VVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHjgUAAAAAhPlbh9GzAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcCkAAP//AtvxeQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) name_to_handle_at(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=@FILEID_NILFS_WITH_PARENT={0x20}, &(0x7f0000000000), 0x0) 10:33:30 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000680), 0x1, 0x5ce, &(0x7f00000006c0)="$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") (fail_nth: 14) [ 1618.698860][T28091] loop4: detected capacity change from 0 to 2048 [ 1618.767760][T28091] /dev/loop4: Can't open blockdev [ 1618.826786][T28101] FAULT_INJECTION: forcing a failure. [ 1618.826786][T28101] name failslab, interval 1, probability 0, space 0, times 0 [ 1618.958634][T28104] FAULT_INJECTION: forcing a failure. [ 1618.958634][T28104] name failslab, interval 1, probability 0, space 0, times 0 [ 1618.980614][T28101] CPU: 0 PID: 28101 Comm: syz-executor.1 Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 1618.990771][T28101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1619.000875][T28101] Call Trace: [ 1619.004186][T28101] [ 1619.007149][T28101] dump_stack_lvl+0x1e7/0x2d0 [ 1619.011890][T28101] ? nf_tcp_handle_invalid+0x650/0x650 [ 1619.017421][T28101] ? panic+0x850/0x850 [ 1619.021563][T28101] should_fail_ex+0x3aa/0x4e0 [ 1619.026309][T28101] ? __anon_vma_prepare+0x68/0x410 [ 1619.031488][T28101] should_failslab+0x9/0x20 [ 1619.036050][T28101] kmem_cache_alloc+0x6d/0x2b0 [ 1619.040889][T28101] __anon_vma_prepare+0x68/0x410 [ 1619.045903][T28101] handle_mm_fault+0x53ee/0x6680 [ 1619.050925][T28101] ? handle_mm_fault+0x11d/0x6680 [ 1619.056016][T28101] ? numa_migrate_prep+0x260/0x260 [ 1619.061199][T28101] ? mt_find+0x623/0x7c0 [ 1619.065499][T28101] ? mt_find+0x271/0x7c0 [ 1619.069788][T28101] ? mtree_destroy+0x30/0x30 [ 1619.074463][T28101] ? lock_mm_and_find_vma+0x9c/0x2d0 [ 1619.079808][T28101] exc_page_fault+0x2ad/0x870 [ 1619.084542][T28101] asm_exc_page_fault+0x26/0x30 [ 1619.089448][T28101] RIP: 0033:0x7f2d46228793 [ 1619.093916][T28101] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 1619.113578][T28101] RSP: 002b:00007f2d46fa8520 EFLAGS: 00010206 [ 1619.119704][T28101] RAX: 0000000000000000 RBX: 00007f2d46fa85c0 RCX: 00007f2d3c600000 [ 1619.127719][T28101] RDX: 00007f2d46fa8760 RSI: 000000000000000f RDI: 00007f2d46fa8660 [ 1619.135739][T28101] RBP: 000000000000013b R08: 0000000000000008 R09: 00000000000000b4 [ 1619.143771][T28101] R10: 00000000000000c2 R11: 00007f2d46fa85c0 R12: 00007f2d46fa85c0 [ 1619.151791][T28101] R13: 00007f2d462eb780 R14: 00000000000000eb R15: 00007f2d46fa8660 [ 1619.159827][T28101] [ 1619.162899][T28104] CPU: 1 PID: 28104 Comm: syz-executor.0 Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 1619.173029][T28104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1619.183134][T28104] Call Trace: [ 1619.186473][T28104] [ 1619.189435][T28104] dump_stack_lvl+0x1e7/0x2d0 [ 1619.194170][T28104] ? nf_tcp_handle_invalid+0x650/0x650 [ 1619.199685][T28104] ? panic+0x850/0x850 [ 1619.203834][T28104] should_fail_ex+0x3aa/0x4e0 [ 1619.208582][T28104] ? __anon_vma_prepare+0x68/0x410 [ 1619.213743][T28104] should_failslab+0x9/0x20 [ 1619.218291][T28104] kmem_cache_alloc+0x6d/0x2b0 [ 1619.223124][T28104] __anon_vma_prepare+0x68/0x410 [ 1619.228148][T28104] do_wp_page+0x317b/0x4d40 [ 1619.232723][T28104] ? folio_put+0xc0/0xc0 [ 1619.237014][T28104] ? read_lock_is_recursive+0x20/0x20 [ 1619.242432][T28104] ? do_raw_spin_lock+0x14e/0x370 [ 1619.247510][T28104] ? __lock_acquire+0x1345/0x1fd0 [ 1619.252596][T28104] handle_mm_fault+0x1b1c/0x6680 [ 1619.257606][T28104] ? handle_mm_fault+0x11d/0x6680 [ 1619.262689][T28104] ? numa_migrate_prep+0x260/0x260 [ 1619.267847][T28104] ? mt_find+0x623/0x7c0 [ 1619.272117][T28104] ? mt_find+0x271/0x7c0 [ 1619.276389][T28104] ? mtree_destroy+0x30/0x30 [ 1619.281026][T28104] ? lock_mm_and_find_vma+0x9c/0x2d0 [ 1619.286342][T28104] exc_page_fault+0x2ad/0x870 [ 1619.291045][T28104] asm_exc_page_fault+0x26/0x30 [ 1619.295912][T28104] RIP: 0033:0x7f6cf6428793 [ 1619.300341][T28104] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 1619.319958][T28104] RSP: 002b:00007f6cf71f0520 EFLAGS: 00010206 [ 1619.326042][T28104] RAX: 0000000000000400 RBX: 00007f6cf71f05c0 RCX: 00007f6cec800000 [ 1619.334026][T28104] RDX: 00007f6cf71f0760 RSI: 000000000000000b RDI: 00007f6cf71f0660 [ 1619.342011][T28104] RBP: 00000000000000f9 R08: 0000000000000008 R09: 00000000000000b8 [ 1619.349998][T28104] R10: 00000000000000ca R11: 00007f6cf71f05c0 R12: 0000000000000001 10:33:31 executing program 4: syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000800), 0x1, 0x755, &(0x7f0000000840)="$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") (fail_nth: 17) [ 1619.357983][T28104] R13: 00007f6cf64eb780 R14: 0000000000000048 R15: 00007f6cf71f0660 [ 1619.365987][T28104] [ 1619.484327][T28106] FAULT_INJECTION: forcing a failure. [ 1619.484327][T28106] name failslab, interval 1, probability 0, space 0, times 0 [ 1619.542330][T28104] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1619.552444][T28106] CPU: 1 PID: 28106 Comm: syz-executor.4 Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 1619.562574][T28106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1619.572680][T28106] Call Trace: [ 1619.575999][T28106] [ 1619.578961][T28106] dump_stack_lvl+0x1e7/0x2d0 [ 1619.583699][T28106] ? nf_tcp_handle_invalid+0x650/0x650 [ 1619.589216][T28106] ? panic+0x850/0x850 [ 1619.593341][T28106] ? __might_sleep+0xe0/0xe0 [ 1619.597997][T28106] should_fail_ex+0x3aa/0x4e0 [ 1619.602755][T28106] ? memcg_alloc_slab_cgroups+0x81/0x120 [ 1619.608453][T28106] should_failslab+0x9/0x20 [ 1619.613002][T28106] __kmem_cache_alloc_node+0x6d/0x300 [ 1619.618430][T28106] ? mempolicy_in_oom_domain+0x130/0x130 [ 1619.624119][T28106] ? memcg_alloc_slab_cgroups+0x81/0x120 [ 1619.629822][T28106] __kmalloc_node+0xa2/0x190 [ 1619.630216][T28101] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1619.634437][T28106] ? alloc_pages+0xee/0x170 [ 1619.634474][T28106] memcg_alloc_slab_cgroups+0x81/0x120 [ 1619.651978][T28106] new_slab+0xc0/0x2f0 [ 1619.656093][T28106] ___slab_alloc+0xc8a/0x1330 [ 1619.660805][T28106] ? find_mergeable_anon_vma+0x62a/0x8e0 [ 1619.666537][T28106] ? vma_shrink+0x680/0x680 [ 1619.671092][T28106] ? __anon_vma_prepare+0xbb/0x410 [ 1619.676256][T28106] ? __anon_vma_prepare+0xbb/0x410 [ 1619.681419][T28106] kmem_cache_alloc+0x1e9/0x2b0 [ 1619.686333][T28106] __anon_vma_prepare+0xbb/0x410 [ 1619.691337][T28106] do_wp_page+0x317b/0x4d40 [ 1619.696125][T28106] ? folio_put+0xc0/0xc0 [ 1619.700428][T28106] ? read_lock_is_recursive+0x20/0x20 [ 1619.705860][T28106] ? do_raw_spin_lock+0x14e/0x370 [ 1619.710960][T28106] ? __lock_acquire+0x1345/0x1fd0 [ 1619.716052][T28106] handle_mm_fault+0x1b1c/0x6680 [ 1619.721067][T28106] ? handle_mm_fault+0x11d/0x6680 [ 1619.726170][T28106] ? numa_migrate_prep+0x260/0x260 [ 1619.731358][T28106] ? mt_find+0x623/0x7c0 [ 1619.735661][T28106] ? mt_find+0x271/0x7c0 [ 1619.739960][T28106] ? mtree_destroy+0x30/0x30 [ 1619.744645][T28106] ? lock_mm_and_find_vma+0x9c/0x2d0 [ 1619.747553][T28101] loop1: detected capacity change from 0 to 128 [ 1619.749972][T28106] exc_page_fault+0x2ad/0x870 [ 1619.750016][T28106] asm_exc_page_fault+0x26/0x30 [ 1619.765821][T28106] RIP: 0033:0x7f3e7da28793 [ 1619.770276][T28106] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 1619.789930][T28106] RSP: 002b:00007f3e7e749520 EFLAGS: 00010202 [ 1619.796049][T28106] RAX: 0000000000000400 RBX: 00007f3e7e7495c0 RCX: 00007f3e73e00000 [ 1619.804068][T28106] RDX: 00007f3e7e749760 RSI: 0000000000000019 RDI: 00007f3e7e749660 [ 1619.812085][T28106] RBP: 00000000000000f9 R08: 0000000000000009 R09: 00000000000001a1 [ 1619.820099][T28106] R10: 00000000000001bc R11: 00007f3e7e7495c0 R12: 0000000000000001 [ 1619.828109][T28106] R13: 00007f3e7daeb780 R14: 0000000000000020 R15: 00007f3e7e749660 [ 1619.836139][T28106] [ 1619.938728][T28104] loop0: detected capacity change from 0 to 1024 10:33:32 executing program 1: syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1fd, &(0x7f00000002c0)="$eJzs3D1rU18cB/Dzb/vvQ6QPk6CLB110uWh9BUFaEANKbUQdlFuaakhMSm7ARBw6O/k6iqObIL6Bvgu3IkinTkbapI9WXWyj5POBcL7hS+AcQsLvBnI3H759UVnJkpW0GYbGYxgKYS1shzCzk3r+661Du3k0HLYWrj1Nt97cf/T4Tr5QmFuIcT6/eHM2xjh16ePL1+8uf2qee/B+6sNY2Jh5svl19vPG+Y0Lm98Wn5ezWM5ird6MaVyq15vpUrUUl8tZJYnxXrWUZqVYrmWlxpF+pVpfXW3HtLY8mVttlLIsprV2rJTasVmPzUY7ps/Sci0mSRInc4HfKa4vLKT5fu+C09Vo5NPhEMLED01xvS8bAgD6yvw/yMz/g2Bn/s/1Pr9Hmf8BAAAAAAAAAAAAAOBfsN3pTHc6nem9de8xFkIYDyHsPe/3Pjkd3v/BduiPe+MhfFlrFVvF7trt528X5q7HXTMHr9pqtYrD+/2Nbh+P9v+HXK+fPbEfDVevdPud7tbdwrF+Iiyf/vEBAABgICRx34nX90nys76bDv0+cOz6fSRcHDmzYwAAAAC/kLVfVdJqtdQQBEHYD/3+ZgIAAP60g6G/3zsBAAAAAAAAAAAAAAAAAACAwXUWtxPr9xkBAAAAAAAAAAAAAAAAAAAAAADgb/E9AAD//xRs0OA=") (fail_nth: 17) 10:33:32 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000680), 0x1, 0x5ce, &(0x7f00000006c0)="$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") (fail_nth: 15) 10:33:32 executing program 2: syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x1000008, &(0x7f0000000280)={[{@datacow}, {@clear_cache}, {@nodatasum}, {@rescan_uuid_tree}, {}, {@space_cache_v1}]}, 0xfe, 0x51ab, &(0x7f0000005280)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x80809440, &(0x7f0000000640)={0x0, 0x1}) [ 1620.569624][T28110] FAULT_INJECTION: forcing a failure. [ 1620.569624][T28110] name failslab, interval 1, probability 0, space 0, times 0 [ 1620.643666][T28111] FAULT_INJECTION: forcing a failure. [ 1620.643666][T28111] name failslab, interval 1, probability 0, space 0, times 0 [ 1620.701315][T28110] CPU: 0 PID: 28110 Comm: syz-executor.1 Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 1620.711475][T28110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1620.721587][T28110] Call Trace: [ 1620.724911][T28110] [ 1620.727885][T28110] dump_stack_lvl+0x1e7/0x2d0 [ 1620.732635][T28110] ? nf_tcp_handle_invalid+0x650/0x650 [ 1620.738161][T28110] ? panic+0x850/0x850 [ 1620.742301][T28110] ? find_mergeable_anon_vma+0x62a/0x8e0 [ 1620.747999][T28110] should_fail_ex+0x3aa/0x4e0 [ 1620.752737][T28110] ? __anon_vma_prepare+0xbb/0x410 [ 1620.757909][T28110] should_failslab+0x9/0x20 [ 1620.762461][T28110] kmem_cache_alloc+0x6d/0x2b0 [ 1620.767299][T28110] __anon_vma_prepare+0xbb/0x410 [ 1620.772315][T28110] handle_mm_fault+0x53ee/0x6680 [ 1620.776288][T28106] loop4: detected capacity change from 0 to 2048 [ 1620.777311][T28110] ? handle_mm_fault+0x11d/0x6680 [ 1620.788737][T28110] ? numa_migrate_prep+0x260/0x260 [ 1620.793910][T28110] ? mt_find+0x623/0x7c0 [ 1620.798202][T28110] ? mt_find+0x271/0x7c0 [ 1620.802498][T28110] ? mtree_destroy+0x30/0x30 [ 1620.807184][T28110] ? lock_mm_and_find_vma+0x9c/0x2d0 [ 1620.812541][T28110] exc_page_fault+0x2ad/0x870 [ 1620.817292][T28110] asm_exc_page_fault+0x26/0x30 [ 1620.822201][T28110] RIP: 0033:0x7f2d46228793 [ 1620.826662][T28110] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 1620.846323][T28110] RSP: 002b:00007f2d46fa8520 EFLAGS: 00010206 [ 1620.852434][T28110] RAX: 0000000000000000 RBX: 00007f2d46fa85c0 RCX: 00007f2d3c600000 [ 1620.860443][T28110] RDX: 00007f2d46fa8760 RSI: 000000000000000f RDI: 00007f2d46fa8660 [ 1620.861327][T28106] /dev/loop4: Can't open blockdev [ 1620.868437][T28110] RBP: 000000000000013b R08: 0000000000000008 R09: 00000000000000b4 [ 1620.868460][T28110] R10: 00000000000000c2 R11: 00007f2d46fa85c0 R12: 00007f2d46fa85c0 [ 1620.868476][T28110] R13: 00007f2d462eb780 R14: 00000000000000eb R15: 00007f2d46fa8660 [ 1620.868511][T28110] [ 1620.914394][T28111] CPU: 0 PID: 28111 Comm: syz-executor.0 Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 1620.924546][T28111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1620.934643][T28111] Call Trace: [ 1620.937969][T28111] [ 1620.940941][T28111] dump_stack_lvl+0x1e7/0x2d0 [ 1620.945688][T28111] ? nf_tcp_handle_invalid+0x650/0x650 [ 1620.951203][T28111] ? panic+0x850/0x850 [ 1620.955316][T28111] ? find_mergeable_anon_vma+0x62a/0x8e0 [ 1620.961002][T28111] should_fail_ex+0x3aa/0x4e0 [ 1620.965733][T28111] ? __anon_vma_prepare+0xbb/0x410 [ 1620.970905][T28111] should_failslab+0x9/0x20 [ 1620.975478][T28111] kmem_cache_alloc+0x6d/0x2b0 [ 1620.980316][T28111] __anon_vma_prepare+0xbb/0x410 [ 1620.985313][T28111] do_wp_page+0x317b/0x4d40 [ 1620.989883][T28111] ? folio_put+0xc0/0xc0 [ 1620.994180][T28111] ? read_lock_is_recursive+0x20/0x20 [ 1620.999600][T28111] ? do_raw_spin_lock+0x14e/0x370 [ 1621.004683][T28111] ? __lock_acquire+0x1345/0x1fd0 [ 1621.009757][T28111] handle_mm_fault+0x1b1c/0x6680 [ 1621.014749][T28111] ? handle_mm_fault+0x11d/0x6680 [ 1621.019860][T28111] ? numa_migrate_prep+0x260/0x260 [ 1621.025061][T28111] ? mt_find+0x623/0x7c0 [ 1621.029371][T28111] ? mt_find+0x271/0x7c0 [ 1621.033672][T28111] ? mtree_destroy+0x30/0x30 [ 1621.038351][T28111] ? lock_mm_and_find_vma+0x9c/0x2d0 [ 1621.043701][T28111] exc_page_fault+0x2ad/0x870 [ 1621.048445][T28111] asm_exc_page_fault+0x26/0x30 [ 1621.053339][T28111] RIP: 0033:0x7f6cf6428793 [ 1621.057799][T28111] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 1621.077449][T28111] RSP: 002b:00007f6cf71f0520 EFLAGS: 00010206 [ 1621.083542][T28111] RAX: 0000000000000400 RBX: 00007f6cf71f05c0 RCX: 00007f6cec800000 [ 1621.091530][T28111] RDX: 00007f6cf71f0760 RSI: 000000000000000b RDI: 00007f6cf71f0660 [ 1621.099513][T28111] RBP: 00000000000000f9 R08: 0000000000000008 R09: 00000000000000b8 [ 1621.107499][T28111] R10: 00000000000000ca R11: 00007f6cf71f05c0 R12: 0000000000000001 10:33:33 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='environ\x00') read$snapshot(r0, 0x0, 0x0) [ 1621.115486][T28111] R13: 00007f6cf64eb780 R14: 0000000000000048 R15: 00007f6cf71f0660 [ 1621.123500][T28111] [ 1621.145733][T28110] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1621.169709][T28110] loop1: detected capacity change from 0 to 128 [ 1621.217787][T28111] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF 10:33:33 executing program 4: syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000800), 0x1, 0x755, &(0x7f0000000840)="$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") (fail_nth: 18) 10:33:33 executing program 5: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) epoll_create(0x5) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) pselect6(0x40, &(0x7f0000000140)={0x77}, &(0x7f0000000180)={0x9}, 0x0, 0x0, 0x0) 10:33:33 executing program 1: syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1fd, &(0x7f00000002c0)="$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") (fail_nth: 18) [ 1621.666699][T28119] FAULT_INJECTION: forcing a failure. [ 1621.666699][T28119] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1621.755514][T28119] CPU: 0 PID: 28119 Comm: syz-executor.4 Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 1621.765679][T28119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1621.775785][T28119] Call Trace: [ 1621.779113][T28119] [ 1621.782083][T28119] dump_stack_lvl+0x1e7/0x2d0 [ 1621.786832][T28119] ? nf_tcp_handle_invalid+0x650/0x650 [ 1621.792369][T28119] ? panic+0x850/0x850 [ 1621.796513][T28119] ? __lock_acquire+0x1345/0x1fd0 [ 1621.801662][T28119] should_fail_ex+0x3aa/0x4e0 [ 1621.806425][T28119] prepare_alloc_pages+0x1d9/0x5b0 [ 1621.811622][T28119] __alloc_pages+0x165/0x680 [ 1621.816283][T28119] ? zone_statistics+0x170/0x170 [ 1621.821284][T28119] ? policy_nodemask+0x1ec/0x720 [ 1621.826278][T28119] ? mark_lock+0x9a/0x350 [ 1621.830785][T28119] alloc_pages_mpol+0x3de/0x640 [ 1621.835827][T28119] ? mempolicy_in_oom_domain+0x130/0x130 [ 1621.841534][T28119] vma_alloc_folio+0xf3/0x3f0 [ 1621.846272][T28119] ? page_zone+0xd0/0xd0 [ 1621.847717][T28122] FAULT_INJECTION: forcing a failure. [ 1621.847717][T28122] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1621.850540][T28119] ? __lock_acquire+0x1345/0x1fd0 [ 1621.868877][T28119] handle_mm_fault+0x238a/0x6680 [ 1621.873892][T28119] ? handle_mm_fault+0x11d/0x6680 [ 1621.878979][T28119] ? numa_migrate_prep+0x260/0x260 [ 1621.879420][T28111] loop0: detected capacity change from 0 to 1024 [ 1621.884217][T28119] ? mtree_range_walk+0x6a0/0x7e0 [ 1621.895734][T28119] ? lock_vma_under_rcu+0x187/0x6f0 [ 1621.901014][T28119] ? __lock_acquire+0x1fd0/0x1fd0 [ 1621.906116][T28119] ? lock_vma_under_rcu+0x2f6/0x6f0 [ 1621.911394][T28119] ? lock_vma_under_rcu+0x5df/0x6f0 [ 1621.916659][T28119] ? lock_vma_under_rcu+0x187/0x6f0 [ 1621.921928][T28119] ? exc_page_fault+0x110/0x870 [ 1621.926840][T28119] exc_page_fault+0x456/0x870 [ 1621.931581][T28119] asm_exc_page_fault+0x26/0x30 [ 1621.936489][T28119] RIP: 0033:0x7f3e7da28840 [ 1621.940940][T28119] Code: 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 1621.960589][T28119] RSP: 002b:00007f3e7e749520 EFLAGS: 00010286 [ 1621.966714][T28119] RAX: 0000000000002008 RBX: 00007f3e7e7495c0 RCX: 0000000000000007 [ 1621.974736][T28119] RDX: 00000000000003db RSI: 0000000000001bdc RDI: 00007f3e7e749660 [ 1621.982752][T28119] RBP: 0000000000000008 R08: 00007f3e73e00000 R09: 00000000000000f3 [ 1621.990787][T28119] R10: 0000000020000842 R11: 0000000000000753 R12: 0000000000001801 [ 1621.998819][T28119] R13: 00007f3e7daeb780 R14: 0000000000000019 R15: 00007f3e7e749660 [ 1622.006867][T28119] [ 1622.013669][T28122] CPU: 1 PID: 28122 Comm: syz-executor.1 Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 1622.023813][T28122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1622.034005][T28122] Call Trace: [ 1622.037317][T28122] [ 1622.040281][T28122] dump_stack_lvl+0x1e7/0x2d0 [ 1622.045019][T28122] ? nf_tcp_handle_invalid+0x650/0x650 [ 1622.050533][T28122] ? panic+0x850/0x850 [ 1622.054658][T28122] ? look_up_lock_class+0x77/0x160 [ 1622.059809][T28122] ? register_lock_class+0x102/0x970 [ 1622.065230][T28122] should_fail_ex+0x3aa/0x4e0 [ 1622.069972][T28122] prepare_alloc_pages+0x1d9/0x5b0 [ 1622.075144][T28122] __alloc_pages+0x165/0x680 [ 1622.079779][T28122] ? zone_statistics+0x170/0x170 [ 1622.084766][T28122] ? policy_nodemask+0x1ec/0x720 [ 1622.089797][T28122] alloc_pages_mpol+0x3de/0x640 [ 1622.094692][T28122] ? mempolicy_in_oom_domain+0x130/0x130 [ 1622.100359][T28122] ? up_write+0x1a9/0x580 [ 1622.104735][T28122] vma_alloc_folio+0xf3/0x3f0 [ 1622.109449][T28122] ? page_zone+0xd0/0xd0 [ 1622.113727][T28122] ? __anon_vma_prepare+0x38c/0x410 [ 1622.118966][T28122] handle_mm_fault+0x238a/0x6680 [ 1622.123952][T28122] ? handle_mm_fault+0x11d/0x6680 [ 1622.129049][T28122] ? numa_migrate_prep+0x260/0x260 [ 1622.134191][T28122] ? mt_find+0x623/0x7c0 [ 1622.138462][T28122] ? mt_find+0x271/0x7c0 [ 1622.142733][T28122] ? mtree_destroy+0x30/0x30 [ 1622.147371][T28122] ? lock_mm_and_find_vma+0x9c/0x2d0 [ 1622.152685][T28122] exc_page_fault+0x2ad/0x870 [ 1622.157395][T28122] asm_exc_page_fault+0x26/0x30 [ 1622.162262][T28122] RIP: 0033:0x7f2d46228793 [ 1622.166695][T28122] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 1622.186326][T28122] RSP: 002b:00007f2d46fa8520 EFLAGS: 00010206 [ 1622.192409][T28122] RAX: 0000000000000000 RBX: 00007f2d46fa85c0 RCX: 00007f2d3c600000 [ 1622.200397][T28122] RDX: 00007f2d46fa8760 RSI: 000000000000000f RDI: 00007f2d46fa8660 [ 1622.208381][T28122] RBP: 000000000000013b R08: 0000000000000008 R09: 00000000000000b4 [ 1622.216363][T28122] R10: 00000000000000c2 R11: 00007f2d46fa85c0 R12: 00007f2d46fa85c0 [ 1622.224346][T28122] R13: 00007f2d462eb780 R14: 00000000000000eb R15: 00007f2d46fa8660 [ 1622.232344][T28122] 10:33:34 executing program 5: r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/doi\x00', 0x2, 0x0) write$smackfs_cipsonum(r0, 0x0, 0x0) [ 1622.325616][T28119] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1622.352269][T28122] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1622.421424][T28122] loop1: detected capacity change from 0 to 128 [ 1622.438323][T28119] loop4: detected capacity change from 0 to 2048 10:33:34 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000680), 0x1, 0x5ce, &(0x7f00000006c0)="$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") (fail_nth: 16) [ 1622.493818][T28119] /dev/loop4: Can't open blockdev [ 1622.821997][T28127] FAULT_INJECTION: forcing a failure. [ 1622.821997][T28127] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1622.915561][T28127] CPU: 0 PID: 28127 Comm: syz-executor.0 Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 1622.925719][T28127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1622.935822][T28127] Call Trace: [ 1622.939134][T28127] [ 1622.942093][T28127] dump_stack_lvl+0x1e7/0x2d0 [ 1622.946831][T28127] ? nf_tcp_handle_invalid+0x650/0x650 [ 1622.952362][T28127] ? panic+0x850/0x850 [ 1622.956508][T28127] should_fail_ex+0x3aa/0x4e0 [ 1622.961248][T28127] prepare_alloc_pages+0x1d9/0x5b0 [ 1622.966418][T28127] __alloc_pages+0x165/0x680 [ 1622.971069][T28127] ? zone_statistics+0x170/0x170 [ 1622.976068][T28127] ? policy_nodemask+0x1ec/0x720 [ 1622.981061][T28127] alloc_pages_mpol+0x3de/0x640 [ 1622.985973][T28127] ? mempolicy_in_oom_domain+0x130/0x130 [ 1622.991647][T28127] ? up_write+0x1a9/0x580 [ 1622.996016][T28127] vma_alloc_folio+0xf3/0x3f0 [ 1623.000713][T28127] ? page_zone+0xd0/0xd0 [ 1623.004970][T28127] ? __anon_vma_prepare+0x38c/0x410 [ 1623.010190][T28127] do_wp_page+0x1234/0x4d40 [ 1623.014725][T28127] ? folio_put+0xc0/0xc0 [ 1623.018989][T28127] ? read_lock_is_recursive+0x20/0x20 [ 1623.024416][T28127] ? do_raw_spin_lock+0x14e/0x370 [ 1623.029482][T28127] ? __lock_acquire+0x1345/0x1fd0 [ 1623.034538][T28127] handle_mm_fault+0x1b1c/0x6680 [ 1623.039504][T28127] ? handle_mm_fault+0x11d/0x6680 [ 1623.044559][T28127] ? numa_migrate_prep+0x260/0x260 [ 1623.049701][T28127] ? mt_find+0x623/0x7c0 [ 1623.053993][T28127] ? mt_find+0x271/0x7c0 [ 1623.058261][T28127] ? mtree_destroy+0x30/0x30 [ 1623.062925][T28127] ? lock_mm_and_find_vma+0x9c/0x2d0 [ 1623.068228][T28127] exc_page_fault+0x2ad/0x870 [ 1623.072962][T28127] asm_exc_page_fault+0x26/0x30 [ 1623.077870][T28127] RIP: 0033:0x7f6cf6428793 [ 1623.082324][T28127] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 1623.101953][T28127] RSP: 002b:00007f6cf71f0520 EFLAGS: 00010206 [ 1623.108041][T28127] RAX: 0000000000000400 RBX: 00007f6cf71f05c0 RCX: 00007f6cec800000 [ 1623.116027][T28127] RDX: 00007f6cf71f0760 RSI: 000000000000000b RDI: 00007f6cf71f0660 [ 1623.124013][T28127] RBP: 00000000000000f9 R08: 0000000000000008 R09: 00000000000000b8 [ 1623.132000][T28127] R10: 00000000000000ca R11: 00007f6cf71f05c0 R12: 0000000000000001 [ 1623.139986][T28127] R13: 00007f6cf64eb780 R14: 0000000000000048 R15: 00007f6cf71f0660 [ 1623.148015][T28127] [ 1623.185747][T28127] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF 10:33:35 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$sequencer(r0, &(0x7f0000000080)=""/176, 0xb0) 10:33:35 executing program 4: syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000800), 0x1, 0x755, &(0x7f0000000840)="$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") (fail_nth: 19) 10:33:35 executing program 5: syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x200800, &(0x7f0000000080)=ANY=[@ANYBLOB="70716e6f656e666f7263652c00752bb6a96d3c1f298d2453c6242f1c605a545bfe19a1c412963c57a71f13338668f4a4d16eb1c9669c019035768922c3f5d62044c9d4c6b6bb86653394c15a6f922f669da8636143f443d359146a9c338dd73e34ecf2b4b3f7b29127"], 0x4, 0x95d1, &(0x7f00000096c0)="$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") r0 = open(&(0x7f0000000040)='./file1\x00', 0x60142, 0x0) write$FUSE_POLL(r0, &(0x7f00000002c0)={0x18}, 0x18) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) r1 = open(&(0x7f0000007f80)='./bus\x00', 0x145542, 0x0) ftruncate(r1, 0x2007ffb) sendfile(r0, r1, 0x0, 0x1000000201005) r2 = open(&(0x7f0000000180)='./file2\x00', 0x1cd842, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x4020940d, &(0x7f0000000000)={0x4}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) truncate(&(0x7f0000000140)='./file2\x00', 0x0) write(r3, &(0x7f0000004200)="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", 0xffe00) 10:33:35 executing program 1: syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1fd, &(0x7f00000002c0)="$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") (fail_nth: 19) 10:33:35 executing program 2: syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="646973636172642c0008fd346f1fe0c7b977cf98b0dfc801ecf9a88e1ae482"], 0x1, 0x559d, &(0x7f0000005680)="$eJzs3X1sVWcdB/BzeynlJaFlyjLUhfkPThCpmFiEoEVgAoPRgSbDwCgO2BAGhQRhY9OOOZ0jk4Y5xoovDKQCxq6+rJiYIbqIcU4mi8OGEXnJIuICK4yoJNOZ3nufy73n0vYO5zq3z4e05z73d57nPPfk/HG/lz7nRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABBF0cHlC/627gfLv/nQdSenbLz/zAMnap57fNP4u+fsHnX4gVVXtp1uaip99fmzNyy67+GqoSf2zD8URYlUv0Sm/7xPTZ65aNa86X3CgLU3prcVFZ0dMt31WLrRO+/Jjn75P/OjKCqNDZDMbCf1z2kn4geIVhYO2KXtVWNWDdw4cdrmssmDFibrGgtfOh369PQEekrmunrx4rVUnfpdEtsj28659BJ5l2i6f/yCe1NeBADwulTWpDbZt6OZt7jZdn28HmtXx9oNsXZ4h9CQ27gc6XF7dzbPa+L1HppndToqlHU6z1g9c/6z7Zp4/1g7FjVexzzzd81Emj6dzbMuVu+peQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8ldx9/JanSzb96H1L149MHh887BdfbdryvUnt5VO+tm9D2+9bn3tPU1Ppq8+fvWHRfQ9XDT2xZ/6hKKpI9Uukuyfm7mjd8LMVU1b/fM6jzefee8euZGbcsO2Vs3PUFh58vDyKPp9TeTEMe2pAFNXkF1LN6NHCwuLUgymhAAAAwNvJ4NTvkmw7HQdL89qJVJpMpP4F6bC4vWrMqoEbJ07bXDZ50MJkXePlj1fTyXjVlxwv2664+JPICcYh/sbHu1gPu64sGKdr8RHjeX7U0AuHj3x9+Ya1jf1P7u87MDnpV1+uHXzFnNGvXDt2zG1/fWRHQf6v6Dr/hzMn/wMAAPDfkP/j43Stu/w/7Mj9Z+469dN1tZ/ZNvf4+G/UDnhX5Zo/NX/4c+uHTZ3Y69iVWwry/zV5hyzI/2HGIf+XRJeX/wEAAOCt7H+d/6sLxulad/l/2ZoRf592YdbEJ8Zd+OGZO4f88uCRaG/9iC+03P6B/bP7DWj4SUH+rywu//fKnXZ48pkw4SXlUVRZ/EkFAAAA8oT/d7/40ULI6+lPDuJ5fc75g5NuLn3w7EdmXzt029Ehu9rP/2PJ8k0XRjfPGF716acrNhTk/+ri8n/pm/NyAQAAgCI8tfgTN+2Mpk/6UPU9h/cv2P5I/bK1K5c2liWm/ntl2/X/au5dkP9risv/ZT3zcgAAAIBLOPSlbbtfm7msdXhz2fmtf3jtz49fPXz1gabKoyt/O7B0RWvt4oL8X1tc/u+X2WZWPqQ77Q9/hfBQeRT16XhQly78Jmr4ZLYAAAAAvEFCTv/nsbaRO68r+/VT339586zvfHvQ3m/NONj43Qn9b5n44IEZB56sLcj/dV3f/z/c6SCs/8+7/1/B+v+cQvquf2PdGAAAAIB3osL1/OH2+OlvLujs+/eLXf9/4xdbXzp++/yvtL97yE3LXr7tils/Nv7UH6ffmdw57q6SqVNfOl2Q/+uLy//J3O0b+f1/AAAAcBn+377/b3bBOF3r7v7/Mx+752j7X14YN2Jm49pFJ8dv/PG8Lc88trvq6nMLbu77wWeX7i3I/w3F5f+w7Z/78vaF83NveRRd1fEgczfBXWG6S2KFltKcQvrEx3rMCj0yhZaynEJKXazHqPIoen/Hg/pYYWAoNMQK7QMyha2xwrOhkLkesoXmWGFfuNI2DchMN17YEwqZBRYtYQVF/+ySiFiPVzrr0VG4ZI8XsgcHAAB4RwnhOZNlS/ObUTzKtiS626FfdzuUdLdDsrsdesV2iO/Y2fNRbX4hPH9+zRO/q/xoyWcP3XrHhOEjF667t2HsgeTcCdc/uaPvuRWnR68uyP9bi8v/4VT0Tm86W/8fhfX/me81zK7/rw2FilihJRRq4ncMqAnHSIfd9eEYFTWZHu1XZQsAAADwthY+F0j28DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgP+zde5xU1Z0g8NNNP2homhbjK2JsdW1Fh6ZBUT/BB2omGmBNo+zMuPhohEaRVhBhIq5RULObxMEoKlFnRmEVRlZx8AVkNQE1ooloNI5mRh1DMGrcjR/FiH6yxrif7lunqLrVZRcCSjvf7x9dp+p3nrceXefeW+cCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/Max/9MYj/umiJ0eP2jBvwPJXDv/vH9YfumzRO//rT89ed9ve8763ftWSJZV/en7jSZO/c8PhjRtWTnghhJbOcmVJ8bLTF6/4waoLvvGtB0+76e5395y9tCpTbyYe+nb8Kc/cuTK2+tt+IawsC6EiHRhcmwQqM/drY30Da0PYKWwOZEu09UlKpBsOj9WEsDBsDmSr+lFNCLU5gXG/fGT1vI7E9TUh7B9CqE638e/VSRs16UBjVRLokw5Mq0gCH3ycyAZWlScB2GrxzZB90S9vyc9Q33W5Iq+/ym3Wsc9Xeni9YqK+eL63jt3OncpRlX6gZauetoLq2C4K3h5rvNt6wLutYDtf42nL/SKV+Yby8eZQdSif1DZ5wqz2mfGR8tDU1KtYTdvpeX5x4yUTtyTdY16HsQP12+R1+Pj5A+9c0Dhm15sf3jD59apnF2xtN4tt3u2tOmRecz3meYxG+jzpAW+/gm9JDb50hRBuP37T2799aez//dWDTw9+75tDzxrywitD627+7rR+f332/6m8ZerGgvl//SfP/+PLOd6W5+WOrX5Yl8zN4yO1MfF2XTI3BwAAgB6jJ+w1fWPEQW/Xrmt4eN+vr5h83qJ5r51+7p+rftp3wkEnnjL0+3fcOPW0gvl/Q2nH/+Mh/9rc0a4JYWRn4or+Ieze+XgSWBq7c1b/EPbpTLXkB45NBdaEsEdnYlC2qlSJ3rFEQyrwRl0mMDIVWBsDLanA4hi4JhW4MgaWpwITY2BNKnBcDIQp+eM4qC4zjpIDNTHQmmzE5fEshD/UxdZS2+qlbFUAAADbSGZ2WJl/N+dch63NEKeXy2u6yxDPwC6aoTpVQ3oGm51WFa2horsayrurITvuOZ88/IKay7qrueA0jLL8DO8deN/c1Q/8249vnHDYUwd92HrGy+tXPTp6U6+/e2fMjy8dN3/Y+IL5f/Mnz/+ru+hIWcHx/xDGdv6NucszkfZsvLUlLwMAAACwFSpeW3ryL+Z+VLbkZ+ds3P8vTxt3de8V++47YO3B9/2/hjcHHL9q/4L5/8jSzv+P+0R65WQO6+JuiKn9Q2jODyTVjigMJEe9+2YCAAAA0BNkj8dnj4VPydwmp2in59OF+Vu2MH888D+yy/yDx129rnn17adMGXHomjWbztj15WUbntpl/3deOPDk00+4f2rDPQXz/5bSzv/vk3+bdGJt7MV1/UPonRN4PPayI9CpIQbWH5MfyIx/bdwAV8WqMicmZKu6KpZojYHmVGBhsRLPZEvsnh/IPFnZxq/IjmNKpkROAAAAAD5zcXdAPC4fz/9/+tx+j/7jslsueXDJutD37OW/uOzo4QPnD+791rRnDnnkb989eWrB/L91y87/75wHF5ze3943hCEVIfRK/zBgXZ9kYcAYqC3LJH7cJ6mrV7qqy/uEMKJjYOmqNmTW/69IrzH4XE1SVQzsvu8dGxs7ErfXhDAkN/DC+EXDOxKzUoFs439VE8LeHaNNN76id9J4ZbrxG3uH8JWcQLaqib1D6GisKl3Vo9WZ6xikq1peHcLOOYFsVYdXhzA7ANBTxf+lk3IfvHD2xVMntLe3zdiOibgTvyZMntLe1jRxWvuk6iJ9mpTqc946RnMLx1TqpW9ezqxRdNeopv6lpLM/FGzObSuzI7/gzMHM/fhlqLJznMMq8+4ekh7ygfsVNhFyvkoVG3L5dh5yn9xKNj+JBfXH/FWhb+g968K2GU0XTZg5c8bQ5G+p2Yclf+NxpmRbDU1vqz5d9a2El0fR5bJSPu22asytZMjM86YPuXD2xYOnnDfh7Laz284/bPhhRxwx7NBDhw/pGFRz8rebkTZ2VXNqpB8vKnFY23CkX67IqeSz+NCQkJDoaYlVv9vj5aN3Wfq9FbcsnvHz9qPafv71nXces6Tqmy9suvSy/Z/+Hx8UzP+nf/L8P37qxA/+zPoMxY7/18fD/Mnjmw/zt8bAwlKP/9cXO5qfPTGgIRWYEwNzHOYHAADgiyHujox7M+NO6Ufm7/Yvd467b8z89Qc/ue65svV9Dv77D39fXnnZuP9yzAMNt333bwrm/3NK+/3/Nlr/P7t0/ahiy/wPiiWai63/n17mP7v+/5xi6/+nl/nPrv+/8HNY/39WNpDaJH+w/j8AAPBF8Nmt/9/t8v7pCwQUZOh2ef/0BQIKMnS7jH+pFwjY4vX/H2k4aORPVn/nN43LLpj2zn8bct/oAXs2/O6Rva6cNHXk6NEjBv9Lwfz/mtLm/xbuBwAAgB3HAROPfWrjpL2Pvfp/3rbTHj9p/fauh+3y/WVHts3ftH7i39z27jl/XTD/X1ja/P+zX/8vFDv/v6FYoKXYwoDW/wMAAKCHKrb+39Abv3X5q4uPu/+ey6eNam0dP/uKq/dbfUD1qeGl0fMb/mLGvR8VzP+Xlzb/j6ddlOfljr35sC5Z0y6k17R7uy77kwEAAADoGcpDU1NliXnzFkY99tO3+WJmKdBPSud68sH9nn/gqyNOnL+46urXynYb9vFT1888+Piv/fDVjXtdcse55+1XMP9fU9r8P+93GY+fP/DOBY1jdv3w5oc3TH696tkFm4//AwAAANtPqfslAAAAAAAAAAAAAACAz98JD//k6rcnLvnanIW/3PWnvcY+u3zDrDlNs2uvf/WH1/7qiDsfHlfw+/8wtrNcsd//x+v+xd8XfCkvd2y1+/X/MvfHjb57dueShevqQtgvNzD18qk7hcy1+Q/IDaw+fdBuHYnL0yUeeuW41zoSZ6YDJw4e8H5H4shUoDUukrhHOhCvqvh+v1QgLq/4XDoQt8fydKAqE/hev2QcZelt9WZtsq3K0tvqxdoQ+ucEsttqZW3SRll6gNenAtkBXpAOxAGelAmUp3t1d9+kVzFQG4ve2jfpFQAAO6z4LbAyTJ7S3tYcv8LH2y9X5N9GeUuWzS2stqzE5l/OLE1216im/qWke6W/i26+1nhlqO4YwtCCr6u5Wco6R7ltaulm032pyJC7W+2tvEi5tC3ddFXFR1STjKhp4rT2SZXdDvyQ7rMMq+g2y9CCyU5ulvLOTVpCLSX0pYQRlbhtSuhyvF8empp6pXJ9NQbrQ57uXhGl/l4/d52/Yq+C3DxPvtn+1BP//PzKfR7/89Nnf/BXk7596byzznj3yHOq/+E/lz39XwfuXDD/ry9t/l+dO673MxcDmBOvrDeifwitJY4IAAAAvvjOOf+V+d999No31rc0vjZtyLWr/3X2jRdX1C298i9ffOhvN42/+sytjb/58zv2eXjyhGe+dO4hy054fZ+DL2s88637/mLeuAev6nvLD+ff8YOC+X9DafP/uAcrcyg42duxJl7//4r+IXReWr8+CSyNwz2rfwj7dKZaYonkgvqjYonmJLA07jAZFEu0tuRX1TsGlqcCb9RlAmtSgbUxkNlLcUfI7Mq5ti6E4Z2psfklpscS9anAN2OgIRVoioHmVKBfDIxMBX7fLxNoSQWejIEwJX9b3dcvs60AAAC2RGaeVZl/N6TnecsrustQ1l2GPt1lKO8uQ3V3GYqNIt6/N2aoTJ28UpaTqTJda02qloIM8WL4W9yvggzhmfyc6YIFTcfzD7LnG5TlZ3jg5K/ec9WCyYPKf/XR2qWt790/ccWts49eec5Df/fEpH0X3XX93gXz/+bS5v998m+T1tfG+f/m6/8lgcdj966Lp443xMD6Y/IDmR0Da+Nk96psVS2ZEplJ+1WxxMgYaEgFpsfAyFSgdWwmsHC3/EBmpp1t/Ips41MyJXICAAAA8JmLOwjibpo4///jsmePeqxi0V3/+ur4u+6d89Y99/70nntuvXf07Zu+/twVF7970UcF8/+Rpc3/Y3t9cxu7Mvbmt/1CWFm2uTfZwODaJBD3Y9TGn8cPrA1hp5wdHNkSbX2SElWphsNjNckv1KvSVf2oJlljIN4f98tHVs/rSFxfE8L+OXtfsm38e3XSRk060FiVBPqkA9MqkkDc85MNrCpPArDVsnsF4wsqc6pLVn3X5Yq8/r4o1wRND69gH2gX+br6zdX2Up1+ILNPNWvLnraC6tguCt4ea7zbeuK7rd67LfeLVOYbysebQ9WhfFLb5Amz2mfGR3J/yVpgOz3Pub9SLSW9DV6Hcz59b7tXne5Ac+rjo7nrcl2/DstidY+fP/DOBY1jdr354Q2TX696dkHJ3Sgi/lD4maoB9bmbd3urDpnXXI/7PGnxedIT/w00eNpCCBsuPeG6kVXTr1g5+pAj93rttFOqZ7437+/vf+mBd/f9xxUTh31tQMH8v6W0+X9F6rbTH+PGvLB/CAfmbNx1cfMf3z/5HMwJJJ+SOxcGkkPur9YV/eQEAACAbS27uyO7v2BK5jY5ITw9Ty7M37KF+eP+ipFd5i+13z8adMpe9+9297hrTz3qpn/+zdh+G8e/uOSYFa1HNS49+mf/6cyaeQXz/9ZPnv/3TnXT8X/H/9lOHP/v0o6+K7p3+oE5W7UruqA6tgvH/7u0o7/bHP/vkuP/jv93xfH/bjj+36Ud/Wkr+JY03ZeuEMKwMWcMrr1r8BPvD1z96yeemvJvc1sn3PONq27Z8+Nv1y9eUL9r34L5//TS5v/W/+t60b7s+n+txdb/m15s/b851v8DAAC2qyILzaXneQWr9xVkSK/eV5Ch2wUCu11i0Pp/W7z+32NHHTl++ejFv16z95gDLus7d+6puzx504stM9+vue2D93f7xYGjCub/c0qb/8eXQ9/c1nvK+n8NY4tUdU0MTLcwIAAAADuiYjsIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HztfsN1449prj7pN8dfWjP6+w+tO6D6mldOvXTZhFsnfeX28wfNWrFkSeWfnt940uTv3HB444aVE14IYUpnubKkeNnpi1f8YNUF3/jWg6fddPe7e85eWp2ptzJzu2de7tjqh3UhLMx5pDYm3q7ruLM5MG703bMrOhLr6kLYLzcw9fKpO3UkFteFcEBuYPXpg3brSFyeLvHQK8e91pE4Mx04cfCA9zsSR2YCZenu/kO/pLtl6e7O6xdC/5xAtrvn9suvKtvGCZlAebqNf6pN2oiB2lj0xtqkjRhojyWm9A5hSEUIvdJV/aw6qapXuqr/XZ1U1Std1WXVIYwIIVSkq/p1VVJVRXrkz1QlVcXA7vvesbGxI7GoKoQhuYEXxi8a3pGYkQpkGz+lKoS9O14y6cbvq0war0w3fkNlCF8JIVSlS2yqSEpUpUtsqAhh55zA5o1YEcLswBdD/PSZlPvghbMvnjqhvb1txnZMVGXaqgmTp7S3NU2c1j6pOtWnYspy0h/P/fRjf3njJRM7bu8a1dS/lHRFplxlZ5eHVebdPWRH733sV5/cSjY/HwX1x/xVoW/oPevCthlNF02YOXPG0ORvqdmHJX97ZaLJthraU7ZVY24lQ2aeN33IhbMvHjzlvAlnt53ddv5hww874ohhhx46fEjHoJqTv9tipIs++5F+uSKnks/i/S8hIdHTEuV5n27NO/rneMEX/c0drQzVnR/QBdOK3CxlnaPcFoM+9lOO+NN8Tel2REMLJg4FWYZ1n+WQgsnE5iw1SZbOr3UFk8Pcmso7N2m8Xx6amnoV2w71+XdzN+9bW7F5X8xsulLTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD/ZwcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IFjAQAAAABh/tZh9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFwKAAD//y85Ijg=") r0 = open(&(0x7f0000000040)='./bus\x00', 0x60142, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x40789440, 0x0) [ 1623.566156][T28130] FAULT_INJECTION: forcing a failure. [ 1623.566156][T28130] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1623.597547][T28127] loop0: detected capacity change from 0 to 1024 [ 1623.606930][T28133] FAULT_INJECTION: forcing a failure. [ 1623.606930][T28133] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1623.646295][T28130] CPU: 1 PID: 28130 Comm: syz-executor.4 Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 1623.656451][T28130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1623.666548][T28130] Call Trace: [ 1623.669870][T28130] [ 1623.672851][T28130] dump_stack_lvl+0x1e7/0x2d0 [ 1623.677605][T28130] ? nf_tcp_handle_invalid+0x650/0x650 [ 1623.683133][T28130] ? panic+0x850/0x850 [ 1623.687270][T28130] should_fail_ex+0x3aa/0x4e0 [ 1623.692018][T28130] prepare_alloc_pages+0x1d9/0x5b0 [ 1623.697300][T28130] __alloc_pages+0x165/0x680 [ 1623.701939][T28130] ? zone_statistics+0x170/0x170 [ 1623.706914][T28130] ? policy_nodemask+0x1ec/0x720 [ 1623.711874][T28130] alloc_pages_mpol+0x3de/0x640 [ 1623.716767][T28130] ? mempolicy_in_oom_domain+0x130/0x130 [ 1623.722460][T28130] vma_alloc_folio+0xf3/0x3f0 [ 1623.727177][T28130] ? page_zone+0xd0/0xd0 [ 1623.731447][T28130] ? do_raw_spin_unlock+0x13b/0x8b0 [ 1623.736684][T28130] do_wp_page+0x1234/0x4d40 [ 1623.741241][T28130] ? folio_put+0xc0/0xc0 [ 1623.745527][T28130] ? read_lock_is_recursive+0x20/0x20 [ 1623.750954][T28130] ? do_raw_spin_lock+0x14e/0x370 [ 1623.756030][T28130] ? __lock_acquire+0x1345/0x1fd0 [ 1623.761088][T28130] handle_mm_fault+0x1b1c/0x6680 [ 1623.766066][T28130] ? handle_mm_fault+0x11d/0x6680 [ 1623.771122][T28130] ? numa_migrate_prep+0x260/0x260 [ 1623.776296][T28130] ? mtree_range_walk+0x6a0/0x7e0 [ 1623.781426][T28130] ? lock_vma_under_rcu+0x187/0x6f0 [ 1623.786678][T28130] ? __lock_acquire+0x1fd0/0x1fd0 [ 1623.791741][T28130] ? lock_vma_under_rcu+0x2f6/0x6f0 [ 1623.796988][T28130] ? lock_vma_under_rcu+0x5df/0x6f0 [ 1623.802235][T28130] ? lock_vma_under_rcu+0x187/0x6f0 [ 1623.807480][T28130] ? exc_page_fault+0x110/0x870 [ 1623.812356][T28130] exc_page_fault+0x456/0x870 [ 1623.817059][T28130] asm_exc_page_fault+0x26/0x30 [ 1623.821976][T28130] RIP: 0033:0x7f3e7da28793 [ 1623.826410][T28130] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 1623.846047][T28130] RSP: 002b:00007f3e7e749520 EFLAGS: 00010206 [ 1623.852153][T28130] RAX: 0000000000004800 RBX: 00007f3e7e7495c0 RCX: 00007f3e73e00000 [ 1623.860162][T28130] RDX: 00007f3e7e749760 RSI: 0000000000000033 RDI: 00007f3e7e749660 [ 1623.868177][T28130] RBP: 000000000000004a R08: 0000000000000009 R09: 00000000000001b7 [ 1623.876169][T28130] R10: 00000000000001bc R11: 00007f3e7e7495c0 R12: 0000000000000001 [ 1623.884152][T28130] R13: 00007f3e7daeb780 R14: 00000000000000c0 R15: 00007f3e7e749660 [ 1623.892157][T28130] [ 1623.909090][T28133] CPU: 0 PID: 28133 Comm: syz-executor.1 Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 1623.919244][T28133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1623.929358][T28133] Call Trace: [ 1623.932677][T28133] [ 1623.935742][T28133] dump_stack_lvl+0x1e7/0x2d0 [ 1623.940495][T28133] ? nf_tcp_handle_invalid+0x650/0x650 [ 1623.946037][T28133] ? panic+0x850/0x850 [ 1623.950170][T28133] ? __lock_acquire+0x1345/0x1fd0 [ 1623.955251][T28133] should_fail_ex+0x3aa/0x4e0 [ 1623.959993][T28133] prepare_alloc_pages+0x1d9/0x5b0 [ 1623.965165][T28133] __alloc_pages+0x165/0x680 [ 1623.969908][T28133] ? zone_statistics+0x170/0x170 [ 1623.974936][T28133] ? policy_nodemask+0x1ec/0x720 [ 1623.979948][T28133] ? mark_lock+0x9a/0x350 [ 1623.984340][T28133] alloc_pages_mpol+0x3de/0x640 [ 1623.989280][T28133] ? mempolicy_in_oom_domain+0x130/0x130 [ 1623.994982][T28133] vma_alloc_folio+0xf3/0x3f0 [ 1623.999716][T28133] ? page_zone+0xd0/0xd0 [ 1624.004004][T28133] ? __lock_acquire+0x1345/0x1fd0 [ 1624.009083][T28133] handle_mm_fault+0x238a/0x6680 [ 1624.014102][T28133] ? handle_mm_fault+0x11d/0x6680 [ 1624.019206][T28133] ? numa_migrate_prep+0x260/0x260 [ 1624.024389][T28133] ? mtree_range_walk+0x6a0/0x7e0 [ 1624.029467][T28133] ? lock_vma_under_rcu+0x187/0x6f0 [ 1624.034719][T28133] ? __lock_acquire+0x1fd0/0x1fd0 [ 1624.039789][T28133] ? lock_vma_under_rcu+0x2f6/0x6f0 [ 1624.045049][T28133] ? lock_vma_under_rcu+0x5df/0x6f0 [ 1624.050315][T28133] ? lock_vma_under_rcu+0x187/0x6f0 [ 1624.055598][T28133] ? exc_page_fault+0x110/0x870 [ 1624.060528][T28133] exc_page_fault+0x456/0x870 [ 1624.065288][T28133] asm_exc_page_fault+0x26/0x30 [ 1624.070197][T28133] RIP: 0033:0x7f2d46228793 [ 1624.074655][T28133] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 1624.094316][T28133] RSP: 002b:00007f2d46fa8520 EFLAGS: 00010202 [ 1624.100439][T28133] RAX: 0000000000004000 RBX: 00007f2d46fa85c0 RCX: 00007f2d3c600000 10:33:36 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$sequencer(r0, &(0x7f0000000080)=""/176, 0xb0) [ 1624.108463][T28133] RDX: 00007f2d46fa8760 RSI: 000000000000000d RDI: 00007f2d46fa8660 [ 1624.116479][T28133] RBP: 00000000000000a4 R08: 0000000000000008 R09: 00000000000000b6 [ 1624.124486][T28133] R10: 00000000000000c2 R11: 00007f2d46fa85c0 R12: 0000000000000001 [ 1624.132495][T28133] R13: 00007f2d462eb780 R14: 00000000000000f8 R15: 00007f2d46fa8660 [ 1624.140548][T28133] [ 1624.255489][T28130] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1624.284791][T28130] loop4: detected capacity change from 0 to 2048 [ 1624.304951][T28130] /dev/loop4: Can't open blockdev 10:33:36 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$sequencer(r0, &(0x7f0000000080)=""/176, 0xb0) 10:33:36 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000680), 0x1, 0x5ce, &(0x7f00000006c0)="$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") (fail_nth: 17) [ 1624.387985][T28133] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF 10:33:36 executing program 4: syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000800), 0x1, 0x755, &(0x7f0000000840)="$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") (fail_nth: 20) [ 1624.479929][T28133] loop1: detected capacity change from 0 to 128 10:33:36 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$sequencer(r0, &(0x7f0000000080)=""/176, 0xb0) [ 1624.667744][T28144] FAULT_INJECTION: forcing a failure. [ 1624.667744][T28144] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1624.727383][T28146] FAULT_INJECTION: forcing a failure. [ 1624.727383][T28146] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1624.745714][T28144] CPU: 0 PID: 28144 Comm: syz-executor.4 Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 1624.755859][T28144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1624.765967][T28144] Call Trace: [ 1624.769296][T28144] [ 1624.772283][T28144] dump_stack_lvl+0x1e7/0x2d0 10:33:37 executing program 1: syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1fd, &(0x7f00000002c0)="$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") (fail_nth: 20) [ 1624.777037][T28144] ? nf_tcp_handle_invalid+0x650/0x650 [ 1624.782570][T28144] ? panic+0x850/0x850 [ 1624.786698][T28144] ? __lock_acquire+0x1345/0x1fd0 [ 1624.791893][T28144] should_fail_ex+0x3aa/0x4e0 [ 1624.796646][T28144] prepare_alloc_pages+0x1d9/0x5b0 [ 1624.801834][T28144] __alloc_pages+0x165/0x680 [ 1624.806493][T28144] ? zone_statistics+0x170/0x170 [ 1624.811492][T28144] ? policy_nodemask+0x1ec/0x720 [ 1624.816472][T28144] ? mark_lock+0x9a/0x350 [ 1624.820855][T28144] alloc_pages_mpol+0x3de/0x640 [ 1624.825779][T28144] ? mempolicy_in_oom_domain+0x130/0x130 [ 1624.831486][T28144] vma_alloc_folio+0xf3/0x3f0 [ 1624.836204][T28144] ? page_zone+0xd0/0xd0 [ 1624.840476][T28144] ? __lock_acquire+0x1345/0x1fd0 [ 1624.845555][T28144] handle_mm_fault+0x238a/0x6680 [ 1624.850544][T28144] ? handle_mm_fault+0x11d/0x6680 [ 1624.855604][T28144] ? numa_migrate_prep+0x260/0x260 [ 1624.860751][T28144] ? mtree_range_walk+0x6a0/0x7e0 [ 1624.865828][T28144] ? lock_vma_under_rcu+0x187/0x6f0 [ 1624.871103][T28144] ? __lock_acquire+0x1fd0/0x1fd0 [ 1624.876167][T28144] ? lock_vma_under_rcu+0x2f6/0x6f0 [ 1624.881438][T28144] ? lock_vma_under_rcu+0x5df/0x6f0 [ 1624.886711][T28144] ? lock_vma_under_rcu+0x187/0x6f0 [ 1624.891948][T28144] ? exc_page_fault+0x110/0x870 [ 1624.896827][T28144] exc_page_fault+0x456/0x870 [ 1624.901530][T28144] asm_exc_page_fault+0x26/0x30 [ 1624.906422][T28144] RIP: 0033:0x7f3e7da28793 [ 1624.910867][T28144] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 1624.930769][T28144] RSP: 002b:00007f3e7e749520 EFLAGS: 00010206 [ 1624.936887][T28144] RAX: 0000000000005000 RBX: 00007f3e7e7495c0 RCX: 00007f3e73e00000 [ 1624.944906][T28144] RDX: 00007f3e7e749760 RSI: 000000000000000b RDI: 00007f3e7e749660 [ 1624.952918][T28144] RBP: 0000000000000006 R08: 0000000000000008 R09: 00000000000000b9 [ 1624.960908][T28144] R10: 00000000000000c4 R11: 00007f3e7e7495c0 R12: 0000000000000001 [ 1624.968897][T28144] R13: 00007f3e7daeb780 R14: 00000000000000ed R15: 00007f3e7e749660 [ 1624.976899][T28144] [ 1625.029612][T28150] FAULT_INJECTION: forcing a failure. [ 1625.029612][T28150] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1625.032883][T28146] CPU: 0 PID: 28146 Comm: syz-executor.0 Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 1625.052986][T28146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1625.063094][T28146] Call Trace: [ 1625.066425][T28146] [ 1625.069488][T28146] dump_stack_lvl+0x1e7/0x2d0 [ 1625.074238][T28146] ? nf_tcp_handle_invalid+0x650/0x650 [ 1625.079757][T28146] ? panic+0x850/0x850 [ 1625.083891][T28146] should_fail_ex+0x3aa/0x4e0 [ 1625.088632][T28146] prepare_alloc_pages+0x1d9/0x5b0 [ 1625.093803][T28146] __alloc_pages+0x165/0x680 [ 1625.098439][T28146] ? zone_statistics+0x170/0x170 [ 1625.103430][T28146] ? policy_nodemask+0x1ec/0x720 [ 1625.107692][T28144] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1625.108396][T28146] alloc_pages_mpol+0x3de/0x640 [ 1625.120749][T28146] ? mempolicy_in_oom_domain+0x130/0x130 [ 1625.126436][T28146] vma_alloc_folio+0xf3/0x3f0 [ 1625.131152][T28146] ? page_zone+0xd0/0xd0 [ 1625.135430][T28146] ? do_raw_spin_unlock+0x13b/0x8b0 [ 1625.140704][T28146] do_wp_page+0x1234/0x4d40 [ 1625.145296][T28146] ? folio_put+0xc0/0xc0 [ 1625.149611][T28146] ? read_lock_is_recursive+0x20/0x20 [ 1625.155051][T28146] ? do_raw_spin_lock+0x14e/0x370 [ 1625.160145][T28146] ? __lock_acquire+0x1345/0x1fd0 [ 1625.165238][T28146] handle_mm_fault+0x1b1c/0x6680 [ 1625.170247][T28146] ? handle_mm_fault+0x11d/0x6680 [ 1625.175336][T28146] ? numa_migrate_prep+0x260/0x260 [ 1625.180518][T28146] ? mtree_range_walk+0x6a0/0x7e0 [ 1625.185601][T28146] ? lock_vma_under_rcu+0x187/0x6f0 [ 1625.190857][T28146] ? __lock_acquire+0x1fd0/0x1fd0 [ 1625.195928][T28146] ? lock_vma_under_rcu+0x2f6/0x6f0 [ 1625.201199][T28146] ? lock_vma_under_rcu+0x5df/0x6f0 [ 1625.206457][T28146] ? lock_vma_under_rcu+0x187/0x6f0 [ 1625.211719][T28146] ? exc_page_fault+0x110/0x870 [ 1625.213580][T28144] loop4: detected capacity change from 0 to 2048 [ 1625.216591][T28146] exc_page_fault+0x456/0x870 [ 1625.216630][T28146] asm_exc_page_fault+0x26/0x30 [ 1625.216658][T28146] RIP: 0033:0x7f6cf6428793 [ 1625.237021][T28146] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 1625.257031][T28146] RSP: 002b:00007f6cf71f0520 EFLAGS: 00010206 [ 1625.263147][T28146] RAX: 00000000000017f8 RBX: 00007f6cf71f05c0 RCX: 00007f6cec800000 [ 1625.266350][T28144] /dev/loop4: Can't open blockdev [ 1625.271172][T28146] RDX: 00007f6cf71f0760 RSI: 000000000000003b RDI: 00007f6cf71f0660 [ 1625.271195][T28146] RBP: 000000000000005b R08: 000000000000000a R09: 00000000000003ba [ 1625.271216][T28146] R10: 00000000000003d4 R11: 00007f6cf71f05c0 R12: 0000000000000001 [ 1625.271232][T28146] R13: 00007f6cf64eb780 R14: 000000000000000f R15: 00007f6cf71f0660 [ 1625.308287][T28146] [ 1625.311322][T28150] CPU: 1 PID: 28150 Comm: syz-executor.1 Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 1625.321521][T28150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1625.331623][T28150] Call Trace: [ 1625.334957][T28150] [ 1625.337922][T28150] dump_stack_lvl+0x1e7/0x2d0 [ 1625.342658][T28150] ? nf_tcp_handle_invalid+0x650/0x650 [ 1625.348551][T28150] ? panic+0x850/0x850 [ 1625.352682][T28150] should_fail_ex+0x3aa/0x4e0 [ 1625.357476][T28150] prepare_alloc_pages+0x1d9/0x5b0 [ 1625.362641][T28150] __alloc_pages+0x165/0x680 [ 1625.367300][T28150] ? zone_statistics+0x170/0x170 [ 1625.372293][T28150] ? policy_nodemask+0x1ec/0x720 [ 1625.377290][T28150] alloc_pages_mpol+0x3de/0x640 [ 1625.382190][T28150] ? mempolicy_in_oom_domain+0x130/0x130 [ 1625.387967][T28150] vma_alloc_folio+0xf3/0x3f0 [ 1625.392691][T28150] ? page_zone+0xd0/0xd0 [ 1625.396984][T28150] ? do_raw_spin_unlock+0x13b/0x8b0 [ 1625.402249][T28150] do_wp_page+0x1234/0x4d40 [ 1625.406824][T28150] ? folio_put+0xc0/0xc0 [ 1625.411198][T28150] ? read_lock_is_recursive+0x20/0x20 [ 1625.416633][T28150] ? do_raw_spin_lock+0x14e/0x370 [ 1625.421728][T28150] ? __lock_acquire+0x1345/0x1fd0 [ 1625.426811][T28150] handle_mm_fault+0x1b1c/0x6680 [ 1625.431815][T28150] ? handle_mm_fault+0x11d/0x6680 [ 1625.436898][T28150] ? numa_migrate_prep+0x260/0x260 [ 1625.442062][T28150] ? mtree_range_walk+0x6a0/0x7e0 [ 1625.447134][T28150] ? lock_vma_under_rcu+0x187/0x6f0 [ 1625.452383][T28150] ? __lock_acquire+0x1fd0/0x1fd0 [ 1625.457461][T28150] ? lock_vma_under_rcu+0x2f6/0x6f0 [ 1625.462750][T28150] ? lock_vma_under_rcu+0x5df/0x6f0 [ 1625.468006][T28150] ? lock_vma_under_rcu+0x187/0x6f0 [ 1625.473286][T28150] ? exc_page_fault+0x110/0x870 [ 1625.478191][T28150] exc_page_fault+0x456/0x870 [ 1625.482925][T28150] asm_exc_page_fault+0x26/0x30 [ 1625.487837][T28150] RIP: 0033:0x7f2d46228793 [ 1625.492300][T28150] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 1625.511956][T28150] RSP: 002b:00007f2d46fa8520 EFLAGS: 00010206 [ 1625.518088][T28150] RAX: 0000000000005400 RBX: 00007f2d46fa85c0 RCX: 00007f2d3c600000 [ 1625.526117][T28150] RDX: 00007f2d46fa8760 RSI: 0000000000000000 RDI: 00007f2d46fa8660 [ 1625.534150][T28150] RBP: 00000000000000e5 R08: 0000000000000006 R09: 0000000000000021 [ 1625.542181][T28150] R10: 0000000000000024 R11: 00007f2d46fa85c0 R12: 0000000000000001 [ 1625.550217][T28150] R13: 00007f2d462eb780 R14: 000000000000002e R15: 00007f2d46fa8660 [ 1625.558263][T28150] 10:33:37 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x22f048, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) [ 1625.635807][T28146] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1625.647034][T28150] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1625.677199][T28150] loop1: detected capacity change from 0 to 128 [ 1625.740586][T28146] loop0: detected capacity change from 0 to 1024 10:33:38 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r2, &(0x7f00000002c0)=ANY=[], 0x1a000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_freezer_state(r2, &(0x7f0000000140)='FREEZING\x00', 0x9) write$cgroup_int(r1, &(0x7f0000000200), 0x23019) write$cgroup_int(r0, &(0x7f0000000200), 0x23000) 10:33:38 executing program 4: syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000800), 0x1, 0x755, &(0x7f0000000840)="$eJzs3U9oHNUfAPDvzO4m/ff7JRUPVkQLoi2oSdOKpOKhET0oHgR7ES8uzbbUbv/QRLRFMLnrTbypVPCqCJ70Unrw4s2bV08SDaI9eIzMZDZZm938MbsddT4fmOS9ebt5b7J8583Oe8wLoLIOZz/SiEMRsZBEjBX7k4ho5Kl6xKnV193+7Z0z2ZbEysorvyb5a7J8dL0ns794256I+P5WEvfUNtY7d+36hWa73bpa5CfnL16ZnLt2/YnzF5vnWudal6amT06fmD5+8qnpgR3rCx998urSxy8+uvj+GzNfv/bz70mcigNFWfdxDMrhOLz2P+lWj4jnBl1ZSWrF8aRd+5J6iQ1iR9Kuz/C+GItarH94Y3Hrq1IbBwAMxUq2AQAVk+j/AaBiOvcBOmN7wxgHA/6ZlmciH6jfGP/1OJX/3pPPA9h3O4nuYd2kM3dgl7K/8cu3X3yWbTGkcXigt4XFfOC/R/wnefyP57N4NsZ/LaI4P+zOnecQ8Q93z27i/+UB1C/+AQAAAAAAYHBuzkTEdK/xv3Rt/k/0GP8bjYhjA6h/6/G/dGkA1QA9LM9EPNNz/u/aE13Ga0Xuf/l8gEZy9ny7lcX+/yPiaDRGs/zUJnV899aPz/Yr657/l21Z/Z25gEU7luqjf33PbHO+uZtjBlYtL0bcX+8//yfr/5M+839f32YdX374+SP9yraOf2BYVm5EHOnZ/68/uS7Z/Pl8k/n1wGTnqmCjB5+/8Ue/+sU/lCfr//dtHv/jSffzOud2Xsen751+oF/Z373+H0lO508VHSn2vd2cn786FTGSvLRx//Gdtxn+izrx0ImXLP6PPrz5/b9e1/+NiLiyzTqnDnzzeL8y/T+UJ4v/2R31/ztPnHv3xIV+9W+v/38y79OPFnvc/4PNbTdAy24nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMUhoRByJJJ9bSaToxEbE/Iu6NfWn78tz8Y2cvv3lpNiuLGI9GevZ8u3UsIsZW80mWn8rT6/njd+RPRMTBiPhgdG+enzhzuT1b9sEDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQGF/n/X/Mz+Nlt06AGBo9pTdAADgrtP/A0D16P8BoHr0/wBQPfp/AKge/T8AAAAAAAAAAAAAAAAAAAAAAAAADNXBh27+kETEwtN78y0zUpQ1Sm0ZMGxp2Q0ASlMruwFAaeplNwAoje/4QLJFef8lQtxBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgOo4csv4/VJXV+6C6rP8P1WX9f6gu3/EB6/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDW5q5dv9Bst1tXJSQkJNYSZZ+ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4N/gzAAD//+MUMFo=") (fail_nth: 21) [ 1626.027505][T28154] FAULT_INJECTION: forcing a failure. [ 1626.027505][T28154] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1626.086702][T28154] CPU: 1 PID: 28154 Comm: syz-executor.4 Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 1626.096864][T28154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1626.106965][T28154] Call Trace: [ 1626.110288][T28154] [ 1626.113262][T28154] dump_stack_lvl+0x1e7/0x2d0 [ 1626.118015][T28154] ? nf_tcp_handle_invalid+0x650/0x650 [ 1626.123541][T28154] ? panic+0x850/0x850 [ 1626.127670][T28154] ? __lock_acquire+0x1345/0x1fd0 [ 1626.132743][T28154] should_fail_ex+0x3aa/0x4e0 [ 1626.137473][T28154] prepare_alloc_pages+0x1d9/0x5b0 [ 1626.142660][T28154] __alloc_pages+0x165/0x680 [ 1626.147322][T28154] ? zone_statistics+0x170/0x170 [ 1626.152335][T28154] ? policy_nodemask+0x1ec/0x720 [ 1626.157331][T28154] ? mark_lock+0x9a/0x350 [ 1626.161732][T28154] alloc_pages_mpol+0x3de/0x640 [ 1626.166656][T28154] ? mempolicy_in_oom_domain+0x130/0x130 [ 1626.172348][T28154] vma_alloc_folio+0xf3/0x3f0 [ 1626.177078][T28154] ? page_zone+0xd0/0xd0 [ 1626.181376][T28154] ? __lock_acquire+0x1345/0x1fd0 [ 1626.186454][T28154] handle_mm_fault+0x238a/0x6680 [ 1626.191497][T28154] ? handle_mm_fault+0x11d/0x6680 [ 1626.196628][T28154] ? numa_migrate_prep+0x260/0x260 [ 1626.201822][T28154] ? mtree_range_walk+0x6a0/0x7e0 [ 1626.207185][T28154] ? lock_vma_under_rcu+0x187/0x6f0 [ 1626.212534][T28154] ? __lock_acquire+0x1fd0/0x1fd0 [ 1626.217619][T28154] ? lock_vma_under_rcu+0x2f6/0x6f0 [ 1626.222903][T28154] ? lock_vma_under_rcu+0x5df/0x6f0 [ 1626.228171][T28154] ? lock_vma_under_rcu+0x187/0x6f0 [ 1626.233454][T28154] ? exc_page_fault+0x110/0x870 [ 1626.238372][T28154] exc_page_fault+0x456/0x870 [ 1626.243125][T28154] asm_exc_page_fault+0x26/0x30 [ 1626.248062][T28154] RIP: 0033:0x7f3e7da28840 [ 1626.252544][T28154] Code: 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 1626.272296][T28154] RSP: 002b:00007f3e7e749520 EFLAGS: 00010286 [ 1626.278429][T28154] RAX: 0000000000006000 RBX: 00007f3e7e7495c0 RCX: 0000000000000003 [ 1626.286457][T28154] RDX: 00000000000001ff RSI: 0000000000000400 RDI: 00007f3e7e749660 [ 1626.294480][T28154] RBP: 0000000000000004 R08: 00007f3e73e00000 R09: 00000000000000ed [ 1626.302511][T28154] R10: 0000000020000842 R11: 0000000000000753 R12: 0000000000000301 [ 1626.310529][T28154] R13: 00007f3e7daeb780 R14: 0000000000000013 R15: 00007f3e7e749660 [ 1626.318631][T28154] [ 1626.660718][T28154] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF 10:33:39 executing program 5: syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x200800, &(0x7f0000000100)={[{@lazytime}, {@ikeep}, {@filestreams}, {@pquota}, {@nolargeio}]}, 0x4, 0x9606, &(0x7f0000009680)="$eJzs2gm8pnPhuP/nDGOXMVRSaiqiRdYsUc0MZigkS7QjS8pSUqESSgoVEe3Zt2xlCWVrJdlbKCFUskRabMP8X8ecYYyLb/36/l++dV3X63XO8zz3c9/3+Tyf972cw2wyaYOJg8Ecg2mNG8zceddOnjLm6nXvOGrz+Y9d5tR7DnjsiouOH3mcMPI4cTAYjBp5e2jasrGD004fNZj14eWPNveccw3NOxgsO/JyZD+DFac9zHvF9PWmztTMAx169Ns+074ebr7hHzH85PAD9jpiMBiMmWH7ocFgaPfHfVBpm0yYPOlRq0fchq1Gjzyf8Wu2aV/zXjwYzHvmgI+PGdcdego+0vDP3P0l545e9yn42f9xbTJh8loz+Q+fi7OMLFtx+Byf+Rw0NvNxfttim648MoUPH2+DwfAl7jHnyn9Em0yYtPbgia/zg6NWuXCfqdOum7MPpt0o5hwMBnONXF/neapd6t9rwsTlHr5nT389wj79WN6djosT3n7yQ8M36cFgsMBgMHbN6feCqqqq+s9owsTlVoP7/xxPdv8/5ZSFz+z+X1VV9Z/bWhMmLjd8r5/p/j/Pk93/d1z4oj2n/bf/8StO2+qhp/ZDVFVV1b/UpLXw/j/mye7/K6522drd/6uqqv5zW3+dh+//88x0/1/wye7/bzl5lUVG1pv+e8ODM+xyaIb/n/DADMtnmWH5/TMsHz3DfmZcf7YZlt87w/LZh9+D9ccNBmOn/3vBKY8uHjtu+L2R5ffNsHz8o/9OZ9HVZ1g+YYblk2ZYPnFkrMPLJ8+wfPIM66/5JFNdVVX1f6b1l5u02mCGf2c/snih6e/T/f+Cs65b8qkab1VVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVf1n9tAdZ587GAyGBoPBqMFgymDk+YyPg6lTp04dfn3K+Zdf/pQN9P9GQ+ddO3nKmKvXveOozec/dplT7zng0Vn6j+0//xPUv9Ow/xzHjxsMtt/oqR5KPQV1/rvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+4h+44+9yRY2DUYDBlMPJ89+mPZ+3/5reOrLryxqfedfCjWy46fpuRZ+ddO3nKNk/B2J+ChoY/65ir173jqM3nP3aZU+854L/g7PnP/wT17/Sw/zZDg8HI+T1m+Fxed8L6Gy4xGAwOvuvUjVcYPPLeSsPvrTJ2lsEsD2+6xMPf11iUd7z7mtMexw9/W/CRfZzy8P7XmnrYLEMzDWKGXnXejUe9a5N7lp/5cfEn/hyjpj854voz7p46derUxywcaY4n2Hj6/qd/lpnP85GxLzE89qV22u69S71/l12X3Ga7zbbecustt19muZWWX2HZZVZY+RVLbbXNtlsuPe37E8zZuIe/r/bPzNk8M8/ZHRNmnLOZP9sTzdm4J5+zh/c4ZdehDafP2az/4pyt9uRzNm6bkR+06PjRg00fnpqhwWDR1UcPdh5+sczsg8Gia4ysu9DwuquOHTUY7P/oBx1+Nvsjx+DQ7sPrbDJpg4mPjuzxn/Bx1+nHrLjo+JHHCSOPE6cNcdzg0UNx7OC000cNz8VjpnnuOecamncwWHbk5ch+BiuPvHvo9PWmztTMAx169Ns+074ebr7hnQw/effSZ18zfC7OtP3/H/0/Xf8f57XS0CMTNTTyNbLONK8Jk9d69Gc9PA3DczfLyLIVh01mnrP/zR433nGzDsY8yXgnrTVxueHFM83/9E3w+LpzsQs/PO3YGr/itK0e+n9GofHO8yTjXWsCjneeJxvv8R+59PRpu/pfG+9M17q1H/4+/p+51g2e/Fo3C+1gy0sWmfla97onHuJjzuPpczT7TCs90bVu50OW3X14/+Of/Fq39vDYRz/mWjdqMFh0tenXuuEL36TRg/2HXyw7/GLy6MGxwy+We/jFnIPzh1+8/J07bLvF8II1p8/J0sP7HT926GH3C1e8dfGpB06duvrIWMaPfexYR46PcTPezyeMnTaZ07edvt/hVafv95ZnTntv0sh+J/wL+52+LY33rvmmvTd5ZL8TZ9rv6CfZ7/RtH3c+LDH0yIXrCa43k2a63oz8jTP9xz3ma7ZpX/NePBjMeyb5zrTu/3jNpPN3jicZ74SJy602PL6Zzt9HDkc6fy+dfPXwvWLewWCwwGAwds3pY/8XG3qi8c765OOdCOOd9cnGe+Vx263zvzDewQzjfcxxtsn6046VNUeOs8n/wvE7fduZr2OjH3532mV/zX/mOjbucdexPWYZNdNkz9AT/c62Baw/7flCj/6ee+1Jx0yf+9Ez7fd/+p1ths8yBNexMTP9PT9qzRsGQzTnux+/6mVDBz35nI8ePPZvi+lzPn3bJ5vzyf/MnD/nyef8n/09eYkXTnt/9Ezjn3HO19vv2ftOn/PZZtrv/zTnk5/83vH4OR8/GE1zvvT90+btya6nTzTn07edPufDH3GVsbMO1hi+Z43M+aR/Zs4X+t85zueC9ac93/KRReccdeobp8/5zHP8P835pH91zsc9cpwv+vB7Lxg1mG22wc6b7bTTjstM+z795bLTvvO16N5rp83zk91Ln8ho+rZPdl6s/s8YjfmnjIb+J6OFZ30io0dPrSN32PEZ/6/XotX/VaMBX4uuPmbavD3Z70VPNOfTt6X74IIzbD/z36Hrr/Pw793zzHQfnL4J3gfPOWvtvafvcmSzB2ca5vT76gMzLJ9lhuX3z7B89Az7mXH92WZYfu8My4c/wmwzrD+dddzw37wjy6c8uvrY4V+exo0sv2+G5eMf3XbR1WdYPmGG5ZNmWD7x0UNj0ckzLJ88w/prDv7Fpv836W1mvsjXP1v//ddd/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+4h+44+9yRY2DUYDBlMO350MjjYPeh9W5/zfDjYDAYveKJU9d7qsf7FDd03rWTp4y5et07jtp8/mOXOfWeA/4Lzp7//E9Q/04P+28zNBiMnN9jthkMButOWH/DJQaDwXpTT1xx1OCR9xYafm/VsaMGg/2HHrOD2R9ZZ2j34XU2mbTBxMFgjpE1xj3uhz7uPHrMiouOH3mcMPI4cdr1adzg0eN17OC000cNZn14+aPNPedcQ/MOBsuOvBzZz2DFaQ/zXjF9vakzNfNAhx79ts+0r4ebb/hHDD/ZeevJzx2eq5m2/z/T9Gv1NqP+x1U7/93l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u/jX/jpb/thJ1l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5i3vojrPPHTkGRg0GUwbTng/tPvI4GDr5tBePHCKjd7nq6MOe6vE+xQ2dd+3kKWOuXveOozaf/9hlTr3ngP+Cs+c//xPUv9PD/tsMDQYj5/eYbQaDwboT1t9wicFgcNjRV+0yavDIewsNv7fq2FGDwf5Dj9nB7I+sM7T78DqbTNpg4mAwx8ga4x73Qx93Hj1mxUXHjzxOGHmcOO36NG7w6PE6dnDa6aMGsz68/NHmnnOuoXkHg2VHXo7sZ7DitId5r5i+3tSZmnmgQ49+22fa18PNN/wjhp/sNc+1Jw/P1Uzb/59p+rV6m1H/46qd/+7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5S/uoTvOPnfkGBg1GEwZTHs+auRxaPebb9ptw+HH4dfzr7n3tU/1eJ/ihs67dvKUMVeve8dRm89/7DKn3nPAf8HZ85//Cerfadh/juPHDQbbb/RUD6Wegjr/3eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvLX9xDd5x97sjTUY8uHbV7xwU2dN61k6eMuXrdO47afP5jlzn1ngOe6gH9uz2B/x75Yxb/PfPHLP4fzx+z+H8if8ziv1f+mMX/k/ljFv+988cs/p/KH7P4fzp/zOK/T/6YxX/f/DGL/375Yxb/z+SPWfw/mz9m8f9c/pjFf//8MYv/AfljFv/P549Z/A/MH7P4H5Q/ZvH/Qv6Yxf/g/DGL/yH5Yxb/L+aPWfy/lD9m8f9y/pjF/yv5Yxb/r+aPWfy/lj9m8f96/pjF/xv5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/h/M3/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8v5U/ZvH/dv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/L+TP2bxPzN/zOJ/Vv6Yxf/s/DGL/3fzxyz+38sfs/ifkz9m8T83f8zif17+mMX//Pwxi/8F+WMW/+/nj1n8f5A/ZvH/Yf6Yxf9H+WMW/x/nj1n8f5I/ZvG/MH/M4n9R/pjF/6f5Yxb/i/PHLP4/yx+z+F+SP2bxvzR/zOJ/Wf6Yxf/y/DGL/xX5Yxb/K/PHLP5X5Y9Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/K/OH7P4X5M/ZvH/df6Yxf83+WMW/2vzxyz+v80fs/hflz9m8b8+f8zif0P+mMX/d/ljFv8b88cs/jflj1n8b84fs/j/Pn/M4v+H/DGL/x/zxyz+t+SPWfz/lD9m8b81f8zif1v+mMX/9vwxi/8d+WMW/z/nj1n878wfs/jflT9m8f9L/pjF/+78MYv/X/PHLP5/yx+z+P89f8zi/4/8MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8Z+SP2bxfzB/zOL/UP6YxX9q/pjEf5ZB/pjFfyh/zOI/Kn/M4j9L/pjFf9b8MYv/6Pwxi/9s+WMW/9nzxyz+c+SPWfznzB+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/9Pyxyz+8+WPWfzH5I9Z/OfPH7P4j80fs/gvkD9m8V8wf8zi//T8MYv/M/LHLP7PzB+z+C+UP2bxf1b+mMV/4fwxi/+z88cs/s/JH7P4L5I/ZvF/bv6Yxf95+WMW/3H5Yxb/5+ePWfxfkP/jmnXk0eD/wvwxy/m/aP6YxX+x/DGL/4vyxyz+i+ePWfyXyB+z+L84f8zi/5L8MYv/S/PHLP4vyx+z+C+ZP2bxf3n+mMV/qfwxi//S+WMW/2Xyxyz+y+aPWfyXyx+z+C+fP2bxf0X+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxfmT9m8V8lf8ziv2r+mMX/VfljFv9X549Z/F+TP2bxH58/ZvGfkD9m8Z+YP2bxXy1/zOK/ev6YxX+N/DGL/6T8MYv/ZJX/LP/0mhb/NVX+/3wW/7Xyxyz+r80fs/i/Ln/M4r92/pjFf538MYv/uvljFv/X549Z/NfLH7P4vyF/zOK/fv6YxX+D/DGL/4b5Yxb/jfLHLP5vzB+z+G+cP2bx3yR/zOL/pvwxi/+b88cs/m/JH7P4vzV/zOL/tvwxi//b88cs/u/IH7P4b5o/ZvHfLH/M4r95/pjF/535Yxb/LfLHLP5b5o9Z/LfKH7P4b50/ZvF/V/6YxX+b/DGL/7vzxyz+78kfs/hvmz9m8d8uf8ziv33+mMV/h/wxi/9788cs/u/LH7P475g/ZvF/f/6YxX+n/DGL/wfyxyz+H8wfs/h/KH/M4r9z/pjFf5f8MYv/rvljFv8P549Z/D+SP2bx/2j+mMV/t/wxi//H8scs/rvnj1n898gfs/jvmT9m8f94/pjF/xP5Yxb/vfLHLP6fzB+z+O+dP2bx/1T+mMX/0/ljFv998scs/vvmj1n898sfs/h/Jn/M4v/Z/DGL/+fyxyz+++ePWfwPyB+z+H8+f8zif2D+mMX/oPwxi/8X8scs/gfnj1n8D8kfs/h/MX/M4v+l/DGL/5fzxyz+X8kfs/h/NX/M4v+1/DGL/9fzxyz+38gfs/gfmj9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bxPy5/zOJ/fP6Yxf+b+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOL/rfwxi/+388cs/qfmj1n8T8sfs/ifnj9m8T8jf8zi/538MYv/mfljFv+z8scs/mfnj1n8v5s/ZvH/Xv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/C/IH7P4fz9/zOL/g/wxi/8P88cs/j/KH7P4/zh/zOL/k/wxi/+F+WMW/4vyxyz+P80fs/hfnD9m8f9Z/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8r8gfs/hfmT9m8b8qf8zi//P8MYv/L/LHLP6/zB+z+P8qf8zif3X+mMX/mvwxi/+v88cs/r/JH7P4X5s/ZvH/bf6Yxf+6/DGL//X5Yxb/G/LHLP6/yx+z+N+YP2bxvyl/zOJ/c/6Yxf/3+WMW/z/kj1n8/5g/ZvG/JX/M4v+n/DGL/635Yxb/2/LHLP63549Z/O/IH7P4/zl/zOJ/Z/6Yxf+u/DGL/1/yxyz+d+ePWfz/mj9m8f9b/pjF/+/5Yxb/f+SPWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/5T8MYv/g/ljFv+H8scs/lPzxyT+sw7yxyz+Q/ljFv9R+WMW/1nyxyz+s+aPWfxH549Z/GfLH7P4z54/ZvGfI3/M4j9n/pjFf678MYv/3PljFv958scs/vPmj1n8n5Y/ZvGfL3/M4j8mf8ziP3/+mMV/bP6YxX+B/DGL/4L5Yxb/p+ePWfyfkT9m8X9m/pjFf6H8MYv/s/LHLP4L549Z/J+dP2bxf07+mMV/kfwxi/9z88cs/s/LH7P4j8sfs/g/P3/M4v+C/DGL/wvzxyz+i+aPWfwXyx+z+L8of8ziv3j+mMV/ifwxi/+L88cs/i/JH7P4vzR/zOL/svwxi/+S+WMW/5fnj1n8l8ofs/gvnT9m8V8mf8ziv2z+mMV/ufwxi//y+WMW/1fkj1n8V8gfs/ivmD9m8V8pf8ziv3L+mMX/lfljFv9V8scs/qvmj1n8X5U/ZvF/df6Yxf81+WMW//H5Yxb/CfljFv+J+WMW/9Xyxyz+q+ePWfzXyB+z+E/KH7P4T84fs/ivmT9m8V8rf8zi/9r8MYv/6/LHLP5r549Z/NfJH7P4r5s/ZvF/ff6YxX+9/DGL/xsGl+cPWfzX7/zHLP4b5I9Z/DfMH7P4b5Q/ZvF/Y/6YxX/j/DGL/yb5Yxb/N+WPWfzfnD9m8X9L/pjF/635Yxb/t+WPWfzfnj9m8X9H/pjFf9P8MYv/ZvljFv/N88cs/u/MH7P4b5E/ZvHfMn/M4r9V/pjFf+v8MYv/u/LHLP7b5I9Z/N+dP2bxf0/+mMV/2/wxi/92+WMW/+3zxyz+O+SPWfzfmz9m8X9f/pjFf8f8MYv/+/PHLP475Y9Z/D+QP2bx/2D+mMX/Q/ljFv+d88cs/rvkj1n8d80fs/h/OH/M4v+R/DGL/0fzxyz+u+WPWfw/lj9m8d89f8ziv0f+mMV/z/wxi//H88cs/p/IH7P475U/ZvH/ZP6YxX/v/DGL/6fyxyz+n84fs/jvkz9m8d83f8ziv1/+mMX/M/ljFv/P5o9Z/D+XP2bx3z9/zOJ/QP6Yxf/z+WMW/wPzxyz+B+WPWfy/kD9m8T84f8zif0j+mMX/i/ljFv8v5Y9Z/L+cP2bx/0r+mMX/q/ljFv+v5Y9Z/L+eP2bx/0b+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP7fzB+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/b+WPWfy/nT9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/+/kj1n8z8wfs/iflT9m8T87f8zi/938MYv/9/LHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF//v5Yxb/H+SPWfx/mD9m8f9R/pjF/8f5Yxb/n+SPWfwvzB+z+F+UP2bx/2n+mMX/4vwxi//P8scs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/5/nj1n8f5E/ZvH/Zf6Yxf9X+WMW/6vzxyz+1+SPWfx/nT9m8f9N/pjF/9r8MYv/b/PHLP7X5Y9Z/K/PH7P435A/ZvH/Xf6Yxf/G/DGL/035Yxb/m/PHLP6/zx+z+P8hf8zi/8f8MYv/LfljFv8/5Y9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/8/5Yxb/O/PHLP535Y9Z/P+SP2bxvzt/zOL/1/wxi//f8scs/n/PH7P4/yN/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/Kfkj1n8H8wfs/g/lD9m8Z+aPybxHz3IH7P4D+WPWfxH5Y9Z/GfJH7P4z5o/ZvEfnT9m8Z8tf8ziP3v+mMV/jvwxi/+c+WMW/7nyxyz+c+ePWfznyR+z+M+bP2bxf1r+mMV/vvwxi/+Y/DGL//z5Yxb/sfljFv8F8scs/gvmj1n8n54/ZvF/Rv6Yxf+Z+WMW/4Xyxyz+z8ofs/gvnD9m8X92/pjF/zn5Yxb/RfLHLP7PzR+z+D8vf8ziPy5/zOL//Pwxi/8L8scs/i/MH7P4L5o/ZvFfLH/M4v+i/DGL/+L5Yxb/JfLHLP4vzh+z+L8kf8zi/9L8MYv/y/LHLP5L5o9Z/F+eP2bxXyp/zOK/dP6YxX+Z/DGL/7L5Yxb/5fLHLP7L549Z/F+RP2bxXyF/zOK/Yv6YxX+l/DGL/8r5Yxb/V+aPWfxXyR+z+K+aP2bxf1X+mMX/1fljFv/X5I9Z/Mfnj1n8J+SPWfwn5o9Z/FfLH7P4r54/ZvFfI3/M4j8pf8ziPzl/zOK/Zv6YxX+t/DGL/2vzxyz+r8sfs/ivnT9m8V8nf8ziv27+mMX/9fljFv/18scs/m/IH7P4r58/ZvHfIH/M4r9h/pjFf6P8MYv/G/PHLP4b549Z/DfJH7P4vyl/zOL/5vwxi/9b8scs/m/NH7P4vy1/zOL/9vwxi/878scs/pvmj1n8N8sfs/hvnj9m8X9n/pjFf4v8MYv/lvljFv+t8scs/lvnj1n835U/ZvHfJn/M4v/u/DGL/3vyxyz+2+aPWfy3yx+z+G+fP2bx3yF/zOL/3vwxi//78scs/jvmj1n8358/ZvHfKX/M4v+B/DGL/wfzxyz+H8ofs/jvnD9m8d8lf8ziv2v+mMX/w/ljFv+P5I9Z/D+aP2bx3y1/zOL/sfwxi//u+WMW/z3yxyz+e+aPWfw/nj9m8f9E/pjFf6/8MYv/J/PHLP57549Z/D+VP2bx/3T+mMV/n/wxi/+++WMW//3yxyz+n8kfs/h/Nn/M4v+5/DGL//75Yxb/A/LHLP6fzx+z+B+YP2bxPyh/zOL/hfwxi//B+WMW/0Pyxyz+X8wfs/h/KX/M4v/l/DGL/1fyxyz+X80fs/h/LX/M4v/1/DGL/zfyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I/LH7P4H58/ZvH/Zv6Yxf+E/DGL/4n5Yxb/k/LHLP4n549Z/E/JH7P4fyt/zOL/7fwxi/+p+WMW/9Pyxyz+p+ePWfzPyB+z+H8nf8zif2b+mMX/rPwxi//Z+WMW/+/mj1n8v5c/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/t/PH7P4/yB/zOL/w/wxi/+P8scs/j/OH7P4/yR/zOJ/Yf6Yxf+i/DGL/0/zxyz+F+ePWfx/lj9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+P88f8zi/4v8MYv/L/PHLP6/yh+z+F+dP2bxvyZ/zOL/6/wxi/9v8scs/tfmj1n8f5s/ZvG/Ln/M4n99/pjF/4b8MYv/7/LHLP435o9Z/G/KH7P435w/ZvH/ff6Yxf8P+WMW/z/mj1n8b8kfs/j/KX/M4n9r/pjF/7b8MYv/7fljFv878scs/n/OH7P435k/ZvG/K3/M4v+X/DGL/935Yxb/v+aPWfz/lj9m8f97/pjF/x/5Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4j8lf8zi/2D+mMX/ofwxi//U/DGJ/2yD/DGL/1D+mMV/VP6YxX+W/DGL/6z5Yxb/0fljFv/Z8scs/rPnj1n858gfs/jPmT9m8Z8rf8ziP3f+mMV/nvwxi/+8+WMW/6flj1n858sfs/iPyR+z+M+fP2bxH5s/ZvFfIH/M4r9g/pjF/+n5Yxb/Z+SPWfyfmT9m8V8of8zi/6z8MYv/wvljFv9n549Z/J+TP2bxXyR/zOL/3Pwxi//z8scs/uPyxyz+z88fs/i/IH/M4v/C/DGL/6L5Yxb/xfLHLP4vyh+z+C+eP2bxXyJ/zOL/4vwxi/9L8scs/i/NH7P4vyx/zOK/ZP6Yxf/l+WMW/6Xyxyz+S+ePWfyXyR+z+C+bP2bxXy5/zOK/fP6Yxf8V+WMW/xXyxyz+K+aPWfxXyh+z+K+cP2bxf2X+mMV/lfwxi/+q+WMW/1flj1n8X50/ZvF/Tf6YxX98/pjFf0L+mMV/Yv6YxX+1/DGL/+r5Yxb/NfLHLP6T8scs/pPzxyz+a+aPWfzXyh+z+L82f8zi/7r8MYv/2vljFv918scs/uvmj1n8X58/ZvFfL3/M4v+G/DGL//r5Yxb/DfLHLP4b5o9Z/DfKH7P4vzF/zOK/cf6YxX+T/DGL/5vyxyz+b84fs/i/JX/M4v/W/DGL/9vyxyz+b88fs/i/I3/M4r9p/pjFf7P8MYv/5vljFv935o9Z/LfIH7P4b5k/ZvHfKn/M4r91/pjF/135Yxb/bfLHLP7vzh+z+L8nf8ziv23+mMV/u/wxi//2+WMW/x3yxyz+780fs/i/L3/M4r9j/pjF//35Yxb/nfLHLP4fyB+z+H8wf8zi/6H8MYv/zvljFv9d8scs/rvmj1n8P5w/ZvH/SP6Yxf+j+WMW/93yxyz+H8sfs/jvnj9m8d8jf8ziv2f+mMX/4/ljFv9P5I9Z/PfKH7P4fzJ/zOK/d/6Yxf9T+WMW/0/nj1n898kfs/jvmz9m8d8vf8zi/5n8MYv/Z/PHLP6fyx+z+O+fP2bxPyB/zOL/+fwxi/+B+WMW/4Pyxyz+X8gfs/gfnD9m8T8kf8zi/8X8MYv/l/LHLP5fzh+z+H8lf8zi/9X8MYv/1/LHLP5fzx+z+H8jf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/b+aPWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/7fyxyz+384fs/ifmj9m8T8tf8zif3r+mMX/jPwxi/938scs/mfmj1n8z8ofs/ifnT9m8f9u/pjF/3v5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4v/9/DGL/w/yxyz+P8wfs/j/KH/M4v/j/DGL/0/yxyz+F+aPWfwvyh+z+P80f8zif3H+mMX/Z/ljFv9L8scs/pfmj1n8L8sfs/hfnj9m8b8if8zif2X+mMX/qvwxi//P88cs/r/IH7P4/zJ/zOL/q/wxi//V+WMW/2vyxyz+v84fs/j/Jn/M4n9t/pjF/7f5Yxb/6/LHLP7X549Z/G/IH7P4/y5/zOJ/Y/6Yxf+m/DGL/835Yxb/3+ePWfz/kD9m8f9j/pjF/5b8MYv/n/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4v/n/DGL/535Yxb/u/LHLP5/yR+z+N+dP2bx/2v+mMX/b/ljFv+/549Z/P+RP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP5T8scs/g/mj1n8H8ofs/hPzR+T+M8+yB+z+A/lj1n8R+WPWfxnyR+z+M+aP2bxH50/ZvGfLX/M4j97/pjFf478MYv/nPljFv+58scs/nPnj1n858kfs/jPmz9m8X9a/pjFf778MYv/mPwxi//8+WMW/7H5Yxb/BfLHLP4L5o9Z/J+eP2bxf0b+mMX/mfljFv+F8scs/s/KH7P4L5w/ZvF/dv6Yxf85+WMW/0Xyxyz+z80fs/g/L3/M4j8uf8zi//z8MYv/C/LHLP4vzB+z+C+aP2bxXyx/zOL/ovwxi//i+WMW/yXyxyz+L84fs/i/JH/M4v/S/DGL/8vyxyz+S+aPWfxfnj9m8V8qf8ziv3T+mMV/mfwxi/+y+WMW/+Xyxyz+y+ePWfxfkT9m8V8hf8ziv2L+mMV/pfwxi//K+WMW/1fmj1n8V8kfs/ivmj9m8X9V/pjF/9X5Yxb/1+SPWfzH549Z/Cfkj1n8J+aPWfxXyx+z+K+eP2bxXyN/zOI/KX/M4j85f8ziv2b+mMV/rfwxi/9r88cs/q/LH7P4r50/ZvFfJ3/M4r9u/pjF//X5Yxb/9fLHLP5vyB+z+K+fP2bx3yB/zOK/Yf6YxX+j/DGL/xvzxyz+G+ePWfw3yR+z+L8pf8zi/+b8MYv/W/LHLP5vzR+z+L8tf8zi//b8MYv/O/LHLP6b5o9Z/DfLH7P4b54/ZvF/Z/6YxX+L/DGL/5b5Yxb/rfLHLP5b549Z/N+VP2bx3yZ/zOL/7vwxi/978scs/tvmj1n8t8sfs/hvnz9m8d8hf8zi/978MYv/+/LHLP475o9Z/N+fP2bx3yl/zOL/gfwxi/8H88cs/h/KH7P475w/ZvHfJX/M4r9r/pjF/8P5Yxb/j+SPWfw/mj9m8d8tf8zi/7H8MYv/7vljFv898scs/nvmj1n8P54/ZvH/RP6YxX+v/DGL/yfzxyz+e+ePWfw/lT9m8f90/pjFf5/8MYv/vvljFv/98scs/p/JH7P4fzZ/zOL/ufwxi//++WMW/wPyxyz+n88fs/gfmD9m8T8of8zi/4X8MYv/wfljFv9D8scs/l/MH7P4fyl/zOL/5fwxi/9X8scs/l/NH7P4fy1/zOL/9fwxi/838scs/ofmj1n8D8sfs/gfnj9m8T8if8zif2T+mMX/qPwxi//R+WMW/2Pyxyz+x+aPWfyPyx+z+B+fP2bx/2b+mMX/hPwxi/+J+WMW/5Pyxyz+J+ePWfxPyR+z+H8rf8zi/+38MYv/qfljFv/T8scs/qfnj1n8z8gfs/h/J3/M4n9m/pjF/6z8MYv/2fljFv/v5o9Z/L+XP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/C/LHLP7fzx+z+P8gf8zi/8P8MYv/j/LHLP4/zh+z+P8kf8zif2H+mMX/ovwxi/9P88cs/hfnj1n8f5Y/ZvG/JH/M4n9p/pjF/7L8MYv/5fljFv8r8scs/lfmj1n8r8ofs/j/PH/M4v+L/DGL/y/zxyz+v8ofs/hfnT9m8b8mf8zi/+v8MYv/b/LHLP7X5o9Z/H+bP2bxvy5/zOJ/ff6Yxf+G/DGL/+/yxyz+N+aPWfxvyh+z+N+cP2bx/33+mMX/D/ljFv8/5o9Z/G/JH7P4/yl/zOJ/a/6Yxf+2/DGL/+35Yxb/O/LHLP5/zh+z+N+ZP2bxvyt/zOL/l/wxi//d+WMW/7/mj1n8/5Y/ZvH/e/6Yxf8f+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOI/JX/M4v9g/pjF/6H8MYv/1Pwxif8cg/wxi/9Q/pjFf1T+mMV/lvwxi/+s+WMW/9H5Yxb/2fLHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv+n5Y9Z/OfLH7P4j8kfs/jPnz9m8R+bP2bxXyB/zOK/YP6Yxf/p+WMW/2fkj1n8n5k/ZvFfKH/M4v+s/DGL/8L5Yxb/Z+ePWfyfkz9m8V8kf8zi/9z8MYv/8/LHLP7j8scs/s/PH7P4vyB/zOL/wvwxi/+i+WMW/8Xyxyz+L8ofs/gvnj9m8V8if8zi/+L8MYv/S/LHLP4vzR+z+L8sf8ziv2T+mMX/5fljFv+l8scs/kvnj1n8l8kfs/gvmz9m8V8uf8ziv3z+mMX/FfljFv8V8scs/ivmj1n8V8ofs/ivnD9m8X9l/pjFf5X8MYv/qvljFv9X5Y9Z/F+dP2bxf03+mMV/fP6YxX9C/pjFf2L+mMV/tfwxi//q+WMW/zXyxyz+k/LHLP6T88cs/mvmj1n818ofs/i/Nn/M4v+6/DGL/9r5Yxb/dfLHLP7r5o9Z/F+fP2bxXy9/zOL/hvwxi//6+WMW/w3yxyz+G+aPWfw3yh+z+L8xf8ziv3H+mMV/k/wxi/+b8scs/m/OH7P4vyV/zOL/1vwxi//b8scs/m/PH7P4vyN/zOK/af6YxX+z/DGL/+b5Yxb/d+aPWfy3yB+z+G+ZP2bx3yp/zOK/df6Yxf9d+WMW/23yxyz+784fs/i/J3/M4r9t/pjFf7v8MYv/9vljFv8d8scs/u/NH7P4vy9/zOK/Y/6Yxf/9+WMW/53yxyz+H8gfs/h/MH/M4v+h/DGL/875Yxb/XfLHLP675o9Z/D+cP2bx/0j+mMX/o/ljFv/d8scs/h/LH7P4754/ZvHfI3/M4r9n/pjF/+P5Yxb/T+SPWfz3yh+z+H8yf8ziv3f+mMX/U/ljFv9P549Z/PfJH7P475s/ZvHfL3/M4v+Z/DGL/2fzxyz+n8sfs/jvnz9m8T8gf8zi//n8MYv/gfljFv+D8scs/l/IH7P4H5w/ZvE/JH/M4v/F/DGL/5fyxyz+X84fs/h/JX/M4v/V/DGL/9fyxyz+X88fs/h/I3/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/2/mj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/lPwxi/+38scs/t/OH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/d/LHLP5n5o9Z/M/KH7P4n50/ZvH/bv6Yxf97+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bxvyB/zOL//fwxi/8P8scs/j/MH7P4/yh/zOL/4/wxi/9P8scs/hfmj1n8L8ofs/j/NH/M4n9x/pjF/2f5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/z/PHLP6/yB+z+P8yf8zi/6v8MYv/1fljFv9r8scs/r/OH7P4/yZ/zOJ/bf6Yxf+3+WMW/+vyxyz+1+ePWfxvyB+z+P8uf8zif2P+mMX/pvwxi//N+WMW/9/nj1n8/5A/ZvH/Y/6Yxf+W/DGL/5/yxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOL/5/wxi/+d+WMW/7vyxyz+f8kfs/jfnT9m8f9r/pjF/2/5Yxb/v+ePWfz/kT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+U/LHLP4P5o9Z/B/KH7P4T80fk/jPOcgfs/gP5Y9Z/Eflj1n8Z8kfs/jPmj9m8R+dP2bxny1/zOI/e/6YxX+O/DGL/5z5Yxb/ufLHLP5z549Z/OfJH7P4z5s/ZvF/Wv6YxX++/DGL/5j8MYv//PljFv+x+WMW/wXyxyz+C+aPWfyfnj9m8X9G/pjF/5n5Yxb/hfLHLP7Pyh+z+C+cP2bxf3b+mMX/OfljFv9F8scs/s/NH7P4Py9/zOI/Ln/M4v/8/DGL/wvyxyz+L8wfs/gvmj9m8V8sf8zi/6L8MYv/4vljFv8l8scs/i/OH7P4vyR/zOL/0vwxi//L8scs/kvmj1n8X54/ZvFfKn/M4r90/pjFf5n8MYv/svljFv/l8scs/svnj1n8X5E/ZvFfIX/M4r9i/pjFf6X8MYv/yvljFv9X5o9Z/FfJH7P4r5o/ZvF/Vf6Yxf/V+WMW/9fkj1n8x+ePWfwn5I9Z/Cfmj1n8V8sfs/ivnj9m8V8jf8ziPyl/zOI/OX/M4r9m/pjFf638MYv/a/PHLP6vyx+z+K+dP2bxXyd/zOK/bv6Yxf/1+WMW//Xyxyz+b8gfs/ivnz9m8d8gf8ziv2H+mMV/o/wxi/8b88cs/hvnj1n8N8kfs/i/KX/M4v/m/DGL/1vyxyz+b80fs/i/LX/M4v/2/DGL/zvyxyz+m+aPWfw3yx+z+G+eP2bxf2f+mMV/i/wxi/+W+WMW/63yxyz+W+ePWfzflT9m8d8mf8zi/+78MYv/e/LHLP7b5o9Z/LfLH7P4b58/ZvHfIX/M4v/e/DGL//vyxyz+O+aPWfzfnz9m8d8pf8zi/4H8MYv/B/PHLP4fyh+z+O+cP2bx3yV/zOK/a/6Yxf/D+WMW/4/kj1n8P5o/ZvHfLX/M4v+x/DGL/+75Yxb/PfLHLP575o9Z/D+eP2bx/0T+mMV/r/wxi/8n88cs/nvnj1n8P5U/ZvH/dP6YxX+f/DGL/775Yxb//fLHLP6fyR+z+H82f8zi/7n8MYv//vljFv8D8scs/p/PH7P4H5g/ZvE/KH/M4v+F/DGL/8H5Yxb/Q/LHLP5fzB+z+H8pf8zi/+X8MYv/V/LHLP5fzR+z+H8tf8zi//X8MYv/N/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/gfnz9m8f9m/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8T8kfs/h/K3/M4v/t/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4fyd/zOJ/Zv6Yxf+s/DGL/9n5Yxb/7+aPWfy/lz9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+388fs/j/IH/M4v/D/DGL/4/yxyz+P84fs/j/JH/M4n9h/pjF/6L8MYv/T/PHLP4X549Z/H+WP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4/zx/zOL/i/wxi/8v88cs/r/KH7P4X50/ZvG/Jn/M4v/r/DGL/2/yxyz+1+aPWfx/mz/2WP/RT/Vw/v2ewP+6/DHL+X99/pjF/4b8MYv/7/LHLP435o9Z/G/KH7P435w/ZvH/ff6Yxf8P+WMW/z/mj1n8b8kfs/j/KX/M4n9r/pjF/7b8MYv/7fljFv878scs/n/OH7P435k/ZvG/K3/M4v+X/DGL/935Yxb/v+aPWfz/lj9m8f97/pjF/x/5Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4j8lf8zi/2D+mMX/ofwxi//U/DGJ/1yD/DGL/1D+mMV/VP6YxX+W/DGL/6z5Yxb/0fljFv/Z8scs/rPnj1n858gfs/jPmT9m8Z8rf+y/33+OR97K//H99/s/3Fzz5I9Z/OfNH7P4Py1/zOI/X/6YxX9M/pjFf/78MYv/2Pwxi/8C+WMW/wXzxyz+T88fs/g/I3/M4v/M/DGL/0L5Yxb/Z+WPWfwXzh+z+D87f8zi/5z8MYv/IvljFv/n5o9Z/J+XP2bxH5c/ZvF/fv6Yxf8F+WMW/xfmj1n8F80fs/gvlj9m8X9R/pjFf/H8MYv/EvljFv8X549Z/F+SP2bxf2n+mMX/ZfljFv8l88cs/i/PH7P4L5U/ZvFfOn/M4r9M/pjFf9n8MYv/cvljFv/l88cs/q/IH7P4r5A/ZvFfMX/M4r9S/pjFf+X8MYv/K/PHLP6r5I9Z/FfNH7P4vyp/zOL/6vwxi/9r8scs/uPzxyz+E/LHLP4T88cs/qvlj1n8V88fs/ivkT9m8Z+UP2bxn5w/ZvFfM3/M4r9W/pjF/7X5Yxb/1+WPWfzXzh+z+K+TP2bxXzd/zOL/+vwxi/96+WMW/zfkj1n8188fs/hvkD9m8d8wf8ziv1H+mMX/jfljFv+N88cs/pvkj1n835Q/ZvF/c/6Yxf8t+WMW/7fmj1n835Y/ZvF/e/6Yxf8d+WMW/03zxyz+m+WPWfw3zx+z+L8zf8ziv0X+mMV/y/wxi/9W+WMW/63zxyz+78ofs/hvkz9m8X93/pjF/z35Yxb/bfPHLP7b5Y9Z/LfPH7P475A/ZvF/b/6Yxf99+WMW/x3zxyz+788fs/jvlD9m8f9A/pjF/4P5Yxb/D+WPWfx3zh+z+O+SP2bx3zV/zOL/4fwxi/9H8scs/h/NH7P475Y/ZvH/WP6YxX/3/DGL/x75Yxb/PfPHLP4fzx+z+H8if8ziv1f+mMX/k/ljFv+988cs/p/KH7P4fzp/zOK/T/6YxX/f/DGL/375Yxb/z+SPWfw/mz9m8f9c/pjFf//8MYv/AfljFv/P549Z/A/MH7P4H5Q/ZvH/Qv6Yxf/g/DGL/yH5Yxb/L+aPWfy/lD9m8f9y/pjF/yv5Yxb/r+aPWfy/lj9m8f96/pjF/xv5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/h/M3/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8v5U/ZvH/dv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/L+TP2bxPzN/zOJ/Vv6Yxf/s/DGL/3fzxyz+38sfs/ifkz9m8T83f8zif17+mMX//Pwxi/8F+WMW/+/nj1n8f5A/ZvH/Yf6Yxf9H+WMW/x/nj1n8f5I/ZvG/MH/M4n9R/pjF/6f5Yxb/i/PHLP4/yx+z+F+SP2bxvzR/zOJ/Wf6Yxf/y/DGL/xX5Yxb/K/PHLP5X5Y9Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/K/OH7P4X5M/ZvH/df6Yxf83+WMW/2vzxyz+v80fs/hflz9m8b8+f8zif0P+mMX/d/ljFv8b88cs/jflj1n8b84fs/j/Pn/M4v+H/DGL/x/zxyz+t+SPWfz/lD9m8b81f8zif1v+mMX/9vwxi/8d+WMW/z/nj1n878wfs/jflT9m8f9L/pjF/+78MYv/X/PHLP5/yx+z+P89f8zi/4/8MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8Z+SP2bxfzB/zOL/UP6YxX9q/pjEf+5B/pjFfyh/zOI/Kn/M4j9L/pjFf9b8MYv/6Pwxi/9s+WMW/9nzxyz+c+SPWfznzB+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/9Pyxyz+8+WPWfzH5I9Z/OfPH7P4j80fs/gvkD9m8V8wf8zi//T8MYv/M/LHLP7PzB+z+C+UP2bxf1b+mMV/4fwxi/+z88cs/s/JH7P4L5I/ZvF/bv6Yxf95+WMW/3H5Yxb/5+ePWfxfkD9m8X9h/pjFf9H8MYv/YvljFv8X5Y9Z/BfPH7P4L5E/ZvF/cf6Yxf8l+WMW/5fmj1n8X5Y/ZvFfMn/M4v/y/DGL/1L5Yxb/pfPHLP7L5I9Z/JfNH7P4L5c/ZvFfPn/M4v+K/DGL/wr5Yxb/FfPHLP4r5Y9Z/FfOH7P4vzJ/zOK/Sv6YxX/V/DGL/6vyxyz+r84fs/i/Jn/M4j8+f8ziPyF/zOI/MX/M4r9a/pjFf/X8MYv/GvljFv9J+WMW/8n5Yxb/NfPHLP5r5Y9Z/F+bP2bxf13+mMV/7fwxi/86+WMW/3Xzxyz+r88fs/ivlz9m8X9D/pjFf/38MYv/BvljFv8N88cs/hvlj1n835g/ZvHfOH/M4r9J/pjF/035Yxb/N+ePWfzfkj9m8X9r/pjF/235Yxb/t+ePWfzfkT9m8d80f8ziv1n+mMV/8/wxi/8788cs/lvkj1n8t8wfs/hvlT9m8d86f8zi/678MYv/NvljFv93549Z/N+TP2bx3zZ/zOK/Xf6YxX/7/DGL/w75Yxb/9+aPWfzflz9m8d8xf8zi//78MYv/TvljFv8P5I9Z/D+YP2bx/1D+mMV/5/wxi/8u+WMW/13zxyz+H84fs/h/JH/M4v/R/DGL/275Yxb/j+WPWfx3zx+z+O+RP2bx3zN/zOL/8fwxi/8n8scs/nvlj1n8P5k/ZvHfO3/M4v+p/DGL/6fzxyz+++SPWfz3zR+z+O+XP2bx/0z+mMX/s/ljFv/P5Y9Z/PfPH7P4H5A/ZvH/fP6Yxf/A/DGL/0H5Yxb/L+SPWfwPzh+z+B+SP2bx/2L+mMX/S/ljFv8v549Z/L+SP2bx/2r+mMX/a/ljFv+v549Z/L+RP2bxPzR/zOJ/WP6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4H5M/ZvE/Nn/M4n9c/pjF//j8MYv/N/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4n9K/pjF/1v5Yxb/b+ePWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf87+WMW/zPzxyz+Z+WPWfzPzh+z+H83f8zi/738MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8f9+/pjF/wf5Yxb/H+aPWfx/lD9m8f9x/pjF/yf5Yxb/C/PHLP4X5Y9Z/H+aP2bxvzh/zOL/s/wxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/n+WMW/1/kj1n8f5k/ZvH/Vf6Yxf/q/DGL/zX5Yxb/X+ePWfx/kz9m8b82f8zi/9v8MYv/dfljFv/r88cs/jfkj1n8f5c/ZvG/MX/M4n9T/pjF/+b8MYv/7/PHLP5/yB+z+P8xf8zif0v+mMX/T/ljFv9b88cs/rflj1n8b88fs/jfkT9m8f9z/pjF/878MYv/XfljFv+/5I9Z/O/OH7P4/zV/zOL/t/wxi//f88cs/v/IH7P435M/ZvG/N3/M4n9f/pjF//78MYv/A/ljFv8p+WMW/wfzxyz+D+WPWfyn5o9J/OcZ5I9Z/Ifyxyz+o/LHLP6z5I9Z/GfNH7P4j84fs/jPlj9m8Z89f8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+D8tf8ziP1/+mMV/TP6YxX/+/DGL/9j8MYv/AvljFv8F88cs/k/PH7P4PyN/zOL/zPwxi/9C+WMW/2flj1n8F84fs/g/O3/M4v+c/DGL/yL5Yxb/5+aPWfyflz9m8R+XP2bxf37+mMX/BfljFv8X5o9Z/BfNH7P4L5Y/ZvF/Uf6YxX/x/DGL/xL5Yxb/F+ePWfxfkj9m8X9p/pjF/2X5Yxb/JfPHLP4vzx+z+C+VP2bxXzp/zOK/TP6YxX/Z/DGL/3L5Yxb/5fPHLP6vyB+z+K+QP2bxXzF/zOK/Uv6YxX/l/DGL/yvzxyz+q+SPWfxXzR+z+L8qf8zi/+r8MYv/a/LHLP7j88cs/hPyxyz+E/PHLP6r5Y9Z/FfPH7P4r5E/ZvGflD9m8Z+cP2bxXzN/zOK/Vv6Yxf+1+WMW/9flj1n8184fs/ivkz9m8V83f8zi//r8MYv/evljFv835I9Z/NfPH7P4b5A/ZvHfMH/M4r9R/pjF/435Yxb/jfPHLP6b5I9Z/N+UP2bxf3P+mMX/LfljFv+35o9Z/N+WP2bxf3v+mMX/HfljFv9N88cs/pvlj1n8N88fs/i/M3/M4r9F/pjFf8v8MYv/VvljFv+t88cs/u/KH7P4b5M/ZvF/d/6Yxf89+WMW/23zxyz+2+WPWfy3zx+z+O+QP/aI/1Yn/1f7vzd/zHL+vy9/zOK/Y/6Yxf/9+WMW/53yxyz+H8gfs/h/MH/M4v+h/DGL/875Yxb/XfLHLP675o9Z/D+cP2bx/0j+mMX/o/ljFv/d8scs/h/LH7P4754/ZvHfI3/M4r9n/pjF/+P5Yxb/T+SPWfz3yh+z+H8yf8ziv3f+mMX/U/ljFv9P549Z/PfJH7P475s/ZvHfL3/M4v+Z/DGL/2fzxyz+n8sfs/jvnz9m8T8gf8zi//n8MYv/gfljFv+D8scs/l/IH7P4H5w/ZvE/JH/M4v/F/DGL/5fyxyz+X84fs/h/JX/M4v/V/DGL/9fyxyz+X88fs/h/I3/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/2/mj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/lPwxi/+38scs/t/OH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/d/LHLP5n5o9Z/M/KH7P4n50/ZvH/bv6Yxf97+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bxvyB/zOL//fwxi/8P8scs/j/MH7P4/yh/zOL/4/wxi/9P8scs/hfmj1n8L8ofs/j/NH/M4n9x/pjF/2f5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/z/PHLP6/yB+z+P8yf8zi/6v8MYv/1fljFv9r8scs/r/OH7P4/yZ/zOJ/bf6Yxf+3+WMW/+vyxyz+1+ePWfxvyB+z+P8uf8zif2P+mMX/pvwxi//N+WMW/9/nj1n8/5A/ZvH/Y/6Yxf+W/DGL/5/yxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOL/5/wxi/+d+WMW/7vyxyz+f8kfs/jfnT9m8f9r/pjF/2/5Yxb/v+ePWfz/kT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+U/LHLP4P5o9Z/B/KH7P4T80fk/jPO8gfs/gP5Y9Z/Eflj1n8Z8kfs/jPmj9m8R+dP2bxny1/zOI/e/6YxX+O/DGL/5z5Yxb/ufLHLP5z549Z/OfJH7P4z5s/ZvF/Wv6YxX++/DGL/5j8MYv//PljFv+x+WMW/wXyxyz+C+aPWfyfnj9m8X9G/pjF/5n5Yxb/hfLHLP7Pyh+z+C+cP2bxf3b+mMX/OfljFv9F8scs/s/NH7P4Py9/zOI/Ln/M4v/8/DGL/wvyxyz+L8wfs/gvmj9m8V8sf8zi/6L8MYv/4vljFv8l8scs/i/OH7P4vyR/zOL/0vwxi//L8scs/kvmj1n8X54/ZvFfKn/M4r90/pjFf5n8MYv/svljFv/l8scs/svnj1n8X5E/ZvFfIX/M4r9i/pjFf6X8MYv/yvljFv9X5o9Z/FfJH7P4r5o/ZvF/Vf6Yxf/V+WMW/9fkj1n8x+ePWfwn5I9Z/Cfmj1n8V8sfs/ivnj9m8V8jf8ziPyl/zOI/OX/M4r9m/pjFf638MYv/a/PHLP6vyx+z+K+dP2bxXyd/zOK/bv6Yxf/1+WMW//Xyxyz+b8gfs/ivnz9m8d8gf8ziv2H+mMV/o/wxi/8b88cs/hvnj1n8N8kfs/i/KX/M4v/m/DGL/1vyxyz+b80fs/i/LX/M4v/2/DGL/zvyxyz+m+aPWfw3yx+z+G+eP2bxf2f+mMV/i/wxi/+W+WMW/63yxyz+W+ePWfzflT9m8d8mf8zi/+78MYv/e/LHLP7b5o9Z/LfLH7P4b58/ZvHfIX/M4v/e/DGL//vyxyz+O+aPWfzfnz9m8d8pf8zi/4H8MYv/B/PHLP4fyh+z+O+cP2bx3yV/zOK/a/6Yxf/D+WMW/4/kj1n8P5o/ZvHfLX/M4v+x/DGL/+75Yxb/PfLHLP575o9Z/D+eP2bx/0T+mMV/r/wxi/8n88cs/nvnj1n8P5U/ZvH/dP6YxX+f/DGL/775Yxb//fLHLP6fyR+z+H82f8zi/7n8MYv//vljFv8D8scs/p/PH7P4H5g/ZvE/KH/M4v+F/DGL/8H5Yxb/Q/LHLP5fzB+z+H8pf8zi/+X8MYv/V/LHLP5fzR+z+H8tf8zi//X8MYv/N/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/gfnz9m8f9m/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8T8kfs/h/K3/M4v/t/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4fyd/zOJ/Zv6Yxf+s/DGL/9n5Yxb/7+aPWfy/lz9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+388fs/j/IH/M4v/D/DGL/4/yxyz+P84fs/j/JH/M4n9h/pjF/6L8MYv/T/PHLP4X549Z/H+WP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4/zx/zOL/i/wxi/8v88cs/r/KH7P4X50/ZvG/Jn/M4v/r/DGL/2/yxyz+1+aPWfx/mz9m8b8uf8zif33+mMX/hvwxi//v8scs/jfmj1n8b8ofs/jfnD9m8f99/pjF/w/5Yxb/P+aPWfxvyR+z+P8pf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+f84fs/jfmT9m8b8rf8zi/5f8MYv/3fljFv+/5o9Z/P+WP2bx/3v+mMX/H/ljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8ziPyV/zOL/YP6Yxf+h/DGL/9T8MYn/0wb5Yxb/ofwxi/+o/DGL/yz5Yxb/WfPHLP6j88cs/rPlj1n8Z88fs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+T8sfs/jPlz9m8R+TP2bxnz9/zOI/Nn/M4r9A/pjFf8H8MYv/0/PHLP7PyB+z+D8zf8ziv1D+mMX/WfljFv+F88cs/s/OH7P4Pyd/zOK/SP6Yxf+5+WMW/+flj1n8x+WPWfyfnz9m8X9B/pjF/4X5Yxb/RfPHLP6L5Y9Z/F+UP2bxXzx/zOK/RP6Yxf/F+WMW/5fkj1n8X5o/ZvF/Wf6YxX/J/DGL/8vzxyz+S+WPWfyXzh+z+C+TP2bxXzZ/zOK/XP6YxX/5/DGL/yvyxyz+K+SPWfxXzB+z+K+UP2bxXzl/zOL/yvwxi/8q+WMW/1Xzxyz+r8ofs/i/On/M4v+a/DGL//j8MYv/hPwxi//E/DGL/2r5Yxb/1UX+c/wL61r81xD5/ytZ/Cflj1n8J+ePWfzXzB+z+K+VP2bxf23+mMX/dfljFv+188cs/uvkj1n8180fs/i/Pn/M4r9e/pjF/w35Yxb/9fPHLP4b5I9Z/DfMH7P4b5Q/ZvF/Y/6YxX/j/DGL/yb5Yxb/N+WPWfzfnD9m8X9L/pjF/635Yxb/t+WPWfzfnj9m8X9H/pjFf9P8MYv/ZvljFv/N88cs/u/MH7P4b5E/ZvHfMn/M4r9V/pjFf+v8MYv/u/LHLP7b5I9Z/N+dP2bxf0/+mMV/2/wxi/92+WMW/+3zxyz+O+SPWfzfmz9m8X9f/pjFf8f8MYv/+/PHLP475Y9Z/D+QP2bx/2D+mMX/Q/ljFv+d88cs/rvkj1n8d80fs/h/OH/M4v+R/DGL/0fzxyz+u+WPWfw/lj9m8d89f8ziv0f+mMV/z/wxi//H88cs/p/IH7P475U/ZvH/ZP6YxX/v/DGL/6fyxyz+n84fs/jvkz9m8d83f8ziv1/+mMX/M/ljFv/P5o9Z/D+XP2bx3z9/zOJ/QP6Yxf/z+WMW/wPzxyz+B+WPWfy/kD9m8T84f8zif0j+mMX/i/ljFv8v5Y9Z/L+cP2bx/0r+mMX/q/ljFv+v5Y9Z/L+eP2bx/0b+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP7fzB+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/b+WPWfy/nT9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/+/kj1n8z8wfs/iflT9m8T87f8zi/938MYv/9/LHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF//v5Yxb/H+SPWfx/mD9m8f9R/pjF/8f5Yxb/n+SPWfwvzB+z+F+UP2bx/2n+mMX/4vwxi//P8scs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/5/nj1n8f5E/ZvH/Zf6Yxf9X+WMW/6vzxyz+1+SPWfx/nT9m8f9N/pjF/9r8MYv/b/PHLP7X5Y9Z/K/PH7P435A/ZvH/Xf6Yxf/G/DGL/035Yxb/m/PHLP6/zx+z+P8hf8zi/8f8MYv/LfljFv8/5Y9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/8/5Yxb/O/PHLP535Y9Z/P+SP2bxvzt/zOL/1/wxi//f8scs/n/PH7P4/yN/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/Kfkj1n8H8wfs/g/lD9m8Z+aPybxn2+QP2bxH8ofs/iPyh+z+M+SP2bxnzX/xzTLyKPFf3T+mMV/tvwxi//s+WMW/znyxyz+c+aPWfznyh+z+M+dP2bxnyd/zOI/b/6Yxf9p+WMW//nyxyz+Y/LHLP7z549Z/Mfmj1n8F8gfs/gvmD9m8X96/pjF/xn5Yxb/Z+aPWfwXyh+z+D8rf8ziv3D+mMX/2fljFv/n5I9Z/BfJH7P4Pzd/zOL/vPwxi/+4/DGL//Pzxyz+L8gfs/i/MH/M4r9o/pjFf7H8MYv/i/LHLP6L549Z/JfIH7P4vzh/zOL/kvwxi/9L88cs/i/LH7P4L5k/ZvF/ef6YxX+p/DGL/9L5Yxb/ZfLHLP7L5o9Z/JfLH7P4L58/ZvF/Rf6YxX+F/DGL/4r5Yxb/lfLHLP4r549Z/F+ZP2bxXyV/zOK/av6Yxf9V+WMW/1fnj1n8X5M/ZvEfnz9m8Z+QP2bxn5g/ZvFfLX/M4r96/pjFf438MYv/pPwxi//k/DGL/5r5Yxb/tfLHLP6vzR+z+L8uf8ziv3b+mMV/nfwxi/+6+WMW/9fnj1n818sfs/i/IX/M4r9+/pjFf4P8MYv/hvljFv+N8scs/m/MH7P4b5w/ZvHfJH/M4v+m/DGL/5vzxyz+b8kfs/i/NX/M4v+2/DGL/9vzxyz+78gfs/hvmj9m8d8sf8ziv3n+mMX/nfljFv8t8scs/lvmj1n8t8ofs/hvnT9m8X9X/pjFf5v8MYv/u/PHLP7vyR+z+G+bP2bx3y5/zOK/ff6YxX+H/DGL/3vzxyz+78sfs/jvmD9m8X9//pjFf6f8MYv/B/LHLP4fzB+z+H8of8ziv3P+mMV/l/wxi/+u+WMW/w/nj1n8P5I/ZvH/aP6YxX+3/DGL/8fyxyz+u+ePWfz3yB+z+O+ZP2bx///Yo6cEUAgACIDZeNm2bdu2bdv1kW3btm3btm3zAnuCduYKc6D/qOX/IP9Ry//B/qOW/0P8Ry3/h/qPWv4P8x+1/B/uP2r5P8J/1PJ/pP+o5f8o/1HL/9H+o5b/Y/xHLf/H+o9a/o/zH7X8H+8/avk/wX/U8n+i/6jl/yT/Ucv/yf6jlv9T/Ect/6f6j1r+T/Mftfyf7j9q+T/Df9Tyf6b/qOX/LP9Ry//Z/qOW/3P8Ry3/5/qPWv7P8x+1/J/vP2r5v8B/1PJ/of+o5f8i/1HL/8X+o5b/S/xHLf+X+o9a/i/zH7X8X+4/avm/wn/U8n+l/6jl/yr/Ucv/1f6jlv9r/Ect/9f6j1r+r/Mftfxf7z9q+b/Bf9Tyf6P/qOX/Jv9Ry//N/qOW/1v8Ry3/t/qPWv5v8x+1/N/uP2r5v8N/1PJ/p/+o5f8u/1HL/93+o5b/e/xHLf/3+o9a/u/zH7X83+8/avl/wH/U8v+g/6jl/yH/Ucv/w/6jlv9H/Ect/4/6j1r+H/Mftfw/7j9q+X/Cf9Ty/6T/qOX/Kf9Ry//T/qOW/2f8Ry3/z/qPWv6f8x+1/D/vP2r5f8F/1PL/ov+o5f8l/1HL/8v+o5b/V/xHLf+v+o9a/l/zH7X8v+4/avl/w3/U8v+m/6jl/y3/Ucv/2/6jlv93/Ect/+/6j1r+3/Mftfy/7z9q+f/Af9Ty/6H/qOX/I/9Ry//H/qOW/0/8Ry3/n/qPWv4/8x+1/H/uP2r5/8J/1PL/pf+o5f8r/1HL/9f+o5b/b/xHLf/f+o9a/r/zH7X8f+8/avn/wX/U8v+j/6jl/yf/Ucv/z/6jlv9f/Ect/7/6j1r+f/Mftfz/7j9q+f/Df9Ty/6f/qOX/L/9Ry//f/qOW/3/8Ry3///qPSv4HDOQ/avkf2H/U8j+I/6jlf1D/Ucv/YP6jlv/B/Uct/0P4j1r+h/QftfwP5T9q+R/af9TyP4z/qOV/WP9Ry/9w/qOW/+H9Ry3/I/iPWv5H9B+1/A/wH7X8j+Q/avkf2X/U8j+K/6jlf1T/Ucv/aP6jlv/R/Uct/2P4j1r+x/QftfyP5T9q+R/bf9TyP47/qOV/XP9Ry/94/qOW//H9Ry3/E/iPWv4n9B+1/E/kP2r5n9h/1PI/if+o5X9S/1HL/2T+o5b/yf1HLf9T+I9a/qf0H7X8T+U/avmf2n/U8j+N/6jlf1r/Ucv/dP6jlv/p/Uct/zP4j1r+Z/QftfzP5D9q+Z/Zf9TyP4v/qOV/Vv9Ry/9s/qOW/9n9Ry3/c/iPWv7n9B+1/M/lP2r5n9t/1PI/j/+o5X9e/1HL/3z+o5b/+f1HLf8L+I9a/hf0H7X8L+Q/avlf2H/U8r+I/6jlf1H/Ucv/Yv6jlv/F/Uct/0v4j1r+l/Qftfwv5T9q+V/af9Tyv4z/qOV/Wf9Ry/9y/qOW/+X9Ry3/K/iPWv5X9B+1/K/kP2r5X9l/1PK/iv+o5X9V/1HL/2r+o5b/1f1HLf9r+I9a/tf0H7X8r+U/avlf23/U8r+O/6jlf13/Ucv/ev6jlv/1/Uct/xv4j1r+N/Qftfxv5D9q+d/Yf9Tyv4n/qOV/U/9Ry/9m/qOW/839Ry3/W/iPWv639B+1/G/lP2r539p/1PK/jf+o5X9b/1HL/3b+o5b/7f1HLf87+I9a/nf0H7X87+Q/avnf2X/U8r+L/6jlf1f/Ucv/bv6jlv/d/Uct/3v4j1r+9/Qftfzv5T9q+d/bf9Tyv4//qOV/X/9Ry/9+/qOW//39Ry3/B/iP/nf/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAf+zbbWydZeHH8bvbOsb+/JMRF1yGJptcKCTCbPeQ8YKwydhWB914HgMc3dqNjXabXYddAffwYhIhPEgyyRIlypahhJnQSAwEK4ho0EVNNPgAiEIUjRMh6Ja4WHPa09Ieu8Zz1etalM/nRc+577Pfva3Jd/e9wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/ns1NC48Mr5m2KnxQw8+eLil73XO0ZU3H/htz4UDr+WPl41wyXFDD3p7e3vnPDd7R/nwlKIoSj/bzvLxpMpx6fo767/Q2X8UFvS8tOT4lJ83Hjmw5vRH6rqP3l/bd7a2uGndhtaWj40rinBxbdFZOqirKYqwuLa4r3RQXzpYUls8UjqY3XdwavHt0sH5aze3NpdOLI3+nsH/iobGncX4YcUWw/40GNr/zvpv3TnwOsolB642oSj3f0XX99+q+GzACfofuH5YWNl/1b9B4ISq6/+FBQOvo1zyX+7/k59a9cpIn524/4Hrh4/rH9IZ4fl/WKOVz/0Vz/8zRrjk4P6qmq7jpf4vve3ZmeVTE/6d5/93rx8urux/3LDn/9Jz/KKB5/9TiiJcMsZvB7ynNDTuOjLa/X/0/idMr9jUDO3/jPbN+0v9P77ke0+UT9VW2f+iUe7/45ZW/FqB6jQ0frm34v5fRf/FR0a45GD/bz/x64dL/T/2+wfOHPJZNf1fUtn/rI62LbO2bu86b0Nb0/qW9S2b6mbPnzOvvm7eBXNn9T0S9H8d43cF3hvGdv8vJldsaoqiZXB/TfeBp0v9z33wwTnlU5Oq7H/xqPf/Ge7/MKIPjSsmTiw6mzo62uv6vw4c1vd/7f9hI/Rfxd//zzqn/MNqy681RTFtcH/XmXevKPX/zqFnd5dPTayy/yWj9r9g8OcFIozx/t9csRnW/8FDL/U9/y+79+AZ5VPV/v1/6aj9v+r+D2PR0FjxP/z8h5X631VcFtlpaPDf/yCdHP0/9s4NPXHr8An9Qzo5+v/d546eG7cOy/QP6eTof8LGB56PW4dL9Q/p5Oh/+dT5K+LW4TL9Qzo5+l/76rl/jluHRv1DOjn6P+dLuzvj1mG5/iGdHP0/1D5nW9w6rNA/pJOj/5+e9tBrcetwuf4hnRz9Hzt2z41x63CF/iGdHP137zn7B3HrcKX+IZ0c/V++bmGIW4er9A/p5Oh/+rQ/Ph63DlfrH9LJ0f+8P/39tLh1uEb/kE6O/u/4/Ip9cetwrf4hnRz9j7/+lRfj1mGl/iGdHP0vPXvbwrh1uE7/kE6O/pt/0twbtw6r9A/p5Oh/1td/tCFuHa7XP6STo//Dyx/dE7cON+gf0snR/566YkrcOtyof0gnR/9f++7ph+LW4ZP6h3Ry9P+bp56cH7cOq/UP6eTo/7kP3P6NuHW4Sf+QTo7+713z4llx69Ckf0gnR/8P733+i3HrsEb/kE6O/t94o+3/4tZhrf4hnRz9T5506utx69Csf0gnR/8Lb/1Ke9w6tOgf0snRf9vu7h/GrcM6/UM6Ofr/8PFpq+LWYb3+IZ0c/a+cu/f9cetws/4hnRz9v2/Zhbvi1mGD/iGdHP1f1PPRi+LWYaP+IZ0c/Xc889mvxq3DLfqHdHL0v3fma4vj1qFV/5BOjv5fXr30x3Hr0KZ/SCdH/289et2muHXYpH9IJ0f/T/7s7WNx67BZ/5BOjv7//4JFf41bhy36h3Ry9L94yZtr49bhU/qHdHL0v7H7Hy/HrUO7/iGdHP3PPHz1srh12Kp/SCdH/985r25/3Dp06B/SydH/nVfuq49bh236h3Ry9L//4F13x63DrfqHdHL0/+YvZkyPW4dP6x/SydH//VMOXRu3Dp36h3Ry9P/LTbXPxK3Ddv1DOjn6/9u+qTvi1qFL/5BOjv6ffr3nD3HrcJv+IZ0c/a+e8KuJcetwu/4hnRz9T+3acl/cOtyhf0gnR//z72k6P24dPqN/SCdH/1v/8sI349Zhh/4hna3bu25pam1taffGG2+8GXxzsv9kAlJ7N/qT/SsBAAAAAAAAAAAAAABOJMc/JzrZv0cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+yQ4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24FgAAAAAQJi/dRC9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBXAAAA//+O1eBI") open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffb) sendfile(r0, r1, 0x0, 0x1000000201005) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f00000064c0)={0x70, 0x0, 0x0, [{0x0, 0x0, 0x7, 0x0, '%),{(-!'}, {0x0, 0x0, 0x4, 0x0, ',.{\''}, {0x0, 0x0, 0x6, 0x0, ',\'^/$\x00'}]}, 0x70) r2 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) fstat(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f0000001640)=ANY=[@ANYRES32=r4, @ANYRES64=r4, @ANYRESOCT=r3, @ANYRESDEC=r4, @ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="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", @ANYRESOCT=r2, @ANYRES32, @ANYRES64, @ANYBLOB="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", @ANYRES32=0x0], 0x0, 0x1d3, &(0x7f00000008c0)="$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") write$FUSE_ATTR(r1, &(0x7f0000000300)={0x78, 0xffffffffffffffda, 0x0, {0x200, 0x7f, 0x0, {0x3, 0x0, 0x0, 0x4, 0x32, 0x1, 0x6, 0x1ff, 0x80, 0x4000, 0x0, 0xee01, 0x0, 0x6, 0x9}}}, 0x78) r5 = open(&(0x7f0000000000)='./bus\x00', 0x4c37e, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) fallocate(r5, 0x0, 0x800, 0x1000f4) sendfile(r5, r5, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f000000ac40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) fcntl$lock(r5, 0x5, &(0x7f00000002c0)={0x0, 0x1, 0x4, 0x0, r6}) syz_open_procfs(r6, &(0x7f0000000080)='net/ip_mr_vif\x00') r7 = open(&(0x7f0000000180)='./file2\x00', 0x1cd842, 0x0) ioctl$FS_IOC_FSSETXATTR(r7, 0x4020940d, &(0x7f0000000000)={0x4}) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000001c0)={0x90}, 0x90) r8 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r9 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) fallocate(0xffffffffffffffff, 0x3, 0x0, 0xb143) sendfile(r8, r9, 0x0, 0x1000000201005) open(&(0x7f0000000a40)='./bus\x00', 0x141a42, 0x0) 10:33:39 executing program 1: syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1fd, &(0x7f00000002c0)="$eJzs3D1rU18cB/Dzb/vvQ6QPk6CLB110uWh9BUFaEANKbUQdlFuaakhMSm7ARBw6O/k6iqObIL6Bvgu3IkinTkbapI9WXWyj5POBcL7hS+AcQsLvBnI3H759UVnJkpW0GYbGYxgKYS1shzCzk3r+661Du3k0HLYWrj1Nt97cf/T4Tr5QmFuIcT6/eHM2xjh16ePL1+8uf2qee/B+6sNY2Jh5svl19vPG+Y0Lm98Wn5ezWM5ird6MaVyq15vpUrUUl8tZJYnxXrWUZqVYrmWlxpF+pVpfXW3HtLY8mVttlLIsprV2rJTasVmPzUY7ps/Sci0mSRInc4HfKa4vLKT5fu+C09Vo5NPhEMLED01xvS8bAgD6yvw/yMz/g2Bn/s/1Pr9Hmf8BAAAAAAAAAAAAAOBfsN3pTHc6nem9de8xFkIYDyHsPe/3Pjkd3v/BduiPe+MhfFlrFVvF7trt528X5q7HXTMHr9pqtYrD+/2Nbh+P9v+HXK+fPbEfDVevdPud7tbdwrF+Iiyf/vEBAABgICRx34nX90nys76bDv0+cOz6fSRcHDmzYwAAAAC/kLVfVdJqtdQQBEHYD/3+ZgIAAP60g6G/3zsBAAAAAAAAAAAAAAAAAACAwXUWtxPr9xkBAAAAAAAAAAAAAAAAAAAAAADgb/E9AAD//xRs0OA=") (fail_nth: 21) 10:33:39 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000680), 0x1, 0x5ce, &(0x7f00000006c0)="$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") (fail_nth: 18) 10:33:39 executing program 3: r0 = io_uring_setup(0x1014, &(0x7f00000000c0)) io_uring_enter(r0, 0x0, 0x2b16, 0x5, &(0x7f0000000000), 0x15) 10:33:39 executing program 2: syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./bus\x00', 0x80, &(0x7f0000000040)={[{@ref_verify}, {@nossd}, {@inode_cache}, {@compress_force}, {@space_cache_v2}, {}, {@noacl}]}, 0x5, 0x50ef, &(0x7f0000005140)="$eJzs3U+IVWUfB/Dnzjg6KDjXnbp48QW3wiQKRURDaFaYc82CosVMLYIQYVAwFy3EgpIWDgha4cJgWmR/nFVFC3GVBEEQBcEgzEKQdkIxGC6Ke8957pz7HO+5dyZ1TD+fmDnnOb/zPOeZy1nc783n3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhhJNz585V1bdemTm7Y2DP1Us3T+w8NTE6H0KtdbyW1yeeeuaFNw5MPD8cO0zuz7b1erchs67zWWN1x8Fmv86f10IIQ8kAg/l292Bp1OLu4fKAlfZfXNh25NbeXTPHxg9dOLp5qvyn0zS80hNYKfl9dW3xXhpr/R5Izmi3C7dereMWzfqnN9w9+SMAgCUZbbQ27bej+Vvcdvt4Wk/aY0l7OmnHdwjTxcZyZOOu7jbPLWl9heY5lkWFNd3mWU/q+evfbjeSekjbnVFjCfPsPDWPNMPd5jmV1FdqngAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD3k6c/+eJ6VX3rlZmzOwb2XL1088TOUxOj8yHUW8drWbn2xMLcwqa3dj/63e4vP/6zPn5yMO8Xt6sKJ4ff4s5jIyG8Xqhci8P+vj6ERmeh1QwflQtvtnaejQUAAAAeJJtavwfa7SwODnW0a600WWv9F2Vhcf/FhW1Hbu3dNXNs/NCFo5unlj9eo8t4Y7cdr92uL/7UCsE4xt90vMV6PPVwaZxq6Yhpnn959MPtVf1L+b9enf/jKyf/AwAA8G/I/+k41Xrl//nPX91X1b+U/7d0XLKU/+OMY/4fCMvL/wAAAHA/u9v5f6w0TrVe+f/r9/edrupfyv+j/eX/VcVpx4M/xgkfHAlhtNfUAQAAgC7i/3df/Ggh5vXsk4M0r7+49fpQ1Xil/D/WX/6vHBQAAAC4p34488jfVfVS/m/0l//X3NVZAwAAAEvxv/cmD1TVS/l/sr/8vzbf5isfsk7fx3+FcHokhOHmzlRWuBKmn2wXAAAAgDsk5vSXvt18tOq8Uv6fqn7+f3zSQVz/3/H8v9L6/0Ihe+rf4x4MAAAAwMOovJ4/Ph4/++aCbt+/3+/6/09//nVD1fVL+f94f/l/sLi9k9//BwAAAMvwX/v+v1dK41Tr9fz/t9/dsLT8P91f/o/bdcU/73J8fd4ZCWFjcyd/muBn8XIHk8LsUKHQ0kh6HIg98sLsmkKhZSrpsX0khP83d44nhQ2xMJ0UbqzPC+eTwk+xkN8P7cJXSeFyvNPOrM+nmxa+iYV8gcVsXEGxrr0kIunxR7cezcJte8y1Lw4AAPBQieE5z7JDnc2QRtnZWq8T1vY6YaDXCYO9TliVnJCe2O14mOwsxON//TL+XKhQyv/n+8v/8aVYnW26rf8Pcf1//r2G7fX/k7FQTwqzsdBInxjQiNfIwu4H8Rr1Rt7jxsZ2AQAAAB5o8XOBwRWeBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAPe/ceY8dVHw787PPurte7G4KUhyJiXob8JK/XdhysX0A4qSIQSMlaRP0HhayxN6njDTZ+FBxZqmNQUYoQLrgiCn3YElGdSiCrtOURSiyqBKFaNII2fxji0gJClaAoxXWJgurq3pkzO/fM3ocfa3vD5yN577n3e86ZOefeO54zM/cMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8drj2azd/pl38Td/+wudu7X3Xi9/89cH1n75/6kchTDde78nCPe84+4OzN3zkrg1fv+uLT5yZuOexwbxcHg/L6n968ycfj7X+ZHkIX+kJoT8NrBrNAgP589FY302jIVwT5gNFidmRrES64PDscAhHwnygqOprwyGMlgL3fu9bz3yqnjg8HMKbQwi1dBkv1rJlDKeBlYNZYCQN7OjPAv9zLlMEvtqbBeCixS9D8aE/Pt2cYWLhci0+fwOXbMWurLR5fTEx0TrfL+5Y5JUqGUxfmL6ot61SHYui8vU44du2BL5tlX4+5G0r70jleyjn5kO10Lt19oHNe+f2xFd6w+RkX6uaFul9PvXS/i3nk14yn8O4AhOX5HP40OHbXhj8wN2nn/jN0/vP1D5/08WuZqvuXWy1kH/mlsz7GG20PVkCX7/KXtIKO10hhDMnTu5vF6+M/yfaj//jxzk+9jbljrW+MpaNzeMrozHxy7FsbA4AAABLxlI4ajq44l9+3K6+yvh/RXfn/+Mp/3wwn7X2RAgbG4mPjYdwfeP1LPBUXNwHx0N4fSM13Ry4IwmcCOGGRuKWoqqkxFAssSIJ/GwsD2xMAs/FwHQSeDIGDiWBj8fA8SSwJQZOJIE7YyBsa27H/xvL29F1YDgGZrJOPB6vQvjVWFxa0lc/KKoCAAC4RPLR4UDz09K1DhebIQ4vjw93yhCvwG6ZoZbUkI5gi2FVyxr6O9XQ26mGot0H2je/UnNPp5orl2H0NGf471PX7QhtVMb/U+3H/7UFVqSncv4/TG1qPMTcvXlkrsgwM92UAQAAALgIv/famc3t4pXx/8burv+Px0T6SpnDyXgYYvt4CFPNgaza26uB7Kz3sjwAAAAAS0FxPr44F74tf8wu0U7H09X80+eZP57437hg/h3f/een261vZfw/3d31/yPNj9lKPBfX4rPjIQyVAt+Oa1kPNKyIgR+9szmQt/+52AGfjFXlFyYUVX0ylpiJgakkcKRVieeLEtc3B/I3q1j4x4p2bMtLlAIAAABw2cXDAfG8fLz+f83f/uGz7cpVxv8z53f9f2McXLm8f25ZCKv7Q+hLfxhwciSbGDAGRnvyxN+PZHX1pVUdHAnh9nrD0qr+PZ//vz+dY/D7w1lVMXD9G469tLKe+MJwCKvLgRfef3R9PbE3CRQL/93hEG6utzZd+N8NZQsfSBf++FAIrysFiqq2DIVQX9hgWtU/1PL7GKRVHa+FcG0pUFT1tloI+wIAS1X8v3Rr+cXd+x7ZvnlubnbXIibiQfzh8MC2udnJLTvmttZarNPWZJ2b5jF6tNqmbm9988M4R9F9x8a7SRc/FJwqLys/kF+5cjB/HneGBhrtXDvQ9HRd2uS3vrG6iFDalWrV5N5FbvJIuZL5N7FSf8w/GJaFob27Z3dNfnTznj271mR/u82+NvsbzzNlfbUm7auRhdati49Hy+myEhfaVyvLlaze8/DO1bv3PbJq28ObH5x9cPZDG6bWrd1w29T6t62uN2oq+9uhpSsXqjlp6bmjXTbrErb0xv5SJZdjoyEhIbHUEoMD95xqt/mpjP93th//x61O3PDn8zO0Ov8/EU/zZ6/Pn+afiYEj3Z7/n2h1Nr+4MGBFEjgQAwec5gcAAODVIR6OjEcz40HpA2958R3tylXG/we6+/3/JZr/v5i6/j2tpvm/JZaYajX/fzrNfzH//4FW8/+n0/wX8/8fuQLz/+8tAkmX/Mr8/wAAwKvB5Zv/v+P0/ukNAioZOk7vn94goJKh4zT+3d4g4Lzn//+bn69ZH9qojP8PdTf+N3E/AAAAXD2uu/Pm77aLV8b/R7ob/1/++f9Cq+v/V7QKTLeaGND8fwAAACxRreb/+977dr6zXbnK+P94d+P/eNlFb1PuWOsrY9mcdiGd0+6XY8VPBgAAAGBp6A2TkwNd5m2aGPWOC1/mqTgVaJt02aFPHDu/3/+f6G783/S7jIcO3/bC4AfuPv3KE795ev+Z2udvmj//DwAAACyebo9LAAAAAAAAAAAAAAAAV96T1355wXkBosrv/8Omxuutfv8f7/vXdNPEs/lkgAfizPqfHjfNHwAAACyux+54+fH478HP/NF/tstbGf9PdDf+j/cXyO+Dl91670S8/9/HxkNo3FpvIgs8FRf3wfEQXt9ITccS2Q313hNLTGWBp+KEibfEEjPTzVUNxcDxJPCzsTxwIgk8FwP5UYpj8caAfzwWwvpGalNziZ2xxEQSuCcGViSByRiYSgLLY2BjEvj58jwwnQT+MQbymw8WffXl5XlfAQAAnI98nDXQ/DSk47zj/Z0y9HTK0HERI50y9HbKUGuRIT7/67gOA+X5+PMM8aWBtNbhpJZKhngzvAtvejFd3/PNOdOClUX3xYITzTljhp3/dOtnQxuV8f+K7sb/F3j//0dPf+d/G4mLuP9/ejf/jTGwIgnsjIGNSWBmUx44cl1zwP3/AQAAuLq1uv//2Ov+6lC7cpXx/1R34/94IOK1TbljrZ3v/58/v/e9X9rXWOWTYyG8sRzYfnD7NfXEk2MhvKUceOa+Wxqj9oNpiW+cvvOn9cT9aeDdq15ztp54exKYiZ10QxqIR1XOLk8CsXu/nwZifxxPA4N54LHlWTt60r76j9Gsr3rSvjo1ml1e0ZP21VdGs2X0pA08nASKBn44DcQG3p0HetO1+tKybK1iYDQW/YtlxUUfAABcneJe4EB4YNvc7FT6E94b+5sfo6Zblj9arbany8X/MN6a/L5j492k+9J90VpR1UCo1ZuwprK7Ws7S02jlpamlQ9e9tkWTO93tvbdFudT5dt1g6xYNZy2a3LJjbutAx4av65xlbX/HLGsqg51ylt5Gl3ZRSxfr0kWLuuybLlY5Pu8Nk5N9Sa7/H4MToUmnT0S39+sr3+e/1aegnOfoJ/7t5Xb1Vcb/G7sb/8f2LAulj/PHY60/WR7CV3rmj0YUgVWjWSA2dzQOj28aDeGaUj8UJWZHshKDyYLDs8PZCHUwreprw9kxhvj83u9965lP1ROHh0N4c+m9KpbxYi1bxnAaWDmYBUbSwI7+LBCv/CgCX+3NAnDRio1C/EDlP3UpTCxcrsXn79VyT9C0eZVroBbIt9A2d7HU0hfya6oK5/e2VapjUVS+Hid825bity34tpV3pPI9lHPzoVro3Tr7wOa9c3viK+U92YpFep/Le6ndpC/B5/DAha9tZ7V0BaaSzcfUwuUW/hz2xOoeOnzbC4MfuPv0E795ev+Z2udv6no1WogDhWf/6zXXlLt3sdVC/plbctuT6YvZngy9WrYnS+5tm/DfQAjh0J8Pf7hdvDL+n+5u/N+fPDa8HDtz93gIby117snY/b8znm0HS4FsK3ltNZBdcv/jsZZbTgAAALjUisMdxfGCbflj9oPwdJxczT99nvnj8YqNC+bvdr33P/v7T7WLV8b/M+3H/0PJajr/7/w/i8T5/wVd7Yeih9IXDlzUoehKdSwK5/8XdLV/25z/X5Dz/87/L8T5/w4u7fn/V8325Gp/2yp7STvtdIUQzt048Hi7eGX8v7O78f9v2fz/6Wz+xfz/6aT9xfz/M63m/9/Zav7/A+b/BwAAFlWLiebTcV5lcv5KhnRy/kqGniTD+d9ioOM0+ub/T+f/P/hnt+8JbVTG/we6G//Hj8Noeemd5/8vpvm/ovP/T2xqUWLjpubVLQKHYmCnOwYAAABwBcUDBPGi925nmAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGBx3f3y2c3t4m/69hc+d2vvu1785q8Prv/0/VM/CmFb4/WeLNzzjrM/OHvDR+7a8PW7vvjEmYl7Hqvl5Qbyx5uacsdaXxkL4UjpldGY+OVY/cl84N73fmlffz1xciyEN5YD2w9uv6aeeHIshLeUA8/cd8t19cTBtMQ3Tt/503ri/jTw7lWvOVtPvD0P9KSr+6fLs9XtSVf3U8tDGC8FitV9aHlzVcUy3pUHetNl/OVotowYGI1FHx/NlhEDc7HEtqEQVveH0JdW9Z1aVlVfWtXXa1lVfWlVf1AL4fYQQn9a1b8OZlX1py1/fjCrKgauf8Oxl1bWE0cHQ1hdDrzw/qPr64ldSaBY+PsGQ7i5/pFJF/7lgWzhA+nC/2QghNeVAkVVMwMh1Bc2mFZ1oj+rajCt6ov9IVxbChRV3dofwr7AlRI3JFvLL+7e98j2zXNzs7sWMTGYL2s4PLBtbnZyy465rbVknVrpKaXPPXrhbf/hS/u3NBL3HRvvJl2s11R5XZ6frrxYft6fPx1otHPtQNPTdUulySPlSubfxEr9Mf9gWBaG9u6e3TX50c179uxak/3tNvva7G9fHs36as1S6auV5UpW73l45+rd+x5Zte3hzQ/OPjj7oQ1T69ZuuG1q/dtW1xs1lf29FC09evlbemN/qZLLsdGQkJBYaonepq3b1NW+Ha/s6M+v6ECoNTbQlWFFOUtPo5WXotF3XEBrc+fb6MqQpNKiNZWBQyXL2s5Z1lXGDPNZhrMsjX3ByuCwXFNvo0vj894wOdnXqh8mmp+Wu/cXF9G9p2LXdZkGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/o8dOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHjgUAAAAAhPlbh9GzAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcCkAAP//AtvxeQ==") open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000001140)='./bus\x00', 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000010c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r2, 0xc0109428, &(0x7f0000000000)={0x1}) ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0x208e24b) write$sndseq(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1c) ftruncate(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x28011, r1, 0x0) copy_file_range(r1, &(0x7f0000000000), r0, 0x0, 0x80000000, 0x0) [ 1626.868109][T28154] loop4: detected capacity change from 0 to 2048 [ 1626.939186][T28154] /dev/loop4: Can't open blockdev 10:33:39 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) lseek(r0, 0x6, 0x0) [ 1627.048492][T28166] FAULT_INJECTION: forcing a failure. [ 1627.048492][T28166] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1627.099710][T28167] FAULT_INJECTION: forcing a failure. [ 1627.099710][T28167] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1627.172637][T28166] CPU: 1 PID: 28166 Comm: syz-executor.1 Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 1627.182799][T28166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1627.192983][T28166] Call Trace: [ 1627.196299][T28166] [ 1627.199266][T28166] dump_stack_lvl+0x1e7/0x2d0 [ 1627.204104][T28166] ? nf_tcp_handle_invalid+0x650/0x650 [ 1627.209624][T28166] ? panic+0x850/0x850 [ 1627.213744][T28166] ? __lock_acquire+0x1345/0x1fd0 [ 1627.218824][T28166] should_fail_ex+0x3aa/0x4e0 [ 1627.223571][T28166] prepare_alloc_pages+0x1d9/0x5b0 [ 1627.228751][T28166] __alloc_pages+0x165/0x680 [ 1627.233395][T28166] ? zone_statistics+0x170/0x170 [ 1627.238395][T28166] ? policy_nodemask+0x1ec/0x720 [ 1627.243395][T28166] ? mark_lock+0x9a/0x350 [ 1627.247779][T28166] alloc_pages_mpol+0x3de/0x640 [ 1627.252683][T28166] ? mempolicy_in_oom_domain+0x130/0x130 [ 1627.258380][T28166] vma_alloc_folio+0xf3/0x3f0 [ 1627.263115][T28166] ? page_zone+0xd0/0xd0 [ 1627.267385][T28166] ? __lock_acquire+0x1345/0x1fd0 [ 1627.272441][T28166] handle_mm_fault+0x238a/0x6680 [ 1627.277418][T28166] ? handle_mm_fault+0x11d/0x6680 [ 1627.282490][T28166] ? numa_migrate_prep+0x260/0x260 [ 1627.287657][T28166] ? mtree_range_walk+0x6a0/0x7e0 [ 1627.292705][T28166] ? lock_vma_under_rcu+0x187/0x6f0 [ 1627.297924][T28166] ? __lock_acquire+0x1fd0/0x1fd0 [ 1627.302967][T28166] ? lock_vma_under_rcu+0x2f6/0x6f0 [ 1627.308195][T28166] ? lock_vma_under_rcu+0x5df/0x6f0 [ 1627.313416][T28166] ? lock_vma_under_rcu+0x187/0x6f0 [ 1627.318644][T28166] ? exc_page_fault+0x110/0x870 [ 1627.323519][T28166] exc_page_fault+0x456/0x870 [ 1627.328225][T28166] asm_exc_page_fault+0x26/0x30 [ 1627.333095][T28166] RIP: 0033:0x7f2d46228793 [ 1627.337529][T28166] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 1627.357192][T28166] RSP: 002b:00007f2d46fa8520 EFLAGS: 00010202 [ 1627.363279][T28166] RAX: 0000000000004000 RBX: 00007f2d46fa85c0 RCX: 00007f2d3c600000 [ 1627.371279][T28166] RDX: 00007f2d46fa8760 RSI: 000000000000000d RDI: 00007f2d46fa8660 [ 1627.379280][T28166] RBP: 00000000000000a4 R08: 0000000000000008 R09: 00000000000000b6 [ 1627.387268][T28166] R10: 00000000000000c2 R11: 00007f2d46fa85c0 R12: 0000000000000001 [ 1627.395257][T28166] R13: 00007f2d462eb780 R14: 00000000000000f8 R15: 00007f2d46fa8660 [ 1627.403346][T28166] [ 1627.406578][T28167] CPU: 0 PID: 28167 Comm: syz-executor.0 Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 1627.416710][T28167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1627.426814][T28167] Call Trace: [ 1627.430219][T28167] [ 1627.433181][T28167] dump_stack_lvl+0x1e7/0x2d0 [ 1627.437920][T28167] ? nf_tcp_handle_invalid+0x650/0x650 [ 1627.443429][T28167] ? panic+0x850/0x850 [ 1627.447558][T28167] should_fail_ex+0x3aa/0x4e0 [ 1627.452332][T28167] prepare_alloc_pages+0x1d9/0x5b0 [ 1627.457508][T28167] __alloc_pages+0x165/0x680 [ 1627.462170][T28167] ? zone_statistics+0x170/0x170 [ 1627.467223][T28167] ? policy_nodemask+0x1ec/0x720 [ 1627.472208][T28167] alloc_pages_mpol+0x3de/0x640 [ 1627.477252][T28167] ? mempolicy_in_oom_domain+0x130/0x130 [ 1627.482973][T28167] vma_alloc_folio+0xf3/0x3f0 [ 1627.487897][T28167] ? page_zone+0xd0/0xd0 [ 1627.492219][T28167] ? do_raw_spin_unlock+0x13b/0x8b0 [ 1627.497481][T28167] do_wp_page+0x1234/0x4d40 [ 1627.502086][T28167] ? folio_put+0xc0/0xc0 [ 1627.506389][T28167] ? read_lock_is_recursive+0x20/0x20 [ 1627.512513][T28167] ? do_raw_spin_lock+0x14e/0x370 [ 1627.517599][T28167] ? __lock_acquire+0x1345/0x1fd0 [ 1627.522757][T28167] handle_mm_fault+0x1b1c/0x6680 [ 1627.527770][T28167] ? handle_mm_fault+0x11d/0x6680 [ 1627.533730][T28167] ? numa_migrate_prep+0x260/0x260 [ 1627.538910][T28167] ? mtree_range_walk+0x6a0/0x7e0 [ 1627.544086][T28167] ? lock_vma_under_rcu+0x187/0x6f0 [ 1627.549420][T28167] ? __lock_acquire+0x1fd0/0x1fd0 [ 1627.554489][T28167] ? lock_vma_under_rcu+0x2f6/0x6f0 [ 1627.559756][T28167] ? lock_vma_under_rcu+0x5df/0x6f0 [ 1627.565042][T28167] ? lock_vma_under_rcu+0x187/0x6f0 [ 1627.570415][T28167] ? exc_page_fault+0x110/0x870 [ 1627.575346][T28167] exc_page_fault+0x456/0x870 [ 1627.580099][T28167] asm_exc_page_fault+0x26/0x30 [ 1627.585083][T28167] RIP: 0033:0x7f6cf6428840 [ 1627.589540][T28167] Code: 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 1627.609283][T28167] RSP: 002b:00007f6cf71f0520 EFLAGS: 00010202 [ 1627.615398][T28167] RAX: 0000000000008808 RBX: 00007f6cf71f05c0 RCX: 0000000000000006 [ 1627.623409][T28167] RDX: 0000000000003fff RSI: 0000000000008000 RDI: 00007f6cf71f0660 [ 1627.631423][T28167] RBP: 0000000000000007 R08: 00007f6cec800000 R09: 0000000000000001 [ 1627.639522][T28167] R10: 00000000200006c2 R11: 00000000000005cc R12: 0000000000006001 [ 1627.647639][T28167] R13: 00007f6cf64eb780 R14: 000000000000001d R15: 00007f6cf71f0660 [ 1627.655680][T28167] 10:33:40 executing program 4: syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000800), 0x1, 0x755, &(0x7f0000000840)="$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") (fail_nth: 22) 10:33:40 executing program 3: syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="646973636172642c0008fd346f1fe0c7b977cf98b0dfc801ecf9a88e1ae482"], 0x1, 0x559d, &(0x7f0000005680)="$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") r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffb) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000140)={0x0, 0x9}) [ 1627.761294][T28167] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1627.841695][T28166] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1627.875727][T28174] FAULT_INJECTION: forcing a failure. [ 1627.875727][T28174] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1627.931135][T28166] loop1: detected capacity change from 0 to 128 [ 1627.967288][T28167] loop0: detected capacity change from 0 to 1024 [ 1627.983526][T28174] CPU: 1 PID: 28174 Comm: syz-executor.4 Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 1627.993687][T28174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1628.003782][T28174] Call Trace: [ 1628.007101][T28174] [ 1628.010155][T28174] dump_stack_lvl+0x1e7/0x2d0 [ 1628.014906][T28174] ? nf_tcp_handle_invalid+0x650/0x650 [ 1628.020441][T28174] ? panic+0x850/0x850 [ 1628.024561][T28174] ? __lock_acquire+0x1345/0x1fd0 [ 1628.029643][T28174] should_fail_ex+0x3aa/0x4e0 [ 1628.034374][T28174] prepare_alloc_pages+0x1d9/0x5b0 [ 1628.039542][T28174] __alloc_pages+0x165/0x680 [ 1628.044179][T28174] ? zone_statistics+0x170/0x170 [ 1628.049267][T28174] ? policy_nodemask+0x1ec/0x720 [ 1628.054263][T28174] ? mark_lock+0x9a/0x350 [ 1628.058641][T28174] alloc_pages_mpol+0x3de/0x640 [ 1628.063625][T28174] ? mempolicy_in_oom_domain+0x130/0x130 [ 1628.069307][T28174] vma_alloc_folio+0xf3/0x3f0 [ 1628.074043][T28174] ? page_zone+0xd0/0xd0 [ 1628.078387][T28174] ? __lock_acquire+0x1345/0x1fd0 [ 1628.083487][T28174] handle_mm_fault+0x238a/0x6680 [ 1628.088482][T28174] ? handle_mm_fault+0x11d/0x6680 [ 1628.093550][T28174] ? numa_migrate_prep+0x260/0x260 [ 1628.098699][T28174] ? mtree_range_walk+0x6a0/0x7e0 [ 1628.103789][T28174] ? lock_vma_under_rcu+0x187/0x6f0 [ 1628.109031][T28174] ? __lock_acquire+0x1fd0/0x1fd0 [ 1628.114080][T28174] ? lock_vma_under_rcu+0x2f6/0x6f0 [ 1628.119314][T28174] ? lock_vma_under_rcu+0x5df/0x6f0 [ 1628.124539][T28174] ? lock_vma_under_rcu+0x187/0x6f0 [ 1628.129769][T28174] ? exc_page_fault+0x110/0x870 [ 1628.134652][T28174] exc_page_fault+0x456/0x870 [ 1628.139351][T28174] asm_exc_page_fault+0x26/0x30 [ 1628.144216][T28174] RIP: 0033:0x7f3e7da28793 [ 1628.148645][T28174] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 1628.168358][T28174] RSP: 002b:00007f3e7e749520 EFLAGS: 00010202 [ 1628.174462][T28174] RAX: 0000000000010000 RBX: 00007f3e7e7495c0 RCX: 00007f3e73e00000 [ 1628.182534][T28174] RDX: 00007f3e7e749760 RSI: 0000000000000001 RDI: 00007f3e7e749660 [ 1628.190529][T28174] RBP: 000000000000004c R08: 0000000000000006 R09: 000000000000001e [ 1628.198526][T28174] R10: 0000000000000024 R11: 00007f3e7e7495c0 R12: 0000000000000001 [ 1628.206516][T28174] R13: 00007f3e7daeb780 R14: 0000000000000002 R15: 00007f3e7e749660 [ 1628.214520][T28174] [ 1628.331688][T28174] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1628.434129][T28174] loop4: detected capacity change from 0 to 2048 [ 1628.467592][T28174] /dev/loop4: Can't open blockdev 10:33:40 executing program 1: syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1fd, &(0x7f00000002c0)="$eJzs3D1rU18cB/Dzb/vvQ6QPk6CLB110uWh9BUFaEANKbUQdlFuaakhMSm7ARBw6O/k6iqObIL6Bvgu3IkinTkbapI9WXWyj5POBcL7hS+AcQsLvBnI3H759UVnJkpW0GYbGYxgKYS1shzCzk3r+661Du3k0HLYWrj1Nt97cf/T4Tr5QmFuIcT6/eHM2xjh16ePL1+8uf2qee/B+6sNY2Jh5svl19vPG+Y0Lm98Wn5ezWM5ird6MaVyq15vpUrUUl8tZJYnxXrWUZqVYrmWlxpF+pVpfXW3HtLY8mVttlLIsprV2rJTasVmPzUY7ps/Sci0mSRInc4HfKa4vLKT5fu+C09Vo5NPhEMLED01xvS8bAgD6yvw/yMz/g2Bn/s/1Pr9Hmf8BAAAAAAAAAAAAAOBfsN3pTHc6nem9de8xFkIYDyHsPe/3Pjkd3v/BduiPe+MhfFlrFVvF7trt528X5q7HXTMHr9pqtYrD+/2Nbh+P9v+HXK+fPbEfDVevdPud7tbdwrF+Iiyf/vEBAABgICRx34nX90nys76bDv0+cOz6fSRcHDmzYwAAAAC/kLVfVdJqtdQQBEHYD/3+ZgIAAP60g6G/3zsBAAAAAAAAAAAAAAAAAACAwXUWtxPr9xkBAAAAAAAAAAAAAAAAAAAAAADgb/E9AAD//xRs0OA=") (fail_nth: 22) 10:33:40 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000680), 0x1, 0x5ce, &(0x7f00000006c0)="$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") (fail_nth: 19) 10:33:41 executing program 4: syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000800), 0x1, 0x755, &(0x7f0000000840)="$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") (fail_nth: 23) [ 1628.851178][T28179] FAULT_INJECTION: forcing a failure. [ 1628.851178][T28179] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1628.859087][T28181] FAULT_INJECTION: forcing a failure. [ 1628.859087][T28181] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1628.905275][T28182] FAULT_INJECTION: forcing a failure. [ 1628.905275][T28182] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1628.927470][T28179] CPU: 1 PID: 28179 Comm: syz-executor.1 Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 1628.937616][T28179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1628.947724][T28179] Call Trace: [ 1628.951039][T28179] [ 1628.953998][T28179] dump_stack_lvl+0x1e7/0x2d0 [ 1628.958741][T28179] ? nf_tcp_handle_invalid+0x650/0x650 [ 1628.964268][T28179] ? panic+0x850/0x850 [ 1628.968408][T28179] should_fail_ex+0x3aa/0x4e0 [ 1628.973167][T28179] prepare_alloc_pages+0x1d9/0x5b0 [ 1628.978337][T28179] __alloc_pages+0x165/0x680 [ 1628.982982][T28179] ? zone_statistics+0x170/0x170 [ 1628.987983][T28179] ? policy_nodemask+0x1ec/0x720 [ 1628.992982][T28179] alloc_pages_mpol+0x3de/0x640 [ 1628.997907][T28179] ? mempolicy_in_oom_domain+0x130/0x130 [ 1629.003600][T28179] vma_alloc_folio+0xf3/0x3f0 [ 1629.008332][T28179] ? page_zone+0xd0/0xd0 [ 1629.012618][T28179] ? do_raw_spin_unlock+0x13b/0x8b0 [ 1629.017880][T28179] do_wp_page+0x1234/0x4d40 [ 1629.022528][T28179] ? folio_put+0xc0/0xc0 [ 1629.026819][T28179] ? read_lock_is_recursive+0x20/0x20 [ 1629.032302][T28179] ? do_raw_spin_lock+0x14e/0x370 [ 1629.037378][T28179] ? __lock_acquire+0x1345/0x1fd0 [ 1629.042465][T28179] handle_mm_fault+0x1b1c/0x6680 [ 1629.047473][T28179] ? handle_mm_fault+0x11d/0x6680 [ 1629.052557][T28179] ? numa_migrate_prep+0x260/0x260 [ 1629.057733][T28179] ? mtree_range_walk+0x6a0/0x7e0 [ 1629.062816][T28179] ? lock_vma_under_rcu+0x187/0x6f0 [ 1629.068055][T28179] ? __lock_acquire+0x1fd0/0x1fd0 [ 1629.073172][T28179] ? lock_vma_under_rcu+0x2f6/0x6f0 [ 1629.078446][T28179] ? lock_vma_under_rcu+0x5df/0x6f0 [ 1629.083700][T28179] ? lock_vma_under_rcu+0x187/0x6f0 [ 1629.088981][T28179] ? exc_page_fault+0x110/0x870 [ 1629.093908][T28179] exc_page_fault+0x456/0x870 [ 1629.098633][T28179] asm_exc_page_fault+0x26/0x30 [ 1629.103523][T28179] RIP: 0033:0x7f2d46228840 [ 1629.107968][T28179] Code: 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 1629.127711][T28179] RSP: 002b:00007f2d46fa8520 EFLAGS: 00010202 [ 1629.133819][T28179] RAX: 0000000000007400 RBX: 00007f2d46fa85c0 RCX: 0000000000000009 [ 1629.141835][T28179] RDX: 00000000000017f4 RSI: 0000000000000bf5 RDI: 00007f2d46fa8660 [ 1629.149847][T28179] RBP: 000000000000000a R08: 00007f2d3c600000 R09: 0000000000000073 [ 1629.157857][T28179] R10: 00000000200002c2 R11: 00000000000001fb R12: 0000000000000801 [ 1629.165860][T28179] R13: 00007f2d462eb780 R14: 0000000000000016 R15: 00007f2d46fa8660 [ 1629.173887][T28179] [ 1629.185558][T28181] CPU: 0 PID: 28181 Comm: syz-executor.4 Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 1629.195726][T28181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1629.205826][T28181] Call Trace: [ 1629.209135][T28181] [ 1629.212095][T28181] dump_stack_lvl+0x1e7/0x2d0 [ 1629.216827][T28181] ? nf_tcp_handle_invalid+0x650/0x650 [ 1629.222347][T28181] ? panic+0x850/0x850 [ 1629.226564][T28181] ? __lock_acquire+0x1345/0x1fd0 [ 1629.231641][T28181] should_fail_ex+0x3aa/0x4e0 [ 1629.236373][T28181] prepare_alloc_pages+0x1d9/0x5b0 [ 1629.241542][T28181] __alloc_pages+0x165/0x680 [ 1629.246176][T28181] ? zone_statistics+0x170/0x170 [ 1629.251164][T28181] ? policy_nodemask+0x1ec/0x720 [ 1629.256133][T28181] ? mark_lock+0x9a/0x350 [ 1629.260596][T28181] alloc_pages_mpol+0x3de/0x640 [ 1629.265496][T28181] ? mempolicy_in_oom_domain+0x130/0x130 [ 1629.271194][T28181] vma_alloc_folio+0xf3/0x3f0 [ 1629.275947][T28181] ? page_zone+0xd0/0xd0 [ 1629.280228][T28181] ? __lock_acquire+0x1345/0x1fd0 [ 1629.285303][T28181] handle_mm_fault+0x238a/0x6680 [ 1629.290305][T28181] ? handle_mm_fault+0x11d/0x6680 [ 1629.295396][T28181] ? numa_migrate_prep+0x260/0x260 [ 1629.300564][T28181] ? mtree_range_walk+0x6a0/0x7e0 [ 1629.305634][T28181] ? lock_vma_under_rcu+0x187/0x6f0 [ 1629.310872][T28181] ? __lock_acquire+0x1fd0/0x1fd0 [ 1629.315935][T28181] ? lock_vma_under_rcu+0x2f6/0x6f0 [ 1629.321201][T28181] ? lock_vma_under_rcu+0x5df/0x6f0 [ 1629.326462][T28181] ? lock_vma_under_rcu+0x187/0x6f0 [ 1629.331834][T28181] ? exc_page_fault+0x110/0x870 [ 1629.336747][T28181] exc_page_fault+0x456/0x870 [ 1629.341532][T28181] asm_exc_page_fault+0x26/0x30 [ 1629.346424][T28181] RIP: 0033:0x7f3e7da28793 [ 1629.350915][T28181] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 1629.370663][T28181] RSP: 002b:00007f3e7e749520 EFLAGS: 00010202 [ 1629.376779][T28181] RAX: 0000000000018000 RBX: 00007f3e7e7495c0 RCX: 00007f3e73e00000 [ 1629.384914][T28181] RDX: 00007f3e7e749760 RSI: 0000000000000001 RDI: 00007f3e7e749660 [ 1629.392936][T28181] RBP: 0000000000000007 R08: 0000000000000009 R09: 000000000000019d [ 1629.401224][T28181] R10: 00000000000001bc R11: 00007f3e7e7495c0 R12: 0000000000000001 [ 1629.409330][T28181] R13: 00007f3e7daeb780 R14: 000000000000000b R15: 00007f3e7e749660 [ 1629.417362][T28181] [ 1629.485143][T28179] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1629.495786][T28179] loop1: detected capacity change from 0 to 128 [ 1629.513034][T28182] CPU: 1 PID: 28182 Comm: syz-executor.0 Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 1629.523291][T28182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1629.533577][T28182] Call Trace: [ 1629.536898][T28182] [ 1629.539862][T28182] dump_stack_lvl+0x1e7/0x2d0 [ 1629.544615][T28182] ? nf_tcp_handle_invalid+0x650/0x650 [ 1629.550138][T28182] ? panic+0x850/0x850 [ 1629.554272][T28182] should_fail_ex+0x3aa/0x4e0 [ 1629.559007][T28182] prepare_alloc_pages+0x1d9/0x5b0 [ 1629.564174][T28182] __alloc_pages+0x165/0x680 [ 1629.568813][T28182] ? zone_statistics+0x170/0x170 [ 1629.573813][T28182] ? policy_nodemask+0x1ec/0x720 [ 1629.578796][T28182] alloc_pages_mpol+0x3de/0x640 [ 1629.583778][T28182] ? mempolicy_in_oom_domain+0x130/0x130 [ 1629.589462][T28182] vma_alloc_folio+0xf3/0x3f0 [ 1629.594182][T28182] ? page_zone+0xd0/0xd0 [ 1629.598462][T28182] ? do_raw_spin_unlock+0x13b/0x8b0 [ 1629.603809][T28182] do_wp_page+0x1234/0x4d40 [ 1629.605746][T28181] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1629.608354][T28182] ? folio_put+0xc0/0xc0 [ 1629.620122][T28182] ? read_lock_is_recursive+0x20/0x20 [ 1629.625629][T28182] ? do_raw_spin_lock+0x14e/0x370 [ 1629.630763][T28182] ? __lock_acquire+0x1345/0x1fd0 [ 1629.635847][T28182] handle_mm_fault+0x1b1c/0x6680 [ 1629.640880][T28182] ? handle_mm_fault+0x11d/0x6680 [ 1629.645969][T28182] ? numa_migrate_prep+0x260/0x260 [ 1629.651139][T28182] ? mtree_range_walk+0x6a0/0x7e0 [ 1629.656216][T28182] ? lock_vma_under_rcu+0x187/0x6f0 [ 1629.661465][T28182] ? __lock_acquire+0x1fd0/0x1fd0 [ 1629.666635][T28182] ? lock_vma_under_rcu+0x2f6/0x6f0 [ 1629.671910][T28182] ? lock_vma_under_rcu+0x5df/0x6f0 [ 1629.677165][T28182] ? lock_vma_under_rcu+0x187/0x6f0 [ 1629.682533][T28182] ? exc_page_fault+0x110/0x870 [ 1629.687454][T28182] exc_page_fault+0x456/0x870 [ 1629.692192][T28182] asm_exc_page_fault+0x26/0x30 [ 1629.697096][T28182] RIP: 0033:0x7f6cf6428793 [ 1629.701554][T28182] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 1629.718795][T28181] loop4: detected capacity change from 0 to 2048 [ 1629.721177][T28182] RSP: 002b:00007f6cf71f0520 EFLAGS: 00010202 [ 1629.721207][T28182] RAX: 000000000000a7f8 RBX: 00007f6cf71f05c0 RCX: 00007f6cec800000 [ 1629.721225][T28182] RDX: 00007f6cf71f0760 RSI: 000000000000003b RDI: 00007f6cf71f0660 [ 1629.749662][T28182] RBP: 0000000000000043 R08: 000000000000000b R09: 00000000000007bc [ 1629.757712][T28182] R10: 00000000000007dc R11: 00007f6cf71f05c0 R12: 0000000000000001 [ 1629.765724][T28182] R13: 00007f6cf64eb780 R14: 000000000000001f R15: 00007f6cf71f0660 [ 1629.773765][T28182] [ 1629.797160][T28181] /dev/loop4: Can't open blockdev 10:33:42 executing program 4: syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000800), 0x1, 0x755, &(0x7f0000000840)="$eJzs3U9oHNUfAPDvzO4m/ff7JRUPVkQLoi2oSdOKpOKhET0oHgR7ES8uzbbUbv/QRLRFMLnrTbypVPCqCJ70Unrw4s2bV08SDaI9eIzMZDZZm938MbsddT4fmOS9ebt5b7J8583Oe8wLoLIOZz/SiEMRsZBEjBX7k4ho5Kl6xKnV193+7Z0z2ZbEysorvyb5a7J8dL0ns794256I+P5WEvfUNtY7d+36hWa73bpa5CfnL16ZnLt2/YnzF5vnWudal6amT06fmD5+8qnpgR3rCx998urSxy8+uvj+GzNfv/bz70mcigNFWfdxDMrhOLz2P+lWj4jnBl1ZSWrF8aRd+5J6iQ1iR9Kuz/C+GItarH94Y3Hrq1IbBwAMxUq2AQAVk+j/AaBiOvcBOmN7wxgHA/6ZlmciH6jfGP/1OJX/3pPPA9h3O4nuYd2kM3dgl7K/8cu3X3yWbTGkcXigt4XFfOC/R/wnefyP57N4NsZ/LaI4P+zOnecQ8Q93z27i/+UB1C/+AQAAAAAAYHBuzkTEdK/xv3Rt/k/0GP8bjYhjA6h/6/G/dGkA1QA9LM9EPNNz/u/aE13Ga0Xuf/l8gEZy9ny7lcX+/yPiaDRGs/zUJnV899aPz/Yr657/l21Z/Z25gEU7luqjf33PbHO+uZtjBlYtL0bcX+8//yfr/5M+839f32YdX374+SP9yraOf2BYVm5EHOnZ/68/uS7Z/Pl8k/n1wGTnqmCjB5+/8Ue/+sU/lCfr//dtHv/jSffzOud2Xsen751+oF/Z373+H0lO508VHSn2vd2cn786FTGSvLRx//Gdtxn+izrx0ImXLP6PPrz5/b9e1/+NiLiyzTqnDnzzeL8y/T+UJ4v/2R31/ztPnHv3xIV+9W+v/38y79OPFnvc/4PNbTdAy24nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMUhoRByJJJ9bSaToxEbE/Iu6NfWn78tz8Y2cvv3lpNiuLGI9GevZ8u3UsIsZW80mWn8rT6/njd+RPRMTBiPhgdG+enzhzuT1b9sEDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQGF/n/X/Mz+Nlt06AGBo9pTdAADgrtP/A0D16P8BoHr0/wBQPfp/AKge/T8AAAAAAAAAAAAAAAAAAAAAAAAADNXBh27+kETEwtN78y0zUpQ1Sm0ZMGxp2Q0ASlMruwFAaeplNwAoje/4QLJFef8lQtxBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgOo4csv4/VJXV+6C6rP8P1WX9f6gu3/EB6/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDW5q5dv9Bst1tXJSQkJNYSZZ+ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4N/gzAAD//+MUMFo=") (fail_nth: 24) [ 1630.085688][T28182] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1630.251246][T28182] loop0: detected capacity change from 0 to 1024 [ 1630.268368][T28186] FAULT_INJECTION: forcing a failure. [ 1630.268368][T28186] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1630.312422][T28186] CPU: 0 PID: 28186 Comm: syz-executor.4 Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 1630.322572][T28186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1630.332669][T28186] Call Trace: [ 1630.335976][T28186] [ 1630.338935][T28186] dump_stack_lvl+0x1e7/0x2d0 [ 1630.343675][T28186] ? nf_tcp_handle_invalid+0x650/0x650 [ 1630.349199][T28186] ? panic+0x850/0x850 [ 1630.353340][T28186] should_fail_ex+0x3aa/0x4e0 [ 1630.358080][T28186] prepare_alloc_pages+0x1d9/0x5b0 [ 1630.363257][T28186] __alloc_pages+0x165/0x680 [ 1630.367900][T28186] ? zone_statistics+0x170/0x170 [ 1630.372896][T28186] ? policy_nodemask+0x1ec/0x720 [ 1630.377880][T28186] alloc_pages_mpol+0x3de/0x640 [ 1630.382767][T28186] ? mempolicy_in_oom_domain+0x130/0x130 [ 1630.388426][T28186] vma_alloc_folio+0xf3/0x3f0 [ 1630.393119][T28186] ? page_zone+0xd0/0xd0 [ 1630.397374][T28186] ? do_raw_spin_unlock+0x13b/0x8b0 [ 1630.402603][T28186] do_wp_page+0x1234/0x4d40 [ 1630.407138][T28186] ? folio_put+0xc0/0xc0 [ 1630.411398][T28186] ? read_lock_is_recursive+0x20/0x20 [ 1630.416794][T28186] ? do_raw_spin_lock+0x14e/0x370 [ 1630.421847][T28186] ? __lock_acquire+0x1345/0x1fd0 [ 1630.426904][T28186] handle_mm_fault+0x1b1c/0x6680 [ 1630.431958][T28186] ? handle_mm_fault+0x11d/0x6680 [ 1630.437006][T28186] ? numa_migrate_prep+0x260/0x260 [ 1630.442145][T28186] ? mtree_range_walk+0x6a0/0x7e0 [ 1630.447197][T28186] ? lock_vma_under_rcu+0x187/0x6f0 [ 1630.452417][T28186] ? __lock_acquire+0x1fd0/0x1fd0 [ 1630.457462][T28186] ? lock_vma_under_rcu+0x2f6/0x6f0 [ 1630.462690][T28186] ? lock_vma_under_rcu+0x5df/0x6f0 [ 1630.467921][T28186] ? lock_vma_under_rcu+0x187/0x6f0 [ 1630.473258][T28186] ? exc_page_fault+0x110/0x870 [ 1630.478133][T28186] exc_page_fault+0x456/0x870 [ 1630.482851][T28186] asm_exc_page_fault+0x26/0x30 [ 1630.487716][T28186] RIP: 0033:0x7f3e7da28840 [ 1630.492147][T28186] Code: 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 1630.511770][T28186] RSP: 002b:00007f3e7e749520 EFLAGS: 00010202 [ 1630.517866][T28186] RAX: 0000000000019005 RBX: 00007f3e7e7495c0 RCX: 0000000000000101 [ 1630.525918][T28186] RDX: 00000000000001ff RSI: 0000000000000800 RDI: 00007f3e7e749660 [ 1630.533898][T28186] RBP: 0000000000000102 R08: 00007f3e73e00000 R09: 0000000000000008 [ 1630.541879][T28186] R10: 0000000020000842 R11: 0000000000000753 R12: 0000000000000601 [ 1630.549862][T28186] R13: 00007f3e7daeb780 R14: 0000000000000015 R15: 00007f3e7e749660 [ 1630.557889][T28186] 10:33:43 executing program 5: openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x2681, 0x0) 10:33:43 executing program 1: syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1fd, &(0x7f00000002c0)="$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") (fail_nth: 23) 10:33:43 executing program 2: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x4840, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40087602, 0x0) [ 1630.835547][T28186] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1630.897951][T28189] FAULT_INJECTION: forcing a failure. [ 1630.897951][T28189] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1630.925772][T28191] EXT4-fs warning (device sda1): __ext4_ioctl:1259: Setting inode version is not supported with metadata_csum enabled. 10:33:43 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000680), 0x1, 0x5ce, &(0x7f00000006c0)="$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") (fail_nth: 20) 10:33:43 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x31ba015, 0x0, 0x0, 0x0, &(0x7f0000000300)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0xfea7) ioctl$FS_IOC_RESVSP(r1, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0xefff, 0xfa64}) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x80000001}) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0x0, 0xfa64}) [ 1631.019945][ T28] audit: type=1800 audit(1704796423.226:1135): pid=28191 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=1976 res=0 errno=0 [ 1631.095993][T28186] loop4: detected capacity change from 0 to 2048 [ 1631.117334][T28189] CPU: 1 PID: 28189 Comm: syz-executor.1 Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 1631.127486][T28189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1631.137592][T28189] Call Trace: [ 1631.140919][T28189] [ 1631.143894][T28189] dump_stack_lvl+0x1e7/0x2d0 [ 1631.148651][T28189] ? nf_tcp_handle_invalid+0x650/0x650 [ 1631.154183][T28189] ? panic+0x850/0x850 [ 1631.158327][T28189] should_fail_ex+0x3aa/0x4e0 [ 1631.163166][T28189] prepare_alloc_pages+0x1d9/0x5b0 [ 1631.168350][T28189] __alloc_pages+0x165/0x680 [ 1631.172993][T28189] ? zone_statistics+0x170/0x170 [ 1631.178011][T28189] ? policy_nodemask+0x1ec/0x720 [ 1631.183024][T28189] alloc_pages_mpol+0x3de/0x640 [ 1631.188758][T28189] ? mempolicy_in_oom_domain+0x130/0x130 [ 1631.194471][T28189] vma_alloc_folio+0xf3/0x3f0 [ 1631.199474][T28189] ? page_zone+0xd0/0xd0 [ 1631.203773][T28189] ? do_raw_spin_unlock+0x13b/0x8b0 [ 1631.209053][T28189] do_wp_page+0x1234/0x4d40 [ 1631.213633][T28189] ? folio_put+0xc0/0xc0 [ 1631.217940][T28189] ? read_lock_is_recursive+0x20/0x20 [ 1631.223459][T28189] ? do_raw_spin_lock+0x14e/0x370 [ 1631.228544][T28189] ? __lock_acquire+0x1345/0x1fd0 [ 1631.233616][T28189] handle_mm_fault+0x1b1c/0x6680 [ 1631.238615][T28189] ? handle_mm_fault+0x11d/0x6680 [ 1631.243714][T28189] ? numa_migrate_prep+0x260/0x260 [ 1631.248912][T28189] ? mtree_range_walk+0x6a0/0x7e0 [ 1631.253974][T28189] ? lock_vma_under_rcu+0x187/0x6f0 [ 1631.259198][T28189] ? __lock_acquire+0x1fd0/0x1fd0 [ 1631.264252][T28189] ? lock_vma_under_rcu+0x2f6/0x6f0 [ 1631.269498][T28189] ? lock_vma_under_rcu+0x5df/0x6f0 [ 1631.274733][T28189] ? lock_vma_under_rcu+0x187/0x6f0 [ 1631.279964][T28189] ? exc_page_fault+0x110/0x870 [ 1631.284922][T28189] exc_page_fault+0x456/0x870 [ 1631.289637][T28189] asm_exc_page_fault+0x26/0x30 [ 1631.294621][T28189] RIP: 0033:0x7f2d46228840 [ 1631.299086][T28189] Code: 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 1631.318757][T28189] RSP: 002b:00007f2d46fa8520 EFLAGS: 00010202 [ 1631.324847][T28189] RAX: 000000000000b400 RBX: 00007f2d46fa85c0 RCX: 0000000000000063 [ 1631.332830][T28189] RDX: 000000000003ac4e RSI: 0000000000004c4f RDI: 00007f2d46fa8660 [ 1631.340816][T28189] RBP: 0000000000000064 R08: 00007f2d3c600000 R09: 0000000000000073 [ 1631.348798][T28189] R10: 00000000200002c2 R11: 00000000000001fb R12: 0000000000004001 [ 1631.357474][T28189] R13: 00007f2d462eb780 R14: 000000000000001c R15: 00007f2d46fa8660 [ 1631.365793][T28189] 10:33:43 executing program 3: syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="646973636172642c0008fd346f1fe0c7b977cf98b0dfc801ecf9a88e1ae482"], 0x1, 0x559d, &(0x7f0000005680)="$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") r0 = open(&(0x7f0000000000)='./bus\x00', 0x4c37e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f0000000480)={{r2}, "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"}) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './bus'}, 0x9) [ 1631.464939][T28189] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF 10:33:43 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x31ba015, 0x0, 0x0, 0x0, &(0x7f0000000300)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0xfea7) ioctl$FS_IOC_RESVSP(r1, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0xefff, 0xfa64}) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x80000001}) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0x0, 0xfa64}) [ 1631.537473][T28197] FAULT_INJECTION: forcing a failure. [ 1631.537473][T28197] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1631.559131][T28186] /dev/loop4: Can't open blockdev [ 1631.620698][T28189] loop1: detected capacity change from 0 to 128 [ 1631.635780][T28197] CPU: 0 PID: 28197 Comm: syz-executor.0 Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 1631.646014][T28197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1631.656217][T28197] Call Trace: [ 1631.659541][T28197] [ 1631.662504][T28197] dump_stack_lvl+0x1e7/0x2d0 [ 1631.667250][T28197] ? nf_tcp_handle_invalid+0x650/0x650 [ 1631.672762][T28197] ? panic+0x850/0x850 [ 1631.676890][T28197] should_fail_ex+0x3aa/0x4e0 [ 1631.681622][T28197] prepare_alloc_pages+0x1d9/0x5b0 [ 1631.686891][T28197] __alloc_pages+0x165/0x680 [ 1631.691545][T28197] ? zone_statistics+0x170/0x170 [ 1631.696549][T28197] ? policy_nodemask+0x1ec/0x720 [ 1631.701545][T28197] alloc_pages_mpol+0x3de/0x640 [ 1631.706460][T28197] ? mempolicy_in_oom_domain+0x130/0x130 [ 1631.712249][T28197] vma_alloc_folio+0xf3/0x3f0 [ 1631.716976][T28197] ? page_zone+0xd0/0xd0 [ 1631.721268][T28197] ? do_raw_spin_unlock+0x13b/0x8b0 [ 1631.726539][T28197] do_wp_page+0x1234/0x4d40 [ 1631.731118][T28197] ? folio_put+0xc0/0xc0 [ 1631.735417][T28197] ? read_lock_is_recursive+0x20/0x20 [ 1631.740849][T28197] ? do_raw_spin_lock+0x14e/0x370 [ 1631.745939][T28197] ? __lock_acquire+0x1345/0x1fd0 [ 1631.751044][T28197] handle_mm_fault+0x1b1c/0x6680 [ 1631.756057][T28197] ? handle_mm_fault+0x11d/0x6680 [ 1631.761151][T28197] ? numa_migrate_prep+0x260/0x260 [ 1631.766422][T28197] ? mtree_range_walk+0x6a0/0x7e0 10:33:44 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) chdir(&(0x7f0000004340)='./file0\x00') write$FUSE_INIT(r0, &(0x7f00000066c0)={0x50, 0x0, r1, {0x7, 0x21}}, 0x50) read$FUSE(r0, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f00000063c0)={0x10, 0x0, r2}, 0x10) read$FUSE(r0, &(0x7f0000004380)={0x2020, 0x0, 0x0}, 0x2020) statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) write$FUSE_ENTRY(r0, &(0x7f0000004200)={0x90, 0x0, r3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000}}}, 0x90) read$FUSE(r0, &(0x7f0000006740)={0x2020, 0x0, 0x0}, 0x2020) statx(0xffffffffffffff9c, &(0x7f0000006400)='./file0\x00', 0x0, 0x0, 0x0) write$FUSE_ENTRY(r0, &(0x7f0000008780)={0x90, 0x0, r4, {0x1}}, 0x90) [ 1631.771542][T28197] ? lock_vma_under_rcu+0x187/0x6f0 [ 1631.776805][T28197] ? __lock_acquire+0x1fd0/0x1fd0 [ 1631.781881][T28197] ? lock_vma_under_rcu+0x2f6/0x6f0 [ 1631.787155][T28197] ? lock_vma_under_rcu+0x5df/0x6f0 [ 1631.792414][T28197] ? lock_vma_under_rcu+0x187/0x6f0 [ 1631.797686][T28197] ? exc_page_fault+0x110/0x870 [ 1631.802604][T28197] exc_page_fault+0x456/0x870 [ 1631.807353][T28197] asm_exc_page_fault+0x26/0x30 [ 1631.812260][T28197] RIP: 0033:0x7f6cf6428793 [ 1631.816725][T28197] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 1631.836401][T28197] RSP: 002b:00007f6cf71f0520 EFLAGS: 00010206 [ 1631.842547][T28197] RAX: 000000000000c7fb RBX: 00007f6cf71f05c0 RCX: 00007f6cec800000 [ 1631.850735][T28197] RDX: 00007f6cf71f0760 RSI: 0000000000000019 RDI: 00007f6cf71f0660 [ 1631.858753][T28197] RBP: 00000000000000d7 R08: 000000000000000b R09: 00000000000007d0 [ 1631.866872][T28197] R10: 00000000000007dc R11: 00007f6cf71f05c0 R12: 0000000000000001 [ 1631.874915][T28197] R13: 00007f6cf64eb780 R14: 0000000000000082 R15: 00007f6cf71f0660 [ 1631.883047][T28197] 10:33:44 executing program 4: syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000800), 0x1, 0x755, &(0x7f0000000840)="$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") (fail_nth: 25) [ 1631.975565][T28197] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF 10:33:44 executing program 1: syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1fd, &(0x7f00000002c0)="$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") (fail_nth: 24) 10:33:44 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x31ba015, 0x0, 0x0, 0x0, &(0x7f0000000300)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0xfea7) ioctl$FS_IOC_RESVSP(r1, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0xefff, 0xfa64}) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x80000001}) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0x0, 0xfa64}) [ 1632.143931][T28197] loop0: detected capacity change from 0 to 1024 [ 1632.180629][T28207] FAULT_INJECTION: forcing a failure. [ 1632.180629][T28207] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1632.235004][T28207] CPU: 1 PID: 28207 Comm: syz-executor.4 Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 1632.245173][T28207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1632.255282][T28207] Call Trace: [ 1632.258618][T28207] [ 1632.261593][T28207] dump_stack_lvl+0x1e7/0x2d0 [ 1632.266346][T28207] ? nf_tcp_handle_invalid+0x650/0x650 [ 1632.271844][T28207] ? panic+0x850/0x850 [ 1632.275962][T28207] should_fail_ex+0x3aa/0x4e0 [ 1632.280698][T28207] prepare_alloc_pages+0x1d9/0x5b0 [ 1632.285866][T28207] __alloc_pages+0x165/0x680 [ 1632.290534][T28207] ? zone_statistics+0x170/0x170 [ 1632.295528][T28207] ? policy_nodemask+0x1ec/0x720 [ 1632.300513][T28207] alloc_pages_mpol+0x3de/0x640 [ 1632.305417][T28207] ? mempolicy_in_oom_domain+0x130/0x130 [ 1632.311091][T28207] vma_alloc_folio+0xf3/0x3f0 [ 1632.315791][T28207] ? page_zone+0xd0/0xd0 [ 1632.320049][T28207] ? do_raw_spin_unlock+0x13b/0x8b0 [ 1632.325275][T28207] do_wp_page+0x1234/0x4d40 [ 1632.329811][T28207] ? folio_put+0xc0/0xc0 [ 1632.334090][T28207] ? read_lock_is_recursive+0x20/0x20 [ 1632.339525][T28207] ? do_raw_spin_lock+0x14e/0x370 [ 1632.344700][T28207] ? __lock_acquire+0x1345/0x1fd0 [ 1632.349782][T28207] handle_mm_fault+0x1b1c/0x6680 [ 1632.354860][T28207] ? handle_mm_fault+0x11d/0x6680 [ 1632.359977][T28207] ? numa_migrate_prep+0x260/0x260 [ 1632.365161][T28207] ? mtree_range_walk+0x6a0/0x7e0 [ 1632.370238][T28207] ? lock_vma_under_rcu+0x187/0x6f0 [ 1632.375476][T28207] ? __lock_acquire+0x1fd0/0x1fd0 [ 1632.380523][T28207] ? lock_vma_under_rcu+0x2f6/0x6f0 [ 1632.385756][T28207] ? lock_vma_under_rcu+0x5df/0x6f0 [ 1632.390975][T28207] ? lock_vma_under_rcu+0x187/0x6f0 [ 1632.396209][T28207] ? exc_page_fault+0x110/0x870 [ 1632.401079][T28207] exc_page_fault+0x456/0x870 [ 1632.405784][T28207] asm_exc_page_fault+0x26/0x30 [ 1632.410661][T28207] RIP: 0033:0x7f3e7da28840 [ 1632.415092][T28207] Code: 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 1632.434720][T28207] RSP: 002b:00007f3e7e749520 EFLAGS: 00010202 [ 1632.440838][T28207] RAX: 000000000001a005 RBX: 00007f3e7e7495c0 RCX: 0000000000000101 [ 1632.448849][T28207] RDX: 00000000000001ff RSI: 0000000000000800 RDI: 00007f3e7e749660 [ 1632.456855][T28207] RBP: 0000000000000102 R08: 00007f3e73e00000 R09: 0000000000000008 [ 1632.464873][T28207] R10: 0000000020000842 R11: 0000000000000753 R12: 0000000000000601 [ 1632.472892][T28207] R13: 00007f3e7daeb780 R14: 0000000000000015 R15: 00007f3e7e749660 [ 1632.480897][T28207] [ 1632.560864][T28211] FAULT_INJECTION: forcing a failure. [ 1632.560864][T28211] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1632.657869][T28211] CPU: 0 PID: 28211 Comm: syz-executor.1 Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 1632.668033][T28211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1632.678128][T28211] Call Trace: [ 1632.681442][T28211] [ 1632.684400][T28211] dump_stack_lvl+0x1e7/0x2d0 [ 1632.689148][T28211] ? nf_tcp_handle_invalid+0x650/0x650 [ 1632.694666][T28211] ? panic+0x850/0x850 [ 1632.698786][T28211] ? validate_chain+0x11c/0x5ab0 [ 1632.703785][T28211] should_fail_ex+0x3aa/0x4e0 [ 1632.708524][T28211] prepare_alloc_pages+0x1d9/0x5b0 [ 1632.713708][T28211] __alloc_pages+0x165/0x680 [ 1632.718362][T28211] ? zone_statistics+0x170/0x170 [ 1632.723362][T28211] ? policy_nodemask+0x1ec/0x720 [ 1632.728362][T28211] alloc_pages_mpol+0x3de/0x640 [ 1632.733272][T28211] ? mempolicy_in_oom_domain+0x130/0x130 [ 1632.738967][T28211] ? xas_load+0x11e/0x140 [ 1632.743366][T28211] ? mpol_shared_policy_lookup+0x148/0x1e0 [ 1632.749242][T28211] shmem_alloc_and_add_folio+0x24f/0xde0 10:33:45 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000680), 0x1, 0x5ce, &(0x7f00000006c0)="$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") (fail_nth: 21) [ 1632.754961][T28211] ? put_swap_device+0x250/0x250 [ 1632.759978][T28211] shmem_get_folio_gfp+0x7c3/0x1ee0 [ 1632.765253][T28211] ? shmem_get_folio+0xa0/0xa0 [ 1632.770089][T28211] ? print_irqtrace_events+0x220/0x220 [ 1632.775627][T28211] ? fault_in_readable+0x1a6/0x2b0 [ 1632.780824][T28211] shmem_write_begin+0x170/0x4c0 [ 1632.785836][T28211] ? shmem_writepage+0x18f0/0x18f0 [ 1632.791008][T28211] ? fault_in_iov_iter_readable+0x229/0x280 [ 1632.796964][T28211] generic_perform_write+0x31b/0x630 [ 1632.802321][T28211] ? ktime_get_coarse_real_ts64+0x10b/0x120 [ 1632.808303][T28211] ? generic_file_direct_write+0x3f0/0x3f0 [ 1632.814174][T28211] ? generic_write_checks_count+0x490/0x490 [ 1632.820119][T28211] ? rcu_read_lock_any_held+0xb7/0x160 [ 1632.825640][T28211] ? file_update_time+0x2a3/0x3e0 [ 1632.830718][T28211] shmem_file_write_iter+0xfc/0x120 [ 1632.835975][T28211] vfs_write+0x783/0xaf0 [ 1632.840282][T28211] ? kernel_write+0x330/0x330 [ 1632.845017][T28211] ? __fget_files+0x3f4/0x470 [ 1632.849773][T28211] ? __fdget_pos+0x1a1/0x320 [ 1632.854421][T28211] ksys_write+0x1a0/0x2c0 [ 1632.858805][T28211] ? __ia32_sys_read+0x90/0x90 [ 1632.863622][T28211] ? exc_page_fault+0x587/0x870 [ 1632.868538][T28211] ? do_syscall_64+0xb4/0x230 [ 1632.873283][T28211] do_syscall_64+0xf5/0x230 [ 1632.877857][T28211] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1632.883835][T28211] RIP: 0033:0x7f2d4627ba6f [ 1632.888296][T28211] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 1632.908157][T28211] RSP: 002b:00007f2d46fa8e70 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1632.916627][T28211] RAX: ffffffffffffffda RBX: 0000000000010000 RCX: 00007f2d4627ba6f [ 1632.924641][T28211] RDX: 0000000000010000 RSI: 00007f2d3c600000 RDI: 0000000000000004 [ 1632.932653][T28211] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000001f7 [ 1632.940786][T28211] R10: 00000000000001ce R11: 0000000000000293 R12: 0000000000000004 [ 1632.948792][T28211] R13: 00007f2d46fa8f3c R14: 00007f2d46fa8f40 R15: 00007f2d3c600000 [ 1632.956818][T28211] 10:33:45 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x31ba015, 0x0, 0x0, 0x0, &(0x7f0000000300)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0xfea7) ioctl$FS_IOC_RESVSP(r1, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0xefff, 0xfa64}) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x80000001}) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0x0, 0xfa64}) [ 1633.045719][T28207] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1633.063231][T28214] FAULT_INJECTION: forcing a failure. [ 1633.063231][T28214] name fail_page_alloc, interval 1, probability 0, space 0, times 0 10:33:45 executing program 1: syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1fd, &(0x7f00000002c0)="$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") (fail_nth: 25) [ 1633.184323][T28207] loop4: detected capacity change from 0 to 2048 [ 1633.222355][T28214] CPU: 0 PID: 28214 Comm: syz-executor.0 Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 1633.232511][T28214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1633.242619][T28214] Call Trace: [ 1633.245946][T28214] [ 1633.248922][T28214] dump_stack_lvl+0x1e7/0x2d0 [ 1633.253726][T28214] ? nf_tcp_handle_invalid+0x650/0x650 [ 1633.259269][T28214] ? panic+0x850/0x850 [ 1633.263411][T28214] should_fail_ex+0x3aa/0x4e0 [ 1633.268162][T28214] prepare_alloc_pages+0x1d9/0x5b0 [ 1633.273378][T28214] __alloc_pages+0x165/0x680 [ 1633.278060][T28214] ? zone_statistics+0x170/0x170 [ 1633.283092][T28214] ? policy_nodemask+0x1ec/0x720 [ 1633.288103][T28214] alloc_pages_mpol+0x3de/0x640 [ 1633.293023][T28214] ? mempolicy_in_oom_domain+0x130/0x130 [ 1633.298725][T28214] vma_alloc_folio+0xf3/0x3f0 [ 1633.303480][T28214] ? page_zone+0xd0/0xd0 [ 1633.307790][T28214] ? do_raw_spin_unlock+0x13b/0x8b0 [ 1633.313067][T28214] do_wp_page+0x1234/0x4d40 [ 1633.317669][T28214] ? folio_put+0xc0/0xc0 [ 1633.321980][T28214] ? read_lock_is_recursive+0x20/0x20 [ 1633.327457][T28214] ? do_raw_spin_lock+0x14e/0x370 10:33:45 executing program 5: openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000008380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x1110040}}, 0x50) open(&(0x7f00000001c0)='./file0\x00', 0x3, 0x0) read$FUSE(r0, &(0x7f000000e3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000000d00)={0x78, 0x0, r2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x78) [ 1633.332585][T28214] ? __lock_acquire+0x1345/0x1fd0 [ 1633.337685][T28214] handle_mm_fault+0x1b1c/0x6680 [ 1633.342714][T28214] ? handle_mm_fault+0x11d/0x6680 [ 1633.347818][T28214] ? numa_migrate_prep+0x260/0x260 [ 1633.353024][T28214] ? mtree_range_walk+0x6a0/0x7e0 [ 1633.358129][T28214] ? lock_vma_under_rcu+0x187/0x6f0 [ 1633.363392][T28214] ? __lock_acquire+0x1fd0/0x1fd0 [ 1633.368473][T28214] ? lock_vma_under_rcu+0x2f6/0x6f0 [ 1633.373764][T28214] ? lock_vma_under_rcu+0x5df/0x6f0 [ 1633.379025][T28214] ? lock_vma_under_rcu+0x187/0x6f0 [ 1633.384310][T28214] ? exc_page_fault+0x110/0x870 [ 1633.389227][T28214] exc_page_fault+0x456/0x870 [ 1633.393974][T28214] asm_exc_page_fault+0x26/0x30 [ 1633.398884][T28214] RIP: 0033:0x7f6cf6428793 [ 1633.403358][T28214] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 1633.423030][T28214] RSP: 002b:00007f6cf71f0520 EFLAGS: 00010202 [ 1633.429162][T28214] RAX: 0000000000018808 RBX: 00007f6cf71f05c0 RCX: 00007f6cec800000 [ 1633.437187][T28214] RDX: 00007f6cf71f0760 RSI: 0000000000000001 RDI: 00007f6cf71f0660 [ 1633.445214][T28214] RBP: 0000000000000084 R08: 0000000000000006 R09: 0000000000000024 [ 1633.448536][T28218] FAULT_INJECTION: forcing a failure. [ 1633.448536][T28218] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1633.453205][T28214] R10: 0000000000000028 R11: 00007f6cf71f05c0 R12: 0000000000000001 [ 1633.453227][T28214] R13: 00007f6cf64eb780 R14: 0000000000000001 R15: 00007f6cf71f0660 [ 1633.453263][T28214] [ 1633.477584][T28207] /dev/loop4: Can't open blockdev [ 1633.483019][T28218] CPU: 1 PID: 28218 Comm: syz-executor.1 Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 1633.501245][T28218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1633.511355][T28218] Call Trace: [ 1633.514673][T28218] [ 1633.517642][T28218] dump_stack_lvl+0x1e7/0x2d0 [ 1633.522407][T28218] ? nf_tcp_handle_invalid+0x650/0x650 [ 1633.527944][T28218] ? panic+0x850/0x850 [ 1633.532086][T28218] should_fail_ex+0x3aa/0x4e0 [ 1633.536830][T28218] copy_page_from_iter_atomic+0x27b/0x1e80 [ 1633.542708][T28218] ? shmem_get_folio+0xa0/0xa0 [ 1633.547564][T28218] ? print_irqtrace_events+0x220/0x220 [ 1633.553083][T28218] ? iov_iter_zero+0x1b60/0x1b60 [ 1633.558189][T28218] ? shmem_write_begin+0x23f/0x4c0 [ 1633.563346][T28218] ? shmem_writepage+0x18f0/0x18f0 [ 1633.568508][T28218] ? fault_in_iov_iter_readable+0x229/0x280 [ 1633.574444][T28218] generic_perform_write+0x392/0x630 [ 1633.579794][T28218] ? generic_file_direct_write+0x3f0/0x3f0 [ 1633.585650][T28218] ? generic_write_checks_count+0x490/0x490 [ 1633.591571][T28218] ? rcu_read_lock_any_held+0xb7/0x160 [ 1633.597078][T28218] ? file_update_time+0x2a3/0x3e0 [ 1633.602160][T28218] shmem_file_write_iter+0xfc/0x120 [ 1633.607413][T28218] vfs_write+0x783/0xaf0 [ 1633.611705][T28218] ? kernel_write+0x330/0x330 [ 1633.616422][T28218] ? __fget_files+0x3f4/0x470 [ 1633.621160][T28218] ? __fdget_pos+0x1a1/0x320 [ 1633.625876][T28218] ksys_write+0x1a0/0x2c0 [ 1633.630253][T28218] ? __ia32_sys_read+0x90/0x90 [ 1633.635040][T28218] ? exc_page_fault+0x587/0x870 [ 1633.639938][T28218] ? do_syscall_64+0xb4/0x230 [ 1633.644673][T28218] do_syscall_64+0xf5/0x230 [ 1633.649222][T28218] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1633.655145][T28218] RIP: 0033:0x7f2d4627ba6f [ 1633.659600][T28218] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 1633.679270][T28218] RSP: 002b:00007f2d46fa8e70 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1633.687715][T28218] RAX: ffffffffffffffda RBX: 0000000000010000 RCX: 00007f2d4627ba6f [ 1633.695705][T28218] RDX: 0000000000010000 RSI: 00007f2d3c600000 RDI: 0000000000000004 [ 1633.703694][T28218] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000001f7 [ 1633.711680][T28218] R10: 00000000000001ce R11: 0000000000000293 R12: 0000000000000004 [ 1633.719666][T28218] R13: 00007f2d46fa8f3c R14: 00007f2d46fa8f40 R15: 00007f2d3c600000 [ 1633.727680][T28218] [ 1633.795628][T28214] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1633.813942][T28214] loop0: detected capacity change from 0 to 1024 10:33:46 executing program 2: syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x4800, &(0x7f0000000040)=ANY=[], 0x1, 0xda6, &(0x7f0000000800)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') read$FUSE(r0, &(0x7f0000004c00)={0x2020}, 0x2020) 10:33:46 executing program 4: syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000800), 0x1, 0x755, &(0x7f0000000840)="$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") (fail_nth: 26) [ 1634.227623][T28218] loop1: detected capacity change from 0 to 128 [ 1634.258114][T28223] FAULT_INJECTION: forcing a failure. [ 1634.258114][T28223] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1634.361278][T28223] CPU: 0 PID: 28223 Comm: syz-executor.4 Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 1634.371430][T28223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1634.381540][T28223] Call Trace: [ 1634.384857][T28223] [ 1634.387828][T28223] dump_stack_lvl+0x1e7/0x2d0 [ 1634.392604][T28223] ? nf_tcp_handle_invalid+0x650/0x650 [ 1634.398131][T28223] ? panic+0x850/0x850 [ 1634.402326][T28223] should_fail_ex+0x3aa/0x4e0 [ 1634.407092][T28223] prepare_alloc_pages+0x1d9/0x5b0 [ 1634.412297][T28223] __alloc_pages+0x165/0x680 [ 1634.416956][T28223] ? zone_statistics+0x170/0x170 [ 1634.421967][T28223] ? policy_nodemask+0x1ec/0x720 [ 1634.426979][T28223] alloc_pages_mpol+0x3de/0x640 [ 1634.431906][T28223] ? mempolicy_in_oom_domain+0x130/0x130 [ 1634.437624][T28223] vma_alloc_folio+0xf3/0x3f0 [ 1634.442374][T28223] ? page_zone+0xd0/0xd0 [ 1634.446682][T28223] ? do_raw_spin_unlock+0x13b/0x8b0 [ 1634.451956][T28223] do_wp_page+0x1234/0x4d40 [ 1634.456547][T28223] ? folio_put+0xc0/0xc0 [ 1634.460855][T28223] ? read_lock_is_recursive+0x20/0x20 [ 1634.466299][T28223] ? do_raw_spin_lock+0x14e/0x370 [ 1634.471405][T28223] ? __lock_acquire+0x1345/0x1fd0 [ 1634.476501][T28223] handle_mm_fault+0x1b1c/0x6680 [ 1634.481514][T28223] ? handle_mm_fault+0x11d/0x6680 [ 1634.486604][T28223] ? numa_migrate_prep+0x260/0x260 [ 1634.491781][T28223] ? mtree_range_walk+0x6a0/0x7e0 [ 1634.496881][T28223] ? lock_vma_under_rcu+0x187/0x6f0 [ 1634.502147][T28223] ? __lock_acquire+0x1fd0/0x1fd0 [ 1634.507223][T28223] ? lock_vma_under_rcu+0x2f6/0x6f0 [ 1634.512489][T28223] ? lock_vma_under_rcu+0x5df/0x6f0 [ 1634.517744][T28223] ? lock_vma_under_rcu+0x187/0x6f0 [ 1634.523022][T28223] ? exc_page_fault+0x110/0x870 [ 1634.528205][T28223] exc_page_fault+0x456/0x870 [ 1634.532948][T28223] asm_exc_page_fault+0x26/0x30 [ 1634.538117][T28223] RIP: 0033:0x7f3e7da28840 [ 1634.542578][T28223] Code: 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 1634.562238][T28223] RSP: 002b:00007f3e7e749520 EFLAGS: 00010202 [ 1634.568355][T28223] RAX: 000000000001b005 RBX: 00007f3e7e7495c0 RCX: 0000000000000101 [ 1634.576367][T28223] RDX: 00000000000001ff RSI: 0000000000000800 RDI: 00007f3e7e749660 [ 1634.584390][T28223] RBP: 0000000000000102 R08: 00007f3e73e00000 R09: 0000000000000008 [ 1634.592404][T28223] R10: 0000000020000842 R11: 0000000000000753 R12: 0000000000000601 [ 1634.600431][T28223] R13: 00007f3e7daeb780 R14: 0000000000000015 R15: 00007f3e7e749660 [ 1634.608996][T28223] [ 1634.740309][T28223] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1634.921071][T28223] loop4: detected capacity change from 0 to 2048 [ 1634.952610][T28223] /dev/loop4: Can't open blockdev 10:33:48 executing program 3: openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000008380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x1110040}}, 0x50) open(&(0x7f00000001c0)='./file0\x00', 0x3, 0x0) read$FUSE(r0, &(0x7f000000e3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000000d00)={0x78, 0x0, r2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x78) 10:33:48 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000680), 0x1, 0x5ce, &(0x7f00000006c0)="$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") (fail_nth: 22) 10:33:48 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x80000012) chdir(&(0x7f0000000100)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000001240)='./bus\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 10:33:48 executing program 1: syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1fd, &(0x7f00000002c0)="$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") (fail_nth: 26) 10:33:48 executing program 4: syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000800), 0x1, 0x755, &(0x7f0000000840)="$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") (fail_nth: 27) 10:33:48 executing program 5: openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000008380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x1110040}}, 0x50) open(&(0x7f00000001c0)='./file0\x00', 0x3, 0x0) read$FUSE(r0, &(0x7f000000e3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000000d00)={0x78, 0x0, r2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x78) [ 1635.767413][T28231] FAULT_INJECTION: forcing a failure. [ 1635.767413][T28231] name fail_page_alloc, interval 1, probability 0, space 0, times 0 10:33:48 executing program 2: openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000008380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x1110040}}, 0x50) open(&(0x7f00000001c0)='./file0\x00', 0x3, 0x0) read$FUSE(r0, &(0x7f000000e3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000000d00)={0x78, 0x0, r2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x78) [ 1635.858734][T28235] FAULT_INJECTION: forcing a failure. [ 1635.858734][T28235] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1635.895468][T28231] CPU: 0 PID: 28231 Comm: syz-executor.4 Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 1635.905613][T28231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1635.915713][T28231] Call Trace: [ 1635.918552][T28239] FAULT_INJECTION: forcing a failure. [ 1635.918552][T28239] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1635.919009][T28231] [ 1635.935211][T28231] dump_stack_lvl+0x1e7/0x2d0 [ 1635.939962][T28231] ? nf_tcp_handle_invalid+0x650/0x650 [ 1635.945494][T28231] ? panic+0x850/0x850 [ 1635.949628][T28231] ? __lock_acquire+0x1345/0x1fd0 [ 1635.954713][T28231] should_fail_ex+0x3aa/0x4e0 [ 1635.959461][T28231] prepare_alloc_pages+0x1d9/0x5b0 [ 1635.964645][T28231] __alloc_pages+0x165/0x680 [ 1635.969299][T28231] ? zone_statistics+0x170/0x170 [ 1635.974310][T28231] ? policy_nodemask+0x1ec/0x720 [ 1635.979308][T28231] ? mark_lock+0x9a/0x350 [ 1635.983706][T28231] alloc_pages_mpol+0x3de/0x640 [ 1635.988623][T28231] ? mempolicy_in_oom_domain+0x130/0x130 [ 1635.994320][T28231] vma_alloc_folio+0xf3/0x3f0 [ 1635.999048][T28231] ? page_zone+0xd0/0xd0 [ 1636.003336][T28231] ? __lock_acquire+0x1345/0x1fd0 [ 1636.008420][T28231] handle_mm_fault+0x238a/0x6680 [ 1636.013400][T28231] ? handle_mm_fault+0x11d/0x6680 [ 1636.018457][T28231] ? numa_migrate_prep+0x260/0x260 [ 1636.023625][T28231] ? mtree_range_walk+0x6a0/0x7e0 [ 1636.028728][T28231] ? lock_vma_under_rcu+0x187/0x6f0 [ 1636.034007][T28231] ? __lock_acquire+0x1fd0/0x1fd0 [ 1636.039068][T28231] ? lock_vma_under_rcu+0x2f6/0x6f0 [ 1636.044319][T28231] ? lock_vma_under_rcu+0x5df/0x6f0 [ 1636.049538][T28231] ? lock_vma_under_rcu+0x187/0x6f0 [ 1636.054768][T28231] ? exc_page_fault+0x110/0x870 [ 1636.059645][T28231] exc_page_fault+0x456/0x870 [ 1636.064353][T28231] asm_exc_page_fault+0x26/0x30 [ 1636.069235][T28231] RIP: 0033:0x7f3e7da28793 [ 1636.073666][T28231] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 1636.093317][T28231] RSP: 002b:00007f3e7e749520 EFLAGS: 00010206 [ 1636.099413][T28231] RAX: 0000000000020000 RBX: 00007f3e7e7495c0 RCX: 00007f3e73e00000 [ 1636.107454][T28231] RDX: 00007f3e7e749760 RSI: 0000000000000001 RDI: 00007f3e7e749660 [ 1636.115445][T28231] RBP: 000000000000005d R08: 0000000000000009 R09: 000000000000019f [ 1636.123460][T28231] R10: 00000000000001bc R11: 00007f3e7e7495c0 R12: 0000000000000001 [ 1636.131481][T28231] R13: 00007f3e7daeb780 R14: 0000000000000011 R15: 00007f3e7e749660 [ 1636.139490][T28231] [ 1636.161445][T28235] CPU: 1 PID: 28235 Comm: syz-executor.1 Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 1636.171596][T28235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1636.181706][T28235] Call Trace: [ 1636.185023][T28235] [ 1636.187995][T28235] dump_stack_lvl+0x1e7/0x2d0 [ 1636.192732][T28235] ? nf_tcp_handle_invalid+0x650/0x650 [ 1636.198244][T28235] ? panic+0x850/0x850 [ 1636.202375][T28235] should_fail_ex+0x3aa/0x4e0 [ 1636.207111][T28235] prepare_alloc_pages+0x1d9/0x5b0 [ 1636.212288][T28235] __alloc_pages+0x165/0x680 [ 1636.216946][T28235] ? zone_statistics+0x170/0x170 [ 1636.221946][T28235] ? policy_nodemask+0x1ec/0x720 [ 1636.226945][T28235] alloc_pages_mpol+0x3de/0x640 [ 1636.231860][T28235] ? mempolicy_in_oom_domain+0x130/0x130 [ 1636.237562][T28235] ? xas_load+0x11e/0x140 [ 1636.241951][T28235] ? mpol_shared_policy_lookup+0x148/0x1e0 [ 1636.247825][T28235] shmem_alloc_and_add_folio+0x24f/0xde0 [ 1636.253513][T28235] ? put_swap_device+0x250/0x250 [ 1636.258496][T28235] ? __lock_acquire+0x1345/0x1fd0 [ 1636.263574][T28235] shmem_get_folio_gfp+0x7c3/0x1ee0 [ 1636.268843][T28235] ? shmem_get_folio+0xa0/0xa0 [ 1636.273651][T28235] ? print_unlock_imbalance_bug+0x2c0/0x2c0 [ 1636.279600][T28235] ? fault_in_readable+0x1a6/0x2b0 [ 1636.284838][T28235] shmem_write_begin+0x170/0x4c0 [ 1636.289843][T28235] ? shmem_writepage+0x18f0/0x18f0 [ 1636.295025][T28235] ? fault_in_iov_iter_readable+0x229/0x280 [ 1636.300994][T28235] generic_perform_write+0x31b/0x630 [ 1636.306371][T28235] ? generic_file_direct_write+0x3f0/0x3f0 [ 1636.312251][T28235] ? preempt_count_add+0x93/0x190 [ 1636.317331][T28235] ? mnt_put_write_access_file+0xbb/0x100 [ 1636.323114][T28235] ? file_update_time+0x3a6/0x3e0 [ 1636.328209][T28235] shmem_file_write_iter+0xfc/0x120 [ 1636.333464][T28235] vfs_write+0x783/0xaf0 [ 1636.337784][T28235] ? kernel_write+0x330/0x330 [ 1636.342544][T28235] ? __fget_files+0x3f4/0x470 [ 1636.347295][T28235] ? __fdget_pos+0x1a1/0x320 [ 1636.351948][T28235] ksys_write+0x1a0/0x2c0 [ 1636.356382][T28235] ? __ia32_sys_read+0x90/0x90 [ 1636.361214][T28235] ? exc_page_fault+0x587/0x870 [ 1636.366127][T28235] ? do_syscall_64+0xb4/0x230 [ 1636.370869][T28235] do_syscall_64+0xf5/0x230 [ 1636.375423][T28235] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1636.381360][T28235] RIP: 0033:0x7f2d4627ba6f [ 1636.385815][T28235] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 1636.405471][T28235] RSP: 002b:00007f2d46fa8e70 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1636.413937][T28235] RAX: ffffffffffffffda RBX: 0000000000010000 RCX: 00007f2d4627ba6f [ 1636.421952][T28235] RDX: 0000000000010000 RSI: 00007f2d3c600000 RDI: 0000000000000004 [ 1636.429965][T28235] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000001f7 [ 1636.437984][T28235] R10: 00000000000001ce R11: 0000000000000293 R12: 0000000000000004 [ 1636.445987][T28235] R13: 00007f2d46fa8f3c R14: 00007f2d46fa8f40 R15: 00007f2d3c600000 [ 1636.454007][T28235] [ 1636.556613][T28231] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1636.575525][T28239] CPU: 0 PID: 28239 Comm: syz-executor.0 Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 1636.585679][T28239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1636.595783][T28239] Call Trace: [ 1636.599103][T28239] [ 1636.602069][T28239] dump_stack_lvl+0x1e7/0x2d0 [ 1636.606813][T28239] ? nf_tcp_handle_invalid+0x650/0x650 [ 1636.612341][T28239] ? panic+0x850/0x850 [ 1636.616473][T28239] should_fail_ex+0x3aa/0x4e0 [ 1636.621200][T28239] prepare_alloc_pages+0x1d9/0x5b0 [ 1636.626367][T28239] __alloc_pages+0x165/0x680 [ 1636.631046][T28239] ? zone_statistics+0x170/0x170 [ 1636.636228][T28239] ? policy_nodemask+0x1ec/0x720 [ 1636.641225][T28239] alloc_pages_mpol+0x3de/0x640 [ 1636.646136][T28239] ? mempolicy_in_oom_domain+0x130/0x130 [ 1636.651835][T28239] vma_alloc_folio+0xf3/0x3f0 [ 1636.656580][T28239] ? page_zone+0xd0/0xd0 [ 1636.660883][T28239] ? do_raw_spin_unlock+0x13b/0x8b0 [ 1636.666158][T28239] do_wp_page+0x1234/0x4d40 [ 1636.670739][T28239] ? folio_put+0xc0/0xc0 [ 1636.675033][T28239] ? read_lock_is_recursive+0x20/0x20 [ 1636.680467][T28239] ? do_raw_spin_lock+0x14e/0x370 [ 1636.685565][T28239] ? __lock_acquire+0x1345/0x1fd0 [ 1636.690657][T28239] handle_mm_fault+0x1b1c/0x6680 [ 1636.695670][T28239] ? handle_mm_fault+0x11d/0x6680 [ 1636.700765][T28239] ? numa_migrate_prep+0x260/0x260 [ 1636.705968][T28239] ? mtree_range_walk+0x6a0/0x7e0 [ 1636.711061][T28239] ? lock_vma_under_rcu+0x187/0x6f0 [ 1636.716319][T28239] ? __lock_acquire+0x1fd0/0x1fd0 [ 1636.721407][T28239] ? lock_vma_under_rcu+0x2f6/0x6f0 [ 1636.726674][T28239] ? lock_vma_under_rcu+0x5df/0x6f0 [ 1636.731925][T28239] ? lock_vma_under_rcu+0x187/0x6f0 [ 1636.737183][T28239] ? exc_page_fault+0x110/0x870 [ 1636.742097][T28239] exc_page_fault+0x456/0x870 [ 1636.743861][T28231] loop4: detected capacity change from 0 to 2048 [ 1636.746827][T28239] asm_exc_page_fault+0x26/0x30 [ 1636.746866][T28239] RIP: 0033:0x7f6cf6428793 [ 1636.746888][T28239] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 1636.782201][T28239] RSP: 002b:00007f6cf71f0520 EFLAGS: 00010206 [ 1636.788315][T28239] RAX: 00000000000197f8 RBX: 00007f6cf71f05c0 RCX: 00007f6cec800000 [ 1636.796334][T28239] RDX: 00007f6cf71f0760 RSI: 0000000000000000 RDI: 00007f6cf71f0660 [ 1636.804339][T28239] RBP: 0000000000000063 R08: 000000000000000a R09: 00000000000003ba [ 1636.812332][T28239] R10: 00000000000003d4 R11: 00007f6cf71f05c0 R12: 0000000000000001 [ 1636.820316][T28239] R13: 00007f6cf64eb780 R14: 000000000000000f R15: 00007f6cf71f0660 [ 1636.828316][T28239] 10:33:48 executing program 2: openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000008380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x1110040}}, 0x50) open(&(0x7f00000001c0)='./file0\x00', 0x3, 0x0) read$FUSE(r0, &(0x7f000000e3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000000d00)={0x78, 0x0, r2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x78) 10:33:49 executing program 3: openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000008380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x1110040}}, 0x50) open(&(0x7f00000001c0)='./file0\x00', 0x3, 0x0) read$FUSE(r0, &(0x7f000000e3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000000d00)={0x78, 0x0, r2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x78) [ 1636.987803][T28239] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF 10:33:49 executing program 1: syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1fd, &(0x7f00000002c0)="$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") (fail_nth: 27) [ 1637.059305][T28231] /dev/loop4: Can't open blockdev 10:33:49 executing program 5: openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000008380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x1110040}}, 0x50) open(&(0x7f00000001c0)='./file0\x00', 0x3, 0x0) read$FUSE(r0, &(0x7f000000e3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000000d00)={0x78, 0x0, r2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x78) [ 1637.175613][T28250] loop1: detected capacity change from 0 to 128 [ 1637.247575][T28239] loop0: detected capacity change from 0 to 1024 10:33:49 executing program 1: syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1fd, &(0x7f00000002c0)="$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") (fail_nth: 28) 10:33:49 executing program 4: syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000800), 0x1, 0x755, &(0x7f0000000840)="$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") (fail_nth: 28) [ 1637.501183][T28256] FAULT_INJECTION: forcing a failure. [ 1637.501183][T28256] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1637.517029][T28256] CPU: 0 PID: 28256 Comm: syz-executor.1 Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 1637.527168][T28256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1637.537284][T28256] Call Trace: [ 1637.540609][T28256] [ 1637.543585][T28256] dump_stack_lvl+0x1e7/0x2d0 [ 1637.548336][T28256] ? nf_tcp_handle_invalid+0x650/0x650 [ 1637.553863][T28256] ? panic+0x850/0x850 [ 1637.558009][T28256] should_fail_ex+0x3aa/0x4e0 [ 1637.562760][T28256] copy_page_from_iter_atomic+0x27b/0x1e80 [ 1637.568653][T28256] ? shmem_get_folio+0xa0/0xa0 [ 1637.573480][T28256] ? print_unlock_imbalance_bug+0x2c0/0x2c0 [ 1637.579437][T28256] ? iov_iter_zero+0x1b60/0x1b60 [ 1637.584436][T28256] ? shmem_write_begin+0x23f/0x4c0 [ 1637.589601][T28256] ? shmem_writepage+0x18f0/0x18f0 [ 1637.594763][T28256] ? fault_in_iov_iter_readable+0x229/0x280 10:33:49 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000680), 0x1, 0x5ce, &(0x7f00000006c0)="$eJzs3U9rHOcdB/DvrNay5IKjJHbitoGKlP6horZW67ZJwVQtpugQSsCvQNTrWHitBGlTlByKXfxCUoLeQC+55OCDz+1LEPRYKPRURC8uMzu72tiyLCWSdh1/Pvaz8zz7zPzmN7+dGWlXAgV4aa0spPkwRVYW3tsqxzvb7e7OdvvuoJ/kbJJG9T/NsvvPZOpBMp9+y3eTFHW44ln7ufbF5818ef9Gf9SoW7X+1EHbHc69umW5TnL5GOM9+sbxiuERlkGvD4JPgsfP958T3P3UCcbmCIpnvBZzybkkM/V9YHDiNk43u+M3MRcgAAAAnKBXdrObrZwfdx4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwIqn//n9Rt8agP59i8Pf/p+vnUvdfaA/HnQAAAAAAAAAAHIMf7GY3Wzk/GD8uqp/5v10NLlSP38nH2UwnG7mcrayml1420koyNxJoemu119toHWLLpX23XDqd4wUAAAAAAACAb6m/ZGXv5/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAJimSqv6jahUF/Lo1mkpkk0+V695J/DPovsofjTgAAAABOwSu72c1Wzg/Gj4vqPf8b1fv+mXyc9fSyll666eRm9VlA/11/Y2e73d3Zbt8t29Nxf/vvI6VRRUz/s4f993ypWmM2t7JWPXM5f8yH6eZmGtWWpUuDfPbP636ZU/Gb2iEzu1kvi6T4fv1pyGSYqypyZliRxTq3shqvHlyJI746T+6plcbwk58LJ1Dzc/WyrPnMRNd8aeTse+PgSiQ/uvbf9dvd9Tu3b20uTM4hfU1PVqI9Uok3X6pKLFaVuDgcr+T3uZGFzOf9bGQtf8pqeulkPter3mp9PpePcwdXavkro/efl8l0/br076JHy+ntatvzWcsf8mFuppNfZilX805a+VX17+rIK3zxEFd942hX/Q9/WndeS4rZ/nJClHV9daSuo/fcuWpu9Jm9Kr12/PfG5vfqzlRSNIc5TYInK9EaqcTrB1fir4/Lx83u+p2N26sfHXJ/P6mX5VeJsxP1VWK6Pnub1eirZ0c59/q+c61q7sJwrvHU3MXh3POu1On6e7inIy1Vc2/uO9eu5i6NzO33/RYAE+/cz85Nz/5r9u+zn80+mL09+97M786+c/at6Zx5dObXzcWpHzfeKv6Wz/Lnvff/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA17f5yad3VrvdzoaOjo7OsDPuOxOn4Urv7kdXNj/59Odrd1c/6HzQWW8v/mLp3XZr6d2rV26tdTuL/cdxp8kJ2bvox50JAAAAAAAAAAAAR3Eav0467mMEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgxbGykObDFGktXl4sxzvb7W7ZBv29NRtJmuXyf8nUg2Q+/Za5kXDFs/Zz7YvPm/ny/o29WI3B+lMHbXc49+qW5TrJ5WOM9+gbxyuGR1gGvT4IDuP2/wAAAP//wg8dzA==") (fail_nth: 23) [ 1637.600722][T28256] generic_perform_write+0x392/0x630 [ 1637.606095][T28256] ? generic_file_direct_write+0x3f0/0x3f0 [ 1637.611969][T28256] ? preempt_count_add+0x93/0x190 [ 1637.617063][T28256] ? mnt_put_write_access_file+0xbb/0x100 [ 1637.622839][T28256] ? file_update_time+0x3a6/0x3e0 [ 1637.627926][T28256] shmem_file_write_iter+0xfc/0x120 [ 1637.633180][T28256] vfs_write+0x783/0xaf0 [ 1637.637483][T28256] ? kernel_write+0x330/0x330 [ 1637.642209][T28256] ? __fget_files+0x3f4/0x470 [ 1637.646953][T28256] ? __fdget_pos+0x1a1/0x320 [ 1637.651601][T28256] ksys_write+0x1a0/0x2c0 [ 1637.656003][T28256] ? __ia32_sys_read+0x90/0x90 [ 1637.660827][T28256] ? exc_page_fault+0x587/0x870 [ 1637.665745][T28256] ? do_syscall_64+0xb4/0x230 [ 1637.670490][T28256] do_syscall_64+0xf5/0x230 [ 1637.675112][T28256] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1637.681075][T28256] RIP: 0033:0x7f2d4627ba6f [ 1637.685543][T28256] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 1637.705207][T28256] RSP: 002b:00007f2d46fa8e70 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1637.713690][T28256] RAX: ffffffffffffffda RBX: 0000000000010000 RCX: 00007f2d4627ba6f [ 1637.721752][T28256] RDX: 0000000000010000 RSI: 00007f2d3c600000 RDI: 0000000000000004 [ 1637.729787][T28256] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000001f7 [ 1637.737896][T28256] R10: 00000000000001ce R11: 0000000000000293 R12: 0000000000000004 [ 1637.745908][T28256] R13: 00007f2d46fa8f3c R14: 00007f2d46fa8f40 R15: 00007f2d3c600000 [ 1637.753951][T28256] 10:33:50 executing program 2: openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000008380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x1110040}}, 0x50) open(&(0x7f00000001c0)='./file0\x00', 0x3, 0x0) read$FUSE(r0, &(0x7f000000e3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000000d00)={0x78, 0x0, r2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x78) [ 1637.887768][T28262] FAULT_INJECTION: forcing a failure. [ 1637.887768][T28262] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1637.905584][T28262] CPU: 0 PID: 28262 Comm: syz-executor.0 Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 1637.912496][T28257] loop4: detected capacity change from 0 to 2048 [ 1637.915704][T28262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1637.915724][T28262] Call Trace: [ 1637.915736][T28262] [ 1637.915753][T28262] dump_stack_lvl+0x1e7/0x2d0 [ 1637.915801][T28262] ? nf_tcp_handle_invalid+0x650/0x650 [ 1637.948685][T28262] ? panic+0x850/0x850 [ 1637.952823][T28262] should_fail_ex+0x3aa/0x4e0 [ 1637.957564][T28262] prepare_alloc_pages+0x1d9/0x5b0 [ 1637.962738][T28262] __alloc_pages+0x165/0x680 [ 1637.964692][T28257] /dev/loop4: Can't open blockdev [ 1637.967359][T28262] ? zone_statistics+0x170/0x170 [ 1637.967393][T28262] ? validate_chain+0x11c/0x5ab0 [ 1637.967430][T28262] ? policy_nodemask+0x1ec/0x720 [ 1637.967463][T28262] alloc_pages_mpol+0x3de/0x640 [ 1637.967494][T28262] ? mempolicy_in_oom_domain+0x130/0x130 [ 1637.967531][T28262] vma_alloc_folio+0xf3/0x3f0 [ 1637.967559][T28262] ? page_zone+0xd0/0xd0 [ 1637.967582][T28262] ? do_raw_spin_unlock+0x13b/0x8b0 [ 1637.967622][T28262] do_wp_page+0x1234/0x4d40 [ 1637.967670][T28262] ? folio_put+0xc0/0xc0 [ 1637.967705][T28262] ? read_lock_is_recursive+0x20/0x20 [ 1637.967736][T28262] ? do_raw_spin_lock+0x14e/0x370 [ 1637.967775][T28262] ? __lock_acquire+0x1345/0x1fd0 [ 1637.967811][T28262] handle_mm_fault+0x1b1c/0x6680 [ 1637.976276][T28256] loop1: detected capacity change from 0 to 128 [ 1637.977776][T28262] ? handle_mm_fault+0x11d/0x6680 [ 1638.052807][T28262] ? numa_migrate_prep+0x260/0x260 [ 1638.058044][T28262] ? mtree_range_walk+0x6a0/0x7e0 [ 1638.063091][T28262] ? lock_vma_under_rcu+0x187/0x6f0 [ 1638.068309][T28262] ? __lock_acquire+0x1fd0/0x1fd0 [ 1638.073349][T28262] ? lock_vma_under_rcu+0x2f6/0x6f0 [ 1638.078580][T28262] ? lock_vma_under_rcu+0x5df/0x6f0 [ 1638.083799][T28262] ? lock_vma_under_rcu+0x187/0x6f0 [ 1638.089029][T28262] ? exc_page_fault+0x110/0x870 [ 1638.093899][T28262] exc_page_fault+0x456/0x870 [ 1638.098775][T28262] asm_exc_page_fault+0x26/0x30 [ 1638.103644][T28262] RIP: 0033:0x7f6cf6428840 [ 1638.108073][T28262] Code: 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 1638.127716][T28262] RSP: 002b:00007f6cf71f0520 EFLAGS: 00010202 [ 1638.133818][T28262] RAX: 000000000001a043 RBX: 00007f6cf71f05c0 RCX: 000000000000000f [ 1638.141807][T28262] RDX: 0000000000000689 RSI: 000000000000010a RDI: 00007f6cf71f0660 [ 1638.149792][T28262] RBP: 0000000000000010 R08: 00007f6cec800000 R09: 0000000000000010 [ 1638.157774][T28262] R10: 00000000200006c2 R11: 00000000000005cc R12: 0000000000000101 [ 1638.165761][T28262] R13: 00007f6cf64eb780 R14: 0000000000000010 R15: 00007f6cf71f0660 [ 1638.173789][T28262] [ 1638.218500][T28262] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1638.327156][T28262] loop0: detected capacity change from 0 to 1024 10:33:50 executing program 3: openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000008380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x1110040}}, 0x50) open(&(0x7f00000001c0)='./file0\x00', 0x3, 0x0) read$FUSE(r0, &(0x7f000000e3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000000d00)={0x78, 0x0, r2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x78) 10:33:50 executing program 1: syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1fd, &(0x7f00000002c0)="$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") (fail_nth: 29) 10:33:50 executing program 4: syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000800), 0x1, 0x755, &(0x7f0000000840)="$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") (fail_nth: 29) 10:33:50 executing program 5: openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000008380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x1110040}}, 0x50) open(&(0x7f00000001c0)='./file0\x00', 0x3, 0x0) read$FUSE(r0, &(0x7f000000e3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000000d00)={0x78, 0x0, r2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x78) [ 1638.661326][T28269] FAULT_INJECTION: forcing a failure. [ 1638.661326][T28269] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1638.794872][T28274] FAULT_INJECTION: forcing a failure. [ 1638.794872][T28274] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1638.808281][T28274] CPU: 1 PID: 28274 Comm: syz-executor.1 Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 1638.818406][T28274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1638.828507][T28274] Call Trace: [ 1638.831832][T28274] [ 1638.834799][T28274] dump_stack_lvl+0x1e7/0x2d0 [ 1638.839547][T28274] ? nf_tcp_handle_invalid+0x650/0x650 [ 1638.845072][T28274] ? panic+0x850/0x850 [ 1638.849195][T28274] should_fail_ex+0x3aa/0x4e0 [ 1638.853927][T28274] copy_page_from_iter_atomic+0x27b/0x1e80 [ 1638.859802][T28274] ? shmem_get_folio+0xa0/0xa0 [ 1638.864612][T28274] ? iov_iter_zero+0x1b60/0x1b60 [ 1638.869575][T28274] ? shmem_write_begin+0x23f/0x4c0 [ 1638.874743][T28274] ? shmem_writepage+0x18f0/0x18f0 [ 1638.879911][T28274] ? fault_in_iov_iter_readable+0x229/0x280 [ 1638.885859][T28274] generic_perform_write+0x392/0x630 [ 1638.891259][T28274] ? generic_file_direct_write+0x3f0/0x3f0 [ 1638.897108][T28274] ? generic_write_checks_count+0x490/0x490 [ 1638.903060][T28274] ? rcu_read_lock_any_held+0xb7/0x160 [ 1638.908585][T28274] ? file_update_time+0x2a3/0x3e0 [ 1638.913682][T28274] shmem_file_write_iter+0xfc/0x120 [ 1638.918930][T28274] vfs_write+0x783/0xaf0 [ 1638.923247][T28274] ? kernel_write+0x330/0x330 [ 1638.927995][T28274] ? __fget_files+0x3f4/0x470 [ 1638.932741][T28274] ? __fdget_pos+0x1a1/0x320 [ 1638.937439][T28274] ksys_write+0x1a0/0x2c0 [ 1638.941849][T28274] ? __ia32_sys_read+0x90/0x90 [ 1638.946668][T28274] ? exc_page_fault+0x587/0x870 [ 1638.951730][T28274] ? do_syscall_64+0xb4/0x230 [ 1638.956443][T28274] do_syscall_64+0xf5/0x230 [ 1638.960979][T28274] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1638.966890][T28274] RIP: 0033:0x7f2d4627ba6f [ 1638.971318][T28274] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 1638.990986][T28274] RSP: 002b:00007f2d46fa8e70 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1638.999453][T28274] RAX: ffffffffffffffda RBX: 0000000000010000 RCX: 00007f2d4627ba6f [ 1639.007457][T28274] RDX: 0000000000010000 RSI: 00007f2d3c600000 RDI: 0000000000000004 [ 1639.015451][T28274] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000001f7 [ 1639.023457][T28274] R10: 00000000000001ce R11: 0000000000000293 R12: 0000000000000004 [ 1639.031466][T28274] R13: 00007f2d46fa8f3c R14: 00007f2d46fa8f40 R15: 00007f2d3c600000 [ 1639.039477][T28274] [ 1639.115538][T28269] CPU: 0 PID: 28269 Comm: syz-executor.4 Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 1639.125709][T28269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1639.135812][T28269] Call Trace: [ 1639.139139][T28269] [ 1639.142113][T28269] dump_stack_lvl+0x1e7/0x2d0 [ 1639.146864][T28269] ? nf_tcp_handle_invalid+0x650/0x650 [ 1639.152384][T28269] ? panic+0x850/0x850 [ 1639.156508][T28269] ? __lock_acquire+0x1345/0x1fd0 [ 1639.161610][T28269] should_fail_ex+0x3aa/0x4e0 [ 1639.166366][T28269] prepare_alloc_pages+0x1d9/0x5b0 [ 1639.171544][T28269] __alloc_pages+0x165/0x680 [ 1639.176209][T28269] ? zone_statistics+0x170/0x170 [ 1639.181223][T28269] ? policy_nodemask+0x1ec/0x720 [ 1639.186225][T28269] ? mark_lock+0x9a/0x350 [ 1639.190622][T28269] alloc_pages_mpol+0x3de/0x640 [ 1639.195539][T28269] ? mempolicy_in_oom_domain+0x130/0x130 [ 1639.201245][T28269] vma_alloc_folio+0xf3/0x3f0 [ 1639.205983][T28269] ? page_zone+0xd0/0xd0 [ 1639.210272][T28269] ? __lock_acquire+0x1345/0x1fd0 [ 1639.215347][T28269] handle_mm_fault+0x238a/0x6680 [ 1639.220342][T28269] ? handle_mm_fault+0x11d/0x6680 [ 1639.225437][T28269] ? numa_migrate_prep+0x260/0x260 [ 1639.230627][T28269] ? mtree_range_walk+0x6a0/0x7e0 [ 1639.235699][T28269] ? lock_vma_under_rcu+0x187/0x6f0 [ 1639.240924][T28269] ? __lock_acquire+0x1fd0/0x1fd0 [ 1639.245971][T28269] ? lock_vma_under_rcu+0x2f6/0x6f0 [ 1639.251294][T28269] ? lock_vma_under_rcu+0x5df/0x6f0 [ 1639.256515][T28269] ? lock_vma_under_rcu+0x187/0x6f0 [ 1639.261742][T28269] ? exc_page_fault+0x110/0x870 [ 1639.266624][T28269] exc_page_fault+0x456/0x870 [ 1639.271323][T28269] asm_exc_page_fault+0x26/0x30 [ 1639.276196][T28269] RIP: 0033:0x7f3e7da28793 [ 1639.280633][T28269] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 1639.300255][T28269] RSP: 002b:00007f3e7e749520 EFLAGS: 00010206 [ 1639.306344][T28269] RAX: 0000000000028000 RBX: 00007f3e7e7495c0 RCX: 00007f3e73e00000 [ 1639.314328][T28269] RDX: 00007f3e7e749760 RSI: 0000000000000007 RDI: 00007f3e7e749660 [ 1639.322315][T28269] RBP: 00000000000000ea R08: 0000000000000009 R09: 00000000000001a2 [ 1639.330304][T28269] R10: 00000000000001bc R11: 00007f3e7e7495c0 R12: 0000000000000001 [ 1639.338291][T28269] R13: 00007f3e7daeb780 R14: 0000000000000027 R15: 00007f3e7e749660 [ 1639.346289][T28269] 10:33:51 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r0, 0x0, 0x0) 10:33:51 executing program 3: syz_mount_image$reiserfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x800c, &(0x7f0000000300)=ANY=[], 0xfd, 0x111f, &(0x7f0000002300)="$eJzs2LFuEzEcBvDPl1AagXQo3U8MDAyoKgoz0AGkrKywAOpEp2YCMeRhWNh4EOjEXnWHoU9wKLmmJ6QqgFo6wO8nRXb+/ny2RzsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwMEy+lWSrSsarWpWkJE1zOD1O0qzqtz4PqpQ825vOnhxMns66WKqU50lZzEr5+LDLTsaT8f3xg63dO19mb9+9ebm/v3ewHHh1o6TJ0cmlnmKU070M1oQWG9w8SwMAAMD/o72w+vcW+nTzL60PAAAA/MrlviYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/Lm27vsbq06VpCRNczg9TtKcM+/aFe0PAAAAuLiSKi/q8+rdM0DvXr7W5azedh5V2cmHOqNlZNinq3WLrh0EAACAf157fdncTpn31+SyUeare/fdDPv6MjnM9nb3/7TJ991kkPnmzs/fHj1OcnTy/vXiV9rBFR0JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAf7MCxAAAAAIAwf+s0OjYAAAAAAAAAAAAAAAAAAAAAAAAAAAC+CgAA//8sud4B") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000010c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x183c3, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r1 = open(&(0x7f0000000400)='./file2\x00', 0xe4841, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/netfilter\x00') fcntl$notify(r2, 0x402, 0x0) getdents(0xffffffffffffffff, 0xffffffffffffffff, 0x18) ftruncate(r1, 0x8fae) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x307e00}], 0x1, 0x1400, 0xd600, 0x3) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a424ac, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRESHEX, @ANYRES64, @ANYRESOCT, @ANYRESHEX, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="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", @ANYRES64], 0xfe, 0x0, &(0x7f0000000000)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x2007fff) [ 1639.597512][T28274] loop1: detected capacity change from 0 to 128 10:33:51 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000680), 0x1, 0x5ce, &(0x7f00000006c0)="$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") (fail_nth: 24) [ 1639.835726][T28269] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF 10:33:52 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000200)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x3b7}}, 0x18) 10:33:52 executing program 1: syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1fd, &(0x7f00000002c0)="$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") (fail_nth: 30) [ 1639.969793][T28269] loop4: detected capacity change from 0 to 2048 [ 1640.029898][T28269] /dev/loop4: Can't open blockdev 10:33:52 executing program 2: mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) chdir(&(0x7f0000000600)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000540)=""/182, 0xb6) getdents(r0, 0xfffffffffffffffd, 0x58) [ 1640.076592][T28287] FAULT_INJECTION: forcing a failure. [ 1640.076592][T28287] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1640.192563][T28287] CPU: 1 PID: 28287 Comm: syz-executor.0 Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 1640.202729][T28287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1640.212844][T28287] Call Trace: [ 1640.216167][T28287] [ 1640.219130][T28287] dump_stack_lvl+0x1e7/0x2d0 [ 1640.223864][T28287] ? nf_tcp_handle_invalid+0x650/0x650 [ 1640.229476][T28287] ? panic+0x850/0x850 [ 1640.233586][T28287] ? validate_chain+0x11c/0x5ab0 [ 1640.238583][T28287] should_fail_ex+0x3aa/0x4e0 [ 1640.243307][T28287] prepare_alloc_pages+0x1d9/0x5b0 [ 1640.248453][T28287] __alloc_pages+0x165/0x680 [ 1640.253066][T28287] ? zone_statistics+0x170/0x170 [ 1640.258021][T28287] ? validate_chain+0x11c/0x5ab0 [ 1640.262984][T28287] ? policy_nodemask+0x1ec/0x720 [ 1640.267954][T28287] alloc_pages_mpol+0x3de/0x640 [ 1640.272827][T28287] ? mempolicy_in_oom_domain+0x130/0x130 [ 1640.278493][T28287] vma_alloc_folio+0xf3/0x3f0 [ 1640.283206][T28287] ? page_zone+0xd0/0xd0 [ 1640.287475][T28287] ? do_raw_spin_unlock+0x13b/0x8b0 [ 1640.292734][T28287] do_wp_page+0x1234/0x4d40 [ 1640.297277][T28287] ? folio_put+0xc0/0xc0 [ 1640.301553][T28287] ? read_lock_is_recursive+0x20/0x20 [ 1640.306949][T28287] ? do_raw_spin_lock+0x14e/0x370 [ 1640.312003][T28287] ? __lock_acquire+0x1345/0x1fd0 [ 1640.317053][T28287] handle_mm_fault+0x1b1c/0x6680 [ 1640.322018][T28287] ? handle_mm_fault+0x11d/0x6680 [ 1640.327071][T28287] ? numa_migrate_prep+0x260/0x260 [ 1640.332209][T28287] ? mtree_range_walk+0x6a0/0x7e0 [ 1640.337257][T28287] ? lock_vma_under_rcu+0x187/0x6f0 [ 1640.342474][T28287] ? __lock_acquire+0x1fd0/0x1fd0 [ 1640.347527][T28287] ? lock_vma_under_rcu+0x2f6/0x6f0 [ 1640.352761][T28287] ? lock_vma_under_rcu+0x5df/0x6f0 [ 1640.357988][T28287] ? lock_vma_under_rcu+0x187/0x6f0 [ 1640.363214][T28287] ? exc_page_fault+0x110/0x870 [ 1640.368082][T28287] exc_page_fault+0x456/0x870 [ 1640.372781][T28287] asm_exc_page_fault+0x26/0x30 [ 1640.377654][T28287] RIP: 0033:0x7f6cf6428793 [ 1640.382096][T28287] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 1640.401730][T28287] RSP: 002b:00007f6cf71f0520 EFLAGS: 00010202 [ 1640.407833][T28287] RAX: 0000000000020800 RBX: 00007f6cf71f05c0 RCX: 00007f6cec800000 [ 1640.415818][T28287] RDX: 00007f6cf71f0760 RSI: 000000000000000f RDI: 00007f6cf71f0660 [ 1640.423804][T28287] RBP: 000000000000003a R08: 0000000000000008 R09: 00000000000000bd [ 1640.431797][T28287] R10: 00000000000000ca R11: 00007f6cf71f05c0 R12: 0000000000000001 [ 1640.439783][T28287] R13: 00007f6cf64eb780 R14: 0000000000000073 R15: 00007f6cf71f0660 [ 1640.447786][T28287] [ 1640.547801][T28287] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1640.558229][T28291] FAULT_INJECTION: forcing a failure. [ 1640.558229][T28291] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1640.571483][T28291] CPU: 0 PID: 28291 Comm: syz-executor.1 Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 1640.581601][T28291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1640.591705][T28291] Call Trace: [ 1640.595029][T28291] [ 1640.598010][T28291] dump_stack_lvl+0x1e7/0x2d0 [ 1640.602783][T28291] ? nf_tcp_handle_invalid+0x650/0x650 [ 1640.608334][T28291] ? panic+0x850/0x850 [ 1640.612502][T28291] should_fail_ex+0x3aa/0x4e0 [ 1640.617233][T28291] copy_page_from_iter_atomic+0x27b/0x1e80 [ 1640.623080][T28291] ? shmem_get_folio+0xa0/0xa0 [ 1640.627901][T28291] ? iov_iter_zero+0x1b60/0x1b60 [ 1640.632911][T28291] ? shmem_write_begin+0x23f/0x4c0 [ 1640.638055][T28291] ? shmem_writepage+0x18f0/0x18f0 [ 1640.643191][T28291] ? fault_in_iov_iter_readable+0x229/0x280 [ 1640.649108][T28291] generic_perform_write+0x392/0x630 [ 1640.654433][T28291] ? generic_file_direct_write+0x3f0/0x3f0 [ 1640.660264][T28291] ? generic_write_checks_count+0x490/0x490 [ 1640.666171][T28291] ? rcu_read_lock_any_held+0xb7/0x160 [ 1640.671652][T28291] ? file_update_time+0x2a3/0x3e0 [ 1640.676704][T28291] shmem_file_write_iter+0xfc/0x120 [ 1640.681930][T28291] vfs_write+0x783/0xaf0 [ 1640.686209][T28291] ? kernel_write+0x330/0x330 [ 1640.690914][T28291] ? __fget_files+0x3f4/0x470 [ 1640.695622][T28291] ? __fdget_pos+0x1a1/0x320 [ 1640.700238][T28291] ksys_write+0x1a0/0x2c0 [ 1640.704593][T28291] ? __ia32_sys_read+0x90/0x90 [ 1640.709378][T28291] ? exc_page_fault+0x587/0x870 [ 1640.714250][T28291] ? do_syscall_64+0xb4/0x230 [ 1640.719053][T28291] do_syscall_64+0xf5/0x230 [ 1640.723589][T28291] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1640.729507][T28291] RIP: 0033:0x7f2d4627ba6f [ 1640.733937][T28291] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 1640.753602][T28291] RSP: 002b:00007f2d46fa8e70 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1640.762049][T28291] RAX: ffffffffffffffda RBX: 0000000000010000 RCX: 00007f2d4627ba6f [ 1640.770069][T28291] RDX: 0000000000010000 RSI: 00007f2d3c600000 RDI: 0000000000000004 [ 1640.778073][T28291] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000001f7 [ 1640.786074][T28291] R10: 00000000000001ce R11: 0000000000000293 R12: 0000000000000004 [ 1640.794070][T28291] R13: 00007f2d46fa8f3c R14: 00007f2d46fa8f40 R15: 00007f2d3c600000 [ 1640.802083][T28291] 10:33:53 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/softnet_stat\x00') lseek(r0, 0x87, 0x0) 10:33:53 executing program 4: syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000800), 0x1, 0x755, &(0x7f0000000840)="$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") (fail_nth: 30) 10:33:53 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_slab\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x7) [ 1640.939114][T28287] loop0: detected capacity change from 0 to 1024 [ 1640.967702][T28293] FAULT_INJECTION: forcing a failure. [ 1640.967702][T28293] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1641.037302][T28291] loop1: detected capacity change from 0 to 128 [ 1641.142285][T28293] CPU: 0 PID: 28293 Comm: syz-executor.4 Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 1641.152438][T28293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1641.162547][T28293] Call Trace: [ 1641.165876][T28293] [ 1641.168846][T28293] dump_stack_lvl+0x1e7/0x2d0 [ 1641.173593][T28293] ? nf_tcp_handle_invalid+0x650/0x650 [ 1641.179122][T28293] ? panic+0x850/0x850 [ 1641.183261][T28293] ? __lock_acquire+0x1345/0x1fd0 [ 1641.188352][T28293] should_fail_ex+0x3aa/0x4e0 [ 1641.193102][T28293] prepare_alloc_pages+0x1d9/0x5b0 [ 1641.198276][T28293] __alloc_pages+0x165/0x680 [ 1641.202927][T28293] ? zone_statistics+0x170/0x170 [ 1641.207941][T28293] ? policy_nodemask+0x1ec/0x720 [ 1641.212940][T28293] ? mark_lock+0x9a/0x350 [ 1641.217337][T28293] alloc_pages_mpol+0x3de/0x640 [ 1641.222251][T28293] ? mempolicy_in_oom_domain+0x130/0x130 [ 1641.227957][T28293] vma_alloc_folio+0xf3/0x3f0 [ 1641.232781][T28293] ? page_zone+0xd0/0xd0 [ 1641.237076][T28293] ? __lock_acquire+0x1345/0x1fd0 [ 1641.242168][T28293] handle_mm_fault+0x238a/0x6680 [ 1641.247178][T28293] ? handle_mm_fault+0x11d/0x6680 [ 1641.252281][T28293] ? numa_migrate_prep+0x260/0x260 [ 1641.257475][T28293] ? mtree_range_walk+0x6a0/0x7e0 [ 1641.262570][T28293] ? lock_vma_under_rcu+0x187/0x6f0 [ 1641.267836][T28293] ? __lock_acquire+0x1fd0/0x1fd0 [ 1641.272921][T28293] ? lock_vma_under_rcu+0x2f6/0x6f0 [ 1641.278208][T28293] ? lock_vma_under_rcu+0x5df/0x6f0 [ 1641.283565][T28293] ? lock_vma_under_rcu+0x187/0x6f0 10:33:53 executing program 2: r0 = syz_io_uring_setup(0x7af4, &(0x7f0000000980), &(0x7f0000000a00), &(0x7f0000000a40)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000000)="f6", 0x1) 10:33:53 executing program 1: syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1fd, &(0x7f00000002c0)="$eJzs3D1rU18cB/Dzb/vvQ6QPk6CLB110uWh9BUFaEANKbUQdlFuaakhMSm7ARBw6O/k6iqObIL6Bvgu3IkinTkbapI9WXWyj5POBcL7hS+AcQsLvBnI3H759UVnJkpW0GYbGYxgKYS1shzCzk3r+661Du3k0HLYWrj1Nt97cf/T4Tr5QmFuIcT6/eHM2xjh16ePL1+8uf2qee/B+6sNY2Jh5svl19vPG+Y0Lm98Wn5ezWM5ird6MaVyq15vpUrUUl8tZJYnxXrWUZqVYrmWlxpF+pVpfXW3HtLY8mVttlLIsprV2rJTasVmPzUY7ps/Sci0mSRInc4HfKa4vLKT5fu+C09Vo5NPhEMLED01xvS8bAgD6yvw/yMz/g2Bn/s/1Pr9Hmf8BAAAAAAAAAAAAAOBfsN3pTHc6nem9de8xFkIYDyHsPe/3Pjkd3v/BduiPe+MhfFlrFVvF7trt528X5q7HXTMHr9pqtYrD+/2Nbh+P9v+HXK+fPbEfDVevdPud7tbdwrF+Iiyf/vEBAABgICRx34nX90nys76bDv0+cOz6fSRcHDmzYwAAAAC/kLVfVdJqtdQQBEHYD/3+ZgIAAP60g6G/3zsBAAAAAAAAAAAAAAAAAACAwXUWtxPr9xkBAAAAAAAAAAAAAAAAAAAAAADgb/E9AAD//xRs0OA=") (fail_nth: 31) [ 1641.288853][T28293] ? exc_page_fault+0x110/0x870 [ 1641.293768][T28293] exc_page_fault+0x456/0x870 [ 1641.298518][T28293] asm_exc_page_fault+0x26/0x30 [ 1641.303427][T28293] RIP: 0033:0x7f3e7da28840 [ 1641.307892][T28293] Code: 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 1641.327556][T28293] RSP: 002b:00007f3e7e749520 EFLAGS: 00010206 [ 1641.333668][T28293] RAX: 0000000000029000 RBX: 00007f3e7e7495c0 RCX: 0000000000000101 [ 1641.341690][T28293] RDX: 00000000000003e3 RSI: 0000000000000fe4 RDI: 00007f3e7e749660 [ 1641.349717][T28293] RBP: 0000000000000102 R08: 00007f3e73e00000 R09: 0000000000000005 [ 1641.357742][T28293] R10: 0000000020000842 R11: 0000000000000753 R12: 0000000000000c01 [ 1641.365753][T28293] R13: 00007f3e7daeb780 R14: 0000000000000017 R15: 00007f3e7e749660 [ 1641.373793][T28293] [ 1641.465819][T28293] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1641.477951][T28284] loop3: detected capacity change from 0 to 8192 10:33:53 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000680), 0x1, 0x5ce, &(0x7f00000006c0)="$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") (fail_nth: 25) [ 1641.607884][T28293] loop4: detected capacity change from 0 to 2048 [ 1641.647514][T28293] /dev/loop4: Can't open blockdev 10:33:54 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00') lseek(r0, 0x2, 0x0) getdents(r0, 0xffffffffffffffff, 0x18) [ 1641.738538][T28302] FAULT_INJECTION: forcing a failure. [ 1641.738538][T28302] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1641.812015][T28302] CPU: 0 PID: 28302 Comm: syz-executor.1 Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 1641.822173][T28302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1641.832281][T28302] Call Trace: [ 1641.835612][T28302] [ 1641.838591][T28302] dump_stack_lvl+0x1e7/0x2d0 [ 1641.843352][T28302] ? nf_tcp_handle_invalid+0x650/0x650 [ 1641.848962][T28302] ? panic+0x850/0x850 [ 1641.853170][T28302] should_fail_ex+0x3aa/0x4e0 [ 1641.857937][T28302] prepare_alloc_pages+0x1d9/0x5b0 [ 1641.863123][T28302] __alloc_pages+0x165/0x680 [ 1641.867779][T28302] ? zone_statistics+0x170/0x170 [ 1641.872792][T28302] ? policy_nodemask+0x1ec/0x720 [ 1641.877796][T28302] alloc_pages_mpol+0x3de/0x640 [ 1641.882711][T28302] ? mempolicy_in_oom_domain+0x130/0x130 [ 1641.888402][T28302] ? xas_load+0x12c/0x140 [ 1641.892800][T28302] ? mpol_shared_policy_lookup+0x148/0x1e0 [ 1641.898675][T28302] shmem_alloc_and_add_folio+0x24f/0xde0 [ 1641.904391][T28302] ? put_swap_device+0x250/0x250 [ 1641.909406][T28302] ? __lock_acquire+0x1345/0x1fd0 [ 1641.914513][T28302] shmem_get_folio_gfp+0x7c3/0x1ee0 [ 1641.919804][T28302] ? shmem_get_folio+0xa0/0xa0 [ 1641.924637][T28302] ? print_unlock_imbalance_bug+0x2c0/0x2c0 [ 1641.930587][T28302] ? fault_in_readable+0x1a6/0x2b0 [ 1641.935758][T28302] shmem_write_begin+0x170/0x4c0 [ 1641.940759][T28302] ? shmem_writepage+0x18f0/0x18f0 [ 1641.945937][T28302] ? fault_in_iov_iter_readable+0x229/0x280 [ 1641.951902][T28302] generic_perform_write+0x31b/0x630 [ 1641.957276][T28302] ? generic_file_direct_write+0x3f0/0x3f0 [ 1641.963137][T28302] ? preempt_count_add+0x93/0x190 [ 1641.968215][T28302] ? mnt_put_write_access_file+0xbb/0x100 [ 1641.973986][T28302] ? file_update_time+0x3a6/0x3e0 [ 1641.979068][T28302] shmem_file_write_iter+0xfc/0x120 [ 1641.984350][T28302] vfs_write+0x783/0xaf0 [ 1641.988677][T28302] ? kernel_write+0x330/0x330 [ 1641.993448][T28302] ? __fget_files+0x3f4/0x470 [ 1641.998223][T28302] ? __fdget_pos+0x1a1/0x320 [ 1642.002896][T28302] ksys_write+0x1a0/0x2c0 [ 1642.007314][T28302] ? __ia32_sys_read+0x90/0x90 [ 1642.012150][T28302] ? exc_page_fault+0x587/0x870 [ 1642.017157][T28302] ? do_syscall_64+0xb4/0x230 [ 1642.021917][T28302] do_syscall_64+0xf5/0x230 [ 1642.026485][T28302] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1642.032426][T28302] RIP: 0033:0x7f2d4627ba6f [ 1642.036893][T28302] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 1642.056551][T28302] RSP: 002b:00007f2d46fa8e70 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1642.065028][T28302] RAX: ffffffffffffffda RBX: 0000000000010000 RCX: 00007f2d4627ba6f [ 1642.073055][T28302] RDX: 0000000000010000 RSI: 00007f2d3c600000 RDI: 0000000000000004 [ 1642.081081][T28302] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000001f7 [ 1642.089109][T28302] R10: 00000000000001ce R11: 0000000000000293 R12: 0000000000000004 [ 1642.097126][T28302] R13: 00007f2d46fa8f3c R14: 00007f2d46fa8f40 R15: 00007f2d3c600000 [ 1642.105160][T28302] [ 1642.387575][T28307] FAULT_INJECTION: forcing a failure. [ 1642.387575][T28307] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1642.473955][T28307] CPU: 1 PID: 28307 Comm: syz-executor.0 Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 1642.484224][T28307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1642.494330][T28307] Call Trace: [ 1642.497646][T28307] [ 1642.500610][T28307] dump_stack_lvl+0x1e7/0x2d0 [ 1642.505343][T28307] ? nf_tcp_handle_invalid+0x650/0x650 [ 1642.510939][T28307] ? panic+0x850/0x850 [ 1642.515295][T28307] ? __lock_acquire+0x1345/0x1fd0 [ 1642.520390][T28307] should_fail_ex+0x3aa/0x4e0 [ 1642.525139][T28307] prepare_alloc_pages+0x1d9/0x5b0 [ 1642.530317][T28307] __alloc_pages+0x165/0x680 [ 1642.534972][T28307] ? zone_statistics+0x170/0x170 [ 1642.540078][T28307] ? policy_nodemask+0x1ec/0x720 [ 1642.545083][T28307] ? mark_lock+0x9a/0x350 [ 1642.549474][T28307] alloc_pages_mpol+0x3de/0x640 [ 1642.554381][T28307] ? mempolicy_in_oom_domain+0x130/0x130 [ 1642.560073][T28307] vma_alloc_folio+0xf3/0x3f0 [ 1642.564798][T28307] ? page_zone+0xd0/0xd0 [ 1642.569090][T28307] ? __lock_acquire+0x1345/0x1fd0 [ 1642.574180][T28307] handle_mm_fault+0x238a/0x6680 [ 1642.579206][T28307] ? handle_mm_fault+0x11d/0x6680 [ 1642.584385][T28307] ? numa_migrate_prep+0x260/0x260 [ 1642.589561][T28307] ? mtree_range_walk+0x6a0/0x7e0 [ 1642.595170][T28307] ? lock_vma_under_rcu+0x187/0x6f0 [ 1642.600434][T28307] ? __lock_acquire+0x1fd0/0x1fd0 [ 1642.605501][T28307] ? lock_vma_under_rcu+0x2f6/0x6f0 [ 1642.610760][T28307] ? lock_vma_under_rcu+0x5df/0x6f0 [ 1642.616004][T28307] ? lock_vma_under_rcu+0x187/0x6f0 [ 1642.621257][T28307] ? exc_page_fault+0x110/0x870 [ 1642.626173][T28307] exc_page_fault+0x456/0x870 [ 1642.630910][T28307] asm_exc_page_fault+0x26/0x30 [ 1642.635822][T28307] RIP: 0033:0x7f6cf6428840 [ 1642.640284][T28307] Code: 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 1642.659971][T28307] RSP: 002b:00007f6cf71f0520 EFLAGS: 00010202 [ 1642.666106][T28307] RAX: 0000000000021000 RBX: 00007f6cf71f05c0 RCX: 0000000000000009 [ 1642.674210][T28307] RDX: 00000000000063f4 RSI: 00000000000003f5 RDI: 00007f6cf71f0660 [ 1642.682230][T28307] RBP: 000000000000000a R08: 00007f6cec800000 R09: 0000000000000073 [ 1642.690252][T28307] R10: 00000000200006c2 R11: 00000000000005cc R12: 0000000000000301 [ 1642.698280][T28307] R13: 00007f6cf64eb780 R14: 0000000000000013 R15: 00007f6cf71f0660 [ 1642.706325][T28307] [ 1642.767835][T28307] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1642.960918][T28307] loop0: detected capacity change from 0 to 1024 10:33:55 executing program 3: syz_mount_image$reiserfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x800c, &(0x7f0000000300)=ANY=[], 0xfd, 0x111f, &(0x7f0000002300)="$eJzs2LFuEzEcBvDPl1AagXQo3U8MDAyoKgoz0AGkrKywAOpEp2YCMeRhWNh4EOjEXnWHoU9wKLmmJ6QqgFo6wO8nRXb+/ny2RzsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwMEy+lWSrSsarWpWkJE1zOD1O0qzqtz4PqpQ825vOnhxMns66WKqU50lZzEr5+LDLTsaT8f3xg63dO19mb9+9ebm/v3ewHHh1o6TJ0cmlnmKU070M1oQWG9w8SwMAAMD/o72w+vcW+nTzL60PAAAA/MrlviYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/Lm27vsbq06VpCRNczg9TtKcM+/aFe0PAAAAuLiSKi/q8+rdM0DvXr7W5azedh5V2cmHOqNlZNinq3WLrh0EAACAf157fdncTpn31+SyUeare/fdDPv6MjnM9nb3/7TJ991kkPnmzs/fHj1OcnTy/vXiV9rBFR0JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAf7MCxAAAAAIAwf+s0OjYAAAAAAAAAAAAAAAAAAAAAAAAAAAC+CgAA//8sud4B") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000010c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x183c3, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r1 = open(&(0x7f0000000400)='./file2\x00', 0xe4841, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/netfilter\x00') fcntl$notify(r2, 0x402, 0x0) getdents(0xffffffffffffffff, 0xffffffffffffffff, 0x18) ftruncate(r1, 0x8fae) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x307e00}], 0x1, 0x1400, 0xd600, 0x3) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a424ac, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRESHEX, @ANYRES64, @ANYRESOCT, @ANYRESHEX, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="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", @ANYRES64], 0xfe, 0x0, &(0x7f0000000000)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x2007fff) 10:33:55 executing program 2: r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) 10:33:55 executing program 5: syz_mount_image$ntfs3(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x18, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRESOCT, @ANYBLOB="c0d8d28fe50cffffffffffffffffbd7c98d2ae53466ba034b87b70b7b2e7c07f1b8a4c935566b6806a3377c09dea8d127a773c59f30452397dd20df464589af4268eb69b6010ba8d38db000099359cd6349fd0e53aa53cae5094bba8a7822804f0805a0dd7229b5719f9cc71d6537801d3a8843b68bf906ebc93693b32bf66a933a2bbeb78ba4c1ee728a2f99977080a108cac015b971a664301786d7018289f99af45d29f8ff0ee1fab49125f876d2a32938d0c0e3eb686ac0b04e4d31340f47c8185387b89a7dc6e830000000000002cd2dba6c732f22f4b1d3a6798a8303334", @ANYRES16=0x0, @ANYRES64, @ANYRES16], 0x5, 0x1f19c, &(0x7f000003e700)="$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") openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x2) 10:33:55 executing program 4: syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000800), 0x1, 0x755, &(0x7f0000000840)="$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") (fail_nth: 31) 10:33:55 executing program 1: syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1fd, &(0x7f00000002c0)="$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") (fail_nth: 32) [ 1643.176816][T28314] FAULT_INJECTION: forcing a failure. [ 1643.176816][T28314] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1643.224538][T28314] CPU: 0 PID: 28314 Comm: syz-executor.4 Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 1643.234690][T28314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1643.244802][T28314] Call Trace: [ 1643.248133][T28314] [ 1643.251099][T28314] dump_stack_lvl+0x1e7/0x2d0 [ 1643.255850][T28314] ? nf_tcp_handle_invalid+0x650/0x650 [ 1643.261371][T28314] ? panic+0x850/0x850 [ 1643.265497][T28314] ? __lock_acquire+0x1345/0x1fd0 [ 1643.270575][T28314] should_fail_ex+0x3aa/0x4e0 [ 1643.275311][T28314] prepare_alloc_pages+0x1d9/0x5b0 [ 1643.280482][T28314] __alloc_pages+0x165/0x680 [ 1643.285128][T28314] ? zone_statistics+0x170/0x170 [ 1643.290120][T28314] ? policy_nodemask+0x1ec/0x720 [ 1643.295093][T28314] ? mark_lock+0x9a/0x350 [ 1643.299473][T28314] alloc_pages_mpol+0x3de/0x640 [ 1643.304370][T28314] ? mempolicy_in_oom_domain+0x130/0x130 [ 1643.310057][T28314] vma_alloc_folio+0xf3/0x3f0 [ 1643.314787][T28314] ? page_zone+0xd0/0xd0 [ 1643.319082][T28314] ? __lock_acquire+0x1345/0x1fd0 [ 1643.324168][T28314] handle_mm_fault+0x238a/0x6680 [ 1643.329173][T28314] ? handle_mm_fault+0x11d/0x6680 [ 1643.334264][T28314] ? numa_migrate_prep+0x260/0x260 [ 1643.339444][T28314] ? mtree_range_walk+0x6a0/0x7e0 [ 1643.344533][T28314] ? lock_vma_under_rcu+0x187/0x6f0 [ 1643.349802][T28314] ? __lock_acquire+0x1fd0/0x1fd0 [ 1643.354877][T28314] ? lock_vma_under_rcu+0x2f6/0x6f0 [ 1643.360156][T28314] ? lock_vma_under_rcu+0x5df/0x6f0 [ 1643.365416][T28314] ? lock_vma_under_rcu+0x187/0x6f0 [ 1643.370690][T28314] ? exc_page_fault+0x110/0x870 [ 1643.375600][T28314] exc_page_fault+0x456/0x870 [ 1643.380431][T28314] asm_exc_page_fault+0x26/0x30 [ 1643.385338][T28314] RIP: 0033:0x7f3e7da28793 [ 1643.389814][T28314] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 1643.409475][T28314] RSP: 002b:00007f3e7e749520 EFLAGS: 00010202 [ 1643.415598][T28314] RAX: 0000000000030000 RBX: 00007f3e7e7495c0 RCX: 00007f3e73e00000 [ 1643.423616][T28314] RDX: 00007f3e7e749760 RSI: 0000000000000057 RDI: 00007f3e7e749660 [ 1643.431632][T28314] RBP: 0000000000000022 R08: 0000000000000008 R09: 00000000000000b4 [ 1643.439646][T28314] R10: 00000000000000c4 R11: 00007f3e7e7495c0 R12: 0000000000000001 [ 1643.447664][T28314] R13: 00007f3e7daeb780 R14: 0000000000000073 R15: 00007f3e7e749660 [ 1643.452812][T28315] FAULT_INJECTION: forcing a failure. [ 1643.452812][T28315] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1643.455676][T28314] [ 1643.472411][T28315] CPU: 1 PID: 28315 Comm: syz-executor.1 Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 1643.482523][T28315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1643.492621][T28315] Call Trace: [ 1643.495932][T28315] [ 1643.498887][T28315] dump_stack_lvl+0x1e7/0x2d0 [ 1643.503621][T28315] ? nf_tcp_handle_invalid+0x650/0x650 [ 1643.509128][T28315] ? panic+0x850/0x850 [ 1643.513249][T28315] should_fail_ex+0x3aa/0x4e0 [ 1643.517984][T28315] copy_page_from_iter_atomic+0x27b/0x1e80 [ 1643.523846][T28315] ? shmem_get_folio+0xa0/0xa0 [ 1643.528674][T28315] ? print_unlock_imbalance_bug+0x2c0/0x2c0 [ 1643.534616][T28315] ? iov_iter_zero+0x1b60/0x1b60 [ 1643.539597][T28315] ? shmem_write_begin+0x23f/0x4c0 [ 1643.544755][T28315] ? shmem_writepage+0x18f0/0x18f0 [ 1643.549923][T28315] ? fault_in_iov_iter_readable+0x229/0x280 [ 1643.555915][T28315] generic_perform_write+0x392/0x630 [ 1643.561262][T28315] ? generic_file_direct_write+0x3f0/0x3f0 [ 1643.567100][T28315] ? preempt_count_add+0x93/0x190 [ 1643.572149][T28315] ? mnt_put_write_access_file+0xbb/0x100 [ 1643.577886][T28315] ? file_update_time+0x3a6/0x3e0 [ 1643.582937][T28315] shmem_file_write_iter+0xfc/0x120 [ 1643.588160][T28315] vfs_write+0x783/0xaf0 [ 1643.592431][T28315] ? kernel_write+0x330/0x330 [ 1643.597134][T28315] ? __fget_files+0x3f4/0x470 [ 1643.601846][T28315] ? __fdget_pos+0x1a1/0x320 [ 1643.606464][T28315] ksys_write+0x1a0/0x2c0 [ 1643.610822][T28315] ? __ia32_sys_read+0x90/0x90 [ 1643.615608][T28315] ? exc_page_fault+0x587/0x870 [ 1643.620480][T28315] ? do_syscall_64+0xb4/0x230 [ 1643.625196][T28315] do_syscall_64+0xf5/0x230 [ 1643.629734][T28315] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1643.635675][T28315] RIP: 0033:0x7f2d4627ba6f [ 1643.640106][T28315] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 1643.659735][T28315] RSP: 002b:00007f2d46fa8e70 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1643.668312][T28315] RAX: ffffffffffffffda RBX: 0000000000010000 RCX: 00007f2d4627ba6f [ 1643.676317][T28315] RDX: 0000000000010000 RSI: 00007f2d3c600000 RDI: 0000000000000004 [ 1643.684300][T28315] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000001f7 [ 1643.692284][T28315] R10: 00000000000001ce R11: 0000000000000293 R12: 0000000000000004 [ 1643.700292][T28315] R13: 00007f2d46fa8f3c R14: 00007f2d46fa8f40 R15: 00007f2d3c600000 [ 1643.708403][T28315] 10:33:56 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) 10:33:56 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000680), 0x1, 0x5ce, &(0x7f00000006c0)="$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") (fail_nth: 26) [ 1643.810219][T28314] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1643.928234][T28315] loop1: detected capacity change from 0 to 128 [ 1643.983076][T28314] loop4: detected capacity change from 0 to 2048 [ 1643.994870][T28325] FAULT_INJECTION: forcing a failure. [ 1643.994870][T28325] name fail_page_alloc, interval 1, probability 0, space 0, times 0 10:33:56 executing program 2: mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r1, &(0x7f0000000100)='./file1\x00') syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000800)=ANY=[], 0x2, 0x1c9, &(0x7f0000000300)="$eJzsmb0P0kAYxp+7lg+JMXFxcHGQRIxS2qKGhQETdxPwa5NIJWgBAzUBEgfi4uLoYOLqP+DgwOTg5uaqg5qYOMjoXHPH0Z4FFHRp4vtLuD739d57L/AMAIIg/lu+fP7x6enlWus8gKMoIqfGvxnxGq6t//j84bln9SsvXn14+XZw7NEiGY8BCMP9zzcBvGkYCFQ/DH/dXVTPFnikr4HjrNI3wGApfRsc15X2wHBL6XuaHh5RwvesO0O/c7fne7ZoHNG4oqkm81vOGToA8io/ps2Pp7P7bd/3RkmRCdfnbEwdKv5Uv2WDo67VT7xfN588nov+uja2Vj8HHI7SVTA0la4hB8uy4pJo9z9pxvGNfe6fBnG8nIo0SKRLsOSI+EJHIyeWi3ebu76mJfm/ENK4AGxMvS/8W+SsMoGta2J/YiZwRvMnE2bkH5Wg/6Ayns7KvX6763W9getWL9kXbPuiW5FGtGp/43956U8FLX5mx9osy2LSDoKRMwGCkRP13VWrOW7z9fC73MOl/3GUTq9iiI+KvHZu+xlMvbh8ClUydiZPEARBEARBEARBEARBEARxEKfA5K+g6o+qcAfuVbn6ZwAAAP//7M1pUg==") ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r2, 0x9362, 0x0) [ 1644.084213][T28314] /dev/loop4: Can't open blockdev [ 1644.099989][T28325] CPU: 0 PID: 28325 Comm: syz-executor.0 Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 1644.110136][T28325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1644.120253][T28325] Call Trace: [ 1644.123571][T28325] [ 1644.126534][T28325] dump_stack_lvl+0x1e7/0x2d0 [ 1644.131276][T28325] ? nf_tcp_handle_invalid+0x650/0x650 [ 1644.136800][T28325] ? panic+0x850/0x850 [ 1644.141381][T28325] should_fail_ex+0x3aa/0x4e0 [ 1644.145853][T28318] loop5: detected capacity change from 0 to 4096 [ 1644.146107][T28325] prepare_alloc_pages+0x1d9/0x5b0 [ 1644.146153][T28325] __alloc_pages+0x165/0x680 [ 1644.162263][T28325] ? zone_statistics+0x170/0x170 [ 1644.167281][T28325] ? policy_nodemask+0x1ec/0x720 [ 1644.172266][T28325] alloc_pages_mpol+0x3de/0x640 [ 1644.177150][T28325] ? mempolicy_in_oom_domain+0x130/0x130 [ 1644.182807][T28325] vma_alloc_folio+0xf3/0x3f0 [ 1644.187502][T28325] ? page_zone+0xd0/0xd0 [ 1644.191757][T28325] ? do_raw_spin_unlock+0x13b/0x8b0 [ 1644.196985][T28325] do_wp_page+0x1234/0x4d40 [ 1644.201533][T28325] ? folio_put+0xc0/0xc0 [ 1644.205805][T28325] ? read_lock_is_recursive+0x20/0x20 [ 1644.211210][T28325] ? do_raw_spin_lock+0x14e/0x370 [ 1644.216271][T28325] ? __lock_acquire+0x1345/0x1fd0 [ 1644.221319][T28325] handle_mm_fault+0x1b1c/0x6680 [ 1644.226286][T28325] ? handle_mm_fault+0x11d/0x6680 [ 1644.231338][T28325] ? numa_migrate_prep+0x260/0x260 [ 1644.236475][T28325] ? mtree_range_walk+0x6a0/0x7e0 [ 1644.241523][T28325] ? lock_vma_under_rcu+0x187/0x6f0 [ 1644.246741][T28325] ? __lock_acquire+0x1fd0/0x1fd0 [ 1644.251780][T28325] ? lock_vma_under_rcu+0x2f6/0x6f0 [ 1644.257007][T28325] ? lock_vma_under_rcu+0x5df/0x6f0 [ 1644.262229][T28325] ? lock_vma_under_rcu+0x187/0x6f0 [ 1644.267471][T28325] ? exc_page_fault+0x110/0x870 [ 1644.272358][T28325] exc_page_fault+0x456/0x870 [ 1644.277064][T28325] asm_exc_page_fault+0x26/0x30 [ 1644.281932][T28325] RIP: 0033:0x7f6cf6428840 [ 1644.286361][T28325] Code: 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 1644.305982][T28325] RSP: 002b:00007f6cf71f0520 EFLAGS: 00010202 [ 1644.312066][T28325] RAX: 0000000000023600 RBX: 00007f6cf71f05c0 RCX: 0000000000000063 [ 1644.320050][T28325] RDX: 0000000000003a4e RSI: 0000000000002a4f RDI: 00007f6cf71f0660 [ 1644.328032][T28325] RBP: 0000000000000064 R08: 00007f6cec800000 R09: 0000000000000073 [ 1644.336036][T28325] R10: 00000000200006c2 R11: 00000000000005cc R12: 0000000000002001 [ 1644.344046][T28325] R13: 00007f6cf64eb780 R14: 000000000000001a R15: 00007f6cf71f0660 [ 1644.352053][T28325] [ 1644.406319][T28325] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1644.424661][T28319] loop3: detected capacity change from 0 to 8192 [ 1644.509583][T28318] ntfs3: Unknown parameter 'ÿÿÿÿ01777777777777777777777ÀØÒå ÿÿÿÿÿÿÿÿ½|˜Ò®SFk 4¸{p·²çÀŠL“Uf¶€j3wÀêzw [ 1645.013903][T28330] dump_stack_lvl+0x1e7/0x2d0 [ 1645.018752][T28330] ? nf_tcp_handle_invalid+0x650/0x650 [ 1645.024316][T28330] ? panic+0x850/0x850 [ 1645.028440][T28330] ? validate_chain+0x11c/0x5ab0 [ 1645.033433][T28330] should_fail_ex+0x3aa/0x4e0 [ 1645.038157][T28330] prepare_alloc_pages+0x1d9/0x5b0 [ 1645.043303][T28330] __alloc_pages+0x165/0x680 [ 1645.047915][T28330] ? zone_statistics+0x170/0x170 [ 1645.053017][T28330] ? policy_nodemask+0x1ec/0x720 [ 1645.058021][T28330] alloc_pages_mpol+0x3de/0x640 [ 1645.062927][T28330] ? mempolicy_in_oom_domain+0x130/0x130 [ 1645.068728][T28330] ? xas_load+0x11e/0x140 [ 1645.073091][T28330] ? mpol_shared_policy_lookup+0x148/0x1e0 [ 1645.078929][T28330] shmem_alloc_and_add_folio+0x24f/0xde0 [ 1645.084599][T28330] ? put_swap_device+0x250/0x250 [ 1645.089568][T28330] ? __lock_acquire+0x1345/0x1fd0 [ 1645.094626][T28330] shmem_get_folio_gfp+0x7c3/0x1ee0 [ 1645.099890][T28330] ? shmem_get_folio+0xa0/0xa0 [ 1645.104705][T28330] ? print_unlock_imbalance_bug+0x2c0/0x2c0 [ 1645.110659][T28330] ? fault_in_readable+0x1a6/0x2b0 [ 1645.115820][T28330] shmem_write_begin+0x170/0x4c0 [ 1645.120794][T28330] ? shmem_writepage+0x18f0/0x18f0 [ 1645.125932][T28330] ? fault_in_iov_iter_readable+0x229/0x280 [ 1645.131850][T28330] generic_perform_write+0x31b/0x630 [ 1645.137166][T28330] ? file_update_time+0x39b/0x3e0 [ 1645.142225][T28330] ? generic_file_direct_write+0x3f0/0x3f0 [ 1645.148088][T28330] ? preempt_count_add+0x93/0x190 [ 1645.153140][T28330] ? mnt_put_write_access_file+0xbb/0x100 [ 1645.158883][T28330] ? file_update_time+0x3a6/0x3e0 [ 1645.163932][T28330] shmem_file_write_iter+0xfc/0x120 [ 1645.169157][T28330] vfs_write+0x783/0xaf0 [ 1645.173433][T28330] ? kernel_write+0x330/0x330 [ 1645.178167][T28330] ? __fget_files+0x3f4/0x470 [ 1645.182876][T28330] ? __fdget_pos+0x1a1/0x320 [ 1645.187489][T28330] ksys_write+0x1a0/0x2c0 [ 1645.191876][T28330] ? __ia32_sys_read+0x90/0x90 [ 1645.196672][T28330] ? exc_page_fault+0x587/0x870 [ 1645.201557][T28330] ? do_syscall_64+0xb4/0x230 [ 1645.206264][T28330] do_syscall_64+0xf5/0x230 [ 1645.210807][T28330] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1645.216719][T28330] RIP: 0033:0x7f3e7da7ba6f [ 1645.221150][T28330] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 1645.240774][T28330] RSP: 002b:00007f3e7e749e70 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1645.249206][T28330] RAX: ffffffffffffffda RBX: 0000000000100000 RCX: 00007f3e7da7ba6f [ 1645.257190][T28330] RDX: 0000000000100000 RSI: 00007f3e73e00000 RDI: 0000000000000004 [ 1645.265181][T28330] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000074f [ 1645.273164][T28330] R10: 00000000000003bc R11: 0000000000000293 R12: 0000000000000004 [ 1645.281146][T28330] R13: 00007f3e7e749f3c R14: 00007f3e7e749f40 R15: 00007f3e73e00000 [ 1645.289152][T28330] [ 1645.457989][T28335] FAULT_INJECTION: forcing a failure. [ 1645.457989][T28335] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1645.498972][T28335] CPU: 1 PID: 28335 Comm: syz-executor.1 Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 1645.509127][T28335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1645.519231][T28335] Call Trace: [ 1645.522552][T28335] [ 1645.525522][T28335] dump_stack_lvl+0x1e7/0x2d0 [ 1645.530268][T28335] ? nf_tcp_handle_invalid+0x650/0x650 [ 1645.535794][T28335] ? panic+0x850/0x850 [ 1645.539936][T28335] should_fail_ex+0x3aa/0x4e0 [ 1645.544687][T28335] prepare_alloc_pages+0x1d9/0x5b0 [ 1645.549871][T28335] __alloc_pages+0x165/0x680 [ 1645.554533][T28335] ? zone_statistics+0x170/0x170 [ 1645.559540][T28335] ? policy_nodemask+0x1ec/0x720 [ 1645.564610][T28335] alloc_pages_mpol+0x3de/0x640 [ 1645.569511][T28335] ? mempolicy_in_oom_domain+0x130/0x130 [ 1645.575199][T28335] ? xas_load+0x12c/0x140 [ 1645.579597][T28335] ? mpol_shared_policy_lookup+0x148/0x1e0 [ 1645.585462][T28335] shmem_alloc_and_add_folio+0x24f/0xde0 [ 1645.591188][T28335] ? put_swap_device+0x250/0x250 [ 1645.596197][T28335] shmem_get_folio_gfp+0x7c3/0x1ee0 [ 1645.601482][T28335] ? shmem_get_folio+0xa0/0xa0 [ 1645.606308][T28335] ? fault_in_readable+0x1a6/0x2b0 [ 1645.611474][T28335] shmem_write_begin+0x170/0x4c0 [ 1645.616460][T28335] ? shmem_writepage+0x18f0/0x18f0 [ 1645.621625][T28335] ? fault_in_iov_iter_readable+0x229/0x280 [ 1645.627585][T28335] generic_perform_write+0x31b/0x630 [ 1645.632955][T28335] ? generic_file_direct_write+0x3f0/0x3f0 [ 1645.638828][T28335] ? generic_write_checks_count+0x490/0x490 [ 1645.644773][T28335] ? rcu_read_lock_any_held+0xb7/0x160 [ 1645.650296][T28335] ? file_update_time+0x2a3/0x3e0 [ 1645.655386][T28335] shmem_file_write_iter+0xfc/0x120 [ 1645.660654][T28335] vfs_write+0x783/0xaf0 [ 1645.664961][T28335] ? kernel_write+0x330/0x330 [ 1645.669695][T28335] ? __fget_files+0x3f4/0x470 [ 1645.674432][T28335] ? __fdget_pos+0x1a1/0x320 [ 1645.679079][T28335] ksys_write+0x1a0/0x2c0 [ 1645.683484][T28335] ? __ia32_sys_read+0x90/0x90 [ 1645.688310][T28335] ? exc_page_fault+0x587/0x870 [ 1645.693226][T28335] ? do_syscall_64+0xb4/0x230 [ 1645.697980][T28335] do_syscall_64+0xf5/0x230 [ 1645.702561][T28335] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1645.708512][T28335] RIP: 0033:0x7f2d4627ba6f [ 1645.712969][T28335] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 1645.732626][T28335] RSP: 002b:00007f2d46fa8e70 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1645.741118][T28335] RAX: ffffffffffffffda RBX: 0000000000010000 RCX: 00007f2d4627ba6f 10:33:57 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000680), 0x1, 0x5ce, &(0x7f00000006c0)="$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") (fail_nth: 27) [ 1645.749151][T28335] RDX: 0000000000010000 RSI: 00007f2d3c600000 RDI: 0000000000000004 [ 1645.757176][T28335] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000001f7 [ 1645.765200][T28335] R10: 00000000000001ce R11: 0000000000000293 R12: 0000000000000004 [ 1645.773264][T28335] R13: 00007f2d46fa8f3c R14: 00007f2d46fa8f40 R15: 00007f2d3c600000 [ 1645.781304][T28335] [ 1645.828264][T28337] FAULT_INJECTION: forcing a failure. [ 1645.828264][T28337] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1645.915670][T28337] CPU: 0 PID: 28337 Comm: syz-executor.0 Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 1645.925808][T28337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1645.935901][T28337] Call Trace: [ 1645.939208][T28337] [ 1645.942161][T28337] dump_stack_lvl+0x1e7/0x2d0 [ 1645.946894][T28337] ? nf_tcp_handle_invalid+0x650/0x650 [ 1645.952412][T28337] ? panic+0x850/0x850 [ 1645.956516][T28337] should_fail_ex+0x3aa/0x4e0 [ 1645.961226][T28337] prepare_alloc_pages+0x1d9/0x5b0 [ 1645.966362][T28337] __alloc_pages+0x165/0x680 [ 1645.970974][T28337] ? zone_statistics+0x170/0x170 [ 1645.975953][T28337] ? policy_nodemask+0x1ec/0x720 [ 1645.980927][T28337] alloc_pages_mpol+0x3de/0x640 [ 1645.985829][T28337] ? mempolicy_in_oom_domain+0x130/0x130 [ 1645.991513][T28337] vma_alloc_folio+0xf3/0x3f0 [ 1645.996221][T28337] ? page_zone+0xd0/0xd0 [ 1646.000481][T28337] ? do_raw_spin_unlock+0x13b/0x8b0 [ 1646.005709][T28337] do_wp_page+0x1234/0x4d40 [ 1646.010254][T28337] ? folio_put+0xc0/0xc0 [ 1646.014522][T28337] ? read_lock_is_recursive+0x20/0x20 [ 1646.019924][T28337] ? do_raw_spin_lock+0x14e/0x370 [ 1646.024983][T28337] ? __lock_acquire+0x1345/0x1fd0 [ 1646.030076][T28337] handle_mm_fault+0x1b1c/0x6680 [ 1646.035073][T28337] ? handle_mm_fault+0x11d/0x6680 [ 1646.040143][T28337] ? numa_migrate_prep+0x260/0x260 [ 1646.045284][T28337] ? mtree_range_walk+0x6a0/0x7e0 [ 1646.050330][T28337] ? lock_vma_under_rcu+0x187/0x6f0 [ 1646.055574][T28337] ? __lock_acquire+0x1fd0/0x1fd0 [ 1646.060613][T28337] ? lock_vma_under_rcu+0x2f6/0x6f0 [ 1646.065839][T28337] ? lock_vma_under_rcu+0x5df/0x6f0 [ 1646.071056][T28337] ? lock_vma_under_rcu+0x187/0x6f0 [ 1646.076284][T28337] ? exc_page_fault+0x110/0x870 [ 1646.081194][T28337] exc_page_fault+0x456/0x870 [ 1646.085920][T28337] asm_exc_page_fault+0x26/0x30 [ 1646.090814][T28337] RIP: 0033:0x7f6cf6428793 [ 1646.095259][T28337] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 1646.114895][T28337] RSP: 002b:00007f6cf71f0520 EFLAGS: 00010206 [ 1646.120985][T28337] RAX: 000000000007fc00 RBX: 00007f6cf71f05c0 RCX: 00007f6cec800000 [ 1646.128997][T28337] RDX: 00007f6cf71f0760 RSI: 000000000000000b RDI: 00007f6cf71f0660 [ 1646.136986][T28337] RBP: 00000000000000aa R08: 0000000000000008 R09: 00000000000000b8 [ 1646.144997][T28337] R10: 00000000000000ca R11: 00007f6cf71f05c0 R12: 0000000000000001 [ 1646.153089][T28337] R13: 00007f6cf64eb780 R14: 0000000000000048 R15: 00007f6cf71f0660 [ 1646.161096][T28337] [ 1646.515655][T28337] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1646.673364][T28337] loop0: detected capacity change from 0 to 1024 10:33:59 executing program 3: syz_mount_image$reiserfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x800c, &(0x7f0000000300)=ANY=[], 0xfd, 0x111f, &(0x7f0000002300)="$eJzs2LFuEzEcBvDPl1AagXQo3U8MDAyoKgoz0AGkrKywAOpEp2YCMeRhWNh4EOjEXnWHoU9wKLmmJ6QqgFo6wO8nRXb+/ny2RzsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwMEy+lWSrSsarWpWkJE1zOD1O0qzqtz4PqpQ825vOnhxMns66WKqU50lZzEr5+LDLTsaT8f3xg63dO19mb9+9ebm/v3ewHHh1o6TJ0cmlnmKU070M1oQWG9w8SwMAAMD/o72w+vcW+nTzL60PAAAA/MrlviYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/Lm27vsbq06VpCRNczg9TtKcM+/aFe0PAAAAuLiSKi/q8+rdM0DvXr7W5azedh5V2cmHOqNlZNinq3WLrh0EAACAf157fdncTpn31+SyUeare/fdDPv6MjnM9nb3/7TJ991kkPnmzs/fHj1OcnTy/vXiV9rBFR0JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAf7MCxAAAAAIAwf+s0OjYAAAAAAAAAAAAAAAAAAAAAAAAAAAC+CgAA//8sud4B") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000010c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x183c3, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r1 = open(&(0x7f0000000400)='./file2\x00', 0xe4841, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/netfilter\x00') fcntl$notify(r2, 0x402, 0x0) getdents(0xffffffffffffffff, 0xffffffffffffffff, 0x18) ftruncate(r1, 0x8fae) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x307e00}], 0x1, 0x1400, 0xd600, 0x3) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a424ac, &(0x7f0000000440)=ANY=[@ANYBLOB="14270e2d25cccff078b9140e8a1e19f3b4c3bd09968dd1911acef24321d764d9e117da79063a62e3a592fb42f7d9ddb2682b4c2ff580e25fa8effbd53acfb0f870bc1e49d01a5b7ff55150d2bf3b042858c5325c2b569b320cd44e49e246cc1e41f04d2e494added5aa4750b7cf26f856bf23cb379531ebae1774af8a495092c8904205db190366875aa90aff0d11bf44f064c23390e88562d041e505362f5bfb0665c3fafda909f59ad286ee9bd87d5aa098dc5b81ee34cbf59bfa765c1c96e7fb557cb1443f3dceea44c963e0c9347545e4ff353bf8b9023cf81d78673a0f6363e5cc2b0d524d291e28fc28a2767ae804a98b34b648f0ba6edf510da09034a270f6b3a294a4f49d5ed571db0e0d8307c99a953a8175c2e1151a065a9dd6f262df38234a5a0e4888628fe124e56fae3b1c2abbf83fcb631bc0dc708d15d9252b9efe266f9bfe1a92f40414077e9b6851815491ea64ec4817e4f74d5caa1794d94838ee8dcfe64c7daf986e606daab9661f7d67898198dc5b2db3c9af129794d1e1184b65a7d446a60172f81b815c8f49cb6780cffb336f9af74e4ca4644346cb351b87c31a53d00d218d85ae8c0754a1adcd268b7f8dad21656ab6d08dbbba39f45dfac26de1ebdd4b3b1fbf23c38bc24bd5a6387807e0d97261292b78fe39171504ee71d59d4d00c20be451329c583040ec38a8ba28e654c8ec0b18b6b9c699edb040de22242d038e363d624ce076abe17bacf35d84975035c063a8958c47bb900887451e4932f7a391a8feea319577a68f265319ccfcade5e7dc56ade8312efb597e885d4d1b41d27dc2657bb344941d42e68ce72e06d82643a61571d025ce907b780707157984287ff2ba18a9f70d534a19bb6835725d6538e03f7e77701be3626172f3de7545c9cd13f1287a261380e797c0b8b89a1df32bc6d837e5a056fd2de70b2502d518354f69f82b38d72959d86635c2679d131e007bbac425b8b59f4d5b27edf6f6203cfaa59ba01c4b589b0ced7f92562b54d1735dac972a13887c0a5a4342e27a31fe1ec3c9019ec71144bcfca22203e891a1f2c2430054ddbdd278e04e4150388f3dc6b99627cb24dc0e58059c5a4126b6f47b2f87c1f5788eeaa4e802d468d9a51a24a5985af12573dce3ac56ce8539a75130cbfc4c18aad514dd2c1e9d0b0ef2436e99539061e84f83d1cb39dcc8a776ac8e017b0d870a1ffe845bd47d4ba4451f29f", @ANYRES8, @ANYRESHEX, @ANYRES64, @ANYRESOCT, @ANYRESHEX, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="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", @ANYRES64], 0xfe, 0x0, &(0x7f0000000000)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x2007fff) 10:33:59 executing program 1: syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1fd, &(0x7f00000002c0)="$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") (fail_nth: 34) 10:33:59 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x8010661b) 10:33:59 executing program 4: syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000800), 0x1, 0x755, &(0x7f0000000840)="$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") (fail_nth: 33) [ 1646.884143][T28342] FAULT_INJECTION: forcing a failure. [ 1646.884143][T28342] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1646.897681][T28342] CPU: 0 PID: 28342 Comm: syz-executor.1 Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 1646.907805][T28342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1646.917917][T28342] Call Trace: [ 1646.921248][T28342] [ 1646.924230][T28342] dump_stack_lvl+0x1e7/0x2d0 [ 1646.928982][T28342] ? nf_tcp_handle_invalid+0x650/0x650 10:33:59 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000680), 0x1, 0x5ce, &(0x7f00000006c0)="$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") (fail_nth: 28) [ 1646.934526][T28342] ? panic+0x850/0x850 [ 1646.938772][T28342] should_fail_ex+0x3aa/0x4e0 [ 1646.943528][T28342] copy_page_from_iter_atomic+0x27b/0x1e80 [ 1646.949417][T28342] ? shmem_get_folio+0xa0/0xa0 [ 1646.954256][T28342] ? iov_iter_zero+0x1b60/0x1b60 [ 1646.959269][T28342] ? shmem_write_begin+0x23f/0x4c0 [ 1646.964539][T28342] ? shmem_writepage+0x18f0/0x18f0 [ 1646.969766][T28342] ? fault_in_iov_iter_readable+0x229/0x280 [ 1646.975733][T28342] generic_perform_write+0x392/0x630 [ 1646.981103][T28342] ? generic_file_direct_write+0x3f0/0x3f0 [ 1646.986995][T28342] ? generic_write_checks_count+0x490/0x490 [ 1646.992964][T28342] ? rcu_read_lock_any_held+0xb7/0x160 [ 1646.998491][T28342] ? file_update_time+0x2a3/0x3e0 [ 1647.001824][T28344] FAULT_INJECTION: forcing a failure. [ 1647.001824][T28344] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1647.003567][T28342] shmem_file_write_iter+0xfc/0x120 [ 1647.003616][T28342] vfs_write+0x783/0xaf0 [ 1647.026244][T28342] ? kernel_write+0x330/0x330 [ 1647.030981][T28342] ? __fget_files+0x3f4/0x470 [ 1647.035725][T28342] ? __fdget_pos+0x1a1/0x320 [ 1647.040379][T28342] ksys_write+0x1a0/0x2c0 [ 1647.044774][T28342] ? __ia32_sys_read+0x90/0x90 [ 1647.049591][T28342] ? exc_page_fault+0x587/0x870 [ 1647.054483][T28342] ? do_syscall_64+0xb4/0x230 [ 1647.059196][T28342] do_syscall_64+0xf5/0x230 [ 1647.063825][T28342] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1647.069757][T28342] RIP: 0033:0x7f2d4627ba6f [ 1647.074218][T28342] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 1647.093860][T28342] RSP: 002b:00007f2d46fa8e70 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1647.102324][T28342] RAX: ffffffffffffffda RBX: 0000000000010000 RCX: 00007f2d4627ba6f [ 1647.110333][T28342] RDX: 0000000000010000 RSI: 00007f2d3c600000 RDI: 0000000000000004 [ 1647.118347][T28342] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000001f7 [ 1647.126383][T28342] R10: 00000000000001ce R11: 0000000000000293 R12: 0000000000000004 [ 1647.134401][T28342] R13: 00007f2d46fa8f3c R14: 00007f2d46fa8f40 R15: 00007f2d3c600000 [ 1647.142427][T28342] [ 1647.145891][T28344] CPU: 1 PID: 28344 Comm: syz-executor.4 Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 1647.156024][T28344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1647.166125][T28344] Call Trace: [ 1647.169425][T28344] [ 1647.172368][T28344] dump_stack_lvl+0x1e7/0x2d0 [ 1647.177084][T28344] ? nf_tcp_handle_invalid+0x650/0x650 [ 1647.182568][T28344] ? panic+0x850/0x850 [ 1647.186667][T28344] should_fail_ex+0x3aa/0x4e0 [ 1647.191370][T28344] copy_page_from_iter_atomic+0x27b/0x1e80 [ 1647.197234][T28344] ? shmem_get_folio+0xa0/0xa0 [ 1647.202048][T28344] ? print_irqtrace_events+0x220/0x220 [ 1647.207538][T28344] ? iov_iter_zero+0x1b60/0x1b60 [ 1647.212520][T28344] ? shmem_write_begin+0x23f/0x4c0 [ 1647.217656][T28344] ? shmem_writepage+0x18f0/0x18f0 [ 1647.222788][T28344] ? fault_in_iov_iter_readable+0x229/0x280 [ 1647.228707][T28344] generic_perform_write+0x392/0x630 [ 1647.234029][T28344] ? generic_file_direct_write+0x3f0/0x3f0 [ 1647.239865][T28344] ? generic_write_checks_count+0x490/0x490 [ 1647.245788][T28344] ? rcu_read_lock_any_held+0xb7/0x160 [ 1647.251283][T28344] ? file_update_time+0x2a3/0x3e0 [ 1647.256335][T28344] shmem_file_write_iter+0xfc/0x120 [ 1647.261559][T28344] vfs_write+0x783/0xaf0 [ 1647.265831][T28344] ? kernel_write+0x330/0x330 [ 1647.270530][T28344] ? __fget_files+0x3f4/0x470 [ 1647.275235][T28344] ? __fdget_pos+0x1a1/0x320 [ 1647.279855][T28344] ksys_write+0x1a0/0x2c0 [ 1647.284210][T28344] ? __ia32_sys_read+0x90/0x90 [ 1647.288994][T28344] ? exc_page_fault+0x587/0x870 [ 1647.293862][T28344] ? do_syscall_64+0xb4/0x230 [ 1647.298572][T28344] do_syscall_64+0xf5/0x230 [ 1647.303105][T28344] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1647.309023][T28344] RIP: 0033:0x7f3e7da7ba6f [ 1647.313451][T28344] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 1647.333079][T28344] RSP: 002b:00007f3e7e749e70 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1647.341522][T28344] RAX: ffffffffffffffda RBX: 0000000000100000 RCX: 00007f3e7da7ba6f [ 1647.349529][T28344] RDX: 0000000000100000 RSI: 00007f3e73e00000 RDI: 0000000000000004 [ 1647.357542][T28344] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000074f [ 1647.365548][T28344] R10: 00000000000003bc R11: 0000000000000293 R12: 0000000000000004 [ 1647.373548][T28344] R13: 00007f3e7e749f3c R14: 00007f3e7e749f40 R15: 00007f3e73e00000 [ 1647.381560][T28344] [ 1647.472911][T28342] loop1: detected capacity change from 0 to 128 [ 1647.615240][T28344] loop4: detected capacity change from 0 to 2048 [ 1647.653373][T28344] /dev/loop4: Can't open blockdev [ 1647.692475][T28348] FAULT_INJECTION: forcing a failure. [ 1647.692475][T28348] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1647.813235][T28348] CPU: 0 PID: 28348 Comm: syz-executor.0 Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 1647.823435][T28348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1647.833541][T28348] Call Trace: [ 1647.836865][T28348] [ 1647.839843][T28348] dump_stack_lvl+0x1e7/0x2d0 [ 1647.844613][T28348] ? nf_tcp_handle_invalid+0x650/0x650 [ 1647.850153][T28348] ? panic+0x850/0x850 [ 1647.854283][T28348] ? validate_chain+0x11c/0x5ab0 [ 1647.859291][T28348] should_fail_ex+0x3aa/0x4e0 [ 1647.864035][T28348] prepare_alloc_pages+0x1d9/0x5b0 [ 1647.869221][T28348] __alloc_pages+0x165/0x680 [ 1647.873877][T28348] ? zone_statistics+0x170/0x170 [ 1647.878897][T28348] ? policy_nodemask+0x1ec/0x720 [ 1647.883913][T28348] alloc_pages_mpol+0x3de/0x640 [ 1647.888849][T28348] ? mempolicy_in_oom_domain+0x130/0x130 [ 1647.894537][T28348] ? xas_load+0x11e/0x140 [ 1647.898937][T28348] ? mpol_shared_policy_lookup+0x148/0x1e0 [ 1647.904823][T28348] shmem_alloc_and_add_folio+0x24f/0xde0 [ 1647.910543][T28348] ? put_swap_device+0x250/0x250 [ 1647.915608][T28348] shmem_get_folio_gfp+0x7c3/0x1ee0 [ 1647.920912][T28348] ? shmem_get_folio+0xa0/0xa0 [ 1647.925734][T28348] ? print_irqtrace_events+0x220/0x220 [ 1647.931258][T28348] ? fault_in_readable+0x1a6/0x2b0 [ 1647.936547][T28348] shmem_write_begin+0x170/0x4c0 [ 1647.941551][T28348] ? shmem_writepage+0x18f0/0x18f0 [ 1647.946718][T28348] ? fault_in_iov_iter_readable+0x229/0x280 [ 1647.952660][T28348] generic_perform_write+0x31b/0x630 [ 1647.958005][T28348] ? ktime_get_coarse_real_ts64+0x10b/0x120 [ 1647.963963][T28348] ? generic_file_direct_write+0x3f0/0x3f0 [ 1647.969835][T28348] ? generic_write_checks_count+0x490/0x490 [ 1647.975777][T28348] ? rcu_read_lock_any_held+0xb7/0x160 [ 1647.981278][T28348] ? file_update_time+0x2a3/0x3e0 [ 1647.986395][T28348] shmem_file_write_iter+0xfc/0x120 [ 1647.991640][T28348] vfs_write+0x783/0xaf0 [ 1647.995944][T28348] ? kernel_write+0x330/0x330 [ 1648.000674][T28348] ? __fget_files+0x3f4/0x470 [ 1648.005497][T28348] ? __fdget_pos+0x1a1/0x320 [ 1648.010141][T28348] ksys_write+0x1a0/0x2c0 [ 1648.014513][T28348] ? __ia32_sys_read+0x90/0x90 [ 1648.019331][T28348] ? exc_page_fault+0x587/0x870 [ 1648.024240][T28348] ? do_syscall_64+0xb4/0x230 [ 1648.028957][T28348] do_syscall_64+0xf5/0x230 [ 1648.033507][T28348] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1648.039425][T28348] RIP: 0033:0x7f6cf647ba6f [ 1648.043856][T28348] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 1648.063503][T28348] RSP: 002b:00007f6cf71f0e70 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1648.071974][T28348] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007f6cf647ba6f [ 1648.079972][T28348] RDX: 0000000000080000 RSI: 00007f6cec800000 RDI: 0000000000000004 [ 1648.087957][T28348] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000005c8 [ 1648.095958][T28348] R10: 00000000200006c2 R11: 0000000000000293 R12: 0000000000000004 [ 1648.103966][T28348] R13: 00007f6cf71f0f3c R14: 00007f6cf71f0f40 R15: 00007f6cec800000 [ 1648.111977][T28348] 10:34:00 executing program 1: syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1fd, &(0x7f00000002c0)="$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") (fail_nth: 35) 10:34:00 executing program 5: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000380), 0x4000, 0x0) [ 1648.219391][T28347] loop3: detected capacity change from 0 to 8192 10:34:00 executing program 4: syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000800), 0x1, 0x755, &(0x7f0000000840)="$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") (fail_nth: 34) [ 1648.415564][T28353] FAULT_INJECTION: forcing a failure. [ 1648.415564][T28353] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1648.483379][T28355] FAULT_INJECTION: forcing a failure. [ 1648.483379][T28355] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1648.510257][T28353] CPU: 0 PID: 28353 Comm: syz-executor.1 Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 1648.520497][T28353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1648.530602][T28353] Call Trace: [ 1648.533927][T28353] [ 1648.536896][T28353] dump_stack_lvl+0x1e7/0x2d0 [ 1648.541643][T28353] ? nf_tcp_handle_invalid+0x650/0x650 [ 1648.547172][T28353] ? panic+0x850/0x850 [ 1648.551399][T28353] should_fail_ex+0x3aa/0x4e0 [ 1648.556135][T28353] prepare_alloc_pages+0x1d9/0x5b0 [ 1648.561307][T28353] __alloc_pages+0x165/0x680 [ 1648.565949][T28353] ? zone_statistics+0x170/0x170 [ 1648.570947][T28353] ? policy_nodemask+0x1ec/0x720 [ 1648.575948][T28353] alloc_pages_mpol+0x3de/0x640 10:34:00 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000680), 0x1, 0x5ce, &(0x7f00000006c0)="$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") (fail_nth: 29) [ 1648.580884][T28353] ? mempolicy_in_oom_domain+0x130/0x130 [ 1648.586578][T28353] ? xas_load+0x12c/0x140 [ 1648.590970][T28353] ? mpol_shared_policy_lookup+0x148/0x1e0 [ 1648.596823][T28353] shmem_alloc_and_add_folio+0x24f/0xde0 [ 1648.602525][T28353] ? put_swap_device+0x250/0x250 [ 1648.607526][T28353] ? __lock_acquire+0x1345/0x1fd0 [ 1648.612661][T28353] shmem_get_folio_gfp+0x7c3/0x1ee0 [ 1648.617959][T28353] ? shmem_get_folio+0xa0/0xa0 [ 1648.622792][T28353] ? print_unlock_imbalance_bug+0x2c0/0x2c0 [ 1648.628746][T28353] ? fault_in_readable+0x1a6/0x2b0 [ 1648.633904][T28353] shmem_write_begin+0x170/0x4c0 [ 1648.638908][T28353] ? shmem_writepage+0x18f0/0x18f0 [ 1648.644084][T28353] ? fault_in_iov_iter_readable+0x229/0x280 [ 1648.650042][T28353] generic_perform_write+0x31b/0x630 [ 1648.655407][T28353] ? generic_file_direct_write+0x3f0/0x3f0 [ 1648.661265][T28353] ? preempt_count_add+0x93/0x190 [ 1648.666336][T28353] ? mnt_put_write_access_file+0xbb/0x100 [ 1648.672096][T28353] ? file_update_time+0x3a6/0x3e0 [ 1648.677179][T28353] shmem_file_write_iter+0xfc/0x120 [ 1648.682426][T28353] vfs_write+0x783/0xaf0 [ 1648.686722][T28353] ? kernel_write+0x330/0x330 [ 1648.691454][T28353] ? __fget_files+0x3f4/0x470 [ 1648.696197][T28353] ? __fdget_pos+0x1a1/0x320 [ 1648.700872][T28353] ksys_write+0x1a0/0x2c0 [ 1648.705276][T28353] ? __ia32_sys_read+0x90/0x90 [ 1648.710097][T28353] ? exc_page_fault+0x587/0x870 [ 1648.715000][T28353] ? do_syscall_64+0xb4/0x230 [ 1648.719739][T28353] do_syscall_64+0xf5/0x230 [ 1648.724315][T28353] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1648.730268][T28353] RIP: 0033:0x7f2d4627ba6f [ 1648.734722][T28353] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 1648.754389][T28353] RSP: 002b:00007f2d46fa8e70 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1648.762856][T28353] RAX: ffffffffffffffda RBX: 0000000000010000 RCX: 00007f2d4627ba6f [ 1648.770874][T28353] RDX: 0000000000010000 RSI: 00007f2d3c600000 RDI: 0000000000000004 [ 1648.778892][T28353] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000001f7 [ 1648.786908][T28353] R10: 00000000000001ce R11: 0000000000000293 R12: 0000000000000004 [ 1648.794931][T28353] R13: 00007f2d46fa8f3c R14: 00007f2d46fa8f40 R15: 00007f2d3c600000 [ 1648.802974][T28353] [ 1648.853923][T28355] CPU: 1 PID: 28355 Comm: syz-executor.4 Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 1648.864084][T28355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1648.874189][T28355] Call Trace: [ 1648.877506][T28355] [ 1648.880469][T28355] dump_stack_lvl+0x1e7/0x2d0 [ 1648.885221][T28355] ? nf_tcp_handle_invalid+0x650/0x650 [ 1648.890754][T28355] ? panic+0x850/0x850 [ 1648.894903][T28355] should_fail_ex+0x3aa/0x4e0 [ 1648.899653][T28355] prepare_alloc_pages+0x1d9/0x5b0 [ 1648.904831][T28355] __alloc_pages+0x165/0x680 [ 1648.909482][T28355] ? zone_statistics+0x170/0x170 [ 1648.914476][T28355] ? policy_nodemask+0x1ec/0x720 [ 1648.919468][T28355] alloc_pages_mpol+0x3de/0x640 [ 1648.924389][T28355] ? mempolicy_in_oom_domain+0x130/0x130 [ 1648.930088][T28355] ? xas_load+0x11e/0x140 [ 1648.934471][T28355] ? mpol_shared_policy_lookup+0x148/0x1e0 [ 1648.940332][T28355] shmem_alloc_and_add_folio+0x24f/0xde0 [ 1648.946052][T28355] ? put_swap_device+0x250/0x250 [ 1648.951048][T28355] ? __lock_acquire+0x1345/0x1fd0 [ 1648.956126][T28355] shmem_get_folio_gfp+0x7c3/0x1ee0 [ 1648.961413][T28355] ? shmem_get_folio+0xa0/0xa0 [ 1648.966253][T28355] ? print_unlock_imbalance_bug+0x2c0/0x2c0 [ 1648.972211][T28355] ? fault_in_readable+0x1a6/0x2b0 [ 1648.977388][T28355] shmem_write_begin+0x170/0x4c0 [ 1648.982401][T28355] ? shmem_writepage+0x18f0/0x18f0 [ 1648.987587][T28355] ? fault_in_iov_iter_readable+0x229/0x280 [ 1648.993552][T28355] generic_perform_write+0x31b/0x630 [ 1648.998919][T28355] ? generic_file_direct_write+0x3f0/0x3f0 [ 1649.004793][T28355] ? preempt_count_add+0x93/0x190 [ 1649.009879][T28355] ? mnt_put_write_access_file+0xbb/0x100 [ 1649.015644][T28355] ? file_update_time+0x3a6/0x3e0 [ 1649.020726][T28355] shmem_file_write_iter+0xfc/0x120 [ 1649.026016][T28355] vfs_write+0x783/0xaf0 [ 1649.030337][T28355] ? kernel_write+0x330/0x330 [ 1649.035078][T28355] ? __fget_files+0x3f4/0x470 [ 1649.039797][T28355] ? __fdget_pos+0x1a1/0x320 [ 1649.044461][T28355] ksys_write+0x1a0/0x2c0 [ 1649.048869][T28355] ? __ia32_sys_read+0x90/0x90 [ 1649.053682][T28355] ? exc_page_fault+0x587/0x870 [ 1649.058562][T28355] ? do_syscall_64+0xb4/0x230 [ 1649.063271][T28355] do_syscall_64+0xf5/0x230 [ 1649.067807][T28355] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1649.073746][T28355] RIP: 0033:0x7f3e7da7ba6f [ 1649.078204][T28355] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 1649.097843][T28355] RSP: 002b:00007f3e7e749e70 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1649.106333][T28355] RAX: ffffffffffffffda RBX: 0000000000100000 RCX: 00007f3e7da7ba6f [ 1649.114339][T28355] RDX: 0000000000100000 RSI: 00007f3e73e00000 RDI: 0000000000000004 [ 1649.122336][T28355] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000074f [ 1649.130350][T28355] R10: 00000000000003bc R11: 0000000000000293 R12: 0000000000000004 [ 1649.138335][T28355] R13: 00007f3e7e749f3c R14: 00007f3e7e749f40 R15: 00007f3e73e00000 [ 1649.146338][T28355] [ 1649.178173][T28358] FAULT_INJECTION: forcing a failure. [ 1649.178173][T28358] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1649.193145][T28358] CPU: 1 PID: 28358 Comm: syz-executor.0 Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 1649.203263][T28358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1649.213372][T28358] Call Trace: [ 1649.216697][T28358] [ 1649.219667][T28358] dump_stack_lvl+0x1e7/0x2d0 [ 1649.224507][T28358] ? nf_tcp_handle_invalid+0x650/0x650 [ 1649.230037][T28358] ? panic+0x850/0x850 [ 1649.234173][T28358] should_fail_ex+0x3aa/0x4e0 [ 1649.238916][T28358] copy_page_from_iter_atomic+0x27b/0x1e80 [ 1649.244784][T28358] ? shmem_get_folio+0xa0/0xa0 [ 1649.249601][T28358] ? print_unlock_imbalance_bug+0x2c0/0x2c0 [ 1649.255561][T28358] ? iov_iter_zero+0x1b60/0x1b60 [ 1649.260550][T28358] ? shmem_write_begin+0x23f/0x4c0 [ 1649.265719][T28358] ? shmem_writepage+0x18f0/0x18f0 [ 1649.270899][T28358] ? fault_in_iov_iter_readable+0x229/0x280 [ 1649.276862][T28358] generic_perform_write+0x392/0x630 [ 1649.282231][T28358] ? generic_file_direct_write+0x3f0/0x3f0 [ 1649.288107][T28358] ? preempt_count_add+0x93/0x190 [ 1649.293206][T28358] ? mnt_put_write_access_file+0xbb/0x100 [ 1649.298974][T28358] ? file_update_time+0x3a6/0x3e0 [ 1649.304102][T28358] shmem_file_write_iter+0xfc/0x120 [ 1649.309371][T28358] vfs_write+0x783/0xaf0 [ 1649.313679][T28358] ? kernel_write+0x330/0x330 [ 1649.318420][T28358] ? __fget_files+0x3f4/0x470 [ 1649.323172][T28358] ? __fdget_pos+0x1a1/0x320 [ 1649.327821][T28358] ksys_write+0x1a0/0x2c0 [ 1649.332209][T28358] ? __ia32_sys_read+0x90/0x90 [ 1649.337018][T28358] ? exc_page_fault+0x587/0x870 [ 1649.341913][T28358] ? do_syscall_64+0xb4/0x230 [ 1649.346822][T28358] do_syscall_64+0xf5/0x230 [ 1649.351395][T28358] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1649.357349][T28358] RIP: 0033:0x7f6cf647ba6f [ 1649.361814][T28358] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 1649.381478][T28358] RSP: 002b:00007f6cf71f0e70 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1649.389949][T28358] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007f6cf647ba6f [ 1649.397968][T28358] RDX: 0000000000080000 RSI: 00007f6cec800000 RDI: 0000000000000004 [ 1649.405988][T28358] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000005c8 [ 1649.413994][T28358] R10: 00000000200006c2 R11: 0000000000000293 R12: 0000000000000004 [ 1649.422006][T28358] R13: 00007f6cf71f0f3c R14: 00007f6cf71f0f40 R15: 00007f6cec800000 [ 1649.430035][T28358] 10:34:01 executing program 5: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x402, 0x0) syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x1000008, &(0x7f0000000280)={[{@datacow}, {@clear_cache}, {@nodatasum}, {@rescan_uuid_tree}, {}, {@space_cache_v1}]}, 0xfe, 0x51ab, &(0x7f0000005280)="$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") r0 = open(&(0x7f0000000000)='./bus\x00', 0x4c37e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) sendfile(r0, r0, 0x0, 0x8800000) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000001180)={{0x0, 0x8ffa, 0x1, 0x20, 0x3, 0x0, 0x2, 0x1000, 0x8, 0x100, 0xfffffff8, 0x0, 0x8, 0x4, 0x4}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f00000000c0)={{r1, 0x0, 0x9, 0x5, 0x1, 0x0, 0x3, 0xffff, 0x3, 0x0, 0x3, 0x9, 0x7fffffffffffffff, 0x5, 0x2428}, 0x20, [0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/cipso\x00', 0x2, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x4c37e, 0x0) 10:34:01 executing program 2: syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@uid={'uid', 0x3d, 0xffffffffffffffff}}]}) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) 10:34:01 executing program 4: syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000800), 0x1, 0x755, &(0x7f0000000840)="$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") (fail_nth: 35) [ 1649.574240][T28365] loop4: detected capacity change from 0 to 2048 [ 1649.659160][T28365] /dev/loop4: Can't open blockdev [ 1649.781180][T28358] loop0: detected capacity change from 0 to 1024 10:34:02 executing program 3: syz_mount_image$reiserfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x800c, &(0x7f0000000300)=ANY=[], 0xfd, 0x111f, &(0x7f0000002300)="$eJzs2LFuEzEcBvDPl1AagXQo3U8MDAyoKgoz0AGkrKywAOpEp2YCMeRhWNh4EOjEXnWHoU9wKLmmJ6QqgFo6wO8nRXb+/ny2RzsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwMEy+lWSrSsarWpWkJE1zOD1O0qzqtz4PqpQ825vOnhxMns66WKqU50lZzEr5+LDLTsaT8f3xg63dO19mb9+9ebm/v3ewHHh1o6TJ0cmlnmKU070M1oQWG9w8SwMAAMD/o72w+vcW+nTzL60PAAAA/MrlviYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/Lm27vsbq06VpCRNczg9TtKcM+/aFe0PAAAAuLiSKi/q8+rdM0DvXr7W5azedh5V2cmHOqNlZNinq3WLrh0EAACAf157fdncTpn31+SyUeare/fdDPv6MjnM9nb3/7TJ991kkPnmzs/fHj1OcnTy/vXiV9rBFR0JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAf7MCxAAAAAIAwf+s0OjYAAAAAAAAAAAAAAAAAAAAAAAAAAAC+CgAA//8sud4B") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000010c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x183c3, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r1 = open(&(0x7f0000000400)='./file2\x00', 0xe4841, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/netfilter\x00') fcntl$notify(r2, 0x402, 0x0) getdents(0xffffffffffffffff, 0xffffffffffffffff, 0x18) ftruncate(r1, 0x8fae) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x307e00}], 0x1, 0x1400, 0xd600, 0x3) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a424ac, &(0x7f0000000440)=ANY=[@ANYBLOB="14270e2d25cccff078b9140e8a1e19f3b4c3bd09968dd1911acef24321d764d9e117da79063a62e3a592fb42f7d9ddb2682b4c2ff580e25fa8effbd53acfb0f870bc1e49d01a5b7ff55150d2bf3b042858c5325c2b569b320cd44e49e246cc1e41f04d2e494added5aa4750b7cf26f856bf23cb379531ebae1774af8a495092c8904205db190366875aa90aff0d11bf44f064c23390e88562d041e505362f5bfb0665c3fafda909f59ad286ee9bd87d5aa098dc5b81ee34cbf59bfa765c1c96e7fb557cb1443f3dceea44c963e0c9347545e4ff353bf8b9023cf81d78673a0f6363e5cc2b0d524d291e28fc28a2767ae804a98b34b648f0ba6edf510da09034a270f6b3a294a4f49d5ed571db0e0d8307c99a953a8175c2e1151a065a9dd6f262df38234a5a0e4888628fe124e56fae3b1c2abbf83fcb631bc0dc708d15d9252b9efe266f9bfe1a92f40414077e9b6851815491ea64ec4817e4f74d5caa1794d94838ee8dcfe64c7daf986e606daab9661f7d67898198dc5b2db3c9af129794d1e1184b65a7d446a60172f81b815c8f49cb6780cffb336f9af74e4ca4644346cb351b87c31a53d00d218d85ae8c0754a1adcd268b7f8dad21656ab6d08dbbba39f45dfac26de1ebdd4b3b1fbf23c38bc24bd5a6387807e0d97261292b78fe39171504ee71d59d4d00c20be451329c583040ec38a8ba28e654c8ec0b18b6b9c699edb040de22242d038e363d624ce076abe17bacf35d84975035c063a8958c47bb900887451e4932f7a391a8feea319577a68f265319ccfcade5e7dc56ade8312efb597e885d4d1b41d27dc2657bb344941d42e68ce72e06d82643a61571d025ce907b780707157984287ff2ba18a9f70d534a19bb6835725d6538e03f7e77701be3626172f3de7545c9cd13f1287a261380e797c0b8b89a1df32bc6d837e5a056fd2de70b2502d518354f69f82b38d72959d86635c2679d131e007bbac425b8b59f4d5b27edf6f6203cfaa59ba01c4b589b0ced7f92562b54d1735dac972a13887c0a5a4342e27a31fe1ec3c9019ec71144bcfca22203e891a1f2c2430054ddbdd278e04e4150388f3dc6b99627cb24dc0e58059c5a4126b6f47b2f87c1f5788eeaa4e802d468d9a51a24a5985af12573dce3ac56ce8539a75130cbfc4c18aad514dd2c1e9d0b0ef2436e99539061e84f83d1cb39dcc8a776ac8e017b0d870a1ffe845bd47d4ba4451f29f", @ANYRES8, @ANYRESHEX, @ANYRES64, @ANYRESOCT, @ANYRESHEX, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="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", @ANYRES64], 0xfe, 0x0, &(0x7f0000000000)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x2007fff) 10:34:02 executing program 1: syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1fd, &(0x7f00000002c0)="$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") (fail_nth: 36) 10:34:02 executing program 2: mknodat(0xffffffffffffffff, 0x0, 0x8000, 0x0) 10:34:02 executing program 4: syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000800), 0x1, 0x755, &(0x7f0000000840)="$eJzs3U9oHNUfAPDvzO4m/ff7JRUPVkQLoi2oSdOKpOKhET0oHgR7ES8uzbbUbv/QRLRFMLnrTbypVPCqCJ70Unrw4s2bV08SDaI9eIzMZDZZm938MbsddT4fmOS9ebt5b7J8583Oe8wLoLIOZz/SiEMRsZBEjBX7k4ho5Kl6xKnV193+7Z0z2ZbEysorvyb5a7J8dL0ns794256I+P5WEvfUNtY7d+36hWa73bpa5CfnL16ZnLt2/YnzF5vnWudal6amT06fmD5+8qnpgR3rCx998urSxy8+uvj+GzNfv/bz70mcigNFWfdxDMrhOLz2P+lWj4jnBl1ZSWrF8aRd+5J6iQ1iR9Kuz/C+GItarH94Y3Hrq1IbBwAMxUq2AQAVk+j/AaBiOvcBOmN7wxgHA/6ZlmciH6jfGP/1OJX/3pPPA9h3O4nuYd2kM3dgl7K/8cu3X3yWbTGkcXigt4XFfOC/R/wnefyP57N4NsZ/LaI4P+zOnecQ8Q93z27i/+UB1C/+AQAAAAAAYHBuzkTEdK/xv3Rt/k/0GP8bjYhjA6h/6/G/dGkA1QA9LM9EPNNz/u/aE13Ga0Xuf/l8gEZy9ny7lcX+/yPiaDRGs/zUJnV899aPz/Yr657/l21Z/Z25gEU7luqjf33PbHO+uZtjBlYtL0bcX+8//yfr/5M+839f32YdX374+SP9yraOf2BYVm5EHOnZ/68/uS7Z/Pl8k/n1wGTnqmCjB5+/8Ue/+sU/lCfr//dtHv/jSffzOud2Xsen751+oF/Z373+H0lO508VHSn2vd2cn786FTGSvLRx//Gdtxn+izrx0ImXLP6PPrz5/b9e1/+NiLiyzTqnDnzzeL8y/T+UJ4v/2R31/ztPnHv3xIV+9W+v/38y79OPFnvc/4PNbTdAy24nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMUhoRByJJJ9bSaToxEbE/Iu6NfWn78tz8Y2cvv3lpNiuLGI9GevZ8u3UsIsZW80mWn8rT6/njd+RPRMTBiPhgdG+enzhzuT1b9sEDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQGF/n/X/Mz+Nlt06AGBo9pTdAADgrtP/A0D16P8BoHr0/wBQPfp/AKge/T8AAAAAAAAAAAAAAAAAAAAAAAAADNXBh27+kETEwtN78y0zUpQ1Sm0ZMGxp2Q0ASlMruwFAaeplNwAoje/4QLJFef8lQtxBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgOo4csv4/VJXV+6C6rP8P1WX9f6gu3/EB6/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDW5q5dv9Bst1tXJSQkJNYSZZ+ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4N/gzAAD//+MUMFo=") (fail_nth: 36) [ 1650.174338][T28373] FAULT_INJECTION: forcing a failure. [ 1650.174338][T28373] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1650.187810][T28373] CPU: 1 PID: 28373 Comm: syz-executor.4 Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 1650.197932][T28373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1650.208044][T28373] Call Trace: [ 1650.211369][T28373] [ 1650.214346][T28373] dump_stack_lvl+0x1e7/0x2d0 [ 1650.219099][T28373] ? nf_tcp_handle_invalid+0x650/0x650 [ 1650.224618][T28373] ? panic+0x850/0x850 [ 1650.228759][T28373] should_fail_ex+0x3aa/0x4e0 [ 1650.233499][T28373] copy_page_from_iter_atomic+0x27b/0x1e80 [ 1650.239374][T28373] ? shmem_get_folio+0xa0/0xa0 [ 1650.244205][T28373] ? iov_iter_zero+0x1b60/0x1b60 [ 1650.249202][T28373] ? shmem_write_begin+0x23f/0x4c0 [ 1650.254362][T28373] ? shmem_writepage+0x18f0/0x18f0 [ 1650.259505][T28373] ? fault_in_iov_iter_readable+0x229/0x280 [ 1650.265433][T28373] generic_perform_write+0x392/0x630 [ 1650.270780][T28373] ? generic_file_direct_write+0x3f0/0x3f0 [ 1650.276613][T28373] ? generic_write_checks_count+0x490/0x490 [ 1650.282516][T28373] ? rcu_read_lock_any_held+0xb7/0x160 [ 1650.288082][T28373] ? file_update_time+0x2a3/0x3e0 [ 1650.293128][T28373] shmem_file_write_iter+0xfc/0x120 [ 1650.298348][T28373] vfs_write+0x783/0xaf0 [ 1650.302621][T28373] ? kernel_write+0x330/0x330 [ 1650.307321][T28373] ? __fget_files+0x3f4/0x470 [ 1650.312040][T28373] ? __fdget_pos+0x1a1/0x320 [ 1650.316661][T28373] ksys_write+0x1a0/0x2c0 [ 1650.321029][T28373] ? __ia32_sys_read+0x90/0x90 [ 1650.325817][T28373] ? exc_page_fault+0x587/0x870 [ 1650.330686][T28373] ? do_syscall_64+0xb4/0x230 [ 1650.335391][T28373] do_syscall_64+0xf5/0x230 [ 1650.339927][T28373] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1650.345838][T28373] RIP: 0033:0x7f3e7da7ba6f [ 1650.350268][T28373] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 10:34:02 executing program 2: syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x0, &(0x7f0000000280)={[{@inode64}, {@gqnoenforce}, {@largeio}]}, 0xff, 0x96cb, &(0x7f0000012ec0)="$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") r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdirat(r0, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', r1, &(0x7f00000002c0)='./file0\x00', 0x0) [ 1650.369891][T28373] RSP: 002b:00007f3e7e749e70 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1650.378326][T28373] RAX: ffffffffffffffda RBX: 0000000000100000 RCX: 00007f3e7da7ba6f [ 1650.386311][T28373] RDX: 0000000000100000 RSI: 00007f3e73e00000 RDI: 0000000000000004 [ 1650.394294][T28373] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000074f [ 1650.402280][T28373] R10: 00000000000003bc R11: 0000000000000293 R12: 0000000000000004 [ 1650.410268][T28373] R13: 00007f3e7e749f3c R14: 00007f3e7e749f40 R15: 00007f3e73e00000 [ 1650.418274][T28373] [ 1650.519095][T28376] FAULT_INJECTION: forcing a failure. [ 1650.519095][T28376] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1650.532510][T28376] CPU: 1 PID: 28376 Comm: syz-executor.1 Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 1650.542626][T28376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1650.552770][T28376] Call Trace: [ 1650.556084][T28376] [ 1650.559051][T28376] dump_stack_lvl+0x1e7/0x2d0 [ 1650.563815][T28376] ? nf_tcp_handle_invalid+0x650/0x650 [ 1650.569340][T28376] ? panic+0x850/0x850 [ 1650.573477][T28376] should_fail_ex+0x3aa/0x4e0 [ 1650.578228][T28376] copy_page_from_iter_atomic+0x27b/0x1e80 [ 1650.584126][T28376] ? shmem_get_folio+0xa0/0xa0 [ 1650.588970][T28376] ? iov_iter_zero+0x1b60/0x1b60 [ 1650.593972][T28376] ? shmem_write_begin+0x23f/0x4c0 [ 1650.599158][T28376] ? shmem_writepage+0x18f0/0x18f0 [ 1650.604359][T28376] ? fault_in_iov_iter_readable+0x229/0x280 [ 1650.610323][T28376] generic_perform_write+0x392/0x630 [ 1650.615696][T28376] ? generic_file_direct_write+0x3f0/0x3f0 [ 1650.621581][T28376] ? generic_write_checks_count+0x490/0x490 [ 1650.627546][T28376] ? rcu_read_lock_any_held+0xb7/0x160 [ 1650.633063][T28376] ? file_update_time+0x2a3/0x3e0 [ 1650.638152][T28376] shmem_file_write_iter+0xfc/0x120 [ 1650.643429][T28376] vfs_write+0x783/0xaf0 [ 1650.647756][T28376] ? kernel_write+0x330/0x330 [ 1650.652503][T28376] ? __fget_files+0x3f4/0x470 [ 1650.657263][T28376] ? __fdget_pos+0x1a1/0x320 [ 1650.661936][T28376] ksys_write+0x1a0/0x2c0 [ 1650.666347][T28376] ? __ia32_sys_read+0x90/0x90 [ 1650.671168][T28376] ? exc_page_fault+0x587/0x870 [ 1650.676085][T28376] ? do_syscall_64+0xb4/0x230 [ 1650.680831][T28376] do_syscall_64+0xf5/0x230 [ 1650.685402][T28376] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1650.691475][T28376] RIP: 0033:0x7f2d4627ba6f [ 1650.695939][T28376] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 1650.715595][T28376] RSP: 002b:00007f2d46fa8e70 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1650.724077][T28376] RAX: ffffffffffffffda RBX: 0000000000010000 RCX: 00007f2d4627ba6f [ 1650.732134][T28376] RDX: 0000000000010000 RSI: 00007f2d3c600000 RDI: 0000000000000004 [ 1650.733014][T28373] loop4: detected capacity change from 0 to 2048 [ 1650.740140][T28376] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000001f7 [ 1650.740160][T28376] R10: 00000000000001ce R11: 0000000000000293 R12: 0000000000000004 10:34:03 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000680), 0x1, 0x5ce, &(0x7f00000006c0)="$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") (fail_nth: 30) [ 1650.740175][T28376] R13: 00007f2d46fa8f3c R14: 00007f2d46fa8f40 R15: 00007f2d3c600000 [ 1650.740210][T28376] [ 1650.980616][T28376] loop1: detected capacity change from 0 to 128 [ 1651.009707][T28373] /dev/loop4: Can't open blockdev [ 1651.021656][T28383] FAULT_INJECTION: forcing a failure. [ 1651.021656][T28383] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1651.085502][T28383] CPU: 0 PID: 28383 Comm: syz-executor.0 Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 1651.095649][T28383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1651.105752][T28383] Call Trace: [ 1651.109067][T28383] [ 1651.112029][T28383] dump_stack_lvl+0x1e7/0x2d0 [ 1651.116764][T28383] ? nf_tcp_handle_invalid+0x650/0x650 [ 1651.122270][T28383] ? panic+0x850/0x850 [ 1651.126391][T28383] should_fail_ex+0x3aa/0x4e0 [ 1651.131128][T28383] prepare_alloc_pages+0x1d9/0x5b0 [ 1651.136306][T28383] __alloc_pages+0x165/0x680 [ 1651.140951][T28383] ? zone_statistics+0x170/0x170 [ 1651.145949][T28383] ? policy_nodemask+0x1ec/0x720 [ 1651.150935][T28383] alloc_pages_mpol+0x3de/0x640 [ 1651.155834][T28383] ? mempolicy_in_oom_domain+0x130/0x130 [ 1651.161505][T28383] ? xas_load+0x11e/0x140 [ 1651.165884][T28383] ? mpol_shared_policy_lookup+0x148/0x1e0 [ 1651.171728][T28383] shmem_alloc_and_add_folio+0x24f/0xde0 [ 1651.178216][T28383] ? put_swap_device+0x250/0x250 [ 1651.183226][T28383] shmem_get_folio_gfp+0x7c3/0x1ee0 [ 1651.188511][T28383] ? shmem_get_folio+0xa0/0xa0 [ 1651.193342][T28383] ? fault_in_readable+0x1a6/0x2b0 [ 1651.198523][T28383] shmem_write_begin+0x170/0x4c0 [ 1651.203540][T28383] ? shmem_writepage+0x18f0/0x18f0 [ 1651.208729][T28383] ? fault_in_iov_iter_readable+0x229/0x280 [ 1651.214689][T28383] generic_perform_write+0x31b/0x630 [ 1651.220060][T28383] ? generic_file_direct_write+0x3f0/0x3f0 [ 1651.225921][T28383] ? generic_write_checks_count+0x490/0x490 [ 1651.231855][T28383] ? rcu_read_lock_any_held+0xb7/0x160 [ 1651.237372][T28383] ? file_update_time+0x2a3/0x3e0 [ 1651.242456][T28383] shmem_file_write_iter+0xfc/0x120 [ 1651.247717][T28383] vfs_write+0x783/0xaf0 [ 1651.252036][T28383] ? kernel_write+0x330/0x330 [ 1651.256773][T28383] ? __fget_files+0x3f4/0x470 [ 1651.261510][T28383] ? __fdget_pos+0x1a1/0x320 [ 1651.266154][T28383] ksys_write+0x1a0/0x2c0 [ 1651.270539][T28383] ? __ia32_sys_read+0x90/0x90 [ 1651.275350][T28383] ? exc_page_fault+0x587/0x870 [ 1651.280244][T28383] ? do_syscall_64+0xb4/0x230 [ 1651.285149][T28383] do_syscall_64+0xf5/0x230 [ 1651.290227][T28383] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1651.296157][T28383] RIP: 0033:0x7f6cf647ba6f [ 1651.300608][T28383] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 1651.320281][T28383] RSP: 002b:00007f6cf71f0e70 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1651.328733][T28383] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007f6cf647ba6f [ 1651.336746][T28383] RDX: 0000000000080000 RSI: 00007f6cec800000 RDI: 0000000000000004 [ 1651.344746][T28383] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000005c8 [ 1651.352749][T28383] R10: 00000000200006c2 R11: 0000000000000293 R12: 0000000000000004 [ 1651.360763][T28383] R13: 00007f6cf71f0f3c R14: 00007f6cf71f0f40 R15: 00007f6cec800000 [ 1651.368805][T28383] 10:34:03 executing program 1: syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1fd, &(0x7f00000002c0)="$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") (fail_nth: 37) 10:34:03 executing program 4: syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000800), 0x1, 0x755, &(0x7f0000000840)="$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") (fail_nth: 37) 10:34:03 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000680), 0x1, 0x5ce, &(0x7f00000006c0)="$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") (fail_nth: 31) [ 1651.892793][T28390] FAULT_INJECTION: forcing a failure. [ 1651.892793][T28390] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1651.926510][T28389] FAULT_INJECTION: forcing a failure. [ 1651.926510][T28389] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1651.970243][T28388] loop0: detected capacity change from 0 to 1024 [ 1651.994412][T28389] CPU: 1 PID: 28389 Comm: syz-executor.4 Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 1652.004568][T28389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1652.009666][T28382] loop3: detected capacity change from 0 to 8192 [ 1652.014643][T28389] Call Trace: [ 1652.014657][T28389] [ 1652.014668][T28389] dump_stack_lvl+0x1e7/0x2d0 [ 1652.031997][T28389] ? nf_tcp_handle_invalid+0x650/0x650 [ 1652.037523][T28389] ? panic+0x850/0x850 [ 1652.041661][T28389] should_fail_ex+0x3aa/0x4e0 [ 1652.046396][T28389] prepare_alloc_pages+0x1d9/0x5b0 [ 1652.051566][T28389] __alloc_pages+0x165/0x680 [ 1652.056210][T28389] ? zone_statistics+0x170/0x170 [ 1652.061203][T28389] ? policy_nodemask+0x1ec/0x720 [ 1652.066196][T28389] alloc_pages_mpol+0x3de/0x640 [ 1652.071110][T28389] ? mempolicy_in_oom_domain+0x130/0x130 [ 1652.076797][T28389] ? xas_load+0x12c/0x140 [ 1652.081199][T28389] ? mpol_shared_policy_lookup+0x148/0x1e0 [ 1652.087061][T28389] shmem_alloc_and_add_folio+0x24f/0xde0 [ 1652.092771][T28389] ? put_swap_device+0x250/0x250 [ 1652.097760][T28389] ? __lock_acquire+0x1345/0x1fd0 [ 1652.102838][T28389] shmem_get_folio_gfp+0x7c3/0x1ee0 [ 1652.108117][T28389] ? shmem_get_folio+0xa0/0xa0 [ 1652.112941][T28389] ? print_unlock_imbalance_bug+0x2c0/0x2c0 [ 1652.118889][T28389] ? fault_in_readable+0x1a6/0x2b0 [ 1652.124065][T28389] shmem_write_begin+0x170/0x4c0 [ 1652.129081][T28389] ? shmem_writepage+0x18f0/0x18f0 [ 1652.134255][T28389] ? fault_in_iov_iter_readable+0x229/0x280 [ 1652.140212][T28389] generic_perform_write+0x31b/0x630 [ 1652.145576][T28389] ? generic_file_direct_write+0x3f0/0x3f0 [ 1652.151433][T28389] ? preempt_count_add+0x93/0x190 [ 1652.156514][T28389] ? mnt_put_write_access_file+0xbb/0x100 [ 1652.162278][T28389] ? file_update_time+0x3a6/0x3e0 [ 1652.167358][T28389] shmem_file_write_iter+0xfc/0x120 [ 1652.172611][T28389] vfs_write+0x783/0xaf0 [ 1652.176904][T28389] ? kernel_write+0x330/0x330 [ 1652.181623][T28389] ? __fget_files+0x3f4/0x470 [ 1652.186362][T28389] ? __fdget_pos+0x1a1/0x320 [ 1652.191001][T28389] ksys_write+0x1a0/0x2c0 [ 1652.195378][T28389] ? __ia32_sys_read+0x90/0x90 [ 1652.200184][T28389] ? exc_page_fault+0x587/0x870 [ 1652.205086][T28389] ? do_syscall_64+0xb4/0x230 [ 1652.209816][T28389] do_syscall_64+0xf5/0x230 [ 1652.214371][T28389] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1652.220310][T28389] RIP: 0033:0x7f3e7da7ba6f [ 1652.224767][T28389] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 1652.244417][T28389] RSP: 002b:00007f3e7e749e70 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1652.252887][T28389] RAX: ffffffffffffffda RBX: 0000000000100000 RCX: 00007f3e7da7ba6f [ 1652.260907][T28389] RDX: 0000000000100000 RSI: 00007f3e73e00000 RDI: 0000000000000004 [ 1652.268926][T28389] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000074f [ 1652.276934][T28389] R10: 00000000000003bc R11: 0000000000000293 R12: 0000000000000004 [ 1652.284941][T28389] R13: 00007f3e7e749f3c R14: 00007f3e7e749f40 R15: 00007f3e73e00000 [ 1652.292967][T28389] [ 1652.328001][T28390] CPU: 0 PID: 28390 Comm: syz-executor.1 Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 1652.338147][T28390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1652.348340][T28390] Call Trace: [ 1652.351662][T28390] [ 1652.354631][T28390] dump_stack_lvl+0x1e7/0x2d0 [ 1652.359372][T28390] ? nf_tcp_handle_invalid+0x650/0x650 [ 1652.364881][T28390] ? panic+0x850/0x850 [ 1652.369011][T28390] should_fail_ex+0x3aa/0x4e0 [ 1652.373749][T28390] prepare_alloc_pages+0x1d9/0x5b0 [ 1652.378919][T28390] __alloc_pages+0x165/0x680 [ 1652.383572][T28390] ? zone_statistics+0x170/0x170 [ 1652.388578][T28390] ? policy_nodemask+0x1ec/0x720 [ 1652.393578][T28390] alloc_pages_mpol+0x3de/0x640 [ 1652.398479][T28390] ? mempolicy_in_oom_domain+0x130/0x130 [ 1652.404153][T28390] ? xas_load+0x12c/0x140 [ 1652.408526][T28390] ? mpol_shared_policy_lookup+0x148/0x1e0 [ 1652.414385][T28390] shmem_alloc_and_add_folio+0x24f/0xde0 [ 1652.420091][T28390] ? put_swap_device+0x250/0x250 [ 1652.425094][T28390] shmem_get_folio_gfp+0x7c3/0x1ee0 [ 1652.430360][T28390] ? shmem_get_folio+0xa0/0xa0 [ 1652.435182][T28390] ? fault_in_readable+0x1a6/0x2b0 [ 1652.440354][T28390] shmem_write_begin+0x170/0x4c0 [ 1652.445350][T28390] ? shmem_writepage+0x18f0/0x18f0 [ 1652.450512][T28390] ? fault_in_iov_iter_readable+0x229/0x280 [ 1652.456462][T28390] generic_perform_write+0x31b/0x630 [ 1652.461822][T28390] ? generic_file_direct_write+0x3f0/0x3f0 [ 1652.467689][T28390] ? generic_write_checks_count+0x490/0x490 [ 1652.473621][T28390] ? rcu_read_lock_any_held+0xb7/0x160 [ 1652.479133][T28390] ? file_update_time+0x2a3/0x3e0 [ 1652.484217][T28390] shmem_file_write_iter+0xfc/0x120 [ 1652.489476][T28390] vfs_write+0x783/0xaf0 [ 1652.493787][T28390] ? kernel_write+0x330/0x330 [ 1652.498526][T28390] ? __fget_files+0x3f4/0x470 [ 1652.503287][T28390] ? __fdget_pos+0x1a1/0x320 [ 1652.507944][T28390] ksys_write+0x1a0/0x2c0 [ 1652.512333][T28390] ? __ia32_sys_read+0x90/0x90 [ 1652.517148][T28390] ? exc_page_fault+0x587/0x870 [ 1652.522045][T28390] ? do_syscall_64+0xb4/0x230 [ 1652.526774][T28390] do_syscall_64+0xf5/0x230 [ 1652.531328][T28390] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1652.537264][T28390] RIP: 0033:0x7f2d4627ba6f [ 1652.541725][T28390] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 1652.561406][T28390] RSP: 002b:00007f2d46fa8e70 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1652.569877][T28390] RAX: ffffffffffffffda RBX: 0000000000010000 RCX: 00007f2d4627ba6f [ 1652.577892][T28390] RDX: 0000000000010000 RSI: 00007f2d3c600000 RDI: 0000000000000004 [ 1652.586076][T28390] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000001f7 [ 1652.594090][T28390] R10: 00000000000001ce R11: 0000000000000293 R12: 0000000000000004 [ 1652.602104][T28390] R13: 00007f2d46fa8f3c R14: 00007f2d46fa8f40 R15: 00007f2d3c600000 [ 1652.610137][T28390] 10:34:05 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001200)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f00000010c0)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) 10:34:05 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000680), 0x1, 0x5ce, &(0x7f00000006c0)="$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") (fail_nth: 32) 10:34:05 executing program 1: syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1fd, &(0x7f00000002c0)="$eJzs3D1rU18cB/Dzb/vvQ6QPk6CLB110uWh9BUFaEANKbUQdlFuaakhMSm7ARBw6O/k6iqObIL6Bvgu3IkinTkbapI9WXWyj5POBcL7hS+AcQsLvBnI3H759UVnJkpW0GYbGYxgKYS1shzCzk3r+661Du3k0HLYWrj1Nt97cf/T4Tr5QmFuIcT6/eHM2xjh16ePL1+8uf2qee/B+6sNY2Jh5svl19vPG+Y0Lm98Wn5ezWM5ird6MaVyq15vpUrUUl8tZJYnxXrWUZqVYrmWlxpF+pVpfXW3HtLY8mVttlLIsprV2rJTasVmPzUY7ps/Sci0mSRInc4HfKa4vLKT5fu+C09Vo5NPhEMLED01xvS8bAgD6yvw/yMz/g2Bn/s/1Pr9Hmf8BAAAAAAAAAAAAAOBfsN3pTHc6nem9de8xFkIYDyHsPe/3Pjkd3v/BduiPe+MhfFlrFVvF7trt528X5q7HXTMHr9pqtYrD+/2Nbh+P9v+HXK+fPbEfDVevdPud7tbdwrF+Iiyf/vEBAABgICRx34nX90nys76bDv0+cOz6fSRcHDmzYwAAAAC/kLVfVdJqtdQQBEHYD/3+ZgIAAP60g6G/3zsBAAAAAAAAAAAAAAAAAACAwXUWtxPr9xkBAAAAAAAAAAAAAAAAAAAAAADgb/E9AAD//xRs0OA=") (fail_nth: 38) [ 1653.267642][T28396] FAULT_INJECTION: forcing a failure. [ 1653.267642][T28396] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1653.282635][T28396] CPU: 1 PID: 28396 Comm: syz-executor.1 Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 1653.292770][T28396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1653.302876][T28396] Call Trace: [ 1653.306193][T28396] [ 1653.309163][T28396] dump_stack_lvl+0x1e7/0x2d0 [ 1653.313915][T28396] ? nf_tcp_handle_invalid+0x650/0x650 [ 1653.319436][T28396] ? panic+0x850/0x850 [ 1653.323578][T28396] should_fail_ex+0x3aa/0x4e0 [ 1653.328324][T28396] copy_page_from_iter_atomic+0x27b/0x1e80 [ 1653.334199][T28396] ? shmem_get_folio+0xa0/0xa0 [ 1653.339026][T28396] ? print_unlock_imbalance_bug+0x2c0/0x2c0 [ 1653.344981][T28396] ? iov_iter_zero+0x1b60/0x1b60 [ 1653.349976][T28396] ? shmem_write_begin+0x23f/0x4c0 [ 1653.355153][T28396] ? shmem_writepage+0x18f0/0x18f0 [ 1653.360338][T28396] ? fault_in_iov_iter_readable+0x229/0x280 [ 1653.366291][T28396] generic_perform_write+0x392/0x630 [ 1653.371660][T28396] ? generic_file_direct_write+0x3f0/0x3f0 [ 1653.377542][T28396] ? preempt_count_add+0x93/0x190 [ 1653.382633][T28396] ? mnt_put_write_access_file+0xbb/0x100 [ 1653.388407][T28396] ? file_update_time+0x3a6/0x3e0 [ 1653.393495][T28396] shmem_file_write_iter+0xfc/0x120 [ 1653.398757][T28396] vfs_write+0x783/0xaf0 [ 1653.403082][T28396] ? kernel_write+0x330/0x330 [ 1653.407839][T28396] ? __fget_files+0x3f4/0x470 [ 1653.412580][T28396] ? __fdget_pos+0x1a1/0x320 [ 1653.417227][T28396] ksys_write+0x1a0/0x2c0 [ 1653.421711][T28396] ? __ia32_sys_read+0x90/0x90 [ 1653.426540][T28396] ? exc_page_fault+0x587/0x870 [ 1653.431461][T28396] ? do_syscall_64+0xb4/0x230 [ 1653.436211][T28396] do_syscall_64+0xf5/0x230 [ 1653.440784][T28396] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1653.446721][T28396] RIP: 0033:0x7f2d4627ba6f [ 1653.451173][T28396] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 1653.470828][T28396] RSP: 002b:00007f2d46fa8e70 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1653.479301][T28396] RAX: ffffffffffffffda RBX: 0000000000010000 RCX: 00007f2d4627ba6f [ 1653.487328][T28396] RDX: 0000000000010000 RSI: 00007f2d3c600000 RDI: 0000000000000004 [ 1653.495347][T28396] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000001f7 [ 1653.503360][T28396] R10: 00000000000001ce R11: 0000000000000293 R12: 0000000000000004 [ 1653.511375][T28396] R13: 00007f2d46fa8f3c R14: 00007f2d46fa8f40 R15: 00007f2d3c600000 [ 1653.519407][T28396] [ 1653.559807][T28395] FAULT_INJECTION: forcing a failure. [ 1653.559807][T28395] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1653.573270][T28395] CPU: 0 PID: 28395 Comm: syz-executor.0 Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 1653.583384][T28395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1653.593485][T28395] Call Trace: [ 1653.596857][T28395] [ 1653.599828][T28395] dump_stack_lvl+0x1e7/0x2d0 [ 1653.604576][T28395] ? nf_tcp_handle_invalid+0x650/0x650 [ 1653.610097][T28395] ? panic+0x850/0x850 [ 1653.614227][T28395] should_fail_ex+0x3aa/0x4e0 [ 1653.618974][T28395] copy_page_from_iter_atomic+0x27b/0x1e80 [ 1653.624853][T28395] ? shmem_get_folio+0xa0/0xa0 [ 1653.629677][T28395] ? print_unlock_imbalance_bug+0x2c0/0x2c0 [ 1653.635627][T28395] ? iov_iter_zero+0x1b60/0x1b60 [ 1653.640610][T28395] ? shmem_write_begin+0x23f/0x4c0 [ 1653.645776][T28395] ? shmem_writepage+0x18f0/0x18f0 [ 1653.650943][T28395] ? fault_in_iov_iter_readable+0x229/0x280 [ 1653.656899][T28395] generic_perform_write+0x392/0x630 [ 1653.662258][T28395] ? generic_file_direct_write+0x3f0/0x3f0 [ 1653.668115][T28395] ? preempt_count_add+0x93/0x190 [ 1653.673189][T28395] ? mnt_put_write_access_file+0xbb/0x100 [ 1653.678959][T28395] ? file_update_time+0x3a6/0x3e0 [ 1653.684052][T28395] shmem_file_write_iter+0xfc/0x120 [ 1653.689309][T28395] vfs_write+0x783/0xaf0 [ 1653.693617][T28395] ? kernel_write+0x330/0x330 [ 1653.698354][T28395] ? __fget_files+0x3f4/0x470 [ 1653.703099][T28395] ? __fdget_pos+0x1a1/0x320 [ 1653.707757][T28395] ksys_write+0x1a0/0x2c0 [ 1653.712148][T28395] ? __ia32_sys_read+0x90/0x90 [ 1653.716974][T28395] ? exc_page_fault+0x587/0x870 [ 1653.721885][T28395] ? do_syscall_64+0xb4/0x230 [ 1653.726638][T28395] do_syscall_64+0xf5/0x230 [ 1653.731211][T28395] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1653.737154][T28395] RIP: 0033:0x7f6cf647ba6f [ 1653.741612][T28395] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 1653.761268][T28395] RSP: 002b:00007f6cf71f0e70 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1653.769734][T28395] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007f6cf647ba6f [ 1653.777744][T28395] RDX: 0000000000080000 RSI: 00007f6cec800000 RDI: 0000000000000004 [ 1653.785743][T28395] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000005c8 [ 1653.793754][T28395] R10: 00000000200006c2 R11: 0000000000000293 R12: 0000000000000004 [ 1653.801765][T28395] R13: 00007f6cf71f0f3c R14: 00007f6cf71f0f40 R15: 00007f6cec800000 [ 1653.809812][T28395] [ 1653.857123][T28395] loop0: detected capacity change from 0 to 1024 10:34:06 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000680), 0x1, 0x5ce, &(0x7f00000006c0)="$eJzs3U9rHOcdB/DvrNay5IKjJHbitoGKlP6horZW67ZJwVQtpugQSsCvQNTrWHitBGlTlByKXfxCUoLeQC+55OCDz+1LEPRYKPRURC8uMzu72tiyLCWSdh1/Pvaz8zz7zPzmN7+dGWlXAgV4aa0spPkwRVYW3tsqxzvb7e7OdvvuoJ/kbJJG9T/NsvvPZOpBMp9+y3eTFHW44ln7ufbF5818ef9Gf9SoW7X+1EHbHc69umW5TnL5GOM9+sbxiuERlkGvD4JPgsfP958T3P3UCcbmCIpnvBZzybkkM/V9YHDiNk43u+M3MRcgAAAAnKBXdrObrZwfdx4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwIqn//n9Rt8agP59i8Pf/p+vnUvdfaA/HnQAAAAAAAAAAHIMf7GY3Wzk/GD8uqp/5v10NLlSP38nH2UwnG7mcrayml1420koyNxJoemu119toHWLLpX23XDqd4wUAAAAAAACAb6m/ZGXv5/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAJimSqv6jahUF/Lo1mkpkk0+V695J/DPovsofjTgAAAABOwSu72c1Wzg/Gj4vqPf8b1fv+mXyc9fSyll666eRm9VlA/11/Y2e73d3Zbt8t29Nxf/vvI6VRRUz/s4f993ypWmM2t7JWPXM5f8yH6eZmGtWWpUuDfPbP636ZU/Gb2iEzu1kvi6T4fv1pyGSYqypyZliRxTq3shqvHlyJI746T+6plcbwk58LJ1Dzc/WyrPnMRNd8aeTse+PgSiQ/uvbf9dvd9Tu3b20uTM4hfU1PVqI9Uok3X6pKLFaVuDgcr+T3uZGFzOf9bGQtf8pqeulkPter3mp9PpePcwdXavkro/efl8l0/br076JHy+ntatvzWcsf8mFuppNfZilX805a+VX17+rIK3zxEFd942hX/Q9/WndeS4rZ/nJClHV9daSuo/fcuWpu9Jm9Kr12/PfG5vfqzlRSNIc5TYInK9EaqcTrB1fir4/Lx83u+p2N26sfHXJ/P6mX5VeJsxP1VWK6Pnub1eirZ0c59/q+c61q7sJwrvHU3MXh3POu1On6e7inIy1Vc2/uO9eu5i6NzO33/RYAE+/cz85Nz/5r9u+zn80+mL09+97M786+c/at6Zx5dObXzcWpHzfeKv6Wz/Lnvff/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA17f5yad3VrvdzoaOjo7OsDPuOxOn4Urv7kdXNj/59Odrd1c/6HzQWW8v/mLp3XZr6d2rV26tdTuL/cdxp8kJ2bvox50JAAAAAAAAAAAAR3Eav0467mMEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgxbGykObDFGktXl4sxzvb7W7ZBv29NRtJmuXyf8nUg2Q+/Za5kXDFs/Zz7YvPm/ny/o29WI3B+lMHbXc49+qW5TrJ5WOM9+gbxyuGR1gGvT4IDuP2/wAAAP//wg8dzA==") (fail_nth: 33) 10:34:06 executing program 4: syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000800), 0x1, 0x755, &(0x7f0000000840)="$eJzs3U9oHNUfAPDvzO4m/ff7JRUPVkQLoi2oSdOKpOKhET0oHgR7ES8uzbbUbv/QRLRFMLnrTbypVPCqCJ70Unrw4s2bV08SDaI9eIzMZDZZm938MbsddT4fmOS9ebt5b7J8583Oe8wLoLIOZz/SiEMRsZBEjBX7k4ho5Kl6xKnV193+7Z0z2ZbEysorvyb5a7J8dL0ns794256I+P5WEvfUNtY7d+36hWa73bpa5CfnL16ZnLt2/YnzF5vnWudal6amT06fmD5+8qnpgR3rCx998urSxy8+uvj+GzNfv/bz70mcigNFWfdxDMrhOLz2P+lWj4jnBl1ZSWrF8aRd+5J6iQ1iR9Kuz/C+GItarH94Y3Hrq1IbBwAMxUq2AQAVk+j/AaBiOvcBOmN7wxgHA/6ZlmciH6jfGP/1OJX/3pPPA9h3O4nuYd2kM3dgl7K/8cu3X3yWbTGkcXigt4XFfOC/R/wnefyP57N4NsZ/LaI4P+zOnecQ8Q93z27i/+UB1C/+AQAAAAAAYHBuzkTEdK/xv3Rt/k/0GP8bjYhjA6h/6/G/dGkA1QA9LM9EPNNz/u/aE13Ga0Xuf/l8gEZy9ny7lcX+/yPiaDRGs/zUJnV899aPz/Yr657/l21Z/Z25gEU7luqjf33PbHO+uZtjBlYtL0bcX+8//yfr/5M+839f32YdX374+SP9yraOf2BYVm5EHOnZ/68/uS7Z/Pl8k/n1wGTnqmCjB5+/8Ue/+sU/lCfr//dtHv/jSffzOud2Xsen751+oF/Z373+H0lO508VHSn2vd2cn786FTGSvLRx//Gdtxn+izrx0ImXLP6PPrz5/b9e1/+NiLiyzTqnDnzzeL8y/T+UJ4v/2R31/ztPnHv3xIV+9W+v/38y79OPFnvc/4PNbTdAy24nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMUhoRByJJJ9bSaToxEbE/Iu6NfWn78tz8Y2cvv3lpNiuLGI9GevZ8u3UsIsZW80mWn8rT6/njd+RPRMTBiPhgdG+enzhzuT1b9sEDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQGF/n/X/Mz+Nlt06AGBo9pTdAADgrtP/A0D16P8BoHr0/wBQPfp/AKge/T8AAAAAAAAAAAAAAAAAAAAAAAAADNXBh27+kETEwtN78y0zUpQ1Sm0ZMGxp2Q0ASlMruwFAaeplNwAoje/4QLJFef8lQtxBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgOo4csv4/VJXV+6C6rP8P1WX9f6gu3/EB6/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDW5q5dv9Bst1tXJSQkJNYSZZ+ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4N/gzAAD//+MUMFo=") (fail_nth: 38) 10:34:06 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001480), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f00000014c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(r0, &(0x7f0000000000)={0x18, 0x0, r2, {0x7}}, 0x18) read$FUSE(r0, &(0x7f0000003500)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0xffffffffffffffda, r3}, 0x10) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, 0x0) 10:34:06 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c80, &(0x7f0000000140)) 10:34:06 executing program 3: r0 = syz_io_uring_setup(0x29d6, &(0x7f0000000500), &(0x7f0000000580), &(0x7f00000005c0)) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x20) [ 1653.980669][T28396] loop1: detected capacity change from 0 to 128 [ 1654.101305][T28403] FAULT_INJECTION: forcing a failure. [ 1654.101305][T28403] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1654.114807][T28403] CPU: 0 PID: 28403 Comm: syz-executor.4 Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 1654.124918][T28403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1654.135009][T28403] Call Trace: [ 1654.138325][T28403] [ 1654.138628][T28407] fuse: Bad value for 'fd' [ 1654.141272][T28403] dump_stack_lvl+0x1e7/0x2d0 [ 1654.141321][T28403] ? nf_tcp_handle_invalid+0x650/0x650 [ 1654.155910][T28403] ? panic+0x850/0x850 [ 1654.160056][T28403] should_fail_ex+0x3aa/0x4e0 [ 1654.164796][T28403] copy_page_from_iter_atomic+0x27b/0x1e80 [ 1654.170722][T28403] ? shmem_get_folio+0xa0/0xa0 [ 1654.175541][T28403] ? print_unlock_imbalance_bug+0x2c0/0x2c0 [ 1654.181507][T28403] ? iov_iter_zero+0x1b60/0x1b60 [ 1654.186502][T28403] ? shmem_write_begin+0x23f/0x4c0 [ 1654.191665][T28403] ? shmem_writepage+0x18f0/0x18f0 [ 1654.196826][T28403] ? fault_in_iov_iter_readable+0x229/0x280 [ 1654.202820][T28403] generic_perform_write+0x392/0x630 [ 1654.208187][T28403] ? generic_file_direct_write+0x3f0/0x3f0 [ 1654.214048][T28403] ? preempt_count_add+0x93/0x190 [ 1654.219144][T28403] ? mnt_put_write_access_file+0xbb/0x100 [ 1654.224945][T28403] ? file_update_time+0x3a6/0x3e0 [ 1654.230044][T28403] shmem_file_write_iter+0xfc/0x120 [ 1654.235318][T28403] vfs_write+0x783/0xaf0 [ 1654.239634][T28403] ? kernel_write+0x330/0x330 [ 1654.244381][T28403] ? __fget_files+0x3f4/0x470 10:34:06 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x40305829) [ 1654.249128][T28403] ? __fdget_pos+0x1a1/0x320 [ 1654.253778][T28403] ksys_write+0x1a0/0x2c0 [ 1654.258176][T28403] ? __ia32_sys_read+0x90/0x90 [ 1654.263002][T28403] ? exc_page_fault+0x587/0x870 [ 1654.267932][T28403] ? do_syscall_64+0xb4/0x230 [ 1654.272686][T28403] do_syscall_64+0xf5/0x230 [ 1654.277265][T28403] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1654.283220][T28403] RIP: 0033:0x7f3e7da7ba6f [ 1654.287691][T28403] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 1654.307367][T28403] RSP: 002b:00007f3e7e749e70 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1654.315845][T28403] RAX: ffffffffffffffda RBX: 0000000000100000 RCX: 00007f3e7da7ba6f [ 1654.323885][T28403] RDX: 0000000000100000 RSI: 00007f3e73e00000 RDI: 0000000000000004 [ 1654.331912][T28403] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000074f [ 1654.339939][T28403] R10: 00000000000003bc R11: 0000000000000293 R12: 0000000000000004 [ 1654.347970][T28403] R13: 00007f3e7e749f3c R14: 00007f3e7e749f40 R15: 00007f3e73e00000 [ 1654.356014][T28403] 10:34:06 executing program 1: syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1fd, &(0x7f00000002c0)="$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") (fail_nth: 39) 10:34:06 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c80, &(0x7f0000000140)) [ 1654.489748][T28403] loop4: detected capacity change from 0 to 2048 [ 1654.551171][T28403] /dev/loop4: Can't open blockdev [ 1654.559898][T28413] FAULT_INJECTION: forcing a failure. [ 1654.559898][T28413] name fail_page_alloc, interval 1, probability 0, space 0, times 0 10:34:06 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000000040), &(0x7f0000ff9000)) r1 = syz_io_uring_setup(0x0, &(0x7f0000000140), &(0x7f0000ffa000), &(0x7f0000ff9000)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r1, @ANYBLOB=',rootmode=0000040000,user_id=', @ANYRESOCT=r0]) [ 1654.695485][T28413] CPU: 1 PID: 28413 Comm: syz-executor.0 Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 1654.705644][T28413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1654.715734][T28413] Call Trace: [ 1654.719032][T28413] [ 1654.721974][T28413] dump_stack_lvl+0x1e7/0x2d0 [ 1654.726704][T28413] ? nf_tcp_handle_invalid+0x650/0x650 [ 1654.732187][T28413] ? panic+0x850/0x850 [ 1654.736282][T28413] should_fail_ex+0x3aa/0x4e0 [ 1654.740991][T28413] prepare_alloc_pages+0x1d9/0x5b0 [ 1654.746127][T28413] __alloc_pages+0x165/0x680 [ 1654.750737][T28413] ? zone_statistics+0x170/0x170 [ 1654.755697][T28413] ? policy_nodemask+0x1ec/0x720 [ 1654.760666][T28413] alloc_pages_mpol+0x3de/0x640 [ 1654.765536][T28413] ? mempolicy_in_oom_domain+0x130/0x130 [ 1654.771186][T28413] ? xas_load+0x12c/0x140 [ 1654.775538][T28413] ? mpol_shared_policy_lookup+0x148/0x1e0 [ 1654.781359][T28413] shmem_alloc_and_add_folio+0x24f/0xde0 [ 1654.787023][T28413] ? put_swap_device+0x250/0x250 [ 1654.791980][T28413] ? __lock_acquire+0x1345/0x1fd0 [ 1654.797031][T28413] shmem_get_folio_gfp+0x7c3/0x1ee0 [ 1654.802268][T28413] ? shmem_get_folio+0xa0/0xa0 [ 1654.807062][T28413] ? print_unlock_imbalance_bug+0x2c0/0x2c0 [ 1654.812973][T28413] ? fault_in_readable+0x1a6/0x2b0 [ 1654.818113][T28413] shmem_write_begin+0x170/0x4c0 [ 1654.823093][T28413] ? shmem_writepage+0x18f0/0x18f0 [ 1654.828231][T28413] ? fault_in_iov_iter_readable+0x229/0x280 [ 1654.834184][T28413] generic_perform_write+0x31b/0x630 [ 1654.839510][T28413] ? generic_file_direct_write+0x3f0/0x3f0 [ 1654.845339][T28413] ? preempt_count_add+0x93/0x190 [ 1654.850395][T28413] ? mnt_put_write_access_file+0xbb/0x100 [ 1654.856136][T28413] ? file_update_time+0x3a6/0x3e0 [ 1654.861186][T28413] shmem_file_write_iter+0xfc/0x120 [ 1654.866410][T28413] vfs_write+0x783/0xaf0 [ 1654.870687][T28413] ? kernel_write+0x330/0x330 [ 1654.875396][T28413] ? __fget_files+0x3f4/0x470 [ 1654.880115][T28413] ? __fdget_pos+0x1a1/0x320 [ 1654.884732][T28413] ksys_write+0x1a0/0x2c0 [ 1654.889090][T28413] ? __ia32_sys_read+0x90/0x90 [ 1654.893875][T28413] ? exc_page_fault+0x587/0x870 [ 1654.898750][T28413] ? do_syscall_64+0xb4/0x230 [ 1654.903474][T28413] do_syscall_64+0xf5/0x230 [ 1654.908007][T28413] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1654.913923][T28413] RIP: 0033:0x7f6cf647ba6f [ 1654.918364][T28413] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 1654.938031][T28413] RSP: 002b:00007f6cf71f0e70 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1654.946492][T28413] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007f6cf647ba6f [ 1654.954487][T28413] RDX: 0000000000080000 RSI: 00007f6cec800000 RDI: 0000000000000004 [ 1654.962477][T28413] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000005c8 [ 1654.970459][T28413] R10: 00000000200006c2 R11: 0000000000000293 R12: 0000000000000004 [ 1654.978442][T28413] R13: 00007f6cf71f0f3c R14: 00007f6cf71f0f40 R15: 00007f6cec800000 [ 1654.986445][T28413] [ 1655.231472][T28417] fuse: Invalid user_id [ 1655.248793][T28419] FAULT_INJECTION: forcing a failure. [ 1655.248793][T28419] name fail_page_alloc, interval 1, probability 0, space 0, times 0 10:34:07 executing program 4: syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000800), 0x1, 0x755, &(0x7f0000000840)="$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") (fail_nth: 39) 10:34:07 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @empty}, r1}}, 0x30) 10:34:07 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000680), 0x1, 0x5ce, &(0x7f00000006c0)="$eJzs3U9rHOcdB/DvrNay5IKjJHbitoGKlP6horZW67ZJwVQtpugQSsCvQNTrWHitBGlTlByKXfxCUoLeQC+55OCDz+1LEPRYKPRURC8uMzu72tiyLCWSdh1/Pvaz8zz7zPzmN7+dGWlXAgV4aa0spPkwRVYW3tsqxzvb7e7OdvvuoJ/kbJJG9T/NsvvPZOpBMp9+y3eTFHW44ln7ufbF5818ef9Gf9SoW7X+1EHbHc69umW5TnL5GOM9+sbxiuERlkGvD4JPgsfP958T3P3UCcbmCIpnvBZzybkkM/V9YHDiNk43u+M3MRcgAAAAnKBXdrObrZwfdx4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwIqn//n9Rt8agP59i8Pf/p+vnUvdfaA/HnQAAAAAAAAAAHIMf7GY3Wzk/GD8uqp/5v10NLlSP38nH2UwnG7mcrayml1420koyNxJoemu119toHWLLpX23XDqd4wUAAAAAAACAb6m/ZGXv5/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAJimSqv6jahUF/Lo1mkpkk0+V695J/DPovsofjTgAAAABOwSu72c1Wzg/Gj4vqPf8b1fv+mXyc9fSyll666eRm9VlA/11/Y2e73d3Zbt8t29Nxf/vvI6VRRUz/s4f993ypWmM2t7JWPXM5f8yH6eZmGtWWpUuDfPbP636ZU/Gb2iEzu1kvi6T4fv1pyGSYqypyZliRxTq3shqvHlyJI746T+6plcbwk58LJ1Dzc/WyrPnMRNd8aeTse+PgSiQ/uvbf9dvd9Tu3b20uTM4hfU1PVqI9Uok3X6pKLFaVuDgcr+T3uZGFzOf9bGQtf8pqeulkPter3mp9PpePcwdXavkro/efl8l0/br076JHy+ntatvzWcsf8mFuppNfZilX805a+VX17+rIK3zxEFd942hX/Q9/WndeS4rZ/nJClHV9daSuo/fcuWpu9Jm9Kr12/PfG5vfqzlRSNIc5TYInK9EaqcTrB1fir4/Lx83u+p2N26sfHXJ/P6mX5VeJsxP1VWK6Pnub1eirZ0c59/q+c61q7sJwrvHU3MXh3POu1On6e7inIy1Vc2/uO9eu5i6NzO33/RYAE+/cz85Nz/5r9u+zn80+mL09+97M786+c/at6Zx5dObXzcWpHzfeKv6Wz/Lnvff/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA17f5yad3VrvdzoaOjo7OsDPuOxOn4Urv7kdXNj/59Odrd1c/6HzQWW8v/mLp3XZr6d2rV26tdTuL/cdxp8kJ2bvox50JAAAAAAAAAAAAR3Eav0467mMEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgxbGykObDFGktXl4sxzvb7W7ZBv29NRtJmuXyf8nUg2Q+/Za5kXDFs/Zz7YvPm/ny/o29WI3B+lMHbXc49+qW5TrJ5WOM9+gbxyuGR1gGvT4IDuP2/wAAAP//wg8dzA==") (fail_nth: 34) [ 1655.398580][T28419] CPU: 1 PID: 28419 Comm: syz-executor.1 Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 1655.408735][T28419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1655.418929][T28419] Call Trace: [ 1655.422250][T28419] [ 1655.425225][T28419] dump_stack_lvl+0x1e7/0x2d0 [ 1655.429973][T28419] ? nf_tcp_handle_invalid+0x650/0x650 [ 1655.435503][T28419] ? panic+0x850/0x850 [ 1655.439650][T28419] should_fail_ex+0x3aa/0x4e0 [ 1655.442167][T28422] FAULT_INJECTION: forcing a failure. [ 1655.442167][T28422] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1655.444393][T28419] prepare_alloc_pages+0x1d9/0x5b0 [ 1655.444446][T28419] __alloc_pages+0x165/0x680 [ 1655.467434][T28419] ? zone_statistics+0x170/0x170 [ 1655.472440][T28419] ? policy_nodemask+0x1ec/0x720 [ 1655.477443][T28419] alloc_pages_mpol+0x3de/0x640 [ 1655.482352][T28419] ? mempolicy_in_oom_domain+0x130/0x130 [ 1655.488034][T28419] ? xas_load+0x12c/0x140 [ 1655.492422][T28419] ? mpol_shared_policy_lookup+0x148/0x1e0 [ 1655.498285][T28419] shmem_alloc_and_add_folio+0x24f/0xde0 [ 1655.503992][T28419] ? put_swap_device+0x250/0x250 [ 1655.508985][T28419] ? __lock_acquire+0x1345/0x1fd0 [ 1655.514103][T28419] shmem_get_folio_gfp+0x7c3/0x1ee0 [ 1655.519387][T28419] ? shmem_get_folio+0xa0/0xa0 [ 1655.524220][T28419] ? print_unlock_imbalance_bug+0x2c0/0x2c0 [ 1655.530202][T28419] ? fault_in_readable+0x1a6/0x2b0 [ 1655.535384][T28419] shmem_write_begin+0x170/0x4c0 [ 1655.536747][T28427] FAULT_INJECTION: forcing a failure. [ 1655.536747][T28427] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1655.540358][T28419] ? shmem_writepage+0x18f0/0x18f0 [ 1655.540402][T28419] ? fault_in_iov_iter_readable+0x229/0x280 [ 1655.564453][T28419] generic_perform_write+0x31b/0x630 [ 1655.569794][T28419] ? generic_file_direct_write+0x3f0/0x3f0 [ 1655.575640][T28419] ? preempt_count_add+0x93/0x190 [ 1655.580692][T28419] ? mnt_put_write_access_file+0xbb/0x100 [ 1655.586467][T28419] ? file_update_time+0x3a6/0x3e0 [ 1655.591522][T28419] shmem_file_write_iter+0xfc/0x120 [ 1655.596749][T28419] vfs_write+0x783/0xaf0 [ 1655.601026][T28419] ? kernel_write+0x330/0x330 [ 1655.605734][T28419] ? __fget_files+0x3f4/0x470 [ 1655.610448][T28419] ? __fdget_pos+0x1a1/0x320 [ 1655.615065][T28419] ksys_write+0x1a0/0x2c0 [ 1655.619428][T28419] ? __ia32_sys_read+0x90/0x90 [ 1655.624220][T28419] ? exc_page_fault+0x587/0x870 [ 1655.629095][T28419] ? do_syscall_64+0xb4/0x230 [ 1655.633813][T28419] do_syscall_64+0xf5/0x230 [ 1655.638362][T28419] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1655.644278][T28419] RIP: 0033:0x7f2d4627ba6f [ 1655.648719][T28419] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 1655.668347][T28419] RSP: 002b:00007f2d46fa8e70 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1655.676781][T28419] RAX: ffffffffffffffda RBX: 0000000000010000 RCX: 00007f2d4627ba6f [ 1655.684772][T28419] RDX: 0000000000010000 RSI: 00007f2d3c600000 RDI: 0000000000000004 [ 1655.692758][T28419] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000001f7 [ 1655.700748][T28419] R10: 00000000000001ce R11: 0000000000000293 R12: 0000000000000004 [ 1655.708732][T28419] R13: 00007f2d46fa8f3c R14: 00007f2d46fa8f40 R15: 00007f2d3c600000 [ 1655.716753][T28419] [ 1655.719802][T28427] CPU: 0 PID: 28427 Comm: syz-executor.0 Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 1655.729924][T28427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1655.740028][T28427] Call Trace: [ 1655.743332][T28427] [ 1655.746283][T28427] dump_stack_lvl+0x1e7/0x2d0 [ 1655.751020][T28427] ? nf_tcp_handle_invalid+0x650/0x650 [ 1655.756503][T28427] ? panic+0x850/0x850 [ 1655.760606][T28427] should_fail_ex+0x3aa/0x4e0 [ 1655.765320][T28427] copy_page_from_iter_atomic+0x27b/0x1e80 [ 1655.771166][T28427] ? shmem_get_folio+0xa0/0xa0 [ 1655.775956][T28427] ? print_unlock_imbalance_bug+0x2c0/0x2c0 [ 1655.781872][T28427] ? iov_iter_zero+0x1b60/0x1b60 [ 1655.786832][T28427] ? shmem_write_begin+0x23f/0x4c0 [ 1655.791963][T28427] ? shmem_writepage+0x18f0/0x18f0 [ 1655.797098][T28427] ? fault_in_iov_iter_readable+0x229/0x280 [ 1655.803015][T28427] generic_perform_write+0x392/0x630 [ 1655.808366][T28427] ? generic_file_direct_write+0x3f0/0x3f0 [ 1655.814271][T28427] ? preempt_count_add+0x93/0x190 [ 1655.819341][T28427] ? mnt_put_write_access_file+0xbb/0x100 [ 1655.825084][T28427] ? file_update_time+0x3a6/0x3e0 [ 1655.830131][T28427] shmem_file_write_iter+0xfc/0x120 [ 1655.835352][T28427] vfs_write+0x783/0xaf0 [ 1655.839641][T28427] ? kernel_write+0x330/0x330 [ 1655.844361][T28427] ? __fget_files+0x3f4/0x470 [ 1655.849075][T28427] ? __fdget_pos+0x1a1/0x320 [ 1655.853689][T28427] ksys_write+0x1a0/0x2c0 [ 1655.858044][T28427] ? __ia32_sys_read+0x90/0x90 [ 1655.862827][T28427] ? exc_page_fault+0x587/0x870 [ 1655.867755][T28427] ? do_syscall_64+0xb4/0x230 [ 1655.872574][T28427] do_syscall_64+0xf5/0x230 [ 1655.877104][T28427] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1655.883013][T28427] RIP: 0033:0x7f6cf647ba6f [ 1655.887442][T28427] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 1655.907076][T28427] RSP: 002b:00007f6cf71f0e70 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1655.915534][T28427] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007f6cf647ba6f [ 1655.923546][T28427] RDX: 0000000000080000 RSI: 00007f6cec800000 RDI: 0000000000000004 [ 1655.931558][T28427] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000005c8 [ 1655.939553][T28427] R10: 00000000200006c2 R11: 0000000000000293 R12: 0000000000000004 [ 1655.947547][T28427] R13: 00007f6cf71f0f3c R14: 00007f6cf71f0f40 R15: 00007f6cec800000 [ 1655.955561][T28427] 10:34:07 executing program 3: r0 = open(&(0x7f0000000140)='./bus\x00', 0x1eb142, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) statx(0xffffffffffffffff, 0x0, 0x6000, 0x0, 0x0) 10:34:07 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000004c0)=ANY=[], 0xb) ftruncate(r0, 0x2ff8) r2 = dup3(r1, r0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r0, &(0x7f0000000040), 0xfea0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000000c0)={0x0, r3, 0x0, 0x8}) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000080)={0x0, r0, 0x0, 0x1}) ftruncate(r1, 0x6c58) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000000)={0x2880008, r3}) [ 1656.073772][T28422] CPU: 1 PID: 28422 Comm: syz-executor.4 Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 1656.083944][T28422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1656.094040][T28422] Call Trace: [ 1656.097359][T28422] [ 1656.100335][T28422] dump_stack_lvl+0x1e7/0x2d0 [ 1656.105079][T28422] ? nf_tcp_handle_invalid+0x650/0x650 [ 1656.110601][T28422] ? panic+0x850/0x850 [ 1656.114744][T28422] should_fail_ex+0x3aa/0x4e0 [ 1656.119502][T28422] prepare_alloc_pages+0x1d9/0x5b0 [ 1656.124682][T28422] __alloc_pages+0x165/0x680 [ 1656.129338][T28422] ? zone_statistics+0x170/0x170 [ 1656.134352][T28422] ? policy_nodemask+0x1ec/0x720 [ 1656.139355][T28422] alloc_pages_mpol+0x3de/0x640 [ 1656.144262][T28422] ? mempolicy_in_oom_domain+0x130/0x130 [ 1656.149960][T28422] ? xas_load+0x12c/0x140 [ 1656.154338][T28422] ? mpol_shared_policy_lookup+0x148/0x1e0 [ 1656.160199][T28422] shmem_alloc_and_add_folio+0x24f/0xde0 [ 1656.165934][T28422] ? put_swap_device+0x250/0x250 [ 1656.170917][T28422] ? __lock_acquire+0x1345/0x1fd0 [ 1656.175992][T28422] shmem_get_folio_gfp+0x7c3/0x1ee0 [ 1656.181258][T28422] ? shmem_get_folio+0xa0/0xa0 [ 1656.186074][T28422] ? print_unlock_imbalance_bug+0x2c0/0x2c0 [ 1656.192006][T28422] ? fault_in_readable+0x1a6/0x2b0 [ 1656.197165][T28422] shmem_write_begin+0x170/0x4c0 [ 1656.202150][T28422] ? shmem_writepage+0x18f0/0x18f0 [ 1656.207322][T28422] ? fault_in_iov_iter_readable+0x229/0x280 [ 1656.213291][T28422] generic_perform_write+0x31b/0x630 [ 1656.218668][T28422] ? generic_file_direct_write+0x3f0/0x3f0 [ 1656.224555][T28422] ? preempt_count_add+0x93/0x190 [ 1656.229648][T28422] ? mnt_put_write_access_file+0xbb/0x100 [ 1656.235407][T28422] ? file_update_time+0x3a6/0x3e0 [ 1656.240487][T28422] shmem_file_write_iter+0xfc/0x120 [ 1656.245744][T28422] vfs_write+0x783/0xaf0 [ 1656.250053][T28422] ? kernel_write+0x330/0x330 [ 1656.254786][T28422] ? __fget_files+0x3f4/0x470 [ 1656.259523][T28422] ? __fdget_pos+0x1a1/0x320 [ 1656.264158][T28422] ksys_write+0x1a0/0x2c0 [ 1656.268538][T28422] ? __ia32_sys_read+0x90/0x90 [ 1656.273343][T28422] ? exc_page_fault+0x587/0x870 [ 1656.278243][T28422] ? do_syscall_64+0xb4/0x230 [ 1656.282987][T28422] do_syscall_64+0xf5/0x230 [ 1656.287556][T28422] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1656.293488][T28422] RIP: 0033:0x7f3e7da7ba6f [ 1656.297933][T28422] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 10:34:08 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c80, &(0x7f0000000140)) [ 1656.317663][T28422] RSP: 002b:00007f3e7e749e70 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1656.326122][T28422] RAX: ffffffffffffffda RBX: 0000000000100000 RCX: 00007f3e7da7ba6f [ 1656.334139][T28422] RDX: 0000000000100000 RSI: 00007f3e73e00000 RDI: 0000000000000004 [ 1656.342165][T28422] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000074f [ 1656.350185][T28422] R10: 00000000000003bc R11: 0000000000000293 R12: 0000000000000004 [ 1656.358203][T28422] R13: 00007f3e7e749f3c R14: 00007f3e7e749f40 R15: 00007f3e73e00000 [ 1656.366259][T28422] 10:34:08 executing program 1: syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1fd, &(0x7f00000002c0)="$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") (fail_nth: 40) 10:34:08 executing program 3: r0 = open(&(0x7f0000000140)='./bus\x00', 0x1eb142, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) statx(0xffffffffffffffff, 0x0, 0x6000, 0x0, 0x0) 10:34:08 executing program 4: syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000800), 0x1, 0x755, &(0x7f0000000840)="$eJzs3U9oHNUfAPDvzO4m/ff7JRUPVkQLoi2oSdOKpOKhET0oHgR7ES8uzbbUbv/QRLRFMLnrTbypVPCqCJ70Unrw4s2bV08SDaI9eIzMZDZZm938MbsddT4fmOS9ebt5b7J8583Oe8wLoLIOZz/SiEMRsZBEjBX7k4ho5Kl6xKnV193+7Z0z2ZbEysorvyb5a7J8dL0ns794256I+P5WEvfUNtY7d+36hWa73bpa5CfnL16ZnLt2/YnzF5vnWudal6amT06fmD5+8qnpgR3rCx998urSxy8+uvj+GzNfv/bz70mcigNFWfdxDMrhOLz2P+lWj4jnBl1ZSWrF8aRd+5J6iQ1iR9Kuz/C+GItarH94Y3Hrq1IbBwAMxUq2AQAVk+j/AaBiOvcBOmN7wxgHA/6ZlmciH6jfGP/1OJX/3pPPA9h3O4nuYd2kM3dgl7K/8cu3X3yWbTGkcXigt4XFfOC/R/wnefyP57N4NsZ/LaI4P+zOnecQ8Q93z27i/+UB1C/+AQAAAAAAYHBuzkTEdK/xv3Rt/k/0GP8bjYhjA6h/6/G/dGkA1QA9LM9EPNNz/u/aE13Ga0Xuf/l8gEZy9ny7lcX+/yPiaDRGs/zUJnV899aPz/Yr657/l21Z/Z25gEU7luqjf33PbHO+uZtjBlYtL0bcX+8//yfr/5M+839f32YdX374+SP9yraOf2BYVm5EHOnZ/68/uS7Z/Pl8k/n1wGTnqmCjB5+/8Ue/+sU/lCfr//dtHv/jSffzOud2Xsen751+oF/Z373+H0lO508VHSn2vd2cn786FTGSvLRx//Gdtxn+izrx0ImXLP6PPrz5/b9e1/+NiLiyzTqnDnzzeL8y/T+UJ4v/2R31/ztPnHv3xIV+9W+v/38y79OPFnvc/4PNbTdAy24nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMUhoRByJJJ9bSaToxEbE/Iu6NfWn78tz8Y2cvv3lpNiuLGI9GevZ8u3UsIsZW80mWn8rT6/njd+RPRMTBiPhgdG+enzhzuT1b9sEDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQGF/n/X/Mz+Nlt06AGBo9pTdAADgrtP/A0D16P8BoHr0/wBQPfp/AKge/T8AAAAAAAAAAAAAAAAAAAAAAAAADNXBh27+kETEwtN78y0zUpQ1Sm0ZMGxp2Q0ASlMruwFAaeplNwAoje/4QLJFef8lQtxBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgOo4csv4/VJXV+6C6rP8P1WX9f6gu3/EB6/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDW5q5dv9Bst1tXJSQkJNYSZZ+ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4N/gzAAD//+MUMFo=") (fail_nth: 40) 10:34:09 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000004c0)=ANY=[], 0xb) ftruncate(r0, 0x2ff8) r2 = dup3(r1, r0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r0, &(0x7f0000000040), 0xfea0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000000c0)={0x0, r3, 0x0, 0x8}) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000080)={0x0, r0, 0x0, 0x1}) ftruncate(r1, 0x6c58) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000000)={0x2880008, r3}) [ 1656.724482][T28440] FAULT_INJECTION: forcing a failure. [ 1656.724482][T28440] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1656.737864][T28440] CPU: 1 PID: 28440 Comm: syz-executor.1 Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 1656.747995][T28440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1656.758099][T28440] Call Trace: [ 1656.761420][T28440] [ 1656.764391][T28440] dump_stack_lvl+0x1e7/0x2d0 [ 1656.769149][T28440] ? nf_tcp_handle_invalid+0x650/0x650 [ 1656.774676][T28440] ? panic+0x850/0x850 [ 1656.778816][T28440] should_fail_ex+0x3aa/0x4e0 [ 1656.783559][T28440] copy_page_from_iter_atomic+0x27b/0x1e80 [ 1656.789439][T28440] ? shmem_get_folio+0xa0/0xa0 [ 1656.794266][T28440] ? print_unlock_imbalance_bug+0x2c0/0x2c0 [ 1656.800254][T28440] ? iov_iter_zero+0x1b60/0x1b60 [ 1656.805271][T28440] ? shmem_write_begin+0x23f/0x4c0 [ 1656.810992][T28440] ? shmem_writepage+0x18f0/0x18f0 [ 1656.816180][T28440] ? fault_in_iov_iter_readable+0x229/0x280 [ 1656.822144][T28440] generic_perform_write+0x392/0x630 [ 1656.827514][T28440] ? generic_file_direct_write+0x3f0/0x3f0 [ 1656.833407][T28440] ? preempt_count_add+0x93/0x190 [ 1656.838494][T28440] ? mnt_put_write_access_file+0xbb/0x100 [ 1656.844271][T28440] ? file_update_time+0x3a6/0x3e0 [ 1656.849370][T28440] shmem_file_write_iter+0xfc/0x120 [ 1656.854643][T28440] vfs_write+0x783/0xaf0 [ 1656.858975][T28440] ? kernel_write+0x330/0x330 [ 1656.863734][T28440] ? __fget_files+0x3f4/0x470 [ 1656.868490][T28440] ? __fdget_pos+0x1a1/0x320 [ 1656.873158][T28440] ksys_write+0x1a0/0x2c0 [ 1656.877558][T28440] ? __ia32_sys_read+0x90/0x90 [ 1656.882384][T28440] ? exc_page_fault+0x587/0x870 [ 1656.887296][T28440] ? do_syscall_64+0xb4/0x230 [ 1656.892040][T28440] do_syscall_64+0xf5/0x230 [ 1656.896623][T28440] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1656.902583][T28440] RIP: 0033:0x7f2d4627ba6f 10:34:09 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c80, &(0x7f0000000140)) [ 1656.907051][T28440] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 1656.926711][T28440] RSP: 002b:00007f2d46fa8e70 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1656.935229][T28440] RAX: ffffffffffffffda RBX: 0000000000010000 RCX: 00007f2d4627ba6f [ 1656.943255][T28440] RDX: 0000000000010000 RSI: 00007f2d3c600000 RDI: 0000000000000004 [ 1656.951284][T28440] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000001f7 [ 1656.959304][T28440] R10: 00000000000001ce R11: 0000000000000293 R12: 0000000000000004 [ 1656.967331][T28440] R13: 00007f2d46fa8f3c R14: 00007f2d46fa8f40 R15: 00007f2d3c600000 [ 1656.975370][T28440] [ 1657.059578][T28443] FAULT_INJECTION: forcing a failure. [ 1657.059578][T28443] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1657.075271][T28443] CPU: 0 PID: 28443 Comm: syz-executor.4 Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 1657.085396][T28443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1657.095486][T28443] Call Trace: [ 1657.098798][T28443] [ 1657.101755][T28443] dump_stack_lvl+0x1e7/0x2d0 [ 1657.106491][T28443] ? nf_tcp_handle_invalid+0x650/0x650 [ 1657.111995][T28443] ? panic+0x850/0x850 [ 1657.116120][T28443] should_fail_ex+0x3aa/0x4e0 [ 1657.120846][T28443] copy_page_from_iter_atomic+0x27b/0x1e80 [ 1657.126716][T28443] ? shmem_get_folio+0xa0/0xa0 [ 1657.131530][T28443] ? print_unlock_imbalance_bug+0x2c0/0x2c0 [ 1657.137473][T28443] ? iov_iter_zero+0x1b60/0x1b60 [ 1657.142452][T28443] ? shmem_write_begin+0x23f/0x4c0 [ 1657.147606][T28443] ? shmem_writepage+0x18f0/0x18f0 [ 1657.152762][T28443] ? fault_in_iov_iter_readable+0x229/0x280 [ 1657.158710][T28443] generic_perform_write+0x392/0x630 [ 1657.164059][T28443] ? generic_file_direct_write+0x3f0/0x3f0 [ 1657.169910][T28443] ? preempt_count_add+0x93/0x190 [ 1657.174999][T28443] ? mnt_put_write_access_file+0xbb/0x100 [ 1657.180776][T28443] ? file_update_time+0x3a6/0x3e0 [ 1657.185856][T28443] shmem_file_write_iter+0xfc/0x120 [ 1657.191102][T28443] vfs_write+0x783/0xaf0 [ 1657.195398][T28443] ? kernel_write+0x330/0x330 [ 1657.200123][T28443] ? __fget_files+0x3f4/0x470 [ 1657.204869][T28443] ? __fdget_pos+0x1a1/0x320 [ 1657.209506][T28443] ksys_write+0x1a0/0x2c0 [ 1657.213884][T28443] ? __ia32_sys_read+0x90/0x90 [ 1657.218693][T28443] ? exc_page_fault+0x587/0x870 [ 1657.223583][T28443] ? do_syscall_64+0xb4/0x230 [ 1657.228317][T28443] do_syscall_64+0xf5/0x230 [ 1657.232892][T28443] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1657.238838][T28443] RIP: 0033:0x7f3e7da7ba6f [ 1657.243294][T28443] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 1657.262960][T28443] RSP: 002b:00007f3e7e749e70 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1657.271441][T28443] RAX: ffffffffffffffda RBX: 0000000000100000 RCX: 00007f3e7da7ba6f [ 1657.279463][T28443] RDX: 0000000000100000 RSI: 00007f3e73e00000 RDI: 0000000000000004 [ 1657.287483][T28443] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000074f [ 1657.295498][T28443] R10: 00000000000003bc R11: 0000000000000293 R12: 0000000000000004 [ 1657.303504][T28443] R13: 00007f3e7e749f3c R14: 00007f3e7e749f40 R15: 00007f3e73e00000 [ 1657.311567][T28443] 10:34:09 executing program 3: r0 = open(&(0x7f0000000140)='./bus\x00', 0x1eb142, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) statx(0xffffffffffffffff, 0x0, 0x6000, 0x0, 0x0) [ 1657.382847][T28427] loop0: detected capacity change from 0 to 1024 [ 1657.433519][T28440] loop1: detected capacity change from 0 to 128 10:34:09 executing program 1: syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1fd, &(0x7f00000002c0)="$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") (fail_nth: 41) 10:34:10 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000680), 0x1, 0x5ce, &(0x7f00000006c0)="$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") (fail_nth: 35) [ 1657.709733][T28443] loop4: detected capacity change from 0 to 2048 [ 1657.755248][T28443] /dev/loop4: Can't open blockdev 10:34:10 executing program 3: r0 = open(&(0x7f0000000140)='./bus\x00', 0x1eb142, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) statx(0xffffffffffffffff, 0x0, 0x6000, 0x0, 0x0) 10:34:10 executing program 5: syz_mount_image$reiserfs(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x800c, &(0x7f0000000300)=ANY=[], 0xfd, 0x111f, &(0x7f0000002300)="$eJzs2LFuEzEcBvDPl1AagXQo3U8MDAyoKgoz0AGkrKywAOpEp2YCMeRhWNh4EOjEXnWHoU9wKLmmJ6QqgFo6wO8nRXb+/ny2RzsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwMEy+lWSrSsarWpWkJE1zOD1O0qzqtz4PqpQ825vOnhxMns66WKqU50lZzEr5+LDLTsaT8f3xg63dO19mb9+9ebm/v3ewHHh1o6TJ0cmlnmKU070M1oQWG9w8SwMAAMD/o72w+vcW+nTzL60PAAAA/MrlviYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/Lm27vsbq06VpCRNczg9TtKcM+/aFe0PAAAAuLiSKi/q8+rdM0DvXr7W5azedh5V2cmHOqNlZNinq3WLrh0EAACAf157fdncTpn31+SyUeare/fdDPv6MjnM9nb3/7TJ991kkPnmzs/fHj1OcnTy/vXiV9rBFR0JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAf7MCxAAAAAIAwf+s0OjYAAAAAAAAAAAAAAAAAAAAAAAAAAAC+CgAA//8sud4B") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00}) 10:34:10 executing program 4: syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000800), 0x1, 0x755, &(0x7f0000000840)="$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") (fail_nth: 41) 10:34:10 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000004c0)=ANY=[], 0xb) ftruncate(r0, 0x2ff8) r2 = dup3(r1, r0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r0, &(0x7f0000000040), 0xfea0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000000c0)={0x0, r3, 0x0, 0x8}) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000080)={0x0, r0, 0x0, 0x1}) ftruncate(r1, 0x6c58) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000000)={0x2880008, r3}) [ 1657.967997][T28454] FAULT_INJECTION: forcing a failure. [ 1657.967997][T28454] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1658.086608][T28454] CPU: 0 PID: 28454 Comm: syz-executor.1 Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 1658.096757][T28454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1658.106862][T28454] Call Trace: [ 1658.110190][T28454] [ 1658.113165][T28454] dump_stack_lvl+0x1e7/0x2d0 [ 1658.117914][T28454] ? nf_tcp_handle_invalid+0x650/0x650 [ 1658.123446][T28454] ? panic+0x850/0x850 [ 1658.127585][T28454] should_fail_ex+0x3aa/0x4e0 [ 1658.132329][T28454] prepare_alloc_pages+0x1d9/0x5b0 [ 1658.137510][T28454] __alloc_pages+0x165/0x680 [ 1658.142167][T28454] ? zone_statistics+0x170/0x170 [ 1658.147179][T28454] ? policy_nodemask+0x1ec/0x720 [ 1658.152174][T28454] alloc_pages_mpol+0x3de/0x640 [ 1658.157079][T28454] ? mempolicy_in_oom_domain+0x130/0x130 [ 1658.162779][T28454] ? xas_load+0x12c/0x140 [ 1658.167166][T28454] ? mpol_shared_policy_lookup+0x148/0x1e0 [ 1658.173032][T28454] shmem_alloc_and_add_folio+0x24f/0xde0 [ 1658.178747][T28454] ? put_swap_device+0x250/0x250 [ 1658.183747][T28454] ? __lock_acquire+0x1345/0x1fd0 [ 1658.188842][T28454] shmem_get_folio_gfp+0x7c3/0x1ee0 [ 1658.194126][T28454] ? shmem_get_folio+0xa0/0xa0 [ 1658.198954][T28454] ? print_unlock_imbalance_bug+0x2c0/0x2c0 [ 1658.204906][T28454] ? fault_in_readable+0x1a6/0x2b0 [ 1658.210087][T28454] shmem_write_begin+0x170/0x4c0 [ 1658.215100][T28454] ? shmem_writepage+0x18f0/0x18f0 [ 1658.220354][T28454] ? fault_in_iov_iter_readable+0x229/0x280 [ 1658.226292][T28454] generic_perform_write+0x31b/0x630 [ 1658.231648][T28454] ? generic_file_direct_write+0x3f0/0x3f0 [ 1658.237496][T28454] ? preempt_count_add+0x93/0x190 [ 1658.242554][T28454] ? mnt_put_write_access_file+0xbb/0x100 [ 1658.248294][T28454] ? file_update_time+0x3a6/0x3e0 [ 1658.253343][T28454] shmem_file_write_iter+0xfc/0x120 [ 1658.258567][T28454] vfs_write+0x783/0xaf0 [ 1658.262839][T28454] ? kernel_write+0x330/0x330 [ 1658.267539][T28454] ? __fget_files+0x3f4/0x470 [ 1658.272250][T28454] ? __fdget_pos+0x1a1/0x320 [ 1658.276870][T28454] ksys_write+0x1a0/0x2c0 [ 1658.281228][T28454] ? __ia32_sys_read+0x90/0x90 [ 1658.286027][T28454] ? exc_page_fault+0x587/0x870 [ 1658.290900][T28454] ? do_syscall_64+0xb4/0x230 [ 1658.295610][T28454] do_syscall_64+0xf5/0x230 [ 1658.300157][T28454] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1658.306078][T28454] RIP: 0033:0x7f2d4627ba6f [ 1658.310528][T28454] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 1658.330185][T28454] RSP: 002b:00007f2d46fa8e70 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1658.338630][T28454] RAX: ffffffffffffffda RBX: 0000000000010000 RCX: 00007f2d4627ba6f [ 1658.346625][T28454] RDX: 0000000000010000 RSI: 00007f2d3c600000 RDI: 0000000000000004 [ 1658.354611][T28454] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000001f7 [ 1658.362594][T28454] R10: 00000000000001ce R11: 0000000000000293 R12: 0000000000000004 [ 1658.370577][T28454] R13: 00007f2d46fa8f3c R14: 00007f2d46fa8f40 R15: 00007f2d3c600000 [ 1658.378582][T28454] [ 1658.400955][T28458] FAULT_INJECTION: forcing a failure. [ 1658.400955][T28458] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1658.435777][T28458] CPU: 1 PID: 28458 Comm: syz-executor.4 Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 1658.445925][T28458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1658.456030][T28458] Call Trace: [ 1658.459350][T28458] [ 1658.462318][T28458] dump_stack_lvl+0x1e7/0x2d0 [ 1658.467063][T28458] ? nf_tcp_handle_invalid+0x650/0x650 [ 1658.472595][T28458] ? panic+0x850/0x850 [ 1658.476736][T28458] should_fail_ex+0x3aa/0x4e0 [ 1658.481483][T28458] prepare_alloc_pages+0x1d9/0x5b0 [ 1658.486659][T28458] __alloc_pages+0x165/0x680 [ 1658.491311][T28458] ? zone_statistics+0x170/0x170 [ 1658.496326][T28458] ? policy_nodemask+0x1ec/0x720 [ 1658.501342][T28458] alloc_pages_mpol+0x3de/0x640 [ 1658.506263][T28458] ? mempolicy_in_oom_domain+0x130/0x130 [ 1658.511960][T28458] ? xas_load+0x12c/0x140 [ 1658.516353][T28458] ? mpol_shared_policy_lookup+0x148/0x1e0 [ 1658.522218][T28458] shmem_alloc_and_add_folio+0x24f/0xde0 [ 1658.527924][T28458] ? put_swap_device+0x250/0x250 [ 1658.532916][T28458] ? __lock_acquire+0x1345/0x1fd0 [ 1658.538007][T28458] shmem_get_folio_gfp+0x7c3/0x1ee0 [ 1658.543285][T28458] ? shmem_get_folio+0xa0/0xa0 [ 1658.548116][T28458] ? print_unlock_imbalance_bug+0x2c0/0x2c0 [ 1658.554066][T28458] ? fault_in_readable+0x1a6/0x2b0 [ 1658.559242][T28458] shmem_write_begin+0x170/0x4c0 [ 1658.564244][T28458] ? shmem_writepage+0x18f0/0x18f0 [ 1658.569426][T28458] ? fault_in_iov_iter_readable+0x229/0x280 [ 1658.575390][T28458] generic_perform_write+0x31b/0x630 [ 1658.580762][T28458] ? generic_file_direct_write+0x3f0/0x3f0 [ 1658.586638][T28458] ? preempt_count_add+0x93/0x190 [ 1658.591736][T28458] ? mnt_put_write_access_file+0xbb/0x100 [ 1658.597606][T28458] ? file_update_time+0x3a6/0x3e0 [ 1658.602692][T28458] shmem_file_write_iter+0xfc/0x120 [ 1658.607957][T28458] vfs_write+0x783/0xaf0 [ 1658.612263][T28458] ? kernel_write+0x330/0x330 [ 1658.617002][T28458] ? __fget_files+0x3f4/0x470 [ 1658.621750][T28458] ? __fdget_pos+0x1a1/0x320 [ 1658.626405][T28458] ksys_write+0x1a0/0x2c0 [ 1658.630795][T28458] ? __ia32_sys_read+0x90/0x90 [ 1658.635617][T28458] ? exc_page_fault+0x587/0x870 [ 1658.640519][T28458] ? do_syscall_64+0xb4/0x230 [ 1658.645258][T28458] do_syscall_64+0xf5/0x230 [ 1658.649824][T28458] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1658.655756][T28458] RIP: 0033:0x7f3e7da7ba6f [ 1658.660212][T28458] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 1658.679871][T28458] RSP: 002b:00007f3e7e749e70 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1658.688353][T28458] RAX: ffffffffffffffda RBX: 0000000000100000 RCX: 00007f3e7da7ba6f [ 1658.696364][T28458] RDX: 0000000000100000 RSI: 00007f3e73e00000 RDI: 0000000000000004 [ 1658.704376][T28458] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000074f [ 1658.712401][T28458] R10: 00000000000003bc R11: 0000000000000293 R12: 0000000000000004 [ 1658.720424][T28458] R13: 00007f3e7e749f3c R14: 00007f3e7e749f40 R15: 00007f3e73e00000 [ 1658.728479][T28458] [ 1658.742650][T28455] FAULT_INJECTION: forcing a failure. 10:34:11 executing program 3: syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x10044, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x9, 0xc23, &(0x7f0000001940)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000380), 0x101bf) write$cgroup_int(r0, &(0x7f0000000040), 0xfea0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) [ 1658.742650][T28455] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1658.758784][T28455] CPU: 1 PID: 28455 Comm: syz-executor.0 Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 1658.768924][T28455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1658.779092][T28455] Call Trace: [ 1658.782409][T28455] [ 1658.785376][T28455] dump_stack_lvl+0x1e7/0x2d0 [ 1658.790128][T28455] ? nf_tcp_handle_invalid+0x650/0x650 [ 1658.795654][T28455] ? panic+0x850/0x850 [ 1658.799787][T28455] should_fail_ex+0x3aa/0x4e0 [ 1658.804530][T28455] prepare_alloc_pages+0x1d9/0x5b0 [ 1658.809707][T28455] __alloc_pages+0x165/0x680 [ 1658.814354][T28455] ? zone_statistics+0x170/0x170 [ 1658.819355][T28455] ? policy_nodemask+0x1ec/0x720 [ 1658.824350][T28455] alloc_pages_mpol+0x3de/0x640 [ 1658.829254][T28455] ? mempolicy_in_oom_domain+0x130/0x130 [ 1658.834933][T28455] ? xas_load+0x12c/0x140 [ 1658.839314][T28455] ? mpol_shared_policy_lookup+0x148/0x1e0 [ 1658.845176][T28455] shmem_alloc_and_add_folio+0x24f/0xde0 [ 1658.850874][T28455] ? put_swap_device+0x250/0x250 [ 1658.855878][T28455] shmem_get_folio_gfp+0x7c3/0x1ee0 [ 1658.861153][T28455] ? shmem_get_folio+0xa0/0xa0 [ 1658.865968][T28455] ? fault_in_readable+0x1a6/0x2b0 [ 1658.871134][T28455] shmem_write_begin+0x170/0x4c0 [ 1658.876129][T28455] ? shmem_writepage+0x18f0/0x18f0 [ 1658.881298][T28455] ? fault_in_iov_iter_readable+0x229/0x280 [ 1658.881745][T28463] loop5: detected capacity change from 0 to 8192 [ 1658.887223][T28455] generic_perform_write+0x31b/0x630 [ 1658.887280][T28455] ? generic_file_direct_write+0x3f0/0x3f0 [ 1658.887315][T28455] ? generic_write_checks_count+0x490/0x490 [ 1658.887338][T28455] ? rcu_read_lock_any_held+0xb7/0x160 [ 1658.887370][T28455] ? file_update_time+0x2a3/0x3e0 [ 1658.887407][T28455] shmem_file_write_iter+0xfc/0x120 [ 1658.926626][T28455] vfs_write+0x783/0xaf0 [ 1658.930950][T28455] ? kernel_write+0x330/0x330 [ 1658.935675][T28455] ? __fget_files+0x3f4/0x470 [ 1658.940402][T28455] ? __fdget_pos+0x1a1/0x320 [ 1658.945024][T28455] ksys_write+0x1a0/0x2c0 [ 1658.949395][T28455] ? __ia32_sys_read+0x90/0x90 [ 1658.954208][T28455] ? exc_page_fault+0x587/0x870 [ 1658.959086][T28455] ? do_syscall_64+0xb4/0x230 [ 1658.963824][T28455] do_syscall_64+0xf5/0x230 [ 1658.968402][T28455] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1658.974341][T28455] RIP: 0033:0x7f6cf647ba6f [ 1658.978781][T28455] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 1658.998407][T28455] RSP: 002b:00007f6cf71f0e70 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1659.006843][T28455] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007f6cf647ba6f [ 1659.014836][T28455] RDX: 0000000000080000 RSI: 00007f6cec800000 RDI: 0000000000000004 [ 1659.022839][T28455] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000005c8 [ 1659.030830][T28455] R10: 00000000200006c2 R11: 0000000000000293 R12: 0000000000000004 [ 1659.038815][T28455] R13: 00007f6cf71f0f3c R14: 00007f6cf71f0f40 R15: 00007f6cec800000 [ 1659.046826][T28455] [ 1659.184157][T28466] loop3: detected capacity change from 0 to 2048 10:34:11 executing program 4: syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000800), 0x1, 0x755, &(0x7f0000000840)="$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") (fail_nth: 42) 10:34:11 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000680), 0x1, 0x5ce, &(0x7f00000006c0)="$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") (fail_nth: 36) 10:34:11 executing program 3: r0 = io_uring_setup(0x3e9a, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0x2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{0x0}], 0x0, 0x1}, 0x20) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 10:34:11 executing program 1: syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1fd, &(0x7f00000002c0)="$eJzs3D1rU18cB/Dzb/vvQ6QPk6CLB110uWh9BUFaEANKbUQdlFuaakhMSm7ARBw6O/k6iqObIL6Bvgu3IkinTkbapI9WXWyj5POBcL7hS+AcQsLvBnI3H759UVnJkpW0GYbGYxgKYS1shzCzk3r+661Du3k0HLYWrj1Nt97cf/T4Tr5QmFuIcT6/eHM2xjh16ePL1+8uf2qee/B+6sNY2Jh5svl19vPG+Y0Lm98Wn5ezWM5ird6MaVyq15vpUrUUl8tZJYnxXrWUZqVYrmWlxpF+pVpfXW3HtLY8mVttlLIsprV2rJTasVmPzUY7ps/Sci0mSRInc4HfKa4vLKT5fu+C09Vo5NPhEMLED01xvS8bAgD6yvw/yMz/g2Bn/s/1Pr9Hmf8BAAAAAAAAAAAAAOBfsN3pTHc6nem9de8xFkIYDyHsPe/3Pjkd3v/BduiPe+MhfFlrFVvF7trt528X5q7HXTMHr9pqtYrD+/2Nbh+P9v+HXK+fPbEfDVevdPud7tbdwrF+Iiyf/vEBAABgICRx34nX90nys76bDv0+cOz6fSRcHDmzYwAAAAC/kLVfVdJqtdQQBEHYD/3+ZgIAAP60g6G/3zsBAAAAAAAAAAAAAAAAAACAwXUWtxPr9xkBAAAAAAAAAAAAAAAAAAAAAADgb/E9AAD//xRs0OA=") (fail_nth: 42) [ 1659.578642][T28471] FAULT_INJECTION: forcing a failure. [ 1659.578642][T28471] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1659.591881][T28471] CPU: 1 PID: 28471 Comm: syz-executor.4 Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 1659.601997][T28471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1659.612093][T28471] Call Trace: [ 1659.615393][T28471] [ 1659.618347][T28471] dump_stack_lvl+0x1e7/0x2d0 [ 1659.623061][T28471] ? nf_tcp_handle_invalid+0x650/0x650 [ 1659.628557][T28471] ? panic+0x850/0x850 [ 1659.632683][T28471] should_fail_ex+0x3aa/0x4e0 [ 1659.637409][T28471] copy_page_from_iter_atomic+0x27b/0x1e80 [ 1659.643249][T28471] ? shmem_get_folio+0xa0/0xa0 [ 1659.648038][T28471] ? print_unlock_imbalance_bug+0x2c0/0x2c0 [ 1659.653957][T28471] ? iov_iter_zero+0x1b60/0x1b60 [ 1659.658923][T28471] ? shmem_write_begin+0x23f/0x4c0 [ 1659.664058][T28471] ? shmem_writepage+0x18f0/0x18f0 [ 1659.669200][T28471] ? fault_in_iov_iter_readable+0x229/0x280 [ 1659.675119][T28471] generic_perform_write+0x392/0x630 [ 1659.680443][T28471] ? generic_file_direct_write+0x3f0/0x3f0 [ 1659.686297][T28471] ? preempt_count_add+0x93/0x190 [ 1659.691342][T28471] ? mnt_put_write_access_file+0xbb/0x100 [ 1659.697077][T28471] ? file_update_time+0x3a6/0x3e0 [ 1659.702123][T28471] shmem_file_write_iter+0xfc/0x120 [ 1659.707380][T28471] vfs_write+0x783/0xaf0 [ 1659.711654][T28471] ? kernel_write+0x330/0x330 [ 1659.716356][T28471] ? __fget_files+0x3f4/0x470 [ 1659.721063][T28471] ? __fdget_pos+0x1a1/0x320 [ 1659.725676][T28471] ksys_write+0x1a0/0x2c0 [ 1659.730047][T28471] ? __ia32_sys_read+0x90/0x90 [ 1659.734847][T28471] ? exc_page_fault+0x587/0x870 [ 1659.739722][T28471] ? do_syscall_64+0xb4/0x230 [ 1659.744425][T28471] do_syscall_64+0xf5/0x230 [ 1659.748986][T28471] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1659.754902][T28471] RIP: 0033:0x7f3e7da7ba6f [ 1659.759331][T28471] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 1659.778970][T28471] RSP: 002b:00007f3e7e749e70 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1659.787422][T28471] RAX: ffffffffffffffda RBX: 0000000000100000 RCX: 00007f3e7da7ba6f [ 1659.795444][T28471] RDX: 0000000000100000 RSI: 00007f3e73e00000 RDI: 0000000000000004 [ 1659.803457][T28471] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000074f [ 1659.811444][T28471] R10: 00000000000003bc R11: 0000000000000293 R12: 0000000000000004 [ 1659.819429][T28471] R13: 00007f3e7e749f3c R14: 00007f3e7e749f40 R15: 00007f3e73e00000 [ 1659.827431][T28471] [ 1659.870228][T28463] EXT4-fs warning (device sda1): verify_group_input:162: Bad blocks count 0 10:34:12 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000004c0)=ANY=[], 0xb) ftruncate(r0, 0x2ff8) r2 = dup3(r1, r0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r0, &(0x7f0000000040), 0xfea0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000000c0)={0x0, r3, 0x0, 0x8}) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000080)={0x0, r0, 0x0, 0x1}) ftruncate(r1, 0x6c58) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000000)={0x2880008, r3}) 10:34:12 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00') [ 1660.012675][T28471] loop4: detected capacity change from 0 to 2048 [ 1660.473615][T28471] /dev/loop4: Can't open blockdev [ 1660.580698][T28474] FAULT_INJECTION: forcing a failure. [ 1660.580698][T28474] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1660.593946][T28474] CPU: 0 PID: 28474 Comm: syz-executor.0 Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 1660.604060][T28474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1660.614165][T28474] Call Trace: [ 1660.617488][T28474] [ 1660.620462][T28474] dump_stack_lvl+0x1e7/0x2d0 [ 1660.625246][T28474] ? nf_tcp_handle_invalid+0x650/0x650 10:34:12 executing program 5: syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2810880, &(0x7f0000000300)=ANY=[], 0x8b, 0x287, &(0x7f00000003c0)="$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") sync() r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000080)='./file1\x00', 0x0) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) [ 1660.630766][T28474] ? panic+0x850/0x850 [ 1660.634890][T28474] should_fail_ex+0x3aa/0x4e0 [ 1660.639624][T28474] copy_page_from_iter_atomic+0x27b/0x1e80 [ 1660.645504][T28474] ? shmem_get_folio+0xa0/0xa0 [ 1660.650329][T28474] ? print_unlock_imbalance_bug+0x2c0/0x2c0 [ 1660.656291][T28474] ? iov_iter_zero+0x1b60/0x1b60 [ 1660.661297][T28474] ? shmem_write_begin+0x23f/0x4c0 [ 1660.666471][T28474] ? shmem_writepage+0x18f0/0x18f0 [ 1660.671647][T28474] ? fault_in_iov_iter_readable+0x229/0x280 [ 1660.677605][T28474] generic_perform_write+0x392/0x630 [ 1660.682980][T28474] ? generic_file_direct_write+0x3f0/0x3f0 [ 1660.688854][T28474] ? preempt_count_add+0x93/0x190 [ 1660.693946][T28474] ? mnt_put_write_access_file+0xbb/0x100 [ 1660.699719][T28474] ? file_update_time+0x3a6/0x3e0 [ 1660.704797][T28474] shmem_file_write_iter+0xfc/0x120 [ 1660.710040][T28474] vfs_write+0x783/0xaf0 [ 1660.714335][T28474] ? kernel_write+0x330/0x330 [ 1660.719051][T28474] ? __fget_files+0x3f4/0x470 [ 1660.723766][T28474] ? __fdget_pos+0x1a1/0x320 [ 1660.728382][T28474] ksys_write+0x1a0/0x2c0 [ 1660.732738][T28474] ? __ia32_sys_read+0x90/0x90 [ 1660.737526][T28474] ? exc_page_fault+0x587/0x870 [ 1660.742400][T28474] ? do_syscall_64+0xb4/0x230 [ 1660.747105][T28474] do_syscall_64+0xf5/0x230 [ 1660.751636][T28474] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1660.757554][T28474] RIP: 0033:0x7f6cf647ba6f [ 1660.761987][T28474] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 1660.781632][T28474] RSP: 002b:00007f6cf71f0e70 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1660.790072][T28474] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007f6cf647ba6f [ 1660.798059][T28474] RDX: 0000000000080000 RSI: 00007f6cec800000 RDI: 0000000000000004 [ 1660.806050][T28474] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000005c8 [ 1660.814029][T28474] R10: 00000000200006c2 R11: 0000000000000293 R12: 0000000000000004 [ 1660.822010][T28474] R13: 00007f6cf71f0f3c R14: 00007f6cf71f0f40 R15: 00007f6cec800000 [ 1660.830008][T28474] [ 1660.929365][T28475] FAULT_INJECTION: forcing a failure. [ 1660.929365][T28475] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1660.942850][T28475] CPU: 0 PID: 28475 Comm: syz-executor.1 Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 1660.952978][T28475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1660.963094][T28475] Call Trace: [ 1660.966481][T28475] [ 1660.969465][T28475] dump_stack_lvl+0x1e7/0x2d0 [ 1660.974217][T28475] ? nf_tcp_handle_invalid+0x650/0x650 10:34:13 executing program 3: r0 = io_uring_setup(0x567d, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000200)=[{&(0x7f00000007c0)=""/4096, 0x1000}], 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) [ 1660.979739][T28475] ? panic+0x850/0x850 [ 1660.983891][T28475] should_fail_ex+0x3aa/0x4e0 [ 1660.988638][T28475] copy_page_from_iter_atomic+0x27b/0x1e80 [ 1660.994521][T28475] ? shmem_get_folio+0xa0/0xa0 [ 1660.999349][T28475] ? print_unlock_imbalance_bug+0x2c0/0x2c0 [ 1661.005308][T28475] ? iov_iter_zero+0x1b60/0x1b60 [ 1661.010303][T28475] ? shmem_write_begin+0x23f/0x4c0 [ 1661.015478][T28475] ? shmem_writepage+0x18f0/0x18f0 [ 1661.020658][T28475] ? fault_in_iov_iter_readable+0x229/0x280 [ 1661.026627][T28475] generic_perform_write+0x392/0x630 [ 1661.032001][T28475] ? generic_file_direct_write+0x3f0/0x3f0 [ 1661.037875][T28475] ? preempt_count_add+0x93/0x190 [ 1661.043017][T28475] ? mnt_put_write_access_file+0xbb/0x100 [ 1661.048800][T28475] ? file_update_time+0x3a6/0x3e0 [ 1661.053918][T28475] shmem_file_write_iter+0xfc/0x120 [ 1661.059192][T28475] vfs_write+0x783/0xaf0 [ 1661.063513][T28475] ? kernel_write+0x330/0x330 [ 1661.068262][T28475] ? __fget_files+0x3f4/0x470 [ 1661.073009][T28475] ? __fdget_pos+0x1a1/0x320 [ 1661.077680][T28475] ksys_write+0x1a0/0x2c0 [ 1661.082086][T28475] ? __ia32_sys_read+0x90/0x90 [ 1661.086921][T28475] ? exc_page_fault+0x587/0x870 [ 1661.091850][T28475] ? do_syscall_64+0xb4/0x230 [ 1661.096857][T28475] do_syscall_64+0xf5/0x230 [ 1661.101442][T28475] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1661.107398][T28475] RIP: 0033:0x7f2d4627ba6f [ 1661.111869][T28475] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 1661.131535][T28475] RSP: 002b:00007f2d46fa8e70 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1661.140017][T28475] RAX: ffffffffffffffda RBX: 0000000000010000 RCX: 00007f2d4627ba6f [ 1661.148053][T28475] RDX: 0000000000010000 RSI: 00007f2d3c600000 RDI: 0000000000000004 [ 1661.156082][T28475] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000001f7 [ 1661.164103][T28475] R10: 00000000000001ce R11: 0000000000000293 R12: 0000000000000004 [ 1661.172127][T28475] R13: 00007f2d46fa8f3c R14: 00007f2d46fa8f40 R15: 00007f2d3c600000 [ 1661.180169][T28475] 10:34:13 executing program 2: r0 = openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000200)="7eae12acaeae21e78caa3201a045fc024cb8b579801d69a737d1f018e27be16bb2f409168e9caaa6f276435ba474f02bbb8c2dd4a2219d771d73f9b982cfb89d0a37", 0x42}], 0x1, 0x0, 0x0, 0x0) [ 1661.288935][T28474] loop0: detected capacity change from 0 to 1024 [ 1661.300599][T28475] loop1: detected capacity change from 0 to 128 [ 1661.305973][T28482] loop5: detected capacity change from 0 to 64 10:34:13 executing program 4: syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000800), 0x1, 0x755, &(0x7f0000000840)="$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") (fail_nth: 43) 10:34:13 executing program 2: syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="646973636172642c0008fd346f1fe0c7b977cf98b0dfc801ecf9a88e1ae482"], 0x1, 0x559d, &(0x7f0000005680)="$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") r0 = open(&(0x7f0000000040)='./file2\x00', 0x14d27e, 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f0) write$binfmt_script(r1, &(0x7f0000000240)=ANY=[], 0x63) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x147042, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x28000, 0x0, 0x0) rename(&(0x7f0000000100)='./file2\x00', &(0x7f0000000080)='./bus\x00') 10:34:13 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='ns\x00') getdents64(r0, 0xffffffffffffffff, 0x50) 10:34:13 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000680), 0x1, 0x5ce, &(0x7f00000006c0)="$eJzs3U9rHOcdB/DvrNay5IKjJHbitoGKlP6horZW67ZJwVQtpugQSsCvQNTrWHitBGlTlByKXfxCUoLeQC+55OCDz+1LEPRYKPRURC8uMzu72tiyLCWSdh1/Pvaz8zz7zPzmN7+dGWlXAgV4aa0spPkwRVYW3tsqxzvb7e7OdvvuoJ/kbJJG9T/NsvvPZOpBMp9+y3eTFHW44ln7ufbF5818ef9Gf9SoW7X+1EHbHc69umW5TnL5GOM9+sbxiuERlkGvD4JPgsfP958T3P3UCcbmCIpnvBZzybkkM/V9YHDiNk43u+M3MRcgAAAAnKBXdrObrZwfdx4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwIqn//n9Rt8agP59i8Pf/p+vnUvdfaA/HnQAAAAAAAAAAHIMf7GY3Wzk/GD8uqp/5v10NLlSP38nH2UwnG7mcrayml1420koyNxJoemu119toHWLLpX23XDqd4wUAAAAAAACAb6m/ZGXv5/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAJimSqv6jahUF/Lo1mkpkk0+V695J/DPovsofjTgAAAABOwSu72c1Wzg/Gj4vqPf8b1fv+mXyc9fSyll666eRm9VlA/11/Y2e73d3Zbt8t29Nxf/vvI6VRRUz/s4f993ypWmM2t7JWPXM5f8yH6eZmGtWWpUuDfPbP636ZU/Gb2iEzu1kvi6T4fv1pyGSYqypyZliRxTq3shqvHlyJI746T+6plcbwk58LJ1Dzc/WyrPnMRNd8aeTse+PgSiQ/uvbf9dvd9Tu3b20uTM4hfU1PVqI9Uok3X6pKLFaVuDgcr+T3uZGFzOf9bGQtf8pqeulkPter3mp9PpePcwdXavkro/efl8l0/br076JHy+ntatvzWcsf8mFuppNfZilX805a+VX17+rIK3zxEFd942hX/Q9/WndeS4rZ/nJClHV9daSuo/fcuWpu9Jm9Kr12/PfG5vfqzlRSNIc5TYInK9EaqcTrB1fir4/Lx83u+p2N26sfHXJ/P6mX5VeJsxP1VWK6Pnub1eirZ0c59/q+c61q7sJwrvHU3MXh3POu1On6e7inIy1Vc2/uO9eu5i6NzO33/RYAE+/cz85Nz/5r9u+zn80+mL09+97M786+c/at6Zx5dObXzcWpHzfeKv6Wz/Lnvff/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA17f5yad3VrvdzoaOjo7OsDPuOxOn4Urv7kdXNj/59Odrd1c/6HzQWW8v/mLp3XZr6d2rV26tdTuL/cdxp8kJ2bvox50JAAAAAAAAAAAAR3Eav0467mMEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgxbGykObDFGktXl4sxzvb7W7ZBv29NRtJmuXyf8nUg2Q+/Za5kXDFs/Zz7YvPm/ny/o29WI3B+lMHbXc49+qW5TrJ5WOM9+gbxyuGR1gGvT4IDuP2/wAAAP//wg8dzA==") (fail_nth: 37) 10:34:14 executing program 1: syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1fd, &(0x7f00000002c0)="$eJzs3D1rU18cB/Dzb/vvQ6QPk6CLB110uWh9BUFaEANKbUQdlFuaakhMSm7ARBw6O/k6iqObIL6Bvgu3IkinTkbapI9WXWyj5POBcL7hS+AcQsLvBnI3H759UVnJkpW0GYbGYxgKYS1shzCzk3r+661Du3k0HLYWrj1Nt97cf/T4Tr5QmFuIcT6/eHM2xjh16ePL1+8uf2qee/B+6sNY2Jh5svl19vPG+Y0Lm98Wn5ezWM5ird6MaVyq15vpUrUUl8tZJYnxXrWUZqVYrmWlxpF+pVpfXW3HtLY8mVttlLIsprV2rJTasVmPzUY7ps/Sci0mSRInc4HfKa4vLKT5fu+C09Vo5NPhEMLED01xvS8bAgD6yvw/yMz/g2Bn/s/1Pr9Hmf8BAAAAAAAAAAAAAOBfsN3pTHc6nem9de8xFkIYDyHsPe/3Pjkd3v/BduiPe+MhfFlrFVvF7trt528X5q7HXTMHr9pqtYrD+/2Nbh+P9v+HXK+fPbEfDVevdPud7tbdwrF+Iiyf/vEBAABgICRx34nX90nys76bDv0+cOz6fSRcHDmzYwAAAAC/kLVfVdJqtdQQBEHYD/3+ZgIAAP60g6G/3zsBAAAAAAAAAAAAAAAAAACAwXUWtxPr9xkBAAAAAAAAAAAAAAAAAAAAAADgb/E9AAD//xRs0OA=") (fail_nth: 43) [ 1661.698148][T28488] FAULT_INJECTION: forcing a failure. [ 1661.698148][T28488] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1661.807661][T28488] CPU: 0 PID: 28488 Comm: syz-executor.4 Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 1661.817825][T28488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1661.827934][T28488] Call Trace: [ 1661.831260][T28488] [ 1661.834230][T28488] dump_stack_lvl+0x1e7/0x2d0 [ 1661.838977][T28488] ? nf_tcp_handle_invalid+0x650/0x650 [ 1661.844506][T28488] ? panic+0x850/0x850 [ 1661.848640][T28488] should_fail_ex+0x3aa/0x4e0 [ 1661.853385][T28488] prepare_alloc_pages+0x1d9/0x5b0 [ 1661.858571][T28488] __alloc_pages+0x165/0x680 [ 1661.863232][T28488] ? zone_statistics+0x170/0x170 [ 1661.868243][T28488] ? policy_nodemask+0x1ec/0x720 [ 1661.873254][T28488] alloc_pages_mpol+0x3de/0x640 [ 1661.878188][T28488] ? mempolicy_in_oom_domain+0x130/0x130 [ 1661.883909][T28488] ? xas_load+0x12c/0x140 [ 1661.888312][T28488] ? mpol_shared_policy_lookup+0x148/0x1e0 [ 1661.894190][T28488] shmem_alloc_and_add_folio+0x24f/0xde0 [ 1661.899920][T28488] ? put_swap_device+0x250/0x250 [ 1661.904929][T28488] ? __lock_acquire+0x1345/0x1fd0 [ 1661.910022][T28488] shmem_get_folio_gfp+0x7c3/0x1ee0 [ 1661.915307][T28488] ? shmem_get_folio+0xa0/0xa0 [ 1661.920133][T28488] ? print_unlock_imbalance_bug+0x2c0/0x2c0 [ 1661.926078][T28488] ? fault_in_readable+0x1a6/0x2b0 [ 1661.931254][T28488] shmem_write_begin+0x170/0x4c0 [ 1661.936254][T28488] ? shmem_writepage+0x18f0/0x18f0 [ 1661.941511][T28488] ? fault_in_iov_iter_readable+0x229/0x280 [ 1661.947473][T28488] generic_perform_write+0x31b/0x630 [ 1661.952844][T28488] ? generic_file_direct_write+0x3f0/0x3f0 [ 1661.958715][T28488] ? preempt_count_add+0x93/0x190 [ 1661.963796][T28488] ? mnt_put_write_access_file+0xbb/0x100 [ 1661.969578][T28488] ? file_update_time+0x3a6/0x3e0 [ 1661.974667][T28488] shmem_file_write_iter+0xfc/0x120 [ 1661.979928][T28488] vfs_write+0x783/0xaf0 [ 1661.984240][T28488] ? kernel_write+0x330/0x330 [ 1661.988980][T28488] ? __fget_files+0x3f4/0x470 [ 1661.993716][T28488] ? __fdget_pos+0x1a1/0x320 [ 1661.998359][T28488] ksys_write+0x1a0/0x2c0 [ 1662.002747][T28488] ? __ia32_sys_read+0x90/0x90 [ 1662.007564][T28488] ? exc_page_fault+0x587/0x870 [ 1662.012461][T28488] ? do_syscall_64+0xb4/0x230 [ 1662.017194][T28488] do_syscall_64+0xf5/0x230 [ 1662.021777][T28488] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1662.027727][T28488] RIP: 0033:0x7f3e7da7ba6f [ 1662.032190][T28488] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 1662.051857][T28488] RSP: 002b:00007f3e7e749e70 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1662.060407][T28488] RAX: ffffffffffffffda RBX: 0000000000100000 RCX: 00007f3e7da7ba6f [ 1662.068415][T28488] RDX: 0000000000100000 RSI: 00007f3e73e00000 RDI: 0000000000000004 [ 1662.076423][T28488] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000074f [ 1662.084427][T28488] R10: 00000000000003bc R11: 0000000000000293 R12: 0000000000000004 [ 1662.092439][T28488] R13: 00007f3e7e749f3c R14: 00007f3e7e749f40 R15: 00007f3e73e00000 [ 1662.100473][T28488] [ 1662.133142][T28497] FAULT_INJECTION: forcing a failure. [ 1662.133142][T28497] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1662.146983][T28497] CPU: 0 PID: 28497 Comm: syz-executor.1 Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 1662.157097][T28497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1662.167199][T28497] Call Trace: [ 1662.170514][T28497] [ 1662.173488][T28497] dump_stack_lvl+0x1e7/0x2d0 [ 1662.178237][T28497] ? nf_tcp_handle_invalid+0x650/0x650 [ 1662.183764][T28497] ? panic+0x850/0x850 [ 1662.187906][T28497] should_fail_ex+0x3aa/0x4e0 [ 1662.192647][T28497] prepare_alloc_pages+0x1d9/0x5b0 [ 1662.197830][T28497] __alloc_pages+0x165/0x680 [ 1662.202477][T28497] ? zone_statistics+0x170/0x170 [ 1662.207469][T28497] ? policy_nodemask+0x1ec/0x720 [ 1662.212458][T28497] alloc_pages_mpol+0x3de/0x640 [ 1662.217364][T28497] ? mempolicy_in_oom_domain+0x130/0x130 [ 1662.223054][T28497] ? xas_load+0x12c/0x140 [ 1662.227445][T28497] ? mpol_shared_policy_lookup+0x148/0x1e0 10:34:14 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='ns\x00') getdents64(r0, 0xffffffffffffffff, 0x50) [ 1662.233308][T28497] shmem_alloc_and_add_folio+0x24f/0xde0 [ 1662.239020][T28497] ? put_swap_device+0x250/0x250 [ 1662.244038][T28497] shmem_get_folio_gfp+0x7c3/0x1ee0 [ 1662.249319][T28497] ? shmem_get_folio+0xa0/0xa0 [ 1662.254134][T28497] ? fault_in_readable+0x1a6/0x2b0 [ 1662.259306][T28497] shmem_write_begin+0x170/0x4c0 [ 1662.264306][T28497] ? shmem_writepage+0x18f0/0x18f0 [ 1662.269479][T28497] ? fault_in_iov_iter_readable+0x229/0x280 [ 1662.275435][T28497] generic_perform_write+0x31b/0x630 [ 1662.280805][T28497] ? generic_file_direct_write+0x3f0/0x3f0 [ 1662.286666][T28497] ? generic_write_checks_count+0x490/0x490 [ 1662.292602][T28497] ? rcu_read_lock_any_held+0xb7/0x160 [ 1662.298121][T28497] ? file_update_time+0x2a3/0x3e0 [ 1662.302094][T28496] FAULT_INJECTION: forcing a failure. [ 1662.302094][T28496] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1662.303181][T28497] shmem_file_write_iter+0xfc/0x120 [ 1662.303223][T28497] vfs_write+0x783/0xaf0 [ 1662.325919][T28497] ? kernel_write+0x330/0x330 [ 1662.330656][T28497] ? __fget_files+0x3f4/0x470 [ 1662.335384][T28497] ? __fdget_pos+0x1a1/0x320 [ 1662.340024][T28497] ksys_write+0x1a0/0x2c0 [ 1662.344411][T28497] ? __ia32_sys_read+0x90/0x90 [ 1662.349222][T28497] ? exc_page_fault+0x587/0x870 [ 1662.354112][T28497] ? do_syscall_64+0xb4/0x230 [ 1662.358841][T28497] do_syscall_64+0xf5/0x230 [ 1662.363402][T28497] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1662.369341][T28497] RIP: 0033:0x7f2d4627ba6f [ 1662.373807][T28497] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 1662.393468][T28497] RSP: 002b:00007f2d46fa8e70 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1662.401940][T28497] RAX: ffffffffffffffda RBX: 0000000000010000 RCX: 00007f2d4627ba6f [ 1662.409958][T28497] RDX: 0000000000010000 RSI: 00007f2d3c600000 RDI: 0000000000000004 [ 1662.417970][T28497] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000001f7 [ 1662.425988][T28497] R10: 00000000000001ce R11: 0000000000000293 R12: 0000000000000004 [ 1662.433996][T28497] R13: 00007f2d46fa8f3c R14: 00007f2d46fa8f40 R15: 00007f2d3c600000 [ 1662.442039][T28497] [ 1662.473134][T28496] CPU: 0 PID: 28496 Comm: syz-executor.0 Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 1662.483280][T28496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1662.493387][T28496] Call Trace: [ 1662.496715][T28496] [ 1662.499696][T28496] dump_stack_lvl+0x1e7/0x2d0 [ 1662.504466][T28496] ? nf_tcp_handle_invalid+0x650/0x650 [ 1662.510001][T28496] ? panic+0x850/0x850 [ 1662.514138][T28496] should_fail_ex+0x3aa/0x4e0 [ 1662.518880][T28496] prepare_alloc_pages+0x1d9/0x5b0 [ 1662.524062][T28496] __alloc_pages+0x165/0x680 [ 1662.528725][T28496] ? zone_statistics+0x170/0x170 [ 1662.533740][T28496] ? policy_nodemask+0x1ec/0x720 [ 1662.538750][T28496] alloc_pages_mpol+0x3de/0x640 [ 1662.543666][T28496] ? mempolicy_in_oom_domain+0x130/0x130 [ 1662.549354][T28496] ? xas_load+0x12c/0x140 [ 1662.553743][T28496] ? mpol_shared_policy_lookup+0x148/0x1e0 [ 1662.559612][T28496] shmem_alloc_and_add_folio+0x24f/0xde0 [ 1662.565318][T28496] ? put_swap_device+0x250/0x250 [ 1662.570321][T28496] shmem_get_folio_gfp+0x7c3/0x1ee0 [ 1662.575601][T28496] ? shmem_get_folio+0xa0/0xa0 [ 1662.580420][T28496] ? fault_in_readable+0x1a6/0x2b0 [ 1662.585568][T28496] shmem_write_begin+0x170/0x4c0 [ 1662.590534][T28496] ? shmem_writepage+0x18f0/0x18f0 [ 1662.595669][T28496] ? fault_in_iov_iter_readable+0x229/0x280 [ 1662.601595][T28496] generic_perform_write+0x31b/0x630 [ 1662.606930][T28496] ? generic_file_direct_write+0x3f0/0x3f0 [ 1662.612767][T28496] ? generic_write_checks_count+0x490/0x490 [ 1662.618682][T28496] ? rcu_read_lock_any_held+0xb7/0x160 [ 1662.624164][T28496] ? file_update_time+0x2a3/0x3e0 [ 1662.629217][T28496] shmem_file_write_iter+0xfc/0x120 [ 1662.634443][T28496] vfs_write+0x783/0xaf0 [ 1662.638714][T28496] ? kernel_write+0x330/0x330 [ 1662.643422][T28496] ? __fget_files+0x3f4/0x470 [ 1662.648143][T28496] ? __fdget_pos+0x1a1/0x320 [ 1662.652761][T28496] ksys_write+0x1a0/0x2c0 [ 1662.657127][T28496] ? __ia32_sys_read+0x90/0x90 [ 1662.661913][T28496] ? exc_page_fault+0x587/0x870 [ 1662.666785][T28496] ? do_syscall_64+0xb4/0x230 [ 1662.671484][T28496] do_syscall_64+0xf5/0x230 [ 1662.676019][T28496] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1662.681929][T28496] RIP: 0033:0x7f6cf647ba6f [ 1662.686361][T28496] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 1662.705988][T28496] RSP: 002b:00007f6cf71f0e70 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1662.714421][T28496] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007f6cf647ba6f [ 1662.722407][T28496] RDX: 0000000000080000 RSI: 00007f6cec800000 RDI: 0000000000000004 [ 1662.730396][T28496] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000005c8 [ 1662.738382][T28496] R10: 00000000200006c2 R11: 0000000000000293 R12: 0000000000000004 [ 1662.746364][T28496] R13: 00007f6cf71f0f3c R14: 00007f6cf71f0f40 R15: 00007f6cec800000 [ 1662.754365][T28496] 10:34:15 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='ns\x00') getdents64(r0, 0xffffffffffffffff, 0x50) 10:34:15 executing program 4: syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000800), 0x1, 0x755, &(0x7f0000000840)="$eJzs3U9oHNUfAPDvzO4m/ff7JRUPVkQLoi2oSdOKpOKhET0oHgR7ES8uzbbUbv/QRLRFMLnrTbypVPCqCJ70Unrw4s2bV08SDaI9eIzMZDZZm938MbsddT4fmOS9ebt5b7J8583Oe8wLoLIOZz/SiEMRsZBEjBX7k4ho5Kl6xKnV193+7Z0z2ZbEysorvyb5a7J8dL0ns794256I+P5WEvfUNtY7d+36hWa73bpa5CfnL16ZnLt2/YnzF5vnWudal6amT06fmD5+8qnpgR3rCx998urSxy8+uvj+GzNfv/bz70mcigNFWfdxDMrhOLz2P+lWj4jnBl1ZSWrF8aRd+5J6iQ1iR9Kuz/C+GItarH94Y3Hrq1IbBwAMxUq2AQAVk+j/AaBiOvcBOmN7wxgHA/6ZlmciH6jfGP/1OJX/3pPPA9h3O4nuYd2kM3dgl7K/8cu3X3yWbTGkcXigt4XFfOC/R/wnefyP57N4NsZ/LaI4P+zOnecQ8Q93z27i/+UB1C/+AQAAAAAAYHBuzkTEdK/xv3Rt/k/0GP8bjYhjA6h/6/G/dGkA1QA9LM9EPNNz/u/aE13Ga0Xuf/l8gEZy9ny7lcX+/yPiaDRGs/zUJnV899aPz/Yr657/l21Z/Z25gEU7luqjf33PbHO+uZtjBlYtL0bcX+8//yfr/5M+839f32YdX374+SP9yraOf2BYVm5EHOnZ/68/uS7Z/Pl8k/n1wGTnqmCjB5+/8Ue/+sU/lCfr//dtHv/jSffzOud2Xsen751+oF/Z373+H0lO508VHSn2vd2cn786FTGSvLRx//Gdtxn+izrx0ImXLP6PPrz5/b9e1/+NiLiyzTqnDnzzeL8y/T+UJ4v/2R31/ztPnHv3xIV+9W+v/38y79OPFnvc/4PNbTdAy24nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMUhoRByJJJ9bSaToxEbE/Iu6NfWn78tz8Y2cvv3lpNiuLGI9GevZ8u3UsIsZW80mWn8rT6/njd+RPRMTBiPhgdG+enzhzuT1b9sEDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQGF/n/X/Mz+Nlt06AGBo9pTdAADgrtP/A0D16P8BoHr0/wBQPfp/AKge/T8AAAAAAAAAAAAAAAAAAAAAAAAADNXBh27+kETEwtN78y0zUpQ1Sm0ZMGxp2Q0ASlMruwFAaeplNwAoje/4QLJFef8lQtxBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgOo4csv4/VJXV+6C6rP8P1WX9f6gu3/EB6/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDW5q5dv9Bst1tXJSQkJNYSZZ+ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4N/gzAAD//+MUMFo=") (fail_nth: 44) 10:34:15 executing program 1: syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1fd, &(0x7f00000002c0)="$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") (fail_nth: 44) [ 1663.092767][T28503] FAULT_INJECTION: forcing a failure. [ 1663.092767][T28503] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1663.106062][T28503] CPU: 0 PID: 28503 Comm: syz-executor.4 Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 1663.116187][T28503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1663.126298][T28503] Call Trace: [ 1663.129625][T28503] [ 1663.132597][T28503] dump_stack_lvl+0x1e7/0x2d0 [ 1663.137354][T28503] ? nf_tcp_handle_invalid+0x650/0x650 [ 1663.142894][T28503] ? panic+0x850/0x850 [ 1663.147060][T28503] should_fail_ex+0x3aa/0x4e0 [ 1663.151814][T28503] copy_page_from_iter_atomic+0x27b/0x1e80 [ 1663.157707][T28503] ? shmem_get_folio+0xa0/0xa0 [ 1663.162524][T28503] ? print_unlock_imbalance_bug+0x2c0/0x2c0 [ 1663.168477][T28503] ? iov_iter_zero+0x1b60/0x1b60 [ 1663.173476][T28503] ? shmem_write_begin+0x23f/0x4c0 [ 1663.178639][T28503] ? shmem_writepage+0x18f0/0x18f0 [ 1663.183801][T28503] ? fault_in_iov_iter_readable+0x229/0x280 [ 1663.189754][T28503] generic_perform_write+0x392/0x630 [ 1663.195104][T28503] ? generic_file_direct_write+0x3f0/0x3f0 [ 1663.200967][T28503] ? preempt_count_add+0x93/0x190 [ 1663.206048][T28503] ? mnt_put_write_access_file+0xbb/0x100 [ 1663.211821][T28503] ? file_update_time+0x3a6/0x3e0 [ 1663.216916][T28503] shmem_file_write_iter+0xfc/0x120 [ 1663.222185][T28503] vfs_write+0x783/0xaf0 [ 1663.226515][T28503] ? kernel_write+0x330/0x330 [ 1663.231265][T28503] ? __fget_files+0x3f4/0x470 [ 1663.236020][T28503] ? __fdget_pos+0x1a1/0x320 [ 1663.240671][T28503] ksys_write+0x1a0/0x2c0 [ 1663.245059][T28503] ? __ia32_sys_read+0x90/0x90 [ 1663.249878][T28503] ? exc_page_fault+0x587/0x870 [ 1663.254789][T28503] ? do_syscall_64+0xb4/0x230 [ 1663.259533][T28503] do_syscall_64+0xf5/0x230 [ 1663.264104][T28503] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1663.270054][T28503] RIP: 0033:0x7f3e7da7ba6f [ 1663.274520][T28503] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 1663.294187][T28503] RSP: 002b:00007f3e7e749e70 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1663.302673][T28503] RAX: ffffffffffffffda RBX: 0000000000100000 RCX: 00007f3e7da7ba6f [ 1663.310707][T28503] RDX: 0000000000100000 RSI: 00007f3e73e00000 RDI: 0000000000000004 [ 1663.318741][T28503] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000074f [ 1663.326762][T28503] R10: 00000000000003bc R11: 0000000000000293 R12: 0000000000000004 [ 1663.334782][T28503] R13: 00007f3e7e749f3c R14: 00007f3e7e749f40 R15: 00007f3e73e00000 [ 1663.342820][T28503] [ 1663.511268][T28503] loop4: detected capacity change from 0 to 2048 [ 1663.557947][T28503] /dev/loop4: Can't open blockdev [ 1663.599749][T28505] FAULT_INJECTION: forcing a failure. [ 1663.599749][T28505] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1663.612996][T28505] CPU: 0 PID: 28505 Comm: syz-executor.1 Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 1663.623097][T28505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1663.633185][T28505] Call Trace: [ 1663.636481][T28505] [ 1663.639424][T28505] dump_stack_lvl+0x1e7/0x2d0 [ 1663.644136][T28505] ? nf_tcp_handle_invalid+0x650/0x650 [ 1663.649625][T28505] ? panic+0x850/0x850 [ 1663.653752][T28505] should_fail_ex+0x3aa/0x4e0 [ 1663.658480][T28505] copy_page_from_iter_atomic+0x27b/0x1e80 [ 1663.664334][T28505] ? shmem_get_folio+0xa0/0xa0 [ 1663.669143][T28505] ? print_unlock_imbalance_bug+0x2c0/0x2c0 [ 1663.675067][T28505] ? iov_iter_zero+0x1b60/0x1b60 [ 1663.680029][T28505] ? shmem_write_begin+0x23f/0x4c0 [ 1663.685167][T28505] ? shmem_writepage+0x18f0/0x18f0 [ 1663.690306][T28505] ? fault_in_iov_iter_readable+0x229/0x280 [ 1663.696224][T28505] generic_perform_write+0x392/0x630 [ 1663.701549][T28505] ? generic_file_direct_write+0x3f0/0x3f0 [ 1663.707400][T28505] ? preempt_count_add+0x93/0x190 [ 1663.712483][T28505] ? mnt_put_write_access_file+0xbb/0x100 [ 1663.718247][T28505] ? file_update_time+0x3a6/0x3e0 [ 1663.723315][T28505] shmem_file_write_iter+0xfc/0x120 [ 1663.728580][T28505] vfs_write+0x783/0xaf0 [ 1663.732900][T28505] ? kernel_write+0x330/0x330 [ 1663.737621][T28505] ? __fget_files+0x3f4/0x470 [ 1663.742343][T28505] ? __fdget_pos+0x1a1/0x320 [ 1663.746962][T28505] ksys_write+0x1a0/0x2c0 [ 1663.751319][T28505] ? __ia32_sys_read+0x90/0x90 [ 1663.756108][T28505] ? exc_page_fault+0x587/0x870 [ 1663.760999][T28505] ? do_syscall_64+0xb4/0x230 [ 1663.765726][T28505] do_syscall_64+0xf5/0x230 [ 1663.770276][T28505] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1663.776192][T28505] RIP: 0033:0x7f2d4627ba6f [ 1663.780622][T28505] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 1663.800250][T28505] RSP: 002b:00007f2d46fa8e70 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1663.808684][T28505] RAX: ffffffffffffffda RBX: 0000000000010000 RCX: 00007f2d4627ba6f [ 1663.816675][T28505] RDX: 0000000000010000 RSI: 00007f2d3c600000 RDI: 0000000000000004 [ 1663.824658][T28505] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000001f7 [ 1663.832648][T28505] R10: 00000000000001ce R11: 0000000000000293 R12: 0000000000000004 [ 1663.840641][T28505] R13: 00007f2d46fa8f3c R14: 00007f2d46fa8f40 R15: 00007f2d3c600000 [ 1663.848647][T28505] [ 1664.069730][T28505] loop1: detected capacity change from 0 to 128 [ 1664.604790][ T28] audit: type=1800 audit(1704796456.906:1136): pid=28491 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.2" name="file2" dev="sda1" ino=1956 res=0 errno=0 [ 1664.695694][ T28] audit: type=1800 audit(1704796456.906:1137): pid=28491 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1957 res=0 errno=0 [ 1664.795511][ T28] audit: type=1800 audit(1704796456.956:1138): pid=28491 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1957 res=0 errno=0 [ 1669.078777][ T1234] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.085139][ T1234] ieee802154 phy1 wpan1: encryption failed: -22 [ 1677.395878][ T29] INFO: task kworker/u4:10:2837 blocked for more than 143 seconds. [ 1677.404277][ T29] Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 1677.457379][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1677.485591][ T29] task:kworker/u4:10 state:D stack:19800 pid:2837 tgid:2837 ppid:2 flags:0x00004000 [ 1677.525740][ T29] Workqueue: btrfs-endio-write btrfs_work_helper [ 1677.532189][ T29] Call Trace: [ 1677.559233][ T29] [ 1677.562238][ T29] __schedule+0x177f/0x4960 [ 1677.595457][ T29] ? release_firmware_map_entry+0x190/0x190 [ 1677.601459][ T29] ? __lock_acquire+0x1fd0/0x1fd0 [ 1677.636814][ T29] ? kthread_data+0x52/0xc0 [ 1677.641391][ T29] ? schedule+0x8e/0x260 [ 1677.677402][ T29] ? wq_worker_sleeping+0x66/0x240 [ 1677.682594][ T29] ? do_raw_spin_unlock+0x13b/0x8b0 [ 1677.715458][ T29] ? schedule+0x8e/0x260 [ 1677.719787][ T29] schedule+0x149/0x260 [ 1677.723981][ T29] lock_extent+0x69d/0x850 [ 1677.755558][ T29] ? try_lock_extent+0x1a0/0x1a0 [ 1677.760602][ T29] ? wake_bit_function+0x220/0x220 [ 1677.787604][ T29] ? mark_lock+0x9a/0x350 [ 1677.792048][ T29] ? __lock_acquire+0x1345/0x1fd0 [ 1677.815607][ T29] btrfs_finish_one_ordered+0x57f/0x1680 [ 1677.821344][ T29] ? btrfs_finish_one_ordered+0x241/0x1680 [ 1677.856836][ T29] ? btrfs_writepage_fixup_worker+0xd70/0xd70 [ 1677.863015][ T29] ? read_lock_is_recursive+0x20/0x20 [ 1677.885486][ T29] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 1677.891563][ T29] btrfs_work_helper+0x37c/0xbe0 [ 1677.925530][ T29] ? process_scheduled_works+0x825/0x1420 [ 1677.931350][ T29] process_scheduled_works+0x90f/0x1420 [ 1677.947089][ T29] ? assign_work+0x3d0/0x3d0 [ 1677.951754][ T29] ? assign_work+0x364/0x3d0 [ 1677.975490][ T29] worker_thread+0xa5f/0x1000 [ 1677.980276][ T29] kthread+0x2d3/0x370 [ 1677.984380][ T29] ? pr_cont_work+0x5e0/0x5e0 [ 1678.015411][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1678.025769][ T29] ret_from_fork+0x48/0x80 [ 1678.030252][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1678.034875][ T29] ret_from_fork_asm+0x11/0x20 [ 1678.075459][ T29] [ 1678.085507][ T29] INFO: task syz-executor.2:27720 blocked for more than 144 seconds. [ 1678.093612][ T29] Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 1678.125677][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1678.134412][ T29] task:syz-executor.2 state:D stack:23536 pid:27720 tgid:27719 ppid:10819 flags:0x00004006 [ 1678.175417][ T29] Call Trace: [ 1678.178766][ T29] [ 1678.181733][ T29] __schedule+0x177f/0x4960 [ 1678.215447][ T29] ? release_firmware_map_entry+0x190/0x190 [ 1678.221424][ T29] ? __lock_acquire+0x1fd0/0x1fd0 [ 1678.255456][ T29] ? print_irqtrace_events+0x220/0x220 [ 1678.261015][ T29] ? schedule+0x8e/0x260 [ 1678.295445][ T29] schedule+0x149/0x260 [ 1678.299695][ T29] io_schedule+0x8c/0x100 [ 1678.304067][ T29] folio_wait_bit_common+0x881/0x12b0 [ 1678.337407][ T29] ? folio_wait_bit+0x30/0x30 [ 1678.342189][ T29] ? _compound_head+0x120/0x120 [ 1678.365441][ T29] ? rcu_is_watching+0x15/0xb0 [ 1678.372904][ T29] ? iomap_iter+0x572/0xee0 [ 1678.395443][ T29] invalidate_inode_pages2_range+0x467/0x1040 [ 1678.401633][ T29] ? invalidate_mapping_pages+0x30/0x30 [ 1678.435556][ T29] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 1678.441650][ T29] kiocb_invalidate_post_direct_write+0x137/0x2d0 [ 1678.475433][ T29] ? read_cache_page_gfp+0x30/0x30 [ 1678.480651][ T29] ? btrfs_do_write_iter+0x7d1/0x1190 [ 1678.515555][ T29] ? __up_read+0x2bd/0x6a0 [ 1678.520054][ T29] iomap_dio_complete+0x50b/0x8e0 [ 1678.525132][ T29] btrfs_do_write_iter+0x7f4/0x1190 [ 1678.557508][ T29] ? btrfs_check_nocow_unlock+0x40/0x40 [ 1678.563157][ T29] iter_file_splice_write+0xa64/0x1320 [ 1678.596908][ T29] ? splice_from_pipe+0x240/0x240 [ 1678.602060][ T29] ? rcu_read_lock_any_held+0xb7/0x160 [ 1678.635530][ T29] ? splice_from_pipe+0x240/0x240 [ 1678.640653][ T29] direct_splice_actor+0xf6/0x1e0 [ 1678.667711][ T29] ? splice_folio_into_pipe+0x480/0x480 [ 1678.705439][ T29] splice_direct_to_actor+0x54e/0xc80 [ 1678.725541][ T29] ? do_splice_direct+0x3e0/0x3e0 [ 1678.730638][ T29] ? vfs_splice_read+0x3d0/0x3d0 [ 1678.765641][ T29] ? __lock_acquire+0x1fd0/0x1fd0 [ 1678.770831][ T29] do_splice_direct+0x28c/0x3e0 [ 1678.798272][ T29] ? splice_direct_to_actor+0xc80/0xc80 [ 1678.803922][ T29] ? warn_unsupported+0xc0/0xc0 [ 1678.829343][ T29] ? rw_verify_area+0x1d2/0x570 [ 1678.834290][ T29] do_sendfile+0x56d/0xdb0 [ 1678.880917][ T29] ? vfs_writev+0xba0/0xba0 [ 1678.895505][ T29] ? xfd_validate_state+0x6e/0x150 [ 1678.905455][ T29] ? restore_fpregs_from_fpstate+0x100/0x250 [ 1678.925447][ T29] __se_sys_sendfile64+0x17c/0x1e0 [ 1678.930658][ T29] ? __x64_sys_sendfile64+0xb0/0xb0 [ 1678.965462][ T29] ? do_syscall_64+0x102/0x230 [ 1678.970349][ T29] ? do_syscall_64+0xb4/0x230 [ 1678.975103][ T29] do_syscall_64+0xf5/0x230 [ 1679.005432][ T29] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1679.011409][ T29] RIP: 0033:0x7f8bc1a7cd29 [ 1679.035425][ T29] RSP: 002b:00007f8bc28480c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1679.043944][ T29] RAX: ffffffffffffffda RBX: 00007f8bc1babf80 RCX: 00007f8bc1a7cd29 [ 1679.085508][ T29] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 1679.096786][ T29] RBP: 00007f8bc1ac947a R08: 0000000000000000 R09: 0000000000000000 [ 1679.104816][ T29] R10: 0000000008800000 R11: 0000000000000246 R12: 0000000000000000 [ 1679.155510][ T29] R13: 000000000000000b R14: 00007f8bc1babf80 R15: 00007ffe700a3f08 [ 1679.163587][ T29] [ 1679.188170][ T29] INFO: task syz-executor.2:27746 blocked for more than 145 seconds. [ 1679.215447][ T29] Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 1679.222707][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1679.265404][ T29] task:syz-executor.2 state:D stack:20944 pid:27746 tgid:27719 ppid:10819 flags:0x00004006 [ 1679.295476][ T29] Call Trace: [ 1679.298822][ T29] [ 1679.301876][ T29] __schedule+0x177f/0x4960 [ 1679.345523][ T29] ? release_firmware_map_entry+0x190/0x190 [ 1679.351590][ T29] ? __blk_flush_plug+0x46b/0x4c0 [ 1679.395469][ T29] ? __lock_acquire+0x1fd0/0x1fd0 [ 1679.400605][ T29] ? schedule+0x8e/0x260 [ 1679.404883][ T29] schedule+0x149/0x260 [ 1679.445416][ T29] btrfs_start_ordered_extent+0x41c/0x5f0 [ 1679.451252][ T29] ? __clear_extent_bit+0x881/0xb10 [ 1679.495446][ T29] ? btrfs_start_ordered_extent+0x2f9/0x5f0 [ 1679.501439][ T29] ? btrfs_wait_ordered_roots+0x950/0x950 [ 1679.545450][ T29] ? wake_bit_function+0x220/0x220 [ 1679.550666][ T29] btrfs_lock_and_flush_ordered_range+0x115/0x220 [ 1679.575430][ T29] ? __lock_acquire+0x1fd0/0x1fd0 [ 1679.580538][ T29] ? btrfs_lookup_first_ordered_range+0x560/0x560 [ 1679.625470][ T29] extent_readahead+0x10c1/0x1470 [ 1679.630598][ T29] ? extent_readahead+0x38c/0x1470 [ 1679.665452][ T29] ? extent_writepages+0x26a0/0x26a0 [ 1679.670837][ T29] ? _compound_head+0x120/0x120 [ 1679.695425][ T29] ? xa_load+0x153/0x480 [ 1679.725765][ T29] ? blk_start_plug+0x6f/0x1b0 [ 1679.730618][ T29] read_pages+0x183/0x830 [ 1679.735003][ T29] ? page_cache_ra_unbounded+0x7c0/0x7c0 [ 1679.775465][ T29] ? filemap_add_folio+0x228/0x570 [ 1679.780739][ T29] ? page_cache_ra_order+0xb1a/0xcc0 [ 1679.825505][ T29] page_cache_ra_unbounded+0x186/0x7c0 [ 1679.831077][ T29] filemap_get_pages+0x49c/0x2080 [ 1679.865447][ T29] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 1679.871542][ T29] ? filemap_read+0xec0/0xec0 [ 1679.895460][ T29] ? __might_sleep+0xe0/0xe0 [ 1679.900143][ T29] ? iter_file_splice_write+0x118e/0x1320 [ 1679.955452][ T29] filemap_splice_read+0x4ce/0xcd0 [ 1679.960696][ T29] ? splice_folio_into_pipe+0x480/0x480 [ 1680.007123][ T29] ? file_end_write+0x15e/0x250 [ 1680.012073][ T29] ? direct_splice_actor+0x101/0x1e0 [ 1680.055608][ T29] ? splice_folio_into_pipe+0x480/0x480 [ 1680.061248][ T29] splice_direct_to_actor+0x48a/0xc80 [ 1680.085448][ T29] ? do_splice_direct+0x3e0/0x3e0 [ 1680.090548][ T29] ? vfs_splice_read+0x3d0/0x3d0 [ 1680.125446][ T29] ? __lock_acquire+0x1fd0/0x1fd0 [ 1680.130571][ T29] do_splice_direct+0x28c/0x3e0 [ 1680.175681][ T29] ? splice_direct_to_actor+0xc80/0xc80 [ 1680.181325][ T29] ? warn_unsupported+0xc0/0xc0 [ 1680.215428][ T29] ? rw_verify_area+0x1d2/0x570 [ 1680.220372][ T29] do_sendfile+0x56d/0xdb0 [ 1680.224843][ T29] ? vfs_writev+0xba0/0xba0 [ 1680.255456][ T29] ? xfd_validate_state+0x6e/0x150 [ 1680.260755][ T29] ? restore_fpregs_from_fpstate+0x100/0x250 [ 1680.295470][ T29] __se_sys_sendfile64+0x17c/0x1e0 [ 1680.300755][ T29] ? __x64_sys_sendfile64+0xb0/0xb0 [ 1680.345467][ T29] ? do_syscall_64+0x102/0x230 [ 1680.350332][ T29] ? do_syscall_64+0xb4/0x230 [ 1680.355057][ T29] do_syscall_64+0xf5/0x230 [ 1680.385429][ T29] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1680.391409][ T29] RIP: 0033:0x7f8bc1a7cd29 [ 1680.427302][ T29] RSP: 002b:00007f8bc28270c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1680.465457][ T29] RAX: ffffffffffffffda RBX: 00007f8bc1bac050 RCX: 00007f8bc1a7cd29 [ 1680.473508][ T29] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000008 [ 1680.525494][ T29] RBP: 00007f8bc1ac947a R08: 0000000000000000 R09: 0000000000000000 [ 1680.533548][ T29] R10: 0001000000201005 R11: 0000000000000246 R12: 0000000000000000 [ 1680.595585][ T29] R13: 000000000000006e R14: 00007f8bc1bac050 R15: 00007ffe700a3f08 [ 1680.603652][ T29] [ 1680.625446][ T29] [ 1680.625446][ T29] Showing all locks held in the system: [ 1680.633227][ T29] 1 lock held by khungtaskd/29: [ 1680.665438][ T29] #0: ffffffff8d92eba0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1680.716031][ T29] 3 locks held by kworker/u4:6/1052: [ 1680.724051][ T29] 3 locks held by kworker/u4:10/2837: [ 1680.755441][ T29] #0: ffff888027e92938 ((wq_completion)btrfs-endio-write){+.+.}-{0:0}, at: process_scheduled_works+0x825/0x1420 [ 1680.800635][ T29] #1: ffffc9000a477d20 ((work_completion)(&work->normal_work)){+.+.}-{0:0}, at: process_scheduled_works+0x825/0x1420 [ 1680.865479][ T29] #2: ffff888049c1a4a8 (btrfs_ordered_extent){++++}-{0:0}, at: btrfs_finish_one_ordered+0x339/0x1680 [ 1680.895505][ T29] 2 locks held by getty/4817: [ 1680.900247][ T29] #0: ffff88802a5820a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1680.945480][ T29] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b4/0x1e10 [ 1680.985445][ T29] 2 locks held by kworker/u4:5/13909: [ 1680.990878][ T29] #0: ffff888056e53938 ((wq_completion)btrfs-flush_delalloc){+.+.}-{0:0}, at: process_scheduled_works+0x825/0x1420 [ 1681.055415][ T29] #1: ffffc9000a4e7d20 ((work_completion)(&work->normal_work)){+.+.}-{0:0}, at: process_scheduled_works+0x825/0x1420 [ 1681.095432][ T29] 1 lock held by kworker/1:3/25430: [ 1681.100694][ T29] #0: ffff8880b993c958 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 1681.155896][ T29] 1 lock held by syz-executor.2/27720: [ 1681.161451][ T29] #0: ffff888041bea420 (sb_writers#14){.+.+}-{0:0}, at: direct_splice_actor+0x4a/0x1e0 [ 1681.205439][ T29] 1 lock held by syz-executor.2/27746: [ 1681.211062][ T29] #0: ffff88807968ac48 (mapping.invalidate_lock#3){.+.+}-{3:3}, at: page_cache_ra_unbounded+0xf1/0x7c0 [ 1681.295454][ T29] 3 locks held by syz-executor.5/28482: [ 1681.301071][ T29] #0: ffff888041bea0e0 (&type->s_umount_key#54){++++}-{3:3}, at: super_lock+0x27c/0x400 [ 1681.395462][ T29] #1: ffff888049c18a20 (&fs_info->ordered_operations_mutex){+.+.}-{3:3}, at: btrfs_wait_ordered_roots+0x104/0x950 [ 1681.415433][ T29] #2: ffff888044926850 (&root->ordered_extent_mutex){+.+.}-{3:3}, at: btrfs_wait_ordered_extents+0x1f3/0xe20 [ 1681.445434][ T29] [ 1681.447822][ T29] ============================================= [ 1681.447822][ T29] [ 1681.485459][ T29] NMI backtrace for cpu 0 [ 1681.489855][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 1681.499350][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1681.509438][ T29] Call Trace: [ 1681.512764][ T29] [ 1681.515729][ T29] dump_stack_lvl+0x1e7/0x2d0 [ 1681.520474][ T29] ? nf_tcp_handle_invalid+0x650/0x650 [ 1681.525979][ T29] ? panic+0x850/0x850 [ 1681.530084][ T29] ? vprintk_emit+0x607/0x720 [ 1681.534805][ T29] ? printk_sprint+0x480/0x480 [ 1681.539634][ T29] nmi_cpu_backtrace+0x498/0x4d0 [ 1681.544640][ T29] ? nmi_trigger_cpumask_backtrace+0x310/0x310 [ 1681.550947][ T29] ? _printk+0xd5/0x120 [ 1681.555159][ T29] ? panic+0x850/0x850 [ 1681.559266][ T29] ? __wake_up_klogd+0xcc/0x100 [ 1681.564143][ T29] ? panic+0x850/0x850 [ 1681.568254][ T29] ? __rcu_read_unlock+0x98/0x100 [ 1681.573323][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1681.579422][ T29] nmi_trigger_cpumask_backtrace+0x198/0x310 [ 1681.585430][ T29] watchdog+0xfaf/0xff0 [ 1681.589610][ T29] ? watchdog+0x1e9/0xff0 [ 1681.593964][ T29] kthread+0x2d3/0x370 [ 1681.598047][ T29] ? hungtask_pm_notify+0x90/0x90 [ 1681.603095][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1681.607700][ T29] ret_from_fork+0x48/0x80 [ 1681.612133][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1681.616739][ T29] ret_from_fork_asm+0x11/0x20 [ 1681.621536][ T29] [ 1681.626980][ T29] Sending NMI from CPU 0 to CPUs 1: [ 1681.632249][ C1] NMI backtrace for cpu 1 [ 1681.632264][ C1] CPU: 1 PID: 20901 Comm: syz-executor.3 Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 1681.632286][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1681.632297][ C1] RIP: 0010:match_held_lock+0x1/0xb0 [ 1681.632326][ C1] Code: 31 db 65 48 8b 04 25 28 00 00 00 48 3b 44 24 08 75 0d 48 89 d8 48 83 c4 10 5b 41 5e 41 5f c3 e8 a5 f9 ff ff 0f 1f 44 00 00 55 <53> bd 01 00 00 00 48 39 77 10 74 67 48 89 fb 81 7f 20 00 00 20 00 [ 1681.632342][ C1] RSP: 0018:ffffc900036ff9f0 EFLAGS: 00000097 [ 1681.632359][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffc900036ffa03 [ 1681.632371][ C1] RDX: 1ffff920006dff50 RSI: ffff8880490582b0 RDI: ffff888026738ac0 [ 1681.632385][ C1] RBP: ffffc900036ffb30 R08: ffffffff8f00d7ef R09: 1ffffffff1e01afd [ 1681.632399][ C1] R10: dffffc0000000000 R11: fffffbfff1e01afe R12: 0000000000000000 [ 1681.632412][ C1] R13: 0000000000000000 R14: ffff888026738ac0 R15: ffff888026738ac0 [ 1681.632426][ C1] FS: 00007fe9dd9076c0(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 1681.632443][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1681.632456][ C1] CR2: 000000c0067d4000 CR3: 0000000042bec000 CR4: 00000000003506f0 [ 1681.632472][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1681.632483][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1681.632495][ C1] Call Trace: [ 1681.632502][ C1] [ 1681.632510][ C1] ? nmi_cpu_backtrace+0x3be/0x4d0 [ 1681.632530][ C1] ? read_lock_is_recursive+0x20/0x20 [ 1681.632555][ C1] ? nmi_trigger_cpumask_backtrace+0x310/0x310 [ 1681.632584][ C1] ? nmi_cpu_backtrace_handler+0xc/0x10 [ 1681.632609][ C1] ? nmi_handle+0x14c/0x570 [ 1681.632632][ C1] ? nmi_handle+0x2a/0x570 [ 1681.632655][ C1] ? match_held_lock+0x1/0xb0 [ 1681.632676][ C1] ? default_do_nmi+0x63/0x150 [ 1681.632695][ C1] ? exc_nmi+0x121/0x210 [ 1681.632713][ C1] ? end_repeat_nmi+0xf/0x2a [ 1681.632740][ C1] ? match_held_lock+0x1/0xb0 [ 1681.632767][ C1] ? match_held_lock+0x1/0xb0 [ 1681.632789][ C1] ? match_held_lock+0x1/0xb0 [ 1681.632810][ C1] [ 1681.632815][ C1] [ 1681.632821][ C1] lock_release+0x24b/0x9c0 [ 1681.632846][ C1] ? prepare_to_wait_exclusive+0xcc/0x220 [ 1681.632868][ C1] ? do_raw_spin_lock+0x14e/0x370 [ 1681.632893][ C1] ? __lock_acquire+0x1fd0/0x1fd0 [ 1681.632922][ C1] _raw_spin_unlock_irqrestore+0x79/0x140 [ 1681.632947][ C1] ? _raw_spin_unlock+0x40/0x40 [ 1681.632968][ C1] ? __might_sleep+0xe0/0xe0 [ 1681.632995][ C1] ? prepare_to_wait_exclusive+0x81/0x220 [ 1681.633016][ C1] prepare_to_wait_exclusive+0xcc/0x220 [ 1681.633041][ C1] __se_sys_io_uring_enter+0x17d3/0x2b30 [ 1681.633085][ C1] ? __x64_sys_io_uring_enter+0xf0/0xf0 [ 1681.633116][ C1] ? __io_cqring_overflow_flush+0x600/0x600 [ 1681.633137][ C1] ? restore_fpregs_from_fpstate+0x100/0x250 [ 1681.633166][ C1] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 1681.633190][ C1] ? print_irqtrace_events+0x220/0x220 [ 1681.633212][ C1] ? do_syscall_64+0x102/0x230 [ 1681.633239][ C1] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 1681.633270][ C1] do_syscall_64+0xf5/0x230 [ 1681.633298][ C1] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1681.633319][ C1] RIP: 0033:0x7fe9dcc7cd29 [ 1681.633335][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1681.633351][ C1] RSP: 002b:00007fe9dd9070c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1681.633369][ C1] RAX: ffffffffffffffda RBX: 00007fe9dcdabf80 RCX: 00007fe9dcc7cd29 [ 1681.633382][ C1] RDX: 0000000000400000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1681.633394][ C1] RBP: 00007fe9dccc947a R08: 0000000000000000 R09: 0000000000000000 [ 1681.633405][ C1] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1681.633416][ C1] R13: 000000000000000b R14: 00007fe9dcdabf80 R15: 00007ffff85d5f98 [ 1681.633438][ C1] [ 1682.137750][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 1682.144674][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 [ 1682.154163][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1682.164261][ T29] Call Trace: [ 1682.167589][ T29] [ 1682.170553][ T29] dump_stack_lvl+0x1e7/0x2d0 [ 1682.175282][ T29] ? nf_tcp_handle_invalid+0x650/0x650 [ 1682.180780][ T29] ? panic+0x850/0x850 [ 1682.184890][ T29] ? vscnprintf+0x5d/0x80 [ 1682.189257][ T29] panic+0x349/0x850 [ 1682.193200][ T29] ? nmi_trigger_cpumask_backtrace+0x244/0x310 [ 1682.199397][ T29] ? __memcpy_flushcache+0x2b0/0x2b0 [ 1682.204722][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1682.210827][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 1682.216269][ T29] ? nmi_trigger_cpumask_backtrace+0x244/0x310 [ 1682.222473][ T29] ? nmi_trigger_cpumask_backtrace+0x2c7/0x310 [ 1682.228686][ T29] ? nmi_trigger_cpumask_backtrace+0x2cc/0x310 [ 1682.234879][ T29] watchdog+0xfee/0xff0 [ 1682.239083][ T29] ? watchdog+0x1e9/0xff0 [ 1682.243462][ T29] kthread+0x2d3/0x370 [ 1682.247561][ T29] ? hungtask_pm_notify+0x90/0x90 [ 1682.252624][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1682.257249][ T29] ret_from_fork+0x48/0x80 [ 1682.261702][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1682.266330][ T29] ret_from_fork_asm+0x11/0x20 [ 1682.271146][ T29] [ 1682.274419][ T29] Kernel Offset: disabled [ 1682.278751][ T29] Rebooting in 86400 seconds..