7d0075681e003a768c32816082d71f8f9f637db21bf0c38069092e49bac8805c41078436efc1a3da200fd1051ae40e1879c8c6c42f3e390cbf92a1e437d5f1318238719df8bbe5687e6fa581369f1f639421e3e3aa00b7e81cfc709db89cf42dcab89e181b73ee9fbcb51f1529d8cad6fb864fb7853b08515f791ea561e07443e45e422296701beee05f72efc119efe0c243cd2cf9c7559e7677f37b4e32c13588fb96b8f9d56277e09860dbc06ce056095489116b8fb69d9a1ff6efd22fbe3b98d4b5000e3a2cb0d6e8b7c99f32f3190b1788b0b4295aaa2c0458e76fa60e6c1f4b937853a7a55f601cfb5aa1afe465283d2e68df1c5e35816adaeed17588424f1e376ab0f8d44085344946eaa6ab91ae65d6dbd51ea5933e1a51bd268704693790a621485c646aaef86f27c12cc664c2f04725e6c7b64b1f5a5221011b9bf69652eb21dfafc6cd71f904f798b917630f6f172203cf1134d947447e00677d3abc33a7f19d184a558cd9b862429598cf6bfc9d11eca47acf9e124bf58f691e0e4c19ffab6d16c751a8b96dbd44bcaec02637f4708003f334cd17dfe2f5e7dc3177aecfe587195ed42fca22ecaa75c9e10fdeabf813e36006e5e1b71cf53f50477e0de1ee4c1ff7bf1c05b8d38f1d85290727eaf2f20c641919742def3dec063c26591603c6cb91a6ba01f98c4f6ecca7ac4791c86f0d96a444ab9b67ad8d1bbaaecf65805aff8b6c0d2e5258a70d6645b06fd83685366172d112a4def61556c3940623b77c5fd54568491bacfc73752b6e6df28b07fef7a3ea58ba2905500847962af2403ad73cc6d21e7caa90ffab77c23730766906350070385c3fc99975956484d836233d469d675aa7c7551ff71c9e3ae5c3e26198b45ebb23732ac2f1dad6f0328cd28f7f9bde6f1765da9d8197d713dd2ee9a72387e44a9ea49235ee30f998d4ed2b666b71a372991682154b71535b9179e53f017bd19f68da899fa39399aef7c76b01821cbc05f6e1f4bf164bcecec4662a547057393bab1ab404616988494a80630efb45798b64ef082dcdc97ff48610ca1b69071dae7d48be11a355a243ff8b9dd284773ca4875bd38ee4240e38e1d00f109d268b031e24876649ff196670e670b1e6375b88db4311ea2f61da1cb7d7e0d7090249c1308a530be0957701e54532ac5d58bfe6b35bd9e9b53085c493d25d980dbd30ac0d4e201942fa96faa1e06e3e46bb35ba7f46e5752a24fa3b5fad54c9d084b8b817ce4e5a892ead445c2e1f47cb47adcee2e4a0f127b4ca1e15195389da9ef631911981759318e9c234bddeb0759580e841365eaa99fda011bbd7bc3d9a45b9e8f1997dff5008a4fb4d2f912f948e558901aa6f216e0f9036bfe36be6d0202e07fa854a12ce6365cd79327df2a51911a6f9f0d662c487a07db9ca835742c95d596e59d7e55f45774fd90e2929f099d2409b28be88f2b3334d3b136efdd86a58f3c07c9a24d66232f0262def07cfba2c43d7ad420c905027045963f3d5cbffac89781830182655bbf1207da3727dc404434e7ff91fb28cdc08ca5553c850a1035b4d61e8f4a46400ea45edd2e8041aec8204b55c875ef36a6e312716cfb018cdd998765b3c38be2a1df3dc0c2a0e39ced3651341c485f79b9fcf632c17ebb5a067f8e734a838bddebd5e4ff1904fadbd72db21192ced564f19389dc313b0e6cedc270bcfd43ffe817947de1503da019f60b047b9741bee428abe30902ae4f24978fd2c6c61fb44ffc2c39273ea81ae90466dd523cca9a57642fc63d9a0798964af4b8b25c593be20746be531efc9e63bf66ff06f2256b2a109c9be4d2ba5c1383a1a24c7611c8c612b14a714f01a946f4fd5b43cb170a431f6575181605e08f5d75d8cb1a37619997184bd71ef1a448b10788146fee1a54a4101eb990c7a9b73818b0d919d7454d0dc936727d83f8c458bb621f0cc19b29ce1bb55fd6f0f8f1e0aa78c1ba5867859db55a2d8fd070ca1a91ca9608b9e12dbe1f5d3b4162c57fbfe5eb81f2159fcf981e501108a70aa9b53c2d1d1ead9bd827290bbe8ff4d7f59cbc1fc3a5b278450f1faa7db0acfe5a04d230d80faf83a39e1269ca7e68893bab72efea142a2c9329fb8dd775c7291c02c5d9d1e9415c56215dc171b4e8978df215fee4ab6e49368aa00da134f36fa72a5e5aa36bec234cfdb4c2822cb3482cf2d90ecefbf2bfbadee395beee1bafa4b3ae48a453570acc3210f808de411489b6ad420c70a14d572aa28d443267a6fafefc734ef762b1697533c0814b4b8779df96a5066a54359f5234f2a1589a64cdb0ea949958451a8a10cef0165ff43988006075146c62f4ba3c30faa5ccd293bd3f6b7e999acf5ae7cb23e4977a4fdb39519c14dc186e05a03fb5f984631db309a497e58d7d1ae3605c3d638ca602c7306e9b4abc6754fdaa8c75f62a4ec1a39025e801d83994e91f3811810778c229cbf39c47e4ab8b922572dbe33c6b61f56671fcb6fc3273a3e680202e5f5621112f8b81392465652f483c165cda76afb46eabb43"}}, @etimer_thresh={0x8, 0xc, 0x3}, @address_filter={0x28, 0x1a, {@in=@empty, @in=@multicast2, 0x1fc679f9fa952860}}, @encap={0x1c, 0x4, {0x1, 0x0, 0x0, @in6=@empty}}]}, 0x1010}}, 0x0) [ 1630.730555] loop4: detected capacity change from 0 to 255 [ 1630.744536] loop6: detected capacity change from 0 to 512 [ 1630.762361] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1630.765334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1630.769271] loop2: detected capacity change from 0 to 255 [ 1630.771661] loop0: detected capacity change from 0 to 40 [ 1630.774062] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1630.775181] loop1: detected capacity change from 0 to 64 [ 1630.776495] EXT4-fs (loop6): group descriptors corrupted! [ 1630.778061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1630.792857] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1630.794714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1630.817575] loop1: detected capacity change from 0 to 64 [ 1630.876922] ------------[ cut here ]------------ [ 1630.878493] wlan1: Failed check-sdata-in-driver check, flags: 0x4 [ 1630.880425] WARNING: CPU: 0 PID: 10169 at net/mac80211/driver-ops.h:172 drv_bss_info_changed+0x4a8/0x5a0 [ 1630.882788] Modules linked in: [ 1630.883654] CPU: 0 PID: 10169 Comm: syz-executor.3 Not tainted 5.17.0-next-20220401 #1 [ 1630.885844] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1630.888811] RIP: 0010:drv_bss_info_changed+0x4a8/0x5a0 [ 1630.890208] Code: a8 03 00 00 48 85 ed 0f 84 a1 00 00 00 e8 a0 c3 66 fd e8 9b c3 66 fd 8b 54 24 04 48 89 ee 48 c7 c7 80 83 ba 84 e8 97 f3 25 00 <0f> 0b e9 10 fe ff ff e8 7c c3 66 fd e8 b7 3c 35 00 31 ff 89 c3 89 [ 1630.895048] RSP: 0018:ffff888044f875c0 EFLAGS: 00010286 [ 1630.897257] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1630.899021] RDX: 0000000000040000 RSI: ffffffff812b31e8 RDI: ffffed10089f0eaa [ 1630.900782] RBP: ffff888041d3c000 R08: 0000000000000000 R09: 0000000000000000 [ 1630.902511] R10: ffffffff812ace5c R11: 0000000000000000 R12: ffff888041d3cbc0 [ 1630.904253] R13: 0000000000400000 R14: ffff888041d3df88 R15: ffff888041d3df80 [ 1630.906016] FS: 00007f4295f08700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 1630.907980] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1630.909409] CR2: 00007f4295f06ff8 CR3: 0000000045cae000 CR4: 0000000000350ef0 [ 1630.911132] Call Trace: [ 1630.911764] [ 1630.912342] ieee80211_bss_info_change_notify+0x9a/0xc0 [ 1630.913504] ieee80211_ocb_leave+0x1ed/0x340 [ 1630.914403] ? lock_is_held_type+0xd7/0x130 [ 1630.915318] __cfg80211_leave_ocb+0x1d6/0x510 [ 1630.916273] cfg80211_leave_ocb+0x4e/0x70 [ 1630.917130] cfg80211_change_iface+0x7fd/0xea0 [ 1630.918090] nl80211_set_interface+0x65f/0x900 [ 1630.919046] ? nl80211_post_doit+0x390/0x390 [ 1630.919920] ? nl80211_notify_iface+0x180/0x180 [ 1630.920900] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1630.922038] ? nl80211_pre_doit+0xa6/0x5c0 [ 1630.922887] genl_family_rcv_msg_doit+0x22d/0x330 [ 1630.923874] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1630.925268] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1630.926559] ? cap_capable+0x1eb/0x250 [ 1630.927502] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1630.928805] ? ns_capable+0xd9/0x100 [ 1630.929710] genl_rcv_msg+0x33c/0x5a0 [ 1630.930635] ? genl_get_cmd+0x480/0x480 [ 1630.931579] ? nl80211_notify_iface+0x180/0x180 [ 1630.932707] ? lock_release+0x6f0/0x6f0 [ 1630.933693] netlink_rcv_skb+0x14b/0x430 [ 1630.934662] ? genl_get_cmd+0x480/0x480 [ 1630.935608] ? netlink_ack+0xa80/0xa80 [ 1630.936565] ? netlink_deliver_tap+0x1b2/0xc30 [ 1630.937646] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1630.938809] ? is_vmalloc_addr+0x7b/0xb0 [ 1630.939772] genl_rcv+0x24/0x40 [ 1630.940571] netlink_unicast+0x54a/0x800 [ 1630.941542] ? netlink_attachskb+0x880/0x880 [ 1630.942565] ? is_vmalloc_addr+0x7b/0xb0 [ 1630.943537] netlink_sendmsg+0x904/0xe00 [ 1630.944521] ? netlink_unicast+0x800/0x800 [ 1630.945528] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1630.946806] ? netlink_unicast+0x800/0x800 [ 1630.947794] sock_sendmsg+0x150/0x190 [ 1630.949144] __sys_sendto+0x216/0x310 [ 1630.950117] ? __ia32_sys_getpeername+0xb0/0xb0 [ 1630.951245] ? blkcg_maybe_throttle_current+0x5ac/0xd50 [ 1630.952497] ? lock_is_held_type+0xd7/0x130 [ 1630.953510] ? __blkcg_punt_bio_submit+0x1d0/0x1d0 09:44:21 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x5, 0x2, &(0x7f00000004c0)=[{&(0x7f0000010000)="eb58906d6b66732e66617400021e20000400000004f8", 0x16}, {0x0, 0x0, 0x4000}], 0x100c000, &(0x7f0000000040)) 09:44:21 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff004) [ 1630.954672] __x64_sys_sendto+0xdd/0x1b0 [ 1630.955862] ? lockdep_hardirqs_on+0x79/0x100 [ 1630.956919] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1630.958122] do_syscall_64+0x3b/0x90 [ 1630.958952] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1630.960164] RIP: 0033:0x7f42989878ac [ 1630.961035] Code: fa fa ff ff 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 20 fb ff ff 48 8b [ 1630.965237] RSP: 002b:00007f4295f06f80 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1630.967007] RAX: ffffffffffffffda RBX: 00007f4295f070f0 RCX: 00007f42989878ac [ 1630.968599] RDX: 0000000000000024 RSI: 00007f4295f07140 RDI: 0000000000000007 [ 1630.970178] RBP: 0000000000000000 R08: 00007f4295f06fd4 R09: 000000000000000c [ 1630.971748] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1630.972576] loop1: detected capacity change from 0 to 64 [ 1630.973349] R13: 00007f4295f07140 R14: 0000000000000007 R15: 0000000000000000 [ 1630.975543] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1630.976130] [ 1630.978277] irq event stamp: 1485 [ 1630.979040] hardirqs last enabled at (1495): [] __up_console_sem+0x78/0x80 [ 1630.980932] hardirqs last disabled at (1506): [] __up_console_sem+0x5d/0x80 [ 1630.982829] softirqs last enabled at (1286): [] __irq_exit_rcu+0x113/0x170 [ 1630.984736] softirqs last disabled at (1265): [] __irq_exit_rcu+0x113/0x170 [ 1630.986578] ---[ end trace 0000000000000000 ]--- 09:44:21 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d9f4655fd9f4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {&(0x7f0000011600)="ed41000000080000d9f4655fd9f4655fd9f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)={[{@journal_dev={'journal_dev', 0x3d, 0x7}}]}) [ 1631.026672] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1631.030487] loop1: detected capacity change from 0 to 64 [ 1631.041597] kworker/u4:9: attempt to access beyond end of device [ 1631.041597] loop0: rw=1, want=128, limit=40 [ 1631.043765] Buffer I/O error on dev loop0, logical block 31, lost async page write 09:44:21 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000040)='./file1\x00', 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="06", 0x1}], 0x1, 0x8000000, 0x0) 09:44:21 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x5) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff002) [ 1631.098761] loop2: detected capacity change from 0 to 255 [ 1631.100628] loop6: detected capacity change from 0 to 512 [ 1631.106472] loop4: detected capacity change from 0 to 255 [ 1631.114726] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1631.123058] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1631.123420] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1631.126588] EXT4-fs (loop6): group descriptors corrupted! 09:44:21 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x6, 0x2, &(0x7f00000004c0)=[{&(0x7f0000010000)="eb58906d6b66732e66617400021e20000400000004f8", 0x16}, {0x0, 0x0, 0x4000}], 0x100c000, &(0x7f0000000040)) [ 1631.147208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1631.171185] loop0: detected capacity change from 0 to 40 09:44:21 executing program 5: mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=ANY=[@ANYBLOB="000000080211000001080211000088dde886"], 0x12) 09:44:21 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25, 0x6}, {0x0, 0x0, 0x10000}, {&(0x7f0000000240)="5665ed2774c6239c6ad5fc764092e14662bf574d22160ac5787046b6489b5361de5bf64bfd23bf3c5507cc3337a15ea352fc27e00df848a54953292de63f41cfa09c70d4680566b04a74d1240f189a1b5d9488ca174a07f50faed055b86be13040dbb3f3d377b3ad", 0x68, 0x2}, {&(0x7f00000002c0)="7a19a509754a4eb429228aa720b3a219b4ae430676ba7256bf27f9abf7656b9450c1c424f0cd886feab98ffb36846b9d7bcf72fa32a614a1e8bb1dea23f1d4090be001d02a25c921940cf47253dd56d3f4c1bb9323af06d731ae79b607fc16e13e44a0c183f8f8b4c06e27c716440067b21dea33a479bd", 0x77, 0x100000001}, {&(0x7f00000004c0)="5af070cfa3e11a68bfce8b8d67f442db00cf67cbb1690d85c1146c0eb4d080d1475569c622a33024d19aeebb763914d597a8aad20565b2d8db17ffb3d5c7d4bf9927dddccef4d939bd32dc5d1eb91e258813934019fc9aa62cf1fbf078978ab4cb59acd6b9cddf98db3c5509983b2f05e940c9da361b8aeeed761429303bd9dcbe9de597ef6acf9b27f668c94956506e064e17a5b50eb397a6e6da2cc441786821cbf0d92c5fa03c06bb94ff47a5c23886988b0894b1d9d6e84a6c50ec9744d6eb9489a717670dc4e6ab93df2bc1bad080b212712eb0e74d8c0acad6f938b7", 0xdf, 0x93}], 0x0, &(0x7f00000000c0)=ANY=[]) chmod(&(0x7f0000000040)='./file0\x00', 0x0) creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f00000000c0)=ANY=[@ANYBLOB="8400000008021100140108021100000006001937e6ed0638d94ff04ce44f2b8741356f7e45bc0e970e661f047a6634681a2a54771f59419263079289e83ed68769a025b96edd068ee743c852645dd4123a6f56029484b43a7b"], 0x12) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0x400000, 0x19) setxattr$security_selinux(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:pam_exec_t:s0\x00', 0x20, 0x2) [ 1631.242839] loop1: detected capacity change from 0 to 64 [ 1631.254323] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1631.267755] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 09:44:21 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x5) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff004) 09:44:21 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0xffed}], 0x2000890, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="99", 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xffffffff008) 09:44:21 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d9f4655fd9f4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0x800}, {&(0x7f0000011600)="ed41000000080000d9f4655fd9f4655fd9f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)={[{@journal_dev={'journal_dev', 0x3d, 0x7}}]}) [ 1631.299545] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1631.305887] loop1: detected capacity change from 0 to 64 [ 1631.307807] loop7: detected capacity change from 0 to 264192 [ 1631.332096] FAT-fs (loop7): invalid media value (0x4d) [ 1631.333258] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1631.368814] loop6: detected capacity change from 0 to 512 [ 1631.374799] kworker/u4:9: attempt to access beyond end of device [ 1631.374799] loop0: rw=1, want=128, limit=40 [ 1631.375276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1631.377039] Buffer I/O error on dev loop0, logical block 31, lost async page write [ 1631.386716] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1631.388620] EXT4-fs (loop6): group descriptors corrupted! 09:44:21 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) truncate(&(0x7f0000000040)='./file1\x00', 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)='\a', 0x1}], 0x1, 0x8000000, 0x0) [ 1631.393139] loop2: detected capacity change from 0 to 255 [ 1631.416472] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1631.473946] loop0: detected capacity change from 0 to 40 [ 1631.567144] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1631.630842] kworker/u4:2: attempt to access beyond end of device [ 1631.630842] loop0: rw=1, want=128, limit=40 [ 1631.633294] Buffer I/O error on dev loop0, logical block 31, lost async page write [ 1631.714234] loop7: detected capacity change from 0 to 264192 [ 1631.718685] FAT-fs (loop7): Unrecognized mount option "„" or missing value [ 1631.729496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium VM DIAGNOSIS: 09:44:21 Registers: info registers vcpu 0 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff823e413c RDI=ffffffff873c64c0 RBP=ffffffff873c6480 RSP=ffff888044f86f80 R8 =000000000000003b R9 =0000000000000020 R10=ffffffff823cb81b R11=000000000000000a R12=0000000000000020 R13=fffffbfff0e78ce3 R14=fffffbfff0e78c9a R15=dffffc0000000000 RIP=ffffffff823e4190 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f4295f08700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f4295f06ff8 CR3=0000000045cae000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM02=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM03=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffff0000000000 YMM05=0000000000000000 0000000000000000 033e0d685efac670 5c62bd7d657a9897 YMM06=0000000000000000 0000000000000000 04475899453045cb 29c7ceb64eeba830 YMM07=0000000000000000 0000000000000000 0c8cd575188858b3 ff6b8d90ec58c053 YMM08=0000000000000000 0000000000000000 ad3d37ac2c36d373 9af42e32c0500a52 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000080000001 RBX=ffffea0000c8ba40 RCX=0000000080000001 RDX=ffff8880100b9ac0 RSI=ffffffff817260de RDI=ffffea0000c8ba40 RBP=ffffea0000c8ba40 RSP=ffff88800e4f76f0 R8 =0000000000000000 R9 =0000000000000000 R10=ffffffff816c4b6c R11=0000000000000000 R12=0000000000000000 R13=ffff8880196ecc00 R14=0000000000000001 R15=ffff88800e4f7a28 RIP=ffffffff8143b71d RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f6a57274620 CR3=000000000e94a000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000