0, 0x0}, 0x80) 19:19:02 executing program 0: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_qrtr_TIOCINQ(r0, 0x5452, &(0x7f0000000080)) 19:19:02 executing program 2: syz_genetlink_get_family_id$devlink(0xfffffffffffffffd, 0xffffffffffffffff) 19:19:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 19:19:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014002b8008000100", @ANYRES32, @ANYBLOB="08000880", @ANYRES32, @ANYBLOB="08001b"], 0x3c}}, 0x0) 19:19:02 executing program 4: syz_emit_ethernet(0x36, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @remote}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:19:02 executing program 2: syz_emit_ethernet(0xe, &(0x7f0000000180)={@multicast, @empty, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "e45f4f", 0x2c, 0x6, 0x0, @local, @dev, {[], @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb}}}}}}}}}}}, 0x0) [ 538.797582][T11486] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.3'. 19:19:02 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000200)={@broadcast, @remote, @void, {@ipv4={0x8035, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @loopback}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:19:02 executing program 1: syz_emit_ethernet(0x46, &(0x7f00000005c0)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "86a9f6", 0x10, 0x3c, 0x0, @empty, @mcast2, {[@srh], @ndisc_rs}}}}}, 0x0) 19:19:02 executing program 0: syz_emit_ethernet(0x46, &(0x7f00000001c0)={@multicast, @multicast, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "9f157c", 0x10, 0x2f, 0x0, @private1, @local, {[], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "4f04bd", 0x0, "9f36cb"}}}}}}}, 0x0) 19:19:02 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000001800)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) [ 538.929106][T11500] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 19:19:02 executing program 4: syz_emit_ethernet(0xe, &(0x7f0000000200)={@broadcast, @remote, @void, {@ipv4={0x8100, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @loopback}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:19:02 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12011003000000086d0411c24000010203010902240001010000000904f2ffff020100000921000000012200000905"], &(0x7f0000000280)={0x0, 0x0, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}}) 19:19:02 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x6000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 19:19:02 executing program 0: syz_emit_ethernet(0x3e, &(0x7f00000005c0)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "86a9f6", 0x8, 0x3a, 0x0, @empty, @mcast2={0xff, 0x3}, {[], @ndisc_rs}}}}}, 0x0) 19:19:03 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getrlimit(0x6, &(0x7f0000000300)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001780), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = fcntl$getown(0xffffffffffffffff, 0x9) sched_setaffinity(r4, 0x8, &(0x7f0000000280)=0x1) r5 = ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) socket(0x9, 0x80000, 0x800) socket$inet6_udplite(0xa, 0x2, 0x88) r6 = socket$inet6(0xa, 0x3, 0x6) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000440)={r8, 0x1, 0x6}, 0x10) ioctl$sock_inet6_SIOCADDRT(r6, 0x89a0, &(0x7f00000001c0)={@mcast1={0xff, 0x0}, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8}) 19:19:03 executing program 5: syz_emit_ethernet(0x46, &(0x7f00000001c0)={@local, @multicast, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "9f157c", 0x10, 0x21, 0x0, @private1, @local, {[], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "4f04bd", 0x0, "9f36cb"}}}}}}}, 0x0) 19:19:03 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000002c0)={0x78b7f97e4509f033, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000200)='O'}) [ 539.139108][T11515] binder_alloc: binder_alloc_mmap_handler: 11513 20ffc000-20fff000 already mapped failed -16 19:19:03 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private0}}, {{@in=@broadcast}, 0x0, @in6=@empty}}, 0xe8) 19:19:03 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000002e00), 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, 0x0, 0x0) 19:19:03 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x6000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) [ 539.203433][T11524] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 539.206682][T11523] binder: 11518:11523 ioctl c018620c 200002c0 returned -22 19:19:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x14}, 0x14}}, 0x0) [ 539.248870][ T5142] Bluetooth: hci3: command 0x0406 tx timeout [ 539.248943][ T5138] Bluetooth: hci0: command 0x0406 tx timeout [ 539.256269][ T5132] Bluetooth: hci1: command 0x0406 tx timeout [ 539.261849][ T5124] Bluetooth: hci4: command 0x0406 tx timeout [ 539.267118][ T5129] Bluetooth: hci5: command 0x0406 tx timeout [ 539.274291][ T5133] Bluetooth: hci2: command 0x0406 tx timeout 19:19:03 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "1e2f98", 0x14, 0x6, 0x0, @private2, @mcast1, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 19:19:03 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$SO_COOKIE(r0, 0x1, 0x39, 0x0, &(0x7f0000000700)) [ 539.386168][ T5128] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 539.403216][T11529] binder_alloc: binder_alloc_mmap_handler: 11526 20ffc000-20fff000 already mapped failed -16 [ 539.579499][ T5611] udevd[5611]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 539.636113][ T5128] usb 4-1: Using ep0 maxpacket: 8 [ 539.836324][ T5128] usb 4-1: config 1 has an invalid interface number: 242 but max is 0 [ 539.850688][ T5128] usb 4-1: config 1 has no interface number 0 [ 539.857169][ T5128] usb 4-1: too many endpoints for config 1 interface 242 altsetting 255: 255, using maximum allowed: 30 [ 539.868652][ T5128] usb 4-1: config 1 interface 242 altsetting 255 has an invalid endpoint with address 0x0, skipping [ 539.879653][ T5128] usb 4-1: config 1 interface 242 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 539.893248][ T5128] usb 4-1: config 1 interface 242 has no altsetting 0 [ 540.056277][ T5128] usb 4-1: New USB device found, idVendor=046d, idProduct=c211, bcdDevice= 0.40 [ 540.065486][ T5128] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.074028][ T5128] usb 4-1: Product: syz [ 540.078414][ T5128] usb 4-1: Manufacturer: syz [ 540.083114][ T5128] usb 4-1: SerialNumber: syz [ 540.333617][ T5188] usb 4-1: USB disconnect, device number 2 19:19:04 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x2) write$evdev(r0, &(0x7f000004d000), 0x30452e29) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000000)=""/173) 19:19:04 executing program 0: syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @empty, @void, {@ipv4={0x800, @generic={{0x7, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @multicast1, {[@generic={0x86, 0x8, "18e96a4c90e2"}]}}}}}}, 0x0) 19:19:04 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x6000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 19:19:04 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x890d, 0x0) 19:19:04 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, 0x0) 19:19:04 executing program 4: syz_emit_ethernet(0x3e, &(0x7f00000005c0)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "86a9f6", 0x8, 0x3b, 0x0, @empty, @mcast2, {[], @ndisc_rs}}}}}, 0x0) 19:19:04 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x6049, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x20, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) 19:19:04 executing program 0: r0 = socket$inet(0x2, 0x2, 0x1) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, 0x0, &(0x7f0000000080)) 19:19:04 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r0, 0x0, 0x0) [ 540.894623][T11545] binder_alloc: binder_alloc_mmap_handler: 11542 20ffc000-20fff000 already mapped failed -16 19:19:04 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet6(r0, &(0x7f0000000e00)={&(0x7f00000001c0)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000dc0)=[@flowinfo={{0x14, 0x29, 0xb, 0xdcc}}], 0x18}, 0x0) 19:19:04 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x6000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 19:19:04 executing program 2: syz_emit_ethernet(0x138, &(0x7f00000005c0)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "86a9f6", 0x102, 0x3a, 0x0, @empty, @mcast2, {[@srh={0x0, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@rand_addr=' \x01\x00']}], @ndisc_rs={0x85, 0x0, 0x0, '\x00', [{0x0, 0xd, "746d3284757bb00aada8ed23b24d1fd8b09fdaae97fc25805540973343a0ae41b5ba3ccd51a97a8b634e3f33d63ffb4c8a0a539e31b87deb29d998114090b622940b6c732ac557f575cb6a6f1a974ccc689f0d436c8e0de59c2af8986f50ee47a123eb518900176764b2"}, {0x0, 0xe, "8fba818c0364fedcb3885902be7948735d2178780adc798e3e689590a5982718f03033bfdd66c165fb4c72f7f8d81eea735c36ccdd4d239e03035f28d11b51fc8c9993968829439adb7d0b2e82a9c189bba28668f7ae3585e9839101b9987a6543c54ec553349736c4396e6e4628f8a4bb404e8e"}]}}}}}}, 0x0) [ 541.123790][T11561] binder_alloc: binder_alloc_mmap_handler: 11559 20ffc000-20fff000 already mapped failed -16 [ 541.296461][T11255] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 541.696290][T11255] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 541.710813][T11255] usb 5-1: New USB device found, idVendor=17ef, idProduct=6049, bcdDevice= 0.00 [ 541.720105][T11255] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.733386][T11255] usb 5-1: config 0 descriptor?? [ 542.508951][T11255] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 542.536377][T11255] usb 5-1: USB disconnect, device number 2 19:19:07 executing program 5: syz_emit_ethernet(0xa2, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd60e45f4f002c0600fe8000000000000000000000aafe8000000000000000000000000065"], 0x0) 19:19:07 executing program 0: syz_emit_ethernet(0x3e, &(0x7f0000000200)={@multicast, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "88a576", 0x8, 0x0, 0x0, @remote, @remote, {[@routing={0x0, 0x0, 0x1}]}}}}}, 0x0) 19:19:07 executing program 3: syz_emit_ethernet(0x32, &(0x7f0000000040)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @private=0xa0100ff, {[@timestamp_prespec={0x44, 0x4, 0x13}, @generic={0x0, 0x2}]}}, @info_request}}}}, 0x0) 19:19:07 executing program 2: syz_emit_ethernet(0x3e, &(0x7f00000005c0)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "86a9f6", 0x8, 0x2c, 0x0, @empty, @mcast2, {[], @ndisc_rs}}}}}, 0x0) 19:19:07 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$inet(r0, &(0x7f00000028c0)={&(0x7f0000001040)={0x2, 0x0, @local}, 0x10, &(0x7f00000027c0)=[{&(0x7f00000024c0)="1f", 0x1}], 0x1}, 0x0) 19:19:07 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, 0x0, &(0x7f0000000400)) 19:19:07 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(0x0, 0x0, &(0x7f0000000040)={0x0, 0x3938700}, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) lseek(r0, 0x0, 0x0) 19:19:07 executing program 4: syz_emit_ethernet(0x32, &(0x7f0000000040)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @private=0xa0100ff, {[@timestamp_prespec={0x44, 0x4, 0x13}, @generic={0x89, 0x3, "01"}]}}, @info_request}}}}, 0x0) 19:19:07 executing program 2: syz_emit_ethernet(0x138, &(0x7f00000005c0)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "86a9f6", 0x2, 0x3c, 0x0, @empty, @mcast2, {[@srh={0x0, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@rand_addr=' \x01\x00']}], @ndisc_rs={0x85, 0x0, 0x0, '\x00', [{0x0, 0xd, "746d3284757bb00aada8ed23b24d1fd8b09fdaae97fc25805540973343a0ae41b5ba3ccd51a97a8b634e3f33d63ffb4c8a0a539e31b87deb29d998114090b622940b6c732ac557f575cb6a6f1a974ccc689f0d436c8e0de59c2af8986f50ee47a123eb518900176764b2"}, {0x0, 0xe, "8fba818c0364fedcb3885902be7948735d2178780adc798e3e689590a5982718f03033bfdd66c165fb4c72f7f8d81eea735c36ccdd4d239e03035f28d11b51fc8c9993968829439adb7d0b2e82a9c189bba28668f7ae3585e9839101b9987a6543c54ec553349736c4396e6e4628f8a4bb404e8e"}]}}}}}}, 0x0) 19:19:07 executing program 3: socket$inet(0x2, 0x1, 0x4000000) 19:19:07 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$inet(r0, &(0x7f00000028c0)={0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f00000024c0)="1f", 0x1}, {&(0x7f0000002540)='$', 0x1}, {&(0x7f00000025c0)="95", 0x1}, {&(0x7f0000002600)=',', 0x1}], 0x4, &(0x7f0000002840)=[@ip_tos_int={{0x14}}, @ip_tos_int={{0x14}}], 0x30}, 0x0) 19:19:07 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$inet(r0, &(0x7f00000028c0)={&(0x7f0000001040)={0x2, 0x0, @local}, 0x10, &(0x7f00000027c0)=[{&(0x7f00000024c0)="1f", 0x1}], 0x1, &(0x7f0000002840)=[@ip_tos_int={{0x14}}, @ip_tos_int={{0x14}}], 0x30}, 0x0) 19:19:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x14}, 0x14}}, 0x44) 19:19:07 executing program 3: syz_emit_ethernet(0x2e, &(0x7f0000000040)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @private=0xa0100ff, {[@generic={0x89, 0x2}]}}, @info_request}}}}, 0x0) 19:19:07 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f00000009c0)=0x4, 0x4) 19:19:07 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xd, 0x0, 0x0, 0x0, 0xc, 0x1}, 0x48) 19:19:07 executing program 2: syz_emit_ethernet(0x3e, &(0x7f0000000140)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "86a9f6", 0x8, 0x3a, 0x0, @empty, @mcast2, {[], @echo_request}}}}}, 0x0) 19:19:07 executing program 5: syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @empty, @void, {@ipv4={0x800, @generic={{0x7, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @multicast1, {[@generic={0x0, 0x5, "18e96a"}]}}}}}}, 0x0) 19:19:08 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc211, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x19, &(0x7f0000000380)={0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x0, 0x0, 0x0, [0x0, 0x0]}]}, 0x4, [{0x2, &(0x7f00000000c0)=@string={0x2}}, {0x4, &(0x7f0000000140)=@string={0x4, 0x3, "7f84"}}, {0x4, &(0x7f0000000200)=@string={0x4, 0x3, "c74d"}}, {0x0, 0x0}]}) 19:19:08 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x1b, 0x0, 0x0, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x48) 19:19:08 executing program 1: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000000086d0411c24000010203010902"], 0x0) 19:19:08 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@alu={0x4}]}, &(0x7f0000000200)='GPL\x00', 0x1, 0xe7, &(0x7f0000000240)=""/231, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:19:08 executing program 2: sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000001700)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f00000002c0)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180), &(0x7f0000001640)=ANY=[], 0x2000, 0x0) 19:19:08 executing program 5: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc211, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x32, &(0x7f0000000080)=ANY=[@ANYBLOB="050f320004fb"]}) 19:19:08 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000001e80)=[{{&(0x7f0000001240)={0xa, 0x4e21, 0x0, @local, 0x8}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000000)="149b6cb940570351f6bc8efe953927ddc3237119a3c0c0bb6dacb1db825db5c8f6b83d6f9f8ec74c259bba92e8925b0d75be8cbdd8591131f29a268524dc53639fba4fba836b7cbe017def9558e3dc88003b0f70dea27381c0e3475cce67d0ae6080cfd7c42cf88b9ccdd771e75dd6b575a3f7a3c24544a148b5789dea8c551e398bac3b2f86d64e02e5dbacbfbfa10ef18b973b73e838efadc7526907cab290a37bb280a2236bb84ea55a508596c0d7136c97670911dd4d88fc492f1210a936e202f71ae37d0863c0a03cd566ff88a2ccd53ac47cf3f1b478381d8cca9cdb6c77af9bcf70f1670ba93f1cad", 0xec}, {&(0x7f0000000100)="17e719581a4434f58e5456a61b6760130caf74211ee1eaf3", 0x18}, {&(0x7f0000000140)="bf8355f9bb397fc067fa1748507947cec762618111b2ad5d4373d787d778528de3e30b56c53a8e6a2eb28fc38dc20086a75f9d58780780b36e2b28857e21633c171cfc98b06dc9b3335232e5fef8eaae0be10a0ee7e47569f5e07be262c8e9fc71504d75e27aab01a4a923a376910c181447acc6337973d8896b4cb69b5bdd29067882839e5ca95f73472d4e08448f2072072f88e4f2d26c90f645df0166012a2264e78037b05344f2efe5702bb4797cd830d312b8b79dee90cded7cb7ac94c923b4", 0xc2}, {&(0x7f0000000240)="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", 0x923}], 0x4}}, {{&(0x7f0000001d80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c, 0x0}}], 0x3, 0x7c30cfb1f40c546) 19:19:08 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 19:19:08 executing program 2: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback, @private=0xe0000001}, @address_request}}}}, 0x0) 19:19:08 executing program 4: syz_emit_ethernet(0x46, &(0x7f00000017c0)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "86a9f6", 0x10, 0x2c, 0x0, @empty, @mcast2, {[@routing={0x87, 0x0, 0x0, 0x5}], @ndisc_rs}}}}}, 0x0) 19:19:08 executing program 3: syz_emit_ethernet(0x62, &(0x7f0000000180)={@multicast, @empty, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "e45f4f", 0x2c, 0x6, 0x0, @local, @dev, {[], @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb}}}}}}}}}}}, 0x0) 19:19:08 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) read$hidraw(r0, &(0x7f0000000080)=""/111, 0x6f) [ 544.826196][ T5188] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 544.850826][ T5128] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 544.896070][T11256] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 545.066067][ T5188] usb 2-1: Using ep0 maxpacket: 8 [ 545.136089][ T5128] usb 6-1: Using ep0 maxpacket: 8 [ 545.136193][T11256] usb 1-1: Using ep0 maxpacket: 8 [ 545.186472][ T5188] usb 2-1: unable to get BOS descriptor or descriptor too short [ 545.247846][ T5188] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 545.259760][ T5188] usb 2-1: can't read configurations, error -71 [ 545.346247][T11256] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 545.366339][ T5128] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 545.396218][T11256] usb 1-1: language id specifier not provided by device, defaulting to English [ 545.546377][ T5128] usb 6-1: New USB device found, idVendor=046d, idProduct=c211, bcdDevice= 0.40 [ 545.555461][ T5128] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.563671][ T5128] usb 6-1: Product: syz [ 545.574701][ T5128] usb 6-1: Manufacturer: syz [ 545.579537][ T5128] usb 6-1: SerialNumber: syz [ 545.629327][ T5128] usbhid 6-1:1.0: couldn't find an input interrupt endpoint [ 545.716344][T11256] usb 1-1: New USB device found, idVendor=046d, idProduct=c211, bcdDevice= 0.40 [ 545.725432][T11256] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.750752][T11256] usb 1-1: Product: ䷇ [ 545.754984][T11256] usb 1-1: Manufacturer: 葿 [ 545.797868][T11256] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 545.832599][T11256] usb 6-1: USB disconnect, device number 2 [ 546.003732][ T5128] usb 1-1: USB disconnect, device number 2 19:19:10 executing program 0: syz_emit_ethernet(0x46, &(0x7f0000001a40)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "86a9f6", 0x10, 0x3a, 0x0, @empty, @mcast2, {[], @ndisc_ra}}}}}, 0x0) 19:19:10 executing program 2: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback, @private}, @address_request}}}}, 0x0) 19:19:10 executing program 3: syz_open_dev$loop(&(0x7f0000000c40), 0x0, 0x0) 19:19:10 executing program 1: syz_open_dev$usbmon(&(0x7f0000000000), 0x3f, 0x0) 19:19:10 executing program 4: prlimit64(0xffffffffffffffff, 0x1, &(0x7f00000009c0)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f00000002c0)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180), &(0x7f0000001640)=ANY=[], 0x2000, 0x0) 19:19:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x80) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 19:19:10 executing program 2: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 19:19:10 executing program 3: syz_emit_ethernet(0x22, &(0x7f0000000080), 0x0) 19:19:10 executing program 5: syz_emit_ethernet(0x186, &(0x7f00000005c0)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "86a9f6", 0x150, 0x3a, 0x0, @empty, @mcast2, {[@srh={0x0, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@rand_addr=' \x01\x00']}, @routing={0x0, 0xa, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @private2, @private1, @empty]}], @ndisc_rs={0x85, 0x0, 0x0, '\x00', [{0x0, 0xb, "746d3284757bb00aada8ed23b24d1fd8b09fdaae97fc25805540973343a0ae41b5ba3ccd51a97a8b634e3f33d63ffb4c8a0a539e31b87deb29d998114090b622940b6c732ac557f575cb6a6f1a974ccc689f0d436c8e0de59c2af8986f"}, {0x0, 0xe, "8fba818c0364fedcb3885902be7948735d2178780adc798e3e689590a5982718f03033bfdd66c165fb4c72f7f8d81eea735c36ccdd4d239e03035f28d11b51fc8c9993968829439adb7d0b2e82a9c189bba28668f7ae3585e9839101b9987a6543c54ec553349736c4396e6e4628f8a4bb404e8e80"}, {}]}}}}}}, 0x0) 19:19:10 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, @long}, 0x14, &(0x7f0000000180)={0x0}}, 0x0) 19:19:10 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000440)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "86a9f6", 0x30, 0x3a, 0x0, @empty, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "2811d2", 0x0, 0x21, 0x0, @empty, @private2}}}}}}}, 0x0) 19:19:10 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) fgetxattr(r1, &(0x7f0000000140)=@random={'security.', '\x00'}, &(0x7f0000000380)=""/4096, 0x1000) 19:19:10 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 19:19:10 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0020}]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fgetxattr(r0, &(0x7f0000000040)=@known='system.sockprotoname\x00', 0x0, 0x0) 19:19:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f000000fb40)={0x0, 0x0, &(0x7f000000fa40)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f000000fb00)=[@rights={{0x10}}], 0x10}, 0x0) 19:19:10 executing program 1: openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={0x0, 0x16}, 0x18) 19:19:10 executing program 0: r0 = memfd_secret(0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000bc0), r0) 19:19:10 executing program 3: io_setup(0x4, &(0x7f0000001a40)=0x0) io_pgetevents(r0, 0xdf46, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000180)={&(0x7f0000000140), 0x8}) 19:19:10 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, 0x48) 19:19:10 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x40240}, 0x18) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) 19:19:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c}, 0x1c}}, 0x0) 19:19:10 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x890b, 0x0) 19:19:10 executing program 5: socketpair(0x28, 0x0, 0x5, &(0x7f00000003c0)) 19:19:10 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) 19:19:10 executing program 1: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, 0x0) 19:19:10 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f0000000940), 0x4002, 0x0) 19:19:10 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8918, 0x0) 19:19:10 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x7, 0x0, 0x0, 0x0, 0x240}, 0x48) 19:19:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=@ipv4_delroute={0x1c, 0x19, 0x1}, 0x1c}}, 0x0) 19:19:10 executing program 0: io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={[0x6]}, 0x8}) 19:19:10 executing program 1: syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000005000)='./cgroup/syz1\x00', 0x200002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000050c0), 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000005580)='./cgroup/syz0\x00', 0x200002, 0x0) 19:19:10 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0x80001, 0x0) 19:19:11 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan3\x00'}) 19:19:11 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x0, 0x0, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}}, 0x0) 19:19:11 executing program 0: socket$inet6(0xa, 0x805, 0x0) 19:19:11 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40044, 0x0) 19:19:11 executing program 1: io_setup(0x4, &(0x7f0000001a40)=0x0) io_pgetevents(r0, 0xdf46, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) 19:19:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) 19:19:11 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) 19:19:11 executing program 0: getresuid(&(0x7f0000001700), &(0x7f0000001740), &(0x7f0000001780)) 19:19:11 executing program 3: syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) 19:19:11 executing program 5: syz_io_uring_setup(0x2a95, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) lsetxattr$security_ima(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), &(0x7f0000000a40)=@v1={0x2, "77e44532e4"}, 0x6, 0x1) 19:19:11 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x14, 0x3, 0x2, 0x101}, 0x14}}, 0x0) 19:19:11 executing program 1: io_setup(0x4, &(0x7f0000001a40)=0x0) io_pgetevents(r0, 0xdf46, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) 19:19:11 executing program 2: bpf$OBJ_GET_MAP(0x7, &(0x7f0000002a00)={&(0x7f00000029c0)='./file0\x00'}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000002a80)={&(0x7f0000002a40)='./file0\x00'}, 0x10) 19:19:11 executing program 0: sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) 19:19:11 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r0, 0x3, &(0x7f0000000000)={0x0, 0x0, 0xfffffeff}) 19:19:11 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x131402, 0x0) 19:19:11 executing program 3: io_setup(0x4, &(0x7f0000001a40)=0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000180)={&(0x7f0000000140)={[0xffffffffffffffc0]}, 0x8}) 19:19:11 executing program 1: r0 = socket$inet6(0xa, 0x805, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) 19:19:11 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@bloom_filter, 0x48) 19:19:11 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000001040)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000e80)={0x148, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_LEVEL={0x44, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1f}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xd3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_SEC_LEVEL={0x2c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}, @NL802154_ATTR_SEC_LEVEL={0x3c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x5f}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x20}]}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x4a}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_LEVEL={0x2c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x20}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xbf}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}]}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 19:19:11 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r0, 0x3, &(0x7f0000000000)={0x0, 0x0, 0xfffffeff}) 19:19:11 executing program 1: rt_sigsuspend(&(0x7f0000000080), 0x8) 19:19:11 executing program 3: r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000240)='./file0\x00', 0x80000808) 19:19:11 executing program 2: statx(0xffffffffffffffff, &(0x7f00000017c0)='./file0\x00', 0x0, 0x0, 0x0) 19:19:11 executing program 0: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 19:19:11 executing program 5: r0 = syz_io_uring_setup(0x2a95, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) 19:19:11 executing program 3: syz_open_procfs$userns(0x0, &(0x7f0000000080)) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) 19:19:11 executing program 2: r0 = memfd_secret(0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, 0x0, 0x0) 19:19:11 executing program 5: mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000200)={0x7}, 0x20) 19:19:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xb, &(0x7f0000000100)=0x7f, 0x4) 19:19:11 executing program 3: io_setup(0x4, &(0x7f0000001a40)) 19:19:11 executing program 2: mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000200), 0x20) 19:19:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r1, 0x401}, 0x14}}, 0x0) 19:19:12 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x48) 19:19:12 executing program 5: rt_sigsuspend(&(0x7f0000000080)={[0x1b3800000000]}, 0x8) 19:19:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[], 0xd0}}, 0x0) 19:19:12 executing program 2: memfd_secret(0x80000) socket$nl_generic(0x10, 0x3, 0x10) memfd_secret(0x0) 19:19:12 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x12) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 19:19:12 executing program 4: getresuid(&(0x7f0000001700), 0x0, 0x0) 19:19:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x14}, 0x14}}, 0x0) 19:19:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c}, 0x1c}}, 0x0) 19:19:12 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_GET_NODES(r0, 0x0, 0x0) 19:19:12 executing program 0: io_setup(0x4, &(0x7f0000001a40)=0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140), 0x8}) 19:19:12 executing program 2: io_setup(0x4, &(0x7f0000001a40)=0x0) io_cancel(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 19:19:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), r0) 19:19:12 executing program 4: openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x602000, 0x0) 19:19:13 executing program 1: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000bc0), 0x200202, 0x0) 19:19:13 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000002b40)={0x0, 0x2, &(0x7f0000002780)=@raw=[@map_val], &(0x7f00000027c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:19:13 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x5411, 0x0) 19:19:13 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000440)={&(0x7f0000000140), 0xc, &(0x7f0000000400)={0x0}}, 0x0) 19:19:13 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000300)) 19:19:13 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x20, 0x0, 0x2, 0x101, 0x0, 0x0, {0x2}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_MASK={0x4}]}, 0x20}}, 0x0) 19:19:13 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) name_to_handle_at(r0, &(0x7f00000006c0)='./file0\x00', 0x0, 0x0, 0x0) 19:19:13 executing program 3: setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000040), 0xfffffffffffffe9e) 19:19:13 executing program 1: syz_io_uring_setup(0x2a95, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x334}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) 19:19:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000d00)={&(0x7f0000000c40), 0xc, 0x0}, 0x0) 19:19:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=@ipv4_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x2, 0x80, 0x0, 0x0, 0xff}, [@RTA_SPORT={0x6}]}, 0x24}}, 0x0) 19:19:13 executing program 3: io_setup(0x0, &(0x7f0000001a40)) 19:19:13 executing program 0: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) 19:19:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={0x0}}, 0x0) 19:19:13 executing program 4: memfd_secret(0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000bc0), 0xffffffffffffffff) 19:19:13 executing program 1: socketpair(0x28, 0x0, 0x0, &(0x7f00000003c0)) 19:19:13 executing program 5: io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440), 0x8}) 19:19:13 executing program 3: r0 = inotify_init1(0x0) inotify_add_watch(r0, 0x0, 0x80000808) 19:19:13 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x541b, 0x0) 19:19:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r0, &(0x7f00000001c0), &(0x7f0000000200)=0xc) 19:19:13 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 19:19:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000100)=0x7f, 0x4) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000030c0), r0) 19:19:13 executing program 1: statx(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000004b40)) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000005000)='./cgroup/syz1\x00', 0x200002, 0x0) 19:19:13 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) socketpair(0x28, 0x0, 0x5, &(0x7f00000003c0)) 19:19:13 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req={0x10000000, 0x5, 0x34000000}, 0x10) 19:19:13 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000004c0), r0) 19:19:13 executing program 4: syz_io_uring_setup(0x2a95, &(0x7f0000000000)={0x0, 0xb7b0, 0x10}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:19:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x3, &(0x7f0000000140)=""/95, &(0x7f00000001c0)=0x5f) 19:19:13 executing program 1: r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, 0x0) 19:19:13 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000001500), 0x0, 0x0) 19:19:13 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000000040)="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", 0x2000, &(0x7f0000004840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 19:19:13 executing program 2: lsetxattr$security_capability(&(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000340)='./file0/../file0/../file0\x00', 0x0, 0x0, 0x0, 0x0) 19:19:14 executing program 2: io_setup(0x4, &(0x7f0000001a40)=0x0) io_submit(r0, 0x0, 0x0) 19:19:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0xd0}}, 0x0) 19:19:14 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) 19:19:14 executing program 0: syz_io_uring_setup(0x0, &(0x7f00000017c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0) 19:19:14 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c}, 0x1c}}, 0x0) 19:19:14 executing program 5: syz_clone(0x1020200, 0x0, 0x0, 0x0, 0x0, 0x0) 19:19:14 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x0, 0x400}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff4000/0xc000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) 19:19:14 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x890c, 0x0) 19:19:14 executing program 1: sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getresuid(&(0x7f0000001700), &(0x7f0000001740), &(0x7f0000001780)) 19:19:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x0, 0xb272975ec95a21d1}, 0x14}}, 0x0) 19:19:14 executing program 2: syz_genetlink_get_family_id$devlink(&(0x7f0000001f00), 0xffffffffffffffff) 19:19:14 executing program 5: syz_clone(0x4104000, 0x0, 0x0, &(0x7f0000002280), 0x0, &(0x7f0000002300)='l') 19:19:14 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_LK(r0, &(0x7f0000000040)={0x28}, 0x28) 19:19:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x81) 19:19:14 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000009c0), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) 19:19:14 executing program 2: openat$zero(0xffffffffffffff9c, 0x0, 0x400800, 0x0) 19:19:14 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) inotify_rm_watch(r0, 0x0) 19:19:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c00)={0x14}, 0x14}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000001000)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000e00)={0x14}, 0x14}}, 0x0) 19:19:14 executing program 4: openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x13}, 0x18) 19:19:14 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x9) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000180)={0x0}}, 0x0) 19:19:14 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x48) 19:19:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfd, 0x100}, 0xc) 19:19:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c00)={0x14}, 0x14}}, 0x0) 19:19:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002700)={&(0x7f00000026c0)={0x14, 0x0, 0x4}, 0x14}}, 0x0) 19:19:14 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req={0x10000000, 0x5, 0x300}, 0x10) 19:19:14 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0xffffffffffffffff}, 0xc) 19:19:14 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, 0x0) 19:19:14 executing program 3: syz_io_uring_setup(0x2a95, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:19:14 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x1c8c2095, 0x80, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x48) 19:19:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000001000)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000e00)={0x14}, 0x14}}, 0x0) 19:19:14 executing program 4: openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x40000, 0x16, 0x13}, 0x18) rt_sigsuspend(&(0x7f0000000080)={[0x1b3800000000]}, 0x8) r0 = socket$inet6(0xa, 0x805, 0x7) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000001c0)={@private1}, &(0x7f0000000200)=0x14) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x60}}, 0x8000) io_setup(0x4, &(0x7f0000001a40)) 19:19:14 executing program 2: rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xfffffeff}) 19:19:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000005200230c780af5ffaf2e1bcc0a"], 0x18}}, 0x0) 19:19:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000007c0)={0x14, 0x0, 0x20c}, 0x14}}, 0x0) 19:19:14 executing program 3: syz_genetlink_get_family_id$batadv(&(0x7f00000050c0), 0xffffffffffffffff) 19:19:14 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000280), r0) 19:19:14 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8916, 0x0) 19:19:14 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x9) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 19:19:14 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 550.928405][T11914] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 19:19:14 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) 19:19:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=@bridge_getlink={0x20, 0x12, 0x1}, 0x20}}, 0x0) 19:19:14 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x18}, 0xc) 19:19:15 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000e40)={&(0x7f00000009c0)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000d40)=[{&(0x7f0000000a00)="231a6bd7148e4c434be4f186804a450e4c1911082177383fa08f6ca3132d5f09666e", 0x22}, {&(0x7f0000000a40)="cf32825e49f4d5ee81a216dc2c72ad40b99b5efcb1ef656b3143f094d79f78b60a9aefbf4ff3d65f20ebc393ad06e24b", 0x30}, {&(0x7f0000000a80)="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", 0xfa}, {&(0x7f0000000b80)="f80d6b04b4ca6e73f8f0e3c3012ac499909ca2dd942e747baa8406f103adf3820d6592f86d7e265b85b1c62ad74da36cda7b101b606e2f0285f734d0f8da6b6494548f7e7d6efa172d936d80d6756637a11f4bd12a93a5d647eaea39c42668700cecb45c552bffba12d28c2595239fd6fabb2afb76d4fe750c39f4c125b44df84b8d2b611e247bbb5cfd95a74da5f0fc9970cf8e87dff487de99ea279e466532c68f133816dd04a038b360e40fb76d727972", 0xb2}, {&(0x7f0000000c40)="d28bf73aaadf550dc965b476cf7a43f24cc7d5625321638713791747da4c800e7b02901acd8cf569df1e0a1b65bb148cfefa61fb320b5edd13855c75df8057af6ac497f8b8b9c9aafe5eb85b3ff1f70362fb8ec76a454c7fc3c91dff3b5850f63b4bb9b8073cfdd4094b3cd2cf3d314a3841a2dbb4ea748682dec2b58fc3dbec426da7fe9c8df29d848e5c073977c10ac5d96046758c0b70709075fe8414df7153cd1a03f1261b86b9c1513e9c2dd1a464e049b0b299d394e5ce52f0d121335ad395577bbf5aa2f5a59118813076c7e3dd4525c3c5117f5f41ee5aa61605126330c2c8146bdb", 0xe6}], 0x5, &(0x7f0000000e00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}, 0x4004081) 19:19:15 executing program 5: keyctl$search(0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffa) 19:19:15 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0xf4240, &(0x7f0000000080)=@raw=[@cb_func], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0xe6, &(0x7f0000000100)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:19:15 executing program 3: syz_clone(0x60040000, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x0) 19:19:15 executing program 1: io_setup(0x4, &(0x7f0000001a40)=0x0) io_cancel(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 19:19:15 executing program 2: syz_io_uring_setup(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x400}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000001840), &(0x7f0000001880)) 19:19:15 executing program 2: add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "6f9e10beeae6ca073880092663c833db45c780bba2bdd665ed383d361806277d5eaa8e2ce6947849402acc93b9f4d4de67066ad7187032c37824100c80cadba6"}, 0x48, 0xfffffffffffffffc) 19:19:16 executing program 5: keyctl$search(0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffa) 19:19:16 executing program 4: syz_clone3(&(0x7f0000000580)={0x22300400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 19:19:16 executing program 1: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@link_local, @remote, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @rand_addr=0x64010103, @dev}, @payload_named={{{{{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}}, 0x0) 19:19:16 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x5, 0x5cf, 0x80000000, 0x6}, 0x48) 19:19:16 executing program 1: request_key(&(0x7f0000000080)='logon\x00', &(0x7f00000000c0)={'syz', 0x3}, 0xffffffffffffffff, 0x0) 19:19:16 executing program 5: r0 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$search(0xb, r0, 0x0, 0x0, 0x0) 19:19:16 executing program 5: syz_emit_ethernet(0x123, &(0x7f0000000300)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x0, 0x0, 0x115, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @broadcast, {[@generic={0x0, 0x2}, @timestamp_addr={0x44, 0x4}]}}, @echo_reply={0x0, 0x0, 0x0, 0x0, 0x0, "30636b6a4b52f324e6b1fb5792cf9326cbe66cee7df6419099999a17b697272e4c507db32338b621518aae68254fd0217c5522dbf6d62dbf25db1d2e9a5d6173f03b2799be428dc246f631026857bdcaa58742f2e353cb14ddc254f194d5da23eabbf09b312e66ebea29c10ac7c2f085c0040a1fdb59690c221f78980ae33805c0739d78260cce7e16eb60555adb730074a92e1aed55bdc12ae668fd444e8c957a493a4b5ec6db97b8b4231b94236f63d7eea887ef642ebb2722bf2d6cd69926ba458ed316ec0bde792181276fa099b06af4a6b23d06587bc2bc2eefd7867f6a53ec1363d7c339cab0d466ee06e4109143"}}}}}, 0x0) 19:19:16 executing program 0: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@link_local, @remote, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x2800, 0x0, 0x6, 0x0, @rand_addr=0x64010103, @dev}, @payload_named={{{{{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}}, 0x0) 19:19:16 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x5, 0x2, &(0x7f0000000080)=@raw=[@cb_func], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:19:16 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x2, 0x2, &(0x7f0000000080)=@raw=[@cb_func], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:19:16 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1c, 0x0, 0x0, 0x0, 0x4}, 0x48) 19:19:16 executing program 5: syz_clone3(&(0x7f0000000580)={0x3f90a000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 19:19:16 executing program 3: r0 = syz_io_uring_setup(0x3c99, &(0x7f0000000000), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 19:19:16 executing program 1: syz_clone3(&(0x7f0000000580)={0x2d303000, 0x0, 0x0, &(0x7f0000000380), {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 19:19:16 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b66, &(0x7f0000000100)={0x0, 0x0}) 19:19:16 executing program 2: r0 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000080)={0x0, "dc93125d3eee447629ee8269f98a92a85acbda51d0adee211cee8600f5fd6bbe752cdd7bd767318f3bdf448fad8f88a881e39c4258d224f3114bbeffb62ed51d"}, 0x48, r1) 19:19:16 executing program 4: r0 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read(r0, 0x0, 0xfffffffffffffdc0) 19:19:16 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000140)={'fscrypt:', @desc3}, &(0x7f0000000180)={0x0, "ec03214792497c7be4a726e754b3eaaa47cca7cd7b72eb6cfd0022456eeffe2c4a01ed22d6ee66daa103c9ea515d4d4b56ab432a14df56e85b153bb7e192cd6e"}, 0x48, 0xfffffffffffffffd) keyctl$link(0x8, r0, 0xfffffffffffffffb) 19:19:17 executing program 2: add_key$keyring(&(0x7f00000002c0), 0x0, 0x1ffff000, 0x2, 0xfffffffffffffffc) 19:19:17 executing program 0: keyctl$search(0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffa) r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000340)='ceph\x00', &(0x7f0000000380)='-\x00') keyctl$reject(0x13, r0, 0x80000000, 0x0, r1) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$unlink(0x9, r2, 0xfffffffffffffffc) 19:19:17 executing program 4: setreuid(0xffffffffffffffff, 0xee01) openat$hwrng(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) 19:19:17 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "671516fe7545db978ff9022597f3de73250de1b990aade7fd2aa051c78ae2a63e69def00b850f143273c905cc67d0048b79097ff2ca0f9dcebe098e88f7e6d74"}, 0x48, 0xffffffffffffffff) keyctl$search(0x4, r0, 0x0, 0x0, 0x0) 19:19:17 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000400), r0) 19:19:17 executing program 4: syz_emit_ethernet(0x36, &(0x7f0000000180)={@multicast, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x3c, 0x0, @dev, @empty}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:19:17 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1, 0x5cf, 0x100000, 0x6}, 0x48) 19:19:17 executing program 5: add_key$user(&(0x7f0000000440), 0x0, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000540)='user\x00', &(0x7f0000000580)={'syz', 0x3}, 0x0, 0x0) 19:19:17 executing program 0: syz_emit_ethernet(0xea, &(0x7f0000000580)={@multicast, @local, @void, {@ipv4={0x800, @gre={{0x26, 0x4, 0x0, 0x0, 0xdc, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@end, @end, @timestamp_addr={0x44, 0x24, 0x0, 0x1, 0x0, [{@multicast2}, {}, {}, {@loopback}]}, @timestamp_addr={0x44, 0x5c, 0x0, 0x1, 0x0, [{@local}, {@broadcast}, {@multicast2}, {@local}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {@remote}, {@multicast1}, {@private}, {@local}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}}}}}, 0x0) 19:19:17 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x16, 0x2, &(0x7f0000000080)=@raw=[@cb_func], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:19:17 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000180)={@multicast, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x2, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:19:17 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x0, "671516fe7545db978ff9022597f3de732586d49b58aade7fd2aa051c78ae2a63e69defceb850f143273c905cc67d0048b79097ff2ca0f9dcebe098e88f7e6d74"}, 0x48, 0xffffffffffffffff) keyctl$search(0x4, r0, 0x0, 0x0, 0xfffffffffffffffa) 19:19:17 executing program 5: syz_emit_ethernet(0x36, &(0x7f0000000100)={@link_local, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "09ad6b", 0x0, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @dev}}}}}, 0x0) 19:19:17 executing program 1: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x32fcb38d9b8ffc92, 0x0, 0x0}, 0x20) 19:19:17 executing program 3: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0xb000) 19:19:17 executing program 0: syz_emit_ethernet(0x4e, &(0x7f0000000080)={@link_local, @remote, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010103, @dev, {[@ssrr={0x89, 0x3}]}}, @payload_named={{{{{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}}, 0x0) 19:19:17 executing program 5: add_key$keyring(&(0x7f00000002c0), 0x0, 0xf7f88000, 0x2, 0xfffffffffffffffc) 19:19:17 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0xb, 0x2, &(0x7f0000000080)=@raw=[@cb_func], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:19:17 executing program 2: r0 = syz_open_dev$rtc(&(0x7f00000000c0), 0xff, 0x0) pread64(r0, 0x0, 0x0, 0x0) 19:19:17 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x0, "671516fe7545db978ff9022597f3de732586d49b58aade7fd2aa051c78ae2a63e69defceb850f143273c905cc67d0048b79097ff2ca0f9dcebe098e88f7e6d74"}, 0x48, 0xffffffffffffffff) keyctl$search(0x6, r0, 0x0, 0x0, 0xfffffffffffffffa) 19:19:17 executing program 0: syz_emit_ethernet(0x3a, &(0x7f0000000340)={@link_local, @remote, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @rand_addr=0x64010100, {[@timestamp={0x44, 0x4}]}}, @timestamp}}}}, 0x0) 19:19:17 executing program 1: syz_emit_ethernet(0x13e6, &(0x7f00000015c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd6c2c58ae13b00601fe880000000000000000000000000101fe8000000000000000000000000000aa"], 0x0) 19:19:17 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x0, "671516fe7545db978ff9022597f3de732586d49b58aade7fd2aa051c78ae2a63e69defceb850f143273c905cc67d0048b79097ff2ca0f9dcebe098e88f7e6d74"}, 0x48, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r2, 0x0) 19:19:17 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000340)={@link_local, @remote, @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @rand_addr=0x64010100, {[@timestamp={0x44, 0x4, 0xfe}, @timestamp={0x44, 0x4}]}}, @timestamp}}}}, 0x0) 19:19:17 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000080)={@link_local, @remote, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010103, @dev, {[@lsrr={0x83, 0x3, 0xa3}]}}, @payload_named={{{{{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}}, 0x0) 19:19:17 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0xa, 0x2, &(0x7f0000000080)=@raw=[@cb_func], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:19:17 executing program 2: r0 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$search(0xf, r0, 0x0, 0x0, 0x0) 19:19:17 executing program 3: syz_emit_ethernet(0x72, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @udp={{0x7, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@timestamp={0x44, 0x4, 0x20}, @end]}}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "5d14b7f0bd22216ddf7bf18133016418030223b6f1c75d5a", "67a0a9de06ba889015b38020368bd7a33132310214c5a78574e3dc3b2ab3e81a"}}}}}}, 0x0) 19:19:17 executing program 4: syz_emit_ethernet(0x36, &(0x7f0000000180)={@multicast, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @empty=0xe0}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:19:17 executing program 5: r0 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_persistent(0x16, 0xffffffffffffffff, r0) 19:19:17 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x9, 0x5cf, 0x8, 0x6}, 0x48) 19:19:17 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3e8, 0x2, &(0x7f0000000080)=@raw=[@cb_func], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:19:17 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3ea, 0x2, &(0x7f0000000080)=@raw=[@cb_func], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:19:17 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000100)={@link_local, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "09ad6b", 0x8, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @dev}, {[@fragment={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65}]}}}}}, 0x0) 19:19:17 executing program 3: r0 = socket(0xa, 0x5, 0x0) getsockname$netlink(r0, 0x0, &(0x7f0000000080)) 19:19:17 executing program 0: syz_emit_ethernet(0x36, &(0x7f0000000180)={@multicast, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x40000000000001b4}}}}}}, 0x0) 19:19:17 executing program 2: syz_emit_ethernet(0x46, &(0x7f0000000100)={@link_local, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "09ad6b", 0x10, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @dev}, {[@fragment={0x2c}], "ead0cd07b4e94a93"}}}}}, 0x0) 19:19:17 executing program 1: r0 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$search(0xb, r0, 0x0, 0x0, 0x0) 19:19:17 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{}]}) 19:19:17 executing program 4: syz_emit_ethernet(0x36, &(0x7f0000000180)={@multicast, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @empty=0x8}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:19:17 executing program 5: r0 = openat$vcsu(0xffffff9c, &(0x7f0000000300), 0x1, 0x0) write$vhost_msg(r0, 0x0, 0x0) 19:19:17 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x15, 0x2, &(0x7f0000000080)=@raw=[@cb_func], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:19:18 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x20000148, &(0x7f0000000080)=@raw=[@cb_func], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0xe6, &(0x7f0000000100)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:19:18 executing program 5: syz_emit_ethernet(0x56, &(0x7f0000000000)={@link_local, @remote, @void, {@ipv4={0x800, @tipc={{0x8, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010103, @local, {[@cipso={0x86, 0x9, 0xffffffffffffffff, [{0x0, 0x3, '\a'}]}]}}, @payload_named={{{{{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}}, 0x0) 19:19:18 executing program 3: r0 = add_key$keyring(&(0x7f0000000f00), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000180), &(0x7f00000001c0)={0x0, "1a45b219fa6c324de5dfef43ce1d46e6574fc87a1eb3b19ecf98f5a0e8cd543e11fb6ae19b718beb0e886df23dc853d780c7d1e27f52e47ca42f436b77471338"}, 0x48, r1) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r0) 19:19:18 executing program 2: r0 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read(r0, 0x0, 0xfffffffffffffdc0) 19:19:18 executing program 4: add_key$keyring(&(0x7f0000000f00), 0x0, 0x0, 0x2, 0xfffffffffffffffb) 19:19:18 executing program 0: socket(0xa, 0x0, 0xaec) 19:19:18 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x0, "671516fe7545db978ff9022597f3de732586d49b58aade7fd2aa051c78ae2a63e69defceb850f143273c905cc67d0048b79097ff2ca0f9dcebe098e88f7e6d74"}, 0x48, 0xffffffffffffffff) keyctl$search(0x2, r0, 0x0, 0x0, 0xfffffffffffffffa) 19:19:18 executing program 2: r0 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) read(r0, 0x0, 0xfffffffffffffdc0) 19:19:18 executing program 5: syz_emit_ethernet(0x36, &(0x7f0000000300)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @broadcast, {[@generic={0x83, 0xc, "f26e7f5db2bcca4da965"}]}}}}}}, 0x0) 19:19:18 executing program 1: syz_emit_ethernet(0x52, &(0x7f0000000000)={@link_local, @remote, @void, {@ipv4={0x800, @tipc={{0x7, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010103, @local, {[@cipso={0x86, 0x8, 0x0, [{0x0, 0x2}]}]}}, @payload_named={{{{{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}}, 0x0) 19:19:18 executing program 3: r0 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) read(r0, 0x0, 0xfffffffffffffdc0) 19:19:18 executing program 0: r0 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/zoneinfo\x00', 0x0, 0x0) read(r0, 0x0, 0xfffffffffffffdc0) 19:19:18 executing program 3: add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) setreuid(0xffffffffffffffff, 0xee01) 19:19:18 executing program 5: syz_emit_ethernet(0x2e, &(0x7f0000000100)={@link_local, @remote, @void, {@ipv4={0x800, @igmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010102, {[@rr={0x7, 0x3, 0x48}]}}, {0x0, 0x0, 0x0, @dev}}}}}, 0x0) 19:19:18 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000180)={@multicast, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @empty}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:19:18 executing program 1: syz_emit_ethernet(0x32, &(0x7f0000000300)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @broadcast, {[@generic={0x83, 0x3, "f2"}, @timestamp_addr={0x44, 0x4, 0x4f}]}}}}}}, 0x0) 19:19:18 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, 0x48) 19:19:18 executing program 0: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@link_local, @remote, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010103, @dev}, @payload_named={{{{{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}}, 0x0) 19:19:18 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x10}, 0x48) 19:19:18 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) read(r0, &(0x7f0000000040)=""/110, 0x6e) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 19:19:18 executing program 5: syz_emit_ethernet(0x36, &(0x7f0000000180)={@multicast, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @remote}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:19:18 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x0, "671516fe7545db978ff9022597f3de732586d49b58aade7fd2aa051c78ae2a63e69defceb850f143273c905cc67d0048b79097ff2ca0f9dcebe098e88f7e6d74"}, 0x48, 0xffffffffffffffff) keyctl$search(0x6, r0, &(0x7f0000000140)='blacklist\x00', &(0x7f0000000180)={'syz', 0x2}, 0xfffffffffffffffa) 19:19:18 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000180)={0x0, "671516fe7545db978ff9022597f3de732586d49b58aade7fd2aa051c78ae2a63e69defceb850f143273c905cc67d0048b79097ff2ca0f9dcebe098e88f7e6d74"}, 0x48, 0xffffffffffffffff) keyctl$unlink(0x9, r0, 0xfffffffffffffffc) 19:19:18 executing program 3: syz_clone3(&(0x7f0000000580)={0xbd147800, 0x0, 0x0, &(0x7f0000000240), {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 19:19:18 executing program 0: r0 = socket(0xa, 0x5, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={0x0}}, 0x0) 19:19:18 executing program 5: keyctl$search(0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffa) 19:19:18 executing program 1: r0 = add_key$keyring(&(0x7f0000000f00), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000140), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r1) 19:19:18 executing program 0: shmget$private(0x0, 0x2000, 0x78001e04, &(0x7f0000ffc000/0x2000)=nil) 19:19:18 executing program 4: add_key$user(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, &(0x7f00000004c0)='L', 0x1, 0xfffffffffffffffe) request_key(&(0x7f0000000540)='user\x00', &(0x7f0000000580)={'syz', 0x3}, 0x0, 0x0) 19:19:18 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x14, 0x2, &(0x7f0000000080)=@raw=[@cb_func], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:19:18 executing program 5: r0 = openat$procfs(0xffffff9c, &(0x7f00000001c0)='/proc/vmstat\x00', 0x0, 0x0) read(r0, 0x0, 0xfffffffffffffdc0) 19:19:18 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x5452, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{}]}) 19:19:18 executing program 1: keyctl$search(0x28, 0x0, 0x0, 0x0, 0x0) 19:19:18 executing program 4: add_key$keyring(&(0x7f00000002c0), 0x0, 0x20000000, 0x2, 0xfffffffffffffffc) 19:19:18 executing program 2: r0 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) read(r0, 0x0, 0xfffffffffffffdc0) 19:19:18 executing program 0: request_key(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0xfffffffffffffffb) 19:19:18 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x7, &(0x7f0000000000)=@framed={{}, [@initr0, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffb}]}, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x95, &(0x7f0000000100)=""/149, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:19:18 executing program 3: r0 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$search(0x3, r0, 0x0, 0x0, 0x0) 19:19:18 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x9, 0x2, &(0x7f0000000080)=@raw=[@cb_func], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:19:18 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x7fff, 0x8, 0xb16e, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3fffffd}, 0x48) 19:19:18 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x11, 0x2, &(0x7f0000000080)=@raw=[@cb_func], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:19:18 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1, 0x0, 0x0, 0x0, 0x3e4}, 0x48) 19:19:18 executing program 3: bpf$PROG_LOAD_XDP(0xa, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:19:18 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x1b, 0x2, &(0x7f0000000080)=@raw=[@cb_func], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:19:18 executing program 1: r0 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$search(0x4, r0, 0x0, 0x0, 0x0) 19:19:18 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x5, 0x5cf, 0x8, 0x6}, 0x48) 19:19:18 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x0, "671516fe7545db978ff9022597f3de732586d49b58aade7fd2aa051c78ae2a63e69defceb850f143273c905cc67d0048b79097ff2ca0f9dcebe098e88f7e6d74"}, 0x48, 0xffffffffffffffff) keyctl$search(0x5, r0, 0x0, 0x0, 0xfffffffffffffffa) 19:19:19 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4}]}}, @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}, 0x0) 19:19:19 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1, 0x5cf, 0x8, 0x6}, 0x48) 19:19:19 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0xc, 0x2, &(0x7f0000000080)=@raw=[@cb_func], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:19:19 executing program 0: r0 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$unlink(0x9, 0x0, r1) 19:19:21 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x17, 0x2, &(0x7f0000000080)=@raw=[@cb_func], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:19:21 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000300)={@multicast, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @multicast1}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:19:21 executing program 5: r0 = openat$tun(0xffffff9c, &(0x7f0000000100), 0x1, 0x0) write$tun(r0, 0x0, 0x0) 19:19:21 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) 19:19:21 executing program 1: syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) syz_open_procfs$userns(0x0, &(0x7f00000013c0)) 19:19:21 executing program 0: r0 = syz_io_uring_setup(0x3c99, &(0x7f0000000000), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r1) 19:19:21 executing program 2: r0 = syz_io_uring_setup(0x337e, &(0x7f0000000000)={0x0, 0x0, 0x40}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) 19:19:21 executing program 5: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000600), &(0x7f0000000240)={0x0, "671516fe7545db978ff9022597f3de732586d49b58aade7fd2aa051c78ae2a63e69defceb850f143273c905cc67d0048b79097ff2ca0f9dcebe098e88f7e6d74"}, 0x48, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x2}, 0x0, 0x0, r0) 19:19:21 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x0) 19:19:21 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_buf(r0, 0x29, 0x1b, 0x0, 0x0) 19:19:21 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c40)={0x7, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:19:21 executing program 4: r0 = openat$procfs(0xffffff9c, &(0x7f0000000840)='/proc/partitions\x00', 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}}, 0x0, 0x0, 0x0) 19:19:21 executing program 5: r0 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/tty/drivers\x00', 0x0, 0x0) syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303036303030b0"], 0x0, 0x0, 0x0) 19:19:21 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_buf(r0, 0x29, 0x2c, &(0x7f0000000000)="a44086e3", 0x4) 19:19:21 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c40)={0x2, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:19:21 executing program 3: r0 = gettid() move_pages(r0, 0x1, &(0x7f0000000000)=[&(0x7f0000ffe000/0x2000)=nil], 0x0, &(0x7f0000000040), 0x0) 19:19:21 executing program 2: syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) [ 558.018283][T12203] fuse: Bad value for 'user_id' 19:19:22 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c40)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000095f1ffffff"], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x90, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:19:22 executing program 0: syz_open_dev$loop(&(0x7f0000000880), 0x0, 0x0) [ 558.088324][T12209] fuse: Bad value for 'rootmode' 19:19:22 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) recvmmsg$unix(r0, 0x0, 0x0, 0x12000, 0x0) 19:19:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@bridge_getneigh={0x20, 0x1e, 0x1, 0x0, 0x0, {0x12, 0x0, 0x0, 0x0, 0x482a0900}}, 0x20}}, 0x0) 19:19:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv4_deladdr={0x18, 0x15, 0x1}, 0x18}}, 0x0) 19:19:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d400000011000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="48001a8004001c00300002"], 0xd4}}, 0x0) 19:19:22 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 19:19:22 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80104592, &(0x7f0000000040)=""/207) 19:19:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@bridge_getneigh={0x20, 0x1e, 0x1, 0x0, 0x0, {0x12}}, 0x20}}, 0x0) 19:19:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="17000000100001"], 0x20}}, 0x0) 19:19:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="17000000120001"], 0x20}}, 0x0) 19:19:22 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'batadv0\x00', {0x3}, 0x4}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@bridge_getneigh={0x20, 0x1e, 0x1}, 0x20}}, 0x0) 19:19:22 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000140)) 19:19:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_delrule={0x3c, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_SRC={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, @FIB_RULE_POLICY=@FRA_UID_RANGE={0xc}]}, 0x3c}}, 0x0) [ 558.287820][T12227] netlink: 'syz-executor.2': attribute type 28 has an invalid length. [ 558.321270][T12232] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 19:19:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000001e0001000000000000000000ff00000043e1917ce6"], 0x20}}, 0x0) 19:19:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@bridge_getneigh={0x20, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x300}}, 0x20}}, 0x0) 19:19:22 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80104592, &(0x7f0000000600)={0x0, 0x9, &(0x7f0000000540)="2e67379a89502fe975"}) 19:19:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@bridge_getneigh={0x1b, 0x1e, 0x1}, 0x20}}, 0x0) 19:19:22 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80104592, &(0x7f0000000600)={0x16, 0x0, 0x0}) 19:19:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="64000000520001"], 0x64}}, 0x0) 19:19:22 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80284504, &(0x7f0000000040)=""/207) 19:19:22 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000240)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4f8, 0x0, 0x464, 0x6a8, 0x464, 0x33c, 0x6a8, 0x6a8, 0x6a8, 0x6a8, 0x6a8, 0x6, 0x0, {[{{@ipv6={@dev, @empty, [], [], 'rose0\x00', 'wlan0\x00'}, 0x0, 0xa4, 0xc8}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0xfffffffffffffffb}}, {{@uncond, 0x0, 0xa4, 0xc8}, @inet=@DSCP={0x24}}, {{@ipv6={@dev, @remote, [], [], 'team_slave_1\x00', 'sit0\x00'}, 0x0, 0xa4, 0xd8}, @common=@inet=@SET3={0x34}}, {{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'xfrm0\x00', 'hsr0\x00'}, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@private2}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x554) [ 558.493470][T12249] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 19:19:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d400000011000100"/20, @ANYBLOB="00000000000000003000128008000100736974002400028005c5c2d916f350835fd9104550c594f63c00050008000000060012004e23000008000c0001000000080003"], 0xd4}}, 0x0) 19:19:22 executing program 4: syz_open_dev$evdev(&(0x7f0000000000), 0xffffffffffffffff, 0x1c3940) 19:19:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'veth1\x00'}]}, 0x34}}, 0x0) 19:19:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8}]}, 0x24}}, 0x0) 19:19:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0x28, 0x11, 0x1, 0x0, 0x0, {}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 19:19:22 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0xc01047d0, 0x0) [ 558.632294][T12261] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.0'. 19:19:22 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@ipv4_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x577db2791ba6a615}, [@RTA_ENCAP_TYPE={0x6}]}, 0x24}}, 0x0) 19:19:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x6, 0x40, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @private0, 0x80, 0x80, 0x2, 0x1f}}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140100"/20], 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x80) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000180)={0x0, 'macvtap0\x00', {}, 0x421d}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x9, 0xd4, 0x9, 0x2, 0x104c, 0x1, 0x8000, '\x00', 0x0, r1, 0x5, 0x4, 0x5}, 0x48) 19:19:22 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084502, &(0x7f0000000040)=""/207) 19:19:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@ipv4_delroute={0x1c, 0x19, 0x1}, 0x1c}}, 0x0) 19:19:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000011000100000000000000000007000000", @ANYRES32=r1], 0x20}}, 0x0) 19:19:22 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@bridge_getneigh={0x20, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x8}}, 0x20}}, 0x0) 19:19:22 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x40044591, 0x0) 19:19:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'gre0\x00', &(0x7f0000000200)={'sit0\x00', 0x0, 0x7800, 0x1, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}}}}) 19:19:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@ipv4_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6}]}, 0x24}}, 0x0) 19:19:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000011000100000000000000000007"], 0x20}}, 0x0) 19:19:22 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'macvlan0\x00', {0x2, 0x0, @broadcast}}) 19:19:22 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_delrule={0x1c, 0x21, 0x1}, 0x1c}}, 0x0) 19:19:22 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000140)=[0x917]) 19:19:22 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80044501, &(0x7f0000000040)=""/207) 19:19:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1b0000001e0001"], 0x20}}, 0x0) 19:19:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@bridge_getneigh={0x20, 0x1e, 0x1, 0x0, 0x0, {0x13}}, 0x20}}, 0x0) 19:19:22 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000001e00012b84b359bb191ad00007000000fb"], 0x20}}, 0x0) 19:19:22 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000300)={0x2c, 0x0, 0x0}) 19:19:23 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80044584, &(0x7f0000000040)=""/207) 19:19:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@bridge_getneigh={0x20, 0x1e, 0x1, 0x0, 0x0, {0xd}}, 0x20}}, 0x0) 19:19:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@bridge_getneigh={0x20, 0x1e, 0x105}, 0x20}}, 0x0) 19:19:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22}}]}, 0x24}}, 0x0) 19:19:23 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="22000000100001"], 0x34}}, 0x0) 19:19:23 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) write$P9_RSTAT(r0, &(0x7f0000000080)={0x52, 0x7d, 0x0, {0x0, 0x4b, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x8, 'nl80211\x00', 0x8, 'nl80211\x00', 0x8, 'nl80211\x00'}}, 0x52) [ 559.132251][T12306] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 19:19:23 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x40044590, &(0x7f0000000040)=""/207) 19:19:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@bridge_getneigh={0x1b, 0x1e, 0x1, 0x0, 0x0, {0x2}}, 0x20}}, 0x0) [ 559.221182][T12314] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 19:19:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1b0000001e0001e5"], 0x20}}, 0x0) 19:19:23 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80104592, &(0x7f0000000600)={0x0, 0xfffffffffffffd22, &(0x7f0000000540)="2e67379a89502fe975"}) 19:19:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d4000000110001000000000000", @ANYRES32=0x0, @ANYRES32], 0xd4}}, 0x0) 19:19:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="17000000130001"], 0x20}}, 0x0) [ 559.271799][T12322] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. 19:19:23 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@bridge_getneigh={0x20, 0x1e, 0x1, 0x0, 0x0, {0xd, 0x0, 0x0, 0x0, 0x50000}}, 0x20}}, 0x0) 19:19:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000010000100", @ANYRES32=0x0, @ANYBLOB="000000000000000014"], 0x34}}, 0x0) [ 559.365698][T12330] netlink: 180 bytes leftover after parsing attributes in process `syz-executor.2'. 19:19:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000130001000000000000000000000000004d"], 0x20}}, 0x0) 19:19:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000012001fff"], 0x20}}, 0x0) 19:19:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d400000013000100"/20, @ANYBLOB="00000000000000003000128008000100736974002400028005c5c2d916f350835fd9104550c594f63c00050008000000060012004e23000008000c0001000000080003"], 0xd4}}, 0x0) 19:19:23 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x40010040) 19:19:23 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001800)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{0x0}, {0x0}], 0x2}, 0x40000102) [ 559.444548][T12336] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 19:19:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000100"/20, @ANYRESHEX], 0x34}}, 0x0) 19:19:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x3c, 'veth1\x00'}]}, 0x34}}, 0x0) [ 559.519561][T12341] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.1'. [ 559.606889][T12349] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 19:19:23 executing program 0: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) 19:19:23 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000120001000000000000000000000000004d"], 0x20}}, 0x0) 19:19:23 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000140)={0x0, 'batadv0\x00', {}, 0x12}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001540)={'vxcan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000014c0)={&(0x7f0000000340)=@ipmr_newroute={0x148, 0x18, 0x800, 0x70bd2d, 0x25dfdbfb, {0x80, 0x0, 0x20, 0x0, 0xfe, 0x2, 0xfd, 0x4, 0x800}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_MARK={0x8, 0x10, 0x6e5}, @RTA_TABLE={0x8, 0xf, 0x47b}, @RTA_IP_PROTO={0x5, 0x1b, 0x3a}, @RTA_METRICS={0x68, 0x8, 0x0, 0x1, "e5e288a1be3c51b56e10173b4c9d66ec78cf2457f42219a5c785f30eb6933ac1620ae99a4ee4a7478217257ed940774bf48a1329becd25a4132fe591f461c2dc4d2be8f954472d25dc4fa4d71481295f4af55f3573a32371b5a855c1e94046964f6e5000"}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWT_BPF_IN={0x14, 0x1, 0x0, 0x1, @LWT_BPF_PROG_NAME={0xe, 0x2, '+\'*\x10)&,.\xa8\x00'}}}, @RTA_METRICS={0x8c, 0x8, 0x0, 0x1, "5b0c7eb0e4b6fd8efb3fe431c3dae310e0ebf453be8b457e27245d1c230911a288ad2b32fec0b9fcecca2818e67e218bfe23613158da03f5750ef9b79d08ecba2326c85394737ccc6714d12d6d3b921fe6f1d59218a2c1e7eb872919c782453711fd24c1be95db97b82c601bab0107693de98f04f0104499fa4d2e85ee0bbec284cc44eba3c58ffa"}]}, 0x148}, 0x1, 0x0, 0x0, 0x1}, 0x24040091) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_RESIZE(r3, 0x50009403, 0x0) r4 = geteuid() mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@loose}, {@nodevmap}, {@cache_loose}, {@access_any}, {@noextend}, {@version_u}], [{@hash}, {@subj_role={'subj_role', 0x3d, '*'}}, {@flag='dirsync'}, {@fowner_gt={'fowner>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x50, 0xf4, 0x66, 0x30, 0x5, 0x39, 0x30, 0x65], 0x2d, [0x37, 0x39, 0x35, 0x61], 0x2d, [0x66, 0x37, 0x32, 0x61], 0x2d, [0x63, 0x37, 0x37, 0x35], 0x2d, [0x63, 0x61, 0x65, 0x35, 0x66, 0x33, 0x65, 0x63]}}}, {@measure}, {@obj_type={'obj_type', 0x3d, '@'}}]}}) ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f0000000040)=""/243) 19:19:23 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001280)={0xffffffffffffffff}) write$cgroup_devices(r0, 0x0, 0x9) 19:19:23 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0xc0189436, &(0x7f0000001440)={'veth1_to_bond\x00', 0x8000}) 19:19:24 executing program 4: socketpair(0x28, 0x1, 0x0, &(0x7f0000000100)) 19:19:24 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xd}, 0x48) 19:19:24 executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='f2fs_iostat\x00'}, 0x10) 19:19:24 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 19:19:24 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0xb1, 0x9, 0x3e9, 0x7, 0x2, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) 19:19:24 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="fa", 0x1}, {&(0x7f0000000140)="19", 0x1}, {&(0x7f0000000240)="da", 0x1}], 0x3, &(0x7f0000000300)=[@ip_tos_u8={{0x11}}], 0x18}, 0x40080d4) 19:19:24 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="fa", 0x1}], 0x1}, 0x0) 19:19:24 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@ip_tos_u8={{0x11}}], 0x18}, 0x0) 19:19:24 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="fa", 0x1}, {0x0}], 0x2, &(0x7f0000000300)=[@ip_tos_u8={{0x11}}], 0x18}, 0x40080d4) 19:19:24 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2}, 0x48) 19:19:24 executing program 1: r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x7}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, &(0x7f0000000280)={0x14, &(0x7f0000000200)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) 19:19:24 executing program 0: socket$packet(0x11, 0x0, 0x300) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) 19:19:24 executing program 2: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) 19:19:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "d26eaba3b6f9f90d", "446a884e329c8e006613eaac68aab852", '\b\x00', "d9c2919792e5320b"}, 0x28) sendto$inet6(r0, &(0x7f0000000100)="af", 0x7fe5, 0x8000, 0x0, 0x0) 19:19:24 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='numa_maps\x00') ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_clone(0x8030000, 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000d40)="f75c6b0c799bfbb9eae7a75a75921d7b43e9b36623a7ce2422f8f99206fd2487f2ff5f221f673a1ed1018a9a6f5fc341f54b63907605b06db43f63f64edd282a43cda248f8f469d7dbe3e1a988413f33002be0") bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r5, 0x0, 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x54}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000380)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1, 0x3, {0xa, 0x0, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}}}, 0x80, 0x0, 0x30}}], 0x1, 0x14) io_uring_enter(r2, 0x2ff, 0x258, 0x0, 0x0, 0x20000000aa0a0000) 19:19:24 executing program 2: getgroups(0x2, &(0x7f0000001c40)=[0xee01, 0xee00]) 19:19:24 executing program 5: openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vxcan1\x00'}) 19:19:24 executing program 0: openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x241, 0x0) 19:19:24 executing program 5: syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x8aa27d934c6af90, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x80, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x9, 0x7, 0xb1}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x0, 0x42, 0x2}}]}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x3f, 0x7f, 0x5, 0x10, 0x6}, 0x19, &(0x7f0000000080)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x3f, "f7c7712cc73e9bc4206b7c698753633f"}]}, 0x1, [{0xed, &(0x7f00000000c0)=@string={0xed, 0x3, "1d91c34dc8a6ed083d01a7d556af69fe87b75d50cd75ede1dbfb62667985aba9a0eebcc20a3478f37d05e98d5e7a4733fc61dea4563dd7b45f5da3343a44b646222a8c5d4852bc43ee0aa7fe1672c55b175156b96f8cf7ba3369ea73ba5efee85672806fbfa59e7f8ffac729201db7d674319170b3d2ca082bf99eaf8ca8e99a11994f6f441d421b9826dedf8c87b648286cdba402f2e77db44333782add9507d67fd67262b28d334c8cbe924aff84f53baed4da0eead95db0985c9943728498b02a5c51295e7004ccbbd4ee6eede4981385f395e60d81241aa3ca594f40bc382f7a0edaa60a8a118c11f2"}}]}) 19:19:24 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000005640)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x0, 0x9}, 0x1c) syz_emit_ethernet(0x42, &(0x7f0000000040)={@random="eb7a0a6f7c5e", @multicast, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @link_local, @private2, @multicast, @local}}}}, 0x0) 19:19:24 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) [ 560.836575][ T5187] usb 2-1: new full-speed USB device number 4 using dummy_hcd 19:19:24 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, '\x00', "a4326b467c9d00000067b5efc500", 'ZD\x00\b', "1272d692072b1103"}, 0x28) sendto$inet6(r0, &(0x7f0000000100)="af", 0x1, 0x8000, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000180)=ANY=[], 0x4) [ 561.126503][ T5186] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 561.176665][ T5187] usb 2-1: not running at top speed; connect to a high speed hub [ 561.276565][ T5187] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 561.456355][ T5186] usb 6-1: not running at top speed; connect to a high speed hub [ 561.476320][ T5187] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 561.498443][ T5187] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.531647][ T5187] usb 2-1: Product: syz [ 561.543646][ T5187] usb 2-1: Manufacturer: syz [ 561.563483][ T5187] usb 2-1: SerialNumber: syz [ 561.568795][ T5186] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 561.776406][ T5186] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 561.786629][ T5186] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.794811][ T5186] usb 6-1: Product: syz [ 561.799901][ T5186] usb 6-1: Manufacturer: syz [ 561.804689][ T5186] usb 6-1: SerialNumber: syz [ 561.850562][T12406] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 562.160193][ T5187] usb 2-1: USB disconnect, device number 4 [ 562.167762][ T5186] usb 6-1: USB disconnect, device number 3 19:19:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@ccm_128={{0x303}, "000010ee9a320006", "096689f0ecb0f9bddcaecb9b152af6ac", '8=hD', "f542fe635e6872c8"}, 0x28) sendto$inet6(r0, &(0x7f0000000100)="af", 0x1, 0x8000, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4) 19:19:26 executing program 0: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x3}}]}}]}}, 0x0) 19:19:26 executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) sendmmsg$inet(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000680)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ra={0x94, 0x4}, @lsrr={0x83, 0x3}]}}}], 0x18}}], 0x1, 0x0) 19:19:26 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='numa_maps\x00') ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_clone(0x8030000, 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000d40)="f75c6b0c799bfbb9eae7a75a75921d7b43e9b36623a7ce2422f8f99206fd2487f2ff5f221f673a1ed1018a9a6f5fc341f54b63907605b06db43f63f64edd282a43cda248f8f469d7dbe3e1a988413f33002be0") bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r5, 0x0, 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x54}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000380)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1, 0x3, {0xa, 0x0, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}}}, 0x80, 0x0, 0x30}}], 0x1, 0x14) io_uring_enter(r2, 0x2ff, 0x258, 0x0, 0x0, 0x20000000aa0a0000) 19:19:26 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, '\x00', "a4326b467c9d00000067b5efc500", 'ZD\x00\b', "1272d692072b1103"}, 0x28) sendto$inet6(r0, &(0x7f0000000100)="af", 0x1, 0x8000, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000180)=ANY=[], 0x4) 19:19:26 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) 19:19:26 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x30d4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "47d60308"}]}}, 0x0}, 0x0) 19:19:26 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, &(0x7f00000000c0)) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r0, 0x4068aea3, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) syz_open_procfs(0xffffffffffffffff, 0x0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000680), 0x0, 0x0) setuid(0x0) getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000540), 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000006740), &(0x7f0000006780)=0xc) sendmmsg$unix(r6, 0x0, 0x0, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="660f3828fec4e2b145554ff2afb81bc300000f23d00f21f835000000080f23f8c4e3f57e8e5e01d36044640f8ef2ffffffc4c179e6f40f001500a0dd8cf30fc7347c", 0x42}], 0x1, 0x87, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 562.779842][ T1209] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.792590][ T1209] ieee802154 phy1 wpan1: encryption failed: -22 19:19:26 executing program 5: r0 = syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x7, 0x1, 0x3, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x9}}, [{}]}}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, &(0x7f0000000280)={0x14, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x82c}}}, &(0x7f00000004c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 562.900514][T12443] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 562.946152][ T5188] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 563.026168][T11256] usb 5-1: new high-speed USB device number 3 using dummy_hcd 19:19:27 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreqsrc(r0, 0x0, 0x46, 0x0, 0x0) 19:19:27 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) landlock_restrict_self(r0, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_DESTROY$hwpt(0xffffffffffffffff, 0x3b80, 0x0) [ 563.186283][ T5188] usb 1-1: Using ep0 maxpacket: 8 19:19:27 executing program 1: r0 = syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x8aa27d934c6af90, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x7, 0x1, 0x3, 0x80, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x9, 0x7, 0xb1}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x0, 0x42, 0x2}}]}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x3f, 0x7f, 0x5, 0x10, 0x6}, 0x19, &(0x7f0000000080)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x3f, "f7c7712cc73e9bc4206b7c698753633f"}]}, 0x1, [{0xfc, &(0x7f00000000c0)=@string={0xfc, 0x3, "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"}}]}) syz_usb_control_io$printer(r0, &(0x7f0000000280)={0x14, &(0x7f0000000200)={0x20, 0x23, 0x16, {0x16, 0x10, "95370fe17fb64c56f600792adfc8d0545ad6ed21"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x82c}}}, &(0x7f00000004c0)={0x34, &(0x7f00000002c0)={0x40, 0x16, 0x1e, "e1e604ec34312926f51303b7a45727a25c3c8903ce58797f8353b93edb90"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x79}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000380)={0x20, 0x0, 0xb4, {0xb2, "eda75e99d75dcde7e1c07cbc19e48a60b23197dd45bb3a5c91e70a30885ccd7fcc90a8be1ecfbaff6e558c6ebc5fd15b6953d21acd80867d6a47707a5aa593d1899c547bf0e911a8a6e5583d98fadf9077fe837f6857bd5f4a8db3a551323e5e191cd0d647b71ac9ff85ad901ea576421b8d1f1f60a8b255229f2638bd10079bd3389fe8f8df1868838596ad7d482d8e04914abf3ff0cfe53ea45a4075ba3d293f19a374b0fde352b632f9acb70134193eb1"}}, &(0x7f0000000440)={0x20, 0x1, 0x1, 0x9b}, &(0x7f0000000480)={0x20, 0x0, 0x1}}) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 563.306293][ T5188] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 563.356555][T11260] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 563.364392][ T5188] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 563.396731][T11256] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 563.422752][ T5188] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 563.439003][T11256] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 563.481948][T11256] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 563.534575][T11256] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.549121][T11256] usb 5-1: config 0 descriptor?? [ 563.647419][ T5188] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 563.663308][ T5188] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.679928][ T5188] usb 1-1: Product: syz [ 563.687939][ T5188] usb 1-1: Manufacturer: syz [ 563.696211][T11260] usb 6-1: not running at top speed; connect to a high speed hub [ 563.696211][ T5187] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 563.711660][ T5188] usb 1-1: SerialNumber: syz 19:19:27 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, &(0x7f00000000c0)) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r0, 0x4068aea3, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) syz_open_procfs(0xffffffffffffffff, 0x0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000680), 0x0, 0x0) setuid(0x0) getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000540), 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000006740), &(0x7f0000006780)=0xc) sendmmsg$unix(r6, 0x0, 0x0, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="660f3828fec4e2b145554ff2afb81bc300000f23d00f21f835000000080f23f8c4e3f57e8e5e01d36044640f8ef2ffffffc4c179e6f40f001500a0dd8cf30fc7347c", 0x42}], 0x1, 0x87, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 563.806283][T11260] usb 6-1: config 1 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 563.858128][T11260] usb 6-1: config 1 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 563.882404][T11260] usb 6-1: config 1 interface 0 has no altsetting 0 [ 563.960555][ T5188] usb 1-1: USB disconnect, device number 3 [ 564.046644][ T5187] usb 2-1: not running at top speed; connect to a high speed hub [ 564.047029][T11260] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 564.103515][T11256] arvo 0003:1E7D:30D4.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.4-1/input0 [ 564.136273][ T5187] usb 2-1: config 1 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 564.136944][T11260] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.162892][T11260] usb 6-1: Product: syz [ 564.167739][T11260] usb 6-1: Manufacturer: syz [ 564.175114][T11260] usb 6-1: SerialNumber: syz [ 564.204363][ T5187] usb 2-1: config 1 interface 0 has no altsetting 0 [ 564.211793][T12456] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 564.276314][T11256] arvo 0003:1E7D:30D4.0005: couldn't init struct arvo_device [ 564.287687][T11256] arvo 0003:1E7D:30D4.0005: couldn't install keyboard [ 564.314817][T11256] arvo: probe of 0003:1E7D:30D4.0005 failed with error -71 [ 564.352573][T11256] usb 5-1: USB disconnect, device number 3 [ 564.426221][ T5187] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 564.457805][ T5187] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.466286][ T5187] usb 2-1: Product: syz [ 564.470735][ T5187] usb 2-1: Manufacturer: syz 19:19:28 executing program 0: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2}}]}}]}}, 0x0) 19:19:28 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, &(0x7f00000000c0)) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r0, 0x4068aea3, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) syz_open_procfs(0xffffffffffffffff, 0x0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000680), 0x0, 0x0) setuid(0x0) getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000540), 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000006740), &(0x7f0000006780)=0xc) sendmmsg$unix(r6, 0x0, 0x0, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="660f3828fec4e2b145554ff2afb81bc300000f23d00f21f835000000080f23f8c4e3f57e8e5e01d36044640f8ef2ffffffc4c179e6f40f001500a0dd8cf30fc7347c", 0x42}], 0x1, 0x87, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 564.475788][ T5187] usb 2-1: SerialNumber: syz [ 564.546543][T12463] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 564.703480][T11260] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 2 proto 3 vid 0x0525 pid 0xA4A8 19:19:28 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv4_delrule={0x1c, 0x58, 0x1, 0x0, 0x0, {0x8}}, 0x1c}}, 0x0) [ 564.866183][T11260] usb 6-1: USB disconnect, device number 4 [ 564.878824][T12491] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 564.907422][T11260] usblp0: removed 19:19:28 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) write(0xffffffffffffffff, &(0x7f0000004200)='t', 0x2) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0), 0x4) read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/84, 0x20000114) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_clone(0x40224400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 19:19:28 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x24, 0x1, 0x0, 0x0, {0x7, r1}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x0, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, 0x38}}, 0x0) [ 565.058037][ T5187] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 2 proto 3 vid 0x0525 pid 0xA4A8 [ 565.086498][T11256] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 565.104160][T12495] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 19:19:29 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000180)={0x2b}) 19:19:29 executing program 5: pselect6(0x40, &(0x7f0000000080)={0x8}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={[0xffffffffffffffff]}, 0x8}) [ 565.154768][ T5187] usb 2-1: USB disconnect, device number 5 [ 565.240036][ T5187] usblp0: removed 19:19:29 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000100)={0x29}) [ 565.336083][T11256] usb 1-1: Using ep0 maxpacket: 8 19:19:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv4_delrule={0x1c, 0x16, 0x1}, 0x1c}}, 0x0) [ 565.456319][T11256] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 19:19:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv4_delrule={0x30, 0x10, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'dvmrp0\x00'}]}, 0x30}}, 0x0) 19:19:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x1d, 0x1, 0x0, 0x0, {0x7, r1}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x0, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, 0x38}}, 0x0) [ 565.504700][T11256] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 565.516211][ T5186] usb 3-1: new high-speed USB device number 3 using dummy_hcd 19:19:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001b00)={0x14}, 0x14}}, 0x0) [ 565.599579][T12508] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 565.613636][T12509] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 565.668105][T11256] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 565.786396][ T5186] usb 3-1: Using ep0 maxpacket: 8 [ 565.876310][T11256] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 565.890095][T11256] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.904195][T11256] usb 1-1: Product: syz [ 565.911655][T11256] usb 1-1: Manufacturer: syz [ 565.916707][ T5186] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 565.916711][T11256] usb 1-1: SerialNumber: syz [ 565.916739][ T5186] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 565.944225][ T5186] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 565.953389][ T5186] usb 3-1: config 250 has no interface number 0 [ 565.959881][ T5186] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 565.971717][ T5186] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 565.982281][ T5186] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 14624, setting to 1024 [ 565.994017][ T5186] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 566.004645][ T5186] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 566.021837][ T5186] usb 3-1: config 250 interface 228 has no altsetting 0 [ 566.157370][ T5186] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 566.172141][ T5186] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 566.181010][ T5186] usb 3-1: Product: syz [ 566.185351][ T5186] usb 3-1: SerialNumber: syz [ 566.191078][ T5078] usb 1-1: USB disconnect, device number 4 [ 566.250235][ T5186] hub 3-1:250.228: bad descriptor, ignoring hub [ 566.256905][ T5186] hub: probe of 3-1:250.228 failed with error -5 [ 566.458402][ T5186] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 3 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 19:19:30 executing program 0: r0 = epoll_create(0x200) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x8001) 19:19:30 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSMRU1(r0, 0x40047440, 0x0) 19:19:30 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f0000000280)=@framed={{}, [@alu]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 566.957462][T12512] usb 3-1: reset high-speed USB device number 3 using dummy_hcd [ 567.216205][T12512] usb 3-1: Using ep0 maxpacket: 8 [ 567.646187][ C0] usblp0: nonzero read bulk status received: -71 [ 567.802759][T11256] usb 3-1: USB disconnect, device number 3 [ 567.830690][T11256] usblp0: removed 19:19:32 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/zoneinfo\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 19:19:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv4_delrule={0x1c, 0x69, 0x1, 0x0, 0x0, {0x8}}, 0x1c}}, 0x0) 19:19:32 executing program 1: timer_settime(0x0, 0x0, &(0x7f0000000c80)={{}, {0x77359400}}, 0x0) 19:19:32 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@ipv4_getnexthop={0x1c, 0x6a, 0x1, 0x0, 0x0, {}, [@NHA_GROUPS={0x4}]}, 0x1c}}, 0x0) 19:19:32 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) write(0xffffffffffffffff, &(0x7f0000004200)='t', 0x2) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0), 0x4) read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/84, 0x20000114) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_clone(0x40224400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 19:19:32 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg$inet6(r0, &(0x7f0000001280)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0}}], 0x1, 0x0) 19:19:32 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0x4020940d, &(0x7f0000000080)) 19:19:32 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000340)={0xfffffffffffffffd, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) 19:19:32 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGSTAMPNS(r0, 0x80108906, 0x0) 19:19:32 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSMRU1(r0, 0x80047456, 0x0) [ 568.400457][T12528] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 19:19:32 executing program 5: timer_create(0x0, 0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000005c0)={{0x77359400}, {0x0, r0+60000000}}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0}) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {r1}}, 0x0) 19:19:32 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000040)) 19:19:32 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x200, 0x420, 0x805, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) 19:19:32 executing program 0: socketpair(0x2, 0x0, 0x0, &(0x7f00000000c0)) 19:19:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000002500)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000001340)={0x116c, 0x0, 0x0, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x2}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8001}, @NL80211_ATTR_FRAME_MATCH={0x1004, 0x5b, "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"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x400}, @NL80211_ATTR_FRAME_MATCH={0x33, 0x5b, "3bbd0f23521f21c9c6d04fdcc799dab11b77a08a5ab085abb2b981dcb9383c25b8aeea83631d075cb18a07a7c2cf88"}, @NL80211_ATTR_FRAME_MATCH={0x5c, 0x5b, "5bc433821afd7044253ca7e3ba7f6eec5a9bc21e286c9e230fe80694ef0b9f49b6ddd8f5d38daf3cb9f7c4015fc0fd6cd3d6f50a103c7d8fc97ff743c4fea37b54760fd10ca0a94f0cbc9403cd3da5d0f4b33e7737209bcc"}, @NL80211_ATTR_FRAME_MATCH={0x91, 0x5b, "d72bc3a7f5370a3cef2a9a703ad323f25b91bf48d3748bf0f5ddc4596ed6fd5ab31d677029652294d7852234ceada031f71eb7785232aab8f21ceb71f2d9e8280d81b334c79ed365481afee8a9a3a3553203722bb340559d0d8f50c5c2873f478e44050fbd71373cd6ae99ba28ce90a7c05fef6fb8d2412bdcf522a5c9aa8634e9403c5de9c25e711c1d51e5af"}]}, 0x116c}}, 0x0) 19:19:32 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000020c0)='/proc/timer_list\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000002100)={0x2020}, 0x2020) read$FUSE(r0, 0x0, 0x0) [ 568.756349][ T5188] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 569.006302][ T5188] usb 3-1: Using ep0 maxpacket: 8 [ 569.136339][ T5188] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 569.144644][ T5188] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 569.153887][ T5188] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 569.163831][ T5188] usb 3-1: config 250 has no interface number 0 [ 569.170635][ T5188] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 569.182531][ T5188] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 569.193870][ T5188] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 14624, setting to 1024 [ 569.205855][ T5188] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 569.216981][ T5188] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 569.230825][ T5188] usb 3-1: config 250 interface 228 has no altsetting 0 [ 569.356368][ T5188] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 569.365441][ T5188] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 569.373899][ T5188] usb 3-1: Product: syz [ 569.378378][ T5188] usb 3-1: SerialNumber: syz [ 569.417252][ T5188] hub 3-1:250.228: bad descriptor, ignoring hub [ 569.423588][ T5188] hub: probe of 3-1:250.228 failed with error -5 [ 569.628070][ T5188] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 4 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 570.136589][T12556] usb 3-1: reset high-speed USB device number 4 using dummy_hcd [ 570.423460][T12556] usb 3-1: Using ep0 maxpacket: 8 [ 570.866072][ C0] usblp0: nonzero read bulk status received: -71 [ 571.044628][ T5078] usb 3-1: USB disconnect, device number 4 [ 571.063732][ T5078] usblp0: removed 19:19:35 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) write(0xffffffffffffffff, &(0x7f0000004200)='t', 0x2) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0), 0x4) read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/84, 0x20000114) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_clone(0x40224400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 19:19:35 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000020c0)='/proc/timer_list\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000002100)={0x2020}, 0x2020) read$FUSE(r0, 0x0, 0x0) 19:19:35 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSMRU1(r0, 0x8004745a, 0x0) 19:19:35 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000020c0)='/proc/timer_list\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000002100)={0x2020}, 0x2020) read$FUSE(r0, 0x0, 0x0) 19:19:35 executing program 4: r0 = socket(0x11, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 19:19:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv4_delrule={0x30, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x5}, [@FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'dvmrp0\x00'}]}, 0x30}}, 0x0) 19:19:35 executing program 4: timer_create(0x2, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000005c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0) 19:19:35 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000020c0)='/proc/timer_list\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000002100)={0x2020}, 0x2020) read$FUSE(r0, 0x0, 0x0) [ 571.624931][T12566] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 19:19:35 executing program 0: bpf$BPF_MAP_FREEZE(0x13, &(0x7f0000000040), 0x4) 19:19:35 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000020c0)='/proc/timer_list\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000002100)={0x2020}, 0x2020) read$FUSE(r0, 0x0, 0x0) 19:19:35 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)=0x2000002) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) 19:19:35 executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='devlink_health_recover_aborted\x00'}, 0x10) [ 571.966226][ T5189] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 572.216079][ T5189] usb 3-1: Using ep0 maxpacket: 8 [ 572.336174][ T5189] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 572.344793][ T5189] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 572.353580][ T5189] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 572.363907][ T5189] usb 3-1: config 250 has no interface number 0 [ 572.370623][ T5189] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 572.382713][ T5189] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 572.393587][ T5189] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 12576, setting to 1024 [ 572.405523][ T5189] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 572.416439][ T5189] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 572.430308][ T5189] usb 3-1: config 250 interface 228 has no altsetting 0 [ 572.556143][ T5189] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 572.565306][ T5189] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 572.574228][ T5189] usb 3-1: Product: syz [ 572.578500][ T5189] usb 3-1: SerialNumber: syz [ 572.618121][ T5189] hub 3-1:250.228: bad descriptor, ignoring hub [ 572.624419][ T5189] hub: probe of 3-1:250.228 failed with error -5 [ 572.830124][ T5189] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 5 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 573.346872][T12584] usb 3-1: reset high-speed USB device number 5 using dummy_hcd [ 573.596202][T12584] usb 3-1: Using ep0 maxpacket: 8 [ 574.016123][ C0] usblp0: nonzero read bulk status received: -71 [ 574.187697][ T5187] usb 3-1: USB disconnect, device number 5 [ 574.207110][ T5187] usblp0: removed 19:19:38 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) write(0xffffffffffffffff, &(0x7f0000004200)='t', 0x2) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0), 0x4) read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/84, 0x20000114) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_clone(0x40224400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 19:19:38 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000020c0)='/proc/timer_list\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000002100)={0x2020}, 0x2020) read$FUSE(r0, 0x0, 0x0) 19:19:38 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000)=0x6, 0x4) 19:19:38 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000020c0)='/proc/timer_list\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000002100)={0x2020}, 0x2020) read$FUSE(r0, 0x0, 0x0) 19:19:38 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000020c0)='/proc/timer_list\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) read$FUSE(r0, 0x0, 0x0) 19:19:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv4_delrule={0x15, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'netpci0\x00'}]}, 0x30}}, 0x0) 19:19:38 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000680), 0x303600, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, 0x0) 19:19:38 executing program 0: socketpair(0x1e, 0x0, 0x3, &(0x7f0000000240)) 19:19:38 executing program 4: timer_create(0x0, &(0x7f00000001c0)={0x0, 0x25, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) 19:19:38 executing program 5: r0 = syz_clone(0x20000000, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r0, 0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000240)='blkio.bfq.io_service_bytes_recursive\x00'}, 0x30) openat$zero(0xffffffffffffff9c, &(0x7f0000001180), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001b00)={0x14}, 0x14}}, 0x0) 19:19:38 executing program 1: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x24}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000001700), 0xffffffffffffffff) 19:19:38 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000180)={0x29}) [ 575.116124][ T5188] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 575.356060][ T5188] usb 3-1: Using ep0 maxpacket: 8 [ 575.476098][ T5188] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 575.484755][ T5188] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 575.496253][ T5188] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 575.505609][ T5188] usb 3-1: config 250 has no interface number 0 [ 575.512426][ T5188] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 575.524374][ T5188] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 575.534932][ T5188] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 14624, setting to 1024 [ 575.547305][ T5188] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 575.557993][ T5188] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 575.571855][ T5188] usb 3-1: config 250 interface 228 has no altsetting 0 [ 575.696196][ T5188] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 575.705283][ T5188] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 575.718794][ T5188] usb 3-1: Product: syz [ 575.722971][ T5188] usb 3-1: SerialNumber: syz [ 575.777042][ T5188] hub 3-1:250.228: bad descriptor, ignoring hub [ 575.783363][ T5188] hub: probe of 3-1:250.228 failed with error -5 [ 575.989281][ T5188] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 6 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 576.496802][T12614] usb 3-1: reset high-speed USB device number 6 using dummy_hcd [ 576.736294][T12614] usb 3-1: Using ep0 maxpacket: 8 [ 577.156032][ C1] usblp0: nonzero read bulk status received: -71 [ 577.324608][ T5188] usb 3-1: USB disconnect, device number 6 [ 577.340800][ T5188] usblp0: removed 19:19:41 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cgroups\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x1100) 19:19:41 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/consoles\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) read$FUSE(r0, 0x0, 0x0) 19:19:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@ipv4_getnexthop={0x20, 0x6a, 0x1, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x1}]}, 0x20}}, 0x0) 19:19:41 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x1100) 19:19:41 executing program 0: bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)={&(0x7f0000000040)='\x00'}, 0x10) 19:19:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@ipv4_getnexthop={0x18, 0x6a, 0x195, 0x0, 0x0, {0x2, 0x2}}, 0x18}}, 0x0) 19:19:41 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_mreqn(r0, 0x0, 0x60, 0x0, &(0x7f0000000200)) 19:19:41 executing program 4: socket(0x1e, 0x0, 0x1) 19:19:41 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x1100) 19:19:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001c0001"], 0x14}}, 0x0) 19:19:41 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f00000000c0)={0x21}) 19:19:41 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGSTAMPNS(r0, 0x4020940d, 0x0) 19:19:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000500)={&(0x7f0000000440), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14}, 0x14}}, 0x0) 19:19:41 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "0aabb1e8f9227950185e46eb33d7d8ae9fa4cc16ec58e0d0899f084b46fda931f441b14dcd2d6c34ac7bf901dc6426e5d2926516c1fd3e649e637dfd1fc3ff6335e6dae8e7422776fe88bd4fe280ffab"}, 0xd8) 19:19:42 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x1100) 19:19:42 executing program 0: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x46000) 19:19:42 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGSTAMPNS(r0, 0xc0045878, 0x0) 19:19:42 executing program 2: socketpair(0x28, 0x0, 0x0, &(0x7f0000000380)) 19:19:42 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x2e4440) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000140)={r1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bf089060db910701a5cb0e23b4b2d999678834dd3c83e5a0298b1c6dd911f8538c98ca84506a81c12f6d15d15d8ab5df4b4c0f591499f0ed7d315c7bddbac50c", "5c85bdca8a88ec839e5906fd0503d3184cff24d34f9fa0f9114b40fee3632c21c2ecb0c241192ba8e950e16ae3a6ed7981a0b4ed98e726339b34bff1ccace248", "00aa16aca3c0b763cea675344b1e4a594e3e4b24bca0bf4d637117f6d1cfb68d"}}) 19:19:42 executing program 4: socket$inet6(0xa, 0x6, 0x920e) 19:19:42 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x1100) 19:19:42 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="140000000000000029000000080000000200000000000000380000000000000029000000040000008903000000000000010900000000000000000001040000000004010805020980040105000000000060"], 0xb0}}, {{&(0x7f0000000280)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="24000000000000002900000002000000200100000000000000000000000000019a"], 0x28}}], 0x2, 0x0) 19:19:42 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, 0x0, 0x0) 19:19:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x11, 0x1, 0x0, 0x0, {0x7, r1}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x0, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, 0x38}}, 0x0) 19:19:42 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0xa, @private2, @loopback}}) 19:19:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x2c, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7f}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) 19:19:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xf) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) 19:19:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@ipv4_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_GOTO={0x8}]}, 0x24}}, 0x0) 19:19:42 executing program 1: clock_gettime(0x5, &(0x7f0000000280)) 19:19:42 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000005c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2}}) 19:19:42 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001180), 0x0, 0x0) timerfd_gettime(r0, 0x0) 19:19:42 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$P9_RATTACH(r2, &(0x7f0000000340)={0x14}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r1, 0x0, 0x100000001) io_setup(0x6, &(0x7f0000000040)=0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000240000,user_id=', @ANYRESHEX=r3, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) io_submit(r4, 0x1, &(0x7f0000000640)=[&(0x7f0000000180)={0xf0ff1f, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000480)="100000000500"/16, 0x10}]) 19:19:42 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter, 0x48) 19:19:42 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSNPMODE(r0, 0x40047451, &(0x7f0000000180)={0x281}) 19:19:42 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000003c0)={0x2, &(0x7f0000000380)=[{0x0, 0x0, 0x0, 0x9}, {0x6}]}) 19:19:42 executing program 4: socket(0x11, 0x3, 0xfff) [ 578.573178][ T27] audit: type=1326 audit(1675106382.496:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12687 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3b8268c0c9 code=0x0 19:19:42 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:19:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)={0x14}, 0x14}}, 0x0) 19:19:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="30000000210001000000000000000000020000000500000100000000140003"], 0x30}}, 0x0) 19:19:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv4_delrule={0x1c, 0x11, 0x1}, 0x1c}}, 0x0) 19:19:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv4_delrule={0x1c, 0x12, 0x101, 0x0, 0x0, {0x8}}, 0x1c}}, 0x0) [ 578.728178][ T27] audit: type=1804 audit(1675106382.656:15): pid=12692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir951884477/syzkaller.UmnM86/586/cgroup.controllers" dev="sda1" ino=1159 res=1 errno=0 19:19:42 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002180)='/proc/slabinfo\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000004200)={0x2020}, 0x2020) 19:19:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}}, 0x0) [ 578.803165][T12700] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 578.842897][T12700] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 19:19:43 executing program 2: socketpair(0x28, 0x0, 0x73437046, &(0x7f0000000380)) 19:19:43 executing program 4: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000240)) 19:19:43 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) write$cgroup_devices(r0, 0x0, 0x0) 19:19:43 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 19:19:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x14}, 0x14}}, 0x0) 19:19:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv4_delrule={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'dvmrp0\x00'}]}, 0x30}}, 0x0) 19:19:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv4_delrule={0x1c, 0x25, 0x1, 0x0, 0x0, {0x8}}, 0x1c}}, 0x0) 19:19:43 executing program 0: syz_genetlink_get_family_id$tipc(&(0x7f0000001dc0), 0xffffffffffffffff) 19:19:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv4_delrule={0x1c, 0x21, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfd}}, 0x1c}}, 0x0) 19:19:43 executing program 1: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff}, 0xc) 19:19:43 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$char_usb(r0, &(0x7f0000001740)=""/152, 0x98) 19:19:43 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000040)='syzkaller\x00', 0x3, 0xcc, &(0x7f0000000080)=""/204, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:19:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv4_delrule={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) 19:19:43 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000b40)={0x1, &(0x7f0000000b00)=[{0x12}]}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 19:19:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x1c, 0x1, 0x0, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x0, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, 0x38}}, 0x0) 19:19:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@ipv4_getnexthop={0x18, 0x22, 0x195}, 0x18}}, 0x0) 19:19:43 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)=0x74000000) 19:19:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@ipv4_getnexthop={0x20, 0x18, 0x195, 0x0, 0x0, {}, [@NHA_GROUPS={0x4}, @NHA_GROUPS={0x4}]}, 0x20}}, 0x0) 19:19:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@ipv4_getnexthop={0x18, 0x5a, 0x195}, 0x18}}, 0x0) [ 579.392641][T12730] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 19:19:43 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001080)='a') 19:19:43 executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), 0xffffffffffffffff) [ 579.450823][T12736] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. 19:19:43 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x0, 0x418fb71ca2bcd624}, 0xc) 19:19:43 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSNPMODE(r0, 0x4010744d, &(0x7f0000000180)={0x0, 0x2000000}) 19:19:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@ipv4_getnexthop={0x18, 0x15, 0x1}, 0x18}}, 0x0) 19:19:43 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:19:43 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f00000016c0)={&(0x7f0000001300), 0xc, &(0x7f0000001680)={0x0}}, 0x0) 19:19:43 executing program 1: r0 = socket(0x11, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000005c0)) 19:19:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@ipv6_delroute={0x24, 0x19, 0x21, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6}]}, 0x24}}, 0x0) 19:19:43 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0) clock_getres(0x1, 0x0) nanosleep(0x0, 0x0) 19:19:43 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002280)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) 19:19:43 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x14, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:19:43 executing program 2: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) 19:19:43 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000003c0)={0x2, &(0x7f0000000380)=[{0x0, 0x0, 0x0, 0x9}, {0x6, 0x0, 0x4}]}) 19:19:43 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x3ff}]}) 19:19:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv4_delrule={0x30, 0x12, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x5}, [@FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'dvmrp0\x00'}]}, 0x30}}, 0x0) 19:19:43 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) 19:19:43 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000006c0)={&(0x7f0000000140), 0xc, &(0x7f0000000680)={&(0x7f00000001c0)={0x38, r0, 0x231, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6}]}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x38}}, 0x0) 19:19:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv4_delrule={0x1c, 0x2e, 0x1, 0x0, 0x0, {0x8}}, 0x1c}}, 0x0) 19:19:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv4_getnexthop={0x20, 0x1a, 0x195, 0x0, 0x0, {}, [@NHA_ID={0x8}]}, 0x20}}, 0x0) [ 579.857470][ T27] audit: type=1326 audit(1675106383.786:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12771 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa6cbc8c0c9 code=0x0 19:19:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@ipv4_getnexthop={0x18, 0x26, 0x195}, 0x18}}, 0x0) 19:19:43 executing program 0: r0 = gettid() capset(&(0x7f0000000080)={0x20080522, r0}, &(0x7f00000000c0)) 19:19:43 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, 0x0) 19:19:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'ip6tnl0\x00'}]}, 0x30}}, 0x0) [ 579.934206][T12782] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 19:19:43 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000003c0)={0x2, &(0x7f0000000380)=[{}, {0x6}]}) 19:19:43 executing program 5: bpf$BPF_MAP_FREEZE(0xa, 0x0, 0x0) 19:19:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@ipv4_getnexthop={0x18, 0x1e, 0x1}, 0x18}}, 0x0) 19:19:44 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 19:19:44 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x8000, 0x420, 0x5, 0x0, 0x1}, 0x48) 19:19:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x25, 0x1, 0x0, 0x0, {0x7, r1}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x0, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, 0x38}}, 0x0) [ 580.063770][ T27] audit: type=1326 audit(1675106383.986:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12789 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e4f28c0c9 code=0x0 19:19:44 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="fd"], 0x14}}, 0x0) 19:19:44 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000006c0)={'syztnl1\x00', 0x0}) 19:19:44 executing program 3: pipe2$9p(0x0, 0x880) 19:19:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv4_delrule={0x1c, 0x6a, 0x1, 0x0, 0x0, {0x8}}, 0x1c}}, 0x0) [ 580.200722][T12805] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 19:19:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001d0001"], 0x14}}, 0x0) 19:19:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x2e, 0x1, 0x0, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x0, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, 0x38}}, 0x0) 19:19:44 executing program 3: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_qrtr_TIOCINQ(r0, 0x891d, &(0x7f0000000080)) 19:19:44 executing program 5: openat$cuse(0xffffffffffffff9c, &(0x7f0000001b00), 0x2, 0x0) [ 580.312058][T12815] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 19:19:44 executing program 1: setsockopt$MRT6_PIM(0xffffffffffffffff, 0x29, 0xcf, 0x0, 0x0) 19:19:44 executing program 4: futex_waitv(&(0x7f00000012c0)=[{0x0, 0x0, 0x2}], 0x1, 0x0, 0x0, 0x0) [ 580.366859][T12819] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 19:19:44 executing program 5: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x440, &(0x7f0000000380)={[{@gid={'gid', 0x3d, 0xee01}}, {@uid}, {@force}, {@type={'type', 0x3d, "54c306e3"}}, {@barrier}, {@nls={'nls', 0x3d, 'cp1251'}}, {@nobarrier}, {@gid}, {@nodecompose}, {@nobarrier}, {@force}, {@nobarrier}, {@uid}, {@umask={'umask', 0x3d, 0x789}}]}, 0x1, 0x5ee, &(0x7f0000000680)="$eJzs3U9oHNcdB/DvrGXZ64KySewkLYWKGEwbU1urbWoXCnVLKTqEYuglV2GvY+G1EqRNUUJpt/+vPeaQQ3pwDzn1mtJDaHouFHr33dC7TlWZ2VlpbcmKFP/ZVfz5wNv33rx5b978PPO0O4vZAM+spTdzfJAiS+ff2Cjrd+90enfvdG6PyklOJGkkM8MsxWpSfJZcyTDlq+XGerjiYcd5/d4nH5774OPOsDZTp2r/xn79dtlzz0GdMp/kWJ0/gvvGu/bI4xXb8y4DdnYUOJi0rV0Gh+l+8PsWmFrF8O/mLq3kVJKT9fuA1KtD4+nO7vE71CoHAAAAR9Rzm9nMRuYmPQ8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Surf/y/q1BiV51OMfv9/tt6WunykfTrpCQAAAAAAAADAY/CNzWxmI3Oj+lZRfef/alU5Xb1+Je9mPd2s5UI2spx++llLO0lrbKDZjeV+f639sJ5bW1u/qnsu7tlz8emcLwAAAAAAAAB8Sf0mSzvf/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwDQokmPDrEqnR+VWGjNJTiaZLfcbJH8flY+yTyc9AQAAAHgKntvMZjYyV/xvWN8qqs/8L1Wf+0/m3aymn5X000s316tnAcNP/Y1/Dzq9u3c6t8u0e9wf/vdQ06hGzPDZw95HXqj2OLPdYyk/yc9yPvO5mrWs5OdZTj/dzOfHVWk5RVr104vWaJ57z/fKfbWrnzfXV6qZNHMjK9XcLuRa3k4v19OozqHaZ/8j/rqMTvGD2gFjdL3OyzP6U51Ph1YVkePbEVmoY19G4/n9I3HI6+TBI7XT2H4GdfoJxPxUnZex/sNUx3xx7Op7af9IJN/6zz+u3uyt3rp5Y/389JzSF/RgJDpjkXj54JEYHP1IzNbRGK6ih1stX636zmUlP83buZ5uLmUh7VzOQr6XxXTuu8LOHOBeaxzuXjv7zbrQTPLHOp8OZVyfH4vr+ErXqtrGt+xE6YXHvyLNfK0ulMf4bZ1Phwcj0R6LxIv7R+LPW+Xrem/11trN5XcOeLxzdV7etr+fqrW5vF5eKP+xqtr9V0fZ9uKebe2q7fR2W2NX25ntts+7U2fr93C7Rxq2vbxnW6dqe2Wsba93OQBMvVOvnZpt3mv+q/lR83fNm803Tv7oxOUTX5/N8X/O/O3YXxt/aXy/eC0f5ZeZm/RMAQAAAAAAAAAAAAAAAAAAAAAAAAAAAADgy2D9vfdvLfd63bUpLKQxFdNQUHhGCs3sbJn0ygQ8aRf7t9+5uP7e+99eub38Vvet7uri5UuXL3W+2/7OxRsrve7C8HXSswSehJ2//pOeCQAAAAAAAAAAAHBQT+P/FUz6HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICjbenNHB+kSHvhwkJZv3un0yvTqLyz50ySRpLiF0nxWXIlw5TW2HDFw47z+r1PPjz3wcednbFmRvs39ut3MIM6ZT7JsTp/XONde+Txiu0zLAN2dhQ4mLT/BwAA///IRBDJ") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="72797a3135cf2c3f3ce902d76d82a4c90000000000000000000000deb8cc70727486b8a90000ff6316d2f6fe2000000000400000003901000100d49f02fb634ff8cecd19f692bdc62760e81784a8"], 0x81) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x8dc, 0x0) 19:19:44 executing program 1: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x440, &(0x7f0000000380)={[{@gid={'gid', 0x3d, 0xee01}}, {@uid}, {@force}, {@type={'type', 0x3d, "54c306e3"}}, {@barrier}, {@nls={'nls', 0x3d, 'cp1251'}}, {@nobarrier}, {@gid}, {@nodecompose}, {@nobarrier}, {@force}, {@nobarrier}, {@uid}, {@umask={'umask', 0x3d, 0x789}}]}, 0x1, 0x5ee, &(0x7f0000000680)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="72797a3135cf2c3f3ce902d76d82a4c90000000000000000000000deb8cc70727486b8a90000ff6316d2f6fe2000000000400000003901000100d49f02fb634ff8cecd19f692bdc62760e81784a813e39785551764917eb498"], 0x81) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x8dc, 0x0) 19:19:44 executing program 4: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x440, &(0x7f0000000380)={[{@gid={'gid', 0x3d, 0xee01}}, {@uid}, {@force}, {@type={'type', 0x3d, "54c306e3"}}, {@barrier}, {@nls={'nls', 0x3d, 'cp1251'}}, {@nobarrier}, {@gid}, {@nodecompose}, {@nobarrier}, {@force}, {@nobarrier}, {@uid}, {@umask={'umask', 0x3d, 0x789}}]}, 0x1, 0x5ee, &(0x7f0000000680)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="72797a3135cf2c3f3ce902d76d82a4c90000000000000000000000deb8cc70727486b8a90000ff6316d2f6fe2000000000400000003901000100d49f02fb634ff8cecd19f692bdc62760e81784a813e39785551764917eb498"], 0x81) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x8dc, 0x0) [ 580.633035][T12833] loop5: detected capacity change from 0 to 1024 [ 580.644813][T12835] loop1: detected capacity change from 0 to 1024 [ 580.653322][T12834] loop4: detected capacity change from 0 to 1024 19:19:44 executing program 0: bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/608], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r5 = getpgid(r0) process_vm_writev(r5, &(0x7f0000001d40)=[{&(0x7f0000000740)=""/200, 0xc8}, {&(0x7f0000000bc0)=""/244, 0xf4}, {&(0x7f0000000cc0)=""/123, 0x7b}, {&(0x7f0000000d40)=""/4096, 0x1000}], 0x4, &(0x7f0000000400)=[{&(0x7f0000001dc0)=""/83, 0x53}, {&(0x7f0000001e40)=""/121, 0x79}], 0x2, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000001f40)=@abs={0x0, 0x0, 0x4e22}, 0x6e) ioctl$KVM_SET_GSI_ROUTING(r7, 0xae60, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) close(r7) r8 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, 0x0) fallocate(0xffffffffffffffff, 0x100000011, 0x0, 0x2811fdff) 19:19:44 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e030026000b12d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) (fail_nth: 1) 19:19:44 executing program 1: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x440, &(0x7f0000000380)={[{@gid={'gid', 0x3d, 0xee01}}, {@uid}, {@force}, {@type={'type', 0x3d, "54c306e3"}}, {@barrier}, {@nls={'nls', 0x3d, 'cp1251'}}, {@nobarrier}, {@gid}, {@nodecompose}, {@nobarrier}, {@force}, {@nobarrier}, {@uid}, {@umask={'umask', 0x3d, 0x789}}]}, 0x1, 0x5ee, &(0x7f0000000680)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="72797a3135cf2c3f3ce902d76d82a4c90000000000000000000000deb8cc70727486b8a90000ff6316d2f6fe2000000000400000003901000100d49f02fb634ff8cecd19f692bdc62760e81784a813e39785551764917eb498"], 0x81) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x8dc, 0x0) (fail_nth: 1) 19:19:44 executing program 4: syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000001140)='./file0\x00', 0x4408, &(0x7f0000000140)={[{@balloc_notest4}, {@balloc_test4}, {@jqfmt_vfsold}, {@balloc_test4}, {@grpjquota, 0x3d}]}, 0x1, 0x1102, &(0x7f00000022c0)="$eJzs2LFqFEEcBvBv9g5MdzLpF0ELCwkJZ2eVIsK11jYiqUyVqyI2vouPI6nsQx7AImAprEyyl6SIBMzJEfj94Gbmvp3Z/045EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjypjXbXVJXSZekJH1/ujhP0q/yp98nXUreHS6WB8fzt8txasu6lDZsy1L3nm/VeZ3Xvfp6e/9FXZ58/vTh6OjweHxNSZ+zi/VvpNWe/O3h1vrrAQAAwGMxPNhsw/UBAACA+6ztIgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgHw2zm3FN8nsYhnRJStL3p4vzJP0mPxAAAAB4sJIu72d35bm8BrjxKj9m5Tpv/a/Sxrv5dsd6AAAA4LbpvTPKrfP4y0yvz+Ute5Zpdnau/o9dfu4nk5OD7ObJmHy9bM8uvnxc/cow+R+bAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAP+zAAQkAAACAoP+v2xEoAAAAAAAAAAAAAAAAAADASgEAAP//C6/ZOQ==") (fail_nth: 1) 19:19:44 executing program 5: socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f00000028c0)={&(0x7f0000000180)=@ax25={{0x3, @null}, [@netrom, @default, @bcast, @default, @rose, @default, @default, @default]}, 0x80, &(0x7f0000001840)=[{&(0x7f0000000280)=""/8, 0x8}, {&(0x7f00000002c0)=""/206, 0xce}, {&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/159, 0x9f}, {&(0x7f0000000700)=""/49, 0x31}, {&(0x7f0000002900)=""/4096, 0x1000}], 0x6, &(0x7f00000018c0)=""/4096, 0x1000}, 0x40000200) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) recvmsg(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000740)=""/251, 0xfb}], 0x1}, 0x0) [ 580.833842][T12838] FAULT_INJECTION: forcing a failure. [ 580.833842][T12838] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 580.885140][T12838] CPU: 0 PID: 12838 Comm: syz-executor.2 Not tainted 6.2.0-rc5-next-20230127-syzkaller-08766-ge2f86c02fdc9 #0 [ 580.896927][T12838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 580.907020][T12838] Call Trace: [ 580.910329][T12838] [ 580.913300][T12838] dump_stack_lvl+0x136/0x150 [ 580.918050][T12838] should_fail_ex+0x4a3/0x5b0 [ 580.922840][T12838] _copy_from_user+0x2e/0x170 [ 580.927614][T12838] copy_msghdr_from_user+0x89/0x150 [ 580.932938][T12838] ? __copy_msghdr+0x4b0/0x4b0 [ 580.937749][T12838] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 580.943806][T12838] ? find_held_lock+0x2d/0x110 [ 580.948599][T12838] ___sys_sendmsg+0xdd/0x1b0 [ 580.953229][T12838] ? do_recvmmsg+0x6e0/0x6e0 [ 580.957850][T12838] ? __fget_files+0x248/0x480 [ 580.962624][T12838] ? lock_downgrade+0x690/0x690 [ 580.967527][T12838] ? trace_lock_acquire+0x1f1/0x2b0 [ 580.972755][T12838] ? receive_fd+0x110/0x110 [ 580.977283][T12838] ? lock_acquire+0x32/0xc0 [ 580.981806][T12838] ? receive_fd+0x110/0x110 [ 580.986343][T12838] ? __fget_files+0x26a/0x480 [ 580.991665][T12838] ? __fget_light+0xe5/0x270 [ 580.996294][T12838] __sys_sendmsg+0xf7/0x1c0 [ 581.000831][T12838] ? __sys_sendmsg_sock+0x40/0x40 [ 581.005898][T12838] ? syscall_enter_from_user_mode+0x26/0xb0 [ 581.012010][T12838] ? lockdep_hardirqs_on+0x7d/0x100 [ 581.017226][T12838] do_syscall_64+0x39/0xb0 [ 581.021799][T12838] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 581.027762][T12838] RIP: 0033:0x7f1e4f28c0c9 [ 581.032191][T12838] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 581.051900][T12838] RSP: 002b:00007f1e50045168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 581.060356][T12838] RAX: ffffffffffffffda RBX: 00007f1e4f3abf80 RCX: 00007f1e4f28c0c9 [ 581.068337][T12838] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 581.076318][T12838] RBP: 00007f1e500451d0 R08: 0000000000000000 R09: 0000000000000000 [ 581.084301][T12838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 581.092281][T12838] R13: 00007ffed80c2fbf R14: 00007f1e50045300 R15: 0000000000022000 [ 581.100396][T12838] [ 581.118429][T12846] FAULT_INJECTION: forcing a failure. [ 581.118429][T12846] name failslab, interval 1, probability 0, space 0, times 1 [ 581.119990][T12842] loop1: detected capacity change from 0 to 1024 [ 581.156130][T12846] CPU: 1 PID: 12846 Comm: syz-executor.4 Not tainted 6.2.0-rc5-next-20230127-syzkaller-08766-ge2f86c02fdc9 #0 [ 581.167827][T12846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 581.177932][T12846] Call Trace: [ 581.181242][T12846] [ 581.184205][T12846] dump_stack_lvl+0x136/0x150 [ 581.188929][T12846] should_fail_ex+0x4a3/0x5b0 [ 581.193660][T12846] should_failslab+0x9/0x20 [ 581.199593][T12846] __kmem_cache_alloc_node+0x5b/0x330 [ 581.205099][T12846] ? __do_sys_memfd_create+0x12d/0x910 [ 581.210658][T12846] ? __do_sys_memfd_create+0x12d/0x910 [ 581.216174][T12846] __kmalloc+0x4a/0xd0 [ 581.220291][T12846] __do_sys_memfd_create+0x12d/0x910 [ 581.225621][T12846] ? PageTransHuge+0x300/0x300 [ 581.230444][T12846] ? syscall_enter_from_user_mode+0x26/0xb0 [ 581.236387][T12846] do_syscall_64+0x39/0xb0 [ 581.240847][T12846] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 581.246766][T12846] RIP: 0033:0x7f11b0e8c0c9 [ 581.251198][T12846] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 581.270835][T12846] RSP: 002b:00007f11b1bfff38 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 581.279276][T12846] RAX: ffffffffffffffda RBX: 0000000000001102 RCX: 00007f11b0e8c0c9 [ 581.287268][T12846] RDX: 00007f11b1bfffdc RSI: 0000000000000000 RDI: 00007f11b0ee6e81 [ 581.295293][T12846] RBP: 0000000000001102 R08: 00007f11b1bffe20 R09: ffffffffffffffff [ 581.303312][T12846] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020001100 [ 581.311314][T12846] R13: 00007f11b1bfffdc R14: 00007f11b1bfffe0 R15: 00000000200022c0 [ 581.319326][T12846] [ 581.326464][T12842] FAULT_INJECTION: forcing a failure. [ 581.326464][T12842] name failslab, interval 1, probability 0, space 0, times 1 [ 581.341743][T12842] CPU: 0 PID: 12842 Comm: syz-executor.1 Not tainted 6.2.0-rc5-next-20230127-syzkaller-08766-ge2f86c02fdc9 #0 [ 581.353434][T12842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 581.363642][T12842] Call Trace: [ 581.366986][T12842] [ 581.369947][T12842] dump_stack_lvl+0x136/0x150 [ 581.374678][T12842] should_fail_ex+0x4a3/0x5b0 [ 581.379423][T12842] ? getname_flags.part.0+0x50/0x4f0 [ 581.384808][T12842] should_failslab+0x9/0x20 [ 581.389349][T12842] kmem_cache_alloc+0x5a/0x320 [ 581.394155][T12842] ? lock_downgrade+0x690/0x690 [ 581.399035][T12842] getname_flags.part.0+0x50/0x4f0 [ 581.404180][T12842] getname+0x92/0xd0 [ 581.408109][T12842] do_sys_openat2+0xf5/0x4c0 [ 581.412748][T12842] ? build_open_flags+0x6f0/0x6f0 [ 581.417823][T12842] __x64_sys_openat+0x143/0x1f0 [ 581.422725][T12842] ? __ia32_sys_open+0x1c0/0x1c0 [ 581.427819][T12842] ? syscall_enter_from_user_mode+0x26/0xb0 [ 581.433753][T12842] do_syscall_64+0x39/0xb0 [ 581.438200][T12842] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 581.444116][T12842] RIP: 0033:0x7f245868c0c9 [ 581.448556][T12842] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 581.468197][T12842] RSP: 002b:00007f2459441168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 581.476632][T12842] RAX: ffffffffffffffda RBX: 00007f24587abf80 RCX: 00007f245868c0c9 19:19:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv4_delrule={0x1c, 0x28, 0x1, 0x0, 0x0, {0x8}}, 0x1c}}, 0x0) 19:19:45 executing program 4: syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000001140)='./file0\x00', 0x4408, &(0x7f0000000140)={[{@balloc_notest4}, {@balloc_test4}, {@jqfmt_vfsold}, {@balloc_test4}, {@grpjquota, 0x3d}]}, 0x1, 0x1102, &(0x7f00000022c0)="$eJzs2LFqFEEcBvBv9g5MdzLpF0ELCwkJZ2eVIsK11jYiqUyVqyI2vouPI6nsQx7AImAprEyyl6SIBMzJEfj94Gbmvp3Z/045EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjypjXbXVJXSZekJH1/ujhP0q/yp98nXUreHS6WB8fzt8txasu6lDZsy1L3nm/VeZ3Xvfp6e/9FXZ58/vTh6OjweHxNSZ+zi/VvpNWe/O3h1vrrAQAAwGMxPNhsw/UBAACA+6ztIgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgHw2zm3FN8nsYhnRJStL3p4vzJP0mPxAAAAB4sJIu72d35bm8BrjxKj9m5Tpv/a/Sxrv5dsd6AAAA4LbpvTPKrfP4y0yvz+Ute5Zpdnau/o9dfu4nk5OD7ObJmHy9bM8uvnxc/cow+R+bAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAP+zAAQkAAACAoP+v2xEoAAAAAAAAAAAAAAAAAADASgEAAP//C6/ZOQ==") (fail_nth: 2) [ 581.484797][T12842] RDX: 00000000000008dc RSI: 0000000020000040 RDI: ffffffffffffff9c [ 581.492781][T12842] RBP: 00007f24594411d0 R08: 0000000000000000 R09: 0000000000000000 [ 581.500769][T12842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 581.508757][T12842] R13: 00007fff6f88cc8f R14: 00007f2459441300 R15: 0000000000022000 [ 581.516758][T12842] 19:19:45 executing program 1: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x440, &(0x7f0000000380)={[{@gid={'gid', 0x3d, 0xee01}}, {@uid}, {@force}, {@type={'type', 0x3d, "54c306e3"}}, {@barrier}, {@nls={'nls', 0x3d, 'cp1251'}}, {@nobarrier}, {@gid}, {@nodecompose}, {@nobarrier}, {@force}, {@nobarrier}, {@uid}, {@umask={'umask', 0x3d, 0x789}}]}, 0x1, 0x5ee, &(0x7f0000000680)="$eJzs3U9oHNcdB/DvrGXZ64KySewkLYWKGEwbU1urbWoXCnVLKTqEYuglV2GvY+G1EqRNUUJpt/+vPeaQQ3pwDzn1mtJDaHouFHr33dC7TlWZ2VlpbcmKFP/ZVfz5wNv33rx5b978PPO0O4vZAM+spTdzfJAiS+ff2Cjrd+90enfvdG6PyklOJGkkM8MsxWpSfJZcyTDlq+XGerjiYcd5/d4nH5774OPOsDZTp2r/xn79dtlzz0GdMp/kWJ0/gvvGu/bI4xXb8y4DdnYUOJi0rV0Gh+l+8PsWmFrF8O/mLq3kVJKT9fuA1KtD4+nO7vE71CoHAAAAR9Rzm9nMRuYmPQ8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Surf/y/q1BiV51OMfv9/tt6WunykfTrpCQAAAAAAAADAY/CNzWxmI3Oj+lZRfef/alU5Xb1+Je9mPd2s5UI2spx++llLO0lrbKDZjeV+f639sJ5bW1u/qnsu7tlz8emcLwAAAAAAAAB8Sf0mSzvf/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwDQokmPDrEqnR+VWGjNJTiaZLfcbJH8flY+yTyc9AQAAAHgKntvMZjYyV/xvWN8qqs/8L1Wf+0/m3aymn5X000s316tnAcNP/Y1/Dzq9u3c6t8u0e9wf/vdQ06hGzPDZw95HXqj2OLPdYyk/yc9yPvO5mrWs5OdZTj/dzOfHVWk5RVr104vWaJ57z/fKfbWrnzfXV6qZNHMjK9XcLuRa3k4v19OozqHaZ/8j/rqMTvGD2gFjdL3OyzP6U51Ph1YVkePbEVmoY19G4/n9I3HI6+TBI7XT2H4GdfoJxPxUnZex/sNUx3xx7Op7af9IJN/6zz+u3uyt3rp5Y/389JzSF/RgJDpjkXj54JEYHP1IzNbRGK6ih1stX636zmUlP83buZ5uLmUh7VzOQr6XxXTuu8LOHOBeaxzuXjv7zbrQTPLHOp8OZVyfH4vr+ErXqtrGt+xE6YXHvyLNfK0ulMf4bZ1Phwcj0R6LxIv7R+LPW+Xrem/11trN5XcOeLxzdV7etr+fqrW5vF5eKP+xqtr9V0fZ9uKebe2q7fR2W2NX25ntts+7U2fr93C7Rxq2vbxnW6dqe2Wsba93OQBMvVOvnZpt3mv+q/lR83fNm803Tv7oxOUTX5/N8X/O/O3YXxt/aXy/eC0f5ZeZm/RMAQAAAAAAAAAAAAAAAAAAAAAAAAAAAADgy2D9vfdvLfd63bUpLKQxFdNQUHhGCs3sbJn0ygQ8aRf7t9+5uP7e+99eub38Vvet7uri5UuXL3W+2/7OxRsrve7C8HXSswSehJ2//pOeCQAAAAAAAAAAAHBQT+P/FUz6HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICjbenNHB+kSHvhwkJZv3un0yvTqLyz50ySRpLiF0nxWXIlw5TW2HDFw47z+r1PPjz3wcednbFmRvs39ut3MIM6ZT7JsTp/XONde+Txiu0zLAN2dhQ4mLT/BwAA///IRBDJ") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="72797a3135cf2c3f3ce902d76d82a4c90000000000000000000000deb8cc70727486b8a90000ff6316d2f6fe2000000000400000003901000100d49f02fb634ff8cecd19f692bdc62760e81784a813e39785551764917eb498"], 0x81) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x8dc, 0x0) (fail_nth: 2) 19:19:45 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e030026000b12d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) (fail_nth: 2) 19:19:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv4_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {0x2, 0x0, 0x80}, [@FRA_SRC={0x8, 0x2, @remote}]}, 0x24}}, 0x0) [ 581.645071][T12859] FAULT_INJECTION: forcing a failure. [ 581.645071][T12859] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 581.683191][T12860] loop1: detected capacity change from 0 to 1024 [ 581.691501][T12861] FAULT_INJECTION: forcing a failure. [ 581.691501][T12861] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 581.711553][T12859] CPU: 1 PID: 12859 Comm: syz-executor.4 Not tainted 6.2.0-rc5-next-20230127-syzkaller-08766-ge2f86c02fdc9 #0 [ 581.723329][T12859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 581.733445][T12859] Call Trace: [ 581.736753][T12859] [ 581.739716][T12859] dump_stack_lvl+0x136/0x150 [ 581.744450][T12859] should_fail_ex+0x4a3/0x5b0 [ 581.749183][T12859] _copy_from_user+0x2e/0x170 [ 581.753908][T12859] __do_sys_memfd_create+0x1ac/0x910 [ 581.759249][T12859] ? PageTransHuge+0x300/0x300 [ 581.764068][T12859] ? syscall_enter_from_user_mode+0x26/0xb0 [ 581.770111][T12859] do_syscall_64+0x39/0xb0 [ 581.774587][T12859] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 581.780556][T12859] RIP: 0033:0x7f11b0e8c0c9 [ 581.785007][T12859] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 581.804742][T12859] RSP: 002b:00007f11b1bfff38 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 581.813381][T12859] RAX: ffffffffffffffda RBX: 0000000000001102 RCX: 00007f11b0e8c0c9 [ 581.821483][T12859] RDX: 00007f11b1bfffdc RSI: 0000000000000000 RDI: 00007f11b0ee6e81 [ 581.829475][T12859] RBP: 0000000000001102 R08: 00007f11b1bffe20 R09: ffffffffffffffff [ 581.837461][T12859] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020001100 19:19:45 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x8c}, 0x0) [ 581.845444][T12859] R13: 00007f11b1bfffdc R14: 00007f11b1bfffe0 R15: 00000000200022c0 [ 581.853445][T12859] [ 581.886280][T12861] CPU: 1 PID: 12861 Comm: syz-executor.2 Not tainted 6.2.0-rc5-next-20230127-syzkaller-08766-ge2f86c02fdc9 #0 [ 581.897984][T12861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 581.908083][T12861] Call Trace: [ 581.911393][T12861] [ 581.914358][T12861] dump_stack_lvl+0x136/0x150 [ 581.919088][T12861] should_fail_ex+0x4a3/0x5b0 [ 581.923820][T12861] _copy_from_user+0x2e/0x170 [ 581.928544][T12861] iovec_from_user+0x14d/0x3a0 [ 581.933392][T12861] ? __might_fault+0xd9/0x180 [ 581.938176][T12861] __import_iovec+0x69/0x610 [ 581.942821][T12861] ? __might_fault+0xa9/0x180 [ 581.947543][T12861] ? lock_acquire+0x32/0xc0 [ 581.952079][T12861] ? __might_fault+0xa9/0x180 [ 581.956793][T12861] import_iovec+0x110/0x160 [ 581.961337][T12861] copy_msghdr_from_user+0xed/0x150 [ 581.966574][T12861] ? __copy_msghdr+0x4b0/0x4b0 [ 581.971365][T12861] ? find_held_lock+0x2d/0x110 [ 581.976155][T12861] ___sys_sendmsg+0xdd/0x1b0 [ 581.980770][T12861] ? do_recvmmsg+0x6e0/0x6e0 [ 581.985383][T12861] ? __fget_files+0x248/0x480 [ 581.990093][T12861] ? lock_downgrade+0x690/0x690 [ 581.994974][T12861] ? trace_lock_acquire+0x1f1/0x2b0 [ 582.000201][T12861] ? receive_fd+0x110/0x110 [ 582.004757][T12861] ? lock_acquire+0x32/0xc0 [ 582.009293][T12861] ? receive_fd+0x110/0x110 [ 582.013832][T12861] ? __fget_files+0x26a/0x480 [ 582.018543][T12861] ? __fget_light+0xe5/0x270 [ 582.023167][T12861] __sys_sendmsg+0xf7/0x1c0 [ 582.027695][T12861] ? __sys_sendmsg_sock+0x40/0x40 [ 582.032767][T12861] ? syscall_enter_from_user_mode+0x26/0xb0 [ 582.038682][T12861] ? lockdep_hardirqs_on+0x7d/0x100 [ 582.043899][T12861] do_syscall_64+0x39/0xb0 [ 582.048368][T12861] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 582.054283][T12861] RIP: 0033:0x7f1e4f28c0c9 [ 582.058710][T12861] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 582.078347][T12861] RSP: 002b:00007f1e50045168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 19:19:46 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) [ 582.086773][T12861] RAX: ffffffffffffffda RBX: 00007f1e4f3abf80 RCX: 00007f1e4f28c0c9 [ 582.094847][T12861] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 582.102829][T12861] RBP: 00007f1e500451d0 R08: 0000000000000000 R09: 0000000000000000 [ 582.110808][T12861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 582.118790][T12861] R13: 00007ffed80c2fbf R14: 00007f1e50045300 R15: 0000000000022000 [ 582.126810][T12861] [ 582.160413][T12860] FAULT_INJECTION: forcing a failure. [ 582.160413][T12860] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 582.208149][T12860] CPU: 1 PID: 12860 Comm: syz-executor.1 Not tainted 6.2.0-rc5-next-20230127-syzkaller-08766-ge2f86c02fdc9 #0 [ 582.219849][T12860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 582.229935][T12860] Call Trace: [ 582.233228][T12860] [ 582.236183][T12860] dump_stack_lvl+0x136/0x150 [ 582.240902][T12860] should_fail_ex+0x4a3/0x5b0 [ 582.245618][T12860] strncpy_from_user+0x38/0x3c0 [ 582.250556][T12860] getname_flags.part.0+0x95/0x4f0 [ 582.255704][T12860] getname+0x92/0xd0 [ 582.259627][T12860] do_sys_openat2+0xf5/0x4c0 [ 582.264246][T12860] ? build_open_flags+0x6f0/0x6f0 [ 582.269316][T12860] __x64_sys_openat+0x143/0x1f0 [ 582.274223][T12860] ? __ia32_sys_open+0x1c0/0x1c0 [ 582.279301][T12860] ? syscall_enter_from_user_mode+0x26/0xb0 [ 582.285235][T12860] do_syscall_64+0x39/0xb0 [ 582.289710][T12860] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 582.295646][T12860] RIP: 0033:0x7f245868c0c9 [ 582.300086][T12860] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 582.319732][T12860] RSP: 002b:00007f2459441168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 582.328173][T12860] RAX: ffffffffffffffda RBX: 00007f24587abf80 RCX: 00007f245868c0c9 [ 582.336159][T12860] RDX: 00000000000008dc RSI: 0000000020000040 RDI: ffffffffffffff9c [ 582.344145][T12860] RBP: 00007f24594411d0 R08: 0000000000000000 R09: 0000000000000000 [ 582.352127][T12860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 582.360111][T12860] R13: 00007fff6f88cc8f R14: 00007f2459441300 R15: 0000000000022000 [ 582.368116][T12860] 19:19:46 executing program 0: bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000004c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000800000095000000000000009500a5050000000077d8f3b423cdac8d8000000000000020e16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f68a7d06d7535f7866907dc6751dfb265a0e3ccae669e173a649c1cfd6587d452d46b7cc957d77578f4c35235138d5521f9453559c3421eed73d5661cfeecf9c66c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe3e26e7a23129d6606fd28a69989d552af6200000003a00000000000000abecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd5234712596b696418f163d1a13ed38ae89d24e1cebfba2f87925bfacba83109753f541cd027edd68149ee99eebc6f7d6dd4aed4afe1f44ccb19e810879b70a70000000000000000000000d7900a820b6327944e9a217b9800e02a92895614766dcbe43a1ed25268816b004519c9c5cff097d8000000000009d27d753a30a147b34a48435bd8a568669596e9e0867bb3ce48e90defb6670c3d62ad0a97aec773713a66b223fa8b148871c8d31d24291c25449f106b99893ed20fa7a050fbbef90327e827e513e9606800000000e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e69ee52b59d13182e1f24ed200ada12f7a1525320e71666f472a97214d0b2874df30ed5eb1affb87ba55b2d72078e9f40b4ae7dc3b2aeb0d11cd22c35d32940f19dff00ffffffff08000000e1ff003853e59de7621e348955735264f34b10a1813668297a7edad187ef106ae7fcbb25090f17d0baadeb8ae190a1fb5a315f8347fb0379659500"/608], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) (async) r5 = getpgid(r0) process_vm_writev(r5, &(0x7f0000001d40)=[{&(0x7f0000000740)=""/200, 0xc8}, {&(0x7f0000000bc0)=""/244, 0xf4}, {&(0x7f0000000cc0)=""/123, 0x7b}, {&(0x7f0000000d40)=""/4096, 0x1000}], 0x4, &(0x7f0000000400)=[{&(0x7f0000001dc0)=""/83, 0x53}, {&(0x7f0000001e40)=""/121, 0x79}], 0x2, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000001f40)=@abs={0x0, 0x0, 0x4e22}, 0x6e) (async) ioctl$KVM_SET_GSI_ROUTING(r7, 0xae60, 0x0) (async) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) (async) close(r7) (async) r8 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, 0x0) (async) fallocate(0xffffffffffffffff, 0x100000011, 0x0, 0x2811fdff) 19:19:46 executing program 3: setgroups(0x8, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) 19:19:46 executing program 5: socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f00000028c0)={&(0x7f0000000180)=@ax25={{0x3, @null}, [@netrom, @default, @bcast, @default, @rose, @default, @default, @default]}, 0x80, &(0x7f0000001840)=[{&(0x7f0000000280)=""/8, 0x8}, {&(0x7f00000002c0)=""/206, 0xce}, {&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/159, 0x9f}, {&(0x7f0000000700)=""/49, 0x31}, {&(0x7f0000002900)=""/4096, 0x1000}], 0x6, &(0x7f00000018c0)=""/4096, 0x1000}, 0x40000200) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) (async) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async) recvmsg(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000740)=""/251, 0xfb}], 0x1}, 0x0) 19:19:46 executing program 4: syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000001140)='./file0\x00', 0x4408, &(0x7f0000000140)={[{@balloc_notest4}, {@balloc_test4}, {@jqfmt_vfsold}, {@balloc_test4}, {@grpjquota, 0x3d}]}, 0x1, 0x1102, &(0x7f00000022c0)="$eJzs2LFqFEEcBvBv9g5MdzLpF0ELCwkJZ2eVIsK11jYiqUyVqyI2vouPI6nsQx7AImAprEyyl6SIBMzJEfj94Gbmvp3Z/045EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjypjXbXVJXSZekJH1/ujhP0q/yp98nXUreHS6WB8fzt8txasu6lDZsy1L3nm/VeZ3Xvfp6e/9FXZ58/vTh6OjweHxNSZ+zi/VvpNWe/O3h1vrrAQAAwGMxPNhsw/UBAACA+6ztIgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgHw2zm3FN8nsYhnRJStL3p4vzJP0mPxAAAAB4sJIu72d35bm8BrjxKj9m5Tpv/a/Sxrv5dsd6AAAA4LbpvTPKrfP4y0yvz+Ute5Zpdnau/o9dfu4nk5OD7ObJmHy9bM8uvnxc/cow+R+bAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAP+zAAQkAAACAoP+v2xEoAAAAAAAAAAAAAAAAAADASgEAAP//C6/ZOQ==") (fail_nth: 3) 19:19:46 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e030026000b12d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) (fail_nth: 3) 19:19:46 executing program 1: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x440, &(0x7f0000000380)={[{@gid={'gid', 0x3d, 0xee01}}, {@uid}, {@force}, {@type={'type', 0x3d, "54c306e3"}}, {@barrier}, {@nls={'nls', 0x3d, 'cp1251'}}, {@nobarrier}, {@gid}, {@nodecompose}, {@nobarrier}, {@force}, {@nobarrier}, {@uid}, {@umask={'umask', 0x3d, 0x789}}]}, 0x1, 0x5ee, &(0x7f0000000680)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="72797a3135cf2c3f3ce902d76d82a4c90000000000000000000000deb8cc70727486b8a90000ff6316d2f6fe2000000000400000003901000100d49f02fb634ff8cecd19f692bdc62760e81784a813e39785551764917eb498"], 0x81) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x8dc, 0x0) (fail_nth: 3) [ 582.520285][T12873] FAULT_INJECTION: forcing a failure. [ 582.520285][T12873] name failslab, interval 1, probability 0, space 0, times 0 19:19:46 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001440)=[{{&(0x7f0000000140)={0xa, 0x8, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="14"], 0x18}}], 0x1, 0x0) [ 582.596596][T12876] FAULT_INJECTION: forcing a failure. [ 582.596596][T12876] name failslab, interval 1, probability 0, space 0, times 0 [ 582.633465][T12873] CPU: 0 PID: 12873 Comm: syz-executor.4 Not tainted 6.2.0-rc5-next-20230127-syzkaller-08766-ge2f86c02fdc9 #0 [ 582.645168][T12873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 582.655261][T12873] Call Trace: [ 582.658573][T12873] [ 582.661538][T12873] dump_stack_lvl+0x136/0x150 [ 582.666264][T12873] should_fail_ex+0x4a3/0x5b0 [ 582.670993][T12873] should_failslab+0x9/0x20 [ 582.675582][T12873] kmem_cache_alloc_lru+0x65/0x580 [ 582.680760][T12873] ? shmem_alloc_inode+0x27/0x50 [ 582.685833][T12873] shmem_alloc_inode+0x27/0x50 [ 582.690655][T12873] ? shmem_destroy_inode+0x70/0x70 [ 582.695831][T12873] alloc_inode+0x61/0x230 [ 582.700306][T12873] new_inode+0x2b/0x280 [ 582.704521][T12873] shmem_get_inode+0x1a1/0xe60 [ 582.709342][T12873] ? do_raw_spin_unlock+0x175/0x230 [ 582.714605][T12873] __shmem_file_setup+0x16d/0x300 [ 582.719694][T12873] __do_sys_memfd_create+0x327/0x910 [ 582.725041][T12873] ? PageTransHuge+0x300/0x300 [ 582.729894][T12873] ? syscall_enter_from_user_mode+0x26/0xb0 [ 582.735851][T12873] do_syscall_64+0x39/0xb0 [ 582.740330][T12873] entry_SYSCALL_64_after_hwframe+0x63/0xcd 19:19:46 executing program 5: socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f00000028c0)={&(0x7f0000000180)=@ax25={{0x3, @null}, [@netrom, @default, @bcast, @default, @rose, @default, @default, @default]}, 0x80, &(0x7f0000001840)=[{&(0x7f0000000280)=""/8, 0x8}, {&(0x7f00000002c0)=""/206, 0xce}, {&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/159, 0x9f}, {&(0x7f0000000700)=""/49, 0x31}, {&(0x7f0000002900)=""/4096, 0x1000}], 0x6, &(0x7f00000018c0)=""/4096, 0x1000}, 0x40000200) (async, rerun: 64) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) (rerun: 64) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) recvmsg(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000740)=""/251, 0xfb}], 0x1}, 0x0) 19:19:46 executing program 3: sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0) socketpair(0x23, 0x0, 0x0, &(0x7f0000001ec0)) [ 582.746268][T12873] RIP: 0033:0x7f11b0e8c0c9 [ 582.750722][T12873] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 582.770374][T12873] RSP: 002b:00007f11b1bfff38 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 582.778850][T12873] RAX: ffffffffffffffda RBX: 0000000000001102 RCX: 00007f11b0e8c0c9 [ 582.786864][T12873] RDX: 00007f11b1bfffdc RSI: 0000000000000000 RDI: 00007f11b0ee6e81 [ 582.794876][T12873] RBP: 0000000000001102 R08: 00007f11b1bffe20 R09: ffffffffffffffff [ 582.802885][T12873] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020001100 [ 582.810900][T12873] R13: 00007f11b1bfffdc R14: 00007f11b1bfffe0 R15: 00000000200022c0 [ 582.818932][T12873] 19:19:46 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) [ 582.907571][T12891] loop1: detected capacity change from 0 to 1024 [ 583.004430][T12891] FAULT_INJECTION: forcing a failure. [ 583.004430][T12891] name failslab, interval 1, probability 0, space 0, times 0 [ 583.042045][T12891] CPU: 0 PID: 12891 Comm: syz-executor.1 Not tainted 6.2.0-rc5-next-20230127-syzkaller-08766-ge2f86c02fdc9 #0 [ 583.053746][T12891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 583.063837][T12891] Call Trace: [ 583.067157][T12891] [ 583.070212][T12891] dump_stack_lvl+0x136/0x150 [ 583.074945][T12891] should_fail_ex+0x4a3/0x5b0 [ 583.079676][T12891] ? __alloc_file+0x21/0x270 [ 583.084314][T12891] should_failslab+0x9/0x20 [ 583.088864][T12891] kmem_cache_alloc+0x5a/0x320 [ 583.093686][T12891] __alloc_file+0x21/0x270 [ 583.098150][T12891] alloc_empty_file+0x71/0x190 [ 583.102963][T12891] path_openat+0xe6/0x2750 [ 583.107436][T12891] ? handle_mm_fault+0x25b/0x850 [ 583.112419][T12891] ? path_lookupat+0x840/0x840 [ 583.117245][T12891] do_filp_open+0x1ba/0x410 [ 583.121799][T12891] ? may_open_dev+0xf0/0xf0 [ 583.126356][T12891] ? find_held_lock+0x2d/0x110 [ 583.131170][T12891] ? alloc_fd+0x2e4/0x750 [ 583.135552][T12891] ? do_raw_spin_lock+0x124/0x2b0 [ 583.140632][T12891] ? spin_bug+0x1c0/0x1c0 [ 583.145020][T12891] ? _raw_spin_unlock+0x28/0x40 [ 583.149981][T12891] ? alloc_fd+0x2e4/0x750 19:19:47 executing program 3: timer_create(0x0, &(0x7f0000001340)={0x0, 0x0, 0x2, @thr={0x0, 0x0}}, 0x0) 19:19:47 executing program 4: syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000001140)='./file0\x00', 0x4408, &(0x7f0000000140)={[{@balloc_notest4}, {@balloc_test4}, {@jqfmt_vfsold}, {@balloc_test4}, {@grpjquota, 0x3d}]}, 0x1, 0x1102, &(0x7f00000022c0)="$eJzs2LFqFEEcBvBv9g5MdzLpF0ELCwkJZ2eVIsK11jYiqUyVqyI2vouPI6nsQx7AImAprEyyl6SIBMzJEfj94Gbmvp3Z/045EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjypjXbXVJXSZekJH1/ujhP0q/yp98nXUreHS6WB8fzt8txasu6lDZsy1L3nm/VeZ3Xvfp6e/9FXZ58/vTh6OjweHxNSZ+zi/VvpNWe/O3h1vrrAQAAwGMxPNhsw/UBAACA+6ztIgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgHw2zm3FN8nsYhnRJStL3p4vzJP0mPxAAAAB4sJIu72d35bm8BrjxKj9m5Tpv/a/Sxrv5dsd6AAAA4LbpvTPKrfP4y0yvz+Ute5Zpdnau/o9dfu4nk5OD7ObJmHy9bM8uvnxc/cow+R+bAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAP+zAAQkAAACAoP+v2xEoAAAAAAAAAAAAAAAAAADASgEAAP//C6/ZOQ==") (fail_nth: 4) [ 583.154383][T12891] do_sys_openat2+0x16d/0x4c0 [ 583.159117][T12891] ? build_open_flags+0x6f0/0x6f0 [ 583.164212][T12891] __x64_sys_openat+0x143/0x1f0 [ 583.169123][T12891] ? __ia32_sys_open+0x1c0/0x1c0 [ 583.174123][T12891] ? syscall_enter_from_user_mode+0x26/0xb0 [ 583.180100][T12891] do_syscall_64+0x39/0xb0 [ 583.184591][T12891] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 583.190532][T12891] RIP: 0033:0x7f245868c0c9 [ 583.194988][T12891] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 583.214647][T12891] RSP: 002b:00007f2459441168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 583.223103][T12891] RAX: ffffffffffffffda RBX: 00007f24587abf80 RCX: 00007f245868c0c9 [ 583.231111][T12891] RDX: 00000000000008dc RSI: 0000000020000040 RDI: ffffffffffffff9c [ 583.239114][T12891] RBP: 00007f24594411d0 R08: 0000000000000000 R09: 0000000000000000 [ 583.247121][T12891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 583.255134][T12891] R13: 00007fff6f88cc8f R14: 00007f2459441300 R15: 0000000000022000 [ 583.260567][T12900] FAULT_INJECTION: forcing a failure. [ 583.260567][T12900] name failslab, interval 1, probability 0, space 0, times 0 [ 583.263148][T12891] [ 583.282943][T12876] CPU: 1 PID: 12876 Comm: syz-executor.2 Not tainted 6.2.0-rc5-next-20230127-syzkaller-08766-ge2f86c02fdc9 #0 [ 583.294646][T12876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 583.304734][T12876] Call Trace: [ 583.308026][T12876] [ 583.310965][T12876] dump_stack_lvl+0x136/0x150 [ 583.315673][T12876] should_fail_ex+0x4a3/0x5b0 [ 583.320376][T12876] should_failslab+0x9/0x20 [ 583.324904][T12876] __kmem_cache_alloc_node+0x5b/0x330 [ 583.330312][T12876] ? __get_vm_area_node+0xed/0x3f0 [ 583.335519][T12876] kmalloc_node_trace+0x21/0x60 [ 583.340395][T12876] __get_vm_area_node+0xed/0x3f0 [ 583.345381][T12876] __vmalloc_node_range+0x250/0x1300 [ 583.350692][T12876] ? netlink_sendmsg+0x69e/0xe30 [ 583.355710][T12876] ? netlink_getsockopt+0x870/0x870 [ 583.360930][T12876] ? __rhashtable_lookup.constprop.0+0x314/0x630 [ 583.367286][T12876] ? netlink_sendmsg+0x69e/0xe30 [ 583.372247][T12876] ? lock_acquire+0x32/0xc0 [ 583.376772][T12876] ? delayed_vfree_work+0x70/0x70 [ 583.381822][T12876] ? netlink_autobind.isra.0+0x371/0x5f0 [ 583.387485][T12876] ? __netlink_dump_start+0x910/0x910 [ 583.392895][T12876] ? netlink_sendmsg+0x69e/0xe30 [ 583.397858][T12876] vmalloc+0x6b/0x80 [ 583.401777][T12876] ? netlink_sendmsg+0x69e/0xe30 [ 583.406738][T12876] netlink_sendmsg+0x69e/0xe30 [ 583.411533][T12876] ? netlink_unicast+0x7f0/0x7f0 [ 583.416502][T12876] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 583.421880][T12876] ? netlink_unicast+0x7f0/0x7f0 [ 583.426845][T12876] sock_sendmsg+0xde/0x190 [ 583.431283][T12876] ____sys_sendmsg+0x71c/0x900 [ 583.436082][T12876] ? copy_msghdr_from_user+0xfc/0x150 [ 583.441479][T12876] ? kernel_sendmsg+0x50/0x50 [ 583.446176][T12876] ? find_held_lock+0x2d/0x110 [ 583.450962][T12876] ___sys_sendmsg+0x110/0x1b0 [ 583.455661][T12876] ? do_recvmmsg+0x6e0/0x6e0 [ 583.460279][T12876] ? __fget_files+0x248/0x480 [ 583.464983][T12876] ? lock_downgrade+0x690/0x690 [ 583.469870][T12876] ? trace_lock_acquire+0x1f1/0x2b0 [ 583.475090][T12876] ? receive_fd+0x110/0x110 [ 583.479644][T12876] ? lock_acquire+0x32/0xc0 [ 583.484177][T12876] ? receive_fd+0x110/0x110 [ 583.488709][T12876] ? __fget_files+0x26a/0x480 [ 583.493418][T12876] ? __fget_light+0xe5/0x270 [ 583.498039][T12876] __sys_sendmsg+0xf7/0x1c0 [ 583.502564][T12876] ? __sys_sendmsg_sock+0x40/0x40 [ 583.507638][T12876] ? syscall_enter_from_user_mode+0x26/0xb0 [ 583.513552][T12876] ? lockdep_hardirqs_on+0x7d/0x100 [ 583.518770][T12876] do_syscall_64+0x39/0xb0 [ 583.523220][T12876] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 583.529138][T12876] RIP: 0033:0x7f1e4f28c0c9 [ 583.533565][T12876] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 583.553189][T12876] RSP: 002b:00007f1e50045168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 583.561621][T12876] RAX: ffffffffffffffda RBX: 00007f1e4f3abf80 RCX: 00007f1e4f28c0c9 [ 583.569599][T12876] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 583.577580][T12876] RBP: 00007f1e500451d0 R08: 0000000000000000 R09: 0000000000000000 [ 583.585563][T12876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 583.593806][T12876] R13: 00007ffed80c2fbf R14: 00007f1e50045300 R15: 0000000000022000 [ 583.601805][T12876] [ 583.622399][T12900] CPU: 1 PID: 12900 Comm: syz-executor.4 Not tainted 6.2.0-rc5-next-20230127-syzkaller-08766-ge2f86c02fdc9 #0 [ 583.634097][T12900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 583.644969][T12900] Call Trace: [ 583.648278][T12900] [ 583.651236][T12900] dump_stack_lvl+0x136/0x150 [ 583.655963][T12900] should_fail_ex+0x4a3/0x5b0 [ 583.660691][T12900] ? security_inode_alloc+0x38/0x160 [ 583.666113][T12900] should_failslab+0x9/0x20 [ 583.670671][T12900] kmem_cache_alloc+0x5a/0x320 [ 583.675500][T12900] security_inode_alloc+0x38/0x160 [ 583.680670][T12900] inode_init_always+0xbfa/0xef0 [ 583.685827][T12900] alloc_inode+0x82/0x230 [ 583.690195][T12900] new_inode+0x2b/0x280 [ 583.694386][T12900] shmem_get_inode+0x1a1/0xe60 [ 583.699200][T12900] ? do_raw_spin_unlock+0x175/0x230 [ 583.704466][T12900] __shmem_file_setup+0x16d/0x300 [ 583.709554][T12900] __do_sys_memfd_create+0x327/0x910 [ 583.714903][T12900] ? PageTransHuge+0x300/0x300 [ 583.719733][T12900] ? syscall_enter_from_user_mode+0x26/0xb0 [ 583.725685][T12900] do_syscall_64+0x39/0xb0 [ 583.730155][T12900] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 583.736085][T12900] RIP: 0033:0x7f11b0e8c0c9 [ 583.740529][T12900] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 583.760184][T12900] RSP: 002b:00007f11b1bfff38 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 583.768693][T12900] RAX: ffffffffffffffda RBX: 0000000000001102 RCX: 00007f11b0e8c0c9 [ 583.776793][T12900] RDX: 00007f11b1bfffdc RSI: 0000000000000000 RDI: 00007f11b0ee6e81 [ 583.784885][T12900] RBP: 0000000000001102 R08: 00007f11b1bffe20 R09: ffffffffffffffff [ 583.792895][T12900] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020001100 [ 583.800908][T12900] R13: 00007f11b1bfffdc R14: 00007f11b1bfffe0 R15: 00000000200022c0 [ 583.808955][T12900] [ 583.861891][T12876] syz-executor.2: vmalloc error: size 213312, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 584.003066][T12876] CPU: 0 PID: 12876 Comm: syz-executor.2 Not tainted 6.2.0-rc5-next-20230127-syzkaller-08766-ge2f86c02fdc9 #0 [ 584.014777][T12876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 584.024866][T12876] Call Trace: [ 584.028170][T12876] [ 584.031126][T12876] dump_stack_lvl+0x136/0x150 [ 584.035850][T12876] warn_alloc+0x213/0x360 [ 584.040227][T12876] ? zone_watermark_ok_safe+0x300/0x300 [ 584.045836][T12876] ? __kasan_kmalloc+0x86/0xb0 [ 584.050661][T12876] ? __get_vm_area_node+0x29b/0x3f0 [ 584.055934][T12876] __vmalloc_node_range+0xd4e/0x1300 [ 584.061277][T12876] ? netlink_getsockopt+0x870/0x870 [ 584.066529][T12876] ? __rhashtable_lookup.constprop.0+0x314/0x630 [ 584.072917][T12876] ? netlink_sendmsg+0x69e/0xe30 [ 584.077904][T12876] ? lock_acquire+0x32/0xc0 [ 584.082457][T12876] ? delayed_vfree_work+0x70/0x70 [ 584.087545][T12876] ? netlink_autobind.isra.0+0x371/0x5f0 [ 584.093234][T12876] ? __netlink_dump_start+0x910/0x910 [ 584.098665][T12876] ? netlink_sendmsg+0x69e/0xe30 [ 584.103657][T12876] vmalloc+0x6b/0x80 [ 584.107600][T12876] ? netlink_sendmsg+0x69e/0xe30 [ 584.112601][T12876] netlink_sendmsg+0x69e/0xe30 [ 584.117428][T12876] ? netlink_unicast+0x7f0/0x7f0 [ 584.122430][T12876] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 584.127770][T12876] ? netlink_unicast+0x7f0/0x7f0 [ 584.132755][T12876] sock_sendmsg+0xde/0x190 [ 584.137219][T12876] ____sys_sendmsg+0x71c/0x900 [ 584.142027][T12876] ? copy_msghdr_from_user+0xfc/0x150 [ 584.147452][T12876] ? kernel_sendmsg+0x50/0x50 [ 584.152187][T12876] ? find_held_lock+0x2d/0x110 [ 584.156998][T12876] ___sys_sendmsg+0x110/0x1b0 [ 584.161735][T12876] ? do_recvmmsg+0x6e0/0x6e0 [ 584.166375][T12876] ? __fget_files+0x248/0x480 [ 584.171108][T12876] ? lock_downgrade+0x690/0x690 [ 584.176002][T12876] ? trace_lock_acquire+0x1f1/0x2b0 [ 584.181244][T12876] ? receive_fd+0x110/0x110 [ 584.185792][T12876] ? lock_acquire+0x32/0xc0 [ 584.190336][T12876] ? receive_fd+0x110/0x110 [ 584.194892][T12876] ? __fget_files+0x26a/0x480 [ 584.199622][T12876] ? __fget_light+0xe5/0x270 [ 584.204274][T12876] __sys_sendmsg+0xf7/0x1c0 [ 584.208822][T12876] ? __sys_sendmsg_sock+0x40/0x40 [ 584.213917][T12876] ? syscall_enter_from_user_mode+0x26/0xb0 [ 584.219851][T12876] ? lockdep_hardirqs_on+0x7d/0x100 [ 584.225091][T12876] do_syscall_64+0x39/0xb0 [ 584.229646][T12876] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 584.235583][T12876] RIP: 0033:0x7f1e4f28c0c9 [ 584.240034][T12876] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 584.259733][T12876] RSP: 002b:00007f1e50045168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 584.268190][T12876] RAX: ffffffffffffffda RBX: 00007f1e4f3abf80 RCX: 00007f1e4f28c0c9 [ 584.276195][T12876] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 584.284197][T12876] RBP: 00007f1e500451d0 R08: 0000000000000000 R09: 0000000000000000 [ 584.292203][T12876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 584.300219][T12876] R13: 00007ffed80c2fbf R14: 00007f1e50045300 R15: 0000000000022000 [ 584.308425][T12876] [ 584.316531][T12876] Mem-Info: [ 584.319744][T12876] active_anon:10528 inactive_anon:333133 isolated_anon:0 [ 584.319744][T12876] active_file:12886 inactive_file:486 isolated_file:0 [ 584.319744][T12876] unevictable:768 dirty:40 writeback:0 [ 584.319744][T12876] slab_reclaimable:20704 slab_unreclaimable:100076 [ 584.319744][T12876] mapped:19896 shmem:12014 pagetables:1242 [ 584.319744][T12876] sec_pagetables:0 bounce:0 [ 584.319744][T12876] kernel_misc_reclaimable:0 [ 584.319744][T12876] free:1079136 free_pcp:10459 free_cma:0 19:19:48 executing program 0: bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 32) r0 = getpid() (rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/608], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) (async) r5 = getpgid(r0) process_vm_writev(r5, &(0x7f0000001d40)=[{&(0x7f0000000740)=""/200, 0xc8}, {&(0x7f0000000bc0)=""/244, 0xf4}, {&(0x7f0000000cc0)=""/123, 0x7b}, {&(0x7f0000000d40)=""/4096, 0x1000}], 0x4, &(0x7f0000000400)=[{&(0x7f0000001dc0)=""/83, 0x53}, {&(0x7f0000001e40)=""/121, 0x79}], 0x2, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000001f40)=@abs={0x0, 0x0, 0x4e22}, 0x6e) (async, rerun: 32) ioctl$KVM_SET_GSI_ROUTING(r7, 0xae60, 0x0) (async, rerun: 32) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) (async, rerun: 64) close(r7) (async, rerun: 64) r8 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x0) (async, rerun: 32) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, 0x0) (async, rerun: 32) fallocate(0xffffffffffffffff, 0x100000011, 0x0, 0x2811fdff) 19:19:48 executing program 3: syz_open_dev$usbfs(&(0x7f00000000c0), 0x200, 0x0) 19:19:48 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000004100)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) read$FUSE(r0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000006180)={0x2020}, 0x2020) 19:19:48 executing program 1: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x440, &(0x7f0000000380)={[{@gid={'gid', 0x3d, 0xee01}}, {@uid}, {@force}, {@type={'type', 0x3d, "54c306e3"}}, {@barrier}, {@nls={'nls', 0x3d, 'cp1251'}}, {@nobarrier}, {@gid}, {@nodecompose}, {@nobarrier}, {@force}, {@nobarrier}, {@uid}, {@umask={'umask', 0x3d, 0x789}}]}, 0x1, 0x5ee, &(0x7f0000000680)="$eJzs3U9oHNcdB/DvrGXZ64KySewkLYWKGEwbU1urbWoXCnVLKTqEYuglV2GvY+G1EqRNUUJpt/+vPeaQQ3pwDzn1mtJDaHouFHr33dC7TlWZ2VlpbcmKFP/ZVfz5wNv33rx5b978PPO0O4vZAM+spTdzfJAiS+ff2Cjrd+90enfvdG6PyklOJGkkM8MsxWpSfJZcyTDlq+XGerjiYcd5/d4nH5774OPOsDZTp2r/xn79dtlzz0GdMp/kWJ0/gvvGu/bI4xXb8y4DdnYUOJi0rV0Gh+l+8PsWmFrF8O/mLq3kVJKT9fuA1KtD4+nO7vE71CoHAAAAR9Rzm9nMRuYmPQ8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Surf/y/q1BiV51OMfv9/tt6WunykfTrpCQAAAAAAAADAY/CNzWxmI3Oj+lZRfef/alU5Xb1+Je9mPd2s5UI2spx++llLO0lrbKDZjeV+f639sJ5bW1u/qnsu7tlz8emcLwAAAAAAAAB8Sf0mSzvf/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwDQokmPDrEqnR+VWGjNJTiaZLfcbJH8flY+yTyc9AQAAAHgKntvMZjYyV/xvWN8qqs/8L1Wf+0/m3aymn5X000s316tnAcNP/Y1/Dzq9u3c6t8u0e9wf/vdQ06hGzPDZw95HXqj2OLPdYyk/yc9yPvO5mrWs5OdZTj/dzOfHVWk5RVr104vWaJ57z/fKfbWrnzfXV6qZNHMjK9XcLuRa3k4v19OozqHaZ/8j/rqMTvGD2gFjdL3OyzP6U51Ph1YVkePbEVmoY19G4/n9I3HI6+TBI7XT2H4GdfoJxPxUnZex/sNUx3xx7Op7af9IJN/6zz+u3uyt3rp5Y/389JzSF/RgJDpjkXj54JEYHP1IzNbRGK6ih1stX636zmUlP83buZ5uLmUh7VzOQr6XxXTuu8LOHOBeaxzuXjv7zbrQTPLHOp8OZVyfH4vr+ErXqtrGt+xE6YXHvyLNfK0ulMf4bZ1Phwcj0R6LxIv7R+LPW+Xrem/11trN5XcOeLxzdV7etr+fqrW5vF5eKP+xqtr9V0fZ9uKebe2q7fR2W2NX25ntts+7U2fr93C7Rxq2vbxnW6dqe2Wsba93OQBMvVOvnZpt3mv+q/lR83fNm803Tv7oxOUTX5/N8X/O/O3YXxt/aXy/eC0f5ZeZm/RMAQAAAAAAAAAAAAAAAAAAAAAAAAAAAADgy2D9vfdvLfd63bUpLKQxFdNQUHhGCs3sbJn0ygQ8aRf7t9+5uP7e+99eub38Vvet7uri5UuXL3W+2/7OxRsrve7C8HXSswSehJ2//pOeCQAAAAAAAAAAAHBQT+P/FUz6HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICjbenNHB+kSHvhwkJZv3un0yvTqLyz50ySRpLiF0nxWXIlw5TW2HDFw47z+r1PPjz3wcednbFmRvs39ut3MIM6ZT7JsTp/XONde+Txiu0zLAN2dhQ4mLT/BwAA///IRBDJ") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="72797a3135cf2c3f3ce902d76d82a4c90000000000000000000000deb8cc70727486b8a90000ff6316d2f6fe2000000000400000003901000100d49f02fb634ff8cecd19f692bdc62760e81784a813e39785551764917eb498"], 0x81) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x8dc, 0x0) (fail_nth: 4) [ 584.383749][T12876] Node 0 active_anon:42112kB inactive_anon:1332432kB active_file:51472kB inactive_file:1944kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:79584kB dirty:156kB writeback:0kB shmem:46520kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 73728kB writeback_tmp:0kB kernel_stack:10796kB pagetables:4868kB sec_pagetables:0kB all_unreclaimable? no [ 584.419278][T12876] Node 1 active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 584.490832][T12905] loop1: detected capacity change from 0 to 1024 [ 584.499051][T12876] Node 0 DMA free:15360kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 584.534767][T12876] lowmem_reserve[]: 0 2617 2619 2619 2619 [ 584.541978][T12876] Node 0 DMA32 free:366428kB boost:0kB min:35440kB low:44300kB high:53160kB reserved_highatomic:0KB active_anon:42108kB inactive_anon:1332888kB active_file:49940kB inactive_file:1944kB unevictable:1536kB writepending:156kB present:3129332kB managed:2685080kB mlocked:0kB bounce:0kB free_pcp:23152kB local_pcp:9136kB free_cma:0kB [ 584.609600][T12905] FAULT_INJECTION: forcing a failure. [ 584.609600][T12905] name failslab, interval 1, probability 0, space 0, times 0 [ 584.612407][T12876] lowmem_reserve[]: 0 0 1 1 1 [ 584.646658][T12876] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB active_anon:4kB inactive_anon:44kB active_file:1532kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1612kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 584.675394][T12905] CPU: 1 PID: 12905 Comm: syz-executor.1 Not tainted 6.2.0-rc5-next-20230127-syzkaller-08766-ge2f86c02fdc9 #0 [ 584.687083][T12905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 584.697157][T12905] Call Trace: [ 584.700445][T12905] [ 584.703387][T12905] dump_stack_lvl+0x136/0x150 [ 584.708090][T12905] should_fail_ex+0x4a3/0x5b0 [ 584.712790][T12905] ? security_file_alloc+0x38/0x170 [ 584.718019][T12905] should_failslab+0x9/0x20 [ 584.722561][T12905] kmem_cache_alloc+0x5a/0x320 [ 584.727370][T12905] security_file_alloc+0x38/0x170 [ 584.732435][T12905] __alloc_file+0xd9/0x270 [ 584.736876][T12905] alloc_empty_file+0x71/0x190 [ 584.741665][T12905] path_openat+0xe6/0x2750 [ 584.746150][T12905] ? handle_mm_fault+0x25b/0x850 [ 584.751111][T12905] ? path_lookupat+0x840/0x840 [ 584.755914][T12905] do_filp_open+0x1ba/0x410 [ 584.760444][T12905] ? may_open_dev+0xf0/0xf0 [ 584.764979][T12905] ? find_held_lock+0x2d/0x110 [ 584.769768][T12905] ? alloc_fd+0x2e4/0x750 [ 584.774126][T12905] ? do_raw_spin_lock+0x124/0x2b0 [ 584.779174][T12905] ? spin_bug+0x1c0/0x1c0 [ 584.783535][T12905] ? _raw_spin_unlock+0x28/0x40 [ 584.788409][T12905] ? alloc_fd+0x2e4/0x750 [ 584.792775][T12905] do_sys_openat2+0x16d/0x4c0 [ 584.797483][T12905] ? build_open_flags+0x6f0/0x6f0 [ 584.802549][T12905] __x64_sys_openat+0x143/0x1f0 [ 584.807431][T12905] ? __ia32_sys_open+0x1c0/0x1c0 [ 584.812400][T12905] ? syscall_enter_from_user_mode+0x26/0xb0 [ 584.818513][T12905] do_syscall_64+0x39/0xb0 [ 584.822961][T12905] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 584.828894][T12905] RIP: 0033:0x7f245868c0c9 [ 584.833328][T12905] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 584.852959][T12905] RSP: 002b:00007f2459441168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 584.861475][T12905] RAX: ffffffffffffffda RBX: 00007f24587abf80 RCX: 00007f245868c0c9 [ 584.869460][T12905] RDX: 00000000000008dc RSI: 0000000020000040 RDI: ffffffffffffff9c [ 584.877527][T12905] RBP: 00007f24594411d0 R08: 0000000000000000 R09: 0000000000000000 [ 584.885510][T12905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 584.893498][T12905] R13: 00007fff6f88cc8f R14: 00007f2459441300 R15: 0000000000022000 [ 584.901497][T12905] [ 584.911617][T12876] lowmem_reserve[]: 0 0 0 0 0 [ 584.916648][T12876] Node 1 Normal free:3934060kB boost:0kB min:54444kB low:68052kB high:81660kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117612kB mlocked:0kB bounce:0kB free_pcp:19668kB local_pcp:11004kB free_cma:0kB [ 584.946880][T12876] lowmem_reserve[]: 0 0 0 0 0 [ 584.951769][T12876] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 584.971245][T12876] Node 0 DMA32: 7691*4kB (UME) 4080*8kB (UME) 2062*16kB (UME) 971*32kB (UME) 566*64kB (UME) 206*128kB (UME) 96*256kB (UM) 68*512kB (UM) 62*1024kB (UME) 2*2048kB (M) 12*4096kB (M) = 366188kB [ 585.024879][T12876] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 585.049436][T12876] Node 1 Normal: 101*4kB (UME) 43*8kB (UME) 26*16kB (UME) 79*32kB (UME) 32*64kB (UME) 16*128kB (UME) 9*256kB (UME) 4*512kB (ME) 2*1024kB (M) 0*2048kB 957*4096kB (M) = 3934060kB [ 585.069515][T12876] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 585.083553][T12876] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 585.101625][T12876] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 585.111326][T12876] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB 19:19:49 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e030026000b12d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) 19:19:49 executing program 4: syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000001140)='./file0\x00', 0x4408, &(0x7f0000000140)={[{@balloc_notest4}, {@balloc_test4}, {@jqfmt_vfsold}, {@balloc_test4}, {@grpjquota, 0x3d}]}, 0x1, 0x1102, &(0x7f00000022c0)="$eJzs2LFqFEEcBvBv9g5MdzLpF0ELCwkJZ2eVIsK11jYiqUyVqyI2vouPI6nsQx7AImAprEyyl6SIBMzJEfj94Gbmvp3Z/045EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjypjXbXVJXSZekJH1/ujhP0q/yp98nXUreHS6WB8fzt8txasu6lDZsy1L3nm/VeZ3Xvfp6e/9FXZ58/vTh6OjweHxNSZ+zi/VvpNWe/O3h1vrrAQAAwGMxPNhsw/UBAACA+6ztIgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgHw2zm3FN8nsYhnRJStL3p4vzJP0mPxAAAAB4sJIu72d35bm8BrjxKj9m5Tpv/a/Sxrv5dsd6AAAA4LbpvTPKrfP4y0yvz+Ute5Zpdnau/o9dfu4nk5OD7ObJmHy9bM8uvnxc/cow+R+bAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAP+zAAQkAAACAoP+v2xEoAAAAAAAAAAAAAAAAAADASgEAAP//C6/ZOQ==") (fail_nth: 5) 19:19:49 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) 19:19:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000800)={0x14}, 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000d40)={0x14}, 0x14}}, 0x0) 19:19:49 executing program 1: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x440, &(0x7f0000000380)={[{@gid={'gid', 0x3d, 0xee01}}, {@uid}, {@force}, {@type={'type', 0x3d, "54c306e3"}}, {@barrier}, {@nls={'nls', 0x3d, 'cp1251'}}, {@nobarrier}, {@gid}, {@nodecompose}, {@nobarrier}, {@force}, {@nobarrier}, {@uid}, {@umask={'umask', 0x3d, 0x789}}]}, 0x1, 0x5ee, &(0x7f0000000680)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="72797a3135cf2c3f3ce902d76d82a4c90000000000000000000000deb8cc70727486b8a90000ff6316d2f6fe2000000000400000003901000100d49f02fb634ff8cecd19f692bdc62760e81784a813e39785551764917eb498"], 0x81) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x8dc, 0x0) (fail_nth: 5) 19:19:49 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000900)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000002900000008000000020000000000000038000000000000002900000004000000890300000000000001090000000000000000000104e5f9594004010805020980040105000000000060"], 0xb0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=[@dontfrag={{0x14, 0x29, 0x4}}], 0x18}}], 0x2, 0x0) [ 585.125731][T12876] 25331 total pagecache pages [ 585.131535][T12876] 0 pages in swap cache [ 585.135749][T12876] Free swap = 0kB [ 585.144464][T12876] Total swap = 0kB [ 585.148288][T12876] 2097051 pages RAM [ 585.152103][T12876] 0 pages HighMem/MovableOnly [ 585.163406][T12876] 392135 pages reserved [ 585.171912][T12876] 0 pages cma reserved 19:19:49 executing program 5: syz_open_dev$loop(&(0x7f0000000000), 0xfffffffffffffffd, 0x2e4440) 19:19:49 executing program 0: socketpair(0x1, 0x0, 0x0, &(0x7f00000002c0)) 19:19:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a009501"], 0x24}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0) [ 585.245344][T12921] FAULT_INJECTION: forcing a failure. [ 585.245344][T12921] name failslab, interval 1, probability 0, space 0, times 0 19:19:49 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)=0x3f00) [ 585.310300][T12921] CPU: 0 PID: 12921 Comm: syz-executor.4 Not tainted 6.2.0-rc5-next-20230127-syzkaller-08766-ge2f86c02fdc9 #0 [ 585.322013][T12921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 585.332112][T12921] Call Trace: [ 585.335424][T12921] [ 585.338387][T12921] dump_stack_lvl+0x136/0x150 [ 585.343145][T12921] should_fail_ex+0x4a3/0x5b0 [ 585.347884][T12921] should_failslab+0x9/0x20 [ 585.352433][T12921] kmem_cache_alloc_lru+0x65/0x580 19:19:49 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x3, 0x0) [ 585.357598][T12921] ? __d_alloc+0x32/0x980 [ 585.361981][T12921] __d_alloc+0x32/0x980 [ 585.366182][T12921] ? get_random_u32+0x437/0x7d0 [ 585.371158][T12921] d_alloc_pseudo+0x1d/0x70 [ 585.375723][T12921] alloc_file_pseudo+0xca/0x250 [ 585.381234][T12921] ? alloc_file+0x800/0x800 [ 585.385800][T12921] ? lockdep_annotate_inode_mutex_key+0x4b/0x200 [ 585.392199][T12921] ? shmem_get_inode+0x6c0/0xe60 [ 585.397199][T12921] ? do_raw_spin_unlock+0x175/0x230 [ 585.402464][T12921] __shmem_file_setup+0x1fe/0x300 [ 585.407557][T12921] __do_sys_memfd_create+0x327/0x910 [ 585.412902][T12921] ? PageTransHuge+0x300/0x300 [ 585.417718][T12921] ? syscall_enter_from_user_mode+0x26/0xb0 [ 585.423668][T12921] do_syscall_64+0x39/0xb0 [ 585.428135][T12921] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 585.434079][T12921] RIP: 0033:0x7f11b0e8c0c9 [ 585.438538][T12921] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 585.439377][T12928] loop1: detected capacity change from 0 to 1024 [ 585.458167][T12921] RSP: 002b:00007f11b1bfff38 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 585.458200][T12921] RAX: ffffffffffffffda RBX: 0000000000001102 RCX: 00007f11b0e8c0c9 [ 585.458216][T12921] RDX: 00007f11b1bfffdc RSI: 0000000000000000 RDI: 00007f11b0ee6e81 [ 585.458234][T12921] RBP: 0000000000001102 R08: 00007f11b1bffe20 R09: ffffffffffffffff [ 585.458251][T12921] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020001100 19:19:49 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) [ 585.458267][T12921] R13: 00007f11b1bfffdc R14: 00007f11b1bfffe0 R15: 00000000200022c0 [ 585.458360][T12921] [ 585.516645][T12931] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 585.543415][T12931] netlink: 181912 bytes leftover after parsing attributes in process `syz-executor.2'. [ 585.595038][T12928] FAULT_INJECTION: forcing a failure. [ 585.595038][T12928] name failslab, interval 1, probability 0, space 0, times 0 [ 585.642137][T12928] CPU: 1 PID: 12928 Comm: syz-executor.1 Not tainted 6.2.0-rc5-next-20230127-syzkaller-08766-ge2f86c02fdc9 #0 [ 585.653844][T12928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 585.663943][T12928] Call Trace: [ 585.667253][T12928] [ 585.670221][T12928] dump_stack_lvl+0x136/0x150 [ 585.674947][T12928] should_fail_ex+0x4a3/0x5b0 [ 585.679697][T12928] should_failslab+0x9/0x20 [ 585.684340][T12928] kmem_cache_alloc_lru+0x65/0x580 [ 585.689516][T12928] ? __d_alloc+0x32/0x980 [ 585.693892][T12928] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 585.700019][T12928] __d_alloc+0x32/0x980 [ 585.704218][T12928] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 585.710250][T12928] d_alloc+0x4e/0x240 [ 585.714273][T12928] d_alloc_parallel+0xe8/0x1530 [ 585.719255][T12928] ? __d_lookup+0x267/0x4c0 [ 585.723860][T12928] ? lock_downgrade+0x690/0x690 [ 585.728812][T12928] ? trace_lock_acquire+0x1f1/0x2b0 [ 585.734043][T12928] ? __d_lookup_rcu+0x4e0/0x4e0 [ 585.738951][T12928] ? __d_lookup+0x289/0x4c0 [ 585.743507][T12928] lookup_open.isra.0+0xb03/0x1400 [ 585.748678][T12928] ? link_path_walk.part.0+0xd60/0xd60 [ 585.754184][T12928] ? path_openat+0x90f/0x2750 [ 585.758919][T12928] ? path_openat+0x90f/0x2750 [ 585.763658][T12928] ? lock_acquire+0x32/0xc0 [ 585.768209][T12928] ? path_openat+0x90f/0x2750 [ 585.772941][T12928] ? down_write_killable_nested+0x250/0x250 [ 585.778885][T12928] ? __mnt_want_write+0x1fe/0x2e0 [ 585.783967][T12928] path_openat+0x975/0x2750 [ 585.788529][T12928] ? path_lookupat+0x840/0x840 [ 585.793356][T12928] do_filp_open+0x1ba/0x410 [ 585.797911][T12928] ? may_open_dev+0xf0/0xf0 [ 585.802462][T12928] ? find_held_lock+0x2d/0x110 [ 585.807285][T12928] ? do_raw_spin_lock+0x124/0x2b0 [ 585.810548][T12938] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 585.812351][T12928] ? spin_bug+0x1c0/0x1c0 [ 585.820560][T12938] netlink: 181912 bytes leftover after parsing attributes in process `syz-executor.2'. [ 585.824772][T12928] ? _raw_spin_unlock+0x28/0x40 [ 585.839342][T12928] ? alloc_fd+0x2e4/0x750 [ 585.843757][T12928] do_sys_openat2+0x16d/0x4c0 [ 585.848496][T12928] ? build_open_flags+0x6f0/0x6f0 [ 585.853594][T12928] __x64_sys_openat+0x143/0x1f0 [ 585.858598][T12928] ? __ia32_sys_open+0x1c0/0x1c0 [ 585.863637][T12928] ? syscall_enter_from_user_mode+0x26/0xb0 [ 585.869592][T12928] do_syscall_64+0x39/0xb0 [ 585.874081][T12928] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 585.880028][T12928] RIP: 0033:0x7f245868c0c9 19:19:49 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e030026000b12d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) [ 585.884571][T12928] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 585.904300][T12928] RSP: 002b:00007f2459441168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 585.912729][T12928] RAX: ffffffffffffffda RBX: 00007f24587abf80 RCX: 00007f245868c0c9 [ 585.920699][T12928] RDX: 00000000000008dc RSI: 0000000020000040 RDI: ffffffffffffff9c [ 585.928673][T12928] RBP: 00007f24594411d0 R08: 0000000000000000 R09: 0000000000000000 19:19:49 executing program 4: syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000001140)='./file0\x00', 0x4408, &(0x7f0000000140)={[{@balloc_notest4}, {@balloc_test4}, {@jqfmt_vfsold}, {@balloc_test4}, {@grpjquota, 0x3d}]}, 0x1, 0x1102, &(0x7f00000022c0)="$eJzs2LFqFEEcBvBv9g5MdzLpF0ELCwkJZ2eVIsK11jYiqUyVqyI2vouPI6nsQx7AImAprEyyl6SIBMzJEfj94Gbmvp3Z/045EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjypjXbXVJXSZekJH1/ujhP0q/yp98nXUreHS6WB8fzt8txasu6lDZsy1L3nm/VeZ3Xvfp6e/9FXZ58/vTh6OjweHxNSZ+zi/VvpNWe/O3h1vrrAQAAwGMxPNhsw/UBAACA+6ztIgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgHw2zm3FN8nsYhnRJStL3p4vzJP0mPxAAAAB4sJIu72d35bm8BrjxKj9m5Tpv/a/Sxrv5dsd6AAAA4LbpvTPKrfP4y0yvz+Ute5Zpdnau/o9dfu4nk5OD7ObJmHy9bM8uvnxc/cow+R+bAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAP+zAAQkAAACAoP+v2xEoAAAAAAAAAAAAAAAAAADASgEAAP//C6/ZOQ==") (fail_nth: 6) 19:19:49 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGSTAMPNS(r0, 0x80087601, 0x0) 19:19:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv4_delrule={0x1c, 0x16, 0x1, 0x0, 0x0, {0x8}}, 0x1c}}, 0x0) [ 585.936661][T12928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 585.944651][T12928] R13: 00007fff6f88cc8f R14: 00007f2459441300 R15: 0000000000022000 [ 585.952640][T12928] 19:19:49 executing program 1: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x440, &(0x7f0000000380)={[{@gid={'gid', 0x3d, 0xee01}}, {@uid}, {@force}, {@type={'type', 0x3d, "54c306e3"}}, {@barrier}, {@nls={'nls', 0x3d, 'cp1251'}}, {@nobarrier}, {@gid}, {@nodecompose}, {@nobarrier}, {@force}, {@nobarrier}, {@uid}, {@umask={'umask', 0x3d, 0x789}}]}, 0x1, 0x5ee, &(0x7f0000000680)="$eJzs3U9oHNcdB/DvrGXZ64KySewkLYWKGEwbU1urbWoXCnVLKTqEYuglV2GvY+G1EqRNUUJpt/+vPeaQQ3pwDzn1mtJDaHouFHr33dC7TlWZ2VlpbcmKFP/ZVfz5wNv33rx5b978PPO0O4vZAM+spTdzfJAiS+ff2Cjrd+90enfvdG6PyklOJGkkM8MsxWpSfJZcyTDlq+XGerjiYcd5/d4nH5774OPOsDZTp2r/xn79dtlzz0GdMp/kWJ0/gvvGu/bI4xXb8y4DdnYUOJi0rV0Gh+l+8PsWmFrF8O/mLq3kVJKT9fuA1KtD4+nO7vE71CoHAAAAR9Rzm9nMRuYmPQ8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Surf/y/q1BiV51OMfv9/tt6WunykfTrpCQAAAAAAAADAY/CNzWxmI3Oj+lZRfef/alU5Xb1+Je9mPd2s5UI2spx++llLO0lrbKDZjeV+f639sJ5bW1u/qnsu7tlz8emcLwAAAAAAAAB8Sf0mSzvf/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwDQokmPDrEqnR+VWGjNJTiaZLfcbJH8flY+yTyc9AQAAAHgKntvMZjYyV/xvWN8qqs/8L1Wf+0/m3aymn5X000s316tnAcNP/Y1/Dzq9u3c6t8u0e9wf/vdQ06hGzPDZw95HXqj2OLPdYyk/yc9yPvO5mrWs5OdZTj/dzOfHVWk5RVr104vWaJ57z/fKfbWrnzfXV6qZNHMjK9XcLuRa3k4v19OozqHaZ/8j/rqMTvGD2gFjdL3OyzP6U51Ph1YVkePbEVmoY19G4/n9I3HI6+TBI7XT2H4GdfoJxPxUnZex/sNUx3xx7Op7af9IJN/6zz+u3uyt3rp5Y/389JzSF/RgJDpjkXj54JEYHP1IzNbRGK6ih1stX636zmUlP83buZ5uLmUh7VzOQr6XxXTuu8LOHOBeaxzuXjv7zbrQTPLHOp8OZVyfH4vr+ErXqtrGt+xE6YXHvyLNfK0ulMf4bZ1Phwcj0R6LxIv7R+LPW+Xrem/11trN5XcOeLxzdV7etr+fqrW5vF5eKP+xqtr9V0fZ9uKebe2q7fR2W2NX25ntts+7U2fr93C7Rxq2vbxnW6dqe2Wsba93OQBMvVOvnZpt3mv+q/lR83fNm803Tv7oxOUTX5/N8X/O/O3YXxt/aXy/eC0f5ZeZm/RMAQAAAAAAAAAAAAAAAAAAAAAAAAAAAADgy2D9vfdvLfd63bUpLKQxFdNQUHhGCs3sbJn0ygQ8aRf7t9+5uP7e+99eub38Vvet7uri5UuXL3W+2/7OxRsrve7C8HXSswSehJ2//pOeCQAAAAAAAAAAAHBQT+P/FUz6HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICjbenNHB+kSHvhwkJZv3un0yvTqLyz50ySRpLiF0nxWXIlw5TW2HDFw47z+r1PPjz3wcednbFmRvs39ut3MIM6ZT7JsTp/XONde+Txiu0zLAN2dhQ4mLT/BwAA///IRBDJ") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="72797a3135cf2c3f3ce902d76d82a4c90000000000000000000000deb8cc70727486b8a90000ff6316d2f6fe2000000000400000003901000100d49f02fb634ff8cecd19f692bdc62760e81784a813e39785551764917eb498"], 0x81) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x8dc, 0x0) (fail_nth: 6) 19:19:49 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$ppp(r0, 0x0, 0xf0ff7f00000000) 19:19:49 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="0f00000026000b12d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) 19:19:49 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000180)={0x283}) 19:19:49 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', r0}, 0x10) [ 586.020834][T12944] FAULT_INJECTION: forcing a failure. [ 586.020834][T12944] name failslab, interval 1, probability 0, space 0, times 0 [ 586.036370][T12944] CPU: 1 PID: 12944 Comm: syz-executor.4 Not tainted 6.2.0-rc5-next-20230127-syzkaller-08766-ge2f86c02fdc9 #0 [ 586.048072][T12944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 586.058165][T12944] Call Trace: [ 586.061475][T12944] [ 586.064443][T12944] dump_stack_lvl+0x136/0x150 [ 586.069171][T12944] should_fail_ex+0x4a3/0x5b0 [ 586.073998][T12944] ? __alloc_file+0x21/0x270 [ 586.078637][T12944] should_failslab+0x9/0x20 [ 586.083198][T12944] kmem_cache_alloc+0x5a/0x320 [ 586.088018][T12944] ? d_instantiate+0x79/0xa0 [ 586.092655][T12944] __alloc_file+0x21/0x270 [ 586.097125][T12944] alloc_empty_file+0x71/0x190 [ 586.101948][T12944] alloc_file+0x5e/0x800 [ 586.106246][T12944] alloc_file_pseudo+0x169/0x250 [ 586.111218][T12944] ? alloc_file+0x800/0x800 [ 586.115747][T12944] ? lockdep_annotate_inode_mutex_key+0x4b/0x200 [ 586.122116][T12944] ? do_raw_spin_unlock+0x175/0x230 [ 586.127348][T12944] __shmem_file_setup+0x1fe/0x300 [ 586.132414][T12944] __do_sys_memfd_create+0x327/0x910 [ 586.137725][T12944] ? PageTransHuge+0x300/0x300 [ 586.142511][T12944] ? syscall_enter_from_user_mode+0x26/0xb0 [ 586.148436][T12944] do_syscall_64+0x39/0xb0 [ 586.152887][T12944] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 586.158979][T12944] RIP: 0033:0x7f11b0e8c0c9 [ 586.163410][T12944] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 586.183036][T12944] RSP: 002b:00007f11b1bfff38 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 586.191482][T12944] RAX: ffffffffffffffda RBX: 0000000000001102 RCX: 00007f11b0e8c0c9 [ 586.199468][T12944] RDX: 00007f11b1bfffdc RSI: 0000000000000000 RDI: 00007f11b0ee6e81 [ 586.207447][T12944] RBP: 0000000000001102 R08: 00007f11b1bffe20 R09: ffffffffffffffff 19:19:50 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSMRU1(r0, 0x40047459, 0x0) 19:19:50 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000026000b12d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) [ 586.215450][T12944] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020001100 [ 586.223433][T12944] R13: 00007f11b1bfffdc R14: 00007f11b1bfffe0 R15: 00000000200022c0 [ 586.231452][T12944] 19:19:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv4_delrule={0x1c, 0x14, 0x1}, 0x1c}}, 0x0) 19:19:50 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030026000b12d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) [ 586.356329][T12956] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 586.459401][T12960] loop1: detected capacity change from 0 to 1024 [ 586.460463][T12962] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 586.475750][T12962] netlink: 194488 bytes leftover after parsing attributes in process `syz-executor.2'. 19:19:50 executing program 4: syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000001140)='./file0\x00', 0x4408, &(0x7f0000000140)={[{@balloc_notest4}, {@balloc_test4}, {@jqfmt_vfsold}, {@balloc_test4}, {@grpjquota, 0x3d}]}, 0x1, 0x1102, &(0x7f00000022c0)="$eJzs2LFqFEEcBvBv9g5MdzLpF0ELCwkJZ2eVIsK11jYiqUyVqyI2vouPI6nsQx7AImAprEyyl6SIBMzJEfj94Gbmvp3Z/045EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjypjXbXVJXSZekJH1/ujhP0q/yp98nXUreHS6WB8fzt8txasu6lDZsy1L3nm/VeZ3Xvfp6e/9FXZ58/vTh6OjweHxNSZ+zi/VvpNWe/O3h1vrrAQAAwGMxPNhsw/UBAACA+6ztIgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgHw2zm3FN8nsYhnRJStL3p4vzJP0mPxAAAAB4sJIu72d35bm8BrjxKj9m5Tpv/a/Sxrv5dsd6AAAA4LbpvTPKrfP4y0yvz+Ute5Zpdnau/o9dfu4nk5OD7ObJmHy9bM8uvnxc/cow+R+bAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAP+zAAQkAAACAoP+v2xEoAAAAAAAAAAAAAAAAAADASgEAAP//C6/ZOQ==") (fail_nth: 7) 19:19:50 executing program 5: r0 = socket(0x11, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) 19:19:50 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) [ 586.518395][T12960] FAULT_INJECTION: forcing a failure. [ 586.518395][T12960] name failslab, interval 1, probability 0, space 0, times 0 [ 586.593912][T12960] CPU: 1 PID: 12960 Comm: syz-executor.1 Not tainted 6.2.0-rc5-next-20230127-syzkaller-08766-ge2f86c02fdc9 #0 [ 586.605609][T12960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 586.615704][T12960] Call Trace: [ 586.617085][T12968] FAULT_INJECTION: forcing a failure. [ 586.617085][T12968] name failslab, interval 1, probability 0, space 0, times 0 [ 586.618988][T12960] [ 586.619032][T12960] dump_stack_lvl+0x136/0x150 [ 586.619070][T12960] should_fail_ex+0x4a3/0x5b0 [ 586.644106][T12960] should_failslab+0x9/0x20 [ 586.648652][T12960] __kmem_cache_alloc_node+0x5b/0x330 [ 586.654238][T12960] ? tomoyo_realpath_from_path+0xc3/0x600 [ 586.660055][T12960] ? tomoyo_realpath_from_path+0xc3/0x600 [ 586.665812][T12960] __kmalloc+0x4a/0xd0 [ 586.669999][T12960] tomoyo_realpath_from_path+0xc3/0x600 [ 586.675611][T12960] ? tomoyo_path_number_perm+0x1c1/0x570 [ 586.681281][T12960] tomoyo_path_number_perm+0x21a/0x570 [ 586.686767][T12960] ? tomoyo_path_number_perm+0x1c1/0x570 [ 586.692450][T12960] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 586.698286][T12960] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 586.704293][T12960] ? percpu_ref_put_many.constprop.0+0x4c/0x100 [ 586.710607][T12960] ? hook_path_mknod+0x47f/0x680 [ 586.715733][T12960] ? d_alloc_parallel+0x693/0x1530 [ 586.720879][T12960] tomoyo_path_mknod+0x111/0x190 [ 586.725940][T12960] ? tomoyo_path_chown+0x1b0/0x1b0 [ 586.731096][T12960] security_path_mknod+0xfd/0x180 [ 586.736150][T12960] lookup_open.isra.0+0x49d/0x1400 [ 586.741296][T12960] ? link_path_walk.part.0+0xd60/0xd60 [ 586.746777][T12960] ? path_openat+0x90f/0x2750 [ 586.751488][T12960] ? path_openat+0x90f/0x2750 [ 586.756194][T12960] ? lock_acquire+0x32/0xc0 [ 586.760714][T12960] ? path_openat+0x90f/0x2750 [ 586.765429][T12960] ? down_write_killable_nested+0x250/0x250 [ 586.771341][T12960] ? __mnt_want_write+0x1fe/0x2e0 [ 586.776416][T12960] path_openat+0x975/0x2750 [ 586.780956][T12960] ? path_lookupat+0x840/0x840 [ 586.785752][T12960] do_filp_open+0x1ba/0x410 [ 586.790284][T12960] ? may_open_dev+0xf0/0xf0 [ 586.794842][T12960] ? find_held_lock+0x2d/0x110 [ 586.799638][T12960] ? do_raw_spin_lock+0x124/0x2b0 [ 586.804709][T12960] ? spin_bug+0x1c0/0x1c0 [ 586.809071][T12960] ? _raw_spin_unlock+0x28/0x40 [ 586.813944][T12960] ? alloc_fd+0x2e4/0x750 [ 586.818322][T12960] do_sys_openat2+0x16d/0x4c0 [ 586.823032][T12960] ? build_open_flags+0x6f0/0x6f0 [ 586.828087][T12960] ? xfd_validate_state+0x5d/0x180 [ 586.833227][T12960] __x64_sys_openat+0x143/0x1f0 [ 586.838114][T12960] ? __ia32_sys_open+0x1c0/0x1c0 [ 586.843102][T12960] ? syscall_enter_from_user_mode+0x26/0xb0 [ 586.849025][T12960] do_syscall_64+0x39/0xb0 [ 586.853470][T12960] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 586.859385][T12960] RIP: 0033:0x7f245868c0c9 [ 586.863997][T12960] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 586.883625][T12960] RSP: 002b:00007f2459441168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 586.892060][T12960] RAX: ffffffffffffffda RBX: 00007f24587abf80 RCX: 00007f245868c0c9 [ 586.900048][T12960] RDX: 00000000000008dc RSI: 0000000020000040 RDI: ffffffffffffff9c [ 586.908040][T12960] RBP: 00007f24594411d0 R08: 0000000000000000 R09: 0000000000000000 [ 586.916194][T12960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 586.924183][T12960] R13: 00007fff6f88cc8f R14: 00007f2459441300 R15: 0000000000022000 [ 586.932187][T12960] [ 586.940212][T12968] CPU: 1 PID: 12968 Comm: syz-executor.4 Not tainted 6.2.0-rc5-next-20230127-syzkaller-08766-ge2f86c02fdc9 #0 [ 586.949971][T12960] ERROR: Out of memory at tomoyo_realpath_from_path. [ 586.951871][T12968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 586.951890][T12968] Call Trace: [ 586.951897][T12968] [ 586.951908][T12968] dump_stack_lvl+0x136/0x150 [ 586.979621][T12968] should_fail_ex+0x4a3/0x5b0 [ 586.984355][T12968] ? security_file_alloc+0x38/0x170 [ 586.989620][T12968] should_failslab+0x9/0x20 19:19:50 executing program 1: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x440, &(0x7f0000000380)={[{@gid={'gid', 0x3d, 0xee01}}, {@uid}, {@force}, {@type={'type', 0x3d, "54c306e3"}}, {@barrier}, {@nls={'nls', 0x3d, 'cp1251'}}, {@nobarrier}, {@gid}, {@nodecompose}, {@nobarrier}, {@force}, {@nobarrier}, {@uid}, {@umask={'umask', 0x3d, 0x789}}]}, 0x1, 0x5ee, &(0x7f0000000680)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="72797a3135cf2c3f3ce902d76d82a4c90000000000000000000000deb8cc70727486b8a90000ff6316d2f6fe2000000000400000003901000100d49f02fb634ff8cecd19f692bdc62760e81784a813e39785551764917eb498"], 0x81) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x8dc, 0x0) (fail_nth: 7) 19:19:50 executing program 3: socketpair(0x1a, 0x0, 0x0, &(0x7f0000000340)) 19:19:50 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c002030026000b12d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) 19:19:50 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, 0xffffffffffffffff, 0x0) 19:19:50 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001180), 0x0, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x0, 0x0, 0x0) [ 586.994201][T12968] kmem_cache_alloc+0x5a/0x320 [ 586.999037][T12968] security_file_alloc+0x38/0x170 [ 587.004128][T12968] __alloc_file+0xd9/0x270 [ 587.008593][T12968] alloc_empty_file+0x71/0x190 [ 587.013407][T12968] alloc_file+0x5e/0x800 [ 587.017703][T12968] alloc_file_pseudo+0x169/0x250 [ 587.022696][T12968] ? alloc_file+0x800/0x800 [ 587.027248][T12968] ? lockdep_annotate_inode_mutex_key+0x4b/0x200 [ 587.033637][T12968] ? do_raw_spin_unlock+0x175/0x230 [ 587.038900][T12968] __shmem_file_setup+0x1fe/0x300 [ 587.043988][T12968] __do_sys_memfd_create+0x327/0x910 [ 587.049319][T12968] ? PageTransHuge+0x300/0x300 [ 587.054121][T12968] ? syscall_enter_from_user_mode+0x26/0xb0 [ 587.060067][T12968] do_syscall_64+0x39/0xb0 [ 587.064546][T12968] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 587.070489][T12968] RIP: 0033:0x7f11b0e8c0c9 [ 587.074945][T12968] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 587.094711][T12968] RSP: 002b:00007f11b1bfff38 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 587.103151][T12968] RAX: ffffffffffffffda RBX: 0000000000001102 RCX: 00007f11b0e8c0c9 [ 587.111248][T12968] RDX: 00007f11b1bfffdc RSI: 0000000000000000 RDI: 00007f11b0ee6e81 [ 587.119426][T12968] RBP: 0000000000001102 R08: 00007f11b1bffe20 R09: ffffffffffffffff [ 587.127541][T12968] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020001100 [ 587.135718][T12968] R13: 00007f11b1bfffdc R14: 00007f11b1bfffe0 R15: 00000000200022c0 [ 587.143727][T12968] 19:19:51 executing program 5: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 19:19:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv4_delrule={0x1c, 0x24, 0x1, 0x0, 0x0, {0x8}}, 0x1c}}, 0x0) 19:19:51 executing program 3: timer_create(0x2, 0x0, &(0x7f0000000100)) timer_gettime(0x0, &(0x7f0000000240)) 19:19:51 executing program 4: syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000001140)='./file0\x00', 0x4408, &(0x7f0000000140)={[{@balloc_notest4}, {@balloc_test4}, {@jqfmt_vfsold}, {@balloc_test4}, {@grpjquota, 0x3d}]}, 0x1, 0x1102, &(0x7f00000022c0)="$eJzs2LFqFEEcBvBv9g5MdzLpF0ELCwkJZ2eVIsK11jYiqUyVqyI2vouPI6nsQx7AImAprEyyl6SIBMzJEfj94Gbmvp3Z/045EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjypjXbXVJXSZekJH1/ujhP0q/yp98nXUreHS6WB8fzt8txasu6lDZsy1L3nm/VeZ3Xvfp6e/9FXZ58/vTh6OjweHxNSZ+zi/VvpNWe/O3h1vrrAQAAwGMxPNhsw/UBAACA+6ztIgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgHw2zm3FN8nsYhnRJStL3p4vzJP0mPxAAAAB4sJIu72d35bm8BrjxKj9m5Tpv/a/Sxrv5dsd6AAAA4LbpvTPKrfP4y0yvz+Ute5Zpdnau/o9dfu4nk5OD7ObJmHy9bM8uvnxc/cow+R+bAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAP+zAAQkAAACAoP+v2xEoAAAAAAAAAAAAAAAAAADASgEAAP//C6/ZOQ==") (fail_nth: 8) [ 587.224849][T12979] FAULT_INJECTION: forcing a failure. [ 587.224849][T12979] name failslab, interval 1, probability 0, space 0, times 0 [ 587.240607][T12979] CPU: 0 PID: 12979 Comm: syz-executor.4 Not tainted 6.2.0-rc5-next-20230127-syzkaller-08766-ge2f86c02fdc9 #0 [ 587.252316][T12979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 587.253816][T12978] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 587.262388][T12979] Call Trace: [ 587.262485][T12979] [ 587.262497][T12979] dump_stack_lvl+0x136/0x150 [ 587.262536][T12979] should_fail_ex+0x4a3/0x5b0 [ 587.262570][T12979] ? vm_area_alloc+0x20/0x100 [ 587.290945][T12979] should_failslab+0x9/0x20 [ 587.295504][T12979] kmem_cache_alloc+0x5a/0x320 [ 587.300336][T12979] vm_area_alloc+0x20/0x100 [ 587.305069][T12979] mmap_region+0x403/0x2690 [ 587.309663][T12979] ? do_munmap+0xf0/0xf0 [ 587.313982][T12979] ? security_mmap_addr+0x77/0xa0 [ 587.319071][T12979] ? get_unmapped_area+0x1e8/0x3c0 [ 587.324258][T12979] do_mmap+0x831/0xf60 [ 587.328398][T12979] vm_mmap_pgoff+0x1af/0x280 [ 587.333042][T12979] ? randomize_page+0xb0/0xb0 [ 587.337793][T12979] ksys_mmap_pgoff+0x7d/0x5a0 [ 587.342540][T12979] ? lockdep_hardirqs_on+0x7d/0x100 [ 587.347786][T12979] do_syscall_64+0x39/0xb0 [ 587.352250][T12979] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 587.358306][T12979] RIP: 0033:0x7f11b0e8c112 [ 587.360488][T12978] netlink: 178840 bytes leftover after parsing attributes in process `syz-executor.2'. [ 587.362737][T12979] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 b8 ff ff ff 64 [ 587.362767][T12979] RSP: 002b:00007f11b1bfff28 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 587.362798][T12979] RAX: ffffffffffffffda RBX: 0000000000000022 RCX: 00007f11b0e8c112 [ 587.362818][T12979] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 587.362836][T12979] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 19:19:51 executing program 3: io_uring_setup(0x0, &(0x7f00000001c0)) 19:19:51 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x2}, 0x0) 19:19:51 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00f030026000b12d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) [ 587.424747][T12979] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000001100 [ 587.432736][T12979] R13: 00007f11b1bfffdc R14: 00007f11b1bfffe0 R15: 00000000200022c2 [ 587.440742][T12979] [ 587.525474][T12992] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 587.549265][T12991] loop1: detected capacity change from 0 to 1024 [ 587.555888][T12992] netlink: 182168 bytes leftover after parsing attributes in process `syz-executor.2'. [ 587.609797][T12991] FAULT_INJECTION: forcing a failure. [ 587.609797][T12991] name failslab, interval 1, probability 0, space 0, times 0 [ 587.642562][T12991] CPU: 0 PID: 12991 Comm: syz-executor.1 Not tainted 6.2.0-rc5-next-20230127-syzkaller-08766-ge2f86c02fdc9 #0 [ 587.654270][T12991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 587.664369][T12991] Call Trace: [ 587.667710][T12991] [ 587.670764][T12991] dump_stack_lvl+0x136/0x150 [ 587.675501][T12991] should_fail_ex+0x4a3/0x5b0 [ 587.680249][T12991] should_failslab+0x9/0x20 [ 587.684811][T12991] __kmem_cache_alloc_node+0x5b/0x330 [ 587.690230][T12991] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 587.695699][T12991] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 587.701147][T12991] __kmalloc+0x4a/0xd0 [ 587.705279][T12991] tomoyo_encode2.part.0+0xe9/0x3a0 [ 587.710535][T12991] ? rcu_read_lock_sched_held+0x3e/0x70 [ 587.716182][T12991] tomoyo_encode+0x2c/0x50 [ 587.720621][T12991] tomoyo_realpath_from_path+0x185/0x600 [ 587.726281][T12991] tomoyo_path_number_perm+0x21a/0x570 [ 587.731755][T12991] ? tomoyo_path_number_perm+0x1c1/0x570 [ 587.737408][T12991] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 587.743228][T12991] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 587.749220][T12991] ? percpu_ref_put_many.constprop.0+0x4c/0x100 [ 587.755527][T12991] ? hook_path_mknod+0x47f/0x680 [ 587.760498][T12991] ? d_alloc_parallel+0x693/0x1530 [ 587.765626][T12991] tomoyo_path_mknod+0x111/0x190 [ 587.770577][T12991] ? tomoyo_path_chown+0x1b0/0x1b0 [ 587.775714][T12991] security_path_mknod+0xfd/0x180 [ 587.780748][T12991] lookup_open.isra.0+0x49d/0x1400 [ 587.785876][T12991] ? link_path_walk.part.0+0xd60/0xd60 [ 587.791429][T12991] ? path_openat+0x90f/0x2750 [ 587.796132][T12991] ? path_openat+0x90f/0x2750 [ 587.800828][T12991] ? lock_acquire+0x32/0xc0 [ 587.805331][T12991] ? path_openat+0x90f/0x2750 [ 587.810020][T12991] ? down_write_killable_nested+0x250/0x250 [ 587.815911][T12991] ? __mnt_want_write+0x1fe/0x2e0 [ 587.820953][T12991] path_openat+0x975/0x2750 [ 587.825474][T12991] ? path_lookupat+0x840/0x840 [ 587.830251][T12991] do_filp_open+0x1ba/0x410 [ 587.834759][T12991] ? may_open_dev+0xf0/0xf0 [ 587.839267][T12991] ? find_held_lock+0x2d/0x110 [ 587.844035][T12991] ? do_raw_spin_lock+0x124/0x2b0 [ 587.849060][T12991] ? spin_bug+0x1c0/0x1c0 [ 587.853399][T12991] ? _raw_spin_unlock+0x28/0x40 [ 587.858253][T12991] ? alloc_fd+0x2e4/0x750 [ 587.862701][T12991] do_sys_openat2+0x16d/0x4c0 [ 587.867402][T12991] ? build_open_flags+0x6f0/0x6f0 [ 587.872443][T12991] __x64_sys_openat+0x143/0x1f0 [ 587.877316][T12991] ? __ia32_sys_open+0x1c0/0x1c0 [ 587.882293][T12991] ? syscall_enter_from_user_mode+0x26/0xb0 [ 587.888193][T12991] do_syscall_64+0x39/0xb0 [ 587.892633][T12991] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 587.898526][T12991] RIP: 0033:0x7f245868c0c9 [ 587.902958][T12991] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 587.922570][T12991] RSP: 002b:00007f2459441168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 587.930988][T12991] RAX: ffffffffffffffda RBX: 00007f24587abf80 RCX: 00007f245868c0c9 [ 587.938963][T12991] RDX: 00000000000008dc RSI: 0000000020000040 RDI: ffffffffffffff9c [ 587.946938][T12991] RBP: 00007f24594411d0 R08: 0000000000000000 R09: 0000000000000000 19:19:51 executing program 1: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x440, &(0x7f0000000380)={[{@gid={'gid', 0x3d, 0xee01}}, {@uid}, {@force}, {@type={'type', 0x3d, "54c306e3"}}, {@barrier}, {@nls={'nls', 0x3d, 'cp1251'}}, {@nobarrier}, {@gid}, {@nodecompose}, {@nobarrier}, {@force}, {@nobarrier}, {@uid}, {@umask={'umask', 0x3d, 0x789}}]}, 0x1, 0x5ee, &(0x7f0000000680)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="72797a3135cf2c3f3ce902d76d82a4c90000000000000000000000deb8cc70727486b8a90000ff6316d2f6fe2000000000400000003901000100d49f02fb634ff8cecd19f692bdc62760e81784a813e39785551764917eb498"], 0x81) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x8dc, 0x0) (fail_nth: 8) 19:19:51 executing program 3: socketpair(0xf, 0x0, 0x0, &(0x7f0000000140)) 19:19:51 executing program 0: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLINK(r0, 0x0, 0x0) 19:19:51 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c010030026000b12d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) 19:19:51 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f00000002c0)) 19:19:51 executing program 4: syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000001140)='./file0\x00', 0x4408, &(0x7f0000000140)={[{@balloc_notest4}, {@balloc_test4}, {@jqfmt_vfsold}, {@balloc_test4}, {@grpjquota, 0x3d}]}, 0x1, 0x1102, &(0x7f00000022c0)="$eJzs2LFqFEEcBvBv9g5MdzLpF0ELCwkJZ2eVIsK11jYiqUyVqyI2vouPI6nsQx7AImAprEyyl6SIBMzJEfj94Gbmvp3Z/045EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjypjXbXVJXSZekJH1/ujhP0q/yp98nXUreHS6WB8fzt8txasu6lDZsy1L3nm/VeZ3Xvfp6e/9FXZ58/vTh6OjweHxNSZ+zi/VvpNWe/O3h1vrrAQAAwGMxPNhsw/UBAACA+6ztIgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgHw2zm3FN8nsYhnRJStL3p4vzJP0mPxAAAAB4sJIu72d35bm8BrjxKj9m5Tpv/a/Sxrv5dsd6AAAA4LbpvTPKrfP4y0yvz+Ute5Zpdnau/o9dfu4nk5OD7ObJmHy9bM8uvnxc/cow+R+bAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAP+zAAQkAAACAoP+v2xEoAAAAAAAAAAAAAAAAAADASgEAAP//C6/ZOQ==") (fail_nth: 9) [ 587.954917][T12991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 587.962884][T12991] R13: 00007fff6f88cc8f R14: 00007f2459441300 R15: 0000000000022000 [ 587.970876][T12991] [ 587.995063][T12991] ERROR: Out of memory at tomoyo_realpath_from_path. 19:19:52 executing program 3: timer_create(0x2, 0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000005c0)={{0x77359400}, {0x0, r0+60000000}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}}, 0x0) 19:19:52 executing program 0: sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x10040854) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xa0, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x444cd5dbbc0836ed}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pim6reg\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000010}, 0x10) socketpair(0x1, 0x800, 0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe}, 0x14}}, 0x4000800) socketpair(0x9, 0x4, 0x9, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r3, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @crypto_settings=[@NL80211_ATTR_AKM_SUITES={0x8, 0x4c, [0x0]}, @NL80211_ATTR_CONTROL_PORT={0x4}], @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x80015, {0x820a, 0x9, 0x1000, 0x5}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008880}, 0x20000845) r4 = socket(0x9, 0x5, 0x401) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000600), r0) sendmsg$SMC_PNETID_ADD(r4, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x20, r5, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000880)={&(0x7f0000000700), 0xc, 0x0}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20040012) [ 588.055754][T13004] FAULT_INJECTION: forcing a failure. [ 588.055754][T13004] name failslab, interval 1, probability 0, space 0, times 0 [ 588.061107][T13003] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 588.114914][T13004] CPU: 0 PID: 13004 Comm: syz-executor.4 Not tainted 6.2.0-rc5-next-20230127-syzkaller-08766-ge2f86c02fdc9 #0 [ 588.126707][T13004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 588.136804][T13004] Call Trace: [ 588.140257][T13004] [ 588.143226][T13004] dump_stack_lvl+0x136/0x150 [ 588.147957][T13004] should_fail_ex+0x4a3/0x5b0 [ 588.152696][T13004] ? mas_alloc_nodes+0x402/0x8a0 [ 588.154862][T13003] netlink: 182424 bytes leftover after parsing attributes in process `syz-executor.2'. [ 588.157665][T13004] should_failslab+0x9/0x20 [ 588.157704][T13004] kmem_cache_alloc+0x5a/0x320 [ 588.157749][T13004] mas_alloc_nodes+0x402/0x8a0 [ 588.157795][T13004] mas_preallocate+0x1bb/0x360 [ 588.187867][T13004] mmap_region+0x85c/0x2690 [ 588.192451][T13004] ? do_munmap+0xf0/0xf0 [ 588.196760][T13004] ? security_mmap_addr+0x77/0xa0 [ 588.201846][T13004] ? get_unmapped_area+0x1e8/0x3c0 [ 588.207021][T13004] do_mmap+0x831/0xf60 [ 588.211164][T13004] vm_mmap_pgoff+0x1af/0x280 [ 588.215799][T13004] ? randomize_page+0xb0/0xb0 [ 588.220515][T13004] ksys_mmap_pgoff+0x7d/0x5a0 [ 588.225231][T13004] ? lockdep_hardirqs_on+0x7d/0x100 [ 588.230456][T13004] do_syscall_64+0x39/0xb0 [ 588.234919][T13004] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 588.240843][T13004] RIP: 0033:0x7f11b0e8c112 [ 588.245273][T13004] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 b8 ff ff ff 64 [ 588.264934][T13004] RSP: 002b:00007f11b1bfff28 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 588.273435][T13004] RAX: ffffffffffffffda RBX: 0000000000000022 RCX: 00007f11b0e8c112 [ 588.281446][T13004] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 588.289435][T13004] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 588.297420][T13004] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000001100 [ 588.305425][T13004] R13: 00007f11b1bfffdc R14: 00007f11b1bfffe0 R15: 00000000200022c2 19:19:52 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c035030026000b12d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) 19:19:52 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x4, 0x7f, 0x0, 0x0, 0xa, @private2, @loopback, 0x0, 0x10}}) [ 588.313457][T13004] 19:19:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001e000146b8a555e0a2b3031149"], 0x14}}, 0x0) 19:19:52 executing program 0: pselect6(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000100)={0x4}, &(0x7f0000000140)={0x0, 0x3938700}, 0x0) [ 588.381950][T13013] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 588.404427][T13013] netlink: 191896 bytes leftover after parsing attributes in process `syz-executor.2'. [ 588.441914][T13010] loop1: detected capacity change from 0 to 1024 [ 588.542095][T13010] FAULT_INJECTION: forcing a failure. [ 588.542095][T13010] name failslab, interval 1, probability 0, space 0, times 0 [ 588.591661][T13010] CPU: 1 PID: 13010 Comm: syz-executor.1 Not tainted 6.2.0-rc5-next-20230127-syzkaller-08766-ge2f86c02fdc9 #0 [ 588.603367][T13010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 588.613463][T13010] Call Trace: [ 588.616775][T13010] [ 588.619741][T13010] dump_stack_lvl+0x136/0x150 [ 588.624474][T13010] should_fail_ex+0x4a3/0x5b0 [ 588.629208][T13010] should_failslab+0x9/0x20 [ 588.633764][T13010] __kmem_cache_alloc_node+0x5b/0x330 [ 588.639196][T13010] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 588.644639][T13010] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 588.650071][T13010] __kmalloc+0x4a/0xd0 [ 588.654199][T13010] tomoyo_encode2.part.0+0xe9/0x3a0 [ 588.659457][T13010] ? rcu_read_lock_sched_held+0x3e/0x70 [ 588.665067][T13010] tomoyo_encode+0x2c/0x50 [ 588.669549][T13010] tomoyo_realpath_from_path+0x185/0x600 [ 588.675264][T13010] tomoyo_path_number_perm+0x21a/0x570 [ 588.680789][T13010] ? tomoyo_path_number_perm+0x1c1/0x570 [ 588.686488][T13010] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 588.692341][T13010] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 588.698350][T13010] ? percpu_ref_put_many.constprop.0+0x4c/0x100 [ 588.704664][T13010] ? hook_path_mknod+0x47f/0x680 [ 588.709637][T13010] ? d_alloc_parallel+0x693/0x1530 [ 588.714786][T13010] tomoyo_path_mknod+0x111/0x190 [ 588.719757][T13010] ? tomoyo_path_chown+0x1b0/0x1b0 [ 588.724934][T13010] security_path_mknod+0xfd/0x180 [ 588.729987][T13010] lookup_open.isra.0+0x49d/0x1400 [ 588.735128][T13010] ? link_path_walk.part.0+0xd60/0xd60 [ 588.740611][T13010] ? path_openat+0x90f/0x2750 [ 588.745324][T13010] ? path_openat+0x90f/0x2750 [ 588.750026][T13010] ? lock_acquire+0x32/0xc0 [ 588.754557][T13010] ? path_openat+0x90f/0x2750 [ 588.759270][T13010] ? down_write_killable_nested+0x250/0x250 [ 588.765186][T13010] ? __mnt_want_write+0x1fe/0x2e0 [ 588.770244][T13010] path_openat+0x975/0x2750 [ 588.774790][T13010] ? path_lookupat+0x840/0x840 [ 588.779593][T13010] do_filp_open+0x1ba/0x410 [ 588.784126][T13010] ? may_open_dev+0xf0/0xf0 [ 588.788654][T13010] ? find_held_lock+0x2d/0x110 [ 588.793469][T13010] ? do_raw_spin_lock+0x124/0x2b0 [ 588.798524][T13010] ? spin_bug+0x1c0/0x1c0 [ 588.802889][T13010] ? _raw_spin_unlock+0x28/0x40 [ 588.807761][T13010] ? alloc_fd+0x2e4/0x750 [ 588.812129][T13010] do_sys_openat2+0x16d/0x4c0 [ 588.816839][T13010] ? build_open_flags+0x6f0/0x6f0 [ 588.821926][T13010] __x64_sys_openat+0x143/0x1f0 [ 588.826813][T13010] ? __ia32_sys_open+0x1c0/0x1c0 [ 588.831785][T13010] ? syscall_enter_from_user_mode+0x26/0xb0 [ 588.837706][T13010] do_syscall_64+0x39/0xb0 [ 588.842149][T13010] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 588.848070][T13010] RIP: 0033:0x7f245868c0c9 [ 588.852501][T13010] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 588.872138][T13010] RSP: 002b:00007f2459441168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 588.880918][T13010] RAX: ffffffffffffffda RBX: 00007f24587abf80 RCX: 00007f245868c0c9 [ 588.889096][T13010] RDX: 00000000000008dc RSI: 0000000020000040 RDI: ffffffffffffff9c [ 588.897082][T13010] RBP: 00007f24594411d0 R08: 0000000000000000 R09: 0000000000000000 [ 588.905075][T13010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 588.913060][T13010] R13: 00007fff6f88cc8f R14: 00007f2459441300 R15: 0000000000022000 [ 588.921064][T13010] [ 588.929285][T13010] ERROR: Out of memory at tomoyo_realpath_from_path. 19:19:52 executing program 1: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x440, &(0x7f0000000380)={[{@gid={'gid', 0x3d, 0xee01}}, {@uid}, {@force}, {@type={'type', 0x3d, "54c306e3"}}, {@barrier}, {@nls={'nls', 0x3d, 'cp1251'}}, {@nobarrier}, {@gid}, {@nodecompose}, {@nobarrier}, {@force}, {@nobarrier}, {@uid}, {@umask={'umask', 0x3d, 0x789}}]}, 0x1, 0x5ee, &(0x7f0000000680)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="72797a3135cf2c3f3ce902d76d82a4c90000000000000000000000deb8cc70727486b8a90000ff6316d2f6fe2000000000400000003901000100d49f02fb634ff8cecd19f692bdc62760e81784a813e39785551764917eb498"], 0x81) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x8dc, 0x0) (fail_nth: 9) 19:19:52 executing program 4: syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000001140)='./file0\x00', 0x4408, &(0x7f0000000140)={[{@balloc_notest4}, {@balloc_test4}, {@jqfmt_vfsold}, {@balloc_test4}, {@grpjquota, 0x3d}]}, 0x1, 0x1102, &(0x7f00000022c0)="$eJzs2LFqFEEcBvBv9g5MdzLpF0ELCwkJZ2eVIsK11jYiqUyVqyI2vouPI6nsQx7AImAprEyyl6SIBMzJEfj94Gbmvp3Z/045EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjypjXbXVJXSZekJH1/ujhP0q/yp98nXUreHS6WB8fzt8txasu6lDZsy1L3nm/VeZ3Xvfp6e/9FXZ58/vTh6OjweHxNSZ+zi/VvpNWe/O3h1vrrAQAAwGMxPNhsw/UBAACA+6ztIgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgHw2zm3FN8nsYhnRJStL3p4vzJP0mPxAAAAB4sJIu72d35bm8BrjxKj9m5Tpv/a/Sxrv5dsd6AAAA4LbpvTPKrfP4y0yvz+Ute5Zpdnau/o9dfu4nk5OD7ObJmHy9bM8uvnxc/cow+R+bAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAP+zAAQkAAACAoP+v2xEoAAAAAAAAAAAAAAAAAADASgEAAP//C6/ZOQ==") (fail_nth: 10) 19:19:52 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x20}, {}]}) 19:19:52 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020026000b12d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) 19:19:52 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000b40)={0x1, &(0x7f0000000b00)=[{0x12}]}) syz_genetlink_get_family_id$tipc(&(0x7f0000001dc0), 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 19:19:52 executing program 3: clock_gettime(0x0, 0x0) clock_gettime(0x0, &(0x7f0000001080)) 19:19:52 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSNPMODE(r0, 0x4010744d, &(0x7f0000000180)) 19:19:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x2c, 0x1, 0x0, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x0, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, 0x38}}, 0x0) [ 589.011723][T13026] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 589.049572][T13026] netlink: 116376 bytes leftover after parsing attributes in process `syz-executor.2'. 19:19:53 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e040026000b12d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) 19:19:53 executing program 3: sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, 0x0, 0xa80b7f37874ed5da) [ 589.099532][T13030] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 19:19:53 executing program 0: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180), 0x8}) 19:19:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@ipv4_getnexthop={0x1c, 0x6a, 0x195, 0x0, 0x0, {}, [@NHA_FDB={0x4, 0xa}]}, 0x1c}}, 0x0) [ 589.158671][T13036] FAULT_INJECTION: forcing a failure. [ 589.158671][T13036] name failslab, interval 1, probability 0, space 0, times 0 [ 589.162772][T13035] loop1: detected capacity change from 0 to 1024 [ 589.244503][T13036] CPU: 0 PID: 13036 Comm: syz-executor.4 Not tainted 6.2.0-rc5-next-20230127-syzkaller-08766-ge2f86c02fdc9 #0 [ 589.256204][T13036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 589.259738][T13035] FAULT_INJECTION: forcing a failure. [ 589.259738][T13035] name failslab, interval 1, probability 0, space 0, times 0 [ 589.266273][T13036] Call Trace: [ 589.266287][T13036] [ 589.266299][T13036] dump_stack_lvl+0x136/0x150 [ 589.266337][T13036] should_fail_ex+0x4a3/0x5b0 [ 589.266374][T13036] should_failslab+0x9/0x20 [ 589.266403][T13036] kmem_cache_alloc_bulk+0x6d/0x730 [ 589.266440][T13036] ? rcu_read_lock_sched_held+0x3e/0x70 [ 589.266473][T13036] ? trace_kmem_cache_alloc+0xb1/0x110 [ 589.266508][T13036] ? kmem_cache_alloc+0x1c5/0x320 [ 589.320739][T13036] mas_alloc_nodes+0x276/0x8a0 [ 589.325647][T13036] mas_preallocate+0x1bb/0x360 [ 589.330478][T13036] mmap_region+0x85c/0x2690 [ 589.335077][T13036] ? do_munmap+0xf0/0xf0 [ 589.339384][T13036] ? security_mmap_addr+0x77/0xa0 [ 589.344459][T13036] ? get_unmapped_area+0x1e8/0x3c0 [ 589.349618][T13036] do_mmap+0x831/0xf60 [ 589.353734][T13036] vm_mmap_pgoff+0x1af/0x280 [ 589.358354][T13036] ? randomize_page+0xb0/0xb0 [ 589.363072][T13036] ksys_mmap_pgoff+0x7d/0x5a0 [ 589.367784][T13036] ? lockdep_hardirqs_on+0x7d/0x100 [ 589.373013][T13036] do_syscall_64+0x39/0xb0 [ 589.377493][T13036] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 589.383414][T13036] RIP: 0033:0x7f11b0e8c112 [ 589.387847][T13036] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 b8 ff ff ff 64 [ 589.407473][T13036] RSP: 002b:00007f11b1bfff28 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 589.415905][T13036] RAX: ffffffffffffffda RBX: 0000000000000022 RCX: 00007f11b0e8c112 [ 589.423898][T13036] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 589.431881][T13036] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 589.439864][T13036] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000001100 [ 589.447846][T13036] R13: 00007f11b1bfffdc R14: 00007f11b1bfffe0 R15: 00000000200022c2 [ 589.455853][T13036] [ 589.476143][T13035] CPU: 0 PID: 13035 Comm: syz-executor.1 Not tainted 6.2.0-rc5-next-20230127-syzkaller-08766-ge2f86c02fdc9 #0 [ 589.487843][T13035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 589.497915][T13035] Call Trace: [ 589.501204][T13035] [ 589.504146][T13035] dump_stack_lvl+0x136/0x150 [ 589.508854][T13035] should_fail_ex+0x4a3/0x5b0 [ 589.513561][T13035] should_failslab+0x9/0x20 [ 589.518087][T13035] kmem_cache_alloc_lru+0x65/0x580 [ 589.523226][T13035] ? hfsplus_alloc_inode+0x27/0x50 [ 589.528437][T13035] hfsplus_alloc_inode+0x27/0x50 [ 589.533407][T13035] ? hfsplus_free_inode+0x30/0x30 [ 589.538453][T13035] alloc_inode+0x61/0x230 [ 589.542808][T13035] new_inode+0x2b/0x280 [ 589.546987][T13035] ? make_vfsgid+0x113/0x170 [ 589.551670][T13035] hfsplus_new_inode+0x56/0x9b0 [ 589.556550][T13035] hfsplus_mknod+0xb2/0x320 [ 589.561080][T13035] ? bpf_lsm_inode_create+0x9/0x10 [ 589.566215][T13035] ? hfsplus_mkdir+0x40/0x40 [ 589.570840][T13035] lookup_open.isra.0+0x105a/0x1400 [ 589.576102][T13035] ? link_path_walk.part.0+0xd60/0xd60 [ 589.581586][T13035] ? path_openat+0x90f/0x2750 [ 589.586291][T13035] ? path_openat+0x90f/0x2750 [ 589.591010][T13035] ? lock_acquire+0x32/0xc0 [ 589.595552][T13035] ? path_openat+0x90f/0x2750 [ 589.600262][T13035] ? down_write_killable_nested+0x250/0x250 [ 589.606180][T13035] ? __mnt_want_write+0x1fe/0x2e0 [ 589.611244][T13035] path_openat+0x975/0x2750 [ 589.615785][T13035] ? path_lookupat+0x840/0x840 [ 589.620584][T13035] do_filp_open+0x1ba/0x410 [ 589.625111][T13035] ? may_open_dev+0xf0/0xf0 [ 589.629637][T13035] ? find_held_lock+0x2d/0x110 [ 589.634428][T13035] ? do_raw_spin_lock+0x124/0x2b0 [ 589.639483][T13035] ? spin_bug+0x1c0/0x1c0 [ 589.643872][T13035] ? _raw_spin_unlock+0x28/0x40 [ 589.648834][T13035] ? alloc_fd+0x2e4/0x750 [ 589.653202][T13035] do_sys_openat2+0x16d/0x4c0 [ 589.657908][T13035] ? build_open_flags+0x6f0/0x6f0 [ 589.662976][T13035] __x64_sys_openat+0x143/0x1f0 [ 589.667879][T13035] ? __ia32_sys_open+0x1c0/0x1c0 [ 589.672849][T13035] ? syscall_enter_from_user_mode+0x26/0xb0 [ 589.678770][T13035] do_syscall_64+0x39/0xb0 [ 589.683306][T13035] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 589.689226][T13035] RIP: 0033:0x7f245868c0c9 [ 589.693652][T13035] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 589.713272][T13035] RSP: 002b:00007f2459441168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 589.721716][T13035] RAX: ffffffffffffffda RBX: 00007f24587abf80 RCX: 00007f245868c0c9 [ 589.729700][T13035] RDX: 00000000000008dc RSI: 0000000020000040 RDI: ffffffffffffff9c [ 589.737681][T13035] RBP: 00007f24594411d0 R08: 0000000000000000 R09: 0000000000000000 [ 589.745673][T13035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 589.753693][T13035] R13: 00007fff6f88cc8f R14: 00007f2459441300 R15: 0000000000022000 [ 589.761704][T13035] [ 589.806927][T13044] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 19:19:53 executing program 1: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x440, &(0x7f0000000380)={[{@gid={'gid', 0x3d, 0xee01}}, {@uid}, {@force}, {@type={'type', 0x3d, "54c306e3"}}, {@barrier}, {@nls={'nls', 0x3d, 'cp1251'}}, {@nobarrier}, {@gid}, {@nodecompose}, {@nobarrier}, {@force}, {@nobarrier}, {@uid}, {@umask={'umask', 0x3d, 0x789}}]}, 0x1, 0x5ee, &(0x7f0000000680)="$eJzs3U9oHNcdB/DvrGXZ64KySewkLYWKGEwbU1urbWoXCnVLKTqEYuglV2GvY+G1EqRNUUJpt/+vPeaQQ3pwDzn1mtJDaHouFHr33dC7TlWZ2VlpbcmKFP/ZVfz5wNv33rx5b978PPO0O4vZAM+spTdzfJAiS+ff2Cjrd+90enfvdG6PyklOJGkkM8MsxWpSfJZcyTDlq+XGerjiYcd5/d4nH5774OPOsDZTp2r/xn79dtlzz0GdMp/kWJ0/gvvGu/bI4xXb8y4DdnYUOJi0rV0Gh+l+8PsWmFrF8O/mLq3kVJKT9fuA1KtD4+nO7vE71CoHAAAAR9Rzm9nMRuYmPQ8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Surf/y/q1BiV51OMfv9/tt6WunykfTrpCQAAAAAAAADAY/CNzWxmI3Oj+lZRfef/alU5Xb1+Je9mPd2s5UI2spx++llLO0lrbKDZjeV+f639sJ5bW1u/qnsu7tlz8emcLwAAAAAAAAB8Sf0mSzvf/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwDQokmPDrEqnR+VWGjNJTiaZLfcbJH8flY+yTyc9AQAAAHgKntvMZjYyV/xvWN8qqs/8L1Wf+0/m3aymn5X000s316tnAcNP/Y1/Dzq9u3c6t8u0e9wf/vdQ06hGzPDZw95HXqj2OLPdYyk/yc9yPvO5mrWs5OdZTj/dzOfHVWk5RVr104vWaJ57z/fKfbWrnzfXV6qZNHMjK9XcLuRa3k4v19OozqHaZ/8j/rqMTvGD2gFjdL3OyzP6U51Ph1YVkePbEVmoY19G4/n9I3HI6+TBI7XT2H4GdfoJxPxUnZex/sNUx3xx7Op7af9IJN/6zz+u3uyt3rp5Y/389JzSF/RgJDpjkXj54JEYHP1IzNbRGK6ih1stX636zmUlP83buZ5uLmUh7VzOQr6XxXTuu8LOHOBeaxzuXjv7zbrQTPLHOp8OZVyfH4vr+ErXqtrGt+xE6YXHvyLNfK0ulMf4bZ1Phwcj0R6LxIv7R+LPW+Xrem/11trN5XcOeLxzdV7etr+fqrW5vF5eKP+xqtr9V0fZ9uKebe2q7fR2W2NX25ntts+7U2fr93C7Rxq2vbxnW6dqe2Wsba93OQBMvVOvnZpt3mv+q/lR83fNm803Tv7oxOUTX5/N8X/O/O3YXxt/aXy/eC0f5ZeZm/RMAQAAAAAAAAAAAAAAAAAAAAAAAAAAAADgy2D9vfdvLfd63bUpLKQxFdNQUHhGCs3sbJn0ygQ8aRf7t9+5uP7e+99eub38Vvet7uri5UuXL3W+2/7OxRsrve7C8HXSswSehJ2//pOeCQAAAAAAAAAAAHBQT+P/FUz6HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICjbenNHB+kSHvhwkJZv3un0yvTqLyz50ySRpLiF0nxWXIlw5TW2HDFw47z+r1PPjz3wcednbFmRvs39ut3MIM6ZT7JsTp/XONde+Txiu0zLAN2dhQ4mLT/BwAA///IRBDJ") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="72797a3135cf2c3f3ce902d76d82a4c90000000000000000000000deb8cc70727486b8a90000ff6316d2f6fe2000000000400000003901000100d49f02fb634ff8cecd19f692bdc62760e81784a813e39785551764917eb498"], 0x81) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x8dc, 0x0) (fail_nth: 10) 19:19:53 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e050026000b12d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) 19:19:53 executing program 0: bpf$BPF_MAP_FREEZE(0x9, 0x0, 0x0) 19:19:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_ZERO(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000011c0), 0xffffffffffffffff) 19:19:53 executing program 5: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001040)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 19:19:53 executing program 4: syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000001140)='./file0\x00', 0x4408, &(0x7f0000000140)={[{@balloc_notest4}, {@balloc_test4}, {@jqfmt_vfsold}, {@balloc_test4}, {@grpjquota, 0x3d}]}, 0x1, 0x1102, &(0x7f00000022c0)="$eJzs2LFqFEEcBvBv9g5MdzLpF0ELCwkJZ2eVIsK11jYiqUyVqyI2vouPI6nsQx7AImAprEyyl6SIBMzJEfj94Gbmvp3Z/045EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjypjXbXVJXSZekJH1/ujhP0q/yp98nXUreHS6WB8fzt8txasu6lDZsy1L3nm/VeZ3Xvfp6e/9FXZ58/vTh6OjweHxNSZ+zi/VvpNWe/O3h1vrrAQAAwGMxPNhsw/UBAACA+6ztIgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgHw2zm3FN8nsYhnRJStL3p4vzJP0mPxAAAAB4sJIu72d35bm8BrjxKj9m5Tpv/a/Sxrv5dsd6AAAA4LbpvTPKrfP4y0yvz+Ute5Zpdnau/o9dfu4nk5OD7ObJmHy9bM8uvnxc/cow+R+bAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAP+zAAQkAAACAoP+v2xEoAAAAAAAAAAAAAAAAAADASgEAAP//C6/ZOQ==") (fail_nth: 11) 19:19:53 executing program 5: r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_mreqn(r0, 0x0, 0x62, 0x0, &(0x7f0000000040)=0xfe74) 19:19:53 executing program 0: bpf$BPF_MAP_FREEZE(0x13, 0x0, 0x0) 19:19:53 executing program 3: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001580)={0xffffffffffffffff, 0x24, 0x0, 0x0, 0x0}, 0x20) [ 589.957172][T13052] FAULT_INJECTION: forcing a failure. [ 589.957172][T13052] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 590.020674][T13052] CPU: 0 PID: 13052 Comm: syz-executor.4 Not tainted 6.2.0-rc5-next-20230127-syzkaller-08766-ge2f86c02fdc9 #0 [ 590.032392][T13052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 590.042485][T13052] Call Trace: [ 590.045792][T13052] [ 590.048750][T13052] dump_stack_lvl+0x136/0x150 [ 590.053478][T13052] should_fail_ex+0x4a3/0x5b0 [ 590.058208][T13052] prepare_alloc_pages+0x178/0x570 [ 590.063373][T13052] ? __lock_acquire+0xbe1/0x5df0 19:19:54 executing program 5: nanosleep(&(0x7f0000000a40), 0x0) [ 590.068381][T13052] __alloc_pages+0x149/0x5c0 [ 590.073030][T13052] ? __alloc_pages_slowpath.constprop.0+0x23f0/0x23f0 [ 590.079854][T13052] ? validate_mm+0x1d4/0x290 [ 590.084528][T13052] ? __lock_acquire+0xbe1/0x5df0 [ 590.089520][T13052] alloc_pages+0x1aa/0x270 [ 590.094069][T13052] pte_alloc_one+0x1a/0x230 [ 590.098630][T13052] __pte_alloc+0x6d/0x260 [ 590.103011][T13052] ? pmd_install+0x160/0x160 [ 590.107649][T13052] ? print_usage_bug.part.0+0x660/0x660 [ 590.113233][T13052] __handle_mm_fault+0x3626/0x3e60 [ 590.118383][T13052] ? vm_iomap_memory+0x190/0x190 [ 590.123372][T13052] handle_mm_fault+0x1b6/0x850 [ 590.128311][T13052] do_user_addr_fault+0x475/0x1230 [ 590.133473][T13052] ? rcu_read_lock_sched_held+0x3e/0x70 [ 590.139065][T13052] exc_page_fault+0x98/0x170 [ 590.143686][T13052] asm_exc_page_fault+0x26/0x30 [ 590.148560][T13052] RIP: 0033:0x7f11b0e29197 [ 590.152991][T13052] Code: 78 48 63 d5 48 01 c2 49 3b 55 08 77 56 8d 55 ff 85 ed 74 35 0f 1f 80 00 00 00 00 48 39 c1 77 1c 49 8b 75 00 49 89 c1 49 29 c9 <46> 0f b6 0c 0e 45 84 c9 74 08 44 88 0c 06 49 8b 45 10 48 83 c0 01 [ 590.172622][T13052] RSP: 002b:00007f11b1bff600 EFLAGS: 00010246 [ 590.178711][T13052] RAX: 0000000000000001 RBX: 00007f11b1bff660 RCX: 0000000000000001 [ 590.186717][T13052] RDX: 0000000000000101 RSI: 00007f11a75ff000 RDI: 00007f11b1bff700 [ 590.194698][T13052] RBP: 0000000000000102 R08: 0000000000000000 R09: 0000000000000000 [ 590.202851][T13052] R10: 0000000000000000 R11: 00007f11b1bff670 R12: 00007f11b1bff670 [ 590.210832][T13052] R13: 00007f11b1bff700 R14: 0000000000000001 R15: 0000000000000000 19:19:54 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e060026000b12d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) [ 590.218833][T13052] 19:19:54 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000030c0)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1400000000000000290000ef0800000002000000000000003800000000000000290000000400000089030000000000000109000000001f000000000104e5f9594004010805020980040105000000000060"], 0xb0}}, {{&(0x7f0000000340)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@dstopts_2292={{0x18}}, @dstopts_2292={{0x18, 0x29, 0x6}}], 0x30}}], 0x2, 0x0) [ 590.327890][T13059] loop1: detected capacity change from 0 to 1024 [ 590.372990][T13059] FAULT_INJECTION: forcing a failure. [ 590.372990][T13059] name failslab, interval 1, probability 0, space 0, times 0 [ 590.394602][T13059] CPU: 0 PID: 13059 Comm: syz-executor.1 Not tainted 6.2.0-rc5-next-20230127-syzkaller-08766-ge2f86c02fdc9 #0 [ 590.406298][T13059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 590.416391][T13059] Call Trace: [ 590.419701][T13059] [ 590.422663][T13059] dump_stack_lvl+0x136/0x150 [ 590.427397][T13059] should_fail_ex+0x4a3/0x5b0 [ 590.432132][T13059] ? security_inode_alloc+0x38/0x160 [ 590.437470][T13059] should_failslab+0x9/0x20 [ 590.442004][T13059] kmem_cache_alloc+0x5a/0x320 [ 590.446810][T13059] security_inode_alloc+0x38/0x160 [ 590.451962][T13059] inode_init_always+0xbfa/0xef0 [ 590.456933][T13059] alloc_inode+0x82/0x230 [ 590.461294][T13059] new_inode+0x2b/0x280 [ 590.465472][T13059] ? make_vfsgid+0x113/0x170 [ 590.470089][T13059] hfsplus_new_inode+0x56/0x9b0 [ 590.475017][T13059] hfsplus_mknod+0xb2/0x320 [ 590.479569][T13059] ? bpf_lsm_inode_create+0x9/0x10 [ 590.484717][T13059] ? hfsplus_mkdir+0x40/0x40 [ 590.489341][T13059] lookup_open.isra.0+0x105a/0x1400 [ 590.494573][T13059] ? link_path_walk.part.0+0xd60/0xd60 [ 590.500073][T13059] ? path_openat+0x90f/0x2750 [ 590.504779][T13059] ? path_openat+0x90f/0x2750 [ 590.509474][T13059] ? lock_acquire+0x32/0xc0 [ 590.513996][T13059] ? path_openat+0x90f/0x2750 [ 590.518700][T13059] ? down_write_killable_nested+0x250/0x250 [ 590.524609][T13059] ? __mnt_want_write+0x1fe/0x2e0 [ 590.529662][T13059] path_openat+0x975/0x2750 [ 590.534200][T13059] ? path_lookupat+0x840/0x840 [ 590.539000][T13059] do_filp_open+0x1ba/0x410 [ 590.543529][T13059] ? may_open_dev+0xf0/0xf0 [ 590.548057][T13059] ? find_held_lock+0x2d/0x110 [ 590.552847][T13059] ? do_raw_spin_lock+0x124/0x2b0 [ 590.557895][T13059] ? spin_bug+0x1c0/0x1c0 [ 590.562255][T13059] ? _raw_spin_unlock+0x28/0x40 [ 590.567126][T13059] ? alloc_fd+0x2e4/0x750 [ 590.571494][T13059] do_sys_openat2+0x16d/0x4c0 [ 590.576203][T13059] ? build_open_flags+0x6f0/0x6f0 [ 590.581269][T13059] __x64_sys_openat+0x143/0x1f0 [ 590.586149][T13059] ? __ia32_sys_open+0x1c0/0x1c0 [ 590.591124][T13059] ? syscall_enter_from_user_mode+0x26/0xb0 [ 590.597054][T13059] do_syscall_64+0x39/0xb0 [ 590.601497][T13059] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 590.607409][T13059] RIP: 0033:0x7f245868c0c9 [ 590.611840][T13059] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 590.631460][T13059] RSP: 002b:00007f2459441168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 590.639897][T13059] RAX: ffffffffffffffda RBX: 00007f24587abf80 RCX: 00007f245868c0c9 [ 590.647879][T13059] RDX: 00000000000008dc RSI: 0000000020000040 RDI: ffffffffffffff9c [ 590.655871][T13059] RBP: 00007f24594411d0 R08: 0000000000000000 R09: 0000000000000000 [ 590.663852][T13059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 590.671831][T13059] R13: 00007fff6f88cc8f R14: 00007f2459441300 R15: 0000000000022000 [ 590.679836][T13059] [ 590.707851][T13052] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF 19:19:54 executing program 1: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x440, &(0x7f0000000380)={[{@gid={'gid', 0x3d, 0xee01}}, {@uid}, {@force}, {@type={'type', 0x3d, "54c306e3"}}, {@barrier}, {@nls={'nls', 0x3d, 'cp1251'}}, {@nobarrier}, {@gid}, {@nodecompose}, {@nobarrier}, {@force}, {@nobarrier}, {@uid}, {@umask={'umask', 0x3d, 0x789}}]}, 0x1, 0x5ee, &(0x7f0000000680)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="72797a3135cf2c3f3ce902d76d82a4c90000000000000000000000deb8cc70727486b8a90000ff6316d2f6fe2000000000400000003901000100d49f02fb634ff8cecd19f692bdc62760e81784a813e39785551764917eb498"], 0x81) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x8dc, 0x0) (fail_nth: 11) 19:19:54 executing program 3: syz_clone(0x20000000, &(0x7f00000000c0)="278a623f51595a679667f8f1cd3f9be5c4b9e1a964135a52a8cc7aa86db5469ed0ee79ce1a1ed0ab5067bb9cae7011ab7db6ed17f4482f8b8c2eb251ed63155368cc9d077c26d0a1841a207db04eaaffd7a7f50414130c09feba133dc2f4770becbbca5498888a607526de62a15fb413cca434fa6e7e7ae2ec9476961a1f0aee2fed69b736271247791bc8eaeb0e2fede6621700973c0ceef5f0dddfa8de294b23cb79", 0xa3, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="9b8808f3c6f0e20d438170f7") openat$zero(0xffffffffffffff9c, &(0x7f0000001180), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001b00)={0x14}, 0x14}}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000001180), 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000001700), 0xffffffffffffffff) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000440)) 19:19:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@ipv4_getnexthop={0x18, 0x32, 0x195}, 0x18}}, 0x0) 19:19:54 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e070026000b12d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) 19:19:54 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGSTAMPNS(r0, 0x8982, 0x0) [ 590.795744][T13077] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 590.847735][T13077] tc_dump_action: action bad kind [ 590.932332][T13079] loop1: detected capacity change from 0 to 1024 [ 590.942752][T13052] loop4: detected capacity change from 0 to 8192 [ 590.971804][T13052] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 590.994175][T13052] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 591.016835][T13052] REISERFS (device loop4): using ordered data mode [ 591.025256][T13052] reiserfs: using flush barriers [ 591.028325][T13079] FAULT_INJECTION: forcing a failure. [ 591.028325][T13079] name failslab, interval 1, probability 0, space 0, times 0 [ 591.042698][T13052] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 591.068055][T13079] CPU: 1 PID: 13079 Comm: syz-executor.1 Not tainted 6.2.0-rc5-next-20230127-syzkaller-08766-ge2f86c02fdc9 #0 [ 591.070685][T13052] REISERFS (device loop4): checking transaction log (loop4) [ 591.079726][T13079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 591.079748][T13079] Call Trace: [ 591.079757][T13079] [ 591.079769][T13079] dump_stack_lvl+0x136/0x150 [ 591.079806][T13079] should_fail_ex+0x4a3/0x5b0 [ 591.079840][T13079] should_failslab+0x9/0x20 [ 591.089997][T13052] REISERFS (device loop4): Using rupasov hash to sort names [ 591.097269][T13079] __kmem_cache_alloc_node+0x5b/0x330 [ 591.097320][T13079] ? hfsplus_find_init+0x95/0x230 [ 591.097359][T13079] ? mark_lock.part.0+0xee/0x1970 [ 591.103339][T13052] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 591.103569][T13079] ? hfsplus_find_init+0x95/0x230 [ 591.154275][T13079] __kmalloc+0x4a/0xd0 [ 591.158401][T13079] hfsplus_find_init+0x95/0x230 [ 591.163321][T13079] hfsplus_create_cat+0x129/0x10d0 [ 591.168503][T13079] ? hfsplus_find_cat+0x4c0/0x4c0 [ 591.173589][T13079] ? __lock_acquire+0x1916/0x5df0 [ 591.178676][T13079] ? __lock_acquire+0x1916/0x5df0 [ 591.183770][T13079] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 591.189799][T13079] ? __mark_inode_dirty+0x774/0x1250 [ 591.195136][T13079] ? reacquire_held_locks+0x216/0x4e0 [ 591.200554][T13079] ? __mark_inode_dirty+0x774/0x1250 [ 591.205902][T13079] ? find_held_lock+0x2d/0x110 [ 591.210715][T13079] ? hfsplus_mark_mdb_dirty+0x189/0x200 [ 591.216313][T13079] ? lock_downgrade+0x690/0x690 [ 591.221214][T13079] ? do_raw_spin_lock+0x124/0x2b0 [ 591.226289][T13079] ? spin_bug+0x1c0/0x1c0 [ 591.230661][T13079] ? lock_acquire+0x32/0xc0 [ 591.235203][T13079] ? hfsplus_mark_mdb_dirty+0x9d/0x200 [ 591.240712][T13079] ? do_raw_spin_unlock+0x175/0x230 [ 591.245960][T13079] ? _raw_spin_unlock+0x28/0x40 [ 591.250857][T13079] ? hfsplus_mark_mdb_dirty+0x189/0x200 [ 591.256466][T13079] ? hfsplus_new_inode+0x58a/0x9b0 [ 591.261637][T13079] hfsplus_mknod+0x16a/0x320 [ 591.266278][T13079] ? hfsplus_mkdir+0x40/0x40 [ 591.270913][T13079] lookup_open.isra.0+0x105a/0x1400 [ 591.276167][T13079] ? link_path_walk.part.0+0xd60/0xd60 [ 591.281767][T13079] ? path_openat+0x90f/0x2750 [ 591.286502][T13079] ? path_openat+0x90f/0x2750 [ 591.291227][T13079] ? lock_acquire+0x32/0xc0 [ 591.295779][T13079] ? path_openat+0x90f/0x2750 [ 591.300518][T13079] ? down_write_killable_nested+0x250/0x250 [ 591.306472][T13079] ? __mnt_want_write+0x1fe/0x2e0 [ 591.311564][T13079] path_openat+0x975/0x2750 [ 591.316139][T13079] ? path_lookupat+0x840/0x840 [ 591.320968][T13079] do_filp_open+0x1ba/0x410 [ 591.325523][T13079] ? may_open_dev+0xf0/0xf0 [ 591.330079][T13079] ? find_held_lock+0x2d/0x110 [ 591.334898][T13079] ? do_raw_spin_lock+0x124/0x2b0 [ 591.339974][T13079] ? spin_bug+0x1c0/0x1c0 [ 591.344363][T13079] ? _raw_spin_unlock+0x28/0x40 [ 591.349273][T13079] ? alloc_fd+0x2e4/0x750 [ 591.353761][T13079] do_sys_openat2+0x16d/0x4c0 [ 591.358499][T13079] ? build_open_flags+0x6f0/0x6f0 [ 591.363599][T13079] __x64_sys_openat+0x143/0x1f0 [ 591.368511][T13079] ? __ia32_sys_open+0x1c0/0x1c0 [ 591.373511][T13079] ? syscall_enter_from_user_mode+0x26/0xb0 [ 591.379469][T13079] do_syscall_64+0x39/0xb0 [ 591.383967][T13079] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 591.389904][T13079] RIP: 0033:0x7f245868c0c9 [ 591.394361][T13079] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 591.414031][T13079] RSP: 002b:00007f2459441168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 591.422521][T13079] RAX: ffffffffffffffda RBX: 00007f24587abf80 RCX: 00007f245868c0c9 19:19:55 executing program 4: syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000001140)='./file0\x00', 0x4408, &(0x7f0000000140)={[{@balloc_notest4}, {@balloc_test4}, {@jqfmt_vfsold}, {@balloc_test4}, {@grpjquota, 0x3d}]}, 0x1, 0x1102, &(0x7f00000022c0)="$eJzs2LFqFEEcBvBv9g5MdzLpF0ELCwkJZ2eVIsK11jYiqUyVqyI2vouPI6nsQx7AImAprEyyl6SIBMzJEfj94Gbmvp3Z/045EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjypjXbXVJXSZekJH1/ujhP0q/yp98nXUreHS6WB8fzt8txasu6lDZsy1L3nm/VeZ3Xvfp6e/9FXZ58/vTh6OjweHxNSZ+zi/VvpNWe/O3h1vrrAQAAwGMxPNhsw/UBAACA+6ztIgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgHw2zm3FN8nsYhnRJStL3p4vzJP0mPxAAAAB4sJIu72d35bm8BrjxKj9m5Tpv/a/Sxrv5dsd6AAAA4LbpvTPKrfP4y0yvz+Ute5Zpdnau/o9dfu4nk5OD7ObJmHy9bM8uvnxc/cow+R+bAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAP+zAAQkAAACAoP+v2xEoAAAAAAAAAAAAAAAAAADASgEAAP//C6/ZOQ==") (fail_nth: 12) 19:19:55 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) 19:19:55 executing program 3: syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000440)) 19:19:55 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e080026000b12d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) 19:19:55 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x48) [ 591.430543][T13079] RDX: 00000000000008dc RSI: 0000000020000040 RDI: ffffffffffffff9c [ 591.438561][T13079] RBP: 00007f24594411d0 R08: 0000000000000000 R09: 0000000000000000 [ 591.446578][T13079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 591.454672][T13079] R13: 00007fff6f88cc8f R14: 00007f2459441300 R15: 0000000000022000 [ 591.462709][T13079] 19:19:55 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e090026000b12d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) 19:19:55 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@ipv6_delroute={0x2c, 0x19, 0x21, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6}, @RTA_PREF={0x5}]}, 0x2c}}, 0x0) 19:19:55 executing program 1: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x440, &(0x7f0000000380)={[{@gid={'gid', 0x3d, 0xee01}}, {@uid}, {@force}, {@type={'type', 0x3d, "54c306e3"}}, {@barrier}, {@nls={'nls', 0x3d, 'cp1251'}}, {@nobarrier}, {@gid}, {@nodecompose}, {@nobarrier}, {@force}, {@nobarrier}, {@uid}, {@umask={'umask', 0x3d, 0x789}}]}, 0x1, 0x5ee, &(0x7f0000000680)="$eJzs3U9oHNcdB/DvrGXZ64KySewkLYWKGEwbU1urbWoXCnVLKTqEYuglV2GvY+G1EqRNUUJpt/+vPeaQQ3pwDzn1mtJDaHouFHr33dC7TlWZ2VlpbcmKFP/ZVfz5wNv33rx5b978PPO0O4vZAM+spTdzfJAiS+ff2Cjrd+90enfvdG6PyklOJGkkM8MsxWpSfJZcyTDlq+XGerjiYcd5/d4nH5774OPOsDZTp2r/xn79dtlzz0GdMp/kWJ0/gvvGu/bI4xXb8y4DdnYUOJi0rV0Gh+l+8PsWmFrF8O/mLq3kVJKT9fuA1KtD4+nO7vE71CoHAAAAR9Rzm9nMRuYmPQ8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Surf/y/q1BiV51OMfv9/tt6WunykfTrpCQAAAAAAAADAY/CNzWxmI3Oj+lZRfef/alU5Xb1+Je9mPd2s5UI2spx++llLO0lrbKDZjeV+f639sJ5bW1u/qnsu7tlz8emcLwAAAAAAAAB8Sf0mSzvf/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwDQokmPDrEqnR+VWGjNJTiaZLfcbJH8flY+yTyc9AQAAAHgKntvMZjYyV/xvWN8qqs/8L1Wf+0/m3aymn5X000s316tnAcNP/Y1/Dzq9u3c6t8u0e9wf/vdQ06hGzPDZw95HXqj2OLPdYyk/yc9yPvO5mrWs5OdZTj/dzOfHVWk5RVr104vWaJ57z/fKfbWrnzfXV6qZNHMjK9XcLuRa3k4v19OozqHaZ/8j/rqMTvGD2gFjdL3OyzP6U51Ph1YVkePbEVmoY19G4/n9I3HI6+TBI7XT2H4GdfoJxPxUnZex/sNUx3xx7Op7af9IJN/6zz+u3uyt3rp5Y/389JzSF/RgJDpjkXj54JEYHP1IzNbRGK6ih1stX636zmUlP83buZ5uLmUh7VzOQr6XxXTuu8LOHOBeaxzuXjv7zbrQTPLHOp8OZVyfH4vr+ErXqtrGt+xE6YXHvyLNfK0ulMf4bZ1Phwcj0R6LxIv7R+LPW+Xrem/11trN5XcOeLxzdV7etr+fqrW5vF5eKP+xqtr9V0fZ9uKebe2q7fR2W2NX25ntts+7U2fr93C7Rxq2vbxnW6dqe2Wsba93OQBMvVOvnZpt3mv+q/lR83fNm803Tv7oxOUTX5/N8X/O/O3YXxt/aXy/eC0f5ZeZm/RMAQAAAAAAAAAAAAAAAAAAAAAAAAAAAADgy2D9vfdvLfd63bUpLKQxFdNQUHhGCs3sbJn0ygQ8aRf7t9+5uP7e+99eub38Vvet7uri5UuXL3W+2/7OxRsrve7C8HXSswSehJ2//pOeCQAAAAAAAAAAAHBQT+P/FUz6HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICjbenNHB+kSHvhwkJZv3un0yvTqLyz50ySRpLiF0nxWXIlw5TW2HDFw47z+r1PPjz3wcednbFmRvs39ut3MIM6ZT7JsTp/XONde+Txiu0zLAN2dhQ4mLT/BwAA///IRBDJ") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="72797a3135cf2c3f3ce902d76d82a4c90000000000000000000000deb8cc70727486b8a90000ff6316d2f6fe2000000000400000003901000100d49f02fb634ff8cecd19f692bdc62760e81784a813e39785551764917eb498"], 0x81) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x8dc, 0x0) (fail_nth: 12) 19:19:55 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @mcast1}}) 19:19:55 executing program 3: openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder-control\x00', 0x49255c978af03d4, 0x0) 19:19:55 executing program 0: timer_create(0x3, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x989680}}, &(0x7f00000000c0)) 19:19:55 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e0a0026000b12d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) [ 591.752172][T13094] FAULT_INJECTION: forcing a failure. [ 591.752172][T13094] name failslab, interval 1, probability 0, space 0, times 0 [ 591.881911][T13094] CPU: 1 PID: 13094 Comm: syz-executor.4 Not tainted 6.2.0-rc5-next-20230127-syzkaller-08766-ge2f86c02fdc9 #0 [ 591.893789][T13094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 591.903896][T13094] Call Trace: [ 591.907215][T13094] [ 591.910181][T13094] dump_stack_lvl+0x136/0x150 [ 591.914993][T13094] should_fail_ex+0x4a3/0x5b0 [ 591.919718][T13094] ? ptlock_alloc+0x21/0x70 [ 591.924398][T13094] should_failslab+0x9/0x20 [ 591.928949][T13094] kmem_cache_alloc+0x5a/0x320 [ 591.933781][T13094] ptlock_alloc+0x21/0x70 [ 591.938167][T13094] pte_alloc_one+0x6c/0x230 [ 591.942729][T13094] __pte_alloc+0x6d/0x260 [ 591.947109][T13094] ? pmd_install+0x160/0x160 [ 591.951750][T13094] ? print_usage_bug.part.0+0x660/0x660 [ 591.957349][T13094] __handle_mm_fault+0x3626/0x3e60 [ 591.962519][T13094] ? vm_iomap_memory+0x190/0x190 [ 591.967621][T13094] handle_mm_fault+0x1b6/0x850 [ 591.972447][T13094] do_user_addr_fault+0x475/0x1230 [ 591.977620][T13094] ? rcu_read_lock_sched_held+0x3e/0x70 [ 591.983234][T13094] exc_page_fault+0x98/0x170 [ 591.987873][T13094] asm_exc_page_fault+0x26/0x30 [ 591.992778][T13094] RIP: 0033:0x7f11b0e29197 [ 591.997228][T13094] Code: 78 48 63 d5 48 01 c2 49 3b 55 08 77 56 8d 55 ff 85 ed 74 35 0f 1f 80 00 00 00 00 48 39 c1 77 1c 49 8b 75 00 49 89 c1 49 29 c9 <46> 0f b6 0c 0e 45 84 c9 74 08 44 88 0c 06 49 8b 45 10 48 83 c0 01 [ 592.016880][T13094] RSP: 002b:00007f11b1bff600 EFLAGS: 00010246 [ 592.023003][T13094] RAX: 0000000000000001 RBX: 00007f11b1bff660 RCX: 0000000000000001 [ 592.031056][T13094] RDX: 0000000000000101 RSI: 00007f11a75ff000 RDI: 00007f11b1bff700 [ 592.039074][T13094] RBP: 0000000000000102 R08: 0000000000000000 R09: 0000000000000000 [ 592.047085][T13094] R10: 0000000000000000 R11: 00007f11b1bff670 R12: 00007f11b1bff670 [ 592.055093][T13094] R13: 00007f11b1bff700 R14: 0000000000000001 R15: 0000000000000000 [ 592.063128][T13094] [ 592.096367][T13104] loop1: detected capacity change from 0 to 1024 [ 592.163089][T13104] FAULT_INJECTION: forcing a failure. [ 592.163089][T13104] name failslab, interval 1, probability 0, space 0, times 0 [ 592.189265][T13104] CPU: 0 PID: 13104 Comm: syz-executor.1 Not tainted 6.2.0-rc5-next-20230127-syzkaller-08766-ge2f86c02fdc9 #0 [ 592.200967][T13104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 592.211073][T13104] Call Trace: [ 592.214392][T13104] [ 592.217352][T13104] dump_stack_lvl+0x136/0x150 [ 592.222074][T13104] should_fail_ex+0x4a3/0x5b0 [ 592.226798][T13104] should_failslab+0x9/0x20 [ 592.231352][T13104] __kmem_cache_alloc_node+0x5b/0x330 [ 592.236783][T13104] ? hfsplus_initxattrs+0x53/0x290 [ 592.241977][T13104] kmalloc_trace+0x26/0x60 [ 592.246444][T13104] hfsplus_initxattrs+0x53/0x290 [ 592.251440][T13104] ? hfsplus_mark_mdb_dirty+0x189/0x200 [ 592.257047][T13104] security_inode_init_security+0x1c8/0x370 [ 592.262995][T13104] ? hfsplus_user_getxattr+0x50/0x50 [ 592.268347][T13104] ? inode_free_by_rcu+0x20/0x20 [ 592.273355][T13104] ? hfsplus_mark_mdb_dirty+0x9d/0x200 [ 592.278883][T13104] ? hfsplus_new_inode+0x58a/0x9b0 [ 592.279392][T13094] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 592.284025][T13104] hfsplus_mknod+0x1ca/0x320 [ 592.284067][T13104] ? hfsplus_mkdir+0x40/0x40 [ 592.284106][T13104] lookup_open.isra.0+0x105a/0x1400 [ 592.284152][T13104] ? link_path_walk.part.0+0xd60/0xd60 [ 592.312108][T13104] ? path_openat+0x90f/0x2750 [ 592.316853][T13104] ? path_openat+0x90f/0x2750 [ 592.321590][T13104] ? lock_acquire+0x32/0xc0 [ 592.326145][T13104] ? path_openat+0x90f/0x2750 [ 592.330885][T13104] ? down_write_killable_nested+0x250/0x250 [ 592.336832][T13104] ? __mnt_want_write+0x1fe/0x2e0 [ 592.341914][T13104] path_openat+0x975/0x2750 [ 592.346488][T13104] ? path_lookupat+0x840/0x840 [ 592.351413][T13104] do_filp_open+0x1ba/0x410 [ 592.355962][T13104] ? may_open_dev+0xf0/0xf0 [ 592.360516][T13104] ? find_held_lock+0x2d/0x110 [ 592.365353][T13104] ? do_raw_spin_lock+0x124/0x2b0 [ 592.370434][T13104] ? spin_bug+0x1c0/0x1c0 [ 592.374823][T13104] ? _raw_spin_unlock+0x28/0x40 [ 592.379725][T13104] ? alloc_fd+0x2e4/0x750 [ 592.384131][T13104] do_sys_openat2+0x16d/0x4c0 [ 592.388949][T13104] ? build_open_flags+0x6f0/0x6f0 [ 592.394051][T13104] __x64_sys_openat+0x143/0x1f0 [ 592.398960][T13104] ? __ia32_sys_open+0x1c0/0x1c0 [ 592.403959][T13104] ? syscall_enter_from_user_mode+0x26/0xb0 [ 592.409910][T13104] do_syscall_64+0x39/0xb0 [ 592.414378][T13104] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 592.420310][T13104] RIP: 0033:0x7f245868c0c9 [ 592.424755][T13104] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 592.438622][T13094] loop4: detected capacity change from 0 to 8192 [ 592.444373][T13104] RSP: 002b:00007f2459441168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 592.444404][T13104] RAX: ffffffffffffffda RBX: 00007f24587abf80 RCX: 00007f245868c0c9 [ 592.444424][T13104] RDX: 00000000000008dc RSI: 0000000020000040 RDI: ffffffffffffff9c [ 592.444443][T13104] RBP: 00007f24594411d0 R08: 0000000000000000 R09: 0000000000000000 [ 592.483070][T13104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 592.491054][T13104] R13: 00007fff6f88cc8f R14: 00007f2459441300 R15: 0000000000022000 [ 592.499056][T13104] [ 592.531942][T13094] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 592.552627][T13094] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 592.562826][T13094] REISERFS (device loop4): using ordered data mode [ 592.569865][T13094] reiserfs: using flush barriers [ 592.628872][T13094] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 592.662681][T13094] REISERFS (device loop4): checking transaction log (loop4) [ 592.674644][T13094] REISERFS (device loop4): Using rupasov hash to sort names [ 592.691605][T13094] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. 19:19:56 executing program 4: syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000001140)='./file0\x00', 0x4408, &(0x7f0000000140)={[{@balloc_notest4}, {@balloc_test4}, {@jqfmt_vfsold}, {@balloc_test4}, {@grpjquota, 0x3d}]}, 0x1, 0x1102, &(0x7f00000022c0)="$eJzs2LFqFEEcBvBv9g5MdzLpF0ELCwkJZ2eVIsK11jYiqUyVqyI2vouPI6nsQx7AImAprEyyl6SIBMzJEfj94Gbmvp3Z/045EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjypjXbXVJXSZekJH1/ujhP0q/yp98nXUreHS6WB8fzt8txasu6lDZsy1L3nm/VeZ3Xvfp6e/9FXZ58/vTh6OjweHxNSZ+zi/VvpNWe/O3h1vrrAQAAwGMxPNhsw/UBAACA+6ztIgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgHw2zm3FN8nsYhnRJStL3p4vzJP0mPxAAAAB4sJIu72d35bm8BrjxKj9m5Tpv/a/Sxrv5dsd6AAAA4LbpvTPKrfP4y0yvz+Ute5Zpdnau/o9dfu4nk5OD7ObJmHy9bM8uvnxc/cow+R+bAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAP+zAAQkAAACAoP+v2xEoAAAAAAAAAAAAAAAAAADASgEAAP//C6/ZOQ==") (fail_nth: 13) 19:19:56 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) getdents(r0, &(0x7f0000000240)=""/253, 0xfd) 19:19:56 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e0b0026000b12d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) 19:19:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 19:19:56 executing program 3: r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_mreqn(r0, 0x0, 0x41, 0x0, &(0x7f0000000200)=0x28) 19:19:56 executing program 1: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x440, &(0x7f0000000380)={[{@gid={'gid', 0x3d, 0xee01}}, {@uid}, {@force}, {@type={'type', 0x3d, "54c306e3"}}, {@barrier}, {@nls={'nls', 0x3d, 'cp1251'}}, {@nobarrier}, {@gid}, {@nodecompose}, {@nobarrier}, {@force}, {@nobarrier}, {@uid}, {@umask={'umask', 0x3d, 0x789}}]}, 0x1, 0x5ee, &(0x7f0000000680)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="72797a3135cf2c3f3ce902d76d82a4c90000000000000000000000deb8cc70727486b8a90000ff6316d2f6fe2000000000400000003901000100d49f02fb634ff8cecd19f692bdc62760e81784a813e39785551764917eb498"], 0x81) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x8dc, 0x0) (fail_nth: 13) 19:19:56 executing program 0: r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) setns(r0, 0x2000000) 19:19:56 executing program 5: ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) clock_gettime(0x2, 0x0) clock_getres(0x0, 0x0) nanosleep(0x0, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000ac0)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0f1456c7c157c370ab1730fff1e32aaea96f8e08d421954fa08fc984e64558488dcb898f9e9f9863362085e6974e1c2dded4dc8b93d195df482afca32217bccc", "417f60452dc8060bce5880f8bcf652d32fd72f0ad5e30c87d7e70853f7a92469cb96d6900026bd6e8e416e05d2b268a7b1eaa9c5dda00d0c9e3f6ca83135461c", "fe22e45bfb7168f2ecf3da180a514f8459ca5330e1282f8e419db3592c49d7e5"}}) timer_create(0x0, 0x0, &(0x7f0000000c40)) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x34, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0xd01c42239fe0950b}, 0x4015) nanosleep(&(0x7f0000001140)={0x0, 0x3938700}, &(0x7f0000001180)) 19:19:56 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e100026000b12d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) 19:19:56 executing program 3: pselect6(0x40, &(0x7f0000000080), &(0x7f00000000c0)={0x4}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={[0xffffffffffffffff]}, 0x8}) [ 592.866698][T13114] loop1: detected capacity change from 0 to 1024 19:19:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv4_delrule={0x1c, 0x5e, 0x1, 0x0, 0x0, {0x8}}, 0x1c}}, 0x0) 19:19:56 executing program 5: r0 = socket(0x11, 0x3, 0xfff) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x40}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x3c}}, 0x4000000) getresuid(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000006c0)={0x1, 0x58, &(0x7f0000000640)}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'batadv_slave_1\x00'}) getresuid(&(0x7f00000010c0), &(0x7f0000001100), &(0x7f0000001140)) [ 592.978545][T13114] FAULT_INJECTION: forcing a failure. [ 592.978545][T13114] name failslab, interval 1, probability 0, space 0, times 0 [ 593.059470][T13114] CPU: 0 PID: 13114 Comm: syz-executor.1 Not tainted 6.2.0-rc5-next-20230127-syzkaller-08766-ge2f86c02fdc9 #0 [ 593.071172][T13114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 593.081268][T13114] Call Trace: [ 593.084582][T13114] [ 593.087545][T13114] dump_stack_lvl+0x136/0x150 [ 593.092281][T13114] should_fail_ex+0x4a3/0x5b0 [ 593.097018][T13114] should_failslab+0x9/0x20 [ 593.101565][T13114] __kmem_cache_alloc_node+0x5b/0x330 [ 593.106993][T13114] ? tomoyo_realpath_from_path+0xc3/0x600 [ 593.112780][T13114] ? tomoyo_realpath_from_path+0xc3/0x600 [ 593.118568][T13114] __kmalloc+0x4a/0xd0 [ 593.122550][T13129] FAULT_INJECTION: forcing a failure. [ 593.122550][T13129] name failslab, interval 1, probability 0, space 0, times 0 [ 593.135254][T13114] tomoyo_realpath_from_path+0xc3/0x600 [ 593.140867][T13114] tomoyo_check_open_permission+0x29a/0x3a0 [ 593.146831][T13114] ? tomoyo_path_number_perm+0x570/0x570 [ 593.152532][T13114] ? __mark_inode_dirty+0x32c/0x1250 [ 593.157875][T13114] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 593.163923][T13114] ? path_get+0x61/0x80 [ 593.168120][T13114] ? lock_downgrade+0x690/0x690 [ 593.173026][T13114] ? spin_bug+0x1c0/0x1c0 [ 593.177408][T13114] tomoyo_file_open+0xa1/0xc0 [ 593.182142][T13114] security_file_open+0x49/0xb0 [ 593.187035][T13114] do_dentry_open+0x575/0x13f0 [ 593.191851][T13114] ? may_open+0x1f6/0x420 [ 593.196217][T13114] path_openat+0x1baa/0x2750 [ 593.200856][T13114] ? path_lookupat+0x840/0x840 [ 593.205661][T13114] do_filp_open+0x1ba/0x410 [ 593.210192][T13114] ? may_open_dev+0xf0/0xf0 [ 593.214719][T13114] ? find_held_lock+0x2d/0x110 [ 593.219638][T13114] ? do_raw_spin_lock+0x124/0x2b0 [ 593.224698][T13114] ? spin_bug+0x1c0/0x1c0 [ 593.229066][T13114] ? _raw_spin_unlock+0x28/0x40 [ 593.233946][T13114] ? alloc_fd+0x2e4/0x750 [ 593.238317][T13114] do_sys_openat2+0x16d/0x4c0 [ 593.243027][T13114] ? build_open_flags+0x6f0/0x6f0 [ 593.248186][T13114] __x64_sys_openat+0x143/0x1f0 [ 593.253075][T13114] ? __ia32_sys_open+0x1c0/0x1c0 [ 593.258053][T13114] ? syscall_enter_from_user_mode+0x26/0xb0 [ 593.263975][T13114] do_syscall_64+0x39/0xb0 [ 593.268437][T13114] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 593.274347][T13114] RIP: 0033:0x7f245868c0c9 [ 593.278774][T13114] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 593.298420][T13114] RSP: 002b:00007f2459441168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 593.306861][T13114] RAX: ffffffffffffffda RBX: 00007f24587abf80 RCX: 00007f245868c0c9 [ 593.314863][T13114] RDX: 00000000000008dc RSI: 0000000020000040 RDI: ffffffffffffff9c [ 593.322896][T13114] RBP: 00007f24594411d0 R08: 0000000000000000 R09: 0000000000000000 [ 593.330897][T13114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 593.338924][T13114] R13: 00007fff6f88cc8f R14: 00007f2459441300 R15: 0000000000022000 [ 593.346942][T13114] [ 593.376613][T13129] CPU: 0 PID: 13129 Comm: syz-executor.4 Not tainted 6.2.0-rc5-next-20230127-syzkaller-08766-ge2f86c02fdc9 #0 [ 593.388315][T13129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 593.398414][T13129] Call Trace: [ 593.401717][T13129] [ 593.404662][T13129] dump_stack_lvl+0x136/0x150 [ 593.407285][T13114] ERROR: Out of memory at tomoyo_realpath_from_path. [ 593.409345][T13129] should_fail_ex+0x4a3/0x5b0 [ 593.409386][T13129] ? ptlock_alloc+0x21/0x70 [ 593.409420][T13129] should_failslab+0x9/0x20 [ 593.429826][T13129] kmem_cache_alloc+0x5a/0x320 [ 593.434668][T13129] ptlock_alloc+0x21/0x70 [ 593.439043][T13129] pte_alloc_one+0x6c/0x230 [ 593.443564][T13129] __pte_alloc+0x6d/0x260 [ 593.447920][T13129] ? pmd_install+0x160/0x160 [ 593.452559][T13129] ? print_usage_bug.part.0+0x660/0x660 [ 593.458163][T13129] __handle_mm_fault+0x3626/0x3e60 [ 593.463340][T13129] ? vm_iomap_memory+0x190/0x190 [ 593.468359][T13129] handle_mm_fault+0x1b6/0x850 [ 593.473184][T13129] do_user_addr_fault+0x475/0x1230 [ 593.478367][T13129] ? rcu_read_lock_sched_held+0x3e/0x70 [ 593.490561][T13129] exc_page_fault+0x98/0x170 [ 593.495190][T13129] asm_exc_page_fault+0x26/0x30 [ 593.500092][T13129] RIP: 0033:0x7f11b0e29197 [ 593.504525][T13129] Code: 78 48 63 d5 48 01 c2 49 3b 55 08 77 56 8d 55 ff 85 ed 74 35 0f 1f 80 00 00 00 00 48 39 c1 77 1c 49 8b 75 00 49 89 c1 49 29 c9 <46> 0f b6 0c 0e 45 84 c9 74 08 44 88 0c 06 49 8b 45 10 48 83 c0 01 [ 593.524241][T13129] RSP: 002b:00007f11b1bff600 EFLAGS: 00010246 [ 593.530507][T13129] RAX: 0000000000000001 RBX: 00007f11b1bff660 RCX: 0000000000000001 [ 593.538494][T13129] RDX: 0000000000000101 RSI: 00007f11a75ff000 RDI: 00007f11b1bff700 [ 593.546478][T13129] RBP: 0000000000000102 R08: 0000000000000000 R09: 0000000000000000 [ 593.554460][T13129] R10: 0000000000000000 R11: 00007f11b1bff670 R12: 00007f11b1bff670 [ 593.562449][T13129] R13: 00007f11b1bff700 R14: 0000000000000001 R15: 0000000000000000 [ 593.570454][T13129] [ 593.577558][T13129] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 593.691296][T13129] loop4: detected capacity change from 0 to 8192 [ 593.705556][T13129] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 593.719190][T13129] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 593.730034][T13129] REISERFS (device loop4): using ordered data mode [ 593.736918][T13129] reiserfs: using flush barriers [ 593.746308][T13129] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 593.764671][T13129] REISERFS (device loop4): checking transaction log (loop4) [ 593.773490][T13129] REISERFS (device loop4): Using rupasov hash to sort names [ 593.782077][T13129] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. 19:19:57 executing program 4: syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000001140)='./file0\x00', 0x4408, &(0x7f0000000140)={[{@balloc_notest4}, {@balloc_test4}, {@jqfmt_vfsold}, {@balloc_test4}, {@grpjquota, 0x3d}]}, 0x1, 0x1102, &(0x7f00000022c0)="$eJzs2LFqFEEcBvBv9g5MdzLpF0ELCwkJZ2eVIsK11jYiqUyVqyI2vouPI6nsQx7AImAprEyyl6SIBMzJEfj94Gbmvp3Z/045EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjypjXbXVJXSZekJH1/ujhP0q/yp98nXUreHS6WB8fzt8txasu6lDZsy1L3nm/VeZ3Xvfp6e/9FXZ58/vTh6OjweHxNSZ+zi/VvpNWe/O3h1vrrAQAAwGMxPNhsw/UBAACA+6ztIgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgHw2zm3FN8nsYhnRJStL3p4vzJP0mPxAAAAB4sJIu72d35bm8BrjxKj9m5Tpv/a/Sxrv5dsd6AAAA4LbpvTPKrfP4y0yvz+Ute5Zpdnau/o9dfu4nk5OD7ObJmHy9bM8uvnxc/cow+R+bAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAP+zAAQkAAACAoP+v2xEoAAAAAAAAAAAAAAAAAADASgEAAP//C6/ZOQ==") (fail_nth: 14) 19:19:57 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e110026000b12d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) 19:19:57 executing program 3: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r0, &(0x7f0000000280)="a7bffe9fa418dfe6288ec3d6bc2b96d3aa4acf8030f7f2842aed49ff1c7cd6efad99eabcf5d08cab75c82b79c08db9fc3671b251c055f17ec910ab8e4bf5af21346e0c439433e4f5dc0a0f370ca82b7a00d5f369c2fe03c33d5e44095c25074d6b2a94bae793e8ef3db8aaafae6f25cb50afcbe72f47b62d227263250b0887b481885ea3976c551067652ff542a3584315ba256f01ae382bf90e392197455bce63556f1fa6e2a06a985cf0c3fca48cd8b9a4fe3d16eb0dadaf12be6530ecf350e8b0ae1c8506015ce3a5aace94562527eda79f188d377186e69abcbcdfd1e590ccdf77ebaa5aa9", 0xffffffffffffff48) 19:19:57 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x7, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1920) 19:19:57 executing program 1: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x440, &(0x7f0000000380)={[{@gid={'gid', 0x3d, 0xee01}}, {@uid}, {@force}, {@type={'type', 0x3d, "54c306e3"}}, {@barrier}, {@nls={'nls', 0x3d, 'cp1251'}}, {@nobarrier}, {@gid}, {@nodecompose}, {@nobarrier}, {@force}, {@nobarrier}, {@uid}, {@umask={'umask', 0x3d, 0x789}}]}, 0x1, 0x5ee, &(0x7f0000000680)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="72797a3135cf2c3f3ce902d76d82a4c90000000000000000000000deb8cc70727486b8a90000ff6316d2f6fe2000000000400000003901000100d49f02fb634ff8cecd19f692bdc62760e81784a813e39785551764917eb498"], 0x81) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x8dc, 0x0) (fail_nth: 14) 19:19:57 executing program 5: syz_emit_ethernet(0x36, &(0x7f0000000040), 0x0) 19:19:57 executing program 3: socket(0x11, 0xa, 0x0) socketpair(0x11, 0x3, 0x9, &(0x7f0000000040)) 19:19:57 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) sendmsg$unix(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000c40)="e8", 0x1}], 0x34c}, 0x0) 19:19:57 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000800)=[{0x0}, {&(0x7f00000004c0)="e60b8e787b31b5d78c27dfcb558cc2ff696bf07fccd100c8582d085fdf8ea7f833df5abfa7c7dcfeebbda39a654c70528d7944357f3e6ae8b62e929aa246cd7704f56f076fd4c30ef0db928c2d117790a0a465ce0803ddd31b9014caeb2a92e887964fbbe4f3406b", 0x68}, {&(0x7f0000001d00)="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", 0xf99}], 0x3}, 0x0) [ 593.888262][T13136] loop1: detected capacity change from 0 to 1024 19:19:57 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e130026000b12d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) 19:19:57 executing program 3: syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffffffe, 0x8aab41) [ 593.992754][T13136] FAULT_INJECTION: forcing a failure. [ 593.992754][T13136] name failslab, interval 1, probability 0, space 0, times 0 [ 594.032657][T13136] CPU: 1 PID: 13136 Comm: syz-executor.1 Not tainted 6.2.0-rc5-next-20230127-syzkaller-08766-ge2f86c02fdc9 #0 [ 594.044358][T13136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 594.054448][T13136] Call Trace: [ 594.057740][T13136] [ 594.060687][T13136] dump_stack_lvl+0x136/0x150 [ 594.065387][T13136] should_fail_ex+0x4a3/0x5b0 [ 594.070103][T13136] should_failslab+0x9/0x20 [ 594.074636][T13136] __kmem_cache_alloc_node+0x5b/0x330 [ 594.080039][T13136] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 594.085456][T13136] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 594.090877][T13136] __kmalloc+0x4a/0xd0 [ 594.094982][T13136] tomoyo_encode2.part.0+0xe9/0x3a0 [ 594.100229][T13136] ? rcu_read_lock_sched_held+0x3e/0x70 [ 594.105802][T13136] tomoyo_encode+0x2c/0x50 [ 594.110331][T13136] tomoyo_realpath_from_path+0x185/0x600 [ 594.116097][T13136] tomoyo_check_open_permission+0x29a/0x3a0 [ 594.122024][T13136] ? tomoyo_path_number_perm+0x570/0x570 [ 594.127691][T13136] ? __mark_inode_dirty+0x32c/0x1250 [ 594.133004][T13136] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 594.139025][T13136] ? path_get+0x61/0x80 [ 594.143203][T13136] ? lock_downgrade+0x690/0x690 [ 594.148082][T13136] ? spin_bug+0x1c0/0x1c0 [ 594.152437][T13136] tomoyo_file_open+0xa1/0xc0 [ 594.157149][T13136] security_file_open+0x49/0xb0 [ 594.162047][T13136] do_dentry_open+0x575/0x13f0 [ 594.166839][T13136] ? may_open+0x1f6/0x420 [ 594.171190][T13136] path_openat+0x1baa/0x2750 [ 594.175813][T13136] ? path_lookupat+0x840/0x840 [ 594.180620][T13136] do_filp_open+0x1ba/0x410 [ 594.185157][T13136] ? may_open_dev+0xf0/0xf0 [ 594.189695][T13136] ? find_held_lock+0x2d/0x110 [ 594.194485][T13136] ? do_raw_spin_lock+0x124/0x2b0 [ 594.199545][T13136] ? spin_bug+0x1c0/0x1c0 [ 594.203913][T13136] ? _raw_spin_unlock+0x28/0x40 [ 594.208782][T13136] ? alloc_fd+0x2e4/0x750 [ 594.213153][T13136] do_sys_openat2+0x16d/0x4c0 [ 594.217856][T13136] ? build_open_flags+0x6f0/0x6f0 [ 594.222918][T13136] __x64_sys_openat+0x143/0x1f0 [ 594.227795][T13136] ? __ia32_sys_open+0x1c0/0x1c0 [ 594.232763][T13136] ? syscall_enter_from_user_mode+0x26/0xb0 [ 594.238681][T13136] do_syscall_64+0x39/0xb0 [ 594.243126][T13136] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 594.249045][T13136] RIP: 0033:0x7f245868c0c9 [ 594.253470][T13136] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 594.273111][T13136] RSP: 002b:00007f2459441168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 594.281564][T13136] RAX: ffffffffffffffda RBX: 00007f24587abf80 RCX: 00007f245868c0c9 19:19:58 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x8, 0x8a2b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0xfffffdef) [ 594.289564][T13136] RDX: 00000000000008dc RSI: 0000000020000040 RDI: ffffffffffffff9c [ 594.297563][T13136] RBP: 00007f24594411d0 R08: 0000000000000000 R09: 0000000000000000 [ 594.305551][T13136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 594.313532][T13136] R13: 00007fff6f88cc8f R14: 00007f2459441300 R15: 0000000000022000 [ 594.321532][T13136] [ 594.414967][T13153] FAULT_INJECTION: forcing a failure. [ 594.414967][T13153] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 594.451161][T13153] CPU: 1 PID: 13153 Comm: syz-executor.4 Not tainted 6.2.0-rc5-next-20230127-syzkaller-08766-ge2f86c02fdc9 #0 [ 594.462888][T13153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 594.472977][T13153] Call Trace: [ 594.476290][T13153] [ 594.479252][T13153] dump_stack_lvl+0x136/0x150 [ 594.484013][T13153] should_fail_ex+0x4a3/0x5b0 [ 594.488744][T13153] prepare_alloc_pages+0x178/0x570 [ 594.493915][T13153] ? __lock_acquire+0xbe1/0x5df0 [ 594.498912][T13153] __alloc_pages+0x149/0x5c0 [ 594.503551][T13153] ? __alloc_pages_slowpath.constprop.0+0x23f0/0x23f0 [ 594.510370][T13153] ? find_held_lock+0x2d/0x110 [ 594.515213][T13153] ? __lock_acquire+0xbe1/0x5df0 [ 594.520211][T13153] alloc_pages+0x1aa/0x270 [ 594.524695][T13153] pte_alloc_one+0x1a/0x230 [ 594.529237][T13153] __pte_alloc+0x6d/0x260 [ 594.533587][T13153] ? pmd_install+0x160/0x160 [ 594.538197][T13153] ? print_usage_bug.part.0+0x660/0x660 [ 594.543772][T13153] __handle_mm_fault+0x3626/0x3e60 [ 594.548908][T13153] ? vm_iomap_memory+0x190/0x190 [ 594.553898][T13153] handle_mm_fault+0x1b6/0x850 [ 594.558695][T13153] do_user_addr_fault+0x475/0x1230 [ 594.563840][T13153] ? rcu_read_lock_sched_held+0x3e/0x70 [ 594.569422][T13153] exc_page_fault+0x98/0x170 [ 594.574036][T13153] asm_exc_page_fault+0x26/0x30 [ 594.578907][T13153] RIP: 0033:0x7f11b0e29197 [ 594.583333][T13153] Code: 78 48 63 d5 48 01 c2 49 3b 55 08 77 56 8d 55 ff 85 ed 74 35 0f 1f 80 00 00 00 00 48 39 c1 77 1c 49 8b 75 00 49 89 c1 49 29 c9 <46> 0f b6 0c 0e 45 84 c9 74 08 44 88 0c 06 49 8b 45 10 48 83 c0 01 [ 594.603051][T13153] RSP: 002b:00007f11b1bff600 EFLAGS: 00010206 [ 594.609136][T13153] RAX: 0000000000001001 RBX: 00007f11b1bff660 RCX: 0000000000000001 [ 594.617118][T13153] RDX: 000000000000001f RSI: 00007f11a75ff000 RDI: 00007f11b1bff700 [ 594.625108][T13153] RBP: 0000000000000102 R08: 0000000000000000 R09: 0000000000001000 [ 594.633117][T13153] R10: 0000000000000000 R11: 00007f11b1bff670 R12: 00007f11b1bff670 [ 594.641103][T13153] R13: 00007f11b1bff700 R14: 0000000000000001 R15: 0000000000000000 [ 594.649107][T13153] [ 594.665234][T13153] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 594.712244][T13136] ERROR: Out of memory at tomoyo_realpath_from_path. [ 594.792013][T13153] loop4: detected capacity change from 0 to 8192 [ 594.801631][T13153] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 594.816454][T13153] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 594.833982][T13153] REISERFS (device loop4): using ordered data mode [ 594.841367][T13153] reiserfs: using flush barriers 19:19:58 executing program 4: syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000001140)='./file0\x00', 0x4408, &(0x7f0000000140)={[{@balloc_notest4}, {@balloc_test4}, {@jqfmt_vfsold}, {@balloc_test4}, {@grpjquota, 0x3d}]}, 0x1, 0x1102, &(0x7f00000022c0)="$eJzs2LFqFEEcBvBv9g5MdzLpF0ELCwkJZ2eVIsK11jYiqUyVqyI2vouPI6nsQx7AImAprEyyl6SIBMzJEfj94Gbmvp3Z/045EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjypjXbXVJXSZekJH1/ujhP0q/yp98nXUreHS6WB8fzt8txasu6lDZsy1L3nm/VeZ3Xvfp6e/9FXZ58/vTh6OjweHxNSZ+zi/VvpNWe/O3h1vrrAQAAwGMxPNhsw/UBAACA+6ztIgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgHw2zm3FN8nsYhnRJStL3p4vzJP0mPxAAAAB4sJIu72d35bm8BrjxKj9m5Tpv/a/Sxrv5dsd6AAAA4LbpvTPKrfP4y0yvz+Ute5Zpdnau/o9dfu4nk5OD7ObJmHy9bM8uvnxc/cow+R+bAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAP+zAAQkAAACAoP+v2xEoAAAAAAAAAAAAAAAAAADASgEAAP//C6/ZOQ==") (fail_nth: 15) 19:19:58 executing program 0: syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0xc038480a, &(0x7f0000000080)={0x2, 0x3, 0x1, 0x0, 0x8000, 0x7f, 0x0, 0x3, 0x9, 0x0, 0x240000, 0x0, 0xfed, 0x9}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x40, 0x2, 0x7, 0x1, 0x2, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x9, 0x18}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x4, 0x1}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000680)={0xa, 0x6, 0x201, 0x1, 0xdd, 0xff, 0x20, 0x5}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x2, [{0xef, &(0x7f0000000100)=@string={0xef, 0x3, "07bd15def57f46e6371adc134569f8ef4ea77036e8929083bdb4589e053958956cd094168a111ca2d04f1dcb44dce1a06f54c40b076eb86fdae72fffee2a2fe4afc891af377fbdf1e251231a03cb25e6020bfd41ef0c8b7149dae9761c7302fc18aa7850c263eb9c2e52c12011a2d7ea8a1eee4798874dc61a58b838163c3d944915723e91e4e231029f05ca5cc85a1dab87cee67b16396592c43546b698528b334b14fa408abe138f78267c93d4c28c9fb12aa29c6c89f711178c9c3b576e53b6fb66c6a7946cf776b78fef7ed0e86b1ac56ac12c53f6070ad9a954eb943c002ea073cc54bee9e54635a2091b"}}, {0x6c, &(0x7f0000000200)=@string={0x6c, 0x3, "93afc9ffb8c61177e1ba78f7ceb8295eb4902ea8154cedd3a7f04af493c0891b0d8bb34bf811f03c25b780ceb8298ffd520d12e1dfd2883202aafab6eefeb34892cf95bd39b6252c22491cca301e23155e959ea7d1b4ed535af59c35cd18f0f050a8fa98da172e476b51"}}]}) syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7c, 0x10, 0x40, [{{0x9, 0x4, 0x0, 0x7f, 0x1, 0x7, 0x1, 0x2, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x1d, 0x9, 0x3f}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x0, 0x5}}]}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x201, 0x2, 0x7, 0x8a, 0x0, 0x5}, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="050f4a000503100b0b1001080500067f00000020100a0825002000001f0c000f00ff000fffff000f000000001d45cddd851bb38173281100ff00000000001410042d87a5cf8d6ea29002"], 0x2, [{0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x240a}}, {0x69, &(0x7f00000005c0)=@string={0x69, 0x3, "89c0048cc33c7a5f9ccc858c1cf453cac75c4317e76fcd68be03c76f0f98ec4f0ed7619b24e16044f283ae18fb07176d907c89555165c2b4e6740191afd01c4afc47762a33495a2886d03989222e0f4af5e47ec4fc30dfa22ff65eff94379959faf9c45836acab"}}]}) syz_usb_connect$printer(0x4, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0xe0, 0x90, [{{0x9, 0x4, 0x0, 0xf3, 0x2, 0x7, 0x1, 0x3, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x240, 0x5, 0x1, 0x1}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x2, 0x0, 0xff}}]}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x110, 0xe5, 0x1c, 0x9, 0x10, 0xf9}, 0x19, &(0x7f0000000340)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "848f82d05ad1f133706a092a731b0b4c"}]}, 0x3, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x820}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1001}}, {0x32, &(0x7f0000000400)=@string={0x32, 0x3, "7c070fe7948583d5d605ce4627417f11310a5bb1badba8797ef1d3eae326d8f2d68960e26f66da92f5df3b50c0c19380"}}]}) [ 594.866193][T13153] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 594.883007][T13153] REISERFS (device loop4): checking transaction log (loop4) [ 594.893977][T13153] REISERFS (device loop4): Using rupasov hash to sort names [ 594.902154][T13153] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. 19:19:58 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e350026000b12d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) 19:19:58 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x400000000000, 0x822b01) write$char_usb(r0, &(0x7f0000000000)="e2", 0x1) 19:19:58 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x400, 0x8a2f01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1920) 19:19:58 executing program 1: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x440, &(0x7f0000000380)={[{@gid={'gid', 0x3d, 0xee01}}, {@uid}, {@force}, {@type={'type', 0x3d, "54c306e3"}}, {@barrier}, {@nls={'nls', 0x3d, 'cp1251'}}, {@nobarrier}, {@gid}, {@nodecompose}, {@nobarrier}, {@force}, {@nobarrier}, {@uid}, {@umask={'umask', 0x3d, 0x789}}]}, 0x1, 0x5ee, &(0x7f0000000680)="$eJzs3U9oHNcdB/DvrGXZ64KySewkLYWKGEwbU1urbWoXCnVLKTqEYuglV2GvY+G1EqRNUUJpt/+vPeaQQ3pwDzn1mtJDaHouFHr33dC7TlWZ2VlpbcmKFP/ZVfz5wNv33rx5b978PPO0O4vZAM+spTdzfJAiS+ff2Cjrd+90enfvdG6PyklOJGkkM8MsxWpSfJZcyTDlq+XGerjiYcd5/d4nH5774OPOsDZTp2r/xn79dtlzz0GdMp/kWJ0/gvvGu/bI4xXb8y4DdnYUOJi0rV0Gh+l+8PsWmFrF8O/mLq3kVJKT9fuA1KtD4+nO7vE71CoHAAAAR9Rzm9nMRuYmPQ8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Surf/y/q1BiV51OMfv9/tt6WunykfTrpCQAAAAAAAADAY/CNzWxmI3Oj+lZRfef/alU5Xb1+Je9mPd2s5UI2spx++llLO0lrbKDZjeV+f639sJ5bW1u/qnsu7tlz8emcLwAAAAAAAAB8Sf0mSzvf/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwDQokmPDrEqnR+VWGjNJTiaZLfcbJH8flY+yTyc9AQAAAHgKntvMZjYyV/xvWN8qqs/8L1Wf+0/m3aymn5X000s316tnAcNP/Y1/Dzq9u3c6t8u0e9wf/vdQ06hGzPDZw95HXqj2OLPdYyk/yc9yPvO5mrWs5OdZTj/dzOfHVWk5RVr104vWaJ57z/fKfbWrnzfXV6qZNHMjK9XcLuRa3k4v19OozqHaZ/8j/rqMTvGD2gFjdL3OyzP6U51Ph1YVkePbEVmoY19G4/n9I3HI6+TBI7XT2H4GdfoJxPxUnZex/sNUx3xx7Op7af9IJN/6zz+u3uyt3rp5Y/389JzSF/RgJDpjkXj54JEYHP1IzNbRGK6ih1stX636zmUlP83buZ5uLmUh7VzOQr6XxXTuu8LOHOBeaxzuXjv7zbrQTPLHOp8OZVyfH4vr+ErXqtrGt+xE6YXHvyLNfK0ulMf4bZ1Phwcj0R6LxIv7R+LPW+Xrem/11trN5XcOeLxzdV7etr+fqrW5vF5eKP+xqtr9V0fZ9uKebe2q7fR2W2NX25ntts+7U2fr93C7Rxq2vbxnW6dqe2Wsba93OQBMvVOvnZpt3mv+q/lR83fNm803Tv7oxOUTX5/N8X/O/O3YXxt/aXy/eC0f5ZeZm/RMAQAAAAAAAAAAAAAAAAAAAAAAAAAAAADgy2D9vfdvLfd63bUpLKQxFdNQUHhGCs3sbJn0ygQ8aRf7t9+5uP7e+99eub38Vvet7uri5UuXL3W+2/7OxRsrve7C8HXSswSehJ2//pOeCQAAAAAAAAAAAHBQT+P/FUz6HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICjbenNHB+kSHvhwkJZv3un0yvTqLyz50ySRpLiF0nxWXIlw5TW2HDFw47z+r1PPjz3wcednbFmRvs39ut3MIM6ZT7JsTp/XONde+Txiu0zLAN2dhQ4mLT/BwAA///IRBDJ") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="72797a3135cf2c3f3ce902d76d82a4c90000000000000000000000deb8cc70727486b8a90000ff6316d2f6fe2000000000400000003901000100d49f02fb634ff8cecd19f692bdc62760e81784a813e39785551764917eb498"], 0x81) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x8dc, 0x0) 19:19:58 executing program 3: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r0, &(0x7f0000000000)="e2", 0x1) 19:19:58 executing program 5: shmctl$SHM_STAT(0x0, 0xd, &(0x7f00000003c0)=""/74) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) 19:19:58 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e03000f000b12d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) [ 594.988159][T13158] loop1: detected capacity change from 0 to 1024 19:19:59 executing program 1: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x440, &(0x7f0000000380)={[{@gid={'gid', 0x3d, 0xee01}}, {@uid}, {@force}, {@type={'type', 0x3d, "54c306e3"}}, {@barrier}, {@nls={'nls', 0x3d, 'cp1251'}}, {@nobarrier}, {@gid}, {@nodecompose}, {@nobarrier}, {@force}, {@nobarrier}, {@uid}, {@umask={'umask', 0x3d, 0x789}}]}, 0x1, 0x5ee, &(0x7f0000000680)="$eJzs3U9oHNcdB/DvrGXZ64KySewkLYWKGEwbU1urbWoXCnVLKTqEYuglV2GvY+G1EqRNUUJpt/+vPeaQQ3pwDzn1mtJDaHouFHr33dC7TlWZ2VlpbcmKFP/ZVfz5wNv33rx5b978PPO0O4vZAM+spTdzfJAiS+ff2Cjrd+90enfvdG6PyklOJGkkM8MsxWpSfJZcyTDlq+XGerjiYcd5/d4nH5774OPOsDZTp2r/xn79dtlzz0GdMp/kWJ0/gvvGu/bI4xXb8y4DdnYUOJi0rV0Gh+l+8PsWmFrF8O/mLq3kVJKT9fuA1KtD4+nO7vE71CoHAAAAR9Rzm9nMRuYmPQ8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Surf/y/q1BiV51OMfv9/tt6WunykfTrpCQAAAAAAAADAY/CNzWxmI3Oj+lZRfef/alU5Xb1+Je9mPd2s5UI2spx++llLO0lrbKDZjeV+f639sJ5bW1u/qnsu7tlz8emcLwAAAAAAAAB8Sf0mSzvf/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwDQokmPDrEqnR+VWGjNJTiaZLfcbJH8flY+yTyc9AQAAAHgKntvMZjYyV/xvWN8qqs/8L1Wf+0/m3aymn5X000s316tnAcNP/Y1/Dzq9u3c6t8u0e9wf/vdQ06hGzPDZw95HXqj2OLPdYyk/yc9yPvO5mrWs5OdZTj/dzOfHVWk5RVr104vWaJ57z/fKfbWrnzfXV6qZNHMjK9XcLuRa3k4v19OozqHaZ/8j/rqMTvGD2gFjdL3OyzP6U51Ph1YVkePbEVmoY19G4/n9I3HI6+TBI7XT2H4GdfoJxPxUnZex/sNUx3xx7Op7af9IJN/6zz+u3uyt3rp5Y/389JzSF/RgJDpjkXj54JEYHP1IzNbRGK6ih1stX636zmUlP83buZ5uLmUh7VzOQr6XxXTuu8LOHOBeaxzuXjv7zbrQTPLHOp8OZVyfH4vr+ErXqtrGt+xE6YXHvyLNfK0ulMf4bZ1Phwcj0R6LxIv7R+LPW+Xrem/11trN5XcOeLxzdV7etr+fqrW5vF5eKP+xqtr9V0fZ9uKebe2q7fR2W2NX25ntts+7U2fr93C7Rxq2vbxnW6dqe2Wsba93OQBMvVOvnZpt3mv+q/lR83fNm803Tv7oxOUTX5/N8X/O/O3YXxt/aXy/eC0f5ZeZm/RMAQAAAAAAAAAAAAAAAAAAAAAAAAAAAADgy2D9vfdvLfd63bUpLKQxFdNQUHhGCs3sbJn0ygQ8aRf7t9+5uP7e+99eub38Vvet7uri5UuXL3W+2/7OxRsrve7C8HXSswSehJ2//pOeCQAAAAAAAAAAAHBQT+P/FUz6HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICjbenNHB+kSHvhwkJZv3un0yvTqLyz50ySRpLiF0nxWXIlw5TW2HDFw47z+r1PPjz3wcednbFmRvs39ut3MIM6ZT7JsTp/XONde+Txiu0zLAN2dhQ4mLT/BwAA///IRBDJ") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="72797a3135cf2c3f3ce902d76d82a4c90000000000000000000000deb8cc70727486b8a90000ff6316d2f6fe2000000000400000003901000100d49f02fb634ff8cecd19f692bdc62760e81784a813e39785551764917eb498"], 0x81) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) openat$vimc1(0xffffffff0000005d, &(0x7f0000000040), 0x8dc, 0x0) 19:19:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newtaction={0xec4, 0x30, 0x0, 0x0, 0x0, {}, [{0xeb0, 0x1, [@m_xt={0x124, 0x0, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8}, @TCA_IPT_HOOK={0x8}]}, {0xe1, 0x6, "56a1316d22d2f109df1459d18bc1ade07f1cdef8c2c16cf342f9d2ec95a3c9b0bc2f44eff610a0af6f9d2e7909f383b0f5d6499da2649ffecfa08d8c0121cf18f54db73308e74564304b7c84ed316f7ea365c6fba293069b43d7427bbba998043b4271f0742bcb6c03f6a31608d198f05130e8072f400c896d431afb142b73710cebf408cf2f4ee471ac3186a0395adb79b0e79c6d195e7108d171e02e7f8c663c3d9a3d3fb5e0ea7ae4e62a2feae602feb6674e5195dcd85b90aae7f1de9f1df93bfe3a3ff7713c26e728e4cc221499c7b53ad86736eaeff7de574a5e"}, {0xc}, {0xc}}}, @m_csum={0xd88, 0x0, 0x0, 0x0, {{0x9}, {0x4}, {0xd59, 0x6, "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"}, {0xc}, {0xc}}}]}]}, 0xec4}}, 0x0) 19:19:59 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e030226000b12d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) [ 595.262446][T13177] loop1: detected capacity change from 0 to 1024 [ 595.269501][ T5078] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 595.282122][T13179] FAULT_INJECTION: forcing a failure. [ 595.282122][T13179] name failslab, interval 1, probability 0, space 0, times 0 [ 595.308548][T13179] CPU: 0 PID: 13179 Comm: syz-executor.4 Not tainted 6.2.0-rc5-next-20230127-syzkaller-08766-ge2f86c02fdc9 #0 [ 595.320247][T13179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 595.330428][T13179] Call Trace: [ 595.333737][T13179] [ 595.336701][T13179] dump_stack_lvl+0x136/0x150 [ 595.341431][T13179] should_fail_ex+0x4a3/0x5b0 [ 595.346160][T13179] ? __anon_vma_prepare+0x64/0x580 [ 595.351325][T13179] should_failslab+0x9/0x20 [ 595.355887][T13179] kmem_cache_alloc+0x5a/0x320 [ 595.360718][T13179] __anon_vma_prepare+0x64/0x580 [ 595.365821][T13179] do_wp_page+0x208a/0x3520 [ 595.370387][T13179] ? lock_sync+0x190/0x190 [ 595.374856][T13179] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 595.380364][T13179] ? rcu_read_lock_sched_held+0x3e/0x70 [ 595.385967][T13179] ? do_raw_spin_lock+0x124/0x2b0 [ 595.391057][T13179] ? spin_bug+0x1c0/0x1c0 [ 595.395447][T13179] ? lock_acquire+0x32/0xc0 [ 595.400001][T13179] ? __handle_mm_fault+0x132f/0x3e60 [ 595.405368][T13179] __handle_mm_fault+0x19a1/0x3e60 [ 595.410541][T13179] ? vm_iomap_memory+0x190/0x190 [ 595.415561][T13179] handle_mm_fault+0x1b6/0x850 [ 595.420381][T13179] do_user_addr_fault+0x475/0x1230 [ 595.425549][T13179] ? rcu_read_lock_sched_held+0x3e/0x70 [ 595.431239][T13179] exc_page_fault+0x98/0x170 [ 595.435875][T13179] asm_exc_page_fault+0x26/0x30 [ 595.440771][T13179] RIP: 0033:0x7f11b0e290c0 [ 595.445221][T13179] Code: e8 e5 fe ff ff 41 89 c7 85 c0 78 40 3d ff 00 00 00 7f 2f 49 8b 45 10 49 3b 45 08 0f 84 19 01 00 00 45 85 ff 74 0c 49 8b 55 00 <44> 88 3c 02 49 8b 45 10 48 83 c0 01 49 89 45 10 eb be 66 0f 1f 44 [ 595.464871][T13179] RSP: 002b:00007f11b1bff600 EFLAGS: 00010202 [ 595.470994][T13179] RAX: 0000000000010003 RBX: 00007f11b1bff660 RCX: 0000000000000008 [ 595.479009][T13179] RDX: 00007f11a75ff000 RSI: 0000000000000005 RDI: 00007f11b1bff700 [ 595.487025][T13179] RBP: 0000000000000006 R08: 0000000000000009 R09: 00000000000001e4 [ 595.495040][T13179] R10: 0000000000000010 R11: 00007f11b1bff660 R12: 00007f11b1bff670 [ 595.503081][T13179] R13: 00007f11b1bff700 R14: 0000000000000001 R15: 000000000000003b [ 595.511116][T13179] [ 595.527716][T13179] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 595.643473][T13179] loop4: detected capacity change from 0 to 8192 [ 595.654300][T13179] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 595.667815][T13179] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 595.677885][T13179] REISERFS (device loop4): using ordered data mode [ 595.684563][T13179] reiserfs: using flush barriers [ 595.693452][T13179] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 595.710804][T13179] REISERFS (device loop4): checking transaction log (loop4) [ 595.723614][T13179] REISERFS (device loop4): Using rupasov hash to sort names [ 595.732331][T13179] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. 19:19:59 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x3, 0x7fffffff}]}]}}, &(0x7f0000000340)=""/193, 0x32, 0xc1, 0x1}, 0x20) [ 595.742185][ T5078] usb 1-1: Invalid ep0 maxpacket: 512 [ 595.896329][ T5078] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 596.146041][ T5078] usb 1-1: Invalid ep0 maxpacket: 512 [ 596.151659][ T5078] usb usb1-port1: attempt power cycle [ 596.576136][ T5078] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 596.676299][ T5078] usb 1-1: Invalid ep0 maxpacket: 512 [ 596.826119][ T5078] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 596.916470][ T5078] usb 1-1: Invalid ep0 maxpacket: 512 [ 596.922061][ T5078] usb usb1-port1: unable to enumerate USB device 19:20:01 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000001940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}]}}, &(0x7f00000019c0)=""/4105, 0x36, 0x1009, 0x1}, 0x20) 19:20:01 executing program 4: syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000001140)='./file0\x00', 0x4408, &(0x7f0000000140)={[{@balloc_notest4}, {@balloc_test4}, {@jqfmt_vfsold}, {@balloc_test4}, {@grpjquota, 0x3d}]}, 0x1, 0x1102, &(0x7f00000022c0)="$eJzs2LFqFEEcBvBv9g5MdzLpF0ELCwkJZ2eVIsK11jYiqUyVqyI2vouPI6nsQx7AImAprEyyl6SIBMzJEfj94Gbmvp3Z/045EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjypjXbXVJXSZekJH1/ujhP0q/yp98nXUreHS6WB8fzt8txasu6lDZsy1L3nm/VeZ3Xvfp6e/9FXZ58/vTh6OjweHxNSZ+zi/VvpNWe/O3h1vrrAQAAwGMxPNhsw/UBAACA+6ztIgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgHw2zm3FN8nsYhnRJStL3p4vzJP0mPxAAAAB4sJIu72d35bm8BrjxKj9m5Tpv/a/Sxrv5dsd6AAAA4LbpvTPKrfP4y0yvz+Ute5Zpdnau/o9dfu4nk5OD7ObJmHy9bM8uvnxc/cow+R+bAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAP+zAAQkAAACAoP+v2xEoAAAAAAAAAAAAAAAAAADASgEAAP//C6/ZOQ==") (fail_nth: 16) 19:20:01 executing program 1: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x440, &(0x7f0000000380)={[{@gid={'gid', 0x3d, 0xee01}}, {@uid}, {@force}, {@type={'type', 0x3d, "54c306e3"}}, {@barrier}, {@nls={'nls', 0x3d, 'cp1251'}}, {@nobarrier}, {@gid}, {@nodecompose}, {@nobarrier}, {@force}, {@nobarrier}, {@uid}, {@umask={'umask', 0x3d, 0x789}}]}, 0x1, 0x5ee, &(0x7f0000000680)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="72797a3135cf2c3f3ce902d76d82a4c90000000000000000000000deb8cc70727486b8a90000ff6316d2f6fe2000000000400000003901000100d49f02fb634ff8cecd19f692bdc62760e81784a813e39785551764917eb498"], 0x81) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x8dc, 0x2) 19:20:01 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e030326000b12d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) 19:20:01 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x0, 0x0, 0xf2e, 0x0, 0x1}, 0x48) 19:20:01 executing program 3: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0xe000) shmat(0x0, &(0x7f0000ffb000/0x3000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0xe000) 19:20:01 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e030426000b12d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) 19:20:01 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x2, &(0x7f00000012c0)=@bpf_ext={0x1c, 0x0, &(0x7f0000000300)=@framed={{}, [@ldst, @map_idx, @map_fd, @map_idx_val, @map_fd={0x18, 0x0, 0x1, 0x0, 0x1}, @func, @generic]}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, &(0x7f00000003c0)=""/140, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480), 0x0, 0x10, &(0x7f00000004c0), 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff]}, 0x18) 19:20:02 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @link_local}, 0x1a, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'wg2\x00'}) [ 598.018863][T13185] FAULT_INJECTION: forcing a failure. [ 598.018863][T13185] name failslab, interval 1, probability 0, space 0, times 0 [ 598.075893][T13189] loop1: detected capacity change from 0 to 1024 [ 598.083580][T13185] CPU: 0 PID: 13185 Comm: syz-executor.4 Not tainted 6.2.0-rc5-next-20230127-syzkaller-08766-ge2f86c02fdc9 #0 [ 598.095289][T13185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 598.105383][T13185] Call Trace: [ 598.108704][T13185] [ 598.111719][T13185] dump_stack_lvl+0x136/0x150 [ 598.116458][T13185] should_fail_ex+0x4a3/0x5b0 [ 598.121193][T13185] ? __anon_vma_prepare+0x2c6/0x580 [ 598.126449][T13185] should_failslab+0x9/0x20 [ 598.131007][T13185] kmem_cache_alloc+0x5a/0x320 [ 598.135926][T13185] __anon_vma_prepare+0x2c6/0x580 [ 598.141013][T13185] do_wp_page+0x208a/0x3520 [ 598.145580][T13185] ? lock_sync+0x190/0x190 [ 598.150047][T13185] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 598.155472][T13185] ? rcu_read_lock_sched_held+0x3e/0x70 [ 598.161077][T13185] ? do_raw_spin_lock+0x124/0x2b0 [ 598.166156][T13185] ? spin_bug+0x1c0/0x1c0 [ 598.170540][T13185] ? lock_acquire+0x32/0xc0 19:20:02 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000001940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f00000019c0)=""/4105, 0x2e, 0x1009, 0x1}, 0x20) 19:20:02 executing program 3: socketpair(0x10, 0x3, 0xfffffffb, &(0x7f0000000100)) [ 598.175113][T13185] ? __handle_mm_fault+0x132f/0x3e60 [ 598.180456][T13185] __handle_mm_fault+0x19a1/0x3e60 [ 598.185628][T13185] ? vm_iomap_memory+0x190/0x190 [ 598.190647][T13185] handle_mm_fault+0x1b6/0x850 [ 598.195482][T13185] do_user_addr_fault+0x475/0x1230 [ 598.200658][T13185] ? rcu_read_lock_sched_held+0x3e/0x70 [ 598.206300][T13185] exc_page_fault+0x98/0x170 [ 598.210943][T13185] asm_exc_page_fault+0x26/0x30 [ 598.215850][T13185] RIP: 0033:0x7f11b0e290c0 19:20:02 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[], &(0x7f0000000240)=""/144, 0x46, 0x90, 0x1}, 0x20) [ 598.220345][T13185] Code: e8 e5 fe ff ff 41 89 c7 85 c0 78 40 3d ff 00 00 00 7f 2f 49 8b 45 10 49 3b 45 08 0f 84 19 01 00 00 45 85 ff 74 0c 49 8b 55 00 <44> 88 3c 02 49 8b 45 10 48 83 c0 01 49 89 45 10 eb be 66 0f 1f 44 [ 598.239992][T13185] RSP: 002b:00007f11b1bff600 EFLAGS: 00010202 [ 598.246101][T13185] RAX: 0000000000010003 RBX: 00007f11b1bff660 RCX: 0000000000000008 [ 598.254132][T13185] RDX: 00007f11a75ff000 RSI: 0000000000000005 RDI: 00007f11b1bff700 [ 598.262146][T13185] RBP: 0000000000000006 R08: 0000000000000009 R09: 00000000000001e4 19:20:02 executing program 5: socketpair(0x28, 0x2, 0x0, &(0x7f00000046c0)) [ 598.270158][T13185] R10: 0000000000000010 R11: 00007f11b1bff660 R12: 00007f11b1bff670 [ 598.278167][T13185] R13: 00007f11b1bff700 R14: 0000000000000001 R15: 000000000000003b [ 598.286200][T13185] [ 598.328249][T13185] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 598.544042][T13185] loop4: detected capacity change from 0 to 8192 [ 598.553354][T13185] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 598.567117][T13185] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 598.577886][T13185] REISERFS (device loop4): using ordered data mode [ 598.584496][T13185] reiserfs: using flush barriers [ 598.593641][T13185] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 598.617104][T13185] REISERFS (device loop4): checking transaction log (loop4) [ 598.625582][T13185] REISERFS (device loop4): Using rupasov hash to sort names 19:20:02 executing program 4: syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000001140)='./file0\x00', 0x4408, &(0x7f0000000140)={[{@balloc_notest4}, {@balloc_test4}, {@jqfmt_vfsold}, {@balloc_test4}, {@grpjquota, 0x3d}]}, 0x1, 0x1102, &(0x7f00000022c0)="$eJzs2LFqFEEcBvBv9g5MdzLpF0ELCwkJZ2eVIsK11jYiqUyVqyI2vouPI6nsQx7AImAprEyyl6SIBMzJEfj94Gbmvp3Z/045EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjypjXbXVJXSZekJH1/ujhP0q/yp98nXUreHS6WB8fzt8txasu6lDZsy1L3nm/VeZ3Xvfp6e/9FXZ58/vTh6OjweHxNSZ+zi/VvpNWe/O3h1vrrAQAAwGMxPNhsw/UBAACA+6ztIgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgHw2zm3FN8nsYhnRJStL3p4vzJP0mPxAAAAB4sJIu72d35bm8BrjxKj9m5Tpv/a/Sxrv5dsd6AAAA4LbpvTPKrfP4y0yvz+Ute5Zpdnau/o9dfu4nk5OD7ObJmHy9bM8uvnxc/cow+R+bAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAP+zAAQkAAACAoP+v2xEoAAAAAAAAAAAAAAAAAADASgEAAP//C6/ZOQ==") (fail_nth: 17) 19:20:02 executing program 0: syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x84040) 19:20:02 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e030526000b12d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) 19:20:02 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const]}}, &(0x7f0000000300)=""/4096, 0x1000000, 0x1000, 0x1}, 0x20) 19:20:02 executing program 1: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x440, &(0x7f0000000380)={[{@gid={'gid', 0x3d, 0xee01}}, {@uid}, {@force}, {@type={'type', 0x3d, "54c306e3"}}, {@barrier}, {@nls={'nls', 0x3d, 'cp1251'}}, {@nobarrier}, {@gid}, {@nodecompose}, {@nobarrier}, {@force}, {@nobarrier}, {@uid}, {@umask={'umask', 0x3d, 0x789}}]}, 0x1, 0x5ee, &(0x7f0000000680)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="72797a3135cf2c3f3ce902d76d82a4c90000000000000000000000deb8cc70727486b8a90000ff6316d2f6fe2000000000400000003901000100d49f02fb634ff8cecd19f692bdc62760e81784a813e39785551764917eb498"], 0x81) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x8dc, 0x3) 19:20:02 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x0, 0x9, 0x801, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5}]}, 0x1c}}, 0x0) [ 598.638623][T13185] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. 19:20:02 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000400)=@framed, &(0x7f0000000040)='GPL\x00', 0x7, 0x91, &(0x7f0000000080)=""/145, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 598.687946][T13216] netlink: 'syz-executor.5': attribute type 3 has an invalid length. 19:20:02 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x3, &(0x7f00000012c0)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 19:20:02 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e030626000b12d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) [ 598.783889][T13214] loop1: detected capacity change from 0 to 1024 19:20:02 executing program 0: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0xe000) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) 19:20:02 executing program 1: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x440, &(0x7f0000000380)={[{@gid={'gid', 0x3d, 0xee01}}, {@uid}, {@force}, {@type={'type', 0x3d, "54c306e3"}}, {@barrier}, {@nls={'nls', 0x3d, 'cp1251'}}, {@nobarrier}, {@gid}, {@nodecompose}, {@nobarrier}, {@force}, {@nobarrier}, {@uid}, {@umask={'umask', 0x3d, 0x789}}]}, 0x1, 0x5ee, &(0x7f0000000680)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="72797a3135cf2c3f3ce902d76d82a4c90000000000000000000000deb8cc70727486b8a90000ff6316d2f6fe2000000000400000003901000100d49f02fb634ff8cecd19f692bdc62760e81784a813e39785551764917eb498"], 0x81) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x8dc, 0x4) 19:20:02 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e030726000b12d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) [ 599.014580][ T27] audit: type=1800 audit(1675106402.936:18): pid=13229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 599.113925][T13233] FAULT_INJECTION: forcing a failure. [ 599.113925][T13233] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 599.120368][T13231] loop1: detected capacity change from 0 to 1024 [ 599.176205][T13233] CPU: 0 PID: 13233 Comm: syz-executor.4 Not tainted 6.2.0-rc5-next-20230127-syzkaller-08766-ge2f86c02fdc9 #0 [ 599.187922][T13233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 599.198013][T13233] Call Trace: [ 599.201329][T13233] [ 599.204306][T13233] dump_stack_lvl+0x136/0x150 [ 599.209036][T13233] should_fail_ex+0x4a3/0x5b0 [ 599.213772][T13233] prepare_alloc_pages+0x178/0x570 [ 599.218942][T13233] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 599.224981][T13233] __alloc_pages+0x149/0x5c0 [ 599.229624][T13233] ? __alloc_pages_slowpath.constprop.0+0x23f0/0x23f0 [ 599.236438][T13233] ? find_held_lock+0x2d/0x110 [ 599.241256][T13233] ? lock_downgrade+0x690/0x690 [ 599.246170][T13233] __folio_alloc+0x16/0x40 [ 599.250636][T13233] vma_alloc_folio+0x155/0x880 [ 599.255465][T13233] ? policy_nodemask+0x1c0/0x1c0 [ 599.260463][T13233] ? __anon_vma_prepare+0x29e/0x580 [ 599.265720][T13233] do_wp_page+0x17e7/0x3520 [ 599.270459][T13233] ? lock_sync+0x190/0x190 [ 599.274969][T13233] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 599.280396][T13233] ? rcu_read_lock_sched_held+0x3e/0x70 [ 599.285997][T13233] ? do_raw_spin_lock+0x124/0x2b0 [ 599.291076][T13233] ? spin_bug+0x1c0/0x1c0 [ 599.295486][T13233] ? lock_acquire+0x32/0xc0 [ 599.300059][T13233] ? __handle_mm_fault+0x132f/0x3e60 [ 599.305412][T13233] __handle_mm_fault+0x19a1/0x3e60 [ 599.310585][T13233] ? vm_iomap_memory+0x190/0x190 [ 599.315597][T13233] handle_mm_fault+0x1b6/0x850 [ 599.320416][T13233] do_user_addr_fault+0x475/0x1230 [ 599.325591][T13233] ? rcu_read_lock_sched_held+0x3e/0x70 [ 599.331372][T13233] exc_page_fault+0x98/0x170 [ 599.336044][T13233] asm_exc_page_fault+0x26/0x30 [ 599.340938][T13233] RIP: 0033:0x7f11b0e290c0 [ 599.345380][T13233] Code: e8 e5 fe ff ff 41 89 c7 85 c0 78 40 3d ff 00 00 00 7f 2f 49 8b 45 10 49 3b 45 08 0f 84 19 01 00 00 45 85 ff 74 0c 49 8b 55 00 <44> 88 3c 02 49 8b 45 10 48 83 c0 01 49 89 45 10 eb be 66 0f 1f 44 [ 599.364987][T13233] RSP: 002b:00007f11b1bff600 EFLAGS: 00010202 [ 599.371051][T13233] RAX: 0000000000010003 RBX: 00007f11b1bff660 RCX: 0000000000000008 [ 599.379037][T13233] RDX: 00007f11a75ff000 RSI: 0000000000000005 RDI: 00007f11b1bff700 [ 599.387021][T13233] RBP: 0000000000000006 R08: 0000000000000009 R09: 00000000000001e4 [ 599.395026][T13233] R10: 0000000000000010 R11: 00007f11b1bff660 R12: 00007f11b1bff670 [ 599.403028][T13233] R13: 00007f11b1bff700 R14: 0000000000000001 R15: 000000000000003b [ 599.411022][T13233] [ 599.418508][T13233] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 599.505265][T13233] loop4: detected capacity change from 0 to 8192 [ 599.518472][T13233] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 599.533255][T13233] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 599.543331][T13233] REISERFS (device loop4): using ordered data mode [ 599.550556][T13233] reiserfs: using flush barriers 19:20:03 executing program 4: syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000001140)='./file0\x00', 0x4408, &(0x7f0000000140)={[{@balloc_notest4}, {@balloc_test4}, {@jqfmt_vfsold}, {@balloc_test4}, {@grpjquota, 0x3d}]}, 0x1, 0x1102, &(0x7f00000022c0)="$eJzs2LFqFEEcBvBv9g5MdzLpF0ELCwkJZ2eVIsK11jYiqUyVqyI2vouPI6nsQx7AImAprEyyl6SIBMzJEfj94Gbmvp3Z/045EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjypjXbXVJXSZekJH1/ujhP0q/yp98nXUreHS6WB8fzt8txasu6lDZsy1L3nm/VeZ3Xvfp6e/9FXZ58/vTh6OjweHxNSZ+zi/VvpNWe/O3h1vrrAQAAwGMxPNhsw/UBAACA+6ztIgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgHw2zm3FN8nsYhnRJStL3p4vzJP0mPxAAAAB4sJIu72d35bm8BrjxKj9m5Tpv/a/Sxrv5dsd6AAAA4LbpvTPKrfP4y0yvz+Ute5Zpdnau/o9dfu4nk5OD7ObJmHy9bM8uvnxc/cow+R+bAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAP+zAAQkAAACAoP+v2xEoAAAAAAAAAAAAAAAAAADASgEAAP//C6/ZOQ==") (fail_nth: 18) 19:20:03 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000400)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:20:03 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x4, 0x0, 0x0) 19:20:03 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e030826000b12d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) 19:20:03 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const={0x0, 0x0, 0x0, 0xa, 0x4}]}}, &(0x7f0000000300)=""/4096, 0x26, 0x1000, 0x1}, 0x20) 19:20:03 executing program 1: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x440, &(0x7f0000000380)={[{@gid={'gid', 0x3d, 0xee01}}, {@uid}, {@force}, {@type={'type', 0x3d, "54c306e3"}}, {@barrier}, {@nls={'nls', 0x3d, 'cp1251'}}, {@nobarrier}, {@gid}, {@nodecompose}, {@nobarrier}, {@force}, {@nobarrier}, {@uid}, {@umask={'umask', 0x3d, 0x789}}]}, 0x1, 0x5ee, &(0x7f0000000680)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="72797a3135cf2c3f3ce902d76d82a4c90000000000000000000000deb8cc70727486b8a90000ff6316d2f6fe2000000000400000003901000100d49f02fb634ff8cecd19f692bdc62760e81784a813e39785551764917eb498"], 0x81) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x8dc, 0x5) [ 599.562083][T13233] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 599.578987][T13233] REISERFS (device loop4): checking transaction log (loop4) [ 599.588303][T13233] REISERFS (device loop4): Using rupasov hash to sort names [ 599.595888][T13233] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. 19:20:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xffffff1f}, 0x0) 19:20:03 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x14, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 19:20:03 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e030926000b12d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) 19:20:03 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x3}]}]}}, &(0x7f0000000340)=""/193, 0x32, 0xc1, 0x1}, 0x20) [ 599.723017][T13243] loop1: detected capacity change from 0 to 1024 19:20:03 executing program 3: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001280)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0xe000) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0xe000) 19:20:03 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x5}}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {0x0, 0x5}]}]}}, &(0x7f0000001340)=""/4096, 0x4e, 0x1000, 0x1}, 0x20) [ 599.990060][T13258] FAULT_INJECTION: forcing a failure. [ 599.990060][T13258] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 600.026302][T13258] CPU: 1 PID: 13258 Comm: syz-executor.4 Not tainted 6.2.0-rc5-next-20230127-syzkaller-08766-ge2f86c02fdc9 #0 [ 600.038000][T13258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 600.048093][T13258] Call Trace: [ 600.051402][T13258] [ 600.054366][T13258] dump_stack_lvl+0x136/0x150 [ 600.059093][T13258] should_fail_ex+0x4a3/0x5b0 [ 600.063810][T13258] prepare_alloc_pages+0x178/0x570 [ 600.068963][T13258] __alloc_pages+0x149/0x5c0 [ 600.073590][T13258] ? __alloc_pages_slowpath.constprop.0+0x23f0/0x23f0 [ 600.080377][T13258] ? folio_add_lru+0x37b/0x680 [ 600.085157][T13258] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 600.091190][T13258] ? __lock_acquire+0xbe1/0x5df0 [ 600.096332][T13258] __folio_alloc+0x16/0x40 [ 600.100785][T13258] vma_alloc_folio+0x155/0x880 [ 600.105582][T13258] ? policy_nodemask+0x1c0/0x1c0 [ 600.110588][T13258] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 600.116636][T13258] ? lock_downgrade+0x690/0x690 [ 600.121539][T13258] ? print_usage_bug.part.0+0x660/0x660 [ 600.127136][T13258] __handle_mm_fault+0x184b/0x3e60 [ 600.132377][T13258] ? vm_iomap_memory+0x190/0x190 [ 600.137369][T13258] handle_mm_fault+0x1b6/0x850 [ 600.142179][T13258] do_user_addr_fault+0x475/0x1230 [ 600.147345][T13258] ? rcu_read_lock_sched_held+0x3e/0x70 [ 600.152913][T13258] exc_page_fault+0x98/0x170 [ 600.157545][T13258] asm_exc_page_fault+0x26/0x30 [ 600.162417][T13258] RIP: 0033:0x7f11b0e290c0 [ 600.166848][T13258] Code: e8 e5 fe ff ff 41 89 c7 85 c0 78 40 3d ff 00 00 00 7f 2f 49 8b 45 10 49 3b 45 08 0f 84 19 01 00 00 45 85 ff 74 0c 49 8b 55 00 <44> 88 3c 02 49 8b 45 10 48 83 c0 01 49 89 45 10 eb be 66 0f 1f 44 [ 600.186472][T13258] RSP: 002b:00007f11b1bff600 EFLAGS: 00010206 [ 600.192566][T13258] RAX: 0000000000011000 RBX: 00007f11b1bff660 RCX: 0000000000000002 [ 600.200547][T13258] RDX: 00007f11a75ff000 RSI: 000000000000000f RDI: 00007f11b1bff700 [ 600.208530][T13258] RBP: 00000000000000a8 R08: 0000000000000006 R09: 000000000000002e [ 600.216682][T13258] R10: 0000000000000010 R11: 00007f11b1bff660 R12: 00007f11b1bff670 [ 600.224665][T13258] R13: 00007f11b1bff700 R14: 0000000000000001 R15: 00000000000000ff [ 600.232663][T13258] [ 600.268797][T13258] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 600.340391][T13258] loop4: detected capacity change from 0 to 8192 [ 600.352771][T13258] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 600.368434][T13258] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 600.378411][T13258] REISERFS (device loop4): using ordered data mode [ 600.385105][T13258] reiserfs: using flush barriers 19:20:04 executing program 4: syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000001140)='./file0\x00', 0x4408, &(0x7f0000000140)={[{@balloc_notest4}, {@balloc_test4}, {@jqfmt_vfsold}, {@balloc_test4}, {@grpjquota, 0x3d}]}, 0x1, 0x1102, &(0x7f00000022c0)="$eJzs2LFqFEEcBvBv9g5MdzLpF0ELCwkJZ2eVIsK11jYiqUyVqyI2vouPI6nsQx7AImAprEyyl6SIBMzJEfj94Gbmvp3Z/045EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjypjXbXVJXSZekJH1/ujhP0q/yp98nXUreHS6WB8fzt8txasu6lDZsy1L3nm/VeZ3Xvfp6e/9FXZ58/vTh6OjweHxNSZ+zi/VvpNWe/O3h1vrrAQAAwGMxPNhsw/UBAACA+6ztIgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgHw2zm3FN8nsYhnRJStL3p4vzJP0mPxAAAAB4sJIu72d35bm8BrjxKj9m5Tpv/a/Sxrv5dsd6AAAA4LbpvTPKrfP4y0yvz+Ute5Zpdnau/o9dfu4nk5OD7ObJmHy9bM8uvnxc/cow+R+bAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAP+zAAQkAAACAoP+v2xEoAAAAAAAAAAAAAAAAAADASgEAAP//C6/ZOQ==") (fail_nth: 19) 19:20:04 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e030a26000b12d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) 19:20:04 executing program 5: r0 = socket$inet(0x2, 0x3, 0x7) getsockopt$inet_buf(r0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) 19:20:04 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, &(0x7f0000000340)=""/193, 0x26, 0xc1, 0x1}, 0x20) 19:20:04 executing program 0: socketpair(0xa, 0x3, 0x0, &(0x7f00000046c0)) 19:20:04 executing program 1: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x440, &(0x7f0000000380)={[{@gid={'gid', 0x3d, 0xee01}}, {@uid}, {@force}, {@type={'type', 0x3d, "54c306e3"}}, {@barrier}, {@nls={'nls', 0x3d, 'cp1251'}}, {@nobarrier}, {@gid}, {@nodecompose}, {@nobarrier}, {@force}, {@nobarrier}, {@uid}, {@umask={'umask', 0x3d, 0x789}}]}, 0x1, 0x5ee, &(0x7f0000000680)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="72797a3135cf2c3f3ce902d76d82a4c90000000000000000000000deb8cc70727486b8a90000ff6316d2f6fe2000000000400000003901000100d49f02fb634ff8cecd19f692bdc62760e81784a813e39785551764917eb498"], 0x81) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x8dc, 0x6) [ 600.393901][T13258] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 600.410904][T13258] REISERFS (device loop4): checking transaction log (loop4) [ 600.421512][T13258] REISERFS (device loop4): Using rupasov hash to sort names [ 600.429453][T13258] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. 19:20:04 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000580)) 19:20:04 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e030b26000b12d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) 19:20:04 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x0, 0x0, 0x5a7}, 0x48) [ 600.560237][T13270] loop1: detected capacity change from 0 to 1024 19:20:04 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x4}}]}}, &(0x7f0000000300)=""/4096, 0x32, 0x1000, 0x1}, 0x20) 19:20:04 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:20:04 executing program 1: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x440, &(0x7f0000000380)={[{@gid={'gid', 0x3d, 0xee01}}, {@uid}, {@force}, {@type={'type', 0x3d, "54c306e3"}}, {@barrier}, {@nls={'nls', 0x3d, 'cp1251'}}, {@nobarrier}, {@gid}, {@nodecompose}, {@nobarrier}, {@force}, {@nobarrier}, {@uid}, {@umask={'umask', 0x3d, 0x789}}]}, 0x1, 0x5ee, &(0x7f0000000680)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="72797a3135cf2c3f3ce902d76d82a4c90000000000000000000000deb8cc70727486b8a90000ff6316d2f6fe2000000000400000003901000100d49f02fb634ff8cecd19f692bdc62760e81784a813e39785551764917eb498"], 0x81) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x8dc, 0x7) [ 600.888405][T13284] loop1: detected capacity change from 0 to 1024 [ 600.898421][T13285] FAULT_INJECTION: forcing a failure. [ 600.898421][T13285] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 600.943238][T13285] CPU: 1 PID: 13285 Comm: syz-executor.4 Not tainted 6.2.0-rc5-next-20230127-syzkaller-08766-ge2f86c02fdc9 #0 [ 600.954943][T13285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 600.965039][T13285] Call Trace: [ 600.968346][T13285] [ 600.971306][T13285] dump_stack_lvl+0x136/0x150 [ 600.976119][T13285] should_fail_ex+0x4a3/0x5b0 [ 600.980861][T13285] prepare_alloc_pages+0x178/0x570 [ 600.986022][T13285] ? __lock_acquire+0xbe1/0x5df0 [ 600.991021][T13285] __alloc_pages+0x149/0x5c0 [ 600.995650][T13285] ? __alloc_pages_slowpath.constprop.0+0x23f0/0x23f0 [ 601.002459][T13285] ? io_schedule_timeout+0x150/0x150 [ 601.007824][T13285] ? __lock_acquire+0xbe1/0x5df0 [ 601.012827][T13285] alloc_pages+0x1aa/0x270 [ 601.017307][T13285] pte_alloc_one+0x1a/0x230 [ 601.021881][T13285] __pte_alloc+0x6d/0x260 [ 601.026276][T13285] ? pmd_install+0x160/0x160 [ 601.030919][T13285] ? print_usage_bug.part.0+0x660/0x660 [ 601.036546][T13285] __handle_mm_fault+0x3626/0x3e60 [ 601.041725][T13285] ? vm_iomap_memory+0x190/0x190 [ 601.046740][T13285] handle_mm_fault+0x1b6/0x850 [ 601.051543][T13285] do_user_addr_fault+0x475/0x1230 [ 601.056699][T13285] ? rcu_read_lock_sched_held+0x3e/0x70 [ 601.062300][T13285] exc_page_fault+0x98/0x170 [ 601.067295][T13285] asm_exc_page_fault+0x26/0x30 [ 601.072200][T13285] RIP: 0033:0x7f11b0e29197 [ 601.076634][T13285] Code: 78 48 63 d5 48 01 c2 49 3b 55 08 77 56 8d 55 ff 85 ed 74 35 0f 1f 80 00 00 00 00 48 39 c1 77 1c 49 8b 75 00 49 89 c1 49 29 c9 <46> 0f b6 0c 0e 45 84 c9 74 08 44 88 0c 06 49 8b 45 10 48 83 c0 01 [ 601.096268][T13285] RSP: 002b:00007f11b1bff600 EFLAGS: 00010206 [ 601.102350][T13285] RAX: 0000000000201001 RBX: 00007f11b1bff660 RCX: 0000000000000001 [ 601.110349][T13285] RDX: 00000000000000ad RSI: 00007f11a75ff000 RDI: 00007f11b1bff700 [ 601.118356][T13285] RBP: 0000000000000102 R08: 0000000000000000 R09: 0000000000201000 [ 601.126354][T13285] R10: 0000000000000000 R11: 00007f11b1bff670 R12: 00007f11b1bff670 [ 601.134450][T13285] R13: 00007f11b1bff700 R14: 0000000000000001 R15: 0000000000000000 [ 601.142467][T13285] [ 601.163419][T13285] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 601.290270][T13285] loop4: detected capacity change from 0 to 8192 [ 601.300219][T13285] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 601.313436][T13285] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 601.323304][T13285] REISERFS (device loop4): using ordered data mode [ 601.330419][T13285] reiserfs: using flush barriers 19:20:05 executing program 4: syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000001140)='./file0\x00', 0x4408, &(0x7f0000000140)={[{@balloc_notest4}, {@balloc_test4}, {@jqfmt_vfsold}, {@balloc_test4}, {@grpjquota, 0x3d}]}, 0x1, 0x1102, &(0x7f00000022c0)="$eJzs2LFqFEEcBvBv9g5MdzLpF0ELCwkJZ2eVIsK11jYiqUyVqyI2vouPI6nsQx7AImAprEyyl6SIBMzJEfj94Gbmvp3Z/045EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjypjXbXVJXSZekJH1/ujhP0q/yp98nXUreHS6WB8fzt8txasu6lDZsy1L3nm/VeZ3Xvfp6e/9FXZ58/vTh6OjweHxNSZ+zi/VvpNWe/O3h1vrrAQAAwGMxPNhsw/UBAACA+6ztIgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgHw2zm3FN8nsYhnRJStL3p4vzJP0mPxAAAAB4sJIu72d35bm8BrjxKj9m5Tpv/a/Sxrv5dsd6AAAA4LbpvTPKrfP4y0yvz+Ute5Zpdnau/o9dfu4nk5OD7ObJmHy9bM8uvnxc/cow+R+bAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAP+zAAQkAAACAoP+v2xEoAAAAAAAAAAAAAAAAAADASgEAAP//C6/ZOQ==") (fail_nth: 20) 19:20:05 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e030c26000b12d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) 19:20:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0xec0}}, 0x0) 19:20:05 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, 0x0) 19:20:05 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x15, &(0x7f00000012c0)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 19:20:05 executing program 1: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x440, &(0x7f0000000380)={[{@gid={'gid', 0x3d, 0xee01}}, {@uid}, {@force}, {@type={'type', 0x3d, "54c306e3"}}, {@barrier}, {@nls={'nls', 0x3d, 'cp1251'}}, {@nobarrier}, {@gid}, {@nodecompose}, {@nobarrier}, {@force}, {@nobarrier}, {@uid}, {@umask={'umask', 0x3d, 0x789}}]}, 0x1, 0x5ee, &(0x7f0000000680)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="72797a3135cf2c3f3ce902d76d82a4c90000000000000000000000deb8cc70727486b8a90000ff6316d2f6fe2000000000400000003901000100d49f02fb634ff8cecd19f692bdc62760e81784a813e39785551764917eb498"], 0x81) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x8dc, 0x8) [ 601.350829][T13285] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 601.368145][T13285] REISERFS (device loop4): checking transaction log (loop4) [ 601.378920][T13285] REISERFS (device loop4): Using rupasov hash to sort names [ 601.388300][T13285] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. 19:20:05 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000012c0)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x20001340) 19:20:05 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000800000007000003000000060400000006000000060000001000000004000000000000000003000000000000000002000000ff0100000d0000000000000902000002006130"], &(0x7f00000000c0)=""/178, 0x60, 0xb2, 0x1}, 0x20) 19:20:05 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e030e26000b12d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) 19:20:05 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 19:20:05 executing program 3: clock_getres(0x6e5d6a2586887aff, 0x0) [ 601.523589][T13294] loop1: detected capacity change from 0 to 1024 19:20:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x300}, 0x0) [ 601.830086][T13310] FAULT_INJECTION: forcing a failure. [ 601.830086][T13310] name failslab, interval 1, probability 0, space 0, times 0 [ 601.843296][T13310] CPU: 1 PID: 13310 Comm: syz-executor.4 Not tainted 6.2.0-rc5-next-20230127-syzkaller-08766-ge2f86c02fdc9 #0 [ 601.854962][T13310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 601.865017][T13310] Call Trace: [ 601.868289][T13310] [ 601.871215][T13310] dump_stack_lvl+0x136/0x150 [ 601.875891][T13310] should_fail_ex+0x4a3/0x5b0 [ 601.880621][T13310] ? ptlock_alloc+0x21/0x70 [ 601.885155][T13310] should_failslab+0x9/0x20 [ 601.889680][T13310] kmem_cache_alloc+0x5a/0x320 [ 601.894490][T13310] ptlock_alloc+0x21/0x70 [ 601.898844][T13310] pte_alloc_one+0x6c/0x230 [ 601.903379][T13310] __pte_alloc+0x6d/0x260 [ 601.907737][T13310] ? pmd_install+0x160/0x160 [ 601.912348][T13310] ? print_usage_bug.part.0+0x660/0x660 [ 601.917920][T13310] __handle_mm_fault+0x3626/0x3e60 [ 601.923060][T13310] ? vm_iomap_memory+0x190/0x190 [ 601.928040][T13310] handle_mm_fault+0x1b6/0x850 [ 601.932829][T13310] do_user_addr_fault+0x475/0x1230 [ 601.937969][T13310] ? rcu_read_lock_sched_held+0x3e/0x70 [ 601.943541][T13310] exc_page_fault+0x98/0x170 [ 601.948420][T13310] asm_exc_page_fault+0x26/0x30 [ 601.953289][T13310] RIP: 0033:0x7f11b0e29197 [ 601.957718][T13310] Code: 78 48 63 d5 48 01 c2 49 3b 55 08 77 56 8d 55 ff 85 ed 74 35 0f 1f 80 00 00 00 00 48 39 c1 77 1c 49 8b 75 00 49 89 c1 49 29 c9 <46> 0f b6 0c 0e 45 84 c9 74 08 44 88 0c 06 49 8b 45 10 48 83 c0 01 [ 601.977382][T13310] RSP: 002b:00007f11b1bff600 EFLAGS: 00010206 [ 601.983473][T13310] RAX: 0000000000201001 RBX: 00007f11b1bff660 RCX: 0000000000000001 [ 601.991545][T13310] RDX: 00000000000000ad RSI: 00007f11a75ff000 RDI: 00007f11b1bff700 [ 601.999525][T13310] RBP: 0000000000000102 R08: 0000000000000000 R09: 0000000000201000 [ 602.007507][T13310] R10: 0000000000000000 R11: 00007f11b1bff670 R12: 00007f11b1bff670 [ 602.015493][T13310] R13: 00007f11b1bff700 R14: 0000000000000001 R15: 0000000000000000 [ 602.023502][T13310] [ 602.032250][T13310] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 602.087086][T13310] loop4: detected capacity change from 0 to 8192 [ 602.095570][T13310] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 602.109256][T13310] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 602.119367][T13310] REISERFS (device loop4): using ordered data mode [ 602.125898][T13310] reiserfs: using flush barriers [ 602.134677][T13310] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 602.152945][T13310] REISERFS (device loop4): checking transaction log (loop4) [ 602.164721][T13310] REISERFS (device loop4): Using rupasov hash to sort names [ 602.172554][T13310] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. 19:20:06 executing program 4: syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000001140)='./file0\x00', 0x4408, &(0x7f0000000140)={[{@balloc_notest4}, {@balloc_test4}, {@jqfmt_vfsold}, {@balloc_test4}, {@grpjquota, 0x3d}]}, 0x1, 0x1102, &(0x7f00000022c0)="$eJzs2LFqFEEcBvBv9g5MdzLpF0ELCwkJZ2eVIsK11jYiqUyVqyI2vouPI6nsQx7AImAprEyyl6SIBMzJEfj94Gbmvp3Z/045EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjypjXbXVJXSZekJH1/ujhP0q/yp98nXUreHS6WB8fzt8txasu6lDZsy1L3nm/VeZ3Xvfp6e/9FXZ58/vTh6OjweHxNSZ+zi/VvpNWe/O3h1vrrAQAAwGMxPNhsw/UBAACA+6ztIgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgHw2zm3FN8nsYhnRJStL3p4vzJP0mPxAAAAB4sJIu72d35bm8BrjxKj9m5Tpv/a/Sxrv5dsd6AAAA4LbpvTPKrfP4y0yvz+Ute5Zpdnau/o9dfu4nk5OD7ObJmHy9bM8uvnxc/cow+R+bAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAP+zAAQkAAACAoP+v2xEoAAAAAAAAAAAAAAAAAADASgEAAP//C6/ZOQ==") (fail_nth: 21) 19:20:06 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e030f26000b12d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) 19:20:06 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1b}]}}, &(0x7f0000000040)=""/156, 0x2a, 0x9c, 0x1}, 0x20) 19:20:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x6}, @void}}}, 0x1c}}, 0x0) 19:20:06 executing program 1: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x440, &(0x7f0000000380)={[{@gid={'gid', 0x3d, 0xee01}}, {@uid}, {@force}, {@type={'type', 0x3d, "54c306e3"}}, {@barrier}, {@nls={'nls', 0x3d, 'cp1251'}}, {@nobarrier}, {@gid}, {@nodecompose}, {@nobarrier}, {@force}, {@nobarrier}, {@uid}, {@umask={'umask', 0x3d, 0x789}}]}, 0x1, 0x5ee, &(0x7f0000000680)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="72797a3135cf2c3f3ce902d76d82a4c90000000000000000000000deb8cc70727486b8a90000ff6316d2f6fe2000000000400000003901000100d49f02fb634ff8cecd19f692bdc62760e81784a813e39785551764917eb498"], 0x81) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x8dc, 0x9) 19:20:06 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const={0x0, 0x0, 0x3}]}}, &(0x7f0000000300)=""/4096, 0x26, 0x1000, 0x1}, 0x20) 19:20:06 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const={0x0, 0x0, 0x0, 0x8}]}}, &(0x7f0000000300)=""/4096, 0x26, 0x1000, 0x1}, 0x20) 19:20:06 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e031026000b12d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) 19:20:06 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0xff0f0000, 0x0, 0x0, 0x2}}, &(0x7f0000000300)=""/4096, 0x1a, 0x1000, 0x1}, 0x20) 19:20:06 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00') clock_gettime(0x0, &(0x7f0000000400)={0x0}) select(0x40, &(0x7f0000000340), &(0x7f0000000380)={0x1}, 0x0, &(0x7f0000000440)={r0}) [ 602.288945][T13321] loop1: detected capacity change from 0 to 1024 19:20:06 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f00000002c0)={{0x10, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000300)=""/4096, 0x1a, 0x1000, 0x1}, 0x20) 19:20:06 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x4, 0x0, 0xfffffffffffffe38) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x1ff, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) syz_genetlink_get_family_id$ipvs(&(0x7f0000000940), 0xffffffffffffffff) [ 602.591627][T13336] FAULT_INJECTION: forcing a failure. [ 602.591627][T13336] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 602.619933][T13336] CPU: 1 PID: 13336 Comm: syz-executor.4 Not tainted 6.2.0-rc5-next-20230127-syzkaller-08766-ge2f86c02fdc9 #0 [ 602.631639][T13336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 602.641728][T13336] Call Trace: [ 602.645037][T13336] [ 602.648084][T13336] dump_stack_lvl+0x136/0x150 [ 602.652817][T13336] should_fail_ex+0x4a3/0x5b0 [ 602.657642][T13336] prepare_alloc_pages+0x178/0x570 [ 602.662807][T13336] __alloc_pages+0x149/0x5c0 [ 602.667447][T13336] ? __alloc_pages_slowpath.constprop.0+0x23f0/0x23f0 [ 602.674350][T13336] ? find_held_lock+0x2d/0x110 [ 602.679162][T13336] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 602.685208][T13336] ? __lock_acquire+0xbe1/0x5df0 [ 602.690205][T13336] __folio_alloc+0x16/0x40 [ 602.694689][T13336] vma_alloc_folio+0x155/0x880 [ 602.699776][T13336] ? policy_nodemask+0x1c0/0x1c0 [ 602.704768][T13336] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 602.710794][T13336] ? lock_downgrade+0x690/0x690 [ 602.715696][T13336] ? print_usage_bug.part.0+0x660/0x660 [ 602.721292][T13336] __handle_mm_fault+0x184b/0x3e60 [ 602.726475][T13336] ? vm_iomap_memory+0x190/0x190 [ 602.731574][T13336] handle_mm_fault+0x1b6/0x850 [ 602.736394][T13336] do_user_addr_fault+0x475/0x1230 [ 602.741560][T13336] ? rcu_read_lock_sched_held+0x3e/0x70 [ 602.747185][T13336] exc_page_fault+0x98/0x170 [ 602.751821][T13336] asm_exc_page_fault+0x26/0x30 [ 602.756700][T13336] RIP: 0033:0x7f11b0e290c0 [ 602.761140][T13336] Code: e8 e5 fe ff ff 41 89 c7 85 c0 78 40 3d ff 00 00 00 7f 2f 49 8b 45 10 49 3b 45 08 0f 84 19 01 00 00 45 85 ff 74 0c 49 8b 55 00 <44> 88 3c 02 49 8b 45 10 48 83 c0 01 49 89 45 10 eb be 66 0f 1f 44 [ 602.780769][T13336] RSP: 002b:00007f11b1bff600 EFLAGS: 00010206 [ 602.786854][T13336] RAX: 0000000000212000 RBX: 00007f11b1bff660 RCX: 0000000000000002 [ 602.794861][T13336] RDX: 00007f11a75ff000 RSI: 0000000000000000 RDI: 00007f11b1bff700 [ 602.802849][T13336] RBP: 0000000000000037 R08: 0000000000000006 R09: 000000000000002e [ 602.810840][T13336] R10: 0000000000000010 R11: 00007f11b1bff660 R12: 00007f11b1bff670 [ 602.818824][T13336] R13: 00007f11b1bff700 R14: 0000000000000001 R15: 00000000000000ff [ 602.826822][T13336] [ 602.834071][T13336] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 602.919009][T13336] loop4: detected capacity change from 0 to 8192 [ 602.931887][T13336] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 602.946141][T13336] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 602.962259][T13336] REISERFS (device loop4): using ordered data mode [ 602.971735][T13336] reiserfs: using flush barriers 19:20:07 executing program 4: syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000001140)='./file0\x00', 0x4408, &(0x7f0000000140)={[{@balloc_notest4}, {@balloc_test4}, {@jqfmt_vfsold}, {@balloc_test4}, {@grpjquota, 0x3d}]}, 0x1, 0x1102, &(0x7f00000022c0)="$eJzs2LFqFEEcBvBv9g5MdzLpF0ELCwkJZ2eVIsK11jYiqUyVqyI2vouPI6nsQx7AImAprEyyl6SIBMzJEfj94Gbmvp3Z/045EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjypjXbXVJXSZekJH1/ujhP0q/yp98nXUreHS6WB8fzt8txasu6lDZsy1L3nm/VeZ3Xvfp6e/9FXZ58/vTh6OjweHxNSZ+zi/VvpNWe/O3h1vrrAQAAwGMxPNhsw/UBAACA+6ztIgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgHw2zm3FN8nsYhnRJStL3p4vzJP0mPxAAAAB4sJIu72d35bm8BrjxKj9m5Tpv/a/Sxrv5dsd6AAAA4LbpvTPKrfP4y0yvz+Ute5Zpdnau/o9dfu4nk5OD7ObJmHy9bM8uvnxc/cow+R+bAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAP+zAAQkAAACAoP+v2xEoAAAAAAAAAAAAAAAAAADASgEAAP//C6/ZOQ==") (fail_nth: 22) 19:20:07 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e031126000b12d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) 19:20:07 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x1}, 0x6e) 19:20:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x330, 0xffffffff, 0xd0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x298, 0x298, 0x298, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xf, 0x20, 0x3, 0x32], 0x1, 0x1, 0xe4a}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30}}, {{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'hsr0\x00', 'gretap0\x00', {}, {}, 0x0, 0x0, 0x20}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@dccp={{0x30}, {[0x4e23, 0x4e22], [0x4e20, 0x4e20], 0xe}}, @common=@ttl={{0x28}, {0x2}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local, 0x0, 0x0, [0x4, 0x40, 0x16, 0x26, 0x26, 0x17, 0x20, 0x22, 0x0, 0xe, 0x7], 0x0, 0xfffffff8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) 19:20:07 executing program 1: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x440, &(0x7f0000000380)={[{@gid={'gid', 0x3d, 0xee01}}, {@uid}, {@force}, {@type={'type', 0x3d, "54c306e3"}}, {@barrier}, {@nls={'nls', 0x3d, 'cp1251'}}, {@nobarrier}, {@gid}, {@nodecompose}, {@nobarrier}, {@force}, {@nobarrier}, {@uid}, {@umask={'umask', 0x3d, 0x789}}]}, 0x1, 0x5ee, &(0x7f0000000680)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="72797a3135cf2c3f3ce902d76d82a4c90000000000000000000000deb8cc70727486b8a90000ff6316d2f6fe2000000000400000003901000100d49f02fb634ff8cecd19f692bdc62760e81784a813e39785551764917eb498"], 0x81) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x8dc, 0xa) 19:20:07 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x0, 0xc, 0x801}, 0x14}}, 0x0) [ 603.003337][T13336] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 603.023590][T13336] REISERFS (device loop4): checking transaction log (loop4) [ 603.032545][T13336] REISERFS (device loop4): Using rupasov hash to sort names [ 603.042339][T13336] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. 19:20:07 executing program 5: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@map, 0xffffffffffffffff, 0x1d}, 0x10) [ 603.098139][T13341] x_tables: duplicate underflow at hook 2 19:20:07 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e031326000b12d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) 19:20:07 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010218"], &(0x7f0000000240)=""/144, 0x46, 0x90, 0x1}, 0x20) 19:20:07 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1b, 0x0, 0x0, 0x20000000}, 0x48) [ 603.199895][T13344] loop1: detected capacity change from 0 to 1024 19:20:07 executing program 1: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x440, &(0x7f0000000380)={[{@gid={'gid', 0x3d, 0xee01}}, {@uid}, {@force}, {@type={'type', 0x3d, "54c306e3"}}, {@barrier}, {@nls={'nls', 0x3d, 'cp1251'}}, {@nobarrier}, {@gid}, {@nodecompose}, {@nobarrier}, {@force}, {@nobarrier}, {@uid}, {@umask={'umask', 0x3d, 0x789}}]}, 0x1, 0x5ee, &(0x7f0000000680)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="72797a3135cf2c3f3ce902d76d82a4c90000000000000000000000deb8cc70727486b8a90000ff6316d2f6fe2000000000400000003901000100d49f02fb634ff8cecd19f692bdc62760e81784a813e39785551764917eb498"], 0x81) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x8dc, 0x10) 19:20:07 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000980)='\xff\xff', 0x0, 0x0) [ 603.502874][T13361] FAULT_INJECTION: forcing a failure. [ 603.502874][T13361] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 603.529096][T13362] loop1: detected capacity change from 0 to 1024 [ 603.535837][ T5233] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 603.545495][T13361] CPU: 1 PID: 13361 Comm: syz-executor.4 Not tainted 6.2.0-rc5-next-20230127-syzkaller-08766-ge2f86c02fdc9 #0 [ 603.557437][T13361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 603.567531][T13361] Call Trace: [ 603.570832][T13361] [ 603.573806][T13361] dump_stack_lvl+0x136/0x150 [ 603.578530][T13361] should_fail_ex+0x4a3/0x5b0 [ 603.583256][T13361] prepare_alloc_pages+0x178/0x570 [ 603.588420][T13361] __alloc_pages+0x149/0x5c0 [ 603.593063][T13361] ? __alloc_pages_slowpath.constprop.0+0x23f0/0x23f0 [ 603.599874][T13361] ? find_held_lock+0x2d/0x110 [ 603.604684][T13361] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 603.610726][T13361] ? __lock_acquire+0xbe1/0x5df0 [ 603.615715][T13361] __folio_alloc+0x16/0x40 [ 603.620171][T13361] vma_alloc_folio+0x155/0x880 [ 603.624996][T13361] ? policy_nodemask+0x1c0/0x1c0 [ 603.630184][T13361] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 603.636191][T13361] ? lock_downgrade+0x690/0x690 [ 603.641074][T13361] ? print_usage_bug.part.0+0x660/0x660 [ 603.646645][T13361] __handle_mm_fault+0x184b/0x3e60 [ 603.651785][T13361] ? vm_iomap_memory+0x190/0x190 [ 603.656766][T13361] handle_mm_fault+0x1b6/0x850 [ 603.661562][T13361] do_user_addr_fault+0x475/0x1230 [ 603.666706][T13361] ? rcu_read_lock_sched_held+0x3e/0x70 [ 603.672277][T13361] exc_page_fault+0x98/0x170 [ 603.676890][T13361] asm_exc_page_fault+0x26/0x30 [ 603.681760][T13361] RIP: 0033:0x7f11b0e290c0 [ 603.686195][T13361] Code: e8 e5 fe ff ff 41 89 c7 85 c0 78 40 3d ff 00 00 00 7f 2f 49 8b 45 10 49 3b 45 08 0f 84 19 01 00 00 45 85 ff 74 0c 49 8b 55 00 <44> 88 3c 02 49 8b 45 10 48 83 c0 01 49 89 45 10 eb be 66 0f 1f 44 [ 603.706087][T13361] RSP: 002b:00007f11b1bff600 EFLAGS: 00010206 [ 603.712195][T13361] RAX: 0000000000212000 RBX: 00007f11b1bff660 RCX: 0000000000000002 [ 603.720180][T13361] RDX: 00007f11a75ff000 RSI: 0000000000000000 RDI: 00007f11b1bff700 [ 603.728162][T13361] RBP: 0000000000000037 R08: 0000000000000006 R09: 000000000000002e [ 603.736140][T13361] R10: 0000000000000010 R11: 00007f11b1bff660 R12: 00007f11b1bff670 [ 603.744123][T13361] R13: 00007f11b1bff700 R14: 0000000000000001 R15: 00000000000000ff [ 603.752123][T13361] [ 603.766515][T13361] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 603.935507][T13361] loop4: detected capacity change from 0 to 8192 [ 603.958012][T13361] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 603.982962][T13361] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 604.001251][T13361] REISERFS (device loop4): using ordered data mode [ 604.014205][T13361] reiserfs: using flush barriers [ 604.041688][T13361] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 604.072887][T13361] REISERFS (device loop4): checking transaction log (loop4) 19:20:08 executing program 4: syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000001140)='./file0\x00', 0x4408, &(0x7f0000000140)={[{@balloc_notest4}, {@balloc_test4}, {@jqfmt_vfsold}, {@balloc_test4}, {@grpjquota, 0x3d}]}, 0x1, 0x1102, &(0x7f00000022c0)="$eJzs2LFqFEEcBvBv9g5MdzLpF0ELCwkJZ2eVIsK11jYiqUyVqyI2vouPI6nsQx7AImAprEyyl6SIBMzJEfj94Gbmvp3Z/045EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjypjXbXVJXSZekJH1/ujhP0q/yp98nXUreHS6WB8fzt8txasu6lDZsy1L3nm/VeZ3Xvfp6e/9FXZ58/vTh6OjweHxNSZ+zi/VvpNWe/O3h1vrrAQAAwGMxPNhsw/UBAACA+6ztIgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgHw2zm3FN8nsYhnRJStL3p4vzJP0mPxAAAAB4sJIu72d35bm8BrjxKj9m5Tpv/a/Sxrv5dsd6AAAA4LbpvTPKrfP4y0yvz+Ute5Zpdnau/o9dfu4nk5OD7ObJmHy9bM8uvnxc/cow+R+bAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAP+zAAQkAAACAoP+v2xEoAAAAAAAAAAAAAAAAAADASgEAAP//C6/ZOQ==") (fail_nth: 23) 19:20:08 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e033526000b12d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) 19:20:08 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000bc0)='}\x96/$:!-^(\x00', 0x0, 0x0) 19:20:08 executing program 3: io_submit(0x0, 0x1, &(0x7f0000002780)=[0x0]) io_setup(0xc3c, &(0x7f0000002880)) 19:20:08 executing program 1: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x440, &(0x7f0000000380)={[{@gid={'gid', 0x3d, 0xee01}}, {@uid}, {@force}, {@type={'type', 0x3d, "54c306e3"}}, {@barrier}, {@nls={'nls', 0x3d, 'cp1251'}}, {@nobarrier}, {@gid}, {@nodecompose}, {@nobarrier}, {@force}, {@nobarrier}, {@uid}, {@umask={'umask', 0x3d, 0x789}}]}, 0x1, 0x5ee, &(0x7f0000000680)="$eJzs3U9oHNcdB/DvrGXZ64KySewkLYWKGEwbU1urbWoXCnVLKTqEYuglV2GvY+G1EqRNUUJpt/+vPeaQQ3pwDzn1mtJDaHouFHr33dC7TlWZ2VlpbcmKFP/ZVfz5wNv33rx5b978PPO0O4vZAM+spTdzfJAiS+ff2Cjrd+90enfvdG6PyklOJGkkM8MsxWpSfJZcyTDlq+XGerjiYcd5/d4nH5774OPOsDZTp2r/xn79dtlzz0GdMp/kWJ0/gvvGu/bI4xXb8y4DdnYUOJi0rV0Gh+l+8PsWmFrF8O/mLq3kVJKT9fuA1KtD4+nO7vE71CoHAAAAR9Rzm9nMRuYmPQ8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Surf/y/q1BiV51OMfv9/tt6WunykfTrpCQAAAAAAAADAY/CNzWxmI3Oj+lZRfef/alU5Xb1+Je9mPd2s5UI2spx++llLO0lrbKDZjeV+f639sJ5bW1u/qnsu7tlz8emcLwAAAAAAAAB8Sf0mSzvf/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwDQokmPDrEqnR+VWGjNJTiaZLfcbJH8flY+yTyc9AQAAAHgKntvMZjYyV/xvWN8qqs/8L1Wf+0/m3aymn5X000s316tnAcNP/Y1/Dzq9u3c6t8u0e9wf/vdQ06hGzPDZw95HXqj2OLPdYyk/yc9yPvO5mrWs5OdZTj/dzOfHVWk5RVr104vWaJ57z/fKfbWrnzfXV6qZNHMjK9XcLuRa3k4v19OozqHaZ/8j/rqMTvGD2gFjdL3OyzP6U51Ph1YVkePbEVmoY19G4/n9I3HI6+TBI7XT2H4GdfoJxPxUnZex/sNUx3xx7Op7af9IJN/6zz+u3uyt3rp5Y/389JzSF/RgJDpjkXj54JEYHP1IzNbRGK6ih1stX636zmUlP83buZ5uLmUh7VzOQr6XxXTuu8LOHOBeaxzuXjv7zbrQTPLHOp8OZVyfH4vr+ErXqtrGt+xE6YXHvyLNfK0ulMf4bZ1Phwcj0R6LxIv7R+LPW+Xrem/11trN5XcOeLxzdV7etr+fqrW5vF5eKP+xqtr9V0fZ9uKebe2q7fR2W2NX25ntts+7U2fr93C7Rxq2vbxnW6dqe2Wsba93OQBMvVOvnZpt3mv+q/lR83fNm803Tv7oxOUTX5/N8X/O/O3YXxt/aXy/eC0f5ZeZm/RMAQAAAAAAAAAAAAAAAAAAAAAAAAAAAADgy2D9vfdvLfd63bUpLKQxFdNQUHhGCs3sbJn0ygQ8aRf7t9+5uP7e+99eub38Vvet7uri5UuXL3W+2/7OxRsrve7C8HXSswSehJ2//pOeCQAAAAAAAAAAAHBQT+P/FUz6HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICjbenNHB+kSHvhwkJZv3un0yvTqLyz50ySRpLiF0nxWXIlw5TW2HDFw47z+r1PPjz3wcednbFmRvs39ut3MIM6ZT7JsTp/XONde+Txiu0zLAN2dhQ4mLT/BwAA///IRBDJ") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="72797a3135cf2c3f3ce902d76d82a4c90000000000000000000000deb8cc70727486b8a90000ff6316d2f6fe2000000000400000003901000100d49f02fb634ff8cecd19f692bdc62760e81784a813e39785551764917eb498"], 0x81) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x8dc, 0x18) [ 604.089992][T13361] REISERFS (device loop4): Using rupasov hash to sort names [ 604.109800][T13361] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. 19:20:08 executing program 0: unlinkat(0xffffffffffffffff, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=[&(0x7f0000000080)='\x00', &(0x7f00000000c0)='}!U{\x00'], 0x0, 0x400) 19:20:08 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e034826000b12d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) [ 604.255888][T13370] loop1: detected capacity change from 0 to 1024 19:20:08 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) 19:20:08 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000b40)={0x2, &(0x7f0000000b00)=[{}, {0x12, 0x9, 0x9}]}) [ 604.598071][T13381] FAULT_INJECTION: forcing a failure. [ 604.598071][T13381] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 604.612106][T13381] CPU: 0 PID: 13381 Comm: syz-executor.4 Not tainted 6.2.0-rc5-next-20230127-syzkaller-08766-ge2f86c02fdc9 #0 [ 604.623807][T13381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 604.633899][T13381] Call Trace: [ 604.637202][T13381] [ 604.640158][T13381] dump_stack_lvl+0x136/0x150 [ 604.644879][T13381] should_fail_ex+0x4a3/0x5b0 [ 604.649627][T13381] prepare_alloc_pages+0x178/0x570 [ 604.654880][T13381] __alloc_pages+0x149/0x5c0 [ 604.659515][T13381] ? __alloc_pages_slowpath.constprop.0+0x23f0/0x23f0 [ 604.666426][T13381] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 604.672549][T13381] ? __lock_acquire+0xbe1/0x5df0 [ 604.677524][T13381] __folio_alloc+0x16/0x40 [ 604.681964][T13381] vma_alloc_folio+0x155/0x880 [ 604.686782][T13381] ? policy_nodemask+0x1c0/0x1c0 [ 604.691762][T13381] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 604.697761][T13381] ? lock_downgrade+0x690/0x690 [ 604.702639][T13381] ? print_usage_bug.part.0+0x660/0x660 [ 604.708382][T13381] __handle_mm_fault+0x184b/0x3e60 [ 604.713614][T13381] ? vm_iomap_memory+0x190/0x190 [ 604.718601][T13381] handle_mm_fault+0x1b6/0x850 [ 604.723395][T13381] do_user_addr_fault+0x475/0x1230 [ 604.728544][T13381] ? rcu_read_lock_sched_held+0x3e/0x70 [ 604.734116][T13381] exc_page_fault+0x98/0x170 [ 604.738726][T13381] asm_exc_page_fault+0x26/0x30 [ 604.743599][T13381] RIP: 0033:0x7f11b0e290c0 [ 604.748027][T13381] Code: e8 e5 fe ff ff 41 89 c7 85 c0 78 40 3d ff 00 00 00 7f 2f 49 8b 45 10 49 3b 45 08 0f 84 19 01 00 00 45 85 ff 74 0c 49 8b 55 00 <44> 88 3c 02 49 8b 45 10 48 83 c0 01 49 89 45 10 eb be 66 0f 1f 44 [ 604.767653][T13381] RSP: 002b:00007f11b1bff600 EFLAGS: 00010202 [ 604.773759][T13381] RAX: 0000000000213000 RBX: 00007f11b1bff660 RCX: 0000000000000000 [ 604.781776][T13381] RDX: 00007f11a75ff000 RSI: 0000000000000009 RDI: 00007f11b1bff700 [ 604.789766][T13381] RBP: 0000000000000041 R08: 0000000000000005 R09: 0000000000000014 [ 604.797745][T13381] R10: 0000000000000010 R11: 00007f11b1bff660 R12: 00007f11b1bff670 [ 604.805729][T13381] R13: 00007f11b1bff700 R14: 0000000000000001 R15: 0000000000000001 [ 604.813731][T13381] [ 604.819914][T13381] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 604.913539][T13381] loop4: detected capacity change from 0 to 8192 [ 604.946842][T13381] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 604.968969][T13381] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 604.985592][T13381] REISERFS (device loop4): using ordered data mode [ 604.995388][T13381] reiserfs: using flush barriers [ 605.014013][T13381] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 605.036593][T13381] REISERFS (device loop4): checking transaction log (loop4) [ 605.054932][T13381] REISERFS (device loop4): Using rupasov hash to sort names [ 605.062902][T13381] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. 19:20:10 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={0x0}, 0x1, 0x0, 0xf0ff7f}, 0x0) 19:20:10 executing program 1: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x440, &(0x7f0000000380)={[{@gid={'gid', 0x3d, 0xee01}}, {@uid}, {@force}, {@type={'type', 0x3d, "54c306e3"}}, {@barrier}, {@nls={'nls', 0x3d, 'cp1251'}}, {@nobarrier}, {@gid}, {@nodecompose}, {@nobarrier}, {@force}, {@nobarrier}, {@uid}, {@umask={'umask', 0x3d, 0x789}}]}, 0x1, 0x5ee, &(0x7f0000000680)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="72797a3135cf2c3f3ce902d76d82a4c90000000000000000000000deb8cc70727486b8a90000ff6316d2f6fe2000000000400000003901000100d49f02fb634ff8cecd19f692bdc62760e81784a813e39785551764917eb498"], 0x81) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x8dc, 0xf0) 19:20:10 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e034c26000b12d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) 19:20:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, 0x0, 0x0) 19:20:10 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x10, 0x44c}, 0x10}}, 0x0) 19:20:10 executing program 4: syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000001140)='./file0\x00', 0x4408, &(0x7f0000000140)={[{@balloc_notest4}, {@balloc_test4}, {@jqfmt_vfsold}, {@balloc_test4}, {@grpjquota, 0x3d}]}, 0x1, 0x1102, &(0x7f00000022c0)="$eJzs2LFqFEEcBvBv9g5MdzLpF0ELCwkJZ2eVIsK11jYiqUyVqyI2vouPI6nsQx7AImAprEyyl6SIBMzJEfj94Gbmvp3Z/045EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjypjXbXVJXSZekJH1/ujhP0q/yp98nXUreHS6WB8fzt8txasu6lDZsy1L3nm/VeZ3Xvfp6e/9FXZ58/vTh6OjweHxNSZ+zi/VvpNWe/O3h1vrrAQAAwGMxPNhsw/UBAACA+6ztIgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgHw2zm3FN8nsYhnRJStL3p4vzJP0mPxAAAAB4sJIu72d35bm8BrjxKj9m5Tpv/a/Sxrv5dsd6AAAA4LbpvTPKrfP4y0yvz+Ute5Zpdnau/o9dfu4nk5OD7ObJmHy9bM8uvnxc/cow+R+bAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAP+zAAQkAAACAoP+v2xEoAAAAAAAAAAAAAAAAAADASgEAAP//C6/ZOQ==") (fail_nth: 24) 19:20:10 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_ext={0x1c, 0x2, &(0x7f0000000440)=@raw=[@map_fd], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:20:11 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e036026000b12d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) [ 607.051895][T13385] FAULT_INJECTION: forcing a failure. [ 607.051895][T13385] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 607.062596][T13391] loop1: detected capacity change from 0 to 1024 [ 607.065675][T13385] CPU: 0 PID: 13385 Comm: syz-executor.4 Not tainted 6.2.0-rc5-next-20230127-syzkaller-08766-ge2f86c02fdc9 #0 [ 607.083946][T13385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 607.094035][T13385] Call Trace: [ 607.097341][T13385] 19:20:11 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e036826000b12d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) [ 607.100357][T13385] dump_stack_lvl+0x136/0x150 [ 607.105262][T13385] should_fail_ex+0x4a3/0x5b0 [ 607.109991][T13385] copyin+0x19/0x120 [ 607.113951][T13385] copy_page_from_iter_atomic+0x22b/0x1180 [ 607.119829][T13385] ? folio_flags.constprop.0+0x53/0x150 [ 607.125429][T13385] ? _copy_from_iter_flushcache+0xff0/0xff0 [ 607.131396][T13385] ? shmem_write_begin+0x162/0x380 [ 607.136559][T13385] ? shmem_file_read_iter+0xa40/0xa40 [ 607.141982][T13385] ? lock_acquire+0x32/0xc0 [ 607.146551][T13385] generic_perform_write+0x2ca/0x570 [ 607.151978][T13385] ? folio_add_wait_queue+0x1c0/0x1c0 [ 607.157417][T13385] ? new_inode+0x280/0x280 [ 607.161893][T13385] ? generic_write_checks+0x2c0/0x400 [ 607.167328][T13385] __generic_file_write_iter+0x2ae/0x500 [ 607.173026][T13385] generic_file_write_iter+0xe3/0x350 [ 607.178459][T13385] vfs_write+0x9ed/0xe10 [ 607.182757][T13385] ? kernel_write+0x670/0x670 [ 607.187487][T13385] ? receive_fd+0x110/0x110 [ 607.192086][T13385] ? __fget_files+0x26a/0x480 [ 607.196850][T13385] ? __fget_light+0xe5/0x270 19:20:11 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e036c26000b12d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) [ 607.201507][T13385] ksys_write+0x12b/0x250 [ 607.205880][T13385] ? __ia32_sys_read+0xb0/0xb0 [ 607.210689][T13385] ? syscall_enter_from_user_mode+0x26/0xb0 [ 607.216636][T13385] do_syscall_64+0x39/0xb0 [ 607.221127][T13385] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 607.227071][T13385] RIP: 0033:0x7f11b0e3de4f [ 607.231525][T13385] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 19:20:11 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x10, 0x3ed}, 0x10}}, 0x0) 19:20:11 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e037426000b12d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) [ 607.251180][T13385] RSP: 002b:00007f11b1bfff10 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 607.259637][T13385] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f11b0e3de4f [ 607.267650][T13385] RDX: 0000000000400000 RSI: 00007f11a75ff000 RDI: 0000000000000004 [ 607.275670][T13385] RBP: 00007f11a75ff000 R08: 0000000000000000 R09: 00000000000010fc [ 607.283688][T13385] R10: 0000000000400000 R11: 0000000000000293 R12: 0000000000000000 [ 607.291701][T13385] R13: 00007f11b1bfffdc R14: 00007f11b1bfffe0 R15: 00000000200022c2 [ 607.299738][T13385] 19:20:11 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000380), 0x8) 19:20:11 executing program 1: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x440, &(0x7f0000000380)={[{@gid={'gid', 0x3d, 0xee01}}, {@uid}, {@force}, {@type={'type', 0x3d, "54c306e3"}}, {@barrier}, {@nls={'nls', 0x3d, 'cp1251'}}, {@nobarrier}, {@gid}, {@nodecompose}, {@nobarrier}, {@force}, {@nobarrier}, {@uid}, {@umask={'umask', 0x3d, 0x789}}]}, 0x1, 0x5ee, &(0x7f0000000680)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="72797a3135cf2c3f3ce902d76d82a4c90000000000000000000000deb8cc70727486b8a90000ff6316d2f6fe2000000000400000003901000100d49f02fb634ff8cecd19f692bdc62760e81784a813e39785551764917eb498"], 0x81) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x8dc, 0x1de) 19:20:11 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x10}, 0x6}}, 0x0) 19:20:11 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e037a26000b12d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) 19:20:11 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x5f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x0, "68f9"}, {0x5, 0x24, 0x0, 0x7f}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xfff, 0x9, 0x3}, [@dmm={0x7, 0x24, 0x14, 0x4, 0x8}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x2, 0x5}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x3, 0x80, 0x80}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x2, 0x6, 0x9}}}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x1, 0x0, 0x1f}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x5, [{0x2, &(0x7f0000000100)=@string={0x2}}, {0x2, &(0x7f00000001c0)=@string={0x2}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x413}}, {0x0, 0x0}, {0x0, 0x0}]}) [ 607.557825][T13385] loop4: detected capacity change from 0 to 8192 [ 607.564268][T13419] loop1: detected capacity change from 0 to 1024 [ 607.567334][T13385] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 607.578963][ T5233] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 607.584245][T13385] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 607.614755][T13385] REISERFS (device loop4): using ordered data mode [ 607.625536][T13385] reiserfs: using flush barriers [ 607.643933][T13385] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 607.660840][T13385] REISERFS (device loop4): checking transaction log (loop4) [ 607.677568][T13385] REISERFS (device loop4): Using rupasov hash to sort names [ 607.695590][T13385] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. 19:20:11 executing program 4: syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000001140)='./file0\x00', 0x4408, &(0x7f0000000140)={[{@balloc_notest4}, {@balloc_test4}, {@jqfmt_vfsold}, {@balloc_test4}, {@grpjquota, 0x3d}]}, 0x1, 0x1102, &(0x7f00000022c0)="$eJzs2LFqFEEcBvBv9g5MdzLpF0ELCwkJZ2eVIsK11jYiqUyVqyI2vouPI6nsQx7AImAprEyyl6SIBMzJEfj94Gbmvp3Z/045EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjypjXbXVJXSZekJH1/ujhP0q/yp98nXUreHS6WB8fzt8txasu6lDZsy1L3nm/VeZ3Xvfp6e/9FXZ58/vTh6OjweHxNSZ+zi/VvpNWe/O3h1vrrAQAAwGMxPNhsw/UBAACA+6ztIgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgHw2zm3FN8nsYhnRJStL3p4vzJP0mPxAAAAB4sJIu72d35bm8BrjxKj9m5Tpv/a/Sxrv5dsd6AAAA4LbpvTPKrfP4y0yvz+Ute5Zpdnau/o9dfu4nk5OD7ObJmHy9bM8uvnxc/cow+R+bAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAP+zAAQkAAACAoP+v2xEoAAAAAAAAAAAAAAAAAADASgEAAP//C6/ZOQ==") (fail_nth: 25) 19:20:11 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000006c0)='children\x00') fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000700)='}!U{\x00', 0x0, 0xffffffffffffffff) 19:20:11 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e030035000b12d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) 19:20:11 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) getpeername$packet(r0, 0x0, 0x0) 19:20:11 executing program 1: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x440, &(0x7f0000000380)={[{@gid={'gid', 0x3d, 0xee01}}, {@uid}, {@force}, {@type={'type', 0x3d, "54c306e3"}}, {@barrier}, {@nls={'nls', 0x3d, 'cp1251'}}, {@nobarrier}, {@gid}, {@nodecompose}, {@nobarrier}, {@force}, {@nobarrier}, {@uid}, {@umask={'umask', 0x3d, 0x789}}]}, 0x1, 0x5ee, &(0x7f0000000680)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="72797a3135cf2c3f3ce902d76d82a4c90000000000000000000000deb8cc70727486b8a90000ff6316d2f6fe2000000000400000003901000100d49f02fb634ff8cecd19f692bdc62760e81784a813e39785551764917eb498"], 0x81) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x8dc, 0x300) [ 607.757879][ T5186] usb 1-1: new high-speed USB device number 9 using dummy_hcd 19:20:11 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f00000000c0)=0x5, 0x4) 19:20:11 executing program 5: openat$bsg(0xffffffffffffff9c, &(0x7f0000001e80), 0x40400, 0x0) 19:20:11 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e03003f000b12d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) [ 607.878584][T13426] loop1: detected capacity change from 0 to 1024 19:20:11 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002ac0), 0x0, 0x0) write$ppp(r0, 0x0, 0x0) 19:20:11 executing program 1: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x440, &(0x7f0000000380)={[{@gid={'gid', 0x3d, 0xee01}}, {@uid}, {@force}, {@type={'type', 0x3d, "54c306e3"}}, {@barrier}, {@nls={'nls', 0x3d, 'cp1251'}}, {@nobarrier}, {@gid}, {@nodecompose}, {@nobarrier}, {@force}, {@nobarrier}, {@uid}, {@umask={'umask', 0x3d, 0x789}}]}, 0x1, 0x5ee, &(0x7f0000000680)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="72797a3135cf2c3f3ce902d76d82a4c90000000000000000000000deb8cc70727486b8a90000ff6316d2f6fe2000000000400000003901000100d49f02fb634ff8cecd19f692bdc62760e81784a813e39785551764917eb498"], 0x81) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x8dc, 0x408) 19:20:11 executing program 5: openat$pfkey(0xffffffffffffff9c, &(0x7f0000001440), 0x1, 0x0) [ 608.107466][T13440] loop1: detected capacity change from 0 to 1024 [ 608.136325][ T5186] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 608.161649][ T5186] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1023 [ 608.171133][T13442] FAULT_INJECTION: forcing a failure. [ 608.171133][T13442] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 608.204211][ T5186] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 608.207544][T13442] CPU: 1 PID: 13442 Comm: syz-executor.4 Not tainted 6.2.0-rc5-next-20230127-syzkaller-08766-ge2f86c02fdc9 #0 [ 608.228752][T13442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 608.238843][T13442] Call Trace: [ 608.242333][T13442] [ 608.245300][T13442] dump_stack_lvl+0x136/0x150 [ 608.250026][T13442] should_fail_ex+0x4a3/0x5b0 [ 608.254759][T13442] prepare_alloc_pages+0x178/0x570 [ 608.259919][T13442] ? print_usage_bug.part.0+0x660/0x660 [ 608.265527][T13442] __alloc_pages+0x149/0x5c0 [ 608.270198][T13442] ? __alloc_pages_slowpath.constprop.0+0x23f0/0x23f0 [ 608.277026][T13442] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 608.283075][T13442] __folio_alloc+0x16/0x40 [ 608.287537][T13442] vma_alloc_folio+0x155/0x880 [ 608.292353][T13442] ? policy_nodemask+0x1c0/0x1c0 [ 608.297329][T13442] ? find_held_lock+0x2d/0x110 [ 608.302142][T13442] shmem_alloc_folio+0xff/0x1c0 [ 608.307043][T13442] ? shmem_link+0x370/0x370 [ 608.311866][T13442] ? percpu_counter_add_batch+0x170/0x1e0 [ 608.317623][T13442] ? __vm_enough_memory+0x188/0x3f0 [ 608.322846][T13442] shmem_alloc_and_acct_folio+0x15e/0x5d0 [ 608.328596][T13442] shmem_get_folio_gfp+0xacd/0x1950 [ 608.333826][T13442] ? shmem_alloc_and_acct_folio+0x5d0/0x5d0 [ 608.339773][T13442] shmem_write_begin+0x14a/0x380 [ 608.344731][T13442] ? shmem_file_read_iter+0xa40/0xa40 [ 608.350128][T13442] generic_perform_write+0x256/0x570 [ 608.355459][T13442] ? folio_add_wait_queue+0x1c0/0x1c0 [ 608.360860][T13442] ? new_inode+0x280/0x280 [ 608.365319][T13442] ? generic_write_checks+0x2c0/0x400 [ 608.370717][T13442] __generic_file_write_iter+0x2ae/0x500 [ 608.376421][T13442] generic_file_write_iter+0xe3/0x350 [ 608.381814][T13442] vfs_write+0x9ed/0xe10 [ 608.386071][T13442] ? kernel_write+0x670/0x670 [ 608.390757][T13442] ? receive_fd+0x110/0x110 [ 608.395388][T13442] ? __fget_files+0x26a/0x480 [ 608.400102][T13442] ? __fget_light+0xe5/0x270 [ 608.404726][T13442] ksys_write+0x12b/0x250 [ 608.409069][T13442] ? __ia32_sys_read+0xb0/0xb0 [ 608.413847][T13442] ? syscall_enter_from_user_mode+0x26/0xb0 [ 608.419765][T13442] do_syscall_64+0x39/0xb0 [ 608.424214][T13442] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 608.430125][T13442] RIP: 0033:0x7f11b0e3de4f [ 608.434555][T13442] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 608.454190][T13442] RSP: 002b:00007f11b1bfff10 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 608.462621][T13442] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f11b0e3de4f [ 608.470615][T13442] RDX: 0000000000400000 RSI: 00007f11a75ff000 RDI: 0000000000000004 [ 608.478608][T13442] RBP: 00007f11a75ff000 R08: 0000000000000000 R09: 00000000000010fc [ 608.486594][T13442] R10: 0000000000400000 R11: 0000000000000293 R12: 0000000000000000 [ 608.494575][T13442] R13: 00007f11b1bfffdc R14: 00007f11b1bfffe0 R15: 00000000200022c2 [ 608.502584][T13442] [ 608.505850][ T5186] usb 1-1: language id specifier not provided by device, defaulting to English [ 608.846892][ T5186] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 608.856413][ T5186] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.864660][ T5186] usb 1-1: Product: Г [ 608.896409][T13417] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 608.908894][T13417] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 608.938311][ T5186] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 609.141405][ T5186] usb 1-1: USB disconnect, device number 9 19:20:13 executing program 0: syz_clone3(&(0x7f0000000cc0)={0x10806400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 19:20:13 executing program 5: fsopen(&(0x7f00000016c0)='msdos\x00', 0x0) 19:20:13 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e030040000b12d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) 19:20:13 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, 0x0) 19:20:13 executing program 1: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x440, &(0x7f0000000380)={[{@gid={'gid', 0x3d, 0xee01}}, {@uid}, {@force}, {@type={'type', 0x3d, "54c306e3"}}, {@barrier}, {@nls={'nls', 0x3d, 'cp1251'}}, {@nobarrier}, {@gid}, {@nodecompose}, {@nobarrier}, {@force}, {@nobarrier}, {@uid}, {@umask={'umask', 0x3d, 0x789}}]}, 0x1, 0x5ee, &(0x7f0000000680)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="72797a3135cf2c3f3ce902d76d82a4c90000000000000000000000deb8cc70727486b8a90000ff6316d2f6fe2000000000400000003901000100d49f02fb634ff8cecd19f692bdc62760e81784a813e39785551764917eb498"], 0x81) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x8dc, 0x500) 19:20:13 executing program 4: syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000001140)='./file0\x00', 0x4408, &(0x7f0000000140)={[{@balloc_notest4}, {@balloc_test4}, {@jqfmt_vfsold}, {@balloc_test4}, {@grpjquota, 0x3d}]}, 0x1, 0x1102, &(0x7f00000022c0)="$eJzs2LFqFEEcBvBv9g5MdzLpF0ELCwkJZ2eVIsK11jYiqUyVqyI2vouPI6nsQx7AImAprEyyl6SIBMzJEfj94Gbmvp3Z/045EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjypjXbXVJXSZekJH1/ujhP0q/yp98nXUreHS6WB8fzt8txasu6lDZsy1L3nm/VeZ3Xvfp6e/9FXZ58/vTh6OjweHxNSZ+zi/VvpNWe/O3h1vrrAQAAwGMxPNhsw/UBAACA+6ztIgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgHw2zm3FN8nsYhnRJStL3p4vzJP0mPxAAAAB4sJIu72d35bm8BrjxKj9m5Tpv/a/Sxrv5dsd6AAAA4LbpvTPKrfP4y0yvz+Ute5Zpdnau/o9dfu4nk5OD7ObJmHy9bM8uvnxc/cow+R+bAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAP+zAAQkAAACAoP+v2xEoAAAAAAAAAAAAAAAAAADASgEAAP//C6/ZOQ==") (fail_nth: 26) 19:20:13 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) sendmmsg$unix(r0, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="18"], 0x18}}], 0x1, 0x0) 19:20:13 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x5, &(0x7f0000002780)=@framed={{}, [@initr0={0x61, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f00000002c0)='GPL\x00', 0x4, 0xc0, &(0x7f0000000300)=""/192, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:20:13 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e03000f000b12d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) 19:20:13 executing program 3: openat2(0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x61c401}, 0x18) [ 609.767360][T13449] loop1: detected capacity change from 0 to 1024 19:20:13 executing program 5: add_key(&(0x7f0000001240)='ceph\x00', &(0x7f0000001280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) 19:20:13 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e030035000b12d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) 19:20:13 executing program 0: r0 = socket(0xa, 0x5, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) 19:20:13 executing program 3: syz_emit_ethernet(0x46, &(0x7f0000001300)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "5ca5cc", 0x2, 0x2b, 0x0, @private1, @mcast1={0x0}, {[], {0x3a00, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) 19:20:13 executing program 1: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x440, &(0x7f0000000380)={[{@gid={'gid', 0x3d, 0xee01}}, {@uid}, {@force}, {@type={'type', 0x3d, "54c306e3"}}, {@barrier}, {@nls={'nls', 0x3d, 'cp1251'}}, {@nobarrier}, {@gid}, {@nodecompose}, {@nobarrier}, {@force}, {@nobarrier}, {@uid}, {@umask={'umask', 0x3d, 0x789}}]}, 0x1, 0x5ee, &(0x7f0000000680)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="72797a3135cf2c3f3ce902d76d82a4c90000000000000000000000deb8cc70727486b8a90000ff6316d2f6fe2000000000400000003901000100d49f02fb634ff8cecd19f692bdc62760e81784a813e39785551764917eb498"], 0x81) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x8dc, 0x600) 19:20:13 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000680)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x3, 0x3, &(0x7f0000002780)=@framed, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:20:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x321, 0x0, 0x0, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x1c}}, 0x0) [ 610.028571][T13452] loop4: detected capacity change from 0 to 8192 [ 610.113867][T13471] loop1: detected capacity change from 0 to 1024 [ 610.123107][T13452] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 610.128908][ T5233] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 610.155894][T13452] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 610.165801][T13452] REISERFS (device loop4): using ordered data mode [ 610.176226][T13452] reiserfs: using flush barriers [ 610.297172][T13452] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 19:20:14 executing program 4: syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000001140)='./file0\x00', 0x4408, &(0x7f0000000140)={[{@balloc_notest4}, {@balloc_test4}, {@jqfmt_vfsold}, {@balloc_test4}, {@grpjquota, 0x3d}]}, 0x1, 0x1102, &(0x7f00000022c0)="$eJzs2LFqFEEcBvBv9g5MdzLpF0ELCwkJZ2eVIsK11jYiqUyVqyI2vouPI6nsQx7AImAprEyyl6SIBMzJEfj94Gbmvp3Z/045EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjypjXbXVJXSZekJH1/ujhP0q/yp98nXUreHS6WB8fzt8txasu6lDZsy1L3nm/VeZ3Xvfp6e/9FXZ58/vTh6OjweHxNSZ+zi/VvpNWe/O3h1vrrAQAAwGMxPNhsw/UBAACA+6ztIgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgHw2zm3FN8nsYhnRJStL3p4vzJP0mPxAAAAB4sJIu72d35bm8BrjxKj9m5Tpv/a/Sxrv5dsd6AAAA4LbpvTPKrfP4y0yvz+Ute5Zpdnau/o9dfu4nk5OD7ObJmHy9bM8uvnxc/cow+R+bAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAP+zAAQkAAACAoP+v2xEoAAAAAAAAAAAAAAAAAADASgEAAP//C6/ZOQ==") (fail_nth: 27) 19:20:14 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e030026000312d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) 19:20:14 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x2, &(0x7f00000000c0)=[{}, {0x5}]}) 19:20:14 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x1600bd7e, &(0x7f0000000080)=@raw={'raw\x00', 0x9, 0x3, 0x1e0, 0xe0, 0xffffffff, 0xffffffff, 0xe0, 0xffffffff, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x240) 19:20:14 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000600)={'sit0\x00', &(0x7f00000005c0)={@private2, @private, 0x18, 0xb}}) 19:20:14 executing program 1: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x440, &(0x7f0000000380)={[{@gid={'gid', 0x3d, 0xee01}}, {@uid}, {@force}, {@type={'type', 0x3d, "54c306e3"}}, {@barrier}, {@nls={'nls', 0x3d, 'cp1251'}}, {@nobarrier}, {@gid}, {@nodecompose}, {@nobarrier}, {@force}, {@nobarrier}, {@uid}, {@umask={'umask', 0x3d, 0x789}}]}, 0x1, 0x5ee, &(0x7f0000000680)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="72797a3135cf2c3f3ce902d76d82a4c90000000000000000000000deb8cc70727486b8a90000ff6316d2f6fe2000000000400000003901000100d49f02fb634ff8cecd19f692bdc62760e81784a813e39785551764917eb498"], 0x81) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x8dc, 0x700) [ 610.339218][T13452] REISERFS (device loop4): checking transaction log (loop4) [ 610.350188][T13452] REISERFS (device loop4): Using rupasov hash to sort names [ 610.362592][T13452] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. 19:20:14 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) sendmmsg$unix(r0, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x0) 19:20:14 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, 0x0, 0x0, 0x0) 19:20:14 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x125}, 0x14}}, 0x0) [ 610.449948][T13486] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 610.486146][T13486] netlink: 181912 bytes leftover after parsing attributes in process `syz-executor.2'. 19:20:14 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e030026000512d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) 19:20:14 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x11, 0x4, 0x4, 0x3ff}, 0x48) 19:20:14 executing program 0: openat$binder_debug(0xffffffffffffff9c, 0x0, 0xebffffff, 0x0) [ 610.588330][T13490] loop1: detected capacity change from 0 to 1024 [ 610.688787][T13499] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 610.740301][T13499] netlink: 181912 bytes leftover after parsing attributes in process `syz-executor.2'. [ 610.890553][T13504] FAULT_INJECTION: forcing a failure. [ 610.890553][T13504] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 610.903894][T13504] CPU: 1 PID: 13504 Comm: syz-executor.4 Not tainted 6.2.0-rc5-next-20230127-syzkaller-08766-ge2f86c02fdc9 #0 [ 610.915575][T13504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 610.925656][T13504] Call Trace: [ 610.928947][T13504] [ 610.931891][T13504] dump_stack_lvl+0x136/0x150 [ 610.936611][T13504] should_fail_ex+0x4a3/0x5b0 [ 610.941312][T13504] copyin+0x19/0x120 [ 610.945231][T13504] copy_page_from_iter_atomic+0x22b/0x1180 [ 610.951070][T13504] ? folio_flags.constprop.0+0x53/0x150 [ 610.956639][T13504] ? _copy_from_iter_flushcache+0xff0/0xff0 [ 610.962558][T13504] ? shmem_write_begin+0x162/0x380 [ 610.967780][T13504] ? shmem_file_read_iter+0xa40/0xa40 [ 610.973181][T13504] generic_perform_write+0x2ca/0x570 [ 610.978511][T13504] ? folio_add_wait_queue+0x1c0/0x1c0 [ 610.983918][T13504] ? new_inode+0x280/0x280 [ 610.988362][T13504] ? generic_write_checks+0x2c0/0x400 [ 610.993766][T13504] __generic_file_write_iter+0x2ae/0x500 [ 610.999427][T13504] generic_file_write_iter+0xe3/0x350 [ 611.004844][T13504] vfs_write+0x9ed/0xe10 [ 611.009127][T13504] ? kernel_write+0x670/0x670 [ 611.013813][T13504] ? receive_fd+0x110/0x110 [ 611.018351][T13504] ? __fget_files+0x26a/0x480 [ 611.023067][T13504] ? __fget_light+0xe5/0x270 [ 611.027687][T13504] ksys_write+0x12b/0x250 [ 611.032046][T13504] ? __ia32_sys_read+0xb0/0xb0 [ 611.036824][T13504] ? syscall_enter_from_user_mode+0x26/0xb0 [ 611.042745][T13504] do_syscall_64+0x39/0xb0 [ 611.047207][T13504] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 611.053133][T13504] RIP: 0033:0x7f11b0e3de4f [ 611.057564][T13504] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 611.077196][T13504] RSP: 002b:00007f11b1bfff10 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 611.085630][T13504] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f11b0e3de4f [ 611.093611][T13504] RDX: 0000000000400000 RSI: 00007f11a75ff000 RDI: 0000000000000004 [ 611.101590][T13504] RBP: 00007f11a75ff000 R08: 0000000000000000 R09: 00000000000010fc [ 611.109574][T13504] R10: 0000000000400000 R11: 0000000000000293 R12: 0000000000000000 [ 611.117597][T13504] R13: 00007f11b1bfffdc R14: 00007f11b1bfffe0 R15: 00000000200022c2 [ 611.125619][T13504] [ 611.174749][T13504] loop4: detected capacity change from 0 to 8192 [ 611.184573][T13504] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 611.197820][T13504] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 611.207821][T13504] REISERFS (device loop4): using ordered data mode [ 611.214423][T13504] reiserfs: using flush barriers 19:20:15 executing program 4: syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000001140)='./file0\x00', 0x4408, &(0x7f0000000140)={[{@balloc_notest4}, {@balloc_test4}, {@jqfmt_vfsold}, {@balloc_test4}, {@grpjquota, 0x3d}]}, 0x1, 0x1102, &(0x7f00000022c0)="$eJzs2LFqFEEcBvBv9g5MdzLpF0ELCwkJZ2eVIsK11jYiqUyVqyI2vouPI6nsQx7AImAprEyyl6SIBMzJEfj94Gbmvp3Z/045EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjypjXbXVJXSZekJH1/ujhP0q/yp98nXUreHS6WB8fzt8txasu6lDZsy1L3nm/VeZ3Xvfp6e/9FXZ58/vTh6OjweHxNSZ+zi/VvpNWe/O3h1vrrAQAAwGMxPNhsw/UBAACA+6ztIgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgHw2zm3FN8nsYhnRJStL3p4vzJP0mPxAAAAB4sJIu72d35bm8BrjxKj9m5Tpv/a/Sxrv5dsd6AAAA4LbpvTPKrfP4y0yvz+Ute5Zpdnau/o9dfu4nk5OD7ObJmHy9bM8uvnxc/cow+R+bAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAP+zAAQkAAACAoP+v2xEoAAAAAAAAAAAAAAAAAADASgEAAP//C6/ZOQ==") (fail_nth: 28) 19:20:15 executing program 3: [ 611.223869][T13504] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 611.240823][T13504] REISERFS (device loop4): checking transaction log (loop4) [ 611.251665][T13504] REISERFS (device loop4): Using rupasov hash to sort names [ 611.259863][T13504] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. syz_mount_image$f2fs(&(0x7f0000010600), &(0x7f0000010640)='./file0\x00', 0x1000000, &(0x7f0000000280)=ANY=[@ANYBLOB="6e6f71756f74612c66617374626f6f742c005b05f0ed8bc9abab72e1a9abe6e597ba06e9f35e97dd6ade65738998426abe26ae3031ab936ba503c4a988c4c5506c97c4c3c855238b59ff597ac8d803dea80919a337a3bf1f668de625741168c5fea088494fb6064fd822258e706de029fca2c4d9a79f353fbaf7845386d6a08f714bc8d6d77c7fb72e27d854561bf9f1bfe45153976d06"], 0x1, 0x105ec, &(0x7f0000010680)="$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") r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80001d00c0d0) 19:20:15 executing program 1: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x440, &(0x7f0000000380)={[{@gid={'gid', 0x3d, 0xee01}}, {@uid}, {@force}, {@type={'type', 0x3d, "54c306e3"}}, {@barrier}, {@nls={'nls', 0x3d, 'cp1251'}}, {@nobarrier}, {@gid}, {@nodecompose}, {@nobarrier}, {@force}, {@nobarrier}, {@uid}, {@umask={'umask', 0x3d, 0x789}}]}, 0x1, 0x5ee, &(0x7f0000000680)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="72797a3135cf2c3f3ce902d76d82a4c90000000000000000000000deb8cc70727486b8a90000ff6316d2f6fe2000000000400000003901000100d49f02fb634ff8cecd19f692bdc62760e81784a813e39785551764917eb498"], 0x81) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x8dc, 0x804) 19:20:15 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000140)="e9", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) 19:20:15 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x12, 0x0, 0x0) 19:20:15 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e030026000612d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) 19:20:15 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e030026000712d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) 19:20:15 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)) [ 611.394112][T13516] loop1: detected capacity change from 0 to 1024 19:20:15 executing program 5: r0 = socket(0x11, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @empty}}}}) [ 611.473426][T13520] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 611.506842][T13520] netlink: 181912 bytes leftover after parsing attributes in process `syz-executor.2'. 19:20:15 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e030026000912d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) 19:20:15 executing program 1: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x440, &(0x7f0000000380)={[{@gid={'gid', 0x3d, 0xee01}}, {@uid}, {@force}, {@type={'type', 0x3d, "54c306e3"}}, {@barrier}, {@nls={'nls', 0x3d, 'cp1251'}}, {@nobarrier}, {@gid}, {@nodecompose}, {@nobarrier}, {@force}, {@nobarrier}, {@uid}, {@umask={'umask', 0x3d, 0x789}}]}, 0x1, 0x5ee, &(0x7f0000000680)="$eJzs3U9oHNcdB/DvrGXZ64KySewkLYWKGEwbU1urbWoXCnVLKTqEYuglV2GvY+G1EqRNUUJpt/+vPeaQQ3pwDzn1mtJDaHouFHr33dC7TlWZ2VlpbcmKFP/ZVfz5wNv33rx5b978PPO0O4vZAM+spTdzfJAiS+ff2Cjrd+90enfvdG6PyklOJGkkM8MsxWpSfJZcyTDlq+XGerjiYcd5/d4nH5774OPOsDZTp2r/xn79dtlzz0GdMp/kWJ0/gvvGu/bI4xXb8y4DdnYUOJi0rV0Gh+l+8PsWmFrF8O/mLq3kVJKT9fuA1KtD4+nO7vE71CoHAAAAR9Rzm9nMRuYmPQ8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Surf/y/q1BiV51OMfv9/tt6WunykfTrpCQAAAAAAAADAY/CNzWxmI3Oj+lZRfef/alU5Xb1+Je9mPd2s5UI2spx++llLO0lrbKDZjeV+f639sJ5bW1u/qnsu7tlz8emcLwAAAAAAAAB8Sf0mSzvf/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwDQokmPDrEqnR+VWGjNJTiaZLfcbJH8flY+yTyc9AQAAAHgKntvMZjYyV/xvWN8qqs/8L1Wf+0/m3aymn5X000s316tnAcNP/Y1/Dzq9u3c6t8u0e9wf/vdQ06hGzPDZw95HXqj2OLPdYyk/yc9yPvO5mrWs5OdZTj/dzOfHVWk5RVr104vWaJ57z/fKfbWrnzfXV6qZNHMjK9XcLuRa3k4v19OozqHaZ/8j/rqMTvGD2gFjdL3OyzP6U51Ph1YVkePbEVmoY19G4/n9I3HI6+TBI7XT2H4GdfoJxPxUnZex/sNUx3xx7Op7af9IJN/6zz+u3uyt3rp5Y/389JzSF/RgJDpjkXj54JEYHP1IzNbRGK6ih1stX636zmUlP83buZ5uLmUh7VzOQr6XxXTuu8LOHOBeaxzuXjv7zbrQTPLHOp8OZVyfH4vr+ErXqtrGt+xE6YXHvyLNfK0ulMf4bZ1Phwcj0R6LxIv7R+LPW+Xrem/11trN5XcOeLxzdV7etr+fqrW5vF5eKP+xqtr9V0fZ9uKebe2q7fR2W2NX25ntts+7U2fr93C7Rxq2vbxnW6dqe2Wsba93OQBMvVOvnZpt3mv+q/lR83fNm803Tv7oxOUTX5/N8X/O/O3YXxt/aXy/eC0f5ZeZm/RMAQAAAAAAAAAAAAAAAAAAAAAAAAAAAADgy2D9vfdvLfd63bUpLKQxFdNQUHhGCs3sbJn0ygQ8aRf7t9+5uP7e+99eub38Vvet7uri5UuXL3W+2/7OxRsrve7C8HXSswSehJ2//pOeCQAAAAAAAAAAAHBQT+P/FUz6HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICjbenNHB+kSHvhwkJZv3un0yvTqLyz50ySRpLiF0nxWXIlw5TW2HDFw47z+r1PPjz3wcednbFmRvs39ut3MIM6ZT7JsTp/XONde+Txiu0zLAN2dhQ4mLT/BwAA///IRBDJ") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="72797a3135cf2c3f3ce902d76d82a4c90000000000000000000000deb8cc70727486b8a90000ff6316d2f6fe2000000000400000003901000100d49f02fb634ff8cecd19f692bdc62760e81784a813e39785551764917eb498"], 0x81) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x8dc, 0x893) 19:20:15 executing program 5: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000002780)=@framed, &(0x7f00000002c0)='GPL\x00', 0x4, 0xc0, &(0x7f0000000300)=""/192, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x10) [ 611.666622][T13524] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 611.707860][T13524] netlink: 181912 bytes leftover after parsing attributes in process `syz-executor.2'. [ 611.773888][T13529] loop1: detected capacity change from 0 to 1024 [ 611.784207][ T5233] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 611.926559][T13530] FAULT_INJECTION: forcing a failure. [ 611.926559][T13530] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 611.953814][T13530] CPU: 1 PID: 13530 Comm: syz-executor.4 Not tainted 6.2.0-rc5-next-20230127-syzkaller-08766-ge2f86c02fdc9 #0 [ 611.965590][T13530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 611.975684][T13530] Call Trace: [ 611.978989][T13530] [ 611.981940][T13530] dump_stack_lvl+0x136/0x150 [ 611.986749][T13530] should_fail_ex+0x4a3/0x5b0 [ 611.991472][T13530] prepare_alloc_pages+0x178/0x570 [ 611.996622][T13530] ? print_usage_bug.part.0+0x660/0x660 [ 612.002211][T13530] __alloc_pages+0x149/0x5c0 [ 612.006839][T13530] ? __alloc_pages_slowpath.constprop.0+0x23f0/0x23f0 [ 612.013666][T13530] __folio_alloc+0x16/0x40 [ 612.018121][T13530] vma_alloc_folio+0x155/0x880 [ 612.022959][T13530] ? policy_nodemask+0x1c0/0x1c0 [ 612.027992][T13530] ? find_held_lock+0x2d/0x110 [ 612.032799][T13530] shmem_alloc_folio+0xff/0x1c0 [ 612.037786][T13530] ? shmem_link+0x370/0x370 [ 612.042372][T13530] ? percpu_counter_add_batch+0x170/0x1e0 [ 612.048136][T13530] ? __vm_enough_memory+0x188/0x3f0 [ 612.053374][T13530] shmem_alloc_and_acct_folio+0x15e/0x5d0 [ 612.059134][T13530] shmem_get_folio_gfp+0xacd/0x1950 [ 612.064386][T13530] ? shmem_alloc_and_acct_folio+0x5d0/0x5d0 [ 612.070359][T13530] shmem_write_begin+0x14a/0x380 [ 612.075438][T13530] ? shmem_file_read_iter+0xa40/0xa40 [ 612.080877][T13530] generic_perform_write+0x256/0x570 [ 612.086243][T13530] ? folio_add_wait_queue+0x1c0/0x1c0 [ 612.091681][T13530] ? new_inode+0x280/0x280 [ 612.096155][T13530] ? generic_write_checks+0x2c0/0x400 [ 612.101607][T13530] __generic_file_write_iter+0x2ae/0x500 [ 612.107290][T13530] generic_file_write_iter+0xe3/0x350 [ 612.112712][T13530] vfs_write+0x9ed/0xe10 [ 612.117002][T13530] ? kernel_write+0x670/0x670 [ 612.121801][T13530] ? receive_fd+0x110/0x110 [ 612.126399][T13530] ? __fget_files+0x26a/0x480 [ 612.131135][T13530] ? __fget_light+0xe5/0x270 [ 612.135777][T13530] ksys_write+0x12b/0x250 [ 612.140142][T13530] ? __ia32_sys_read+0xb0/0xb0 [ 612.144944][T13530] ? syscall_enter_from_user_mode+0x26/0xb0 [ 612.150887][T13530] do_syscall_64+0x39/0xb0 [ 612.155364][T13530] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 612.161299][T13530] RIP: 0033:0x7f11b0e3de4f [ 612.165746][T13530] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 612.185399][T13530] RSP: 002b:00007f11b1bfff10 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 612.193855][T13530] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f11b0e3de4f [ 612.201875][T13530] RDX: 0000000000400000 RSI: 00007f11a75ff000 RDI: 0000000000000004 [ 612.209884][T13530] RBP: 00007f11a75ff000 R08: 0000000000000000 R09: 00000000000010fc [ 612.217889][T13530] R10: 0000000000400000 R11: 0000000000000293 R12: 0000000000000000 19:20:16 executing program 4: syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000001140)='./file0\x00', 0x4408, &(0x7f0000000140)={[{@balloc_notest4}, {@balloc_test4}, {@jqfmt_vfsold}, {@balloc_test4}, {@grpjquota, 0x3d}]}, 0x1, 0x1102, &(0x7f00000022c0)="$eJzs2LFqFEEcBvBv9g5MdzLpF0ELCwkJZ2eVIsK11jYiqUyVqyI2vouPI6nsQx7AImAprEyyl6SIBMzJEfj94Gbmvp3Z/045EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjypjXbXVJXSZekJH1/ujhP0q/yp98nXUreHS6WB8fzt8txasu6lDZsy1L3nm/VeZ3Xvfp6e/9FXZ58/vTh6OjweHxNSZ+zi/VvpNWe/O3h1vrrAQAAwGMxPNhsw/UBAACA+6ztIgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgHw2zm3FN8nsYhnRJStL3p4vzJP0mPxAAAAB4sJIu72d35bm8BrjxKj9m5Tpv/a/Sxrv5dsd6AAAA4LbpvTPKrfP4y0yvz+Ute5Zpdnau/o9dfu4nk5OD7ObJmHy9bM8uvnxc/cow+R+bAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAP+zAAQkAAACAoP+v2xEoAAAAAAAAAAAAAAAAAADASgEAAP//C6/ZOQ==") (fail_nth: 29) [ 612.225898][T13530] R13: 00007f11b1bfffdc R14: 00007f11b1bfffe0 R15: 00000000200022c2 [ 612.233926][T13530] [ 612.342946][T13533] FAULT_INJECTION: forcing a failure. [ 612.342946][T13533] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 612.356583][T13533] CPU: 1 PID: 13533 Comm: syz-executor.4 Not tainted 6.2.0-rc5-next-20230127-syzkaller-08766-ge2f86c02fdc9 #0 [ 612.368266][T13533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 612.378353][T13533] Call Trace: [ 612.381658][T13533] [ 612.384611][T13533] dump_stack_lvl+0x136/0x150 [ 612.389332][T13533] should_fail_ex+0x4a3/0x5b0 [ 612.394064][T13533] copyin+0x19/0x120 [ 612.397998][T13533] copy_page_from_iter_atomic+0x22b/0x1180 [ 612.403871][T13533] ? folio_flags.constprop.0+0x53/0x150 [ 612.409473][T13533] ? _copy_from_iter_flushcache+0xff0/0xff0 [ 612.415432][T13533] ? shmem_write_begin+0x162/0x380 [ 612.420668][T13533] ? shmem_file_read_iter+0xa40/0xa40 [ 612.426097][T13533] generic_perform_write+0x2ca/0x570 [ 612.431456][T13533] ? folio_add_wait_queue+0x1c0/0x1c0 [ 612.436884][T13533] ? new_inode+0x280/0x280 [ 612.441344][T13533] ? generic_write_checks+0x2c0/0x400 [ 612.446858][T13533] __generic_file_write_iter+0x2ae/0x500 [ 612.452557][T13533] generic_file_write_iter+0xe3/0x350 [ 612.457961][T13533] vfs_write+0x9ed/0xe10 [ 612.462279][T13533] ? kernel_write+0x670/0x670 [ 612.466976][T13533] ? receive_fd+0x110/0x110 [ 612.471514][T13533] ? __fget_files+0x26a/0x480 [ 612.476229][T13533] ? __fget_light+0xe5/0x270 [ 612.480857][T13533] ksys_write+0x12b/0x250 [ 612.485208][T13533] ? __ia32_sys_read+0xb0/0xb0 [ 612.489986][T13533] ? syscall_enter_from_user_mode+0x26/0xb0 [ 612.495905][T13533] do_syscall_64+0x39/0xb0 [ 612.500353][T13533] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 612.506279][T13533] RIP: 0033:0x7f11b0e3de4f [ 612.510800][T13533] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 612.530427][T13533] RSP: 002b:00007f11b1bfff10 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 612.538951][T13533] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f11b0e3de4f [ 612.546931][T13533] RDX: 0000000000400000 RSI: 00007f11a75ff000 RDI: 0000000000000004 [ 612.554921][T13533] RBP: 00007f11a75ff000 R08: 0000000000000000 R09: 00000000000010fc [ 612.562903][T13533] R10: 0000000000400000 R11: 0000000000000293 R12: 0000000000000000 [ 612.570970][T13533] R13: 00007f11b1bfffdc R14: 00007f11b1bfffe0 R15: 00000000200022c2 [ 612.578971][T13533] [ 612.709981][T13533] loop4: detected capacity change from 0 to 8192 [ 612.728382][T13533] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 612.741607][T13533] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 612.760943][T13533] REISERFS (device loop4): using ordered data mode [ 612.776320][T13533] reiserfs: using flush barriers [ 612.792786][T13533] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 612.822359][T13533] REISERFS (device loop4): checking transaction log (loop4) [ 612.841273][T13533] REISERFS (device loop4): Using rupasov hash to sort names [ 612.856544][T13533] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 613.354918][T13512] loop3: detected capacity change from 0 to 131072 [ 613.372819][T13512] F2FS-fs (loop3): invalid crc value [ 613.384571][T13512] F2FS-fs (loop3): Found nat_bits in checkpoint [ 613.426482][T13512] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 613.452750][T13512] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 613.488219][ T27] audit: type=1800 audit(1675106417.416:19): pid=13512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=10 res=0 errno=0 [ 613.492963][ C0] hrtimer: interrupt took 204668 ns 19:20:17 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x7, &(0x7f0000000080)=@raw={'raw\x00', 0x9, 0x3, 0x1e0, 0xe0, 0xffffffff, 0xffffffff, 0xe0, 0xffffffff, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x240) 19:20:17 executing program 5: r0 = socket(0x11, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8914, &(0x7f0000000400)={'syztnl2\x00', 0x0}) 19:20:17 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e030026020b12d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) 19:20:17 executing program 1: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x440, &(0x7f0000000380)={[{@gid={'gid', 0x3d, 0xee01}}, {@uid}, {@force}, {@type={'type', 0x3d, "54c306e3"}}, {@barrier}, {@nls={'nls', 0x3d, 'cp1251'}}, {@nobarrier}, {@gid}, {@nodecompose}, {@nobarrier}, {@force}, {@nobarrier}, {@uid}, {@umask={'umask', 0x3d, 0x789}}]}, 0x1, 0x5ee, &(0x7f0000000680)="$eJzs3U9oHNcdB/DvrGXZ64KySewkLYWKGEwbU1urbWoXCnVLKTqEYuglV2GvY+G1EqRNUUJpt/+vPeaQQ3pwDzn1mtJDaHouFHr33dC7TlWZ2VlpbcmKFP/ZVfz5wNv33rx5b978PPO0O4vZAM+spTdzfJAiS+ff2Cjrd+90enfvdG6PyklOJGkkM8MsxWpSfJZcyTDlq+XGerjiYcd5/d4nH5774OPOsDZTp2r/xn79dtlzz0GdMp/kWJ0/gvvGu/bI4xXb8y4DdnYUOJi0rV0Gh+l+8PsWmFrF8O/mLq3kVJKT9fuA1KtD4+nO7vE71CoHAAAAR9Rzm9nMRuYmPQ8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Surf/y/q1BiV51OMfv9/tt6WunykfTrpCQAAAAAAAADAY/CNzWxmI3Oj+lZRfef/alU5Xb1+Je9mPd2s5UI2spx++llLO0lrbKDZjeV+f639sJ5bW1u/qnsu7tlz8emcLwAAAAAAAAB8Sf0mSzvf/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwDQokmPDrEqnR+VWGjNJTiaZLfcbJH8flY+yTyc9AQAAAHgKntvMZjYyV/xvWN8qqs/8L1Wf+0/m3aymn5X000s316tnAcNP/Y1/Dzq9u3c6t8u0e9wf/vdQ06hGzPDZw95HXqj2OLPdYyk/yc9yPvO5mrWs5OdZTj/dzOfHVWk5RVr104vWaJ57z/fKfbWrnzfXV6qZNHMjK9XcLuRa3k4v19OozqHaZ/8j/rqMTvGD2gFjdL3OyzP6U51Ph1YVkePbEVmoY19G4/n9I3HI6+TBI7XT2H4GdfoJxPxUnZex/sNUx3xx7Op7af9IJN/6zz+u3uyt3rp5Y/389JzSF/RgJDpjkXj54JEYHP1IzNbRGK6ih1stX636zmUlP83buZ5uLmUh7VzOQr6XxXTuu8LOHOBeaxzuXjv7zbrQTPLHOp8OZVyfH4vr+ErXqtrGt+xE6YXHvyLNfK0ulMf4bZ1Phwcj0R6LxIv7R+LPW+Xrem/11trN5XcOeLxzdV7etr+fqrW5vF5eKP+xqtr9V0fZ9uKebe2q7fR2W2NX25ntts+7U2fr93C7Rxq2vbxnW6dqe2Wsba93OQBMvVOvnZpt3mv+q/lR83fNm803Tv7oxOUTX5/N8X/O/O3YXxt/aXy/eC0f5ZeZm/RMAQAAAAAAAAAAAAAAAAAAAAAAAAAAAADgy2D9vfdvLfd63bUpLKQxFdNQUHhGCs3sbJn0ygQ8aRf7t9+5uP7e+99eub38Vvet7uri5UuXL3W+2/7OxRsrve7C8HXSswSehJ2//pOeCQAAAAAAAAAAAHBQT+P/FUz6HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICjbenNHB+kSHvhwkJZv3un0yvTqLyz50ySRpLiF0nxWXIlw5TW2HDFw47z+r1PPjz3wcednbFmRvs39ut3MIM6ZT7JsTp/XONde+Txiu0zLAN2dhQ4mLT/BwAA///IRBDJ") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="72797a3135cf2c3f3ce902d76d82a4c90000000000000000000000deb8cc70727486b8a90000ff6316d2f6fe2000000000400000003901000100d49f02fb634ff8cecd19f692bdc62760e81784a813e39785551764917eb498"], 0x81) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x8dc, 0x900) 19:20:17 executing program 0: r0 = socket(0x11, 0xa, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000000740)={&(0x7f0000000500), 0xc, &(0x7f0000000780)={0x0}}, 0x0) 19:20:17 executing program 4: syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000001140)='./file0\x00', 0x4408, &(0x7f0000000140)={[{@balloc_notest4}, {@balloc_test4}, {@jqfmt_vfsold}, {@balloc_test4}, {@grpjquota, 0x3d}]}, 0x1, 0x1102, &(0x7f00000022c0)="$eJzs2LFqFEEcBvBv9g5MdzLpF0ELCwkJZ2eVIsK11jYiqUyVqyI2vouPI6nsQx7AImAprEyyl6SIBMzJEfj94Gbmvp3Z/045EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjypjXbXVJXSZekJH1/ujhP0q/yp98nXUreHS6WB8fzt8txasu6lDZsy1L3nm/VeZ3Xvfp6e/9FXZ58/vTh6OjweHxNSZ+zi/VvpNWe/O3h1vrrAQAAwGMxPNhsw/UBAACA+6ztIgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgHw2zm3FN8nsYhnRJStL3p4vzJP0mPxAAAAB4sJIu72d35bm8BrjxKj9m5Tpv/a/Sxrv5dsd6AAAA4LbpvTPKrfP4y0yvz+Ute5Zpdnau/o9dfu4nk5OD7ObJmHy9bM8uvnxc/cow+R+bAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAP+zAAQkAAACAoP+v2xEoAAAAAAAAAAAAAAAAAADASgEAAP//C6/ZOQ==") (fail_nth: 30) 19:20:17 executing program 5: openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000580)={0x107040}, 0x18) 19:20:17 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9, 0x2, 0x1e0, 0xe0, 0xffffffff, 0xffffffff, 0xe0, 0xffffffff, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x240) 19:20:17 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e030026030b12d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) [ 613.757565][T13543] loop1: detected capacity change from 0 to 1024 19:20:17 executing program 5: r0 = socket(0x11, 0xa, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0, 0xffffff7f}, 0x2}, 0x0) 19:20:17 executing program 1: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x440, &(0x7f0000000380)={[{@gid={'gid', 0x3d, 0xee01}}, {@uid}, {@force}, {@type={'type', 0x3d, "54c306e3"}}, {@barrier}, {@nls={'nls', 0x3d, 'cp1251'}}, {@nobarrier}, {@gid}, {@nodecompose}, {@nobarrier}, {@force}, {@nobarrier}, {@uid}, {@umask={'umask', 0x3d, 0x789}}]}, 0x1, 0x5ee, &(0x7f0000000680)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="72797a3135cf2c3f3ce902d76d82a4c90000000000000000000000deb8cc70727486b8a90000ff6316d2f6fe2000000000400000003901000100d49f02fb634ff8cecd19f692bdc62760e81784a813e39785551764917eb498"], 0x81) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x8dc, 0xa00) 19:20:17 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, 0x0) [ 613.944033][T13546] FAULT_INJECTION: forcing a failure. [ 613.944033][T13546] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 614.056948][T13546] CPU: 1 PID: 13546 Comm: syz-executor.4 Not tainted 6.2.0-rc5-next-20230127-syzkaller-08766-ge2f86c02fdc9 #0 [ 614.068626][T13546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 614.078707][T13546] Call Trace: [ 614.081998][T13546] [ 614.084949][T13546] dump_stack_lvl+0x136/0x150 [ 614.089658][T13546] should_fail_ex+0x4a3/0x5b0 [ 614.094360][T13546] prepare_alloc_pages+0x178/0x570 [ 614.099493][T13546] ? print_usage_bug.part.0+0x660/0x660 [ 614.105065][T13546] __alloc_pages+0x149/0x5c0 [ 614.109676][T13546] ? __alloc_pages_slowpath.constprop.0+0x23f0/0x23f0 [ 614.116486][T13546] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 614.122514][T13546] __folio_alloc+0x16/0x40 [ 614.126951][T13546] vma_alloc_folio+0x155/0x880 [ 614.131747][T13546] ? policy_nodemask+0x1c0/0x1c0 [ 614.136718][T13546] ? find_held_lock+0x2d/0x110 [ 614.141513][T13546] shmem_alloc_folio+0xff/0x1c0 [ 614.146404][T13546] ? shmem_link+0x370/0x370 [ 614.150962][T13546] ? percpu_counter_add_batch+0x170/0x1e0 [ 614.156722][T13546] ? __vm_enough_memory+0x188/0x3f0 [ 614.161946][T13546] shmem_alloc_and_acct_folio+0x15e/0x5d0 [ 614.167693][T13546] shmem_get_folio_gfp+0xacd/0x1950 [ 614.172919][T13546] ? shmem_alloc_and_acct_folio+0x5d0/0x5d0 [ 614.178845][T13546] shmem_write_begin+0x14a/0x380 [ 614.183825][T13546] ? shmem_file_read_iter+0xa40/0xa40 [ 614.189223][T13546] generic_perform_write+0x256/0x570 [ 614.194639][T13546] ? folio_add_wait_queue+0x1c0/0x1c0 [ 614.200039][T13546] ? new_inode+0x280/0x280 [ 614.204480][T13546] ? generic_write_checks+0x2c0/0x400 [ 614.209876][T13546] __generic_file_write_iter+0x2ae/0x500 [ 614.215534][T13546] generic_file_write_iter+0xe3/0x350 [ 614.220940][T13546] vfs_write+0x9ed/0xe10 [ 614.225199][T13546] ? kernel_write+0x670/0x670 [ 614.229888][T13546] ? receive_fd+0x110/0x110 [ 614.234435][T13546] ? __fget_files+0x26a/0x480 [ 614.239146][T13546] ? __fget_light+0xe5/0x270 [ 614.243775][T13546] ksys_write+0x12b/0x250 [ 614.248125][T13546] ? __ia32_sys_read+0xb0/0xb0 [ 614.252907][T13546] ? syscall_enter_from_user_mode+0x26/0xb0 [ 614.258831][T13546] do_syscall_64+0x39/0xb0 [ 614.263281][T13546] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 614.269205][T13546] RIP: 0033:0x7f11b0e3de4f [ 614.273637][T13546] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 614.293262][T13546] RSP: 002b:00007f11b1bfff10 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 614.301699][T13546] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f11b0e3de4f [ 614.309683][T13546] RDX: 0000000000400000 RSI: 00007f11a75ff000 RDI: 0000000000000004 [ 614.317667][T13546] RBP: 00007f11a75ff000 R08: 0000000000000000 R09: 00000000000010fc [ 614.325651][T13546] R10: 0000000000400000 R11: 0000000000000293 R12: 0000000000000000 [ 614.333631][T13546] R13: 00007f11b1bfffdc R14: 00007f11b1bfffe0 R15: 00000000200022c2 [ 614.341630][T13546] [ 614.365004][T13560] loop1: detected capacity change from 0 to 1024 [ 614.385856][ T5233] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 19:20:18 executing program 3: r0 = socket(0x2c, 0x3, 0x0) bind$alg(r0, 0x0, 0xffffffffffffff73) 19:20:18 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e030026040b12d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) 19:20:18 executing program 5: r0 = socket(0x11, 0x3, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, 0x0) 19:20:18 executing program 0: r0 = socket(0x11, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x891f, &(0x7f0000000400)={'sit0\x00', 0x0}) 19:20:18 executing program 1: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x440, &(0x7f0000000380)={[{@gid={'gid', 0x3d, 0xee01}}, {@uid}, {@force}, {@type={'type', 0x3d, "54c306e3"}}, {@barrier}, {@nls={'nls', 0x3d, 'cp1251'}}, {@nobarrier}, {@gid}, {@nodecompose}, {@nobarrier}, {@force}, {@nobarrier}, {@uid}, {@umask={'umask', 0x3d, 0x789}}]}, 0x1, 0x5ee, &(0x7f0000000680)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="72797a3135cf2c3f3ce902d76d82a4c90000000000000000000000deb8cc70727486b8a90000ff6316d2f6fe2000000000400000003901000100d49f02fb634ff8cecd19f692bdc62760e81784a813e39785551764917eb498"], 0x81) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x8dc, 0x1800) 19:20:18 executing program 4: syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000001140)='./file0\x00', 0x4408, &(0x7f0000000140)={[{@balloc_notest4}, {@balloc_test4}, {@jqfmt_vfsold}, {@balloc_test4}, {@grpjquota, 0x3d}]}, 0x1, 0x1102, &(0x7f00000022c0)="$eJzs2LFqFEEcBvBv9g5MdzLpF0ELCwkJZ2eVIsK11jYiqUyVqyI2vouPI6nsQx7AImAprEyyl6SIBMzJEfj94Gbmvp3Z/045EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjypjXbXVJXSZekJH1/ujhP0q/yp98nXUreHS6WB8fzt8txasu6lDZsy1L3nm/VeZ3Xvfp6e/9FXZ58/vTh6OjweHxNSZ+zi/VvpNWe/O3h1vrrAQAAwGMxPNhsw/UBAACA+6ztIgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgHw2zm3FN8nsYhnRJStL3p4vzJP0mPxAAAAB4sJIu72d35bm8BrjxKj9m5Tpv/a/Sxrv5dsd6AAAA4LbpvTPKrfP4y0yvz+Ute5Zpdnau/o9dfu4nk5OD7ObJmHy9bM8uvnxc/cow+R+bAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAP+zAAQkAAACAoP+v2xEoAAAAAAAAAAAAAAAAAADASgEAAP//C6/ZOQ==") (fail_nth: 31) 19:20:18 executing program 5: execveat(0xffffffffffffffff, &(0x7f0000000a40)='./file0\x00', &(0x7f0000000ac0), &(0x7f0000000b40), 0x0) 19:20:18 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e030026050b12d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) 19:20:18 executing program 0: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x4, 0xc0, &(0x7f0000000300)=""/192, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x80) 19:20:18 executing program 3: statx(0xffffffffffffff9c, &(0x7f0000000ec0)='.\x00', 0x0, 0x0, &(0x7f0000000f00)) [ 614.919477][T13572] loop1: detected capacity change from 0 to 1024 [ 614.981429][T13579] process 'syz-executor.5' launched '/dev/fd/-1/./file0' with NULL argv: empty string added 19:20:19 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x5, &(0x7f0000002780)=@framed={{}, [@initr0={0x18, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ae}]}, &(0x7f00000002c0)='GPL\x00', 0x4, 0xc0, &(0x7f0000000300)=""/192, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 615.023711][T13571] FAULT_INJECTION: forcing a failure. [ 615.023711][T13571] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 615.037049][T13571] CPU: 0 PID: 13571 Comm: syz-executor.4 Not tainted 6.2.0-rc5-next-20230127-syzkaller-08766-ge2f86c02fdc9 #0 [ 615.048734][T13571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 615.058831][T13571] Call Trace: [ 615.062138][T13571] [ 615.065099][T13571] dump_stack_lvl+0x136/0x150 19:20:19 executing program 1: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x440, &(0x7f0000000380)={[{@gid={'gid', 0x3d, 0xee01}}, {@uid}, {@force}, {@type={'type', 0x3d, "54c306e3"}}, {@barrier}, {@nls={'nls', 0x3d, 'cp1251'}}, {@nobarrier}, {@gid}, {@nodecompose}, {@nobarrier}, {@force}, {@nobarrier}, {@uid}, {@umask={'umask', 0x3d, 0x789}}]}, 0x1, 0x5ee, &(0x7f0000000680)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="72797a3135cf2c3f3ce902d76d82a4c90000000000000000000000deb8cc70727486b8a90000ff6316d2f6fe2000000000400000003901000100d49f02fb634ff8cecd19f692bdc62760e81784a813e39785551764917eb498"], 0x81) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x8dc, 0x1f00) [ 615.069831][T13571] should_fail_ex+0x4a3/0x5b0 [ 615.074558][T13571] copyin+0x19/0x120 [ 615.078511][T13571] copy_page_from_iter_atomic+0x22b/0x1180 [ 615.084417][T13571] ? folio_flags.constprop.0+0x53/0x150 [ 615.090023][T13571] ? _copy_from_iter_flushcache+0xff0/0xff0 [ 615.095996][T13571] ? shmem_write_begin+0x162/0x380 [ 615.101161][T13571] ? shmem_file_read_iter+0xa40/0xa40 [ 615.106583][T13571] generic_perform_write+0x2ca/0x570 [ 615.112114][T13571] ? folio_add_wait_queue+0x1c0/0x1c0 [ 615.117544][T13571] ? new_inode+0x280/0x280 [ 615.122003][T13571] ? generic_write_checks+0x2c0/0x400 [ 615.127412][T13571] __generic_file_write_iter+0x2ae/0x500 [ 615.133081][T13571] generic_file_write_iter+0xe3/0x350 [ 615.138496][T13571] vfs_write+0x9ed/0xe10 [ 615.142768][T13571] ? kernel_write+0x670/0x670 [ 615.147470][T13571] ? receive_fd+0x110/0x110 [ 615.152020][T13571] ? __fget_files+0x26a/0x480 [ 615.156735][T13571] ? __fget_light+0xe5/0x270 [ 615.161453][T13571] ksys_write+0x12b/0x250 [ 615.165838][T13571] ? __ia32_sys_read+0xb0/0xb0 [ 615.170619][T13571] ? syscall_enter_from_user_mode+0x26/0xb0 [ 615.176544][T13571] do_syscall_64+0x39/0xb0 [ 615.181013][T13571] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 615.186939][T13571] RIP: 0033:0x7f11b0e3de4f [ 615.191371][T13571] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 615.210997][T13571] RSP: 002b:00007f11b1bfff10 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 19:20:19 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e030026060b12d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) 19:20:19 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x14, &(0x7f0000000080)=@raw={'raw\x00', 0x9, 0x3, 0x1e0, 0xe0, 0xffffffff, 0xffffffff, 0xe0, 0xffffffff, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x240) [ 615.219438][T13571] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f11b0e3de4f [ 615.227436][T13571] RDX: 0000000000400000 RSI: 00007f11a75ff000 RDI: 0000000000000004 [ 615.235609][T13571] RBP: 00007f11a75ff000 R08: 0000000000000000 R09: 00000000000010fc [ 615.243598][T13571] R10: 0000000000400000 R11: 0000000000000293 R12: 0000000000000000 [ 615.251581][T13571] R13: 00007f11b1bfffdc R14: 00007f11b1bfffe0 R15: 00000000200022c2 [ 615.259587][T13571] 19:20:19 executing program 0: r0 = socket(0x2c, 0x3, 0x0) accept4$alg(r0, 0x0, 0x0, 0x0) 19:20:19 executing program 3: syz_emit_ethernet(0x42, &(0x7f0000001300)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "95c79d", 0xc, 0x2b, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {0x8, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 19:20:19 executing program 5: syz_emit_ethernet(0x42, &(0x7f0000001300)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "95c79d", 0xc, 0x2b, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) [ 615.434912][T13593] loop1: detected capacity change from 0 to 1024 [ 615.638281][T13571] loop4: detected capacity change from 0 to 8192 [ 615.648251][T13571] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 615.661602][T13571] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 615.671726][T13571] REISERFS (device loop4): using ordered data mode [ 615.680341][T13571] reiserfs: using flush barriers [ 615.691144][T13571] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 615.708178][T13571] REISERFS (device loop4): checking transaction log (loop4) [ 615.718551][T13571] REISERFS (device loop4): Using rupasov hash to sort names [ 615.726569][T13571] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. 19:20:19 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000080)=0x1c0, 0x4) 19:20:19 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e030026070b12d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) 19:20:19 executing program 1: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x440, &(0x7f0000000380)={[{@gid={'gid', 0x3d, 0xee01}}, {@uid}, {@force}, {@type={'type', 0x3d, "54c306e3"}}, {@barrier}, {@nls={'nls', 0x3d, 'cp1251'}}, {@nobarrier}, {@gid}, {@nodecompose}, {@nobarrier}, {@force}, {@nobarrier}, {@uid}, {@umask={'umask', 0x3d, 0x789}}]}, 0x1, 0x5ee, &(0x7f0000000680)="$eJzs3U9oHNcdB/DvrGXZ64KySewkLYWKGEwbU1urbWoXCnVLKTqEYuglV2GvY+G1EqRNUUJpt/+vPeaQQ3pwDzn1mtJDaHouFHr33dC7TlWZ2VlpbcmKFP/ZVfz5wNv33rx5b978PPO0O4vZAM+spTdzfJAiS+ff2Cjrd+90enfvdG6PyklOJGkkM8MsxWpSfJZcyTDlq+XGerjiYcd5/d4nH5774OPOsDZTp2r/xn79dtlzz0GdMp/kWJ0/gvvGu/bI4xXb8y4DdnYUOJi0rV0Gh+l+8PsWmFrF8O/mLq3kVJKT9fuA1KtD4+nO7vE71CoHAAAAR9Rzm9nMRuYmPQ8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Surf/y/q1BiV51OMfv9/tt6WunykfTrpCQAAAAAAAADAY/CNzWxmI3Oj+lZRfef/alU5Xb1+Je9mPd2s5UI2spx++llLO0lrbKDZjeV+f639sJ5bW1u/qnsu7tlz8emcLwAAAAAAAAB8Sf0mSzvf/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwDQokmPDrEqnR+VWGjNJTiaZLfcbJH8flY+yTyc9AQAAAHgKntvMZjYyV/xvWN8qqs/8L1Wf+0/m3aymn5X000s316tnAcNP/Y1/Dzq9u3c6t8u0e9wf/vdQ06hGzPDZw95HXqj2OLPdYyk/yc9yPvO5mrWs5OdZTj/dzOfHVWk5RVr104vWaJ57z/fKfbWrnzfXV6qZNHMjK9XcLuRa3k4v19OozqHaZ/8j/rqMTvGD2gFjdL3OyzP6U51Ph1YVkePbEVmoY19G4/n9I3HI6+TBI7XT2H4GdfoJxPxUnZex/sNUx3xx7Op7af9IJN/6zz+u3uyt3rp5Y/389JzSF/RgJDpjkXj54JEYHP1IzNbRGK6ih1stX636zmUlP83buZ5uLmUh7VzOQr6XxXTuu8LOHOBeaxzuXjv7zbrQTPLHOp8OZVyfH4vr+ErXqtrGt+xE6YXHvyLNfK0ulMf4bZ1Phwcj0R6LxIv7R+LPW+Xrem/11trN5XcOeLxzdV7etr+fqrW5vF5eKP+xqtr9V0fZ9uKebe2q7fR2W2NX25ntts+7U2fr93C7Rxq2vbxnW6dqe2Wsba93OQBMvVOvnZpt3mv+q/lR83fNm803Tv7oxOUTX5/N8X/O/O3YXxt/aXy/eC0f5ZeZm/RMAQAAAAAAAAAAAAAAAAAAAAAAAAAAAADgy2D9vfdvLfd63bUpLKQxFdNQUHhGCs3sbJn0ygQ8aRf7t9+5uP7e+99eub38Vvet7uri5UuXL3W+2/7OxRsrve7C8HXSswSehJ2//pOeCQAAAAAAAAAAAHBQT+P/FUz6HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICjbenNHB+kSHvhwkJZv3un0yvTqLyz50ySRpLiF0nxWXIlw5TW2HDFw47z+r1PPjz3wcednbFmRvs39ut3MIM6ZT7JsTp/XONde+Txiu0zLAN2dhQ4mLT/BwAA///IRBDJ") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="72797a3135cf2c3f3ce902d76d82a4c90000000000000000000000deb8cc70727486b8a90000ff6316d2f6fe2000000000400000003901000100d49f02fb634ff8cecd19f692bdc62760e81784a813e39785551764917eb498"], 0x81) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x8dc, 0x2000) 19:20:19 executing program 4: syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000001140)='./file0\x00', 0x4408, &(0x7f0000000140)={[{@balloc_notest4}, {@balloc_test4}, {@jqfmt_vfsold}, {@balloc_test4}, {@grpjquota, 0x3d}]}, 0x1, 0x1102, &(0x7f00000022c0)="$eJzs2LFqFEEcBvBv9g5MdzLpF0ELCwkJZ2eVIsK11jYiqUyVqyI2vouPI6nsQx7AImAprEyyl6SIBMzJEfj94Gbmvp3Z/045EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjypjXbXVJXSZekJH1/ujhP0q/yp98nXUreHS6WB8fzt8txasu6lDZsy1L3nm/VeZ3Xvfp6e/9FXZ58/vTh6OjweHxNSZ+zi/VvpNWe/O3h1vrrAQAAwGMxPNhsw/UBAACA+6ztIgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgHw2zm3FN8nsYhnRJStL3p4vzJP0mPxAAAAB4sJIu72d35bm8BrjxKj9m5Tpv/a/Sxrv5dsd6AAAA4LbpvTPKrfP4y0yvz+Ute5Zpdnau/o9dfu4nk5OD7ObJmHy9bM8uvnxc/cow+R+bAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAP+zAAQkAAACAoP+v2xEoAAAAAAAAAAAAAAAAAADASgEAAP//C6/ZOQ==") (fail_nth: 32) 19:20:19 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x4, 0x3, &(0x7f0000002780)=@framed, &(0x7f00000002c0)='GPL\x00', 0x4, 0xc0, &(0x7f0000000300)=""/192, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:20:19 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000680)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x3, 0x3, &(0x7f0000002780)=@framed, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:20:19 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1b, 0x0, 0x0, 0x0, 0x20, 0x1}, 0x48) 19:20:19 executing program 0: process_vm_readv(0x0, &(0x7f00000039c0)=[{0x0}, {&(0x7f0000003940)=""/119, 0x77}], 0x2, 0x0, 0x0, 0x0) 19:20:19 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f00000028c0), 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', 0x0, &(0x7f0000000500)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}]}}, 0x0, 0x0, 0x0) 19:20:19 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, 0x0, 0x0) 19:20:19 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e030026080b12d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) [ 615.913589][T13612] loop1: detected capacity change from 0 to 1024 19:20:19 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x19, &(0x7f0000000080)=@raw={'raw\x00', 0x9, 0x3, 0x1e0, 0xe0, 0xffffffff, 0xffffffff, 0xe0, 0xffffffff, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x240) 19:20:19 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e030026090b12d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) [ 616.225015][T13626] FAULT_INJECTION: forcing a failure. [ 616.225015][T13626] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 616.242947][T13626] CPU: 0 PID: 13626 Comm: syz-executor.4 Not tainted 6.2.0-rc5-next-20230127-syzkaller-08766-ge2f86c02fdc9 #0 [ 616.254652][T13626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 616.264831][T13626] Call Trace: [ 616.268144][T13626] [ 616.271105][T13626] dump_stack_lvl+0x136/0x150 [ 616.275836][T13626] should_fail_ex+0x4a3/0x5b0 [ 616.280528][T13626] prepare_alloc_pages+0x178/0x570 [ 616.285658][T13626] ? print_usage_bug.part.0+0x660/0x660 [ 616.291241][T13626] __alloc_pages+0x149/0x5c0 [ 616.295864][T13626] ? __alloc_pages_slowpath.constprop.0+0x23f0/0x23f0 [ 616.302641][T13626] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 616.308904][T13626] __folio_alloc+0x16/0x40 [ 616.313329][T13626] vma_alloc_folio+0x155/0x880 [ 616.318105][T13626] ? policy_nodemask+0x1c0/0x1c0 [ 616.323064][T13626] ? find_held_lock+0x2d/0x110 [ 616.327858][T13626] shmem_alloc_folio+0xff/0x1c0 [ 616.332717][T13626] ? shmem_link+0x370/0x370 [ 616.337261][T13626] ? percpu_counter_add_batch+0x170/0x1e0 [ 616.343054][T13626] ? __vm_enough_memory+0x188/0x3f0 [ 616.348282][T13626] shmem_alloc_and_acct_folio+0x15e/0x5d0 [ 616.354006][T13626] shmem_get_folio_gfp+0xacd/0x1950 [ 616.359206][T13626] ? shmem_alloc_and_acct_folio+0x5d0/0x5d0 [ 616.365104][T13626] shmem_write_begin+0x14a/0x380 [ 616.370043][T13626] ? shmem_file_read_iter+0xa40/0xa40 [ 616.375419][T13626] generic_perform_write+0x256/0x570 [ 616.380735][T13626] ? folio_add_wait_queue+0x1c0/0x1c0 [ 616.386131][T13626] ? new_inode+0x280/0x280 [ 616.390588][T13626] ? generic_write_checks+0x2c0/0x400 [ 616.395995][T13626] __generic_file_write_iter+0x2ae/0x500 [ 616.401633][T13626] generic_file_write_iter+0xe3/0x350 [ 616.407007][T13626] vfs_write+0x9ed/0xe10 [ 616.411275][T13626] ? kernel_write+0x670/0x670 [ 616.415959][T13626] ? receive_fd+0x110/0x110 [ 616.420520][T13626] ? __fget_files+0x26a/0x480 [ 616.425210][T13626] ? __fget_light+0xe5/0x270 [ 616.429809][T13626] ksys_write+0x12b/0x250 [ 616.434138][T13626] ? __ia32_sys_read+0xb0/0xb0 [ 616.438916][T13626] ? syscall_enter_from_user_mode+0x26/0xb0 [ 616.444842][T13626] do_syscall_64+0x39/0xb0 [ 616.449265][T13626] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 616.455155][T13626] RIP: 0033:0x7f11b0e3de4f [ 616.459564][T13626] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 616.479179][T13626] RSP: 002b:00007f11b1bfff10 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 616.487618][T13626] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f11b0e3de4f [ 616.495637][T13626] RDX: 0000000000400000 RSI: 00007f11a75ff000 RDI: 0000000000000004 [ 616.503648][T13626] RBP: 00007f11a75ff000 R08: 0000000000000000 R09: 00000000000010fc [ 616.511632][T13626] R10: 0000000000400000 R11: 0000000000000293 R12: 0000000000000000 19:20:20 executing program 4: syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000001140)='./file0\x00', 0x4408, &(0x7f0000000140)={[{@balloc_notest4}, {@balloc_test4}, {@jqfmt_vfsold}, {@balloc_test4}, {@grpjquota, 0x3d}]}, 0x1, 0x1102, &(0x7f00000022c0)="$eJzs2LFqFEEcBvBv9g5MdzLpF0ELCwkJZ2eVIsK11jYiqUyVqyI2vouPI6nsQx7AImAprEyyl6SIBMzJEfj94Gbmvp3Z/045EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjypjXbXVJXSZekJH1/ujhP0q/yp98nXUreHS6WB8fzt8txasu6lDZsy1L3nm/VeZ3Xvfp6e/9FXZ58/vTh6OjweHxNSZ+zi/VvpNWe/O3h1vrrAQAAwGMxPNhsw/UBAACA+6ztIgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgHw2zm3FN8nsYhnRJStL3p4vzJP0mPxAAAAB4sJIu72d35bm8BrjxKj9m5Tpv/a/Sxrv5dsd6AAAA4LbpvTPKrfP4y0yvz+Ute5Zpdnau/o9dfu4nk5OD7ObJmHy9bM8uvnxc/cow+R+bAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAP+zAAQkAAACAoP+v2xEoAAAAAAAAAAAAAAAAAADASgEAAP//C6/ZOQ==") (fail_nth: 33) 19:20:20 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f00000028c0), 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x40010, r0, 0x0) 19:20:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r1, 0x96fea46db5a79305, 0x0, 0x0, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x4}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x2c}}, 0x0) 19:20:20 executing program 1: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x440, &(0x7f0000000380)={[{@gid={'gid', 0x3d, 0xee01}}, {@uid}, {@force}, {@type={'type', 0x3d, "54c306e3"}}, {@barrier}, {@nls={'nls', 0x3d, 'cp1251'}}, {@nobarrier}, {@gid}, {@nodecompose}, {@nobarrier}, {@force}, {@nobarrier}, {@uid}, {@umask={'umask', 0x3d, 0x789}}]}, 0x1, 0x5ee, &(0x7f0000000680)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="72797a3135cf2c3f3ce902d76d82a4c90000000000000000000000deb8cc70727486b8a90000ff6316d2f6fe2000000000400000003901000100d49f02fb634ff8cecd19f692bdc62760e81784a813e39785551764917eb498"], 0x81) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x8dc, 0x3f00) 19:20:20 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001700)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) 19:20:20 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e0300260a0b12d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) [ 616.519624][T13626] R13: 00007f11b1bfffdc R14: 00007f11b1bfffe0 R15: 00000000200022c2 [ 616.527632][T13626] 19:20:20 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r0, &(0x7f00000039c0)=[{0x0}, {&(0x7f0000003940)=""/119, 0x77}], 0x2, &(0x7f0000003e00)=[{&(0x7f0000003a00)=""/123, 0x7b}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) 19:20:20 executing program 5: r0 = socket(0x11, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @multicast2}}}}) 19:20:20 executing program 0: r0 = socket(0x11, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x15, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @private, {[@ssrr={0x89, 0x23, 0x0, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr, @dev, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, @private, @multicast2, @private]}, @ra={0x94, 0x4}, @cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "ca49dadb1327940da242ec99e637"}]}]}}}}}) 19:20:20 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e0300260b0b12d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) [ 616.684565][T13635] loop1: detected capacity change from 0 to 1024 [ 616.745274][T13639] FAULT_INJECTION: forcing a failure. [ 616.745274][T13639] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 616.758764][T13639] CPU: 0 PID: 13639 Comm: syz-executor.4 Not tainted 6.2.0-rc5-next-20230127-syzkaller-08766-ge2f86c02fdc9 #0 [ 616.770439][T13639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 616.780621][T13639] Call Trace: [ 616.783928][T13639] [ 616.786886][T13639] dump_stack_lvl+0x136/0x150 19:20:20 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8992, &(0x7f0000000400)={'sit0\x00', 0x0}) [ 616.791609][T13639] should_fail_ex+0x4a3/0x5b0 [ 616.796333][T13639] copyin+0x19/0x120 [ 616.800283][T13639] copy_page_from_iter_atomic+0x22b/0x1180 [ 616.806147][T13639] ? folio_flags.constprop.0+0x53/0x150 [ 616.811733][T13639] ? _copy_from_iter_flushcache+0xff0/0xff0 [ 616.817676][T13639] ? shmem_write_begin+0x162/0x380 [ 616.822823][T13639] ? shmem_file_read_iter+0xa40/0xa40 [ 616.828226][T13639] generic_perform_write+0x2ca/0x570 [ 616.833551][T13639] ? folio_add_wait_queue+0x1c0/0x1c0 [ 616.838954][T13639] ? new_inode+0x280/0x280 [ 616.843394][T13639] ? generic_write_checks+0x2c0/0x400 [ 616.848788][T13639] __generic_file_write_iter+0x2ae/0x500 [ 616.854477][T13639] generic_file_write_iter+0xe3/0x350 [ 616.859869][T13639] vfs_write+0x9ed/0xe10 [ 616.864126][T13639] ? kernel_write+0x670/0x670 [ 616.868816][T13639] ? receive_fd+0x110/0x110 [ 616.873356][T13639] ? __fget_files+0x26a/0x480 [ 616.878071][T13639] ? __fget_light+0xe5/0x270 [ 616.882778][T13639] ksys_write+0x12b/0x250 [ 616.887122][T13639] ? __ia32_sys_read+0xb0/0xb0 [ 616.891897][T13639] ? syscall_enter_from_user_mode+0x26/0xb0 [ 616.897837][T13639] do_syscall_64+0x39/0xb0 [ 616.902279][T13639] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 616.908192][T13639] RIP: 0033:0x7f11b0e3de4f [ 616.912622][T13639] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 616.932246][T13639] RSP: 002b:00007f11b1bfff10 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 616.940676][T13639] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f11b0e3de4f [ 616.948656][T13639] RDX: 0000000000400000 RSI: 00007f11a75ff000 RDI: 0000000000000004 [ 616.956636][T13639] RBP: 00007f11a75ff000 R08: 0000000000000000 R09: 00000000000010fc [ 616.964618][T13639] R10: 0000000000400000 R11: 0000000000000293 R12: 0000000000000000 [ 616.972597][T13639] R13: 00007f11b1bfffdc R14: 00007f11b1bfffe0 R15: 00000000200022c2 [ 616.980599][T13639] 19:20:20 executing program 1: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x440, &(0x7f0000000380)={[{@gid={'gid', 0x3d, 0xee01}}, {@uid}, {@force}, {@type={'type', 0x3d, "54c306e3"}}, {@barrier}, {@nls={'nls', 0x3d, 'cp1251'}}, {@nobarrier}, {@gid}, {@nodecompose}, {@nobarrier}, {@force}, {@nobarrier}, {@uid}, {@umask={'umask', 0x3d, 0x789}}]}, 0x1, 0x5ee, &(0x7f0000000680)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="72797a3135cf2c3f3ce902d76d82a4c90000000000000000000000deb8cc70727486b8a90000ff6316d2f6fe2000000000400000003901000100d49f02fb634ff8cecd19f692bdc62760e81784a813e39785551764917eb498"], 0x81) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x8dc, 0x9308) [ 617.129543][T13654] loop1: detected capacity change from 0 to 1024 [ 617.174396][T13639] loop4: detected capacity change from 0 to 8192 [ 617.210359][T13639] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 617.238615][T13639] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 617.248958][T13639] REISERFS (device loop4): using ordered data mode [ 617.255872][T13639] reiserfs: using flush barriers [ 617.270192][T13639] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 19:20:21 executing program 4: syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000001140)='./file0\x00', 0x4408, &(0x7f0000000140)={[{@balloc_notest4}, {@balloc_test4}, {@jqfmt_vfsold}, {@balloc_test4}, {@grpjquota, 0x3d}]}, 0x1, 0x1102, &(0x7f00000022c0)="$eJzs2LFqFEEcBvBv9g5MdzLpF0ELCwkJZ2eVIsK11jYiqUyVqyI2vouPI6nsQx7AImAprEyyl6SIBMzJEfj94Gbmvp3Z/045EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjypjXbXVJXSZekJH1/ujhP0q/yp98nXUreHS6WB8fzt8txasu6lDZsy1L3nm/VeZ3Xvfp6e/9FXZ58/vTh6OjweHxNSZ+zi/VvpNWe/O3h1vrrAQAAwGMxPNhsw/UBAACA+6ztIgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgHw2zm3FN8nsYhnRJStL3p4vzJP0mPxAAAAB4sJIu72d35bm8BrjxKj9m5Tpv/a/Sxrv5dsd6AAAA4LbpvTPKrfP4y0yvz+Ute5Zpdnau/o9dfu4nk5OD7ObJmHy9bM8uvnxc/cow+R+bAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAP+zAAQkAAACAoP+v2xEoAAAAAAAAAAAAAAAAAADASgEAAP//C6/ZOQ==") (fail_nth: 34) 19:20:21 executing program 0: r0 = socket(0x11, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8922, &(0x7f0000000400)={'sit0\x00', 0x0}) 19:20:21 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001700)=[@rights={{0x10, 0x1, 0x5}}], 0x10}, 0x0) 19:20:21 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e0300260c0b12d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) 19:20:21 executing program 3: symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000640)='./file0\x00') 19:20:21 executing program 1: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x440, &(0x7f0000000380)={[{@gid={'gid', 0x3d, 0xee01}}, {@uid}, {@force}, {@type={'type', 0x3d, "54c306e3"}}, {@barrier}, {@nls={'nls', 0x3d, 'cp1251'}}, {@nobarrier}, {@gid}, {@nodecompose}, {@nobarrier}, {@force}, {@nobarrier}, {@uid}, {@umask={'umask', 0x3d, 0x789}}]}, 0x1, 0x5ee, &(0x7f0000000680)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="72797a3135cf2c3f3ce902d76d82a4c90000000000000000000000deb8cc70727486b8a90000ff6316d2f6fe2000000000400000003901000100d49f02fb634ff8cecd19f692bdc62760e81784a813e39785551764917eb498"], 0x81) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x8dc, 0xde01) [ 617.288136][T13639] REISERFS (device loop4): checking transaction log (loop4) [ 617.301263][T13639] REISERFS (device loop4): Using rupasov hash to sort names [ 617.310008][T13639] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. 19:20:21 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) sendto$unix(r0, &(0x7f0000000000)="9f", 0x1, 0x4001, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) 19:20:21 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f3, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x29, 0x0, @dev, @multicast1, {[@timestamp={0x44, 0x4}]}}}}}) 19:20:21 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e0300260e0b12d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) [ 617.378575][T13663] sit0: mtu less than device minimum 19:20:21 executing program 0: r0 = socket(0x11, 0x3, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x8953, 0x0) [ 617.428927][T13665] loop1: detected capacity change from 0 to 1024 19:20:21 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x8914, 0x0) 19:20:21 executing program 5: r0 = socket(0x11, 0x3, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x8919, 0x0) [ 617.705709][T13679] FAULT_INJECTION: forcing a failure. [ 617.705709][T13679] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 617.719130][T13679] CPU: 0 PID: 13679 Comm: syz-executor.4 Not tainted 6.2.0-rc5-next-20230127-syzkaller-08766-ge2f86c02fdc9 #0 [ 617.730806][T13679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 617.740892][T13679] Call Trace: [ 617.744197][T13679] [ 617.747154][T13679] dump_stack_lvl+0x136/0x150 [ 617.751884][T13679] should_fail_ex+0x4a3/0x5b0 [ 617.756614][T13679] copyin+0x19/0x120 [ 617.760561][T13679] copy_page_from_iter_atomic+0x22b/0x1180 [ 617.766437][T13679] ? folio_flags.constprop.0+0x53/0x150 [ 617.772069][T13679] ? _copy_from_iter_flushcache+0xff0/0xff0 [ 617.778013][T13679] ? shmem_write_begin+0x162/0x380 [ 617.783161][T13679] ? shmem_file_read_iter+0xa40/0xa40 [ 617.788603][T13679] generic_perform_write+0x2ca/0x570 [ 617.793965][T13679] ? folio_add_wait_queue+0x1c0/0x1c0 [ 617.799394][T13679] ? new_inode+0x280/0x280 [ 617.803868][T13679] ? generic_write_checks+0x2c0/0x400 [ 617.809258][T13679] __generic_file_write_iter+0x2ae/0x500 [ 617.814891][T13679] generic_file_write_iter+0xe3/0x350 [ 617.820263][T13679] vfs_write+0x9ed/0xe10 [ 617.824504][T13679] ? kernel_write+0x670/0x670 [ 617.829187][T13679] ? receive_fd+0x110/0x110 [ 617.833745][T13679] ? __fget_files+0x26a/0x480 [ 617.838485][T13679] ? __fget_light+0xe5/0x270 [ 617.843105][T13679] ksys_write+0x12b/0x250 [ 617.847431][T13679] ? __ia32_sys_read+0xb0/0xb0 [ 617.852189][T13679] ? syscall_enter_from_user_mode+0x26/0xb0 [ 617.858104][T13679] do_syscall_64+0x39/0xb0 [ 617.862523][T13679] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 617.868431][T13679] RIP: 0033:0x7f11b0e3de4f [ 617.872859][T13679] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 617.892468][T13679] RSP: 002b:00007f11b1bfff10 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 617.900896][T13679] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f11b0e3de4f [ 617.908885][T13679] RDX: 0000000000400000 RSI: 00007f11a75ff000 RDI: 0000000000000004 [ 617.916871][T13679] RBP: 00007f11a75ff000 R08: 0000000000000000 R09: 00000000000010fc [ 617.924856][T13679] R10: 0000000000400000 R11: 0000000000000293 R12: 0000000000000000 [ 617.932861][T13679] R13: 00007f11b1bfffdc R14: 00007f11b1bfffe0 R15: 00000000200022c2 [ 617.940867][T13679] [ 617.983688][T13679] loop4: detected capacity change from 0 to 8192 [ 617.991692][T13679] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 618.009907][T13679] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 618.020494][T13679] REISERFS (device loop4): using ordered data mode [ 618.032912][T13679] reiserfs: using flush barriers [ 618.042292][T13679] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 618.062569][T13679] REISERFS (device loop4): checking transaction log (loop4) [ 618.071861][T13679] REISERFS (device loop4): Using rupasov hash to sort names 19:20:22 executing program 4: syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000001140)='./file0\x00', 0x4408, &(0x7f0000000140)={[{@balloc_notest4}, {@balloc_test4}, {@jqfmt_vfsold}, {@balloc_test4}, {@grpjquota, 0x3d}]}, 0x1, 0x1102, &(0x7f00000022c0)="$eJzs2LFqFEEcBvBv9g5MdzLpF0ELCwkJZ2eVIsK11jYiqUyVqyI2vouPI6nsQx7AImAprEyyl6SIBMzJEfj94Gbmvp3Z/045EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjypjXbXVJXSZekJH1/ujhP0q/yp98nXUreHS6WB8fzt8txasu6lDZsy1L3nm/VeZ3Xvfp6e/9FXZ58/vTh6OjweHxNSZ+zi/VvpNWe/O3h1vrrAQAAwGMxPNhsw/UBAACA+6ztIgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgHw2zm3FN8nsYhnRJStL3p4vzJP0mPxAAAAB4sJIu72d35bm8BrjxKj9m5Tpv/a/Sxrv5dsd6AAAA4LbpvTPKrfP4y0yvz+Ute5Zpdnau/o9dfu4nk5OD7ObJmHy9bM8uvnxc/cow+R+bAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAP+zAAQkAAACAoP+v2xEoAAAAAAAAAAAAAAAAAADASgEAAP//C6/ZOQ==") (fail_nth: 35) 19:20:22 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000080)="d1", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 19:20:22 executing program 1: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x440, &(0x7f0000000380)={[{@gid={'gid', 0x3d, 0xee01}}, {@uid}, {@force}, {@type={'type', 0x3d, "54c306e3"}}, {@barrier}, {@nls={'nls', 0x3d, 'cp1251'}}, {@nobarrier}, {@gid}, {@nodecompose}, {@nobarrier}, {@force}, {@nobarrier}, {@uid}, {@umask={'umask', 0x3d, 0x789}}]}, 0x1, 0x5ee, &(0x7f0000000680)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="72797a3135cf2c3f3ce902d76d82a4c90000000000000000000000deb8cc70727486b8a90000ff6316d2f6fe2000000000400000003901000100d49f02fb634ff8cecd19f692bdc62760e81784a813e39785551764917eb498"], 0x81) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x8dc, 0xf000) 19:20:22 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e0300260f0b12d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) 19:20:22 executing program 3: execveat(0xffffffffffffffff, &(0x7f0000000a40)='./file0\x00', &(0x7f0000000ac0)=[0x0], 0x0, 0x0) 19:20:22 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001700)=[@cred={{0x1c, 0x1, 0x2, {r2, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x38}, 0x0) [ 618.079882][T13679] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. 19:20:22 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x31, &(0x7f0000000080)=@raw={'raw\x00', 0x9, 0x3, 0x1e0, 0xe0, 0xffffffff, 0xffffffff, 0xe0, 0xffffffff, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x240) 19:20:22 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e030026100b12d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) 19:20:22 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x5411, &(0x7f0000000400)={'erspan0\x00', 0x0}) 19:20:22 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x140e, 0x529, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}}, 0x0) [ 618.235572][T13689] loop1: detected capacity change from 0 to 1024 19:20:22 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e030026110b12d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) 19:20:22 executing program 3: syz_emit_ethernet(0x46, &(0x7f0000001300)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "5ca5cc", 0x10, 0x2c, 0x0, @private1, @mcast1={0x0}, {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) [ 618.503591][T13705] FAULT_INJECTION: forcing a failure. [ 618.503591][T13705] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 618.516963][T13705] CPU: 0 PID: 13705 Comm: syz-executor.4 Not tainted 6.2.0-rc5-next-20230127-syzkaller-08766-ge2f86c02fdc9 #0 [ 618.528641][T13705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 618.538737][T13705] Call Trace: [ 618.542049][T13705] [ 618.545016][T13705] dump_stack_lvl+0x136/0x150 [ 618.549743][T13705] should_fail_ex+0x4a3/0x5b0 [ 618.554487][T13705] copyin+0x19/0x120 [ 618.558435][T13705] copy_page_from_iter_atomic+0x22b/0x1180 [ 618.564317][T13705] ? folio_flags.constprop.0+0x53/0x150 [ 618.569920][T13705] ? _copy_from_iter_flushcache+0xff0/0xff0 [ 618.575870][T13705] ? shmem_write_begin+0x162/0x380 [ 618.581031][T13705] ? shmem_file_read_iter+0xa40/0xa40 [ 618.586463][T13705] generic_perform_write+0x2ca/0x570 [ 618.591816][T13705] ? folio_add_wait_queue+0x1c0/0x1c0 [ 618.597231][T13705] ? new_inode+0x280/0x280 [ 618.601676][T13705] ? generic_write_checks+0x2c0/0x400 [ 618.607076][T13705] __generic_file_write_iter+0x2ae/0x500 [ 618.612734][T13705] generic_file_write_iter+0xe3/0x350 [ 618.618133][T13705] vfs_write+0x9ed/0xe10 [ 618.622396][T13705] ? kernel_write+0x670/0x670 [ 618.627088][T13705] ? receive_fd+0x110/0x110 [ 618.631632][T13705] ? __fget_files+0x26a/0x480 [ 618.636350][T13705] ? __fget_light+0xe5/0x270 [ 618.640972][T13705] ksys_write+0x12b/0x250 [ 618.645317][T13705] ? __ia32_sys_read+0xb0/0xb0 [ 618.650123][T13705] ? syscall_enter_from_user_mode+0x26/0xb0 [ 618.656050][T13705] do_syscall_64+0x39/0xb0 [ 618.660498][T13705] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 618.666411][T13705] RIP: 0033:0x7f11b0e3de4f [ 618.670840][T13705] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 618.690465][T13705] RSP: 002b:00007f11b1bfff10 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 618.698897][T13705] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f11b0e3de4f [ 618.706980][T13705] RDX: 0000000000400000 RSI: 00007f11a75ff000 RDI: 0000000000000004 [ 618.716108][T13705] RBP: 00007f11a75ff000 R08: 0000000000000000 R09: 00000000000010fc [ 618.724099][T13705] R10: 0000000000400000 R11: 0000000000000293 R12: 0000000000000000 [ 618.732088][T13705] R13: 00007f11b1bfffdc R14: 00007f11b1bfffe0 R15: 00000000200022c2 [ 618.740091][T13705] [ 618.792589][T13705] loop4: detected capacity change from 0 to 8192 [ 618.800866][T13705] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 618.814334][T13705] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 618.824242][T13705] REISERFS (device loop4): using ordered data mode [ 618.831356][T13705] reiserfs: using flush barriers 19:20:22 executing program 4: syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000001140)='./file0\x00', 0x4408, &(0x7f0000000140)={[{@balloc_notest4}, {@balloc_test4}, {@jqfmt_vfsold}, {@balloc_test4}, {@grpjquota, 0x3d}]}, 0x1, 0x1102, &(0x7f00000022c0)="$eJzs2LFqFEEcBvBv9g5MdzLpF0ELCwkJZ2eVIsK11jYiqUyVqyI2vouPI6nsQx7AImAprEyyl6SIBMzJEfj94Gbmvp3Z/045EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjypjXbXVJXSZekJH1/ujhP0q/yp98nXUreHS6WB8fzt8txasu6lDZsy1L3nm/VeZ3Xvfp6e/9FXZ58/vTh6OjweHxNSZ+zi/VvpNWe/O3h1vrrAQAAwGMxPNhsw/UBAACA+6ztIgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgHw2zm3FN8nsYhnRJStL3p4vzJP0mPxAAAAB4sJIu72d35bm8BrjxKj9m5Tpv/a/Sxrv5dsd6AAAA4LbpvTPKrfP4y0yvz+Ute5Zpdnau/o9dfu4nk5OD7ObJmHy9bM8uvnxc/cow+R+bAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAP+zAAQkAAACAoP+v2xEoAAAAAAAAAAAAAAAAAADASgEAAP//C6/ZOQ==") (fail_nth: 36) 19:20:22 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x4, &(0x7f0000002780)=@framed={{}, [@call]}, &(0x7f00000002c0)='GPL\x00', 0x1, 0xc0, &(0x7f0000000300)=""/192, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:20:22 executing program 1: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x440, &(0x7f0000000380)={[{@gid={'gid', 0x3d, 0xee01}}, {@uid}, {@force}, {@type={'type', 0x3d, "54c306e3"}}, {@barrier}, {@nls={'nls', 0x3d, 'cp1251'}}, {@nobarrier}, {@gid}, {@nodecompose}, {@nobarrier}, {@force}, {@nobarrier}, {@uid}, {@umask={'umask', 0x3d, 0x789}}]}, 0x1, 0x5ee, &(0x7f0000000680)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="72797a3135cf2c3f3ce902d76d82a4c90000000000000000000000deb8cc70727486b8a90000ff6316d2f6fe2000000000400000003901000100d49f02fb634ff8cecd19f692bdc62760e81784a813e39785551764917eb498"], 0x81) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x8dc, 0xff00) 19:20:22 executing program 0: r0 = socket(0x11, 0xa, 0x0) write$binfmt_script(r0, 0x0, 0x0) 19:20:22 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x10}}], 0x10}, 0x0) 19:20:22 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e030026130b12d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) [ 618.841263][T13705] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 618.861465][T13705] REISERFS (device loop4): checking transaction log (loop4) [ 618.870999][T13705] REISERFS (device loop4): Using rupasov hash to sort names [ 618.878781][T13705] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. 19:20:22 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x2c, 0x0, 0x0) 19:20:22 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, './file0/file0\x00'}, 0x6e) 19:20:22 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {0x3}]}) 19:20:22 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e030026350b12d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) [ 618.968674][T13715] loop1: detected capacity change from 0 to 1024 19:20:23 executing program 1: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x440, &(0x7f0000000380)={[{@gid={'gid', 0x3d, 0xee01}}, {@uid}, {@force}, {@type={'type', 0x3d, "54c306e3"}}, {@barrier}, {@nls={'nls', 0x3d, 'cp1251'}}, {@nobarrier}, {@gid}, {@nodecompose}, {@nobarrier}, {@force}, {@nobarrier}, {@uid}, {@umask={'umask', 0x3d, 0x789}}]}, 0x1, 0x5ee, &(0x7f0000000680)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="72797a3135cf2c3f3ce902d76d82a4c90000000000000000000000deb8cc70727486b8a90000ff6316d2f6fe2000000000400000003901000100d49f02fb634ff8cecd19f692bdc62760e81784a813e39785551764917eb498"], 0x81) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x8dc, 0x200000) 19:20:23 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8922, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @multicast1}}}}) [ 619.207584][T13728] sit0: mtu greater than device maximum [ 619.257117][T13727] loop1: detected capacity change from 0 to 1024 [ 619.345832][T13730] FAULT_INJECTION: forcing a failure. [ 619.345832][T13730] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 619.359418][T13730] CPU: 0 PID: 13730 Comm: syz-executor.4 Not tainted 6.2.0-rc5-next-20230127-syzkaller-08766-ge2f86c02fdc9 #0 [ 619.371102][T13730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 619.381195][T13730] Call Trace: [ 619.384510][T13730] [ 619.387479][T13730] dump_stack_lvl+0x136/0x150 [ 619.392212][T13730] should_fail_ex+0x4a3/0x5b0 [ 619.396942][T13730] prepare_alloc_pages+0x178/0x570 [ 619.402104][T13730] ? print_usage_bug.part.0+0x660/0x660 [ 619.407713][T13730] __alloc_pages+0x149/0x5c0 [ 619.412352][T13730] ? __alloc_pages_slowpath.constprop.0+0x23f0/0x23f0 [ 619.419181][T13730] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 619.425490][T13730] __folio_alloc+0x16/0x40 [ 619.429956][T13730] vma_alloc_folio+0x155/0x880 [ 619.434788][T13730] ? policy_nodemask+0x1c0/0x1c0 [ 619.439801][T13730] ? find_held_lock+0x2d/0x110 [ 619.444627][T13730] shmem_alloc_folio+0xff/0x1c0 [ 619.449530][T13730] ? shmem_link+0x370/0x370 [ 619.454053][T13730] ? percpu_counter_add_batch+0x170/0x1e0 [ 619.459782][T13730] ? __vm_enough_memory+0x188/0x3f0 [ 619.465004][T13730] shmem_alloc_and_acct_folio+0x15e/0x5d0 [ 619.470770][T13730] shmem_get_folio_gfp+0xacd/0x1950 [ 619.476011][T13730] ? shmem_alloc_and_acct_folio+0x5d0/0x5d0 [ 619.481936][T13730] shmem_write_begin+0x14a/0x380 [ 619.486896][T13730] ? shmem_file_read_iter+0xa40/0xa40 [ 619.492299][T13730] generic_perform_write+0x256/0x570 [ 619.497631][T13730] ? folio_add_wait_queue+0x1c0/0x1c0 [ 619.503038][T13730] ? new_inode+0x280/0x280 [ 619.507483][T13730] ? generic_write_checks+0x2c0/0x400 [ 619.512882][T13730] __generic_file_write_iter+0x2ae/0x500 [ 619.518633][T13730] generic_file_write_iter+0xe3/0x350 [ 619.524047][T13730] vfs_write+0x9ed/0xe10 [ 619.528309][T13730] ? kernel_write+0x670/0x670 [ 619.533024][T13730] ? receive_fd+0x110/0x110 [ 619.537563][T13730] ? __fget_files+0x26a/0x480 [ 619.542278][T13730] ? __fget_light+0xe5/0x270 [ 619.546902][T13730] ksys_write+0x12b/0x250 [ 619.551246][T13730] ? __ia32_sys_read+0xb0/0xb0 [ 619.556027][T13730] ? syscall_enter_from_user_mode+0x26/0xb0 [ 619.561967][T13730] do_syscall_64+0x39/0xb0 [ 619.566417][T13730] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 619.572333][T13730] RIP: 0033:0x7f11b0e3de4f [ 619.576773][T13730] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 619.596406][T13730] RSP: 002b:00007f11b1bfff10 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 619.604838][T13730] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f11b0e3de4f [ 619.612824][T13730] RDX: 0000000000400000 RSI: 00007f11a75ff000 RDI: 0000000000000004 [ 619.620829][T13730] RBP: 00007f11a75ff000 R08: 0000000000000000 R09: 00000000000010fc [ 619.629434][T13730] R10: 0000000000400000 R11: 0000000000000293 R12: 0000000000000000 [ 619.638047][T13730] R13: 00007f11b1bfffdc R14: 00007f11b1bfffe0 R15: 00000000200022c2 19:20:23 executing program 4: syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000001140)='./file0\x00', 0x4408, &(0x7f0000000140)={[{@balloc_notest4}, {@balloc_test4}, {@jqfmt_vfsold}, {@balloc_test4}, {@grpjquota, 0x3d}]}, 0x1, 0x1102, &(0x7f00000022c0)="$eJzs2LFqFEEcBvBv9g5MdzLpF0ELCwkJZ2eVIsK11jYiqUyVqyI2vouPI6nsQx7AImAprEyyl6SIBMzJEfj94Gbmvp3Z/045EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjypjXbXVJXSZekJH1/ujhP0q/yp98nXUreHS6WB8fzt8txasu6lDZsy1L3nm/VeZ3Xvfp6e/9FXZ58/vTh6OjweHxNSZ+zi/VvpNWe/O3h1vrrAQAAwGMxPNhsw/UBAACA+6ztIgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgHw2zm3FN8nsYhnRJStL3p4vzJP0mPxAAAAB4sJIu72d35bm8BrjxKj9m5Tpv/a/Sxrv5dsd6AAAA4LbpvTPKrfP4y0yvz+Ute5Zpdnau/o9dfu4nk5OD7ObJmHy9bM8uvnxc/cow+R+bAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAP+zAAQkAAACAoP+v2xEoAAAAAAAAAAAAAAAAAADASgEAAP//C6/ZOQ==") (fail_nth: 37) 19:20:23 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x10e, 0x23, 0x0, 0x0) 19:20:23 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e030026480b12d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) 19:20:23 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1, 0x7, 0xfa, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 19:20:23 executing program 3: execveat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000440)=[&(0x7f00000002c0)='%&X#}\x00', 0xffffffffffffffff], 0x0) 19:20:23 executing program 1: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x440, &(0x7f0000000380)={[{@gid={'gid', 0x3d, 0xee01}}, {@uid}, {@force}, {@type={'type', 0x3d, "54c306e3"}}, {@barrier}, {@nls={'nls', 0x3d, 'cp1251'}}, {@nobarrier}, {@gid}, {@nodecompose}, {@nobarrier}, {@force}, {@nobarrier}, {@uid}, {@umask={'umask', 0x3d, 0x789}}]}, 0x1, 0x5ee, &(0x7f0000000680)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="72797a3135cf2c3f3ce902d76d82a4c90000000000000000000000deb8cc70727486b8a90000ff6316d2f6fe2000000000400000003901000100d49f02fb634ff8cecd19f692bdc62760e81784a813e39785551764917eb498"], 0x81) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x8dc, 0xf0ffff) [ 619.646064][T13730] 19:20:23 executing program 5: socket$inet_sctp(0x2, 0x0, 0x84) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x51}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x30}, 0x18) r0 = geteuid() statx(0xffffffffffffffff, 0x0, 0x4000, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', r0, r1, 0x400) accept$unix(0xffffffffffffffff, &(0x7f0000000440)=@abs, &(0x7f00000004c0)=0x6e) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x7f, 0x7ff, 0x80, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x157300, 0x0) 19:20:23 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e0300264c0b12d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) 19:20:23 executing program 0: shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x5000) getitimer(0x0, &(0x7f0000000000)) 19:20:23 executing program 3: r0 = socket(0x1, 0x3, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) [ 619.771370][T13738] loop1: detected capacity change from 0 to 1024 19:20:23 executing program 0: accept$unix(0xffffffffffffffff, 0x0, &(0x7f00000004c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x7f, 0x7ff, 0x80, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 19:20:23 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) openat2(0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x0, 0x30}, 0x18) geteuid() statx(0xffffffffffffffff, 0x0, 0x4000, 0x200, 0x0) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x7f, 0x7ff, 0x80, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x48) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18}, './file0/file0\x00'}) accept$unix(0xffffffffffffffff, &(0x7f0000000440)=@abs, &(0x7f00000004c0)=0x6e) [ 619.980974][T13742] FAULT_INJECTION: forcing a failure. [ 619.980974][T13742] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 620.063441][T13742] CPU: 1 PID: 13742 Comm: syz-executor.4 Not tainted 6.2.0-rc5-next-20230127-syzkaller-08766-ge2f86c02fdc9 #0 [ 620.075156][T13742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 620.085256][T13742] Call Trace: [ 620.088590][T13742] [ 620.091559][T13742] dump_stack_lvl+0x136/0x150 [ 620.096297][T13742] should_fail_ex+0x4a3/0x5b0 [ 620.101030][T13742] prepare_alloc_pages+0x178/0x570 [ 620.106192][T13742] ? print_usage_bug.part.0+0x660/0x660 [ 620.111792][T13742] __alloc_pages+0x149/0x5c0 [ 620.116417][T13742] ? __alloc_pages_slowpath.constprop.0+0x23f0/0x23f0 [ 620.123233][T13742] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 620.129252][T13742] __folio_alloc+0x16/0x40 [ 620.133691][T13742] vma_alloc_folio+0x155/0x880 [ 620.138490][T13742] ? policy_nodemask+0x1c0/0x1c0 [ 620.143470][T13742] ? find_held_lock+0x2d/0x110 [ 620.148261][T13742] shmem_alloc_folio+0xff/0x1c0 [ 620.153144][T13742] ? shmem_link+0x370/0x370 [ 620.157690][T13742] ? percpu_counter_add_batch+0x170/0x1e0 [ 620.163439][T13742] ? __vm_enough_memory+0x188/0x3f0 [ 620.168657][T13742] shmem_alloc_and_acct_folio+0x15e/0x5d0 [ 620.174401][T13742] shmem_get_folio_gfp+0xacd/0x1950 [ 620.179629][T13742] ? shmem_alloc_and_acct_folio+0x5d0/0x5d0 [ 620.185550][T13742] shmem_write_begin+0x14a/0x380 [ 620.190511][T13742] ? shmem_file_read_iter+0xa40/0xa40 [ 620.195913][T13742] generic_perform_write+0x256/0x570 [ 620.201279][T13742] ? folio_add_wait_queue+0x1c0/0x1c0 [ 620.206779][T13742] ? new_inode+0x280/0x280 [ 620.211230][T13742] ? generic_write_checks+0x2c0/0x400 [ 620.216629][T13742] __generic_file_write_iter+0x2ae/0x500 [ 620.222289][T13742] generic_file_write_iter+0xe3/0x350 [ 620.227683][T13742] vfs_write+0x9ed/0xe10 [ 620.231947][T13742] ? kernel_write+0x670/0x670 [ 620.236636][T13742] ? receive_fd+0x110/0x110 [ 620.241171][T13742] ? __fget_files+0x26a/0x480 [ 620.245889][T13742] ? __fget_light+0xe5/0x270 [ 620.250524][T13742] ksys_write+0x12b/0x250 [ 620.254878][T13742] ? __ia32_sys_read+0xb0/0xb0 [ 620.259657][T13742] ? syscall_enter_from_user_mode+0x26/0xb0 [ 620.265595][T13742] do_syscall_64+0x39/0xb0 [ 620.270127][T13742] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 620.276150][T13742] RIP: 0033:0x7f11b0e3de4f [ 620.280582][T13742] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 620.300205][T13742] RSP: 002b:00007f11b1bfff10 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 620.308635][T13742] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f11b0e3de4f [ 620.316618][T13742] RDX: 0000000000400000 RSI: 00007f11a75ff000 RDI: 0000000000000004 [ 620.324602][T13742] RBP: 00007f11a75ff000 R08: 0000000000000000 R09: 00000000000010fc [ 620.332584][T13742] R10: 0000000000400000 R11: 0000000000000293 R12: 0000000000000000 [ 620.340568][T13742] R13: 00007f11b1bfffdc R14: 00007f11b1bfffe0 R15: 00000000200022c2 [ 620.348587][T13742] 19:20:24 executing program 4: syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000001140)='./file0\x00', 0x4408, &(0x7f0000000140)={[{@balloc_notest4}, {@balloc_test4}, {@jqfmt_vfsold}, {@balloc_test4}, {@grpjquota, 0x3d}]}, 0x1, 0x1102, &(0x7f00000022c0)="$eJzs2LFqFEEcBvBv9g5MdzLpF0ELCwkJZ2eVIsK11jYiqUyVqyI2vouPI6nsQx7AImAprEyyl6SIBMzJEfj94Gbmvp3Z/045EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjypjXbXVJXSZekJH1/ujhP0q/yp98nXUreHS6WB8fzt8txasu6lDZsy1L3nm/VeZ3Xvfp6e/9FXZ58/vTh6OjweHxNSZ+zi/VvpNWe/O3h1vrrAQAAwGMxPNhsw/UBAACA+6ztIgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgHw2zm3FN8nsYhnRJStL3p4vzJP0mPxAAAAB4sJIu72d35bm8BrjxKj9m5Tpv/a/Sxrv5dsd6AAAA4LbpvTPKrfP4y0yvz+Ute5Zpdnau/o9dfu4nk5OD7ObJmHy9bM8uvnxc/cow+R+bAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAP+zAAQkAAACAoP+v2xEoAAAAAAAAAAAAAAAAAADASgEAAP//C6/ZOQ==") (fail_nth: 38) 19:20:24 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e030026600b12d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) 19:20:24 executing program 1: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x440, &(0x7f0000000380)={[{@gid={'gid', 0x3d, 0xee01}}, {@uid}, {@force}, {@type={'type', 0x3d, "54c306e3"}}, {@barrier}, {@nls={'nls', 0x3d, 'cp1251'}}, {@nobarrier}, {@gid}, {@nodecompose}, {@nobarrier}, {@force}, {@nobarrier}, {@uid}, {@umask={'umask', 0x3d, 0x789}}]}, 0x1, 0x5ee, &(0x7f0000000680)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="72797a3135cf2c3f3ce902d76d82a4c90000000000000000000000deb8cc70727486b8a90000ff6316d2f6fe2000000000400000003901000100d49f02fb634ff8cecd19f692bdc62760e81784a813e39785551764917eb498"], 0x81) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x8dc, 0x1000000) 19:20:24 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed1}, 0x0) 19:20:24 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0xf, &(0x7f0000000080)=@raw={'raw\x00', 0x9, 0x3, 0x1e0, 0xe0, 0xffffffff, 0xffffffff, 0xe0, 0xffffffff, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x240) 19:20:24 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000380)={'tunl0\x00', &(0x7f00000002c0)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @dev}}}}) [ 620.522846][T13765] loop1: detected capacity change from 0 to 1024 19:20:24 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x2, 0x0, 0x4) 19:20:24 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e030026680b12d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) 19:20:24 executing program 0: r0 = socket(0x11, 0xa, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0xf0ff7f}, 0x0) 19:20:24 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000002780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff000000}}, &(0x7f00000002c0)='GPL\x00', 0x4, 0xc0, &(0x7f0000000300)=""/192, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:20:24 executing program 1: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x440, &(0x7f0000000380)={[{@gid={'gid', 0x3d, 0xee01}}, {@uid}, {@force}, {@type={'type', 0x3d, "54c306e3"}}, {@barrier}, {@nls={'nls', 0x3d, 'cp1251'}}, {@nobarrier}, {@gid}, {@nodecompose}, {@nobarrier}, {@force}, {@nobarrier}, {@uid}, {@umask={'umask', 0x3d, 0x789}}]}, 0x1, 0x5ee, &(0x7f0000000680)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="72797a3135cf2c3f3ce902d76d82a4c90000000000000000000000deb8cc70727486b8a90000ff6316d2f6fe2000000000400000003901000100d49f02fb634ff8cecd19f692bdc62760e81784a813e39785551764917eb498"], 0x81) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x8dc, 0x2000000) 19:20:24 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) [ 620.749513][T13767] FAULT_INJECTION: forcing a failure. [ 620.749513][T13767] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 620.762943][T13767] CPU: 0 PID: 13767 Comm: syz-executor.4 Not tainted 6.2.0-rc5-next-20230127-syzkaller-08766-ge2f86c02fdc9 #0 [ 620.774635][T13767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 620.784901][T13767] Call Trace: [ 620.788213][T13767] [ 620.791180][T13767] dump_stack_lvl+0x136/0x150 [ 620.795913][T13767] should_fail_ex+0x4a3/0x5b0 [ 620.799695][T13781] loop1: detected capacity change from 0 to 1024 [ 620.800618][T13767] copyin+0x19/0x120 [ 620.800661][T13767] copy_page_from_iter_atomic+0x22b/0x1180 [ 620.816748][T13767] ? folio_flags.constprop.0+0x53/0x150 [ 620.822343][T13767] ? _copy_from_iter_flushcache+0xff0/0xff0 [ 620.828278][T13767] ? shmem_write_begin+0x162/0x380 [ 620.833424][T13767] ? shmem_file_read_iter+0xa40/0xa40 [ 620.838851][T13767] generic_perform_write+0x2ca/0x570 [ 620.844208][T13767] ? folio_add_wait_queue+0x1c0/0x1c0 [ 620.849645][T13767] ? new_inode+0x280/0x280 [ 620.854124][T13767] ? generic_write_checks+0x2c0/0x400 [ 620.859553][T13767] __generic_file_write_iter+0x2ae/0x500 [ 620.865287][T13767] generic_file_write_iter+0xe3/0x350 [ 620.870795][T13767] vfs_write+0x9ed/0xe10 [ 620.875071][T13767] ? kernel_write+0x670/0x670 [ 620.879760][T13767] ? receive_fd+0x110/0x110 [ 620.884299][T13767] ? __fget_files+0x26a/0x480 [ 620.889014][T13767] ? __fget_light+0xe5/0x270 [ 620.893642][T13767] ksys_write+0x12b/0x250 [ 620.897992][T13767] ? __ia32_sys_read+0xb0/0xb0 [ 620.902773][T13767] ? syscall_enter_from_user_mode+0x26/0xb0 [ 620.908701][T13767] do_syscall_64+0x39/0xb0 [ 620.913151][T13767] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 620.919069][T13767] RIP: 0033:0x7f11b0e3de4f [ 620.923499][T13767] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 620.943124][T13767] RSP: 002b:00007f11b1bfff10 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 620.951565][T13767] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f11b0e3de4f [ 620.959553][T13767] RDX: 0000000000400000 RSI: 00007f11a75ff000 RDI: 0000000000000004 [ 620.967535][T13767] RBP: 00007f11a75ff000 R08: 0000000000000000 R09: 00000000000010fc [ 620.975518][T13767] R10: 0000000000400000 R11: 0000000000000293 R12: 0000000000000000 [ 620.983501][T13767] R13: 00007f11b1bfffdc R14: 00007f11b1bfffe0 R15: 00000000200022c2 [ 620.991505][T13767] [ 621.104919][T13767] loop4: detected capacity change from 0 to 8192 [ 621.116583][T13767] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 621.129665][T13767] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 621.139530][T13767] REISERFS (device loop4): using ordered data mode [ 621.146462][T13767] reiserfs: using flush barriers 19:20:25 executing program 4: syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000001140)='./file0\x00', 0x4408, &(0x7f0000000140)={[{@balloc_notest4}, {@balloc_test4}, {@jqfmt_vfsold}, {@balloc_test4}, {@grpjquota, 0x3d}]}, 0x1, 0x1102, &(0x7f00000022c0)="$eJzs2LFqFEEcBvBv9g5MdzLpF0ELCwkJZ2eVIsK11jYiqUyVqyI2vouPI6nsQx7AImAprEyyl6SIBMzJEfj94Gbmvp3Z/045EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjypjXbXVJXSZekJH1/ujhP0q/yp98nXUreHS6WB8fzt8txasu6lDZsy1L3nm/VeZ3Xvfp6e/9FXZ58/vTh6OjweHxNSZ+zi/VvpNWe/O3h1vrrAQAAwGMxPNhsw/UBAACA+6ztIgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgHw2zm3FN8nsYhnRJStL3p4vzJP0mPxAAAAB4sJIu72d35bm8BrjxKj9m5Tpv/a/Sxrv5dsd6AAAA4LbpvTPKrfP4y0yvz+Ute5Zpdnau/o9dfu4nk5OD7ObJmHy9bM8uvnxc/cow+R+bAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAP+zAAQkAAACAoP+v2xEoAAAAAAAAAAAAAAAAAADASgEAAP//C6/ZOQ==") (fail_nth: 39) 19:20:25 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0xc, &(0x7f0000000080)=@raw={'raw\x00', 0x9, 0x3, 0x1e0, 0xe0, 0xffffffff, 0xffffffff, 0xe0, 0xffffffff, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x240) 19:20:25 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e0300266c0b12d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) 19:20:25 executing program 5: r0 = socket(0x11, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8970, &(0x7f0000000400)={'sit0\x00', 0x0}) 19:20:25 executing program 1: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x440, &(0x7f0000000380)={[{@gid={'gid', 0x3d, 0xee01}}, {@uid}, {@force}, {@type={'type', 0x3d, "54c306e3"}}, {@barrier}, {@nls={'nls', 0x3d, 'cp1251'}}, {@nobarrier}, {@gid}, {@nodecompose}, {@nobarrier}, {@force}, {@nobarrier}, {@uid}, {@umask={'umask', 0x3d, 0x789}}]}, 0x1, 0x5ee, &(0x7f0000000680)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="72797a3135cf2c3f3ce902d76d82a4c90000000000000000000000deb8cc70727486b8a90000ff6316d2f6fe2000000000400000003901000100d49f02fb634ff8cecd19f692bdc62760e81784a813e39785551764917eb498"], 0x81) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x8dc, 0x3000000) 19:20:25 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x18, &(0x7f0000000080)=@raw={'raw\x00', 0x9, 0x3, 0x1e0, 0xe0, 0xffffffff, 0xffffffff, 0xe0, 0xffffffff, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x240) [ 621.155330][T13767] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 621.172119][T13767] REISERFS (device loop4): checking transaction log (loop4) [ 621.180857][T13767] REISERFS (device loop4): Using rupasov hash to sort names [ 621.189215][T13767] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. 19:20:25 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001700)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x5000}, 0x0) 19:20:25 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0xa, &(0x7f0000001700)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}, 0x0) 19:20:25 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e030026740b12d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) 19:20:25 executing program 3: utimensat(0xffffffffffffffff, 0x0, 0x0, 0xd9909f4f14fa838f) 19:20:25 executing program 5: r0 = socket(0x11, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8942, &(0x7f0000000400)={'sit0\x00', 0x0}) 19:20:25 executing program 0: r0 = socket(0x11, 0x3, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x8954, 0x0) [ 621.342921][T13790] loop1: detected capacity change from 0 to 1024 [ 621.603861][T13806] FAULT_INJECTION: forcing a failure. [ 621.603861][T13806] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 621.617541][T13806] CPU: 1 PID: 13806 Comm: syz-executor.4 Not tainted 6.2.0-rc5-next-20230127-syzkaller-08766-ge2f86c02fdc9 #0 [ 621.629217][T13806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 621.639307][T13806] Call Trace: [ 621.642603][T13806] [ 621.645563][T13806] dump_stack_lvl+0x136/0x150 [ 621.650286][T13806] should_fail_ex+0x4a3/0x5b0 [ 621.655105][T13806] copyin+0x19/0x120 [ 621.659064][T13806] copy_page_from_iter_atomic+0x22b/0x1180 [ 621.664949][T13806] ? folio_flags.constprop.0+0x53/0x150 [ 621.670547][T13806] ? _copy_from_iter_flushcache+0xff0/0xff0 [ 621.676503][T13806] ? shmem_write_begin+0x162/0x380 [ 621.681661][T13806] ? shmem_file_read_iter+0xa40/0xa40 [ 621.687127][T13806] generic_perform_write+0x2ca/0x570 [ 621.692496][T13806] ? folio_add_wait_queue+0x1c0/0x1c0 [ 621.697924][T13806] ? new_inode+0x280/0x280 [ 621.702376][T13806] ? generic_write_checks+0x2c0/0x400 [ 621.707778][T13806] __generic_file_write_iter+0x2ae/0x500 [ 621.713462][T13806] generic_file_write_iter+0xe3/0x350 [ 621.718862][T13806] vfs_write+0x9ed/0xe10 [ 621.723131][T13806] ? kernel_write+0x670/0x670 [ 621.727887][T13806] ? receive_fd+0x110/0x110 [ 621.732425][T13806] ? __fget_files+0x26a/0x480 [ 621.737148][T13806] ? __fget_light+0xe5/0x270 [ 621.741771][T13806] ksys_write+0x12b/0x250 [ 621.746152][T13806] ? __ia32_sys_read+0xb0/0xb0 [ 621.750937][T13806] ? syscall_enter_from_user_mode+0x26/0xb0 [ 621.756868][T13806] do_syscall_64+0x39/0xb0 [ 621.761345][T13806] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 621.767272][T13806] RIP: 0033:0x7f11b0e3de4f [ 621.771807][T13806] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 621.791437][T13806] RSP: 002b:00007f11b1bfff10 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 621.799870][T13806] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f11b0e3de4f [ 621.807857][T13806] RDX: 0000000000400000 RSI: 00007f11a75ff000 RDI: 0000000000000004 [ 621.815839][T13806] RBP: 00007f11a75ff000 R08: 0000000000000000 R09: 00000000000010fc [ 621.823821][T13806] R10: 0000000000400000 R11: 0000000000000293 R12: 0000000000000000 [ 621.831802][T13806] R13: 00007f11b1bfffdc R14: 00007f11b1bfffe0 R15: 00000000200022c2 [ 621.839806][T13806] [ 621.917916][T13806] loop4: detected capacity change from 0 to 8192 [ 621.929028][T13806] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 621.942195][T13806] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 621.952042][T13806] REISERFS (device loop4): using ordered data mode [ 621.960011][T13806] reiserfs: using flush barriers [ 621.970649][T13806] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 621.987115][T13806] REISERFS (device loop4): checking transaction log (loop4) [ 621.995436][T13806] REISERFS (device loop4): Using rupasov hash to sort names [ 622.003153][T13806] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. 19:20:25 executing program 4: syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000001140)='./file0\x00', 0x4408, &(0x7f0000000140)={[{@balloc_notest4}, {@balloc_test4}, {@jqfmt_vfsold}, {@balloc_test4}, {@grpjquota, 0x3d}]}, 0x1, 0x1102, &(0x7f00000022c0)="$eJzs2LFqFEEcBvBv9g5MdzLpF0ELCwkJZ2eVIsK11jYiqUyVqyI2vouPI6nsQx7AImAprEyyl6SIBMzJEfj94Gbmvp3Z/045EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjypjXbXVJXSZekJH1/ujhP0q/yp98nXUreHS6WB8fzt8txasu6lDZsy1L3nm/VeZ3Xvfp6e/9FXZ58/vTh6OjweHxNSZ+zi/VvpNWe/O3h1vrrAQAAwGMxPNhsw/UBAACA+6ztIgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgHw2zm3FN8nsYhnRJStL3p4vzJP0mPxAAAAB4sJIu72d35bm8BrjxKj9m5Tpv/a/Sxrv5dsd6AAAA4LbpvTPKrfP4y0yvz+Ute5Zpdnau/o9dfu4nk5OD7ObJmHy9bM8uvnxc/cow+R+bAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAP+zAAQkAAACAoP+v2xEoAAAAAAAAAAAAAAAAAADASgEAAP//C6/ZOQ==") (fail_nth: 40) 19:20:25 executing program 1: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x440, &(0x7f0000000380)={[{@gid={'gid', 0x3d, 0xee01}}, {@uid}, {@force}, {@type={'type', 0x3d, "54c306e3"}}, {@barrier}, {@nls={'nls', 0x3d, 'cp1251'}}, {@nobarrier}, {@gid}, {@nodecompose}, {@nobarrier}, {@force}, {@nobarrier}, {@uid}, {@umask={'umask', 0x3d, 0x789}}]}, 0x1, 0x5ee, &(0x7f0000000680)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="72797a3135cf2c3f3ce902d76d82a4c90000000000000000000000deb8cc70727486b8a90000ff6316d2f6fe2000000000400000003901000100d49f02fb634ff8cecd19f692bdc62760e81784a813e39785551764917eb498"], 0x81) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x8dc, 0x4000000) 19:20:25 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e0300267a0b12d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) 19:20:25 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x32, &(0x7f0000000080)=@raw={'raw\x00', 0x9, 0x3, 0x1e0, 0xe0, 0xffffffff, 0xffffffff, 0xe0, 0xffffffff, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x240) 19:20:25 executing program 5: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000002780)=@framed, &(0x7f00000002c0)='GPL\x00', 0x4, 0xb3, &(0x7f0000000300)=""/179, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000018c0)={r0, 0xe0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001680)=[0x0], 0x0, 0x8, &(0x7f0000001600)=[{}], 0x8, 0x10, &(0x7f0000001700), &(0x7f0000001740), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001780)}}, 0x10) 19:20:25 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x31, 0x0, 0x0) 19:20:26 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x17, 0x0, 0x0, 0xc2, 0x0, 0x1}, 0x48) 19:20:26 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x75, &(0x7f0000000000), 0x8) 19:20:26 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e030026001212d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) 19:20:26 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet6(r0, 0x0, 0x0, 0xae91d508544dc27, 0x0, 0x0) 19:20:26 executing program 0: r0 = socket(0x11, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8918, &(0x7f0000000400)={'sit0\x00', 0x0}) 19:20:26 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f00000013c0)=[{{&(0x7f0000000100)={0xa, 0x0, 0x1ff, @remote, 0x2}, 0x1c, &(0x7f0000001140)=[{&(0x7f0000000140)="17", 0x1}], 0x1}}], 0x1, 0x4840) [ 622.197067][T13817] loop1: detected capacity change from 0 to 1024 [ 622.444244][T13831] FAULT_INJECTION: forcing a failure. [ 622.444244][T13831] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 622.458313][T13831] CPU: 1 PID: 13831 Comm: syz-executor.4 Not tainted 6.2.0-rc5-next-20230127-syzkaller-08766-ge2f86c02fdc9 #0 [ 622.469994][T13831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 622.480075][T13831] Call Trace: [ 622.483373][T13831] [ 622.486333][T13831] dump_stack_lvl+0x136/0x150 [ 622.491039][T13831] should_fail_ex+0x4a3/0x5b0 [ 622.495721][T13831] prepare_alloc_pages+0x178/0x570 [ 622.500849][T13831] ? print_usage_bug.part.0+0x660/0x660 [ 622.506443][T13831] __alloc_pages+0x149/0x5c0 [ 622.511052][T13831] ? __alloc_pages_slowpath.constprop.0+0x23f0/0x23f0 [ 622.517841][T13831] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 622.523873][T13831] __folio_alloc+0x16/0x40 [ 622.528324][T13831] vma_alloc_folio+0x155/0x880 [ 622.533139][T13831] ? policy_nodemask+0x1c0/0x1c0 [ 622.538130][T13831] ? find_held_lock+0x2d/0x110 [ 622.542924][T13831] shmem_alloc_folio+0xff/0x1c0 [ 622.547807][T13831] ? shmem_link+0x370/0x370 [ 622.552355][T13831] ? percpu_counter_add_batch+0x170/0x1e0 [ 622.558104][T13831] ? __vm_enough_memory+0x188/0x3f0 [ 622.563328][T13831] shmem_alloc_and_acct_folio+0x15e/0x5d0 [ 622.569249][T13831] shmem_get_folio_gfp+0xacd/0x1950 [ 622.574481][T13831] ? shmem_alloc_and_acct_folio+0x5d0/0x5d0 [ 622.580402][T13831] shmem_write_begin+0x14a/0x380 [ 622.585364][T13831] ? shmem_file_read_iter+0xa40/0xa40 [ 622.590764][T13831] generic_perform_write+0x256/0x570 [ 622.596095][T13831] ? folio_add_wait_queue+0x1c0/0x1c0 [ 622.601500][T13831] ? new_inode+0x280/0x280 [ 622.605943][T13831] ? generic_write_checks+0x2c0/0x400 [ 622.611345][T13831] __generic_file_write_iter+0x2ae/0x500 [ 622.617003][T13831] generic_file_write_iter+0xe3/0x350 [ 622.622401][T13831] vfs_write+0x9ed/0xe10 [ 622.626667][T13831] ? kernel_write+0x670/0x670 [ 622.631355][T13831] ? receive_fd+0x110/0x110 [ 622.635889][T13831] ? __fget_files+0x26a/0x480 [ 622.640625][T13831] ? __fget_light+0xe5/0x270 [ 622.645249][T13831] ksys_write+0x12b/0x250 [ 622.649594][T13831] ? __ia32_sys_read+0xb0/0xb0 [ 622.654376][T13831] ? syscall_enter_from_user_mode+0x26/0xb0 [ 622.660295][T13831] do_syscall_64+0x39/0xb0 [ 622.664741][T13831] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 622.670653][T13831] RIP: 0033:0x7f11b0e3de4f [ 622.675080][T13831] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 622.694794][T13831] RSP: 002b:00007f11b1bfff10 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 622.703238][T13831] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f11b0e3de4f [ 622.711223][T13831] RDX: 0000000000400000 RSI: 00007f11a75ff000 RDI: 0000000000000004 [ 622.719206][T13831] RBP: 00007f11a75ff000 R08: 0000000000000000 R09: 00000000000010fc [ 622.727185][T13831] R10: 0000000000400000 R11: 0000000000000293 R12: 0000000000000000 [ 622.735166][T13831] R13: 00007f11b1bfffdc R14: 00007f11b1bfffe0 R15: 00000000200022c2 19:20:26 executing program 4: syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000001140)='./file0\x00', 0x4408, &(0x7f0000000140)={[{@balloc_notest4}, {@balloc_test4}, {@jqfmt_vfsold}, {@balloc_test4}, {@grpjquota, 0x3d}]}, 0x1, 0x1102, &(0x7f00000022c0)="$eJzs2LFqFEEcBvBv9g5MdzLpF0ELCwkJZ2eVIsK11jYiqUyVqyI2vouPI6nsQx7AImAprEyyl6SIBMzJEfj94Gbmvp3Z/045EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjypjXbXVJXSZekJH1/ujhP0q/yp98nXUreHS6WB8fzt8txasu6lDZsy1L3nm/VeZ3Xvfp6e/9FXZ58/vTh6OjweHxNSZ+zi/VvpNWe/O3h1vrrAQAAwGMxPNhsw/UBAACA+6ztIgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgHw2zm3FN8nsYhnRJStL3p4vzJP0mPxAAAAB4sJIu72d35bm8BrjxKj9m5Tpv/a/Sxrv5dsd6AAAA4LbpvTPKrfP4y0yvz+Ute5Zpdnau/o9dfu4nk5OD7ObJmHy9bM8uvnxc/cow+R+bAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAP+zAAQkAAACAoP+v2xEoAAAAAAAAAAAAAAAAAADASgEAAP//C6/ZOQ==") (fail_nth: 41) 19:20:26 executing program 3: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "9ea699", 0x10, 0x3a, 0x0, @empty, @mcast2, {[], @ni={0x8c}}}}}}, 0x0) 19:20:26 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e030026003512d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) 19:20:26 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x10, 0x0, 0x0) 19:20:26 executing program 1: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x440, &(0x7f0000000380)={[{@gid={'gid', 0x3d, 0xee01}}, {@uid}, {@force}, {@type={'type', 0x3d, "54c306e3"}}, {@barrier}, {@nls={'nls', 0x3d, 'cp1251'}}, {@nobarrier}, {@gid}, {@nodecompose}, {@nobarrier}, {@force}, {@nobarrier}, {@uid}, {@umask={'umask', 0x3d, 0x789}}]}, 0x1, 0x5ee, &(0x7f0000000680)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="72797a3135cf2c3f3ce902d76d82a4c90000000000000000000000deb8cc70727486b8a90000ff6316d2f6fe2000000000400000003901000100d49f02fb634ff8cecd19f692bdc62760e81784a813e39785551764917eb498"], 0x81) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x8dc, 0x5000000) 19:20:26 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000002780)=@framed={{0x18, 0x0, 0x2}}, &(0x7f00000002c0)='GPL\x00', 0x4, 0xc0, &(0x7f0000000300)=""/192, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 622.743167][T13831] 19:20:26 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x27, 0x0, 0x0) 19:20:26 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000002780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100000}}, &(0x7f00000002c0)='GPL\x00', 0x4, 0xc0, &(0x7f0000000300)=""/192, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 622.828536][T13837] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 19:20:26 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000002780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8000009}}, &(0x7f00000002c0)='GPL\x00', 0x4, 0xc0, &(0x7f0000000080)=""/192, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:20:26 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000025c0), 0x0, 0x3a1101) fcntl$dupfd(r0, 0x406, r0) [ 622.868677][T13839] loop1: detected capacity change from 0 to 1024 [ 622.892513][T13837] netlink: 181912 bytes leftover after parsing attributes in process `syz-executor.2'. 19:20:26 executing program 1: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x440, &(0x7f0000000380)={[{@gid={'gid', 0x3d, 0xee01}}, {@uid}, {@force}, {@type={'type', 0x3d, "54c306e3"}}, {@barrier}, {@nls={'nls', 0x3d, 'cp1251'}}, {@nobarrier}, {@gid}, {@nodecompose}, {@nobarrier}, {@force}, {@nobarrier}, {@uid}, {@umask={'umask', 0x3d, 0x789}}]}, 0x1, 0x5ee, &(0x7f0000000680)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="72797a3135cf2c3f3ce902d76d82a4c90000000000000000000000deb8cc70727486b8a90000ff6316d2f6fe2000000000400000003901000100d49f02fb634ff8cecd19f692bdc62760e81784a813e39785551764917eb498"], 0x81) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x8dc, 0x6000000) 19:20:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="10000000", @ANYRES16=r1, @ANYBLOB='m'], 0x14}}, 0x0) [ 623.056756][T13843] FAULT_INJECTION: forcing a failure. [ 623.056756][T13843] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 623.070060][T13843] CPU: 0 PID: 13843 Comm: syz-executor.4 Not tainted 6.2.0-rc5-next-20230127-syzkaller-08766-ge2f86c02fdc9 #0 [ 623.081743][T13843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 623.083064][T13854] loop1: detected capacity change from 0 to 1024 [ 623.091810][T13843] Call Trace: [ 623.091825][T13843] [ 623.091836][T13843] dump_stack_lvl+0x136/0x150 [ 623.091873][T13843] should_fail_ex+0x4a3/0x5b0 [ 623.113829][T13843] copyin+0x19/0x120 [ 623.117802][T13843] copy_page_from_iter_atomic+0x22b/0x1180 [ 623.123669][T13843] ? folio_flags.constprop.0+0x53/0x150 [ 623.129274][T13843] ? _copy_from_iter_flushcache+0xff0/0xff0 [ 623.135211][T13843] ? shmem_write_begin+0x162/0x380 [ 623.140346][T13843] ? shmem_file_read_iter+0xa40/0xa40 [ 623.145759][T13843] generic_perform_write+0x2ca/0x570 [ 623.151090][T13843] ? folio_add_wait_queue+0x1c0/0x1c0 [ 623.156506][T13843] ? new_inode+0x280/0x280 [ 623.160957][T13843] ? generic_write_checks+0x2c0/0x400 [ 623.166364][T13843] __generic_file_write_iter+0x2ae/0x500 [ 623.172023][T13843] generic_file_write_iter+0xe3/0x350 [ 623.177419][T13843] vfs_write+0x9ed/0xe10 [ 623.181787][T13843] ? kernel_write+0x670/0x670 [ 623.186479][T13843] ? receive_fd+0x110/0x110 [ 623.191049][T13843] ? __fget_files+0x26a/0x480 [ 623.195766][T13843] ? __fget_light+0xe5/0x270 [ 623.200406][T13843] ksys_write+0x12b/0x250 [ 623.204749][T13843] ? __ia32_sys_read+0xb0/0xb0 [ 623.209535][T13843] ? syscall_enter_from_user_mode+0x26/0xb0 [ 623.215454][T13843] do_syscall_64+0x39/0xb0 [ 623.219915][T13843] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 623.225828][T13843] RIP: 0033:0x7f11b0e3de4f [ 623.230256][T13843] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 623.249886][T13843] RSP: 002b:00007f11b1bfff10 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 623.258318][T13843] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f11b0e3de4f [ 623.266300][T13843] RDX: 0000000000400000 RSI: 00007f11a75ff000 RDI: 0000000000000004 [ 623.274386][T13843] RBP: 00007f11a75ff000 R08: 0000000000000000 R09: 00000000000010fc [ 623.282404][T13843] R10: 0000000000400000 R11: 0000000000000293 R12: 0000000000000000 [ 623.290416][T13843] R13: 00007f11b1bfffdc R14: 00007f11b1bfffe0 R15: 00000000200022c2 [ 623.298432][T13843] [ 623.353917][ T5805] ------------[ cut here ]------------ [ 623.372377][ T5805] WARNING: CPU: 1 PID: 5805 at fs/mpage.c:570 __mpage_writepage+0x138b/0x16f0 [ 623.399949][ T5805] Modules linked in: [ 623.403908][ T5805] CPU: 1 PID: 5805 Comm: kworker/u4:7 Not tainted 6.2.0-rc5-next-20230127-syzkaller-08766-ge2f86c02fdc9 #0 [ 623.410923][T13843] loop4: detected capacity change from 0 to 8192 [ 623.424619][T13843] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 623.438118][T13843] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 623.457003][T13843] REISERFS (device loop4): using ordered data mode [ 623.462002][ T5805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 623.473895][ T5805] Workqueue: writeback wb_workfn (flush-7:1) [ 623.480090][ T5805] RIP: 0010:__mpage_writepage+0x138b/0x16f0 [ 623.486798][ T5805] Code: 00 00 48 89 ef e8 15 24 df ff 48 8b 44 24 38 f0 80 88 c0 01 00 00 02 48 c7 44 24 10 00 00 00 00 e9 3c f0 ff ff e8 c5 25 90 ff <0f> 0b 48 8b 44 24 08 48 83 c0 10 48 89 44 24 20 e9 78 ef ff ff e8 [ 623.489190][T13843] reiserfs: using flush barriers [ 623.506669][ T5805] RSP: 0018:ffffc90015c67230 EFLAGS: 00010293 [ 623.506703][ T5805] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 623.506724][ T5805] RDX: ffff888020ad57c0 RSI: ffffffff81f48f5b RDI: 0000000000000006 [ 623.506742][ T5805] RBP: 0000000000000000 R08: 0000000000000006 R09: 0000000000000000 [ 623.506759][ T5805] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 [ 623.553280][ T5805] R13: ffff88814517e300 R14: 0000000000000000 R15: 0000000000000000 [ 623.562506][ T5805] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 623.568035][T13843] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 623.571593][ T5805] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 623.594262][ T5805] CR2: 00007f11b1c01000 CR3: 000000007922a000 CR4: 00000000003506f0 [ 623.598343][T13843] REISERFS (device loop4): checking transaction log (loop4) [ 623.602323][ T5805] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 623.617793][ T5805] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 623.619532][T13843] REISERFS (device loop4): Using rupasov hash to sort names [ 623.625775][ T5805] Call Trace: [ 623.625788][ T5805] [ 623.625814][ T5805] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 623.640925][T13843] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 623.645416][ T5805] ? clean_buffers+0x570/0x570 [ 623.645465][ T5805] ? find_held_lock+0x2d/0x110 [ 623.676973][ T5805] ? folio_clear_dirty_for_io+0x290/0x770 [ 623.683259][ T5805] ? lock_downgrade+0x690/0x690 [ 623.688369][ T5805] ? percpu_counter_add_batch+0x199/0x1e0 [ 623.698991][ T5805] ? lockdep_hardirqs_on+0x7d/0x100 19:20:27 executing program 4: syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000001140)='./file0\x00', 0x4408, &(0x7f0000000140)={[{@balloc_notest4}, {@balloc_test4}, {@jqfmt_vfsold}, {@balloc_test4}, {@grpjquota, 0x3d}]}, 0x1, 0x1102, &(0x7f00000022c0)="$eJzs2LFqFEEcBvBv9g5MdzLpF0ELCwkJZ2eVIsK11jYiqUyVqyI2vouPI6nsQx7AImAprEyyl6SIBMzJEfj94Gbmvp3Z/045EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjypjXbXVJXSZekJH1/ujhP0q/yp98nXUreHS6WB8fzt8txasu6lDZsy1L3nm/VeZ3Xvfp6e/9FXZ58/vTh6OjweHxNSZ+zi/VvpNWe/O3h1vrrAQAAwGMxPNhsw/UBAACA+6ztIgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgHw2zm3FN8nsYhnRJStL3p4vzJP0mPxAAAAB4sJIu72d35bm8BrjxKj9m5Tpv/a/Sxrv5dsd6AAAA4LbpvTPKrfP4y0yvz+Ute5Zpdnau/o9dfu4nk5OD7ObJmHy9bM8uvnxc/cow+R+bAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAP+zAAQkAAACAoP+v2xEoAAAAAAAAAAAAAAAAAADASgEAAP//C6/ZOQ==") (fail_nth: 42) 19:20:27 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e030026004012d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) 19:20:27 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="5079bc2fa039e8e1727d36d06acbe511", 0x10) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000000c0)="2158687209e82d00ea2debf1917ad2ad", 0x10) 19:20:27 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x143142, 0x0) write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[], 0x220) 19:20:27 executing program 1: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x440, &(0x7f0000000380)={[{@gid={'gid', 0x3d, 0xee01}}, {@uid}, {@force}, {@type={'type', 0x3d, "54c306e3"}}, {@barrier}, {@nls={'nls', 0x3d, 'cp1251'}}, {@nobarrier}, {@gid}, {@nodecompose}, {@nobarrier}, {@force}, {@nobarrier}, {@uid}, {@umask={'umask', 0x3d, 0x789}}]}, 0x1, 0x5ee, &(0x7f0000000680)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="72797a3135cf2c3f3ce902d76d82a4c90000000000000000000000deb8cc70727486b8a90000ff6316d2f6fe2000000000400000003901000100d49f02fb634ff8cecd19f692bdc62760e81784a813e39785551764917eb498"], 0x81) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x8dc, 0x7000000) 19:20:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_int(r0, 0x0, 0x4, &(0x7f00000007c0), 0x4) [ 623.704347][ T5805] ? percpu_counter_add_batch+0x170/0x1e0 [ 623.710675][ T5805] write_cache_pages+0x4cc/0xe70 [ 623.715765][ T5805] ? clean_buffers+0x570/0x570 [ 623.725318][ T5805] ? folio_clear_dirty_for_io+0x770/0x770 19:20:27 executing program 0: sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)={0x264, 0x0, 0x0, 0x0, 0x0, {}, [{{0x8}, {0x140, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}]}, 0x264}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)={0x58, 0x0, 0x0, 0x0, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x2c, 0x2, 0x0, 0x1, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, @ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}]}, 0x58}}, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000440)=[&(0x7f0000000340)='team\x00'], 0x0) 19:20:27 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e030026005812d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) [ 623.758119][ T5805] ? mark_lock.part.0+0xee/0x1970 19:20:27 executing program 5: r0 = syz_io_uring_setup(0x80, &(0x7f0000000000), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x6, &(0x7f0000003d40)=[{0x0, 0x1, 0x0, 0x0, 0x0}], 0x1) 19:20:27 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo\x00') statx(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) [ 623.791694][ T5805] ? mark_lock.part.0+0xee/0x1970 [ 623.801187][ T5805] ? print_usage_bug.part.0+0x660/0x660 19:20:27 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv(r0, &(0x7f0000000540)=[{&(0x7f0000000040)=""/18, 0x12}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9) [ 623.861594][ T5805] ? mark_lock.part.0+0xee/0x1970 [ 623.884530][ T5805] ? __lock_acquire+0x1916/0x5df0 [ 623.906046][ T5805] ? hfsplus_file_extend+0xf90/0xf90 19:20:27 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e030026000212d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) [ 623.930621][ T5805] ? hfsplus_writepage+0x30/0x30 [ 623.950588][ T5805] mpage_writepages+0xc6/0x170 [ 623.955422][ T5805] ? folio_flags.constprop.0+0x150/0x150 [ 624.016113][ T5805] ? hfsplus_file_extend+0xf90/0xf90 [ 624.021488][ T5805] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 624.057267][ T5805] ? __lock_acquire+0x1916/0x5df0 [ 624.063530][ T5805] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 624.071604][ T5805] do_writepages+0x1a8/0x640 [ 624.078269][ T5805] ? writeback_set_ratelimit+0x150/0x150 [ 624.084063][ T5805] ? wbc_attach_and_unlock_inode+0x4d0/0x910 [ 624.090895][ T5805] ? lock_downgrade+0x690/0x690 [ 624.095910][ T5805] __writeback_single_inode+0x159/0x14d0 [ 624.102434][ T5805] ? wbc_attach_and_unlock_inode+0x4d0/0x910 [ 624.109956][ T5805] writeback_sb_inodes+0x54d/0xfa0 [ 624.115246][ T5805] ? sync_inode_metadata+0xe0/0xe0 [ 624.121299][ T5805] ? rcu_read_lock_sched_held+0x3e/0x70 [ 624.127494][ T5805] ? queue_io+0x427/0x620 [ 624.132273][ T5805] wb_writeback+0x2c5/0xdd0 [ 624.145844][ T5805] ? __writeback_inodes_wb+0x280/0x280 [ 624.152289][ T5805] wb_workfn+0x2d4/0xdc0 [ 624.166414][T13879] FAULT_INJECTION: forcing a failure. [ 624.166414][T13879] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 624.180835][ T5805] ? inode_wait_for_writeback+0x40/0x40 [ 624.186169][T13879] CPU: 0 PID: 13879 Comm: syz-executor.4 Not tainted 6.2.0-rc5-next-20230127-syzkaller-08766-ge2f86c02fdc9 #0 [ 624.187108][ T5805] ? lock_sync+0x190/0x190 [ 624.198045][T13879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 624.198064][T13879] Call Trace: [ 624.198072][T13879] [ 624.198084][T13879] dump_stack_lvl+0x136/0x150 [ 624.198117][T13879] should_fail_ex+0x4a3/0x5b0 [ 624.203677][ T5805] ? process_one_work+0x8a1/0x1820 [ 624.212590][T13879] prepare_alloc_pages+0x178/0x570 [ 624.212627][T13879] ? print_usage_bug.part.0+0x660/0x660 [ 624.212668][T13879] __alloc_pages+0x149/0x5c0 [ 624.216791][ T5805] ? rcu_read_lock_sched_held+0x3e/0x70 [ 624.218878][T13879] ? __alloc_pages_slowpath.constprop.0+0x23f0/0x23f0 [ 624.218927][T13879] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 624.223849][ T5805] ? trace_lock_acquire+0x1f1/0x2b0 [ 624.228244][T13879] __folio_alloc+0x16/0x40 [ 624.228276][T13879] vma_alloc_folio+0x155/0x880 [ 624.228324][T13879] ? policy_nodemask+0x1c0/0x1c0 [ 624.234517][ T5805] process_one_work+0x9bf/0x1820 [ 624.238506][T13879] ? find_held_lock+0x2d/0x110 [ 624.238547][T13879] shmem_alloc_folio+0xff/0x1c0 [ 624.238590][T13879] ? shmem_link+0x370/0x370 [ 624.238647][T13879] ? percpu_counter_add_batch+0x170/0x1e0 19:20:28 executing program 4: syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000001140)='./file0\x00', 0x4408, &(0x7f0000000140)={[{@balloc_notest4}, {@balloc_test4}, {@jqfmt_vfsold}, {@balloc_test4}, {@grpjquota, 0x3d}]}, 0x1, 0x1102, &(0x7f00000022c0)="$eJzs2LFqFEEcBvBv9g5MdzLpF0ELCwkJZ2eVIsK11jYiqUyVqyI2vouPI6nsQx7AImAprEyyl6SIBMzJEfj94Gbmvp3Z/045EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjypjXbXVJXSZekJH1/ujhP0q/yp98nXUreHS6WB8fzt8txasu6lDZsy1L3nm/VeZ3Xvfp6e/9FXZ58/vTh6OjweHxNSZ+zi/VvpNWe/O3h1vrrAQAAwGMxPNhsw/UBAACA+6ztIgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgHw2zm3FN8nsYhnRJStL3p4vzJP0mPxAAAAB4sJIu72d35bm8BrjxKj9m5Tpv/a/Sxrv5dsd6AAAA4LbpvTPKrfP4y0yvz+Ute5Zpdnau/o9dfu4nk5OD7ObJmHy9bM8uvnxc/cow+R+bAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAP+zAAQkAAACAoP+v2xEoAAAAAAAAAAAAAAAAAADASgEAAP//C6/ZOQ==") (fail_nth: 43) 19:20:28 executing program 5: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000001100), 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r1, r0, 0x0) 19:20:28 executing program 3: symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 19:20:28 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e030026000312d25a80648c2594f90924fc60100005400c000000053582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) [ 624.238688][T13879] ? __vm_enough_memory+0x188/0x3f0 [ 624.238725][T13879] shmem_alloc_and_acct_folio+0x15e/0x5d0 [ 624.238764][T13879] shmem_get_folio_gfp+0xacd/0x1950 [ 624.238810][T13879] ? shmem_alloc_and_acct_folio+0x5d0/0x5d0 [ 624.238855][T13879] shmem_write_begin+0x14a/0x380 [ 624.238887][T13879] ? shmem_file_read_iter+0xa40/0xa40 [ 624.238930][T13879] generic_perform_write+0x256/0x570 [ 624.238987][T13879] ? folio_add_wait_queue+0x1c0/0x1c0 [ 624.239034][T13879] ? new_inode+0x280/0x280 [ 624.239074][T13879] ? generic_write_checks+0x2c0/0x400 [ 624.239116][T13879] __generic_file_write_iter+0x2ae/0x500 [ 624.239157][T13879] generic_file_write_iter+0xe3/0x350 [ 624.239195][T13879] vfs_write+0x9ed/0xe10 [ 624.239227][T13879] ? kernel_write+0x670/0x670 [ 624.239253][T13879] ? receive_fd+0x110/0x110 [ 624.239301][T13879] ? __fget_files+0x26a/0x480 [ 624.239354][T13879] ? __fget_light+0xe5/0x270 [ 624.239408][T13879] ksys_write+0x12b/0x250 [ 624.239437][T13879] ? __ia32_sys_read+0xb0/0xb0 [ 624.239467][T13879] ? syscall_enter_from_user_mode+0x26/0xb0 [ 624.239511][T13879] do_syscall_64+0x39/0xb0 [ 624.239552][T13879] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 624.239587][T13879] RIP: 0033:0x7f11b0e3de4f [ 624.239613][T13879] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 624.239640][T13879] RSP: 002b:00007f11b1bfff10 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 624.239670][T13879] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f11b0e3de4f [ 624.239690][T13879] RDX: 0000000000400000 RSI: 00007f11a75ff000 RDI: 0000000000000004 [ 624.239710][T13879] RBP: 00007f11a75ff000 R08: 0000000000000000 R09: 00000000000010fc [ 624.239730][T13879] R10: 0000000000400000 R11: 0000000000000293 R12: 0000000000000000 [ 624.239749][T13879] R13: 00007f11b1bfffdc R14: 00007f11b1bfffe0 R15: 00000000200022c2 [ 624.239790][T13879] [ 624.248488][ T1209] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.261533][ T5805] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 624.263528][ T1209] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.309132][ T5805] ? rcu_read_lock_sched_held+0x3e/0x70 [ 624.481244][T13884] FAULT_INJECTION: forcing a failure. [ 624.481244][T13884] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 624.500135][T13887] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 624.502373][T13884] CPU: 0 PID: 13884 Comm: syz-executor.4 Not tainted 6.2.0-rc5-next-20230127-syzkaller-08766-ge2f86c02fdc9 #0 [ 624.505434][T13887] netlink: 181912 bytes leftover after parsing attributes in process `syz-executor.2'. [ 624.511620][T13884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 624.511640][T13884] Call Trace: [ 624.511649][T13884] [ 624.511659][T13884] dump_stack_lvl+0x136/0x150 [ 624.511697][T13884] should_fail_ex+0x4a3/0x5b0 [ 624.511732][T13884] copyin+0x19/0x120 [ 624.527077][ T5805] ? spin_bug+0x1c0/0x1c0 [ 624.528901][T13884] copy_page_from_iter_atomic+0x22b/0x1180 [ 624.542020][ T5805] ? lock_acquire+0x32/0xc0 [ 624.549979][T13884] ? folio_flags.constprop.0+0x53/0x150 [ 624.550019][T13884] ? _copy_from_iter_flushcache+0xff0/0xff0 [ 624.627272][T13884] ? shmem_write_begin+0x162/0x380 [ 624.632415][T13884] ? shmem_file_read_iter+0xa40/0xa40 [ 624.637813][T13884] generic_perform_write+0x2ca/0x570 [ 624.643141][T13884] ? folio_add_wait_queue+0x1c0/0x1c0 [ 624.648544][T13884] ? new_inode+0x280/0x280 [ 624.652999][T13884] ? generic_write_checks+0x2c0/0x400 [ 624.658396][T13884] __generic_file_write_iter+0x2ae/0x500 [ 624.664052][T13884] generic_file_write_iter+0xe3/0x350 [ 624.669446][T13884] vfs_write+0x9ed/0xe10 [ 624.673705][T13884] ? kernel_write+0x670/0x670 [ 624.678392][T13884] ? receive_fd+0x110/0x110 [ 624.683016][T13884] ? __fget_files+0x26a/0x480 [ 624.687725][T13884] ? __fget_light+0xe5/0x270 [ 624.692348][T13884] ksys_write+0x12b/0x250 [ 624.696699][T13884] ? __ia32_sys_read+0xb0/0xb0 [ 624.701478][T13884] ? syscall_enter_from_user_mode+0x26/0xb0 [ 624.707398][T13884] do_syscall_64+0x39/0xb0 [ 624.711842][T13884] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 624.717756][T13884] RIP: 0033:0x7f11b0e3de4f [ 624.722185][T13884] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 624.741810][T13884] RSP: 002b:00007f11b1bfff10 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 624.750253][T13884] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f11b0e3de4f [ 624.758237][T13884] RDX: 0000000000400000 RSI: 00007f11a75ff000 RDI: 0000000000000004 [ 624.766215][T13884] RBP: 00007f11a75ff000 R08: 0000000000000000 R09: 00000000000010fc [ 624.774195][T13884] R10: 0000000000400000 R11: 0000000000000293 R12: 0000000000000000 [ 624.782177][T13884] R13: 00007f11b1bfffdc R14: 00007f11b1bfffe0 R15: 00000000200022c2 [ 624.790181][T13884] [ 624.821373][ T5805] ? worker_thread+0x16d/0x1090 [ 624.829730][ T5805] worker_thread+0x669/0x1090 [ 624.844589][ T5805] ? process_one_work+0x1820/0x1820 [ 624.863583][ T5805] kthread+0x2e8/0x3a0 [ 624.879121][ T5805] ? kthread_complete_and_exit+0x40/0x40 [ 624.900765][ T5805] ret_from_fork+0x1f/0x30 [ 624.908366][ T5805] [ 624.911404][ T5805] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 624.918673][ T5805] CPU: 0 PID: 5805 Comm: kworker/u4:7 Not tainted 6.2.0-rc5-next-20230127-syzkaller-08766-ge2f86c02fdc9 #0 [ 624.930034][ T5805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 624.940098][ T5805] Workqueue: writeback wb_workfn (flush-7:1) [ 624.946109][ T5805] Call Trace: [ 624.949394][ T5805] [ 624.952348][ T5805] dump_stack_lvl+0xd9/0x150 [ 624.956974][ T5805] panic+0x61b/0x6c0 [ 624.961001][ T5805] ? panic_smp_self_stop+0x90/0x90 [ 624.966158][ T5805] ? show_trace_log_lvl+0x285/0x390 [ 624.971422][ T5805] ? __mpage_writepage+0x138b/0x16f0 [ 624.976747][ T5805] check_panic_on_warn+0xb1/0xc0 [ 624.981739][ T5805] __warn+0xf2/0x4f0 [ 624.985678][ T5805] ? __mpage_writepage+0x138b/0x16f0 [ 624.988644][T13884] loop4: detected capacity change from 0 to 8192 [ 624.997326][ T5805] report_bug+0x206/0x2b0 [ 624.999941][T13884] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 624.999970][T13884] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 625.000504][T13884] REISERFS (device loop4): using ordered data mode [ 625.000518][T13884] reiserfs: using flush barriers [ 625.035114][ T5805] handle_bug+0x3c/0x70 [ 625.039307][ T5805] exc_invalid_op+0x18/0x50 [ 625.043831][ T5805] asm_exc_invalid_op+0x1a/0x20 [ 625.049004][ T5805] RIP: 0010:__mpage_writepage+0x138b/0x16f0 [ 625.054917][ T5805] Code: 00 00 48 89 ef e8 15 24 df ff 48 8b 44 24 38 f0 80 88 c0 01 00 00 02 48 c7 44 24 10 00 00 00 00 e9 3c f0 ff ff e8 c5 25 90 ff <0f> 0b 48 8b 44 24 08 48 83 c0 10 48 89 44 24 20 e9 78 ef ff ff e8 [ 625.074537][ T5805] RSP: 0018:ffffc90015c67230 EFLAGS: 00010293 [ 625.080617][ T5805] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 625.088592][ T5805] RDX: ffff888020ad57c0 RSI: ffffffff81f48f5b RDI: 0000000000000006 [ 625.096572][ T5805] RBP: 0000000000000000 R08: 0000000000000006 R09: 0000000000000000 [ 625.104551][ T5805] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 [ 625.112532][ T5805] R13: ffff88814517e300 R14: 0000000000000000 R15: 0000000000000000 [ 625.120613][ T5805] ? __mpage_writepage+0x138b/0x16f0 [ 625.125940][ T5805] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 625.131956][ T5805] ? clean_buffers+0x570/0x570 [ 625.136763][ T5805] ? find_held_lock+0x2d/0x110 [ 625.141550][ T5805] ? folio_clear_dirty_for_io+0x290/0x770 [ 625.147377][ T5805] ? lock_downgrade+0x690/0x690 [ 625.152246][ T5805] ? percpu_counter_add_batch+0x199/0x1e0 [ 625.158000][ T5805] ? lockdep_hardirqs_on+0x7d/0x100 [ 625.163214][ T5805] ? percpu_counter_add_batch+0x170/0x1e0 [ 625.168959][ T5805] write_cache_pages+0x4cc/0xe70 [ 625.173922][ T5805] ? clean_buffers+0x570/0x570 [ 625.178704][ T5805] ? folio_clear_dirty_for_io+0x770/0x770 [ 625.184448][ T5805] ? mark_lock.part.0+0xee/0x1970 [ 625.189491][ T5805] ? mark_lock.part.0+0xee/0x1970 [ 625.194621][ T5805] ? print_usage_bug.part.0+0x660/0x660 [ 625.200187][ T5805] ? mark_lock.part.0+0xee/0x1970 [ 625.205234][ T5805] ? __lock_acquire+0x1916/0x5df0 [ 625.210283][ T5805] ? hfsplus_file_extend+0xf90/0xf90 [ 625.215611][ T5805] ? hfsplus_writepage+0x30/0x30 [ 625.220566][ T5805] mpage_writepages+0xc6/0x170 [ 625.225352][ T5805] ? folio_flags.constprop.0+0x150/0x150 [ 625.231018][ T5805] ? hfsplus_file_extend+0xf90/0xf90 [ 625.236326][ T5805] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 625.242374][ T5805] ? __lock_acquire+0x1916/0x5df0 [ 625.247418][ T5805] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 625.253519][ T5805] do_writepages+0x1a8/0x640 [ 625.258144][ T5805] ? writeback_set_ratelimit+0x150/0x150 [ 625.263839][ T5805] ? wbc_attach_and_unlock_inode+0x4d0/0x910 [ 625.269871][ T5805] ? lock_downgrade+0x690/0x690 [ 625.274755][ T5805] __writeback_single_inode+0x159/0x14d0 [ 625.280420][ T5805] ? wbc_attach_and_unlock_inode+0x4d0/0x910 [ 625.286443][ T5805] writeback_sb_inodes+0x54d/0xfa0 [ 625.291607][ T5805] ? sync_inode_metadata+0xe0/0xe0 [ 625.296770][ T5805] ? rcu_read_lock_sched_held+0x3e/0x70 [ 625.302351][ T5805] ? queue_io+0x427/0x620 [ 625.306710][ T5805] wb_writeback+0x2c5/0xdd0 [ 625.311254][ T5805] ? __writeback_inodes_wb+0x280/0x280 [ 625.316771][ T5805] wb_workfn+0x2d4/0xdc0 [ 625.321051][ T5805] ? inode_wait_for_writeback+0x40/0x40 [ 625.326722][ T5805] ? lock_sync+0x190/0x190 [ 625.331155][ T5805] ? process_one_work+0x8a1/0x1820 [ 625.336290][ T5805] ? rcu_read_lock_sched_held+0x3e/0x70 [ 625.341862][ T5805] ? trace_lock_acquire+0x1f1/0x2b0 [ 625.347180][ T5805] process_one_work+0x9bf/0x1820 [ 625.352153][ T5805] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 625.357568][ T5805] ? rcu_read_lock_sched_held+0x3e/0x70 [ 625.363141][ T5805] ? spin_bug+0x1c0/0x1c0 [ 625.367491][ T5805] ? lock_acquire+0x32/0xc0 [ 625.372009][ T5805] ? worker_thread+0x16d/0x1090 [ 625.376888][ T5805] worker_thread+0x669/0x1090 [ 625.381599][ T5805] ? process_one_work+0x1820/0x1820 [ 625.386826][ T5805] kthread+0x2e8/0x3a0 [ 625.390915][ T5805] ? kthread_complete_and_exit+0x40/0x40 [ 625.397577][ T5805] ret_from_fork+0x1f/0x30 [ 625.402048][ T5805] [ 625.405234][ T5805] Kernel Offset: disabled [ 625.409760][ T5805] Rebooting in 86400 seconds..