VVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwIAMAAAAgzN86j/YDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcFAAD//3Bb7hQ=") r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_PANIC(r1, 0x5111) getdents64(r1, &(0x7f00000002c0)=""/219, 0xdb) r2 = eventfd(0x8) r3 = getpid() read$FUSE(r1, &(0x7f0000001500)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r5 = syz_open_dev$vim2m(&(0x7f0000003540), 0x0, 0x2) r6 = openat$cgroup_ro(r1, &(0x7f0000003580)='rdma.current\x00', 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000004dc0)=0x0) r11 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) dup2(r11, r11) setsockopt$ARPT_SO_SET_REPLACE(r11, 0x0, 0x60, &(0x7f0000000580)={'filter\x00', 0x7, 0x4, 0x408, 0x110, 0x220, 0x110, 0x320, 0x320, 0x320, 0x4, &(0x7f0000000540), {[{{@arp={@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0x0, 0x8, 0x0, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0xff, 0x0, 0x0, 0xff]}}, 0x1f, 0x4, 0x3c00, 0x400, 0x6, 0x1, 'ip6gre0\x00', 'pimreg1\x00', {0xff}, {0xff}, 0x0, 0x25a}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @private=0xa010100, 0xf, 0x1}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, 0xffffff00, 0x5, 0x2, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, {[0x0, 0xff, 0xff]}}, {@mac=@remote, {[0x167cb96d26756f27, 0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x9, 0xd3, 0x9, 0x0, 0x40, 0x3f, 'dvmrp0\x00', 'syzkaller0\x00', {0xff}, {0xff}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @private=0xa010101, @rand_addr=0x64010100, 0xf, 0x1}}}, {{@arp={@private=0xa010100, @remote, 0xffffff00, 0xffffffff, 0x2, 0x2, {@empty, {[0x0, 0xff, 0xff, 0xff]}}, {@mac, {[0xff, 0xff]}}, 0xff00, 0x0, 0x6, 0x5, 0x40, 0x4bf8, 'bridge_slave_1\x00', 'veth1_to_hsr\x00', {0xff}, {0xff}, 0x0, 0x22}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "05cbf2e8b2c51ba50e872c4e871944e8ac798fffd56fa5e1105bd91d10ae"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x458) r12 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r15 = getpgrp(0x0) stat(0x0, &(0x7f0000004700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000049c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)="dd77cea2c9c6bcb7a78b4346498ed9f649b1cc71d97bb8744f95be3e143cec68c8f427b9df7fd200cffa052d5d6772158394fb8d38b96cb6fbdae9338a68773b3d79c69c89efb0e689779d4e0b36781f5d363cb6cd073070d03caf777573e3312c696a41ecd89046ddc0d08f2a8980a4e2150f6e394b6fcb63498446993996899e430fc5aaf0307c75d76ee82b7491f44e081431484e03a631424bcc8a1bd68ec242", 0xa2}], 0x1, &(0x7f0000000b00)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000000001000000024000007ee3d5eb7abc2a5def36c4c205acc84957f358949fb767c07031dde9331b", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r13, @ANYBLOB="8000894db4abbdc60d87f7617daf6f3a42d30000", @ANYRESDEC=r16, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000000014da60c5aa5f705c8a04345237000000", @ANYRES32, @ANYRESDEC=r12, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000ffe5000000008e2ffb393db036695ef6b8950f0d5b8e35fc730500000000000000da0c0c54fe92fdc673759981ac61040a2daf15973c", @ANYRES16=r17, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESDEC=r15, @ANYBLOB='\x00\x00\x00\x00'], 0x100}}, {{&(0x7f0000000f40)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000012c0)=[{&(0x7f0000000fc0)='I', 0x1}, {&(0x7f0000001000)="dc14f4f6fa6b6ff010ad368bf9f4ae867049cc5c4b8e02dc6686470aa95ac5a045be2544790abd4d10eaf019f768f0e38706bb4729e6716248367929ba7fd1bafd1b9c0a8acedbf02f30baf2472481c03d96a85fcdfd9643f14e326112c927938572454a102f8718fbea593e1e9f1a8c402efd5ddc91344592f01a8999b3", 0x7e}, {0x0}, {0x0}], 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000005921888b6d0d3100002000000000000000df0f9509a1030000", @ANYRES32, @ANYRES32, @ANYRES64=r14, @ANYRES16=r11], 0x48, 0x4040000}}, {{&(0x7f0000001680)=@abs={0x1, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f0000001080)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="000000001c0000000000000001000000020000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="001ad900"/20, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES64=0x0, @ANYRES32, @ANYRES32, @ANYBLOB="1c0000000000000027c20a12f15a1b1ed776de6e266d730100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRESHEX=r11, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESHEX, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0002434d30ebf514dd93000000006700030a0000fed14e8bbe38e9f7f9e27889f680505fce202cfa498b516a", @ANYRES32, @ANYRES32=r12, @ANYRESOCT=r11, @ANYRES64, @ANYRES32, @ANYRES16, @ANYBLOB="10000000000000000100000001000000"], 0x110, 0x4000}}, {{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001c00)="a0e4211616abddafca09fbea0b920789a32574f6498aa4c62cbf63dfddb7cc6e87a40e2aa8a746802802e93183c580467c076431e0255a3bce6b4f6fdfb637118b97ed13e9eb5c5810c83184a95c2d2bd4e7a883fc9829d920397013ce464ea1daacc2fd1f36270ff941f0fc9762f915b452a2b4dcdc1588c9fee663b91f5c5ddfe53646c640aeb4b09eea78e8c53aa0dfa87a1a6d1b153e2c98d850c56c165ecd6e289f6b1e2b4471494d9499918eb01c33cb36bf82e70631b1506383940993e09b0aae9124756d48edb251", 0xcc}, {&(0x7f0000001d00)="53232f8a4c68accad6a06c1613142ad7039888f208eea2292f44699d91c67b464855a914471e19b608b7927b09146f9cc584c063d922f94675dd40a28ba42837d25c5be251b90d6109149296972be3196a99b81a92b7390bfb73883b19bd5080710c779867e22c48783f5acbe52ccc4779d364dac0fb32215c077512a0db8e56f5a59bd44e4fe802d4b220b754", 0x8d}, {&(0x7f0000001dc0)="15253d1493b677f91270d8e0e9c300b3207c287a0f2deb4de48d1e1ce3de835362f991f55f1f22b28dc6d2337cf3fff1c7aa3e1ef1ba16334eb2bf4d2cf4459325f0785392aa2a6881eb835a9422a37332732cd40f3644347553fcd011dd86404706bb4e3946d088606931afd72d1ab1d072758790659f02e09355c748791a6fd1695cb9ac52ad629354d3405ab04138953a0eee8012ae40059f748b", 0x9c}], 0x3, 0x0, 0x0, 0x1}}, {{&(0x7f0000004340)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000004400)=[{&(0x7f00000043c0)="aad80ea5db0c7a33bec0b0dabeb1a058e30b6704d3d8dd147c", 0x19}], 0x1, &(0x7f00000048c0)}}], 0x5, 0x4000008) r18 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r19 = ioctl$KVM_CREATE_VM(r18, 0xae01, 0x0) dup(r19) ioctl$KVM_SET_USER_MEMORY_REGION(r19, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r19, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r19, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004e80)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000140)="d9ee6d9ff20b792ccb9a4a132659bb3eca55b8b6b50d5b1703997d0aec98f1dad6151aced0fdad5016dfc7cf83efef0fa0cf7887e59be0d9a130ea74145cfeefb3b9616d904f210ec8de6b0f74ec5cf9685e578bed", 0x55}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000000c0)="1e2dab80460a329214e0f2ab331e3e7393f92d7e52a1778bd19c7b700c9be735d4ee1d7b1a64eb328d53f861063b", 0x2e}, {&(0x7f00000001c0)="2cf63b29c79ba217831e1468e33accaaf7f821f7f42776dd7fe21b93d003cde0c52d8bccad88939983996401daa18676069e28941c613c17e51035a92f4aed3c605e69f851775a", 0x47}, {&(0x7f0000000240)="8c72073d5080b19dd9a073191dfb633dda4ef66cebe89338d585ed284de1861a49fd4c1c1087a9ff36d04944c560fc727cc69b3a158d7a7863ae4e39e4ed797db3eb6a466b7e842f05", 0x49}], 0x5, &(0x7f00000035c0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, r1]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x24, 0x1, 0x1, [r1, r1, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}, @cred={{0x1c, 0x1, 0x2, {r3, r4, 0xee01}}}, @rights={{0x10}}, @rights={{0x30, 0x1, 0x1, [r1, r0, r1, r0, 0xffffffffffffffff, r5, 0xffffffffffffffff, r1]}}, @rights={{0x2c, 0x1, 0x1, [r6, r0, 0xffffffffffffffff, r9, r0, r1, r0]}}], 0x118, 0x800}}, {{&(0x7f0000003700)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000003800)=[{&(0x7f0000003780)="01a74f29ffa6ba027b2255efc8fdc72227890c6003d692fd216b7b38f4b9e59c66a9d44d99289f3e120a7d33f2c142cec1855a3a9fea645ef1d7270136321935431e7ae0d5cd0dd9fd723bced26e13cff9c82564dc", 0x55}], 0x1}}, {{&(0x7f0000003840)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000004b00)=[{&(0x7f00000038c0)="063540786218fc9b0182e7118d578bdca35a413c3c7aa3fe576d7d821eb30a5e7f6dcc4bfdc73ae4d0d8d079dbd4124b941d5baf3e252b1cfc5257330b4a68", 0x3f}, {&(0x7f0000003900)="dc2a77d2217df2efae0eab1ab30679e88ec7146e654c5445a3569af28069087a7febd5f1d7b784d20cd52351b0eb5eded3b0816595bb9f5204c9f0db3dc9cff442cadf92870c2f6b6b14f8984b5211e3d6a80138954a737fe22763cad29e8f818661e590eb6518e2a6f5504c55e5c87df09b0190ee32104c2aac42f1594bb896873cc4d7567fc03ab0541b1486ae17f86e41fbfa8dd648828059aaf2036c17bbb1c5a6cbbfda9b5960a0ef988c6b4f9b7d3295dd1c72624ebf51385bae206362941149004173726d072908ed22930e1cfbd7098d7e2739868520315f5ca7b2fac64978cb95a838630e5abac1c5b9af38d8d8603240a710", 0xf7}, {&(0x7f0000003a00)="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", 0x1000}, {&(0x7f0000004a00)="cd34451498c0c9c42bdc35818e22df4d6f21ca28846dbf22d1f3d3b3e081815674367ad4c43d74a0ce8ce4f3a3f8faa10c2d7409afc3d8b989073e2d2058c7aba4b298b53418e1385fc273218ba18cb2cd6dc3e4b542a4e78020286f771926fce1bc8181d73497a5db3a16fad7046b350a2d08b9550a396c4f99ca", 0x7b}, {&(0x7f0000004a80)="35c111d07a9dc3119ba1bb8c629294107521bc9a8803a2cf73476dbf708ed0c340b38619cc3e67e04de8118f5fdb9ad763d32d913fa18ba734c6bf526c74c7ff22a5f79f79cbc4948390f752629218abf831fa9cdf11", 0x56}], 0x5, 0x0, 0x0, 0x20040}}, {{&(0x7f0000004b80)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000004d80)=[{&(0x7f0000004c00)="2b23dc000051365c0791514f830c4cf15fbbbb4f122395a64b200c7e134eca6abe273b128871b47ba846404c935819a0cc15bf1c78fd1849bcb0aedc702cacc72e9431a065a3588c09b465301d5bed49d897f79e94b5e141f781519585246d9d3c609586706020fb401c09460a8e2c6f45d67b6871b5d1a0da4d3deab2af7cee6f2034d244a8a2d09935fd4c25907b23afd2dbd7a826200a0f25308ac4346e7774960c305a582f2be648c72746", 0xad}, {&(0x7f0000004cc0)="92a510a79a4345032c2cfbb6508569e792abc900e44756f7a0d523d5ca64b7a852c11a3bb02571fd72a7195b3312b14c8e41d6b4042b92ce05ebf6603d9060e79f85bf0e798f986cb3619d9f126a9ba15374e2d84a23c72a0c925cf29ddaca8562538d3533f7908835e264c9ed6907622126e54941adfd3fdcd8d461052ceb5a29569823a437df6493d35a079298111c6b3d074c126c084be32d901de5d9b5d380f4e51393359ed7fc1681edf95af9", 0xaf}], 0x2, &(0x7f0000004e00)=[@rights={{0x18, 0x1, 0x1, [r1, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r10, r17}}}, @rights={{0x14, 0x1, 0x1, [r19]}}], 0x50, 0x24000000}}], 0x4, 0x4008810) 20:02:15 executing program 3: r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000080)='%\xb9\xf6\x822\xcc0{\xc7:', 0x0) (fail_nth: 3) 20:02:15 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x18, 0x140e, 0x10, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000004}, 0x24054010) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000051401020000000000000000d800010000000063e3574f9f7cce0008"], 0x20}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x400, 0x70bd2a, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'rose0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x104) [ 305.230843][ T6696] FAULT_INJECTION: forcing a failure. [ 305.230843][ T6696] name fail_usercopy, interval 1, probability 0, space 0, times 0 20:02:16 executing program 3: r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000080)='%\xb9\xf6\x822\xcc0{\xc7:', 0x0) (fail_nth: 4) [ 305.272289][ T6699] FAULT_INJECTION: forcing a failure. [ 305.272289][ T6699] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 305.306225][ T6699] CPU: 1 PID: 6699 Comm: syz-executor.2 Not tainted 6.5.0-rc1-next-20230714-syzkaller #0 [ 305.308408][ T6703] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 305.316289][ T6699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 305.316315][ T6699] Call Trace: [ 305.316331][ T6699] [ 305.316344][ T6699] dump_stack_lvl+0x125/0x1b0 [ 305.316393][ T6699] should_fail_ex+0x496/0x5b0 [ 305.316454][ T6699] _copy_from_user+0x30/0xf0 [ 305.316499][ T6699] memdup_user+0x71/0xd0 [ 305.316543][ T6699] strndup_user+0x74/0xe0 [ 305.366174][ T6699] __x64_sys_mount+0x138/0x310 [ 305.370996][ T6699] ? copy_mnt_ns+0xb60/0xb60 [ 305.375743][ T6699] ? syscall_enter_from_user_mode+0x26/0x80 [ 305.381975][ T6699] do_syscall_64+0x38/0xb0 [ 305.386635][ T6699] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 305.392676][ T6699] RIP: 0033:0x7fb9f387cb29 [ 305.397413][ T6699] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 305.417784][ T6699] RSP: 002b:00007fb9f45a50c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 305.426269][ T6699] RAX: ffffffffffffffda RBX: 00007fb9f399bf80 RCX: 00007fb9f387cb29 [ 305.434318][ T6699] RDX: 0000000020000280 RSI: 00000000200002c0 RDI: 0000000000000000 [ 305.442414][ T6699] RBP: 00007fb9f45a5120 R08: 0000000020000400 R09: 0000000000000000 [ 305.450437][ T6699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.458553][ T6699] R13: 000000000000000b R14: 00007fb9f399bf80 R15: 00007fffe27e74d8 [ 305.466759][ T6699] [ 305.501507][ T6696] CPU: 0 PID: 6696 Comm: syz-executor.4 Not tainted 6.5.0-rc1-next-20230714-syzkaller #0 [ 305.512204][ T6696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 305.522595][ T6696] Call Trace: [ 305.526012][ T6696] [ 305.529078][ T6696] dump_stack_lvl+0x125/0x1b0 [ 305.533968][ T6696] should_fail_ex+0x496/0x5b0 [ 305.538836][ T6696] _copy_from_user+0x30/0xf0 [ 305.543790][ T6696] __do_sys_memfd_create+0x23a/0xa70 20:02:16 executing program 5: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x102440, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000001ac0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x54, r5, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0x30, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x1a0, r5, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x24000840}, 0x4000801) fcntl$setlease(r0, 0x400, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fcntl$setlease(r6, 0x400, 0x0) r7 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r7, 0x400, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = dup(r9) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r11, 0xae9a) ioctl$KVM_RUN(r11, 0xae80, 0x0) fcntl$setlease(r11, 0x400, 0x1) [ 305.549189][ T6696] ? fput+0x30/0x1a0 [ 305.553167][ T6696] ? PageTransHuge+0x300/0x300 [ 305.557959][ T6707] FAULT_INJECTION: forcing a failure. [ 305.557959][ T6707] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 305.558063][ T6696] ? ksys_write+0x1a7/0x250 [ 305.576574][ T6696] ? __ia32_sys_read+0xb0/0xb0 [ 305.581469][ T6696] ? syscall_enter_from_user_mode+0x26/0x80 [ 305.587921][ T6696] do_syscall_64+0x38/0xb0 [ 305.592500][ T6696] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 305.598646][ T6696] RIP: 0033:0x7f236947cb29 [ 305.603221][ T6696] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 305.623942][ T6696] RSP: 002b:00007f236a21ae98 EFLAGS: 00000206 ORIG_RAX: 000000000000013f [ 305.632724][ T6696] RAX: ffffffffffffffda RBX: 00000000000004f5 RCX: 00007f236947cb29 [ 305.641182][ T6696] RDX: 00007f236a21af3c RSI: 0000000000000000 RDI: 00007f23694c76ba [ 305.649556][ T6696] RBP: 0000000020000a40 R08: 00007f236a21ac37 R09: 00007f236a21b120 [ 305.663098][ T6696] R10: 000000000000000a R11: 0000000000000206 R12: 0000000020000500 [ 305.671222][ T6696] R13: 00007f236a21af3c R14: 00007f236a21af40 R15: 00000000200001c0 [ 305.679342][ T6696] [ 305.689494][ T6707] CPU: 1 PID: 6707 Comm: syz-executor.3 Not tainted 6.5.0-rc1-next-20230714-syzkaller #0 [ 305.699415][ T6707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 305.709987][ T6707] Call Trace: [ 305.713576][ T6707] [ 305.716563][ T6707] dump_stack_lvl+0x125/0x1b0 [ 305.721430][ T6707] should_fail_ex+0x496/0x5b0 [ 305.726383][ T6707] _copy_from_user+0x30/0xf0 [ 305.731198][ T6707] memdup_user+0x71/0xd0 [ 305.735541][ T6707] strndup_user+0x74/0xe0 [ 305.739961][ T6707] __do_sys_fsconfig+0x723/0xda0 [ 305.744984][ T6707] ? fscontext_read+0x2e0/0x2e0 [ 305.749926][ T6707] ? fput+0x30/0x1a0 [ 305.753887][ T6707] ? syscall_enter_from_user_mode+0x26/0x80 [ 305.759882][ T6707] do_syscall_64+0x38/0xb0 [ 305.764465][ T6707] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 305.770477][ T6707] RIP: 0033:0x7f674ea7cb29 [ 305.774948][ T6707] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 20:02:16 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x18, 0x140e, 0x10, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000004}, 0x24054010) (async) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000051401020000000000000000d800010000000063e3574f9f7cce0008"], 0x20}}, 0x0) (async, rerun: 64) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x400, 0x70bd2a, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'rose0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x104) (rerun: 64) [ 305.794876][ T6707] RSP: 002b:00007f674f77d0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 305.803596][ T6707] RAX: ffffffffffffffda RBX: 00007f674eb9bf80 RCX: 00007f674ea7cb29 [ 305.811686][ T6707] RDX: 0000000020000000 RSI: 0000000000000001 RDI: 0000000000000003 [ 305.819856][ T6707] RBP: 00007f674f77d120 R08: 0000000000000000 R09: 0000000000000000 [ 305.827951][ T6707] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000001 [ 305.836033][ T6707] R13: 000000000000000b R14: 00007f674eb9bf80 R15: 00007ffc10f2a808 [ 305.844050][ T6707] 20:02:16 executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x8050, &(0x7f00000001c0)={[{@sb={'sb', 0x3d, 0x7fffffff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5}}, {@lazytime}, {@norecovery}, {@journal_dev={'journal_dev', 0x3d, 0x4d40}}, {@usrquota}, {@jqfmt_vfsv1}, {@jqfmt_vfsv1}, {@resgid, 0x32}], [{@dont_hash}, {@permit_directio}]}, 0x1, 0x4f5, &(0x7f0000000a40)="$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") (fail_nth: 3) [ 305.867306][ T6715] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 305.899029][ T6715] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 20:02:16 executing program 3: r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000080)='%\xb9\xf6\x822\xcc0{\xc7:', 0x0) (fail_nth: 5) [ 305.945005][ T6715] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 305.987304][ T6715] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 306.020065][ T6720] FAULT_INJECTION: forcing a failure. [ 306.020065][ T6720] name failslab, interval 1, probability 0, space 0, times 0 [ 306.061865][ T6715] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 306.076947][ T6720] CPU: 1 PID: 6720 Comm: syz-executor.4 Not tainted 6.5.0-rc1-next-20230714-syzkaller #0 [ 306.086934][ T6720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 306.097356][ T6720] Call Trace: [ 306.100681][ T6720] [ 306.103664][ T6720] dump_stack_lvl+0x125/0x1b0 [ 306.108430][ T6720] should_fail_ex+0x496/0x5b0 [ 306.110061][ T6722] kAFS: unable to lookup cell '¹ö‚2Ì0{Ç' [ 306.113347][ T6720] ? shmem_alloc_inode+0x25/0x50 [ 306.113389][ T6720] should_failslab+0x9/0x20 [ 306.113435][ T6720] kmem_cache_alloc_lru+0x3e6/0x630 [ 306.113487][ T6720] ? shmem_destroy_inode+0xe0/0xe0 [ 306.113520][ T6720] ? shmem_alloc_inode+0x25/0x50 [ 306.113552][ T6720] ? reacquire_held_locks+0x4b0/0x4b0 [ 306.113637][ T6720] shmem_alloc_inode+0x25/0x50 [ 306.119665][ T6722] FAULT_INJECTION: forcing a failure. [ 306.119665][ T6722] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 306.124352][ T6720] alloc_inode+0x5d/0x220 [ 306.124404][ T6720] new_inode+0x29/0x270 [ 306.124447][ T6720] __shmem_get_inode+0x1a1/0xe50 [ 306.124482][ T6720] ? do_raw_spin_unlock+0x173/0x230 [ 306.124540][ T6720] __shmem_file_setup+0x16c/0x300 [ 306.124582][ T6720] __do_sys_memfd_create+0x585/0xa70 [ 306.124617][ T6720] ? fput+0x30/0x1a0 [ 306.124648][ T6720] ? PageTransHuge+0x300/0x300 [ 306.207058][ T6720] ? ksys_write+0x1a7/0x250 [ 306.212151][ T6720] ? __ia32_sys_read+0xb0/0xb0 [ 306.218002][ T6720] ? syscall_enter_from_user_mode+0x26/0x80 [ 306.224172][ T6720] do_syscall_64+0x38/0xb0 [ 306.229040][ T6720] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 306.235817][ T6720] RIP: 0033:0x7f236947cb29 [ 306.240394][ T6720] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 306.260651][ T6720] RSP: 002b:00007f236a21ae98 EFLAGS: 00000206 ORIG_RAX: 000000000000013f [ 306.269393][ T6720] RAX: ffffffffffffffda RBX: 00000000000004f5 RCX: 00007f236947cb29 [ 306.277751][ T6720] RDX: 00007f236a21af3c RSI: 0000000000000000 RDI: 00007f23694c76ba [ 306.286563][ T6720] RBP: 0000000020000a40 R08: 00007f236a21ac37 R09: 00007f236a21b120 [ 306.294846][ T6720] R10: 000000000000000a R11: 0000000000000206 R12: 0000000020000500 [ 306.303574][ T6720] R13: 00007f236a21af3c R14: 00007f236a21af40 R15: 00000000200001c0 20:02:17 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) (fail_nth: 3) [ 306.311597][ T6720] [ 306.333825][ T6715] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 306.344106][ T6724] FAULT_INJECTION: forcing a failure. [ 306.344106][ T6724] name failslab, interval 1, probability 0, space 0, times 0 [ 306.357347][ T6724] CPU: 0 PID: 6724 Comm: syz-executor.2 Not tainted 6.5.0-rc1-next-20230714-syzkaller #0 [ 306.367316][ T6724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 306.372670][ T6715] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 306.377610][ T6724] Call Trace: [ 306.377622][ T6724] [ 306.377634][ T6724] dump_stack_lvl+0x125/0x1b0 [ 306.377684][ T6724] should_fail_ex+0x496/0x5b0 [ 306.402935][ T6724] should_failslab+0x9/0x20 [ 306.407611][ T6724] __kmem_cache_alloc_node+0x2fd/0x350 [ 306.413155][ T6724] ? copy_mount_options+0x55/0x190 [ 306.418355][ T6724] kmalloc_trace+0x25/0xe0 [ 306.421968][ T6715] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 306.422923][ T6724] copy_mount_options+0x55/0x190 [ 306.422988][ T6724] __x64_sys_mount+0x1ad/0x310 [ 306.442415][ T6724] ? copy_mnt_ns+0xb60/0xb60 [ 306.447180][ T6724] ? syscall_enter_from_user_mode+0x26/0x80 [ 306.453167][ T6724] do_syscall_64+0x38/0xb0 [ 306.457742][ T6724] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 306.463807][ T6724] RIP: 0033:0x7fb9f387cb29 20:02:17 executing program 1: bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x18, 0x16, 0x8, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x4}, 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) timer_create(0x2, &(0x7f0000000100)={0x0, 0x12, 0x1}, &(0x7f0000000280)=0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], 0xeb) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) unshare(0x60060000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0) unshare(0x40020000) rmdir(&(0x7f0000000740)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) timer_settime(r2, 0x0, &(0x7f00000003c0)={{0x77359400}, {0x77359400}}, &(0x7f0000000440)) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='adfs\x00', 0x4040, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f00000010c0)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000cc0)=ANY=[@ANYBLOB="a39c8ef1fcf67af34be8aa8059eacf91fb5ffb4d09d26b0f2a94725725c1f0d2c949ea60e043e8c1cc2aef5e779553a7d647351848e5fc0cc8b43117bc62ddfe531cf0fd3dd25bf189c226dd1a1461dafd74952b71e358c87981649a81b5696971336b06c47c0a044d3bd25e27e28f956487b8344a51cf5f54bde5a2f4050b3fa6ef2f0d05000000"], 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) mkdirat(r3, &(0x7f0000002540)='./file0\x00', 0x0) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000001c0)={0x6589}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000c80)=[@text64={0x40, &(0x7f0000000c00)="c4417e6fe3400f790bb9410800000f32b9800000c00f3235004000000f300f01cf66baf80cb854c46f85ef66bafc0ced440f0dc6f36d66b834000f00d066baa100ed", 0x42}], 0x1, 0x0, &(0x7f0000000cc0), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000480)={0x10001, 0x2, 0x1, 0x1000, &(0x7f0000011000/0x1000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000600)={0x8f, 0x0, 0x9}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000004240)='cgroup.controllers\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003ec0)=[{{&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/202, 0xca}, {&(0x7f0000000680)=""/101, 0x65}, {&(0x7f0000000780)=""/240, 0xf0}, {&(0x7f0000000880)=""/216, 0xd8}], 0x4, &(0x7f0000000980)=""/158, 0x9e}}, {{&(0x7f0000000a40)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000380)=""/33, 0x21}, {&(0x7f0000000ac0)=""/144, 0x90}, {&(0x7f0000000e40)=""/255, 0xff}, {&(0x7f0000000b80)=""/108, 0x6c}], 0x4, &(0x7f0000000f40)=""/82, 0x52}, 0x8}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000fc0)=""/229, 0xe5}, {&(0x7f00000005c0)=""/9, 0x9}, {&(0x7f0000000d80)=""/131, 0x83}, {&(0x7f0000001140)=""/251, 0xfb}], 0x4, &(0x7f0000001240)=""/43, 0x2b}, 0x80000001}, {{0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000001280)=""/31, 0x1f}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f00000022c0)=""/204, 0xcc}, {&(0x7f00000023c0)=""/237, 0xed}, {&(0x7f00000024c0)=""/3, 0x3}, {&(0x7f0000002500)=""/42, 0x2a}, {&(0x7f0000002540)}, {&(0x7f0000002580)=""/10, 0xa}, {&(0x7f00000025c0)=""/106, 0x6a}], 0x9, &(0x7f0000002700)=""/112, 0x70}, 0x4}, {{&(0x7f0000002780)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000003d00)=[{&(0x7f0000002800)=""/82, 0x52}, {&(0x7f0000002880)=""/160, 0xa0}, {&(0x7f0000002940)=""/183, 0xb7}, {&(0x7f0000002a00)=""/146, 0x92}, {&(0x7f0000002ac0)=""/76, 0x4c}, {&(0x7f0000002b40)=""/109, 0x6d}, {&(0x7f0000002bc0)=""/206, 0xce}, {&(0x7f0000002cc0)=""/4096, 0x1000}, {&(0x7f0000003cc0)=""/6, 0x6}], 0x9, &(0x7f0000003dc0)=""/231, 0xe7}, 0x2005}], 0x5, 0x40000040, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) [ 306.468299][ T6724] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 306.488071][ T6724] RSP: 002b:00007fb9f45a50c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 306.496648][ T6724] RAX: ffffffffffffffda RBX: 00007fb9f399bf80 RCX: 00007fb9f387cb29 [ 306.504707][ T6724] RDX: 0000000020000280 RSI: 00000000200002c0 RDI: 0000000000000000 [ 306.513096][ T6724] RBP: 00007fb9f45a5120 R08: 0000000020000400 R09: 0000000000000000 [ 306.521297][ T6724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.529496][ T6724] R13: 000000000000000b R14: 00007fb9f399bf80 R15: 00007fffe27e74d8 [ 306.537551][ T6724] [ 306.591067][ T6722] CPU: 1 PID: 6722 Comm: syz-executor.3 Not tainted 6.5.0-rc1-next-20230714-syzkaller #0 [ 306.601126][ T6722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 306.611324][ T6722] Call Trace: [ 306.614790][ T6722] [ 306.617861][ T6722] dump_stack_lvl+0x125/0x1b0 [ 306.622735][ T6722] should_fail_ex+0x496/0x5b0 [ 306.627561][ T6722] _copy_to_user+0x30/0xb0 [ 306.632070][ T6722] simple_read_from_buffer+0xd0/0x150 [ 306.637567][ T6722] proc_fail_nth_read+0x1a4/0x230 [ 306.642909][ T6722] ? proc_sessionid_read+0x230/0x230 [ 306.648374][ T6722] ? security_file_permission+0xdc/0x100 [ 306.654255][ T6722] ? proc_sessionid_read+0x230/0x230 [ 306.659832][ T6722] vfs_read+0x1ce/0x930 [ 306.664348][ T6722] ? kernel_read+0x1b0/0x1b0 [ 306.669204][ T6722] ? __fget_files+0x279/0x410 [ 306.674372][ T6722] ksys_read+0x12f/0x250 [ 306.678711][ T6722] ? vfs_write+0xe40/0xe40 [ 306.683319][ T6722] ? syscall_enter_from_user_mode+0x26/0x80 [ 306.689305][ T6722] do_syscall_64+0x38/0xb0 [ 306.693795][ T6722] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 306.695142][ T6727] FAULT_INJECTION: forcing a failure. [ 306.695142][ T6727] name failslab, interval 1, probability 0, space 0, times 0 [ 306.699734][ T6722] RIP: 0033:0x7f674ea7b7cc [ 306.699766][ T6722] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 59 81 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 af 81 02 00 48 20:02:17 executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x8050, &(0x7f00000001c0)={[{@sb={'sb', 0x3d, 0x7fffffff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5}}, {@lazytime}, {@norecovery}, {@journal_dev={'journal_dev', 0x3d, 0x4d40}}, {@usrquota}, {@jqfmt_vfsv1}, {@jqfmt_vfsv1}, {@resgid, 0x32}], [{@dont_hash}, {@permit_directio}]}, 0x1, 0x4f5, &(0x7f0000000a40)="$eJzs3d1rW28dAPDvSZu5l/5sf74xB27TTbqhS9rVbcWLvYB4N1Dm/axtWkrTpjTptpbhMvwDBBEVvPLKG8E/QJD9CSIM3L2oKKKbXnihO5I323VJm2Ga7Nd8PnBynnOenHy/DyHPOc85h5wAhtb5iLgdEa/TNL0cEePN9ZnmVF2svTTe9+rl4/nalESa3vtbEklzXeuzzqVpWpufamwSEaP1Db+TvB23vLW9MlcsFjaay/nK6nq+vLV9ZXl1bqmwVFibmZm+Pntj9trsVE/aWcvp5tf+9KPv//zrN3/95Ye/v/+XS9+tpfXpZv3udvRSo+nZOL5r3WhEbBxGsAEYac6zA84DAIDu1I7xPxERX4iIyzEeI/WjUwAAAOAoSW+Nxb+TiBQAAAA4sjIRMRZJJte8F2AsMplcrnG/7KfiZKZYKle+tFjaXFuo1UVMRDazuFwsTDXvFZ6IbFJbnq6Xd5av7lmeiYgPI+KH4yfqy7n5UnFh0Cc/AAAAYEic2jP+/+d4Y/wPAAAAHDETg04AAAAAOHTG/wAAAHD0Gf8DAADAkfaNu3drU9p6/vXCg63NldKDKwuF8kpudXM+N1/aWM8tlUpL9f/sWz3o84ql0vpXYm3zUb5SKFfy5a3t+6ulzbXK/eU3HoENAAAA9NGH5569SCKi+tUT9QkYHqPv8uY/Hl4eQP+NDDoBYGDeaf8PHCnZQScADFxyQH3Hm3d+0/tcAACAwzH52Wcvbu25/n+sWbf/uYFqpg/pAYfI+T8YXvte/0/T9En/UgH6zPV/GF7ZGAkDeRhuB13/v9Opouvr/2n6TgkBAAA9N1afkkwuon4eYCwymVwu4oP6YwGyyeJysTAVER+PiN+NZz9WW56ub5kcOGYAAAAAAAAAAAAAAAAAAAAAAAAAABrSNIkUAAAAONIiMn9Oms//mhy/OLb3/MCx5F/j9XlEPPzpvR8/mqtUNqZr6//+v/WVnzTXXx3EGQwAAAAYQsf2r26N01vjeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADopVcvH8+3pn7G/eudiJjYib9TMxrH6/PjkY2Ik/9IYnTXdklEjPQgfvVpRJxu1/6kllZMNLNoF//EAONnIuJUD+LDMHtW639ut/v9ZeJ8fd7+93e93kP9//b2f7vjt/q/kQ79zwddxjjz/Jf5jvGfRpwZbd//tOInHeJf6DL+t7+1vd2pLv1ZxGTb/U/yRqx8ZXU9X97avrK8OrdUWCqszcxMX5+9MXttdiq/uFwsNF/bxvjB5371er/2n+wQf+Lt9lc/syuni122/z/PH738ZKOYbRf/0oX23//pt+M3axr7vi82y7X6yVa52ijvdvYXvz27X/sXOrT/oO//Upftv/zN7/2hy7cCAH1Q3tpemSsWCxvvTSF9P9LovlA7LOpz0Ey8J23/iBee9C3W56uN39vAm9x1YdA9EwAA0Gs7B/2DzgQAAAAAAAAAAAAAAAAAAACGVz/+TmxvzOpOMU363F4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgE7+GwAA//9p09qu") (fail_nth: 4) [ 306.699797][ T6722] RSP: 002b:00007f674f77d0c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 306.745456][ T6722] RAX: ffffffffffffffda RBX: 00007f674eb9bf80 RCX: 00007f674ea7b7cc [ 306.753674][ T6722] RDX: 000000000000000f RSI: 00007f674f77d130 RDI: 0000000000000004 [ 306.761707][ T6722] RBP: 00007f674f77d120 R08: 0000000000000000 R09: 0000000000000000 [ 306.769752][ T6722] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000001 [ 306.778050][ T6722] R13: 000000000000000b R14: 00007f674eb9bf80 R15: 00007ffc10f2a808 [ 306.786099][ T6722] [ 306.789632][ T6727] CPU: 0 PID: 6727 Comm: syz-executor.4 Not tainted 6.5.0-rc1-next-20230714-syzkaller #0 [ 306.800037][ T6727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 306.810158][ T6727] Call Trace: [ 306.813495][ T6727] [ 306.816488][ T6727] dump_stack_lvl+0x125/0x1b0 [ 306.821500][ T6727] should_fail_ex+0x496/0x5b0 [ 306.826285][ T6727] should_failslab+0x9/0x20 [ 306.831143][ T6727] kmem_cache_alloc+0x33a/0x3b0 [ 306.836193][ T6727] security_inode_alloc+0x38/0x180 [ 306.841499][ T6727] inode_init_always+0xbef/0xee0 [ 306.846602][ T6727] alloc_inode+0x7a/0x220 [ 306.850998][ T6727] new_inode+0x29/0x270 [ 306.855225][ T6727] __shmem_get_inode+0x1a1/0xe50 [ 306.860239][ T6727] ? do_raw_spin_unlock+0x173/0x230 [ 306.867977][ T6727] __shmem_file_setup+0x16c/0x300 [ 306.873101][ T6727] __do_sys_memfd_create+0x585/0xa70 [ 306.878568][ T6727] ? fput+0x30/0x1a0 [ 306.882543][ T6727] ? PageTransHuge+0x300/0x300 [ 306.887387][ T6727] ? ksys_write+0x1a7/0x250 [ 306.891990][ T6727] ? __ia32_sys_read+0xb0/0xb0 [ 306.897027][ T6727] ? syscall_enter_from_user_mode+0x26/0x80 [ 306.903019][ T6727] do_syscall_64+0x38/0xb0 [ 306.907519][ T6727] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 306.913503][ T6727] RIP: 0033:0x7f236947cb29 [ 306.918344][ T6727] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 306.938499][ T6727] RSP: 002b:00007f236a21ae98 EFLAGS: 00000206 ORIG_RAX: 000000000000013f [ 306.947092][ T6727] RAX: ffffffffffffffda RBX: 00000000000004f5 RCX: 00007f236947cb29 [ 306.955391][ T6727] RDX: 00007f236a21af3c RSI: 0000000000000000 RDI: 00007f23694c76ba [ 306.963423][ T6727] RBP: 0000000020000a40 R08: 00007f236a21ac37 R09: 00007f236a21b120 [ 306.977013][ T6727] R10: 000000000000000a R11: 0000000000000206 R12: 0000000020000500 [ 306.985140][ T6727] R13: 00007f236a21af3c R14: 00007f236a21af40 R15: 00000000200001c0 20:02:17 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) (fail_nth: 4) [ 306.993188][ T6727] [ 307.080112][ T6735] FAULT_INJECTION: forcing a failure. [ 307.080112][ T6735] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 307.147030][ T6735] CPU: 0 PID: 6735 Comm: syz-executor.2 Not tainted 6.5.0-rc1-next-20230714-syzkaller #0 [ 307.157009][ T6735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 307.167317][ T6735] Call Trace: [ 307.170667][ T6735] [ 307.173660][ T6735] dump_stack_lvl+0x125/0x1b0 [ 307.178441][ T6735] should_fail_ex+0x496/0x5b0 [ 307.183299][ T6735] _copy_from_user+0x30/0xf0 [ 307.188241][ T6735] copy_mount_options+0x76/0x190 [ 307.193371][ T6735] __x64_sys_mount+0x1ad/0x310 [ 307.198395][ T6735] ? copy_mnt_ns+0xb60/0xb60 [ 307.203332][ T6735] ? syscall_enter_from_user_mode+0x26/0x80 [ 307.209501][ T6735] do_syscall_64+0x38/0xb0 [ 307.214096][ T6735] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 307.220410][ T6735] RIP: 0033:0x7fb9f387cb29 [ 307.225200][ T6735] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 307.245423][ T6735] RSP: 002b:00007fb9f45a50c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 307.253908][ T6735] RAX: ffffffffffffffda RBX: 00007fb9f399bf80 RCX: 00007fb9f387cb29 [ 307.262038][ T6735] RDX: 0000000020000280 RSI: 00000000200002c0 RDI: 0000000000000000 [ 307.270078][ T6735] RBP: 00007fb9f45a5120 R08: 0000000020000400 R09: 0000000000000000 [ 307.278463][ T6735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.286856][ T6735] R13: 000000000000000b R14: 00007fb9f399bf80 R15: 00007fffe27e74d8 [ 307.294998][ T6735] [ 307.434020][ T6702] loop0: detected capacity change from 0 to 32768 [ 307.457980][ T6702] xfs: Unknown parameter 'mtpt' [ 307.732279][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 307.732300][ T27] audit: type=1800 audit(1689364938.459:25): pid=6702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1948 res=0 errno=0 20:02:18 executing program 0: r0 = syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000000)={[{}, {@nolazytime}, {@logbufs={'logbufs', 0x3d, 0x5}}, {@inode64}, {@allocsize={'allocsize', 0x3d, [0x38, 0x36, 0x6d]}}, {@prjquota}, {@mtpt}]}, 0x41, 0x96cb, &(0x7f0000012ec0)="$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") r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_PANIC(r1, 0x5111) (async) getdents64(r1, &(0x7f00000002c0)=""/219, 0xdb) (async) r2 = eventfd(0x8) (async) r3 = getpid() (async) read$FUSE(r1, &(0x7f0000001500)={0x2020, 0x0, 0x0, 0x0}, 0x2020) (async) r5 = syz_open_dev$vim2m(&(0x7f0000003540), 0x0, 0x2) r6 = openat$cgroup_ro(r1, &(0x7f0000003580)='rdma.current\x00', 0x0, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) (async) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000004dc0)=0x0) r11 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) dup2(r11, r11) setsockopt$ARPT_SO_SET_REPLACE(r11, 0x0, 0x60, &(0x7f0000000580)={'filter\x00', 0x7, 0x4, 0x408, 0x110, 0x220, 0x110, 0x320, 0x320, 0x320, 0x4, &(0x7f0000000540), {[{{@arp={@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0x0, 0x8, 0x0, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0xff, 0x0, 0x0, 0xff]}}, 0x1f, 0x4, 0x3c00, 0x400, 0x6, 0x1, 'ip6gre0\x00', 'pimreg1\x00', {0xff}, {0xff}, 0x0, 0x25a}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @private=0xa010100, 0xf, 0x1}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, 0xffffff00, 0x5, 0x2, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, {[0x0, 0xff, 0xff]}}, {@mac=@remote, {[0x167cb96d26756f27, 0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x9, 0xd3, 0x9, 0x0, 0x40, 0x3f, 'dvmrp0\x00', 'syzkaller0\x00', {0xff}, {0xff}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @private=0xa010101, @rand_addr=0x64010100, 0xf, 0x1}}}, {{@arp={@private=0xa010100, @remote, 0xffffff00, 0xffffffff, 0x2, 0x2, {@empty, {[0x0, 0xff, 0xff, 0xff]}}, {@mac, {[0xff, 0xff]}}, 0xff00, 0x0, 0x6, 0x5, 0x40, 0x4bf8, 'bridge_slave_1\x00', 'veth1_to_hsr\x00', {0xff}, {0xff}, 0x0, 0x22}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "05cbf2e8b2c51ba50e872c4e871944e8ac798fffd56fa5e1105bd91d10ae"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x458) r12 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) (async) r15 = getpgrp(0x0) stat(0x0, &(0x7f0000004700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000049c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)="dd77cea2c9c6bcb7a78b4346498ed9f649b1cc71d97bb8744f95be3e143cec68c8f427b9df7fd200cffa052d5d6772158394fb8d38b96cb6fbdae9338a68773b3d79c69c89efb0e689779d4e0b36781f5d363cb6cd073070d03caf777573e3312c696a41ecd89046ddc0d08f2a8980a4e2150f6e394b6fcb63498446993996899e430fc5aaf0307c75d76ee82b7491f44e081431484e03a631424bcc8a1bd68ec242", 0xa2}], 0x1, &(0x7f0000000b00)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000000001000000024000007ee3d5eb7abc2a5def36c4c205acc84957f358949fb767c07031dde9331b", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r13, @ANYBLOB="8000894db4abbdc60d87f7617daf6f3a42d30000", @ANYRESDEC=r16, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000000014da60c5aa5f705c8a04345237000000", @ANYRES32, @ANYRESDEC=r12, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000ffe5000000008e2ffb393db036695ef6b8950f0d5b8e35fc730500000000000000da0c0c54fe92fdc673759981ac61040a2daf15973c", @ANYRES16=r17, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESDEC=r15, @ANYBLOB='\x00\x00\x00\x00'], 0x100}}, {{&(0x7f0000000f40)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000012c0)=[{&(0x7f0000000fc0)='I', 0x1}, {&(0x7f0000001000)="dc14f4f6fa6b6ff010ad368bf9f4ae867049cc5c4b8e02dc6686470aa95ac5a045be2544790abd4d10eaf019f768f0e38706bb4729e6716248367929ba7fd1bafd1b9c0a8acedbf02f30baf2472481c03d96a85fcdfd9643f14e326112c927938572454a102f8718fbea593e1e9f1a8c402efd5ddc91344592f01a8999b3", 0x7e}, {0x0}, {0x0}], 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000005921888b6d0d3100002000000000000000df0f9509a1030000", @ANYRES32, @ANYRES32, @ANYRES64=r14, @ANYRES16=r11], 0x48, 0x4040000}}, {{&(0x7f0000001680)=@abs={0x1, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f0000001080)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="000000001c0000000000000001000000020000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="001ad900"/20, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES64=0x0, @ANYRES32, @ANYRES32, @ANYBLOB="1c0000000000000027c20a12f15a1b1ed776de6e266d730100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRESHEX=r11, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESHEX, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0002434d30ebf514dd93000000006700030a0000fed14e8bbe38e9f7f9e27889f680505fce202cfa498b516a", @ANYRES32, @ANYRES32=r12, @ANYRESOCT=r11, @ANYRES64, @ANYRES32, @ANYRES16, @ANYBLOB="10000000000000000100000001000000"], 0x110, 0x4000}}, {{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001c00)="a0e4211616abddafca09fbea0b920789a32574f6498aa4c62cbf63dfddb7cc6e87a40e2aa8a746802802e93183c580467c076431e0255a3bce6b4f6fdfb637118b97ed13e9eb5c5810c83184a95c2d2bd4e7a883fc9829d920397013ce464ea1daacc2fd1f36270ff941f0fc9762f915b452a2b4dcdc1588c9fee663b91f5c5ddfe53646c640aeb4b09eea78e8c53aa0dfa87a1a6d1b153e2c98d850c56c165ecd6e289f6b1e2b4471494d9499918eb01c33cb36bf82e70631b1506383940993e09b0aae9124756d48edb251", 0xcc}, {&(0x7f0000001d00)="53232f8a4c68accad6a06c1613142ad7039888f208eea2292f44699d91c67b464855a914471e19b608b7927b09146f9cc584c063d922f94675dd40a28ba42837d25c5be251b90d6109149296972be3196a99b81a92b7390bfb73883b19bd5080710c779867e22c48783f5acbe52ccc4779d364dac0fb32215c077512a0db8e56f5a59bd44e4fe802d4b220b754", 0x8d}, {&(0x7f0000001dc0)="15253d1493b677f91270d8e0e9c300b3207c287a0f2deb4de48d1e1ce3de835362f991f55f1f22b28dc6d2337cf3fff1c7aa3e1ef1ba16334eb2bf4d2cf4459325f0785392aa2a6881eb835a9422a37332732cd40f3644347553fcd011dd86404706bb4e3946d088606931afd72d1ab1d072758790659f02e09355c748791a6fd1695cb9ac52ad629354d3405ab04138953a0eee8012ae40059f748b", 0x9c}], 0x3, 0x0, 0x0, 0x1}}, {{&(0x7f0000004340)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000004400)=[{&(0x7f00000043c0)="aad80ea5db0c7a33bec0b0dabeb1a058e30b6704d3d8dd147c", 0x19}], 0x1, &(0x7f00000048c0)}}], 0x5, 0x4000008) (async) r18 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r19 = ioctl$KVM_CREATE_VM(r18, 0xae01, 0x0) dup(r19) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r19, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r19, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r19, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004e80)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000140)="d9ee6d9ff20b792ccb9a4a132659bb3eca55b8b6b50d5b1703997d0aec98f1dad6151aced0fdad5016dfc7cf83efef0fa0cf7887e59be0d9a130ea74145cfeefb3b9616d904f210ec8de6b0f74ec5cf9685e578bed", 0x55}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000000c0)="1e2dab80460a329214e0f2ab331e3e7393f92d7e52a1778bd19c7b700c9be735d4ee1d7b1a64eb328d53f861063b", 0x2e}, {&(0x7f00000001c0)="2cf63b29c79ba217831e1468e33accaaf7f821f7f42776dd7fe21b93d003cde0c52d8bccad88939983996401daa18676069e28941c613c17e51035a92f4aed3c605e69f851775a", 0x47}, {&(0x7f0000000240)="8c72073d5080b19dd9a073191dfb633dda4ef66cebe89338d585ed284de1861a49fd4c1c1087a9ff36d04944c560fc727cc69b3a158d7a7863ae4e39e4ed797db3eb6a466b7e842f05", 0x49}], 0x5, &(0x7f00000035c0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, r1]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x24, 0x1, 0x1, [r1, r1, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}, @cred={{0x1c, 0x1, 0x2, {r3, r4, 0xee01}}}, @rights={{0x10}}, @rights={{0x30, 0x1, 0x1, [r1, r0, r1, r0, 0xffffffffffffffff, r5, 0xffffffffffffffff, r1]}}, @rights={{0x2c, 0x1, 0x1, [r6, r0, 0xffffffffffffffff, r9, r0, r1, r0]}}], 0x118, 0x800}}, {{&(0x7f0000003700)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000003800)=[{&(0x7f0000003780)="01a74f29ffa6ba027b2255efc8fdc72227890c6003d692fd216b7b38f4b9e59c66a9d44d99289f3e120a7d33f2c142cec1855a3a9fea645ef1d7270136321935431e7ae0d5cd0dd9fd723bced26e13cff9c82564dc", 0x55}], 0x1}}, {{&(0x7f0000003840)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000004b00)=[{&(0x7f00000038c0)="063540786218fc9b0182e7118d578bdca35a413c3c7aa3fe576d7d821eb30a5e7f6dcc4bfdc73ae4d0d8d079dbd4124b941d5baf3e252b1cfc5257330b4a68", 0x3f}, {&(0x7f0000003900)="dc2a77d2217df2efae0eab1ab30679e88ec7146e654c5445a3569af28069087a7febd5f1d7b784d20cd52351b0eb5eded3b0816595bb9f5204c9f0db3dc9cff442cadf92870c2f6b6b14f8984b5211e3d6a80138954a737fe22763cad29e8f818661e590eb6518e2a6f5504c55e5c87df09b0190ee32104c2aac42f1594bb896873cc4d7567fc03ab0541b1486ae17f86e41fbfa8dd648828059aaf2036c17bbb1c5a6cbbfda9b5960a0ef988c6b4f9b7d3295dd1c72624ebf51385bae206362941149004173726d072908ed22930e1cfbd7098d7e2739868520315f5ca7b2fac64978cb95a838630e5abac1c5b9af38d8d8603240a710", 0xf7}, {&(0x7f0000003a00)="ea4001b0cf7c042ab34633d335026bb01a479b308b78e4929e3dbf61e955eef5dce27a385214353a5286c6d4d91a95f54bd863677e4d64ce3ea7caa957c41a7a6269c9413c8f47908a4d840ab57705604f5443791c60f6955ef0c781eeb404263633f2a12edf0ad7623476900640561e1a8942025e526a60eb92c8f85f3a2f45e3b33512d3cafe091e2ccebdced30ad4034bf2d9e6d92e48aaef46c1d26f4765e216eee397ada072ddc1182d2c4929cf82aa98be6f92dd06b46ec987fcc2e36d00f26f1f697107f86b8a96020ec9f7949fd2834d5f766d11453cc1834134f26163a8d787f100f322d83fbf985c7ca5ff01062c6a80b06d02184a39a978322c34bf970c1237c1fda691c38308458d8ec123a32940451bedf480652c742b8217b839cb86a266ccf146ab9bd8c1e3d1667b4d67bf1e92945072b5f5851e42579cb4a85537e3d54a986195798c9b82273ef64e74b55e5e983e85b6b56a815d0caa11abb8d70471f88a6e68806dba709dc3af40ea396b8abda61f45c781cad5aa96f0119af24b7dde3e3f51c2494cca6c105396939f94f1a77b806fb3e86e0fd39dfab04114c2cd29a40edb32fc762c3e8440fd2e6900c76e55a1ab730b8cad0e718d995548273ff5f3c396a0d4e169a3b734b956d8379d590d098959bca64e38763985f81e3ce4e6b331e99cbb82bef2880e76ea56ee805f41ef1d6615081addd550f205734425327513cdd725d503d9d21bcd4c025caeb4f49384ad36e65604dfc71cd1c48da3d92d36f4c1d99fe232ab1fa55c5f95be61a3fad42ac2114768f298daaa0f721959dec93e4b9ebd8151b257756d0ee71bae23f994d6209d4f777628374f2485da63c2f2cbea88a083c9bdc45846e8637c558b29ac27e1570f5e939f92ba228c80c0f8f9a50c9c5be46a9fe1c974027099e1ac7ce71c6ca011e5e672bc60d5db23383805cef3be9de51433ec4ff3ba3022c4be02ffa3b3ea2b3164ba73efd098e0d246b8d6210412cc032c8b17dc57a77aa956df555f99331b99e89be7ef69ac019b632b3557178b7a580d798577d20416132e5d20305d8df106576b2564ceee9b20d11fb03594415244ac57fa8ac3e3d703392982965e2298e646d30d3c6b6ccdb5ac5f1d1aaf44af4e987e9aa01f230310eb7273b5451ad3d4940fc77ce35095b2837b3994c21f8eed68f49f07149022865bf61377f416f0ad8671ee828046a81854b4bd17df652bdd3999cb60906aa0c7574257f85eb4229a81f790dee94e2f6d9b36c484e8c42976dae10751d9b520d033adef2b2bdfb2811f47370057d8bb324342f574b7eec850dc35e672be337361beeebb38751caa8f25dfa427f72b28ac3327826d5d2488eee1a4a5ad5b5a5586f18c8057ebd9bc63f43e260a27d585b8e9a7a29eac649f2bec7f2f86835a547d1cd2df1ec6265e1753bdba993aa02dba210a901da78acb764655998f65965cf1c17c92bcc14150c3d246ac43b202d8cbc6d0ca5677c8c5501b002ae57408c6dabe35b9dac1fe7d25881e77b8dc0309b642d50f2e38030d5be30afa1e6b63b0d6a1a1e24f9cddfc633d5af9134c39c2979a28cd394df7f0c3c853bdf1de2efa9dabd862f3fd366a0aa5556b8fee3444cefe4c04309740e7ceba2753ef73a7b0d36870608696302d1b0eb48b16c3f20efe9971f98de9ac3065d994b546e87386de2bd718151106663e7814850bf7999736538ad944d8f8e568547d268d8a7481b4d6df4e64c46d821b8e735fc83adc1b4e8097981db2cf445b45beb2287bc1b63135d0c40f3ebe4a869ea9df0462a6938c82eac69dbbab3a9204a2b074ca5c64ecbc21ad4307d2bb2f30ba4569274568a2a9989e97ce8e457d4eea2204ea2cac2faa1b2f638a9361aeeb02ef949276a42906f48dd0653c568b9e0d9649bcf316381463066cbb2a0965c7086ec80d078482f552d77691ee21a8bb38e4bcf6233cfbc11dbf2b5be5de3696d690295eabe4a7fdc8f31237ad8403883ff68ab2f244304171024a4b6a157bdd82a4363f095a334fa10423a6241e9510aebc9fa7e5786af4ade9eda4d95ab7d6c716358c918bda93e8eef77b3ce49fd8447515759860ee79ab8237f8fb93675fe45c0fdcbae11dea9b643729eee45cfd96c5387d5aac4efb6fc3c4fc655063a27dbe0a0037f3f9732a457bfe070e27bb841b9e38d608517b3d223bb9663b6072a9c9a8a0f30998133f8e0b6890c19cd4d668a1c47dcc5a2f2aef89708af239bb74f54ad96fe595d64db9dcc82abf4d2d1b8972efe6f3c0fbe51253f7c453aa4958a7d0e9eaad3842a480aef787a050ba6197d45e69f846ff880e99b8e1b1f4ef677b97becfee02cb8b7337f32035fa36c1bc05312486a3dcb7a3b410b5d20c21fff8d38dbca88606509f3a4e58c6f985d8a10f9af0dffbd531f1a000a2885cf009c108d9697d1392c2e636e5949c220a94b9f564872e37b3f5dbec2ee5478af543d46349ba665e3a7edc1a78e0c94e8eb2d3d0b78c8d4a8d4b22fb68560af31188ad882b8c5946bff4fdac702dca29f857c3a77d87151fd18c4057826445873b40901337cf0c5cdc5481fb349ece8fde9837541c21a7df7762a35379eaac4f10339ea37ddfcb4cf1c847a158b5e537f76d9d700c90a01a669a5df89b12b05df60d1feb19827375aac182ceff3257584cf9cd712c4ed76a59efe88780b2b7d10bffcbbf1ac70ca2de9d1fdc27fd5e00de116c65c36afe991efbeffeca54ce21fc25554e7bd54d8c976a8808f06741711ab748b5c6a4f4bdea0cbd5b6458bd8e01f4a0ae161e73d54eaca7838f214b4394d5c5b72b16643e3052ed421bc4cb33f99bbd17a1482f2c00a6071399b2e8d0caebcd86558eeaa8d03cc827848e5ba7d032e913da11c0dcec916ec82087ec1aa1ce28546ea4f74ef4a8e2a186cae4a1f10f8d50380962a808c084bb9367041ecbb05606ab98be85085f8c7af6c8062d733ba8130efe3e927adc9acd415d47a9e6d56c1bfe292dc7bcb48c4307a81988b4b6789ea8ff891445ab165bffaa396ce212ac57c122d4eeb3cdfd3c343b92c90116a26d6435e6eaa9e8fb5018414f8ba774a08f3ce7213bcccd26906719371a75d35c46d4a800d4e6d7d8b7298aa2fc3c859844356e964971aabe7fcd44118acac187329f73dd36626abab4e305a978ef99c8ff180e65725d5c455f6440163aaa0f6c848619192fc9a489e16251be01f5b5a0ef3b27ec0ce3a35b17c96cbf09cfc2bf5b43fe15f0f8707717804b87e17f72418303b90d950ddd316e6aa8e3dc2362d601bdebb78910dbdec83623edef36ab04f1d86640159ee4acb2a1dbf2f961a013a0c012f7f903e479055ac01694df460c5fa09b48cbdd9cd702234b505931935e97a85770edbcb961fc71d1d212e0785ef626be1f5ba0850299c0453274ac7325e327cd7fb04335c931da03ca7161396abe8e0c155e4d4d3b743bc49160bf45171e6f08331304136f7f464d512f88134468d675c3666f43d073c9dae899095b70b2c7a8e4400bf479beb2249c5e839733b38077dd37264af23b669ad6b577ba58e3c625b143107c396d5cc341f44c177430ef84b3372bb8a254363172bb274b041bc489b484766cac4c7f0aded9c1187785ff37bcfffdb5cbdc6f3ed989d5202058a2768e5b42b560c190b6eb77b2e91a02182229e7dcfe1dfa8d0257e68bf3c2a63a079341bca5f746648aabbce52f26692eaabac736cc0cfe94b667e7c7c959e6716078345c4c65f7891065f2275ae8cc3b9fa664959f5be7c75672c3226dc996ff8866271b24419601c564fe250279d17ce653870fd0b0c0f9e0303eac0a4c78bccd9e903ae71a7dd1836d78352b6115489dcff0c7905776275fd505e600b2ec6860890811869fd01e0346caacb5b332d49b97970e0830aef944ed9e74260597e96661871f219b0a7db6267d29184a95cae8617d10360da08694ddb6c8a95d49d8f059990f0370ccded82eae41c090398a5ad2262e34eb79909094a89b484a17f9dd6d1e6ab769aee119b6c9229e1f396707e9ecb88714c501a6f096861e6ea01c3152f38b65df804c4c034c9b2ce3fecd261376e417bdc1b324937b7ea58a6a67449bb237ade38c491b97e659094c5d9f7ff686128ebbcf9f6ded8955fe5ca5b7f329b63f7467920ab546a96e265fa1fd409d040bc7d6e371f3bfc59e38a33ae373df566b88d60a8010751085b86aec1405987b2c11ea3ec922dc9f0b93c30a6db88a8ba9298dc948fa72b67e44f7d8aa88bb298e141f60165078f33dd199dbff534cdbcdd83a0bb1c4b64fd7dee494a3fec5afd55b95d6cf0f16e5c34137ba9dfefb659180b553edd7c366ca0d1133be9b56c8dde07739a6c672380ab27257e16e9bdd1ba8f29d9e2cee1840cefccb8ed71493695cf3d049b8ce2e837a81e65e184af969f1f47189439b3dadfa4f5d25cf687dab2eba15b2be072b979f47a78882ab89e291643ccc91fd5594f62b8aa123449867038953ca23a56c067a61efd32eda383b734f4b868ae49f726f0074c7e1da05b45d6ff594619bd19c31cc9aa890825aaa030e3b6d1cafa4f4c5a2d2e59d3a152378876ac0e7f73cd9df9edb4d8d3af5c89209744e2f1404faf360ffa9141d202a0510541fbbbd942447daf66011afd64ecfaa21257a4e9df6b7a215c153db5cab7d9833ece102625a2457a161428eff97f0d8665a3c874c1124577f576ceec3f5e9f6ddb2c3ddaa667cfa7a9348a4684e7db0953cec911eeebee447f37805aae64b56ece28ccb623e4566e532f05f34b4046670866f36f847ce0f4bcebf965b2f76917b0567f963e60b43274d7e6978811cfa98eee06d48eb28d8d2025aa9d9bece0bf4cc603a989ddf0d24670f41ae50d1b26b6c81ecc70b26b3c8f7bc1b93c04f3951f276216abee1101ca51ad4666b94ddbb4198ae37fd7f309ac1bc06677267c5c15f01982e4a7f2f0916805072c30605d08658ce5145263c3e5a43134c848361a8e13bb86a02569918f2d3ca5d9592971b0966642cba84e8d737fd16bb9e24b31b14e43fecd699f18688a0aa46e58287184362f2881bc4106ba6fabdbb11812fa18936dc92e0d52ec537e2f898ec82b23fd724795bee5d54a5024f71327c6eddc6e5b5dfcef08799e49a4053d382205707b098dba24123d90ae4f7a0358f4adb357f9d54f9397e88ad4aca2527dbe5c97e53c9cdc371f83e02c3a4464658f855a15f611878fa5e7fba409e38c482b16ca921bb797a6799aa9cfc7ca2ab0a43a1fb233aaf70428c0c12e142b68484b4c1c2948db4ce650d3e35ec0e97809525a98f7a49c346d74527b81d6c46e9f8d6a391525d562c247509d02d5a19b8754d59d0f42bc4d4cba716106c357c4ebfd4cfe833c5db2bd903ca61f9cdd97fba05872b7ca537015e871e9168b958c1beac602038c48934b1786bd623c3b6cdbf6ced48003b9ecc67b99f5ef8e0f0864d1af67dd19d3bd68640d4d8d95502229dfdd7d2fa95b89da2c954b4b6b225c002268f03403452d586939d5b37759cff501b5343e9b2fb35c698c43b4c72f6372568b0357206ea651e91fddf19388d1a11d2c37c413073343f6b72d24a670c95c4088d928df07f0637dfa5733246491e10d89d4f35ec1eb8c0cd7fdc8d5bb057af71b4286a5932f63e52d8dbd2779de5fa1530c72a8ef19ad9a9358cb45586189c90be9870e892af6eb0182a13c64604b803ca70f28cf5f40b329a70df6f09698927b8c651e1f3cffa7f700dcd88c83c9ef926c15e5530990cea", 0x1000}, {&(0x7f0000004a00)="cd34451498c0c9c42bdc35818e22df4d6f21ca28846dbf22d1f3d3b3e081815674367ad4c43d74a0ce8ce4f3a3f8faa10c2d7409afc3d8b989073e2d2058c7aba4b298b53418e1385fc273218ba18cb2cd6dc3e4b542a4e78020286f771926fce1bc8181d73497a5db3a16fad7046b350a2d08b9550a396c4f99ca", 0x7b}, {&(0x7f0000004a80)="35c111d07a9dc3119ba1bb8c629294107521bc9a8803a2cf73476dbf708ed0c340b38619cc3e67e04de8118f5fdb9ad763d32d913fa18ba734c6bf526c74c7ff22a5f79f79cbc4948390f752629218abf831fa9cdf11", 0x56}], 0x5, 0x0, 0x0, 0x20040}}, {{&(0x7f0000004b80)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000004d80)=[{&(0x7f0000004c00)="2b23dc000051365c0791514f830c4cf15fbbbb4f122395a64b200c7e134eca6abe273b128871b47ba846404c935819a0cc15bf1c78fd1849bcb0aedc702cacc72e9431a065a3588c09b465301d5bed49d897f79e94b5e141f781519585246d9d3c609586706020fb401c09460a8e2c6f45d67b6871b5d1a0da4d3deab2af7cee6f2034d244a8a2d09935fd4c25907b23afd2dbd7a826200a0f25308ac4346e7774960c305a582f2be648c72746", 0xad}, {&(0x7f0000004cc0)="92a510a79a4345032c2cfbb6508569e792abc900e44756f7a0d523d5ca64b7a852c11a3bb02571fd72a7195b3312b14c8e41d6b4042b92ce05ebf6603d9060e79f85bf0e798f986cb3619d9f126a9ba15374e2d84a23c72a0c925cf29ddaca8562538d3533f7908835e264c9ed6907622126e54941adfd3fdcd8d461052ceb5a29569823a437df6493d35a079298111c6b3d074c126c084be32d901de5d9b5d380f4e51393359ed7fc1681edf95af9", 0xaf}], 0x2, &(0x7f0000004e00)=[@rights={{0x18, 0x1, 0x1, [r1, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r10, r17}}}, @rights={{0x14, 0x1, 0x1, [r19]}}], 0x50, 0x24000000}}], 0x4, 0x4008810) 20:02:18 executing program 3: r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000080)='%\xb9\xf6\x822\xcc0{\xc7:', 0x0) 20:02:18 executing program 5: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x102440, 0x0) (async, rerun: 32) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (rerun: 32) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000001ac0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x54, r5, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0x30, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) (async, rerun: 32) sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x1a0, r5, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x24000840}, 0x4000801) (rerun: 32) fcntl$setlease(r0, 0x400, 0x0) (async) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fcntl$setlease(r6, 0x400, 0x0) (async) r7 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r7, 0x400, 0x0) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = dup(r9) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_NMI(r11, 0xae9a) (async) ioctl$KVM_RUN(r11, 0xae80, 0x0) (async) fcntl$setlease(r11, 0x400, 0x1) 20:02:18 executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x8050, &(0x7f00000001c0)={[{@sb={'sb', 0x3d, 0x7fffffff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5}}, {@lazytime}, {@norecovery}, {@journal_dev={'journal_dev', 0x3d, 0x4d40}}, {@usrquota}, {@jqfmt_vfsv1}, {@jqfmt_vfsv1}, {@resgid, 0x32}], [{@dont_hash}, {@permit_directio}]}, 0x1, 0x4f5, &(0x7f0000000a40)="$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") (fail_nth: 5) 20:02:18 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) (fail_nth: 5) 20:02:18 executing program 1: bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x18, 0x16, 0x8, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x4}, 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) timer_create(0x2, &(0x7f0000000100)={0x0, 0x12, 0x1}, &(0x7f0000000280)=0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], 0xeb) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], 0xeb) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) unshare(0x60060000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0) unshare(0x40020000) (async) unshare(0x40020000) rmdir(&(0x7f0000000740)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) timer_settime(r2, 0x0, &(0x7f00000003c0)={{0x77359400}, {0x77359400}}, &(0x7f0000000440)) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='adfs\x00', 0x4040, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f00000010c0)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000cc0)=ANY=[@ANYBLOB="a39c8ef1fcf67af34be8aa8059eacf91fb5ffb4d09d26b0f2a94725725c1f0d2c949ea60e043e8c1cc2aef5e779553a7d647351848e5fc0cc8b43117bc62ddfe531cf0fd3dd25bf189c226dd1a1461dafd74952b71e358c87981649a81b5696971336b06c47c0a044d3bd25e27e28f956487b8344a51cf5f54bde5a2f4050b3fa6ef2f0d05000000"], 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) mkdirat(r3, &(0x7f0000002540)='./file0\x00', 0x0) (async) mkdirat(r3, &(0x7f0000002540)='./file0\x00', 0x0) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000001c0)={0x6589}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000c80)=[@text64={0x40, &(0x7f0000000c00)="c4417e6fe3400f790bb9410800000f32b9800000c00f3235004000000f300f01cf66baf80cb854c46f85ef66bafc0ced440f0dc6f36d66b834000f00d066baa100ed", 0x42}], 0x1, 0x0, &(0x7f0000000cc0), 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000c80)=[@text64={0x40, &(0x7f0000000c00)="c4417e6fe3400f790bb9410800000f32b9800000c00f3235004000000f300f01cf66baf80cb854c46f85ef66bafc0ced440f0dc6f36d66b834000f00d066baa100ed", 0x42}], 0x1, 0x0, &(0x7f0000000cc0), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000480)={0x10001, 0x2, 0x1, 0x1000, &(0x7f0000011000/0x1000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000600)={0x8f, 0x0, 0x9}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000004240)='cgroup.controllers\x00', 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000004240)='cgroup.controllers\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003ec0)=[{{&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/202, 0xca}, {&(0x7f0000000680)=""/101, 0x65}, {&(0x7f0000000780)=""/240, 0xf0}, {&(0x7f0000000880)=""/216, 0xd8}], 0x4, &(0x7f0000000980)=""/158, 0x9e}}, {{&(0x7f0000000a40)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000380)=""/33, 0x21}, {&(0x7f0000000ac0)=""/144, 0x90}, {&(0x7f0000000e40)=""/255, 0xff}, {&(0x7f0000000b80)=""/108, 0x6c}], 0x4, &(0x7f0000000f40)=""/82, 0x52}, 0x8}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000fc0)=""/229, 0xe5}, {&(0x7f00000005c0)=""/9, 0x9}, {&(0x7f0000000d80)=""/131, 0x83}, {&(0x7f0000001140)=""/251, 0xfb}], 0x4, &(0x7f0000001240)=""/43, 0x2b}, 0x80000001}, {{0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000001280)=""/31, 0x1f}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f00000022c0)=""/204, 0xcc}, {&(0x7f00000023c0)=""/237, 0xed}, {&(0x7f00000024c0)=""/3, 0x3}, {&(0x7f0000002500)=""/42, 0x2a}, {&(0x7f0000002540)}, {&(0x7f0000002580)=""/10, 0xa}, {&(0x7f00000025c0)=""/106, 0x6a}], 0x9, &(0x7f0000002700)=""/112, 0x70}, 0x4}, {{&(0x7f0000002780)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000003d00)=[{&(0x7f0000002800)=""/82, 0x52}, {&(0x7f0000002880)=""/160, 0xa0}, {&(0x7f0000002940)=""/183, 0xb7}, {&(0x7f0000002a00)=""/146, 0x92}, {&(0x7f0000002ac0)=""/76, 0x4c}, {&(0x7f0000002b40)=""/109, 0x6d}, {&(0x7f0000002bc0)=""/206, 0xce}, {&(0x7f0000002cc0)=""/4096, 0x1000}, {&(0x7f0000003cc0)=""/6, 0x6}], 0x9, &(0x7f0000003dc0)=""/231, 0xe7}, 0x2005}], 0x5, 0x40000040, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000003ec0)=[{{&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/202, 0xca}, {&(0x7f0000000680)=""/101, 0x65}, {&(0x7f0000000780)=""/240, 0xf0}, {&(0x7f0000000880)=""/216, 0xd8}], 0x4, &(0x7f0000000980)=""/158, 0x9e}}, {{&(0x7f0000000a40)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000380)=""/33, 0x21}, {&(0x7f0000000ac0)=""/144, 0x90}, {&(0x7f0000000e40)=""/255, 0xff}, {&(0x7f0000000b80)=""/108, 0x6c}], 0x4, &(0x7f0000000f40)=""/82, 0x52}, 0x8}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000fc0)=""/229, 0xe5}, {&(0x7f00000005c0)=""/9, 0x9}, {&(0x7f0000000d80)=""/131, 0x83}, {&(0x7f0000001140)=""/251, 0xfb}], 0x4, &(0x7f0000001240)=""/43, 0x2b}, 0x80000001}, {{0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000001280)=""/31, 0x1f}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f00000022c0)=""/204, 0xcc}, {&(0x7f00000023c0)=""/237, 0xed}, {&(0x7f00000024c0)=""/3, 0x3}, {&(0x7f0000002500)=""/42, 0x2a}, {&(0x7f0000002540)}, {&(0x7f0000002580)=""/10, 0xa}, {&(0x7f00000025c0)=""/106, 0x6a}], 0x9, &(0x7f0000002700)=""/112, 0x70}, 0x4}, {{&(0x7f0000002780)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000003d00)=[{&(0x7f0000002800)=""/82, 0x52}, {&(0x7f0000002880)=""/160, 0xa0}, {&(0x7f0000002940)=""/183, 0xb7}, {&(0x7f0000002a00)=""/146, 0x92}, {&(0x7f0000002ac0)=""/76, 0x4c}, {&(0x7f0000002b40)=""/109, 0x6d}, {&(0x7f0000002bc0)=""/206, 0xce}, {&(0x7f0000002cc0)=""/4096, 0x1000}, {&(0x7f0000003cc0)=""/6, 0x6}], 0x9, &(0x7f0000003dc0)=""/231, 0xe7}, 0x2005}], 0x5, 0x40000040, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) [ 307.984917][ T6750] FAULT_INJECTION: forcing a failure. [ 307.984917][ T6750] name failslab, interval 1, probability 0, space 0, times 0 [ 307.998187][ T6745] kAFS: unable to lookup cell '¹ö‚2Ì0{Ç' [ 308.043012][ T6751] FAULT_INJECTION: forcing a failure. [ 308.043012][ T6751] name failslab, interval 1, probability 0, space 0, times 0 [ 308.059711][ T6750] CPU: 0 PID: 6750 Comm: syz-executor.4 Not tainted 6.5.0-rc1-next-20230714-syzkaller #0 [ 308.069777][ T6750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 308.080760][ T6750] Call Trace: [ 308.084091][ T6750] [ 308.087081][ T6750] dump_stack_lvl+0x125/0x1b0 [ 308.091923][ T6750] should_fail_ex+0x496/0x5b0 [ 308.097029][ T6750] ? __d_alloc+0x32/0xac0 [ 308.101681][ T6750] should_failslab+0x9/0x20 [ 308.106266][ T6750] kmem_cache_alloc_lru+0x3e6/0x630 [ 308.111550][ T6750] ? ktime_get_coarse_real_ts64+0x147/0x200 [ 308.117563][ T6750] ? __d_alloc+0x32/0xac0 [ 308.122122][ T6750] __d_alloc+0x32/0xac0 [ 308.126528][ T6750] ? get_random_u32+0x423/0x7e0 [ 308.131930][ T6750] d_alloc_pseudo+0x1c/0x70 [ 308.136786][ T6750] alloc_file_pseudo+0xdc/0x240 [ 308.141742][ T6750] ? alloc_file+0x7f0/0x7f0 [ 308.146408][ T6750] ? lockdep_annotate_inode_mutex_key+0x4b/0x200 [ 308.153975][ T6750] ? do_raw_spin_unlock+0x173/0x230 [ 308.159237][ T6750] __shmem_file_setup+0x20d/0x300 [ 308.164319][ T6750] __do_sys_memfd_create+0x585/0xa70 [ 308.169811][ T6750] ? fput+0x30/0x1a0 [ 308.173915][ T6750] ? PageTransHuge+0x300/0x300 [ 308.178823][ T6750] ? ksys_write+0x1a7/0x250 [ 308.183651][ T6750] ? __ia32_sys_read+0xb0/0xb0 [ 308.188726][ T6750] ? syscall_enter_from_user_mode+0x26/0x80 [ 308.194802][ T6750] do_syscall_64+0x38/0xb0 [ 308.199284][ T6750] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 308.205448][ T6750] RIP: 0033:0x7f236947cb29 [ 308.209986][ T6750] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 308.230978][ T6750] RSP: 002b:00007f236a21ae98 EFLAGS: 00000206 ORIG_RAX: 000000000000013f [ 308.239483][ T6750] RAX: ffffffffffffffda RBX: 00000000000004f5 RCX: 00007f236947cb29 [ 308.247934][ T6750] RDX: 00007f236a21af3c RSI: 0000000000000000 RDI: 00007f23694c76ba [ 308.256216][ T6750] RBP: 0000000020000a40 R08: 00007f236a21ac37 R09: 00007f236a21b120 [ 308.264308][ T6750] R10: 000000000000000a R11: 0000000000000206 R12: 0000000020000500 [ 308.272317][ T6750] R13: 00007f236a21af3c R14: 00007f236a21af40 R15: 00000000200001c0 [ 308.280877][ T6750] [ 308.294810][ T6751] CPU: 0 PID: 6751 Comm: syz-executor.2 Not tainted 6.5.0-rc1-next-20230714-syzkaller #0 [ 308.305344][ T6751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 308.315542][ T6751] Call Trace: [ 308.319047][ T6751] [ 308.322140][ T6751] dump_stack_lvl+0x125/0x1b0 [ 308.327221][ T6751] should_fail_ex+0x496/0x5b0 [ 308.332301][ T6751] should_failslab+0x9/0x20 [ 308.337328][ T6751] kmem_cache_alloc+0x33a/0x3b0 [ 308.342272][ T6751] getname_flags.part.0+0x50/0x4d0 [ 308.347453][ T6751] ? rep_movs_alternative+0x4a/0xb0 [ 308.353079][ T6751] getname_flags+0x9c/0xf0 [ 308.357679][ T6751] user_path_at_empty+0x2c/0x60 [ 308.362719][ T6751] __x64_sys_mount+0x1ff/0x310 [ 308.367568][ T6751] ? copy_mnt_ns+0xb60/0xb60 [ 308.372244][ T6751] ? syscall_enter_from_user_mode+0x26/0x80 [ 308.378491][ T6751] do_syscall_64+0x38/0xb0 [ 308.383697][ T6751] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 308.389774][ T6751] RIP: 0033:0x7fb9f387cb29 [ 308.394253][ T6751] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 308.414833][ T6751] RSP: 002b:00007fb9f45a50c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 308.423579][ T6751] RAX: ffffffffffffffda RBX: 00007fb9f399bf80 RCX: 00007fb9f387cb29 [ 308.431871][ T6751] RDX: 0000000020000280 RSI: 00000000200002c0 RDI: 0000000000000000 20:02:19 executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x8050, &(0x7f00000001c0)={[{@sb={'sb', 0x3d, 0x7fffffff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5}}, {@lazytime}, {@norecovery}, {@journal_dev={'journal_dev', 0x3d, 0x4d40}}, {@usrquota}, {@jqfmt_vfsv1}, {@jqfmt_vfsv1}, {@resgid, 0x32}], [{@dont_hash}, {@permit_directio}]}, 0x1, 0x4f5, &(0x7f0000000a40)="$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") (fail_nth: 6) 20:02:19 executing program 3: r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x2, &(0x7f0000000000)='source', &(0x7f0000000080)='%\xb9\xf6\x822\xcc0{\xc7:', 0x0) [ 308.440179][ T6751] RBP: 00007fb9f45a5120 R08: 0000000020000400 R09: 0000000000000000 [ 308.448723][ T6751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.457363][ T6751] R13: 000000000000000b R14: 00007fb9f399bf80 R15: 00007fffe27e74d8 [ 308.466139][ T6751] 20:02:19 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) (fail_nth: 6) 20:02:19 executing program 3: r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x3, &(0x7f0000000000)='source', &(0x7f0000000080)='%\xb9\xf6\x822\xcc0{\xc7:', 0x0) [ 308.645047][ T6771] FAULT_INJECTION: forcing a failure. [ 308.645047][ T6771] name failslab, interval 1, probability 0, space 0, times 0 [ 308.730628][ T6771] CPU: 0 PID: 6771 Comm: syz-executor.4 Not tainted 6.5.0-rc1-next-20230714-syzkaller #0 [ 308.740538][ T6771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 308.752217][ T6771] Call Trace: [ 308.756239][ T6771] [ 308.759462][ T6771] dump_stack_lvl+0x125/0x1b0 [ 308.764269][ T6771] should_fail_ex+0x496/0x5b0 [ 308.769080][ T6771] should_failslab+0x9/0x20 [ 308.773667][ T6771] kmem_cache_alloc+0x33a/0x3b0 [ 308.778773][ T6771] ? reacquire_held_locks+0x4b0/0x4b0 [ 308.784239][ T6771] alloc_empty_file+0x73/0x1d0 [ 308.789434][ T6771] alloc_file+0x5e/0x7f0 [ 308.793757][ T6771] alloc_file_pseudo+0x174/0x240 [ 308.798791][ T6771] ? alloc_file+0x7f0/0x7f0 [ 308.803485][ T6771] ? lockdep_annotate_inode_mutex_key+0x4b/0x200 [ 308.810085][ T6771] ? do_raw_spin_unlock+0x173/0x230 [ 308.815593][ T6771] __shmem_file_setup+0x20d/0x300 [ 308.821051][ T6771] __do_sys_memfd_create+0x585/0xa70 [ 308.826596][ T6771] ? fput+0x30/0x1a0 [ 308.830682][ T6771] ? PageTransHuge+0x300/0x300 [ 308.835701][ T6771] ? ksys_write+0x1a7/0x250 [ 308.840293][ T6771] ? __ia32_sys_read+0xb0/0xb0 [ 308.845238][ T6771] ? syscall_enter_from_user_mode+0x26/0x80 [ 308.851316][ T6771] do_syscall_64+0x38/0xb0 [ 308.855806][ T6771] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 308.861861][ T6771] RIP: 0033:0x7f236947cb29 20:02:19 executing program 3: r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x4, &(0x7f0000000000)='source', &(0x7f0000000080)='%\xb9\xf6\x822\xcc0{\xc7:', 0x0) [ 308.866355][ T6771] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 308.887846][ T6771] RSP: 002b:00007f236a21ae98 EFLAGS: 00000206 ORIG_RAX: 000000000000013f [ 308.897289][ T6771] RAX: ffffffffffffffda RBX: 00000000000004f5 RCX: 00007f236947cb29 [ 308.905666][ T6771] RDX: 00007f236a21af3c RSI: 0000000000000000 RDI: 00007f23694c76ba [ 308.913788][ T6771] RBP: 0000000020000a40 R08: 00007f236a21ac37 R09: 00007f236a21b120 [ 308.922093][ T6771] R10: 000000000000000a R11: 0000000000000206 R12: 0000000020000500 20:02:19 executing program 3: r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x5, &(0x7f0000000000)='source', &(0x7f0000000080)='%\xb9\xf6\x822\xcc0{\xc7:', 0x0) [ 308.930488][ T6771] R13: 00007f236a21af3c R14: 00007f236a21af40 R15: 00000000200001c0 [ 308.938545][ T6771] [ 308.960011][ T6775] FAULT_INJECTION: forcing a failure. [ 308.960011][ T6775] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 308.989534][ T6775] CPU: 0 PID: 6775 Comm: syz-executor.2 Not tainted 6.5.0-rc1-next-20230714-syzkaller #0 [ 308.999470][ T6775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 309.009586][ T6775] Call Trace: [ 309.012917][ T6775] [ 309.016045][ T6775] dump_stack_lvl+0x125/0x1b0 [ 309.021023][ T6775] should_fail_ex+0x496/0x5b0 [ 309.025929][ T6775] strncpy_from_user+0x38/0x300 [ 309.030877][ T6775] getname_flags.part.0+0x93/0x4d0 [ 309.036530][ T6775] ? rep_movs_alternative+0x4a/0xb0 [ 309.041810][ T6775] getname_flags+0x9c/0xf0 [ 309.046310][ T6775] user_path_at_empty+0x2c/0x60 [ 309.051255][ T6775] __x64_sys_mount+0x1ff/0x310 [ 309.056099][ T6775] ? copy_mnt_ns+0xb60/0xb60 [ 309.060768][ T6775] ? syscall_enter_from_user_mode+0x26/0x80 [ 309.066772][ T6775] do_syscall_64+0x38/0xb0 [ 309.071268][ T6775] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 309.077234][ T6775] RIP: 0033:0x7fb9f387cb29 [ 309.081878][ T6775] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 309.101900][ T6775] RSP: 002b:00007fb9f45a50c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 309.110563][ T6775] RAX: ffffffffffffffda RBX: 00007fb9f399bf80 RCX: 00007fb9f387cb29 [ 309.118774][ T6775] RDX: 0000000020000280 RSI: 00000000200002c0 RDI: 0000000000000000 [ 309.126979][ T6775] RBP: 00007fb9f45a5120 R08: 0000000020000400 R09: 0000000000000000 [ 309.135278][ T6775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.143393][ T6775] R13: 000000000000000b R14: 00007fb9f399bf80 R15: 00007fffe27e74d8 [ 309.151795][ T6775] [ 309.574306][ T6758] loop0: detected capacity change from 0 to 32768 [ 309.590760][ T6758] xfs: Unknown parameter 'mtpt' [ 309.917269][ T27] audit: type=1800 audit(1689364940.639:26): pid=6781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1948 res=0 errno=0 20:02:21 executing program 0: r0 = syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000000)={[{}, {@nolazytime}, {@logbufs={'logbufs', 0x3d, 0x5}}, {@inode64}, {@allocsize={'allocsize', 0x3d, [0x38, 0x36, 0x6d]}}, {@prjquota}, {@mtpt}]}, 0x41, 0x96cb, &(0x7f0000012ec0)="$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") open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) (async) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_PANIC(r1, 0x5111) getdents64(r1, &(0x7f00000002c0)=""/219, 0xdb) (async) getdents64(r1, &(0x7f00000002c0)=""/219, 0xdb) eventfd(0x8) (async) r2 = eventfd(0x8) r3 = getpid() read$FUSE(r1, &(0x7f0000001500)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r5 = syz_open_dev$vim2m(&(0x7f0000003540), 0x0, 0x2) r6 = openat$cgroup_ro(r1, &(0x7f0000003580)='rdma.current\x00', 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) dup(r8) (async) r9 = dup(r8) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000004dc0)=0x0) r11 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) dup2(r11, r11) setsockopt$ARPT_SO_SET_REPLACE(r11, 0x0, 0x60, &(0x7f0000000580)={'filter\x00', 0x7, 0x4, 0x408, 0x110, 0x220, 0x110, 0x320, 0x320, 0x320, 0x4, &(0x7f0000000540), {[{{@arp={@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0x0, 0x8, 0x0, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0xff, 0x0, 0x0, 0xff]}}, 0x1f, 0x4, 0x3c00, 0x400, 0x6, 0x1, 'ip6gre0\x00', 'pimreg1\x00', {0xff}, {0xff}, 0x0, 0x25a}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @private=0xa010100, 0xf, 0x1}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, 0xffffff00, 0x5, 0x2, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, {[0x0, 0xff, 0xff]}}, {@mac=@remote, {[0x167cb96d26756f27, 0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x9, 0xd3, 0x9, 0x0, 0x40, 0x3f, 'dvmrp0\x00', 'syzkaller0\x00', {0xff}, {0xff}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @private=0xa010101, @rand_addr=0x64010100, 0xf, 0x1}}}, {{@arp={@private=0xa010100, @remote, 0xffffff00, 0xffffffff, 0x2, 0x2, {@empty, {[0x0, 0xff, 0xff, 0xff]}}, {@mac, {[0xff, 0xff]}}, 0xff00, 0x0, 0x6, 0x5, 0x40, 0x4bf8, 'bridge_slave_1\x00', 'veth1_to_hsr\x00', {0xff}, {0xff}, 0x0, 0x22}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "05cbf2e8b2c51ba50e872c4e871944e8ac798fffd56fa5e1105bd91d10ae"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x458) (async) setsockopt$ARPT_SO_SET_REPLACE(r11, 0x0, 0x60, &(0x7f0000000580)={'filter\x00', 0x7, 0x4, 0x408, 0x110, 0x220, 0x110, 0x320, 0x320, 0x320, 0x4, &(0x7f0000000540), {[{{@arp={@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0x0, 0x8, 0x0, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0xff, 0x0, 0x0, 0xff]}}, 0x1f, 0x4, 0x3c00, 0x400, 0x6, 0x1, 'ip6gre0\x00', 'pimreg1\x00', {0xff}, {0xff}, 0x0, 0x25a}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @private=0xa010100, 0xf, 0x1}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, 0xffffff00, 0x5, 0x2, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, {[0x0, 0xff, 0xff]}}, {@mac=@remote, {[0x167cb96d26756f27, 0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x9, 0xd3, 0x9, 0x0, 0x40, 0x3f, 'dvmrp0\x00', 'syzkaller0\x00', {0xff}, {0xff}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @private=0xa010101, @rand_addr=0x64010100, 0xf, 0x1}}}, {{@arp={@private=0xa010100, @remote, 0xffffff00, 0xffffffff, 0x2, 0x2, {@empty, {[0x0, 0xff, 0xff, 0xff]}}, {@mac, {[0xff, 0xff]}}, 0xff00, 0x0, 0x6, 0x5, 0x40, 0x4bf8, 'bridge_slave_1\x00', 'veth1_to_hsr\x00', {0xff}, {0xff}, 0x0, 0x22}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "05cbf2e8b2c51ba50e872c4e871944e8ac798fffd56fa5e1105bd91d10ae"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x458) r12 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r15 = getpgrp(0x0) stat(0x0, &(0x7f0000004700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000049c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)="dd77cea2c9c6bcb7a78b4346498ed9f649b1cc71d97bb8744f95be3e143cec68c8f427b9df7fd200cffa052d5d6772158394fb8d38b96cb6fbdae9338a68773b3d79c69c89efb0e689779d4e0b36781f5d363cb6cd073070d03caf777573e3312c696a41ecd89046ddc0d08f2a8980a4e2150f6e394b6fcb63498446993996899e430fc5aaf0307c75d76ee82b7491f44e081431484e03a631424bcc8a1bd68ec242", 0xa2}], 0x1, &(0x7f0000000b00)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000000001000000024000007ee3d5eb7abc2a5def36c4c205acc84957f358949fb767c07031dde9331b", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r13, @ANYBLOB="8000894db4abbdc60d87f7617daf6f3a42d30000", @ANYRESDEC=r16, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000000014da60c5aa5f705c8a04345237000000", @ANYRES32, @ANYRESDEC=r12, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000ffe5000000008e2ffb393db036695ef6b8950f0d5b8e35fc730500000000000000da0c0c54fe92fdc673759981ac61040a2daf15973c", @ANYRES16=r17, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESDEC=r15, @ANYBLOB='\x00\x00\x00\x00'], 0x100}}, {{&(0x7f0000000f40)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000012c0)=[{&(0x7f0000000fc0)='I', 0x1}, {&(0x7f0000001000)="dc14f4f6fa6b6ff010ad368bf9f4ae867049cc5c4b8e02dc6686470aa95ac5a045be2544790abd4d10eaf019f768f0e38706bb4729e6716248367929ba7fd1bafd1b9c0a8acedbf02f30baf2472481c03d96a85fcdfd9643f14e326112c927938572454a102f8718fbea593e1e9f1a8c402efd5ddc91344592f01a8999b3", 0x7e}, {0x0}, {0x0}], 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000005921888b6d0d3100002000000000000000df0f9509a1030000", @ANYRES32, @ANYRES32, @ANYRES64=r14, @ANYRES16=r11], 0x48, 0x4040000}}, {{&(0x7f0000001680)=@abs={0x1, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f0000001080)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="000000001c0000000000000001000000020000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="001ad900"/20, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES64=0x0, @ANYRES32, @ANYRES32, @ANYBLOB="1c0000000000000027c20a12f15a1b1ed776de6e266d730100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRESHEX=r11, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESHEX, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0002434d30ebf514dd93000000006700030a0000fed14e8bbe38e9f7f9e27889f680505fce202cfa498b516a", @ANYRES32, @ANYRES32=r12, @ANYRESOCT=r11, @ANYRES64, @ANYRES32, @ANYRES16, @ANYBLOB="10000000000000000100000001000000"], 0x110, 0x4000}}, {{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001c00)="a0e4211616abddafca09fbea0b920789a32574f6498aa4c62cbf63dfddb7cc6e87a40e2aa8a746802802e93183c580467c076431e0255a3bce6b4f6fdfb637118b97ed13e9eb5c5810c83184a95c2d2bd4e7a883fc9829d920397013ce464ea1daacc2fd1f36270ff941f0fc9762f915b452a2b4dcdc1588c9fee663b91f5c5ddfe53646c640aeb4b09eea78e8c53aa0dfa87a1a6d1b153e2c98d850c56c165ecd6e289f6b1e2b4471494d9499918eb01c33cb36bf82e70631b1506383940993e09b0aae9124756d48edb251", 0xcc}, {&(0x7f0000001d00)="53232f8a4c68accad6a06c1613142ad7039888f208eea2292f44699d91c67b464855a914471e19b608b7927b09146f9cc584c063d922f94675dd40a28ba42837d25c5be251b90d6109149296972be3196a99b81a92b7390bfb73883b19bd5080710c779867e22c48783f5acbe52ccc4779d364dac0fb32215c077512a0db8e56f5a59bd44e4fe802d4b220b754", 0x8d}, {&(0x7f0000001dc0)="15253d1493b677f91270d8e0e9c300b3207c287a0f2deb4de48d1e1ce3de835362f991f55f1f22b28dc6d2337cf3fff1c7aa3e1ef1ba16334eb2bf4d2cf4459325f0785392aa2a6881eb835a9422a37332732cd40f3644347553fcd011dd86404706bb4e3946d088606931afd72d1ab1d072758790659f02e09355c748791a6fd1695cb9ac52ad629354d3405ab04138953a0eee8012ae40059f748b", 0x9c}], 0x3, 0x0, 0x0, 0x1}}, {{&(0x7f0000004340)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000004400)=[{&(0x7f00000043c0)="aad80ea5db0c7a33bec0b0dabeb1a058e30b6704d3d8dd147c", 0x19}], 0x1, &(0x7f00000048c0)}}], 0x5, 0x4000008) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r18 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r19 = ioctl$KVM_CREATE_VM(r18, 0xae01, 0x0) dup(r19) (async) dup(r19) ioctl$KVM_SET_USER_MEMORY_REGION(r19, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r19, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r19, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r19, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004e80)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000140)="d9ee6d9ff20b792ccb9a4a132659bb3eca55b8b6b50d5b1703997d0aec98f1dad6151aced0fdad5016dfc7cf83efef0fa0cf7887e59be0d9a130ea74145cfeefb3b9616d904f210ec8de6b0f74ec5cf9685e578bed", 0x55}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000000c0)="1e2dab80460a329214e0f2ab331e3e7393f92d7e52a1778bd19c7b700c9be735d4ee1d7b1a64eb328d53f861063b", 0x2e}, {&(0x7f00000001c0)="2cf63b29c79ba217831e1468e33accaaf7f821f7f42776dd7fe21b93d003cde0c52d8bccad88939983996401daa18676069e28941c613c17e51035a92f4aed3c605e69f851775a", 0x47}, {&(0x7f0000000240)="8c72073d5080b19dd9a073191dfb633dda4ef66cebe89338d585ed284de1861a49fd4c1c1087a9ff36d04944c560fc727cc69b3a158d7a7863ae4e39e4ed797db3eb6a466b7e842f05", 0x49}], 0x5, &(0x7f00000035c0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, r1]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x24, 0x1, 0x1, [r1, r1, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}, @cred={{0x1c, 0x1, 0x2, {r3, r4, 0xee01}}}, @rights={{0x10}}, @rights={{0x30, 0x1, 0x1, [r1, r0, r1, r0, 0xffffffffffffffff, r5, 0xffffffffffffffff, r1]}}, @rights={{0x2c, 0x1, 0x1, [r6, r0, 0xffffffffffffffff, r9, r0, r1, r0]}}], 0x118, 0x800}}, {{&(0x7f0000003700)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000003800)=[{&(0x7f0000003780)="01a74f29ffa6ba027b2255efc8fdc72227890c6003d692fd216b7b38f4b9e59c66a9d44d99289f3e120a7d33f2c142cec1855a3a9fea645ef1d7270136321935431e7ae0d5cd0dd9fd723bced26e13cff9c82564dc", 0x55}], 0x1}}, {{&(0x7f0000003840)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000004b00)=[{&(0x7f00000038c0)="063540786218fc9b0182e7118d578bdca35a413c3c7aa3fe576d7d821eb30a5e7f6dcc4bfdc73ae4d0d8d079dbd4124b941d5baf3e252b1cfc5257330b4a68", 0x3f}, {&(0x7f0000003900)="dc2a77d2217df2efae0eab1ab30679e88ec7146e654c5445a3569af28069087a7febd5f1d7b784d20cd52351b0eb5eded3b0816595bb9f5204c9f0db3dc9cff442cadf92870c2f6b6b14f8984b5211e3d6a80138954a737fe22763cad29e8f818661e590eb6518e2a6f5504c55e5c87df09b0190ee32104c2aac42f1594bb896873cc4d7567fc03ab0541b1486ae17f86e41fbfa8dd648828059aaf2036c17bbb1c5a6cbbfda9b5960a0ef988c6b4f9b7d3295dd1c72624ebf51385bae206362941149004173726d072908ed22930e1cfbd7098d7e2739868520315f5ca7b2fac64978cb95a838630e5abac1c5b9af38d8d8603240a710", 0xf7}, {&(0x7f0000003a00)="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", 0x1000}, {&(0x7f0000004a00)="cd34451498c0c9c42bdc35818e22df4d6f21ca28846dbf22d1f3d3b3e081815674367ad4c43d74a0ce8ce4f3a3f8faa10c2d7409afc3d8b989073e2d2058c7aba4b298b53418e1385fc273218ba18cb2cd6dc3e4b542a4e78020286f771926fce1bc8181d73497a5db3a16fad7046b350a2d08b9550a396c4f99ca", 0x7b}, {&(0x7f0000004a80)="35c111d07a9dc3119ba1bb8c629294107521bc9a8803a2cf73476dbf708ed0c340b38619cc3e67e04de8118f5fdb9ad763d32d913fa18ba734c6bf526c74c7ff22a5f79f79cbc4948390f752629218abf831fa9cdf11", 0x56}], 0x5, 0x0, 0x0, 0x20040}}, {{&(0x7f0000004b80)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000004d80)=[{&(0x7f0000004c00)="2b23dc000051365c0791514f830c4cf15fbbbb4f122395a64b200c7e134eca6abe273b128871b47ba846404c935819a0cc15bf1c78fd1849bcb0aedc702cacc72e9431a065a3588c09b465301d5bed49d897f79e94b5e141f781519585246d9d3c609586706020fb401c09460a8e2c6f45d67b6871b5d1a0da4d3deab2af7cee6f2034d244a8a2d09935fd4c25907b23afd2dbd7a826200a0f25308ac4346e7774960c305a582f2be648c72746", 0xad}, {&(0x7f0000004cc0)="92a510a79a4345032c2cfbb6508569e792abc900e44756f7a0d523d5ca64b7a852c11a3bb02571fd72a7195b3312b14c8e41d6b4042b92ce05ebf6603d9060e79f85bf0e798f986cb3619d9f126a9ba15374e2d84a23c72a0c925cf29ddaca8562538d3533f7908835e264c9ed6907622126e54941adfd3fdcd8d461052ceb5a29569823a437df6493d35a079298111c6b3d074c126c084be32d901de5d9b5d380f4e51393359ed7fc1681edf95af9", 0xaf}], 0x2, &(0x7f0000004e00)=[@rights={{0x18, 0x1, 0x1, [r1, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r10, r17}}}, @rights={{0x14, 0x1, 0x1, [r19]}}], 0x50, 0x24000000}}], 0x4, 0x4008810) 20:02:21 executing program 5: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x102440, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000001ac0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x54, r5, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0x30, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x1a0, r5, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x24000840}, 0x4000801) fcntl$setlease(r0, 0x400, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fcntl$setlease(r6, 0x400, 0x0) (async) fcntl$setlease(r6, 0x400, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) r7 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r7, 0x400, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) (async) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = dup(r9) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) (async) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r11, 0xae9a) ioctl$KVM_RUN(r11, 0xae80, 0x0) (async) ioctl$KVM_RUN(r11, 0xae80, 0x0) fcntl$setlease(r11, 0x400, 0x1) 20:02:21 executing program 3: r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, &(0x7f0000000000)='source', &(0x7f0000000080)='%\xb9\xf6\x822\xcc0{\xc7:', 0x0) 20:02:21 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) (fail_nth: 7) 20:02:21 executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x8050, &(0x7f00000001c0)={[{@sb={'sb', 0x3d, 0x7fffffff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5}}, {@lazytime}, {@norecovery}, {@journal_dev={'journal_dev', 0x3d, 0x4d40}}, {@usrquota}, {@jqfmt_vfsv1}, {@jqfmt_vfsv1}, {@resgid, 0x32}], [{@dont_hash}, {@permit_directio}]}, 0x1, 0x4f5, &(0x7f0000000a40)="$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") (fail_nth: 7) [ 310.374184][ T6795] FAULT_INJECTION: forcing a failure. [ 310.374184][ T6795] name failslab, interval 1, probability 0, space 0, times 0 [ 310.377104][ T6792] FAULT_INJECTION: forcing a failure. [ 310.377104][ T6792] name failslab, interval 1, probability 0, space 0, times 0 [ 310.411529][ T6795] CPU: 0 PID: 6795 Comm: syz-executor.4 Not tainted 6.5.0-rc1-next-20230714-syzkaller #0 [ 310.421455][ T6795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 310.431667][ T6795] Call Trace: [ 310.435097][ T6795] [ 310.438171][ T6795] dump_stack_lvl+0x125/0x1b0 [ 310.442932][ T6795] should_fail_ex+0x496/0x5b0 [ 310.448048][ T6795] should_failslab+0x9/0x20 [ 310.453135][ T6795] kmem_cache_alloc+0x33a/0x3b0 [ 310.458415][ T6795] security_file_alloc+0x41/0x250 [ 310.463604][ T6795] ? reacquire_held_locks+0x4b0/0x4b0 [ 310.469135][ T6795] init_file+0xb9/0x2d0 [ 310.474396][ T6795] alloc_empty_file+0x91/0x1d0 [ 310.479342][ T6795] alloc_file+0x5e/0x7f0 [ 310.483850][ T6795] alloc_file_pseudo+0x174/0x240 [ 310.488885][ T6795] ? alloc_file+0x7f0/0x7f0 [ 310.493633][ T6795] ? lockdep_annotate_inode_mutex_key+0x4b/0x200 [ 310.500132][ T6795] ? do_raw_spin_unlock+0x173/0x230 [ 310.505505][ T6795] __shmem_file_setup+0x20d/0x300 [ 310.510687][ T6795] __do_sys_memfd_create+0x585/0xa70 [ 310.516117][ T6795] ? fput+0x30/0x1a0 [ 310.520154][ T6795] ? PageTransHuge+0x300/0x300 [ 310.524983][ T6795] ? ksys_write+0x1a7/0x250 [ 310.529661][ T6795] ? __ia32_sys_read+0xb0/0xb0 [ 310.534605][ T6795] ? syscall_enter_from_user_mode+0x26/0x80 [ 310.540592][ T6795] do_syscall_64+0x38/0xb0 [ 310.540650][ T6794] workqueue: Failed to create a rescuer kthread for wq "kvm": -EINTR [ 310.545263][ T6795] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 310.545308][ T6795] RIP: 0033:0x7f236947cb29 [ 310.545335][ T6795] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 310.586779][ T6795] RSP: 002b:00007f236a21ae98 EFLAGS: 00000206 ORIG_RAX: 000000000000013f [ 310.595744][ T6795] RAX: ffffffffffffffda RBX: 00000000000004f5 RCX: 00007f236947cb29 [ 310.605165][ T6795] RDX: 00007f236a21af3c RSI: 0000000000000000 RDI: 00007f23694c76ba [ 310.613449][ T6795] RBP: 0000000020000a40 R08: 00007f236a21ac37 R09: 00007f236a21b120 [ 310.621479][ T6795] R10: 000000000000000a R11: 0000000000000206 R12: 0000000020000500 [ 310.629778][ T6795] R13: 00007f236a21af3c R14: 00007f236a21af40 R15: 00000000200001c0 [ 310.637799][ T6795] [ 310.642311][ T6792] CPU: 1 PID: 6792 Comm: syz-executor.2 Not tainted 6.5.0-rc1-next-20230714-syzkaller #0 [ 310.653091][ T6792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 310.663555][ T6792] Call Trace: [ 310.666864][ T6792] [ 310.670367][ T6792] dump_stack_lvl+0x125/0x1b0 [ 310.675306][ T6792] should_fail_ex+0x496/0x5b0 [ 310.680164][ T6792] should_failslab+0x9/0x20 [ 310.685256][ T6792] __kmem_cache_alloc_node+0x2fd/0x350 [ 310.690989][ T6792] ? tomoyo_encode2+0x100/0x3d0 [ 310.696070][ T6792] ? tomoyo_encode2+0x100/0x3d0 [ 310.700986][ T6792] __kmalloc+0x4c/0x100 [ 310.705515][ T6792] tomoyo_encode2+0x100/0x3d0 [ 310.710319][ T6792] ? __kernel_text_address+0xd/0x30 [ 310.715887][ T6792] tomoyo_encode+0x29/0x50 [ 310.720506][ T6792] tomoyo_mount_acl+0x145/0x880 [ 310.725584][ T6792] ? tomoyo_check_mount_acl+0x1a0/0x1a0 [ 310.731208][ T6792] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 310.737562][ T6792] ? tomoyo_domain+0xbd/0x150 [ 310.742296][ T6792] ? tomoyo_profile+0x47/0x60 [ 310.747020][ T6792] tomoyo_mount_permission+0x16d/0x410 [ 310.752530][ T6792] ? tomoyo_mount_permission+0x10b/0x410 [ 310.758214][ T6792] ? tomoyo_mount_acl+0x880/0x880 [ 310.763304][ T6792] security_sb_mount+0x86/0xd0 [ 310.768208][ T6792] path_mount+0x129/0x1ed0 [ 310.772754][ T6792] ? kmem_cache_free+0xf0/0x490 [ 310.777937][ T6792] ? finish_automount+0xa50/0xa50 [ 310.783009][ T6792] ? putname+0x101/0x140 [ 310.787467][ T6792] __x64_sys_mount+0x293/0x310 [ 310.792271][ T6792] ? copy_mnt_ns+0xb60/0xb60 [ 310.796921][ T6792] ? syscall_enter_from_user_mode+0x26/0x80 [ 310.802870][ T6792] do_syscall_64+0x38/0xb0 [ 310.807445][ T6792] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 310.813580][ T6792] RIP: 0033:0x7fb9f387cb29 [ 310.818108][ T6792] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 310.838037][ T6792] RSP: 002b:00007fb9f45a50c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 310.846841][ T6792] RAX: ffffffffffffffda RBX: 00007fb9f399bf80 RCX: 00007fb9f387cb29 [ 310.855041][ T6792] RDX: 0000000020000280 RSI: 00000000200002c0 RDI: 0000000000000000 [ 310.863068][ T6792] RBP: 00007fb9f45a5120 R08: 0000000020000400 R09: 0000000000000000 [ 310.871358][ T6792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.879655][ T6792] R13: 000000000000000b R14: 00007fb9f399bf80 R15: 00007fffe27e74d8 [ 310.887971][ T6792] [ 311.688247][ T6799] loop0: detected capacity change from 0 to 32768 [ 311.723626][ T6799] xfs: Unknown parameter 'mtpt' [ 312.132620][ T27] audit: type=1800 audit(1689364942.859:27): pid=6799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1948 res=0 errno=0 20:02:24 executing program 1: bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x18, 0x16, 0x8, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x4}, 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) timer_create(0x2, &(0x7f0000000100)={0x0, 0x12, 0x1}, &(0x7f0000000280)=0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], 0xeb) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], 0xeb) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) unshare(0x60060000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0) unshare(0x40020000) rmdir(&(0x7f0000000740)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) timer_settime(r2, 0x0, &(0x7f00000003c0)={{0x77359400}, {0x77359400}}, &(0x7f0000000440)) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='adfs\x00', 0x4040, 0x0) (async) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='adfs\x00', 0x4040, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f00000010c0)='./file0\x00') (async) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f00000010c0)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000cc0)=ANY=[@ANYBLOB="a39c8ef1fcf67af34be8aa8059eacf91fb5ffb4d09d26b0f2a94725725c1f0d2c949ea60e043e8c1cc2aef5e779553a7d647351848e5fc0cc8b43117bc62ddfe531cf0fd3dd25bf189c226dd1a1461dafd74952b71e358c87981649a81b5696971336b06c47c0a044d3bd25e27e28f956487b8344a51cf5f54bde5a2f4050b3fa6ef2f0d05000000"], 0xb) (async) write$binfmt_script(r3, &(0x7f0000000cc0)=ANY=[@ANYBLOB="a39c8ef1fcf67af34be8aa8059eacf91fb5ffb4d09d26b0f2a94725725c1f0d2c949ea60e043e8c1cc2aef5e779553a7d647351848e5fc0cc8b43117bc62ddfe531cf0fd3dd25bf189c226dd1a1461dafd74952b71e358c87981649a81b5696971336b06c47c0a044d3bd25e27e28f956487b8344a51cf5f54bde5a2f4050b3fa6ef2f0d05000000"], 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) mkdirat(r3, &(0x7f0000002540)='./file0\x00', 0x0) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000001c0)={0x6589}) (async) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000001c0)={0x6589}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000c80)=[@text64={0x40, &(0x7f0000000c00)="c4417e6fe3400f790bb9410800000f32b9800000c00f3235004000000f300f01cf66baf80cb854c46f85ef66bafc0ced440f0dc6f36d66b834000f00d066baa100ed", 0x42}], 0x1, 0x0, &(0x7f0000000cc0), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000480)={0x10001, 0x2, 0x1, 0x1000, &(0x7f0000011000/0x1000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000480)={0x10001, 0x2, 0x1, 0x1000, &(0x7f0000011000/0x1000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000600)={0x8f, 0x0, 0x9}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000004240)='cgroup.controllers\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003ec0)=[{{&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/202, 0xca}, {&(0x7f0000000680)=""/101, 0x65}, {&(0x7f0000000780)=""/240, 0xf0}, {&(0x7f0000000880)=""/216, 0xd8}], 0x4, &(0x7f0000000980)=""/158, 0x9e}}, {{&(0x7f0000000a40)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000380)=""/33, 0x21}, {&(0x7f0000000ac0)=""/144, 0x90}, {&(0x7f0000000e40)=""/255, 0xff}, {&(0x7f0000000b80)=""/108, 0x6c}], 0x4, &(0x7f0000000f40)=""/82, 0x52}, 0x8}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000fc0)=""/229, 0xe5}, {&(0x7f00000005c0)=""/9, 0x9}, {&(0x7f0000000d80)=""/131, 0x83}, {&(0x7f0000001140)=""/251, 0xfb}], 0x4, &(0x7f0000001240)=""/43, 0x2b}, 0x80000001}, {{0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000001280)=""/31, 0x1f}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f00000022c0)=""/204, 0xcc}, {&(0x7f00000023c0)=""/237, 0xed}, {&(0x7f00000024c0)=""/3, 0x3}, {&(0x7f0000002500)=""/42, 0x2a}, {&(0x7f0000002540)}, {&(0x7f0000002580)=""/10, 0xa}, {&(0x7f00000025c0)=""/106, 0x6a}], 0x9, &(0x7f0000002700)=""/112, 0x70}, 0x4}, {{&(0x7f0000002780)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000003d00)=[{&(0x7f0000002800)=""/82, 0x52}, {&(0x7f0000002880)=""/160, 0xa0}, {&(0x7f0000002940)=""/183, 0xb7}, {&(0x7f0000002a00)=""/146, 0x92}, {&(0x7f0000002ac0)=""/76, 0x4c}, {&(0x7f0000002b40)=""/109, 0x6d}, {&(0x7f0000002bc0)=""/206, 0xce}, {&(0x7f0000002cc0)=""/4096, 0x1000}, {&(0x7f0000003cc0)=""/6, 0x6}], 0x9, &(0x7f0000003dc0)=""/231, 0xe7}, 0x2005}], 0x5, 0x40000040, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 20:02:24 executing program 3: r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x7, &(0x7f0000000000)='source', &(0x7f0000000080)='%\xb9\xf6\x822\xcc0{\xc7:', 0x0) 20:02:24 executing program 5: r0 = syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000000)={[{}, {@nolazytime}, {@logbufs={'logbufs', 0x3d, 0x5}}, {@inode64}, {@allocsize={'allocsize', 0x3d, [0x38, 0x36, 0x6d]}}, {@prjquota}, {@mtpt}]}, 0x41, 0x96cb, &(0x7f0000012ec0)="$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") r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_PANIC(r1, 0x5111) getdents64(r1, &(0x7f00000002c0)=""/219, 0xdb) r2 = eventfd(0x8) r3 = getpid() read$FUSE(r1, &(0x7f0000001500)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r5 = syz_open_dev$vim2m(&(0x7f0000003540), 0x0, 0x2) r6 = openat$cgroup_ro(r1, &(0x7f0000003580)='rdma.current\x00', 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000004dc0)=0x0) r11 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) dup2(r11, r11) setsockopt$ARPT_SO_SET_REPLACE(r11, 0x0, 0x60, &(0x7f0000000580)={'filter\x00', 0x7, 0x4, 0x408, 0x110, 0x220, 0x110, 0x320, 0x320, 0x320, 0x4, &(0x7f0000000540), {[{{@arp={@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0x0, 0x8, 0x0, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0xff, 0x0, 0x0, 0xff]}}, 0x1f, 0x4, 0x3c00, 0x400, 0x6, 0x1, 'ip6gre0\x00', 'pimreg1\x00', {0xff}, {0xff}, 0x0, 0x25a}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @private=0xa010100, 0xf, 0x1}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, 0xffffff00, 0x5, 0x2, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, {[0x0, 0xff, 0xff]}}, {@mac=@remote, {[0x167cb96d26756f27, 0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x9, 0xd3, 0x9, 0x0, 0x40, 0x3f, 'dvmrp0\x00', 'syzkaller0\x00', {0xff}, {0xff}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @private=0xa010101, @rand_addr=0x64010100, 0xf, 0x1}}}, {{@arp={@private=0xa010100, @remote, 0xffffff00, 0xffffffff, 0x2, 0x2, {@empty, {[0x0, 0xff, 0xff, 0xff]}}, {@mac, {[0xff, 0xff]}}, 0xff00, 0x0, 0x6, 0x5, 0x40, 0x4bf8, 'bridge_slave_1\x00', 'veth1_to_hsr\x00', {0xff}, {0xff}, 0x0, 0x22}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "05cbf2e8b2c51ba50e872c4e871944e8ac798fffd56fa5e1105bd91d10ae"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x458) r12 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r15 = getpgrp(0x0) stat(0x0, &(0x7f0000004700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000049c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)="dd77cea2c9c6bcb7a78b4346498ed9f649b1cc71d97bb8744f95be3e143cec68c8f427b9df7fd200cffa052d5d6772158394fb8d38b96cb6fbdae9338a68773b3d79c69c89efb0e689779d4e0b36781f5d363cb6cd073070d03caf777573e3312c696a41ecd89046ddc0d08f2a8980a4e2150f6e394b6fcb63498446993996899e430fc5aaf0307c75d76ee82b7491f44e081431484e03a631424bcc8a1bd68ec242", 0xa2}], 0x1, &(0x7f0000000b00)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000000001000000024000007ee3d5eb7abc2a5def36c4c205acc84957f358949fb767c07031dde9331b", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r13, @ANYBLOB="8000894db4abbdc60d87f7617daf6f3a42d30000", @ANYRESDEC=r16, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000000014da60c5aa5f705c8a04345237000000", @ANYRES32, @ANYRESDEC=r12, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000ffe5000000008e2ffb393db036695ef6b8950f0d5b8e35fc730500000000000000da0c0c54fe92fdc673759981ac61040a2daf15973c", @ANYRES16=r17, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESDEC=r15, @ANYBLOB='\x00\x00\x00\x00'], 0x100}}, {{&(0x7f0000000f40)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000012c0)=[{&(0x7f0000000fc0)='I', 0x1}, {&(0x7f0000001000)="dc14f4f6fa6b6ff010ad368bf9f4ae867049cc5c4b8e02dc6686470aa95ac5a045be2544790abd4d10eaf019f768f0e38706bb4729e6716248367929ba7fd1bafd1b9c0a8acedbf02f30baf2472481c03d96a85fcdfd9643f14e326112c927938572454a102f8718fbea593e1e9f1a8c402efd5ddc91344592f01a8999b3", 0x7e}, {0x0}, {0x0}], 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000005921888b6d0d3100002000000000000000df0f9509a1030000", @ANYRES32, @ANYRES32, @ANYRES64=r14, @ANYRES16=r11], 0x48, 0x4040000}}, {{&(0x7f0000001680)=@abs={0x1, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f0000001080)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="000000001c0000000000000001000000020000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="001ad900"/20, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES64=0x0, @ANYRES32, @ANYRES32, @ANYBLOB="1c0000000000000027c20a12f15a1b1ed776de6e266d730100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRESHEX=r11, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESHEX, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0002434d30ebf514dd93000000006700030a0000fed14e8bbe38e9f7f9e27889f680505fce202cfa498b516a", @ANYRES32, @ANYRES32=r12, @ANYRESOCT=r11, @ANYRES64, @ANYRES32, @ANYRES16, @ANYBLOB="10000000000000000100000001000000"], 0x110, 0x4000}}, {{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001c00)="a0e4211616abddafca09fbea0b920789a32574f6498aa4c62cbf63dfddb7cc6e87a40e2aa8a746802802e93183c580467c076431e0255a3bce6b4f6fdfb637118b97ed13e9eb5c5810c83184a95c2d2bd4e7a883fc9829d920397013ce464ea1daacc2fd1f36270ff941f0fc9762f915b452a2b4dcdc1588c9fee663b91f5c5ddfe53646c640aeb4b09eea78e8c53aa0dfa87a1a6d1b153e2c98d850c56c165ecd6e289f6b1e2b4471494d9499918eb01c33cb36bf82e70631b1506383940993e09b0aae9124756d48edb251", 0xcc}, {&(0x7f0000001d00)="53232f8a4c68accad6a06c1613142ad7039888f208eea2292f44699d91c67b464855a914471e19b608b7927b09146f9cc584c063d922f94675dd40a28ba42837d25c5be251b90d6109149296972be3196a99b81a92b7390bfb73883b19bd5080710c779867e22c48783f5acbe52ccc4779d364dac0fb32215c077512a0db8e56f5a59bd44e4fe802d4b220b754", 0x8d}, {&(0x7f0000001dc0)="15253d1493b677f91270d8e0e9c300b3207c287a0f2deb4de48d1e1ce3de835362f991f55f1f22b28dc6d2337cf3fff1c7aa3e1ef1ba16334eb2bf4d2cf4459325f0785392aa2a6881eb835a9422a37332732cd40f3644347553fcd011dd86404706bb4e3946d088606931afd72d1ab1d072758790659f02e09355c748791a6fd1695cb9ac52ad629354d3405ab04138953a0eee8012ae40059f748b", 0x9c}], 0x3, 0x0, 0x0, 0x1}}, {{&(0x7f0000004340)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000004400)=[{&(0x7f00000043c0)="aad80ea5db0c7a33bec0b0dabeb1a058e30b6704d3d8dd147c", 0x19}], 0x1, &(0x7f00000048c0)}}], 0x5, 0x4000008) r18 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r19 = ioctl$KVM_CREATE_VM(r18, 0xae01, 0x0) dup(r19) ioctl$KVM_SET_USER_MEMORY_REGION(r19, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r19, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r19, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004e80)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000140)="d9ee6d9ff20b792ccb9a4a132659bb3eca55b8b6b50d5b1703997d0aec98f1dad6151aced0fdad5016dfc7cf83efef0fa0cf7887e59be0d9a130ea74145cfeefb3b9616d904f210ec8de6b0f74ec5cf9685e578bed", 0x55}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000000c0)="1e2dab80460a329214e0f2ab331e3e7393f92d7e52a1778bd19c7b700c9be735d4ee1d7b1a64eb328d53f861063b", 0x2e}, {&(0x7f00000001c0)="2cf63b29c79ba217831e1468e33accaaf7f821f7f42776dd7fe21b93d003cde0c52d8bccad88939983996401daa18676069e28941c613c17e51035a92f4aed3c605e69f851775a", 0x47}, {&(0x7f0000000240)="8c72073d5080b19dd9a073191dfb633dda4ef66cebe89338d585ed284de1861a49fd4c1c1087a9ff36d04944c560fc727cc69b3a158d7a7863ae4e39e4ed797db3eb6a466b7e842f05", 0x49}], 0x5, &(0x7f00000035c0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, r1]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x24, 0x1, 0x1, [r1, r1, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}, @cred={{0x1c, 0x1, 0x2, {r3, r4, 0xee01}}}, @rights={{0x10}}, @rights={{0x30, 0x1, 0x1, [r1, r0, r1, r0, 0xffffffffffffffff, r5, 0xffffffffffffffff, r1]}}, @rights={{0x2c, 0x1, 0x1, [r6, r0, 0xffffffffffffffff, r9, r0, r1, r0]}}], 0x118, 0x800}}, {{&(0x7f0000003700)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000003800)=[{&(0x7f0000003780)="01a74f29ffa6ba027b2255efc8fdc72227890c6003d692fd216b7b38f4b9e59c66a9d44d99289f3e120a7d33f2c142cec1855a3a9fea645ef1d7270136321935431e7ae0d5cd0dd9fd723bced26e13cff9c82564dc", 0x55}], 0x1}}, {{&(0x7f0000003840)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000004b00)=[{&(0x7f00000038c0)="063540786218fc9b0182e7118d578bdca35a413c3c7aa3fe576d7d821eb30a5e7f6dcc4bfdc73ae4d0d8d079dbd4124b941d5baf3e252b1cfc5257330b4a68", 0x3f}, {&(0x7f0000003900)="dc2a77d2217df2efae0eab1ab30679e88ec7146e654c5445a3569af28069087a7febd5f1d7b784d20cd52351b0eb5eded3b0816595bb9f5204c9f0db3dc9cff442cadf92870c2f6b6b14f8984b5211e3d6a80138954a737fe22763cad29e8f818661e590eb6518e2a6f5504c55e5c87df09b0190ee32104c2aac42f1594bb896873cc4d7567fc03ab0541b1486ae17f86e41fbfa8dd648828059aaf2036c17bbb1c5a6cbbfda9b5960a0ef988c6b4f9b7d3295dd1c72624ebf51385bae206362941149004173726d072908ed22930e1cfbd7098d7e2739868520315f5ca7b2fac64978cb95a838630e5abac1c5b9af38d8d8603240a710", 0xf7}, {&(0x7f0000003a00)="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", 0x1000}, {&(0x7f0000004a00)="cd34451498c0c9c42bdc35818e22df4d6f21ca28846dbf22d1f3d3b3e081815674367ad4c43d74a0ce8ce4f3a3f8faa10c2d7409afc3d8b989073e2d2058c7aba4b298b53418e1385fc273218ba18cb2cd6dc3e4b542a4e78020286f771926fce1bc8181d73497a5db3a16fad7046b350a2d08b9550a396c4f99ca", 0x7b}, {&(0x7f0000004a80)="35c111d07a9dc3119ba1bb8c629294107521bc9a8803a2cf73476dbf708ed0c340b38619cc3e67e04de8118f5fdb9ad763d32d913fa18ba734c6bf526c74c7ff22a5f79f79cbc4948390f752629218abf831fa9cdf11", 0x56}], 0x5, 0x0, 0x0, 0x20040}}, {{&(0x7f0000004b80)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000004d80)=[{&(0x7f0000004c00)="2b23dc000051365c0791514f830c4cf15fbbbb4f122395a64b200c7e134eca6abe273b128871b47ba846404c935819a0cc15bf1c78fd1849bcb0aedc702cacc72e9431a065a3588c09b465301d5bed49d897f79e94b5e141f781519585246d9d3c609586706020fb401c09460a8e2c6f45d67b6871b5d1a0da4d3deab2af7cee6f2034d244a8a2d09935fd4c25907b23afd2dbd7a826200a0f25308ac4346e7774960c305a582f2be648c72746", 0xad}, {&(0x7f0000004cc0)="92a510a79a4345032c2cfbb6508569e792abc900e44756f7a0d523d5ca64b7a852c11a3bb02571fd72a7195b3312b14c8e41d6b4042b92ce05ebf6603d9060e79f85bf0e798f986cb3619d9f126a9ba15374e2d84a23c72a0c925cf29ddaca8562538d3533f7908835e264c9ed6907622126e54941adfd3fdcd8d461052ceb5a29569823a437df6493d35a079298111c6b3d074c126c084be32d901de5d9b5d380f4e51393359ed7fc1681edf95af9", 0xaf}], 0x2, &(0x7f0000004e00)=[@rights={{0x18, 0x1, 0x1, [r1, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r10, r17}}}, @rights={{0x14, 0x1, 0x1, [r19]}}], 0x50, 0x24000000}}], 0x4, 0x4008810) 20:02:24 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) (fail_nth: 8) 20:02:24 executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x8050, &(0x7f00000001c0)={[{@sb={'sb', 0x3d, 0x7fffffff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5}}, {@lazytime}, {@norecovery}, {@journal_dev={'journal_dev', 0x3d, 0x4d40}}, {@usrquota}, {@jqfmt_vfsv1}, {@jqfmt_vfsv1}, {@resgid, 0x32}], [{@dont_hash}, {@permit_directio}]}, 0x1, 0x4f5, &(0x7f0000000a40)="$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") (fail_nth: 8) 20:02:24 executing program 0: bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x18, 0x16, 0x8, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x4}, 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) timer_create(0x2, &(0x7f0000000100)={0x0, 0x12, 0x1}, &(0x7f0000000280)=0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], 0xeb) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) unshare(0x60060000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0) unshare(0x40020000) rmdir(&(0x7f0000000740)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) timer_settime(r2, 0x0, &(0x7f00000003c0)={{0x77359400}, {0x77359400}}, &(0x7f0000000440)) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='adfs\x00', 0x4040, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f00000010c0)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000cc0)=ANY=[@ANYBLOB="a39c8ef1fcf67af34be8aa8059eacf91fb5ffb4d09d26b0f2a94725725c1f0d2c949ea60e043e8c1cc2aef5e779553a7d647351848e5fc0cc8b43117bc62ddfe531cf0fd3dd25bf189c226dd1a1461dafd74952b71e358c87981649a81b5696971336b06c47c0a044d3bd25e27e28f956487b8344a51cf5f54bde5a2f4050b3fa6ef2f0d05000000"], 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) mkdirat(r3, &(0x7f0000002540)='./file0\x00', 0x0) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000001c0)={0x6589}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000c80)=[@text64={0x40, &(0x7f0000000c00)="c4417e6fe3400f790bb9410800000f32b9800000c00f3235004000000f300f01cf66baf80cb854c46f85ef66bafc0ced440f0dc6f36d66b834000f00d066baa100ed", 0x42}], 0x1, 0x0, &(0x7f0000000cc0), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000480)={0x10001, 0x2, 0x1, 0x1000, &(0x7f0000011000/0x1000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000600)={0x8f, 0x0, 0x9}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000004240)='cgroup.controllers\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003ec0)=[{{&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/202, 0xca}, {&(0x7f0000000680)=""/101, 0x65}, {&(0x7f0000000780)=""/240, 0xf0}, {&(0x7f0000000880)=""/216, 0xd8}], 0x4, &(0x7f0000000980)=""/158, 0x9e}}, {{&(0x7f0000000a40)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000380)=""/33, 0x21}, {&(0x7f0000000ac0)=""/144, 0x90}, {&(0x7f0000000e40)=""/255, 0xff}, {&(0x7f0000000b80)=""/108, 0x6c}], 0x4, &(0x7f0000000f40)=""/82, 0x52}, 0x8}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000fc0)=""/229, 0xe5}, {&(0x7f00000005c0)=""/9, 0x9}, {&(0x7f0000000d80)=""/131, 0x83}, {&(0x7f0000001140)=""/251, 0xfb}], 0x4, &(0x7f0000001240)=""/43, 0x2b}, 0x80000001}, {{0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000001280)=""/31, 0x1f}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f00000022c0)=""/204, 0xcc}, {&(0x7f00000023c0)=""/237, 0xed}, {&(0x7f00000024c0)=""/3, 0x3}, {&(0x7f0000002500)=""/42, 0x2a}, {&(0x7f0000002540)}, {&(0x7f0000002580)=""/10, 0xa}, {&(0x7f00000025c0)=""/106, 0x6a}], 0x9, &(0x7f0000002700)=""/112, 0x70}, 0x4}, {{&(0x7f0000002780)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000003d00)=[{&(0x7f0000002800)=""/82, 0x52}, {&(0x7f0000002880)=""/160, 0xa0}, {&(0x7f0000002940)=""/183, 0xb7}, {&(0x7f0000002a00)=""/146, 0x92}, {&(0x7f0000002ac0)=""/76, 0x4c}, {&(0x7f0000002b40)=""/109, 0x6d}, {&(0x7f0000002bc0)=""/206, 0xce}, {&(0x7f0000002cc0)=""/4096, 0x1000}, {&(0x7f0000003cc0)=""/6, 0x6}], 0x9, &(0x7f0000003dc0)=""/231, 0xe7}, 0x2005}], 0x5, 0x40000040, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) [ 313.803495][ T6813] FAULT_INJECTION: forcing a failure. [ 313.803495][ T6813] name failslab, interval 1, probability 0, space 0, times 0 [ 313.859067][ T6820] FAULT_INJECTION: forcing a failure. [ 313.859067][ T6820] name failslab, interval 1, probability 0, space 0, times 0 [ 313.860312][ T6813] CPU: 1 PID: 6813 Comm: syz-executor.4 Not tainted 6.5.0-rc1-next-20230714-syzkaller #0 [ 313.881707][ T6813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 313.892338][ T6813] Call Trace: [ 313.895677][ T6813] [ 313.898750][ T6813] dump_stack_lvl+0x125/0x1b0 [ 313.903785][ T6813] should_fail_ex+0x496/0x5b0 [ 313.908640][ T6813] should_failslab+0x9/0x20 [ 313.913309][ T6813] kmem_cache_alloc+0x33a/0x3b0 [ 313.918226][ T6813] vm_area_alloc+0x1f/0x220 [ 313.922774][ T6813] mmap_region+0x386/0x2640 [ 313.927346][ T6813] ? find_extend_vma_locked+0x2f0/0x2f0 [ 313.932941][ T6813] ? bpf_lsm_mmap_addr+0x9/0x10 [ 313.937948][ T6813] ? security_mmap_addr+0x84/0xa0 [ 313.943022][ T6813] ? get_unmapped_area+0x2c5/0x3e0 [ 313.948298][ T6813] do_mmap+0x884/0xee0 [ 313.952425][ T6813] vm_mmap_pgoff+0x1a6/0x3b0 [ 313.957241][ T6813] ? randomize_page+0xb0/0xb0 [ 313.962157][ T6813] ? fput+0x30/0x1a0 [ 313.966349][ T6813] ? PageTransHuge+0x300/0x300 [ 313.971149][ T6813] ? ksys_write+0x1a7/0x250 [ 313.975794][ T6813] ksys_mmap_pgoff+0x7d/0x5b0 [ 313.980594][ T6813] ? syscall_enter_from_user_mode+0x26/0x80 [ 313.986561][ T6813] ? lockdep_hardirqs_on+0x7d/0x100 [ 313.991910][ T6813] do_syscall_64+0x38/0xb0 [ 313.996436][ T6813] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 314.002408][ T6813] RIP: 0033:0x7f236947cb63 [ 314.006864][ T6813] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 b0 ff ff ff 64 c7 [ 314.027414][ T6813] RSP: 002b:00007f236a21ae98 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 314.036225][ T6813] RAX: ffffffffffffffda RBX: 00000000000004f3 RCX: 00007f236947cb63 [ 314.044312][ T6813] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 314.052418][ T6813] RBP: 0000000020000a42 R08: 00000000ffffffff R09: 0000000000000000 [ 314.060804][ T6813] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000004 [ 314.069173][ T6813] R13: 00007f236a21af3c R14: 00007f236a21af40 R15: 00000000200001c0 [ 314.077389][ T6813] [ 314.094444][ T6820] CPU: 1 PID: 6820 Comm: syz-executor.2 Not tainted 6.5.0-rc1-next-20230714-syzkaller #0 [ 314.104756][ T6820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 314.115083][ T6820] Call Trace: [ 314.118412][ T6820] [ 314.121482][ T6820] dump_stack_lvl+0x125/0x1b0 [ 314.126254][ T6820] should_fail_ex+0x496/0x5b0 [ 314.131069][ T6820] should_failslab+0x9/0x20 [ 314.135668][ T6820] __kmem_cache_alloc_node+0x2fd/0x350 [ 314.141395][ T6820] ? tomoyo_realpath_from_path+0xb9/0x710 [ 314.147372][ T6820] ? tomoyo_realpath_from_path+0xb9/0x710 [ 314.153249][ T6820] __kmalloc+0x4c/0x100 [ 314.157490][ T6820] tomoyo_realpath_from_path+0xb9/0x710 [ 314.163134][ T6820] ? tomoyo_fill_path_info+0x233/0x420 [ 314.168776][ T6820] tomoyo_mount_acl+0x1af/0x880 [ 314.173744][ T6820] ? tomoyo_check_mount_acl+0x1a0/0x1a0 [ 314.179383][ T6820] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 314.185669][ T6820] ? tomoyo_domain+0xbd/0x150 [ 314.190711][ T6820] ? tomoyo_profile+0x47/0x60 [ 314.195669][ T6820] tomoyo_mount_permission+0x16d/0x410 [ 314.201315][ T6820] ? tomoyo_mount_permission+0x10b/0x410 [ 314.207047][ T6820] ? tomoyo_mount_acl+0x880/0x880 [ 314.212194][ T6820] security_sb_mount+0x86/0xd0 [ 314.217143][ T6820] path_mount+0x129/0x1ed0 [ 314.221742][ T6820] ? kmem_cache_free+0xf0/0x490 [ 314.226734][ T6820] ? finish_automount+0xa50/0xa50 [ 314.231854][ T6820] ? putname+0x101/0x140 [ 314.236182][ T6820] __x64_sys_mount+0x293/0x310 [ 314.241031][ T6820] ? copy_mnt_ns+0xb60/0xb60 [ 314.245707][ T6820] ? syscall_enter_from_user_mode+0x26/0x80 [ 314.251838][ T6820] do_syscall_64+0x38/0xb0 [ 314.256341][ T6820] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 314.262404][ T6820] RIP: 0033:0x7fb9f387cb29 [ 314.266891][ T6820] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 314.287790][ T6820] RSP: 002b:00007fb9f45a50c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 314.296359][ T6820] RAX: ffffffffffffffda RBX: 00007fb9f399bf80 RCX: 00007fb9f387cb29 20:02:25 executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x8050, &(0x7f00000001c0)={[{@sb={'sb', 0x3d, 0x7fffffff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5}}, {@lazytime}, {@norecovery}, {@journal_dev={'journal_dev', 0x3d, 0x4d40}}, {@usrquota}, {@jqfmt_vfsv1}, {@jqfmt_vfsv1}, {@resgid, 0x32}], [{@dont_hash}, {@permit_directio}]}, 0x1, 0x4f5, &(0x7f0000000a40)="$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") (fail_nth: 9) 20:02:25 executing program 3: r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x8, &(0x7f0000000000)='source', &(0x7f0000000080)='%\xb9\xf6\x822\xcc0{\xc7:', 0x0) [ 314.304407][ T6820] RDX: 0000000020000280 RSI: 00000000200002c0 RDI: 0000000000000000 [ 314.312438][ T6820] RBP: 00007fb9f45a5120 R08: 0000000020000400 R09: 0000000000000000 [ 314.320636][ T6820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.328792][ T6820] R13: 000000000000000b R14: 00007fb9f399bf80 R15: 00007fffe27e74d8 [ 314.336857][ T6820] [ 314.354251][ T6820] ERROR: Out of memory at tomoyo_realpath_from_path. 20:02:25 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) (fail_nth: 9) 20:02:25 executing program 3: r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x10, &(0x7f0000000000)='source', &(0x7f0000000080)='%\xb9\xf6\x822\xcc0{\xc7:', 0x0) [ 314.422120][ T6833] FAULT_INJECTION: forcing a failure. [ 314.422120][ T6833] name failslab, interval 1, probability 0, space 0, times 0 [ 314.448957][ T6833] CPU: 0 PID: 6833 Comm: syz-executor.4 Not tainted 6.5.0-rc1-next-20230714-syzkaller #0 [ 314.459642][ T6833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 314.470229][ T6833] Call Trace: [ 314.473552][ T6833] [ 314.476548][ T6833] dump_stack_lvl+0x125/0x1b0 [ 314.481408][ T6833] should_fail_ex+0x496/0x5b0 [ 314.486310][ T6833] should_failslab+0x9/0x20 [ 314.491337][ T6833] kmem_cache_alloc+0x33a/0x3b0 [ 314.496806][ T6833] vm_area_alloc+0x134/0x220 [ 314.501677][ T6833] mmap_region+0x386/0x2640 [ 314.506352][ T6833] ? find_extend_vma_locked+0x2f0/0x2f0 [ 314.512079][ T6833] ? bpf_lsm_mmap_addr+0x9/0x10 [ 314.517287][ T6833] ? security_mmap_addr+0x84/0xa0 [ 314.522390][ T6833] ? get_unmapped_area+0x2c5/0x3e0 [ 314.527683][ T6833] do_mmap+0x884/0xee0 [ 314.531925][ T6833] vm_mmap_pgoff+0x1a6/0x3b0 [ 314.536791][ T6833] ? randomize_page+0xb0/0xb0 [ 314.541563][ T6833] ? fput+0x30/0x1a0 [ 314.545525][ T6833] ? PageTransHuge+0x300/0x300 [ 314.550534][ T6833] ? ksys_write+0x1a7/0x250 [ 314.555142][ T6833] ksys_mmap_pgoff+0x7d/0x5b0 [ 314.559897][ T6833] ? syscall_enter_from_user_mode+0x26/0x80 [ 314.565980][ T6833] ? lockdep_hardirqs_on+0x7d/0x100 [ 314.571923][ T6833] do_syscall_64+0x38/0xb0 [ 314.576506][ T6833] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 314.582781][ T6833] RIP: 0033:0x7f236947cb63 [ 314.587522][ T6833] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 b0 ff ff ff 64 c7 [ 314.608178][ T6838] FAULT_INJECTION: forcing a failure. [ 314.608178][ T6838] name failslab, interval 1, probability 0, space 0, times 0 20:02:25 executing program 3: r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x25, &(0x7f0000000000)='source', &(0x7f0000000080)='%\xb9\xf6\x822\xcc0{\xc7:', 0x0) [ 314.608292][ T6833] RSP: 002b:00007f236a21ae98 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 314.630016][ T6833] RAX: ffffffffffffffda RBX: 00000000000004f3 RCX: 00007f236947cb63 [ 314.638048][ T6833] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 314.646171][ T6833] RBP: 0000000020000a42 R08: 00000000ffffffff R09: 0000000000000000 [ 314.654563][ T6833] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000004 [ 314.662594][ T6833] R13: 00007f236a21af3c R14: 00007f236a21af40 R15: 00000000200001c0 [ 314.670820][ T6833] [ 314.677251][ T6838] CPU: 1 PID: 6838 Comm: syz-executor.2 Not tainted 6.5.0-rc1-next-20230714-syzkaller #0 [ 314.687414][ T6838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 314.697610][ T6838] Call Trace: [ 314.700935][ T6838] [ 314.703904][ T6838] dump_stack_lvl+0x125/0x1b0 [ 314.708827][ T6838] should_fail_ex+0x496/0x5b0 [ 314.714299][ T6838] should_failslab+0x9/0x20 [ 314.719056][ T6838] __kmem_cache_alloc_node+0x2fd/0x350 [ 314.724614][ T6838] ? tomoyo_encode2+0x100/0x3d0 [ 314.730062][ T6838] ? tomoyo_encode2+0x100/0x3d0 [ 314.735171][ T6838] __kmalloc+0x4c/0x100 [ 314.739390][ T6838] tomoyo_encode2+0x100/0x3d0 [ 314.744539][ T6838] ? rcu_is_watching+0x12/0xb0 [ 314.749502][ T6838] tomoyo_encode+0x29/0x50 [ 314.754052][ T6838] tomoyo_realpath_from_path+0x196/0x710 [ 314.759839][ T6838] tomoyo_mount_acl+0x1af/0x880 [ 314.764929][ T6838] ? tomoyo_check_mount_acl+0x1a0/0x1a0 [ 314.770627][ T6838] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 314.776776][ T6838] ? tomoyo_domain+0xbd/0x150 [ 314.781706][ T6838] ? tomoyo_profile+0x47/0x60 [ 314.787011][ T6838] tomoyo_mount_permission+0x16d/0x410 [ 314.793608][ T6838] ? tomoyo_mount_permission+0x10b/0x410 [ 314.799522][ T6838] ? tomoyo_mount_acl+0x880/0x880 [ 314.804661][ T6838] security_sb_mount+0x86/0xd0 [ 314.809606][ T6838] path_mount+0x129/0x1ed0 [ 314.814124][ T6838] ? kmem_cache_free+0xf0/0x490 [ 314.819264][ T6838] ? finish_automount+0xa50/0xa50 [ 314.824431][ T6838] ? putname+0x101/0x140 [ 314.828797][ T6838] __x64_sys_mount+0x293/0x310 [ 314.833787][ T6838] ? copy_mnt_ns+0xb60/0xb60 [ 314.838418][ T6838] ? syscall_enter_from_user_mode+0x26/0x80 [ 314.844362][ T6838] do_syscall_64+0x38/0xb0 [ 314.848812][ T6838] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 314.855065][ T6838] RIP: 0033:0x7fb9f387cb29 [ 314.859724][ T6838] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 314.880888][ T6838] RSP: 002b:00007fb9f45a50c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 314.889567][ T6838] RAX: ffffffffffffffda RBX: 00007fb9f399bf80 RCX: 00007fb9f387cb29 [ 314.897921][ T6838] RDX: 0000000020000280 RSI: 00000000200002c0 RDI: 0000000000000000 [ 314.906117][ T6838] RBP: 00007fb9f45a5120 R08: 0000000020000400 R09: 0000000000000000 [ 314.914743][ T6838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 20:02:25 executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x8050, &(0x7f00000001c0)={[{@sb={'sb', 0x3d, 0x7fffffff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5}}, {@lazytime}, {@norecovery}, {@journal_dev={'journal_dev', 0x3d, 0x4d40}}, {@usrquota}, {@jqfmt_vfsv1}, {@jqfmt_vfsv1}, {@resgid, 0x32}], [{@dont_hash}, {@permit_directio}]}, 0x1, 0x4f5, &(0x7f0000000a40)="$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") (fail_nth: 10) [ 314.922960][ T6838] R13: 000000000000000b R14: 00007fb9f399bf80 R15: 00007fffe27e74d8 [ 314.931179][ T6838] [ 314.972066][ T6838] ERROR: Out of memory at tomoyo_realpath_from_path. [ 315.112634][ T6843] FAULT_INJECTION: forcing a failure. [ 315.112634][ T6843] name failslab, interval 1, probability 0, space 0, times 0 [ 315.148923][ T6843] CPU: 1 PID: 6843 Comm: syz-executor.4 Not tainted 6.5.0-rc1-next-20230714-syzkaller #0 [ 315.158834][ T6843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 315.169115][ T6843] Call Trace: [ 315.172594][ T6843] [ 315.175668][ T6843] dump_stack_lvl+0x125/0x1b0 [ 315.180512][ T6843] should_fail_ex+0x496/0x5b0 [ 315.185280][ T6843] should_failslab+0x9/0x20 [ 315.190653][ T6843] kmem_cache_alloc+0x33a/0x3b0 [ 315.195591][ T6843] mas_alloc_nodes+0x182/0x830 [ 315.200457][ T6843] mas_preallocate+0x2b1/0x370 [ 315.205392][ T6843] mmap_region+0x7e1/0x2640 [ 315.210094][ T6843] ? find_extend_vma_locked+0x2f0/0x2f0 [ 315.215935][ T6843] ? bpf_lsm_mmap_addr+0x9/0x10 [ 315.221121][ T6843] ? security_mmap_addr+0x84/0xa0 [ 315.226320][ T6843] ? get_unmapped_area+0x2c5/0x3e0 [ 315.231664][ T6843] do_mmap+0x884/0xee0 [ 315.235858][ T6843] vm_mmap_pgoff+0x1a6/0x3b0 [ 315.240704][ T6843] ? randomize_page+0xb0/0xb0 [ 315.245555][ T6843] ? fput+0x30/0x1a0 [ 315.249681][ T6843] ? PageTransHuge+0x300/0x300 [ 315.254506][ T6843] ? ksys_write+0x1a7/0x250 [ 315.259186][ T6843] ksys_mmap_pgoff+0x7d/0x5b0 [ 315.263930][ T6843] ? syscall_enter_from_user_mode+0x26/0x80 [ 315.270018][ T6843] ? lockdep_hardirqs_on+0x7d/0x100 [ 315.275498][ T6843] do_syscall_64+0x38/0xb0 [ 315.280299][ T6843] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 315.287177][ T6843] RIP: 0033:0x7f236947cb63 [ 315.291962][ T6843] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 b0 ff ff ff 64 c7 [ 315.311635][ T6843] RSP: 002b:00007f236a21ae98 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 315.320323][ T6843] RAX: ffffffffffffffda RBX: 00000000000004f3 RCX: 00007f236947cb63 [ 315.328368][ T6843] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 315.336706][ T6843] RBP: 0000000020000a42 R08: 00000000ffffffff R09: 0000000000000000 [ 315.345259][ T6843] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000004 [ 315.353907][ T6843] R13: 00007f236a21af3c R14: 00007f236a21af40 R15: 00000000200001c0 [ 315.362609][ T6843] [ 315.639645][ T6818] loop5: detected capacity change from 0 to 32768 [ 315.647360][ T6818] xfs: Unknown parameter 'mtpt' [ 315.879843][ T27] audit: type=1800 audit(1689364946.599:28): pid=6818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1948 res=0 errno=0 20:02:28 executing program 1: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x102440, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000001ac0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x54, r5, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0x30, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x1a0, r5, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x24000840}, 0x4000801) fcntl$setlease(r0, 0x400, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fcntl$setlease(r6, 0x400, 0x0) r7 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r7, 0x400, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = dup(r9) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r11, 0xae9a) ioctl$KVM_RUN(r11, 0xae80, 0x0) fcntl$setlease(r11, 0x400, 0x1) 20:02:28 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) (fail_nth: 10) 20:02:28 executing program 3: r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x300, &(0x7f0000000000)='source', &(0x7f0000000080)='%\xb9\xf6\x822\xcc0{\xc7:', 0x0) 20:02:28 executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x8050, &(0x7f00000001c0)={[{@sb={'sb', 0x3d, 0x7fffffff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5}}, {@lazytime}, {@norecovery}, {@journal_dev={'journal_dev', 0x3d, 0x4d40}}, {@usrquota}, {@jqfmt_vfsv1}, {@jqfmt_vfsv1}, {@resgid, 0x32}], [{@dont_hash}, {@permit_directio}]}, 0x1, 0x4f5, &(0x7f0000000a40)="$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") (fail_nth: 11) 20:02:28 executing program 5: bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x18, 0x16, 0x8, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x4}, 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) timer_create(0x2, &(0x7f0000000100)={0x0, 0x12, 0x1}, &(0x7f0000000280)=0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], 0xeb) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) unshare(0x60060000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0) unshare(0x40020000) rmdir(&(0x7f0000000740)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) timer_settime(r2, 0x0, &(0x7f00000003c0)={{0x77359400}, {0x77359400}}, &(0x7f0000000440)) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='adfs\x00', 0x4040, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f00000010c0)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000cc0)=ANY=[@ANYBLOB="a39c8ef1fcf67af34be8aa8059eacf91fb5ffb4d09d26b0f2a94725725c1f0d2c949ea60e043e8c1cc2aef5e779553a7d647351848e5fc0cc8b43117bc62ddfe531cf0fd3dd25bf189c226dd1a1461dafd74952b71e358c87981649a81b5696971336b06c47c0a044d3bd25e27e28f956487b8344a51cf5f54bde5a2f4050b3fa6ef2f0d05000000"], 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) mkdirat(r3, &(0x7f0000002540)='./file0\x00', 0x0) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000001c0)={0x6589}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000c80)=[@text64={0x40, &(0x7f0000000c00)="c4417e6fe3400f790bb9410800000f32b9800000c00f3235004000000f300f01cf66baf80cb854c46f85ef66bafc0ced440f0dc6f36d66b834000f00d066baa100ed", 0x42}], 0x1, 0x0, &(0x7f0000000cc0), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000480)={0x10001, 0x2, 0x1, 0x1000, &(0x7f0000011000/0x1000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000600)={0x8f, 0x0, 0x9}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000004240)='cgroup.controllers\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003ec0)=[{{&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/202, 0xca}, {&(0x7f0000000680)=""/101, 0x65}, {&(0x7f0000000780)=""/240, 0xf0}, {&(0x7f0000000880)=""/216, 0xd8}], 0x4, &(0x7f0000000980)=""/158, 0x9e}}, {{&(0x7f0000000a40)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000380)=""/33, 0x21}, {&(0x7f0000000ac0)=""/144, 0x90}, {&(0x7f0000000e40)=""/255, 0xff}, {&(0x7f0000000b80)=""/108, 0x6c}], 0x4, &(0x7f0000000f40)=""/82, 0x52}, 0x8}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000fc0)=""/229, 0xe5}, {&(0x7f00000005c0)=""/9, 0x9}, {&(0x7f0000000d80)=""/131, 0x83}, {&(0x7f0000001140)=""/251, 0xfb}], 0x4, &(0x7f0000001240)=""/43, 0x2b}, 0x80000001}, {{0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000001280)=""/31, 0x1f}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f00000022c0)=""/204, 0xcc}, {&(0x7f00000023c0)=""/237, 0xed}, {&(0x7f00000024c0)=""/3, 0x3}, {&(0x7f0000002500)=""/42, 0x2a}, {&(0x7f0000002540)}, {&(0x7f0000002580)=""/10, 0xa}, {&(0x7f00000025c0)=""/106, 0x6a}], 0x9, &(0x7f0000002700)=""/112, 0x70}, 0x4}, {{&(0x7f0000002780)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000003d00)=[{&(0x7f0000002800)=""/82, 0x52}, {&(0x7f0000002880)=""/160, 0xa0}, {&(0x7f0000002940)=""/183, 0xb7}, {&(0x7f0000002a00)=""/146, 0x92}, {&(0x7f0000002ac0)=""/76, 0x4c}, {&(0x7f0000002b40)=""/109, 0x6d}, {&(0x7f0000002bc0)=""/206, 0xce}, {&(0x7f0000002cc0)=""/4096, 0x1000}, {&(0x7f0000003cc0)=""/6, 0x6}], 0x9, &(0x7f0000003dc0)=""/231, 0xe7}, 0x2005}], 0x5, 0x40000040, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) [ 317.557159][ T6852] FAULT_INJECTION: forcing a failure. [ 317.557159][ T6852] name failslab, interval 1, probability 0, space 0, times 0 [ 317.585002][ T6852] CPU: 1 PID: 6852 Comm: syz-executor.4 Not tainted 6.5.0-rc1-next-20230714-syzkaller #0 [ 317.595090][ T6852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 317.605291][ T6852] Call Trace: [ 317.608616][ T6852] [ 317.611694][ T6852] dump_stack_lvl+0x125/0x1b0 [ 317.616439][ T6852] should_fail_ex+0x496/0x5b0 [ 317.621202][ T6852] should_failslab+0x9/0x20 [ 317.625909][ T6852] kmem_cache_alloc_bulk+0x57/0x7c0 [ 317.631273][ T6852] ? kmem_cache_alloc+0x34e/0x3b0 [ 317.636701][ T6852] mas_alloc_nodes+0x39c/0x830 [ 317.641649][ T6852] mas_preallocate+0x2b1/0x370 [ 317.646470][ T6852] mmap_region+0x7e1/0x2640 [ 317.651046][ T6852] ? find_extend_vma_locked+0x2f0/0x2f0 [ 317.656683][ T6852] ? bpf_lsm_mmap_addr+0x9/0x10 [ 317.661689][ T6852] ? security_mmap_addr+0x84/0xa0 [ 317.666765][ T6852] ? get_unmapped_area+0x2c5/0x3e0 [ 317.672119][ T6852] do_mmap+0x884/0xee0 [ 317.676272][ T6852] vm_mmap_pgoff+0x1a6/0x3b0 [ 317.681044][ T6852] ? randomize_page+0xb0/0xb0 [ 317.685961][ T6852] ? fput+0x30/0x1a0 [ 317.689891][ T6852] ? PageTransHuge+0x300/0x300 [ 317.694692][ T6852] ? ksys_write+0x1a7/0x250 [ 317.699262][ T6852] ksys_mmap_pgoff+0x7d/0x5b0 [ 317.704007][ T6852] ? syscall_enter_from_user_mode+0x26/0x80 [ 317.709971][ T6852] ? lockdep_hardirqs_on+0x7d/0x100 [ 317.715369][ T6852] do_syscall_64+0x38/0xb0 [ 317.719828][ T6852] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 317.725762][ T6852] RIP: 0033:0x7f236947cb63 [ 317.730206][ T6852] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 b0 ff ff ff 64 c7 [ 317.749866][ T6852] RSP: 002b:00007f236a21ae98 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 317.758330][ T6852] RAX: ffffffffffffffda RBX: 00000000000004f3 RCX: 00007f236947cb63 [ 317.766345][ T6852] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 317.774591][ T6852] RBP: 0000000020000a42 R08: 00000000ffffffff R09: 0000000000000000 [ 317.783370][ T6852] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000004 [ 317.791368][ T6852] R13: 00007f236a21af3c R14: 00007f236a21af40 R15: 00000000200001c0 [ 317.799394][ T6852] [ 317.812991][ T6855] FAULT_INJECTION: forcing a failure. [ 317.812991][ T6855] name failslab, interval 1, probability 0, space 0, times 0 [ 317.828798][ T6855] CPU: 1 PID: 6855 Comm: syz-executor.2 Not tainted 6.5.0-rc1-next-20230714-syzkaller #0 [ 317.838710][ T6855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 317.849373][ T6855] Call Trace: [ 317.852876][ T6855] [ 317.855947][ T6855] dump_stack_lvl+0x125/0x1b0 [ 317.860732][ T6855] should_fail_ex+0x496/0x5b0 [ 317.865528][ T6855] should_failslab+0x9/0x20 [ 317.870132][ T6855] __kmem_cache_alloc_node+0x2fd/0x350 [ 317.876284][ T6855] ? tomoyo_encode2+0x100/0x3d0 [ 317.881644][ T6855] ? tomoyo_encode2+0x100/0x3d0 [ 317.886930][ T6855] __kmalloc+0x4c/0x100 [ 317.891237][ T6855] tomoyo_encode2+0x100/0x3d0 [ 317.896134][ T6855] ? rcu_is_watching+0x12/0xb0 [ 317.900978][ T6855] tomoyo_encode+0x29/0x50 [ 317.905895][ T6855] tomoyo_realpath_from_path+0x196/0x710 [ 317.911713][ T6855] tomoyo_mount_acl+0x1af/0x880 [ 317.916649][ T6855] ? tomoyo_check_mount_acl+0x1a0/0x1a0 [ 317.922284][ T6855] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 317.928353][ T6855] ? tomoyo_domain+0xbd/0x150 [ 317.933151][ T6855] ? tomoyo_profile+0x47/0x60 [ 317.937894][ T6855] tomoyo_mount_permission+0x16d/0x410 [ 317.943403][ T6855] ? tomoyo_mount_permission+0x10b/0x410 [ 317.949093][ T6855] ? tomoyo_mount_acl+0x880/0x880 [ 317.954276][ T6855] security_sb_mount+0x86/0xd0 [ 317.959198][ T6855] path_mount+0x129/0x1ed0 [ 317.963669][ T6855] ? kmem_cache_free+0xf0/0x490 [ 317.968586][ T6855] ? finish_automount+0xa50/0xa50 [ 317.973678][ T6855] ? putname+0x101/0x140 [ 317.978049][ T6855] __x64_sys_mount+0x293/0x310 [ 317.982942][ T6855] ? copy_mnt_ns+0xb60/0xb60 [ 317.988009][ T6855] ? syscall_enter_from_user_mode+0x26/0x80 [ 317.993965][ T6855] do_syscall_64+0x38/0xb0 [ 317.998504][ T6855] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 318.007561][ T6855] RIP: 0033:0x7fb9f387cb29 [ 318.012000][ T6855] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 318.032470][ T6855] RSP: 002b:00007fb9f45a50c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 318.042325][ T6855] RAX: ffffffffffffffda RBX: 00007fb9f399bf80 RCX: 00007fb9f387cb29 [ 318.050639][ T6855] RDX: 0000000020000280 RSI: 00000000200002c0 RDI: 0000000000000000 [ 318.058654][ T6855] RBP: 00007fb9f45a5120 R08: 0000000020000400 R09: 0000000000000000 [ 318.067027][ T6855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 318.075041][ T6855] R13: 000000000000000b R14: 00007fb9f399bf80 R15: 00007fffe27e74d8 [ 318.083062][ T6855] [ 318.167533][ T6855] ERROR: Out of memory at tomoyo_realpath_from_path. 20:02:30 executing program 0: ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000000)={0x80, 0x38414262, 0x1, @stepwise={0xfffffffe, 0x49c8a60c, 0xdfa6, 0x6, 0x101, 0xffff}}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) 20:02:30 executing program 3: r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x700, &(0x7f0000000000)='source', &(0x7f0000000080)='%\xb9\xf6\x822\xcc0{\xc7:', 0x0) 20:02:30 executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x8050, &(0x7f00000001c0)={[{@sb={'sb', 0x3d, 0x7fffffff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5}}, {@lazytime}, {@norecovery}, {@journal_dev={'journal_dev', 0x3d, 0x4d40}}, {@usrquota}, {@jqfmt_vfsv1}, {@jqfmt_vfsv1}, {@resgid, 0x32}], [{@dont_hash}, {@permit_directio}]}, 0x1, 0x4f5, &(0x7f0000000a40)="$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") (fail_nth: 12) 20:02:30 executing program 1: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x102440, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000001ac0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x54, r5, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0x30, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x1a0, r5, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x24000840}, 0x4000801) fcntl$setlease(r0, 0x400, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fcntl$setlease(r6, 0x400, 0x0) r7 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r7, 0x400, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = dup(r9) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r11, 0xae9a) ioctl$KVM_RUN(r11, 0xae80, 0x0) fcntl$setlease(r11, 0x400, 0x1) 20:02:30 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) (fail_nth: 11) 20:02:30 executing program 5: socketpair(0x11, 0x3, 0xfffffff8, &(0x7f0000000040)) [ 319.355160][ T6869] FAULT_INJECTION: forcing a failure. [ 319.355160][ T6869] name failslab, interval 1, probability 0, space 0, times 0 [ 319.407310][ T6873] FAULT_INJECTION: forcing a failure. [ 319.407310][ T6873] name failslab, interval 1, probability 0, space 0, times 0 [ 319.416416][ T6869] CPU: 1 PID: 6869 Comm: syz-executor.4 Not tainted 6.5.0-rc1-next-20230714-syzkaller #0 [ 319.431317][ T6869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 319.441790][ T6869] Call Trace: [ 319.445358][ T6869] [ 319.448789][ T6869] dump_stack_lvl+0x125/0x1b0 20:02:30 executing program 3: r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0xb00, &(0x7f0000000000)='source', &(0x7f0000000080)='%\xb9\xf6\x822\xcc0{\xc7:', 0x0) [ 319.453843][ T6869] should_fail_ex+0x496/0x5b0 [ 319.458652][ T6869] should_failslab+0x9/0x20 [ 319.463398][ T6869] kmem_cache_alloc_bulk+0x57/0x7c0 [ 319.468780][ T6869] ? kmem_cache_alloc+0x34e/0x3b0 [ 319.473897][ T6869] mas_alloc_nodes+0x39c/0x830 [ 319.478764][ T6869] mas_preallocate+0x2b1/0x370 [ 319.483599][ T6869] mmap_region+0x7e1/0x2640 [ 319.488211][ T6869] ? find_extend_vma_locked+0x2f0/0x2f0 [ 319.494387][ T6869] ? bpf_lsm_mmap_addr+0x9/0x10 [ 319.499313][ T6869] ? security_mmap_addr+0x84/0xa0 20:02:30 executing program 0: ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000000)={0x80, 0x38414262, 0x1, @stepwise={0xfffffffe, 0x49c8a60c, 0xdfa6, 0x6, 0x101, 0xffff}}) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) [ 319.504884][ T6869] ? get_unmapped_area+0x2c5/0x3e0 [ 319.510429][ T6869] do_mmap+0x884/0xee0 [ 319.514778][ T6869] vm_mmap_pgoff+0x1a6/0x3b0 [ 319.519470][ T6869] ? randomize_page+0xb0/0xb0 [ 319.524499][ T6869] ? fput+0x30/0x1a0 [ 319.528551][ T6869] ? PageTransHuge+0x300/0x300 [ 319.533405][ T6869] ? ksys_write+0x1a7/0x250 [ 319.538085][ T6869] ksys_mmap_pgoff+0x7d/0x5b0 [ 319.543119][ T6869] ? syscall_enter_from_user_mode+0x26/0x80 [ 319.549792][ T6869] ? lockdep_hardirqs_on+0x7d/0x100 [ 319.555177][ T6869] do_syscall_64+0x38/0xb0 [ 319.559659][ T6869] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 319.565814][ T6869] RIP: 0033:0x7f236947cb63 [ 319.570373][ T6869] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 b0 ff ff ff 64 c7 [ 319.590668][ T6869] RSP: 002b:00007f236a21ae98 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 319.599369][ T6869] RAX: ffffffffffffffda RBX: 00000000000004f3 RCX: 00007f236947cb63 20:02:30 executing program 0: ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000000)={0x80, 0x38414262, 0x1, @stepwise={0xfffffffe, 0x49c8a60c, 0xdfa6, 0x6, 0x101, 0xffff}}) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) [ 319.607620][ T6869] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 319.615673][ T6869] RBP: 0000000020000a42 R08: 00000000ffffffff R09: 0000000000000000 [ 319.623879][ T6869] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000004 [ 319.631994][ T6869] R13: 00007f236a21af3c R14: 00007f236a21af40 R15: 00000000200001c0 [ 319.640362][ T6869] [ 319.653397][ T6873] CPU: 1 PID: 6873 Comm: syz-executor.2 Not tainted 6.5.0-rc1-next-20230714-syzkaller #0 [ 319.663565][ T6873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 319.674020][ T6873] Call Trace: [ 319.677365][ T6873] [ 319.680568][ T6873] dump_stack_lvl+0x125/0x1b0 [ 319.685575][ T6873] should_fail_ex+0x496/0x5b0 [ 319.690768][ T6873] should_failslab+0x9/0x20 [ 319.695509][ T6873] __kmem_cache_alloc_node+0x2fd/0x350 [ 319.701469][ T6873] ? alloc_fs_context+0x57/0x9f0 [ 319.706650][ T6873] kmalloc_trace+0x25/0xe0 [ 319.711340][ T6873] alloc_fs_context+0x57/0x9f0 [ 319.716345][ T6873] path_mount+0xae6/0x1ed0 [ 319.720983][ T6873] ? kmem_cache_free+0xf0/0x490 [ 319.726172][ T6873] ? finish_automount+0xa50/0xa50 [ 319.731549][ T6873] ? putname+0x101/0x140 [ 319.736092][ T6873] __x64_sys_mount+0x293/0x310 [ 319.741011][ T6873] ? copy_mnt_ns+0xb60/0xb60 [ 319.745856][ T6873] ? syscall_enter_from_user_mode+0x26/0x80 [ 319.752203][ T6873] do_syscall_64+0x38/0xb0 [ 319.756663][ T6873] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 319.762599][ T6873] RIP: 0033:0x7fb9f387cb29 [ 319.767130][ T6873] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 319.787167][ T6873] RSP: 002b:00007fb9f45a50c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 319.795728][ T6873] RAX: ffffffffffffffda RBX: 00007fb9f399bf80 RCX: 00007fb9f387cb29 20:02:30 executing program 5: socketpair(0x11, 0x3, 0xfffffff8, &(0x7f0000000040)) 20:02:30 executing program 1: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x102440, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000001ac0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x54, r5, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0x30, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x1a0, r5, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x24000840}, 0x4000801) fcntl$setlease(r0, 0x400, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fcntl$setlease(r6, 0x400, 0x0) r7 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r7, 0x400, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = dup(r9) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r11, 0xae9a) ioctl$KVM_RUN(r11, 0xae80, 0x0) fcntl$setlease(r11, 0x400, 0x1) 20:02:30 executing program 3: r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x7ffffff2, &(0x7f0000000000)='source', &(0x7f0000000080)='%\xb9\xf6\x822\xcc0{\xc7:', 0x0) [ 319.804244][ T6873] RDX: 0000000020000280 RSI: 00000000200002c0 RDI: 0000000000000000 [ 319.812441][ T6873] RBP: 00007fb9f45a5120 R08: 0000000020000400 R09: 0000000000000000 [ 319.820533][ T6873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 319.828735][ T6873] R13: 000000000000000b R14: 00007fb9f399bf80 R15: 00007fffe27e74d8 [ 319.836865][ T6873] 20:02:30 executing program 0: r0 = open(&(0x7f0000000080)='./bus\x00', 0x145042, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = open(&(0x7f0000000140)='./bus\x00', 0x1c1042, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000080400000000055000000001d2c00008dac9d90773042d5fb26f6eff3b8fc64fcf6b4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r2, 0x0) ioctl$USBDEVFS_GETDRIVER(r2, 0x41045508, &(0x7f00000002c0)={0x8, "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"}) pwrite64(r1, &(0x7f0000000000)='+', 0x1, 0x4010000bffd) r3 = open(&(0x7f0000000080)='./bus\x00', 0x40002, 0x0) pwrite64(r3, &(0x7f0000000280)='#', 0x1, 0x100000001) fallocate(r3, 0x3, 0xfffffffb, 0xffeffeff000) 20:02:30 executing program 3: r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x7ffffff8, &(0x7f0000000000)='source', &(0x7f0000000080)='%\xb9\xf6\x822\xcc0{\xc7:', 0x0) [ 320.051100][ T27] audit: type=1800 audit(1689364950.769:29): pid=6896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1943 res=0 errno=0 20:02:31 executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x8050, &(0x7f00000001c0)={[{@sb={'sb', 0x3d, 0x7fffffff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5}}, {@lazytime}, {@norecovery}, {@journal_dev={'journal_dev', 0x3d, 0x4d40}}, {@usrquota}, {@jqfmt_vfsv1}, {@jqfmt_vfsv1}, {@resgid, 0x32}], [{@dont_hash}, {@permit_directio}]}, 0x1, 0x4f5, &(0x7f0000000a40)="$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") (fail_nth: 13) 20:02:31 executing program 5: socketpair(0x11, 0x3, 0xfffffff8, &(0x7f0000000040)) [ 320.452174][ T6902] FAULT_INJECTION: forcing a failure. [ 320.452174][ T6902] name failslab, interval 1, probability 0, space 0, times 0 [ 320.469580][ T6902] CPU: 0 PID: 6902 Comm: syz-executor.4 Not tainted 6.5.0-rc1-next-20230714-syzkaller #0 [ 320.480007][ T6902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 320.490306][ T6902] Call Trace: [ 320.493667][ T6902] [ 320.496840][ T6902] dump_stack_lvl+0x125/0x1b0 [ 320.502041][ T6902] should_fail_ex+0x496/0x5b0 [ 320.506850][ T6902] should_failslab+0x9/0x20 [ 320.511455][ T6902] kmem_cache_alloc+0x33a/0x3b0 [ 320.516405][ T6902] ptlock_alloc+0x1f/0x70 [ 320.520922][ T6902] pte_alloc_one+0x6a/0x240 [ 320.525498][ T6902] __pte_alloc+0x6e/0x270 [ 320.529997][ T6902] ? pmd_install+0x170/0x170 [ 320.534659][ T6902] ? __handle_mm_fault+0x1cd/0x40b0 [ 320.540201][ T6902] __handle_mm_fault+0x3830/0x40b0 [ 320.545490][ T6902] ? vm_iomap_memory+0x170/0x170 [ 320.550525][ T6902] ? find_vma+0x10e/0x1b0 [ 320.554916][ T6902] ? vma_link+0x260/0x260 [ 320.559404][ T6902] handle_mm_fault+0x47a/0xa00 [ 320.564364][ T6902] ? lock_mm_and_find_vma+0xc2/0x780 [ 320.569732][ T6902] do_user_addr_fault+0x3ad/0xfe0 [ 320.575003][ T6902] ? rcu_is_watching+0x12/0xb0 [ 320.579952][ T6902] exc_page_fault+0x5c/0xd0 [ 320.584721][ T6902] asm_exc_page_fault+0x26/0x30 [ 320.589906][ T6902] RIP: 0033:0x7f2369428716 [ 320.594470][ T6902] Code: f0 72 6e 48 63 cd 48 01 c1 49 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01 [ 320.614573][ T6902] RSP: 002b:00007f236a21a520 EFLAGS: 00010246 [ 320.620706][ T6902] RAX: 0000000000000001 RBX: 00007f236a21a5c0 RCX: 0000000000000101 [ 320.629160][ T6902] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00007f236a21a660 [ 320.637702][ T6902] RBP: 0000000000000102 R08: 00007f235fbff000 R09: 0000000000000000 20:02:31 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) 20:02:31 executing program 3: r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x7ffffff9, &(0x7f0000000000)='source', &(0x7f0000000080)='%\xb9\xf6\x822\xcc0{\xc7:', 0x0) 20:02:31 executing program 0: r0 = open(&(0x7f0000000080)='./bus\x00', 0x145042, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) (async) setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = open(&(0x7f0000000140)='./bus\x00', 0x1c1042, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000080400000000055000000001d2c00008dac9d90773042d5fb26f6eff3b8fc64fcf6b4"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r2, 0x0) (async) ioctl$USBDEVFS_GETDRIVER(r2, 0x41045508, &(0x7f00000002c0)={0x8, "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"}) pwrite64(r1, &(0x7f0000000000)='+', 0x1, 0x4010000bffd) (async) r3 = open(&(0x7f0000000080)='./bus\x00', 0x40002, 0x0) pwrite64(r3, &(0x7f0000000280)='#', 0x1, 0x100000001) fallocate(r3, 0x3, 0xfffffffb, 0xffeffeff000) 20:02:31 executing program 5: r0 = open(&(0x7f0000000080)='./bus\x00', 0x145042, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = open(&(0x7f0000000140)='./bus\x00', 0x1c1042, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000080400000000055000000001d2c00008dac9d90773042d5fb26f6eff3b8fc64fcf6b4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r2, 0x0) ioctl$USBDEVFS_GETDRIVER(r2, 0x41045508, &(0x7f00000002c0)={0x8, "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"}) pwrite64(r1, &(0x7f0000000000)='+', 0x1, 0x4010000bffd) r3 = open(&(0x7f0000000080)='./bus\x00', 0x40002, 0x0) pwrite64(r3, &(0x7f0000000280)='#', 0x1, 0x100000001) fallocate(r3, 0x3, 0xfffffffb, 0xffeffeff000) 20:02:31 executing program 1: syz_mount_image$reiserfs(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x4413, &(0x7f0000000280)={[], [], 0x2}, 0x3, 0x111d, &(0x7f00000002c0)="$eJzs2DFrFEEYBuB399YkViebfhG0sJCQEDurCBbXWtuIpDLdVREh+l/En5PKPuQHWATsFEZ279bEgATJRQ08D9zw8c7HzTflTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDhab9s1kk7JnWSKum649lpkm7M770fNl7sz+aTJPNla903L8qhancebLS77W670z7Z3HvYzg/fvnl1cLD/rSxU6XJytvqL9Gf3c6WUcnR5c+NC3SRVkzurnwAAAAD+T+W6kqxd+s+7Vx/76dmqzgcAAACudBNvCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB/Yn16XrdJvpdSUiepkq47np0m6f7lgAAAAMC1VanzcngDKOXXPMMzwLnH+Tyt0izzfv9r1dfb+Tj9y0MDAADArdP8rOrfdFQXvscfpUkp5WjM76fJ1tbQtjb2f9lLJofPs531ZfJhWE/O3r0ef1WZ3OCdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4wQ4ckAAAAAAI+v+6HYECAAAAAAAAAAAAAAAAAAAAAAAAAADwUAAAAP//3sDnCg==") [ 320.645854][ T6902] R10: 0000000000000000 R11: 00007f236a21a5d0 R12: 0000000000000001 [ 320.653992][ T6902] R13: 00007f23694ea340 R14: 0000000000000000 R15: 00007f236a21a660 [ 320.662137][ T6902] [ 320.739294][ T27] audit: type=1800 audit(1689364951.459:30): pid=6908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1965 res=0 errno=0 20:02:31 executing program 3: r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x7ffffffe, &(0x7f0000000000)='source', &(0x7f0000000080)='%\xb9\xf6\x822\xcc0{\xc7:', 0x0) 20:02:31 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0x2, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) [ 320.838189][ T27] audit: type=1800 audit(1689364951.489:31): pid=6909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1968 res=0 errno=0 20:02:31 executing program 0: r0 = open(&(0x7f0000000080)='./bus\x00', 0x145042, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = open(&(0x7f0000000140)='./bus\x00', 0x1c1042, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000080400000000055000000001d2c00008dac9d90773042d5fb26f6eff3b8fc64fcf6b4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r2, 0x0) ioctl$USBDEVFS_GETDRIVER(r2, 0x41045508, &(0x7f00000002c0)={0x8, "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"}) pwrite64(r1, &(0x7f0000000000)='+', 0x1, 0x4010000bffd) r3 = open(&(0x7f0000000080)='./bus\x00', 0x40002, 0x0) pwrite64(r3, &(0x7f0000000280)='#', 0x1, 0x100000001) fallocate(r3, 0x3, 0xfffffffb, 0xffeffeff000) open(&(0x7f0000000080)='./bus\x00', 0x145042, 0x0) (async) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) (async) setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) open(&(0x7f0000000140)='./bus\x00', 0x1c1042, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000080400000000055000000001d2c00008dac9d90773042d5fb26f6eff3b8fc64fcf6b4"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r2, 0x0) (async) ioctl$USBDEVFS_GETDRIVER(r2, 0x41045508, &(0x7f00000002c0)={0x8, "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"}) (async) pwrite64(r1, &(0x7f0000000000)='+', 0x1, 0x4010000bffd) (async) open(&(0x7f0000000080)='./bus\x00', 0x40002, 0x0) (async) pwrite64(r3, &(0x7f0000000280)='#', 0x1, 0x100000001) (async) fallocate(r3, 0x3, 0xfffffffb, 0xffeffeff000) (async) 20:02:31 executing program 3: r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0xffffff1f, &(0x7f0000000000)='source', &(0x7f0000000080)='%\xb9\xf6\x822\xcc0{\xc7:', 0x0) [ 321.053023][ T27] audit: type=1800 audit(1689364951.769:32): pid=6921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1955 res=0 errno=0 20:02:31 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0x3, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) [ 321.309086][ T6902] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 321.370278][ T6902] loop4: detected capacity change from 0 to 512 [ 321.386232][ T6902] EXT4-fs: Invalid want_extra_isize 5 20:02:32 executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x8050, &(0x7f00000001c0)={[{@sb={'sb', 0x3d, 0x7fffffff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5}}, {@lazytime}, {@norecovery}, {@journal_dev={'journal_dev', 0x3d, 0x4d40}}, {@usrquota}, {@jqfmt_vfsv1}, {@jqfmt_vfsv1}, {@resgid, 0x32}], [{@dont_hash}, {@permit_directio}]}, 0x1, 0x4f5, &(0x7f0000000a40)="$eJzs3d1rW28dAPDvSZu5l/5sf74xB27TTbqhS9rVbcWLvYB4N1Dm/axtWkrTpjTptpbhMvwDBBEVvPLKG8E/QJD9CSIM3L2oKKKbXnihO5I323VJm2Ga7Nd8PnBynnOenHy/DyHPOc85h5wAhtb5iLgdEa/TNL0cEePN9ZnmVF2svTTe9+rl4/nalESa3vtbEklzXeuzzqVpWpufamwSEaP1Db+TvB23vLW9MlcsFjaay/nK6nq+vLV9ZXl1bqmwVFibmZm+Pntj9trsVE/aWcvp5tf+9KPv//zrN3/95Ye/v/+XS9+tpfXpZv3udvRSo+nZOL5r3WhEbBxGsAEYac6zA84DAIDu1I7xPxERX4iIyzEeI/WjUwAAAOAoSW+Nxb+TiBQAAAA4sjIRMRZJJte8F2AsMplcrnG/7KfiZKZYKle+tFjaXFuo1UVMRDazuFwsTDXvFZ6IbFJbnq6Xd5av7lmeiYgPI+KH4yfqy7n5UnFh0Cc/AAAAYEic2jP+/+d4Y/wPAAAAHDETg04AAAAAOHTG/wAAAHD0Gf8DAADAkfaNu3drU9p6/vXCg63NldKDKwuF8kpudXM+N1/aWM8tlUpL9f/sWz3o84ql0vpXYm3zUb5SKFfy5a3t+6ulzbXK/eU3HoENAAAA9NGH5569SCKi+tUT9QkYHqPv8uY/Hl4eQP+NDDoBYGDeaf8PHCnZQScADFxyQH3Hm3d+0/tcAACAwzH52Wcvbu25/n+sWbf/uYFqpg/pAYfI+T8YXvte/0/T9En/UgH6zPV/GF7ZGAkDeRhuB13/v9Opouvr/2n6TgkBAAA9N1afkkwuon4eYCwymVwu4oP6YwGyyeJysTAVER+PiN+NZz9WW56ub5kcOGYAAAAAAAAAAAAAAAAAAAAAAAAAABrSNIkUAAAAONIiMn9Oms//mhy/OLb3/MCx5F/j9XlEPPzpvR8/mqtUNqZr6//+v/WVnzTXXx3EGQwAAAAYQsf2r26N01vjeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADopVcvH8+3pn7G/eudiJjYib9TMxrH6/PjkY2Ik/9IYnTXdklEjPQgfvVpRJxu1/6kllZMNLNoF//EAONnIuJUD+LDMHtW639ut/v9ZeJ8fd7+93e93kP9//b2f7vjt/q/kQ79zwddxjjz/Jf5jvGfRpwZbd//tOInHeJf6DL+t7+1vd2pLv1ZxGTb/U/yRqx8ZXU9X97avrK8OrdUWCqszcxMX5+9MXttdiq/uFwsNF/bxvjB5371er/2n+wQf+Lt9lc/syuni122/z/PH738ZKOYbRf/0oX23//pt+M3axr7vi82y7X6yVa52ijvdvYXvz27X/sXOrT/oO//Upftv/zN7/2hy7cCAH1Q3tpemSsWCxvvTSF9P9LovlA7LOpz0Ey8J23/iBee9C3W56uN39vAm9x1YdA9EwAA0Gs7B/2DzgQAAAAAAAAAAAAAAAAAAACGVz/+TmxvzOpOMU363F4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgE7+GwAA//9p09qu") (fail_nth: 14) 20:02:32 executing program 5: r0 = open(&(0x7f0000000080)='./bus\x00', 0x145042, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = open(&(0x7f0000000140)='./bus\x00', 0x1c1042, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000080400000000055000000001d2c00008dac9d90773042d5fb26f6eff3b8fc64fcf6b4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r2, 0x0) ioctl$USBDEVFS_GETDRIVER(r2, 0x41045508, &(0x7f00000002c0)={0x8, "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"}) pwrite64(r1, &(0x7f0000000000)='+', 0x1, 0x4010000bffd) r3 = open(&(0x7f0000000080)='./bus\x00', 0x40002, 0x0) pwrite64(r3, &(0x7f0000000280)='#', 0x1, 0x100000001) fallocate(r3, 0x3, 0xfffffffb, 0xffeffeff000) 20:02:32 executing program 3: r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='%ource', &(0x7f0000000080)='%\xb9\xf6\x822\xcc0{\xc7:', 0x0) 20:02:32 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0x4, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) 20:02:32 executing program 1: syz_mount_image$reiserfs(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x4413, &(0x7f0000000280)={[], [], 0x2}, 0x3, 0x111d, &(0x7f00000002c0)="$eJzs2DFrFEEYBuB399YkViebfhG0sJCQEDurCBbXWtuIpDLdVREh+l/En5PKPuQHWATsFEZ279bEgATJRQ08D9zw8c7HzTflTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDhab9s1kk7JnWSKum649lpkm7M770fNl7sz+aTJPNla903L8qhancebLS77W670z7Z3HvYzg/fvnl1cLD/rSxU6XJytvqL9Gf3c6WUcnR5c+NC3SRVkzurnwAAAAD+T+W6kqxd+s+7Vx/76dmqzgcAAACudBNvCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB/Yn16XrdJvpdSUiepkq47np0m6f7lgAAAAMC1VanzcngDKOXXPMMzwLnH+Tyt0izzfv9r1dfb+Tj9y0MDAADArdP8rOrfdFQXvscfpUkp5WjM76fJ1tbQtjb2f9lLJofPs531ZfJhWE/O3r0ef1WZ3OCdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4wQ4ckAAAAAAI+v+6HYECAAAAAAAAAAAAAAAAAAAAAAAAAADwUAAAAP//3sDnCg==") 20:02:32 executing program 0: syz_clone3(&(0x7f0000001380)={0x50080900, 0x0, 0x0, 0x0, {0x14}, &(0x7f0000001280)=""/36, 0x24, &(0x7f00000012c0)=""/124, 0x0}, 0x58) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@cgroup, r0, 0xb, 0x7}, 0x14) [ 321.535650][ T27] audit: type=1800 audit(1689364952.259:33): pid=6938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1962 res=0 errno=0 20:02:32 executing program 0: syz_clone3(&(0x7f0000001380)={0x50080900, 0x0, 0x0, 0x0, {0x14}, &(0x7f0000001280)=""/36, 0x24, &(0x7f00000012c0)=""/124, 0x0}, 0x58) (async) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@cgroup, r0, 0xb, 0x7}, 0x14) 20:02:32 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0x5, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) 20:02:32 executing program 3: r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='.ource', &(0x7f0000000080)='%\xb9\xf6\x822\xcc0{\xc7:', 0x0) 20:02:32 executing program 0: syz_clone3(&(0x7f0000001380)={0x50080900, 0x0, 0x0, 0x0, {0x14}, &(0x7f0000001280)=""/36, 0x24, &(0x7f00000012c0)=""/124, 0x0}, 0x58) (async) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@cgroup, r0, 0xb, 0x7}, 0x14) [ 321.699581][ T6943] FAULT_INJECTION: forcing a failure. [ 321.699581][ T6943] name failslab, interval 1, probability 0, space 0, times 0 [ 321.751604][ T6943] CPU: 0 PID: 6943 Comm: syz-executor.4 Not tainted 6.5.0-rc1-next-20230714-syzkaller #0 [ 321.762044][ T6943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 321.772544][ T6943] Call Trace: [ 321.776049][ T6943] [ 321.779032][ T6943] dump_stack_lvl+0x125/0x1b0 [ 321.783787][ T6943] should_fail_ex+0x496/0x5b0 [ 321.788560][ T6943] should_failslab+0x9/0x20 [ 321.793144][ T6943] kmem_cache_alloc+0x33a/0x3b0 [ 321.798339][ T6943] ? reacquire_held_locks+0x4b0/0x4b0 [ 321.804265][ T6943] __anon_vma_prepare+0x64/0x550 [ 321.809327][ T6943] do_wp_page+0x1bd3/0x3340 [ 321.813936][ T6943] ? lock_sync+0x190/0x190 [ 321.818513][ T6943] ? finish_mkwrite_fault+0x300/0x300 [ 321.823978][ T6943] ? spin_bug+0x1d0/0x1d0 [ 321.828371][ T6943] __handle_mm_fault+0x1d26/0x40b0 [ 321.833666][ T6943] ? vm_iomap_memory+0x170/0x170 [ 321.838789][ T6943] ? find_vma+0x10e/0x1b0 [ 321.843170][ T6943] ? vma_link+0x260/0x260 [ 321.847555][ T6943] handle_mm_fault+0x47a/0xa00 [ 321.852746][ T6943] ? lock_mm_and_find_vma+0xc2/0x780 [ 321.858202][ T6943] do_user_addr_fault+0x3ad/0xfe0 [ 321.863279][ T6943] ? rcu_is_watching+0x12/0xb0 [ 321.868189][ T6943] exc_page_fault+0x5c/0xd0 [ 321.872760][ T6943] asm_exc_page_fault+0x26/0x30 [ 321.877674][ T6943] RIP: 0033:0x7f2369428673 [ 321.882143][ T6943] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 321.902151][ T6943] RSP: 002b:00007f236a21a520 EFLAGS: 00010202 [ 321.908371][ T6943] RAX: 0000000000000400 RBX: 00007f236a21a5c0 RCX: 00007f235fbff000 [ 321.916487][ T6943] RDX: 00007f236a21a760 RSI: 0000000000000001 RDI: 00007f236a21a660 [ 321.924491][ T6943] RBP: 00000000000000f9 R08: 0000000000000009 R09: 00000000000001a5 [ 321.933010][ T6943] R10: 00000000000001c6 R11: 00007f236a21a5c0 R12: 0000000000000001 [ 321.941091][ T6943] R13: 00007f23694ea340 R14: 0000000000000020 R15: 00007f236a21a660 [ 321.949314][ T6943] 20:02:32 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0x6, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) 20:02:32 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f00000008c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0xfffffcea, 0x1, 0x1, 0x0, 0x90, 0x0, [{{0x9, 0x4, 0x0, 0x3, 0x12, 0x2, 0x6, 0x0, 0x80, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10}}, {{0x9, 0x5, 0x3, 0x2, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 321.978635][ T6943] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 322.009649][ T6943] loop4: detected capacity change from 0 to 512 [ 322.023412][ T6943] EXT4-fs: Invalid want_extra_isize 5 20:02:32 executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x8050, &(0x7f00000001c0)={[{@sb={'sb', 0x3d, 0x7fffffff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5}}, {@lazytime}, {@norecovery}, {@journal_dev={'journal_dev', 0x3d, 0x4d40}}, {@usrquota}, {@jqfmt_vfsv1}, {@jqfmt_vfsv1}, {@resgid, 0x32}], [{@dont_hash}, {@permit_directio}]}, 0x1, 0x4f5, &(0x7f0000000a40)="$eJzs3d1rW28dAPDvSZu5l/5sf74xB27TTbqhS9rVbcWLvYB4N1Dm/axtWkrTpjTptpbhMvwDBBEVvPLKG8E/QJD9CSIM3L2oKKKbXnihO5I323VJm2Ga7Nd8PnBynnOenHy/DyHPOc85h5wAhtb5iLgdEa/TNL0cEePN9ZnmVF2svTTe9+rl4/nalESa3vtbEklzXeuzzqVpWpufamwSEaP1Db+TvB23vLW9MlcsFjaay/nK6nq+vLV9ZXl1bqmwVFibmZm+Pntj9trsVE/aWcvp5tf+9KPv//zrN3/95Ye/v/+XS9+tpfXpZv3udvRSo+nZOL5r3WhEbBxGsAEYac6zA84DAIDu1I7xPxERX4iIyzEeI/WjUwAAAOAoSW+Nxb+TiBQAAAA4sjIRMRZJJte8F2AsMplcrnG/7KfiZKZYKle+tFjaXFuo1UVMRDazuFwsTDXvFZ6IbFJbnq6Xd5av7lmeiYgPI+KH4yfqy7n5UnFh0Cc/AAAAYEic2jP+/+d4Y/wPAAAAHDETg04AAAAAOHTG/wAAAHD0Gf8DAADAkfaNu3drU9p6/vXCg63NldKDKwuF8kpudXM+N1/aWM8tlUpL9f/sWz3o84ql0vpXYm3zUb5SKFfy5a3t+6ulzbXK/eU3HoENAAAA9NGH5569SCKi+tUT9QkYHqPv8uY/Hl4eQP+NDDoBYGDeaf8PHCnZQScADFxyQH3Hm3d+0/tcAACAwzH52Wcvbu25/n+sWbf/uYFqpg/pAYfI+T8YXvte/0/T9En/UgH6zPV/GF7ZGAkDeRhuB13/v9Opouvr/2n6TgkBAAA9N1afkkwuon4eYCwymVwu4oP6YwGyyeJysTAVER+PiN+NZz9WW56ub5kcOGYAAAAAAAAAAAAAAAAAAAAAAAAAABrSNIkUAAAAONIiMn9Oms//mhy/OLb3/MCx5F/j9XlEPPzpvR8/mqtUNqZr6//+v/WVnzTXXx3EGQwAAAAYQsf2r26N01vjeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADopVcvH8+3pn7G/eudiJjYib9TMxrH6/PjkY2Ik/9IYnTXdklEjPQgfvVpRJxu1/6kllZMNLNoF//EAONnIuJUD+LDMHtW639ut/v9ZeJ8fd7+93e93kP9//b2f7vjt/q/kQ79zwddxjjz/Jf5jvGfRpwZbd//tOInHeJf6DL+t7+1vd2pLv1ZxGTb/U/yRqx8ZXU9X97avrK8OrdUWCqszcxMX5+9MXttdiq/uFwsNF/bxvjB5371er/2n+wQf+Lt9lc/syuni122/z/PH738ZKOYbRf/0oX23//pt+M3axr7vi82y7X6yVa52ijvdvYXvz27X/sXOrT/oO//Upftv/zN7/2hy7cCAH1Q3tpemSsWCxvvTSF9P9LovlA7LOpz0Ey8J23/iBee9C3W56uN39vAm9x1YdA9EwAA0Gs7B/2DzgQAAAAAAAAAAAAAAAAAAACGVz/+TmxvzOpOMU363F4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgE7+GwAA//9p09qu") (fail_nth: 15) 20:02:32 executing program 3: r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='Xource', &(0x7f0000000080)='%\xb9\xf6\x822\xcc0{\xc7:', 0x0) 20:02:32 executing program 1: syz_mount_image$reiserfs(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x4413, &(0x7f0000000280)={[], [], 0x2}, 0x3, 0x111d, &(0x7f00000002c0)="$eJzs2DFrFEEYBuB399YkViebfhG0sJCQEDurCBbXWtuIpDLdVREh+l/En5PKPuQHWATsFEZ279bEgATJRQ08D9zw8c7HzTflTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDhab9s1kk7JnWSKum649lpkm7M770fNl7sz+aTJPNla903L8qhancebLS77W670z7Z3HvYzg/fvnl1cLD/rSxU6XJytvqL9Gf3c6WUcnR5c+NC3SRVkzurnwAAAAD+T+W6kqxd+s+7Vx/76dmqzgcAAACudBNvCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB/Yn16XrdJvpdSUiepkq47np0m6f7lgAAAAMC1VanzcngDKOXXPMMzwLnH+Tyt0izzfv9r1dfb+Tj9y0MDAADArdP8rOrfdFQXvscfpUkp5WjM76fJ1tbQtjb2f9lLJofPs531ZfJhWE/O3r0ef1WZ3OCdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4wQ4ckAAAAAAI+v+6HYECAAAAAAAAAAAAAAAAAAAAAAAAAADwUAAAAP//3sDnCg==") syz_mount_image$reiserfs(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x4413, &(0x7f0000000280)={[], [], 0x2}, 0x3, 0x111d, &(0x7f00000002c0)="$eJzs2DFrFEEYBuB399YkViebfhG0sJCQEDurCBbXWtuIpDLdVREh+l/En5PKPuQHWATsFEZ279bEgATJRQ08D9zw8c7HzTflTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDhab9s1kk7JnWSKum649lpkm7M770fNl7sz+aTJPNla903L8qhancebLS77W670z7Z3HvYzg/fvnl1cLD/rSxU6XJytvqL9Gf3c6WUcnR5c+NC3SRVkzurnwAAAAD+T+W6kqxd+s+7Vx/76dmqzgcAAACudBNvCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB/Yn16XrdJvpdSUiepkq47np0m6f7lgAAAAMC1VanzcngDKOXXPMMzwLnH+Tyt0izzfv9r1dfb+Tj9y0MDAADArdP8rOrfdFQXvscfpUkp5WjM76fJ1tbQtjb2f9lLJofPs531ZfJhWE/O3r0ef1WZ3OCdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4wQ4ckAAAAAAI+v+6HYECAAAAAAAAAAAAAAAAAAAAAAAAAADwUAAAAP//3sDnCg==") (async) 20:02:33 executing program 3: r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='cource', &(0x7f0000000080)='%\xb9\xf6\x822\xcc0{\xc7:', 0x0) 20:02:33 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0x7, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) 20:02:33 executing program 0: syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@nolazytime}, {@data_flush}, {@noinline_xattr}, {@jqfmt_vfsv1}]}, 0x1, 0x54e6, &(0x7f0000005640)="$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") r0 = open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) write$P9_RREADLINK(r1, &(0x7f0000001cc0)=ANY=[], 0x10) pwritev2(r0, &(0x7f0000000680)=[{&(0x7f0000000100)='\x00', 0x1200}], 0x1, 0x6000e68, 0x0, 0x0) [ 322.303201][ T6959] FAULT_INJECTION: forcing a failure. [ 322.303201][ T6959] name failslab, interval 1, probability 0, space 0, times 0 [ 322.363825][ T6959] CPU: 1 PID: 6959 Comm: syz-executor.4 Not tainted 6.5.0-rc1-next-20230714-syzkaller #0 [ 322.374168][ T6959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 322.384635][ T6959] Call Trace: [ 322.387966][ T6959] [ 322.391134][ T6959] dump_stack_lvl+0x125/0x1b0 [ 322.395884][ T6959] should_fail_ex+0x496/0x5b0 [ 322.400621][ T6959] should_failslab+0x9/0x20 [ 322.405520][ T6959] kmem_cache_alloc+0x33a/0x3b0 [ 322.410413][ T6959] ? reacquire_held_locks+0x4b0/0x4b0 [ 322.415850][ T6959] __anon_vma_prepare+0x2bf/0x550 [ 322.420935][ T6959] do_wp_page+0x1bd3/0x3340 [ 322.425685][ T6959] ? lock_sync+0x190/0x190 [ 322.430506][ T6959] ? finish_mkwrite_fault+0x300/0x300 [ 322.435932][ T6959] ? spin_bug+0x1d0/0x1d0 [ 322.440334][ T6959] __handle_mm_fault+0x1d26/0x40b0 [ 322.445711][ T6959] ? vm_iomap_memory+0x170/0x170 [ 322.450757][ T6959] ? find_vma+0x10e/0x1b0 [ 322.455139][ T6959] ? vma_link+0x260/0x260 [ 322.459518][ T6959] handle_mm_fault+0x47a/0xa00 [ 322.464363][ T6959] ? lock_mm_and_find_vma+0xc2/0x780 [ 322.469714][ T6959] do_user_addr_fault+0x3ad/0xfe0 [ 322.474869][ T6959] ? rcu_is_watching+0x12/0xb0 [ 322.479871][ T6959] exc_page_fault+0x5c/0xd0 [ 322.484449][ T6959] asm_exc_page_fault+0x26/0x30 [ 322.489563][ T6959] RIP: 0033:0x7f2369428673 [ 322.494387][ T6959] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 322.514528][ T6959] RSP: 002b:00007f236a21a520 EFLAGS: 00010202 [ 322.520638][ T6959] RAX: 0000000000000400 RBX: 00007f236a21a5c0 RCX: 00007f235fbff000 [ 322.528840][ T6959] RDX: 00007f236a21a760 RSI: 0000000000000001 RDI: 00007f236a21a660 [ 322.536958][ T6959] RBP: 00000000000000f9 R08: 0000000000000009 R09: 00000000000001a5 [ 322.545135][ T6959] R10: 00000000000001c6 R11: 00007f236a21a5c0 R12: 0000000000000001 [ 322.553499][ T6959] R13: 00007f23694ea340 R14: 0000000000000020 R15: 00007f236a21a660 [ 322.561629][ T6959] [ 322.633317][ T1233] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.639929][ T1233] ieee802154 phy1 wpan1: encryption failed: -22 20:02:33 executing program 3: r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='dource', &(0x7f0000000080)='%\xb9\xf6\x822\xcc0{\xc7:', 0x0) 20:02:33 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0x8, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) 20:02:33 executing program 3: r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='hource', &(0x7f0000000080)='%\xb9\xf6\x822\xcc0{\xc7:', 0x0) 20:02:33 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0x9, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) 20:02:33 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f00000008c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0xfffffcea, 0x1, 0x1, 0x0, 0x90, 0x0, [{{0x9, 0x4, 0x0, 0x3, 0x12, 0x2, 0x6, 0x0, 0x80, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10}}, {{0x9, 0x5, 0x3, 0x2, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f00000008c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0xfffffcea, 0x1, 0x1, 0x0, 0x90, 0x0, [{{0x9, 0x4, 0x0, 0x3, 0x12, 0x2, 0x6, 0x0, 0x80, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10}}, {{0x9, 0x5, 0x3, 0x2, 0x40}}}}}]}}]}}, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) 20:02:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f00000001c0)={0xbe, 0x0, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)=@getnetconf={0x14, 0x52, 0x8, 0x70bd2b, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}}, 0x80d5) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) sched_setparam(0x0, &(0x7f0000000180)=0xe4db) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="4000000010001fff000000000000f4f309000000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000381028008000a00", @ANYRES32, @ANYBLOB="0d2893c58d271712a244761932dea1d0e08e38e398fd1547ca7ee2ac3bbcd430d70950c498bac4d6978e8a9f60c5f8efdeceef5a0a5f4091329b54e5f1520fef9ba0442dba74b6e2222c2fd0a20bdb57c4db8ae366dbf7db52b5aaadd6b3bdff84a1efa4631490ffaf9663e21a890f215991e822961552d2ad74227b0ba45871bd83cdcfd6190b41ac0d74b833ae355155705264e93c3dc73631eda2190fd2564a93d3d669"], 0x40}}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)) r8 = socket$netlink(0x10, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x9, &(0x7f0000000940)=ANY=[@ANYBLOB="1832000003000000000000000000000018260000", @ANYRES32=r8, @ANYBLOB="00000000a80dfdff171c00000000000100000000324a060b1a9a6b2b590000000085100000ffffffff183500000400"/57], &(0x7f0000000380)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0xe, 0x8, 0x7fff}, 0x10, 0xffffffffffffffff}, 0x80) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00', {}, 0x40}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r8, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000000100)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000001200)={r9, 0x100000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000480)) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x2010, 0xffffffffffffffff, 0x7bda8000) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) [ 323.150084][ T6959] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 323.243366][ T6986] __nla_validate_parse: 41 callbacks suppressed [ 323.243418][ T6986] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 323.497954][ T6959] loop4: detected capacity change from 0 to 512 [ 323.545907][ T6986] wireguard0: entered promiscuous mode [ 323.551865][ T6986] wireguard0: entered allmulticast mode [ 323.816282][ T6959] EXT4-fs: Invalid want_extra_isize 5 20:02:34 executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x8050, &(0x7f00000001c0)={[{@sb={'sb', 0x3d, 0x7fffffff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5}}, {@lazytime}, {@norecovery}, {@journal_dev={'journal_dev', 0x3d, 0x4d40}}, {@usrquota}, {@jqfmt_vfsv1}, {@jqfmt_vfsv1}, {@resgid, 0x32}], [{@dont_hash}, {@permit_directio}]}, 0x1, 0x4f5, &(0x7f0000000a40)="$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") (fail_nth: 16) 20:02:34 executing program 3: r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='iource', &(0x7f0000000080)='%\xb9\xf6\x822\xcc0{\xc7:', 0x0) 20:02:34 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0xe, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) 20:02:34 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f00000008c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0xfffffcea, 0x1, 0x1, 0x0, 0x90, 0x0, [{{0x9, 0x4, 0x0, 0x3, 0x12, 0x2, 0x6, 0x0, 0x80, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10}}, {{0x9, 0x5, 0x3, 0x2, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 20:02:35 executing program 3: r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='lource', &(0x7f0000000080)='%\xb9\xf6\x822\xcc0{\xc7:', 0x0) [ 324.344217][ T6999] FAULT_INJECTION: forcing a failure. [ 324.344217][ T6999] name failslab, interval 1, probability 0, space 0, times 0 [ 324.358708][ T6999] CPU: 0 PID: 6999 Comm: syz-executor.4 Not tainted 6.5.0-rc1-next-20230714-syzkaller #0 [ 324.368771][ T6999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 324.378902][ T6999] Call Trace: [ 324.382391][ T6999] [ 324.385386][ T6999] dump_stack_lvl+0x125/0x1b0 [ 324.390231][ T6999] should_fail_ex+0x496/0x5b0 [ 324.395004][ T6999] should_failslab+0x9/0x20 [ 324.400894][ T6999] kmem_cache_alloc+0x33a/0x3b0 [ 324.405832][ T6999] ? reacquire_held_locks+0x4b0/0x4b0 [ 324.411300][ T6999] __anon_vma_prepare+0x2bf/0x550 [ 324.416410][ T6999] do_wp_page+0x1bd3/0x3340 [ 324.421280][ T6999] ? lock_sync+0x190/0x190 [ 324.425780][ T6999] ? finish_mkwrite_fault+0x300/0x300 [ 324.431419][ T6999] ? spin_bug+0x1d0/0x1d0 [ 324.435944][ T6999] __handle_mm_fault+0x1d26/0x40b0 [ 324.441255][ T6999] ? vm_iomap_memory+0x170/0x170 [ 324.446388][ T6999] ? find_vma+0x10e/0x1b0 [ 324.450785][ T6999] ? vma_link+0x260/0x260 [ 324.455275][ T6999] handle_mm_fault+0x47a/0xa00 [ 324.460174][ T6999] ? lock_mm_and_find_vma+0xc2/0x780 [ 324.466784][ T6999] do_user_addr_fault+0x3ad/0xfe0 [ 324.471946][ T6999] ? rcu_is_watching+0x12/0xb0 [ 324.476938][ T6999] exc_page_fault+0x5c/0xd0 [ 324.481753][ T6999] asm_exc_page_fault+0x26/0x30 [ 324.486909][ T6999] RIP: 0033:0x7f2369428673 [ 324.491372][ T6999] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 324.511218][ T6999] RSP: 002b:00007f236a21a520 EFLAGS: 00010202 [ 324.517537][ T6999] RAX: 0000000000000400 RBX: 00007f236a21a5c0 RCX: 00007f235fbff000 [ 324.525664][ T6999] RDX: 00007f236a21a760 RSI: 0000000000000001 RDI: 00007f236a21a660 [ 324.533682][ T6999] RBP: 00000000000000f9 R08: 0000000000000009 R09: 00000000000001a5 [ 324.541976][ T6999] R10: 00000000000001c6 R11: 00007f236a21a5c0 R12: 0000000000000001 [ 324.550145][ T6999] R13: 00007f23694ea340 R14: 0000000000000020 R15: 00007f236a21a660 [ 324.558278][ T6999] [ 324.635602][ T6999] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 324.664100][ T6999] loop4: detected capacity change from 0 to 512 [ 324.704064][ T6999] EXT4-fs: Invalid want_extra_isize 5 [ 325.100765][ T27] audit: type=1800 audit(1689364955.819:34): pid=6970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1946 res=0 errno=0 20:02:35 executing program 0: syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@nolazytime}, {@data_flush}, {@noinline_xattr}, {@jqfmt_vfsv1}]}, 0x1, 0x54e6, &(0x7f0000005640)="$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") r0 = open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) write$P9_RREADLINK(r1, &(0x7f0000001cc0)=ANY=[], 0x10) pwritev2(r0, &(0x7f0000000680)=[{&(0x7f0000000100)='\x00', 0x1200}], 0x1, 0x6000e68, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@nolazytime}, {@data_flush}, {@noinline_xattr}, {@jqfmt_vfsv1}]}, 0x1, 0x54e6, &(0x7f0000005640)="$eJzs3MtrY1UYAPAv7XTejkVcuJsLg9DCJEw6D3Q36gw+sEPxsXClaZKGzCS5pUnT2pULl+LC/0QUXLn0b3Dh2p24UNwJSu651akPEJo2dvr7wc13z8nJd78ThoHv3pIATq3F7JefKnElLkTEfERcjijOK+VRuJvCcxFxNSLmHjsq5fwfE2cj4mJEXJkkTzkr5VufXR9fu/3jGz9//e25M5c+/+q72e0amLXnI6K/mc53+inmnRQflvONcbeI/VvjMqY3+o/KcZ7iTnu9yLDT2F/XKOLNTlqfb24PJ3Gj12hOYqe7UcxvDtIFh+POfp7iAw8bW8W41V4vYneYF7Gzl+ra3Uv/t+0NRylPq8z3YZE+RqP9mObbu+20n81HRWwORuV8ypu32ruTOC5jeblo5r1WUcf6Yb7p/7c3u4Pt3Wzc3hp280F2u1Z/oVa/U61v5a32qH2r2ui37tzKljq9ybLqqN3o3+3keafXrjXz/nK21Gk2q/V6tnSvvd5tDLJ6vXazdqN6e7k8u569+uDdrNfKlibx5e5ge9TtDbONfCtLn1jOVmo3X1zOrtWzt1fXsrW37t9fXXvn/XvvPXhp9fVXykV/KytbWrmxslKt36iu1JdP0f4/Loue4v7hUCqzLgDg5NH/A7Nw0vv/0P9PxYnqf097/38E+4dD0f8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJxa3y988VpxspjGl8r5p8qpZ8pxJSLmIuK3fzAfZw/knC/zLPzL+oW/1PBNJYoMk2ucK4+LEXG3PH59+qi/BQAAAHhyffnR1U9Tt55eFmddEMcp3bSZu/zBlPJVImJh8YcpZZubvDw7pWTFv+8zsTulbMUNrPNTSpZuuZ2ZVrb/ZP5AOP9YqKQwd6zlAAAAx+JgJ3C8XQgAAADH6ZNZF8BsVGL/Ueb+s+DiL+//fCB44cAIAAAAOIEqsy4AAAAAOHJF/+/3/wAAAODJln7/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4nZ37yUkdiuIAfFroe7w/RmKcuxVnsAyX4NChYQFugiXgFtwAa8CZSzBgaEu0BhOT3raRfF/SXm5DfpwSJudeUgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADo0nOxmj/eXz20zdnu2klzNwAAAMAxm2I1L19Mq/m/+vpZfeminmcRkUfEsd59FL8amaM6p/ji/cWnGp4iyoT9Z/yuj78RcV0fr+ddfwsAAABwutaL5azq1qvTdOiC6FO1aJP/v0mUl0VEMX1JlJbvT5eJwsrf9zjuEqWVC1iTRGHVkts4Vdq3jBrD5MOQVUPeazkAAEAvmp1Av10IAAAAfbodugCGkcVhK/OwF1z+8/59Q/BPYwYAAAD8QNnQBQAAAACdK/t/z/8DAACA01Y9/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAubYrVfL1YztrmbHftpLkbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4I39eUeBEAiDMNi7vjOZ+x9WGjQ1NakC4eNvDAYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDe/+8v/ialxJpl7bSw9jyRrp8bWqbF3bhz9YXz9GgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALvbnJQVCIAiiYM7430nf/7CSoGcQIQIaHlXUogEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgi373y/+JqXEmmTttLB2PJGtXja2rxt6DxtGD8fZvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALnbu5zWOKg4A+JuZna2timuUPUREwYNe7HZbW3v1oAQP/glCSLc1uvVHm4MtRcjFm+Sci+hRRFDiLf9DzgnkEm857CGCZ2VmZ5LJD3A1dGaTfD7w5n13GOZ93ySEfOe9BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDR67yBOskNnHMfFuc29JwtZv3Wkz6yvbM9mLYujOpM+G16tfoi6zSUCAADAxZGU9X0IYSddm8v6uJPX/2l5TVbz//D8OC7r+aN1f9mXtX/Wfv9t9+X9gTrjcbKb3l0cDq4dT6X19GY53V741yta+ZPP370k+Rck/nD5pVGaP8/ou42N99t5eKmObAGA/+Nq2RdB+ftQ1vebTAyAC6NVKbzL+j/pNJsTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQB1Gy+HZMo5CCLOtgziztfdk4aR+fWV7tmy3VldXqvfMbpGGEO4uDgfXapzLtHv46PFn88Ph4EH9wWshhOZGL4KPJ7gmhCYzFJw2iIvv9WnJ52wEDf9gAgDg3EmLltX1O+naXHYumgnh7x8P1/9vVuIwYf2/+8mtzepY1fq/X9sMp19v6f6XvYePHr+9eH/+3uDe4PN3rvff7d+4ffPm7V7+rqTnjQkAAACn0y5atf6PZ46v/1+pxGHC+v+r7/vfVMdK1P8nOlj0azoTAACAi+3F1//6MzrhfNRuh6/nl5Ye9MfH/c/Xx8cGUv3PLhWtWv8nM01nBQAAANRhtBwdWv+/U4nDhOv/z/30yi/VeyYhhMvF+v/VhS+Gd+qbzlSr48+Jm54jAAAAzbpctOr6f5rv/4/3tzzEIYS33hjHxb8BnKj+Tz749ufqWNX9/zfqm+JUirvj55H33RBa3aYzAgAA4Dx7pmhZsf9Hujb36a9XPmrb/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQt38CAAD//7HmQWY=") (async) open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0) (async) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) (async) write$P9_RREADLINK(r1, &(0x7f0000001cc0)=ANY=[], 0x10) (async) pwritev2(r0, &(0x7f0000000680)=[{&(0x7f0000000100)='\x00', 0x1200}], 0x1, 0x6000e68, 0x0, 0x0) (async) [ 325.129613][ T27] audit: type=1804 audit(1689364955.829:35): pid=6970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3378998973/syzkaller.BzNXkN/125/bus" dev="sda1" ino=1946 res=1 errno=0 20:02:35 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f00000001c0)={0xbe, 0x0, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000001700)=0x4) (async) sched_setscheduler(r3, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)=@getnetconf={0x14, 0x52, 0x8, 0x70bd2b, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}}, 0x80d5) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) sched_setparam(0x0, &(0x7f0000000180)=0xe4db) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="4000000010001fff000000000000f4f309000000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000381028008000a00", @ANYRES32, @ANYBLOB="0d2893c58d271712a244761932dea1d0e08e38e398fd1547ca7ee2ac3bbcd430d70950c498bac4d6978e8a9f60c5f8efdeceef5a0a5f4091329b54e5f1520fef9ba0442dba74b6e2222c2fd0a20bdb57c4db8ae366dbf7db52b5aaadd6b3bdff84a1efa4631490ffaf9663e21a890f215991e822961552d2ad74227b0ba45871bd83cdcfd6190b41ac0d74b833ae355155705264e93c3dc73631eda2190fd2564a93d3d669"], 0x40}}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)) (async) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)) r8 = socket$netlink(0x10, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x9, &(0x7f0000000940)=ANY=[@ANYBLOB="1832000003000000000000000000000018260000", @ANYRES32=r8, @ANYBLOB="00000000a80dfdff171c00000000000100000000324a060b1a9a6b2b590000000085100000ffffffff183500000400"/57], &(0x7f0000000380)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0xe, 0x8, 0x7fff}, 0x10, 0xffffffffffffffff}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x9, &(0x7f0000000940)=ANY=[@ANYBLOB="1832000003000000000000000000000018260000", @ANYRES32=r8, @ANYBLOB="00000000a80dfdff171c00000000000100000000324a060b1a9a6b2b590000000085100000ffffffff183500000400"/57], &(0x7f0000000380)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0xe, 0x8, 0x7fff}, 0x10, 0xffffffffffffffff}, 0x80) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00', {}, 0x40}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r8, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000000100)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000000100)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000001200)={r9, 0x100000000}) (async) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000001200)={r9, 0x100000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000480)) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x2010, 0xffffffffffffffff, 0x7bda8000) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) (async) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) 20:02:35 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0xf, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) 20:02:35 executing program 3: r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='oource', &(0x7f0000000080)='%\xb9\xf6\x822\xcc0{\xc7:', 0x0) 20:02:35 executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x8050, &(0x7f00000001c0)={[{@sb={'sb', 0x3d, 0x7fffffff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5}}, {@lazytime}, {@norecovery}, {@journal_dev={'journal_dev', 0x3d, 0x4d40}}, {@usrquota}, {@jqfmt_vfsv1}, {@jqfmt_vfsv1}, {@resgid, 0x32}], [{@dont_hash}, {@permit_directio}]}, 0x1, 0x4f5, &(0x7f0000000a40)="$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") (fail_nth: 17) 20:02:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f00000001c0)={0xbe, 0x0, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)=@getnetconf={0x14, 0x52, 0x8, 0x70bd2b, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}}, 0x80d5) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) sched_setparam(0x0, &(0x7f0000000180)=0xe4db) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="4000000010001fff000000000000f4f309000000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000381028008000a00", @ANYRES32, @ANYBLOB="0d2893c58d271712a244761932dea1d0e08e38e398fd1547ca7ee2ac3bbcd430d70950c498bac4d6978e8a9f60c5f8efdeceef5a0a5f4091329b54e5f1520fef9ba0442dba74b6e2222c2fd0a20bdb57c4db8ae366dbf7db52b5aaadd6b3bdff84a1efa4631490ffaf9663e21a890f215991e822961552d2ad74227b0ba45871bd83cdcfd6190b41ac0d74b833ae355155705264e93c3dc73631eda2190fd2564a93d3d669"], 0x40}}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)) r8 = socket$netlink(0x10, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x9, &(0x7f0000000940)=ANY=[@ANYBLOB="1832000003000000000000000000000018260000", @ANYRES32=r8, @ANYBLOB="00000000a80dfdff171c00000000000100000000324a060b1a9a6b2b590000000085100000ffffffff183500000400"/57], &(0x7f0000000380)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0xe, 0x8, 0x7fff}, 0x10, 0xffffffffffffffff}, 0x80) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00', {}, 0x40}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r8, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000000100)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000001200)={r9, 0x100000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000480)) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x2010, 0xffffffffffffffff, 0x7bda8000) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) [ 325.198933][ T7005] FAULT_INJECTION: forcing a failure. [ 325.198933][ T7005] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 325.245988][ T7005] CPU: 1 PID: 7005 Comm: syz-executor.4 Not tainted 6.5.0-rc1-next-20230714-syzkaller #0 [ 325.255985][ T7005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 325.266216][ T7005] Call Trace: [ 325.269552][ T7005] [ 325.272536][ T7005] dump_stack_lvl+0x125/0x1b0 [ 325.277292][ T7005] should_fail_ex+0x496/0x5b0 [ 325.282376][ T7005] __should_fail_alloc_page+0xe7/0x130 [ 325.287917][ T7005] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 325.294259][ T7005] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 325.300334][ T7005] __alloc_pages+0x14e/0x4a0 [ 325.305100][ T7005] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 325.312136][ T7005] ? find_held_lock+0x2d/0x110 [ 325.316990][ T7005] ? reacquire_held_locks+0x4b0/0x4b0 [ 325.322467][ T7005] __folio_alloc+0x16/0x40 [ 325.326968][ T7005] vma_alloc_folio+0x156/0x890 [ 325.331913][ T7005] ? policy_nodemask+0x1d0/0x1d0 [ 325.336994][ T7005] ? __anon_vma_prepare+0x298/0x550 [ 325.342611][ T7005] do_wp_page+0x1241/0x3340 [ 325.347216][ T7005] ? lock_sync+0x190/0x190 [ 325.351777][ T7005] ? finish_mkwrite_fault+0x300/0x300 [ 325.357425][ T7005] ? spin_bug+0x1d0/0x1d0 [ 325.361810][ T7005] __handle_mm_fault+0x1d26/0x40b0 [ 325.367003][ T7005] ? vm_iomap_memory+0x170/0x170 [ 325.372213][ T7005] ? find_vma+0x10e/0x1b0 [ 325.376745][ T7005] ? vma_link+0x260/0x260 [ 325.381670][ T7005] handle_mm_fault+0x47a/0xa00 [ 325.386587][ T7005] ? lock_mm_and_find_vma+0xc2/0x780 [ 325.392549][ T7005] do_user_addr_fault+0x3ad/0xfe0 [ 325.398502][ T7005] ? rcu_is_watching+0x12/0xb0 [ 325.403337][ T7005] exc_page_fault+0x5c/0xd0 [ 325.407914][ T7005] asm_exc_page_fault+0x26/0x30 [ 325.412835][ T7005] RIP: 0033:0x7f2369428673 [ 325.417379][ T7005] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 325.437288][ T7005] RSP: 002b:00007f236a21a520 EFLAGS: 00010202 [ 325.443840][ T7005] RAX: 0000000000000400 RBX: 00007f236a21a5c0 RCX: 00007f235fbff000 [ 325.452483][ T7005] RDX: 00007f236a21a760 RSI: 0000000000000001 RDI: 00007f236a21a660 [ 325.460660][ T7005] RBP: 00000000000000f9 R08: 0000000000000009 R09: 00000000000001a5 [ 325.468859][ T7005] R10: 00000000000001c6 R11: 00007f236a21a5c0 R12: 0000000000000001 [ 325.477051][ T7005] R13: 00007f23694ea340 R14: 0000000000000020 R15: 00007f236a21a660 [ 325.485174][ T7005] [ 326.800534][ T7005] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF 20:02:37 executing program 3: r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='pource', &(0x7f0000000080)='%\xb9\xf6\x822\xcc0{\xc7:', 0x0) 20:02:37 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0x10, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) 20:02:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f00000001c0)={0xbe, 0x0, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)=@getnetconf={0x14, 0x52, 0x8, 0x70bd2b, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}}, 0x80d5) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) sched_setparam(0x0, &(0x7f0000000180)=0xe4db) (async) sched_setparam(0x0, &(0x7f0000000180)=0xe4db) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="4000000010001fff000000000000f4f309000000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000381028008000a00", @ANYRES32, @ANYBLOB="0d2893c58d271712a244761932dea1d0e08e38e398fd1547ca7ee2ac3bbcd430d70950c498bac4d6978e8a9f60c5f8efdeceef5a0a5f4091329b54e5f1520fef9ba0442dba74b6e2222c2fd0a20bdb57c4db8ae366dbf7db52b5aaadd6b3bdff84a1efa4631490ffaf9663e21a890f215991e822961552d2ad74227b0ba45871bd83cdcfd6190b41ac0d74b833ae355155705264e93c3dc73631eda2190fd2564a93d3d669"], 0x40}}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)) r8 = socket$netlink(0x10, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x9, &(0x7f0000000940)=ANY=[@ANYBLOB="1832000003000000000000000000000018260000", @ANYRES32=r8, @ANYBLOB="00000000a80dfdff171c00000000000100000000324a060b1a9a6b2b590000000085100000ffffffff183500000400"/57], &(0x7f0000000380)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0xe, 0x8, 0x7fff}, 0x10, 0xffffffffffffffff}, 0x80) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00', {}, 0x40}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r8, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01}) (async) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r8, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000000100)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000001200)={r9, 0x100000000}) (async) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000001200)={r9, 0x100000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000480)) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x2010, 0xffffffffffffffff, 0x7bda8000) (async) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x2010, 0xffffffffffffffff, 0x7bda8000) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) [ 327.858108][ T7019] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 327.868682][ T7019] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 327.870941][ T7005] loop4: detected capacity change from 0 to 512 [ 327.915249][ T7005] EXT4-fs: Invalid want_extra_isize 5 20:02:38 executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x8050, &(0x7f00000001c0)={[{@sb={'sb', 0x3d, 0x7fffffff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5}}, {@lazytime}, {@norecovery}, {@journal_dev={'journal_dev', 0x3d, 0x4d40}}, {@usrquota}, {@jqfmt_vfsv1}, {@jqfmt_vfsv1}, {@resgid, 0x32}], [{@dont_hash}, {@permit_directio}]}, 0x1, 0x4f5, &(0x7f0000000a40)="$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") (fail_nth: 18) 20:02:38 executing program 3: r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='tource', &(0x7f0000000080)='%\xb9\xf6\x822\xcc0{\xc7:', 0x0) 20:02:38 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0x14, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) [ 328.315113][ T7033] FAULT_INJECTION: forcing a failure. [ 328.315113][ T7033] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 328.390612][ T7033] CPU: 0 PID: 7033 Comm: syz-executor.4 Not tainted 6.5.0-rc1-next-20230714-syzkaller #0 [ 328.400699][ T7033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 328.410914][ T7033] Call Trace: [ 328.414454][ T7033] [ 328.417617][ T7033] dump_stack_lvl+0x125/0x1b0 [ 328.422560][ T7033] should_fail_ex+0x496/0x5b0 [ 328.427437][ T7033] __should_fail_alloc_page+0xe7/0x130 [ 328.433155][ T7033] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 328.439556][ T7033] __alloc_pages+0x14e/0x4a0 [ 328.444220][ T7033] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 328.451528][ T7033] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 328.457577][ T7033] alloc_pages+0x1a9/0x270 [ 328.462043][ T7033] pte_alloc_one+0x1a/0x240 [ 328.466896][ T7033] __pte_alloc+0x6e/0x270 [ 328.471488][ T7033] ? pmd_install+0x170/0x170 [ 328.476268][ T7033] ? find_held_lock+0x59/0x110 [ 328.481108][ T7033] __handle_mm_fault+0x3830/0x40b0 [ 328.486299][ T7033] ? vm_iomap_memory+0x170/0x170 [ 328.491411][ T7033] ? mas_walk+0x422/0x7c0 [ 328.496014][ T7033] ? lock_mm_and_find_vma+0x780/0x780 [ 328.501558][ T7033] handle_mm_fault+0x47a/0xa00 [ 328.506539][ T7033] do_user_addr_fault+0x2e7/0xfe0 [ 328.511705][ T7033] ? rcu_is_watching+0x12/0xb0 [ 328.516528][ T7033] exc_page_fault+0x5c/0xd0 [ 328.521170][ T7033] asm_exc_page_fault+0x26/0x30 [ 328.526075][ T7033] RIP: 0033:0x7f2369428720 [ 328.530513][ T7033] Code: 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 328.550700][ T7033] RSP: 002b:00007f236a21a520 EFLAGS: 00010202 [ 328.557185][ T7033] RAX: 0000000000001000 RBX: 00007f236a21a5c0 RCX: 0000000000000003 [ 328.565343][ T7033] RDX: 0000000000007fe3 RSI: 0000000000000be4 RDI: 00007f236a21a660 [ 328.573859][ T7033] RBP: 0000000000000004 R08: 00007f235fbff000 R09: 0000000000000002 [ 328.582171][ T7033] R10: 0000000020000a42 R11: 00000000000004f3 R12: 0000000000000801 20:02:39 executing program 0: syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@nolazytime}, {@data_flush}, {@noinline_xattr}, {@jqfmt_vfsv1}]}, 0x1, 0x54e6, &(0x7f0000005640)="$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") (async) r0 = open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) write$P9_RREADLINK(r1, &(0x7f0000001cc0)=ANY=[], 0x10) (async) pwritev2(r0, &(0x7f0000000680)=[{&(0x7f0000000100)='\x00', 0x1200}], 0x1, 0x6000e68, 0x0, 0x0) 20:02:39 executing program 5: move_pages(0xffffffffffffffff, 0x4, &(0x7f0000000000)=[&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil], 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100), 0x0, 0x8, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000380), 0x8000) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x6) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000003c0)={0x6, 0x6, 0x1, 0x7ff, 0x1f}, 0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0], 0x0, 0x8, &(0x7f00000004c0)=[{}], 0x8, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000700)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000740)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x1) ioctl$RTC_VL_CLR(r1, 0x7014) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000780), 0x20100, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f00000007c0)={0x1, 0x13, 0x5, 0x11, 0x3, 0x8, 0x4, 0xa, 0x1}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000008, 0x30, r1, 0x10000000) sendmsg$alg(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000800)="6bfd6a6a54f8bab0a8f0e41bd74f8043956c25ba2cfbf7844539088faefea19a961e0f3680dd306db19e942c85b1aa861ce34b6536621d9daf0a825799de39eaf27087f8219d5fda3e5597c1b5c5d5c2607be964de1fb99de107a077ea9a8b7076ad6f20d4a4d01858cfae25b846f45bcea2acaac159c75d4a7ea9867c63149de9", 0x81}, {&(0x7f00000008c0)="1021a0a570495b4fe4f8008e99c667c7dc5e2897025e3524602657d0a64b74df811d2294b4763c82ee74256e72d2208dfe94512cfec65835044b84cbd3d7527a4ac687466b527ba66aeef83fa9e52410ec637fd6f7c082ae5fe82b84fc578536c8077e3817cc3f16e73b4ae3e264500b617cb8e0644211959257567a1db639d67d235673ea4931212af63b83902b233a26263610188969c1f87593ff94e1f6f4cd899b4cab96c26a88f234ed4255a9eee0012287f029c970b2", 0xb9}], 0x2, &(0x7f00000009c0)=[@iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @assoc={0x18}, @iv={0x110, 0x117, 0x2, 0xf8, "9919d56d6a42288c3ccda3a1c0a5107691d15039a94245ba3c77bcd15b677eb914edc6cd497c05b939314fc603be3db19098e6fb8dfad01105ab315913f707cd06ac9a9427a025ef8b29219a291e4ab8492c600f20f61619d952a4726b4b577b00e399bde96aae0446cad5830ee1e338ce4e8e6bcc9eb28e08b90f15f42a7e3573ad5dac801e4d66ee07f261e5b6520a328898e05db91d5d4d85b4e91e218a21544f67c97634778d856c76848300fde39ea90e80ab74491f52785dc38a29d62c73bf1a9846e78f3f95579deb0f5b3278185f12433043d0021f679822d2d188938838af1efdc12f1a5328fdbd75ffab0b9a7cbee1308d2fba"}, @iv={0xa0, 0x117, 0x2, 0x87, "3feed11894d394f4c2b6070d02736f4576eab7c57cdd692a6d0aae51cc790f2a83c5023f16e28cf1664f5c2016302977edfe80eebc8c0d89d523fde9a02b9362cefa76fd051259dde4378288176ff3d06a5a558666a370f7fade06f6298f917a9a0e3c7fc8f43ee2bc94b05330ea108f7be9d10926e291b74fc5082a9004d807925d580c79eb9e"}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x58, 0x117, 0x2, 0x3e, "4a64fee41a5ec86664271a391fcdea8052b9078a7b67d7e855f359cc850dcdb8de6919b641e0880aacc1634460d12f53da35fc3ec034f91f28c87c69807a"}, @assoc={0x18, 0x117, 0x4, 0x1f}], 0x1268}, 0xa10ecb440095809e) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x10, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000001c80)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1004}, 0x1}, 0x652c) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000001cc0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r4, 0x110, 0x4, &(0x7f0000001d00), 0x4) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000001d40)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) mount_setattr(r5, &(0x7f0000001d80)='./file1\x00', 0x0, &(0x7f0000001dc0)={0x82, 0x8, 0x20000, {r4}}, 0x20) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r5, 0x110, 0x4, &(0x7f0000001e00)=0x2, 0x4) mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x2000000, 0xe59e1cd5b13c921b, r0, 0x0) msync(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x5) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000001f40), 0x22c341, 0x65) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000001f80)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) ioctl$UFFDIO_WAKE(r6, 0x8010aa02, &(0x7f0000001fc0)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r6, 0xc0189371, &(0x7f0000002000)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) syz_clone(0x40001000, &(0x7f0000002040)="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", 0xff, &(0x7f0000002140), &(0x7f0000002180), &(0x7f00000021c0)="4ad7fd47bbe85b4414f7973b5cc3fb754da8d99a65aa970cdffd9b4d71f722ae0a5ff58a39546d04c8bf") [ 328.590370][ T7033] R13: 00007f23694ea340 R14: 0000000000000016 R15: 00007f236a21a660 [ 328.598554][ T7033] 20:02:39 executing program 3: r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='uource', &(0x7f0000000080)='%\xb9\xf6\x822\xcc0{\xc7:', 0x0) [ 328.632731][ T7033] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF 20:02:39 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0x6b, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) [ 328.809871][ T7033] loop4: detected capacity change from 0 to 512 20:02:39 executing program 3: r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='xource', &(0x7f0000000080)='%\xb9\xf6\x822\xcc0{\xc7:', 0x0) [ 328.863184][ T27] audit: type=1800 audit(1689364959.589:36): pid=7045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1963 res=0 errno=0 20:02:39 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0x84, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) [ 328.962819][ T7033] EXT4-fs: Invalid want_extra_isize 5 20:02:39 executing program 0: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0x6b, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) [ 329.026497][ T27] audit: type=1804 audit(1689364959.669:37): pid=7045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3378998973/syzkaller.BzNXkN/127/bus" dev="sda1" ino=1963 res=1 errno=0 20:02:39 executing program 3: r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='zource', &(0x7f0000000080)='%\xb9\xf6\x822\xcc0{\xc7:', 0x0) 20:02:40 executing program 3: r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='s\nurce', &(0x7f0000000080)='%\xb9\xf6\x822\xcc0{\xc7:', 0x0) 20:02:40 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0x234, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) 20:02:40 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x3d) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x60242a80, &(0x7f0000000140)="f2e04d93fdef9146f6f59872650f1226bab39ed6fb4f50a3c8ca3af1d55e57d0c13ef115a14f75067830e96422d2a12c4ca4ab13a6eef3d03168a21ade6599c6f4557c8393cd8bc3d75b73b5f6d0c56b2da9340cf41fae4413a980c39e768e4c373790c65c59f044e9f3f7e601e62955706b4a523de2c64a5487e7e11763edf672eb641f4ffdc7310c50f248caed937b1fdab60e6feb8608ea6e24e19df157", 0x0, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) ptrace$ARCH_GET_FS(0x1e, r1, &(0x7f0000000240), 0x1003) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 20:02:40 executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x8050, &(0x7f00000001c0)={[{@sb={'sb', 0x3d, 0x7fffffff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5}}, {@lazytime}, {@norecovery}, {@journal_dev={'journal_dev', 0x3d, 0x4d40}}, {@usrquota}, {@jqfmt_vfsv1}, {@jqfmt_vfsv1}, {@resgid, 0x32}], [{@dont_hash}, {@permit_directio}]}, 0x1, 0x4f5, &(0x7f0000000a40)="$eJzs3d1rW28dAPDvSZu5l/5sf74xB27TTbqhS9rVbcWLvYB4N1Dm/axtWkrTpjTptpbhMvwDBBEVvPLKG8E/QJD9CSIM3L2oKKKbXnihO5I323VJm2Ga7Nd8PnBynnOenHy/DyHPOc85h5wAhtb5iLgdEa/TNL0cEePN9ZnmVF2svTTe9+rl4/nalESa3vtbEklzXeuzzqVpWpufamwSEaP1Db+TvB23vLW9MlcsFjaay/nK6nq+vLV9ZXl1bqmwVFibmZm+Pntj9trsVE/aWcvp5tf+9KPv//zrN3/95Ye/v/+XS9+tpfXpZv3udvRSo+nZOL5r3WhEbBxGsAEYac6zA84DAIDu1I7xPxERX4iIyzEeI/WjUwAAAOAoSW+Nxb+TiBQAAAA4sjIRMRZJJte8F2AsMplcrnG/7KfiZKZYKle+tFjaXFuo1UVMRDazuFwsTDXvFZ6IbFJbnq6Xd5av7lmeiYgPI+KH4yfqy7n5UnFh0Cc/AAAAYEic2jP+/+d4Y/wPAAAAHDETg04AAAAAOHTG/wAAAHD0Gf8DAADAkfaNu3drU9p6/vXCg63NldKDKwuF8kpudXM+N1/aWM8tlUpL9f/sWz3o84ql0vpXYm3zUb5SKFfy5a3t+6ulzbXK/eU3HoENAAAA9NGH5569SCKi+tUT9QkYHqPv8uY/Hl4eQP+NDDoBYGDeaf8PHCnZQScADFxyQH3Hm3d+0/tcAACAwzH52Wcvbu25/n+sWbf/uYFqpg/pAYfI+T8YXvte/0/T9En/UgH6zPV/GF7ZGAkDeRhuB13/v9Opouvr/2n6TgkBAAA9N1afkkwuon4eYCwymVwu4oP6YwGyyeJysTAVER+PiN+NZz9WW56ub5kcOGYAAAAAAAAAAAAAAAAAAAAAAAAAABrSNIkUAAAAONIiMn9Oms//mhy/OLb3/MCx5F/j9XlEPPzpvR8/mqtUNqZr6//+v/WVnzTXXx3EGQwAAAAYQsf2r26N01vjeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADopVcvH8+3pn7G/eudiJjYib9TMxrH6/PjkY2Ik/9IYnTXdklEjPQgfvVpRJxu1/6kllZMNLNoF//EAONnIuJUD+LDMHtW639ut/v9ZeJ8fd7+93e93kP9//b2f7vjt/q/kQ79zwddxjjz/Jf5jvGfRpwZbd//tOInHeJf6DL+t7+1vd2pLv1ZxGTb/U/yRqx8ZXU9X97avrK8OrdUWCqszcxMX5+9MXttdiq/uFwsNF/bxvjB5371er/2n+wQf+Lt9lc/syuni122/z/PH738ZKOYbRf/0oX23//pt+M3axr7vi82y7X6yVa52ijvdvYXvz27X/sXOrT/oO//Upftv/zN7/2hy7cCAH1Q3tpemSsWCxvvTSF9P9LovlA7LOpz0Ey8J23/iBee9C3W56uN39vAm9x1YdA9EwAA0Gs7B/2DzgQAAAAAAAAAAAAAAAAAAACGVz/+TmxvzOpOMU363F4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgE7+GwAA//9p09qu") (fail_nth: 19) 20:02:40 executing program 5: move_pages(0xffffffffffffffff, 0x4, &(0x7f0000000000)=[&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil], 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (async) move_pages(0xffffffffffffffff, 0x4, &(0x7f0000000000)=[&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil], 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100), 0x0, 0x8, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100), 0x0, 0x8, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) openat$mice(0xffffffffffffff9c, &(0x7f0000000380), 0x8000) (async) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000380), 0x8000) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x6) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000003c0)={0x6, 0x6, 0x1, 0x7ff, 0x1f}, 0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0], 0x0, 0x8, &(0x7f00000004c0)=[{}], 0x8, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000700)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000700)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000740)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x1) (async) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x1) ioctl$RTC_VL_CLR(r1, 0x7014) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000780), 0x20100, 0x0) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000780), 0x20100, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f00000007c0)={0x1, 0x13, 0x5, 0x11, 0x3, 0x8, 0x4, 0xa, 0x1}) (async) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f00000007c0)={0x1, 0x13, 0x5, 0x11, 0x3, 0x8, 0x4, 0xa, 0x1}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000008, 0x30, r1, 0x10000000) sendmsg$alg(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000800)="6bfd6a6a54f8bab0a8f0e41bd74f8043956c25ba2cfbf7844539088faefea19a961e0f3680dd306db19e942c85b1aa861ce34b6536621d9daf0a825799de39eaf27087f8219d5fda3e5597c1b5c5d5c2607be964de1fb99de107a077ea9a8b7076ad6f20d4a4d01858cfae25b846f45bcea2acaac159c75d4a7ea9867c63149de9", 0x81}, {&(0x7f00000008c0)="1021a0a570495b4fe4f8008e99c667c7dc5e2897025e3524602657d0a64b74df811d2294b4763c82ee74256e72d2208dfe94512cfec65835044b84cbd3d7527a4ac687466b527ba66aeef83fa9e52410ec637fd6f7c082ae5fe82b84fc578536c8077e3817cc3f16e73b4ae3e264500b617cb8e0644211959257567a1db639d67d235673ea4931212af63b83902b233a26263610188969c1f87593ff94e1f6f4cd899b4cab96c26a88f234ed4255a9eee0012287f029c970b2", 0xb9}], 0x2, &(0x7f00000009c0)=[@iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @assoc={0x18}, @iv={0x110, 0x117, 0x2, 0xf8, "9919d56d6a42288c3ccda3a1c0a5107691d15039a94245ba3c77bcd15b677eb914edc6cd497c05b939314fc603be3db19098e6fb8dfad01105ab315913f707cd06ac9a9427a025ef8b29219a291e4ab8492c600f20f61619d952a4726b4b577b00e399bde96aae0446cad5830ee1e338ce4e8e6bcc9eb28e08b90f15f42a7e3573ad5dac801e4d66ee07f261e5b6520a328898e05db91d5d4d85b4e91e218a21544f67c97634778d856c76848300fde39ea90e80ab74491f52785dc38a29d62c73bf1a9846e78f3f95579deb0f5b3278185f12433043d0021f679822d2d188938838af1efdc12f1a5328fdbd75ffab0b9a7cbee1308d2fba"}, @iv={0xa0, 0x117, 0x2, 0x87, "3feed11894d394f4c2b6070d02736f4576eab7c57cdd692a6d0aae51cc790f2a83c5023f16e28cf1664f5c2016302977edfe80eebc8c0d89d523fde9a02b9362cefa76fd051259dde4378288176ff3d06a5a558666a370f7fade06f6298f917a9a0e3c7fc8f43ee2bc94b05330ea108f7be9d10926e291b74fc5082a9004d807925d580c79eb9e"}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x58, 0x117, 0x2, 0x3e, "4a64fee41a5ec86664271a391fcdea8052b9078a7b67d7e855f359cc850dcdb8de6919b641e0880aacc1634460d12f53da35fc3ec034f91f28c87c69807a"}, @assoc={0x18, 0x117, 0x4, 0x1f}], 0x1268}, 0xa10ecb440095809e) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x10, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000001c80)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1004}, 0x1}, 0x652c) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000001cc0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r4, 0x110, 0x4, &(0x7f0000001d00), 0x4) (async) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r4, 0x110, 0x4, &(0x7f0000001d00), 0x4) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000001d40)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) mount_setattr(r5, &(0x7f0000001d80)='./file1\x00', 0x0, &(0x7f0000001dc0)={0x82, 0x8, 0x20000, {r4}}, 0x20) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r5, 0x110, 0x4, &(0x7f0000001e00)=0x2, 0x4) mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x2000000, 0xe59e1cd5b13c921b, r0, 0x0) msync(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x5) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000001f40), 0x22c341, 0x65) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000001f80)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) ioctl$UFFDIO_WAKE(r6, 0x8010aa02, &(0x7f0000001fc0)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r6, 0xc0189371, &(0x7f0000002000)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r6, 0xc0189371, &(0x7f0000002000)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) syz_clone(0x40001000, &(0x7f0000002040)="6237f33b05386cc32b8c690aadd55a18de4cace49d4f961bb1dff9d56c72841deca4285336a03901f38d274cd84c9e5f29066745747a134566fb619982901ebcd0a72a0277681a38854b3d52e8723363b82a46eed4358d938fe7cf77cc3a4f7043aae0fd143c2b729eb3a8ed5b9919eeef513a80e98ce8b3614e74422b5bb675032e4082cb19f27fa8fa21c8b7ee4c53fa7bddc3526e8b7cd26af978b14b6e8935cd07fb9d6eec8ee6dfef02110c34d02688d600df3be60ef97c160202ecce6e649ae125f061ea6eade4496c67b37c7c03f26792ce497751dacf7ca6dcaabe327b3c5860b965a11eafe8cf4abf6b34c70a03777c07cf466fdbfe277bff4982", 0xff, &(0x7f0000002140), &(0x7f0000002180), &(0x7f00000021c0)="4ad7fd47bbe85b4414f7973b5cc3fb754da8d99a65aa970cdffd9b4d71f722ae0a5ff58a39546d04c8bf") 20:02:40 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000280)={0xa8, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00, 0xee01}}}]}, 0xa8) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = getuid() syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r7, @ANYRESDEC, @ANYRESHEX=r7], 0x1, 0x522, &(0x7f0000000a80)="$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") quotactl_fd$Q_SETINFO(r6, 0xffffffff80000601, r7, &(0x7f0000000000)={0x9c9, 0x10001, 0x0, 0x2}) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) 20:02:40 executing program 3: r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='s%urce', &(0x7f0000000080)='%\xb9\xf6\x822\xcc0{\xc7:', 0x0) 20:02:40 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0x300, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) [ 329.895732][ T7067] FAULT_INJECTION: forcing a failure. [ 329.895732][ T7067] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 329.956214][ T7067] CPU: 1 PID: 7067 Comm: syz-executor.4 Not tainted 6.5.0-rc1-next-20230714-syzkaller #0 [ 329.966400][ T7067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 329.976772][ T7067] Call Trace: [ 329.980102][ T7067] [ 329.983460][ T7067] dump_stack_lvl+0x125/0x1b0 [ 329.988571][ T7067] should_fail_ex+0x496/0x5b0 [ 329.993790][ T7067] __should_fail_alloc_page+0xe7/0x130 [ 330.000214][ T7067] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 330.006649][ T7067] __alloc_pages+0x14e/0x4a0 [ 330.011630][ T7073] 9pnet_fd: Insufficient options for proto=fd [ 330.011717][ T7067] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 330.025408][ T7067] ? find_held_lock+0x2d/0x110 [ 330.030269][ T7067] ? reacquire_held_locks+0x4b0/0x4b0 [ 330.035859][ T7067] __folio_alloc+0x16/0x40 [ 330.040538][ T7067] vma_alloc_folio+0x156/0x890 [ 330.045499][ T7067] ? policy_nodemask+0x1d0/0x1d0 [ 330.051057][ T7067] ? pmd_install+0x170/0x170 [ 330.055740][ T7067] ? find_held_lock+0x59/0x110 [ 330.060704][ T7067] __handle_mm_fault+0xfb4/0x40b0 [ 330.065980][ T7067] ? vm_iomap_memory+0x170/0x170 [ 330.071191][ T7067] ? mas_walk+0x422/0x7c0 [ 330.075631][ T7067] ? lock_mm_and_find_vma+0x780/0x780 [ 330.081109][ T7067] handle_mm_fault+0x47a/0xa00 [ 330.086079][ T7067] do_user_addr_fault+0x2e7/0xfe0 [ 330.091227][ T7067] ? rcu_is_watching+0x12/0xb0 [ 330.096170][ T7067] exc_page_fault+0x5c/0xd0 [ 330.101026][ T7067] asm_exc_page_fault+0x26/0x30 [ 330.106037][ T7067] RIP: 0033:0x7f2369428720 [ 330.110697][ T7067] Code: 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 330.130850][ T7067] RSP: 002b:00007f236a21a520 EFLAGS: 00010202 [ 330.137510][ T7067] RAX: 0000000000001000 RBX: 00007f236a21a5c0 RCX: 0000000000000003 [ 330.146483][ T7067] RDX: 0000000000007fe3 RSI: 0000000000000be4 RDI: 00007f236a21a660 [ 330.154547][ T7067] RBP: 0000000000000004 R08: 00007f235fbff000 R09: 0000000000000002 [ 330.162925][ T7067] R10: 0000000020000a42 R11: 00000000000004f3 R12: 0000000000000801 [ 330.171390][ T7067] R13: 00007f23694ea340 R14: 0000000000000016 R15: 00007f236a21a660 [ 330.179799][ T7067] 20:02:41 executing program 3: r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='so\nrce', &(0x7f0000000080)='%\xb9\xf6\x822\xcc0{\xc7:', 0x0) 20:02:41 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0x500, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) [ 330.281647][ T7067] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF 20:02:41 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) (async) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000280)={0xa8, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00, 0xee01}}}]}, 0xa8) (async) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r6, 0xae9a) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) r7 = getuid() syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r7, @ANYRESDEC, @ANYRESHEX=r7], 0x1, 0x522, &(0x7f0000000a80)="$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") (async) quotactl_fd$Q_SETINFO(r6, 0xffffffff80000601, r7, &(0x7f0000000000)={0x9c9, 0x10001, 0x0, 0x2}) (async, rerun: 64) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) (rerun: 64) [ 330.452873][ T7067] loop4: detected capacity change from 0 to 512 20:02:41 executing program 3: r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='so#rce', &(0x7f0000000080)='%\xb9\xf6\x822\xcc0{\xc7:', 0x0) 20:02:41 executing program 5: move_pages(0xffffffffffffffff, 0x4, &(0x7f0000000000)=[&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil], 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100), 0x0, 0x8, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) (async, rerun: 64) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000380), 0x8000) (rerun: 64) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x6) (async) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000003c0)={0x6, 0x6, 0x1, 0x7ff, 0x1f}, 0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0], 0x0, 0x8, &(0x7f00000004c0)=[{}], 0x8, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000700)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000740)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) (async) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x1) (async) ioctl$RTC_VL_CLR(r1, 0x7014) (async, rerun: 64) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000780), 0x20100, 0x0) (rerun: 64) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f00000007c0)={0x1, 0x13, 0x5, 0x11, 0x3, 0x8, 0x4, 0xa, 0x1}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000008, 0x30, r1, 0x10000000) sendmsg$alg(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000800)="6bfd6a6a54f8bab0a8f0e41bd74f8043956c25ba2cfbf7844539088faefea19a961e0f3680dd306db19e942c85b1aa861ce34b6536621d9daf0a825799de39eaf27087f8219d5fda3e5597c1b5c5d5c2607be964de1fb99de107a077ea9a8b7076ad6f20d4a4d01858cfae25b846f45bcea2acaac159c75d4a7ea9867c63149de9", 0x81}, {&(0x7f00000008c0)="1021a0a570495b4fe4f8008e99c667c7dc5e2897025e3524602657d0a64b74df811d2294b4763c82ee74256e72d2208dfe94512cfec65835044b84cbd3d7527a4ac687466b527ba66aeef83fa9e52410ec637fd6f7c082ae5fe82b84fc578536c8077e3817cc3f16e73b4ae3e264500b617cb8e0644211959257567a1db639d67d235673ea4931212af63b83902b233a26263610188969c1f87593ff94e1f6f4cd899b4cab96c26a88f234ed4255a9eee0012287f029c970b2", 0xb9}], 0x2, &(0x7f00000009c0)=[@iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @assoc={0x18}, @iv={0x110, 0x117, 0x2, 0xf8, "9919d56d6a42288c3ccda3a1c0a5107691d15039a94245ba3c77bcd15b677eb914edc6cd497c05b939314fc603be3db19098e6fb8dfad01105ab315913f707cd06ac9a9427a025ef8b29219a291e4ab8492c600f20f61619d952a4726b4b577b00e399bde96aae0446cad5830ee1e338ce4e8e6bcc9eb28e08b90f15f42a7e3573ad5dac801e4d66ee07f261e5b6520a328898e05db91d5d4d85b4e91e218a21544f67c97634778d856c76848300fde39ea90e80ab74491f52785dc38a29d62c73bf1a9846e78f3f95579deb0f5b3278185f12433043d0021f679822d2d188938838af1efdc12f1a5328fdbd75ffab0b9a7cbee1308d2fba"}, @iv={0xa0, 0x117, 0x2, 0x87, "3feed11894d394f4c2b6070d02736f4576eab7c57cdd692a6d0aae51cc790f2a83c5023f16e28cf1664f5c2016302977edfe80eebc8c0d89d523fde9a02b9362cefa76fd051259dde4378288176ff3d06a5a558666a370f7fade06f6298f917a9a0e3c7fc8f43ee2bc94b05330ea108f7be9d10926e291b74fc5082a9004d807925d580c79eb9e"}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x58, 0x117, 0x2, 0x3e, "4a64fee41a5ec86664271a391fcdea8052b9078a7b67d7e855f359cc850dcdb8de6919b641e0880aacc1634460d12f53da35fc3ec034f91f28c87c69807a"}, @assoc={0x18, 0x117, 0x4, 0x1f}], 0x1268}, 0xa10ecb440095809e) (async) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x10, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000001c80)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1004}, 0x1}, 0x652c) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000001cc0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r4, 0x110, 0x4, &(0x7f0000001d00), 0x4) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000001d40)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) (rerun: 64) mount_setattr(r5, &(0x7f0000001d80)='./file1\x00', 0x0, &(0x7f0000001dc0)={0x82, 0x8, 0x20000, {r4}}, 0x20) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r5, 0x110, 0x4, &(0x7f0000001e00)=0x2, 0x4) (async) mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x2000000, 0xe59e1cd5b13c921b, r0, 0x0) (async, rerun: 32) msync(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x5) (rerun: 32) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000001f40), 0x22c341, 0x65) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000001f80)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) (rerun: 64) ioctl$UFFDIO_WAKE(r6, 0x8010aa02, &(0x7f0000001fc0)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r6, 0xc0189371, &(0x7f0000002000)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) (async) syz_clone(0x40001000, &(0x7f0000002040)="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", 0xff, &(0x7f0000002140), &(0x7f0000002180), &(0x7f00000021c0)="4ad7fd47bbe85b4414f7973b5cc3fb754da8d99a65aa970cdffd9b4d71f722ae0a5ff58a39546d04c8bf") [ 330.524452][ T7067] EXT4-fs: Invalid want_extra_isize 5 20:02:41 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0x600, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) 20:02:41 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x3d) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x60242a80, &(0x7f0000000140)="f2e04d93fdef9146f6f59872650f1226bab39ed6fb4f50a3c8ca3af1d55e57d0c13ef115a14f75067830e96422d2a12c4ca4ab13a6eef3d03168a21ade6599c6f4557c8393cd8bc3d75b73b5f6d0c56b2da9340cf41fae4413a980c39e768e4c373790c65c59f044e9f3f7e601e62955706b4a523de2c64a5487e7e11763edf672eb641f4ffdc7310c50f248caed937b1fdab60e6feb8608ea6e24e19df157", 0x0, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) ptrace$ARCH_GET_FS(0x1e, r1, &(0x7f0000000240), 0x1003) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 20:02:41 executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x8050, &(0x7f00000001c0)={[{@sb={'sb', 0x3d, 0x7fffffff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5}}, {@lazytime}, {@norecovery}, {@journal_dev={'journal_dev', 0x3d, 0x4d40}}, {@usrquota}, {@jqfmt_vfsv1}, {@jqfmt_vfsv1}, {@resgid, 0x32}], [{@dont_hash}, {@permit_directio}]}, 0x1, 0x4f5, &(0x7f0000000a40)="$eJzs3d1rW28dAPDvSZu5l/5sf74xB27TTbqhS9rVbcWLvYB4N1Dm/axtWkrTpjTptpbhMvwDBBEVvPLKG8E/QJD9CSIM3L2oKKKbXnihO5I323VJm2Ga7Nd8PnBynnOenHy/DyHPOc85h5wAhtb5iLgdEa/TNL0cEePN9ZnmVF2svTTe9+rl4/nalESa3vtbEklzXeuzzqVpWpufamwSEaP1Db+TvB23vLW9MlcsFjaay/nK6nq+vLV9ZXl1bqmwVFibmZm+Pntj9trsVE/aWcvp5tf+9KPv//zrN3/95Ye/v/+XS9+tpfXpZv3udvRSo+nZOL5r3WhEbBxGsAEYac6zA84DAIDu1I7xPxERX4iIyzEeI/WjUwAAAOAoSW+Nxb+TiBQAAAA4sjIRMRZJJte8F2AsMplcrnG/7KfiZKZYKle+tFjaXFuo1UVMRDazuFwsTDXvFZ6IbFJbnq6Xd5av7lmeiYgPI+KH4yfqy7n5UnFh0Cc/AAAAYEic2jP+/+d4Y/wPAAAAHDETg04AAAAAOHTG/wAAAHD0Gf8DAADAkfaNu3drU9p6/vXCg63NldKDKwuF8kpudXM+N1/aWM8tlUpL9f/sWz3o84ql0vpXYm3zUb5SKFfy5a3t+6ulzbXK/eU3HoENAAAA9NGH5569SCKi+tUT9QkYHqPv8uY/Hl4eQP+NDDoBYGDeaf8PHCnZQScADFxyQH3Hm3d+0/tcAACAwzH52Wcvbu25/n+sWbf/uYFqpg/pAYfI+T8YXvte/0/T9En/UgH6zPV/GF7ZGAkDeRhuB13/v9Opouvr/2n6TgkBAAA9N1afkkwuon4eYCwymVwu4oP6YwGyyeJysTAVER+PiN+NZz9WW56ub5kcOGYAAAAAAAAAAAAAAAAAAAAAAAAAABrSNIkUAAAAONIiMn9Oms//mhy/OLb3/MCx5F/j9XlEPPzpvR8/mqtUNqZr6//+v/WVnzTXXx3EGQwAAAAYQsf2r26N01vjeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADopVcvH8+3pn7G/eudiJjYib9TMxrH6/PjkY2Ik/9IYnTXdklEjPQgfvVpRJxu1/6kllZMNLNoF//EAONnIuJUD+LDMHtW639ut/v9ZeJ8fd7+93e93kP9//b2f7vjt/q/kQ79zwddxjjz/Jf5jvGfRpwZbd//tOInHeJf6DL+t7+1vd2pLv1ZxGTb/U/yRqx8ZXU9X97avrK8OrdUWCqszcxMX5+9MXttdiq/uFwsNF/bxvjB5371er/2n+wQf+Lt9lc/syuni122/z/PH738ZKOYbRf/0oX23//pt+M3axr7vi82y7X6yVa52ijvdvYXvz27X/sXOrT/oO//Upftv/zN7/2hy7cCAH1Q3tpemSsWCxvvTSF9P9LovlA7LOpz0Ey8J23/iBee9C3W56uN39vAm9x1YdA9EwAA0Gs7B/2DzgQAAAAAAAAAAAAAAAAAAACGVz/+TmxvzOpOMU363F4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgE7+GwAA//9p09qu") (fail_nth: 20) 20:02:41 executing program 3: r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='so%rce', &(0x7f0000000080)='%\xb9\xf6\x822\xcc0{\xc7:', 0x0) 20:02:41 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0x700, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) 20:02:41 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x3d) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x60242a80, &(0x7f0000000140)="f2e04d93fdef9146f6f59872650f1226bab39ed6fb4f50a3c8ca3af1d55e57d0c13ef115a14f75067830e96422d2a12c4ca4ab13a6eef3d03168a21ade6599c6f4557c8393cd8bc3d75b73b5f6d0c56b2da9340cf41fae4413a980c39e768e4c373790c65c59f044e9f3f7e601e62955706b4a523de2c64a5487e7e11763edf672eb641f4ffdc7310c50f248caed937b1fdab60e6feb8608ea6e24e19df157", 0x0, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) ptrace$ARCH_GET_FS(0x1e, r1, &(0x7f0000000240), 0x1003) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 20:02:41 executing program 3: r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='so*rce', &(0x7f0000000080)='%\xb9\xf6\x822\xcc0{\xc7:', 0x0) [ 330.923117][ T7112] FAULT_INJECTION: forcing a failure. [ 330.923117][ T7112] name fail_page_alloc, interval 1, probability 0, space 0, times 0 20:02:41 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240), 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) (async) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000280)={0xa8, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00, 0xee01}}}]}, 0xa8) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (async) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = getuid() syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r7, @ANYRESDEC, @ANYRESHEX=r7], 0x1, 0x522, &(0x7f0000000a80)="$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") quotactl_fd$Q_SETINFO(r6, 0xffffffff80000601, r7, &(0x7f0000000000)={0x9c9, 0x10001, 0x0, 0x2}) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) [ 331.014873][ T7112] CPU: 0 PID: 7112 Comm: syz-executor.4 Not tainted 6.5.0-rc1-next-20230714-syzkaller #0 [ 331.026523][ T7112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 331.036639][ T7112] Call Trace: [ 331.039973][ T7112] [ 331.042965][ T7112] dump_stack_lvl+0x125/0x1b0 [ 331.047718][ T7112] should_fail_ex+0x496/0x5b0 [ 331.052589][ T7112] __should_fail_alloc_page+0xe7/0x130 [ 331.058221][ T7112] prepare_alloc_pages.constprop.0+0x16f/0x550 20:02:41 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0x810, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) 20:02:41 executing program 3: r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='so+rce', &(0x7f0000000080)='%\xb9\xf6\x822\xcc0{\xc7:', 0x0) [ 331.064656][ T7112] __alloc_pages+0x14e/0x4a0 [ 331.069429][ T7112] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 331.076384][ T7112] ? lock_sync+0x190/0x190 [ 331.080905][ T7112] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 331.086998][ T7112] __folio_alloc+0x16/0x40 [ 331.091505][ T7112] vma_alloc_folio+0x156/0x890 [ 331.096359][ T7112] ? policy_nodemask+0x1d0/0x1d0 [ 331.101468][ T7112] ? find_held_lock+0x59/0x110 [ 331.106321][ T7112] __handle_mm_fault+0xfb4/0x40b0 [ 331.111454][ T7112] ? vm_iomap_memory+0x170/0x170 [ 331.116488][ T7112] ? mas_walk+0x422/0x7c0 [ 331.120957][ T7112] ? lock_mm_and_find_vma+0x780/0x780 [ 331.126513][ T7112] ? do_user_addr_fault+0x602/0xfe0 [ 331.131884][ T7112] handle_mm_fault+0x47a/0xa00 [ 331.136752][ T7112] do_user_addr_fault+0x2e7/0xfe0 [ 331.141861][ T7112] ? rcu_is_watching+0x12/0xb0 [ 331.146925][ T7112] exc_page_fault+0x5c/0xd0 [ 331.151526][ T7112] asm_exc_page_fault+0x26/0x30 [ 331.156455][ T7112] RIP: 0033:0x7f2369428673 [ 331.160949][ T7112] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 331.180806][ T7112] RSP: 002b:00007f236a21a520 EFLAGS: 00010206 [ 331.186946][ T7112] RAX: 0000000000002000 RBX: 00007f236a21a5c0 RCX: 00007f235fbff000 [ 331.194977][ T7112] RDX: 00007f236a21a760 RSI: 0000000000000037 RDI: 00007f236a21a660 [ 331.203275][ T7112] RBP: 00000000000000cc R08: 0000000000000006 R09: 0000000000000023 20:02:41 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0x900, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) 20:02:42 executing program 3: r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='so-rce', &(0x7f0000000080)='%\xb9\xf6\x822\xcc0{\xc7:', 0x0) [ 331.211392][ T7112] R10: 0000000000000024 R11: 00007f236a21a5c0 R12: 0000000000000001 [ 331.219508][ T7112] R13: 00007f23694ea340 R14: 00000000000000ff R15: 00007f236a21a660 [ 331.227950][ T7112] 20:02:42 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x3d) (async, rerun: 32) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r1 = syz_clone(0x60242a80, &(0x7f0000000140)="f2e04d93fdef9146f6f59872650f1226bab39ed6fb4f50a3c8ca3af1d55e57d0c13ef115a14f75067830e96422d2a12c4ca4ab13a6eef3d03168a21ade6599c6f4557c8393cd8bc3d75b73b5f6d0c56b2da9340cf41fae4413a980c39e768e4c373790c65c59f044e9f3f7e601e62955706b4a523de2c64a5487e7e11763edf672eb641f4ffdc7310c50f248caed937b1fdab60e6feb8608ea6e24e19df157", 0x0, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) ptrace$ARCH_GET_FS(0x1e, r1, &(0x7f0000000240), 0x1003) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 20:02:42 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0xe00, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) [ 331.480290][ T7112] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 331.557426][ T7112] loop4: detected capacity change from 0 to 512 [ 331.626029][ T7112] EXT4-fs: Invalid want_extra_isize 5 20:02:42 executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x8050, &(0x7f00000001c0)={[{@sb={'sb', 0x3d, 0x7fffffff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5}}, {@lazytime}, {@norecovery}, {@journal_dev={'journal_dev', 0x3d, 0x4d40}}, {@usrquota}, {@jqfmt_vfsv1}, {@jqfmt_vfsv1}, {@resgid, 0x32}], [{@dont_hash}, {@permit_directio}]}, 0x1, 0x4f5, &(0x7f0000000a40)="$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") (fail_nth: 21) 20:02:42 executing program 3: r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='so.rce', &(0x7f0000000080)='%\xb9\xf6\x822\xcc0{\xc7:', 0x0) 20:02:42 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0xf00, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) 20:02:42 executing program 3: r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='so0rce', &(0x7f0000000080)='%\xb9\xf6\x822\xcc0{\xc7:', 0x0) 20:02:42 executing program 1: syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./bus\x00', 0x8, &(0x7f00000000c0)={[{@rescan_uuid_tree}, {@autodefrag}, {@space_cache_v1}, {@max_inline={'max_inline', 0x3d, [0x74]}}, {@noacl}, {@discard}, {@noenospc_debug}, {@barrier}, {@thread_pool={'thread_pool', 0x3d, 0x9}}]}, 0x1, 0x55a3, &(0x7f0000005680)="$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") 20:02:42 executing program 0: syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x103382) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000480)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000000c0)={0x1f, {{0x2, 0x0, @multicast2}}}, 0x88) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000980), 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0xfffffffffffffd1f) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r5, 0x200, 0x1) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000240), 0x600501, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x321240, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:02:42 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0x1008, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) 20:02:42 executing program 5: ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, &(0x7f0000000080)) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000000), 0x8) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) write(r0, &(0x7f0000000240)="3cf9c0dc90f4c592db0e5bf97049651a7d440b78ed4ccb7c812917d7ffb946f1a848190352f701e7e974ea2f20a2d9a387f21af751fd6f3b69c43ed5536bb872b980cc6e6f9463043849954a17b08b72384a1e009027e679a3b684c728f1d47fb4fe7489d429e3703db14751b19f4e5cfba93b02a9707ccb0db0c513993f61598d1eccd87bfc60387017e91c8efeeae493d8fef23b556876913ffaf0", 0x9c) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0xf) syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbbba1aeac1567838a2a3ba15337a0500000109022400011b00000009040000022a3e740009008b33020000102ce5dc2ce713dc3429457bd9e76fbdffed1e731a45cc24ddba430e7774d4508de599815a8387dc1b64765ee7d488522478af60b56a9665c1c91b44876700038b8bf521b59408e4976c99fe2ca76e956a705f991fe1d0e3ccf3bd4effff080e2a29b49d70a1238fb3bca5958b1d22c9b56b914ee8cdb7a1aa86801fbda8ea34a6ea0ade44bcd8b63769c5d4fffdbb453b26541fe263b9daeb4a22c1f23f4f2aeeef115a2d587d8918868b78340c014b37f3f2bc95a304321485d4d15d3a2a1e134df4a47405880aa37a31e1b20800000000000000fe2ece118c867b62255160e832ffaef249821d1b2e5a06c45eb28a04b1e7c01196034c"], 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x4) [ 331.973187][ T7156] FAULT_INJECTION: forcing a failure. [ 331.973187][ T7156] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 332.054287][ T7156] CPU: 1 PID: 7156 Comm: syz-executor.4 Not tainted 6.5.0-rc1-next-20230714-syzkaller #0 [ 332.064388][ T7156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 332.074770][ T7156] Call Trace: [ 332.078116][ T7156] [ 332.081233][ T7156] dump_stack_lvl+0x125/0x1b0 [ 332.086078][ T7156] should_fail_ex+0x496/0x5b0 [ 332.091024][ T7156] __should_fail_alloc_page+0xe7/0x130 [ 332.096555][ T7156] prepare_alloc_pages.constprop.0+0x16f/0x550 20:02:42 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0x1020, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) [ 332.102951][ T7156] __alloc_pages+0x14e/0x4a0 [ 332.107763][ T7156] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 332.114793][ T7156] ? lock_sync+0x190/0x190 [ 332.119308][ T7156] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 332.125465][ T7156] __folio_alloc+0x16/0x40 [ 332.130068][ T7156] vma_alloc_folio+0x156/0x890 [ 332.134927][ T7156] ? policy_nodemask+0x1d0/0x1d0 [ 332.139946][ T7156] ? find_held_lock+0x59/0x110 [ 332.144811][ T7156] __handle_mm_fault+0xfb4/0x40b0 [ 332.149903][ T7156] ? vm_iomap_memory+0x170/0x170 [ 332.154902][ T7156] ? mas_walk+0x422/0x7c0 [ 332.159398][ T7156] ? lock_mm_and_find_vma+0x780/0x780 [ 332.164916][ T7156] ? do_user_addr_fault+0x602/0xfe0 [ 332.170164][ T7156] handle_mm_fault+0x47a/0xa00 [ 332.175074][ T7156] do_user_addr_fault+0x2e7/0xfe0 [ 332.180142][ T7156] ? rcu_is_watching+0x12/0xb0 [ 332.184959][ T7156] exc_page_fault+0x5c/0xd0 [ 332.190994][ T7156] asm_exc_page_fault+0x26/0x30 [ 332.195889][ T7156] RIP: 0033:0x7f2369428673 [ 332.200332][ T7156] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 332.219997][ T7156] RSP: 002b:00007f236a21a520 EFLAGS: 00010206 [ 332.226117][ T7156] RAX: 0000000000002000 RBX: 00007f236a21a5c0 RCX: 00007f235fbff000 [ 332.234214][ T7156] RDX: 00007f236a21a760 RSI: 0000000000000037 RDI: 00007f236a21a660 [ 332.242732][ T7156] RBP: 00000000000000cc R08: 0000000000000006 R09: 0000000000000023 [ 332.251159][ T7156] R10: 0000000000000024 R11: 00007f236a21a5c0 R12: 0000000000000001 [ 332.259873][ T7156] R13: 00007f23694ea340 R14: 00000000000000ff R15: 00007f236a21a660 [ 332.267911][ T7156] 20:02:43 executing program 3: r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='soXrce', &(0x7f0000000080)='%\xb9\xf6\x822\xcc0{\xc7:', 0x0) 20:02:43 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0x1181, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) 20:02:43 executing program 3: r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='socrce', &(0x7f0000000080)='%\xb9\xf6\x822\xcc0{\xc7:', 0x0) [ 332.461694][ T7156] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 332.576652][ T7156] loop4: detected capacity change from 0 to 512 [ 332.626098][ T7156] EXT4-fs: Invalid want_extra_isize 5 20:02:43 executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x8050, &(0x7f00000001c0)={[{@sb={'sb', 0x3d, 0x7fffffff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5}}, {@lazytime}, {@norecovery}, {@journal_dev={'journal_dev', 0x3d, 0x4d40}}, {@usrquota}, {@jqfmt_vfsv1}, {@jqfmt_vfsv1}, {@resgid, 0x32}], [{@dont_hash}, {@permit_directio}]}, 0x1, 0x4f5, &(0x7f0000000a40)="$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") (fail_nth: 22) 20:02:43 executing program 3: r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='sodrce', &(0x7f0000000080)='%\xb9\xf6\x822\xcc0{\xc7:', 0x0) 20:02:43 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0x1259, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) 20:02:43 executing program 5: ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, &(0x7f0000000080)) (async, rerun: 64) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000000), 0x8) (async, rerun: 64) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) write(r0, &(0x7f0000000240)="3cf9c0dc90f4c592db0e5bf97049651a7d440b78ed4ccb7c812917d7ffb946f1a848190352f701e7e974ea2f20a2d9a387f21af751fd6f3b69c43ed5536bb872b980cc6e6f9463043849954a17b08b72384a1e009027e679a3b684c728f1d47fb4fe7489d429e3703db14751b19f4e5cfba93b02a9707ccb0db0c513993f61598d1eccd87bfc60387017e91c8efeeae493d8fef23b556876913ffaf0", 0x9c) (async) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0xf) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x4) [ 333.028682][ T7186] FAULT_INJECTION: forcing a failure. [ 333.028682][ T7186] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 333.080201][ T7186] CPU: 0 PID: 7186 Comm: syz-executor.4 Not tainted 6.5.0-rc1-next-20230714-syzkaller #0 [ 333.090303][ T7186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 333.100809][ T7186] Call Trace: [ 333.104344][ T7186] [ 333.107579][ T7186] dump_stack_lvl+0x125/0x1b0 [ 333.112434][ T7186] should_fail_ex+0x496/0x5b0 [ 333.117470][ T7186] __should_fail_alloc_page+0xe7/0x130 [ 333.123121][ T7186] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 333.129547][ T7186] __alloc_pages+0x14e/0x4a0 [ 333.134405][ T7186] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 333.141433][ T7186] ? lock_sync+0x190/0x190 [ 333.145939][ T7186] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 333.152198][ T7186] __folio_alloc+0x16/0x40 [ 333.157417][ T7186] vma_alloc_folio+0x156/0x890 [ 333.162991][ T7186] ? policy_nodemask+0x1d0/0x1d0 [ 333.168099][ T7186] ? find_held_lock+0x59/0x110 [ 333.172939][ T7186] __handle_mm_fault+0xfb4/0x40b0 [ 333.178065][ T7186] ? vm_iomap_memory+0x170/0x170 [ 333.183159][ T7186] ? mas_walk+0x422/0x7c0 [ 333.187948][ T7186] ? lock_mm_and_find_vma+0x780/0x780 [ 333.193507][ T7186] ? do_user_addr_fault+0x602/0xfe0 [ 333.198883][ T7186] handle_mm_fault+0x47a/0xa00 [ 333.203747][ T7186] do_user_addr_fault+0x2e7/0xfe0 [ 333.208838][ T7186] ? rcu_is_watching+0x12/0xb0 [ 333.213778][ T7186] exc_page_fault+0x5c/0xd0 [ 333.218361][ T7186] asm_exc_page_fault+0x26/0x30 [ 333.223714][ T7186] RIP: 0033:0x7f2369428673 [ 333.228533][ T7186] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 333.248315][ T7186] RSP: 002b:00007f236a21a520 EFLAGS: 00010202 [ 333.254603][ T7186] RAX: 0000000000004000 RBX: 00007f236a21a5c0 RCX: 00007f235fbff000 [ 333.262742][ T7186] RDX: 00007f236a21a760 RSI: 000000000000001b RDI: 00007f236a21a660 [ 333.270945][ T7186] RBP: 00000000000000e7 R08: 0000000000000009 R09: 00000000000001a0 [ 333.279066][ T7186] R10: 00000000000001c6 R11: 00007f236a21a5c0 R12: 0000000000000001 [ 333.287112][ T7186] R13: 00007f23694ea340 R14: 000000000000000b R15: 00007f236a21a660 [ 333.295434][ T7186] [ 333.303826][ T7186] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 333.325096][ T7186] loop4: detected capacity change from 0 to 512 [ 333.343101][ T7186] EXT4-fs: Invalid want_extra_isize 5 20:02:44 executing program 1: syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./bus\x00', 0x8, &(0x7f00000000c0)={[{@rescan_uuid_tree}, {@autodefrag}, {@space_cache_v1}, {@max_inline={'max_inline', 0x3d, [0x74]}}, {@noacl}, {@discard}, {@noenospc_debug}, {@barrier}, {@thread_pool={'thread_pool', 0x3d, 0x9}}]}, 0x1, 0x55a3, &(0x7f0000005680)="$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") syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./bus\x00', 0x8, &(0x7f00000000c0)={[{@rescan_uuid_tree}, {@autodefrag}, {@space_cache_v1}, {@max_inline={'max_inline', 0x3d, [0x74]}}, {@noacl}, {@discard}, {@noenospc_debug}, {@barrier}, {@thread_pool={'thread_pool', 0x3d, 0x9}}]}, 0x1, 0x55a3, &(0x7f0000005680)="$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") (async) 20:02:44 executing program 0: syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x103382) (async, rerun: 64) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) (rerun: 64) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000480)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000000c0)={0x1f, {{0x2, 0x0, @multicast2}}}, 0x88) (async) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async, rerun: 64) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) (async) getpid() (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 64) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000980), 0x0, 0x0) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0xfffffffffffffd1f) (async) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) (async) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r5, 0x200, 0x1) (async) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000240), 0x600501, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x321240, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) (async) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r9) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) (rerun: 32) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) (async, rerun: 64) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) (async, rerun: 64) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:02:44 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0x1400, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) 20:02:44 executing program 3: r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='sohrce', &(0x7f0000000080)='%\xb9\xf6\x822\xcc0{\xc7:', 0x0) 20:02:44 executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x8050, &(0x7f00000001c0)={[{@sb={'sb', 0x3d, 0x7fffffff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5}}, {@lazytime}, {@norecovery}, {@journal_dev={'journal_dev', 0x3d, 0x4d40}}, {@usrquota}, {@jqfmt_vfsv1}, {@jqfmt_vfsv1}, {@resgid, 0x32}], [{@dont_hash}, {@permit_directio}]}, 0x1, 0x4f5, &(0x7f0000000a40)="$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") (fail_nth: 23) [ 333.649942][ T7192] FAULT_INJECTION: forcing a failure. [ 333.649942][ T7192] name fail_page_alloc, interval 1, probability 0, space 0, times 0 20:02:44 executing program 3: r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='soirce', &(0x7f0000000080)='%\xb9\xf6\x822\xcc0{\xc7:', 0x0) 20:02:44 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0x1f00, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) 20:02:44 executing program 5: ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, &(0x7f0000000080)) (async) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000000), 0x8) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) write(r0, &(0x7f0000000240)="3cf9c0dc90f4c592db0e5bf97049651a7d440b78ed4ccb7c812917d7ffb946f1a848190352f701e7e974ea2f20a2d9a387f21af751fd6f3b69c43ed5536bb872b980cc6e6f9463043849954a17b08b72384a1e009027e679a3b684c728f1d47fb4fe7489d429e3703db14751b19f4e5cfba93b02a9707ccb0db0c513993f61598d1eccd87bfc60387017e91c8efeeae493d8fef23b556876913ffaf0", 0x9c) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0xf) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x4) [ 333.781420][ T7192] CPU: 0 PID: 7192 Comm: syz-executor.4 Not tainted 6.5.0-rc1-next-20230714-syzkaller #0 [ 333.791424][ T7192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 333.801971][ T7192] Call Trace: [ 333.805401][ T7192] [ 333.808390][ T7192] dump_stack_lvl+0x125/0x1b0 [ 333.813322][ T7192] should_fail_ex+0x496/0x5b0 [ 333.819126][ T7192] __should_fail_alloc_page+0xe7/0x130 [ 333.824877][ T7192] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 333.831122][ T7192] __alloc_pages+0x14e/0x4a0 [ 333.835791][ T7192] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 333.842670][ T7192] ? __lock_acquire+0x182f/0x5de0 [ 333.847774][ T7192] ? find_held_lock+0x2d/0x110 [ 333.852712][ T7192] __folio_alloc+0x16/0x40 [ 333.857236][ T7192] vma_alloc_folio+0x156/0x890 [ 333.862082][ T7192] ? policy_nodemask+0x1d0/0x1d0 [ 333.867102][ T7192] ? lock_sync+0x190/0x190 [ 333.871631][ T7192] do_wp_page+0x1241/0x3340 [ 333.876240][ T7192] ? lock_sync+0x190/0x190 [ 333.880738][ T7192] ? finish_mkwrite_fault+0x300/0x300 [ 333.886199][ T7192] ? spin_bug+0x1d0/0x1d0 [ 333.890639][ T7192] __handle_mm_fault+0x1d26/0x40b0 [ 333.895855][ T7192] ? vm_iomap_memory+0x170/0x170 [ 333.900884][ T7192] ? mas_walk+0x422/0x7c0 [ 333.905401][ T7192] ? lock_mm_and_find_vma+0x780/0x780 [ 333.910942][ T7192] ? do_user_addr_fault+0x602/0xfe0 [ 333.916307][ T7192] handle_mm_fault+0x47a/0xa00 [ 333.921253][ T7192] do_user_addr_fault+0x2e7/0xfe0 [ 333.926469][ T7192] ? rcu_is_watching+0x12/0xb0 [ 333.931501][ T7192] exc_page_fault+0x5c/0xd0 [ 333.936093][ T7192] asm_exc_page_fault+0x26/0x30 [ 333.941011][ T7192] RIP: 0033:0x7f2369428673 [ 333.945567][ T7192] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 333.965373][ T7192] RSP: 002b:00007f236a21a520 EFLAGS: 00010202 [ 333.971502][ T7192] RAX: 0000000000005005 RBX: 00007f236a21a5c0 RCX: 00007f235fbff000 [ 333.980000][ T7192] RDX: 00007f236a21a760 RSI: 0000000000000000 RDI: 00007f236a21a660 [ 333.988146][ T7192] RBP: 00000000000000cf R08: 0000000000000008 R09: 00000000000000a9 [ 333.996246][ T7192] R10: 00000000000000c4 R11: 00007f236a21a5c0 R12: 0000000000000001 [ 334.004393][ T7192] R13: 00007f23694ea340 R14: 0000000000000010 R15: 00007f236a21a660 [ 334.012539][ T7192] 20:02:44 executing program 3: r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='solrce', &(0x7f0000000080)='%\xb9\xf6\x822\xcc0{\xc7:', 0x0) 20:02:44 executing program 0: syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x103382) (async) syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x103382) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000480)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000000c0)={0x1f, {{0x2, 0x0, @multicast2}}}, 0x88) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) (async) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) openat$loop_ctrl(0xffffff9c, &(0x7f0000000980), 0x0, 0x0) (async) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000980), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0xfffffffffffffd1f) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) (async) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r5, 0x200, 0x1) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000240), 0x600501, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x321240, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x321240, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) (async) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:02:44 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0x2000, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) 20:02:44 executing program 3: r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='soorce', &(0x7f0000000080)='%\xb9\xf6\x822\xcc0{\xc7:', 0x0) [ 334.508219][ T7192] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 334.563386][ T7192] loop4: detected capacity change from 0 to 512 [ 334.588678][ T7192] EXT4-fs: Invalid want_extra_isize 5 20:02:45 executing program 1: syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./bus\x00', 0x8, &(0x7f00000000c0)={[{@rescan_uuid_tree}, {@autodefrag}, {@space_cache_v1}, {@max_inline={'max_inline', 0x3d, [0x74]}}, {@noacl}, {@discard}, {@noenospc_debug}, {@barrier}, {@thread_pool={'thread_pool', 0x3d, 0x9}}]}, 0x1, 0x55a3, &(0x7f0000005680)="$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") 20:02:45 executing program 3: r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='soprce', &(0x7f0000000080)='%\xb9\xf6\x822\xcc0{\xc7:', 0x0) 20:02:45 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0x2010, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) 20:02:45 executing program 0: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0x1181, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) 20:02:45 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) ioctl$sock_bt_hci(r1, 0x400448c9, &(0x7f0000000180)="1b3a9226566ea57b4ef73000fba9c0370e92f4754aca3cbfca2dc65cf2d7fa26a50c8ae6b02d74d720b6af2fff96f38377e6bc5487d5a03fe4e3c69813467f7307b46558517dff1e705cb3bada631813a00c1a7e2bf2864eb6ee2e0c4edf93face766032851138375ff53943c5031e25e42d0a79c61d3f3ab77d8abc3c8f7b") pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r3}, 0x8) bind$bt_hci(r5, &(0x7f0000000280), 0x6) getsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f00000000c0)=0xffc0, &(0x7f0000000100)=0x2) bind$bt_hci(r4, &(0x7f0000000200)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) write$bt_hci(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="742a4e98affce9679ed993e27d01330c07010000bc0004"], 0xb) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000300), 0x400000, 0x0) r7 = getuid() syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r7, @ANYRESDEC, @ANYRESHEX=r7], 0x1, 0x522, &(0x7f0000000a80)="$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") sendmsg$nl_route(r6, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@can_newroute={0x4c, 0x18, 0x800, 0x70bd27, 0x25dfdbfe, {0x1d, 0x1, 0x4}, [@CGW_CS_XOR={0x8, 0x5, {0x5, 0xffffffffffffffff, 0x0, 0x20}}, @CGW_MOD_SET={0x15, 0x4, {{{0x1, 0x0, 0x1, 0x1}, 0x4, 0x1, 0x0, 0x0, "f23b19ec48e1429a"}, 0x5}}, @CGW_MOD_UID={0x8, 0xe, 0xee00}, @CGW_SRC_IF={0x8, 0x9, r2}, @CGW_MOD_UID={0x8, 0xe, r7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x2000c091) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="b9282b5e0600e1a9ef7f2985e394d21314d111a408000018d2995e"], 0x6) 20:02:45 executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x8050, &(0x7f00000001c0)={[{@sb={'sb', 0x3d, 0x7fffffff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5}}, {@lazytime}, {@norecovery}, {@journal_dev={'journal_dev', 0x3d, 0x4d40}}, {@usrquota}, {@jqfmt_vfsv1}, {@jqfmt_vfsv1}, {@resgid, 0x32}], [{@dont_hash}, {@permit_directio}]}, 0x1, 0x4f5, &(0x7f0000000a40)="$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") (fail_nth: 24) 20:02:45 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0x3402, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) 20:02:45 executing program 3: r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='sosrce', &(0x7f0000000080)='%\xb9\xf6\x822\xcc0{\xc7:', 0x0) 20:02:45 executing program 0: syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x908414, &(0x7f0000000300)=ANY=[@ANYBLOB="6e6f6173645f7370726561642c6e6f64617461636f772c7573656261636b7570726f6f742c6d657461646174615f726174696f3d307830433030303030303030303039e637312c7265665f7665726966792c636f6d70726573732d666f7263652c757365725f737562766f6c5f726d5f616c6c6f7765642c656e6f7370635f64656275672c6e6f646973636172642c666c7573686f6e636f6d6d69742c00"], 0x4, 0x50ff, &(0x7f00000042c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file1\x00', 0x0, 0x20) openat(r0, &(0x7f0000000400)='./file1\x00', 0x0, 0x0) [ 335.065606][ T7229] FAULT_INJECTION: forcing a failure. [ 335.065606][ T7229] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 335.141457][ T7229] CPU: 0 PID: 7229 Comm: syz-executor.4 Not tainted 6.5.0-rc1-next-20230714-syzkaller #0 [ 335.152582][ T7229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 335.162867][ T7229] Call Trace: [ 335.166187][ T7229] [ 335.169166][ T7229] dump_stack_lvl+0x125/0x1b0 [ 335.174646][ T7229] should_fail_ex+0x496/0x5b0 [ 335.179543][ T7229] __should_fail_alloc_page+0xe7/0x130 [ 335.185260][ T7229] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 335.191618][ T7229] __alloc_pages+0x14e/0x4a0 [ 335.196387][ T7229] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 335.203351][ T7229] ? __lock_acquire+0x182f/0x5de0 [ 335.208461][ T7229] ? find_held_lock+0x2d/0x110 [ 335.213678][ T7229] __folio_alloc+0x16/0x40 [ 335.218353][ T7229] vma_alloc_folio+0x156/0x890 [ 335.223301][ T7229] ? policy_nodemask+0x1d0/0x1d0 [ 335.228329][ T7229] ? lock_sync+0x190/0x190 [ 335.232875][ T7229] do_wp_page+0x1241/0x3340 [ 335.237469][ T7229] ? lock_sync+0x190/0x190 [ 335.242032][ T7229] ? finish_mkwrite_fault+0x300/0x300 [ 335.247568][ T7229] ? spin_bug+0x1d0/0x1d0 [ 335.252130][ T7229] __handle_mm_fault+0x1d26/0x40b0 [ 335.257388][ T7229] ? vm_iomap_memory+0x170/0x170 [ 335.262449][ T7229] ? mas_walk+0x422/0x7c0 [ 335.267023][ T7229] ? lock_mm_and_find_vma+0x780/0x780 [ 335.272445][ T7229] ? do_user_addr_fault+0x602/0xfe0 [ 335.277703][ T7229] handle_mm_fault+0x47a/0xa00 [ 335.282651][ T7229] do_user_addr_fault+0x2e7/0xfe0 [ 335.287800][ T7229] ? rcu_is_watching+0x12/0xb0 [ 335.292615][ T7229] exc_page_fault+0x5c/0xd0 [ 335.297187][ T7229] asm_exc_page_fault+0x26/0x30 [ 335.302091][ T7229] RIP: 0033:0x7f2369428720 [ 335.306568][ T7229] Code: 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 335.326248][ T7229] RSP: 002b:00007f236a21a520 EFLAGS: 00010202 [ 335.332459][ T7229] RAX: 0000000000006005 RBX: 00007f236a21a5c0 RCX: 0000000000000101 [ 335.340489][ T7229] RDX: 00000000000003ff RSI: 0000000000001000 RDI: 00007f236a21a660 [ 335.348609][ T7229] RBP: 0000000000000102 R08: 00007f235fbff000 R09: 0000000000000010 [ 335.356788][ T7229] R10: 0000000020000a42 R11: 00000000000004f3 R12: 0000000000000c01 [ 335.365839][ T7229] R13: 00007f23694ea340 R14: 0000000000000017 R15: 00007f236a21a660 [ 335.373969][ T7229] 20:02:46 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) (async) ioctl$sock_bt_hci(r1, 0x400448c9, &(0x7f0000000180)="1b3a9226566ea57b4ef73000fba9c0370e92f4754aca3cbfca2dc65cf2d7fa26a50c8ae6b02d74d720b6af2fff96f38377e6bc5487d5a03fe4e3c69813467f7307b46558517dff1e705cb3bada631813a00c1a7e2bf2864eb6ee2e0c4edf93face766032851138375ff53943c5031e25e42d0a79c61d3f3ab77d8abc3c8f7b") pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r3}, 0x8) bind$bt_hci(r5, &(0x7f0000000280), 0x6) getsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f00000000c0)=0xffc0, &(0x7f0000000100)=0x2) (async) bind$bt_hci(r4, &(0x7f0000000200)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) write$bt_hci(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="742a4e98affce9679ed993e27d01330c07010000bc0004"], 0xb) (async) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000300), 0x400000, 0x0) (async) r7 = getuid() syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r7, @ANYRESDEC, @ANYRESHEX=r7], 0x1, 0x522, &(0x7f0000000a80)="$eJzs1b1u01AYBuCvaSiBqTNiOBILU1XYmAhCqVRhCQmUASYiNSwxQooXJ1MvgQvgwhi4CJSpW1BlF2jFWP+oeZ4ln/LaPuc9g/3p8ZfF2dfi849v32M03ovBOB4MLvbiMAZx5TwAgLvkYruNX9tK13sBANrh+w8Au+f9h49vXmXZ5F1Ko4jNeTktp9VvlZ+cZpPjdOngn7s2ZTnd/5M/S5Xr+b14WOfP/5sfxNMnVX6ZvX6b3cjvx1nj7QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYLcdpTSMiJRSOvz776Ysp/tVfpSu3Mir6eQ0mxzXF1zPh/Fo2FoNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4BYUq/Vilufz5R0bIn5Gy4uO6iNtuem4XrYvJ9/k8LKJJ7+IiL4U7NHQ4UsJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVLFaL2Z5Pl8WXe8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiLYrVezPJ8vmxw6LojAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0I3fAQAA///PCC46") sendmsg$nl_route(r6, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@can_newroute={0x4c, 0x18, 0x800, 0x70bd27, 0x25dfdbfe, {0x1d, 0x1, 0x4}, [@CGW_CS_XOR={0x8, 0x5, {0x5, 0xffffffffffffffff, 0x0, 0x20}}, @CGW_MOD_SET={0x15, 0x4, {{{0x1, 0x0, 0x1, 0x1}, 0x4, 0x1, 0x0, 0x0, "f23b19ec48e1429a"}, 0x5}}, @CGW_MOD_UID={0x8, 0xe, 0xee00}, @CGW_SRC_IF={0x8, 0x9, r2}, @CGW_MOD_UID={0x8, 0xe, r7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x2000c091) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="b9282b5e0600e1a9ef7f2985e394d21314d111a408000018d2995e"], 0x6) [ 335.441442][ T7229] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF 20:02:46 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0x3f00, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) [ 335.490110][ T7229] loop4: detected capacity change from 0 to 512 [ 335.518025][ T7229] EXT4-fs: Invalid want_extra_isize 5 20:02:46 executing program 3: r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='sotrce', &(0x7f0000000080)='%\xb9\xf6\x822\xcc0{\xc7:', 0x0) 20:02:47 executing program 1: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) fcntl$notify(r0, 0x402, 0x0) 20:02:47 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0x4000, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) 20:02:47 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) ioctl$sock_bt_hci(r1, 0x400448c9, &(0x7f0000000180)="1b3a9226566ea57b4ef73000fba9c0370e92f4754aca3cbfca2dc65cf2d7fa26a50c8ae6b02d74d720b6af2fff96f38377e6bc5487d5a03fe4e3c69813467f7307b46558517dff1e705cb3bada631813a00c1a7e2bf2864eb6ee2e0c4edf93face766032851138375ff53943c5031e25e42d0a79c61d3f3ab77d8abc3c8f7b") pipe2(&(0x7f0000000080), 0x80000) (async) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r3}, 0x8) bind$bt_hci(r5, &(0x7f0000000280), 0x6) getsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f00000000c0)=0xffc0, &(0x7f0000000100)=0x2) bind$bt_hci(r4, &(0x7f0000000200)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) write$bt_hci(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="742a4e98affce9679ed993e27d01330c07010000bc0004"], 0xb) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000300), 0x400000, 0x0) (async) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000300), 0x400000, 0x0) r7 = getuid() syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r7, @ANYRESDEC, @ANYRESHEX=r7], 0x1, 0x522, &(0x7f0000000a80)="$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") (async) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r7, @ANYRESDEC, @ANYRESHEX=r7], 0x1, 0x522, &(0x7f0000000a80)="$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") sendmsg$nl_route(r6, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@can_newroute={0x4c, 0x18, 0x800, 0x70bd27, 0x25dfdbfe, {0x1d, 0x1, 0x4}, [@CGW_CS_XOR={0x8, 0x5, {0x5, 0xffffffffffffffff, 0x0, 0x20}}, @CGW_MOD_SET={0x15, 0x4, {{{0x1, 0x0, 0x1, 0x1}, 0x4, 0x1, 0x0, 0x0, "f23b19ec48e1429a"}, 0x5}}, @CGW_MOD_UID={0x8, 0xe, 0xee00}, @CGW_SRC_IF={0x8, 0x9, r2}, @CGW_MOD_UID={0x8, 0xe, r7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x2000c091) (async) sendmsg$nl_route(r6, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@can_newroute={0x4c, 0x18, 0x800, 0x70bd27, 0x25dfdbfe, {0x1d, 0x1, 0x4}, [@CGW_CS_XOR={0x8, 0x5, {0x5, 0xffffffffffffffff, 0x0, 0x20}}, @CGW_MOD_SET={0x15, 0x4, {{{0x1, 0x0, 0x1, 0x1}, 0x4, 0x1, 0x0, 0x0, "f23b19ec48e1429a"}, 0x5}}, @CGW_MOD_UID={0x8, 0xe, 0xee00}, @CGW_SRC_IF={0x8, 0x9, r2}, @CGW_MOD_UID={0x8, 0xe, r7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x2000c091) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="b9282b5e0600e1a9ef7f2985e394d21314d111a408000018d2995e"], 0x6) 20:02:47 executing program 3: r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='soxrce', &(0x7f0000000080)='%\xb9\xf6\x822\xcc0{\xc7:', 0x0) 20:02:47 executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x8050, &(0x7f00000001c0)={[{@sb={'sb', 0x3d, 0x7fffffff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5}}, {@lazytime}, {@norecovery}, {@journal_dev={'journal_dev', 0x3d, 0x4d40}}, {@usrquota}, {@jqfmt_vfsv1}, {@jqfmt_vfsv1}, {@resgid, 0x32}], [{@dont_hash}, {@permit_directio}]}, 0x1, 0x4f5, &(0x7f0000000a40)="$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") (fail_nth: 25) 20:02:47 executing program 0: syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x908414, &(0x7f0000000300)=ANY=[@ANYBLOB="6e6f6173645f7370726561642c6e6f64617461636f772c7573656261636b7570726f6f742c6d657461646174615f726174696f3d307830433030303030303030303039e637312c7265665f7665726966792c636f6d70726573732d666f7263652c757365725f737562766f6c5f726d5f616c6c6f7765642c656e6f7370635f64656275672c6e6f646973636172642c666c7573686f6e636f6d6d69742c00"], 0x4, 0x50ff, &(0x7f00000042c0)="$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") (async) syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x908414, &(0x7f0000000300)=ANY=[@ANYBLOB="6e6f6173645f7370726561642c6e6f64617461636f772c7573656261636b7570726f6f742c6d657461646174615f726174696f3d307830433030303030303030303039e637312c7265665f7665726966792c636f6d70726573732d666f7263652c757365725f737562766f6c5f726d5f616c6c6f7765642c656e6f7370635f64656275672c6e6f646973636172642c666c7573686f6e636f6d6d69742c00"], 0x4, 0x50ff, &(0x7f00000042c0)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTsT3573JENYvrOR3E/wmHm5XUpgfKxQ6WkmPbbFHXpgfLxQ65pIemydDeHBhZX9S+H8stJPClbV54UhSOB0L+fnQLRxLCifimfb52ny6aeH7WMgvsJiPV1Cs6V4SkfS42q/HQuGGPc52Dw4AAHBPieE5z7Jjvc2QRtn52qAdVg/aYWTQDvVBO4wmO6Q79tseZnsLcXv7zMalPf//yHD5P74Vq7JFv+v/Q7z+P3+uYff6/9lYaCSF+VhopXcMaMVjZGH343iMRivvcWV9twAAAAB3tfi9QH2F5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP+zda4xc1X0A8DP7Gu/D64WkCqFRsklqHDfxem2Th1qqrClVI9I064YGVVEaO/aabLxgxzYlRiEyNhGNEJQ2SMmHIoyiqOYD1ApEJAWEixRHqDwiqqIAAoXWEAWRUpKINEEK1ey9Z/bOuTsPP9Z46e8neefM/M/jnjt3xnPu41wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP8fDn/lir9tFX/wtxc8+czFE5/ft/7iF6+64MxHQ5icfb2ShSsD19488fPbz79j3z1rb7nr6IXv7cvL5fEwWPvTlT+5JtZ6dGkId1dC6EkDq4ayQG/+fCjW97ahEM4Ic4F6iamBrETacPh+fwgHwlygXtX3+kMYKgQueuyB+6+vJW7qD2F5CKGatvF0NWujPw2c05cFBtLA9p4s8KvXMvXAd7uyAJyw+GGob/SHJhszjMxfrsn213vSFuz1lXavOyZGmuf72foFXqiCvvSFyRN620rVsSBKH4/DPm2L4NNWWs83etuKP6TyXyivzYWqoWvL1NZNl8/sjq90hbGx7mY1LdD7/MTLX9p8LOlFsx3GBRg5KdvhDY8sv7175ccevmvV8ucPvm//Cye6mD8qrNJieqFVQ77NLZr3MZrwfbIIPn6lX0mjfnSFELZ+7vc+3ipeGv+PtB7/x805PnY15I61vjqcjc3jK0Mx8dJwNjYHAACARWMx7DXdPnbfh1rVVxr/j3Z2/D8e8s8H81lvD4cwMZvYvyyEs2ZfzwK3xeY+uyyEd86mJhsD65PA4RDeOptYWa8qKbEklhhNAj8ZzgMTSeBIDEwmgW/FwI1J4JoYOJQENsfA4SRwfgyE6cZ+/P5w3o+OA/0xsDFbiYfiWQi/GI6tJevqqXpVAAAAJ0k+OuxtfFo41+FEM8Th5aH+dhniGdhNM1STGtIRbH1Y1bSGnnY1dLWrod7vva27X6q50q7m0mkYlcYMN//ybz4RWiiN/8dbj/+r8yxIpXT8P4QNs39j7q48MlOPb5xsyAAAAACcgMH/ffabreKl8f9EZ+f/x30i3YXM4aG4G2LbshDGGwNZtX9YDmRHvQfzAAAAACwG9ePx9WPh0/ljdop2Op4u5588xvzxwP/EvPn7Dt+7sdXylsb/k52d/z8QQtg0VJ8ZL1uII3EpvrYshCWFwA/iUtYCs0Zj4Mcfbgzk/T8SV8B1sar8xIR6VdfFEhtjYDwJHGhW4of1Emc1BvI3q974/no/pvMShQAAAACccnF3QDwuH8//f9dv1l7Rqlxp/L/x2M7/nx0Hl07vnxkMYXVPCN3phQEPDWQTA8bAUCVP3DeQ1dWdVnX1QAjn1TqWVvVsPv9/TzrH4GP9WVUxcNa7Dr58Ti3xzf4QVhcDj3/q1vfXEruTQL3xv+wP4R213qaNf2dJ1nhv2vjXl4Tw9kKgXtVnl4RQa6wvreqBan4fg7Sqf66G8KZCoF7VB6oh7AkALFLxv9ItxRd37bly26aZmamdC5iI+/D7w9bpmamxzdtntlSbLNOWZJkbpjG6utynTu9881Q+RdEn79ww1Em6fp3geLGtfD9+6cTB/Hn8LdQ728+1vQ1P16Vdfs+7y02Ewi+pZl3uWuAuDxQrmXsTS/XH/H1hMCy5fNfUzrEvbtq9e+ea7G+n2ddmf+NhpmxdrUnX1cB8y9bB5tF0tqzE8a6rFcVKVu++dMfqXXuuXDV96aZLpi6ZumzNB9aOnzu+bvyD566u9Wo8+9umqyvmqzrp6mu3dtivk9jVs3sKlZyKbw0JCYnFltg+uKLl/8ml8f+O1uP/+K0Tv/nz+RmaHf8fiYf5s9fnDvNvjIEDnR7/H2l2NL9+YsBoEtgbA3sd5gcAAGAxKt9UMg7y497MuFf6pyu/83yrmkrj/72dXf9/kub/r09df2Gzaf5XxhLjzeb/T6f5r8//v7fZ/P/pNP/1+f8PvA7z/19eDySr5Bfm/wcAAN4ITt38/22n909vEFDK0HZ6//QGAaUMbafx7/QGAcc8///T//lX/x1aKI3/b+xs/G/ifgAAADh9fPnPrvidVvHS+P9AZ+P/5AqwUzD/X2h2/v9os8Bks4kBzf8HAADAItVs/r+Rawc+06pcafx/qLPxfzztoqshd6z11eFsTruQzmn30nD9kgEAAABYHLrC2Fj5Svz5NcyMuv7423winwq0Vbro2T85emzn/x/ubPzfcF3GDY8sv7175ccefvWuVcufP/i+/S/MHf8HAAAAFk6n+yUAAAAAAAAAAAAAAIDX37P/sW9dq3jp+v+wYfb1Ztf/x/v+xesL3tyQO9bafv6//PlFH71jz+yUhQ8Nh/DuYmDbvm1nhPze/CuKgfs/vfIttcS+tMS9z5z/XC3xmTTwkVVnvlJLnJcENsZJEt+aBuJdFV9ZmgTi9Ir/ngbi+jiUBvrywFeXZv2opOvqp0PZuqqk6+rJoRCWFQL1dXX3UNZGJe3gTUmg3sEvpIHYwT/PA13pUt0xmC1VDAzForcMZksFAMBpK/4K7A1bp2emxuNP+Ph4dk/jY9QwZdnV5WorHTb/VD412Sfv3DDUSbo7/S06d6/x3lCtdWFN6edqMUtltpcnp5Y2q+7NTbrcbra3riblUse66vqa96g/69HY5u0zW3rbdnxd+yxre9pmWVMa7BSzdM2u0g5q6WBZOuhRh+umg0WOz7vC2Fh3kusPYnAkNGi3RXR6vX5xnr9mW0Exz2VH9/+qVX2l8f9IZ+P/arFfr+Q3A9gb76z3d8tM8w8AAAAL66vrf/2N+O8T1z74eKu8pfH/aGfj/7gHKz8UnO3tOBzv/79/WQizt9YfyQK3xeY+uyyEd86mJmOJ7Ib6F8YS41ngtrjDZGUssXGysaolMXAoCfxkOA8cTgJHYiDfS3Ew5Lty/n44hPfPpjY0ltgRS4wkgY/HwGgSGIuB8SSwNAYmksCLS/PAZBL4txgI043r6s6l+boCAAA4Fvk4q7fxaUjHeYd62mWotMsw0C5DV7sM1XYZmvUiPv92zNCbnLxSKWTqTWvtT2opZYg3wz/m5SplCD9szJkWLDUdzz+on29Qacxwz4d6qqGF0vh/vLPx/0DjY9b6kTj+n7v/Xxb4QVy8r8VTx0dj4McfbgzkOwaOxMHudfWqJvMS+aD9ulhiIgZGk8COGJhIAhs35IEDb2kM5CPteuP7641P5yUKAQAAADjl4g6CuJsmjv9v2fWVwVblSuP/ic7G/7G9wWJj18Rajy4N4e7K3NLUA6uGskDcjzEUL49/21AIZ9R3cFTmSkwNZCX6kobD9/uzK9T70qq+159dfBCfX/TYA/dfX0vc1B/C8sLel3obT1ezNvrTwDl9WWAgDWzvyQJxz0898N2uLAAnrL5XMG5Q+akudSPzl2uy/b1R7gmadq+0D3SefPNdc7VQSjtc832qdcf2trXcf8tJU/p4HPZpW4yfthGftsLmd03+C+W1uVA1dG2Z2rrp8pnd8ZXilawlC/Q+F69S7SR9ErbDvce/tO1V0wUYT74+xucvN/92WInV3fDI8tu7V37s4btWLX/+4Pv2v9DxYjQRLxR+4Kp/HfpRYfUutGrIt7lF930y6ftkMf43MOptCyFsePHr17WKl8b/k52N/3uSx1m/jitz17IQ3lNYuQ/F1f/Hy7LvwUIg+5Z8UzmQHXL/r+Gm35wAAABwstV3d9T3F0znj9kJ4ek4uZx/8hjzx/0VE/Pm73S5B/7608tbxUvj/42tx/9LksVcmOP/wfF/cPx/Xqf7rugl6Qt7T2hXdKk6FoTj//M63T9tjv/Py/F/x//n4/h/G47/z+t0f9tKv5J2+NEVQnj+j+57slW8NP7f0dn43/x/80/aV5//b2Oz+f92NJv/b6/5/wAAgAXVZKK5dJxXmr2vlCGdva+Uoe0EgW2nGDT/3zHP//fc2U//JrRQGv/v7Wz8HzeHwWLri2X+v9ENTaq6MQZ2mBgQAACA01GzHQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8vu75h//Z0ir+4G8vePKZiyc+v2/9xS9edcGZj4YwPft6JQtXBq69eeLnt59/x7571t5y19EL31vNy/Xmj7/bkDvW+upwCAcKrwzFxEvDtSdzgYs+eseenlrioeEQ3l0MbNu37Yxa4lvDIawoBu7/9Mq31BL70hL3PnP+c7XEZ9LAR1ad+UotcV4eqKSL+49Ls8WtpIt7/dIQlhUC9cX9/NLGqupt/Gke6Erb+KehrI0YGIpFvzGUtREDM7HE9JIQVveE0J1W9WA1q6o7repfqllV3WlVX66GcF4IoSet6pm+rKqetOeP9mVVxcBZ7zr48jm1xIG+EFYXA49/6tb31xJfSAL1xv+iL4R31DaZtPFv92aN96aN39QbwttDCH1piV/2ZCX60hLP9oTwpkKg3vjnekLYE3hDiF8+Dd9ou/ZcuW3TzMzUzgVM9OVt9Yet0zNTY5u3z2ypJsvUTKWQfu3q4+/7Uy9/aXPt8ZN3bhjqJN2Tl+udXeS1vQ1P153uSx+Xa6BYydz7Uao/5u8Lg2HJ5bumdo59cdPu3TvXZH87zb42+9udR7N1tWaxrKsVxUpW7750x+pde65cNX3ppkumLpm6bM0H1o6fO75u/IPnrq71ajz7ezK6euup7+rZPYVKTsUXgISExGJLdDV8u42f7l/kpR/6cwvaG6qzX9ClYUUxS2W2lyej0+uPs8fH8zulbY/WlAYOpSxr22dZVxpMzGXpz7LM/q4rDQ6LNXXNrtL4vCuMjXU3Ww8jjU+Lq/dnJ7B6n8hXXadpAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/9iBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgWAAAAABAmL91GD0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJcCAAD//6wqI3o=") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file1\x00', 0x0, 0x20) openat(r0, &(0x7f0000000400)='./file1\x00', 0x0, 0x0) 20:02:47 executing program 3: r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='sozrce', &(0x7f0000000080)='%\xb9\xf6\x822\xcc0{\xc7:', 0x0) 20:02:47 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0x5912, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) [ 336.735676][ T7258] FAULT_INJECTION: forcing a failure. [ 336.735676][ T7258] name fail_page_alloc, interval 1, probability 0, space 0, times 0 20:02:47 executing program 1: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) fcntl$notify(r0, 0x402, 0x0) [ 336.811459][ T7258] CPU: 1 PID: 7258 Comm: syz-executor.4 Not tainted 6.5.0-rc1-next-20230714-syzkaller #0 [ 336.821474][ T7258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 336.831592][ T7258] Call Trace: [ 336.834937][ T7258] [ 336.837926][ T7258] dump_stack_lvl+0x125/0x1b0 [ 336.842686][ T7258] should_fail_ex+0x496/0x5b0 [ 336.847459][ T7258] __should_fail_alloc_page+0xe7/0x130 [ 336.853001][ T7258] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 336.859250][ T7258] __alloc_pages+0x14e/0x4a0 [ 336.863946][ T7258] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 336.871270][ T7258] ? __lock_acquire+0x182f/0x5de0 [ 336.876391][ T7258] ? find_held_lock+0x2d/0x110 [ 336.881351][ T7258] __folio_alloc+0x16/0x40 [ 336.885869][ T7258] vma_alloc_folio+0x156/0x890 [ 336.890813][ T7258] ? policy_nodemask+0x1d0/0x1d0 [ 336.895854][ T7258] ? lock_sync+0x190/0x190 [ 336.900368][ T7258] do_wp_page+0x1241/0x3340 [ 336.904983][ T7258] ? lock_sync+0x190/0x190 [ 336.909571][ T7258] ? finish_mkwrite_fault+0x300/0x300 [ 336.915287][ T7258] ? spin_bug+0x1d0/0x1d0 [ 336.919776][ T7258] __handle_mm_fault+0x1d26/0x40b0 [ 336.925173][ T7258] ? vm_iomap_memory+0x170/0x170 [ 336.930276][ T7258] ? mas_walk+0x422/0x7c0 [ 336.934679][ T7258] ? lock_mm_and_find_vma+0x780/0x780 [ 336.940540][ T7258] ? do_user_addr_fault+0x602/0xfe0 [ 336.945792][ T7258] handle_mm_fault+0x47a/0xa00 [ 336.950615][ T7258] do_user_addr_fault+0x2e7/0xfe0 [ 336.955846][ T7258] ? rcu_is_watching+0x12/0xb0 [ 336.960691][ T7258] exc_page_fault+0x5c/0xd0 [ 336.965249][ T7258] asm_exc_page_fault+0x26/0x30 [ 336.970143][ T7258] RIP: 0033:0x7f2369428720 [ 336.974587][ T7258] Code: 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 336.994340][ T7258] RSP: 002b:00007f236a21a520 EFLAGS: 00010202 [ 337.000452][ T7258] RAX: 0000000000007005 RBX: 00007f236a21a5c0 RCX: 0000000000000101 20:02:47 executing program 3: r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='sour\te', &(0x7f0000000080)='%\xb9\xf6\x822\xcc0{\xc7:', 0x0) 20:02:47 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0x608a, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) [ 337.009357][ T7258] RDX: 00000000000003ff RSI: 0000000000001000 RDI: 00007f236a21a660 [ 337.017555][ T7258] RBP: 0000000000000102 R08: 00007f235fbff000 R09: 0000000000000010 [ 337.025571][ T7258] R10: 0000000020000a42 R11: 00000000000004f3 R12: 0000000000000c01 [ 337.033578][ T7258] R13: 00007f23694ea340 R14: 0000000000000017 R15: 00007f236a21a660 [ 337.041696][ T7258] 20:02:47 executing program 1: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) fcntl$notify(r0, 0x402, 0x0) (async) fcntl$notify(r0, 0x402, 0x0) [ 337.113876][ T7258] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 337.162667][ T7258] loop4: detected capacity change from 0 to 512 [ 337.189797][ T7258] EXT4-fs: Invalid want_extra_isize 5 20:02:48 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0x6b00, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) 20:02:48 executing program 1: syz_mount_image$vfat(&(0x7f0000000940), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00e789da34e04a1ffbc2f05ceffb4ee655ae1071124b2c2fb684f5c7ac9da18f49c7880f67e77dc70b90bbb45efd97899a16f2ff4fa2a8f06ac2c5352509e3c51d672eb3ec0dd3b1c96e98016382e166e2ca4c353d3d4d316daf522556a16cab12d75a852bc680da7e010400009c101c78130d6ef7480feb2e60a1e30a59b7745235b33bc18c4ed0351cd2c5197b02f8a78993b5b416ba1c5721bcd87be5a338392f831637ee8c35bb2183794afff0a9eed63b1226b18c4b455ab200"/197, @ANYBLOB="6c5793ac20a1c5201529f037388e7dab1b7eb9ba20e4bd8983", @ANYRES8, @ANYBLOB="373092aa29e2127671f87f0abdebae5693495a917b2906e31fd948855a5bd5ead164be9992f5776cc8fe4867703dd33350f75c29c48d53222ed8563b1284cd07b32fd5c265416455e3ad2250eba709e696700aa4cd2b473e68998f3409a465259140135e71d5352fb04595fcac2f43be5bfa35f30daf1b94aadfeb7fc3e5924d23cd0fbb1d9b9abdc970d5792646bfad2936129530f5", @ANYRES8=0x0], 0x1, 0x11d4, &(0x7f00000012c0)="$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") mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6c2cf0"]) chdir(&(0x7f0000000140)='./file0\x00') chdir(&(0x7f0000000000)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) 20:02:48 executing program 3: r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='sour\ne', &(0x7f0000000080)='%\xb9\xf6\x822\xcc0{\xc7:', 0x0) 20:02:48 executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x8050, &(0x7f00000001c0)={[{@sb={'sb', 0x3d, 0x7fffffff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5}}, {@lazytime}, {@norecovery}, {@journal_dev={'journal_dev', 0x3d, 0x4d40}}, {@usrquota}, {@jqfmt_vfsv1}, {@jqfmt_vfsv1}, {@resgid, 0x32}], [{@dont_hash}, {@permit_directio}]}, 0x1, 0x4f5, &(0x7f0000000a40)="$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") (fail_nth: 26) [ 337.496226][ T7283] FAULT_INJECTION: forcing a failure. [ 337.496226][ T7283] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 337.530931][ T7283] CPU: 0 PID: 7283 Comm: syz-executor.4 Not tainted 6.5.0-rc1-next-20230714-syzkaller #0 [ 337.541211][ T7283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 337.551412][ T7283] Call Trace: [ 337.554931][ T7283] [ 337.557909][ T7283] dump_stack_lvl+0x125/0x1b0 [ 337.562666][ T7283] should_fail_ex+0x496/0x5b0 [ 337.567690][ T7283] __should_fail_alloc_page+0xe7/0x130 [ 337.573753][ T7283] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 337.580279][ T7283] __alloc_pages+0x14e/0x4a0 [ 337.585228][ T7283] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 337.592188][ T7283] ? lock_sync+0x190/0x190 [ 337.596715][ T7283] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 337.604188][ T7283] __folio_alloc+0x16/0x40 [ 337.608724][ T7283] vma_alloc_folio+0x156/0x890 [ 337.613599][ T7283] ? policy_nodemask+0x1d0/0x1d0 [ 337.618721][ T7283] ? find_held_lock+0x59/0x110 [ 337.623570][ T7283] __handle_mm_fault+0xfb4/0x40b0 [ 337.628890][ T7283] ? vm_iomap_memory+0x170/0x170 [ 337.634000][ T7283] ? mas_walk+0x422/0x7c0 [ 337.638518][ T7283] ? lock_mm_and_find_vma+0x780/0x780 [ 337.643971][ T7283] ? do_user_addr_fault+0x602/0xfe0 [ 337.649691][ T7283] handle_mm_fault+0x47a/0xa00 [ 337.654744][ T7283] do_user_addr_fault+0x2e7/0xfe0 [ 337.659954][ T7283] ? rcu_is_watching+0x12/0xb0 [ 337.664980][ T7283] exc_page_fault+0x5c/0xd0 [ 337.669584][ T7283] asm_exc_page_fault+0x26/0x30 [ 337.674589][ T7283] RIP: 0033:0x7f2369428673 [ 337.679408][ T7283] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 337.699105][ T7283] RSP: 002b:00007f236a21a520 EFLAGS: 00010206 [ 337.705318][ T7283] RAX: 0000000000008000 RBX: 00007f236a21a5c0 RCX: 00007f235fbff000 [ 337.713529][ T7283] RDX: 00007f236a21a760 RSI: 0000000000000001 RDI: 00007f236a21a660 [ 337.721600][ T7283] RBP: 00000000000000dd R08: 000000000000000b R09: 000000000000079e [ 337.729686][ T7283] R10: 00000000000007c6 R11: 00007f236a21a5c0 R12: 0000000000000001 [ 337.737796][ T7283] R13: 00007f23694ea340 R14: 0000000000000050 R15: 00007f236a21a660 [ 337.745946][ T7283] 20:02:48 executing program 0: syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x908414, &(0x7f0000000300)=ANY=[@ANYBLOB="6e6f6173645f7370726561642c6e6f64617461636f772c7573656261636b7570726f6f742c6d657461646174615f726174696f3d307830433030303030303030303039e637312c7265665f7665726966792c636f6d70726573732d666f7263652c757365725f737562766f6c5f726d5f616c6c6f7765642c656e6f7370635f64656275672c6e6f646973636172642c666c7573686f6e636f6d6d69742c00"], 0x4, 0x50ff, &(0x7f00000042c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file1\x00', 0x0, 0x20) openat(r0, &(0x7f0000000400)='./file1\x00', 0x0, 0x0) 20:02:48 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001800)={'wlan1\x00'}) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="8b0404000000000050001280080001007369740044000280050004009600000008000100", @ANYRES32=0x0, @ANYBLOB="08000300ac1414bb08001400ef000000060010002000000008001400030000000500040000000000060008001e000000"], 0x70}}, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @remote}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty}}}], 0x20}}], 0x1, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000280), r4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0x1e, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYRES64=r3, @ANYRES8=r4, @ANYRES16=r1], 0x5c}, 0x1, 0x0, 0x0, 0x40c84}, 0x4) sendmsg$NLBL_MGMT_C_VERSION(r4, &(0x7f0000000200)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000004880)={&(0x7f0000004c40)=ANY=[@ANYBLOB="50d6000772cd070091155bc95c79b7f70f7986721cfee5d2932bbfd2c24d013598486b236cc25bb00000a3000000001de89b344909e122f228a4df9721dd91ac227d29ed5c0f91569aea3857921653cea24128eeb2483690d630106d9519bff234160ba6f06e8ca4cfd4cea852377d59e6307c4e2d82a625b093f1b47121fb37074c3c26e454a5c6c035bc5693dea5f4ab4045813844d154fc820673c8b8c67b65be91b0775f0f3fecebb169876431c4583653d833d67adcb519c68c060000004276d3f0e1b4ce2a1dce1dfeac1d71438a1f5cdf646ba5b4b4ba644ac790da30f3078cb640fdb979414daee1efac2e144a6e617207", @ANYRES16=0x0, @ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x20008004}, 0x4004840) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r4) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r5) sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={0x40, r7, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x40}}, 0x0) socket$inet6(0xa, 0x2, 0x0) sendmsg$IEEE802154_LIST_PHY(r4, &(0x7f0000000900)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r7, 0x800, 0x70bd27, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x85}, 0x4080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r11, @ANYBLOB="23003300d08000000802110000000802110000015050505050500000000000001502", @ANYRES8=r9], 0x40}}, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES64=r9, @ANYRES16, @ANYRESDEC=r0, @ANYRES32=r8], 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x9e1fb17aa2c169b6}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x49a557d1dadfaced}, 0x4) r12 = syz_open_dev$tty1(0xc, 0x4, 0x2) dup(r12) ioctl$TIOCVHANGUP(r12, 0x5437, 0x0) 20:02:48 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0x8111, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) 20:02:48 executing program 3: r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='sour#e', &(0x7f0000000080)='%\xb9\xf6\x822\xcc0{\xc7:', 0x0) [ 337.793608][ T7283] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 337.820456][ T7283] loop4: detected capacity change from 0 to 512 [ 337.858445][ T7283] EXT4-fs: Invalid want_extra_isize 5 20:02:48 executing program 3: r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='sour%e', &(0x7f0000000080)='%\xb9\xf6\x822\xcc0{\xc7:', 0x0) 20:02:48 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0x8400, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) 20:02:48 executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x8050, &(0x7f00000001c0)={[{@sb={'sb', 0x3d, 0x7fffffff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5}}, {@lazytime}, {@norecovery}, {@journal_dev={'journal_dev', 0x3d, 0x4d40}}, {@usrquota}, {@jqfmt_vfsv1}, {@jqfmt_vfsv1}, {@resgid, 0x32}], [{@dont_hash}, {@permit_directio}]}, 0x1, 0x4f5, &(0x7f0000000a40)="$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") (fail_nth: 27) 20:02:48 executing program 1: syz_mount_image$vfat(&(0x7f0000000940), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00e789da34e04a1ffbc2f05ceffb4ee655ae1071124b2c2fb684f5c7ac9da18f49c7880f67e77dc70b90bbb45efd97899a16f2ff4fa2a8f06ac2c5352509e3c51d672eb3ec0dd3b1c96e98016382e166e2ca4c353d3d4d316daf522556a16cab12d75a852bc680da7e010400009c101c78130d6ef7480feb2e60a1e30a59b7745235b33bc18c4ed0351cd2c5197b02f8a78993b5b416ba1c5721bcd87be5a338392f831637ee8c35bb2183794afff0a9eed63b1226b18c4b455ab200"/197, @ANYBLOB="6c5793ac20a1c5201529f037388e7dab1b7eb9ba20e4bd8983", @ANYRES8, @ANYBLOB="373092aa29e2127671f87f0abdebae5693495a917b2906e31fd948855a5bd5ead164be9992f5776cc8fe4867703dd33350f75c29c48d53222ed8563b1284cd07b32fd5c265416455e3ad2250eba709e696700aa4cd2b473e68998f3409a465259140135e71d5352fb04595fcac2f43be5bfa35f30daf1b94aadfeb7fc3e5924d23cd0fbb1d9b9abdc970d5792646bfad2936129530f5", @ANYRES8=0x0], 0x1, 0x11d4, &(0x7f00000012c0)="$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") (async) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6c2cf0"]) (async) chdir(&(0x7f0000000140)='./file0\x00') chdir(&(0x7f0000000000)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) 20:02:48 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001800)={'wlan1\x00'}) (async) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="8b0404000000000050001280080001007369740044000280050004009600000008000100", @ANYRES32=0x0, @ANYBLOB="08000300ac1414bb08001400ef000000060010002000000008001400030000000500040000000000060008001e000000"], 0x70}}, 0x0) (async, rerun: 32) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @remote}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty}}}], 0x20}}], 0x1, 0x0) (async, rerun: 32) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000280), r4) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0x1e, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYRES64=r3, @ANYRES8=r4, @ANYRES16=r1], 0x5c}, 0x1, 0x0, 0x0, 0x40c84}, 0x4) (async) sendmsg$NLBL_MGMT_C_VERSION(r4, &(0x7f0000000200)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000004880)={&(0x7f0000004c40)=ANY=[@ANYBLOB="50d6000772cd070091155bc95c79b7f70f7986721cfee5d2932bbfd2c24d013598486b236cc25bb00000a3000000001de89b344909e122f228a4df9721dd91ac227d29ed5c0f91569aea3857921653cea24128eeb2483690d630106d9519bff234160ba6f06e8ca4cfd4cea852377d59e6307c4e2d82a625b093f1b47121fb37074c3c26e454a5c6c035bc5693dea5f4ab4045813844d154fc820673c8b8c67b65be91b0775f0f3fecebb169876431c4583653d833d67adcb519c68c060000004276d3f0e1b4ce2a1dce1dfeac1d71438a1f5cdf646ba5b4b4ba644ac790da30f3078cb640fdb979414daee1efac2e144a6e617207", @ANYRES16=0x0, @ANYBLOB="10042abd7000fcdbdf250800000006000120400000000c000100295b2d5b272c5b001400675c000000000000000000000000000000011400162b52ed98c04e680000000004000000000165c2a212a32d1c6376f680659f0d9682d3898524d2799217949cd8991775e8985ab226b59cb49508000000448200748057b4405b3d12c05f93663c8778aca11660801e3e274eab9afe599c33007b1991f31b18dc9600000000000000016801d8655e55b6db17554648ea5482d6a328ec9ef96f0f7a166bf39b3aed0e8346c9797ace76e1c02e214c2d94fefb4c896c193c139f4427f32ef9c2dab2265e7d9e63e37ef0680eb2d3e490fdf324dd61cc46871c427bcd60ac7f793c7cc090c9638088d76c60cd19a4b1b926a2ed90dac9dbdf73afee10e8359c379ded7e6307b1e49c4c0eabf74f0a7d19ac8071bebf20105f68e4a2f4f6d64cb3a3f3b039dbf19cc508eb528a3263c8b0de1d74218137d85f11b25fff1d8334bc8e4689648d56e3bdf98b058c288e2fe6510647c62570845afde0df585ae63b71b1df4cab921f3c48f023ab703cface2201deb2b048fdede7480ab483149044555c68a1a2ec0f9b138d6437"], 0x50}, 0x1, 0x0, 0x0, 0x20008004}, 0x4004840) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r4) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r5) sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={0x40, r7, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x40}}, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) sendmsg$IEEE802154_LIST_PHY(r4, &(0x7f0000000900)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r7, 0x800, 0x70bd27, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x85}, 0x4080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r11, @ANYBLOB="23003300d08000000802110000000802110000015050505050500000000000001502", @ANYRES8=r9], 0x40}}, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES64=r9, @ANYRES16, @ANYRESDEC=r0, @ANYRES32=r8], 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) (async) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x9e1fb17aa2c169b6}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x49a557d1dadfaced}, 0x4) r12 = syz_open_dev$tty1(0xc, 0x4, 0x2) dup(r12) ioctl$TIOCVHANGUP(r12, 0x5437, 0x0) 20:02:48 executing program 3: r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='sour*e', &(0x7f0000000080)='%\xb9\xf6\x822\xcc0{\xc7:', 0x0) 20:02:48 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0xedc0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) [ 338.174544][ T7302] FAULT_INJECTION: forcing a failure. [ 338.174544][ T7302] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 338.256146][ T7302] CPU: 0 PID: 7302 Comm: syz-executor.4 Not tainted 6.5.0-rc1-next-20230714-syzkaller #0 [ 338.266422][ T7302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 338.276897][ T7302] Call Trace: [ 338.280495][ T7302] [ 338.283610][ T7302] dump_stack_lvl+0x125/0x1b0 [ 338.288447][ T7302] should_fail_ex+0x496/0x5b0 [ 338.293225][ T7302] __should_fail_alloc_page+0xe7/0x130 [ 338.298780][ T7302] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 338.305056][ T7302] __alloc_pages+0x14e/0x4a0 [ 338.309825][ T7302] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 338.316785][ T7302] ? lock_sync+0x190/0x190 [ 338.321422][ T7302] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 338.327497][ T7302] __folio_alloc+0x16/0x40 [ 338.332232][ T7302] vma_alloc_folio+0x156/0x890 [ 338.337278][ T7302] ? policy_nodemask+0x1d0/0x1d0 [ 338.342312][ T7302] ? find_held_lock+0x59/0x110 [ 338.347220][ T7302] __handle_mm_fault+0xfb4/0x40b0 [ 338.352796][ T7302] ? vm_iomap_memory+0x170/0x170 [ 338.357833][ T7302] ? mas_walk+0x422/0x7c0 [ 338.362431][ T7302] ? lock_mm_and_find_vma+0x780/0x780 [ 338.367902][ T7302] ? do_user_addr_fault+0x602/0xfe0 [ 338.373190][ T7302] handle_mm_fault+0x47a/0xa00 [ 338.378042][ T7302] do_user_addr_fault+0x2e7/0xfe0 [ 338.383149][ T7302] ? rcu_is_watching+0x12/0xb0 [ 338.387981][ T7302] exc_page_fault+0x5c/0xd0 [ 338.392926][ T7302] asm_exc_page_fault+0x26/0x30 [ 338.397909][ T7302] RIP: 0033:0x7f2369428673 [ 338.402436][ T7302] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 338.422336][ T7302] RSP: 002b:00007f236a21a520 EFLAGS: 00010206 [ 338.428469][ T7302] RAX: 0000000000009000 RBX: 00007f236a21a5c0 RCX: 00007f235fbff000 [ 338.436678][ T7302] RDX: 00007f236a21a760 RSI: 0000000000000000 RDI: 00007f236a21a660 [ 338.444992][ T7302] RBP: 000000000000006b R08: 000000000000000a R09: 00000000000003de 20:02:49 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001800)={'wlan1\x00'}) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="8b0404000000000050001280080001007369740044000280050004009600000008000100", @ANYRES32=0x0, @ANYBLOB="08000300ac1414bb08001400ef000000060010002000000008001400030000000500040000000000060008001e000000"], 0x70}}, 0x0) (async) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @remote}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty}}}], 0x20}}], 0x1, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000280), r4) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0x1e, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYRES64=r3, @ANYRES8=r4, @ANYRES16=r1], 0x5c}, 0x1, 0x0, 0x0, 0x40c84}, 0x4) (async) sendmsg$NLBL_MGMT_C_VERSION(r4, &(0x7f0000000200)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000004880)={&(0x7f0000004c40)=ANY=[@ANYBLOB="50d6000772cd070091155bc95c79b7f70f7986721cfee5d2932bbfd2c24d013598486b236cc25bb00000a3000000001de89b344909e122f228a4df9721dd91ac227d29ed5c0f91569aea3857921653cea24128eeb2483690d630106d9519bff234160ba6f06e8ca4cfd4cea852377d59e6307c4e2d82a625b093f1b47121fb37074c3c26e454a5c6c035bc5693dea5f4ab4045813844d154fc820673c8b8c67b65be91b0775f0f3fecebb169876431c4583653d833d67adcb519c68c060000004276d3f0e1b4ce2a1dce1dfeac1d71438a1f5cdf646ba5b4b4ba644ac790da30f3078cb640fdb979414daee1efac2e144a6e617207", @ANYRES16=0x0, @ANYBLOB="10042abd7000fcdbdf250800000006000120400000000c000100295b2d5b272c5b001400675c000000000000000000000000000000011400162b52ed98c04e680000000004000000000165c2a212a32d1c6376f680659f0d9682d3898524d2799217949cd8991775e8985ab226b59cb49508000000448200748057b4405b3d12c05f93663c8778aca11660801e3e274eab9afe599c33007b1991f31b18dc9600000000000000016801d8655e55b6db17554648ea5482d6a328ec9ef96f0f7a166bf39b3aed0e8346c9797ace76e1c02e214c2d94fefb4c896c193c139f4427f32ef9c2dab2265e7d9e63e37ef0680eb2d3e490fdf324dd61cc46871c427bcd60ac7f793c7cc090c9638088d76c60cd19a4b1b926a2ed90dac9dbdf73afee10e8359c379ded7e6307b1e49c4c0eabf74f0a7d19ac8071bebf20105f68e4a2f4f6d64cb3a3f3b039dbf19cc508eb528a3263c8b0de1d74218137d85f11b25fff1d8334bc8e4689648d56e3bdf98b058c288e2fe6510647c62570845afde0df585ae63b71b1df4cab921f3c48f023ab703cface2201deb2b048fdede7480ab483149044555c68a1a2ec0f9b138d6437"], 0x50}, 0x1, 0x0, 0x0, 0x20008004}, 0x4004840) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r4) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r4) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r5) sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={0x40, r7, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x40}}, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) sendmsg$IEEE802154_LIST_PHY(r4, &(0x7f0000000900)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r7, 0x800, 0x70bd27, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x85}, 0x4080) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r11, @ANYBLOB="23003300d08000000802110000000802110000015050505050500000000000001502", @ANYRES8=r9], 0x40}}, 0x0) (async) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES64=r9, @ANYRES16, @ANYRESDEC=r0, @ANYRES32=r8], 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) (async) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x9e1fb17aa2c169b6}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x49a557d1dadfaced}, 0x4) (async) r12 = syz_open_dev$tty1(0xc, 0x4, 0x2) dup(r12) (async) ioctl$TIOCVHANGUP(r12, 0x5437, 0x0) [ 338.453104][ T7302] R10: 00000000000003e0 R11: 00007f236a21a5c0 R12: 0000000000000001 [ 338.461305][ T7302] R13: 00007f23694ea340 R14: 0000000000000011 R15: 00007f236a21a660 [ 338.469455][ T7302] [ 338.690237][ T7302] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 338.733149][ T7302] loop4: detected capacity change from 0 to 512 [ 338.755197][ T7302] EXT4-fs: Invalid want_extra_isize 5 20:02:49 executing program 3: r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='sour+e', &(0x7f0000000080)='%\xb9\xf6\x822\xcc0{\xc7:', 0x0) 20:02:49 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0xfeff, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) 20:02:49 executing program 1: syz_mount_image$vfat(&(0x7f0000000940), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00e789da34e04a1ffbc2f05ceffb4ee655ae1071124b2c2fb684f5c7ac9da18f49c7880f67e77dc70b90bbb45efd97899a16f2ff4fa2a8f06ac2c5352509e3c51d672eb3ec0dd3b1c96e98016382e166e2ca4c353d3d4d316daf522556a16cab12d75a852bc680da7e010400009c101c78130d6ef7480feb2e60a1e30a59b7745235b33bc18c4ed0351cd2c5197b02f8a78993b5b416ba1c5721bcd87be5a338392f831637ee8c35bb2183794afff0a9eed63b1226b18c4b455ab200"/197, @ANYBLOB="6c5793ac20a1c5201529f037388e7dab1b7eb9ba20e4bd8983", @ANYRES8, @ANYBLOB="373092aa29e2127671f87f0abdebae5693495a917b2906e31fd948855a5bd5ead164be9992f5776cc8fe4867703dd33350f75c29c48d53222ed8563b1284cd07b32fd5c265416455e3ad2250eba709e696700aa4cd2b473e68998f3409a465259140135e71d5352fb04595fcac2f43be5bfa35f30daf1b94aadfeb7fc3e5924d23cd0fbb1d9b9abdc970d5792646bfad2936129530f5", @ANYRES8=0x0], 0x1, 0x11d4, &(0x7f00000012c0)="$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") mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6c2cf0"]) chdir(&(0x7f0000000140)='./file0\x00') chdir(&(0x7f0000000000)='./file1\x00') (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) 20:02:49 executing program 5: ioctl$IOMMU_VFIO_CHECK_EXTENSION(0xffffffffffffffff, 0x3b65, 0xa) r0 = fsmount(0xffffffffffffffff, 0x0, 0xf2) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$tcp_mem(r1, &(0x7f00000001c0)={0x800, 0x20, 0x0, 0x20, 0x5}, 0x48) socket(0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000013000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000040)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f000f011c268ee0", 0x3e}], 0x1, 0x0, 0x0, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0xfe, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000002c0)={[{@huge_always}]}) chdir(&(0x7f0000000140)='./file0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ftruncate(r4, 0xc17a) r5 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$bt_BT_SECURITY(r5, 0x111, 0x4, 0x0, 0x20000000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000026c0)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000140)={0xad6}) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x1fe, 0x0, 0x6000, 0x2000, &(0x7f000001a000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x2004c7], 0x0, 0xe02}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 20:02:49 executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x8050, &(0x7f00000001c0)={[{@sb={'sb', 0x3d, 0x7fffffff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5}}, {@lazytime}, {@norecovery}, {@journal_dev={'journal_dev', 0x3d, 0x4d40}}, {@usrquota}, {@jqfmt_vfsv1}, {@jqfmt_vfsv1}, {@resgid, 0x32}], [{@dont_hash}, {@permit_directio}]}, 0x1, 0x4f5, &(0x7f0000000a40)="$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") (fail_nth: 28) 20:02:49 executing program 0: socket$alg(0x26, 0x5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[], 0x208e24b) socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES8=r7], 0x24}}, 0x0) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_ep_write(r8, 0x0, 0x0, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = dup(r10) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14) sendmsg$ETHTOOL_MSG_COALESCE_GET(r11, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4040120}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xfc, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xf75d7f721e6dfead}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x4}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) syz_usb_disconnect(r8) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r8, @ANYRES16=r4, @ANYBLOB="ff830500000000000000", @ANYRES32=r5], 0x4}}, 0x80) sendfile(r3, r2, 0x0, 0x100000002) 20:02:49 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0xff03, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) [ 339.205795][ T7327] FAULT_INJECTION: forcing a failure. [ 339.205795][ T7327] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 339.260586][ T7327] CPU: 1 PID: 7327 Comm: syz-executor.4 Not tainted 6.5.0-rc1-next-20230714-syzkaller #0 [ 339.270624][ T7327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 339.280740][ T7327] Call Trace: [ 339.284069][ T7327] [ 339.287059][ T7327] dump_stack_lvl+0x125/0x1b0 [ 339.291823][ T7327] should_fail_ex+0x496/0x5b0 [ 339.296684][ T7327] __should_fail_alloc_page+0xe7/0x130 [ 339.302212][ T7327] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 339.308454][ T7327] __alloc_pages+0x14e/0x4a0 [ 339.313181][ T7327] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 339.319993][ T7327] ? lock_sync+0x190/0x190 [ 339.324458][ T7327] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 339.330583][ T7327] __folio_alloc+0x16/0x40 [ 339.335243][ T7327] vma_alloc_folio+0x156/0x890 [ 339.340142][ T7327] ? policy_nodemask+0x1d0/0x1d0 [ 339.345583][ T7327] ? find_held_lock+0x59/0x110 [ 339.350702][ T7327] __handle_mm_fault+0xfb4/0x40b0 [ 339.355995][ T7327] ? vm_iomap_memory+0x170/0x170 [ 339.361188][ T7327] ? mas_walk+0x422/0x7c0 [ 339.365958][ T7327] ? lock_mm_and_find_vma+0x780/0x780 [ 339.371588][ T7327] ? do_user_addr_fault+0x602/0xfe0 [ 339.377273][ T7327] handle_mm_fault+0x47a/0xa00 [ 339.382405][ T7327] do_user_addr_fault+0x2e7/0xfe0 [ 339.387501][ T7327] ? rcu_is_watching+0x12/0xb0 [ 339.392688][ T7327] exc_page_fault+0x5c/0xd0 [ 339.397358][ T7327] asm_exc_page_fault+0x26/0x30 [ 339.402363][ T7327] RIP: 0033:0x7f2369428673 [ 339.406835][ T7327] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 339.427002][ T7327] RSP: 002b:00007f236a21a520 EFLAGS: 00010206 [ 339.433285][ T7327] RAX: 000000000000a000 RBX: 00007f236a21a5c0 RCX: 00007f235fbff000 [ 339.441540][ T7327] RDX: 00007f236a21a760 RSI: 0000000000000001 RDI: 00007f236a21a660 [ 339.449632][ T7327] RBP: 00000000000000cd R08: 0000000000000007 R09: 0000000000000037 20:02:50 executing program 3: r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='sour-e', &(0x7f0000000080)='%\xb9\xf6\x822\xcc0{\xc7:', 0x0) [ 339.458162][ T7327] R10: 000000000000004c R11: 00007f236a21a5c0 R12: 0000000000000001 [ 339.466537][ T7327] R13: 00007f23694ea340 R14: 0000000000000005 R15: 00007f236a21a660 [ 339.474588][ T7327] [ 339.510132][ T7330] [ 339.512539][ T7330] ====================================================== [ 339.519806][ T7330] WARNING: possible circular locking dependency detected [ 339.526966][ T7330] 6.5.0-rc1-next-20230714-syzkaller #0 Not tainted [ 339.533509][ T7330] ------------------------------------------------------ [ 339.540741][ T7330] syz-executor.5/7330 is trying to acquire lock: [ 339.547286][ T7330] ffff888039ba5718 (&info->lock){....}-{2:2}, at: shmem_uncharge+0x28/0x2b0 [ 339.556262][ T7330] [ 339.556262][ T7330] but task is already holding lock: [ 339.564018][ T7330] ffff888026e82068 (&lruvec->lru_lock){....}-{2:2}, at: folio_lruvec_lock+0x1ba/0x3b0 [ 339.571444][ T7327] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 339.574098][ T7330] [ 339.574098][ T7330] which lock already depends on the new lock. [ 339.574098][ T7330] [ 339.574109][ T7330] [ 339.574109][ T7330] the existing dependency chain (in reverse order) is: [ 339.574119][ T7330] [ 339.574119][ T7330] -> #3 (&lruvec->lru_lock){....}-{2:2}: [ 339.609411][ T7330] _raw_spin_lock+0x2e/0x40 [ 339.614573][ T7330] folio_lruvec_lock+0x1ba/0x3b0 [ 339.620526][ T7330] split_huge_page_to_list+0x103b/0x49e0 [ 339.626771][ T7330] shrink_folio_list+0x24c3/0x3dc0 [ 339.632563][ T7330] reclaim_folio_list+0xe4/0x3a0 [ 339.638280][ T7330] reclaim_pages+0x483/0x6a0 [ 339.643492][ T7330] madvise_cold_or_pageout_pte_range+0x1174/0x1f20 [ 339.650718][ T7330] walk_pgd_range+0xa36/0x1770 [ 339.656115][ T7330] __walk_page_range+0x62e/0x770 [ 339.661905][ T7330] walk_page_range+0x3b2/0x470 [ 339.667349][ T7330] madvise_pageout+0x317/0x570 [ 339.672679][ T7330] madvise_vma_behavior+0x1ce/0x1e60 [ 339.678719][ T7330] madvise_walk_vmas+0x1cf/0x2c0 [ 339.684244][ T7330] do_madvise+0x333/0x660 [ 339.688338][ T7327] loop4: detected capacity change from 0 to 512 [ 339.689124][ T7330] __x64_sys_madvise+0xaa/0x110 [ 339.700876][ T7330] do_syscall_64+0x38/0xb0 20:02:50 executing program 3: r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='sour.e', &(0x7f0000000080)='%\xb9\xf6\x822\xcc0{\xc7:', 0x0) 20:02:50 executing program 1: r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='sour-e', &(0x7f0000000080)='%\xb9\xf6\x822\xcc0{\xc7:', 0x0) 20:02:50 executing program 3: r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='sour0e', &(0x7f0000000080)='%\xb9\xf6\x822\xcc0{\xc7:', 0x0) [ 339.705959][ T7330] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 339.712437][ T7330] [ 339.712437][ T7330] -> #2 (&xa->xa_lock#8){..-.}-{2:2}: [ 339.720258][ T7330] _raw_spin_lock_irq+0x36/0x50 [ 339.725791][ T7330] filemap_remove_folio+0xbf/0x250 [ 339.731483][ T7330] truncate_inode_folio+0x49/0x70 [ 339.735525][ T7327] EXT4-fs: Invalid want_extra_isize 5 [ 339.737085][ T7330] shmem_undo_range+0x363/0x1190 [ 339.748085][ T7330] shmem_evict_inode+0x334/0xb10 [ 339.753619][ T7330] evict+0x2ed/0x6b0 [ 339.758186][ T7330] iput.part.0+0x55e/0x7a0 [ 339.763275][ T7330] iput+0x5c/0x80 [ 339.767495][ T7330] dentry_unlink_inode+0x292/0x430 [ 339.773294][ T7330] __dentry_kill+0x3b8/0x640 [ 339.778475][ T7330] dput+0x703/0xfd0 [ 339.783117][ T7330] do_renameat2+0xc4c/0xdc0 [ 339.788207][ T7330] __x64_sys_rename+0x81/0xa0 [ 339.793518][ T7330] do_syscall_64+0x38/0xb0 [ 339.798717][ T7330] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 339.805217][ T7330] [ 339.805217][ T7330] -> #1 (&sb->s_type->i_lock_key){+.+.}-{2:2}: [ 339.813623][ T7330] _raw_spin_lock+0x2e/0x40 [ 339.818684][ T7330] inode_sub_bytes+0x28/0x100 [ 339.824183][ T7330] __dquot_free_space+0x8f7/0xaf0 [ 339.829774][ T7330] shmem_recalc_inode+0x196/0x350 [ 339.835360][ T7330] shmem_undo_range+0x558/0x1190 [ 339.840958][ T7330] shmem_evict_inode+0x334/0xb10 [ 339.846544][ T7330] evict+0x2ed/0x6b0 [ 339.851106][ T7330] iput.part.0+0x55e/0x7a0 [ 339.856071][ T7330] iput+0x5c/0x80 [ 339.860516][ T7330] dentry_unlink_inode+0x292/0x430 [ 339.866458][ T7330] __dentry_kill+0x3b8/0x640 [ 339.871603][ T7330] dput+0x703/0xfd0 [ 339.876147][ T7330] do_renameat2+0xc4c/0xdc0 [ 339.881325][ T7330] __x64_sys_rename+0x81/0xa0 [ 339.886571][ T7330] do_syscall_64+0x38/0xb0 [ 339.891555][ T7330] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 339.898273][ T7330] [ 339.898273][ T7330] -> #0 (&info->lock){....}-{2:2}: [ 339.905609][ T7330] __lock_acquire+0x2e3d/0x5de0 [ 339.911103][ T7330] lock_acquire+0x1ae/0x510 [ 339.916159][ T7330] _raw_spin_lock_irqsave+0x3a/0x50 [ 339.921908][ T7330] shmem_uncharge+0x28/0x2b0 [ 339.927054][ T7330] split_huge_page_to_list+0x3832/0x49e0 [ 339.933334][ T7330] shrink_folio_list+0x24c3/0x3dc0 [ 339.939004][ T7330] reclaim_folio_list+0xe4/0x3a0 [ 339.944521][ T7330] reclaim_pages+0x483/0x6a0 [ 339.949707][ T7330] madvise_cold_or_pageout_pte_range+0x1174/0x1f20 [ 339.956791][ T7330] walk_pgd_range+0xa36/0x1770 [ 339.962124][ T7330] __walk_page_range+0x62e/0x770 [ 339.967617][ T7330] walk_page_range+0x3b2/0x470 [ 339.972938][ T7330] madvise_pageout+0x317/0x570 [ 339.978511][ T7330] madvise_vma_behavior+0x1ce/0x1e60 [ 339.984359][ T7330] madvise_walk_vmas+0x1cf/0x2c0 [ 339.989949][ T7330] do_madvise+0x333/0x660 [ 339.994824][ T7330] __x64_sys_madvise+0xaa/0x110 [ 340.000578][ T7330] do_syscall_64+0x38/0xb0 [ 340.005571][ T7330] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 340.012077][ T7330] [ 340.012077][ T7330] other info that might help us debug this: [ 340.012077][ T7330] [ 340.022351][ T7330] Chain exists of: [ 340.022351][ T7330] &info->lock --> &xa->xa_lock#8 --> &lruvec->lru_lock [ 340.022351][ T7330] [ 340.035194][ T7330] Possible unsafe locking scenario: [ 340.035194][ T7330] [ 340.042659][ T7330] CPU0 CPU1 [ 340.048313][ T7330] ---- ---- [ 340.053719][ T7330] lock(&lruvec->lru_lock); [ 340.058473][ T7330] lock(&xa->xa_lock#8); [ 340.065565][ T7330] lock(&lruvec->lru_lock); [ 340.072716][ T7330] lock(&info->lock); [ 340.076819][ T7330] [ 340.076819][ T7330] *** DEADLOCK *** [ 340.076819][ T7330] [ 340.085079][ T7330] 4 locks held by syz-executor.5/7330: [ 340.090551][ T7330] #0: ffff888012868b20 (&mm->mmap_lock){++++}-{3:3}, at: do_madvise+0x4ae/0x660 [ 340.099871][ T7330] #1: ffff888039ba5cb0 (&mapping->i_mmap_rwsem){++++}-{3:3}, at: split_huge_page_to_list+0x7d5/0x49e0 [ 340.111109][ T7330] #2: ffff888039ba5b20 (&xa->xa_lock#8){..-.}-{2:2}, at: split_huge_page_to_list+0x980/0x49e0 [ 340.121723][ T7330] #3: ffff888026e82068 (&lruvec->lru_lock){....}-{2:2}, at: folio_lruvec_lock+0x1ba/0x3b0 [ 340.131876][ T7330] [ 340.131876][ T7330] stack backtrace: [ 340.138222][ T7330] CPU: 1 PID: 7330 Comm: syz-executor.5 Not tainted 6.5.0-rc1-next-20230714-syzkaller #0 [ 340.148315][ T7330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 340.158495][ T7330] Call Trace: [ 340.161793][ T7330] [ 340.164738][ T7330] dump_stack_lvl+0xd9/0x1b0 [ 340.169550][ T7330] check_noncircular+0x311/0x3f0 [ 340.174612][ T7330] ? print_circular_bug+0x750/0x750 [ 340.179976][ T7330] ? save_trace+0x4e/0xb30 [ 340.184445][ T7330] ? _find_first_zero_bit+0x94/0xb0 [ 340.189758][ T7330] ? add_lock_to_list+0x17d/0x380 [ 340.195256][ T7330] __lock_acquire+0x2e3d/0x5de0 [ 340.200494][ T7330] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 340.206512][ T7330] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 340.212789][ T7330] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 340.218979][ T7330] ? preempt_count_sub+0x150/0x150 [ 340.224141][ T7330] lock_acquire+0x1ae/0x510 [ 340.228675][ T7330] ? shmem_uncharge+0x28/0x2b0 [ 340.233557][ T7330] ? lock_sync+0x190/0x190 [ 340.238004][ T7330] ? lock_sync+0x190/0x190 [ 340.243472][ T7330] ? page_cpupid_xchg_last+0xc5/0x130 [ 340.249250][ T7330] _raw_spin_lock_irqsave+0x3a/0x50 [ 340.254615][ T7330] ? shmem_uncharge+0x28/0x2b0 [ 340.259694][ T7330] shmem_uncharge+0x28/0x2b0 [ 340.264355][ T7330] split_huge_page_to_list+0x3832/0x49e0 [ 340.270059][ T7330] ? can_split_folio+0x3f0/0x3f0 [ 340.275155][ T7330] ? page_mkclean_one+0x260/0x260 [ 340.280259][ T7330] shrink_folio_list+0x24c3/0x3dc0 [ 340.285877][ T7330] ? isolate_folios+0x39f0/0x39f0 [ 340.290948][ T7330] ? bpf_trace_run4+0x1bb/0x450 [ 340.296101][ T7330] ? find_held_lock+0x2d/0x110 [ 340.301070][ T7330] ? reacquire_held_locks+0x4b0/0x4b0 [ 340.306650][ T7330] ? mark_held_locks+0x9f/0xe0 [ 340.311448][ T7330] ? finish_task_switch.isra.0+0x216/0xc90 [ 340.317301][ T7330] ? lockdep_hardirqs_on+0x7d/0x100 [ 340.322560][ T7330] reclaim_folio_list+0xe4/0x3a0 [ 340.327559][ T7330] ? __schedule+0xee9/0x59f0 [ 340.332211][ T7330] ? lru_gen_seq_write+0x1910/0x1910 [ 340.337912][ T7330] ? io_schedule_timeout+0x150/0x150 [ 340.343412][ T7330] ? find_held_lock+0x2d/0x110 [ 340.348418][ T7330] reclaim_pages+0x483/0x6a0 [ 340.353071][ T7330] ? folio_isolate_lru+0x8d0/0x8d0 [ 340.358263][ T7330] madvise_cold_or_pageout_pte_range+0x1174/0x1f20 [ 340.364976][ T7330] ? madvise_free_pte_range+0x1090/0x1090 [ 340.370865][ T7330] ? find_held_lock+0x2d/0x110 [ 340.375690][ T7330] ? madvise_free_pte_range+0x1090/0x1090 [ 340.381804][ T7330] walk_pgd_range+0xa36/0x1770 [ 340.386711][ T7330] ? walk_page_test+0x180/0x180 [ 340.391624][ T7330] __walk_page_range+0x62e/0x770 [ 340.396651][ T7330] ? find_vma+0x10e/0x1b0 [ 340.401015][ T7330] ? vma_link+0x260/0x260 [ 340.405552][ T7330] ? walk_page_test+0x98/0x180 [ 340.410445][ T7330] walk_page_range+0x3b2/0x470 [ 340.415249][ T7330] ? __walk_page_range+0x770/0x770 [ 340.420419][ T7330] madvise_pageout+0x317/0x570 [ 340.425226][ T7330] ? madvise_dontneed_free_valid_vma+0x310/0x310 [ 340.431822][ T7330] ? mas_prev_slot+0x3e8/0x1940 [ 340.436840][ T7330] madvise_vma_behavior+0x1ce/0x1e60 [ 340.442179][ T7330] ? madvise_vma_anon_name+0xf0/0xf0 [ 340.447519][ T7330] ? mas_prev+0xc6/0x460 [ 340.451828][ T7330] ? madvise_vma_anon_name+0xf0/0xf0 [ 340.457782][ T7330] ? find_vma_prev+0xe8/0x160 [ 340.462629][ T7330] ? vm_unmapped_area+0x9d0/0x9d0 [ 340.467887][ T7330] ? lock_sync+0x190/0x190 [ 340.472356][ T7330] ? preempt_count_sub+0x150/0x150 [ 340.477550][ T7330] ? madvise_vma_anon_name+0xf0/0xf0 [ 340.482905][ T7330] madvise_walk_vmas+0x1cf/0x2c0 [ 340.487965][ T7330] ? __remove_memory+0x40/0x40 [ 340.492935][ T7330] do_madvise+0x333/0x660 [ 340.497376][ T7330] ? madvise_set_anon_name+0x110/0x110 [ 340.502876][ T7330] ? restore_fpregs_from_fpstate+0xc1/0x1d0 [ 340.508879][ T7330] __x64_sys_madvise+0xaa/0x110 [ 340.513768][ T7330] ? syscall_enter_from_user_mode+0x26/0x80 [ 340.519847][ T7330] do_syscall_64+0x38/0xb0 [ 340.524342][ T7330] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 340.530453][ T7330] RIP: 0033:0x7fb11ea7cb29 [ 340.534997][ T7330] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 340.554903][ T7330] RSP: 002b:00007fb11f8760c8 EFLAGS: 00000246 ORIG_RAX: 000000000000001c 20:02:51 executing program 3: r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='sourXe', &(0x7f0000000080)='%\xb9\xf6\x822\xcc0{\xc7:', 0x0) [ 340.563604][ T7330] RAX: ffffffffffffffda RBX: 00007fb11eb9c050 RCX: 00007fb11ea7cb29 [ 340.571605][ T7330] RDX: 0000000000000015 RSI: 0000000000600003 RDI: 0000000020000000 [ 340.579612][ T7330] RBP: 00007fb11eac847a R08: 0000000000000000 R09: 0000000000000000 [ 340.587890][ T7330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 340.596002][ T7330] R13: 000000000000006e R14: 00007fb11eb9c050 R15: 00007fff74ad22a8 [ 340.604289][ T7330] 20:02:51 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0xff0f, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) 20:02:51 executing program 1: r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='sour-e', &(0x7f0000000080)='%\xb9\xf6\x822\xcc0{\xc7:', 0x0) 20:02:51 executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x8050, &(0x7f00000001c0)={[{@sb={'sb', 0x3d, 0x7fffffff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5}}, {@lazytime}, {@norecovery}, {@journal_dev={'journal_dev', 0x3d, 0x4d40}}, {@usrquota}, {@jqfmt_vfsv1}, {@jqfmt_vfsv1}, {@resgid, 0x32}], [{@dont_hash}, {@permit_directio}]}, 0x1, 0x4f5, &(0x7f0000000a40)="$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") (fail_nth: 29) 20:02:51 executing program 3: r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='sourde', &(0x7f0000000080)='%\xb9\xf6\x822\xcc0{\xc7:', 0x0) 20:02:51 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0xfffe, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) [ 340.828645][ T7354] FAULT_INJECTION: forcing a failure. [ 340.828645][ T7354] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 340.850106][ T7354] CPU: 0 PID: 7354 Comm: syz-executor.4 Not tainted 6.5.0-rc1-next-20230714-syzkaller #0 [ 340.860017][ T7354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 340.870469][ T7354] Call Trace: [ 340.873791][ T7354] [ 340.876813][ T7354] dump_stack_lvl+0x125/0x1b0 [ 340.881840][ T7354] should_fail_ex+0x496/0x5b0 [ 340.886714][ T7354] __should_fail_alloc_page+0xe7/0x130 [ 340.892342][ T7354] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 340.898875][ T7354] ? rcu_is_watching+0x12/0xb0 [ 340.903820][ T7354] __alloc_pages+0x14e/0x4a0 [ 340.908755][ T7354] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 340.915601][ T7354] ? lock_sync+0x190/0x190 [ 340.920158][ T7354] __folio_alloc+0x16/0x40 [ 340.924623][ T7354] vma_alloc_folio+0x156/0x890 [ 340.929538][ T7354] ? policy_nodemask+0x1d0/0x1d0 [ 340.934518][ T7354] ? mtree_range_walk+0x654/0x9a0 [ 340.939681][ T7354] __handle_mm_fault+0xfb4/0x40b0 [ 340.944851][ T7354] ? vm_iomap_memory+0x170/0x170 [ 340.949919][ T7354] ? mas_walk+0x422/0x7c0 [ 340.954421][ T7354] ? lock_mm_and_find_vma+0x780/0x780 [ 340.959850][ T7354] ? do_user_addr_fault+0x602/0xfe0 [ 340.965617][ T7354] handle_mm_fault+0x47a/0xa00 [ 340.970432][ T7354] do_user_addr_fault+0x2e7/0xfe0 [ 340.975660][ T7354] ? rcu_is_watching+0x12/0xb0 [ 340.980559][ T7354] exc_page_fault+0x5c/0xd0 [ 340.985194][ T7354] asm_exc_page_fault+0x26/0x30 [ 340.990080][ T7354] RIP: 0033:0x7f2369428673 [ 340.994708][ T7354] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 341.014440][ T7354] RSP: 002b:00007f236a21a520 EFLAGS: 00010206 [ 341.020534][ T7354] RAX: 0000000000009000 RBX: 00007f236a21a5c0 RCX: 00007f235fbff000 [ 341.028874][ T7354] RDX: 00007f236a21a760 RSI: 0000000000000000 RDI: 00007f236a21a660 [ 341.036865][ T7354] RBP: 000000000000006b R08: 000000000000000a R09: 00000000000003de [ 341.044857][ T7354] R10: 00000000000003e0 R11: 00007f236a21a5c0 R12: 0000000000000001 [ 341.052849][ T7354] R13: 00007f23694ea340 R14: 0000000000000011 R15: 00007f236a21a660 [ 341.060849][ T7354] [ 341.070146][ T7354] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 341.086566][ T7354] loop4: detected capacity change from 0 to 512 [ 341.096369][ T7354] EXT4-fs: Invalid want_extra_isize 5 20:02:52 executing program 0: socket$alg(0x26, 0x5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[], 0x208e24b) (async) socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) (async, rerun: 32) r5 = socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES8=r7], 0x24}}, 0x0) (async) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_ep_write(r8, 0x0, 0x0, 0x0) (async) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = dup(r10) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) (async) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14) sendmsg$ETHTOOL_MSG_COALESCE_GET(r11, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4040120}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xfc, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xf75d7f721e6dfead}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x4}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) syz_usb_disconnect(r8) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r8, @ANYRES16=r4, @ANYBLOB="ff830500000000000000", @ANYRES32=r5], 0x4}}, 0x80) (async) sendfile(r3, r2, 0x0, 0x100000002) 20:02:52 executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x8050, &(0x7f00000001c0)={[{@sb={'sb', 0x3d, 0x7fffffff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5}}, {@lazytime}, {@norecovery}, {@journal_dev={'journal_dev', 0x3d, 0x4d40}}, {@usrquota}, {@jqfmt_vfsv1}, {@jqfmt_vfsv1}, {@resgid, 0x32}], [{@dont_hash}, {@permit_directio}]}, 0x1, 0x4f5, &(0x7f0000000a40)="$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") (fail_nth: 30) 20:02:52 executing program 3: r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='sourhe', &(0x7f0000000080)='%\xb9\xf6\x822\xcc0{\xc7:', 0x0) 20:02:52 executing program 1: r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='sour-e', &(0x7f0000000080)='%\xb9\xf6\x822\xcc0{\xc7:', 0x0) 20:02:52 executing program 5: ioctl$IOMMU_VFIO_CHECK_EXTENSION(0xffffffffffffffff, 0x3b65, 0xa) (async, rerun: 32) r0 = fsmount(0xffffffffffffffff, 0x0, 0xf2) (rerun: 32) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$tcp_mem(r1, &(0x7f00000001c0)={0x800, 0x20, 0x0, 0x20, 0x5}, 0x48) socket(0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000013000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000040)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f000f011c268ee0", 0x3e}], 0x1, 0x0, 0x0, 0x0) (async) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0xfe, 0x0, &(0x7f0000000000)) (async) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000002c0)={[{@huge_always}]}) (async, rerun: 32) chdir(&(0x7f0000000140)='./file0\x00') (rerun: 32) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ftruncate(r4, 0xc17a) (async, rerun: 32) r5 = socket$pppl2tp(0x18, 0x1, 0x1) (rerun: 32) getsockopt$bt_BT_SECURITY(r5, 0x111, 0x4, 0x0, 0x20000000) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000026c0)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000140)={0xad6}) (async) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}]}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x1fe, 0x0, 0x6000, 0x2000, &(0x7f000001a000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x2004c7], 0x0, 0xe02}) (async, rerun: 64) ioctl$KVM_RUN(r6, 0xae80, 0x0) (rerun: 64) 20:02:52 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0x1f5cc, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) 20:02:52 executing program 1: fsopen(&(0x7f0000000040)='afs\x00', 0x0) 20:02:52 executing program 3: r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='sourie', &(0x7f0000000080)='%\xb9\xf6\x822\xcc0{\xc7:', 0x0) [ 341.635704][ T7364] FAULT_INJECTION: forcing a failure. [ 341.635704][ T7364] name fail_page_alloc, interval 1, probability 0, space 0, times 0 20:02:52 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0x1f5cd, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) 20:02:52 executing program 5: ioctl$IOMMU_VFIO_CHECK_EXTENSION(0xffffffffffffffff, 0x3b65, 0xa) (async) r0 = fsmount(0xffffffffffffffff, 0x0, 0xf2) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) write$tcp_mem(r1, &(0x7f00000001c0)={0x800, 0x20, 0x0, 0x20, 0x5}, 0x48) socket(0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000013000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000040)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f000f011c268ee0", 0x3e}], 0x1, 0x0, 0x0, 0x0) (async) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0xfe, 0x0, &(0x7f0000000000)) (async) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000002c0)={[{@huge_always}]}) (async) chdir(&(0x7f0000000140)='./file0\x00') (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async) ftruncate(r4, 0xc17a) (async) r5 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$bt_BT_SECURITY(r5, 0x111, 0x4, 0x0, 0x20000000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000026c0)) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000140)={0xad6}) (async) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x1fe, 0x0, 0x6000, 0x2000, &(0x7f000001a000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x2004c7], 0x0, 0xe02}) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) 20:02:52 executing program 1: fsopen(0x0, 0x0) [ 341.730718][ T7364] CPU: 1 PID: 7364 Comm: syz-executor.4 Not tainted 6.5.0-rc1-next-20230714-syzkaller #0 [ 341.740755][ T7364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 341.750867][ T7364] Call Trace: [ 341.754188][ T7364] [ 341.757171][ T7364] dump_stack_lvl+0x125/0x1b0 [ 341.762019][ T7364] should_fail_ex+0x496/0x5b0 [ 341.766785][ T7364] __should_fail_alloc_page+0xe7/0x130 [ 341.772316][ T7364] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 341.778635][ T7364] ? rcu_is_watching+0x12/0xb0 [ 341.783667][ T7364] __alloc_pages+0x14e/0x4a0 [ 341.788408][ T7364] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 341.795350][ T7364] ? lock_sync+0x190/0x190 [ 341.799918][ T7364] __folio_alloc+0x16/0x40 [ 341.804487][ T7364] vma_alloc_folio+0x156/0x890 [ 341.809398][ T7364] ? policy_nodemask+0x1d0/0x1d0 [ 341.814394][ T7364] ? mtree_range_walk+0x654/0x9a0 [ 341.819649][ T7364] __handle_mm_fault+0xfb4/0x40b0 [ 341.824762][ T7364] ? vm_iomap_memory+0x170/0x170 [ 341.830055][ T7364] ? mas_walk+0x422/0x7c0 [ 341.834625][ T7364] ? lock_mm_and_find_vma+0x780/0x780 [ 341.840058][ T7364] ? do_user_addr_fault+0x602/0xfe0 [ 341.845496][ T7364] handle_mm_fault+0x47a/0xa00 [ 341.850425][ T7364] do_user_addr_fault+0x2e7/0xfe0 [ 341.855568][ T7364] ? rcu_is_watching+0x12/0xb0 [ 341.860377][ T7364] exc_page_fault+0x5c/0xd0 [ 341.864920][ T7364] asm_exc_page_fault+0x26/0x30 [ 341.870078][ T7364] RIP: 0033:0x7f2369428673 [ 341.874647][ T7364] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 341.895168][ T7364] RSP: 002b:00007f236a21a520 EFLAGS: 00010206 [ 341.901458][ T7364] RAX: 000000000000c000 RBX: 00007f236a21a5c0 RCX: 00007f235fbff000 [ 341.909916][ T7364] RDX: 00007f236a21a760 RSI: 0000000000000001 RDI: 00007f236a21a660 [ 341.918201][ T7364] RBP: 00000000000000fa R08: 0000000000000007 R09: 0000000000000037 20:02:52 executing program 1: fsopen(0x0, 0x0) 20:02:52 executing program 0: socket$alg(0x26, 0x5, 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[], 0x208e24b) socket$netlink(0x10, 0x3, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) (async) r5 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES8=r7], 0x24}}, 0x0) (async, rerun: 64) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) (rerun: 64) syz_usb_ep_write(r8, 0x0, 0x0, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = dup(r10) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14) sendmsg$ETHTOOL_MSG_COALESCE_GET(r11, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4040120}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xfc, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xf75d7f721e6dfead}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x4}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) (async) syz_usb_disconnect(r8) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r8, @ANYRES16=r4, @ANYBLOB="ff830500000000000000", @ANYRES32=r5], 0x4}}, 0x80) (async) sendfile(r3, r2, 0x0, 0x100000002) [ 341.926288][ T7364] R10: 000000000000004c R11: 00007f236a21a5c0 R12: 0000000000000001 [ 341.934285][ T7364] R13: 00007f23694ea340 R14: 0000000000000005 R15: 00007f236a21a660 [ 341.942475][ T7364] [ 341.962725][ T7364] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 341.978042][ T7364] loop4: detected capacity change from 0 to 512 [ 342.035850][ T7364] EXT4-fs: Invalid want_extra_isize 5 20:02:52 executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x8050, &(0x7f00000001c0)={[{@sb={'sb', 0x3d, 0x7fffffff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5}}, {@lazytime}, {@norecovery}, {@journal_dev={'journal_dev', 0x3d, 0x4d40}}, {@usrquota}, {@jqfmt_vfsv1}, {@jqfmt_vfsv1}, {@resgid, 0x32}], [{@dont_hash}, {@permit_directio}]}, 0x1, 0x4f5, &(0x7f0000000a40)="$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") (fail_nth: 31) 20:02:52 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0x1f5ce, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) 20:02:52 executing program 3: r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='sourle', &(0x7f0000000080)='%\xb9\xf6\x822\xcc0{\xc7:', 0x0) 20:02:52 executing program 1: fsopen(0x0, 0x0) 20:02:52 executing program 5: ioctl$IOMMU_VFIO_CHECK_EXTENSION(0xffffffffffffffff, 0x3b65, 0xa) r0 = fsmount(0xffffffffffffffff, 0x0, 0xf2) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$tcp_mem(r1, &(0x7f00000001c0)={0x800, 0x20, 0x0, 0x20, 0x5}, 0x48) socket(0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000013000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000040)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f000f011c268ee0", 0x3e}], 0x1, 0x0, 0x0, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0xfe, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000002c0)={[{@huge_always}]}) chdir(&(0x7f0000000140)='./file0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ftruncate(r4, 0xc17a) r5 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$bt_BT_SECURITY(r5, 0x111, 0x4, 0x0, 0x20000000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000026c0)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000140)={0xad6}) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x1fe, 0x0, 0x6000, 0x2000, &(0x7f000001a000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x2004c7], 0x0, 0xe02}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 20:02:52 executing program 1: fsopen(&(0x7f0000000040)='afs\x00', 0x0) (fail_nth: 1) 20:02:52 executing program 3: r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='souroe', &(0x7f0000000080)='%\xb9\xf6\x822\xcc0{\xc7:', 0x0) 20:02:52 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0x1f5cf, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) [ 342.179816][ T27] audit: type=1804 audit(1689364972.899:38): pid=7394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3378998973/syzkaller.BzNXkN/141/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 20:02:53 executing program 1: fsopen(&(0x7f0000000040)='afs\x00', 0x0) [ 342.253596][ T7409] FAULT_INJECTION: forcing a failure. [ 342.253596][ T7409] name fail_page_alloc, interval 1, probability 0, space 0, times 0 20:02:53 executing program 3: r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='sourpe', &(0x7f0000000080)='%\xb9\xf6\x822\xcc0{\xc7:', 0x0) 20:02:53 executing program 0: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0x1f5ce, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) [ 342.344707][ T7409] CPU: 0 PID: 7409 Comm: syz-executor.4 Not tainted 6.5.0-rc1-next-20230714-syzkaller #0 [ 342.355228][ T7409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 342.365768][ T7409] Call Trace: [ 342.369178][ T7409] [ 342.372334][ T7409] dump_stack_lvl+0x125/0x1b0 [ 342.377521][ T7409] should_fail_ex+0x496/0x5b0 [ 342.382544][ T7409] __should_fail_alloc_page+0xe7/0x130 [ 342.388268][ T7409] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 342.394715][ T7409] ? rcu_is_watching+0x12/0xb0 [ 342.399701][ T7409] __alloc_pages+0x14e/0x4a0 [ 342.404468][ T7409] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 342.411323][ T7409] ? lock_sync+0x190/0x190 [ 342.415880][ T7409] __folio_alloc+0x16/0x40 [ 342.420489][ T7409] vma_alloc_folio+0x156/0x890 [ 342.425521][ T7409] ? policy_nodemask+0x1d0/0x1d0 [ 342.431145][ T7409] ? mtree_range_walk+0x654/0x9a0 [ 342.436362][ T7409] __handle_mm_fault+0xfb4/0x40b0 [ 342.441687][ T7409] ? vm_iomap_memory+0x170/0x170 [ 342.446913][ T7409] ? mas_walk+0x422/0x7c0 [ 342.451563][ T7409] ? lock_mm_and_find_vma+0x780/0x780 [ 342.457022][ T7409] ? do_user_addr_fault+0x602/0xfe0 [ 342.462264][ T7409] handle_mm_fault+0x47a/0xa00 [ 342.467171][ T7409] do_user_addr_fault+0x2e7/0xfe0 [ 342.474666][ T7409] ? rcu_is_watching+0x12/0xb0 [ 342.479504][ T7409] exc_page_fault+0x5c/0xd0 [ 342.484065][ T7409] asm_exc_page_fault+0x26/0x30 [ 342.488984][ T7409] RIP: 0033:0x7f2369428673 [ 342.493638][ T7409] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 342.514186][ T7409] RSP: 002b:00007f236a21a520 EFLAGS: 00010206 [ 342.520329][ T7409] RAX: 000000000000c000 RBX: 00007f236a21a5c0 RCX: 00007f235fbff000 [ 342.528431][ T7409] RDX: 00007f236a21a760 RSI: 0000000000000001 RDI: 00007f236a21a660 [ 342.536477][ T7409] RBP: 00000000000000fa R08: 0000000000000007 R09: 0000000000000037 20:02:53 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0x1f5d0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) [ 342.544485][ T7409] R10: 000000000000004c R11: 00007f236a21a5c0 R12: 0000000000000001 [ 342.552487][ T7409] R13: 00007f23694ea340 R14: 0000000000000005 R15: 00007f236a21a660 [ 342.560666][ T7409] [ 342.574011][ T7409] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 342.624380][ T7409] loop4: detected capacity change from 0 to 512 [ 342.642494][ T7409] EXT4-fs: Invalid want_extra_isize 5 20:02:53 executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x8050, &(0x7f00000001c0)={[{@sb={'sb', 0x3d, 0x7fffffff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5}}, {@lazytime}, {@norecovery}, {@journal_dev={'journal_dev', 0x3d, 0x4d40}}, {@usrquota}, {@jqfmt_vfsv1}, {@jqfmt_vfsv1}, {@resgid, 0x32}], [{@dont_hash}, {@permit_directio}]}, 0x1, 0x4f5, &(0x7f0000000a40)="$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") (fail_nth: 32) 20:02:53 executing program 1: fsopen(&(0x7f0000000040)='afs\x00', 0x2) 20:02:53 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='veno\x00', 0x5) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000003d80)={0x50, 0x0, 0x0, {0x7, 0x26, 0x0, 0x6400, 0x80, 0x1, 0x2, 0x6}}, 0x50) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @private=0xa010101}, 0x10) sendmmsg$inet(r0, &(0x7f0000003d00)=[{{0x0, 0x0, &(0x7f0000003b00)=[{0x0}, {&(0x7f0000002a80)="df", 0x1}], 0x2}}], 0x1, 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000002000000}, 0x700) write$binfmt_elf64(r0, &(0x7f0000001740)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x8, 0x8, 0x7, 0x8000, 0x3, 0x6, 0x4, 0xe8, 0x40, 0x1ac, 0x4, 0x1c00, 0x38, 0x1, 0x0, 0x1, 0x5}, [{0x60000000, 0x9, 0x2, 0x8000, 0x10000, 0x3, 0x2, 0x1}, {0x6474e551, 0xffffffff, 0x5, 0xfffffffffffffffd, 0x9, 0x6, 0x1, 0x80000001}], "db5ccf0f4098f562da04b8bdbacc4742", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xac0) 20:02:53 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0x1f5d1, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) 20:02:53 executing program 3: r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='sourse', &(0x7f0000000080)='%\xb9\xf6\x822\xcc0{\xc7:', 0x0) 20:02:53 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0x1f5d2, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) 20:02:53 executing program 3: r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='sourte', &(0x7f0000000080)='%\xb9\xf6\x822\xcc0{\xc7:', 0x0) 20:02:53 executing program 1: fsopen(&(0x7f0000000040)='afs\x00', 0x3) [ 342.787677][ T7434] FAULT_INJECTION: forcing a failure. [ 342.787677][ T7434] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 342.834877][ T7434] CPU: 0 PID: 7434 Comm: syz-executor.4 Not tainted 6.5.0-rc1-next-20230714-syzkaller #0 [ 342.844779][ T7434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 342.855276][ T7434] Call Trace: [ 342.858770][ T7434] [ 342.861742][ T7434] dump_stack_lvl+0x125/0x1b0 [ 342.866499][ T7434] should_fail_ex+0x496/0x5b0 [ 342.871260][ T7434] __should_fail_alloc_page+0xe7/0x130 [ 342.876798][ T7434] prepare_alloc_pages.constprop.0+0x16f/0x550 20:02:53 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_ep_write(r0, 0x0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_mount_image$ntfs3(&(0x7f0000000100), &(0x7f000001f1c0)='./file0\x00', 0x1100000, &(0x7f0000000180)=ANY=[@ANYBLOB='showmeta,umask=00000000000000000000001,force,uid=', @ANYRESOCT=0x0, @ANYBLOB="ed97a8b18d3c746437c644e50535e2a44a2e92e0a0651b37fe7b230be9e73b64e5e083ab6ce4deb1a0c12e43e38051b7491562825926808ebdbb56cf3b674f571c9008b7c46e2a814f09d4be5b7609c2ad9372dca72b46e566359e6ba0f5c84b04d00efed14aa9e1dd7e4c"], 0x1, 0x1f1c0, &(0x7f000003e3c0)="$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