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", 0x2000, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x1fc50, 0x0, 0x0, {'fd'}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f000000c3c0)={0x2020}, 0x2000e3e0) 17:18:26 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001b40)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077517e3a159110193dd2ff1fa7c3205bfedbe9d8f3bd23cd78a07e32fe0231368b2264f9c504c9f1f65515b2e1a38d522be18bd10a48b043ccc42646d25dfd73d06d7535f7866925d86751dfced1fd8accae669e173a659c1cfd6587d47578f4c35235138d5521f9453559c35da860e8efbcbfb42c30d294a55e1c46680bee88956f2b3599f455c7a3a49a01010000009f2f0517e4ca0e1803a2971a50f713d4e21b3336f1ae0796f23526ec0fd97f7325eac36d4dfafe7cc03b0864009d2e7d7ff6ff72ba8972b122b09789d99b3d0524f39d5ae9aeb2d22eb2c09244ba5dbe9180950f76f7049db5cb19d7962fed44e00f39ed8c13a11fa798de504e2865cd81f2b77fdd76c677f812d249c8130b018d4300180020000000db3947c85c3a9027ce9e856fa8b7fb05000000000000593d60abc9b3e67d127e56f3d3819dcfeb820634fd4d419efaefc74305b2bea2000600000051fcf5d62205561b6efaad206335a309f7b9e01446a6285f4665a7fe3cda2349f8bf400100000000000000f435f28fbeda75cf971f54a9698cf3270f420ee893850a8e078374909413f3fbd3ced3284db730fc594609654d97836f171b766ffd7526847a6bfda9c648e8aa5c558aa6d463ec9d840f3914909187b6b0776952be71b0417d33d3ab25493418ba0fbacf768e07c1a939d31f606085b9e3efc93b0f58d5ec37494d9d10d76e603129e9a726579ac7d672cacd581baca77b3610b7403930fd42051d4b7443e5b49c000000000000007d6173050027791c9c1e04ad3711a66da2254a6f911b1469c62a6e1e3f9c1715c009a58e6eadac8f61b45853673df72dc813f7454ae22d79ac48034282f03040889500000000179dcf66d93907cedd49e0c5752f755849953957143a0335d2f62acbf18b251ce63b29fe177745448ccc925770fac12cf9e291200df6bb669d5a57dd74df817ef2f8698f710c359afe73947afebdf5536e4db8b0231d0cbc798766ec60586f14b44775bc9d250e4515cb83275d3b495fa90000e69a68b47ac4595463e1442d88e0606a060000cc914fae896ab129ccdf8792a8435972c8391d132a2fcbd40e865d62cc7c4200000000000000000000000000000800002a77fbbccfdb1ab3d84349058cc40f4e8e6b3ff1f09726b8145ea99c7640faab578dc98a6134df0a10a54ce7e7ddbb709a27d977d1f91ab9ee940757d19594c9a50961b7fcc56d82584dc8254df7c411fa61353a6897c4f3b9f152fdf6f2ab47adb29aefecce96c94f360e129c9f2af569c794b68b2ead404bcdd4aa9cb6a128e1ad45fd4030e1e69adf4986b7860f3122d59c079f0f9a1732f691590f45512aec4ed2413f66cac7dd022301741c576dea82005b166d6c3b9ed0c297ac197a92188a618945e78dca0b3c62f160124300009c687563382b0b88a7d80fd7bf7fae8a690f52db1464d29b1b926414cd35705c89662c585e32c881d917b74f027674dbc017499bfa5a2e2900000000000000000000000000007b593ecbdd162fee9f239a3c615b3e9a3fb0af254bdda09ed82cbdba6daf8b247a5ad0cb4f3523c950eec0f1800b295be71418dd65de15e11beef9630499c70fce74135a7c7c8e818b79b85ff65d59d89492d7a663d3f25651e252ab49d358eac853ffe182ee37a5db085a072647719cb8604ba2e0b80af3f1867bd8fb6afca671437e0a5a9d7a088436739262d894986882ec0fb419a377ef47f4920a5de6d8de0d3090b4cb6b773e825442d351f980eed0d997a4d98a5121e941b145e2186546c646128a3e69f52fcad83a026def90b9eb55f4a0a2251bbae428c6c017b5a47f1580831a7ce233857e6aa9e777e99da1a3ad03fdc93fa7ed96228deac5e3bce983971041297a6ba18783a2edc7e3901cc891035872c61e7ea375b0902be0c5cc7fdef968ba1ca17ce5e11f2f384cd28c1194f56d3cf074e8ba4e60e84dc2f352c3cd170581aee0c93ca8ceff84cda40325d340759e79e5c4bcec227e37f7ec2193c78877fb51195b76c51bb411b024bf3a7bcf5f319ec1f2d4dcf1d46a15cde1d6cecce6ecdb0c0a3413394d51341a7b3606ad8c29b6dbf6be3265b562f562cf2ab122a6e7e33b28c3208de35161bfe19678df43a45b314e5a0f8754cfaf4f9d3fdf9c8f7b7c296bf2e632d25ba8ee6369b362a8e4c9dff176d482d32249c93680a04f6464f173327fb629cfb5d070bc92afb42640f739735c43ce7199d54fcec68d4bf42f0cf0cda5907302a54e655114b64908901ea2"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) 17:18:26 executing program 3: openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x84842, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r2, 0x0) syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000008380)="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", 0x2000, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x1fc50, 0x0, 0x0, {'fd'}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x84842, 0x0) read$FUSE(r3, &(0x7f000000c3c0)={0x2020}, 0x2000e3e0) 17:18:26 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) 17:18:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xb4}, {0x0}, {&(0x7f0000002a80)=""/4096, 0xe14}], 0x3, 0x0, 0xcc0a}}], 0x300, 0x0, 0x0) 17:18:27 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) 17:18:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x8c0b, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xb4}, {0x0}, {&(0x7f0000002a80)=""/4096, 0xe14}], 0x3}}], 0x300, 0x0, 0x0) 17:18:27 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) 17:18:27 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0xffffffffffffffff], 0x1}, 0x58) 17:18:27 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0xffffffffffffffff], 0x1}, 0x58) 17:18:27 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0xffffffffffffffff], 0x1}, 0x58) 17:18:27 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) 17:18:27 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) 17:18:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xb4}, {0x0}, {&(0x7f0000002a80)=""/4096, 0xe14}], 0x3}}], 0x300, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)={0x28, r1, 0x9265e8fd2a08974b, 0x0, 0x0, {{0x67}, {@val={0x8, 0x6}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000005c0)={0x58, r1, 0x4, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x6}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x6}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x2}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x101}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}]}, 0x58}, 0x1, 0x0, 0x0, 0x200400a5}, 0x881) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001b40)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077517e3a159110193dd2ff1fa7c3205bfedbe9d8f3bd23cd78a07e32fe0231368b2264f9c504c9f1f65515b2e1a38d522be18bd10a48b043ccc42646d25dfd73d06d7535f7866925d86751dfced1fd8accae669e173a659c1cfd6587d47578f4c35235138d5521f9453559c35da860e8efbcbfb42c30d294a55e1c46680bee88956f2b3599f455c7a3a49a01010000009f2f0517e4ca0e1803a2971a50f713d4e21b3336f1ae0796f23526ec0fd97f7325eac36d4dfafe7cc03b0864009d2e7d7ff6ff72ba8972b122b09789d99b3d0524f39d5ae9aeb2d22eb2c09244ba5dbe9180950f76f7049db5cb19d7962fed44e00f39ed8c13a11fa798de504e2865cd81f2b77fdd76c677f812d249c8130b018d4300180020000000db3947c85c3a9027ce9e856fa8b7fb05000000000000593d60abc9b3e67d127e56f3d3819dcfeb820634fd4d419efaefc74305b2bea2000600000051fcf5d62205561b6efaad206335a309f7b9e01446a6285f4665a7fe3cda2349f8bf400100000000000000f435f28fbeda75cf971f54a9698cf3270f420ee893850a8e078374909413f3fbd3ced3284db730fc594609654d97836f171b766ffd7526847a6bfda9c648e8aa5c558aa6d463ec9d840f3914909187b6b0776952be71b0417d33d3ab25493418ba0fbacf768e07c1a939d31f606085b9e3efc93b0f58d5ec37494d9d10d76e603129e9a726579ac7d672cacd581baca77b3610b7403930fd42051d4b7443e5b49c000000000000007d6173050027791c9c1e04ad3711a66da2254a6f911b1469c62a6e1e3f9c1715c009a58e6eadac8f61b45853673df72dc813f7454ae22d79ac48034282f03040889500000000179dcf66d93907cedd49e0c5752f755849953957143a0335d2f62acbf18b251ce63b29fe177745448ccc925770fac12cf9e291200df6bb669d5a57dd74df817ef2f8698f710c359afe73947afebdf5536e4db8b0231d0cbc798766ec60586f14b44775bc9d250e4515cb83275d3b495fa90000e69a68b47ac4595463e1442d88e0606a060000cc914fae896ab129ccdf8792a8435972c8391d132a2fcbd40e865d62cc7c4200000000000000000000000000000800002a77fbbccfdb1ab3d84349058cc40f4e8e6b3ff1f09726b8145ea99c7640faab578dc98a6134df0a10a54ce7e7ddbb709a27d977d1f91ab9ee940757d19594c9a50961b7fcc56d82584dc8254df7c411fa61353a6897c4f3b9f152fdf6f2ab47adb29aefecce96c94f360e129c9f2af569c794b68b2ead404bcdd4aa9cb6a128e1ad45fd4030e1e69adf4986b7860f3122d59c079f0f9a1732f691590f45512aec4ed2413f66cac7dd022301741c576dea82005b166d6c3b9ed0c297ac197a92188a618945e78dca0b3c62f160124300009c687563382b0b88a7d80fd7bf7fae8a690f52db1464d29b1b926414cd35705c89662c585e32c881d917b74f027674dbc017499bfa5a2e2900000000000000000000000000007b593ecbdd162fee9f239a3c615b3e9a3fb0af254bdda09ed82cbdba6daf8b247a5ad0cb4f3523c950eec0f1800b295be71418dd65de15e11beef9630499c70fce74135a7c7c8e818b79b85ff65d59d89492d7a663d3f25651e252ab49d358eac853ffe182ee37a5db085a072647719cb8604ba2e0b80af3f1867bd8fb6afca671437e0a5a9d7a088436739262d894986882ec0fb419a377ef47f4920a5de6d8de0d3090b4cb6b773e825442d351f980eed0d997a4d98a5121e941b145e2186546c646128a3e69f52fcad83a026def90b9eb55f4a0a2251bbae428c6c017b5a47f1580831a7ce233857e6aa9e777e99da1a3ad03fdc93fa7ed96228deac5e3bce983971041297a6ba18783a2edc7e3901cc891035872c61e7ea375b0902be0c5cc7fdef968ba1ca17ce5e11f2f384cd28c1194f56d3cf074e8ba4e60e84dc2f352c3cd170581aee0c93ca8ceff84cda40325d340759e79e5c4bcec227e37f7ec2193c78877fb51195b76c51bb411b024bf3a7bcf5f319ec1f2d4dcf1d46a15cde1d6cecce6ecdb0c0a3413394d51341a7b3606ad8c29b6dbf6be3265b562f562cf2ab122a6e7e33b28c3208de35161bfe19678df43a45b314e5a0f8754cfaf4f9d3fdf9c8f7b7c296bf2e632d25ba8ee6369b362a8e4c9dff176d482d32249c93680a04f6464f173327fb629cfb5d070bc92afb42640f739735c43ce7199d54fcec68d4bf42f0cf0cda5907302a54e655114b64908901ea2"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x0, 0xf9, 0xf1, &(0x7f0000000280)="1b52f76a8043233ca761956c631dada8e551678b36874e0d445c66a508554606e9f615c86f6ee9dc4d60fe213f71b85d21ce59a92d6d21c7b72137e5ffa7d506c91430bfd5462ce29d395f8c45b27f8731a82aedf6fc22423e82d952d470c4dc1467e17715cb6c98518098d0b0ca555920dbf7e5c5dc415fe4f66c9c443a97b61c9c95bdd33e69d76ee9f1b7130ff4896dfbf2698881183ce96b857313a48cff513d317836a8077647f33fa69a31a122bd5347ace4e8446ca6c2a1b2e573d5e800150c4a8029fd7900ec8969701a78f577d0a8b9fd94017baeebfbef9158a454372ce0988ccd9a1e19860bd368d7d34ee929f9a0883c1a93ee", &(0x7f00000004c0)=""/241, 0x1, 0x0, 0xb5, 0x8, &(0x7f0000000380)="a2d025d93b4128c5ece6e62140f6321e909f79ca868f92006fd64ab60d48ce29ecff3c56b58622a55e8674866e9878f2940c288ea71e7eab8d0ad9fd27d6600bd36da558e2a2ffc89c6dc1dafd8c3613e25a7a02850ca84229a24a5bc0ca8f74da06a16421f9bf5951801c1cf77e4a651d6346f019aa28bde7a4411c56636673169cdceda14d79d727af4af495e094f5e08388071d82cfb850b12774d4326abd6651a2fadd3d7ffb1e83702c76681f427fbd54eec9", &(0x7f0000000000)="ff0b81805a2a7fa1", 0x1, 0x7}, 0x48) io_setup(0xfff, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 17:18:27 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x7c0b, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xb4}, {0x0}, {&(0x7f0000002a80)=""/4096, 0xe14}], 0x3}}], 0x300, 0x0, 0x0) 17:18:27 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) 17:18:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xb4}, {0x0}, {&(0x7f0000002a80)=""/4096, 0xe14}], 0x3, 0x0, 0xd00a}}], 0x300, 0x0, 0x0) 17:18:27 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) 17:18:27 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) 17:18:27 executing program 2: openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x84842, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r2, 0x0) syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000008380)="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", 0x2000, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x1fc50, 0x0, 0x0, {'fd'}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x84842, 0x0) read$FUSE(r3, &(0x7f000000c3c0)={0x2020}, 0x2000e3e0) [ 518.456889][T15843] __nla_validate_parse: 255 callbacks suppressed [ 518.456909][T15843] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 518.472694][T15843] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 17:18:27 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) [ 518.497512][T15843] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 518.506752][T15843] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 518.534510][T15843] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 518.548621][T15843] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 518.558024][T15843] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 518.567381][T15843] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 518.577144][T15843] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 17:18:28 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0xf00, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) 17:18:28 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x18, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) 17:18:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xb4}, {0x0}, {&(0x7f0000002a80)=""/4096, 0xe14}], 0x3}}], 0x300, 0x0, 0x0) 17:18:28 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) (fail_nth: 1) [ 518.591827][T15843] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 17:18:28 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 1) 17:18:28 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) [ 518.639335][T15859] FAULT_INJECTION: forcing a failure. [ 518.639335][T15859] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 518.652354][T15859] CPU: 1 PID: 15859 Comm: syz-executor.5 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 518.662505][T15859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 518.672397][T15859] Call Trace: [ 518.675529][T15859] [ 518.678299][T15859] dump_stack_lvl+0x151/0x1b7 [ 518.682812][T15859] ? bfq_pos_tree_add_move+0x43e/0x43e [ 518.688109][T15859] dump_stack+0x15/0x17 [ 518.692096][T15859] should_fail+0x3c0/0x510 [ 518.696351][T15859] should_fail_usercopy+0x1a/0x20 [ 518.701219][T15859] _copy_from_user+0x20/0xd0 [ 518.705667][T15859] copy_clone_args_from_user+0x1c7/0x790 [ 518.709012][T15864] FAULT_INJECTION: forcing a failure. [ 518.709012][T15864] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 518.711103][T15859] ? preempt_count_add+0x90/0x1a0 [ 518.711133][T15859] ? dup_mmap+0xea0/0xea0 [ 518.732975][T15859] ? file_end_write+0x1b0/0x1b0 [ 518.737662][T15859] __x64_sys_clone3+0x122/0x3a0 [ 518.742348][T15859] ? __mutex_lock_slowpath+0x10/0x10 [ 518.747469][T15859] ? __ia32_sys_clone+0x300/0x300 [ 518.752332][T15859] ? ksys_write+0x25f/0x2c0 [ 518.756669][T15859] ? debug_smp_processor_id+0x17/0x20 [ 518.761874][T15859] do_syscall_64+0x44/0xd0 [ 518.766128][T15859] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 518.771859][T15859] RIP: 0033:0x7f1283d100d9 [ 518.776107][T15859] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 518.795552][T15859] RSP: 002b:00007f1282a83038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 518.803795][T15859] RAX: ffffffffffffffda RBX: 00007f1283e2ff80 RCX: 00007f1283d100d9 [ 518.811607][T15859] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007f1282a83050 [ 518.819501][T15859] RBP: 00007f1282a831d0 R08: 0000000000000000 R09: 0000000000000058 [ 518.827315][T15859] R10: 00007f1282a83050 R11: 0000000000000246 R12: 0000000000000058 [ 518.835129][T15859] R13: 00007ffff3281b1f R14: 00007f1282a83300 R15: 0000000000022000 [ 518.843049][T15859] [ 518.845906][T15864] CPU: 0 PID: 15864 Comm: syz-executor.0 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 518.855986][T15864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 518.865874][T15864] Call Trace: [ 518.868990][T15864] [ 518.871765][T15864] dump_stack_lvl+0x151/0x1b7 [ 518.876383][T15864] ? bfq_pos_tree_add_move+0x43e/0x43e [ 518.881788][T15864] dump_stack+0x15/0x17 [ 518.885774][T15864] should_fail+0x3c0/0x510 [ 518.890025][T15864] should_fail_usercopy+0x1a/0x20 [ 518.894994][T15864] _copy_from_user+0x20/0xd0 [ 518.899419][T15864] copy_clone_args_from_user+0x1c7/0x790 [ 518.904890][T15864] ? preempt_count_add+0x90/0x1a0 [ 518.909904][T15864] ? dup_mmap+0xea0/0xea0 [ 518.914063][T15864] ? file_end_write+0x1b0/0x1b0 [ 518.918750][T15864] __x64_sys_clone3+0x122/0x3a0 [ 518.923436][T15864] ? __mutex_lock_slowpath+0x10/0x10 [ 518.928558][T15864] ? __ia32_sys_clone+0x300/0x300 [ 518.933428][T15864] ? ksys_write+0x25f/0x2c0 [ 518.937757][T15864] ? debug_smp_processor_id+0x17/0x20 [ 518.942965][T15864] do_syscall_64+0x44/0xd0 [ 518.947221][T15864] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 518.952950][T15864] RIP: 0033:0x7f8b07fbd0d9 [ 518.957200][T15864] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 518.976640][T15864] RSP: 002b:00007f8b06d30038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 17:18:28 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) [ 518.984891][T15864] RAX: ffffffffffffffda RBX: 00007f8b080dcf80 RCX: 00007f8b07fbd0d9 [ 518.992694][T15864] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007f8b06d30050 [ 519.000507][T15864] RBP: 00007f8b06d301d0 R08: 0000000000000000 R09: 0000000000000058 [ 519.008317][T15864] R10: 00007f8b06d30050 R11: 0000000000000246 R12: 0000000000000058 [ 519.016130][T15864] R13: 00007ffdf6d84d0f R14: 00007f8b06d30300 R15: 0000000000022000 [ 519.023946][T15864] 17:18:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xb4}, {0x0}, {&(0x7f0000002a80)=""/4096, 0xe14}], 0x3, 0x0, 0xf40b}}], 0x300, 0x0, 0x0) 17:18:28 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 2) 17:18:28 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) (fail_nth: 2) [ 519.298201][T15872] FAULT_INJECTION: forcing a failure. [ 519.298201][T15872] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 519.305380][T15875] FAULT_INJECTION: forcing a failure. [ 519.305380][T15875] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 519.311127][T15872] CPU: 0 PID: 15872 Comm: syz-executor.0 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 519.333964][T15872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 519.343860][T15872] Call Trace: [ 519.346981][T15872] [ 519.349758][T15872] dump_stack_lvl+0x151/0x1b7 [ 519.354273][T15872] ? bfq_pos_tree_add_move+0x43e/0x43e [ 519.359566][T15872] dump_stack+0x15/0x17 [ 519.363732][T15872] should_fail+0x3c0/0x510 [ 519.367986][T15872] should_fail_usercopy+0x1a/0x20 [ 519.372849][T15872] _copy_from_user+0x20/0xd0 [ 519.377270][T15872] copy_clone_args_from_user+0x6a8/0x790 [ 519.382742][T15872] ? dup_mmap+0xea0/0xea0 [ 519.386929][T15872] ? file_end_write+0x1b0/0x1b0 [ 519.391593][T15872] __x64_sys_clone3+0x122/0x3a0 [ 519.396282][T15872] ? __mutex_lock_slowpath+0x10/0x10 [ 519.401399][T15872] ? __ia32_sys_clone+0x300/0x300 [ 519.406264][T15872] ? ksys_write+0x25f/0x2c0 [ 519.410602][T15872] ? debug_smp_processor_id+0x17/0x20 [ 519.415936][T15872] do_syscall_64+0x44/0xd0 [ 519.420157][T15872] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 519.425884][T15872] RIP: 0033:0x7f8b07fbd0d9 [ 519.430140][T15872] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 519.449580][T15872] RSP: 002b:00007f8b06d30038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 519.457942][T15872] RAX: ffffffffffffffda RBX: 00007f8b080dcf80 RCX: 00007f8b07fbd0d9 [ 519.465722][T15872] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007f8b06d30050 [ 519.473536][T15872] RBP: 00007f8b06d301d0 R08: 0000000000000000 R09: 0000000000000058 [ 519.481345][T15872] R10: 00007f8b06d30050 R11: 0000000000000246 R12: 0000000000000058 [ 519.489157][T15872] R13: 00007ffdf6d84d0f R14: 00007f8b06d30300 R15: 0000000000022000 [ 519.496968][T15872] [ 519.499831][T15875] CPU: 1 PID: 15875 Comm: syz-executor.5 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 519.509904][T15875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 519.519804][T15875] Call Trace: [ 519.523091][T15875] [ 519.525867][T15875] dump_stack_lvl+0x151/0x1b7 [ 519.530381][T15875] ? bfq_pos_tree_add_move+0x43e/0x43e [ 519.535673][T15875] dump_stack+0x15/0x17 [ 519.539670][T15875] should_fail+0x3c0/0x510 [ 519.544019][T15875] should_fail_usercopy+0x1a/0x20 [ 519.548906][T15875] _copy_from_user+0x20/0xd0 [ 519.553304][T15875] copy_clone_args_from_user+0x6a8/0x790 [ 519.558771][T15875] ? dup_mmap+0xea0/0xea0 [ 519.562938][T15875] ? file_end_write+0x1b0/0x1b0 [ 519.567624][T15875] __x64_sys_clone3+0x122/0x3a0 [ 519.572316][T15875] ? __mutex_lock_slowpath+0x10/0x10 [ 519.577431][T15875] ? __ia32_sys_clone+0x300/0x300 [ 519.582382][T15875] ? ksys_write+0x25f/0x2c0 [ 519.586719][T15875] ? debug_smp_processor_id+0x17/0x20 [ 519.591926][T15875] do_syscall_64+0x44/0xd0 [ 519.596187][T15875] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 519.601906][T15875] RIP: 0033:0x7f1283d100d9 [ 519.606287][T15875] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 519.625983][T15875] RSP: 002b:00007f1282a83038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 519.634361][T15875] RAX: ffffffffffffffda RBX: 00007f1283e2ff80 RCX: 00007f1283d100d9 17:18:29 executing program 2: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 1) 17:18:29 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) 17:18:29 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 3) 17:18:29 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) (fail_nth: 1) [ 519.642257][T15875] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007f1282a83050 [ 519.650306][T15875] RBP: 00007f1282a831d0 R08: 0000000000000000 R09: 0000000000000058 [ 519.658116][T15875] R10: 00007f1282a83050 R11: 0000000000000246 R12: 0000000000000058 [ 519.665921][T15875] R13: 00007ffff3281b1f R14: 00007f1282a83300 R15: 0000000000022000 [ 519.673749][T15875] [ 519.691236][T15880] FAULT_INJECTION: forcing a failure. 17:18:29 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) (fail_nth: 3) [ 519.691236][T15880] name failslab, interval 1, probability 0, space 0, times 0 [ 519.712242][T15880] CPU: 0 PID: 15880 Comm: syz-executor.0 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 519.722318][T15880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 519.724519][T15885] FAULT_INJECTION: forcing a failure. [ 519.724519][T15885] name failslab, interval 1, probability 0, space 0, times 0 [ 519.732219][T15880] Call Trace: [ 519.732231][T15880] [ 519.732238][T15880] dump_stack_lvl+0x151/0x1b7 [ 519.732266][T15880] ? bfq_pos_tree_add_move+0x43e/0x43e [ 519.760334][T15880] ? handle_pte_fault+0x517/0x11d0 [ 519.765278][T15880] dump_stack+0x15/0x17 [ 519.769269][T15880] should_fail+0x3c0/0x510 [ 519.773522][T15880] __should_failslab+0x9f/0xe0 [ 519.778121][T15880] should_failslab+0x9/0x20 [ 519.782460][T15880] kmem_cache_alloc+0x4f/0x2f0 [ 519.787062][T15880] ? dup_task_struct+0x53/0xa60 [ 519.791748][T15880] ? __kasan_check_write+0x14/0x20 [ 519.796830][T15880] dup_task_struct+0x53/0xa60 [ 519.801340][T15880] ? __kasan_check_write+0x14/0x20 [ 519.806288][T15880] copy_process+0x579/0x3250 [ 519.810712][T15880] ? check_stack_object+0x117/0x130 [ 519.815745][T15880] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 519.820694][T15880] ? copy_clone_args_from_user+0x6f0/0x790 [ 519.826349][T15880] kernel_clone+0x22d/0x990 [ 519.830679][T15880] ? dup_mmap+0xea0/0xea0 [ 519.834839][T15880] ? create_io_thread+0x1e0/0x1e0 [ 519.839706][T15880] ? file_end_write+0x1b0/0x1b0 [ 519.844386][T15880] __x64_sys_clone3+0x375/0x3a0 [ 519.849072][T15880] ? __ia32_sys_clone+0x300/0x300 [ 519.853940][T15880] ? ksys_write+0x25f/0x2c0 [ 519.858275][T15880] ? debug_smp_processor_id+0x17/0x20 [ 519.863631][T15880] do_syscall_64+0x44/0xd0 [ 519.867869][T15880] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 519.873601][T15880] RIP: 0033:0x7f8b07fbd0d9 [ 519.877856][T15880] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 519.897293][T15880] RSP: 002b:00007f8b06d30038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 519.905536][T15880] RAX: ffffffffffffffda RBX: 00007f8b080dcf80 RCX: 00007f8b07fbd0d9 [ 519.913348][T15880] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007f8b06d30050 [ 519.921158][T15880] RBP: 00007f8b06d301d0 R08: 0000000000000000 R09: 0000000000000058 [ 519.928968][T15880] R10: 00007f8b06d30050 R11: 0000000000000246 R12: 0000000000000058 [ 519.936780][T15880] R13: 00007ffdf6d84d0f R14: 00007f8b06d30300 R15: 0000000000022000 [ 519.944597][T15880] [ 519.947456][T15885] CPU: 1 PID: 15885 Comm: syz-executor.5 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 519.957534][T15885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 519.967425][T15885] Call Trace: [ 519.970544][T15885] [ 519.973330][T15885] dump_stack_lvl+0x151/0x1b7 [ 519.975578][T15886] FAULT_INJECTION: forcing a failure. [ 519.975578][T15886] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 519.977842][T15885] ? bfq_pos_tree_add_move+0x43e/0x43e [ 519.977868][T15885] ? handle_pte_fault+0x517/0x11d0 [ 519.977885][T15885] dump_stack+0x15/0x17 [ 519.977899][T15885] should_fail+0x3c0/0x510 [ 520.009171][T15885] __should_failslab+0x9f/0xe0 [ 520.013766][T15885] should_failslab+0x9/0x20 [ 520.018107][T15885] kmem_cache_alloc+0x4f/0x2f0 [ 520.022704][T15885] ? dup_task_struct+0x53/0xa60 [ 520.027391][T15885] ? __kasan_check_write+0x14/0x20 [ 520.032344][T15885] dup_task_struct+0x53/0xa60 [ 520.036852][T15885] ? __kasan_check_write+0x14/0x20 [ 520.041801][T15885] copy_process+0x579/0x3250 [ 520.046250][T15885] ? check_stack_object+0x117/0x130 [ 520.051263][T15885] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 520.056208][T15885] ? copy_clone_args_from_user+0x6f0/0x790 [ 520.061849][T15885] kernel_clone+0x22d/0x990 [ 520.066185][T15885] ? dup_mmap+0xea0/0xea0 [ 520.070352][T15885] ? create_io_thread+0x1e0/0x1e0 [ 520.075214][T15885] ? file_end_write+0x1b0/0x1b0 [ 520.079903][T15885] __x64_sys_clone3+0x375/0x3a0 [ 520.084586][T15885] ? __ia32_sys_clone+0x300/0x300 [ 520.089450][T15885] ? ksys_write+0x25f/0x2c0 [ 520.093796][T15885] ? debug_smp_processor_id+0x17/0x20 [ 520.098996][T15885] do_syscall_64+0x44/0xd0 [ 520.103251][T15885] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 520.108980][T15885] RIP: 0033:0x7f1283d100d9 [ 520.113236][T15885] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 520.132917][T15885] RSP: 002b:00007f1282a83038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 520.141159][T15885] RAX: ffffffffffffffda RBX: 00007f1283e2ff80 RCX: 00007f1283d100d9 17:18:29 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) [ 520.148965][T15885] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007f1282a83050 [ 520.156883][T15885] RBP: 00007f1282a831d0 R08: 0000000000000000 R09: 0000000000000058 [ 520.158506][T15882] FAULT_INJECTION: forcing a failure. [ 520.158506][T15882] name failslab, interval 1, probability 0, space 0, times 0 [ 520.164802][T15885] R10: 00007f1282a83050 R11: 0000000000000246 R12: 0000000000000058 [ 520.185028][T15885] R13: 00007ffff3281b1f R14: 00007f1282a83300 R15: 0000000000022000 [ 520.192850][T15885] [ 520.198934][T15886] CPU: 0 PID: 15886 Comm: syz-executor.2 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 520.209012][T15886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 520.218904][T15886] Call Trace: [ 520.222031][T15886] [ 520.224803][T15886] dump_stack_lvl+0x151/0x1b7 [ 520.229582][T15886] ? bfq_pos_tree_add_move+0x43e/0x43e [ 520.234873][T15886] dump_stack+0x15/0x17 [ 520.238862][T15886] should_fail+0x3c0/0x510 [ 520.243117][T15886] should_fail_usercopy+0x1a/0x20 [ 520.247972][T15886] _copy_from_user+0x20/0xd0 [ 520.252402][T15886] copy_clone_args_from_user+0x1c7/0x790 [ 520.257868][T15886] ? preempt_count_add+0x90/0x1a0 [ 520.262727][T15886] ? dup_mmap+0xea0/0xea0 [ 520.266894][T15886] ? file_end_write+0x1b0/0x1b0 [ 520.271582][T15886] __x64_sys_clone3+0x122/0x3a0 [ 520.276278][T15886] ? __mutex_lock_slowpath+0x10/0x10 [ 520.281386][T15886] ? __ia32_sys_clone+0x300/0x300 [ 520.286249][T15886] ? ksys_write+0x25f/0x2c0 [ 520.290590][T15886] ? debug_smp_processor_id+0x17/0x20 [ 520.295808][T15886] do_syscall_64+0x44/0xd0 [ 520.300055][T15886] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 520.305783][T15886] RIP: 0033:0x7fd67b67e0d9 [ 520.310118][T15886] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 520.329566][T15886] RSP: 002b:00007fd67a3f1038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 520.337803][T15886] RAX: ffffffffffffffda RBX: 00007fd67b79df80 RCX: 00007fd67b67e0d9 17:18:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xb4}, {0x0}, {&(0x7f0000002a80)=""/4096, 0xe14}], 0x3, 0x0, 0x1c000}}], 0x300, 0x0, 0x0) 17:18:29 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 4) [ 520.345699][T15886] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fd67a3f1050 [ 520.353509][T15886] RBP: 00007fd67a3f11d0 R08: 0000000000000000 R09: 0000000000000058 [ 520.361321][T15886] R10: 00007fd67a3f1050 R11: 0000000000000246 R12: 0000000000000058 [ 520.369132][T15886] R13: 00007ffea7b5c4ef R14: 00007fd67a3f1300 R15: 0000000000022000 [ 520.376967][T15886] [ 520.387409][T15882] CPU: 1 PID: 15882 Comm: syz-executor.3 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 520.388874][T15892] FAULT_INJECTION: forcing a failure. 17:18:29 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) (fail_nth: 4) [ 520.388874][T15892] name failslab, interval 1, probability 0, space 0, times 0 [ 520.397621][T15882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 520.397638][T15882] Call Trace: [ 520.397644][T15882] [ 520.397651][T15882] dump_stack_lvl+0x151/0x1b7 [ 520.397676][T15882] ? bfq_pos_tree_add_move+0x43e/0x43e [ 520.397694][T15882] ? proc_fail_nth_write+0x213/0x290 [ 520.427643][T15896] FAULT_INJECTION: forcing a failure. [ 520.427643][T15896] name failslab, interval 1, probability 0, space 0, times 0 [ 520.430342][T15882] ? proc_fail_nth_read+0x220/0x220 [ 520.458550][T15882] dump_stack+0x15/0x17 [ 520.462543][T15882] should_fail+0x3c0/0x510 [ 520.466794][T15882] __should_failslab+0x9f/0xe0 [ 520.471398][T15882] should_failslab+0x9/0x20 [ 520.475732][T15882] kmem_cache_alloc+0x4f/0x2f0 [ 520.480331][T15882] ? getname_flags+0xba/0x510 [ 520.484856][T15882] getname_flags+0xba/0x510 [ 520.489185][T15882] getname+0x19/0x20 [ 520.492915][T15882] do_sys_openat2+0xd2/0x500 [ 520.497346][T15882] ? do_sys_open+0x220/0x220 [ 520.501768][T15882] ? fput+0x1a/0x20 [ 520.505415][T15882] ? ksys_write+0x25f/0x2c0 [ 520.509755][T15882] __x64_sys_creat+0x11f/0x160 [ 520.514356][T15882] ? __x64_compat_sys_openat+0x290/0x290 [ 520.519821][T15882] ? debug_smp_processor_id+0x17/0x20 [ 520.525185][T15882] do_syscall_64+0x44/0xd0 [ 520.529435][T15882] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 520.535162][T15882] RIP: 0033:0x7f8b80bad0d9 [ 520.539417][T15882] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 520.558855][T15882] RSP: 002b:00007f8b7f920168 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 520.567096][T15882] RAX: ffffffffffffffda RBX: 00007f8b80cccf80 RCX: 00007f8b80bad0d9 [ 520.574924][T15882] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000240 [ 520.582721][T15882] RBP: 00007f8b7f9201d0 R08: 0000000000000000 R09: 0000000000000000 [ 520.590531][T15882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 520.598343][T15882] R13: 00007fff9984cd5f R14: 00007f8b7f920300 R15: 0000000000022000 [ 520.606157][T15882] [ 520.609193][T15896] CPU: 0 PID: 15896 Comm: syz-executor.5 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 520.619263][T15896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 520.629166][T15896] Call Trace: [ 520.632283][T15896] [ 520.635060][T15896] dump_stack_lvl+0x151/0x1b7 [ 520.639577][T15896] ? bfq_pos_tree_add_move+0x43e/0x43e [ 520.644870][T15896] ? __kasan_slab_alloc+0xc4/0xe0 [ 520.649725][T15896] ? kmem_cache_alloc+0x189/0x2f0 [ 520.654582][T15896] dump_stack+0x15/0x17 [ 520.658576][T15896] should_fail+0x3c0/0x510 [ 520.662835][T15896] ? __get_vm_area_node+0x13a/0x380 [ 520.667863][T15896] __should_failslab+0x9f/0xe0 [ 520.672462][T15896] should_failslab+0x9/0x20 [ 520.676802][T15896] kmem_cache_alloc_trace+0x4a/0x310 [ 520.681922][T15896] __get_vm_area_node+0x13a/0x380 [ 520.686784][T15896] __vmalloc_node_range+0xda/0x800 [ 520.691742][T15896] ? copy_process+0x579/0x3250 [ 520.696339][T15896] ? kmem_cache_alloc+0x1c1/0x2f0 [ 520.701199][T15896] ? dup_task_struct+0x53/0xa60 [ 520.705878][T15896] dup_task_struct+0x61f/0xa60 [ 520.710479][T15896] ? copy_process+0x579/0x3250 [ 520.715076][T15896] ? __kasan_check_write+0x14/0x20 [ 520.720024][T15896] copy_process+0x579/0x3250 [ 520.724463][T15896] ? check_stack_object+0x117/0x130 [ 520.729484][T15896] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 520.734438][T15896] ? copy_clone_args_from_user+0x6f0/0x790 [ 520.740074][T15896] kernel_clone+0x22d/0x990 [ 520.744411][T15896] ? dup_mmap+0xea0/0xea0 [ 520.748577][T15896] ? create_io_thread+0x1e0/0x1e0 [ 520.753446][T15896] ? file_end_write+0x1b0/0x1b0 [ 520.758127][T15896] __x64_sys_clone3+0x375/0x3a0 [ 520.762823][T15896] ? __ia32_sys_clone+0x300/0x300 [ 520.767671][T15896] ? ksys_write+0x25f/0x2c0 [ 520.772013][T15896] ? debug_smp_processor_id+0x17/0x20 [ 520.777220][T15896] do_syscall_64+0x44/0xd0 [ 520.781470][T15896] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 520.787199][T15896] RIP: 0033:0x7f1283d100d9 [ 520.791454][T15896] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 520.810895][T15896] RSP: 002b:00007f1282a83038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 520.819239][T15896] RAX: ffffffffffffffda RBX: 00007f1283e2ff80 RCX: 00007f1283d100d9 [ 520.827045][T15896] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007f1282a83050 [ 520.834848][T15896] RBP: 00007f1282a831d0 R08: 0000000000000000 R09: 0000000000000058 [ 520.842666][T15896] R10: 00007f1282a83050 R11: 0000000000000246 R12: 0000000000000058 17:18:30 executing program 2: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 2) 17:18:30 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) [ 520.850468][T15896] R13: 00007ffff3281b1f R14: 00007f1282a83300 R15: 0000000000022000 [ 520.858284][T15896] [ 520.861365][T15892] CPU: 1 PID: 15892 Comm: syz-executor.0 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 520.871426][T15892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 520.877791][T15896] syz-executor.5: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 520.881320][T15892] Call Trace: [ 520.881328][T15892] [ 520.881335][T15892] dump_stack_lvl+0x151/0x1b7 [ 520.894183][T15896] ,cpuset= [ 520.897200][T15892] ? bfq_pos_tree_add_move+0x43e/0x43e [ 520.897222][T15892] ? __kasan_slab_alloc+0xc4/0xe0 [ 520.897238][T15892] ? kmem_cache_alloc+0x189/0x2f0 [ 520.897254][T15892] dump_stack+0x15/0x17 [ 520.900528][T15896] syz5 [ 520.904489][T15892] should_fail+0x3c0/0x510 [ 520.907639][T15896] ,mems_allowed=0 [ 520.912651][T15892] ? __get_vm_area_node+0x13a/0x380 [ 520.912672][T15892] __should_failslab+0x9f/0xe0 [ 520.917639][T15896] [ 520.922370][T15892] should_failslab+0x9/0x20 17:18:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xb4}, {0x0}, {&(0x7f0000002a80)=""/4096, 0xe14}], 0x3, 0x0, 0x38000}}], 0x300, 0x0, 0x0) [ 520.922390][T15892] kmem_cache_alloc_trace+0x4a/0x310 [ 520.957960][T15892] __get_vm_area_node+0x13a/0x380 [ 520.962817][T15892] __vmalloc_node_range+0xda/0x800 [ 520.967761][T15892] ? copy_process+0x579/0x3250 [ 520.972375][T15892] ? kmem_cache_alloc+0x1c1/0x2f0 [ 520.977223][T15892] ? dup_task_struct+0x53/0xa60 [ 520.981912][T15892] dup_task_struct+0x61f/0xa60 [ 520.986523][T15892] ? copy_process+0x579/0x3250 [ 520.991109][T15892] ? __kasan_check_write+0x14/0x20 [ 520.996058][T15892] copy_process+0x579/0x3250 [ 521.000485][T15892] ? check_stack_object+0x117/0x130 [ 521.005526][T15892] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 521.010466][T15892] ? copy_clone_args_from_user+0x6f0/0x790 [ 521.016105][T15892] kernel_clone+0x22d/0x990 [ 521.020443][T15892] ? dup_mmap+0xea0/0xea0 [ 521.024614][T15892] ? create_io_thread+0x1e0/0x1e0 [ 521.029476][T15892] ? file_end_write+0x1b0/0x1b0 [ 521.034158][T15892] __x64_sys_clone3+0x375/0x3a0 [ 521.038849][T15892] ? __ia32_sys_clone+0x300/0x300 [ 521.043707][T15892] ? ksys_write+0x25f/0x2c0 [ 521.048044][T15892] ? debug_smp_processor_id+0x17/0x20 [ 521.053251][T15892] do_syscall_64+0x44/0xd0 [ 521.057512][T15892] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 521.063232][T15892] RIP: 0033:0x7f8b07fbd0d9 [ 521.067486][T15892] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 521.087100][T15892] RSP: 002b:00007f8b06d30038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 521.095346][T15892] RAX: ffffffffffffffda RBX: 00007f8b080dcf80 RCX: 00007f8b07fbd0d9 [ 521.103156][T15892] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007f8b06d30050 [ 521.110967][T15892] RBP: 00007f8b06d301d0 R08: 0000000000000000 R09: 0000000000000058 [ 521.118791][T15892] R10: 00007f8b06d30050 R11: 0000000000000246 R12: 0000000000000058 [ 521.126590][T15892] R13: 00007ffdf6d84d0f R14: 00007f8b06d30300 R15: 0000000000022000 [ 521.134404][T15892] [ 521.137291][T15896] CPU: 0 PID: 15896 Comm: syz-executor.5 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 521.147338][T15896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 521.155301][T15901] FAULT_INJECTION: forcing a failure. [ 521.155301][T15901] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 521.157228][T15896] Call Trace: [ 521.157235][T15896] [ 521.157241][T15896] dump_stack_lvl+0x151/0x1b7 [ 521.157264][T15896] ? bfq_pos_tree_add_move+0x43e/0x43e [ 521.157282][T15896] ? __rcu_read_unlock+0x7c/0xd0 [ 521.157301][T15896] dump_stack+0x15/0x17 [ 521.157317][T15896] warn_alloc+0x242/0x3d0 [ 521.157335][T15896] ? zone_watermark_ok_safe+0x280/0x280 [ 521.157352][T15896] ? __get_vm_area_node+0x36a/0x380 [ 521.157369][T15896] __vmalloc_node_range+0x2be/0x800 [ 521.214289][T15896] ? dup_task_struct+0x53/0xa60 [ 521.218950][T15896] dup_task_struct+0x61f/0xa60 [ 521.223550][T15896] ? copy_process+0x579/0x3250 [ 521.228151][T15896] ? __kasan_check_write+0x14/0x20 [ 521.233102][T15896] copy_process+0x579/0x3250 [ 521.237524][T15896] ? check_stack_object+0x117/0x130 [ 521.242564][T15896] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 521.247501][T15896] ? copy_clone_args_from_user+0x6f0/0x790 [ 521.253141][T15896] kernel_clone+0x22d/0x990 [ 521.257482][T15896] ? dup_mmap+0xea0/0xea0 [ 521.261645][T15896] ? create_io_thread+0x1e0/0x1e0 [ 521.266508][T15896] ? file_end_write+0x1b0/0x1b0 [ 521.271193][T15896] __x64_sys_clone3+0x375/0x3a0 [ 521.275889][T15896] ? __ia32_sys_clone+0x300/0x300 [ 521.280744][T15896] ? ksys_write+0x25f/0x2c0 [ 521.285082][T15896] ? debug_smp_processor_id+0x17/0x20 [ 521.290290][T15896] do_syscall_64+0x44/0xd0 [ 521.294542][T15896] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 521.300269][T15896] RIP: 0033:0x7f1283d100d9 [ 521.304522][T15896] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 521.323964][T15896] RSP: 002b:00007f1282a83038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 521.332703][T15896] RAX: ffffffffffffffda RBX: 00007f1283e2ff80 RCX: 00007f1283d100d9 [ 521.340503][T15896] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007f1282a83050 [ 521.348317][T15896] RBP: 00007f1282a831d0 R08: 0000000000000000 R09: 0000000000000058 17:18:30 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 5) 17:18:30 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x2) [ 521.356127][T15896] R10: 00007f1282a83050 R11: 0000000000000246 R12: 0000000000000058 [ 521.363937][T15896] R13: 00007ffff3281b1f R14: 00007f1282a83300 R15: 0000000000022000 [ 521.371759][T15896] [ 521.374616][T15901] CPU: 1 PID: 15901 Comm: syz-executor.2 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 521.384686][T15901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 521.394583][T15901] Call Trace: [ 521.397702][T15901] [ 521.400480][T15901] dump_stack_lvl+0x151/0x1b7 [ 521.404992][T15901] ? bfq_pos_tree_add_move+0x43e/0x43e [ 521.406894][T15896] Mem-Info: [ 521.410284][T15901] dump_stack+0x15/0x17 [ 521.410307][T15901] should_fail+0x3c0/0x510 [ 521.410324][T15901] should_fail_usercopy+0x1a/0x20 [ 521.410339][T15901] _copy_from_user+0x20/0xd0 [ 521.413318][T15896] active_anon:13914 inactive_anon:142782 isolated_anon:0 [ 521.413318][T15896] active_file:5737 inactive_file:9008 isolated_file:0 [ 521.413318][T15896] unevictable:0 dirty:30 writeback:0 [ 521.413318][T15896] slab_reclaimable:10783 slab_unreclaimable:74900 [ 521.413318][T15896] mapped:29355 shmem:14485 pagetables:1060 bounce:0 [ 521.413318][T15896] kernel_misc_reclaimable:0 [ 521.413318][T15896] free:1409618 free_pcp:21271 free_cma:0 [ 521.417225][T15901] copy_clone_args_from_user+0x6a8/0x790 [ 521.417249][T15901] ? dup_mmap+0xea0/0xea0 [ 521.417265][T15901] ? file_end_write+0x1b0/0x1b0 [ 521.421542][T15896] Node 0 active_anon:55656kB inactive_anon:571128kB active_file:22948kB inactive_file:36032kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117420kB dirty:120kB writeback:0kB shmem:57940kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB kernel_stack:5952kB pagetables:4240kB all_unreclaimable? no [ 521.426337][T15901] __x64_sys_clone3+0x122/0x3a0 [ 521.426358][T15901] ? __mutex_lock_slowpath+0x10/0x10 [ 521.431621][T15896] DMA32 free:2976724kB min:62592kB low:78240kB high:93888kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2982424kB mlocked:0kB bounce:0kB free_pcp:5700kB local_pcp:3872kB free_cma:0kB [ 521.472340][T15901] ? __ia32_sys_clone+0x300/0x300 [ 521.472370][T15901] ? ksys_write+0x25f/0x2c0 [ 521.472389][T15901] ? debug_smp_processor_id+0x17/0x20 [ 521.472406][T15901] do_syscall_64+0x44/0xd0 [ 521.472422][T15901] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 521.479174][T15896] lowmem_reserve[]: [ 521.481971][T15901] RIP: 0033:0x7fd67b67e0d9 [ 521.481993][T15901] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 17:18:31 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) 17:18:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xb4}, {0x0}, {&(0x7f0000002a80)=""/4096, 0xe14}], 0x3, 0x0, 0x40000}}], 0x300, 0x0, 0x0) [ 521.486729][T15896] 0 [ 521.518164][T15901] RSP: 002b:00007fd67a3f1038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 521.518187][T15901] RAX: ffffffffffffffda RBX: 00007fd67b79df80 RCX: 00007fd67b67e0d9 [ 521.518198][T15901] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fd67a3f1050 [ 521.518208][T15901] RBP: 00007fd67a3f11d0 R08: 0000000000000000 R09: 0000000000000058 [ 521.518218][T15901] R10: 00007fd67a3f1050 R11: 0000000000000246 R12: 0000000000000058 [ 521.518229][T15901] R13: 00007ffea7b5c4ef R14: 00007fd67a3f1300 R15: 0000000000022000 [ 521.518242][T15901] [ 521.590786][T15909] FAULT_INJECTION: forcing a failure. [ 521.590786][T15909] name failslab, interval 1, probability 0, space 0, times 0 [ 521.616187][T15896] 3941 [ 521.633904][T15909] CPU: 1 PID: 15909 Comm: syz-executor.0 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 521.654018][T15916] FAULT_INJECTION: forcing a failure. [ 521.654018][T15916] name failslab, interval 1, probability 0, space 0, times 0 [ 521.657229][T15909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 17:18:31 executing program 2: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 3) [ 521.657244][T15909] Call Trace: [ 521.657250][T15909] [ 521.657256][T15909] dump_stack_lvl+0x151/0x1b7 [ 521.657278][T15909] ? bfq_pos_tree_add_move+0x43e/0x43e [ 521.688292][T15896] 3941 [ 521.697677][T15909] dump_stack+0x15/0x17 [ 521.697701][T15909] should_fail+0x3c0/0x510 [ 521.697717][T15909] ? security_prepare_creds+0x50/0x160 [ 521.697736][T15909] __should_failslab+0x9f/0xe0 [ 521.697753][T15909] should_failslab+0x9/0x20 [ 521.737775][T15896] [ 521.739424][T15909] __kmalloc+0x6d/0x350 [ 521.746202][T15896] Normal free:2661748kB min:84860kB low:106072kB high:127284kB reserved_highatomic:0KB active_anon:55656kB inactive_anon:571228kB active_file:22948kB inactive_file:36032kB unevictable:0kB writepending:120kB present:5242880kB managed:4035848kB mlocked:0kB bounce:0kB free_pcp:78944kB local_pcp:29384kB free_cma:0kB [ 521.748359][T15909] security_prepare_creds+0x50/0x160 [ 521.748382][T15909] prepare_creds+0x471/0x690 [ 521.748402][T15909] copy_creds+0xde/0x640 [ 521.753981][T15896] lowmem_reserve[]: [ 521.754528][T15909] copy_process+0x775/0x3250 [ 521.805389][T15909] ? check_stack_object+0x117/0x130 [ 521.810422][T15909] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 521.815367][T15909] ? copy_clone_args_from_user+0x6f0/0x790 [ 521.821012][T15909] kernel_clone+0x22d/0x990 [ 521.825346][T15909] ? dup_mmap+0xea0/0xea0 [ 521.829514][T15909] ? create_io_thread+0x1e0/0x1e0 [ 521.834372][T15909] ? file_end_write+0x1b0/0x1b0 [ 521.839061][T15909] __x64_sys_clone3+0x375/0x3a0 [ 521.841132][T15896] 0 [ 521.843848][T15909] ? __ia32_sys_clone+0x300/0x300 [ 521.843878][T15909] ? ksys_write+0x25f/0x2c0 [ 521.852157][T15896] 0 [ 521.855389][T15909] ? debug_smp_processor_id+0x17/0x20 [ 521.857493][T15896] 0 [ 521.857732][T15909] do_syscall_64+0x44/0xd0 [ 521.857759][T15909] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 521.866208][T15896] [ 521.869617][T15909] RIP: 0033:0x7f8b07fbd0d9 [ 521.869636][T15909] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 521.869650][T15909] RSP: 002b:00007f8b06d30038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 17:18:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xb4}, {0x0}, {&(0x7f0000002a80)=""/4096, 0xe14}], 0x3, 0x0, 0x200000}}], 0x300, 0x0, 0x0) 17:18:31 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x4) [ 521.869666][T15909] RAX: ffffffffffffffda RBX: 00007f8b080dcf80 RCX: 00007f8b07fbd0d9 [ 521.869677][T15909] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007f8b06d30050 [ 521.869688][T15909] RBP: 00007f8b06d301d0 R08: 0000000000000000 R09: 0000000000000058 [ 521.878849][T15896] DMA32: [ 521.881769][T15909] R10: 00007f8b06d30050 R11: 0000000000000246 R12: 0000000000000058 [ 521.881785][T15909] R13: 00007ffdf6d84d0f R14: 00007f8b06d30300 R15: 0000000000022000 [ 521.933569][T15896] 3*4kB [ 521.935853][T15909] [ 521.940117][T15916] CPU: 1 PID: 15916 Comm: syz-executor.2 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 521.945448][T15896] (M) [ 521.951472][T15916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 521.951485][T15916] Call Trace: [ 521.951490][T15916] [ 521.951496][T15916] dump_stack_lvl+0x151/0x1b7 [ 521.951520][T15916] ? bfq_pos_tree_add_move+0x43e/0x43e [ 521.951537][T15916] ? handle_pte_fault+0x517/0x11d0 [ 521.951552][T15916] dump_stack+0x15/0x17 [ 521.951566][T15916] should_fail+0x3c0/0x510 [ 521.954783][T15896] 1*8kB [ 521.957026][T15916] __should_failslab+0x9f/0xe0 [ 521.967496][T15896] (M) [ 521.969611][T15916] should_failslab+0x9/0x20 [ 521.969635][T15916] kmem_cache_alloc+0x4f/0x2f0 [ 521.979853][T15896] 2*16kB [ 521.982628][T15916] ? dup_task_struct+0x53/0xa60 [ 521.982652][T15916] ? __kasan_check_write+0x14/0x20 [ 521.985459][T15896] (M) [ 521.989918][T15916] dup_task_struct+0x53/0xa60 [ 521.989939][T15916] ? __kasan_check_write+0x14/0x20 [ 521.989958][T15916] copy_process+0x579/0x3250 [ 521.989975][T15916] ? check_stack_object+0x117/0x130 17:18:31 executing program 2: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 4) [ 521.995708][T15896] 3*32kB [ 522.000160][T15916] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 522.000183][T15916] ? copy_clone_args_from_user+0x6f0/0x790 [ 522.000200][T15916] kernel_clone+0x22d/0x990 [ 522.004454][T15896] (M) [ 522.008404][T15916] ? dup_mmap+0xea0/0xea0 [ 522.008423][T15916] ? create_io_thread+0x1e0/0x1e0 [ 522.008439][T15916] ? file_end_write+0x1b0/0x1b0 [ 522.008457][T15916] __x64_sys_clone3+0x375/0x3a0 [ 522.011425][T15896] 3*64kB [ 522.015695][T15916] ? __ia32_sys_clone+0x300/0x300 [ 522.015718][T15916] ? ksys_write+0x25f/0x2c0 [ 522.018570][T15896] (M) [ 522.022555][T15916] ? debug_smp_processor_id+0x17/0x20 [ 522.022578][T15916] do_syscall_64+0x44/0xd0 [ 522.027493][T15896] 3*128kB [ 522.029929][T15916] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 522.034665][T15896] (M) [ 522.039561][T15916] RIP: 0033:0x7fd67b67e0d9 [ 522.039580][T15916] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 522.039594][T15916] RSP: 002b:00007fd67a3f1038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 522.042765][T15896] 3*256kB [ 522.046593][T15916] RAX: ffffffffffffffda RBX: 00007fd67b79df80 RCX: 00007fd67b67e0d9 [ 522.046609][T15916] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fd67a3f1050 [ 522.046621][T15916] RBP: 00007fd67a3f11d0 R08: 0000000000000000 R09: 0000000000000058 [ 522.051902][T15896] (M) [ 522.055966][T15916] R10: 00007fd67a3f1050 R11: 0000000000000246 R12: 0000000000000058 [ 522.055981][T15916] R13: 00007ffea7b5c4ef R14: 00007fd67a3f1300 R15: 0000000000022000 [ 522.055997][T15916] [ 522.061365][T15896] 3*512kB [ 522.181879][T15925] FAULT_INJECTION: forcing a failure. [ 522.181879][T15925] name failslab, interval 1, probability 0, space 0, times 0 [ 522.193057][T15896] (M) [ 522.196475][T15925] CPU: 1 PID: 15925 Comm: syz-executor.2 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 522.207046][T15896] 4*1024kB [ 522.211321][T15925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 522.211334][T15925] Call Trace: [ 522.211338][T15925] [ 522.211344][T15925] dump_stack_lvl+0x151/0x1b7 [ 522.211369][T15925] ? bfq_pos_tree_add_move+0x43e/0x43e [ 522.211385][T15925] ? __kasan_slab_alloc+0xc4/0xe0 [ 522.214229][T15896] (UM) [ 522.217056][T15925] ? kmem_cache_alloc+0x189/0x2f0 [ 522.217077][T15925] dump_stack+0x15/0x17 [ 522.229593][T15896] 4*2048kB [ 522.231977][T15925] should_fail+0x3c0/0x510 [ 522.231999][T15925] ? __get_vm_area_node+0x13a/0x380 [ 522.242109][T15896] (UM) [ 522.244994][T15925] __should_failslab+0x9f/0xe0 [ 522.245016][T15925] should_failslab+0x9/0x20 [ 522.254983][T15896] 723*4096kB [ 522.258012][T15925] kmem_cache_alloc_trace+0x4a/0x310 [ 522.258035][T15925] __get_vm_area_node+0x13a/0x380 [ 522.260835][T15896] (M) [ 522.265307][T15925] __vmalloc_node_range+0xda/0x800 [ 522.265325][T15925] ? copy_process+0x579/0x3250 [ 522.276109][T15896] = 2976724kB [ 522.278150][T15925] ? kmem_cache_alloc+0x1c1/0x2f0 [ 522.278174][T15925] ? dup_task_struct+0x53/0xa60 [ 522.278197][T15925] dup_task_struct+0x61f/0xa60 [ 522.283277][T15896] Normal: [ 522.287010][T15925] ? copy_process+0x579/0x3250 [ 522.287032][T15925] ? __kasan_check_write+0x14/0x20 [ 522.290245][T15896] 8129*4kB [ 522.294210][T15925] copy_process+0x579/0x3250 [ 522.294235][T15925] ? check_stack_object+0x117/0x130 [ 522.299533][T15896] (UME) [ 522.301849][T15925] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 522.301872][T15925] ? copy_clone_args_from_user+0x6f0/0x790 [ 522.306488][T15896] 5630*8kB [ 522.310784][T15925] kernel_clone+0x22d/0x990 [ 522.310802][T15925] ? dup_mmap+0xea0/0xea0 [ 522.310818][T15925] ? create_io_thread+0x1e0/0x1e0 [ 522.310833][T15925] ? file_end_write+0x1b0/0x1b0 [ 522.314383][T15896] (UME) [ 522.319036][T15925] __x64_sys_clone3+0x375/0x3a0 [ 522.319059][T15925] ? __ia32_sys_clone+0x300/0x300 [ 522.319075][T15925] ? ksys_write+0x25f/0x2c0 [ 522.324164][T15896] 3090*16kB [ 522.326408][T15925] ? debug_smp_processor_id+0x17/0x20 [ 522.326430][T15925] do_syscall_64+0x44/0xd0 [ 522.331664][T15896] (UME) [ 522.335957][T15925] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 522.335982][T15925] RIP: 0033:0x7fd67b67e0d9 [ 522.339306][T15896] 1513*32kB [ 522.343940][T15925] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 522.343958][T15925] RSP: 002b:00007fd67a3f1038 EFLAGS: 00000246 [ 522.348884][T15896] (UME) [ 522.353225][T15925] ORIG_RAX: 00000000000001b3 [ 522.353235][T15925] RAX: ffffffffffffffda RBX: 00007fd67b79df80 RCX: 00007fd67b67e0d9 [ 522.353250][T15925] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fd67a3f1050 [ 522.356129][T15896] 427*64kB [ 522.360686][T15925] RBP: 00007fd67a3f11d0 R08: 0000000000000000 R09: 0000000000000058 [ 522.360700][T15925] R10: 00007fd67a3f1050 R11: 0000000000000246 R12: 0000000000000058 [ 522.360711][T15925] R13: 00007ffea7b5c4ef R14: 00007fd67a3f1300 R15: 0000000000022000 [ 522.360726][T15925] [ 522.535032][T15896] (UM) 91*128kB (UME) 38*256kB (UME) 43*512kB (UME) 27*1024kB (UE) 12*2048kB (UME) 577*4096kB (UM) = 2661748kB [ 522.546843][T15896] 29250 total pagecache pages [ 522.551448][T15896] 0 pages in swap cache [ 522.555321][T15896] Swap cache stats: add 0, delete 0, find 0/0 17:18:32 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 17:18:32 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 6) 17:18:32 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) 17:18:32 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x8) 17:18:32 executing program 2: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 5) [ 522.561301][T15896] Free swap = 0kB [ 522.564779][T15896] Total swap = 0kB [ 522.568400][T15896] 2097051 pages RAM [ 522.571982][T15896] 0 pages HighMem/MovableOnly [ 522.576496][T15896] 342483 pages reserved [ 522.580520][T15896] 0 pages cma reserved [ 522.601692][T15935] FAULT_INJECTION: forcing a failure. [ 522.601692][T15935] name failslab, interval 1, probability 0, space 0, times 0 [ 522.615542][T15935] CPU: 1 PID: 15935 Comm: syz-executor.0 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 522.620982][T15936] FAULT_INJECTION: forcing a failure. [ 522.620982][T15936] name failslab, interval 1, probability 0, space 0, times 0 [ 522.625612][T15935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 522.625629][T15935] Call Trace: [ 522.625636][T15935] [ 522.625644][T15935] dump_stack_lvl+0x151/0x1b7 [ 522.658339][T15935] ? bfq_pos_tree_add_move+0x43e/0x43e 17:18:32 executing program 5: syz_clone3(&(0x7f0000000800)={0x2, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 522.663626][T15935] dump_stack+0x15/0x17 [ 522.667642][T15935] should_fail+0x3c0/0x510 [ 522.671872][T15935] __should_failslab+0x9f/0xe0 [ 522.676475][T15935] should_failslab+0x9/0x20 [ 522.680813][T15935] kmem_cache_alloc+0x4f/0x2f0 [ 522.685413][T15935] ? alloc_vmap_area+0x6c3/0x1a90 [ 522.690273][T15935] alloc_vmap_area+0x6c3/0x1a90 [ 522.694961][T15935] ? vm_map_ram+0xa80/0xa80 [ 522.699731][T15935] ? __kasan_kmalloc+0x9/0x10 [ 522.704244][T15935] ? __get_vm_area_node+0x13a/0x380 [ 522.709364][T15935] __get_vm_area_node+0x17b/0x380 [ 522.714224][T15935] __vmalloc_node_range+0xda/0x800 [ 522.719174][T15935] ? copy_process+0x579/0x3250 [ 522.723776][T15935] ? kmem_cache_alloc+0x1c1/0x2f0 [ 522.728635][T15935] ? dup_task_struct+0x53/0xa60 [ 522.733321][T15935] dup_task_struct+0x61f/0xa60 [ 522.737920][T15935] ? copy_process+0x579/0x3250 [ 522.742608][T15935] ? __kasan_check_write+0x14/0x20 [ 522.747555][T15935] copy_process+0x579/0x3250 [ 522.751980][T15935] ? check_stack_object+0x117/0x130 [ 522.757013][T15935] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 522.761959][T15935] ? copy_clone_args_from_user+0x6f0/0x790 [ 522.767610][T15935] kernel_clone+0x22d/0x990 [ 522.771941][T15935] ? dup_mmap+0xea0/0xea0 [ 522.776106][T15935] ? create_io_thread+0x1e0/0x1e0 [ 522.780973][T15935] ? file_end_write+0x1b0/0x1b0 [ 522.785655][T15935] __x64_sys_clone3+0x375/0x3a0 [ 522.790340][T15935] ? __ia32_sys_clone+0x300/0x300 [ 522.795201][T15935] ? ksys_write+0x25f/0x2c0 [ 522.799543][T15935] ? debug_smp_processor_id+0x17/0x20 [ 522.804755][T15935] do_syscall_64+0x44/0xd0 [ 522.809007][T15935] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 522.814735][T15935] RIP: 0033:0x7f8b07fbd0d9 [ 522.818986][T15935] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 522.838425][T15935] RSP: 002b:00007f8b06d30038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 522.846671][T15935] RAX: ffffffffffffffda RBX: 00007f8b080dcf80 RCX: 00007f8b07fbd0d9 [ 522.854479][T15935] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007f8b06d30050 [ 522.862290][T15935] RBP: 00007f8b06d301d0 R08: 0000000000000000 R09: 0000000000000058 [ 522.870113][T15935] R10: 00007f8b06d30050 R11: 0000000000000246 R12: 0000000000000058 [ 522.877913][T15935] R13: 00007ffdf6d84d0f R14: 00007f8b06d30300 R15: 0000000000022000 [ 522.885729][T15935] [ 522.888590][T15936] CPU: 0 PID: 15936 Comm: syz-executor.2 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 522.898659][T15936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 522.908683][T15936] Call Trace: [ 522.911809][T15936] [ 522.914587][T15936] dump_stack_lvl+0x151/0x1b7 [ 522.919096][T15936] ? bfq_pos_tree_add_move+0x43e/0x43e [ 522.924392][T15936] dump_stack+0x15/0x17 [ 522.928377][T15936] should_fail+0x3c0/0x510 [ 522.932631][T15936] ? security_prepare_creds+0x50/0x160 [ 522.937926][T15936] __should_failslab+0x9f/0xe0 [ 522.942556][T15936] should_failslab+0x9/0x20 [ 522.946865][T15936] __kmalloc+0x6d/0x350 [ 522.950857][T15936] security_prepare_creds+0x50/0x160 [ 522.955978][T15936] prepare_creds+0x471/0x690 [ 522.960407][T15936] copy_creds+0xde/0x640 [ 522.964491][T15936] copy_process+0x775/0x3250 [ 522.968911][T15936] ? check_stack_object+0x117/0x130 [ 522.973944][T15936] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 522.978893][T15936] ? copy_clone_args_from_user+0x6f0/0x790 [ 522.984556][T15936] kernel_clone+0x22d/0x990 [ 522.988871][T15936] ? dup_mmap+0xea0/0xea0 [ 522.993037][T15936] ? create_io_thread+0x1e0/0x1e0 [ 522.997896][T15936] ? file_end_write+0x1b0/0x1b0 [ 523.002671][T15936] __x64_sys_clone3+0x375/0x3a0 [ 523.007366][T15936] ? __ia32_sys_clone+0x300/0x300 [ 523.012307][T15936] ? ksys_write+0x25f/0x2c0 [ 523.016645][T15936] ? debug_smp_processor_id+0x17/0x20 [ 523.021887][T15936] do_syscall_64+0x44/0xd0 [ 523.026104][T15936] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 523.031831][T15936] RIP: 0033:0x7fd67b67e0d9 [ 523.036087][T15936] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 523.055528][T15936] RSP: 002b:00007fd67a3f1038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 17:18:32 executing program 2: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 6) 17:18:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xb4}, {0x0}, {&(0x7f0000002a80)=""/4096, 0xe14}], 0x3, 0x0, 0x800300}}], 0x300, 0x0, 0x0) [ 523.063771][T15936] RAX: ffffffffffffffda RBX: 00007fd67b79df80 RCX: 00007fd67b67e0d9 [ 523.071598][T15936] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fd67a3f1050 [ 523.079393][T15936] RBP: 00007fd67a3f11d0 R08: 0000000000000000 R09: 0000000000000058 [ 523.087204][T15936] R10: 00007fd67a3f1050 R11: 0000000000000246 R12: 0000000000000058 [ 523.095364][T15936] R13: 00007ffea7b5c4ef R14: 00007fd67a3f1300 R15: 0000000000022000 [ 523.103178][T15936] 17:18:32 executing program 5: syz_clone3(&(0x7f0000000800)={0x7, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 523.127433][T15942] FAULT_INJECTION: forcing a failure. [ 523.127433][T15942] name failslab, interval 1, probability 0, space 0, times 0 [ 523.141382][T15942] CPU: 1 PID: 15942 Comm: syz-executor.2 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 523.151453][T15942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 523.161348][T15942] Call Trace: [ 523.164464][T15942] [ 523.167280][T15942] dump_stack_lvl+0x151/0x1b7 [ 523.171755][T15942] ? bfq_pos_tree_add_move+0x43e/0x43e [ 523.177050][T15942] dump_stack+0x15/0x17 [ 523.181041][T15942] should_fail+0x3c0/0x510 [ 523.185295][T15942] __should_failslab+0x9f/0xe0 [ 523.189893][T15942] should_failslab+0x9/0x20 [ 523.194233][T15942] kmem_cache_alloc+0x4f/0x2f0 [ 523.198986][T15942] ? alloc_vmap_area+0x6c3/0x1a90 [ 523.203781][T15942] alloc_vmap_area+0x6c3/0x1a90 [ 523.208729][T15942] ? vm_map_ram+0xa80/0xa80 [ 523.213067][T15942] ? __kasan_kmalloc+0x9/0x10 [ 523.217582][T15942] ? __get_vm_area_node+0x13a/0x380 [ 523.222615][T15942] __get_vm_area_node+0x17b/0x380 [ 523.227473][T15942] __vmalloc_node_range+0xda/0x800 [ 523.232425][T15942] ? copy_process+0x579/0x3250 [ 523.237022][T15942] ? kmem_cache_alloc+0x1c1/0x2f0 [ 523.241881][T15942] ? dup_task_struct+0x53/0xa60 [ 523.246573][T15942] dup_task_struct+0x61f/0xa60 [ 523.251167][T15942] ? copy_process+0x579/0x3250 [ 523.255771][T15942] ? __kasan_check_write+0x14/0x20 [ 523.260715][T15942] copy_process+0x579/0x3250 [ 523.265165][T15942] ? check_stack_object+0x117/0x130 [ 523.270181][T15942] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 523.275122][T15942] ? copy_clone_args_from_user+0x6f0/0x790 [ 523.280765][T15942] kernel_clone+0x22d/0x990 [ 523.285103][T15942] ? dup_mmap+0xea0/0xea0 [ 523.289275][T15942] ? create_io_thread+0x1e0/0x1e0 [ 523.294129][T15942] ? file_end_write+0x1b0/0x1b0 [ 523.298818][T15942] __x64_sys_clone3+0x375/0x3a0 [ 523.303504][T15942] ? __ia32_sys_clone+0x300/0x300 [ 523.308365][T15942] ? ksys_write+0x25f/0x2c0 [ 523.312706][T15942] ? debug_smp_processor_id+0x17/0x20 [ 523.317910][T15942] do_syscall_64+0x44/0xd0 [ 523.322164][T15942] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 523.327893][T15942] RIP: 0033:0x7fd67b67e0d9 [ 523.332147][T15942] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 523.351586][T15942] RSP: 002b:00007fd67a3f1038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 523.359830][T15942] RAX: ffffffffffffffda RBX: 00007fd67b79df80 RCX: 00007fd67b67e0d9 [ 523.367749][T15942] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fd67a3f1050 17:18:32 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 7) 17:18:32 executing program 2: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 7) [ 523.375552][T15942] RBP: 00007fd67a3f11d0 R08: 0000000000000000 R09: 0000000000000058 [ 523.383384][T15942] R10: 00007fd67a3f1050 R11: 0000000000000246 R12: 0000000000000058 [ 523.391174][T15942] R13: 00007ffea7b5c4ef R14: 00007fd67a3f1300 R15: 0000000000022000 [ 523.398987][T15942] 17:18:32 executing program 5: syz_clone3(&(0x7f0000000800)={0x8, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 17:18:32 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) [ 523.423002][T15947] FAULT_INJECTION: forcing a failure. [ 523.423002][T15947] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 523.450451][T15947] CPU: 0 PID: 15947 Comm: syz-executor.0 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 523.460524][T15947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 523.470420][T15947] Call Trace: [ 523.473544][T15947] [ 523.476318][T15947] dump_stack_lvl+0x151/0x1b7 [ 523.480835][T15947] ? bfq_pos_tree_add_move+0x43e/0x43e [ 523.486132][T15947] dump_stack+0x15/0x17 [ 523.490122][T15947] should_fail+0x3c0/0x510 [ 523.494374][T15947] should_fail_alloc_page+0x58/0x70 [ 523.499525][T15947] __alloc_pages+0x1de/0x7c0 [ 523.503949][T15947] ? __count_vm_events+0x30/0x30 [ 523.508810][T15947] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 523.514025][T15947] __get_free_pages+0xe/0x30 [ 523.518443][T15947] kasan_populate_vmalloc_pte+0x39/0x130 [ 523.523911][T15947] ? __apply_to_page_range+0x8a5/0xb90 [ 523.529209][T15947] __apply_to_page_range+0x8b8/0xb90 [ 523.534331][T15947] ? kasan_populate_vmalloc+0x70/0x70 [ 523.539536][T15947] ? kasan_populate_vmalloc+0x70/0x70 [ 523.544741][T15947] apply_to_page_range+0x3b/0x50 [ 523.549515][T15947] kasan_populate_vmalloc+0x65/0x70 [ 523.554549][T15947] alloc_vmap_area+0x1946/0x1a90 [ 523.559326][T15947] ? vm_map_ram+0xa80/0xa80 [ 523.563669][T15947] ? __kasan_kmalloc+0x9/0x10 [ 523.568174][T15947] ? __get_vm_area_node+0x13a/0x380 17:18:32 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0xa) 17:18:32 executing program 5: syz_clone3(&(0x7f0000000800)={0x9, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 17:18:32 executing program 5: syz_clone3(&(0x7f0000000800)={0x11, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 17:18:32 executing program 5: syz_clone3(&(0x7f0000000800)={0x700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 17:18:32 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) 17:18:32 executing program 5: syz_clone3(&(0x7f0000000800)={0x900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 523.573210][T15947] __get_vm_area_node+0x17b/0x380 [ 523.578077][T15947] __vmalloc_node_range+0xda/0x800 [ 523.583018][T15947] ? copy_process+0x579/0x3250 [ 523.587617][T15947] ? kmem_cache_alloc+0x1c1/0x2f0 [ 523.592477][T15947] ? dup_task_struct+0x53/0xa60 [ 523.597166][T15947] dup_task_struct+0x61f/0xa60 [ 523.601860][T15947] ? copy_process+0x579/0x3250 [ 523.606456][T15947] ? __kasan_check_write+0x14/0x20 [ 523.611409][T15947] copy_process+0x579/0x3250 [ 523.615849][T15947] ? check_stack_object+0x117/0x130 [ 523.620865][T15947] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 523.625811][T15947] ? copy_clone_args_from_user+0x6f0/0x790 [ 523.631456][T15947] kernel_clone+0x22d/0x990 [ 523.635796][T15947] ? dup_mmap+0xea0/0xea0 [ 523.639959][T15947] ? create_io_thread+0x1e0/0x1e0 [ 523.644917][T15947] ? file_end_write+0x1b0/0x1b0 [ 523.649598][T15947] __x64_sys_clone3+0x375/0x3a0 [ 523.654273][T15947] ? __ia32_sys_clone+0x300/0x300 [ 523.659134][T15947] ? ksys_write+0x25f/0x2c0 [ 523.663474][T15947] ? debug_smp_processor_id+0x17/0x20 [ 523.668680][T15947] do_syscall_64+0x44/0xd0 [ 523.672943][T15947] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 523.678660][T15947] RIP: 0033:0x7f8b07fbd0d9 [ 523.682917][T15947] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 523.702356][T15947] RSP: 002b:00007f8b06d30038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 523.710601][T15947] RAX: ffffffffffffffda RBX: 00007f8b080dcf80 RCX: 00007f8b07fbd0d9 [ 523.718410][T15947] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007f8b06d30050 [ 523.726224][T15947] RBP: 00007f8b06d301d0 R08: 0000000000000000 R09: 0000000000000058 [ 523.734034][T15947] R10: 00007f8b06d30050 R11: 0000000000000246 R12: 0000000000000058 [ 523.741846][T15947] R13: 00007ffdf6d84d0f R14: 00007f8b06d30300 R15: 0000000000022000 [ 523.749754][T15947] 17:18:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xb4}, {0x0}, {&(0x7f0000002a80)=""/4096, 0xe14}], 0x3, 0x0, 0xc00100}}], 0x300, 0x0, 0x0) 17:18:33 executing program 5: syz_clone3(&(0x7f0000000800)={0x1100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 17:18:33 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) [ 523.988933][T15972] __nla_validate_parse: 147 callbacks suppressed [ 523.988953][T15972] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 524.037343][T15972] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 524.069741][T15973] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 524.087355][T15973] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 524.109452][T15973] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 524.127388][T15973] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 524.136605][T15973] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 524.169264][T15973] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 524.197354][T15973] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 524.206571][T15973] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 524.291830][ T1289] device bridge_slave_1 left promiscuous mode [ 524.297814][ T1289] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.304961][ T1289] device bridge_slave_0 left promiscuous mode [ 524.311163][ T1289] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.318755][ T1289] device veth1_macvtap left promiscuous mode [ 524.324553][ T1289] device veth0_vlan left promiscuous mode [ 525.358502][T15976] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.365343][T15976] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.372783][T15976] device bridge_slave_0 entered promiscuous mode [ 525.379555][T15976] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.386372][T15976] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.393618][T15976] device bridge_slave_1 entered promiscuous mode [ 525.428919][T15976] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.435940][T15976] bridge0: port 2(bridge_slave_1) entered forwarding state [ 525.443088][T15976] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.449843][T15976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 525.467319][ T5995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 525.474761][ T5995] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.482002][ T5995] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.498274][ T5995] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 525.506187][ T5995] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.512955][ T5995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 525.520171][ T5995] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 525.528153][ T5995] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.534968][ T5995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 525.542373][ T5995] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 525.550116][ T5995] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 525.561895][ T5985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 525.572778][ T5994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 525.580518][ T5994] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 525.587953][ T5994] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 525.595978][T15976] device veth0_vlan entered promiscuous mode [ 525.605558][ T5994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 525.614611][T15976] device veth1_macvtap entered promiscuous mode [ 525.623929][ T5985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 525.635020][ T5994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 525.655258][T15982] FAULT_INJECTION: forcing a failure. [ 525.655258][T15982] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 525.668607][T15982] CPU: 0 PID: 15982 Comm: syz-executor.2 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 525.678645][T15982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 525.688539][T15982] Call Trace: [ 525.692268][T15982] [ 525.695048][T15982] dump_stack_lvl+0x151/0x1b7 [ 525.699564][T15982] ? bfq_pos_tree_add_move+0x43e/0x43e [ 525.704853][T15982] ? stack_trace_save+0x12d/0x1f0 [ 525.709715][T15982] ? is_bpf_text_address+0x1a2/0x1c0 [ 525.714835][T15982] dump_stack+0x15/0x17 [ 525.718833][T15982] should_fail+0x3c0/0x510 [ 525.723082][T15982] should_fail_alloc_page+0x58/0x70 [ 525.728119][T15982] __alloc_pages+0x1de/0x7c0 [ 525.732538][T15982] ? kmem_cache_alloc+0x189/0x2f0 [ 525.737417][T15982] ? __x64_sys_clone3+0x375/0x3a0 [ 525.742356][T15982] ? __count_vm_events+0x30/0x30 [ 525.747156][T15982] __get_free_pages+0xe/0x30 [ 525.751555][T15982] kasan_populate_vmalloc_pte+0x39/0x130 [ 525.757116][T15982] ? __apply_to_page_range+0x8a5/0xb90 [ 525.762403][T15982] __apply_to_page_range+0x8b8/0xb90 [ 525.767527][T15982] ? kasan_populate_vmalloc+0x70/0x70 [ 525.772744][T15982] ? kasan_populate_vmalloc+0x70/0x70 [ 525.777939][T15982] apply_to_page_range+0x3b/0x50 [ 525.782718][T15982] kasan_populate_vmalloc+0x65/0x70 [ 525.787748][T15982] alloc_vmap_area+0x1946/0x1a90 [ 525.792521][T15982] ? vm_map_ram+0xa80/0xa80 [ 525.796861][T15982] ? __kasan_kmalloc+0x9/0x10 [ 525.801372][T15982] ? __get_vm_area_node+0x13a/0x380 [ 525.806407][T15982] __get_vm_area_node+0x17b/0x380 [ 525.811280][T15982] __vmalloc_node_range+0xda/0x800 [ 525.816303][T15982] ? copy_process+0x579/0x3250 [ 525.820902][T15982] ? kmem_cache_alloc+0x1c1/0x2f0 [ 525.825763][T15982] ? dup_task_struct+0x53/0xa60 [ 525.830454][T15982] dup_task_struct+0x61f/0xa60 [ 525.835136][T15982] ? copy_process+0x579/0x3250 [ 525.839734][T15982] ? __kasan_check_write+0x14/0x20 [ 525.844682][T15982] copy_process+0x579/0x3250 [ 525.849173][T15982] ? check_stack_object+0x117/0x130 [ 525.854143][T15982] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 525.859090][T15982] ? copy_clone_args_from_user+0x6f0/0x790 [ 525.864732][T15982] kernel_clone+0x22d/0x990 [ 525.869071][T15982] ? dup_mmap+0xea0/0xea0 [ 525.873238][T15982] ? create_io_thread+0x1e0/0x1e0 [ 525.878097][T15982] ? file_end_write+0x1b0/0x1b0 [ 525.882784][T15982] __x64_sys_clone3+0x375/0x3a0 [ 525.887469][T15982] ? __ia32_sys_clone+0x300/0x300 [ 525.892336][T15982] ? ksys_write+0x25f/0x2c0 [ 525.896674][T15982] ? debug_smp_processor_id+0x17/0x20 [ 525.901876][T15982] do_syscall_64+0x44/0xd0 [ 525.906129][T15982] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 525.911857][T15982] RIP: 0033:0x7fb8471070d9 [ 525.916125][T15982] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 525.935814][T15982] RSP: 002b:00007fb845e7a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 525.944057][T15982] RAX: ffffffffffffffda RBX: 00007fb847226f80 RCX: 00007fb8471070d9 [ 525.951867][T15982] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fb845e7a050 [ 525.959678][T15982] RBP: 00007fb845e7a1d0 R08: 0000000000000000 R09: 0000000000000058 [ 525.967493][T15982] R10: 00007fb845e7a050 R11: 0000000000000246 R12: 0000000000000058 17:18:35 executing program 2: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 8) 17:18:35 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x10) 17:18:35 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 8) 17:18:35 executing program 5: syz_clone3(&(0x7f0000000800)={0x1f00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 17:18:35 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) 17:18:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xb4}, {0x0}, {&(0x7f0000002a80)=""/4096, 0xe14}], 0x3, 0x0, 0x1000000}}], 0x300, 0x0, 0x0) 17:18:35 executing program 5: syz_clone3(&(0x7f0000000800)={0x2000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 525.975304][T15982] R13: 00007ffcf73cf18f R14: 00007fb845e7a300 R15: 0000000000022000 [ 525.983123][T15982] [ 525.995440][T15985] FAULT_INJECTION: forcing a failure. [ 525.995440][T15985] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 526.017465][T15985] CPU: 0 PID: 15985 Comm: syz-executor.0 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 526.027626][T15985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 526.037522][T15985] Call Trace: [ 526.040644][T15985] [ 526.043430][T15985] dump_stack_lvl+0x151/0x1b7 [ 526.047944][T15985] ? bfq_pos_tree_add_move+0x43e/0x43e [ 526.053235][T15985] dump_stack+0x15/0x17 [ 526.057229][T15985] should_fail+0x3c0/0x510 [ 526.061476][T15985] should_fail_alloc_page+0x58/0x70 [ 526.066556][T15985] __alloc_pages+0x1de/0x7c0 [ 526.070937][T15985] ? __count_vm_events+0x30/0x30 [ 526.075709][T15985] ? _raw_spin_trylock_bh+0x1d0/0x1d0 17:18:35 executing program 5: syz_clone3(&(0x7f0000000800)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 17:18:35 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) 17:18:35 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x18) 17:18:35 executing program 5: syz_clone3(&(0x7f0000000800)={0x10fff, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 526.080922][T15985] __get_free_pages+0xe/0x30 [ 526.085342][T15985] kasan_populate_vmalloc_pte+0x39/0x130 [ 526.090810][T15985] ? __apply_to_page_range+0x8a5/0xb90 [ 526.096104][T15985] __apply_to_page_range+0x8b8/0xb90 [ 526.101229][T15985] ? kasan_populate_vmalloc+0x70/0x70 [ 526.106437][T15985] ? kasan_populate_vmalloc+0x70/0x70 [ 526.111638][T15985] apply_to_page_range+0x3b/0x50 [ 526.113309][T15996] FAULT_INJECTION: forcing a failure. [ 526.113309][T15996] name failslab, interval 1, probability 0, space 0, times 0 [ 526.116410][T15985] kasan_populate_vmalloc+0x65/0x70 [ 526.116440][T15985] alloc_vmap_area+0x1946/0x1a90 [ 526.138635][T15985] ? vm_map_ram+0xa80/0xa80 [ 526.142995][T15985] ? __kasan_kmalloc+0x9/0x10 [ 526.147480][T15985] ? __get_vm_area_node+0x13a/0x380 [ 526.152519][T15985] __get_vm_area_node+0x17b/0x380 [ 526.157378][T15985] __vmalloc_node_range+0xda/0x800 [ 526.162321][T15985] ? copy_process+0x579/0x3250 [ 526.166923][T15985] ? kmem_cache_alloc+0x1c1/0x2f0 [ 526.171788][T15985] ? dup_task_struct+0x53/0xa60 [ 526.176467][T15985] dup_task_struct+0x61f/0xa60 [ 526.181068][T15985] ? copy_process+0x579/0x3250 [ 526.185670][T15985] ? __kasan_check_write+0x14/0x20 [ 526.190618][T15985] copy_process+0x579/0x3250 [ 526.195045][T15985] ? check_stack_object+0x117/0x130 [ 526.200083][T15985] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 526.205025][T15985] ? copy_clone_args_from_user+0x6f0/0x790 [ 526.210676][T15985] kernel_clone+0x22d/0x990 [ 526.215003][T15985] ? dup_mmap+0xea0/0xea0 [ 526.219171][T15985] ? create_io_thread+0x1e0/0x1e0 [ 526.224031][T15985] ? file_end_write+0x1b0/0x1b0 [ 526.228717][T15985] __x64_sys_clone3+0x375/0x3a0 [ 526.233405][T15985] ? __ia32_sys_clone+0x300/0x300 [ 526.238268][T15985] ? ksys_write+0x25f/0x2c0 [ 526.242608][T15985] ? debug_smp_processor_id+0x17/0x20 [ 526.247814][T15985] do_syscall_64+0x44/0xd0 [ 526.252076][T15985] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 526.257792][T15985] RIP: 0033:0x7f8b07fbd0d9 [ 526.262044][T15985] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 526.281589][T15985] RSP: 002b:00007f8b06d30038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 526.289830][T15985] RAX: ffffffffffffffda RBX: 00007f8b080dcf80 RCX: 00007f8b07fbd0d9 [ 526.297639][T15985] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007f8b06d30050 [ 526.305638][T15985] RBP: 00007f8b06d301d0 R08: 0000000000000000 R09: 0000000000000058 [ 526.313441][T15985] R10: 00007f8b06d30050 R11: 0000000000000246 R12: 0000000000000058 [ 526.321249][T15985] R13: 00007ffdf6d84d0f R14: 00007f8b06d30300 R15: 0000000000022000 [ 526.329201][T15985] 17:18:35 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 9) [ 526.332058][T15996] CPU: 1 PID: 15996 Comm: syz-executor.2 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 526.342131][T15996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 526.352028][T15996] Call Trace: [ 526.355147][T15996] [ 526.358027][T15996] dump_stack_lvl+0x151/0x1b7 [ 526.362537][T15996] ? bfq_pos_tree_add_move+0x43e/0x43e [ 526.367828][T15996] dump_stack+0x15/0x17 [ 526.371817][T15996] should_fail+0x3c0/0x510 [ 526.376076][T15996] ? kvmalloc_node+0x82/0x130 [ 526.380579][T15996] __should_failslab+0x9f/0xe0 [ 526.385184][T15996] should_failslab+0x9/0x20 [ 526.389613][T15996] __kmalloc+0x6d/0x350 [ 526.393601][T15996] ? __kasan_kmalloc+0x9/0x10 [ 526.398111][T15996] kvmalloc_node+0x82/0x130 [ 526.402455][T15996] alloc_fdtable+0xea/0x2b0 [ 526.406791][T15996] dup_fd+0x781/0xa40 [ 526.410622][T15996] ? avc_has_perm+0x16d/0x260 [ 526.415124][T15996] copy_files+0xe6/0x200 [ 526.419204][T15996] ? perf_event_attrs+0x30/0x30 [ 526.423887][T15996] ? dup_task_struct+0xa60/0xa60 [ 526.428662][T15996] ? security_task_alloc+0x132/0x150 [ 526.433781][T15996] copy_process+0x11e9/0x3250 [ 526.438384][T15996] ? check_stack_object+0x117/0x130 [ 526.443420][T15996] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 526.448363][T15996] ? copy_clone_args_from_user+0x6f0/0x790 [ 526.454007][T15996] kernel_clone+0x22d/0x990 [ 526.458347][T15996] ? dup_mmap+0xea0/0xea0 [ 526.462510][T15996] ? create_io_thread+0x1e0/0x1e0 [ 526.467379][T15996] ? file_end_write+0x1b0/0x1b0 [ 526.472154][T15996] __x64_sys_clone3+0x375/0x3a0 [ 526.476834][T15996] ? __ia32_sys_clone+0x300/0x300 [ 526.481694][T15996] ? ksys_write+0x25f/0x2c0 [ 526.486033][T15996] ? debug_smp_processor_id+0x17/0x20 [ 526.491263][T15996] do_syscall_64+0x44/0xd0 [ 526.495492][T15996] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 526.501224][T15996] RIP: 0033:0x7fb8471070d9 [ 526.505474][T15996] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 526.524915][T15996] RSP: 002b:00007fb845e7a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 526.533249][T15996] RAX: ffffffffffffffda RBX: 00007fb847226f80 RCX: 00007fb8471070d9 [ 526.541058][T15996] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fb845e7a050 [ 526.548867][T15996] RBP: 00007fb845e7a1d0 R08: 0000000000000000 R09: 0000000000000058 [ 526.556767][T15996] R10: 00007fb845e7a050 R11: 0000000000000246 R12: 0000000000000058 [ 526.564582][T15996] R13: 00007ffcf73cf18f R14: 00007fb845e7a300 R15: 0000000000022000 [ 526.572395][T15996] 17:18:36 executing program 2: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 9) 17:18:36 executing program 5: syz_clone3(&(0x7f0000000800)={0x20010, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 526.589517][T16009] FAULT_INJECTION: forcing a failure. [ 526.589517][T16009] name failslab, interval 1, probability 0, space 0, times 0 [ 526.603585][T16009] CPU: 1 PID: 16009 Comm: syz-executor.0 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 526.612638][T16011] FAULT_INJECTION: forcing a failure. [ 526.612638][T16011] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 526.613648][T16009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 526.613662][T16009] Call Trace: [ 526.613668][T16009] [ 526.613675][T16009] dump_stack_lvl+0x151/0x1b7 [ 526.647327][T16009] ? bfq_pos_tree_add_move+0x43e/0x43e [ 526.652619][T16009] dump_stack+0x15/0x17 [ 526.656607][T16009] should_fail+0x3c0/0x510 [ 526.660857][T16009] ? __vmalloc_node_range+0x2e3/0x800 [ 526.666067][T16009] __should_failslab+0x9f/0xe0 [ 526.670667][T16009] should_failslab+0x9/0x20 [ 526.675004][T16009] __kmalloc+0x6d/0x350 [ 526.681517][T16009] __vmalloc_node_range+0x2e3/0x800 [ 526.686559][T16009] dup_task_struct+0x61f/0xa60 [ 526.691234][T16009] ? copy_process+0x579/0x3250 [ 526.695837][T16009] ? __kasan_check_write+0x14/0x20 [ 526.700783][T16009] copy_process+0x579/0x3250 [ 526.705214][T16009] ? check_stack_object+0x117/0x130 [ 526.710250][T16009] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 526.715193][T16009] ? copy_clone_args_from_user+0x6f0/0x790 [ 526.720834][T16009] kernel_clone+0x22d/0x990 [ 526.725172][T16009] ? dup_mmap+0xea0/0xea0 [ 526.729336][T16009] ? create_io_thread+0x1e0/0x1e0 [ 526.734198][T16009] ? file_end_write+0x1b0/0x1b0 [ 526.738890][T16009] __x64_sys_clone3+0x375/0x3a0 [ 526.743571][T16009] ? __ia32_sys_clone+0x300/0x300 [ 526.748433][T16009] ? ksys_write+0x25f/0x2c0 [ 526.752772][T16009] ? debug_smp_processor_id+0x17/0x20 [ 526.757981][T16009] do_syscall_64+0x44/0xd0 [ 526.762234][T16009] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 526.767957][T16009] RIP: 0033:0x7f8b07fbd0d9 [ 526.772219][T16009] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 526.791658][T16009] RSP: 002b:00007f8b06d30038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 526.799911][T16009] RAX: ffffffffffffffda RBX: 00007f8b080dcf80 RCX: 00007f8b07fbd0d9 [ 526.807715][T16009] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007f8b06d30050 [ 526.815526][T16009] RBP: 00007f8b06d301d0 R08: 0000000000000000 R09: 0000000000000058 [ 526.823332][T16009] R10: 00007f8b06d30050 R11: 0000000000000246 R12: 0000000000000058 [ 526.831144][T16009] R13: 00007ffdf6d84d0f R14: 00007f8b06d30300 R15: 0000000000022000 17:18:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xb4}, {0x0}, {&(0x7f0000002a80)=""/4096, 0xe14}], 0x3, 0x0, 0x2000000}}], 0x300, 0x0, 0x0) 17:18:36 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 10) [ 526.839138][T16009] [ 526.841933][T16011] CPU: 0 PID: 16011 Comm: syz-executor.2 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 526.852004][T16011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 526.861901][T16011] Call Trace: [ 526.865033][T16011] [ 526.867800][T16011] dump_stack_lvl+0x151/0x1b7 [ 526.870481][T16015] FAULT_INJECTION: forcing a failure. [ 526.870481][T16015] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 526.872318][T16011] ? bfq_pos_tree_add_move+0x43e/0x43e [ 526.872348][T16011] dump_stack+0x15/0x17 [ 526.894619][T16011] should_fail+0x3c0/0x510 [ 526.898882][T16011] should_fail_alloc_page+0x58/0x70 [ 526.903899][T16011] __alloc_pages+0x1de/0x7c0 [ 526.908328][T16011] ? __count_vm_events+0x30/0x30 [ 526.913101][T16011] ? __kasan_kmalloc+0x9/0x10 [ 526.917614][T16011] ? __kmalloc+0x203/0x350 [ 526.921870][T16011] ? __vmalloc_node_range+0x2e3/0x800 [ 526.927074][T16011] __vmalloc_node_range+0x48f/0x800 [ 526.932123][T16011] dup_task_struct+0x61f/0xa60 [ 526.936707][T16011] ? copy_process+0x579/0x3250 [ 526.941309][T16011] ? __kasan_check_write+0x14/0x20 [ 526.946258][T16011] copy_process+0x579/0x3250 [ 526.950686][T16011] ? check_stack_object+0x117/0x130 [ 526.955715][T16011] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 526.960664][T16011] ? copy_clone_args_from_user+0x6f0/0x790 [ 526.966305][T16011] kernel_clone+0x22d/0x990 [ 526.970645][T16011] ? dup_mmap+0xea0/0xea0 [ 526.974810][T16011] ? create_io_thread+0x1e0/0x1e0 [ 526.979672][T16011] ? file_end_write+0x1b0/0x1b0 [ 526.984357][T16011] __x64_sys_clone3+0x375/0x3a0 [ 526.989043][T16011] ? __ia32_sys_clone+0x300/0x300 [ 526.993904][T16011] ? ksys_write+0x25f/0x2c0 [ 526.998245][T16011] ? debug_smp_processor_id+0x17/0x20 [ 527.003454][T16011] do_syscall_64+0x44/0xd0 [ 527.007704][T16011] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 527.013431][T16011] RIP: 0033:0x7fb8471070d9 [ 527.017684][T16011] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 527.037127][T16011] RSP: 002b:00007fb845e7a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 527.045400][T16011] RAX: ffffffffffffffda RBX: 00007fb847226f80 RCX: 00007fb8471070d9 [ 527.053182][T16011] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fb845e7a050 [ 527.060992][T16011] RBP: 00007fb845e7a1d0 R08: 0000000000000000 R09: 0000000000000058 [ 527.069064][T16011] R10: 00007fb845e7a050 R11: 0000000000000246 R12: 0000000000000058 [ 527.076877][T16011] R13: 00007ffcf73cf18f R14: 00007fb845e7a300 R15: 0000000000022000 [ 527.084690][T16011] [ 527.087553][T16015] CPU: 1 PID: 16015 Comm: syz-executor.0 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 527.097622][T16015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 527.107518][T16015] Call Trace: [ 527.110634][T16015] [ 527.113416][T16015] dump_stack_lvl+0x151/0x1b7 [ 527.118015][T16015] ? bfq_pos_tree_add_move+0x43e/0x43e [ 527.123309][T16015] dump_stack+0x15/0x17 [ 527.127299][T16015] should_fail+0x3c0/0x510 [ 527.131555][T16015] should_fail_alloc_page+0x58/0x70 [ 527.136589][T16015] __alloc_pages+0x1de/0x7c0 [ 527.141016][T16015] ? __count_vm_events+0x30/0x30 [ 527.145785][T16015] ? __kasan_kmalloc+0x9/0x10 [ 527.150298][T16015] ? __kmalloc+0x203/0x350 [ 527.154551][T16015] ? __vmalloc_node_range+0x2e3/0x800 [ 527.159760][T16015] __vmalloc_node_range+0x48f/0x800 [ 527.164797][T16015] dup_task_struct+0x61f/0xa60 [ 527.169393][T16015] ? copy_process+0x579/0x3250 [ 527.173995][T16015] ? __kasan_check_write+0x14/0x20 [ 527.178943][T16015] copy_process+0x579/0x3250 [ 527.183369][T16015] ? check_stack_object+0x117/0x130 [ 527.188408][T16015] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 527.193347][T16015] ? copy_clone_args_from_user+0x6f0/0x790 [ 527.199361][T16015] kernel_clone+0x22d/0x990 [ 527.203693][T16015] ? dup_mmap+0xea0/0xea0 [ 527.207852][T16015] ? create_io_thread+0x1e0/0x1e0 [ 527.212703][T16015] ? file_end_write+0x1b0/0x1b0 [ 527.217392][T16015] __x64_sys_clone3+0x375/0x3a0 [ 527.222078][T16015] ? __ia32_sys_clone+0x300/0x300 [ 527.226940][T16015] ? ksys_write+0x25f/0x2c0 [ 527.231291][T16015] ? debug_smp_processor_id+0x17/0x20 [ 527.236489][T16015] do_syscall_64+0x44/0xd0 [ 527.240742][T16015] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 527.246465][T16015] RIP: 0033:0x7f8b07fbd0d9 [ 527.250725][T16015] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 527.270166][T16015] RSP: 002b:00007f8b06d30038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 527.278412][T16015] RAX: ffffffffffffffda RBX: 00007f8b080dcf80 RCX: 00007f8b07fbd0d9 17:18:36 executing program 2: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 10) 17:18:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xb4}, {0x0}, {&(0x7f0000002a80)=""/4096, 0xe14}], 0x3, 0x0, 0x3000000}}], 0x300, 0x0, 0x0) 17:18:36 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) [ 527.286221][T16015] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007f8b06d30050 [ 527.294025][T16015] RBP: 00007f8b06d301d0 R08: 0000000000000000 R09: 0000000000000058 [ 527.301838][T16015] R10: 00007f8b06d30050 R11: 0000000000000246 R12: 0000000000000058 [ 527.309665][T16015] R13: 00007ffdf6d84d0f R14: 00007f8b06d30300 R15: 0000000000022000 [ 527.317468][T16015] 17:18:36 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x38) [ 527.338686][T16019] FAULT_INJECTION: forcing a failure. [ 527.338686][T16019] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 527.352323][T16019] CPU: 1 PID: 16019 Comm: syz-executor.2 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 527.362481][T16019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 527.372368][T16019] Call Trace: [ 527.375490][T16019] [ 527.378267][T16019] dump_stack_lvl+0x151/0x1b7 [ 527.382782][T16019] ? bfq_pos_tree_add_move+0x43e/0x43e [ 527.388078][T16019] dump_stack+0x15/0x17 [ 527.392071][T16019] should_fail+0x3c0/0x510 [ 527.396320][T16019] should_fail_alloc_page+0x58/0x70 [ 527.401359][T16019] __alloc_pages+0x1de/0x7c0 [ 527.405791][T16019] ? __count_vm_events+0x30/0x30 [ 527.410561][T16019] ? __kasan_kmalloc+0x9/0x10 [ 527.415072][T16019] ? __kmalloc+0x203/0x350 [ 527.419321][T16019] ? __vmalloc_node_range+0x2e3/0x800 [ 527.424529][T16019] __vmalloc_node_range+0x48f/0x800 [ 527.429567][T16019] dup_task_struct+0x61f/0xa60 [ 527.434163][T16019] ? copy_process+0x579/0x3250 [ 527.438762][T16019] ? __kasan_check_write+0x14/0x20 [ 527.443709][T16019] copy_process+0x579/0x3250 [ 527.448136][T16019] ? check_stack_object+0x117/0x130 [ 527.453291][T16019] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 527.458243][T16019] ? copy_clone_args_from_user+0x6f0/0x790 [ 527.463879][T16019] kernel_clone+0x22d/0x990 [ 527.468221][T16019] ? dup_mmap+0xea0/0xea0 [ 527.472410][T16019] ? create_io_thread+0x1e0/0x1e0 [ 527.477348][T16019] ? file_end_write+0x1b0/0x1b0 [ 527.482031][T16019] __x64_sys_clone3+0x375/0x3a0 [ 527.486718][T16019] ? __ia32_sys_clone+0x300/0x300 [ 527.491588][T16019] ? ksys_write+0x25f/0x2c0 [ 527.495920][T16019] ? debug_smp_processor_id+0x17/0x20 [ 527.501126][T16019] do_syscall_64+0x44/0xd0 [ 527.505379][T16019] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 527.511107][T16019] RIP: 0033:0x7fb8471070d9 [ 527.515362][T16019] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 527.534908][T16019] RSP: 002b:00007fb845e7a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 17:18:37 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x82) 17:18:37 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 11) [ 527.543151][T16019] RAX: ffffffffffffffda RBX: 00007fb847226f80 RCX: 00007fb8471070d9 [ 527.550962][T16019] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fb845e7a050 [ 527.558780][T16019] RBP: 00007fb845e7a1d0 R08: 0000000000000000 R09: 0000000000000058 [ 527.566592][T16019] R10: 00007fb845e7a050 R11: 0000000000000246 R12: 0000000000000058 [ 527.574393][T16019] R13: 00007ffcf73cf18f R14: 00007fb845e7a300 R15: 0000000000022000 [ 527.582211][T16019] 17:18:37 executing program 2: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 11) 17:18:37 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x83) 17:18:37 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) [ 527.618984][T16033] FAULT_INJECTION: forcing a failure. [ 527.618984][T16033] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 527.644759][T16035] FAULT_INJECTION: forcing a failure. [ 527.644759][T16035] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 527.675930][T16033] CPU: 0 PID: 16033 Comm: syz-executor.0 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 527.686143][T16033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 527.696033][T16033] Call Trace: [ 527.699155][T16033] [ 527.701932][T16033] dump_stack_lvl+0x151/0x1b7 [ 527.706452][T16033] ? bfq_pos_tree_add_move+0x43e/0x43e [ 527.711742][T16033] dump_stack+0x15/0x17 [ 527.715738][T16033] should_fail+0x3c0/0x510 [ 527.719987][T16033] should_fail_alloc_page+0x58/0x70 [ 527.725020][T16033] __alloc_pages+0x1de/0x7c0 [ 527.729452][T16033] ? __count_vm_events+0x30/0x30 [ 527.736478][T16033] ? __kasan_kmalloc+0x9/0x10 [ 527.740991][T16033] ? __kmalloc+0x203/0x350 [ 527.745240][T16033] ? __vmalloc_node_range+0x2e3/0x800 [ 527.750450][T16033] __vmalloc_node_range+0x48f/0x800 [ 527.755486][T16033] dup_task_struct+0x61f/0xa60 [ 527.760082][T16033] ? copy_process+0x579/0x3250 [ 527.764683][T16033] ? __kasan_check_write+0x14/0x20 [ 527.769630][T16033] copy_process+0x579/0x3250 [ 527.774057][T16033] ? check_stack_object+0x117/0x130 [ 527.779091][T16033] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 527.784040][T16033] ? copy_clone_args_from_user+0x6f0/0x790 [ 527.789680][T16033] kernel_clone+0x22d/0x990 [ 527.794029][T16033] ? dup_mmap+0xea0/0xea0 [ 527.798184][T16033] ? create_io_thread+0x1e0/0x1e0 [ 527.803047][T16033] ? file_end_write+0x1b0/0x1b0 [ 527.807734][T16033] __x64_sys_clone3+0x375/0x3a0 [ 527.812423][T16033] ? __ia32_sys_clone+0x300/0x300 [ 527.817279][T16033] ? ksys_write+0x25f/0x2c0 [ 527.821705][T16033] ? debug_smp_processor_id+0x17/0x20 [ 527.827002][T16033] do_syscall_64+0x44/0xd0 [ 527.831252][T16033] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 527.836978][T16033] RIP: 0033:0x7f8b07fbd0d9 [ 527.841234][T16033] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 527.860674][T16033] RSP: 002b:00007f8b06d30038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 527.868932][T16033] RAX: ffffffffffffffda RBX: 00007f8b080dcf80 RCX: 00007f8b07fbd0d9 [ 527.876818][T16033] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007f8b06d30050 [ 527.884626][T16033] RBP: 00007f8b06d301d0 R08: 0000000000000000 R09: 0000000000000058 [ 527.892441][T16033] R10: 00007f8b06d30050 R11: 0000000000000246 R12: 0000000000000058 [ 527.900349][T16033] R13: 00007ffdf6d84d0f R14: 00007f8b06d30300 R15: 0000000000022000 [ 527.908165][T16033] [ 527.911028][T16035] CPU: 1 PID: 16035 Comm: syz-executor.2 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 527.921096][T16035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 527.930990][T16035] Call Trace: [ 527.934115][T16035] [ 527.936889][T16035] dump_stack_lvl+0x151/0x1b7 [ 527.941405][T16035] ? bfq_pos_tree_add_move+0x43e/0x43e [ 527.946811][T16035] dump_stack+0x15/0x17 [ 527.950808][T16035] should_fail+0x3c0/0x510 [ 527.955057][T16035] should_fail_alloc_page+0x58/0x70 [ 527.960089][T16035] __alloc_pages+0x1de/0x7c0 [ 527.964515][T16035] ? __count_vm_events+0x30/0x30 [ 527.969386][T16035] ? __kasan_kmalloc+0x9/0x10 [ 527.973888][T16035] ? __kmalloc+0x203/0x350 [ 527.978151][T16035] ? __vmalloc_node_range+0x2e3/0x800 [ 527.983350][T16035] __vmalloc_node_range+0x48f/0x800 [ 527.988388][T16035] dup_task_struct+0x61f/0xa60 [ 527.992984][T16035] ? copy_process+0x579/0x3250 [ 527.997585][T16035] ? __kasan_check_write+0x14/0x20 [ 528.002706][T16035] copy_process+0x579/0x3250 [ 528.007136][T16035] ? check_stack_object+0x117/0x130 [ 528.012167][T16035] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 528.017110][T16035] ? copy_clone_args_from_user+0x6f0/0x790 [ 528.022764][T16035] kernel_clone+0x22d/0x990 [ 528.027091][T16035] ? dup_mmap+0xea0/0xea0 [ 528.031256][T16035] ? create_io_thread+0x1e0/0x1e0 [ 528.036116][T16035] ? file_end_write+0x1b0/0x1b0 [ 528.040806][T16035] __x64_sys_clone3+0x375/0x3a0 [ 528.045491][T16035] ? __ia32_sys_clone+0x300/0x300 [ 528.050351][T16035] ? ksys_write+0x25f/0x2c0 [ 528.054692][T16035] ? debug_smp_processor_id+0x17/0x20 [ 528.059897][T16035] do_syscall_64+0x44/0xd0 [ 528.064153][T16035] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 528.069886][T16035] RIP: 0033:0x7fb8471070d9 [ 528.074134][T16035] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 528.093575][T16035] RSP: 002b:00007fb845e7a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 528.102167][T16035] RAX: ffffffffffffffda RBX: 00007fb847226f80 RCX: 00007fb8471070d9 [ 528.109976][T16035] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fb845e7a050 [ 528.117786][T16035] RBP: 00007fb845e7a1d0 R08: 0000000000000000 R09: 0000000000000058 [ 528.125598][T16035] R10: 00007fb845e7a050 R11: 0000000000000246 R12: 0000000000000058 [ 528.133413][T16035] R13: 00007ffcf73cf18f R14: 00007fb845e7a300 R15: 0000000000022000 [ 528.141226][T16035] [ 528.748152][ T8] device bridge_slave_1 left promiscuous mode [ 528.754078][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.761378][ T8] device bridge_slave_0 left promiscuous mode [ 528.767363][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.774830][ T8] device veth1_macvtap left promiscuous mode [ 528.780832][ T8] device veth0_vlan left promiscuous mode [ 529.462173][T16044] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.469060][T16044] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.476321][T16044] device bridge_slave_0 entered promiscuous mode [ 529.483367][T16044] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.490226][T16044] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.497833][T16044] device bridge_slave_1 entered promiscuous mode [ 529.542330][T16044] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.549186][T16044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 529.556252][T16044] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.563084][T16044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 529.581114][ T5995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 529.589151][ T5995] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.596231][ T5995] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.605260][ T5979] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 529.613926][ T5979] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.620770][ T5979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 529.639235][T16044] device veth0_vlan entered promiscuous mode [ 529.647369][ T5979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 529.655456][ T5979] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 529.664073][ T5979] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.670923][ T5979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 529.678097][ T5979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 529.685920][ T5979] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 529.693733][ T5979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 529.702167][ T5979] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 529.709946][ T5979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 529.718319][ T5979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 529.726343][ T5979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 529.734184][ T5979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 529.743532][ T5979] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 529.750760][ T5979] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 529.759171][ T5995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 529.767103][ T5995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 529.776028][T16044] device veth1_macvtap entered promiscuous mode [ 529.784937][ T5979] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready 17:18:39 executing program 5: syz_clone3(&(0x7f0000000800)={0x20200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 17:18:39 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 12) 17:18:39 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x84) 17:18:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xb4}, {0x0}, {&(0x7f0000002a80)=""/4096, 0xe14}], 0x3, 0x0, 0x4000000}}], 0x300, 0x0, 0x0) 17:18:39 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) 17:18:39 executing program 2: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 12) [ 529.792890][ T5979] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 529.801124][ T5979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 529.812468][ T5995] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 529.820625][ T5995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 529.848784][T16056] FAULT_INJECTION: forcing a failure. [ 529.848784][T16056] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 529.860188][T16060] __nla_validate_parse: 71 callbacks suppressed [ 529.860209][T16060] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 529.866945][T16056] CPU: 1 PID: 16056 Comm: syz-executor.0 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 529.869450][T16060] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 529.876994][T16056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 529.877012][T16056] Call Trace: [ 529.877018][T16056] [ 529.877026][T16056] dump_stack_lvl+0x151/0x1b7 [ 529.890042][T16060] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 529.896269][T16056] ? bfq_pos_tree_add_move+0x43e/0x43e [ 529.896304][T16056] dump_stack+0x15/0x17 [ 529.906877][T16060] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 529.909280][T16056] should_fail+0x3c0/0x510 [ 529.909306][T16056] should_fail_alloc_page+0x58/0x70 [ 529.909325][T16056] __alloc_pages+0x1de/0x7c0 [ 529.912590][T16060] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 529.916575][T16056] ? __count_vm_events+0x30/0x30 [ 529.916600][T16056] ? __kasan_kmalloc+0x9/0x10 [ 529.925876][T16060] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 529.930976][T16056] ? __kmalloc+0x203/0x350 [ 529.930997][T16056] ? __vmalloc_node_range+0x2e3/0x800 [ 529.931013][T16056] __vmalloc_node_range+0x48f/0x800 [ 529.935114][T16060] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 529.944083][T16056] dup_task_struct+0x61f/0xa60 [ 529.944105][T16056] ? copy_process+0x579/0x3250 [ 529.944121][T16056] ? __kasan_check_write+0x14/0x20 [ 529.948530][T16060] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 529.953377][T16056] copy_process+0x579/0x3250 [ 529.953401][T16056] ? check_stack_object+0x117/0x130 [ 529.958002][T16060] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 529.966910][T16056] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 529.966933][T16056] ? copy_clone_args_from_user+0x6f0/0x790 [ 529.966952][T16056] kernel_clone+0x22d/0x990 [ 529.971908][T16060] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 529.976195][T16056] ? dup_mmap+0xea0/0xea0 [ 529.976216][T16056] ? create_io_thread+0x1e0/0x1e0 [ 529.976234][T16056] ? file_end_write+0x1b0/0x1b0 [ 530.088594][T16056] __x64_sys_clone3+0x375/0x3a0 [ 530.093277][T16056] ? __ia32_sys_clone+0x300/0x300 [ 530.098138][T16056] ? ksys_write+0x25f/0x2c0 [ 530.102480][T16056] ? debug_smp_processor_id+0x17/0x20 [ 530.107685][T16056] do_syscall_64+0x44/0xd0 [ 530.111939][T16056] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 530.117667][T16056] RIP: 0033:0x7f8b07fbd0d9 [ 530.121920][T16056] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 530.141360][T16056] RSP: 002b:00007f8b06d30038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 530.149608][T16056] RAX: ffffffffffffffda RBX: 00007f8b080dcf80 RCX: 00007f8b07fbd0d9 [ 530.157502][T16056] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007f8b06d30050 [ 530.165315][T16056] RBP: 00007f8b06d301d0 R08: 0000000000000000 R09: 0000000000000058 [ 530.173125][T16056] R10: 00007f8b06d30050 R11: 0000000000000246 R12: 0000000000000058 [ 530.180938][T16056] R13: 00007ffdf6d84d0f R14: 00007f8b06d30300 R15: 0000000000022000 [ 530.188759][T16056] [ 530.193731][T16063] FAULT_INJECTION: forcing a failure. 17:18:39 executing program 5: syz_clone3(&(0x7f0000000800)={0x80000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 17:18:39 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 13) [ 530.193731][T16063] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 530.217370][T16063] CPU: 0 PID: 16063 Comm: syz-executor.2 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 530.227446][T16063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 530.237339][T16063] Call Trace: [ 530.240470][T16063] [ 530.243331][T16063] dump_stack_lvl+0x151/0x1b7 [ 530.247927][T16063] ? bfq_pos_tree_add_move+0x43e/0x43e [ 530.253231][T16063] dump_stack+0x15/0x17 [ 530.257230][T16063] should_fail+0x3c0/0x510 [ 530.261468][T16063] should_fail_alloc_page+0x58/0x70 [ 530.266502][T16063] __alloc_pages+0x1de/0x7c0 [ 530.270928][T16063] ? __count_vm_events+0x30/0x30 [ 530.275696][T16063] ? __kasan_kmalloc+0x9/0x10 [ 530.280215][T16063] ? __kmalloc+0x203/0x350 [ 530.284468][T16063] ? __vmalloc_node_range+0x2e3/0x800 [ 530.289677][T16063] __vmalloc_node_range+0x48f/0x800 [ 530.294712][T16063] dup_task_struct+0x61f/0xa60 17:18:39 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x85) 17:18:39 executing program 5: syz_clone3(&(0x7f0000000800)={0x101000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 17:18:39 executing program 1: getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) 17:18:39 executing program 5: syz_clone3(&(0x7f0000000800)={0x1a2000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 530.299307][T16063] ? copy_process+0x579/0x3250 [ 530.303909][T16063] ? __kasan_check_write+0x14/0x20 [ 530.308855][T16063] copy_process+0x579/0x3250 [ 530.313285][T16063] ? check_stack_object+0x117/0x130 [ 530.318315][T16063] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 530.323263][T16063] ? copy_clone_args_from_user+0x6f0/0x790 [ 530.328905][T16063] kernel_clone+0x22d/0x990 [ 530.333238][T16063] ? dup_mmap+0xea0/0xea0 [ 530.337405][T16063] ? create_io_thread+0x1e0/0x1e0 [ 530.342268][T16063] ? file_end_write+0x1b0/0x1b0 17:18:39 executing program 1: getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) [ 530.346955][T16063] __x64_sys_clone3+0x375/0x3a0 [ 530.351644][T16063] ? __ia32_sys_clone+0x300/0x300 [ 530.356502][T16063] ? ksys_write+0x25f/0x2c0 [ 530.360846][T16063] ? debug_smp_processor_id+0x17/0x20 [ 530.366051][T16063] do_syscall_64+0x44/0xd0 [ 530.370306][T16063] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 530.376034][T16063] RIP: 0033:0x7fb8471070d9 [ 530.380285][T16063] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 17:18:39 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x86) 17:18:39 executing program 5: syz_clone3(&(0x7f0000000800)={0x201a00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 530.399729][T16063] RSP: 002b:00007fb845e7a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 530.407972][T16063] RAX: ffffffffffffffda RBX: 00007fb847226f80 RCX: 00007fb8471070d9 [ 530.415784][T16063] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fb845e7a050 [ 530.423596][T16063] RBP: 00007fb845e7a1d0 R08: 0000000000000000 R09: 0000000000000058 [ 530.431407][T16063] R10: 00007fb845e7a050 R11: 0000000000000246 R12: 0000000000000058 [ 530.439219][T16063] R13: 00007ffcf73cf18f R14: 00007fb845e7a300 R15: 0000000000022000 [ 530.447034][T16063] 17:18:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xb4}, {0x0}, {&(0x7f0000002a80)=""/4096, 0xe14}], 0x3, 0x0, 0x5000000}}], 0x300, 0x0, 0x0) 17:18:40 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x87) 17:18:40 executing program 2: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 13) 17:18:40 executing program 1: getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) [ 530.694719][T16085] FAULT_INJECTION: forcing a failure. [ 530.694719][T16085] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 530.723111][T16085] CPU: 0 PID: 16085 Comm: syz-executor.2 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 530.733190][T16085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 530.743092][T16085] Call Trace: [ 530.746207][T16085] [ 530.748983][T16085] dump_stack_lvl+0x151/0x1b7 [ 530.753498][T16085] ? bfq_pos_tree_add_move+0x43e/0x43e [ 530.758809][T16085] dump_stack+0x15/0x17 [ 530.762875][T16085] should_fail+0x3c0/0x510 [ 530.767131][T16085] should_fail_alloc_page+0x58/0x70 [ 530.772161][T16085] __alloc_pages+0x1de/0x7c0 [ 530.776588][T16085] ? __count_vm_events+0x30/0x30 [ 530.781360][T16085] ? __kasan_kmalloc+0x9/0x10 [ 530.785872][T16085] ? __kmalloc+0x203/0x350 [ 530.790127][T16085] ? __vmalloc_node_range+0x2e3/0x800 [ 530.795331][T16085] __vmalloc_node_range+0x48f/0x800 [ 530.800366][T16085] dup_task_struct+0x61f/0xa60 [ 530.805087][T16085] ? copy_process+0x579/0x3250 [ 530.809684][T16085] ? __kasan_check_write+0x14/0x20 [ 530.814632][T16085] copy_process+0x579/0x3250 [ 530.819073][T16085] ? check_stack_object+0x117/0x130 [ 530.824113][T16085] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 530.829041][T16085] ? copy_clone_args_from_user+0x6f0/0x790 [ 530.834683][T16085] kernel_clone+0x22d/0x990 [ 530.839021][T16085] ? dup_mmap+0xea0/0xea0 [ 530.843195][T16085] ? create_io_thread+0x1e0/0x1e0 [ 530.848044][T16085] ? file_end_write+0x1b0/0x1b0 [ 530.852743][T16085] __x64_sys_clone3+0x375/0x3a0 [ 530.857422][T16085] ? __ia32_sys_clone+0x300/0x300 [ 530.862278][T16085] ? ksys_write+0x25f/0x2c0 [ 530.866635][T16085] ? debug_smp_processor_id+0x17/0x20 [ 530.871829][T16085] do_syscall_64+0x44/0xd0 [ 530.876084][T16085] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 530.881820][T16085] RIP: 0033:0x7fb8471070d9 [ 530.886064][T16085] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 530.905550][T16085] RSP: 002b:00007fb845e7a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 530.913747][T16085] RAX: ffffffffffffffda RBX: 00007fb847226f80 RCX: 00007fb8471070d9 [ 530.921560][T16085] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fb845e7a050 [ 530.929379][T16085] RBP: 00007fb845e7a1d0 R08: 0000000000000000 R09: 0000000000000058 [ 530.937181][T16085] R10: 00007fb845e7a050 R11: 0000000000000246 R12: 0000000000000058 [ 530.944991][T16085] R13: 00007ffcf73cf18f R14: 00007fb845e7a300 R15: 0000000000022000 [ 530.952827][T16085] [ 531.157828][ T1289] device bridge_slave_1 left promiscuous mode [ 531.163789][ T1289] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.171092][ T1289] device bridge_slave_0 left promiscuous mode [ 531.177063][ T1289] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.185089][ T1289] device veth1_macvtap left promiscuous mode [ 531.191306][ T1289] device veth0_vlan left promiscuous mode [ 532.156050][T16093] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.163077][T16093] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.170449][T16093] device bridge_slave_0 entered promiscuous mode [ 532.177246][T16093] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.184081][T16093] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.191282][T16093] device bridge_slave_1 entered promiscuous mode [ 532.227816][T16093] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.234751][T16093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 532.241938][T16093] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.248795][T16093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 532.266611][ T5965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 532.274080][ T5965] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.281304][ T5965] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.290107][ T5994] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 532.298153][ T5994] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.304968][ T5994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 532.323277][T16093] device veth0_vlan entered promiscuous mode [ 532.330318][ T5965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 532.338617][ T5965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 532.346271][ T5965] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 532.354262][ T5965] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 532.361593][ T5965] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 532.369632][ T5965] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.376446][ T5965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 532.383771][ T5965] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 532.391563][ T5965] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 532.403880][T16093] device veth1_macvtap entered promiscuous mode [ 532.410804][ T5987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 532.421233][ T5994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 532.432161][ T5987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 532.450602][T16098] FAULT_INJECTION: forcing a failure. [ 532.450602][T16098] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 532.463738][T16098] CPU: 0 PID: 16098 Comm: syz-executor.0 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 532.473797][T16098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 532.483690][T16098] Call Trace: [ 532.486813][T16098] [ 532.489590][T16098] dump_stack_lvl+0x151/0x1b7 [ 532.494102][T16098] ? bfq_pos_tree_add_move+0x43e/0x43e [ 532.499398][T16098] dump_stack+0x15/0x17 [ 532.503400][T16098] should_fail+0x3c0/0x510 [ 532.507642][T16098] should_fail_alloc_page+0x58/0x70 [ 532.512676][T16098] __alloc_pages+0x1de/0x7c0 [ 532.517106][T16098] ? __count_vm_events+0x30/0x30 [ 532.521879][T16098] ? __kasan_kmalloc+0x9/0x10 [ 532.526388][T16098] ? __kmalloc+0x203/0x350 [ 532.530646][T16098] ? __vmalloc_node_range+0x2e3/0x800 [ 532.535857][T16098] __vmalloc_node_range+0x48f/0x800 [ 532.540886][T16098] dup_task_struct+0x61f/0xa60 [ 532.545481][T16098] ? copy_process+0x579/0x3250 [ 532.550085][T16098] ? __kasan_check_write+0x14/0x20 [ 532.555031][T16098] copy_process+0x579/0x3250 [ 532.559464][T16098] ? check_stack_object+0x117/0x130 [ 532.564491][T16098] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 532.569621][T16098] ? copy_clone_args_from_user+0x6f0/0x790 [ 532.575253][T16098] kernel_clone+0x22d/0x990 [ 532.579594][T16098] ? dup_mmap+0xea0/0xea0 [ 532.583757][T16098] ? create_io_thread+0x1e0/0x1e0 [ 532.588620][T16098] ? file_end_write+0x1b0/0x1b0 [ 532.593305][T16098] __x64_sys_clone3+0x375/0x3a0 [ 532.597994][T16098] ? __ia32_sys_clone+0x300/0x300 [ 532.602853][T16098] ? ksys_write+0x25f/0x2c0 [ 532.607194][T16098] ? debug_smp_processor_id+0x17/0x20 [ 532.612417][T16098] do_syscall_64+0x44/0xd0 [ 532.616650][T16098] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 532.622383][T16098] RIP: 0033:0x7f12bb6a50d9 [ 532.626633][T16098] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 532.646073][T16098] RSP: 002b:00007f12ba418038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 532.654319][T16098] RAX: ffffffffffffffda RBX: 00007f12bb7c4f80 RCX: 00007f12bb6a50d9 [ 532.662128][T16098] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007f12ba418050 [ 532.669944][T16098] RBP: 00007f12ba4181d0 R08: 0000000000000000 R09: 0000000000000058 17:18:42 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 14) 17:18:42 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x88) 17:18:42 executing program 2: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 14) 17:18:42 executing program 1: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) 17:18:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xb4}, {0x0}, {&(0x7f0000002a80)=""/4096, 0xe14}], 0x3, 0x0, 0x6000000}}], 0x300, 0x0, 0x0) 17:18:42 executing program 5: syz_clone3(&(0x7f0000000800)={0xf0ff1f, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 532.677753][T16098] R10: 00007f12ba418050 R11: 0000000000000246 R12: 0000000000000058 [ 532.685566][T16098] R13: 00007ffe4d7fb38f R14: 00007f12ba418300 R15: 0000000000022000 [ 532.693381][T16098] [ 532.711307][T16107] FAULT_INJECTION: forcing a failure. [ 532.711307][T16107] name fail_page_alloc, interval 1, probability 0, space 0, times 0 17:18:42 executing program 5: syz_clone3(&(0x7f0000000800)={0x1000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 532.724443][T16107] CPU: 0 PID: 16107 Comm: syz-executor.2 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 532.734654][T16107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 532.744506][T16107] Call Trace: [ 532.747630][T16107] [ 532.750408][T16107] dump_stack_lvl+0x151/0x1b7 [ 532.754924][T16107] ? bfq_pos_tree_add_move+0x43e/0x43e [ 532.760217][T16107] dump_stack+0x15/0x17 [ 532.764228][T16107] should_fail+0x3c0/0x510 [ 532.768459][T16107] should_fail_alloc_page+0x58/0x70 [ 532.773488][T16107] __alloc_pages+0x1de/0x7c0 [ 532.777917][T16107] ? __count_vm_events+0x30/0x30 [ 532.782687][T16107] ? __kasan_kmalloc+0x9/0x10 [ 532.787203][T16107] ? __kmalloc+0x203/0x350 [ 532.791454][T16107] ? __vmalloc_node_range+0x2e3/0x800 [ 532.796686][T16107] __vmalloc_node_range+0x48f/0x800 [ 532.801697][T16107] dup_task_struct+0x61f/0xa60 [ 532.806295][T16107] ? copy_process+0x579/0x3250 [ 532.810897][T16107] ? __kasan_check_write+0x14/0x20 [ 532.815845][T16107] copy_process+0x579/0x3250 [ 532.820273][T16107] ? check_stack_object+0x117/0x130 [ 532.825305][T16107] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 532.830249][T16107] ? copy_clone_args_from_user+0x6f0/0x790 [ 532.835892][T16107] kernel_clone+0x22d/0x990 [ 532.840231][T16107] ? dup_mmap+0xea0/0xea0 [ 532.844397][T16107] ? create_io_thread+0x1e0/0x1e0 [ 532.849259][T16107] ? file_end_write+0x1b0/0x1b0 [ 532.853946][T16107] __x64_sys_clone3+0x375/0x3a0 [ 532.858632][T16107] ? __ia32_sys_clone+0x300/0x300 [ 532.863492][T16107] ? ksys_write+0x25f/0x2c0 [ 532.867918][T16107] ? debug_smp_processor_id+0x17/0x20 [ 532.873386][T16107] do_syscall_64+0x44/0xd0 [ 532.877638][T16107] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 532.883366][T16107] RIP: 0033:0x7fb8471070d9 [ 532.887627][T16107] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 532.907059][T16107] RSP: 002b:00007fb845e7a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 532.915314][T16107] RAX: ffffffffffffffda RBX: 00007fb847226f80 RCX: 00007fb8471070d9 [ 532.923121][T16107] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fb845e7a050 17:18:42 executing program 5: syz_clone3(&(0x7f0000000800)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 532.930927][T16107] RBP: 00007fb845e7a1d0 R08: 0000000000000000 R09: 0000000000000058 [ 532.938737][T16107] R10: 00007fb845e7a050 R11: 0000000000000246 R12: 0000000000000058 [ 532.946549][T16107] R13: 00007ffcf73cf18f R14: 00007fb845e7a300 R15: 0000000000022000 [ 532.954370][T16107] [ 532.959361][T16113] FAULT_INJECTION: forcing a failure. [ 532.959361][T16113] name fail_page_alloc, interval 1, probability 0, space 0, times 0 17:18:42 executing program 5: syz_clone3(&(0x7f0000000800)={0x7000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 532.973577][T16113] CPU: 0 PID: 16113 Comm: syz-executor.0 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 532.983645][T16113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 532.993543][T16113] Call Trace: [ 532.996666][T16113] [ 532.999442][T16113] dump_stack_lvl+0x151/0x1b7 [ 533.003956][T16113] ? bfq_pos_tree_add_move+0x43e/0x43e [ 533.009254][T16113] dump_stack+0x15/0x17 [ 533.013250][T16113] should_fail+0x3c0/0x510 [ 533.017580][T16113] should_fail_alloc_page+0x58/0x70 [ 533.022616][T16113] __alloc_pages+0x1de/0x7c0 17:18:42 executing program 5: syz_clone3(&(0x7f0000000800)={0x8000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 17:18:42 executing program 5: syz_clone3(&(0x7f0000000800)={0x9000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 533.027047][T16113] ? __count_vm_events+0x30/0x30 [ 533.031818][T16113] ? __kasan_kmalloc+0x9/0x10 [ 533.036329][T16113] ? __kmalloc+0x203/0x350 [ 533.040581][T16113] ? __vmalloc_node_range+0x2e3/0x800 [ 533.045795][T16113] __vmalloc_node_range+0x48f/0x800 [ 533.050827][T16113] dup_task_struct+0x61f/0xa60 [ 533.055427][T16113] ? copy_process+0x579/0x3250 [ 533.060026][T16113] ? __kasan_check_write+0x14/0x20 [ 533.065146][T16113] copy_process+0x579/0x3250 [ 533.069575][T16113] ? check_stack_object+0x117/0x130 [ 533.074634][T16113] ? pidfd_show_fdinfo+0x2b0/0x2b0 17:18:42 executing program 5: syz_clone3(&(0x7f0000000800)={0x10000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 533.079553][T16113] ? copy_clone_args_from_user+0x6f0/0x790 [ 533.085196][T16113] kernel_clone+0x22d/0x990 [ 533.089535][T16113] ? dup_mmap+0xea0/0xea0 [ 533.093698][T16113] ? create_io_thread+0x1e0/0x1e0 [ 533.098559][T16113] ? file_end_write+0x1b0/0x1b0 [ 533.103249][T16113] __x64_sys_clone3+0x375/0x3a0 [ 533.107933][T16113] ? __ia32_sys_clone+0x300/0x300 [ 533.112791][T16113] ? ksys_write+0x25f/0x2c0 [ 533.117131][T16113] ? debug_smp_processor_id+0x17/0x20 [ 533.122339][T16113] do_syscall_64+0x44/0xd0 [ 533.126593][T16113] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 533.132325][T16113] RIP: 0033:0x7f12bb6a50d9 [ 533.136701][T16113] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 533.156301][T16113] RSP: 002b:00007f12ba418038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 533.164540][T16113] RAX: ffffffffffffffda RBX: 00007f12bb7c4f80 RCX: 00007f12bb6a50d9 [ 533.172357][T16113] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007f12ba418050 17:18:42 executing program 1: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) 17:18:42 executing program 5: syz_clone3(&(0x7f0000000800)={0x11000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 17:18:42 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0xa8) 17:18:42 executing program 2: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 15) [ 533.180172][T16113] RBP: 00007f12ba4181d0 R08: 0000000000000000 R09: 0000000000000058 [ 533.187975][T16113] R10: 00007f12ba418050 R11: 0000000000000246 R12: 0000000000000058 [ 533.195785][T16113] R13: 00007ffe4d7fb38f R14: 00007f12ba418300 R15: 0000000000022000 [ 533.203598][T16113] [ 533.228184][T16127] FAULT_INJECTION: forcing a failure. [ 533.228184][T16127] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 533.244507][T16127] CPU: 1 PID: 16127 Comm: syz-executor.2 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 533.254577][T16127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 533.264469][T16127] Call Trace: [ 533.267594][T16127] [ 533.270491][T16127] dump_stack_lvl+0x151/0x1b7 [ 533.275007][T16127] ? bfq_pos_tree_add_move+0x43e/0x43e [ 533.280305][T16127] dump_stack+0x15/0x17 [ 533.284295][T16127] should_fail+0x3c0/0x510 [ 533.288547][T16127] should_fail_alloc_page+0x58/0x70 [ 533.293584][T16127] __alloc_pages+0x1de/0x7c0 [ 533.298002][T16127] ? __count_vm_events+0x30/0x30 [ 533.302775][T16127] ? __kasan_kmalloc+0x9/0x10 [ 533.307289][T16127] ? __kmalloc+0x203/0x350 [ 533.311543][T16127] ? __vmalloc_node_range+0x2e3/0x800 [ 533.316748][T16127] __vmalloc_node_range+0x48f/0x800 [ 533.321784][T16127] dup_task_struct+0x61f/0xa60 [ 533.326383][T16127] ? copy_process+0x579/0x3250 [ 533.330986][T16127] ? __kasan_check_write+0x14/0x20 [ 533.335930][T16127] copy_process+0x579/0x3250 [ 533.340364][T16127] ? check_stack_object+0x117/0x130 [ 533.345389][T16127] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 533.350531][T16127] ? copy_clone_args_from_user+0x6f0/0x790 [ 533.356183][T16127] kernel_clone+0x22d/0x990 [ 533.360522][T16127] ? dup_mmap+0xea0/0xea0 [ 533.364687][T16127] ? create_io_thread+0x1e0/0x1e0 [ 533.369548][T16127] ? file_end_write+0x1b0/0x1b0 [ 533.374238][T16127] __x64_sys_clone3+0x375/0x3a0 [ 533.378921][T16127] ? __ia32_sys_clone+0x300/0x300 [ 533.383784][T16127] ? ksys_write+0x25f/0x2c0 [ 533.388123][T16127] ? debug_smp_processor_id+0x17/0x20 [ 533.393330][T16127] do_syscall_64+0x44/0xd0 [ 533.397588][T16127] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 533.403309][T16127] RIP: 0033:0x7fb8471070d9 [ 533.407563][T16127] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 533.427003][T16127] RSP: 002b:00007fb845e7a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 533.435247][T16127] RAX: ffffffffffffffda RBX: 00007fb847226f80 RCX: 00007fb8471070d9 [ 533.443058][T16127] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fb845e7a050 [ 533.450957][T16127] RBP: 00007fb845e7a1d0 R08: 0000000000000000 R09: 0000000000000058 [ 533.458770][T16127] R10: 00007fb845e7a050 R11: 0000000000000246 R12: 0000000000000058 [ 533.466583][T16127] R13: 00007ffcf73cf18f R14: 00007fb845e7a300 R15: 0000000000022000 [ 533.474403][T16127] 17:18:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xb4}, {0x0}, {&(0x7f0000002a80)=""/4096, 0xe14}], 0x3, 0x0, 0x7000000}}], 0x300, 0x0, 0x0) 17:18:42 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 15) 17:18:42 executing program 5: syz_clone3(&(0x7f0000000800)={0x1f000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 17:18:42 executing program 2: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 16) 17:18:42 executing program 1: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) 17:18:42 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0xb8) [ 533.551702][T16138] FAULT_INJECTION: forcing a failure. [ 533.551702][T16138] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 533.564819][T16138] CPU: 1 PID: 16138 Comm: syz-executor.0 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 533.566172][T16142] FAULT_INJECTION: forcing a failure. [ 533.566172][T16142] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 533.574896][T16138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 533.574914][T16138] Call Trace: [ 533.574920][T16138] [ 533.574928][T16138] dump_stack_lvl+0x151/0x1b7 [ 533.574956][T16138] ? bfq_pos_tree_add_move+0x43e/0x43e [ 533.613607][T16138] dump_stack+0x15/0x17 [ 533.617594][T16138] should_fail+0x3c0/0x510 [ 533.621848][T16138] should_fail_alloc_page+0x58/0x70 [ 533.626879][T16138] __alloc_pages+0x1de/0x7c0 [ 533.631306][T16138] ? __count_vm_events+0x30/0x30 [ 533.636079][T16138] ? __kasan_kmalloc+0x9/0x10 [ 533.640599][T16138] ? __kmalloc+0x203/0x350 [ 533.644847][T16138] ? __vmalloc_node_range+0x2e3/0x800 [ 533.650055][T16138] __vmalloc_node_range+0x48f/0x800 [ 533.655090][T16138] dup_task_struct+0x61f/0xa60 [ 533.659685][T16138] ? copy_process+0x579/0x3250 [ 533.664305][T16138] ? __kasan_check_write+0x14/0x20 [ 533.669234][T16138] copy_process+0x579/0x3250 [ 533.673662][T16138] ? check_stack_object+0x117/0x130 [ 533.678697][T16138] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 533.683649][T16138] ? copy_clone_args_from_user+0x6f0/0x790 [ 533.689290][T16138] kernel_clone+0x22d/0x990 [ 533.693623][T16138] ? dup_mmap+0xea0/0xea0 [ 533.697792][T16138] ? create_io_thread+0x1e0/0x1e0 [ 533.702657][T16138] ? file_end_write+0x1b0/0x1b0 [ 533.707342][T16138] __x64_sys_clone3+0x375/0x3a0 [ 533.712026][T16138] ? __ia32_sys_clone+0x300/0x300 [ 533.716884][T16138] ? ksys_write+0x25f/0x2c0 [ 533.721232][T16138] ? debug_smp_processor_id+0x17/0x20 [ 533.726431][T16138] do_syscall_64+0x44/0xd0 [ 533.730686][T16138] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 533.736414][T16138] RIP: 0033:0x7f12bb6a50d9 [ 533.740664][T16138] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 533.760106][T16138] RSP: 002b:00007f12ba418038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 533.768348][T16138] RAX: ffffffffffffffda RBX: 00007f12bb7c4f80 RCX: 00007f12bb6a50d9 [ 533.776163][T16138] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007f12ba418050 [ 533.783973][T16138] RBP: 00007f12ba4181d0 R08: 0000000000000000 R09: 0000000000000058 [ 533.791783][T16138] R10: 00007f12ba418050 R11: 0000000000000246 R12: 0000000000000058 17:18:43 executing program 5: syz_clone3(&(0x7f0000000800)={0x1ffff000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 17:18:43 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 16) [ 533.799594][T16138] R13: 00007ffe4d7fb38f R14: 00007f12ba418300 R15: 0000000000022000 [ 533.807411][T16138] [ 533.810299][T16142] CPU: 0 PID: 16142 Comm: syz-executor.2 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 533.820341][T16142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 533.830240][T16142] Call Trace: [ 533.833362][T16142] [ 533.836138][T16142] dump_stack_lvl+0x151/0x1b7 [ 533.840652][T16142] ? bfq_pos_tree_add_move+0x43e/0x43e [ 533.845947][T16142] dump_stack+0x15/0x17 [ 533.849935][T16142] should_fail+0x3c0/0x510 [ 533.854191][T16142] should_fail_alloc_page+0x58/0x70 [ 533.859224][T16142] __alloc_pages+0x1de/0x7c0 [ 533.863650][T16142] ? __count_vm_events+0x30/0x30 [ 533.867654][T16154] FAULT_INJECTION: forcing a failure. [ 533.867654][T16154] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 533.868505][T16142] ? __kasan_kmalloc+0x9/0x10 [ 533.868529][T16142] ? __kmalloc+0x203/0x350 [ 533.868548][T16142] ? __vmalloc_node_range+0x2e3/0x800 [ 533.895589][T16142] __vmalloc_node_range+0x48f/0x800 [ 533.900630][T16142] dup_task_struct+0x61f/0xa60 [ 533.905235][T16142] ? copy_process+0x579/0x3250 [ 533.909824][T16142] ? __kasan_check_write+0x14/0x20 [ 533.914769][T16142] copy_process+0x579/0x3250 [ 533.919204][T16142] ? check_stack_object+0x117/0x130 [ 533.924229][T16142] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 533.929171][T16142] ? copy_clone_args_from_user+0x6f0/0x790 [ 533.934813][T16142] kernel_clone+0x22d/0x990 [ 533.939155][T16142] ? dup_mmap+0xea0/0xea0 [ 533.943322][T16142] ? create_io_thread+0x1e0/0x1e0 [ 533.948179][T16142] ? file_end_write+0x1b0/0x1b0 [ 533.952865][T16142] __x64_sys_clone3+0x375/0x3a0 [ 533.957553][T16142] ? __ia32_sys_clone+0x300/0x300 [ 533.962413][T16142] ? ksys_write+0x25f/0x2c0 [ 533.966757][T16142] ? debug_smp_processor_id+0x17/0x20 [ 533.971959][T16142] do_syscall_64+0x44/0xd0 [ 533.976212][T16142] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 533.981941][T16142] RIP: 0033:0x7fb8471070d9 [ 533.986283][T16142] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 534.005725][T16142] RSP: 002b:00007fb845e7a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 534.013967][T16142] RAX: ffffffffffffffda RBX: 00007fb847226f80 RCX: 00007fb8471070d9 [ 534.021776][T16142] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fb845e7a050 [ 534.029588][T16142] RBP: 00007fb845e7a1d0 R08: 0000000000000000 R09: 0000000000000058 [ 534.037398][T16142] R10: 00007fb845e7a050 R11: 0000000000000246 R12: 0000000000000058 [ 534.045217][T16142] R13: 00007ffcf73cf18f R14: 00007fb845e7a300 R15: 0000000000022000 17:18:43 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) 17:18:43 executing program 5: syz_clone3(&(0x7f0000000800)={0x20000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 17:18:43 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0xc0) 17:18:43 executing program 2: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 17) [ 534.053024][T16142] [ 534.061906][T16154] CPU: 0 PID: 16154 Comm: syz-executor.0 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 534.071979][T16154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 534.081874][T16154] Call Trace: [ 534.085000][T16154] [ 534.087773][T16154] dump_stack_lvl+0x151/0x1b7 [ 534.092286][T16154] ? bfq_pos_tree_add_move+0x43e/0x43e [ 534.097582][T16154] dump_stack+0x15/0x17 [ 534.101575][T16154] should_fail+0x3c0/0x510 [ 534.105831][T16154] should_fail_alloc_page+0x58/0x70 [ 534.110861][T16154] __alloc_pages+0x1de/0x7c0 [ 534.115289][T16154] ? __count_vm_events+0x30/0x30 [ 534.120060][T16154] ? __kasan_kmalloc+0x9/0x10 [ 534.123591][T16161] FAULT_INJECTION: forcing a failure. [ 534.123591][T16161] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 534.124569][T16154] ? __kmalloc+0x203/0x350 [ 534.124594][T16154] ? __vmalloc_node_range+0x2e3/0x800 [ 534.147052][T16154] __vmalloc_node_range+0x48f/0x800 [ 534.152089][T16154] dup_task_struct+0x61f/0xa60 [ 534.156684][T16154] ? copy_process+0x579/0x3250 [ 534.161285][T16154] ? __kasan_check_write+0x14/0x20 [ 534.166234][T16154] copy_process+0x579/0x3250 [ 534.170662][T16154] ? check_stack_object+0x117/0x130 [ 534.175695][T16154] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 534.180641][T16154] ? copy_clone_args_from_user+0x6f0/0x790 [ 534.186282][T16154] kernel_clone+0x22d/0x990 [ 534.190620][T16154] ? dup_mmap+0xea0/0xea0 [ 534.194789][T16154] ? create_io_thread+0x1e0/0x1e0 [ 534.199648][T16154] ? file_end_write+0x1b0/0x1b0 [ 534.204333][T16154] __x64_sys_clone3+0x375/0x3a0 [ 534.209020][T16154] ? __ia32_sys_clone+0x300/0x300 [ 534.213882][T16154] ? ksys_write+0x25f/0x2c0 [ 534.218221][T16154] ? debug_smp_processor_id+0x17/0x20 [ 534.223424][T16154] do_syscall_64+0x44/0xd0 [ 534.227679][T16154] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 534.233411][T16154] RIP: 0033:0x7f12bb6a50d9 [ 534.237661][T16154] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 534.257103][T16154] RSP: 002b:00007f12ba418038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 534.265346][T16154] RAX: ffffffffffffffda RBX: 00007f12bb7c4f80 RCX: 00007f12bb6a50d9 [ 534.273344][T16154] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007f12ba418050 [ 534.281145][T16154] RBP: 00007f12ba4181d0 R08: 0000000000000000 R09: 0000000000000058 [ 534.288952][T16154] R10: 00007f12ba418050 R11: 0000000000000246 R12: 0000000000000058 [ 534.296851][T16154] R13: 00007ffe4d7fb38f R14: 00007f12ba418300 R15: 0000000000022000 [ 534.304663][T16154] [ 534.307528][T16161] CPU: 1 PID: 16161 Comm: syz-executor.2 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 534.317600][T16161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 534.327486][T16161] Call Trace: [ 534.330612][T16161] [ 534.333387][T16161] dump_stack_lvl+0x151/0x1b7 [ 534.337902][T16161] ? bfq_pos_tree_add_move+0x43e/0x43e [ 534.343198][T16161] dump_stack+0x15/0x17 [ 534.347204][T16161] should_fail+0x3c0/0x510 [ 534.351441][T16161] should_fail_alloc_page+0x58/0x70 [ 534.356473][T16161] __alloc_pages+0x1de/0x7c0 [ 534.360900][T16161] ? __count_vm_events+0x30/0x30 [ 534.365763][T16161] ? __kasan_kmalloc+0x9/0x10 [ 534.370312][T16161] ? __kmalloc+0x203/0x350 [ 534.374533][T16161] ? __vmalloc_node_range+0x2e3/0x800 [ 534.379743][T16161] __vmalloc_node_range+0x48f/0x800 [ 534.384768][T16161] dup_task_struct+0x61f/0xa60 [ 534.389368][T16161] ? copy_process+0x579/0x3250 [ 534.393969][T16161] ? __kasan_check_write+0x14/0x20 [ 534.398914][T16161] copy_process+0x579/0x3250 [ 534.403342][T16161] ? check_stack_object+0x117/0x130 [ 534.408378][T16161] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 534.413322][T16161] ? copy_clone_args_from_user+0x6f0/0x790 [ 534.418964][T16161] kernel_clone+0x22d/0x990 [ 534.423305][T16161] ? dup_mmap+0xea0/0xea0 [ 534.427555][T16161] ? create_io_thread+0x1e0/0x1e0 [ 534.432418][T16161] ? file_end_write+0x1b0/0x1b0 [ 534.437103][T16161] __x64_sys_clone3+0x375/0x3a0 [ 534.441789][T16161] ? __ia32_sys_clone+0x300/0x300 [ 534.446655][T16161] ? ksys_write+0x25f/0x2c0 [ 534.450992][T16161] ? debug_smp_processor_id+0x17/0x20 [ 534.456200][T16161] do_syscall_64+0x44/0xd0 [ 534.460450][T16161] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 534.466190][T16161] RIP: 0033:0x7fb8471070d9 [ 534.470433][T16161] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 534.489963][T16161] RSP: 002b:00007fb845e7a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 534.498205][T16161] RAX: ffffffffffffffda RBX: 00007fb847226f80 RCX: 00007fb8471070d9 17:18:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xb4}, {0x0}, {&(0x7f0000002a80)=""/4096, 0xe14}], 0x3, 0x0, 0x8000000}}], 0x300, 0x0, 0x0) 17:18:43 executing program 5: syz_clone3(&(0x7f0000000800)={0x40000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 17:18:43 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0xc8) 17:18:43 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) 17:18:43 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 17) [ 534.506017][T16161] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fb845e7a050 [ 534.513825][T16161] RBP: 00007fb845e7a1d0 R08: 0000000000000000 R09: 0000000000000058 [ 534.521636][T16161] R10: 00007fb845e7a050 R11: 0000000000000246 R12: 0000000000000058 [ 534.529631][T16161] R13: 00007ffcf73cf18f R14: 00007fb845e7a300 R15: 0000000000022000 [ 534.537450][T16161] 17:18:43 executing program 2: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 18) [ 534.566799][T16171] FAULT_INJECTION: forcing a failure. [ 534.566799][T16171] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 534.580989][T16171] CPU: 1 PID: 16171 Comm: syz-executor.0 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 534.591061][T16171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 534.601041][T16171] Call Trace: [ 534.604156][T16171] [ 534.606935][T16171] dump_stack_lvl+0x151/0x1b7 [ 534.611445][T16171] ? bfq_pos_tree_add_move+0x43e/0x43e [ 534.616831][T16171] dump_stack+0x15/0x17 [ 534.620820][T16171] should_fail+0x3c0/0x510 [ 534.625071][T16171] should_fail_alloc_page+0x58/0x70 [ 534.630105][T16171] __alloc_pages+0x1de/0x7c0 [ 534.634532][T16171] ? __count_vm_events+0x30/0x30 [ 534.639308][T16171] ? __kasan_kmalloc+0x9/0x10 [ 534.643824][T16171] ? __kmalloc+0x203/0x350 [ 534.648080][T16171] ? __vmalloc_node_range+0x2e3/0x800 [ 534.653280][T16171] __vmalloc_node_range+0x48f/0x800 [ 534.658315][T16171] dup_task_struct+0x61f/0xa60 [ 534.662912][T16171] ? copy_process+0x579/0x3250 [ 534.667515][T16171] ? __kasan_check_write+0x14/0x20 [ 534.672467][T16171] copy_process+0x579/0x3250 [ 534.676887][T16171] ? check_stack_object+0x117/0x130 [ 534.681926][T16171] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 534.686869][T16171] ? copy_clone_args_from_user+0x6f0/0x790 [ 534.692513][T16171] kernel_clone+0x22d/0x990 [ 534.696847][T16171] ? dup_mmap+0xea0/0xea0 [ 534.701166][T16171] ? create_io_thread+0x1e0/0x1e0 [ 534.705989][T16171] ? file_end_write+0x1b0/0x1b0 [ 534.710670][T16171] __x64_sys_clone3+0x375/0x3a0 [ 534.715360][T16171] ? __ia32_sys_clone+0x300/0x300 [ 534.720219][T16171] ? ksys_write+0x25f/0x2c0 [ 534.724557][T16171] ? debug_smp_processor_id+0x17/0x20 [ 534.729763][T16171] do_syscall_64+0x44/0xd0 [ 534.734023][T16171] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 534.739746][T16171] RIP: 0033:0x7f12bb6a50d9 [ 534.744088][T16171] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 17:18:44 executing program 5: syz_clone3(&(0x7f0000000800)={0xf5ffffff, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 17:18:44 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 18) [ 534.763530][T16171] RSP: 002b:00007f12ba418038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 534.771782][T16171] RAX: ffffffffffffffda RBX: 00007f12bb7c4f80 RCX: 00007f12bb6a50d9 [ 534.779584][T16171] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007f12ba418050 [ 534.787393][T16171] RBP: 00007f12ba4181d0 R08: 0000000000000000 R09: 0000000000000058 [ 534.795204][T16171] R10: 00007f12ba418050 R11: 0000000000000246 R12: 0000000000000058 [ 534.803016][T16171] R13: 00007ffe4d7fb38f R14: 00007f12ba418300 R15: 0000000000022000 [ 534.810830][T16171] 17:18:44 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) 17:18:44 executing program 5: syz_clone3(&(0x7f0000000800)={0xfbffffff, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 17:18:44 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0xcc) [ 534.842604][T16180] FAULT_INJECTION: forcing a failure. [ 534.842604][T16180] name failslab, interval 1, probability 0, space 0, times 0 [ 534.858259][T16182] FAULT_INJECTION: forcing a failure. [ 534.858259][T16182] name failslab, interval 1, probability 0, space 0, times 0 [ 534.871570][T16180] CPU: 0 PID: 16180 Comm: syz-executor.0 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 534.882596][T16180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 17:18:44 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0xd0) [ 534.892505][T16180] Call Trace: [ 534.895612][T16180] [ 534.898389][T16180] dump_stack_lvl+0x151/0x1b7 [ 534.902906][T16180] ? bfq_pos_tree_add_move+0x43e/0x43e [ 534.908198][T16180] dump_stack+0x15/0x17 [ 534.912287][T16180] should_fail+0x3c0/0x510 [ 534.916544][T16180] ? security_prepare_creds+0x50/0x160 [ 534.921833][T16180] __should_failslab+0x9f/0xe0 [ 534.926432][T16180] should_failslab+0x9/0x20 [ 534.930777][T16180] __kmalloc+0x6d/0x350 [ 534.934774][T16180] security_prepare_creds+0x50/0x160 [ 534.939975][T16180] prepare_creds+0x471/0x690 [ 534.944401][T16180] copy_creds+0xde/0x640 [ 534.948483][T16180] copy_process+0x775/0x3250 [ 534.952908][T16180] ? check_stack_object+0x117/0x130 [ 534.957938][T16180] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 534.962888][T16180] ? copy_clone_args_from_user+0x6f0/0x790 [ 534.968527][T16180] kernel_clone+0x22d/0x990 [ 534.972869][T16180] ? dup_mmap+0xea0/0xea0 [ 534.977034][T16180] ? create_io_thread+0x1e0/0x1e0 [ 534.981895][T16180] ? file_end_write+0x1b0/0x1b0 [ 534.986581][T16180] __x64_sys_clone3+0x375/0x3a0 [ 534.991267][T16180] ? __ia32_sys_clone+0x300/0x300 [ 534.996137][T16180] ? ksys_write+0x25f/0x2c0 [ 535.000481][T16180] ? debug_smp_processor_id+0x17/0x20 [ 535.005674][T16180] do_syscall_64+0x44/0xd0 [ 535.009929][T16180] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 535.015654][T16180] RIP: 0033:0x7f12bb6a50d9 [ 535.019907][T16180] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 535.039353][T16180] RSP: 002b:00007f12ba418038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 535.047596][T16180] RAX: ffffffffffffffda RBX: 00007f12bb7c4f80 RCX: 00007f12bb6a50d9 [ 535.055408][T16180] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007f12ba418050 [ 535.063216][T16180] RBP: 00007f12ba4181d0 R08: 0000000000000000 R09: 0000000000000058 [ 535.071035][T16180] R10: 00007f12ba418050 R11: 0000000000000246 R12: 0000000000000058 [ 535.078835][T16180] R13: 00007ffe4d7fb38f R14: 00007f12ba418300 R15: 0000000000022000 [ 535.086664][T16180] [ 535.092172][T16182] CPU: 1 PID: 16182 Comm: syz-executor.2 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 535.102242][T16182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 535.112141][T16182] Call Trace: [ 535.115257][T16182] [ 535.118043][T16182] dump_stack_lvl+0x151/0x1b7 [ 535.122547][T16182] ? bfq_pos_tree_add_move+0x43e/0x43e [ 535.127843][T16182] ? __this_cpu_preempt_check+0x13/0x20 [ 535.133218][T16182] dump_stack+0x15/0x17 [ 535.137215][T16182] should_fail+0x3c0/0x510 [ 535.141464][T16182] __should_failslab+0x9f/0xe0 [ 535.146068][T16182] should_failslab+0x9/0x20 [ 535.150406][T16182] kmem_cache_alloc+0x4f/0x2f0 [ 535.155007][T16182] ? __kasan_check_write+0x14/0x20 [ 535.159961][T16182] ? prepare_creds+0x30/0x690 [ 535.164465][T16182] ? _raw_spin_lock_irqsave+0xf8/0x210 [ 535.169770][T16182] prepare_creds+0x30/0x690 [ 535.174100][T16182] copy_creds+0xde/0x640 [ 535.178178][T16182] copy_process+0x775/0x3250 [ 535.182604][T16182] ? check_stack_object+0x117/0x130 [ 535.187637][T16182] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 535.192672][T16182] ? copy_clone_args_from_user+0x6f0/0x790 [ 535.198314][T16182] kernel_clone+0x22d/0x990 [ 535.202660][T16182] ? dup_mmap+0xea0/0xea0 [ 535.206819][T16182] ? create_io_thread+0x1e0/0x1e0 [ 535.211678][T16182] ? file_end_write+0x1b0/0x1b0 [ 535.216370][T16182] __x64_sys_clone3+0x375/0x3a0 [ 535.221314][T16182] ? __ia32_sys_clone+0x300/0x300 [ 535.226176][T16182] ? ksys_write+0x25f/0x2c0 [ 535.230514][T16182] ? debug_smp_processor_id+0x17/0x20 [ 535.235722][T16182] do_syscall_64+0x44/0xd0 [ 535.239978][T16182] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 535.245702][T16182] RIP: 0033:0x7fb8471070d9 [ 535.249954][T16182] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 535.269487][T16182] RSP: 002b:00007fb845e7a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 535.277733][T16182] RAX: ffffffffffffffda RBX: 00007fb847226f80 RCX: 00007fb8471070d9 [ 535.285653][T16182] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fb845e7a050 [ 535.293464][T16182] RBP: 00007fb845e7a1d0 R08: 0000000000000000 R09: 0000000000000058 [ 535.301270][T16182] R10: 00007fb845e7a050 R11: 0000000000000246 R12: 0000000000000058 [ 535.309080][T16182] R13: 00007ffcf73cf18f R14: 00007fb845e7a300 R15: 0000000000022000 [ 535.316895][T16182] 17:18:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xb4}, {0x0}, {&(0x7f0000002a80)=""/4096, 0xe14}], 0x3, 0x0, 0x9000000}}], 0x300, 0x0, 0x0) 17:18:44 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0xd8) 17:18:44 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 19) 17:18:44 executing program 5: syz_clone3(&(0x7f0000000800)={0xff0f0100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 17:18:44 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) 17:18:44 executing program 2: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 19) 17:18:44 executing program 5: syz_clone3(&(0x7f0000000800)={0xfffffff5, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 535.423699][T16196] FAULT_INJECTION: forcing a failure. [ 535.423699][T16196] name failslab, interval 1, probability 0, space 0, times 0 [ 535.434694][T16202] __nla_validate_parse: 125 callbacks suppressed [ 535.434713][T16202] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 535.442199][T16206] FAULT_INJECTION: forcing a failure. [ 535.442199][T16206] name failslab, interval 1, probability 0, space 0, times 0 [ 535.446077][T16202] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 535.451890][T16206] CPU: 0 PID: 16206 Comm: syz-executor.2 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 535.482987][T16206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 535.485242][T16202] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 535.492880][T16206] Call Trace: [ 535.492892][T16206] [ 535.492899][T16206] dump_stack_lvl+0x151/0x1b7 [ 535.492924][T16206] ? bfq_pos_tree_add_move+0x43e/0x43e [ 535.492942][T16206] dump_stack+0x15/0x17 [ 535.504102][T16202] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 535.505123][T16206] should_fail+0x3c0/0x510 [ 535.505149][T16206] ? security_prepare_creds+0x50/0x160 [ 535.508649][T16202] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 535.512402][T16206] __should_failslab+0x9f/0xe0 [ 535.512427][T16206] should_failslab+0x9/0x20 [ 535.518156][T16202] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 535.521692][T16206] __kmalloc+0x6d/0x350 [ 535.521717][T16206] security_prepare_creds+0x50/0x160 [ 535.531245][T16202] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 535.535056][T16206] prepare_creds+0x471/0x690 [ 535.535086][T16206] copy_creds+0xde/0x640 [ 535.540778][T16202] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 535.549465][T16206] copy_process+0x775/0x3250 [ 535.549490][T16206] ? check_stack_object+0x117/0x130 [ 535.549508][T16206] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 535.549523][T16206] ? copy_clone_args_from_user+0x6f0/0x790 [ 535.554535][T16202] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 535.558406][T16206] kernel_clone+0x22d/0x990 [ 535.558428][T16206] ? dup_mmap+0xea0/0xea0 [ 535.558444][T16206] ? create_io_thread+0x1e0/0x1e0 [ 535.558460][T16206] ? file_end_write+0x1b0/0x1b0 [ 535.568064][T16202] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 535.571509][T16206] __x64_sys_clone3+0x375/0x3a0 [ 535.571533][T16206] ? __ia32_sys_clone+0x300/0x300 [ 535.571551][T16206] ? ksys_write+0x25f/0x2c0 [ 535.673675][T16206] ? debug_smp_processor_id+0x17/0x20 [ 535.678880][T16206] do_syscall_64+0x44/0xd0 [ 535.683137][T16206] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 535.688863][T16206] RIP: 0033:0x7fb8471070d9 [ 535.693112][T16206] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 535.712555][T16206] RSP: 002b:00007fb845e7a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 535.720796][T16206] RAX: ffffffffffffffda RBX: 00007fb847226f80 RCX: 00007fb8471070d9 [ 535.728608][T16206] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fb845e7a050 [ 535.736418][T16206] RBP: 00007fb845e7a1d0 R08: 0000000000000000 R09: 0000000000000058 [ 535.744229][T16206] R10: 00007fb845e7a050 R11: 0000000000000246 R12: 0000000000000058 [ 535.752043][T16206] R13: 00007ffcf73cf18f R14: 00007fb845e7a300 R15: 0000000000022000 [ 535.759859][T16206] [ 535.762717][T16196] CPU: 1 PID: 16196 Comm: syz-executor.0 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 535.772791][T16196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 535.782773][T16196] Call Trace: [ 535.785894][T16196] [ 535.788706][T16196] dump_stack_lvl+0x151/0x1b7 [ 535.793187][T16196] ? bfq_pos_tree_add_move+0x43e/0x43e [ 535.798480][T16196] ? avc_has_perm_noaudit+0x358/0x450 [ 535.803683][T16196] dump_stack+0x15/0x17 [ 535.807675][T16196] should_fail+0x3c0/0x510 [ 535.811930][T16196] __should_failslab+0x9f/0xe0 [ 535.816526][T16196] should_failslab+0x9/0x20 [ 535.820865][T16196] kmem_cache_alloc+0x4f/0x2f0 [ 535.825467][T16196] ? dup_fd+0x71/0xa40 [ 535.829373][T16196] dup_fd+0x71/0xa40 [ 535.833100][T16196] ? avc_has_perm+0x16d/0x260 [ 535.837617][T16196] ? avc_has_perm_noaudit+0x450/0x450 [ 535.842825][T16196] copy_files+0xe6/0x200 [ 535.846901][T16196] ? perf_event_attrs+0x30/0x30 [ 535.851593][T16196] ? dup_task_struct+0xa60/0xa60 [ 535.856364][T16196] ? security_task_alloc+0x132/0x150 [ 535.861484][T16196] copy_process+0x11e9/0x3250 [ 535.865998][T16196] ? check_stack_object+0x117/0x130 [ 535.871029][T16196] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 535.875980][T16196] ? copy_clone_args_from_user+0x6f0/0x790 [ 535.881637][T16196] kernel_clone+0x22d/0x990 [ 535.885964][T16196] ? dup_mmap+0xea0/0xea0 [ 535.890125][T16196] ? create_io_thread+0x1e0/0x1e0 [ 535.894984][T16196] ? file_end_write+0x1b0/0x1b0 [ 535.899677][T16196] __x64_sys_clone3+0x375/0x3a0 [ 535.904363][T16196] ? __ia32_sys_clone+0x300/0x300 [ 535.909222][T16196] ? ksys_write+0x25f/0x2c0 [ 535.913559][T16196] ? debug_smp_processor_id+0x17/0x20 [ 535.918774][T16196] do_syscall_64+0x44/0xd0 [ 535.923022][T16196] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 535.928749][T16196] RIP: 0033:0x7f12bb6a50d9 [ 535.933437][T16196] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 535.952883][T16196] RSP: 002b:00007f12ba418038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 535.961121][T16196] RAX: ffffffffffffffda RBX: 00007f12bb7c4f80 RCX: 00007f12bb6a50d9 17:18:45 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0xf0) 17:18:45 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) 17:18:45 executing program 2: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 20) 17:18:45 executing program 5: syz_clone3(&(0x7f0000000800)={0xfffffffb, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 535.968930][T16196] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007f12ba418050 [ 535.976743][T16196] RBP: 00007f12ba4181d0 R08: 0000000000000000 R09: 0000000000000058 [ 535.984561][T16196] R10: 00007f12ba418050 R11: 0000000000000246 R12: 0000000000000058 [ 535.992372][T16196] R13: 00007ffe4d7fb38f R14: 00007f12ba418300 R15: 0000000000022000 [ 536.000180][T16196] 17:18:45 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 20) [ 536.024291][T16215] FAULT_INJECTION: forcing a failure. [ 536.024291][T16215] name failslab, interval 1, probability 0, space 0, times 0 [ 536.040541][T16215] CPU: 0 PID: 16215 Comm: syz-executor.2 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 536.050623][T16215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 536.051161][T16219] FAULT_INJECTION: forcing a failure. [ 536.051161][T16219] name failslab, interval 1, probability 0, space 0, times 0 [ 536.060510][T16215] Call Trace: [ 536.060522][T16215] [ 536.060530][T16215] dump_stack_lvl+0x151/0x1b7 [ 536.060557][T16215] ? bfq_pos_tree_add_move+0x43e/0x43e [ 536.060573][T16215] ? avc_has_perm_noaudit+0x358/0x450 [ 536.060593][T16215] dump_stack+0x15/0x17 [ 536.097830][T16215] should_fail+0x3c0/0x510 [ 536.102081][T16215] __should_failslab+0x9f/0xe0 [ 536.106679][T16215] should_failslab+0x9/0x20 [ 536.111022][T16215] kmem_cache_alloc+0x4f/0x2f0 [ 536.115630][T16215] ? dup_fd+0x71/0xa40 [ 536.119526][T16215] dup_fd+0x71/0xa40 [ 536.123255][T16215] ? avc_has_perm+0x16d/0x260 [ 536.127781][T16215] ? avc_has_perm_noaudit+0x450/0x450 [ 536.132981][T16215] copy_files+0xe6/0x200 [ 536.137057][T16215] ? perf_event_attrs+0x30/0x30 [ 536.141743][T16215] ? dup_task_struct+0xa60/0xa60 [ 536.146520][T16215] ? security_task_alloc+0x132/0x150 [ 536.151637][T16215] copy_process+0x11e9/0x3250 [ 536.156153][T16215] ? check_stack_object+0x117/0x130 [ 536.161273][T16215] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 536.166218][T16215] ? copy_clone_args_from_user+0x6f0/0x790 [ 536.171862][T16215] kernel_clone+0x22d/0x990 [ 536.176200][T16215] ? dup_mmap+0xea0/0xea0 [ 536.180366][T16215] ? create_io_thread+0x1e0/0x1e0 [ 536.185226][T16215] ? file_end_write+0x1b0/0x1b0 [ 536.189916][T16215] __x64_sys_clone3+0x375/0x3a0 [ 536.194599][T16215] ? __ia32_sys_clone+0x300/0x300 [ 536.199461][T16215] ? ksys_write+0x25f/0x2c0 [ 536.203886][T16215] ? debug_smp_processor_id+0x17/0x20 [ 536.209098][T16215] do_syscall_64+0x44/0xd0 [ 536.213346][T16215] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 536.219076][T16215] RIP: 0033:0x7fb8471070d9 17:18:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xb4}, {0x0}, {&(0x7f0000002a80)=""/4096, 0xe14}], 0x3, 0x0, 0xa000000}}], 0x300, 0x0, 0x0) 17:18:45 executing program 5: syz_clone3(&(0x7f0000000800)={0x100000800, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 536.223343][T16215] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 536.242769][T16215] RSP: 002b:00007fb845e7a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 536.251012][T16215] RAX: ffffffffffffffda RBX: 00007fb847226f80 RCX: 00007fb8471070d9 [ 536.258825][T16215] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fb845e7a050 [ 536.266635][T16215] RBP: 00007fb845e7a1d0 R08: 0000000000000000 R09: 0000000000000058 17:18:45 executing program 5: syz_clone3(&(0x7f0000000800)={0x1b0be1f000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 536.274450][T16215] R10: 00007fb845e7a050 R11: 0000000000000246 R12: 0000000000000058 [ 536.282262][T16215] R13: 00007ffcf73cf18f R14: 00007fb845e7a300 R15: 0000000000022000 [ 536.290077][T16215] [ 536.294840][T16219] CPU: 1 PID: 16219 Comm: syz-executor.0 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 536.304906][T16219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 536.314889][T16219] Call Trace: [ 536.318020][T16219] [ 536.320795][T16219] dump_stack_lvl+0x151/0x1b7 17:18:45 executing program 5: syz_clone3(&(0x7f0000000800)={0x29bd2ba1f000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 536.325309][T16219] ? bfq_pos_tree_add_move+0x43e/0x43e [ 536.330603][T16219] dump_stack+0x15/0x17 [ 536.334591][T16219] should_fail+0x3c0/0x510 [ 536.338835][T16219] ? alloc_fdtable+0xaf/0x2b0 [ 536.343349][T16219] __should_failslab+0x9f/0xe0 [ 536.348041][T16219] should_failslab+0x9/0x20 [ 536.352378][T16219] kmem_cache_alloc_trace+0x4a/0x310 [ 536.357494][T16219] ? __kasan_check_write+0x14/0x20 [ 536.362441][T16219] ? _raw_spin_lock+0xa3/0x1b0 [ 536.367042][T16219] alloc_fdtable+0xaf/0x2b0 [ 536.371382][T16219] dup_fd+0x781/0xa40 [ 536.375201][T16219] ? avc_has_perm+0x16d/0x260 [ 536.379722][T16219] copy_files+0xe6/0x200 [ 536.383794][T16219] ? perf_event_attrs+0x30/0x30 [ 536.388483][T16219] ? dup_task_struct+0xa60/0xa60 [ 536.393258][T16219] ? security_task_alloc+0x132/0x150 [ 536.398372][T16219] copy_process+0x11e9/0x3250 [ 536.402889][T16219] ? check_stack_object+0x117/0x130 [ 536.407921][T16219] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 536.412869][T16219] ? copy_clone_args_from_user+0x6f0/0x790 [ 536.418507][T16219] kernel_clone+0x22d/0x990 [ 536.422848][T16219] ? dup_mmap+0xea0/0xea0 [ 536.427015][T16219] ? create_io_thread+0x1e0/0x1e0 [ 536.431876][T16219] ? file_end_write+0x1b0/0x1b0 [ 536.436562][T16219] __x64_sys_clone3+0x375/0x3a0 [ 536.441249][T16219] ? __ia32_sys_clone+0x300/0x300 [ 536.446544][T16219] ? ksys_write+0x25f/0x2c0 [ 536.450884][T16219] ? debug_smp_processor_id+0x17/0x20 [ 536.456095][T16219] do_syscall_64+0x44/0xd0 [ 536.460345][T16219] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 536.466073][T16219] RIP: 0033:0x7f12bb6a50d9 [ 536.470324][T16219] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 536.489767][T16219] RSP: 002b:00007f12ba418038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 536.498017][T16219] RAX: ffffffffffffffda RBX: 00007f12bb7c4f80 RCX: 00007f12bb6a50d9 [ 536.505821][T16219] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007f12ba418050 [ 536.513638][T16219] RBP: 00007f12ba4181d0 R08: 0000000000000000 R09: 0000000000000058 17:18:45 executing program 2: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 21) 17:18:45 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 21) 17:18:45 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) [ 536.521445][T16219] R10: 00007f12ba418050 R11: 0000000000000246 R12: 0000000000000058 [ 536.529257][T16219] R13: 00007ffe4d7fb38f R14: 00007f12ba418300 R15: 0000000000022000 [ 536.537075][T16219] [ 536.549079][T16229] FAULT_INJECTION: forcing a failure. [ 536.549079][T16229] name failslab, interval 1, probability 0, space 0, times 0 [ 536.562953][T16229] CPU: 1 PID: 16229 Comm: syz-executor.2 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 536.573031][T16229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 536.583117][T16229] Call Trace: [ 536.586240][T16229] [ 536.589017][T16229] dump_stack_lvl+0x151/0x1b7 [ 536.593529][T16229] ? bfq_pos_tree_add_move+0x43e/0x43e [ 536.598824][T16229] dump_stack+0x15/0x17 [ 536.602816][T16229] should_fail+0x3c0/0x510 [ 536.607156][T16229] ? alloc_fdtable+0xaf/0x2b0 [ 536.611669][T16229] __should_failslab+0x9f/0xe0 [ 536.616269][T16229] should_failslab+0x9/0x20 [ 536.620613][T16229] kmem_cache_alloc_trace+0x4a/0x310 [ 536.625730][T16229] ? __kasan_check_write+0x14/0x20 [ 536.630684][T16229] ? _raw_spin_lock+0xa3/0x1b0 [ 536.635281][T16229] alloc_fdtable+0xaf/0x2b0 [ 536.639628][T16229] dup_fd+0x781/0xa40 [ 536.643433][T16229] ? avc_has_perm+0x16d/0x260 [ 536.647956][T16229] copy_files+0xe6/0x200 [ 536.652028][T16229] ? perf_event_attrs+0x30/0x30 [ 536.656818][T16229] ? dup_task_struct+0xa60/0xa60 [ 536.661576][T16229] ? security_task_alloc+0x132/0x150 [ 536.666694][T16229] copy_process+0x11e9/0x3250 [ 536.671208][T16229] ? check_stack_object+0x117/0x130 [ 536.676241][T16229] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 536.681193][T16229] ? copy_clone_args_from_user+0x6f0/0x790 [ 536.686831][T16229] kernel_clone+0x22d/0x990 [ 536.691169][T16229] ? dup_mmap+0xea0/0xea0 [ 536.695511][T16229] ? create_io_thread+0x1e0/0x1e0 [ 536.700369][T16229] ? file_end_write+0x1b0/0x1b0 [ 536.705148][T16229] __x64_sys_clone3+0x375/0x3a0 [ 536.709831][T16229] ? __ia32_sys_clone+0x300/0x300 [ 536.714693][T16229] ? ksys_write+0x25f/0x2c0 [ 536.719032][T16229] ? debug_smp_processor_id+0x17/0x20 [ 536.724238][T16229] do_syscall_64+0x44/0xd0 [ 536.728493][T16229] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 536.734218][T16229] RIP: 0033:0x7fb8471070d9 [ 536.738477][T16229] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 536.758000][T16229] RSP: 002b:00007fb845e7a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 536.766243][T16229] RAX: ffffffffffffffda RBX: 00007fb847226f80 RCX: 00007fb8471070d9 [ 536.774056][T16229] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fb845e7a050 [ 536.781868][T16229] RBP: 00007fb845e7a1d0 R08: 0000000000000000 R09: 0000000000000058 [ 536.789677][T16229] R10: 00007fb845e7a050 R11: 0000000000000246 R12: 0000000000000058 [ 536.797490][T16229] R13: 00007ffcf73cf18f R14: 00007fb845e7a300 R15: 0000000000022000 [ 536.805304][T16229] [ 536.827662][T16235] FAULT_INJECTION: forcing a failure. [ 536.827662][T16235] name failslab, interval 1, probability 0, space 0, times 0 [ 536.841612][T16235] CPU: 1 PID: 16235 Comm: syz-executor.0 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 536.851690][T16235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 536.861579][T16235] Call Trace: [ 536.864699][T16235] [ 536.867477][T16235] dump_stack_lvl+0x151/0x1b7 [ 536.871991][T16235] ? bfq_pos_tree_add_move+0x43e/0x43e [ 536.877285][T16235] dump_stack+0x15/0x17 [ 536.881279][T16235] should_fail+0x3c0/0x510 [ 536.885529][T16235] ? alloc_fdtable+0xaf/0x2b0 [ 536.890044][T16235] __should_failslab+0x9f/0xe0 [ 536.894646][T16235] should_failslab+0x9/0x20 [ 536.898983][T16235] kmem_cache_alloc_trace+0x4a/0x310 [ 536.904102][T16235] ? __kasan_check_write+0x14/0x20 [ 536.909050][T16235] ? _raw_spin_lock+0xa3/0x1b0 [ 536.913654][T16235] alloc_fdtable+0xaf/0x2b0 [ 536.918003][T16235] dup_fd+0x781/0xa40 [ 536.921808][T16235] ? avc_has_perm+0x16d/0x260 [ 536.926322][T16235] copy_files+0xe6/0x200 [ 536.930403][T16235] ? perf_event_attrs+0x30/0x30 [ 536.935086][T16235] ? dup_task_struct+0xa60/0xa60 [ 536.939868][T16235] ? security_task_alloc+0x132/0x150 [ 536.944982][T16235] copy_process+0x11e9/0x3250 [ 536.949498][T16235] ? check_stack_object+0x117/0x130 [ 536.954532][T16235] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 536.959478][T16235] ? copy_clone_args_from_user+0x6f0/0x790 [ 536.965118][T16235] kernel_clone+0x22d/0x990 [ 536.969465][T16235] ? dup_mmap+0xea0/0xea0 [ 536.973623][T16235] ? create_io_thread+0x1e0/0x1e0 [ 536.978482][T16235] ? file_end_write+0x1b0/0x1b0 [ 536.983173][T16235] __x64_sys_clone3+0x375/0x3a0 [ 536.987866][T16235] ? __ia32_sys_clone+0x300/0x300 [ 536.992718][T16235] ? ksys_write+0x25f/0x2c0 [ 536.997058][T16235] ? debug_smp_processor_id+0x17/0x20 [ 537.002265][T16235] do_syscall_64+0x44/0xd0 [ 537.006519][T16235] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 537.012250][T16235] RIP: 0033:0x7f12bb6a50d9 [ 537.016499][T16235] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 537.035940][T16235] RSP: 002b:00007f12ba418038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 537.044185][T16235] RAX: ffffffffffffffda RBX: 00007f12bb7c4f80 RCX: 00007f12bb6a50d9 [ 537.051999][T16235] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007f12ba418050 [ 537.059807][T16235] RBP: 00007f12ba4181d0 R08: 0000000000000000 R09: 0000000000000058 [ 537.067621][T16235] R10: 00007f12ba418050 R11: 0000000000000246 R12: 0000000000000058 17:18:46 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0xf8) 17:18:46 executing program 2: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 22) 17:18:46 executing program 5: syz_clone3(&(0x7f0000000800)={0x553a29402000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 17:18:46 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 22) [ 537.075432][T16235] R13: 00007ffe4d7fb38f R14: 00007f12ba418300 R15: 0000000000022000 [ 537.083243][T16235] [ 537.108872][T16241] FAULT_INJECTION: forcing a failure. [ 537.108872][T16241] name failslab, interval 1, probability 0, space 0, times 0 [ 537.120477][T16245] FAULT_INJECTION: forcing a failure. [ 537.120477][T16245] name failslab, interval 1, probability 0, space 0, times 0 [ 537.140621][T16245] CPU: 0 PID: 16245 Comm: syz-executor.0 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 537.150698][T16245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 537.160593][T16245] Call Trace: [ 537.163716][T16245] [ 537.166491][T16245] dump_stack_lvl+0x151/0x1b7 [ 537.171009][T16245] ? bfq_pos_tree_add_move+0x43e/0x43e [ 537.176305][T16245] dump_stack+0x15/0x17 [ 537.180291][T16245] should_fail+0x3c0/0x510 [ 537.184543][T16245] ? kvmalloc_node+0x82/0x130 [ 537.189054][T16245] __should_failslab+0x9f/0xe0 [ 537.193672][T16245] should_failslab+0x9/0x20 [ 537.197992][T16245] __kmalloc+0x6d/0x350 [ 537.201995][T16245] ? __kasan_kmalloc+0x9/0x10 [ 537.206501][T16245] kvmalloc_node+0x82/0x130 [ 537.210929][T16245] alloc_fdtable+0xea/0x2b0 [ 537.215268][T16245] dup_fd+0x781/0xa40 [ 537.219084][T16245] ? avc_has_perm+0x16d/0x260 [ 537.223599][T16245] copy_files+0xe6/0x200 [ 537.227676][T16245] ? perf_event_attrs+0x30/0x30 [ 537.232364][T16245] ? dup_task_struct+0xa60/0xa60 [ 537.237139][T16245] ? security_task_alloc+0x132/0x150 [ 537.242265][T16245] copy_process+0x11e9/0x3250 [ 537.246774][T16245] ? check_stack_object+0x117/0x130 [ 537.251803][T16245] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 537.256756][T16245] ? copy_clone_args_from_user+0x6f0/0x790 [ 537.262394][T16245] kernel_clone+0x22d/0x990 [ 537.266733][T16245] ? dup_mmap+0xea0/0xea0 [ 537.270897][T16245] ? create_io_thread+0x1e0/0x1e0 [ 537.275759][T16245] ? file_end_write+0x1b0/0x1b0 [ 537.280618][T16245] __x64_sys_clone3+0x375/0x3a0 [ 537.285309][T16245] ? __ia32_sys_clone+0x300/0x300 [ 537.290170][T16245] ? ksys_write+0x25f/0x2c0 [ 537.294506][T16245] ? debug_smp_processor_id+0x17/0x20 [ 537.299712][T16245] do_syscall_64+0x44/0xd0 [ 537.303967][T16245] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 537.309697][T16245] RIP: 0033:0x7f12bb6a50d9 [ 537.313949][T16245] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 537.333392][T16245] RSP: 002b:00007f12ba418038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 537.341633][T16245] RAX: ffffffffffffffda RBX: 00007f12bb7c4f80 RCX: 00007f12bb6a50d9 [ 537.349451][T16245] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007f12ba418050 17:18:46 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x408) [ 537.357257][T16245] RBP: 00007f12ba4181d0 R08: 0000000000000000 R09: 0000000000000058 [ 537.365086][T16245] R10: 00007f12ba418050 R11: 0000000000000246 R12: 0000000000000058 [ 537.372883][T16245] R13: 00007ffe4d7fb38f R14: 00007f12ba418300 R15: 0000000000022000 [ 537.380694][T16245] [ 537.388938][T16241] CPU: 0 PID: 16241 Comm: syz-executor.2 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 537.399014][T16241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 537.409032][T16241] Call Trace: [ 537.412158][T16241] [ 537.414931][T16241] dump_stack_lvl+0x151/0x1b7 [ 537.419460][T16241] ? bfq_pos_tree_add_move+0x43e/0x43e [ 537.424739][T16241] dump_stack+0x15/0x17 [ 537.428733][T16241] should_fail+0x3c0/0x510 [ 537.432983][T16241] ? kvmalloc_node+0x82/0x130 [ 537.437495][T16241] __should_failslab+0x9f/0xe0 [ 537.442102][T16241] should_failslab+0x9/0x20 [ 537.446430][T16241] __kmalloc+0x6d/0x350 [ 537.450426][T16241] ? __kasan_kmalloc+0x9/0x10 [ 537.454939][T16241] kvmalloc_node+0x82/0x130 [ 537.459282][T16241] alloc_fdtable+0xea/0x2b0 [ 537.463616][T16241] dup_fd+0x781/0xa40 [ 537.467523][T16241] ? avc_has_perm+0x16d/0x260 [ 537.472037][T16241] copy_files+0xe6/0x200 [ 537.476121][T16241] ? perf_event_attrs+0x30/0x30 [ 537.480802][T16241] ? dup_task_struct+0xa60/0xa60 [ 537.485574][T16241] ? security_task_alloc+0x132/0x150 [ 537.490695][T16241] copy_process+0x11e9/0x3250 [ 537.495210][T16241] ? check_stack_object+0x117/0x130 [ 537.500243][T16241] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 537.505190][T16241] ? copy_clone_args_from_user+0x6f0/0x790 [ 537.510836][T16241] kernel_clone+0x22d/0x990 [ 537.515172][T16241] ? dup_mmap+0xea0/0xea0 [ 537.519339][T16241] ? create_io_thread+0x1e0/0x1e0 [ 537.524198][T16241] ? file_end_write+0x1b0/0x1b0 [ 537.528885][T16241] __x64_sys_clone3+0x375/0x3a0 [ 537.533572][T16241] ? __ia32_sys_clone+0x300/0x300 [ 537.538432][T16241] ? ksys_write+0x25f/0x2c0 [ 537.542794][T16241] ? debug_smp_processor_id+0x17/0x20 [ 537.547985][T16241] do_syscall_64+0x44/0xd0 [ 537.552230][T16241] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 537.557958][T16241] RIP: 0033:0x7fb8471070d9 [ 537.562212][T16241] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 537.581654][T16241] RSP: 002b:00007fb845e7a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 537.589897][T16241] RAX: ffffffffffffffda RBX: 00007fb847226f80 RCX: 00007fb8471070d9 [ 537.597711][T16241] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fb845e7a050 17:18:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xb4}, {0x0}, {&(0x7f0000002a80)=""/4096, 0xe14}], 0x3, 0x0, 0xc000000}}], 0x300, 0x0, 0x0) 17:18:47 executing program 5: syz_clone3(&(0x7f0000000800)={0x2001000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 17:18:47 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) 17:18:47 executing program 5: syz_clone3(&(0x7f0000000800)={0x2020000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 17:18:47 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 23) [ 537.605519][T16241] RBP: 00007fb845e7a1d0 R08: 0000000000000000 R09: 0000000000000058 [ 537.613330][T16241] R10: 00007fb845e7a050 R11: 0000000000000246 R12: 0000000000000058 [ 537.621144][T16241] R13: 00007ffcf73cf18f R14: 00007fb845e7a300 R15: 0000000000022000 [ 537.628963][T16241] 17:18:47 executing program 5: syz_clone3(&(0x7f0000000800)={0x8000000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 17:18:47 executing program 2: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 23) 17:18:47 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x804) 17:18:47 executing program 5: syz_clone3(&(0x7f0000000800)={0x8000001000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 17:18:47 executing program 5: syz_clone3(&(0x7f0000000800)={0x10100000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 17:18:47 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) 17:18:47 executing program 5: syz_clone3(&(0x7f0000000800)={0x201a0000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 537.714292][T16264] FAULT_INJECTION: forcing a failure. [ 537.714292][T16264] name failslab, interval 1, probability 0, space 0, times 0 [ 537.750418][T16264] CPU: 1 PID: 16264 Comm: syz-executor.2 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 537.760505][T16264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 537.770400][T16264] Call Trace: [ 537.773626][T16264] [ 537.776386][T16264] dump_stack_lvl+0x151/0x1b7 [ 537.780905][T16264] ? bfq_pos_tree_add_move+0x43e/0x43e [ 537.786195][T16264] ? _raw_spin_lock+0xa3/0x1b0 [ 537.790795][T16264] ? dup_fd+0x51f/0xa40 [ 537.794788][T16264] dump_stack+0x15/0x17 [ 537.798781][T16264] should_fail+0x3c0/0x510 [ 537.803035][T16264] __should_failslab+0x9f/0xe0 [ 537.807629][T16264] should_failslab+0x9/0x20 [ 537.811970][T16264] kmem_cache_alloc+0x4f/0x2f0 [ 537.816572][T16264] ? copy_fs_struct+0x4e/0x230 [ 537.821169][T16264] copy_fs_struct+0x4e/0x230 [ 537.825596][T16264] copy_fs+0x72/0x140 [ 537.829416][T16264] copy_process+0x1214/0x3250 [ 537.833933][T16264] ? check_stack_object+0x117/0x130 [ 537.838964][T16264] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 537.843913][T16264] ? copy_clone_args_from_user+0x6f0/0x790 [ 537.849552][T16264] kernel_clone+0x22d/0x990 [ 537.853894][T16264] ? dup_mmap+0xea0/0xea0 [ 537.858057][T16264] ? create_io_thread+0x1e0/0x1e0 [ 537.862920][T16264] ? file_end_write+0x1b0/0x1b0 [ 537.867603][T16264] __x64_sys_clone3+0x375/0x3a0 [ 537.872293][T16264] ? __ia32_sys_clone+0x300/0x300 [ 537.877154][T16264] ? ksys_write+0x25f/0x2c0 [ 537.881503][T16264] ? debug_smp_processor_id+0x17/0x20 [ 537.886699][T16264] do_syscall_64+0x44/0xd0 [ 537.890953][T16264] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 537.896679][T16264] RIP: 0033:0x7fb8471070d9 [ 537.900933][T16264] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 537.920374][T16264] RSP: 002b:00007fb845e7a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 537.928620][T16264] RAX: ffffffffffffffda RBX: 00007fb847226f80 RCX: 00007fb8471070d9 [ 537.936432][T16264] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fb845e7a050 [ 537.944251][T16264] RBP: 00007fb845e7a1d0 R08: 0000000000000000 R09: 0000000000000058 [ 537.952050][T16264] R10: 00007fb845e7a050 R11: 0000000000000246 R12: 0000000000000058 [ 537.959864][T16264] R13: 00007ffcf73cf18f R14: 00007fb845e7a300 R15: 0000000000022000 [ 537.967716][T16264] 17:18:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xb4}, {0x0}, {&(0x7f0000002a80)=""/4096, 0xe14}], 0x3, 0x0, 0x10000000}}], 0x300, 0x0, 0x0) 17:18:47 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0xa00) 17:18:47 executing program 5: syz_clone3(&(0x7f0000000800)={0x2040293a550000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 17:18:47 executing program 2: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 24) [ 538.488851][T16280] FAULT_INJECTION: forcing a failure. [ 538.488851][T16280] name failslab, interval 1, probability 0, space 0, times 0 [ 538.501543][T16280] CPU: 0 PID: 16280 Comm: syz-executor.2 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 538.511609][T16280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 538.521502][T16280] Call Trace: [ 538.524621][T16280] [ 538.527399][T16280] dump_stack_lvl+0x151/0x1b7 [ 538.531914][T16280] ? bfq_pos_tree_add_move+0x43e/0x43e [ 538.537216][T16280] dump_stack+0x15/0x17 [ 538.541202][T16280] should_fail+0x3c0/0x510 [ 538.545599][T16280] __should_failslab+0x9f/0xe0 [ 538.550194][T16280] should_failslab+0x9/0x20 [ 538.554636][T16280] kmem_cache_alloc+0x4f/0x2f0 [ 538.559236][T16280] ? vm_area_dup+0x26/0x1d0 [ 538.563571][T16280] vm_area_dup+0x26/0x1d0 [ 538.567738][T16280] dup_mmap+0x6b8/0xea0 [ 538.571730][T16280] ? __delayed_free_task+0x20/0x20 [ 538.576677][T16280] ? mm_init+0x807/0x960 [ 538.580756][T16280] dup_mm+0x91/0x330 [ 538.584488][T16280] copy_mm+0x108/0x1b0 [ 538.588393][T16280] copy_process+0x1295/0x3250 [ 538.592906][T16280] ? check_stack_object+0x117/0x130 [ 538.597942][T16280] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 538.602912][T16280] ? copy_clone_args_from_user+0x6f0/0x790 [ 538.608537][T16280] kernel_clone+0x22d/0x990 [ 538.612870][T16280] ? dup_mmap+0xea0/0xea0 [ 538.617042][T16280] ? create_io_thread+0x1e0/0x1e0 [ 538.621893][T16280] ? file_end_write+0x1b0/0x1b0 [ 538.626581][T16280] __x64_sys_clone3+0x375/0x3a0 [ 538.631269][T16280] ? __ia32_sys_clone+0x300/0x300 [ 538.636128][T16280] ? ksys_write+0x25f/0x2c0 [ 538.640470][T16280] ? debug_smp_processor_id+0x17/0x20 [ 538.645674][T16280] do_syscall_64+0x44/0xd0 [ 538.649928][T16280] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 538.655656][T16280] RIP: 0033:0x7fb8471070d9 [ 538.659911][T16280] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 538.679350][T16280] RSP: 002b:00007fb845e7a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 538.687692][T16280] RAX: ffffffffffffffda RBX: 00007fb847226f80 RCX: 00007fb8471070d9 [ 538.695491][T16280] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fb845e7a050 [ 538.703305][T16280] RBP: 00007fb845e7a1d0 R08: 0000000000000000 R09: 0000000000000058 [ 538.711118][T16280] R10: 00007fb845e7a050 R11: 0000000000000246 R12: 0000000000000058 [ 538.718925][T16280] R13: 00007ffcf73cf18f R14: 00007fb845e7a300 R15: 0000000000022000 [ 538.726746][T16280] [ 538.736221][ T1289] device bridge_slave_1 left promiscuous mode [ 538.742949][ T1289] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.750365][ T1289] device bridge_slave_0 left promiscuous mode [ 538.756277][ T1289] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.764056][ T1289] device veth1_macvtap left promiscuous mode [ 538.769966][ T1289] device veth0_vlan left promiscuous mode [ 539.384150][T16285] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.391011][T16285] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.398317][T16285] device bridge_slave_0 entered promiscuous mode [ 539.404962][T16285] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.411833][T16285] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.418950][T16285] device bridge_slave_1 entered promiscuous mode [ 539.454688][T16285] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.461558][T16285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 539.468646][T16285] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.475426][T16285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 539.493386][ T5994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 539.500853][ T5994] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.508716][ T5994] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.518235][ T5965] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 539.526154][ T5965] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.532917][ T5965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 539.541317][ T5995] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 539.549293][ T5995] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.556110][ T5995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 539.574742][T16285] device veth0_vlan entered promiscuous mode [ 539.582402][ T5994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 539.590706][ T5994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 539.598602][ T5994] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 539.605756][ T5994] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 539.613258][ T5994] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 539.621371][ T5994] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 539.634116][T16285] device veth1_macvtap entered promiscuous mode [ 539.641215][ T5985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 539.654949][ T5965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 539.663292][ T5965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 539.681960][T16290] FAULT_INJECTION: forcing a failure. [ 539.681960][T16290] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 539.695316][T16290] CPU: 0 PID: 16290 Comm: syz-executor.0 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 539.705365][T16290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 539.715255][T16290] Call Trace: [ 539.718381][T16290] [ 539.721156][T16290] dump_stack_lvl+0x151/0x1b7 [ 539.725678][T16290] ? bfq_pos_tree_add_move+0x43e/0x43e [ 539.730965][T16290] ? __kasan_check_write+0x14/0x20 [ 539.735917][T16290] ? __set_page_owner+0x2ee/0x310 [ 539.740777][T16290] dump_stack+0x15/0x17 [ 539.744771][T16290] should_fail+0x3c0/0x510 [ 539.749183][T16290] should_fail_alloc_page+0x58/0x70 [ 539.754205][T16290] __alloc_pages+0x1de/0x7c0 [ 539.758650][T16290] ? __count_vm_events+0x30/0x30 [ 539.763455][T16290] ? __count_vm_events+0x30/0x30 [ 539.768175][T16290] ? __kasan_check_write+0x14/0x20 [ 539.773123][T16290] ? _raw_spin_lock+0xa3/0x1b0 [ 539.777725][T16290] __pmd_alloc+0xb1/0x550 [ 539.781890][T16290] ? kmem_cache_alloc+0x189/0x2f0 [ 539.786749][T16290] ? anon_vma_fork+0x1b9/0x4f0 [ 539.791349][T16290] ? __pud_alloc+0x260/0x260 [ 539.795776][T16290] ? __pud_alloc+0x218/0x260 [ 539.800202][T16290] ? do_handle_mm_fault+0x2370/0x2370 [ 539.805411][T16290] copy_page_range+0xd04/0x1090 [ 539.810102][T16290] ? pfn_valid+0x1e0/0x1e0 [ 539.814350][T16290] dup_mmap+0x99f/0xea0 [ 539.818344][T16290] ? __delayed_free_task+0x20/0x20 [ 539.823288][T16290] ? mm_init+0x807/0x960 [ 539.827371][T16290] dup_mm+0x91/0x330 [ 539.831100][T16290] copy_mm+0x108/0x1b0 [ 539.835005][T16290] copy_process+0x1295/0x3250 [ 539.839520][T16290] ? check_stack_object+0x117/0x130 [ 539.844555][T16290] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 539.849499][T16290] ? copy_clone_args_from_user+0x6f0/0x790 [ 539.855228][T16290] kernel_clone+0x22d/0x990 [ 539.859567][T16290] ? dup_mmap+0xea0/0xea0 [ 539.863733][T16290] ? create_io_thread+0x1e0/0x1e0 [ 539.868593][T16290] ? file_end_write+0x1b0/0x1b0 [ 539.873281][T16290] __x64_sys_clone3+0x375/0x3a0 [ 539.877968][T16290] ? __ia32_sys_clone+0x300/0x300 [ 539.882829][T16290] ? ksys_write+0x25f/0x2c0 [ 539.887169][T16290] ? debug_smp_processor_id+0x17/0x20 [ 539.892471][T16290] do_syscall_64+0x44/0xd0 [ 539.896714][T16290] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 539.902441][T16290] RIP: 0033:0x7fa07a6ec0d9 [ 539.906696][T16290] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 539.926141][T16290] RSP: 002b:00007fa07945f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 539.934380][T16290] RAX: ffffffffffffffda RBX: 00007fa07a80bf80 RCX: 00007fa07a6ec0d9 [ 539.942191][T16290] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fa07945f050 17:18:49 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 24) 17:18:49 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) 17:18:49 executing program 5: syz_clone3(&(0x7f0000000800)={0xf0a12bbd290000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 17:18:49 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0xdb1) 17:18:49 executing program 2: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 25) 17:18:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xb4}, {0x0}, {&(0x7f0000002a80)=""/4096, 0xe14}], 0x3, 0x0, 0x14000000}}], 0x300, 0x0, 0x0) 17:18:49 executing program 5: syz_clone3(&(0x7f0000000800)={0xf0e10b1b000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 539.950005][T16290] RBP: 00007fa07945f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 539.957815][T16290] R10: 00007fa07945f050 R11: 0000000000000246 R12: 0000000000000058 [ 539.965625][T16290] R13: 00007ffd55a8aedf R14: 00007fa07945f300 R15: 0000000000022000 [ 539.973443][T16290] [ 539.990203][T16296] FAULT_INJECTION: forcing a failure. [ 539.990203][T16296] name failslab, interval 1, probability 0, space 0, times 0 [ 540.015061][T16296] CPU: 0 PID: 16296 Comm: syz-executor.2 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 540.025140][T16296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 540.035038][T16296] Call Trace: [ 540.038163][T16296] [ 540.040941][T16296] dump_stack_lvl+0x151/0x1b7 [ 540.043261][T16305] FAULT_INJECTION: forcing a failure. [ 540.043261][T16305] name failslab, interval 1, probability 0, space 0, times 0 [ 540.045448][T16296] ? bfq_pos_tree_add_move+0x43e/0x43e [ 540.063158][T16296] dump_stack+0x15/0x17 [ 540.067149][T16296] should_fail+0x3c0/0x510 [ 540.071399][T16296] __should_failslab+0x9f/0xe0 [ 540.075997][T16296] should_failslab+0x9/0x20 [ 540.080337][T16296] kmem_cache_alloc+0x4f/0x2f0 [ 540.084936][T16296] ? copy_sighand+0x54/0x250 [ 540.089362][T16296] ? _raw_spin_unlock+0x4d/0x70 [ 540.094049][T16296] copy_sighand+0x54/0x250 [ 540.098306][T16296] copy_process+0x123f/0x3250 [ 540.102822][T16296] ? check_stack_object+0x117/0x130 [ 540.107849][T16296] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 540.112799][T16296] ? copy_clone_args_from_user+0x6f0/0x790 [ 540.118440][T16296] kernel_clone+0x22d/0x990 [ 540.122776][T16296] ? dup_mmap+0xea0/0xea0 [ 540.126943][T16296] ? create_io_thread+0x1e0/0x1e0 [ 540.131807][T16296] ? file_end_write+0x1b0/0x1b0 [ 540.136493][T16296] __x64_sys_clone3+0x375/0x3a0 [ 540.141187][T16296] ? __ia32_sys_clone+0x300/0x300 [ 540.146040][T16296] ? ksys_write+0x25f/0x2c0 [ 540.150378][T16296] ? debug_smp_processor_id+0x17/0x20 [ 540.155585][T16296] do_syscall_64+0x44/0xd0 [ 540.159836][T16296] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 540.165566][T16296] RIP: 0033:0x7fb8471070d9 [ 540.169833][T16296] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 540.189259][T16296] RSP: 002b:00007fb845e7a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 540.197521][T16296] RAX: ffffffffffffffda RBX: 00007fb847226f80 RCX: 00007fb8471070d9 [ 540.205314][T16296] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fb845e7a050 17:18:49 executing program 5: syz_clone3(&(0x7f0000000800)={0xf0ff1f00000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 17:18:49 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) [ 540.213125][T16296] RBP: 00007fb845e7a1d0 R08: 0000000000000000 R09: 0000000000000058 [ 540.220939][T16296] R10: 00007fb845e7a050 R11: 0000000000000246 R12: 0000000000000058 [ 540.228750][T16296] R13: 00007ffcf73cf18f R14: 00007fb845e7a300 R15: 0000000000022000 [ 540.236562][T16296] [ 540.239427][T16305] CPU: 1 PID: 16305 Comm: syz-executor.0 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 540.249495][T16305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 540.259393][T16305] Call Trace: [ 540.262516][T16305] 17:18:49 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x11f0) 17:18:49 executing program 5: syz_clone3(&(0x7f0000000800)={0x100000000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 540.265294][T16305] dump_stack_lvl+0x151/0x1b7 [ 540.269805][T16305] ? bfq_pos_tree_add_move+0x43e/0x43e [ 540.275101][T16305] dump_stack+0x15/0x17 [ 540.279093][T16305] should_fail+0x3c0/0x510 [ 540.283342][T16305] __should_failslab+0x9f/0xe0 [ 540.287948][T16305] should_failslab+0x9/0x20 [ 540.292285][T16305] kmem_cache_alloc+0x4f/0x2f0 [ 540.296886][T16305] ? vm_area_dup+0x26/0x1d0 [ 540.301226][T16305] vm_area_dup+0x26/0x1d0 [ 540.305389][T16305] dup_mmap+0x6b8/0xea0 [ 540.309387][T16305] ? __delayed_free_task+0x20/0x20 [ 540.314324][T16305] ? mm_init+0x807/0x960 [ 540.318403][T16305] dup_mm+0x91/0x330 [ 540.322136][T16305] copy_mm+0x108/0x1b0 [ 540.326040][T16305] copy_process+0x1295/0x3250 [ 540.330556][T16305] ? check_stack_object+0x117/0x130 [ 540.335590][T16305] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 540.340538][T16305] ? copy_clone_args_from_user+0x6f0/0x790 [ 540.346177][T16305] kernel_clone+0x22d/0x990 [ 540.350518][T16305] ? dup_mmap+0xea0/0xea0 [ 540.354682][T16305] ? create_io_thread+0x1e0/0x1e0 [ 540.359543][T16305] ? file_end_write+0x1b0/0x1b0 [ 540.364238][T16305] __x64_sys_clone3+0x375/0x3a0 [ 540.368918][T16305] ? __ia32_sys_clone+0x300/0x300 [ 540.373780][T16305] ? ksys_write+0x25f/0x2c0 [ 540.378121][T16305] ? debug_smp_processor_id+0x17/0x20 [ 540.383325][T16305] do_syscall_64+0x44/0xd0 [ 540.387581][T16305] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 540.393307][T16305] RIP: 0033:0x7fa07a6ec0d9 [ 540.397564][T16305] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 17:18:49 executing program 2: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 26) 17:18:49 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 25) [ 540.417002][T16305] RSP: 002b:00007fa07945f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 540.425243][T16305] RAX: ffffffffffffffda RBX: 00007fa07a80bf80 RCX: 00007fa07a6ec0d9 [ 540.433055][T16305] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fa07945f050 [ 540.440872][T16305] RBP: 00007fa07945f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 540.448677][T16305] R10: 00007fa07945f050 R11: 0000000000000246 R12: 0000000000000058 [ 540.456512][T16305] R13: 00007ffd55a8aedf R14: 00007fa07945f300 R15: 0000000000022000 [ 540.464304][T16305] [ 540.498418][T16317] FAULT_INJECTION: forcing a failure. [ 540.498418][T16317] name failslab, interval 1, probability 0, space 0, times 0 [ 540.503956][T16316] FAULT_INJECTION: forcing a failure. [ 540.503956][T16316] name failslab, interval 1, probability 0, space 0, times 0 [ 540.515044][T16317] CPU: 0 PID: 16317 Comm: syz-executor.2 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 540.533434][T16317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 540.543326][T16317] Call Trace: [ 540.546458][T16317] [ 540.549231][T16317] dump_stack_lvl+0x151/0x1b7 [ 540.553741][T16317] ? bfq_pos_tree_add_move+0x43e/0x43e [ 540.559039][T16317] dump_stack+0x15/0x17 [ 540.563034][T16317] should_fail+0x3c0/0x510 [ 540.567282][T16317] __should_failslab+0x9f/0xe0 [ 540.571880][T16317] should_failslab+0x9/0x20 [ 540.576219][T16317] kmem_cache_alloc+0x4f/0x2f0 [ 540.580822][T16317] ? copy_signal+0x55/0x610 [ 540.585159][T16317] copy_signal+0x55/0x610 [ 540.589326][T16317] copy_process+0x126a/0x3250 [ 540.593842][T16317] ? check_stack_object+0x117/0x130 [ 540.598872][T16317] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 540.603820][T16317] ? copy_clone_args_from_user+0x6f0/0x790 [ 540.609461][T16317] kernel_clone+0x22d/0x990 [ 540.613826][T16317] ? dup_mmap+0xea0/0xea0 [ 540.617968][T16317] ? create_io_thread+0x1e0/0x1e0 [ 540.622825][T16317] ? file_end_write+0x1b0/0x1b0 [ 540.627516][T16317] __x64_sys_clone3+0x375/0x3a0 [ 540.632200][T16317] ? __ia32_sys_clone+0x300/0x300 [ 540.637060][T16317] ? ksys_write+0x25f/0x2c0 [ 540.641402][T16317] ? debug_smp_processor_id+0x17/0x20 [ 540.646607][T16317] do_syscall_64+0x44/0xd0 [ 540.650860][T16317] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 540.656591][T16317] RIP: 0033:0x7fb8471070d9 [ 540.660844][T16317] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 540.680283][T16317] RSP: 002b:00007fb845e7a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 540.688527][T16317] RAX: ffffffffffffffda RBX: 00007fb847226f80 RCX: 00007fb8471070d9 17:18:50 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x12a8) 17:18:50 executing program 5: syz_clone3(&(0x7f0000000800)={0x200000000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 540.696347][T16317] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fb845e7a050 [ 540.704155][T16317] RBP: 00007fb845e7a1d0 R08: 0000000000000000 R09: 0000000000000058 [ 540.712048][T16317] R10: 00007fb845e7a050 R11: 0000000000000246 R12: 0000000000000058 [ 540.719943][T16317] R13: 00007ffcf73cf18f R14: 00007fb845e7a300 R15: 0000000000022000 [ 540.727761][T16317] [ 540.730624][T16316] CPU: 1 PID: 16316 Comm: syz-executor.0 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 540.740776][T16316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 540.750674][T16316] Call Trace: [ 540.753799][T16316] [ 540.756572][T16316] dump_stack_lvl+0x151/0x1b7 [ 540.761085][T16316] ? bfq_pos_tree_add_move+0x43e/0x43e [ 540.766378][T16316] dump_stack+0x15/0x17 [ 540.770373][T16316] should_fail+0x3c0/0x510 [ 540.774624][T16316] __should_failslab+0x9f/0xe0 [ 540.779223][T16316] should_failslab+0x9/0x20 [ 540.783562][T16316] kmem_cache_alloc+0x4f/0x2f0 [ 540.788165][T16316] ? copy_sighand+0x54/0x250 [ 540.792592][T16316] ? _raw_spin_unlock+0x4d/0x70 [ 540.797278][T16316] copy_sighand+0x54/0x250 [ 540.801529][T16316] copy_process+0x123f/0x3250 [ 540.806041][T16316] ? check_stack_object+0x117/0x130 [ 540.811074][T16316] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 540.816021][T16316] ? copy_clone_args_from_user+0x6f0/0x790 [ 540.821665][T16316] kernel_clone+0x22d/0x990 [ 540.826005][T16316] ? dup_mmap+0xea0/0xea0 [ 540.830179][T16316] ? create_io_thread+0x1e0/0x1e0 [ 540.835029][T16316] ? file_end_write+0x1b0/0x1b0 [ 540.839716][T16316] __x64_sys_clone3+0x375/0x3a0 [ 540.844406][T16316] ? __ia32_sys_clone+0x300/0x300 [ 540.849270][T16316] ? ksys_write+0x25f/0x2c0 [ 540.853609][T16316] ? debug_smp_processor_id+0x17/0x20 [ 540.858937][T16316] do_syscall_64+0x44/0xd0 [ 540.863186][T16316] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 540.868923][T16316] RIP: 0033:0x7fa07a6ec0d9 [ 540.873167][T16316] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 17:18:50 executing program 2: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 27) 17:18:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xb4}, {0x0}, {&(0x7f0000002a80)=""/4096, 0xe14}], 0x3, 0x0, 0x140b0000}}], 0x300, 0x0, 0x0) [ 540.892620][T16316] RSP: 002b:00007fa07945f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 540.900872][T16316] RAX: ffffffffffffffda RBX: 00007fa07a80bf80 RCX: 00007fa07a6ec0d9 [ 540.908667][T16316] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fa07945f050 [ 540.916477][T16316] RBP: 00007fa07945f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 540.924295][T16316] R10: 00007fa07945f050 R11: 0000000000000246 R12: 0000000000000058 [ 540.932100][T16316] R13: 00007ffd55a8aedf R14: 00007fa07945f300 R15: 0000000000022000 [ 540.939912][T16316] [ 540.972714][T16325] FAULT_INJECTION: forcing a failure. [ 540.972714][T16325] name failslab, interval 1, probability 0, space 0, times 0 [ 540.975134][T16327] __nla_validate_parse: 125 callbacks suppressed [ 540.975152][T16327] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 540.985567][T16325] CPU: 1 PID: 16325 Comm: syz-executor.2 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 541.010713][T16325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 541.020607][T16325] Call Trace: [ 541.023728][T16325] [ 541.026509][T16325] dump_stack_lvl+0x151/0x1b7 [ 541.031021][T16325] ? bfq_pos_tree_add_move+0x43e/0x43e [ 541.036314][T16325] dump_stack+0x15/0x17 [ 541.040307][T16325] should_fail+0x3c0/0x510 [ 541.044569][T16325] __should_failslab+0x9f/0xe0 [ 541.049160][T16325] should_failslab+0x9/0x20 [ 541.053500][T16325] kmem_cache_alloc+0x4f/0x2f0 [ 541.058097][T16325] ? dup_mm+0x29/0x330 [ 541.062004][T16325] dup_mm+0x29/0x330 [ 541.065736][T16325] copy_mm+0x108/0x1b0 [ 541.069642][T16325] copy_process+0x1295/0x3250 [ 541.074158][T16325] ? check_stack_object+0x117/0x130 [ 541.079190][T16325] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 541.084135][T16325] ? copy_clone_args_from_user+0x6f0/0x790 [ 541.089785][T16325] kernel_clone+0x22d/0x990 [ 541.094118][T16325] ? dup_mmap+0xea0/0xea0 [ 541.098283][T16325] ? create_io_thread+0x1e0/0x1e0 [ 541.103143][T16325] ? file_end_write+0x1b0/0x1b0 [ 541.107833][T16325] __x64_sys_clone3+0x375/0x3a0 [ 541.112519][T16325] ? __ia32_sys_clone+0x300/0x300 [ 541.117376][T16325] ? ksys_write+0x25f/0x2c0 [ 541.121717][T16325] ? debug_smp_processor_id+0x17/0x20 [ 541.126924][T16325] do_syscall_64+0x44/0xd0 [ 541.131177][T16325] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 541.136903][T16325] RIP: 0033:0x7fb8471070d9 [ 541.141157][T16325] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 541.160686][T16325] RSP: 002b:00007fb845e7a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 17:18:50 executing program 5: syz_clone3(&(0x7f0000000800)={0x700000000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 17:18:50 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 26) 17:18:50 executing program 2: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 28) [ 541.168930][T16325] RAX: ffffffffffffffda RBX: 00007fb847226f80 RCX: 00007fb8471070d9 [ 541.176743][T16325] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fb845e7a050 [ 541.184552][T16325] RBP: 00007fb845e7a1d0 R08: 0000000000000000 R09: 0000000000000058 [ 541.192363][T16325] R10: 00007fb845e7a050 R11: 0000000000000246 R12: 0000000000000058 [ 541.200260][T16325] R13: 00007ffcf73cf18f R14: 00007fb845e7a300 R15: 0000000000022000 [ 541.208075][T16325] [ 541.214764][T16327] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 17:18:50 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) 17:18:50 executing program 5: syz_clone3(&(0x7f0000000800)={0x800000000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 541.242125][T16334] FAULT_INJECTION: forcing a failure. [ 541.242125][T16334] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 541.255584][T16335] FAULT_INJECTION: forcing a failure. [ 541.255584][T16335] name failslab, interval 1, probability 0, space 0, times 0 [ 541.263745][T16329] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 541.275459][T16334] CPU: 0 PID: 16334 Comm: syz-executor.2 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 541.287188][T16334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 541.297084][T16334] Call Trace: [ 541.300207][T16334] [ 541.302985][T16334] dump_stack_lvl+0x151/0x1b7 [ 541.307498][T16334] ? bfq_pos_tree_add_move+0x43e/0x43e [ 541.311398][T16329] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 541.312786][T16334] ? pcpu_block_update_hint_alloc+0x972/0xd00 [ 541.312820][T16334] dump_stack+0x15/0x17 [ 541.329925][T16329] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 541.331793][T16334] should_fail+0x3c0/0x510 [ 541.331819][T16334] should_fail_alloc_page+0x58/0x70 [ 541.347867][T16329] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 541.350311][T16334] __alloc_pages+0x1de/0x7c0 [ 541.350340][T16334] ? __count_vm_events+0x30/0x30 [ 541.359781][T16329] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 541.363950][T16334] __get_free_pages+0xe/0x30 [ 541.363980][T16334] pgd_alloc+0x22/0x2c0 [ 541.363998][T16334] mm_init+0x5bf/0x960 [ 541.368977][T16329] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 541.377836][T16334] dup_mm+0x7d/0x330 [ 541.377865][T16334] copy_mm+0x108/0x1b0 [ 541.377880][T16334] copy_process+0x1295/0x3250 [ 541.377897][T16334] ? check_stack_object+0x117/0x130 [ 541.382445][T16329] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 541.386257][T16334] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 541.386284][T16334] ? copy_clone_args_from_user+0x6f0/0x790 [ 541.386303][T16334] kernel_clone+0x22d/0x990 [ 541.390412][T16329] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 541.399269][T16334] ? dup_mmap+0xea0/0xea0 [ 541.399297][T16334] ? create_io_thread+0x1e0/0x1e0 [ 541.399313][T16334] ? file_end_write+0x1b0/0x1b0 [ 541.463421][T16334] __x64_sys_clone3+0x375/0x3a0 [ 541.468097][T16334] ? __ia32_sys_clone+0x300/0x300 [ 541.472955][T16334] ? ksys_write+0x25f/0x2c0 [ 541.477296][T16334] ? debug_smp_processor_id+0x17/0x20 [ 541.482506][T16334] do_syscall_64+0x44/0xd0 [ 541.486757][T16334] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 541.492483][T16334] RIP: 0033:0x7fb8471070d9 [ 541.496737][T16334] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 541.516179][T16334] RSP: 002b:00007fb845e7a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 541.524424][T16334] RAX: ffffffffffffffda RBX: 00007fb847226f80 RCX: 00007fb8471070d9 [ 541.532592][T16334] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fb845e7a050 17:18:50 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) 17:18:50 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x141b) 17:18:51 executing program 2: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 29) 17:18:51 executing program 5: syz_clone3(&(0x7f0000000800)={0x900000000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 541.540406][T16334] RBP: 00007fb845e7a1d0 R08: 0000000000000000 R09: 0000000000000058 [ 541.548224][T16334] R10: 00007fb845e7a050 R11: 0000000000000246 R12: 0000000000000058 [ 541.556025][T16334] R13: 00007ffcf73cf18f R14: 00007fb845e7a300 R15: 0000000000022000 [ 541.563840][T16334] [ 541.566701][T16335] CPU: 1 PID: 16335 Comm: syz-executor.0 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 541.576774][T16335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 541.586680][T16335] Call Trace: [ 541.589792][T16335] [ 541.592570][T16335] dump_stack_lvl+0x151/0x1b7 [ 541.597084][T16335] ? bfq_pos_tree_add_move+0x43e/0x43e [ 541.602380][T16335] dump_stack+0x15/0x17 [ 541.606370][T16335] should_fail+0x3c0/0x510 [ 541.607454][T16345] FAULT_INJECTION: forcing a failure. [ 541.607454][T16345] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 541.610619][T16335] __should_failslab+0x9f/0xe0 [ 541.610647][T16335] should_failslab+0x9/0x20 [ 541.632696][T16335] kmem_cache_alloc+0x4f/0x2f0 [ 541.637293][T16335] ? copy_signal+0x55/0x610 [ 541.641636][T16335] copy_signal+0x55/0x610 [ 541.645800][T16335] copy_process+0x126a/0x3250 [ 541.650314][T16335] ? check_stack_object+0x117/0x130 [ 541.655345][T16335] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 541.660292][T16335] ? copy_clone_args_from_user+0x6f0/0x790 [ 541.665932][T16335] kernel_clone+0x22d/0x990 [ 541.670273][T16335] ? dup_mmap+0xea0/0xea0 [ 541.674439][T16335] ? create_io_thread+0x1e0/0x1e0 [ 541.679297][T16335] ? file_end_write+0x1b0/0x1b0 [ 541.683985][T16335] __x64_sys_clone3+0x375/0x3a0 [ 541.688671][T16335] ? __ia32_sys_clone+0x300/0x300 [ 541.693531][T16335] ? ksys_write+0x25f/0x2c0 [ 541.697872][T16335] ? debug_smp_processor_id+0x17/0x20 [ 541.703078][T16335] do_syscall_64+0x44/0xd0 [ 541.707338][T16335] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 541.713062][T16335] RIP: 0033:0x7fa07a6ec0d9 [ 541.717314][T16335] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 541.736928][T16335] RSP: 002b:00007fa07945f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 541.745171][T16335] RAX: ffffffffffffffda RBX: 00007fa07a80bf80 RCX: 00007fa07a6ec0d9 [ 541.752983][T16335] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fa07945f050 [ 541.760792][T16335] RBP: 00007fa07945f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 541.768602][T16335] R10: 00007fa07945f050 R11: 0000000000000246 R12: 0000000000000058 [ 541.776421][T16335] R13: 00007ffd55a8aedf R14: 00007fa07945f300 R15: 0000000000022000 [ 541.784230][T16335] [ 541.789647][T16345] CPU: 0 PID: 16345 Comm: syz-executor.2 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 541.799714][T16345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 541.809624][T16345] Call Trace: [ 541.812738][T16345] [ 541.815505][T16345] dump_stack_lvl+0x151/0x1b7 [ 541.820023][T16345] ? bfq_pos_tree_add_move+0x43e/0x43e [ 541.825313][T16345] ? pcpu_block_update_hint_alloc+0x972/0xd00 [ 541.831212][T16345] dump_stack+0x15/0x17 [ 541.835205][T16345] should_fail+0x3c0/0x510 [ 541.839459][T16345] should_fail_alloc_page+0x58/0x70 [ 541.844494][T16345] __alloc_pages+0x1de/0x7c0 [ 541.848922][T16345] ? __count_vm_events+0x30/0x30 [ 541.853693][T16345] __get_free_pages+0xe/0x30 [ 541.858116][T16345] pgd_alloc+0x22/0x2c0 [ 541.862111][T16345] mm_init+0x5bf/0x960 [ 541.866015][T16345] dup_mm+0x7d/0x330 [ 541.869749][T16345] copy_mm+0x108/0x1b0 [ 541.873656][T16345] copy_process+0x1295/0x3250 [ 541.878169][T16345] ? check_stack_object+0x117/0x130 [ 541.883200][T16345] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 541.888149][T16345] ? copy_clone_args_from_user+0x6f0/0x790 [ 541.893792][T16345] kernel_clone+0x22d/0x990 [ 541.898127][T16345] ? dup_mmap+0xea0/0xea0 [ 541.902295][T16345] ? create_io_thread+0x1e0/0x1e0 [ 541.907236][T16345] ? file_end_write+0x1b0/0x1b0 [ 541.911930][T16345] __x64_sys_clone3+0x375/0x3a0 [ 541.916619][T16345] ? __ia32_sys_clone+0x300/0x300 [ 541.921479][T16345] ? ksys_write+0x25f/0x2c0 [ 541.925823][T16345] ? debug_smp_processor_id+0x17/0x20 [ 541.931025][T16345] do_syscall_64+0x44/0xd0 [ 541.935275][T16345] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 541.941005][T16345] RIP: 0033:0x7fb8471070d9 [ 541.945258][T16345] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 541.964696][T16345] RSP: 002b:00007fb845e7a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 541.972942][T16345] RAX: ffffffffffffffda RBX: 00007fb847226f80 RCX: 00007fb8471070d9 [ 541.980752][T16345] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fb845e7a050 17:18:51 executing program 5: syz_clone3(&(0x7f0000000800)={0x1100000000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 17:18:51 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 27) 17:18:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xb4}, {0x0}, {&(0x7f0000002a80)=""/4096, 0xe14}], 0x3, 0x0, 0x20000000}}], 0x300, 0x0, 0x0) 17:18:51 executing program 2: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 30) [ 541.988576][T16345] RBP: 00007fb845e7a1d0 R08: 0000000000000000 R09: 0000000000000058 [ 541.996376][T16345] R10: 00007fb845e7a050 R11: 0000000000000246 R12: 0000000000000058 [ 542.004186][T16345] R13: 00007ffcf73cf18f R14: 00007fb845e7a300 R15: 0000000000022000 [ 542.012000][T16345] 17:18:51 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x15cd) [ 542.044641][T16351] FAULT_INJECTION: forcing a failure. [ 542.044641][T16351] name failslab, interval 1, probability 0, space 0, times 0 [ 542.072893][T16355] FAULT_INJECTION: forcing a failure. [ 542.072893][T16355] name failslab, interval 1, probability 0, space 0, times 0 [ 542.074621][T16351] CPU: 0 PID: 16351 Comm: syz-executor.2 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 542.095472][T16351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 542.105364][T16351] Call Trace: [ 542.108481][T16351] [ 542.111273][T16351] dump_stack_lvl+0x151/0x1b7 [ 542.115777][T16351] ? bfq_pos_tree_add_move+0x43e/0x43e [ 542.121070][T16351] ? vma_interval_tree_augment_rotate+0x210/0x210 [ 542.127317][T16351] dump_stack+0x15/0x17 [ 542.131321][T16351] should_fail+0x3c0/0x510 [ 542.135560][T16351] __should_failslab+0x9f/0xe0 [ 542.140163][T16351] should_failslab+0x9/0x20 [ 542.144503][T16351] kmem_cache_alloc+0x4f/0x2f0 [ 542.149100][T16351] ? anon_vma_fork+0xf7/0x4f0 [ 542.153614][T16351] anon_vma_fork+0xf7/0x4f0 [ 542.157951][T16351] ? anon_vma_name+0x4c/0x70 [ 542.162475][T16351] dup_mmap+0x750/0xea0 [ 542.166468][T16351] ? __delayed_free_task+0x20/0x20 [ 542.171517][T16351] ? mm_init+0x807/0x960 [ 542.175578][T16351] dup_mm+0x91/0x330 [ 542.179311][T16351] copy_mm+0x108/0x1b0 [ 542.183231][T16351] copy_process+0x1295/0x3250 [ 542.187731][T16351] ? check_stack_object+0x117/0x130 [ 542.192763][T16351] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 542.197711][T16351] ? copy_clone_args_from_user+0x6f0/0x790 [ 542.203352][T16351] kernel_clone+0x22d/0x990 [ 542.207692][T16351] ? dup_mmap+0xea0/0xea0 [ 542.211857][T16351] ? create_io_thread+0x1e0/0x1e0 [ 542.216718][T16351] ? file_end_write+0x1b0/0x1b0 [ 542.221407][T16351] __x64_sys_clone3+0x375/0x3a0 [ 542.226092][T16351] ? __ia32_sys_clone+0x300/0x300 [ 542.230954][T16351] ? ksys_write+0x25f/0x2c0 [ 542.235292][T16351] ? debug_smp_processor_id+0x17/0x20 [ 542.240500][T16351] do_syscall_64+0x44/0xd0 [ 542.244749][T16351] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 542.250486][T16351] RIP: 0033:0x7fb8471070d9 [ 542.254735][T16351] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 542.274172][T16351] RSP: 002b:00007fb845e7a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 542.282417][T16351] RAX: ffffffffffffffda RBX: 00007fb847226f80 RCX: 00007fb8471070d9 17:18:51 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) 17:18:51 executing program 5: syz_clone3(&(0x7f0000000800)={0x1f00000000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 542.290230][T16351] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fb845e7a050 [ 542.298057][T16351] RBP: 00007fb845e7a1d0 R08: 0000000000000000 R09: 0000000000000058 [ 542.305851][T16351] R10: 00007fb845e7a050 R11: 0000000000000246 R12: 0000000000000058 [ 542.313670][T16351] R13: 00007ffcf73cf18f R14: 00007fb845e7a300 R15: 0000000000022000 [ 542.322002][T16351] [ 542.324861][T16355] CPU: 1 PID: 16355 Comm: syz-executor.0 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 542.334931][T16355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 17:18:51 executing program 5: syz_clone3(&(0x7f0000000800)={0x2000000000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 542.344824][T16355] Call Trace: [ 542.347951][T16355] [ 542.350729][T16355] dump_stack_lvl+0x151/0x1b7 [ 542.355239][T16355] ? bfq_pos_tree_add_move+0x43e/0x43e [ 542.360531][T16355] ? do_syscall_64+0x44/0xd0 [ 542.364956][T16355] dump_stack+0x15/0x17 [ 542.368947][T16355] should_fail+0x3c0/0x510 [ 542.373199][T16355] __should_failslab+0x9f/0xe0 [ 542.377804][T16355] should_failslab+0x9/0x20 [ 542.382338][T16355] kmem_cache_alloc+0x4f/0x2f0 [ 542.386912][T16355] ? anon_vma_clone+0xa1/0x4f0 [ 542.391520][T16355] anon_vma_clone+0xa1/0x4f0 [ 542.395944][T16355] anon_vma_fork+0x91/0x4f0 [ 542.400284][T16355] ? anon_vma_name+0x4c/0x70 [ 542.404710][T16355] dup_mmap+0x750/0xea0 [ 542.408699][T16355] ? __delayed_free_task+0x20/0x20 [ 542.413645][T16355] ? mm_init+0x807/0x960 [ 542.417724][T16355] dup_mm+0x91/0x330 [ 542.421457][T16355] copy_mm+0x108/0x1b0 [ 542.425448][T16355] copy_process+0x1295/0x3250 [ 542.429966][T16355] ? check_stack_object+0x117/0x130 [ 542.434996][T16355] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 542.439943][T16355] ? copy_clone_args_from_user+0x6f0/0x790 [ 542.445588][T16355] kernel_clone+0x22d/0x990 [ 542.449923][T16355] ? dup_mmap+0xea0/0xea0 [ 542.454090][T16355] ? create_io_thread+0x1e0/0x1e0 [ 542.458950][T16355] ? file_end_write+0x1b0/0x1b0 [ 542.463638][T16355] __x64_sys_clone3+0x375/0x3a0 [ 542.468324][T16355] ? __ia32_sys_clone+0x300/0x300 [ 542.473183][T16355] ? ksys_write+0x25f/0x2c0 [ 542.477526][T16355] ? debug_smp_processor_id+0x17/0x20 [ 542.482731][T16355] do_syscall_64+0x44/0xd0 [ 542.486987][T16355] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 542.492712][T16355] RIP: 0033:0x7fa07a6ec0d9 [ 542.496965][T16355] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 542.516409][T16355] RSP: 002b:00007fa07945f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 542.524657][T16355] RAX: ffffffffffffffda RBX: 00007fa07a80bf80 RCX: 00007fa07a6ec0d9 [ 542.532470][T16355] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fa07945f050 17:18:51 executing program 2: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 31) 17:18:52 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 28) [ 542.540457][T16355] RBP: 00007fa07945f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 542.548269][T16355] R10: 00007fa07945f050 R11: 0000000000000246 R12: 0000000000000058 [ 542.556078][T16355] R13: 00007ffd55a8aedf R14: 00007fa07945f300 R15: 0000000000022000 [ 542.563892][T16355] 17:18:52 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) [ 542.596934][T16369] FAULT_INJECTION: forcing a failure. [ 542.596934][T16369] name failslab, interval 1, probability 0, space 0, times 0 [ 542.603654][T16372] FAULT_INJECTION: forcing a failure. [ 542.603654][T16372] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 542.611169][T16369] CPU: 0 PID: 16369 Comm: syz-executor.2 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 542.632526][T16369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 542.642422][T16369] Call Trace: [ 542.645542][T16369] [ 542.648320][T16369] dump_stack_lvl+0x151/0x1b7 [ 542.652832][T16369] ? bfq_pos_tree_add_move+0x43e/0x43e [ 542.658126][T16369] dump_stack+0x15/0x17 [ 542.662117][T16369] should_fail+0x3c0/0x510 [ 542.666374][T16369] __should_failslab+0x9f/0xe0 [ 542.670970][T16369] should_failslab+0x9/0x20 [ 542.675310][T16369] kmem_cache_alloc+0x4f/0x2f0 [ 542.679911][T16369] ? vm_area_dup+0x26/0x1d0 [ 542.684251][T16369] ? __kasan_check_read+0x11/0x20 [ 542.689113][T16369] vm_area_dup+0x26/0x1d0 [ 542.693289][T16369] dup_mmap+0x6b8/0xea0 [ 542.697284][T16369] ? __delayed_free_task+0x20/0x20 [ 542.702216][T16369] ? mm_init+0x807/0x960 [ 542.706294][T16369] dup_mm+0x91/0x330 [ 542.710027][T16369] copy_mm+0x108/0x1b0 [ 542.713933][T16369] copy_process+0x1295/0x3250 [ 542.718448][T16369] ? check_stack_object+0x117/0x130 [ 542.723480][T16369] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 542.728429][T16369] ? copy_clone_args_from_user+0x6f0/0x790 [ 542.734072][T16369] kernel_clone+0x22d/0x990 [ 542.738406][T16369] ? dup_mmap+0xea0/0xea0 [ 542.742576][T16369] ? create_io_thread+0x1e0/0x1e0 [ 542.747434][T16369] ? file_end_write+0x1b0/0x1b0 [ 542.752119][T16369] __x64_sys_clone3+0x375/0x3a0 [ 542.756808][T16369] ? __ia32_sys_clone+0x300/0x300 [ 542.761668][T16369] ? ksys_write+0x25f/0x2c0 [ 542.766007][T16369] ? debug_smp_processor_id+0x17/0x20 [ 542.771219][T16369] do_syscall_64+0x44/0xd0 [ 542.775467][T16369] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 542.781197][T16369] RIP: 0033:0x7fb8471070d9 [ 542.785451][T16369] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 542.804887][T16369] RSP: 002b:00007fb845e7a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 542.813135][T16369] RAX: ffffffffffffffda RBX: 00007fb847226f80 RCX: 00007fb8471070d9 [ 542.820954][T16369] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fb845e7a050 [ 542.828758][T16369] RBP: 00007fb845e7a1d0 R08: 0000000000000000 R09: 0000000000000058 [ 542.836571][T16369] R10: 00007fb845e7a050 R11: 0000000000000246 R12: 0000000000000058 [ 542.844381][T16369] R13: 00007ffcf73cf18f R14: 00007fb845e7a300 R15: 0000000000022000 [ 542.852195][T16369] [ 542.855058][T16372] CPU: 1 PID: 16372 Comm: syz-executor.0 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 542.865127][T16372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 542.875022][T16372] Call Trace: [ 542.878146][T16372] [ 542.880948][T16372] dump_stack_lvl+0x151/0x1b7 [ 542.885442][T16372] ? bfq_pos_tree_add_move+0x43e/0x43e [ 542.890731][T16372] ? pcpu_block_update_hint_alloc+0x972/0xd00 17:18:52 executing program 2: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 32) 17:18:52 executing program 5: syz_clone3(&(0x7f0000000800)={0x4000000000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 542.896633][T16372] dump_stack+0x15/0x17 [ 542.900625][T16372] should_fail+0x3c0/0x510 [ 542.904878][T16372] should_fail_alloc_page+0x58/0x70 [ 542.909909][T16372] __alloc_pages+0x1de/0x7c0 [ 542.914333][T16372] ? __count_vm_events+0x30/0x30 [ 542.919109][T16372] __get_free_pages+0xe/0x30 [ 542.923533][T16372] pgd_alloc+0x22/0x2c0 [ 542.927522][T16372] mm_init+0x5bf/0x960 [ 542.931429][T16372] dup_mm+0x7d/0x330 [ 542.935160][T16372] copy_mm+0x108/0x1b0 [ 542.939067][T16372] copy_process+0x1295/0x3250 [ 542.943583][T16372] ? check_stack_object+0x117/0x130 [ 542.948615][T16372] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 542.953658][T16372] ? copy_clone_args_from_user+0x6f0/0x790 [ 542.959304][T16372] kernel_clone+0x22d/0x990 [ 542.963731][T16372] ? dup_mmap+0xea0/0xea0 [ 542.967898][T16372] ? create_io_thread+0x1e0/0x1e0 [ 542.972759][T16372] ? file_end_write+0x1b0/0x1b0 [ 542.977448][T16372] __x64_sys_clone3+0x375/0x3a0 [ 542.982133][T16372] ? __ia32_sys_clone+0x300/0x300 [ 542.986992][T16372] ? ksys_write+0x25f/0x2c0 [ 542.991434][T16372] ? debug_smp_processor_id+0x17/0x20 [ 542.996646][T16372] do_syscall_64+0x44/0xd0 [ 543.000895][T16372] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 543.006622][T16372] RIP: 0033:0x7fa07a6ec0d9 [ 543.010881][T16372] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 543.030481][T16372] RSP: 002b:00007fa07945f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 543.038724][T16372] RAX: ffffffffffffffda RBX: 00007fa07a80bf80 RCX: 00007fa07a6ec0d9 17:18:52 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x1800) 17:18:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xb4}, {0x0}, {&(0x7f0000002a80)=""/4096, 0xe14}], 0x3, 0x0, 0x24000000}}], 0x300, 0x0, 0x0) 17:18:52 executing program 5: syz_clone3(&(0x7f0000000800)={0xf5ffffff00000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 17:18:52 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 29) [ 543.046539][T16372] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fa07945f050 [ 543.054350][T16372] RBP: 00007fa07945f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 543.062165][T16372] R10: 00007fa07945f050 R11: 0000000000000246 R12: 0000000000000058 [ 543.069969][T16372] R13: 00007ffd55a8aedf R14: 00007fa07945f300 R15: 0000000000022000 [ 543.077785][T16372] [ 543.104924][T16383] FAULT_INJECTION: forcing a failure. [ 543.104924][T16383] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 543.119990][T16383] CPU: 1 PID: 16383 Comm: syz-executor.0 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 543.130059][T16383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 543.139955][T16383] Call Trace: [ 543.143075][T16383] [ 543.145853][T16383] dump_stack_lvl+0x151/0x1b7 [ 543.150362][T16383] ? bfq_pos_tree_add_move+0x43e/0x43e [ 543.155755][T16383] ? pcpu_block_update_hint_alloc+0x972/0xd00 [ 543.161658][T16383] dump_stack+0x15/0x17 [ 543.165737][T16383] should_fail+0x3c0/0x510 [ 543.169995][T16383] should_fail_alloc_page+0x58/0x70 [ 543.175024][T16383] __alloc_pages+0x1de/0x7c0 [ 543.179452][T16383] ? __count_vm_events+0x30/0x30 [ 543.184226][T16383] __get_free_pages+0xe/0x30 [ 543.188648][T16383] pgd_alloc+0x22/0x2c0 [ 543.192642][T16383] mm_init+0x5bf/0x960 [ 543.196547][T16383] dup_mm+0x7d/0x330 [ 543.200280][T16383] copy_mm+0x108/0x1b0 [ 543.204185][T16383] copy_process+0x1295/0x3250 [ 543.208698][T16383] ? check_stack_object+0x117/0x130 [ 543.213732][T16383] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 543.218679][T16383] ? copy_clone_args_from_user+0x6f0/0x790 [ 543.224330][T16383] kernel_clone+0x22d/0x990 [ 543.228661][T16383] ? dup_mmap+0xea0/0xea0 [ 543.232823][T16383] ? create_io_thread+0x1e0/0x1e0 [ 543.237687][T16383] ? file_end_write+0x1b0/0x1b0 [ 543.242372][T16383] __x64_sys_clone3+0x375/0x3a0 [ 543.247060][T16383] ? __ia32_sys_clone+0x300/0x300 [ 543.251921][T16383] ? ksys_write+0x25f/0x2c0 [ 543.256260][T16383] ? debug_smp_processor_id+0x17/0x20 [ 543.261468][T16383] do_syscall_64+0x44/0xd0 [ 543.265811][T16383] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 543.271536][T16383] RIP: 0033:0x7fa07a6ec0d9 [ 543.275788][T16383] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 543.295237][T16383] RSP: 002b:00007fa07945f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 17:18:52 executing program 5: syz_clone3(&(0x7f0000000800)={0xfbffffff00000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 543.303473][T16383] RAX: ffffffffffffffda RBX: 00007fa07a80bf80 RCX: 00007fa07a6ec0d9 [ 543.311284][T16383] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fa07945f050 [ 543.319096][T16383] RBP: 00007fa07945f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 543.326904][T16383] R10: 00007fa07945f050 R11: 0000000000000246 R12: 0000000000000058 [ 543.334717][T16383] R13: 00007ffd55a8aedf R14: 00007fa07945f300 R15: 0000000000022000 [ 543.342556][T16383] [ 543.350366][T16389] FAULT_INJECTION: forcing a failure. 17:18:52 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) 17:18:52 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 30) [ 543.350366][T16389] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 543.363554][T16389] CPU: 1 PID: 16389 Comm: syz-executor.2 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 543.373614][T16389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 543.383509][T16389] Call Trace: [ 543.386627][T16389] [ 543.389406][T16389] dump_stack_lvl+0x151/0x1b7 [ 543.393917][T16389] ? bfq_pos_tree_add_move+0x43e/0x43e [ 543.399220][T16389] ? stack_trace_save+0x1f0/0x1f0 [ 543.404076][T16389] ? __kernel_text_address+0x9a/0x110 [ 543.409280][T16389] dump_stack+0x15/0x17 [ 543.413272][T16389] should_fail+0x3c0/0x510 [ 543.417528][T16389] should_fail_alloc_page+0x58/0x70 [ 543.422558][T16389] __alloc_pages+0x1de/0x7c0 [ 543.426985][T16389] ? stack_trace_save+0x12d/0x1f0 [ 543.431844][T16389] ? stack_trace_snprint+0x100/0x100 [ 543.436966][T16389] ? __count_vm_events+0x30/0x30 [ 543.441740][T16389] ? __kasan_slab_alloc+0xc4/0xe0 [ 543.446599][T16389] ? __kasan_slab_alloc+0xb2/0xe0 [ 543.451458][T16389] ? kmem_cache_alloc+0x189/0x2f0 [ 543.456319][T16389] ? anon_vma_fork+0x1b9/0x4f0 [ 543.460920][T16389] get_zeroed_page+0x19/0x40 [ 543.465348][T16389] __pud_alloc+0x8b/0x260 [ 543.469515][T16389] ? do_handle_mm_fault+0x2370/0x2370 [ 543.474730][T16389] copy_page_range+0xd9e/0x1090 [ 543.479409][T16389] ? pfn_valid+0x1e0/0x1e0 [ 543.483661][T16389] dup_mmap+0x99f/0xea0 [ 543.487659][T16389] ? __delayed_free_task+0x20/0x20 [ 543.492600][T16389] ? mm_init+0x807/0x960 [ 543.496677][T16389] dup_mm+0x91/0x330 [ 543.500410][T16389] copy_mm+0x108/0x1b0 [ 543.504317][T16389] copy_process+0x1295/0x3250 [ 543.508830][T16389] ? check_stack_object+0x117/0x130 [ 543.513872][T16389] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 543.518812][T16389] ? copy_clone_args_from_user+0x6f0/0x790 [ 543.524452][T16389] kernel_clone+0x22d/0x990 [ 543.528791][T16389] ? dup_mmap+0xea0/0xea0 [ 543.532956][T16389] ? create_io_thread+0x1e0/0x1e0 [ 543.537830][T16389] ? file_end_write+0x1b0/0x1b0 [ 543.542520][T16389] __x64_sys_clone3+0x375/0x3a0 [ 543.547195][T16389] ? __ia32_sys_clone+0x300/0x300 [ 543.552054][T16389] ? ksys_write+0x25f/0x2c0 [ 543.556480][T16389] ? debug_smp_processor_id+0x17/0x20 [ 543.561688][T16389] do_syscall_64+0x44/0xd0 [ 543.565940][T16389] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 543.571670][T16389] RIP: 0033:0x7fb8471070d9 [ 543.575919][T16389] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 543.595454][T16389] RSP: 002b:00007fb845e7a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 17:18:53 executing program 2: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 33) [ 543.603702][T16389] RAX: ffffffffffffffda RBX: 00007fb847226f80 RCX: 00007fb8471070d9 [ 543.611505][T16389] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fb845e7a050 [ 543.619317][T16389] RBP: 00007fb845e7a1d0 R08: 0000000000000000 R09: 0000000000000058 [ 543.627126][T16389] R10: 00007fb845e7a050 R11: 0000000000000246 R12: 0000000000000058 [ 543.634940][T16389] R13: 00007ffcf73cf18f R14: 00007fb845e7a300 R15: 0000000000022000 [ 543.642753][T16389] 17:18:53 executing program 5: syz_clone3(&(0x7f0000000800)={0xff0f010000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 543.659781][T16394] FAULT_INJECTION: forcing a failure. [ 543.659781][T16394] name failslab, interval 1, probability 0, space 0, times 0 [ 543.682643][T16398] FAULT_INJECTION: forcing a failure. [ 543.682643][T16398] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 543.701121][T16398] CPU: 0 PID: 16398 Comm: syz-executor.2 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 543.711201][T16398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 543.721087][T16398] Call Trace: [ 543.724213][T16398] [ 543.726991][T16398] dump_stack_lvl+0x151/0x1b7 [ 543.731502][T16398] ? bfq_pos_tree_add_move+0x43e/0x43e [ 543.736795][T16398] ? __stack_depot_save+0x34/0x4b0 [ 543.741740][T16398] dump_stack+0x15/0x17 [ 543.745734][T16398] should_fail+0x3c0/0x510 [ 543.749993][T16398] should_fail_alloc_page+0x58/0x70 [ 543.755021][T16398] __alloc_pages+0x1de/0x7c0 [ 543.759448][T16398] ? __count_vm_events+0x30/0x30 [ 543.764226][T16398] allocate_slab+0x62/0x580 [ 543.768557][T16398] ___slab_alloc+0x2e2/0x6f0 [ 543.772986][T16398] ? anon_vma_fork+0xf7/0x4f0 [ 543.777497][T16398] ? anon_vma_fork+0xf7/0x4f0 [ 543.782011][T16398] __slab_alloc+0x4a/0x90 [ 543.786178][T16398] kmem_cache_alloc+0x205/0x2f0 [ 543.790862][T16398] ? anon_vma_fork+0xf7/0x4f0 [ 543.795384][T16398] anon_vma_fork+0xf7/0x4f0 [ 543.799717][T16398] ? anon_vma_name+0x4c/0x70 [ 543.804147][T16398] dup_mmap+0x750/0xea0 [ 543.808143][T16398] ? __delayed_free_task+0x20/0x20 [ 543.813100][T16398] ? mm_init+0x807/0x960 [ 543.817165][T16398] dup_mm+0x91/0x330 [ 543.820895][T16398] copy_mm+0x108/0x1b0 [ 543.824796][T16398] copy_process+0x1295/0x3250 [ 543.829314][T16398] ? check_stack_object+0x117/0x130 [ 543.834462][T16398] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 543.839379][T16398] ? copy_clone_args_from_user+0x6f0/0x790 [ 543.845717][T16398] kernel_clone+0x22d/0x990 [ 543.850054][T16398] ? dup_mmap+0xea0/0xea0 [ 543.854219][T16398] ? create_io_thread+0x1e0/0x1e0 [ 543.859088][T16398] ? file_end_write+0x1b0/0x1b0 [ 543.863772][T16398] __x64_sys_clone3+0x375/0x3a0 [ 543.868457][T16398] ? __ia32_sys_clone+0x300/0x300 [ 543.873315][T16398] ? ksys_write+0x25f/0x2c0 [ 543.877659][T16398] ? debug_smp_processor_id+0x17/0x20 [ 543.882863][T16398] do_syscall_64+0x44/0xd0 [ 543.887116][T16398] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 543.892843][T16398] RIP: 0033:0x7fb8471070d9 [ 543.897098][T16398] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 543.916974][T16398] RSP: 002b:00007fb845e7a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 543.925216][T16398] RAX: ffffffffffffffda RBX: 00007fb847226f80 RCX: 00007fb8471070d9 [ 543.933026][T16398] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fb845e7a050 [ 543.940840][T16398] RBP: 00007fb845e7a1d0 R08: 0000000000000000 R09: 0000000000000058 [ 543.948650][T16398] R10: 00007fb845e7a050 R11: 0000000000000246 R12: 0000000000000058 17:18:53 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) 17:18:53 executing program 5: syz_clone3(&(0x7f0000000800)={0xffffffff00000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 17:18:53 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x1950) 17:18:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xb4}, {0x0}, {&(0x7f0000002a80)=""/4096, 0xe14}], 0x3, 0x0, 0x33000000}}], 0x300, 0x0, 0x0) 17:18:53 executing program 2: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 34) 17:18:53 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 543.956547][T16398] R13: 00007ffcf73cf18f R14: 00007fb845e7a300 R15: 0000000000022000 [ 543.964361][T16398] [ 543.967224][T16394] CPU: 1 PID: 16394 Comm: syz-executor.0 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 543.977295][T16394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 543.987247][T16394] Call Trace: [ 543.990312][T16394] [ 543.993089][T16394] dump_stack_lvl+0x151/0x1b7 [ 543.997604][T16394] ? bfq_pos_tree_add_move+0x43e/0x43e [ 544.002913][T16394] dump_stack+0x15/0x17 [ 544.006890][T16394] should_fail+0x3c0/0x510 17:18:53 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 544.011144][T16394] __should_failslab+0x9f/0xe0 [ 544.013960][T16409] FAULT_INJECTION: forcing a failure. [ 544.013960][T16409] name failslab, interval 1, probability 0, space 0, times 0 [ 544.015826][T16394] should_failslab+0x9/0x20 [ 544.015851][T16394] kmem_cache_alloc+0x4f/0x2f0 [ 544.037356][T16394] ? vm_area_dup+0x26/0x1d0 [ 544.041709][T16394] vm_area_dup+0x26/0x1d0 [ 544.045865][T16394] dup_mmap+0x6b8/0xea0 [ 544.049856][T16394] ? __delayed_free_task+0x20/0x20 [ 544.054798][T16394] ? mm_init+0x807/0x960 17:18:53 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x7}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 544.058876][T16394] dup_mm+0x91/0x330 [ 544.062610][T16394] copy_mm+0x108/0x1b0 [ 544.066515][T16394] copy_process+0x1295/0x3250 [ 544.071033][T16394] ? check_stack_object+0x117/0x130 [ 544.076066][T16394] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 544.081012][T16394] ? copy_clone_args_from_user+0x6f0/0x790 [ 544.086654][T16394] kernel_clone+0x22d/0x990 [ 544.090995][T16394] ? dup_mmap+0xea0/0xea0 [ 544.095154][T16394] ? create_io_thread+0x1e0/0x1e0 [ 544.100016][T16394] ? file_end_write+0x1b0/0x1b0 [ 544.104703][T16394] __x64_sys_clone3+0x375/0x3a0 [ 544.109387][T16394] ? __ia32_sys_clone+0x300/0x300 [ 544.114259][T16394] ? ksys_write+0x25f/0x2c0 [ 544.118594][T16394] ? debug_smp_processor_id+0x17/0x20 [ 544.123799][T16394] do_syscall_64+0x44/0xd0 [ 544.128051][T16394] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 544.133863][T16394] RIP: 0033:0x7fa07a6ec0d9 [ 544.138119][T16394] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 544.157560][T16394] RSP: 002b:00007fa07945f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 544.165801][T16394] RAX: ffffffffffffffda RBX: 00007fa07a80bf80 RCX: 00007fa07a6ec0d9 [ 544.173612][T16394] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fa07945f050 [ 544.181422][T16394] RBP: 00007fa07945f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 544.189235][T16394] R10: 00007fa07945f050 R11: 0000000000000246 R12: 0000000000000058 [ 544.197137][T16394] R13: 00007ffd55a8aedf R14: 00007fa07945f300 R15: 0000000000022000 [ 544.204946][T16394] [ 544.216363][T16409] CPU: 1 PID: 16409 Comm: syz-executor.2 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 544.226436][T16409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 544.236325][T16409] Call Trace: [ 544.239454][T16409] [ 544.242246][T16409] dump_stack_lvl+0x151/0x1b7 [ 544.246738][T16409] ? bfq_pos_tree_add_move+0x43e/0x43e [ 544.252130][T16409] dump_stack+0x15/0x17 [ 544.256113][T16409] should_fail+0x3c0/0x510 [ 544.260365][T16409] __should_failslab+0x9f/0xe0 [ 544.265053][T16409] should_failslab+0x9/0x20 [ 544.269396][T16409] kmem_cache_alloc+0x4f/0x2f0 [ 544.273994][T16409] ? anon_vma_fork+0x1b9/0x4f0 [ 544.278591][T16409] anon_vma_fork+0x1b9/0x4f0 [ 544.283049][T16409] dup_mmap+0x750/0xea0 [ 544.287011][T16409] ? __delayed_free_task+0x20/0x20 [ 544.291958][T16409] ? mm_init+0x807/0x960 [ 544.296039][T16409] dup_mm+0x91/0x330 [ 544.299768][T16409] copy_mm+0x108/0x1b0 [ 544.303674][T16409] copy_process+0x1295/0x3250 [ 544.308191][T16409] ? check_stack_object+0x117/0x130 [ 544.313225][T16409] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 544.318167][T16409] ? copy_clone_args_from_user+0x6f0/0x790 [ 544.323810][T16409] kernel_clone+0x22d/0x990 [ 544.328151][T16409] ? dup_mmap+0xea0/0xea0 [ 544.332314][T16409] ? create_io_thread+0x1e0/0x1e0 [ 544.337177][T16409] ? file_end_write+0x1b0/0x1b0 [ 544.341864][T16409] __x64_sys_clone3+0x375/0x3a0 [ 544.346550][T16409] ? __ia32_sys_clone+0x300/0x300 [ 544.351415][T16409] ? ksys_write+0x25f/0x2c0 [ 544.355750][T16409] ? debug_smp_processor_id+0x17/0x20 [ 544.360958][T16409] do_syscall_64+0x44/0xd0 [ 544.365209][T16409] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 544.370938][T16409] RIP: 0033:0x7fb8471070d9 [ 544.375192][T16409] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 544.394630][T16409] RSP: 002b:00007fb845e7a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 544.402878][T16409] RAX: ffffffffffffffda RBX: 00007fb847226f80 RCX: 00007fb8471070d9 17:18:53 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x8}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 17:18:53 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 31) 17:18:53 executing program 2: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 35) 17:18:53 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x1b14) [ 544.410686][T16409] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fb845e7a050 [ 544.418497][T16409] RBP: 00007fb845e7a1d0 R08: 0000000000000000 R09: 0000000000000058 [ 544.426309][T16409] R10: 00007fb845e7a050 R11: 0000000000000246 R12: 0000000000000058 [ 544.434122][T16409] R13: 00007ffcf73cf18f R14: 00007fb845e7a300 R15: 0000000000022000 [ 544.441937][T16409] 17:18:53 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) 17:18:53 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 544.478352][T16425] FAULT_INJECTION: forcing a failure. [ 544.478352][T16425] name failslab, interval 1, probability 0, space 0, times 0 [ 544.492682][T16427] FAULT_INJECTION: forcing a failure. [ 544.492682][T16427] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 544.510129][T16425] CPU: 1 PID: 16425 Comm: syz-executor.0 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 544.520203][T16425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 544.530104][T16425] Call Trace: [ 544.533217][T16425] [ 544.535997][T16425] dump_stack_lvl+0x151/0x1b7 [ 544.540529][T16425] ? bfq_pos_tree_add_move+0x43e/0x43e [ 544.545802][T16425] dump_stack+0x15/0x17 [ 544.549813][T16425] should_fail+0x3c0/0x510 [ 544.554080][T16425] __should_failslab+0x9f/0xe0 [ 544.558649][T16425] should_failslab+0x9/0x20 [ 544.562987][T16425] kmem_cache_alloc+0x4f/0x2f0 [ 544.567591][T16425] ? vm_area_dup+0x26/0x1d0 [ 544.571928][T16425] ? __kasan_check_read+0x11/0x20 [ 544.576786][T16425] vm_area_dup+0x26/0x1d0 [ 544.580952][T16425] dup_mmap+0x6b8/0xea0 [ 544.584967][T16425] ? __delayed_free_task+0x20/0x20 [ 544.589893][T16425] ? mm_init+0x807/0x960 [ 544.593970][T16425] dup_mm+0x91/0x330 [ 544.597704][T16425] copy_mm+0x108/0x1b0 [ 544.601610][T16425] copy_process+0x1295/0x3250 [ 544.606124][T16425] ? check_stack_object+0x117/0x130 [ 544.611156][T16425] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 544.616104][T16425] ? copy_clone_args_from_user+0x6f0/0x790 [ 544.622007][T16425] kernel_clone+0x22d/0x990 [ 544.626378][T16425] ? dup_mmap+0xea0/0xea0 [ 544.630512][T16425] ? create_io_thread+0x1e0/0x1e0 [ 544.635388][T16425] ? file_end_write+0x1b0/0x1b0 [ 544.640058][T16425] __x64_sys_clone3+0x375/0x3a0 [ 544.644746][T16425] ? __ia32_sys_clone+0x300/0x300 [ 544.649606][T16425] ? ksys_write+0x25f/0x2c0 [ 544.653947][T16425] ? debug_smp_processor_id+0x17/0x20 [ 544.659156][T16425] do_syscall_64+0x44/0xd0 [ 544.663404][T16425] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 544.669226][T16425] RIP: 0033:0x7fa07a6ec0d9 [ 544.673483][T16425] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 544.692922][T16425] RSP: 002b:00007fa07945f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 544.701167][T16425] RAX: ffffffffffffffda RBX: 00007fa07a80bf80 RCX: 00007fa07a6ec0d9 [ 544.708978][T16425] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fa07945f050 [ 544.716788][T16425] RBP: 00007fa07945f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 544.724617][T16425] R10: 00007fa07945f050 R11: 0000000000000246 R12: 0000000000000058 [ 544.732410][T16425] R13: 00007ffd55a8aedf R14: 00007fa07945f300 R15: 0000000000022000 [ 544.740227][T16425] [ 544.743091][T16427] CPU: 0 PID: 16427 Comm: syz-executor.2 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 544.753245][T16427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 544.763168][T16427] Call Trace: [ 544.766265][T16427] [ 544.769041][T16427] dump_stack_lvl+0x151/0x1b7 [ 544.773558][T16427] ? bfq_pos_tree_add_move+0x43e/0x43e 17:18:54 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) [ 544.778850][T16427] ? stack_trace_save+0x1f0/0x1f0 [ 544.783707][T16427] ? __kernel_text_address+0x9a/0x110 [ 544.788918][T16427] dump_stack+0x15/0x17 [ 544.792906][T16427] should_fail+0x3c0/0x510 [ 544.797166][T16427] should_fail_alloc_page+0x58/0x70 [ 544.802197][T16427] __alloc_pages+0x1de/0x7c0 [ 544.806622][T16427] ? stack_trace_save+0x12d/0x1f0 [ 544.811481][T16427] ? stack_trace_snprint+0x100/0x100 [ 544.816606][T16427] ? __count_vm_events+0x30/0x30 [ 544.821379][T16427] ? __kasan_slab_alloc+0xc4/0xe0 [ 544.826234][T16427] ? __kasan_slab_alloc+0xb2/0xe0 [ 544.831210][T16427] ? kmem_cache_alloc+0x189/0x2f0 [ 544.836067][T16427] ? anon_vma_fork+0x1b9/0x4f0 [ 544.840668][T16427] get_zeroed_page+0x19/0x40 [ 544.845094][T16427] __pud_alloc+0x8b/0x260 [ 544.849264][T16427] ? do_handle_mm_fault+0x2370/0x2370 [ 544.854473][T16427] copy_page_range+0xd9e/0x1090 [ 544.859160][T16427] ? pfn_valid+0x1e0/0x1e0 [ 544.863410][T16427] dup_mmap+0x99f/0xea0 [ 544.867403][T16427] ? __delayed_free_task+0x20/0x20 [ 544.872517][T16427] ? mm_init+0x807/0x960 [ 544.876594][T16427] dup_mm+0x91/0x330 [ 544.880325][T16427] copy_mm+0x108/0x1b0 [ 544.884230][T16427] copy_process+0x1295/0x3250 [ 544.888745][T16427] ? check_stack_object+0x117/0x130 [ 544.893778][T16427] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 544.898725][T16427] ? copy_clone_args_from_user+0x6f0/0x790 [ 544.904368][T16427] kernel_clone+0x22d/0x990 [ 544.908713][T16427] ? dup_mmap+0xea0/0xea0 [ 544.912872][T16427] ? create_io_thread+0x1e0/0x1e0 [ 544.917732][T16427] ? file_end_write+0x1b0/0x1b0 [ 544.922418][T16427] __x64_sys_clone3+0x375/0x3a0 [ 544.927106][T16427] ? __ia32_sys_clone+0x300/0x300 [ 544.931966][T16427] ? ksys_write+0x25f/0x2c0 [ 544.936309][T16427] ? debug_smp_processor_id+0x17/0x20 [ 544.941514][T16427] do_syscall_64+0x44/0xd0 [ 544.945767][T16427] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 544.951495][T16427] RIP: 0033:0x7fb8471070d9 [ 544.955747][T16427] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 17:18:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xb4}, {0x0}, {&(0x7f0000002a80)=""/4096, 0xe14}], 0x3, 0x0, 0x340a0000}}], 0x300, 0x0, 0x0) 17:18:54 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) 17:18:54 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 32) 17:18:54 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x2000) 17:18:54 executing program 2: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 36) 17:18:54 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 544.975313][T16427] RSP: 002b:00007fb845e7a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 544.983549][T16427] RAX: ffffffffffffffda RBX: 00007fb847226f80 RCX: 00007fb8471070d9 [ 544.991355][T16427] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fb845e7a050 [ 544.999189][T16427] RBP: 00007fb845e7a1d0 R08: 0000000000000000 R09: 0000000000000058 [ 545.006983][T16427] R10: 00007fb845e7a050 R11: 0000000000000246 R12: 0000000000000058 [ 545.014793][T16427] R13: 00007ffcf73cf18f R14: 00007fb845e7a300 R15: 0000000000022000 [ 545.022603][T16427] [ 545.058279][T16440] FAULT_INJECTION: forcing a failure. [ 545.058279][T16440] name failslab, interval 1, probability 0, space 0, times 0 [ 545.068439][T16443] FAULT_INJECTION: forcing a failure. [ 545.068439][T16443] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 545.080395][T16440] CPU: 0 PID: 16440 Comm: syz-executor.0 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 545.093793][T16440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 545.103686][T16440] Call Trace: [ 545.106808][T16440] [ 545.109590][T16440] dump_stack_lvl+0x151/0x1b7 [ 545.114099][T16440] ? bfq_pos_tree_add_move+0x43e/0x43e [ 545.119392][T16440] ? do_syscall_64+0x44/0xd0 [ 545.123821][T16440] dump_stack+0x15/0x17 [ 545.127813][T16440] should_fail+0x3c0/0x510 [ 545.132063][T16440] __should_failslab+0x9f/0xe0 [ 545.136666][T16440] should_failslab+0x9/0x20 [ 545.141002][T16440] kmem_cache_alloc+0x4f/0x2f0 [ 545.145604][T16440] ? anon_vma_clone+0xa1/0x4f0 [ 545.150211][T16440] anon_vma_clone+0xa1/0x4f0 [ 545.154630][T16440] anon_vma_fork+0x91/0x4f0 [ 545.158969][T16440] ? anon_vma_name+0x4c/0x70 [ 545.163398][T16440] dup_mmap+0x750/0xea0 [ 545.167391][T16440] ? __delayed_free_task+0x20/0x20 [ 545.172335][T16440] ? mm_init+0x807/0x960 [ 545.176415][T16440] dup_mm+0x91/0x330 [ 545.180147][T16440] copy_mm+0x108/0x1b0 [ 545.184052][T16440] copy_process+0x1295/0x3250 [ 545.188567][T16440] ? check_stack_object+0x117/0x130 [ 545.193600][T16440] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 545.198547][T16440] ? copy_clone_args_from_user+0x6f0/0x790 [ 545.204191][T16440] kernel_clone+0x22d/0x990 [ 545.208527][T16440] ? dup_mmap+0xea0/0xea0 [ 545.212694][T16440] ? create_io_thread+0x1e0/0x1e0 [ 545.217556][T16440] ? file_end_write+0x1b0/0x1b0 [ 545.222239][T16440] __x64_sys_clone3+0x375/0x3a0 [ 545.226928][T16440] ? __ia32_sys_clone+0x300/0x300 [ 545.231790][T16440] ? ksys_write+0x25f/0x2c0 [ 545.236129][T16440] ? debug_smp_processor_id+0x17/0x20 [ 545.241334][T16440] do_syscall_64+0x44/0xd0 [ 545.245588][T16440] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 545.251313][T16440] RIP: 0033:0x7fa07a6ec0d9 [ 545.255567][T16440] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 545.275009][T16440] RSP: 002b:00007fa07945f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 545.283253][T16440] RAX: ffffffffffffffda RBX: 00007fa07a80bf80 RCX: 00007fa07a6ec0d9 [ 545.291069][T16440] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fa07945f050 [ 545.298873][T16440] RBP: 00007fa07945f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 545.306686][T16440] R10: 00007fa07945f050 R11: 0000000000000246 R12: 0000000000000058 [ 545.314496][T16440] R13: 00007ffd55a8aedf R14: 00007fa07945f300 R15: 0000000000022000 [ 545.322422][T16440] [ 545.325303][T16443] CPU: 1 PID: 16443 Comm: syz-executor.2 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 545.335353][T16443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 545.345250][T16443] Call Trace: [ 545.348376][T16443] [ 545.351152][T16443] dump_stack_lvl+0x151/0x1b7 17:18:54 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x3800) [ 545.355673][T16443] ? bfq_pos_tree_add_move+0x43e/0x43e [ 545.360956][T16443] ? __kasan_check_write+0x14/0x20 [ 545.365900][T16443] ? __set_page_owner+0x2ee/0x310 [ 545.370766][T16443] dump_stack+0x15/0x17 [ 545.374754][T16443] should_fail+0x3c0/0x510 [ 545.379014][T16443] should_fail_alloc_page+0x58/0x70 [ 545.384040][T16443] __alloc_pages+0x1de/0x7c0 [ 545.388583][T16443] ? __count_vm_events+0x30/0x30 [ 545.393459][T16443] ? __count_vm_events+0x30/0x30 [ 545.398236][T16443] ? __kasan_check_write+0x14/0x20 [ 545.403178][T16443] ? _raw_spin_lock+0xa3/0x1b0 [ 545.407900][T16443] __pmd_alloc+0xb1/0x550 [ 545.412051][T16443] ? kmem_cache_alloc+0x189/0x2f0 [ 545.416910][T16443] ? anon_vma_fork+0x1b9/0x4f0 [ 545.421514][T16443] ? __pud_alloc+0x260/0x260 [ 545.425937][T16443] ? __pud_alloc+0x218/0x260 [ 545.430366][T16443] ? do_handle_mm_fault+0x2370/0x2370 [ 545.435577][T16443] copy_page_range+0xd04/0x1090 [ 545.440263][T16443] ? pfn_valid+0x1e0/0x1e0 [ 545.444514][T16443] dup_mmap+0x99f/0xea0 [ 545.448622][T16443] ? __delayed_free_task+0x20/0x20 [ 545.453672][T16443] ? mm_init+0x807/0x960 [ 545.457755][T16443] dup_mm+0x91/0x330 [ 545.461571][T16443] copy_mm+0x108/0x1b0 [ 545.465477][T16443] copy_process+0x1295/0x3250 [ 545.469989][T16443] ? check_stack_object+0x117/0x130 [ 545.475025][T16443] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 545.480058][T16443] ? copy_clone_args_from_user+0x6f0/0x790 [ 545.485700][T16443] kernel_clone+0x22d/0x990 [ 545.490038][T16443] ? dup_mmap+0xea0/0xea0 [ 545.494204][T16443] ? create_io_thread+0x1e0/0x1e0 [ 545.499067][T16443] ? file_end_write+0x1b0/0x1b0 [ 545.503876][T16443] __x64_sys_clone3+0x375/0x3a0 [ 545.508559][T16443] ? __ia32_sys_clone+0x300/0x300 [ 545.513434][T16443] ? ksys_write+0x25f/0x2c0 [ 545.517761][T16443] ? debug_smp_processor_id+0x17/0x20 [ 545.522965][T16443] do_syscall_64+0x44/0xd0 [ 545.527220][T16443] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 545.532945][T16443] RIP: 0033:0x7fb8471070d9 [ 545.537201][T16443] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 17:18:55 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x700}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 17:18:55 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 33) [ 545.556640][T16443] RSP: 002b:00007fb845e7a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 545.564884][T16443] RAX: ffffffffffffffda RBX: 00007fb847226f80 RCX: 00007fb8471070d9 [ 545.572696][T16443] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fb845e7a050 [ 545.580509][T16443] RBP: 00007fb845e7a1d0 R08: 0000000000000000 R09: 0000000000000058 [ 545.588326][T16443] R10: 00007fb845e7a050 R11: 0000000000000246 R12: 0000000000000058 [ 545.596133][T16443] R13: 00007ffcf73cf18f R14: 00007fb845e7a300 R15: 0000000000022000 [ 545.603952][T16443] 17:18:55 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x900}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 545.620792][T16452] FAULT_INJECTION: forcing a failure. [ 545.620792][T16452] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 545.637705][T16452] CPU: 1 PID: 16452 Comm: syz-executor.0 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 545.647794][T16452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 545.657680][T16452] Call Trace: [ 545.660803][T16452] [ 545.663575][T16452] dump_stack_lvl+0x151/0x1b7 17:18:55 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x1100}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 17:18:55 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x1f00}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 545.668092][T16452] ? bfq_pos_tree_add_move+0x43e/0x43e [ 545.673399][T16452] ? __kasan_check_write+0x14/0x20 [ 545.678336][T16452] ? __set_page_owner+0x2ee/0x310 [ 545.683196][T16452] dump_stack+0x15/0x17 [ 545.687197][T16452] should_fail+0x3c0/0x510 [ 545.691447][T16452] should_fail_alloc_page+0x58/0x70 [ 545.696496][T16452] __alloc_pages+0x1de/0x7c0 [ 545.700904][T16452] ? __count_vm_events+0x30/0x30 [ 545.705677][T16452] ? __count_vm_events+0x30/0x30 [ 545.710453][T16452] ? __kasan_check_write+0x14/0x20 [ 545.715398][T16452] ? _raw_spin_lock+0xa3/0x1b0 [ 545.719999][T16452] __pmd_alloc+0xb1/0x550 [ 545.724159][T16452] ? kmem_cache_alloc+0x189/0x2f0 [ 545.729021][T16452] ? anon_vma_fork+0x1b9/0x4f0 [ 545.733621][T16452] ? __pud_alloc+0x260/0x260 [ 545.738050][T16452] ? __pud_alloc+0x218/0x260 [ 545.742571][T16452] ? do_handle_mm_fault+0x2370/0x2370 [ 545.747776][T16452] copy_page_range+0xd04/0x1090 [ 545.752464][T16452] ? pfn_valid+0x1e0/0x1e0 [ 545.756715][T16452] dup_mmap+0x99f/0xea0 [ 545.760707][T16452] ? __delayed_free_task+0x20/0x20 [ 545.765658][T16452] ? mm_init+0x807/0x960 [ 545.769734][T16452] dup_mm+0x91/0x330 [ 545.773463][T16452] copy_mm+0x108/0x1b0 [ 545.777372][T16452] copy_process+0x1295/0x3250 [ 545.781885][T16452] ? check_stack_object+0x117/0x130 [ 545.786918][T16452] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 545.791866][T16452] ? copy_clone_args_from_user+0x6f0/0x790 [ 545.797508][T16452] kernel_clone+0x22d/0x990 [ 545.801934][T16452] ? dup_mmap+0xea0/0xea0 [ 545.806100][T16452] ? create_io_thread+0x1e0/0x1e0 [ 545.810958][T16452] ? file_end_write+0x1b0/0x1b0 [ 545.815646][T16452] __x64_sys_clone3+0x375/0x3a0 [ 545.820331][T16452] ? __ia32_sys_clone+0x300/0x300 [ 545.825193][T16452] ? ksys_write+0x25f/0x2c0 [ 545.829533][T16452] ? debug_smp_processor_id+0x17/0x20 [ 545.834740][T16452] do_syscall_64+0x44/0xd0 [ 545.838995][T16452] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 545.844861][T16452] RIP: 0033:0x7fa07a6ec0d9 [ 545.849114][T16452] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 17:18:55 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) 17:18:55 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x2000}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 17:18:55 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x3f00) 17:18:55 executing program 2: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 37) 17:18:55 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xb4}, {0x0}, {&(0x7f0000002a80)=""/4096, 0xe14}], 0x3, 0x0, 0x40000000}}], 0x300, 0x0, 0x0) [ 545.868552][T16452] RSP: 002b:00007fa07945f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 545.876953][T16452] RAX: ffffffffffffffda RBX: 00007fa07a80bf80 RCX: 00007fa07a6ec0d9 [ 545.884749][T16452] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fa07945f050 [ 545.892555][T16452] RBP: 00007fa07945f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 545.900366][T16452] R10: 00007fa07945f050 R11: 0000000000000246 R12: 0000000000000058 [ 545.908177][T16452] R13: 00007ffd55a8aedf R14: 00007fa07945f300 R15: 0000000000022000 [ 545.915991][T16452] 17:18:55 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x4000}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 17:18:55 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 34) [ 545.944882][T16466] FAULT_INJECTION: forcing a failure. [ 545.944882][T16466] name failslab, interval 1, probability 0, space 0, times 0 [ 545.957397][T16466] CPU: 0 PID: 16466 Comm: syz-executor.2 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 545.967466][T16466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 545.977360][T16466] Call Trace: [ 545.980576][T16466] [ 545.983346][T16466] dump_stack_lvl+0x151/0x1b7 [ 545.987857][T16466] ? bfq_pos_tree_add_move+0x43e/0x43e [ 545.993162][T16466] dump_stack+0x15/0x17 [ 545.997149][T16466] should_fail+0x3c0/0x510 [ 546.001406][T16466] __should_failslab+0x9f/0xe0 [ 546.006011][T16466] should_failslab+0x9/0x20 [ 546.010342][T16466] kmem_cache_alloc+0x4f/0x2f0 [ 546.014940][T16466] ? vm_area_dup+0x26/0x1d0 [ 546.019300][T16466] ? __kasan_check_read+0x11/0x20 [ 546.022912][T16473] FAULT_INJECTION: forcing a failure. [ 546.022912][T16473] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 546.024137][T16466] vm_area_dup+0x26/0x1d0 [ 546.024163][T16466] dup_mmap+0x6b8/0xea0 [ 546.045320][T16466] ? __delayed_free_task+0x20/0x20 [ 546.050265][T16466] ? mm_init+0x807/0x960 [ 546.054342][T16466] dup_mm+0x91/0x330 [ 546.058070][T16466] copy_mm+0x108/0x1b0 [ 546.061976][T16466] copy_process+0x1295/0x3250 [ 546.066498][T16466] ? check_stack_object+0x117/0x130 [ 546.071526][T16466] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 546.076470][T16466] ? copy_clone_args_from_user+0x6f0/0x790 [ 546.082114][T16466] kernel_clone+0x22d/0x990 [ 546.086451][T16466] ? dup_mmap+0xea0/0xea0 [ 546.090617][T16466] ? create_io_thread+0x1e0/0x1e0 [ 546.095477][T16466] ? file_end_write+0x1b0/0x1b0 [ 546.100167][T16466] __x64_sys_clone3+0x375/0x3a0 [ 546.104854][T16466] ? __ia32_sys_clone+0x300/0x300 [ 546.109715][T16466] ? ksys_write+0x25f/0x2c0 [ 546.114055][T16466] ? debug_smp_processor_id+0x17/0x20 [ 546.119346][T16466] do_syscall_64+0x44/0xd0 [ 546.123598][T16466] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 546.129331][T16466] RIP: 0033:0x7fb8471070d9 [ 546.133581][T16466] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 546.153020][T16466] RSP: 002b:00007fb845e7a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 546.161267][T16466] RAX: ffffffffffffffda RBX: 00007fb847226f80 RCX: 00007fb8471070d9 [ 546.169075][T16466] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fb845e7a050 [ 546.176984][T16466] RBP: 00007fb845e7a1d0 R08: 0000000000000000 R09: 0000000000000058 [ 546.184785][T16466] R10: 00007fb845e7a050 R11: 0000000000000246 R12: 0000000000000058 17:18:55 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) 17:18:55 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x4000) 17:18:55 executing program 2: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 38) [ 546.192600][T16466] R13: 00007ffcf73cf18f R14: 00007fb845e7a300 R15: 0000000000022000 [ 546.200411][T16466] [ 546.203274][T16473] CPU: 1 PID: 16473 Comm: syz-executor.0 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 546.213344][T16473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 546.223241][T16473] Call Trace: [ 546.226368][T16473] [ 546.229140][T16473] dump_stack_lvl+0x151/0x1b7 [ 546.233653][T16473] ? bfq_pos_tree_add_move+0x43e/0x43e [ 546.238951][T16473] dump_stack+0x15/0x17 [ 546.242939][T16473] should_fail+0x3c0/0x510 [ 546.247189][T16473] should_fail_alloc_page+0x58/0x70 [ 546.252226][T16473] __alloc_pages+0x1de/0x7c0 [ 546.252751][T16479] FAULT_INJECTION: forcing a failure. [ 546.252751][T16479] name failslab, interval 1, probability 0, space 0, times 0 [ 546.256651][T16473] ? __count_vm_events+0x30/0x30 [ 546.256677][T16473] ? dup_mm+0x91/0x330 [ 546.277743][T16473] ? copy_mm+0x108/0x1b0 [ 546.281818][T16473] ? copy_process+0x1295/0x3250 [ 546.286510][T16473] ? kernel_clone+0x22d/0x990 [ 546.291023][T16473] ? __x64_sys_clone3+0x375/0x3a0 [ 546.295881][T16473] pte_alloc_one+0x73/0x1b0 [ 546.300222][T16473] ? pfn_modify_allowed+0x2e0/0x2e0 [ 546.305257][T16473] ? __kasan_check_write+0x14/0x20 [ 546.310202][T16473] ? __set_page_owner+0x2ee/0x310 [ 546.315068][T16473] __pte_alloc+0x86/0x350 [ 546.319238][T16473] ? post_alloc_hook+0x1ab/0x1b0 [ 546.324002][T16473] ? free_pgtables+0x210/0x210 [ 546.328601][T16473] ? get_page_from_freelist+0x38b/0x400 [ 546.333985][T16473] copy_pte_range+0x1b1f/0x20b0 [ 546.338672][T16473] ? __kunmap_atomic+0x80/0x80 [ 546.343266][T16473] ? __pud_alloc+0x260/0x260 [ 546.347698][T16473] ? __pud_alloc+0x218/0x260 [ 546.352127][T16473] ? do_handle_mm_fault+0x2370/0x2370 [ 546.357331][T16473] copy_page_range+0xc1e/0x1090 [ 546.362026][T16473] ? pfn_valid+0x1e0/0x1e0 [ 546.366274][T16473] dup_mmap+0x99f/0xea0 [ 546.370348][T16473] ? __delayed_free_task+0x20/0x20 [ 546.375301][T16473] ? mm_init+0x807/0x960 [ 546.379381][T16473] dup_mm+0x91/0x330 [ 546.383107][T16473] copy_mm+0x108/0x1b0 [ 546.387012][T16473] copy_process+0x1295/0x3250 [ 546.391533][T16473] ? check_stack_object+0x117/0x130 [ 546.396564][T16473] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 546.401506][T16473] ? copy_clone_args_from_user+0x6f0/0x790 [ 546.407196][T16473] kernel_clone+0x22d/0x990 [ 546.411486][T16473] ? dup_mmap+0xea0/0xea0 [ 546.415656][T16473] ? create_io_thread+0x1e0/0x1e0 [ 546.420515][T16473] ? file_end_write+0x1b0/0x1b0 [ 546.425197][T16473] __x64_sys_clone3+0x375/0x3a0 [ 546.429886][T16473] ? __ia32_sys_clone+0x300/0x300 [ 546.434747][T16473] ? ksys_write+0x25f/0x2c0 [ 546.439086][T16473] ? debug_smp_processor_id+0x17/0x20 [ 546.444293][T16473] do_syscall_64+0x44/0xd0 [ 546.448546][T16473] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 546.454274][T16473] RIP: 0033:0x7fa07a6ec0d9 [ 546.458528][T16473] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 546.477969][T16473] RSP: 002b:00007fa07945f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 546.486212][T16473] RAX: ffffffffffffffda RBX: 00007fa07a80bf80 RCX: 00007fa07a6ec0d9 [ 546.494022][T16473] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fa07945f050 [ 546.501928][T16473] RBP: 00007fa07945f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 546.509738][T16473] R10: 00007fa07945f050 R11: 0000000000000246 R12: 0000000000000058 [ 546.517549][T16473] R13: 00007ffd55a8aedf R14: 00007fa07945f300 R15: 0000000000022000 [ 546.525366][T16473] [ 546.528225][T16479] CPU: 0 PID: 16479 Comm: syz-executor.2 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 546.538297][T16479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 546.548978][T16479] Call Trace: [ 546.552095][T16479] [ 546.554870][T16479] dump_stack_lvl+0x151/0x1b7 [ 546.559381][T16479] ? bfq_pos_tree_add_move+0x43e/0x43e [ 546.564677][T16479] dump_stack+0x15/0x17 [ 546.568668][T16479] should_fail+0x3c0/0x510 [ 546.572922][T16479] __should_failslab+0x9f/0xe0 [ 546.577615][T16479] should_failslab+0x9/0x20 [ 546.581949][T16479] kmem_cache_alloc+0x4f/0x2f0 [ 546.586547][T16479] ? vm_area_dup+0x26/0x1d0 [ 546.590887][T16479] vm_area_dup+0x26/0x1d0 [ 546.595055][T16479] dup_mmap+0x6b8/0xea0 [ 546.599055][T16479] ? __delayed_free_task+0x20/0x20 [ 546.603996][T16479] ? mm_init+0x807/0x960 [ 546.608078][T16479] dup_mm+0x91/0x330 [ 546.611850][T16479] copy_mm+0x108/0x1b0 [ 546.615710][T16479] copy_process+0x1295/0x3250 [ 546.620225][T16479] ? check_stack_object+0x117/0x130 [ 546.625344][T16479] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 546.630300][T16479] ? copy_clone_args_from_user+0x6f0/0x790 [ 546.635941][T16479] kernel_clone+0x22d/0x990 [ 546.640275][T16479] ? dup_mmap+0xea0/0xea0 [ 546.644440][T16479] ? create_io_thread+0x1e0/0x1e0 [ 546.649302][T16479] ? file_end_write+0x1b0/0x1b0 [ 546.653985][T16479] __x64_sys_clone3+0x375/0x3a0 [ 546.658671][T16479] ? __ia32_sys_clone+0x300/0x300 [ 546.663532][T16479] ? ksys_write+0x25f/0x2c0 [ 546.667876][T16479] ? debug_smp_processor_id+0x17/0x20 [ 546.673096][T16479] do_syscall_64+0x44/0xd0 [ 546.677338][T16479] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 546.683063][T16479] RIP: 0033:0x7fb8471070d9 [ 546.687319][T16479] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 546.706754][T16479] RSP: 002b:00007fb845e7a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 546.715015][T16479] RAX: ffffffffffffffda RBX: 00007fb847226f80 RCX: 00007fb8471070d9 [ 546.722897][T16479] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fb845e7a050 [ 546.730706][T16479] RBP: 00007fb845e7a1d0 R08: 0000000000000000 R09: 0000000000000058 [ 546.738603][T16479] R10: 00007fb845e7a050 R11: 0000000000000246 R12: 0000000000000058 17:18:56 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x10fff}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 17:18:56 executing program 2: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 39) 17:18:56 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 35) 17:18:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xb4}, {0x0}, {&(0x7f0000002a80)=""/4096, 0xe14}], 0x3, 0x0, 0x4cefff7f}}], 0x300, 0x0, 0x0) [ 546.746417][T16479] R13: 00007ffcf73cf18f R14: 00007fb845e7a300 R15: 0000000000022000 [ 546.754232][T16479] 17:18:56 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x5019) 17:18:56 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) 17:18:56 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x20010}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 546.800594][T16486] FAULT_INJECTION: forcing a failure. [ 546.800594][T16486] name failslab, interval 1, probability 0, space 0, times 0 [ 546.815177][T16488] __nla_validate_parse: 152 callbacks suppressed [ 546.815195][T16488] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 546.837584][T16491] FAULT_INJECTION: forcing a failure. [ 546.837584][T16491] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 546.840808][T16486] CPU: 0 PID: 16486 Comm: syz-executor.2 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 546.860675][T16486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 546.870671][T16486] Call Trace: [ 546.873796][T16486] [ 546.876572][T16486] dump_stack_lvl+0x151/0x1b7 [ 546.882647][T16486] ? bfq_pos_tree_add_move+0x43e/0x43e [ 546.887940][T16486] dump_stack+0x15/0x17 [ 546.891931][T16486] should_fail+0x3c0/0x510 [ 546.896184][T16486] __should_failslab+0x9f/0xe0 [ 546.900783][T16486] should_failslab+0x9/0x20 [ 546.905129][T16486] kmem_cache_alloc+0x4f/0x2f0 [ 546.909731][T16486] ? anon_vma_fork+0x1b9/0x4f0 [ 546.914328][T16486] anon_vma_fork+0x1b9/0x4f0 [ 546.918756][T16486] dup_mmap+0x750/0xea0 [ 546.922838][T16486] ? __delayed_free_task+0x20/0x20 [ 546.927780][T16486] ? mm_init+0x807/0x960 [ 546.931876][T16486] dup_mm+0x91/0x330 [ 546.935587][T16486] copy_mm+0x108/0x1b0 [ 546.939583][T16486] copy_process+0x1295/0x3250 [ 546.944114][T16486] ? check_stack_object+0x117/0x130 [ 546.949126][T16486] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 546.954075][T16486] ? copy_clone_args_from_user+0x6f0/0x790 [ 546.959804][T16486] kernel_clone+0x22d/0x990 [ 546.964144][T16486] ? dup_mmap+0xea0/0xea0 [ 546.968306][T16486] ? create_io_thread+0x1e0/0x1e0 [ 546.973171][T16486] ? file_end_write+0x1b0/0x1b0 [ 546.977856][T16486] __x64_sys_clone3+0x375/0x3a0 [ 546.982543][T16486] ? __ia32_sys_clone+0x300/0x300 [ 546.987402][T16486] ? ksys_write+0x25f/0x2c0 [ 546.991743][T16486] ? debug_smp_processor_id+0x17/0x20 [ 546.996952][T16486] do_syscall_64+0x44/0xd0 [ 547.001203][T16486] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 547.006931][T16486] RIP: 0033:0x7fb8471070d9 [ 547.011185][T16486] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 547.030625][T16486] RSP: 002b:00007fb845e7a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 547.038958][T16486] RAX: ffffffffffffffda RBX: 00007fb847226f80 RCX: 00007fb8471070d9 17:18:56 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x50d1) 17:18:56 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) 17:18:56 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x5584) 17:18:56 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) 17:18:56 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x5684) [ 547.046767][T16486] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fb845e7a050 [ 547.054578][T16486] RBP: 00007fb845e7a1d0 R08: 0000000000000000 R09: 0000000000000058 [ 547.062489][T16486] R10: 00007fb845e7a050 R11: 0000000000000246 R12: 0000000000000058 [ 547.070298][T16486] R13: 00007ffcf73cf18f R14: 00007fb845e7a300 R15: 0000000000022000 [ 547.078115][T16486] [ 547.080975][T16491] CPU: 1 PID: 16491 Comm: syz-executor.0 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 547.090054][T16488] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 17:18:56 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x20200}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 547.091036][T16491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 547.110138][T16491] Call Trace: [ 547.113274][T16491] [ 547.116036][T16491] dump_stack_lvl+0x151/0x1b7 [ 547.120558][T16491] ? bfq_pos_tree_add_move+0x43e/0x43e [ 547.125142][T16505] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 547.125841][T16491] ? stack_trace_save+0x1f0/0x1f0 [ 547.135321][T16505] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 547.139816][T16491] ? __kernel_text_address+0x9a/0x110 [ 547.139846][T16491] dump_stack+0x15/0x17 [ 547.139864][T16491] should_fail+0x3c0/0x510 [ 547.139880][T16491] should_fail_alloc_page+0x58/0x70 [ 547.139897][T16491] __alloc_pages+0x1de/0x7c0 [ 547.150432][T16505] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 547.154136][T16491] ? stack_trace_save+0x12d/0x1f0 [ 547.154161][T16491] ? stack_trace_snprint+0x100/0x100 [ 547.154177][T16491] ? __count_vm_events+0x30/0x30 [ 547.158905][T16505] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 547.162381][T16491] ? __kasan_slab_alloc+0xc4/0xe0 [ 547.162405][T16491] ? __kasan_slab_alloc+0xb2/0xe0 [ 547.167899][T16505] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 547.171841][T16491] ? kmem_cache_alloc+0x189/0x2f0 [ 547.171866][T16491] ? anon_vma_fork+0x1b9/0x4f0 [ 547.181433][T16505] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 547.185817][T16491] get_zeroed_page+0x19/0x40 [ 547.185846][T16491] __pud_alloc+0x8b/0x260 [ 547.185861][T16491] ? do_handle_mm_fault+0x2370/0x2370 [ 547.185879][T16491] copy_page_range+0xd9e/0x1090 [ 547.192371][T16505] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 547.195830][T16491] ? pfn_valid+0x1e0/0x1e0 [ 547.195860][T16491] dup_mmap+0x99f/0xea0 [ 547.214849][T16505] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 547.223837][T16491] ? __delayed_free_task+0x20/0x20 [ 547.223865][T16491] ? mm_init+0x807/0x960 [ 547.223879][T16491] dup_mm+0x91/0x330 [ 547.223893][T16491] copy_mm+0x108/0x1b0 [ 547.304642][T16491] copy_process+0x1295/0x3250 [ 547.309150][T16491] ? check_stack_object+0x117/0x130 [ 547.314181][T16491] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 547.319126][T16491] ? copy_clone_args_from_user+0x6f0/0x790 [ 547.324784][T16491] kernel_clone+0x22d/0x990 [ 547.329115][T16491] ? dup_mmap+0xea0/0xea0 [ 547.333275][T16491] ? create_io_thread+0x1e0/0x1e0 [ 547.338133][T16491] ? file_end_write+0x1b0/0x1b0 [ 547.342819][T16491] __x64_sys_clone3+0x375/0x3a0 [ 547.347504][T16491] ? __ia32_sys_clone+0x300/0x300 [ 547.352367][T16491] ? ksys_write+0x25f/0x2c0 [ 547.356711][T16491] ? debug_smp_processor_id+0x17/0x20 [ 547.361919][T16491] do_syscall_64+0x44/0xd0 [ 547.366169][T16491] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 547.371895][T16491] RIP: 0033:0x7fa07a6ec0d9 [ 547.376149][T16491] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 17:18:56 executing program 2: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 40) [ 547.395589][T16491] RSP: 002b:00007fa07945f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 547.403832][T16491] RAX: ffffffffffffffda RBX: 00007fa07a80bf80 RCX: 00007fa07a6ec0d9 [ 547.411649][T16491] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fa07945f050 [ 547.419455][T16491] RBP: 00007fa07945f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 547.427268][T16491] R10: 00007fa07945f050 R11: 0000000000000246 R12: 0000000000000058 [ 547.435082][T16491] R13: 00007ffd55a8aedf R14: 00007fa07945f300 R15: 0000000000022000 [ 547.442896][T16491] [ 547.452871][T16513] FAULT_INJECTION: forcing a failure. [ 547.452871][T16513] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 547.468809][T16513] CPU: 0 PID: 16513 Comm: syz-executor.2 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 547.478883][T16513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 547.488773][T16513] Call Trace: [ 547.491904][T16513] [ 547.494674][T16513] dump_stack_lvl+0x151/0x1b7 [ 547.499196][T16513] ? bfq_pos_tree_add_move+0x43e/0x43e [ 547.504481][T16513] ? stack_trace_save+0x1f0/0x1f0 [ 547.509344][T16513] ? __kernel_text_address+0x9a/0x110 [ 547.514566][T16513] dump_stack+0x15/0x17 [ 547.518544][T16513] should_fail+0x3c0/0x510 [ 547.522801][T16513] should_fail_alloc_page+0x58/0x70 [ 547.527829][T16513] __alloc_pages+0x1de/0x7c0 [ 547.532254][T16513] ? stack_trace_save+0x12d/0x1f0 [ 547.537120][T16513] ? stack_trace_snprint+0x100/0x100 [ 547.542242][T16513] ? __count_vm_events+0x30/0x30 [ 547.547012][T16513] ? __kasan_slab_alloc+0xc4/0xe0 [ 547.551872][T16513] ? __kasan_slab_alloc+0xb2/0xe0 [ 547.556729][T16513] ? kmem_cache_alloc+0x189/0x2f0 [ 547.561596][T16513] ? anon_vma_fork+0x1b9/0x4f0 [ 547.566193][T16513] get_zeroed_page+0x19/0x40 [ 547.570618][T16513] __pud_alloc+0x8b/0x260 [ 547.574782][T16513] ? do_handle_mm_fault+0x2370/0x2370 [ 547.579992][T16513] copy_page_range+0xd9e/0x1090 [ 547.584679][T16513] ? pfn_valid+0x1e0/0x1e0 [ 547.588933][T16513] dup_mmap+0x99f/0xea0 [ 547.592927][T16513] ? __delayed_free_task+0x20/0x20 [ 547.597871][T16513] ? mm_init+0x807/0x960 [ 547.601948][T16513] dup_mm+0x91/0x330 [ 547.605681][T16513] copy_mm+0x108/0x1b0 [ 547.609587][T16513] copy_process+0x1295/0x3250 [ 547.614101][T16513] ? check_stack_object+0x117/0x130 [ 547.619135][T16513] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 547.624082][T16513] ? copy_clone_args_from_user+0x6f0/0x790 [ 547.629723][T16513] kernel_clone+0x22d/0x990 [ 547.634090][T16513] ? dup_mmap+0xea0/0xea0 [ 547.638227][T16513] ? create_io_thread+0x1e0/0x1e0 [ 547.643100][T16513] ? file_end_write+0x1b0/0x1b0 [ 547.647774][T16513] __x64_sys_clone3+0x375/0x3a0 [ 547.652462][T16513] ? __ia32_sys_clone+0x300/0x300 [ 547.657324][T16513] ? ksys_write+0x25f/0x2c0 [ 547.661749][T16513] ? debug_smp_processor_id+0x17/0x20 [ 547.666960][T16513] do_syscall_64+0x44/0xd0 [ 547.671213][T16513] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 547.677053][T16513] RIP: 0033:0x7fb8471070d9 [ 547.681308][T16513] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 17:18:57 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 36) [ 547.700748][T16513] RSP: 002b:00007fb845e7a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 547.708993][T16513] RAX: ffffffffffffffda RBX: 00007fb847226f80 RCX: 00007fb8471070d9 [ 547.716808][T16513] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fb845e7a050 [ 547.724615][T16513] RBP: 00007fb845e7a1d0 R08: 0000000000000000 R09: 0000000000000058 [ 547.732430][T16513] R10: 00007fb845e7a050 R11: 0000000000000246 R12: 0000000000000058 [ 547.740327][T16513] R13: 00007ffcf73cf18f R14: 00007fb845e7a300 R15: 0000000000022000 [ 547.748137][T16513] 17:18:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xb4}, {0x0}, {&(0x7f0000002a80)=""/4096, 0xe14}], 0x3, 0x0, 0x600d0000}}], 0x300, 0x0, 0x0) 17:18:57 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) 17:18:57 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x8100) 17:18:57 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x80000}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 547.759401][T16515] FAULT_INJECTION: forcing a failure. [ 547.759401][T16515] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 547.785797][T16515] CPU: 1 PID: 16515 Comm: syz-executor.0 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 547.795870][T16515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 547.805863][T16515] Call Trace: [ 547.809005][T16515] [ 547.811758][T16515] dump_stack_lvl+0x151/0x1b7 [ 547.816272][T16515] ? bfq_pos_tree_add_move+0x43e/0x43e [ 547.821569][T16515] dump_stack+0x15/0x17 [ 547.825695][T16515] should_fail+0x3c0/0x510 [ 547.829941][T16515] should_fail_alloc_page+0x58/0x70 [ 547.834969][T16515] __alloc_pages+0x1de/0x7c0 [ 547.839403][T16515] ? __count_vm_events+0x30/0x30 [ 547.844171][T16515] ? dup_mm+0x91/0x330 [ 547.848077][T16515] ? copy_mm+0x108/0x1b0 [ 547.852164][T16515] ? copy_process+0x1295/0x3250 [ 547.856840][T16515] ? kernel_clone+0x22d/0x990 [ 547.861351][T16515] ? __x64_sys_clone3+0x375/0x3a0 [ 547.866215][T16515] pte_alloc_one+0x73/0x1b0 [ 547.870556][T16515] ? pfn_modify_allowed+0x2e0/0x2e0 [ 547.875595][T16515] ? __kasan_check_write+0x14/0x20 [ 547.880540][T16515] ? __set_page_owner+0x2ee/0x310 [ 547.885397][T16515] __pte_alloc+0x86/0x350 [ 547.889561][T16515] ? post_alloc_hook+0x1ab/0x1b0 [ 547.894333][T16515] ? free_pgtables+0x210/0x210 [ 547.898934][T16515] ? get_page_from_freelist+0x38b/0x400 [ 547.904316][T16515] copy_pte_range+0x1b1f/0x20b0 [ 547.909006][T16515] ? __kunmap_atomic+0x80/0x80 [ 547.913601][T16515] ? __pud_alloc+0x260/0x260 [ 547.918027][T16515] ? __pud_alloc+0x218/0x260 [ 547.922455][T16515] ? do_handle_mm_fault+0x2370/0x2370 [ 547.927663][T16515] copy_page_range+0xc1e/0x1090 [ 547.932351][T16515] ? pfn_valid+0x1e0/0x1e0 [ 547.936602][T16515] dup_mmap+0x99f/0xea0 [ 547.940594][T16515] ? __delayed_free_task+0x20/0x20 [ 547.945547][T16515] ? mm_init+0x807/0x960 [ 547.949629][T16515] dup_mm+0x91/0x330 [ 547.953354][T16515] copy_mm+0x108/0x1b0 [ 547.957259][T16515] copy_process+0x1295/0x3250 [ 547.961773][T16515] ? check_stack_object+0x117/0x130 [ 547.966806][T16515] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 547.971756][T16515] ? copy_clone_args_from_user+0x6f0/0x790 [ 547.977394][T16515] kernel_clone+0x22d/0x990 [ 547.981737][T16515] ? dup_mmap+0xea0/0xea0 [ 547.985903][T16515] ? create_io_thread+0x1e0/0x1e0 [ 547.990761][T16515] ? file_end_write+0x1b0/0x1b0 [ 547.995454][T16515] __x64_sys_clone3+0x375/0x3a0 [ 548.000139][T16515] ? __ia32_sys_clone+0x300/0x300 [ 548.004995][T16515] ? ksys_write+0x25f/0x2c0 [ 548.009333][T16515] ? debug_smp_processor_id+0x17/0x20 [ 548.014540][T16515] do_syscall_64+0x44/0xd0 [ 548.018807][T16515] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 548.024634][T16515] RIP: 0033:0x7fa07a6ec0d9 [ 548.028887][T16515] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 548.048419][T16515] RSP: 002b:00007fa07945f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 17:18:57 executing program 2: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 41) 17:18:57 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x101000}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 17:18:57 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x1a2000}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 548.056656][T16515] RAX: ffffffffffffffda RBX: 00007fa07a80bf80 RCX: 00007fa07a6ec0d9 [ 548.064469][T16515] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fa07945f050 [ 548.072285][T16515] RBP: 00007fa07945f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 548.080241][T16515] R10: 00007fa07945f050 R11: 0000000000000246 R12: 0000000000000058 [ 548.088050][T16515] R13: 00007ffd55a8aedf R14: 00007fa07945f300 R15: 0000000000022000 [ 548.096063][T16515] 17:18:57 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 37) 17:18:57 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x8200) [ 548.118888][T16530] FAULT_INJECTION: forcing a failure. [ 548.118888][T16530] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 548.132881][T16530] CPU: 0 PID: 16530 Comm: syz-executor.2 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 548.142944][T16530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 548.152839][T16530] Call Trace: [ 548.155963][T16530] [ 548.158740][T16530] dump_stack_lvl+0x151/0x1b7 [ 548.163255][T16530] ? bfq_pos_tree_add_move+0x43e/0x43e 17:18:57 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x201a00}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 548.168548][T16530] ? __kasan_check_write+0x14/0x20 [ 548.173497][T16530] ? __set_page_owner+0x2ee/0x310 [ 548.178360][T16530] dump_stack+0x15/0x17 [ 548.182348][T16530] should_fail+0x3c0/0x510 [ 548.186687][T16530] should_fail_alloc_page+0x58/0x70 [ 548.191726][T16530] __alloc_pages+0x1de/0x7c0 [ 548.196150][T16530] ? __count_vm_events+0x30/0x30 [ 548.200933][T16530] ? __count_vm_events+0x30/0x30 [ 548.205695][T16530] ? __kasan_check_write+0x14/0x20 [ 548.210642][T16530] ? _raw_spin_lock+0xa3/0x1b0 [ 548.215241][T16530] __pmd_alloc+0xb1/0x550 17:18:57 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x8300) [ 548.219158][T16537] FAULT_INJECTION: forcing a failure. [ 548.219158][T16537] name failslab, interval 1, probability 0, space 0, times 0 [ 548.219402][T16530] ? kmem_cache_alloc+0x189/0x2f0 [ 548.236678][T16530] ? anon_vma_fork+0x1b9/0x4f0 [ 548.241283][T16530] ? __pud_alloc+0x260/0x260 [ 548.245704][T16530] ? __pud_alloc+0x218/0x260 [ 548.250130][T16530] ? do_handle_mm_fault+0x2370/0x2370 [ 548.255426][T16530] copy_page_range+0xd04/0x1090 [ 548.260124][T16530] ? pfn_valid+0x1e0/0x1e0 [ 548.264367][T16530] dup_mmap+0x99f/0xea0 17:18:57 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x8400) [ 548.268358][T16530] ? __delayed_free_task+0x20/0x20 [ 548.273306][T16530] ? mm_init+0x807/0x960 [ 548.277384][T16530] dup_mm+0x91/0x330 [ 548.281117][T16530] copy_mm+0x108/0x1b0 [ 548.285021][T16530] copy_process+0x1295/0x3250 [ 548.289623][T16530] ? check_stack_object+0x117/0x130 [ 548.294653][T16530] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 548.299779][T16530] ? copy_clone_args_from_user+0x6f0/0x790 [ 548.305417][T16530] kernel_clone+0x22d/0x990 [ 548.309757][T16530] ? dup_mmap+0xea0/0xea0 [ 548.313923][T16530] ? create_io_thread+0x1e0/0x1e0 [ 548.318786][T16530] ? file_end_write+0x1b0/0x1b0 [ 548.323471][T16530] __x64_sys_clone3+0x375/0x3a0 [ 548.328155][T16530] ? __ia32_sys_clone+0x300/0x300 [ 548.333019][T16530] ? ksys_write+0x25f/0x2c0 [ 548.337358][T16530] ? debug_smp_processor_id+0x17/0x20 [ 548.342659][T16530] do_syscall_64+0x44/0xd0 [ 548.346909][T16530] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 548.352636][T16530] RIP: 0033:0x7fb8471070d9 [ 548.356890][T16530] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 548.376331][T16530] RSP: 002b:00007fb845e7a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 548.384576][T16530] RAX: ffffffffffffffda RBX: 00007fb847226f80 RCX: 00007fb8471070d9 [ 548.392385][T16530] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fb845e7a050 [ 548.400214][T16530] RBP: 00007fb845e7a1d0 R08: 0000000000000000 R09: 0000000000000058 [ 548.408005][T16530] R10: 00007fb845e7a050 R11: 0000000000000246 R12: 0000000000000058 [ 548.415817][T16530] R13: 00007ffcf73cf18f R14: 00007fb845e7a300 R15: 0000000000022000 [ 548.423635][T16530] [ 548.426498][T16537] CPU: 1 PID: 16537 Comm: syz-executor.0 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 548.436569][T16537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 548.446462][T16537] Call Trace: [ 548.449580][T16537] [ 548.452358][T16537] dump_stack_lvl+0x151/0x1b7 [ 548.456870][T16537] ? bfq_pos_tree_add_move+0x43e/0x43e [ 548.462164][T16537] ? do_syscall_64+0x44/0xd0 [ 548.466593][T16537] dump_stack+0x15/0x17 [ 548.470584][T16537] should_fail+0x3c0/0x510 [ 548.474837][T16537] __should_failslab+0x9f/0xe0 [ 548.479437][T16537] should_failslab+0x9/0x20 [ 548.483778][T16537] kmem_cache_alloc+0x4f/0x2f0 [ 548.488375][T16537] ? anon_vma_clone+0xa1/0x4f0 [ 548.492975][T16537] anon_vma_clone+0xa1/0x4f0 [ 548.497403][T16537] anon_vma_fork+0x91/0x4f0 [ 548.501741][T16537] ? anon_vma_name+0x4c/0x70 [ 548.506168][T16537] dup_mmap+0x750/0xea0 [ 548.510170][T16537] ? __delayed_free_task+0x20/0x20 [ 548.515108][T16537] ? mm_init+0x807/0x960 [ 548.519191][T16537] dup_mm+0x91/0x330 [ 548.522920][T16537] copy_mm+0x108/0x1b0 [ 548.526827][T16537] copy_process+0x1295/0x3250 [ 548.531339][T16537] ? check_stack_object+0x117/0x130 [ 548.536372][T16537] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 548.541318][T16537] ? copy_clone_args_from_user+0x6f0/0x790 [ 548.546963][T16537] kernel_clone+0x22d/0x990 [ 548.551301][T16537] ? dup_mmap+0xea0/0xea0 [ 548.555468][T16537] ? create_io_thread+0x1e0/0x1e0 [ 548.560327][T16537] ? file_end_write+0x1b0/0x1b0 [ 548.565012][T16537] __x64_sys_clone3+0x375/0x3a0 [ 548.569703][T16537] ? __ia32_sys_clone+0x300/0x300 [ 548.574577][T16537] ? ksys_write+0x25f/0x2c0 [ 548.578903][T16537] ? debug_smp_processor_id+0x17/0x20 [ 548.584108][T16537] do_syscall_64+0x44/0xd0 [ 548.588360][T16537] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 548.594089][T16537] RIP: 0033:0x7fa07a6ec0d9 [ 548.598342][T16537] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 17:18:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xb4}, {0x0}, {&(0x7f0000002a80)=""/4096, 0xe14}], 0x3, 0x0, 0x680a0000}}], 0x300, 0x0, 0x0) 17:18:58 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x8455) 17:18:58 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) 17:18:58 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0xf0ff1f}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 17:18:58 executing program 2: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 42) [ 548.617877][T16537] RSP: 002b:00007fa07945f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 548.626123][T16537] RAX: ffffffffffffffda RBX: 00007fa07a80bf80 RCX: 00007fa07a6ec0d9 [ 548.633962][T16537] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fa07945f050 [ 548.641747][T16537] RBP: 00007fa07945f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 548.649562][T16537] R10: 00007fa07945f050 R11: 0000000000000246 R12: 0000000000000058 [ 548.657456][T16537] R13: 00007ffd55a8aedf R14: 00007fa07945f300 R15: 0000000000022000 [ 548.665268][T16537] 17:18:58 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 38) 17:18:58 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x1000000}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 548.716195][T16552] FAULT_INJECTION: forcing a failure. [ 548.716195][T16552] name failslab, interval 1, probability 0, space 0, times 0 [ 548.734514][T16554] FAULT_INJECTION: forcing a failure. [ 548.734514][T16554] name failslab, interval 1, probability 0, space 0, times 0 [ 548.750754][T16554] CPU: 0 PID: 16554 Comm: syz-executor.0 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 548.760925][T16554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 548.770814][T16554] Call Trace: [ 548.773933][T16554] [ 548.776711][T16554] dump_stack_lvl+0x151/0x1b7 [ 548.781225][T16554] ? bfq_pos_tree_add_move+0x43e/0x43e [ 548.786520][T16554] dump_stack+0x15/0x17 [ 548.790511][T16554] should_fail+0x3c0/0x510 [ 548.794850][T16554] __should_failslab+0x9f/0xe0 [ 548.799450][T16554] should_failslab+0x9/0x20 [ 548.803788][T16554] kmem_cache_alloc+0x4f/0x2f0 [ 548.808390][T16554] ? vm_area_dup+0x26/0x1d0 [ 548.812732][T16554] vm_area_dup+0x26/0x1d0 [ 548.816896][T16554] dup_mmap+0x6b8/0xea0 [ 548.820909][T16554] ? __delayed_free_task+0x20/0x20 [ 548.825835][T16554] ? mm_init+0x807/0x960 [ 548.829913][T16554] dup_mm+0x91/0x330 [ 548.833648][T16554] copy_mm+0x108/0x1b0 [ 548.837554][T16554] copy_process+0x1295/0x3250 [ 548.842066][T16554] ? check_stack_object+0x117/0x130 [ 548.847098][T16554] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 548.852082][T16554] ? copy_clone_args_from_user+0x6f0/0x790 [ 548.857688][T16554] kernel_clone+0x22d/0x990 [ 548.862031][T16554] ? dup_mmap+0xea0/0xea0 [ 548.866200][T16554] ? create_io_thread+0x1e0/0x1e0 [ 548.871054][T16554] ? file_end_write+0x1b0/0x1b0 [ 548.875739][T16554] __x64_sys_clone3+0x375/0x3a0 [ 548.880430][T16554] ? __ia32_sys_clone+0x300/0x300 [ 548.885371][T16554] ? ksys_write+0x25f/0x2c0 [ 548.889713][T16554] ? debug_smp_processor_id+0x17/0x20 [ 548.894920][T16554] do_syscall_64+0x44/0xd0 [ 548.899175][T16554] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 548.904900][T16554] RIP: 0033:0x7fa07a6ec0d9 [ 548.909155][T16554] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 548.928597][T16554] RSP: 002b:00007fa07945f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 548.936929][T16554] RAX: ffffffffffffffda RBX: 00007fa07a80bf80 RCX: 00007fa07a6ec0d9 [ 548.944739][T16554] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fa07945f050 [ 548.952550][T16554] RBP: 00007fa07945f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 548.960449][T16554] R10: 00007fa07945f050 R11: 0000000000000246 R12: 0000000000000058 [ 548.968266][T16554] R13: 00007ffd55a8aedf R14: 00007fa07945f300 R15: 0000000000022000 [ 548.976073][T16554] [ 548.978946][T16552] CPU: 1 PID: 16552 Comm: syz-executor.2 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 548.989100][T16552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 548.998987][T16552] Call Trace: [ 549.002112][T16552] [ 549.004894][T16552] dump_stack_lvl+0x151/0x1b7 [ 549.009402][T16552] ? bfq_pos_tree_add_move+0x43e/0x43e 17:18:58 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x8456) 17:18:58 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) 17:18:58 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 39) [ 549.014698][T16552] dump_stack+0x15/0x17 [ 549.018687][T16552] should_fail+0x3c0/0x510 [ 549.022943][T16552] __should_failslab+0x9f/0xe0 [ 549.027537][T16552] should_failslab+0x9/0x20 [ 549.031875][T16552] kmem_cache_alloc+0x4f/0x2f0 [ 549.036475][T16552] ? anon_vma_clone+0xa1/0x4f0 [ 549.041076][T16552] anon_vma_clone+0xa1/0x4f0 [ 549.045502][T16552] anon_vma_fork+0x91/0x4f0 [ 549.049842][T16552] ? anon_vma_name+0x4c/0x70 [ 549.054268][T16552] dup_mmap+0x750/0xea0 [ 549.058260][T16552] ? __delayed_free_task+0x20/0x20 [ 549.063213][T16552] ? mm_init+0x807/0x960 [ 549.067286][T16552] dup_mm+0x91/0x330 [ 549.071019][T16552] copy_mm+0x108/0x1b0 [ 549.074925][T16552] copy_process+0x1295/0x3250 [ 549.079438][T16552] ? check_stack_object+0x117/0x130 [ 549.084581][T16552] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 549.089529][T16552] ? copy_clone_args_from_user+0x6f0/0x790 [ 549.095166][T16552] kernel_clone+0x22d/0x990 [ 549.099507][T16552] ? dup_mmap+0xea0/0xea0 [ 549.103776][T16552] ? create_io_thread+0x1e0/0x1e0 [ 549.108630][T16552] ? file_end_write+0x1b0/0x1b0 [ 549.113319][T16552] __x64_sys_clone3+0x375/0x3a0 [ 549.118009][T16552] ? __ia32_sys_clone+0x300/0x300 [ 549.122868][T16552] ? ksys_write+0x25f/0x2c0 [ 549.127210][T16552] ? debug_smp_processor_id+0x17/0x20 [ 549.132412][T16552] do_syscall_64+0x44/0xd0 [ 549.136667][T16552] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 549.142402][T16552] RIP: 0033:0x7fb8471070d9 [ 549.146650][T16552] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 17:18:58 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x2000000}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 549.166090][T16552] RSP: 002b:00007fb845e7a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 549.174333][T16552] RAX: ffffffffffffffda RBX: 00007fb847226f80 RCX: 00007fb8471070d9 [ 549.182145][T16552] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fb845e7a050 [ 549.189958][T16552] RBP: 00007fb845e7a1d0 R08: 0000000000000000 R09: 0000000000000058 [ 549.197769][T16552] R10: 00007fb845e7a050 R11: 0000000000000246 R12: 0000000000000058 [ 549.206924][T16552] R13: 00007ffcf73cf18f R14: 00007fb845e7a300 R15: 0000000000022000 [ 549.214733][T16552] 17:18:58 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x7000000}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 549.230926][T16566] FAULT_INJECTION: forcing a failure. [ 549.230926][T16566] name failslab, interval 1, probability 0, space 0, times 0 [ 549.254194][T16566] CPU: 0 PID: 16566 Comm: syz-executor.0 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 549.264364][T16566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 549.274338][T16566] Call Trace: [ 549.277458][T16566] [ 549.280236][T16566] dump_stack_lvl+0x151/0x1b7 [ 549.284749][T16566] ? bfq_pos_tree_add_move+0x43e/0x43e [ 549.290050][T16566] ? vma_interval_tree_augment_rotate+0x210/0x210 [ 549.296301][T16566] dump_stack+0x15/0x17 [ 549.300297][T16566] should_fail+0x3c0/0x510 [ 549.304554][T16566] __should_failslab+0x9f/0xe0 [ 549.309142][T16566] should_failslab+0x9/0x20 [ 549.313480][T16566] kmem_cache_alloc+0x4f/0x2f0 [ 549.318128][T16566] ? anon_vma_fork+0xf7/0x4f0 [ 549.322603][T16566] anon_vma_fork+0xf7/0x4f0 [ 549.326943][T16566] ? anon_vma_name+0x4c/0x70 [ 549.331357][T16566] dup_mmap+0x750/0xea0 [ 549.335348][T16566] ? __delayed_free_task+0x20/0x20 [ 549.340294][T16566] ? mm_init+0x807/0x960 [ 549.344376][T16566] dup_mm+0x91/0x330 [ 549.348106][T16566] copy_mm+0x108/0x1b0 [ 549.352011][T16566] copy_process+0x1295/0x3250 [ 549.356530][T16566] ? check_stack_object+0x117/0x130 [ 549.361561][T16566] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 549.366504][T16566] ? copy_clone_args_from_user+0x6f0/0x790 [ 549.372147][T16566] kernel_clone+0x22d/0x990 [ 549.376488][T16566] ? dup_mmap+0xea0/0xea0 [ 549.380661][T16566] ? create_io_thread+0x1e0/0x1e0 [ 549.385513][T16566] ? file_end_write+0x1b0/0x1b0 [ 549.390200][T16566] __x64_sys_clone3+0x375/0x3a0 [ 549.394889][T16566] ? __ia32_sys_clone+0x300/0x300 [ 549.399750][T16566] ? ksys_write+0x25f/0x2c0 [ 549.404087][T16566] ? debug_smp_processor_id+0x17/0x20 [ 549.409294][T16566] do_syscall_64+0x44/0xd0 [ 549.413593][T16566] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 549.419275][T16566] RIP: 0033:0x7fa07a6ec0d9 [ 549.423528][T16566] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 549.442972][T16566] RSP: 002b:00007fa07945f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 549.451216][T16566] RAX: ffffffffffffffda RBX: 00007fa07a80bf80 RCX: 00007fa07a6ec0d9 [ 549.459026][T16566] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fa07945f050 [ 549.466836][T16566] RBP: 00007fa07945f1d0 R08: 0000000000000000 R09: 0000000000000058 17:18:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xb4}, {0x0}, {&(0x7f0000002a80)=""/4096, 0xe14}], 0x3, 0x0, 0x680b0000}}], 0x300, 0x0, 0x0) 17:18:58 executing program 2: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 43) 17:18:58 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x8000000}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 17:18:58 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c0001"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) 17:18:58 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x8500) 17:18:58 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 40) [ 549.474647][T16566] R10: 00007fa07945f050 R11: 0000000000000246 R12: 0000000000000058 [ 549.482461][T16566] R13: 00007ffd55a8aedf R14: 00007fa07945f300 R15: 0000000000022000 [ 549.490274][T16566] [ 549.538296][T16572] FAULT_INJECTION: forcing a failure. [ 549.538296][T16572] name failslab, interval 1, probability 0, space 0, times 0 [ 549.550844][T16572] CPU: 1 PID: 16572 Comm: syz-executor.2 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 549.555829][T16578] FAULT_INJECTION: forcing a failure. [ 549.555829][T16578] name failslab, interval 1, probability 0, space 0, times 0 [ 549.560915][T16572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 549.560932][T16572] Call Trace: [ 549.560939][T16572] [ 549.560945][T16572] dump_stack_lvl+0x151/0x1b7 [ 549.560972][T16572] ? bfq_pos_tree_add_move+0x43e/0x43e [ 549.560992][T16572] dump_stack+0x15/0x17 [ 549.561008][T16572] should_fail+0x3c0/0x510 [ 549.561025][T16572] __should_failslab+0x9f/0xe0 [ 549.611776][T16572] should_failslab+0x9/0x20 [ 549.616115][T16572] kmem_cache_alloc+0x4f/0x2f0 [ 549.620711][T16572] ? anon_vma_clone+0xa1/0x4f0 [ 549.625309][T16572] anon_vma_clone+0xa1/0x4f0 [ 549.629738][T16572] anon_vma_fork+0x91/0x4f0 [ 549.634087][T16572] ? anon_vma_name+0x4c/0x70 [ 549.638503][T16572] dup_mmap+0x750/0xea0 [ 549.642499][T16572] ? __delayed_free_task+0x20/0x20 [ 549.647445][T16572] ? mm_init+0x807/0x960 [ 549.651527][T16572] dup_mm+0x91/0x330 [ 549.655253][T16572] copy_mm+0x108/0x1b0 [ 549.659167][T16572] copy_process+0x1295/0x3250 [ 549.663678][T16572] ? check_stack_object+0x117/0x130 [ 549.668716][T16572] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 549.673659][T16572] ? copy_clone_args_from_user+0x6f0/0x790 [ 549.679297][T16572] kernel_clone+0x22d/0x990 [ 549.683635][T16572] ? dup_mmap+0xea0/0xea0 [ 549.687801][T16572] ? create_io_thread+0x1e0/0x1e0 [ 549.692669][T16572] ? file_end_write+0x1b0/0x1b0 [ 549.697350][T16572] __x64_sys_clone3+0x375/0x3a0 [ 549.702037][T16572] ? __ia32_sys_clone+0x300/0x300 [ 549.706900][T16572] ? ksys_write+0x25f/0x2c0 [ 549.711238][T16572] ? debug_smp_processor_id+0x17/0x20 [ 549.716447][T16572] do_syscall_64+0x44/0xd0 [ 549.720694][T16572] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 549.726423][T16572] RIP: 0033:0x7fb8471070d9 [ 549.730674][T16572] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 549.750115][T16572] RSP: 002b:00007fb845e7a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 549.758362][T16572] RAX: ffffffffffffffda RBX: 00007fb847226f80 RCX: 00007fb8471070d9 [ 549.766170][T16572] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fb845e7a050 [ 549.773980][T16572] RBP: 00007fb845e7a1d0 R08: 0000000000000000 R09: 0000000000000058 [ 549.781794][T16572] R10: 00007fb845e7a050 R11: 0000000000000246 R12: 0000000000000058 [ 549.789603][T16572] R13: 00007ffcf73cf18f R14: 00007fb845e7a300 R15: 0000000000022000 [ 549.797419][T16572] [ 549.800280][T16578] CPU: 0 PID: 16578 Comm: syz-executor.0 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 549.810451][T16578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 549.820430][T16578] Call Trace: [ 549.823557][T16578] [ 549.826328][T16578] dump_stack_lvl+0x151/0x1b7 [ 549.830840][T16578] ? bfq_pos_tree_add_move+0x43e/0x43e [ 549.836134][T16578] dump_stack+0x15/0x17 [ 549.840127][T16578] should_fail+0x3c0/0x510 [ 549.844381][T16578] __should_failslab+0x9f/0xe0 [ 549.848982][T16578] should_failslab+0x9/0x20 [ 549.853318][T16578] kmem_cache_alloc+0x4f/0x2f0 [ 549.857920][T16578] ? vm_area_dup+0x26/0x1d0 [ 549.862257][T16578] ? __kasan_check_read+0x11/0x20 [ 549.867120][T16578] vm_area_dup+0x26/0x1d0 [ 549.871284][T16578] dup_mmap+0x6b8/0xea0 [ 549.875278][T16578] ? __delayed_free_task+0x20/0x20 [ 549.880224][T16578] ? mm_init+0x807/0x960 [ 549.884304][T16578] dup_mm+0x91/0x330 [ 549.888035][T16578] copy_mm+0x108/0x1b0 [ 549.891941][T16578] copy_process+0x1295/0x3250 [ 549.896630][T16578] ? check_stack_object+0x117/0x130 [ 549.901664][T16578] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 549.906608][T16578] ? copy_clone_args_from_user+0x6f0/0x790 [ 549.912253][T16578] kernel_clone+0x22d/0x990 [ 549.916590][T16578] ? dup_mmap+0xea0/0xea0 [ 549.920757][T16578] ? create_io_thread+0x1e0/0x1e0 [ 549.925617][T16578] ? file_end_write+0x1b0/0x1b0 [ 549.930304][T16578] __x64_sys_clone3+0x375/0x3a0 [ 549.934991][T16578] ? __ia32_sys_clone+0x300/0x300 [ 549.939865][T16578] ? ksys_write+0x25f/0x2c0 [ 549.944190][T16578] ? debug_smp_processor_id+0x17/0x20 [ 549.949398][T16578] do_syscall_64+0x44/0xd0 [ 549.953652][T16578] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 549.959378][T16578] RIP: 0033:0x7fa07a6ec0d9 [ 549.963633][T16578] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 17:18:59 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x9000000}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 17:18:59 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 41) [ 549.983073][T16578] RSP: 002b:00007fa07945f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 549.991316][T16578] RAX: ffffffffffffffda RBX: 00007fa07a80bf80 RCX: 00007fa07a6ec0d9 [ 549.999129][T16578] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fa07945f050 [ 550.006947][T16578] RBP: 00007fa07945f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 550.014749][T16578] R10: 00007fa07945f050 R11: 0000000000000246 R12: 0000000000000058 [ 550.022564][T16578] R13: 00007ffd55a8aedf R14: 00007fa07945f300 R15: 0000000000022000 [ 550.030378][T16578] 17:18:59 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x8600) 17:18:59 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x10000200}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 17:18:59 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c0001"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) 17:18:59 executing program 2: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 44) [ 550.097754][T16589] FAULT_INJECTION: forcing a failure. [ 550.097754][T16589] name failslab, interval 1, probability 0, space 0, times 0 [ 550.110716][T16594] FAULT_INJECTION: forcing a failure. [ 550.110716][T16594] name failslab, interval 1, probability 0, space 0, times 0 [ 550.123598][T16594] CPU: 0 PID: 16594 Comm: syz-executor.2 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 550.133666][T16594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 550.143563][T16594] Call Trace: [ 550.146687][T16594] [ 550.149458][T16594] dump_stack_lvl+0x151/0x1b7 [ 550.153974][T16594] ? bfq_pos_tree_add_move+0x43e/0x43e [ 550.159270][T16594] ? vma_interval_tree_augment_rotate+0x210/0x210 [ 550.165517][T16594] dump_stack+0x15/0x17 [ 550.169507][T16594] should_fail+0x3c0/0x510 [ 550.173758][T16594] __should_failslab+0x9f/0xe0 [ 550.178362][T16594] should_failslab+0x9/0x20 [ 550.182703][T16594] kmem_cache_alloc+0x4f/0x2f0 [ 550.187322][T16594] ? anon_vma_fork+0xf7/0x4f0 [ 550.191813][T16594] anon_vma_fork+0xf7/0x4f0 [ 550.196150][T16594] ? anon_vma_name+0x4c/0x70 [ 550.200578][T16594] dup_mmap+0x750/0xea0 [ 550.204575][T16594] ? __delayed_free_task+0x20/0x20 [ 550.209520][T16594] ? mm_init+0x807/0x960 [ 550.213598][T16594] dup_mm+0x91/0x330 [ 550.217329][T16594] copy_mm+0x108/0x1b0 [ 550.221237][T16594] copy_process+0x1295/0x3250 [ 550.225749][T16594] ? check_stack_object+0x117/0x130 [ 550.230787][T16594] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 550.235728][T16594] ? copy_clone_args_from_user+0x6f0/0x790 [ 550.241370][T16594] kernel_clone+0x22d/0x990 [ 550.245709][T16594] ? dup_mmap+0xea0/0xea0 [ 550.249875][T16594] ? create_io_thread+0x1e0/0x1e0 [ 550.254847][T16594] ? file_end_write+0x1b0/0x1b0 [ 550.259524][T16594] __x64_sys_clone3+0x375/0x3a0 [ 550.264202][T16594] ? __ia32_sys_clone+0x300/0x300 [ 550.269065][T16594] ? ksys_write+0x25f/0x2c0 [ 550.273404][T16594] ? debug_smp_processor_id+0x17/0x20 [ 550.278613][T16594] do_syscall_64+0x44/0xd0 [ 550.282863][T16594] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 550.288597][T16594] RIP: 0033:0x7fb8471070d9 [ 550.292847][T16594] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 550.312284][T16594] RSP: 002b:00007fb845e7a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 550.320538][T16594] RAX: ffffffffffffffda RBX: 00007fb847226f80 RCX: 00007fb8471070d9 [ 550.328429][T16594] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fb845e7a050 [ 550.336240][T16594] RBP: 00007fb845e7a1d0 R08: 0000000000000000 R09: 0000000000000058 [ 550.344050][T16594] R10: 00007fb845e7a050 R11: 0000000000000246 R12: 0000000000000058 [ 550.351867][T16594] R13: 00007ffcf73cf18f R14: 00007fb845e7a300 R15: 0000000000022000 [ 550.359683][T16594] [ 550.366104][T16589] CPU: 0 PID: 16589 Comm: syz-executor.0 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 550.376172][T16589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 550.386067][T16589] Call Trace: [ 550.389200][T16589] [ 550.391966][T16589] dump_stack_lvl+0x151/0x1b7 [ 550.396497][T16589] ? bfq_pos_tree_add_move+0x43e/0x43e [ 550.401798][T16589] ? do_syscall_64+0x44/0xd0 [ 550.406205][T16589] dump_stack+0x15/0x17 [ 550.410190][T16589] should_fail+0x3c0/0x510 [ 550.414441][T16589] __should_failslab+0x9f/0xe0 [ 550.419041][T16589] should_failslab+0x9/0x20 [ 550.423381][T16589] kmem_cache_alloc+0x4f/0x2f0 [ 550.427978][T16589] ? anon_vma_clone+0xa1/0x4f0 [ 550.432581][T16589] anon_vma_clone+0xa1/0x4f0 [ 550.437012][T16589] anon_vma_fork+0x91/0x4f0 [ 550.441345][T16589] ? anon_vma_name+0x4c/0x70 [ 550.445773][T16589] dup_mmap+0x750/0xea0 [ 550.449765][T16589] ? __delayed_free_task+0x20/0x20 [ 550.454711][T16589] ? mm_init+0x807/0x960 [ 550.458800][T16589] dup_mm+0x91/0x330 [ 550.462524][T16589] copy_mm+0x108/0x1b0 [ 550.466428][T16589] copy_process+0x1295/0x3250 [ 550.470944][T16589] ? check_stack_object+0x117/0x130 [ 550.475976][T16589] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 550.480925][T16589] ? copy_clone_args_from_user+0x6f0/0x790 [ 550.486566][T16589] kernel_clone+0x22d/0x990 [ 550.491078][T16589] ? dup_mmap+0xea0/0xea0 [ 550.495357][T16589] ? create_io_thread+0x1e0/0x1e0 [ 550.500214][T16589] ? file_end_write+0x1b0/0x1b0 [ 550.504902][T16589] __x64_sys_clone3+0x375/0x3a0 [ 550.509587][T16589] ? __ia32_sys_clone+0x300/0x300 [ 550.514450][T16589] ? ksys_write+0x25f/0x2c0 [ 550.518789][T16589] ? debug_smp_processor_id+0x17/0x20 [ 550.523994][T16589] do_syscall_64+0x44/0xd0 [ 550.528248][T16589] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 550.533980][T16589] RIP: 0033:0x7fa07a6ec0d9 [ 550.538238][T16589] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 550.557671][T16589] RSP: 002b:00007fa07945f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 550.565915][T16589] RAX: ffffffffffffffda RBX: 00007fa07a80bf80 RCX: 00007fa07a6ec0d9 [ 550.573730][T16589] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fa07945f050 [ 550.581548][T16589] RBP: 00007fa07945f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 550.589349][T16589] R10: 00007fa07945f050 R11: 0000000000000246 R12: 0000000000000058 17:19:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xb4}, {0x0}, {&(0x7f0000002a80)=""/4096, 0xe14}], 0x3, 0x0, 0x740c0000}}], 0x300, 0x0, 0x0) 17:19:00 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x11000000}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 17:19:00 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c0001"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) 17:19:00 executing program 2: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 45) 17:19:00 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x8700) 17:19:00 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 42) 17:19:00 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x1f000000}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 550.597161][T16589] R13: 00007ffd55a8aedf R14: 00007fa07945f300 R15: 0000000000022000 [ 550.604974][T16589] [ 550.631978][T16602] FAULT_INJECTION: forcing a failure. [ 550.631978][T16602] name fail_page_alloc, interval 1, probability 0, space 0, times 0 17:19:00 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x1ffff000}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 17:19:00 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c0001007665"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) 17:19:00 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x20000000}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 550.646100][T16602] CPU: 0 PID: 16602 Comm: syz-executor.0 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 550.656266][T16602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 550.666159][T16602] Call Trace: [ 550.669371][T16602] [ 550.672149][T16602] dump_stack_lvl+0x151/0x1b7 [ 550.676664][T16602] ? bfq_pos_tree_add_move+0x43e/0x43e [ 550.681958][T16602] dump_stack+0x15/0x17 [ 550.685948][T16602] should_fail+0x3c0/0x510 [ 550.690201][T16602] should_fail_alloc_page+0x58/0x70 [ 550.695234][T16602] __alloc_pages+0x1de/0x7c0 17:19:00 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x40000000}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 17:19:00 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0xf5ffffff}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 550.699663][T16602] ? __count_vm_events+0x30/0x30 [ 550.704436][T16602] ? dup_mm+0x91/0x330 [ 550.708341][T16602] ? copy_mm+0x108/0x1b0 [ 550.712418][T16602] ? copy_process+0x1295/0x3250 [ 550.717105][T16602] ? kernel_clone+0x22d/0x990 [ 550.721619][T16602] ? __x64_sys_clone3+0x375/0x3a0 [ 550.726481][T16602] pte_alloc_one+0x73/0x1b0 [ 550.730822][T16602] ? pfn_modify_allowed+0x2e0/0x2e0 [ 550.735860][T16602] ? __kasan_check_write+0x14/0x20 [ 550.740800][T16602] ? __set_page_owner+0x2ee/0x310 [ 550.745662][T16602] __pte_alloc+0x86/0x350 [ 550.749826][T16602] ? post_alloc_hook+0x1ab/0x1b0 [ 550.754602][T16602] ? free_pgtables+0x210/0x210 [ 550.759201][T16602] ? get_page_from_freelist+0x38b/0x400 [ 550.764583][T16602] copy_pte_range+0x1b1f/0x20b0 [ 550.769278][T16602] ? __kunmap_atomic+0x80/0x80 [ 550.771616][T16617] FAULT_INJECTION: forcing a failure. [ 550.771616][T16617] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 550.773866][T16602] ? __pud_alloc+0x260/0x260 [ 550.773891][T16602] ? __pud_alloc+0x218/0x260 [ 550.795830][T16602] ? do_handle_mm_fault+0x2370/0x2370 [ 550.801030][T16602] copy_page_range+0xc1e/0x1090 [ 550.805718][T16602] ? pfn_valid+0x1e0/0x1e0 [ 550.809973][T16602] dup_mmap+0x99f/0xea0 [ 550.813969][T16602] ? __delayed_free_task+0x20/0x20 [ 550.818907][T16602] ? mm_init+0x807/0x960 [ 550.822991][T16602] dup_mm+0x91/0x330 [ 550.826718][T16602] copy_mm+0x108/0x1b0 [ 550.830624][T16602] copy_process+0x1295/0x3250 [ 550.835149][T16602] ? check_stack_object+0x117/0x130 [ 550.840175][T16602] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 550.845120][T16602] ? copy_clone_args_from_user+0x6f0/0x790 [ 550.850760][T16602] kernel_clone+0x22d/0x990 [ 550.855099][T16602] ? dup_mmap+0xea0/0xea0 [ 550.859268][T16602] ? create_io_thread+0x1e0/0x1e0 [ 550.864138][T16602] ? file_end_write+0x1b0/0x1b0 [ 550.868819][T16602] __x64_sys_clone3+0x375/0x3a0 [ 550.873509][T16602] ? __ia32_sys_clone+0x300/0x300 [ 550.878367][T16602] ? ksys_write+0x25f/0x2c0 [ 550.882742][T16602] ? debug_smp_processor_id+0x17/0x20 [ 550.887918][T16602] do_syscall_64+0x44/0xd0 [ 550.892163][T16602] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 550.897887][T16602] RIP: 0033:0x7fa07a6ec0d9 [ 550.902147][T16602] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 550.921585][T16602] RSP: 002b:00007fa07945f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 550.929831][T16602] RAX: ffffffffffffffda RBX: 00007fa07a80bf80 RCX: 00007fa07a6ec0d9 [ 550.937638][T16602] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fa07945f050 [ 550.945450][T16602] RBP: 00007fa07945f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 550.953259][T16602] R10: 00007fa07945f050 R11: 0000000000000246 R12: 0000000000000058 [ 550.961071][T16602] R13: 00007ffd55a8aedf R14: 00007fa07945f300 R15: 0000000000022000 [ 550.968886][T16602] [ 550.971749][T16617] CPU: 1 PID: 16617 Comm: syz-executor.2 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 550.981820][T16617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 550.991728][T16617] Call Trace: [ 550.994833][T16617] [ 550.997610][T16617] dump_stack_lvl+0x151/0x1b7 [ 551.002130][T16617] ? bfq_pos_tree_add_move+0x43e/0x43e [ 551.007415][T16617] ? stack_trace_save+0x1f0/0x1f0 [ 551.012276][T16617] ? __kernel_text_address+0x9a/0x110 [ 551.017489][T16617] dump_stack+0x15/0x17 [ 551.021476][T16617] should_fail+0x3c0/0x510 [ 551.025731][T16617] should_fail_alloc_page+0x58/0x70 [ 551.030762][T16617] __alloc_pages+0x1de/0x7c0 [ 551.035189][T16617] ? stack_trace_save+0x12d/0x1f0 [ 551.040049][T16617] ? stack_trace_snprint+0x100/0x100 [ 551.045177][T16617] ? __count_vm_events+0x30/0x30 [ 551.049948][T16617] ? __kasan_slab_alloc+0xc4/0xe0 [ 551.054803][T16617] ? __kasan_slab_alloc+0xb2/0xe0 [ 551.059668][T16617] ? kmem_cache_alloc+0x189/0x2f0 [ 551.064526][T16617] ? anon_vma_fork+0x1b9/0x4f0 [ 551.069227][T16617] get_zeroed_page+0x19/0x40 [ 551.073824][T16617] __pud_alloc+0x8b/0x260 [ 551.077989][T16617] ? do_handle_mm_fault+0x2370/0x2370 [ 551.083198][T16617] copy_page_range+0xd9e/0x1090 [ 551.087885][T16617] ? pfn_valid+0x1e0/0x1e0 [ 551.092136][T16617] dup_mmap+0x99f/0xea0 [ 551.096127][T16617] ? __delayed_free_task+0x20/0x20 [ 551.101074][T16617] ? mm_init+0x807/0x960 [ 551.105154][T16617] dup_mm+0x91/0x330 [ 551.108892][T16617] copy_mm+0x108/0x1b0 [ 551.112793][T16617] copy_process+0x1295/0x3250 [ 551.117309][T16617] ? check_stack_object+0x117/0x130 [ 551.122451][T16617] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 551.127396][T16617] ? copy_clone_args_from_user+0x6f0/0x790 [ 551.133045][T16617] kernel_clone+0x22d/0x990 [ 551.137377][T16617] ? dup_mmap+0xea0/0xea0 [ 551.141548][T16617] ? create_io_thread+0x1e0/0x1e0 [ 551.146926][T16617] ? file_end_write+0x1b0/0x1b0 [ 551.151613][T16617] __x64_sys_clone3+0x375/0x3a0 [ 551.156302][T16617] ? __ia32_sys_clone+0x300/0x300 [ 551.161159][T16617] ? ksys_write+0x25f/0x2c0 [ 551.165500][T16617] ? debug_smp_processor_id+0x17/0x20 [ 551.170707][T16617] do_syscall_64+0x44/0xd0 [ 551.174961][T16617] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 551.180688][T16617] RIP: 0033:0x7fb8471070d9 [ 551.184941][T16617] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 551.204385][T16617] RSP: 002b:00007fb845e7a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 551.212629][T16617] RAX: ffffffffffffffda RBX: 00007fb847226f80 RCX: 00007fb8471070d9 [ 551.220438][T16617] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fb845e7a050 [ 551.228251][T16617] RBP: 00007fb845e7a1d0 R08: 0000000000000000 R09: 0000000000000058 [ 551.236062][T16617] R10: 00007fb845e7a050 R11: 0000000000000246 R12: 0000000000000058 [ 551.243870][T16617] R13: 00007ffcf73cf18f R14: 00007fb845e7a300 R15: 0000000000022000 [ 551.251685][T16617] 17:19:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xb4}, {0x0}, {&(0x7f0000002a80)=""/4096, 0xe14}], 0x3, 0x0, 0x7c0b0000}}], 0x300, 0x0, 0x0) 17:19:00 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x8800) 17:19:00 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c0001007665"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) 17:19:00 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 43) 17:19:00 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0xfbffffff}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 17:19:00 executing program 2: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 46) 17:19:00 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0xff0f0100}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 551.472467][T16632] FAULT_INJECTION: forcing a failure. [ 551.472467][T16632] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 551.489050][T16633] FAULT_INJECTION: forcing a failure. [ 551.489050][T16633] name failslab, interval 1, probability 0, space 0, times 0 [ 551.504966][T16632] CPU: 1 PID: 16632 Comm: syz-executor.2 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 551.515048][T16632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 551.524941][T16632] Call Trace: [ 551.528060][T16632] [ 551.530836][T16632] dump_stack_lvl+0x151/0x1b7 [ 551.535352][T16632] ? bfq_pos_tree_add_move+0x43e/0x43e [ 551.540642][T16632] ? stack_trace_save+0x1f0/0x1f0 [ 551.545504][T16632] ? __kernel_text_address+0x9a/0x110 [ 551.550713][T16632] dump_stack+0x15/0x17 [ 551.554706][T16632] should_fail+0x3c0/0x510 [ 551.558958][T16632] should_fail_alloc_page+0x58/0x70 [ 551.563990][T16632] __alloc_pages+0x1de/0x7c0 [ 551.568416][T16632] ? stack_trace_save+0x12d/0x1f0 [ 551.573278][T16632] ? stack_trace_snprint+0x100/0x100 [ 551.578405][T16632] ? __count_vm_events+0x30/0x30 [ 551.583172][T16632] ? __kasan_slab_alloc+0xc4/0xe0 [ 551.588030][T16632] ? __kasan_slab_alloc+0xb2/0xe0 [ 551.592992][T16632] ? kmem_cache_alloc+0x189/0x2f0 [ 551.597860][T16632] ? anon_vma_fork+0x1b9/0x4f0 [ 551.602468][T16632] get_zeroed_page+0x19/0x40 [ 551.606891][T16632] __pud_alloc+0x8b/0x260 [ 551.611052][T16632] ? do_handle_mm_fault+0x2370/0x2370 [ 551.616261][T16632] copy_page_range+0xd9e/0x1090 [ 551.620951][T16632] ? pfn_valid+0x1e0/0x1e0 [ 551.625202][T16632] dup_mmap+0x99f/0xea0 [ 551.629191][T16632] ? __delayed_free_task+0x20/0x20 [ 551.634139][T16632] ? mm_init+0x807/0x960 [ 551.638221][T16632] dup_mm+0x91/0x330 [ 551.641952][T16632] copy_mm+0x108/0x1b0 [ 551.645856][T16632] copy_process+0x1295/0x3250 [ 551.650374][T16632] ? check_stack_object+0x117/0x130 [ 551.655409][T16632] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 551.660352][T16632] ? copy_clone_args_from_user+0x6f0/0x790 [ 551.666001][T16632] kernel_clone+0x22d/0x990 [ 551.670331][T16632] ? dup_mmap+0xea0/0xea0 [ 551.674506][T16632] ? create_io_thread+0x1e0/0x1e0 [ 551.679358][T16632] ? file_end_write+0x1b0/0x1b0 [ 551.684051][T16632] __x64_sys_clone3+0x375/0x3a0 [ 551.688731][T16632] ? __ia32_sys_clone+0x300/0x300 [ 551.693591][T16632] ? ksys_write+0x25f/0x2c0 [ 551.697929][T16632] ? debug_smp_processor_id+0x17/0x20 [ 551.703140][T16632] do_syscall_64+0x44/0xd0 [ 551.707391][T16632] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 551.713117][T16632] RIP: 0033:0x7fb8471070d9 [ 551.717374][T16632] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 551.736931][T16632] RSP: 002b:00007fb845e7a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 551.745169][T16632] RAX: ffffffffffffffda RBX: 00007fb847226f80 RCX: 00007fb8471070d9 [ 551.752988][T16632] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fb845e7a050 [ 551.760792][T16632] RBP: 00007fb845e7a1d0 R08: 0000000000000000 R09: 0000000000000058 17:19:00 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0xa800) [ 551.768604][T16632] R10: 00007fb845e7a050 R11: 0000000000000246 R12: 0000000000000058 [ 551.776423][T16632] R13: 00007ffcf73cf18f R14: 00007fb845e7a300 R15: 0000000000022000 [ 551.784230][T16632] [ 551.787098][T16633] CPU: 0 PID: 16633 Comm: syz-executor.0 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 551.797249][T16633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 551.807145][T16633] Call Trace: [ 551.810260][T16633] [ 551.813157][T16633] dump_stack_lvl+0x151/0x1b7 [ 551.817667][T16633] ? bfq_pos_tree_add_move+0x43e/0x43e [ 551.822963][T16633] dump_stack+0x15/0x17 [ 551.826953][T16633] should_fail+0x3c0/0x510 [ 551.831206][T16633] __should_failslab+0x9f/0xe0 [ 551.835819][T16633] should_failslab+0x9/0x20 [ 551.840145][T16633] kmem_cache_alloc+0x4f/0x2f0 [ 551.844746][T16633] ? anon_vma_clone+0xa1/0x4f0 [ 551.849347][T16633] anon_vma_clone+0xa1/0x4f0 [ 551.853774][T16633] anon_vma_fork+0x91/0x4f0 [ 551.858253][T16633] ? anon_vma_name+0x4c/0x70 [ 551.862683][T16633] dup_mmap+0x750/0xea0 [ 551.866673][T16633] ? __delayed_free_task+0x20/0x20 [ 551.871649][T16633] ? mm_init+0x807/0x960 [ 551.875723][T16633] dup_mm+0x91/0x330 [ 551.879426][T16633] copy_mm+0x108/0x1b0 [ 551.883330][T16633] copy_process+0x1295/0x3250 [ 551.887841][T16633] ? check_stack_object+0x117/0x130 [ 551.892873][T16633] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 551.897818][T16633] ? copy_clone_args_from_user+0x6f0/0x790 [ 551.903467][T16633] kernel_clone+0x22d/0x990 [ 551.907801][T16633] ? dup_mmap+0xea0/0xea0 [ 551.911969][T16633] ? create_io_thread+0x1e0/0x1e0 [ 551.916833][T16633] ? file_end_write+0x1b0/0x1b0 [ 551.921517][T16633] __x64_sys_clone3+0x375/0x3a0 [ 551.926200][T16633] ? __ia32_sys_clone+0x300/0x300 [ 551.931070][T16633] ? ksys_write+0x25f/0x2c0 [ 551.935404][T16633] ? debug_smp_processor_id+0x17/0x20 [ 551.940615][T16633] do_syscall_64+0x44/0xd0 [ 551.944862][T16633] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 551.950597][T16633] RIP: 0033:0x7fa07a6ec0d9 [ 551.954844][T16633] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 17:19:01 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0xfffffff5}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 17:19:01 executing program 2: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 47) 17:19:01 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 44) [ 551.974285][T16633] RSP: 002b:00007fa07945f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 551.982532][T16633] RAX: ffffffffffffffda RBX: 00007fa07a80bf80 RCX: 00007fa07a6ec0d9 [ 551.990344][T16633] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fa07945f050 [ 551.998152][T16633] RBP: 00007fa07945f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 552.005973][T16633] R10: 00007fa07945f050 R11: 0000000000000246 R12: 0000000000000058 [ 552.013774][T16633] R13: 00007ffd55a8aedf R14: 00007fa07945f300 R15: 0000000000022000 [ 552.021587][T16633] 17:19:01 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c0001007665"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) [ 552.053070][T16641] FAULT_INJECTION: forcing a failure. [ 552.053070][T16641] name failslab, interval 1, probability 0, space 0, times 0 [ 552.064786][T16643] FAULT_INJECTION: forcing a failure. [ 552.064786][T16643] name failslab, interval 1, probability 0, space 0, times 0 [ 552.081433][T16643] CPU: 0 PID: 16643 Comm: syz-executor.0 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 552.091508][T16643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 552.101405][T16643] Call Trace: [ 552.104532][T16643] [ 552.107302][T16643] dump_stack_lvl+0x151/0x1b7 [ 552.111818][T16643] ? bfq_pos_tree_add_move+0x43e/0x43e [ 552.117111][T16643] dump_stack+0x15/0x17 [ 552.121103][T16643] should_fail+0x3c0/0x510 [ 552.125359][T16643] __should_failslab+0x9f/0xe0 [ 552.129953][T16643] should_failslab+0x9/0x20 [ 552.134292][T16643] kmem_cache_alloc+0x4f/0x2f0 [ 552.138903][T16643] ? anon_vma_fork+0x1b9/0x4f0 [ 552.143505][T16643] anon_vma_fork+0x1b9/0x4f0 [ 552.147925][T16643] dup_mmap+0x750/0xea0 [ 552.151918][T16643] ? __delayed_free_task+0x20/0x20 [ 552.156861][T16643] ? mm_init+0x807/0x960 [ 552.160938][T16643] dup_mm+0x91/0x330 [ 552.164670][T16643] copy_mm+0x108/0x1b0 [ 552.168574][T16643] copy_process+0x1295/0x3250 [ 552.173092][T16643] ? check_stack_object+0x117/0x130 [ 552.178126][T16643] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 552.183070][T16643] ? copy_clone_args_from_user+0x6f0/0x790 [ 552.188712][T16643] kernel_clone+0x22d/0x990 [ 552.193049][T16643] ? dup_mmap+0xea0/0xea0 [ 552.197217][T16643] ? create_io_thread+0x1e0/0x1e0 [ 552.202084][T16643] ? file_end_write+0x1b0/0x1b0 [ 552.206764][T16643] __x64_sys_clone3+0x375/0x3a0 [ 552.211454][T16643] ? __ia32_sys_clone+0x300/0x300 [ 552.216324][T16643] ? ksys_write+0x25f/0x2c0 [ 552.220656][T16643] ? debug_smp_processor_id+0x17/0x20 [ 552.225860][T16643] do_syscall_64+0x44/0xd0 [ 552.230115][T16643] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 552.235842][T16643] RIP: 0033:0x7fa07a6ec0d9 [ 552.240096][T16643] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 552.259534][T16643] RSP: 002b:00007fa07945f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 552.267776][T16643] RAX: ffffffffffffffda RBX: 00007fa07a80bf80 RCX: 00007fa07a6ec0d9 [ 552.275611][T16643] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fa07945f050 [ 552.283485][T16643] RBP: 00007fa07945f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 552.291301][T16643] R10: 00007fa07945f050 R11: 0000000000000246 R12: 0000000000000058 17:19:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xb4}, {0x0}, {&(0x7f0000002a80)=""/4096, 0xe14}], 0x3, 0x0, 0x7fffef4c}}], 0x300, 0x0, 0x0) 17:19:01 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0xfffffffb}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 17:19:01 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0xa812) 17:19:01 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) 17:19:01 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 45) [ 552.299117][T16643] R13: 00007ffd55a8aedf R14: 00007fa07945f300 R15: 0000000000022000 [ 552.306923][T16643] [ 552.309789][T16641] CPU: 1 PID: 16641 Comm: syz-executor.2 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 552.319855][T16641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 552.329753][T16641] Call Trace: [ 552.332877][T16641] [ 552.335657][T16641] dump_stack_lvl+0x151/0x1b7 [ 552.340166][T16641] ? bfq_pos_tree_add_move+0x43e/0x43e [ 552.345460][T16641] dump_stack+0x15/0x17 [ 552.346263][T16654] __nla_validate_parse: 152 callbacks suppressed [ 552.346278][T16654] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 552.349447][T16641] should_fail+0x3c0/0x510 [ 552.349473][T16641] __should_failslab+0x9f/0xe0 [ 552.349497][T16641] should_failslab+0x9/0x20 [ 552.356132][T16654] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 552.364724][T16641] kmem_cache_alloc+0x4f/0x2f0 [ 552.364753][T16641] ? anon_vma_fork+0x1b9/0x4f0 [ 552.364771][T16641] anon_vma_fork+0x1b9/0x4f0 [ 552.364788][T16641] dup_mmap+0x750/0xea0 [ 552.372042][T16654] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 552.373578][T16641] ? __delayed_free_task+0x20/0x20 [ 552.373604][T16641] ? mm_init+0x807/0x960 [ 552.378671][T16654] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 552.387031][T16641] dup_mm+0x91/0x330 [ 552.387061][T16641] copy_mm+0x108/0x1b0 [ 552.387076][T16641] copy_process+0x1295/0x3250 [ 552.392125][T16654] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 552.396237][T16641] ? check_stack_object+0x117/0x130 [ 552.396262][T16641] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 552.401029][T16654] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 552.404646][T16641] ? copy_clone_args_from_user+0x6f0/0x790 [ 552.404672][T16641] kernel_clone+0x22d/0x990 [ 552.414129][T16654] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 552.418705][T16641] ? dup_mmap+0xea0/0xea0 [ 552.418728][T16641] ? create_io_thread+0x1e0/0x1e0 [ 552.418743][T16641] ? file_end_write+0x1b0/0x1b0 [ 552.423229][T16654] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 552.431901][T16641] __x64_sys_clone3+0x375/0x3a0 [ 552.431925][T16641] ? __ia32_sys_clone+0x300/0x300 [ 552.431942][T16641] ? ksys_write+0x25f/0x2c0 [ 552.431963][T16641] ? debug_smp_processor_id+0x17/0x20 [ 552.436130][T16654] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 552.439535][T16641] do_syscall_64+0x44/0xd0 [ 552.439559][T16641] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 552.439578][T16641] RIP: 0033:0x7fb8471070d9 [ 552.444433][T16654] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 552.453161][T16641] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 552.453179][T16641] RSP: 002b:00007fb845e7a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 552.453199][T16641] RAX: ffffffffffffffda RBX: 00007fb847226f80 RCX: 00007fb8471070d9 17:19:02 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x2, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 17:19:02 executing program 2: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 48) [ 552.453211][T16641] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fb845e7a050 [ 552.609567][T16641] RBP: 00007fb845e7a1d0 R08: 0000000000000000 R09: 0000000000000058 [ 552.617462][T16641] R10: 00007fb845e7a050 R11: 0000000000000246 R12: 0000000000000058 [ 552.625270][T16641] R13: 00007ffcf73cf18f R14: 00007fb845e7a300 R15: 0000000000022000 [ 552.633083][T16641] 17:19:02 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x7, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 552.663744][T16662] FAULT_INJECTION: forcing a failure. [ 552.663744][T16662] name failslab, interval 1, probability 0, space 0, times 0 [ 552.682191][T16662] CPU: 1 PID: 16662 Comm: syz-executor.0 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 552.692266][T16662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 552.702160][T16662] Call Trace: [ 552.705281][T16662] [ 552.708060][T16662] dump_stack_lvl+0x151/0x1b7 [ 552.712575][T16662] ? bfq_pos_tree_add_move+0x43e/0x43e [ 552.717866][T16662] dump_stack+0x15/0x17 [ 552.721858][T16662] should_fail+0x3c0/0x510 [ 552.726112][T16662] __should_failslab+0x9f/0xe0 [ 552.730711][T16662] should_failslab+0x9/0x20 [ 552.735049][T16662] kmem_cache_alloc+0x4f/0x2f0 [ 552.739653][T16662] ? vm_area_dup+0x26/0x1d0 [ 552.743993][T16662] vm_area_dup+0x26/0x1d0 [ 552.748157][T16662] dup_mmap+0x6b8/0xea0 [ 552.752345][T16662] ? __delayed_free_task+0x20/0x20 [ 552.757287][T16662] ? mm_init+0x807/0x960 [ 552.761475][T16662] dup_mm+0x91/0x330 [ 552.765204][T16662] copy_mm+0x108/0x1b0 [ 552.769112][T16662] copy_process+0x1295/0x3250 [ 552.773627][T16662] ? check_stack_object+0x117/0x130 [ 552.778658][T16662] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 552.783603][T16662] ? copy_clone_args_from_user+0x6f0/0x790 [ 552.789250][T16662] kernel_clone+0x22d/0x990 [ 552.793586][T16662] ? dup_mmap+0xea0/0xea0 [ 552.799559][T16662] ? create_io_thread+0x1e0/0x1e0 [ 552.804417][T16662] ? file_end_write+0x1b0/0x1b0 [ 552.809100][T16662] __x64_sys_clone3+0x375/0x3a0 [ 552.813785][T16662] ? __ia32_sys_clone+0x300/0x300 [ 552.818736][T16662] ? ksys_write+0x25f/0x2c0 [ 552.823075][T16662] ? debug_smp_processor_id+0x17/0x20 [ 552.828280][T16662] do_syscall_64+0x44/0xd0 [ 552.832631][T16662] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 552.838478][T16662] RIP: 0033:0x7fa07a6ec0d9 [ 552.842726][T16662] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 552.862282][T16662] RSP: 002b:00007fa07945f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 552.870526][T16662] RAX: ffffffffffffffda RBX: 00007fa07a80bf80 RCX: 00007fa07a6ec0d9 [ 552.878341][T16662] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fa07945f050 [ 552.886148][T16662] RBP: 00007fa07945f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 552.893979][T16662] R10: 00007fa07945f050 R11: 0000000000000246 R12: 0000000000000058 [ 552.901774][T16662] R13: 00007ffd55a8aedf R14: 00007fa07945f300 R15: 0000000000022000 [ 552.909613][T16662] 17:19:02 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) 17:19:02 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x8, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 17:19:02 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 46) 17:19:02 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0xaaf8) [ 552.919551][T16665] FAULT_INJECTION: forcing a failure. [ 552.919551][T16665] name failslab, interval 1, probability 0, space 0, times 0 [ 552.933837][T16665] CPU: 0 PID: 16665 Comm: syz-executor.2 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 552.943911][T16665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 552.953807][T16665] Call Trace: [ 552.956933][T16665] [ 552.959708][T16665] dump_stack_lvl+0x151/0x1b7 [ 552.964309][T16665] ? bfq_pos_tree_add_move+0x43e/0x43e [ 552.969603][T16665] dump_stack+0x15/0x17 [ 552.973598][T16665] should_fail+0x3c0/0x510 [ 552.977850][T16665] __should_failslab+0x9f/0xe0 [ 552.982442][T16665] should_failslab+0x9/0x20 [ 552.986784][T16665] kmem_cache_alloc+0x4f/0x2f0 [ 552.991396][T16665] ? vm_area_dup+0x26/0x1d0 [ 552.995731][T16665] vm_area_dup+0x26/0x1d0 [ 552.999893][T16665] dup_mmap+0x6b8/0xea0 [ 553.003886][T16665] ? __delayed_free_task+0x20/0x20 [ 553.008832][T16665] ? mm_init+0x807/0x960 [ 553.012909][T16665] dup_mm+0x91/0x330 [ 553.013471][T16673] FAULT_INJECTION: forcing a failure. [ 553.013471][T16673] name failslab, interval 1, probability 0, space 0, times 0 [ 553.016637][T16665] copy_mm+0x108/0x1b0 [ 553.032960][T16665] copy_process+0x1295/0x3250 [ 553.037473][T16665] ? check_stack_object+0x117/0x130 [ 553.042506][T16665] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 553.047450][T16665] ? copy_clone_args_from_user+0x6f0/0x790 [ 553.053098][T16665] kernel_clone+0x22d/0x990 [ 553.057444][T16665] ? dup_mmap+0xea0/0xea0 [ 553.061605][T16665] ? create_io_thread+0x1e0/0x1e0 [ 553.066457][T16665] ? file_end_write+0x1b0/0x1b0 [ 553.071152][T16665] __x64_sys_clone3+0x375/0x3a0 [ 553.075833][T16665] ? __ia32_sys_clone+0x300/0x300 [ 553.080694][T16665] ? ksys_write+0x25f/0x2c0 [ 553.085035][T16665] ? debug_smp_processor_id+0x17/0x20 [ 553.090240][T16665] do_syscall_64+0x44/0xd0 [ 553.094489][T16665] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 553.100217][T16665] RIP: 0033:0x7fb8471070d9 [ 553.104471][T16665] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 553.123911][T16665] RSP: 002b:00007fb845e7a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 553.132156][T16665] RAX: ffffffffffffffda RBX: 00007fb847226f80 RCX: 00007fb8471070d9 [ 553.139968][T16665] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fb845e7a050 [ 553.147782][T16665] RBP: 00007fb845e7a1d0 R08: 0000000000000000 R09: 0000000000000058 [ 553.155675][T16665] R10: 00007fb845e7a050 R11: 0000000000000246 R12: 0000000000000058 [ 553.163488][T16665] R13: 00007ffcf73cf18f R14: 00007fb845e7a300 R15: 0000000000022000 [ 553.171304][T16665] [ 553.174288][T16673] CPU: 1 PID: 16673 Comm: syz-executor.0 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 553.184348][T16673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 553.194235][T16673] Call Trace: [ 553.197385][T16673] [ 553.200162][T16673] dump_stack_lvl+0x151/0x1b7 [ 553.204648][T16673] ? bfq_pos_tree_add_move+0x43e/0x43e [ 553.209943][T16673] ? vma_interval_tree_augment_rotate+0x210/0x210 [ 553.216277][T16673] dump_stack+0x15/0x17 [ 553.220271][T16673] should_fail+0x3c0/0x510 [ 553.224530][T16673] __should_failslab+0x9f/0xe0 [ 553.229124][T16673] should_failslab+0x9/0x20 [ 553.233463][T16673] kmem_cache_alloc+0x4f/0x2f0 [ 553.238060][T16673] ? anon_vma_fork+0xf7/0x4f0 [ 553.242577][T16673] anon_vma_fork+0xf7/0x4f0 [ 553.246915][T16673] ? anon_vma_name+0x4c/0x70 [ 553.251343][T16673] dup_mmap+0x750/0xea0 [ 553.255335][T16673] ? __delayed_free_task+0x20/0x20 [ 553.260304][T16673] ? mm_init+0x807/0x960 [ 553.264362][T16673] dup_mm+0x91/0x330 [ 553.268091][T16673] copy_mm+0x108/0x1b0 [ 553.272083][T16673] copy_process+0x1295/0x3250 [ 553.276600][T16673] ? check_stack_object+0x117/0x130 [ 553.281632][T16673] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 553.286577][T16673] ? copy_clone_args_from_user+0x6f0/0x790 [ 553.292232][T16673] kernel_clone+0x22d/0x990 [ 553.296559][T16673] ? dup_mmap+0xea0/0xea0 [ 553.300728][T16673] ? create_io_thread+0x1e0/0x1e0 [ 553.305583][T16673] ? file_end_write+0x1b0/0x1b0 [ 553.310273][T16673] __x64_sys_clone3+0x375/0x3a0 [ 553.314957][T16673] ? __ia32_sys_clone+0x300/0x300 [ 553.319829][T16673] ? ksys_write+0x25f/0x2c0 [ 553.324160][T16673] ? debug_smp_processor_id+0x17/0x20 [ 553.329455][T16673] do_syscall_64+0x44/0xd0 [ 553.333707][T16673] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 553.339432][T16673] RIP: 0033:0x7fa07a6ec0d9 [ 553.343687][T16673] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 553.363126][T16673] RSP: 002b:00007fa07945f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 17:19:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xb4}, {0x0}, {&(0x7f0000002a80)=""/4096, 0xe14}], 0x3, 0x0, 0x880a0000}}], 0x300, 0x0, 0x0) 17:19:02 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x9, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 17:19:02 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) 17:19:02 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 47) 17:19:02 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0xb10d) 17:19:02 executing program 2: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 49) [ 553.371377][T16673] RAX: ffffffffffffffda RBX: 00007fa07a80bf80 RCX: 00007fa07a6ec0d9 [ 553.379189][T16673] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fa07945f050 [ 553.386993][T16673] RBP: 00007fa07945f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 553.394805][T16673] R10: 00007fa07945f050 R11: 0000000000000246 R12: 0000000000000058 [ 553.402614][T16673] R13: 00007ffd55a8aedf R14: 00007fa07945f300 R15: 0000000000022000 [ 553.410432][T16673] 17:19:02 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x11, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 553.454714][T16685] FAULT_INJECTION: forcing a failure. [ 553.454714][T16685] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 553.458014][T16687] FAULT_INJECTION: forcing a failure. [ 553.458014][T16687] name failslab, interval 1, probability 0, space 0, times 0 [ 553.467967][T16685] CPU: 0 PID: 16685 Comm: syz-executor.0 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 553.490323][T16685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 553.500219][T16685] Call Trace: 17:19:02 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) 17:19:02 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0xb800) [ 553.503340][T16685] [ 553.506118][T16685] dump_stack_lvl+0x151/0x1b7 [ 553.510630][T16685] ? bfq_pos_tree_add_move+0x43e/0x43e [ 553.515924][T16685] ? __kasan_check_write+0x14/0x20 [ 553.520876][T16685] ? __set_page_owner+0x2ee/0x310 [ 553.525733][T16685] dump_stack+0x15/0x17 [ 553.529724][T16685] should_fail+0x3c0/0x510 [ 553.533976][T16685] should_fail_alloc_page+0x58/0x70 [ 553.539012][T16685] __alloc_pages+0x1de/0x7c0 [ 553.543441][T16685] ? __count_vm_events+0x30/0x30 [ 553.548221][T16685] ? __count_vm_events+0x30/0x30 17:19:02 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) [ 553.552986][T16685] ? __kasan_check_write+0x14/0x20 [ 553.557931][T16685] ? _raw_spin_lock+0xa3/0x1b0 [ 553.562533][T16685] __pmd_alloc+0xb1/0x550 [ 553.566701][T16685] ? kmem_cache_alloc+0x189/0x2f0 [ 553.571555][T16685] ? anon_vma_fork+0x1b9/0x4f0 [ 553.576174][T16685] ? __pud_alloc+0x260/0x260 [ 553.580589][T16685] ? __pud_alloc+0x218/0x260 [ 553.585096][T16685] ? do_handle_mm_fault+0x2370/0x2370 [ 553.590310][T16685] copy_page_range+0xd04/0x1090 [ 553.594995][T16685] ? pfn_valid+0x1e0/0x1e0 [ 553.599331][T16685] dup_mmap+0x99f/0xea0 17:19:03 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) [ 553.603323][T16685] ? __delayed_free_task+0x20/0x20 [ 553.608282][T16685] ? mm_init+0x807/0x960 [ 553.612355][T16685] dup_mm+0x91/0x330 [ 553.616084][T16685] copy_mm+0x108/0x1b0 [ 553.619988][T16685] copy_process+0x1295/0x3250 [ 553.624514][T16685] ? check_stack_object+0x117/0x130 [ 553.629539][T16685] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 553.634494][T16685] ? copy_clone_args_from_user+0x6f0/0x790 [ 553.640124][T16685] kernel_clone+0x22d/0x990 [ 553.644464][T16685] ? dup_mmap+0xea0/0xea0 [ 553.648785][T16685] ? create_io_thread+0x1e0/0x1e0 17:19:03 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) [ 553.653634][T16685] ? file_end_write+0x1b0/0x1b0 [ 553.658325][T16685] __x64_sys_clone3+0x375/0x3a0 [ 553.663006][T16685] ? __ia32_sys_clone+0x300/0x300 [ 553.667868][T16685] ? ksys_write+0x25f/0x2c0 [ 553.672205][T16685] ? debug_smp_processor_id+0x17/0x20 [ 553.677414][T16685] do_syscall_64+0x44/0xd0 [ 553.681663][T16685] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 553.687390][T16685] RIP: 0033:0x7fa07a6ec0d9 [ 553.691643][T16685] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 553.711081][T16685] RSP: 002b:00007fa07945f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 553.719326][T16685] RAX: ffffffffffffffda RBX: 00007fa07a80bf80 RCX: 00007fa07a6ec0d9 [ 553.727137][T16685] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fa07945f050 [ 553.734950][T16685] RBP: 00007fa07945f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 553.742762][T16685] R10: 00007fa07945f050 R11: 0000000000000246 R12: 0000000000000058 [ 553.750592][T16685] R13: 00007ffd55a8aedf R14: 00007fa07945f300 R15: 0000000000022000 [ 553.758387][T16685] [ 553.761265][T16687] CPU: 1 PID: 16687 Comm: syz-executor.2 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 553.771495][T16687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 553.782257][T16687] Call Trace: [ 553.785377][T16687] [ 553.788152][T16687] dump_stack_lvl+0x151/0x1b7 [ 553.792664][T16687] ? bfq_pos_tree_add_move+0x43e/0x43e [ 553.797957][T16687] dump_stack+0x15/0x17 [ 553.801952][T16687] should_fail+0x3c0/0x510 [ 553.806203][T16687] __should_failslab+0x9f/0xe0 [ 553.810840][T16687] should_failslab+0x9/0x20 [ 553.815143][T16687] kmem_cache_alloc+0x4f/0x2f0 [ 553.819744][T16687] ? vm_area_dup+0x26/0x1d0 [ 553.824082][T16687] vm_area_dup+0x26/0x1d0 [ 553.828246][T16687] dup_mmap+0x6b8/0xea0 [ 553.832255][T16687] ? __delayed_free_task+0x20/0x20 [ 553.837195][T16687] ? mm_init+0x807/0x960 [ 553.841273][T16687] dup_mm+0x91/0x330 [ 553.845004][T16687] copy_mm+0x108/0x1b0 [ 553.849014][T16687] copy_process+0x1295/0x3250 [ 553.853527][T16687] ? check_stack_object+0x117/0x130 [ 553.858563][T16687] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 553.863504][T16687] ? copy_clone_args_from_user+0x6f0/0x790 [ 553.869147][T16687] kernel_clone+0x22d/0x990 [ 553.873578][T16687] ? dup_mmap+0xea0/0xea0 [ 553.877841][T16687] ? create_io_thread+0x1e0/0x1e0 [ 553.882700][T16687] ? file_end_write+0x1b0/0x1b0 [ 553.887389][T16687] __x64_sys_clone3+0x375/0x3a0 [ 553.892079][T16687] ? __ia32_sys_clone+0x300/0x300 [ 553.896936][T16687] ? ksys_write+0x25f/0x2c0 [ 553.901357][T16687] ? debug_smp_processor_id+0x17/0x20 [ 553.906571][T16687] do_syscall_64+0x44/0xd0 [ 553.910889][T16687] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 553.916552][T16687] RIP: 0033:0x7fb8471070d9 [ 553.920803][T16687] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 553.940251][T16687] RSP: 002b:00007fb845e7a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 553.948585][T16687] RAX: ffffffffffffffda RBX: 00007fb847226f80 RCX: 00007fb8471070d9 [ 553.956395][T16687] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fb845e7a050 [ 553.964303][T16687] RBP: 00007fb845e7a1d0 R08: 0000000000000000 R09: 0000000000000058 [ 553.972192][T16687] R10: 00007fb845e7a050 R11: 0000000000000246 R12: 0000000000000058 [ 553.980010][T16687] R13: 00007ffcf73cf18f R14: 00007fb845e7a300 R15: 0000000000022000 [ 553.987819][T16687] 17:19:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xb4}, {0x0}, {&(0x7f0000002a80)=""/4096, 0xe14}], 0x3, 0x0, 0x8c0b0000}}], 0x300, 0x0, 0x0) 17:19:03 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x700, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 17:19:03 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 48) 17:19:03 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) 17:19:03 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0xc000) 17:19:03 executing program 2: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 50) 17:19:03 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x900, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 554.283702][T16705] FAULT_INJECTION: forcing a failure. [ 554.283702][T16705] name failslab, interval 1, probability 0, space 0, times 0 [ 554.296746][T16707] FAULT_INJECTION: forcing a failure. [ 554.296746][T16707] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 554.313547][T16705] CPU: 1 PID: 16705 Comm: syz-executor.2 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 554.323616][T16705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 554.333516][T16705] Call Trace: [ 554.336636][T16705] [ 554.339413][T16705] dump_stack_lvl+0x151/0x1b7 [ 554.343924][T16705] ? bfq_pos_tree_add_move+0x43e/0x43e [ 554.349219][T16705] ? do_syscall_64+0x44/0xd0 [ 554.353645][T16705] dump_stack+0x15/0x17 [ 554.357647][T16705] should_fail+0x3c0/0x510 [ 554.361888][T16705] __should_failslab+0x9f/0xe0 [ 554.366488][T16705] should_failslab+0x9/0x20 [ 554.370831][T16705] kmem_cache_alloc+0x4f/0x2f0 [ 554.375431][T16705] ? anon_vma_clone+0xa1/0x4f0 [ 554.380032][T16705] anon_vma_clone+0xa1/0x4f0 [ 554.384458][T16705] anon_vma_fork+0x91/0x4f0 [ 554.388795][T16705] ? anon_vma_name+0x4c/0x70 [ 554.393223][T16705] dup_mmap+0x750/0xea0 [ 554.397217][T16705] ? __delayed_free_task+0x20/0x20 [ 554.402160][T16705] ? mm_init+0x807/0x960 [ 554.406240][T16705] dup_mm+0x91/0x330 [ 554.409973][T16705] copy_mm+0x108/0x1b0 [ 554.413877][T16705] copy_process+0x1295/0x3250 [ 554.418397][T16705] ? check_stack_object+0x117/0x130 [ 554.423429][T16705] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 554.428374][T16705] ? copy_clone_args_from_user+0x6f0/0x790 [ 554.434017][T16705] kernel_clone+0x22d/0x990 [ 554.438352][T16705] ? dup_mmap+0xea0/0xea0 [ 554.442518][T16705] ? create_io_thread+0x1e0/0x1e0 [ 554.447381][T16705] ? file_end_write+0x1b0/0x1b0 [ 554.452071][T16705] __x64_sys_clone3+0x375/0x3a0 [ 554.456755][T16705] ? __ia32_sys_clone+0x300/0x300 [ 554.461613][T16705] ? ksys_write+0x25f/0x2c0 [ 554.465953][T16705] ? debug_smp_processor_id+0x17/0x20 [ 554.471166][T16705] do_syscall_64+0x44/0xd0 [ 554.475412][T16705] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 554.481154][T16705] RIP: 0033:0x7fb8471070d9 [ 554.485395][T16705] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 554.504843][T16705] RSP: 002b:00007fb845e7a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 554.513079][T16705] RAX: ffffffffffffffda RBX: 00007fb847226f80 RCX: 00007fb8471070d9 [ 554.520893][T16705] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fb845e7a050 17:19:03 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x1100, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 554.528707][T16705] RBP: 00007fb845e7a1d0 R08: 0000000000000000 R09: 0000000000000058 [ 554.536514][T16705] R10: 00007fb845e7a050 R11: 0000000000000246 R12: 0000000000000058 [ 554.544323][T16705] R13: 00007ffcf73cf18f R14: 00007fb845e7a300 R15: 0000000000022000 [ 554.552141][T16705] [ 554.555002][T16707] CPU: 0 PID: 16707 Comm: syz-executor.0 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 554.565071][T16707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 554.574962][T16707] Call Trace: [ 554.578087][T16707] [ 554.580862][T16707] dump_stack_lvl+0x151/0x1b7 [ 554.585377][T16707] ? bfq_pos_tree_add_move+0x43e/0x43e [ 554.590671][T16707] dump_stack+0x15/0x17 [ 554.594663][T16707] should_fail+0x3c0/0x510 [ 554.598917][T16707] should_fail_alloc_page+0x58/0x70 [ 554.603950][T16707] __alloc_pages+0x1de/0x7c0 [ 554.608473][T16707] ? __count_vm_events+0x30/0x30 [ 554.613247][T16707] ? dup_mm+0x91/0x330 [ 554.617143][T16707] ? copy_mm+0x108/0x1b0 [ 554.621221][T16707] ? copy_process+0x1295/0x3250 [ 554.625908][T16707] ? kernel_clone+0x22d/0x990 [ 554.630420][T16707] ? __x64_sys_clone3+0x375/0x3a0 [ 554.635285][T16707] pte_alloc_one+0x73/0x1b0 [ 554.639621][T16707] ? pfn_modify_allowed+0x2e0/0x2e0 [ 554.644654][T16707] ? __kasan_check_write+0x14/0x20 [ 554.649602][T16707] ? __set_page_owner+0x2ee/0x310 [ 554.654462][T16707] __pte_alloc+0x86/0x350 [ 554.658627][T16707] ? post_alloc_hook+0x1ab/0x1b0 [ 554.663401][T16707] ? free_pgtables+0x210/0x210 [ 554.668002][T16707] ? get_page_from_freelist+0x38b/0x400 [ 554.673394][T16707] copy_pte_range+0x1b1f/0x20b0 [ 554.678079][T16707] ? __kunmap_atomic+0x80/0x80 [ 554.682675][T16707] ? __pud_alloc+0x260/0x260 [ 554.687099][T16707] ? __pud_alloc+0x218/0x260 [ 554.691521][T16707] ? do_handle_mm_fault+0x2370/0x2370 [ 554.696740][T16707] copy_page_range+0xc1e/0x1090 [ 554.701424][T16707] ? pfn_valid+0x1e0/0x1e0 [ 554.705670][T16707] dup_mmap+0x99f/0xea0 [ 554.709662][T16707] ? __delayed_free_task+0x20/0x20 [ 554.714607][T16707] ? mm_init+0x807/0x960 [ 554.718686][T16707] dup_mm+0x91/0x330 [ 554.722421][T16707] copy_mm+0x108/0x1b0 [ 554.726326][T16707] copy_process+0x1295/0x3250 [ 554.730854][T16707] ? check_stack_object+0x117/0x130 [ 554.735875][T16707] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 554.740823][T16707] ? copy_clone_args_from_user+0x6f0/0x790 [ 554.746464][T16707] kernel_clone+0x22d/0x990 [ 554.750802][T16707] ? dup_mmap+0xea0/0xea0 [ 554.754966][T16707] ? create_io_thread+0x1e0/0x1e0 [ 554.759826][T16707] ? file_end_write+0x1b0/0x1b0 [ 554.764516][T16707] __x64_sys_clone3+0x375/0x3a0 [ 554.769201][T16707] ? __ia32_sys_clone+0x300/0x300 [ 554.774061][T16707] ? ksys_write+0x25f/0x2c0 [ 554.778403][T16707] ? debug_smp_processor_id+0x17/0x20 [ 554.783607][T16707] do_syscall_64+0x44/0xd0 [ 554.787862][T16707] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 554.793590][T16707] RIP: 0033:0x7fa07a6ec0d9 [ 554.797842][T16707] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 554.817291][T16707] RSP: 002b:00007fa07945f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 554.825535][T16707] RAX: ffffffffffffffda RBX: 00007fa07a80bf80 RCX: 00007fa07a6ec0d9 17:19:04 executing program 2: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 51) 17:19:04 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x1f00, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 554.833343][T16707] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fa07945f050 [ 554.841149][T16707] RBP: 00007fa07945f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 554.848960][T16707] R10: 00007fa07945f050 R11: 0000000000000246 R12: 0000000000000058 [ 554.856773][T16707] R13: 00007ffd55a8aedf R14: 00007fa07945f300 R15: 0000000000022000 [ 554.864595][T16707] 17:19:04 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x2000, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 17:19:04 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 49) [ 554.902952][T16722] FAULT_INJECTION: forcing a failure. [ 554.902952][T16722] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 554.925911][T16722] CPU: 0 PID: 16722 Comm: syz-executor.2 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 554.935991][T16722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 554.945886][T16722] Call Trace: [ 554.949009][T16722] [ 554.949839][T16729] FAULT_INJECTION: forcing a failure. [ 554.949839][T16729] name failslab, interval 1, probability 0, space 0, times 0 [ 554.951783][T16722] dump_stack_lvl+0x151/0x1b7 [ 554.951812][T16722] ? bfq_pos_tree_add_move+0x43e/0x43e [ 554.974010][T16722] dump_stack+0x15/0x17 [ 554.977997][T16722] should_fail+0x3c0/0x510 [ 554.982247][T16722] should_fail_alloc_page+0x58/0x70 [ 554.987279][T16722] __alloc_pages+0x1de/0x7c0 [ 554.991718][T16722] ? __count_vm_events+0x30/0x30 [ 554.996483][T16722] ? __this_cpu_preempt_check+0x13/0x20 [ 555.001862][T16722] ? __mod_node_page_state+0xac/0xf0 [ 555.006983][T16722] pte_alloc_one+0x73/0x1b0 [ 555.011408][T16722] ? pfn_modify_allowed+0x2e0/0x2e0 [ 555.016444][T16722] __pte_alloc+0x86/0x350 [ 555.020609][T16722] ? free_pgtables+0x210/0x210 [ 555.025215][T16722] ? _raw_spin_lock+0xa3/0x1b0 [ 555.029812][T16722] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 555.035016][T16722] ? __kernel_text_address+0x9a/0x110 [ 555.040224][T16722] copy_pte_range+0x1b1f/0x20b0 [ 555.044914][T16722] ? __kunmap_atomic+0x80/0x80 [ 555.049508][T16722] ? __kasan_slab_alloc+0xc4/0xe0 [ 555.054370][T16722] ? __kasan_slab_alloc+0xb2/0xe0 [ 555.059237][T16722] ? kmem_cache_alloc+0x189/0x2f0 [ 555.064091][T16722] ? vm_area_dup+0x26/0x1d0 [ 555.068431][T16722] ? dup_mmap+0x6b8/0xea0 [ 555.072598][T16722] ? dup_mm+0x91/0x330 [ 555.076501][T16722] ? copy_mm+0x108/0x1b0 [ 555.080584][T16722] ? copy_process+0x1295/0x3250 [ 555.085267][T16722] ? kernel_clone+0x22d/0x990 [ 555.089789][T16722] ? __x64_sys_clone3+0x375/0x3a0 [ 555.094646][T16722] ? do_syscall_64+0x44/0xd0 17:19:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xb4}, {0x0}, {&(0x7f0000002a80)=""/4096, 0xe14}], 0x3, 0x0, 0xa00a0000}}], 0x300, 0x0, 0x0) 17:19:04 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x4000, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 17:19:04 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) 17:19:04 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x10fff, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 555.099069][T16722] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 555.104976][T16722] copy_page_range+0xc1e/0x1090 [ 555.109666][T16722] ? pfn_valid+0x1e0/0x1e0 [ 555.113913][T16722] dup_mmap+0x99f/0xea0 [ 555.117901][T16722] ? __delayed_free_task+0x20/0x20 [ 555.122849][T16722] ? mm_init+0x807/0x960 [ 555.126930][T16722] dup_mm+0x91/0x330 [ 555.130658][T16722] copy_mm+0x108/0x1b0 [ 555.134569][T16722] copy_process+0x1295/0x3250 [ 555.139084][T16722] ? check_stack_object+0x117/0x130 [ 555.144124][T16722] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 555.149065][T16722] ? copy_clone_args_from_user+0x6f0/0x790 [ 555.154706][T16722] kernel_clone+0x22d/0x990 [ 555.159046][T16722] ? dup_mmap+0xea0/0xea0 [ 555.163208][T16722] ? create_io_thread+0x1e0/0x1e0 [ 555.168075][T16722] ? file_end_write+0x1b0/0x1b0 [ 555.172761][T16722] __x64_sys_clone3+0x375/0x3a0 [ 555.177447][T16722] ? __ia32_sys_clone+0x300/0x300 [ 555.182304][T16722] ? ksys_write+0x25f/0x2c0 [ 555.186668][T16722] ? debug_smp_processor_id+0x17/0x20 [ 555.191850][T16722] do_syscall_64+0x44/0xd0 [ 555.196105][T16722] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 555.201829][T16722] RIP: 0033:0x7fb8471070d9 [ 555.206081][T16722] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 555.225524][T16722] RSP: 002b:00007fb845e7a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 555.233771][T16722] RAX: ffffffffffffffda RBX: 00007fb847226f80 RCX: 00007fb8471070d9 [ 555.241576][T16722] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fb845e7a050 [ 555.249389][T16722] RBP: 00007fb845e7a1d0 R08: 0000000000000000 R09: 0000000000000058 [ 555.257202][T16722] R10: 00007fb845e7a050 R11: 0000000000000246 R12: 0000000000000058 [ 555.265011][T16722] R13: 00007ffcf73cf18f R14: 00007fb845e7a300 R15: 0000000000022000 [ 555.272926][T16722] [ 555.275776][T16729] CPU: 1 PID: 16729 Comm: syz-executor.0 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 555.285843][T16729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 555.295741][T16729] Call Trace: [ 555.298864][T16729] [ 555.301637][T16729] dump_stack_lvl+0x151/0x1b7 [ 555.306248][T16729] ? bfq_pos_tree_add_move+0x43e/0x43e [ 555.311545][T16729] dump_stack+0x15/0x17 [ 555.315532][T16729] should_fail+0x3c0/0x510 [ 555.319786][T16729] __should_failslab+0x9f/0xe0 [ 555.324398][T16729] should_failslab+0x9/0x20 [ 555.328725][T16729] kmem_cache_alloc+0x4f/0x2f0 [ 555.333339][T16729] ? vm_area_dup+0x26/0x1d0 [ 555.337665][T16729] vm_area_dup+0x26/0x1d0 [ 555.341831][T16729] dup_mmap+0x6b8/0xea0 [ 555.345824][T16729] ? __delayed_free_task+0x20/0x20 [ 555.350771][T16729] ? mm_init+0x807/0x960 [ 555.354849][T16729] dup_mm+0x91/0x330 [ 555.358589][T16729] copy_mm+0x108/0x1b0 [ 555.362487][T16729] copy_process+0x1295/0x3250 [ 555.367003][T16729] ? check_stack_object+0x117/0x130 [ 555.372033][T16729] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 555.376985][T16729] ? copy_clone_args_from_user+0x6f0/0x790 [ 555.382623][T16729] kernel_clone+0x22d/0x990 [ 555.386961][T16729] ? dup_mmap+0xea0/0xea0 [ 555.391128][T16729] ? create_io_thread+0x1e0/0x1e0 [ 555.395990][T16729] ? file_end_write+0x1b0/0x1b0 [ 555.400679][T16729] __x64_sys_clone3+0x375/0x3a0 [ 555.405361][T16729] ? __ia32_sys_clone+0x300/0x300 [ 555.410221][T16729] ? ksys_write+0x25f/0x2c0 [ 555.414562][T16729] ? debug_smp_processor_id+0x17/0x20 [ 555.419771][T16729] do_syscall_64+0x44/0xd0 [ 555.424037][T16729] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 555.429751][T16729] RIP: 0033:0x7fa07a6ec0d9 [ 555.434006][T16729] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 17:19:04 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0xc800) 17:19:04 executing program 2: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 52) 17:19:04 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x20010, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 555.453448][T16729] RSP: 002b:00007fa07945f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 555.461688][T16729] RAX: ffffffffffffffda RBX: 00007fa07a80bf80 RCX: 00007fa07a6ec0d9 [ 555.469504][T16729] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fa07945f050 [ 555.477313][T16729] RBP: 00007fa07945f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 555.485127][T16729] R10: 00007fa07945f050 R11: 0000000000000246 R12: 0000000000000058 [ 555.493023][T16729] R13: 00007ffd55a8aedf R14: 00007fa07945f300 R15: 0000000000022000 [ 555.500835][T16729] 17:19:04 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 50) [ 555.524890][T16741] FAULT_INJECTION: forcing a failure. [ 555.524890][T16741] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 555.547976][T16741] CPU: 1 PID: 16741 Comm: syz-executor.2 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 555.558059][T16741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 555.567945][T16741] Call Trace: [ 555.571065][T16741] [ 555.573848][T16741] dump_stack_lvl+0x151/0x1b7 [ 555.578357][T16741] ? bfq_pos_tree_add_move+0x43e/0x43e [ 555.583652][T16741] dump_stack+0x15/0x17 [ 555.587642][T16741] should_fail+0x3c0/0x510 [ 555.591898][T16741] should_fail_alloc_page+0x58/0x70 [ 555.596933][T16741] __alloc_pages+0x1de/0x7c0 [ 555.601356][T16741] ? __count_vm_events+0x30/0x30 [ 555.606129][T16741] ? __this_cpu_preempt_check+0x13/0x20 [ 555.611512][T16741] ? __mod_node_page_state+0xac/0xf0 [ 555.616632][T16741] pte_alloc_one+0x73/0x1b0 [ 555.620972][T16741] ? pfn_modify_allowed+0x2e0/0x2e0 [ 555.626006][T16741] __pte_alloc+0x86/0x350 [ 555.630169][T16741] ? free_pgtables+0x210/0x210 [ 555.634865][T16741] ? _raw_spin_lock+0xa3/0x1b0 [ 555.639459][T16741] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 555.644665][T16741] ? __kernel_text_address+0x9a/0x110 [ 555.649875][T16741] copy_pte_range+0x1b1f/0x20b0 [ 555.654562][T16741] ? __kunmap_atomic+0x80/0x80 [ 555.659159][T16741] ? __kasan_slab_alloc+0xc4/0xe0 [ 555.664043][T16741] ? __kasan_slab_alloc+0xb2/0xe0 [ 555.668880][T16741] ? kmem_cache_alloc+0x189/0x2f0 [ 555.673742][T16741] ? vm_area_dup+0x26/0x1d0 [ 555.678080][T16741] ? dup_mmap+0x6b8/0xea0 [ 555.682246][T16741] ? dup_mm+0x91/0x330 [ 555.686152][T16741] ? copy_mm+0x108/0x1b0 [ 555.690229][T16741] ? copy_process+0x1295/0x3250 [ 555.694917][T16741] ? kernel_clone+0x22d/0x990 [ 555.699429][T16741] ? __x64_sys_clone3+0x375/0x3a0 [ 555.704289][T16741] ? do_syscall_64+0x44/0xd0 [ 555.708718][T16741] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 555.714619][T16741] copy_page_range+0xc1e/0x1090 [ 555.719404][T16741] ? pfn_valid+0x1e0/0x1e0 [ 555.723647][T16741] dup_mmap+0x99f/0xea0 [ 555.727640][T16741] ? __delayed_free_task+0x20/0x20 [ 555.732587][T16741] ? mm_init+0x807/0x960 [ 555.736751][T16741] dup_mm+0x91/0x330 [ 555.740487][T16741] copy_mm+0x108/0x1b0 [ 555.744391][T16741] copy_process+0x1295/0x3250 [ 555.748902][T16741] ? check_stack_object+0x117/0x130 [ 555.753936][T16741] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 555.758883][T16741] ? copy_clone_args_from_user+0x6f0/0x790 [ 555.764629][T16741] kernel_clone+0x22d/0x990 [ 555.768970][T16741] ? dup_mmap+0xea0/0xea0 [ 555.773128][T16741] ? create_io_thread+0x1e0/0x1e0 [ 555.777991][T16741] ? file_end_write+0x1b0/0x1b0 [ 555.782675][T16741] __x64_sys_clone3+0x375/0x3a0 [ 555.787362][T16741] ? __ia32_sys_clone+0x300/0x300 [ 555.792220][T16741] ? ksys_write+0x25f/0x2c0 [ 555.796562][T16741] ? debug_smp_processor_id+0x17/0x20 [ 555.801769][T16741] do_syscall_64+0x44/0xd0 [ 555.806021][T16741] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 555.811749][T16741] RIP: 0033:0x7fb8471070d9 [ 555.816002][T16741] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 555.835561][T16741] RSP: 002b:00007fb845e7a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 555.843802][T16741] RAX: ffffffffffffffda RBX: 00007fb847226f80 RCX: 00007fb8471070d9 [ 555.851612][T16741] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fb845e7a050 [ 555.859424][T16741] RBP: 00007fb845e7a1d0 R08: 0000000000000000 R09: 0000000000000058 [ 555.867234][T16741] R10: 00007fb845e7a050 R11: 0000000000000246 R12: 0000000000000058 17:19:05 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x20200, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 555.875046][T16741] R13: 00007ffcf73cf18f R14: 00007fb845e7a300 R15: 0000000000022000 [ 555.882859][T16741] [ 555.891633][T16748] FAULT_INJECTION: forcing a failure. [ 555.891633][T16748] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 555.909454][T16748] CPU: 1 PID: 16748 Comm: syz-executor.0 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 17:19:05 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) 17:19:05 executing program 2: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 53) 17:19:05 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x80000, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 555.919518][T16748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 555.929410][T16748] Call Trace: [ 555.932536][T16748] [ 555.935312][T16748] dump_stack_lvl+0x151/0x1b7 [ 555.939830][T16748] ? bfq_pos_tree_add_move+0x43e/0x43e [ 555.945123][T16748] dump_stack+0x15/0x17 [ 555.949110][T16748] should_fail+0x3c0/0x510 [ 555.953365][T16748] should_fail_alloc_page+0x58/0x70 [ 555.955870][T16753] FAULT_INJECTION: forcing a failure. [ 555.955870][T16753] name failslab, interval 1, probability 0, space 0, times 0 [ 555.958394][T16748] __alloc_pages+0x1de/0x7c0 [ 555.958423][T16748] ? __count_vm_events+0x30/0x30 [ 555.958441][T16748] ? __this_cpu_preempt_check+0x13/0x20 [ 555.985389][T16748] ? __mod_node_page_state+0xac/0xf0 [ 555.990509][T16748] pte_alloc_one+0x73/0x1b0 [ 555.994846][T16748] ? pfn_modify_allowed+0x2e0/0x2e0 [ 555.999885][T16748] __pte_alloc+0x86/0x350 [ 556.004047][T16748] ? free_pgtables+0x210/0x210 [ 556.008645][T16748] ? _raw_spin_lock+0xa3/0x1b0 [ 556.013245][T16748] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 556.018453][T16748] ? __kernel_text_address+0x9a/0x110 [ 556.023663][T16748] copy_pte_range+0x1b1f/0x20b0 [ 556.028354][T16748] ? __kunmap_atomic+0x80/0x80 [ 556.032948][T16748] ? __kasan_slab_alloc+0xc4/0xe0 [ 556.037814][T16748] ? __kasan_slab_alloc+0xb2/0xe0 [ 556.042673][T16748] ? kmem_cache_alloc+0x189/0x2f0 [ 556.047536][T16748] ? vm_area_dup+0x26/0x1d0 [ 556.051873][T16748] ? dup_mmap+0x6b8/0xea0 [ 556.056041][T16748] ? dup_mm+0x91/0x330 [ 556.059944][T16748] ? copy_mm+0x108/0x1b0 [ 556.064021][T16748] ? copy_process+0x1295/0x3250 [ 556.068707][T16748] ? kernel_clone+0x22d/0x990 [ 556.073221][T16748] ? __x64_sys_clone3+0x375/0x3a0 [ 556.078080][T16748] ? do_syscall_64+0x44/0xd0 [ 556.082505][T16748] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 556.088409][T16748] copy_page_range+0xc1e/0x1090 [ 556.093098][T16748] ? pfn_valid+0x1e0/0x1e0 [ 556.097436][T16748] dup_mmap+0x99f/0xea0 [ 556.101429][T16748] ? __delayed_free_task+0x20/0x20 [ 556.106374][T16748] ? mm_init+0x807/0x960 [ 556.110453][T16748] dup_mm+0x91/0x330 [ 556.114183][T16748] copy_mm+0x108/0x1b0 [ 556.118091][T16748] copy_process+0x1295/0x3250 [ 556.122605][T16748] ? check_stack_object+0x117/0x130 [ 556.127644][T16748] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 556.132584][T16748] ? copy_clone_args_from_user+0x6f0/0x790 [ 556.138226][T16748] kernel_clone+0x22d/0x990 [ 556.142570][T16748] ? dup_mmap+0xea0/0xea0 [ 556.146732][T16748] ? create_io_thread+0x1e0/0x1e0 [ 556.151591][T16748] ? file_end_write+0x1b0/0x1b0 [ 556.156282][T16748] __x64_sys_clone3+0x375/0x3a0 [ 556.160976][T16748] ? __ia32_sys_clone+0x300/0x300 [ 556.165824][T16748] ? ksys_write+0x25f/0x2c0 [ 556.170173][T16748] ? debug_smp_processor_id+0x17/0x20 [ 556.175371][T16748] do_syscall_64+0x44/0xd0 [ 556.179625][T16748] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 556.185353][T16748] RIP: 0033:0x7fa07a6ec0d9 [ 556.189606][T16748] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 556.209052][T16748] RSP: 002b:00007fa07945f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 556.217292][T16748] RAX: ffffffffffffffda RBX: 00007fa07a80bf80 RCX: 00007fa07a6ec0d9 [ 556.225104][T16748] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fa07945f050 [ 556.232913][T16748] RBP: 00007fa07945f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 556.240728][T16748] R10: 00007fa07945f050 R11: 0000000000000246 R12: 0000000000000058 [ 556.248535][T16748] R13: 00007ffd55a8aedf R14: 00007fa07945f300 R15: 0000000000022000 [ 556.256350][T16748] [ 556.266194][T16753] CPU: 1 PID: 16753 Comm: syz-executor.2 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 556.276275][T16753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 556.286159][T16753] Call Trace: [ 556.289283][T16753] [ 556.292056][T16753] dump_stack_lvl+0x151/0x1b7 [ 556.296570][T16753] ? bfq_pos_tree_add_move+0x43e/0x43e [ 556.301872][T16753] dump_stack+0x15/0x17 [ 556.305862][T16753] should_fail+0x3c0/0x510 [ 556.310109][T16753] __should_failslab+0x9f/0xe0 [ 556.314707][T16753] should_failslab+0x9/0x20 [ 556.319066][T16753] kmem_cache_alloc+0x4f/0x2f0 [ 556.323650][T16753] ? vm_area_dup+0x26/0x1d0 [ 556.327987][T16753] vm_area_dup+0x26/0x1d0 [ 556.332157][T16753] dup_mmap+0x6b8/0xea0 [ 556.336145][T16753] ? __delayed_free_task+0x20/0x20 [ 556.341092][T16753] ? mm_init+0x807/0x960 [ 556.345263][T16753] dup_mm+0x91/0x330 [ 556.348990][T16753] copy_mm+0x108/0x1b0 [ 556.352896][T16753] copy_process+0x1295/0x3250 [ 556.357422][T16753] ? check_stack_object+0x117/0x130 [ 556.362443][T16753] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 556.367390][T16753] ? copy_clone_args_from_user+0x6f0/0x790 [ 556.373036][T16753] kernel_clone+0x22d/0x990 [ 556.377370][T16753] ? dup_mmap+0xea0/0xea0 [ 556.381542][T16753] ? create_io_thread+0x1e0/0x1e0 [ 556.386401][T16753] ? file_end_write+0x1b0/0x1b0 [ 556.391085][T16753] __x64_sys_clone3+0x375/0x3a0 [ 556.395771][T16753] ? __ia32_sys_clone+0x300/0x300 [ 556.400631][T16753] ? ksys_write+0x25f/0x2c0 [ 556.404971][T16753] ? debug_smp_processor_id+0x17/0x20 [ 556.410178][T16753] do_syscall_64+0x44/0xd0 [ 556.414431][T16753] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 556.420162][T16753] RIP: 0033:0x7fb8471070d9 [ 556.424413][T16753] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 556.443853][T16753] RSP: 002b:00007fb845e7a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 556.452097][T16753] RAX: ffffffffffffffda RBX: 00007fb847226f80 RCX: 00007fb8471070d9 [ 556.459909][T16753] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fb845e7a050 [ 556.467727][T16753] RBP: 00007fb845e7a1d0 R08: 0000000000000000 R09: 0000000000000058 17:19:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xb4}, {0x0}, {&(0x7f0000002a80)=""/4096, 0xe14}], 0x3, 0x0, 0xac0a0000}}], 0x300, 0x0, 0x0) 17:19:05 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0xcc00) 17:19:05 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 51) 17:19:05 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x101000, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 17:19:05 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x1a2000, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 556.475536][T16753] R10: 00007fb845e7a050 R11: 0000000000000246 R12: 0000000000000058 [ 556.483343][T16753] R13: 00007ffcf73cf18f R14: 00007fb845e7a300 R15: 0000000000022000 [ 556.491155][T16753] [ 556.514831][T16767] FAULT_INJECTION: forcing a failure. [ 556.514831][T16767] name failslab, interval 1, probability 0, space 0, times 0 [ 556.535644][T16767] CPU: 0 PID: 16767 Comm: syz-executor.0 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 556.545808][T16767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 556.555708][T16767] Call Trace: [ 556.558831][T16767] [ 556.560423][T16773] FAULT_INJECTION: forcing a failure. [ 556.560423][T16773] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 556.561607][T16767] dump_stack_lvl+0x151/0x1b7 [ 556.561636][T16767] ? bfq_pos_tree_add_move+0x43e/0x43e [ 556.584431][T16767] ? do_syscall_64+0x44/0xd0 [ 556.588856][T16767] dump_stack+0x15/0x17 [ 556.592853][T16767] should_fail+0x3c0/0x510 [ 556.597104][T16767] __should_failslab+0x9f/0xe0 [ 556.601704][T16767] should_failslab+0x9/0x20 [ 556.606041][T16767] kmem_cache_alloc+0x4f/0x2f0 [ 556.610639][T16767] ? anon_vma_clone+0xa1/0x4f0 [ 556.615239][T16767] anon_vma_clone+0xa1/0x4f0 [ 556.619667][T16767] anon_vma_fork+0x91/0x4f0 [ 556.624017][T16767] ? anon_vma_name+0x4c/0x70 [ 556.628431][T16767] dup_mmap+0x750/0xea0 [ 556.632425][T16767] ? __delayed_free_task+0x20/0x20 [ 556.637376][T16767] ? mm_init+0x807/0x960 [ 556.641448][T16767] dup_mm+0x91/0x330 [ 556.645184][T16767] copy_mm+0x108/0x1b0 [ 556.649090][T16767] copy_process+0x1295/0x3250 [ 556.653604][T16767] ? check_stack_object+0x117/0x130 [ 556.658637][T16767] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 556.663584][T16767] ? copy_clone_args_from_user+0x6f0/0x790 [ 556.669223][T16767] kernel_clone+0x22d/0x990 [ 556.673610][T16767] ? dup_mmap+0xea0/0xea0 [ 556.677727][T16767] ? create_io_thread+0x1e0/0x1e0 [ 556.682589][T16767] ? file_end_write+0x1b0/0x1b0 [ 556.687275][T16767] __x64_sys_clone3+0x375/0x3a0 [ 556.691962][T16767] ? __ia32_sys_clone+0x300/0x300 [ 556.696823][T16767] ? ksys_write+0x25f/0x2c0 [ 556.701165][T16767] ? debug_smp_processor_id+0x17/0x20 [ 556.706372][T16767] do_syscall_64+0x44/0xd0 [ 556.710625][T16767] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 556.716351][T16767] RIP: 0033:0x7fa07a6ec0d9 [ 556.720609][T16767] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 556.740046][T16767] RSP: 002b:00007fa07945f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 556.748297][T16767] RAX: ffffffffffffffda RBX: 00007fa07a80bf80 RCX: 00007fa07a6ec0d9 [ 556.756100][T16767] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fa07945f050 [ 556.763911][T16767] RBP: 00007fa07945f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 556.771808][T16767] R10: 00007fa07945f050 R11: 0000000000000246 R12: 0000000000000058 17:19:05 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x201a00, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 17:19:05 executing program 2: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 54) 17:19:06 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 52) 17:19:06 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) [ 556.779623][T16767] R13: 00007ffd55a8aedf R14: 00007fa07945f300 R15: 0000000000022000 [ 556.787541][T16767] [ 556.790399][T16773] CPU: 1 PID: 16773 Comm: syz-executor.2 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 556.800471][T16773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 556.810367][T16773] Call Trace: [ 556.813493][T16773] [ 556.816265][T16773] dump_stack_lvl+0x151/0x1b7 [ 556.820782][T16773] ? bfq_pos_tree_add_move+0x43e/0x43e [ 556.826074][T16773] ? stack_trace_save+0x1f0/0x1f0 [ 556.828488][T16777] FAULT_INJECTION: forcing a failure. [ 556.828488][T16777] name failslab, interval 1, probability 0, space 0, times 0 [ 556.830930][T16773] ? __kernel_text_address+0x9a/0x110 [ 556.830958][T16773] dump_stack+0x15/0x17 [ 556.852548][T16773] should_fail+0x3c0/0x510 [ 556.856805][T16773] should_fail_alloc_page+0x58/0x70 [ 556.861830][T16773] __alloc_pages+0x1de/0x7c0 [ 556.866256][T16773] ? stack_trace_save+0x12d/0x1f0 [ 556.871118][T16773] ? stack_trace_snprint+0x100/0x100 [ 556.876236][T16773] ? __count_vm_events+0x30/0x30 [ 556.881100][T16773] ? __kasan_slab_alloc+0xc4/0xe0 [ 556.885960][T16773] ? __kasan_slab_alloc+0xb2/0xe0 [ 556.890825][T16773] ? kmem_cache_alloc+0x189/0x2f0 [ 556.895674][T16773] ? anon_vma_fork+0x1b9/0x4f0 [ 556.900281][T16773] get_zeroed_page+0x19/0x40 [ 556.904702][T16773] __pud_alloc+0x8b/0x260 [ 556.908873][T16773] ? do_handle_mm_fault+0x2370/0x2370 [ 556.914166][T16773] copy_page_range+0xd9e/0x1090 [ 556.918871][T16773] ? pfn_valid+0x1e0/0x1e0 [ 556.923108][T16773] dup_mmap+0x99f/0xea0 [ 556.927106][T16773] ? __delayed_free_task+0x20/0x20 [ 556.932045][T16773] ? mm_init+0x807/0x960 [ 556.936123][T16773] dup_mm+0x91/0x330 [ 556.939856][T16773] copy_mm+0x108/0x1b0 [ 556.943759][T16773] copy_process+0x1295/0x3250 [ 556.948277][T16773] ? check_stack_object+0x117/0x130 [ 556.953311][T16773] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 556.958773][T16773] ? copy_clone_args_from_user+0x6f0/0x790 [ 556.964504][T16773] kernel_clone+0x22d/0x990 [ 556.968844][T16773] ? dup_mmap+0xea0/0xea0 [ 556.973010][T16773] ? create_io_thread+0x1e0/0x1e0 [ 556.977956][T16773] ? file_end_write+0x1b0/0x1b0 [ 556.982641][T16773] __x64_sys_clone3+0x375/0x3a0 [ 556.987337][T16773] ? __ia32_sys_clone+0x300/0x300 [ 556.992191][T16773] ? ksys_write+0x25f/0x2c0 [ 556.996531][T16773] ? debug_smp_processor_id+0x17/0x20 [ 557.001738][T16773] do_syscall_64+0x44/0xd0 [ 557.005990][T16773] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 557.011715][T16773] RIP: 0033:0x7fb8471070d9 [ 557.015969][T16773] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 557.035421][T16773] RSP: 002b:00007fb845e7a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 557.043658][T16773] RAX: ffffffffffffffda RBX: 00007fb847226f80 RCX: 00007fb8471070d9 [ 557.051467][T16773] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fb845e7a050 [ 557.059277][T16773] RBP: 00007fb845e7a1d0 R08: 0000000000000000 R09: 0000000000000058 [ 557.067088][T16773] R10: 00007fb845e7a050 R11: 0000000000000246 R12: 0000000000000058 [ 557.074914][T16773] R13: 00007ffcf73cf18f R14: 00007fb845e7a300 R15: 0000000000022000 [ 557.082713][T16773] [ 557.086373][T16777] CPU: 0 PID: 16777 Comm: syz-executor.0 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 557.096435][T16777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 557.106331][T16777] Call Trace: [ 557.109454][T16777] [ 557.112232][T16777] dump_stack_lvl+0x151/0x1b7 [ 557.116743][T16777] ? bfq_pos_tree_add_move+0x43e/0x43e [ 557.122041][T16777] ? vma_interval_tree_augment_rotate+0x210/0x210 [ 557.128281][T16777] dump_stack+0x15/0x17 [ 557.132278][T16777] should_fail+0x3c0/0x510 [ 557.136528][T16777] __should_failslab+0x9f/0xe0 [ 557.141129][T16777] should_failslab+0x9/0x20 [ 557.145467][T16777] kmem_cache_alloc+0x4f/0x2f0 [ 557.150067][T16777] ? anon_vma_fork+0xf7/0x4f0 [ 557.154581][T16777] anon_vma_fork+0xf7/0x4f0 [ 557.158917][T16777] ? anon_vma_name+0x4c/0x70 [ 557.163347][T16777] dup_mmap+0x750/0xea0 [ 557.167341][T16777] ? __delayed_free_task+0x20/0x20 [ 557.172284][T16777] ? mm_init+0x807/0x960 [ 557.176365][T16777] dup_mm+0x91/0x330 [ 557.180097][T16777] copy_mm+0x108/0x1b0 [ 557.184001][T16777] copy_process+0x1295/0x3250 [ 557.188516][T16777] ? check_stack_object+0x117/0x130 [ 557.193549][T16777] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 557.198498][T16777] ? copy_clone_args_from_user+0x6f0/0x790 [ 557.204140][T16777] kernel_clone+0x22d/0x990 [ 557.208475][T16777] ? dup_mmap+0xea0/0xea0 [ 557.212642][T16777] ? create_io_thread+0x1e0/0x1e0 [ 557.217502][T16777] ? file_end_write+0x1b0/0x1b0 [ 557.222193][T16777] __x64_sys_clone3+0x375/0x3a0 [ 557.226877][T16777] ? __ia32_sys_clone+0x300/0x300 [ 557.231736][T16777] ? ksys_write+0x25f/0x2c0 [ 557.236078][T16777] ? debug_smp_processor_id+0x17/0x20 [ 557.241286][T16777] do_syscall_64+0x44/0xd0 [ 557.245538][T16777] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 557.251265][T16777] RIP: 0033:0x7fa07a6ec0d9 [ 557.255519][T16777] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 557.274959][T16777] RSP: 002b:00007fa07945f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 17:19:06 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0xf0ff1f, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 17:19:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xb4}, {0x0}, {&(0x7f0000002a80)=""/4096, 0xe14}], 0x3, 0x0, 0xac0c0000}}], 0x300, 0x0, 0x0) 17:19:06 executing program 2: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 55) 17:19:06 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 53) [ 557.283204][T16777] RAX: ffffffffffffffda RBX: 00007fa07a80bf80 RCX: 00007fa07a6ec0d9 [ 557.291015][T16777] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fa07945f050 [ 557.298825][T16777] RBP: 00007fa07945f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 557.306638][T16777] R10: 00007fa07945f050 R11: 0000000000000246 R12: 0000000000000058 [ 557.314449][T16777] R13: 00007ffd55a8aedf R14: 00007fa07945f300 R15: 0000000000022000 [ 557.322263][T16777] [ 557.361105][T16784] __nla_validate_parse: 125 callbacks suppressed [ 557.361124][T16784] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 557.377053][T16786] FAULT_INJECTION: forcing a failure. [ 557.377053][T16786] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 557.391918][T16784] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 557.393912][T16787] FAULT_INJECTION: forcing a failure. 17:19:06 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0xcd15) 17:19:06 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x1000000, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 17:19:06 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x2000000, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 17:19:06 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x7000000, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 557.393912][T16787] name failslab, interval 1, probability 0, space 0, times 0 [ 557.413029][T16786] CPU: 1 PID: 16786 Comm: syz-executor.2 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 557.423503][T16786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 557.433396][T16786] Call Trace: [ 557.436517][T16786] [ 557.439294][T16786] dump_stack_lvl+0x151/0x1b7 [ 557.443809][T16786] ? bfq_pos_tree_add_move+0x43e/0x43e [ 557.449110][T16786] dump_stack+0x15/0x17 [ 557.453098][T16786] should_fail+0x3c0/0x510 17:19:06 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x8000000, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 557.457361][T16786] should_fail_alloc_page+0x58/0x70 [ 557.462379][T16786] __alloc_pages+0x1de/0x7c0 [ 557.466818][T16786] ? __count_vm_events+0x30/0x30 [ 557.467357][T16784] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 557.471578][T16786] ? dup_mm+0x91/0x330 [ 557.484605][T16786] ? copy_mm+0x108/0x1b0 [ 557.488686][T16786] ? copy_process+0x1295/0x3250 [ 557.493367][T16786] ? kernel_clone+0x22d/0x990 [ 557.497888][T16786] ? __x64_sys_clone3+0x375/0x3a0 [ 557.501818][T16784] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 557.502738][T16786] pte_alloc_one+0x73/0x1b0 [ 557.502764][T16786] ? pfn_modify_allowed+0x2e0/0x2e0 [ 557.517471][T16784] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 557.521310][T16786] ? __kasan_check_write+0x14/0x20 [ 557.521337][T16786] ? __set_page_owner+0x2ee/0x310 [ 557.540427][T16784] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 557.541621][T16786] __pte_alloc+0x86/0x350 [ 557.541649][T16786] ? post_alloc_hook+0x1ab/0x1b0 [ 557.559678][T16786] ? free_pgtables+0x210/0x210 [ 557.562267][T16784] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 557.564272][T16786] ? get_page_from_freelist+0x38b/0x400 [ 557.564297][T16786] copy_pte_range+0x1b1f/0x20b0 [ 557.582225][T16784] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 557.583457][T16786] ? __kunmap_atomic+0x80/0x80 [ 557.597185][T16786] ? __pud_alloc+0x260/0x260 [ 557.601567][T16784] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 17:19:07 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x9000000, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 557.601591][T16786] ? __pud_alloc+0x218/0x260 [ 557.615140][T16786] ? do_handle_mm_fault+0x2370/0x2370 [ 557.618666][T16784] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 557.620344][T16786] copy_page_range+0xc1e/0x1090 [ 557.620377][T16786] ? pfn_valid+0x1e0/0x1e0 [ 557.638449][T16786] dup_mmap+0x99f/0xea0 [ 557.642391][T16786] ? __delayed_free_task+0x20/0x20 [ 557.647337][T16786] ? mm_init+0x807/0x960 [ 557.651415][T16786] dup_mm+0x91/0x330 [ 557.655149][T16786] copy_mm+0x108/0x1b0 [ 557.659054][T16786] copy_process+0x1295/0x3250 [ 557.663570][T16786] ? check_stack_object+0x117/0x130 [ 557.668600][T16786] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 557.673545][T16786] ? copy_clone_args_from_user+0x6f0/0x790 [ 557.679187][T16786] kernel_clone+0x22d/0x990 [ 557.683533][T16786] ? dup_mmap+0xea0/0xea0 [ 557.687692][T16786] ? create_io_thread+0x1e0/0x1e0 [ 557.692555][T16786] ? file_end_write+0x1b0/0x1b0 [ 557.697242][T16786] __x64_sys_clone3+0x375/0x3a0 [ 557.701931][T16786] ? __ia32_sys_clone+0x300/0x300 [ 557.706788][T16786] ? ksys_write+0x25f/0x2c0 17:19:07 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x10000200, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 557.711131][T16786] ? debug_smp_processor_id+0x17/0x20 [ 557.716336][T16786] do_syscall_64+0x44/0xd0 [ 557.720583][T16786] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 557.726315][T16786] RIP: 0033:0x7fb8471070d9 [ 557.730568][T16786] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 557.750010][T16786] RSP: 002b:00007fb845e7a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 557.758265][T16786] RAX: ffffffffffffffda RBX: 00007fb847226f80 RCX: 00007fb8471070d9 [ 557.766064][T16786] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fb845e7a050 [ 557.773877][T16786] RBP: 00007fb845e7a1d0 R08: 0000000000000000 R09: 0000000000000058 [ 557.781686][T16786] R10: 00007fb845e7a050 R11: 0000000000000246 R12: 0000000000000058 [ 557.789498][T16786] R13: 00007ffcf73cf18f R14: 00007fb845e7a300 R15: 0000000000022000 [ 557.797316][T16786] 17:19:07 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) 17:19:07 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0xd000) [ 557.814048][T16787] CPU: 1 PID: 16787 Comm: syz-executor.0 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 557.824127][T16787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 557.834022][T16787] Call Trace: [ 557.837148][T16787] [ 557.839924][T16787] dump_stack_lvl+0x151/0x1b7 [ 557.844469][T16787] ? bfq_pos_tree_add_move+0x43e/0x43e [ 557.849729][T16787] dump_stack+0x15/0x17 [ 557.853717][T16787] should_fail+0x3c0/0x510 [ 557.857970][T16787] __should_failslab+0x9f/0xe0 [ 557.862568][T16787] should_failslab+0x9/0x20 [ 557.866907][T16787] kmem_cache_alloc+0x4f/0x2f0 [ 557.871509][T16787] ? anon_vma_fork+0x1b9/0x4f0 [ 557.876109][T16787] anon_vma_fork+0x1b9/0x4f0 [ 557.880544][T16787] dup_mmap+0x750/0xea0 [ 557.884532][T16787] ? __delayed_free_task+0x20/0x20 [ 557.889480][T16787] ? mm_init+0x807/0x960 [ 557.893557][T16787] dup_mm+0x91/0x330 [ 557.897290][T16787] copy_mm+0x108/0x1b0 [ 557.901304][T16787] copy_process+0x1295/0x3250 [ 557.905819][T16787] ? check_stack_object+0x117/0x130 [ 557.910857][T16787] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 557.915799][T16787] ? copy_clone_args_from_user+0x6f0/0x790 [ 557.921438][T16787] kernel_clone+0x22d/0x990 [ 557.925778][T16787] ? dup_mmap+0xea0/0xea0 [ 557.929947][T16787] ? create_io_thread+0x1e0/0x1e0 [ 557.934804][T16787] ? file_end_write+0x1b0/0x1b0 [ 557.939493][T16787] __x64_sys_clone3+0x375/0x3a0 [ 557.944177][T16787] ? __ia32_sys_clone+0x300/0x300 [ 557.949039][T16787] ? ksys_write+0x25f/0x2c0 [ 557.953382][T16787] ? debug_smp_processor_id+0x17/0x20 [ 557.958588][T16787] do_syscall_64+0x44/0xd0 [ 557.962842][T16787] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 557.968565][T16787] RIP: 0033:0x7fa07a6ec0d9 [ 557.972820][T16787] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 557.992264][T16787] RSP: 002b:00007fa07945f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 558.000504][T16787] RAX: ffffffffffffffda RBX: 00007fa07a80bf80 RCX: 00007fa07a6ec0d9 [ 558.008315][T16787] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fa07945f050 [ 558.016130][T16787] RBP: 00007fa07945f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 558.023942][T16787] R10: 00007fa07945f050 R11: 0000000000000246 R12: 0000000000000058 [ 558.031750][T16787] R13: 00007ffd55a8aedf R14: 00007fa07945f300 R15: 0000000000022000 [ 558.039568][T16787] 17:19:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xb4}, {0x0}, {&(0x7f0000002a80)=""/4096, 0xe14}], 0x3, 0x0, 0xb40a0000}}], 0x300, 0x0, 0x0) 17:19:07 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x11000000, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 17:19:07 executing program 2: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 56) 17:19:07 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) 17:19:07 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 54) 17:19:07 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0xd150) 17:19:07 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x1f000000, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 17:19:07 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x1ffff000, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 558.206906][T16816] FAULT_INJECTION: forcing a failure. [ 558.206906][T16816] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 558.220797][T16818] FAULT_INJECTION: forcing a failure. [ 558.220797][T16818] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 558.234146][T16816] CPU: 1 PID: 16816 Comm: syz-executor.2 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 558.244214][T16816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 17:19:07 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x20000000, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 558.254108][T16816] Call Trace: [ 558.257232][T16816] [ 558.260009][T16816] dump_stack_lvl+0x151/0x1b7 [ 558.264520][T16816] ? bfq_pos_tree_add_move+0x43e/0x43e [ 558.269813][T16816] dump_stack+0x15/0x17 [ 558.273806][T16816] should_fail+0x3c0/0x510 [ 558.278060][T16816] should_fail_alloc_page+0x58/0x70 [ 558.283104][T16816] __alloc_pages+0x1de/0x7c0 [ 558.287520][T16816] ? __count_vm_events+0x30/0x30 [ 558.292294][T16816] ? dup_mm+0x91/0x330 [ 558.296196][T16816] ? copy_mm+0x108/0x1b0 [ 558.300274][T16816] ? copy_process+0x1295/0x3250 [ 558.304962][T16816] ? kernel_clone+0x22d/0x990 [ 558.309474][T16816] ? __x64_sys_clone3+0x375/0x3a0 [ 558.314338][T16816] pte_alloc_one+0x73/0x1b0 [ 558.318681][T16816] ? pfn_modify_allowed+0x2e0/0x2e0 [ 558.323710][T16816] ? __kasan_check_write+0x14/0x20 [ 558.328673][T16816] ? __set_page_owner+0x2ee/0x310 [ 558.333523][T16816] __pte_alloc+0x86/0x350 [ 558.337687][T16816] ? post_alloc_hook+0x1ab/0x1b0 [ 558.342466][T16816] ? free_pgtables+0x210/0x210 [ 558.347056][T16816] ? get_page_from_freelist+0x38b/0x400 [ 558.352438][T16816] copy_pte_range+0x1b1f/0x20b0 [ 558.357128][T16816] ? __kunmap_atomic+0x80/0x80 [ 558.361726][T16816] ? __pud_alloc+0x260/0x260 [ 558.366149][T16816] ? __pud_alloc+0x218/0x260 [ 558.370580][T16816] ? do_handle_mm_fault+0x2370/0x2370 [ 558.375791][T16816] copy_page_range+0xc1e/0x1090 [ 558.380504][T16816] ? pfn_valid+0x1e0/0x1e0 [ 558.384734][T16816] dup_mmap+0x99f/0xea0 [ 558.388720][T16816] ? __delayed_free_task+0x20/0x20 [ 558.393668][T16816] ? mm_init+0x807/0x960 [ 558.397752][T16816] dup_mm+0x91/0x330 [ 558.401481][T16816] copy_mm+0x108/0x1b0 [ 558.405384][T16816] copy_process+0x1295/0x3250 [ 558.409897][T16816] ? check_stack_object+0x117/0x130 [ 558.414928][T16816] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 558.419874][T16816] ? copy_clone_args_from_user+0x6f0/0x790 [ 558.425517][T16816] kernel_clone+0x22d/0x990 [ 558.429864][T16816] ? dup_mmap+0xea0/0xea0 [ 558.434024][T16816] ? create_io_thread+0x1e0/0x1e0 [ 558.438883][T16816] ? file_end_write+0x1b0/0x1b0 [ 558.443570][T16816] __x64_sys_clone3+0x375/0x3a0 [ 558.448255][T16816] ? __ia32_sys_clone+0x300/0x300 [ 558.453115][T16816] ? ksys_write+0x25f/0x2c0 [ 558.457460][T16816] ? debug_smp_processor_id+0x17/0x20 [ 558.462662][T16816] do_syscall_64+0x44/0xd0 [ 558.466915][T16816] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 558.472821][T16816] RIP: 0033:0x7fb8471070d9 [ 558.477072][T16816] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 558.496516][T16816] RSP: 002b:00007fb845e7a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 558.504760][T16816] RAX: ffffffffffffffda RBX: 00007fb847226f80 RCX: 00007fb8471070d9 [ 558.512567][T16816] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fb845e7a050 [ 558.520385][T16816] RBP: 00007fb845e7a1d0 R08: 0000000000000000 R09: 0000000000000058 [ 558.528197][T16816] R10: 00007fb845e7a050 R11: 0000000000000246 R12: 0000000000000058 [ 558.536001][T16816] R13: 00007ffcf73cf18f R14: 00007fb845e7a300 R15: 0000000000022000 [ 558.543815][T16816] [ 558.546682][T16818] CPU: 0 PID: 16818 Comm: syz-executor.0 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 17:19:07 executing program 2: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 57) 17:19:08 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) [ 558.556749][T16818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 558.566645][T16818] Call Trace: [ 558.569766][T16818] [ 558.572543][T16818] dump_stack_lvl+0x151/0x1b7 [ 558.577064][T16818] ? bfq_pos_tree_add_move+0x43e/0x43e [ 558.582353][T16818] ? stack_trace_save+0x1f0/0x1f0 [ 558.587209][T16818] ? __kernel_text_address+0x9a/0x110 [ 558.592421][T16818] dump_stack+0x15/0x17 [ 558.596410][T16818] should_fail+0x3c0/0x510 [ 558.600667][T16818] should_fail_alloc_page+0x58/0x70 17:19:08 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x40000000, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 558.605698][T16818] __alloc_pages+0x1de/0x7c0 [ 558.610124][T16818] ? stack_trace_save+0x12d/0x1f0 [ 558.614991][T16818] ? stack_trace_snprint+0x100/0x100 [ 558.620105][T16818] ? __count_vm_events+0x30/0x30 [ 558.624879][T16818] ? __kasan_slab_alloc+0xc4/0xe0 [ 558.629738][T16818] ? __kasan_slab_alloc+0xb2/0xe0 [ 558.634598][T16818] ? kmem_cache_alloc+0x189/0x2f0 [ 558.639460][T16818] ? anon_vma_fork+0x1b9/0x4f0 [ 558.644062][T16818] get_zeroed_page+0x19/0x40 [ 558.648934][T16818] __pud_alloc+0x8b/0x260 [ 558.653085][T16818] ? do_handle_mm_fault+0x2370/0x2370 [ 558.658294][T16818] copy_page_range+0xd9e/0x1090 [ 558.662982][T16818] ? pfn_valid+0x1e0/0x1e0 [ 558.667230][T16818] dup_mmap+0x99f/0xea0 [ 558.671228][T16818] ? __delayed_free_task+0x20/0x20 [ 558.676172][T16818] ? mm_init+0x807/0x960 [ 558.680249][T16818] dup_mm+0x91/0x330 [ 558.683978][T16818] copy_mm+0x108/0x1b0 [ 558.687883][T16818] copy_process+0x1295/0x3250 [ 558.692398][T16818] ? check_stack_object+0x117/0x130 [ 558.697431][T16818] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 558.702378][T16818] ? copy_clone_args_from_user+0x6f0/0x790 [ 558.708019][T16818] kernel_clone+0x22d/0x990 [ 558.712368][T16818] ? dup_mmap+0xea0/0xea0 [ 558.716534][T16818] ? create_io_thread+0x1e0/0x1e0 [ 558.721385][T16818] ? file_end_write+0x1b0/0x1b0 [ 558.726073][T16818] __x64_sys_clone3+0x375/0x3a0 [ 558.730759][T16818] ? __ia32_sys_clone+0x300/0x300 [ 558.735620][T16818] ? ksys_write+0x25f/0x2c0 [ 558.739959][T16818] ? debug_smp_processor_id+0x17/0x20 [ 558.745166][T16818] do_syscall_64+0x44/0xd0 [ 558.749420][T16818] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 558.755150][T16818] RIP: 0033:0x7fa07a6ec0d9 [ 558.759425][T16818] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 558.778846][T16818] RSP: 002b:00007fa07945f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 558.787087][T16818] RAX: ffffffffffffffda RBX: 00007fa07a80bf80 RCX: 00007fa07a6ec0d9 [ 558.794896][T16818] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fa07945f050 [ 558.802729][T16818] RBP: 00007fa07945f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 558.810522][T16818] R10: 00007fa07945f050 R11: 0000000000000246 R12: 0000000000000058 [ 558.818423][T16818] R13: 00007ffd55a8aedf R14: 00007fa07945f300 R15: 0000000000022000 [ 558.826237][T16818] 17:19:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xb4}, {0x0}, {&(0x7f0000002a80)=""/4096, 0xe14}], 0x3, 0x0, 0xb80a0000}}], 0x300, 0x0, 0x0) 17:19:08 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) 17:19:08 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0xf5ffffff, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 17:19:08 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0xd800) 17:19:08 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 55) 17:19:08 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0xfbffffff, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 17:19:08 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0xff0f0100, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 559.074805][T16844] FAULT_INJECTION: forcing a failure. [ 559.074805][T16844] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 559.115273][T16844] CPU: 1 PID: 16844 Comm: syz-executor.0 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 559.125349][T16844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 559.135244][T16844] Call Trace: [ 559.138368][T16844] [ 559.141146][T16844] dump_stack_lvl+0x151/0x1b7 [ 559.145664][T16844] ? bfq_pos_tree_add_move+0x43e/0x43e [ 559.150957][T16844] dump_stack+0x15/0x17 [ 559.154947][T16844] should_fail+0x3c0/0x510 [ 559.159201][T16844] should_fail_alloc_page+0x58/0x70 [ 559.164233][T16844] __alloc_pages+0x1de/0x7c0 [ 559.168663][T16844] ? __count_vm_events+0x30/0x30 [ 559.173434][T16844] ? dup_mm+0x91/0x330 [ 559.177338][T16844] ? copy_mm+0x108/0x1b0 [ 559.181415][T16844] ? copy_process+0x1295/0x3250 [ 559.186107][T16844] ? kernel_clone+0x22d/0x990 [ 559.190618][T16844] ? __x64_sys_clone3+0x375/0x3a0 [ 559.195478][T16844] pte_alloc_one+0x73/0x1b0 [ 559.199819][T16844] ? pfn_modify_allowed+0x2e0/0x2e0 [ 559.204850][T16844] ? __kasan_check_write+0x14/0x20 [ 559.209799][T16844] ? __set_page_owner+0x2ee/0x310 [ 559.214748][T16844] __pte_alloc+0x86/0x350 [ 559.218911][T16844] ? post_alloc_hook+0x1ab/0x1b0 [ 559.223684][T16844] ? free_pgtables+0x210/0x210 [ 559.228288][T16844] ? get_page_from_freelist+0x38b/0x400 [ 559.233668][T16844] copy_pte_range+0x1b1f/0x20b0 [ 559.238355][T16844] ? __kunmap_atomic+0x80/0x80 [ 559.242954][T16844] ? __pud_alloc+0x260/0x260 [ 559.247376][T16844] ? __pud_alloc+0x218/0x260 [ 559.251808][T16844] ? do_handle_mm_fault+0x2370/0x2370 [ 559.257015][T16844] copy_page_range+0xc1e/0x1090 [ 559.261704][T16844] ? pfn_valid+0x1e0/0x1e0 [ 559.265956][T16844] dup_mmap+0x99f/0xea0 [ 559.269945][T16844] ? __delayed_free_task+0x20/0x20 [ 559.274888][T16844] ? mm_init+0x807/0x960 [ 559.278973][T16844] dup_mm+0x91/0x330 [ 559.282719][T16844] copy_mm+0x108/0x1b0 [ 559.286607][T16844] copy_process+0x1295/0x3250 [ 559.291121][T16844] ? check_stack_object+0x117/0x130 [ 559.296157][T16844] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 559.301100][T16844] ? copy_clone_args_from_user+0x6f0/0x790 [ 559.306745][T16844] kernel_clone+0x22d/0x990 [ 559.311082][T16844] ? dup_mmap+0xea0/0xea0 [ 559.315250][T16844] ? create_io_thread+0x1e0/0x1e0 [ 559.320108][T16844] ? file_end_write+0x1b0/0x1b0 [ 559.324798][T16844] __x64_sys_clone3+0x375/0x3a0 [ 559.329481][T16844] ? __ia32_sys_clone+0x300/0x300 [ 559.334345][T16844] ? ksys_write+0x25f/0x2c0 [ 559.338687][T16844] ? debug_smp_processor_id+0x17/0x20 [ 559.344015][T16844] do_syscall_64+0x44/0xd0 [ 559.348265][T16844] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 559.354004][T16844] RIP: 0033:0x7fa07a6ec0d9 [ 559.358248][T16844] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 559.377694][T16844] RSP: 002b:00007fa07945f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 559.385936][T16844] RAX: ffffffffffffffda RBX: 00007fa07a80bf80 RCX: 00007fa07a6ec0d9 [ 559.393748][T16844] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fa07945f050 [ 559.401555][T16844] RBP: 00007fa07945f1d0 R08: 0000000000000000 R09: 0000000000000058 17:19:08 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 56) 17:19:08 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) [ 559.409377][T16844] R10: 00007fa07945f050 R11: 0000000000000246 R12: 0000000000000058 [ 559.417197][T16844] R13: 00007ffd55a8aedf R14: 00007fa07945f300 R15: 0000000000022000 [ 559.424996][T16844] [ 559.468631][T16850] FAULT_INJECTION: forcing a failure. [ 559.468631][T16850] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 559.522296][T16850] CPU: 0 PID: 16850 Comm: syz-executor.0 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 559.532375][T16850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 559.542536][T16850] Call Trace: [ 559.545659][T16850] [ 559.548472][T16850] dump_stack_lvl+0x151/0x1b7 [ 559.552947][T16850] ? bfq_pos_tree_add_move+0x43e/0x43e [ 559.558241][T16850] dump_stack+0x15/0x17 [ 559.562231][T16850] should_fail+0x3c0/0x510 [ 559.566486][T16850] should_fail_alloc_page+0x58/0x70 [ 559.571516][T16850] __alloc_pages+0x1de/0x7c0 [ 559.575946][T16850] ? __count_vm_events+0x30/0x30 [ 559.580719][T16850] ? __this_cpu_preempt_check+0x13/0x20 [ 559.586097][T16850] ? __mod_node_page_state+0xac/0xf0 [ 559.591219][T16850] pte_alloc_one+0x73/0x1b0 [ 559.595575][T16850] ? pfn_modify_allowed+0x2e0/0x2e0 [ 559.600597][T16850] __pte_alloc+0x86/0x350 [ 559.604757][T16850] ? free_pgtables+0x210/0x210 [ 559.609354][T16850] ? _raw_spin_lock+0xa3/0x1b0 [ 559.613957][T16850] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 559.619165][T16850] ? __kernel_text_address+0x9a/0x110 [ 559.624375][T16850] copy_pte_range+0x1b1f/0x20b0 [ 559.629070][T16850] ? __kunmap_atomic+0x80/0x80 [ 559.633659][T16850] ? __kasan_slab_alloc+0xc4/0xe0 [ 559.638517][T16850] ? __kasan_slab_alloc+0xb2/0xe0 [ 559.643386][T16850] ? kmem_cache_alloc+0x189/0x2f0 [ 559.648239][T16850] ? vm_area_dup+0x26/0x1d0 [ 559.652577][T16850] ? dup_mmap+0x6b8/0xea0 [ 559.656745][T16850] ? dup_mm+0x91/0x330 [ 559.660649][T16850] ? copy_mm+0x108/0x1b0 [ 559.664733][T16850] ? copy_process+0x1295/0x3250 [ 559.669417][T16850] ? kernel_clone+0x22d/0x990 [ 559.673928][T16850] ? __x64_sys_clone3+0x375/0x3a0 [ 559.678788][T16850] ? do_syscall_64+0x44/0xd0 [ 559.683221][T16850] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 559.689122][T16850] copy_page_range+0xc1e/0x1090 [ 559.693804][T16850] ? pfn_valid+0x1e0/0x1e0 [ 559.698054][T16850] dup_mmap+0x99f/0xea0 [ 559.702049][T16850] ? __delayed_free_task+0x20/0x20 [ 559.707126][T16850] ? mm_init+0x807/0x960 [ 559.711207][T16850] dup_mm+0x91/0x330 [ 559.714939][T16850] copy_mm+0x108/0x1b0 [ 559.718933][T16850] copy_process+0x1295/0x3250 [ 559.723444][T16850] ? check_stack_object+0x117/0x130 [ 559.728478][T16850] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 559.733427][T16850] ? copy_clone_args_from_user+0x6f0/0x790 [ 559.739065][T16850] kernel_clone+0x22d/0x990 [ 559.743407][T16850] ? dup_mmap+0xea0/0xea0 [ 559.747570][T16850] ? create_io_thread+0x1e0/0x1e0 [ 559.752442][T16850] ? file_end_write+0x1b0/0x1b0 [ 559.757126][T16850] __x64_sys_clone3+0x375/0x3a0 [ 559.761807][T16850] ? __ia32_sys_clone+0x300/0x300 [ 559.766665][T16850] ? ksys_write+0x25f/0x2c0 [ 559.771006][T16850] ? debug_smp_processor_id+0x17/0x20 [ 559.776217][T16850] do_syscall_64+0x44/0xd0 [ 559.780462][T16850] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 559.786201][T16850] RIP: 0033:0x7fa07a6ec0d9 [ 559.790445][T16850] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 559.809929][T16850] RSP: 002b:00007fa07945f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 559.818243][T16850] RAX: ffffffffffffffda RBX: 00007fa07a80bf80 RCX: 00007fa07a6ec0d9 [ 559.826052][T16850] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fa07945f050 [ 559.833865][T16850] RBP: 00007fa07945f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 559.841673][T16850] R10: 00007fa07945f050 R11: 0000000000000246 R12: 0000000000000058 [ 559.849487][T16850] R13: 00007ffd55a8aedf R14: 00007fa07945f300 R15: 0000000000022000 [ 559.857303][T16850] [ 560.037834][ T1289] device bridge_slave_1 left promiscuous mode [ 560.043817][ T1289] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.067650][ T1289] device bridge_slave_0 left promiscuous mode [ 560.073634][ T1289] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.098107][ T1289] device veth1_macvtap left promiscuous mode [ 560.103959][ T1289] device veth0_vlan left promiscuous mode [ 560.753429][T16856] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.760455][T16856] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.768157][T16856] device bridge_slave_0 entered promiscuous mode [ 560.774788][T16856] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.782024][T16856] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.789333][T16856] device bridge_slave_1 entered promiscuous mode [ 560.829076][T16856] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.835921][T16856] bridge0: port 2(bridge_slave_1) entered forwarding state [ 560.843064][T16856] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.849829][T16856] bridge0: port 1(bridge_slave_0) entered forwarding state [ 560.867540][ T5965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 560.875005][ T5965] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.882689][ T5965] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.898045][ T5987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 560.906025][ T5987] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.912892][ T5987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 560.920136][ T5987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 560.928291][ T5987] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.935116][ T5987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 560.942491][ T5987] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 560.953660][ T5993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 560.961709][ T5993] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 560.974428][ T5965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 560.982702][ T5965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 560.995569][T16856] device veth0_vlan entered promiscuous mode [ 561.002120][ T5987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 561.010033][ T5987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 561.021347][ T5987] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 561.028791][ T5987] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 561.039319][T16856] device veth1_macvtap entered promiscuous mode [ 561.047291][ T5987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 561.055311][ T5987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 561.063489][ T5987] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 561.073470][ T5993] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 561.081525][ T5993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 561.096088][ T5994] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 561.104273][ T5994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 561.115053][T16862] FAULT_INJECTION: forcing a failure. [ 561.115053][T16862] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 561.128696][T16862] CPU: 1 PID: 16862 Comm: syz-executor.2 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 561.138762][T16862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 561.148656][T16862] Call Trace: [ 561.151785][T16862] [ 561.154565][T16862] dump_stack_lvl+0x151/0x1b7 [ 561.159076][T16862] ? bfq_pos_tree_add_move+0x43e/0x43e [ 561.164365][T16862] dump_stack+0x15/0x17 [ 561.168351][T16862] should_fail+0x3c0/0x510 [ 561.172605][T16862] should_fail_alloc_page+0x58/0x70 [ 561.177639][T16862] __alloc_pages+0x1de/0x7c0 [ 561.182088][T16862] ? __count_vm_events+0x30/0x30 [ 561.186837][T16862] ? __this_cpu_preempt_check+0x13/0x20 [ 561.192219][T16862] ? __mod_node_page_state+0xac/0xf0 [ 561.197340][T16862] pte_alloc_one+0x73/0x1b0 [ 561.201679][T16862] ? pfn_modify_allowed+0x2e0/0x2e0 [ 561.206713][T16862] __pte_alloc+0x86/0x350 [ 561.210881][T16862] ? free_pgtables+0x210/0x210 [ 561.215482][T16862] ? _raw_spin_lock+0xa3/0x1b0 [ 561.220081][T16862] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 561.225287][T16862] ? __kernel_text_address+0x9a/0x110 [ 561.230495][T16862] copy_pte_range+0x1b1f/0x20b0 [ 561.235186][T16862] ? __kunmap_atomic+0x80/0x80 [ 561.239781][T16862] ? __kasan_slab_alloc+0xc4/0xe0 [ 561.244676][T16862] ? __kasan_slab_alloc+0xb2/0xe0 [ 561.249502][T16862] ? kmem_cache_alloc+0x189/0x2f0 [ 561.254363][T16862] ? vm_area_dup+0x26/0x1d0 [ 561.258705][T16862] ? dup_mmap+0x6b8/0xea0 [ 561.262869][T16862] ? dup_mm+0x91/0x330 [ 561.266772][T16862] ? copy_mm+0x108/0x1b0 [ 561.270853][T16862] ? copy_process+0x1295/0x3250 [ 561.275540][T16862] ? kernel_clone+0x22d/0x990 [ 561.280053][T16862] ? __x64_sys_clone3+0x375/0x3a0 [ 561.284912][T16862] ? do_syscall_64+0x44/0xd0 [ 561.289339][T16862] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 561.295243][T16862] copy_page_range+0xc1e/0x1090 [ 561.299929][T16862] ? pfn_valid+0x1e0/0x1e0 [ 561.304180][T16862] dup_mmap+0x99f/0xea0 [ 561.308176][T16862] ? __delayed_free_task+0x20/0x20 [ 561.313121][T16862] ? mm_init+0x807/0x960 [ 561.317202][T16862] dup_mm+0x91/0x330 [ 561.320930][T16862] copy_mm+0x108/0x1b0 [ 561.324837][T16862] copy_process+0x1295/0x3250 [ 561.329354][T16862] ? check_stack_object+0x117/0x130 [ 561.334385][T16862] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 561.339338][T16862] ? copy_clone_args_from_user+0x6f0/0x790 [ 561.344973][T16862] kernel_clone+0x22d/0x990 [ 561.349312][T16862] ? dup_mmap+0xea0/0xea0 [ 561.353478][T16862] ? create_io_thread+0x1e0/0x1e0 [ 561.358338][T16862] ? file_end_write+0x1b0/0x1b0 [ 561.363029][T16862] __x64_sys_clone3+0x375/0x3a0 [ 561.367712][T16862] ? __ia32_sys_clone+0x300/0x300 [ 561.372573][T16862] ? ksys_write+0x25f/0x2c0 [ 561.376920][T16862] ? debug_smp_processor_id+0x17/0x20 [ 561.382121][T16862] do_syscall_64+0x44/0xd0 [ 561.386374][T16862] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 561.392101][T16862] RIP: 0033:0x7f40712a70d9 [ 561.396358][T16862] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 561.415795][T16862] RSP: 002b:00007f407001a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 561.424128][T16862] RAX: ffffffffffffffda RBX: 00007f40713c6f80 RCX: 00007f40712a70d9 17:19:10 executing program 2: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 58) 17:19:10 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0xf000) 17:19:10 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) 17:19:10 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 57) 17:19:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xb4}, {0x0}, {&(0x7f0000002a80)=""/4096, 0xe14}], 0x3, 0x0, 0xb80b0000}}], 0x300, 0x0, 0x0) [ 561.431946][T16862] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007f407001a050 [ 561.439754][T16862] RBP: 00007f407001a1d0 R08: 0000000000000000 R09: 0000000000000058 [ 561.447711][T16862] R10: 00007f407001a050 R11: 0000000000000246 R12: 0000000000000058 [ 561.455523][T16862] R13: 00007ffcef72a83f R14: 00007f407001a300 R15: 0000000000022000 [ 561.463345][T16862] [ 561.486144][T16868] FAULT_INJECTION: forcing a failure. [ 561.486144][T16868] name failslab, interval 1, probability 0, space 0, times 0 [ 561.514423][T16868] CPU: 0 PID: 16868 Comm: syz-executor.0 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 561.524694][T16868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 561.534587][T16868] Call Trace: [ 561.537706][T16868] [ 561.540649][T16868] dump_stack_lvl+0x151/0x1b7 [ 561.545266][T16868] ? bfq_pos_tree_add_move+0x43e/0x43e [ 561.550557][T16868] dump_stack+0x15/0x17 [ 561.554545][T16868] should_fail+0x3c0/0x510 [ 561.558802][T16868] __should_failslab+0x9f/0xe0 [ 561.563401][T16868] should_failslab+0x9/0x20 [ 561.567737][T16868] kmem_cache_alloc+0x4f/0x2f0 [ 561.572340][T16868] ? vm_area_dup+0x26/0x1d0 [ 561.576767][T16868] vm_area_dup+0x26/0x1d0 [ 561.580943][T16868] dup_mmap+0x6b8/0xea0 [ 561.584930][T16868] ? __delayed_free_task+0x20/0x20 [ 561.586821][T16873] FAULT_INJECTION: forcing a failure. [ 561.586821][T16873] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 561.589873][T16868] ? mm_init+0x807/0x960 [ 561.589903][T16868] dup_mm+0x91/0x330 [ 561.589920][T16868] copy_mm+0x108/0x1b0 [ 561.589936][T16868] copy_process+0x1295/0x3250 [ 561.589953][T16868] ? check_stack_object+0x117/0x130 [ 561.589974][T16868] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 561.629135][T16868] ? copy_clone_args_from_user+0x6f0/0x790 [ 561.634741][T16868] kernel_clone+0x22d/0x990 [ 561.639078][T16868] ? dup_mmap+0xea0/0xea0 [ 561.643251][T16868] ? create_io_thread+0x1e0/0x1e0 [ 561.648104][T16868] ? file_end_write+0x1b0/0x1b0 [ 561.652796][T16868] __x64_sys_clone3+0x375/0x3a0 [ 561.657482][T16868] ? __ia32_sys_clone+0x300/0x300 [ 561.662338][T16868] ? ksys_write+0x25f/0x2c0 [ 561.666679][T16868] ? debug_smp_processor_id+0x17/0x20 [ 561.671900][T16868] do_syscall_64+0x44/0xd0 [ 561.676141][T16868] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 561.681865][T16868] RIP: 0033:0x7fa07a6ec0d9 [ 561.686122][T16868] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 561.705561][T16868] RSP: 002b:00007fa07945f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 561.713803][T16868] RAX: ffffffffffffffda RBX: 00007fa07a80bf80 RCX: 00007fa07a6ec0d9 [ 561.721616][T16868] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fa07945f050 [ 561.729430][T16868] RBP: 00007fa07945f1d0 R08: 0000000000000000 R09: 0000000000000058 17:19:11 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0xf011) 17:19:11 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 58) [ 561.737241][T16868] R10: 00007fa07945f050 R11: 0000000000000246 R12: 0000000000000058 [ 561.745055][T16868] R13: 00007ffd55a8aedf R14: 00007fa07945f300 R15: 0000000000022000 [ 561.752865][T16868] [ 561.755728][T16873] CPU: 1 PID: 16873 Comm: syz-executor.2 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 561.765795][T16873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 561.775694][T16873] Call Trace: [ 561.778812][T16873] [ 561.781699][T16873] dump_stack_lvl+0x151/0x1b7 [ 561.786215][T16873] ? bfq_pos_tree_add_move+0x43e/0x43e [ 561.791505][T16873] dump_stack+0x15/0x17 [ 561.795503][T16873] should_fail+0x3c0/0x510 [ 561.799751][T16873] should_fail_alloc_page+0x58/0x70 [ 561.804790][T16873] __alloc_pages+0x1de/0x7c0 [ 561.809210][T16873] ? __count_vm_events+0x30/0x30 [ 561.813982][T16873] ? __this_cpu_preempt_check+0x13/0x20 [ 561.819363][T16873] ? __mod_node_page_state+0xac/0xf0 [ 561.824488][T16873] pte_alloc_one+0x73/0x1b0 [ 561.828826][T16873] ? pfn_modify_allowed+0x2e0/0x2e0 [ 561.833859][T16873] __pte_alloc+0x86/0x350 [ 561.838025][T16873] ? free_pgtables+0x210/0x210 [ 561.842623][T16873] ? _raw_spin_lock+0xa3/0x1b0 [ 561.847229][T16873] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 561.852432][T16873] ? __kernel_text_address+0x9a/0x110 [ 561.857640][T16873] copy_pte_range+0x1b1f/0x20b0 [ 561.862330][T16873] ? __kunmap_atomic+0x80/0x80 [ 561.866925][T16873] ? __kasan_slab_alloc+0xc4/0xe0 [ 561.871791][T16873] ? __kasan_slab_alloc+0xb2/0xe0 [ 561.876644][T16873] ? kmem_cache_alloc+0x189/0x2f0 [ 561.881507][T16873] ? vm_area_dup+0x26/0x1d0 [ 561.885849][T16873] ? dup_mmap+0x6b8/0xea0 [ 561.890011][T16873] ? dup_mm+0x91/0x330 [ 561.893916][T16873] ? copy_mm+0x108/0x1b0 [ 561.897997][T16873] ? copy_process+0x1295/0x3250 [ 561.902689][T16873] ? kernel_clone+0x22d/0x990 [ 561.907199][T16873] ? __x64_sys_clone3+0x375/0x3a0 [ 561.912055][T16873] ? do_syscall_64+0x44/0xd0 [ 561.916483][T16873] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 561.922392][T16873] copy_page_range+0xc1e/0x1090 [ 561.927076][T16873] ? pfn_valid+0x1e0/0x1e0 [ 561.931328][T16873] dup_mmap+0x99f/0xea0 [ 561.935336][T16873] ? __delayed_free_task+0x20/0x20 [ 561.940266][T16873] ? mm_init+0x807/0x960 [ 561.944345][T16873] dup_mm+0x91/0x330 [ 561.948076][T16873] copy_mm+0x108/0x1b0 [ 561.951980][T16873] copy_process+0x1295/0x3250 [ 561.956498][T16873] ? check_stack_object+0x117/0x130 [ 561.961527][T16873] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 561.966479][T16873] ? copy_clone_args_from_user+0x6f0/0x790 [ 561.972116][T16873] kernel_clone+0x22d/0x990 [ 561.976469][T16873] ? dup_mmap+0xea0/0xea0 [ 561.980626][T16873] ? create_io_thread+0x1e0/0x1e0 [ 561.985495][T16873] ? file_end_write+0x1b0/0x1b0 [ 561.990169][T16873] __x64_sys_clone3+0x375/0x3a0 [ 561.994856][T16873] ? __ia32_sys_clone+0x300/0x300 [ 561.999717][T16873] ? ksys_write+0x25f/0x2c0 [ 562.004059][T16873] ? debug_smp_processor_id+0x17/0x20 [ 562.009265][T16873] do_syscall_64+0x44/0xd0 [ 562.013524][T16873] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 562.019243][T16873] RIP: 0033:0x7f40712a70d9 [ 562.023500][T16873] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 562.043028][T16873] RSP: 002b:00007f407001a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 562.051271][T16873] RAX: ffffffffffffffda RBX: 00007f40713c6f80 RCX: 00007f40712a70d9 [ 562.059087][T16873] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007f407001a050 [ 562.066891][T16873] RBP: 00007f407001a1d0 R08: 0000000000000000 R09: 0000000000000058 [ 562.074706][T16873] R10: 00007f407001a050 R11: 0000000000000246 R12: 0000000000000058 17:19:11 executing program 2: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 59) [ 562.082516][T16873] R13: 00007ffcef72a83f R14: 00007f407001a300 R15: 0000000000022000 [ 562.090331][T16873] [ 562.116344][T16881] FAULT_INJECTION: forcing a failure. [ 562.116344][T16881] name failslab, interval 1, probability 0, space 0, times 0 [ 562.130166][T16881] CPU: 0 PID: 16881 Comm: syz-executor.0 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 562.140356][T16881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 562.150249][T16881] Call Trace: [ 562.153371][T16881] [ 562.156159][T16881] dump_stack_lvl+0x151/0x1b7 [ 562.160667][T16881] ? bfq_pos_tree_add_move+0x43e/0x43e [ 562.165129][T16883] FAULT_INJECTION: forcing a failure. [ 562.165129][T16883] name failslab, interval 1, probability 0, space 0, times 0 [ 562.165955][T16881] dump_stack+0x15/0x17 [ 562.165983][T16881] should_fail+0x3c0/0x510 [ 562.186616][T16881] __should_failslab+0x9f/0xe0 [ 562.191216][T16881] should_failslab+0x9/0x20 [ 562.195553][T16881] kmem_cache_alloc+0x4f/0x2f0 [ 562.200151][T16881] ? vm_area_dup+0x26/0x1d0 [ 562.204488][T16881] vm_area_dup+0x26/0x1d0 [ 562.208654][T16881] dup_mmap+0x6b8/0xea0 [ 562.212648][T16881] ? __delayed_free_task+0x20/0x20 [ 562.217602][T16881] ? mm_init+0x807/0x960 [ 562.221672][T16881] dup_mm+0x91/0x330 [ 562.225403][T16881] copy_mm+0x108/0x1b0 [ 562.229317][T16881] copy_process+0x1295/0x3250 [ 562.233832][T16881] ? check_stack_object+0x117/0x130 [ 562.238859][T16881] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 562.243804][T16881] ? copy_clone_args_from_user+0x6f0/0x790 [ 562.249450][T16881] kernel_clone+0x22d/0x990 [ 562.253783][T16881] ? dup_mmap+0xea0/0xea0 [ 562.257953][T16881] ? create_io_thread+0x1e0/0x1e0 [ 562.262818][T16881] ? file_end_write+0x1b0/0x1b0 [ 562.267498][T16881] __x64_sys_clone3+0x375/0x3a0 [ 562.272187][T16881] ? __ia32_sys_clone+0x300/0x300 [ 562.277044][T16881] ? ksys_write+0x25f/0x2c0 [ 562.281386][T16881] ? debug_smp_processor_id+0x17/0x20 [ 562.286594][T16881] do_syscall_64+0x44/0xd0 [ 562.290845][T16881] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 562.296573][T16881] RIP: 0033:0x7fa07a6ec0d9 [ 562.300830][T16881] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 562.320268][T16881] RSP: 002b:00007fa07945f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 562.328515][T16881] RAX: ffffffffffffffda RBX: 00007fa07a80bf80 RCX: 00007fa07a6ec0d9 [ 562.336413][T16881] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fa07945f050 [ 562.344248][T16881] RBP: 00007fa07945f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 562.352032][T16881] R10: 00007fa07945f050 R11: 0000000000000246 R12: 0000000000000058 [ 562.359846][T16881] R13: 00007ffd55a8aedf R14: 00007fa07945f300 R15: 0000000000022000 17:19:11 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0xf800) [ 562.367660][T16881] [ 562.370520][T16883] CPU: 1 PID: 16883 Comm: syz-executor.2 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 562.380595][T16883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 562.390484][T16883] Call Trace: [ 562.393614][T16883] [ 562.396386][T16883] dump_stack_lvl+0x151/0x1b7 [ 562.400901][T16883] ? bfq_pos_tree_add_move+0x43e/0x43e [ 562.406197][T16883] dump_stack+0x15/0x17 [ 562.410183][T16883] should_fail+0x3c0/0x510 [ 562.414587][T16883] __should_failslab+0x9f/0xe0 [ 562.419160][T16883] should_failslab+0x9/0x20 [ 562.423498][T16883] kmem_cache_alloc+0x4f/0x2f0 [ 562.428100][T16883] ? vm_area_dup+0x26/0x1d0 [ 562.432527][T16883] vm_area_dup+0x26/0x1d0 [ 562.436690][T16883] dup_mmap+0x6b8/0xea0 [ 562.440687][T16883] ? __delayed_free_task+0x20/0x20 [ 562.445631][T16883] ? mm_init+0x807/0x960 [ 562.449802][T16883] dup_mm+0x91/0x330 [ 562.453559][T16883] copy_mm+0x108/0x1b0 [ 562.457436][T16883] copy_process+0x1295/0x3250 [ 562.461948][T16883] ? check_stack_object+0x117/0x130 [ 562.466981][T16883] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 562.471943][T16883] ? copy_clone_args_from_user+0x6f0/0x790 [ 562.477579][T16883] kernel_clone+0x22d/0x990 [ 562.481915][T16883] ? dup_mmap+0xea0/0xea0 [ 562.486078][T16883] ? create_io_thread+0x1e0/0x1e0 [ 562.490944][T16883] ? file_end_write+0x1b0/0x1b0 [ 562.495712][T16883] __x64_sys_clone3+0x375/0x3a0 [ 562.500397][T16883] ? __ia32_sys_clone+0x300/0x300 [ 562.505264][T16883] ? ksys_write+0x25f/0x2c0 [ 562.509597][T16883] ? debug_smp_processor_id+0x17/0x20 [ 562.514802][T16883] do_syscall_64+0x44/0xd0 [ 562.519057][T16883] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 562.524785][T16883] RIP: 0033:0x7f40712a70d9 [ 562.529038][T16883] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 562.548479][T16883] RSP: 002b:00007f407001a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 562.556722][T16883] RAX: ffffffffffffffda RBX: 00007f40713c6f80 RCX: 00007f40712a70d9 [ 562.564534][T16883] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007f407001a050 [ 562.572350][T16883] RBP: 00007f407001a1d0 R08: 0000000000000000 R09: 0000000000000058 [ 562.580166][T16883] R10: 00007f407001a050 R11: 0000000000000246 R12: 0000000000000058 [ 562.587973][T16883] R13: 00007ffcef72a83f R14: 00007f407001a300 R15: 0000000000022000 [ 562.595783][T16883] [ 562.600245][ T1289] device bridge_slave_1 left promiscuous mode [ 562.606347][ T1289] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.619052][ T1289] device bridge_slave_0 left promiscuous mode [ 562.625001][ T1289] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.637256][ T1289] device veth1_macvtap left promiscuous mode [ 562.643163][ T1289] device veth0_vlan left promiscuous mode [ 562.798059][T16874] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.804917][T16874] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.812160][T16874] device bridge_slave_0 entered promiscuous mode [ 562.818982][T16874] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.825960][T16874] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.833343][T16874] device bridge_slave_1 entered promiscuous mode [ 562.873035][T16874] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.879900][T16874] bridge0: port 2(bridge_slave_1) entered forwarding state [ 562.886966][T16874] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.893797][T16874] bridge0: port 1(bridge_slave_0) entered forwarding state [ 562.912919][ T5987] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.920185][ T5987] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.928189][ T5987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 562.935408][ T5987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 562.948602][ T5987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 562.956544][ T5987] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.963401][ T5987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 562.970577][ T5987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 562.978902][ T5987] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.985722][ T5987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 562.994828][ T5990] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 563.016762][T16874] device veth0_vlan entered promiscuous mode [ 563.023512][ T5987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 563.031755][ T5987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 563.039557][ T5987] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 563.046699][ T5987] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 563.054026][ T5987] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 563.065998][ T5990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 17:19:12 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0xfffffff5, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 17:19:12 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) 17:19:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xb4}, {0x0}, {&(0x7f0000002a80)=""/4096, 0xe14}], 0x3, 0x0, 0xc3ffffff}}], 0x300, 0x0, 0x0) 17:19:12 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 59) 17:19:12 executing program 2: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 60) 17:19:12 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0xf8aa) [ 563.074744][T16874] device veth1_macvtap entered promiscuous mode [ 563.084091][ T5987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 563.095641][ T5990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 563.127030][T16898] FAULT_INJECTION: forcing a failure. [ 563.127030][T16898] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 563.128332][T16899] FAULT_INJECTION: forcing a failure. [ 563.128332][T16899] name failslab, interval 1, probability 0, space 0, times 0 [ 563.146400][T16898] CPU: 1 PID: 16898 Comm: syz-executor.2 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 563.162539][T16898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 563.172432][T16898] Call Trace: [ 563.175555][T16898] [ 563.178335][T16898] dump_stack_lvl+0x151/0x1b7 [ 563.182870][T16898] ? bfq_pos_tree_add_move+0x43e/0x43e [ 563.188143][T16898] dump_stack+0x15/0x17 [ 563.192134][T16898] should_fail+0x3c0/0x510 [ 563.196384][T16898] should_fail_alloc_page+0x58/0x70 [ 563.201419][T16898] __alloc_pages+0x1de/0x7c0 [ 563.205852][T16898] ? __count_vm_events+0x30/0x30 [ 563.210618][T16898] ? __this_cpu_preempt_check+0x13/0x20 [ 563.216020][T16898] ? __mod_node_page_state+0xac/0xf0 [ 563.221123][T16898] pte_alloc_one+0x73/0x1b0 [ 563.225460][T16898] ? pfn_modify_allowed+0x2e0/0x2e0 [ 563.230498][T16898] __pte_alloc+0x86/0x350 [ 563.234660][T16898] ? free_pgtables+0x210/0x210 [ 563.239258][T16898] ? _raw_spin_lock+0xa3/0x1b0 [ 563.243862][T16898] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 563.249067][T16898] ? __kernel_text_address+0x9a/0x110 [ 563.254275][T16898] copy_pte_range+0x1b1f/0x20b0 [ 563.258967][T16898] ? __kunmap_atomic+0x80/0x80 [ 563.263563][T16898] ? __kasan_slab_alloc+0xc4/0xe0 [ 563.268423][T16898] ? __kasan_slab_alloc+0xb2/0xe0 [ 563.273285][T16898] ? kmem_cache_alloc+0x189/0x2f0 [ 563.278142][T16898] ? vm_area_dup+0x26/0x1d0 [ 563.282481][T16898] ? dup_mmap+0x6b8/0xea0 [ 563.286683][T16898] ? dup_mm+0x91/0x330 [ 563.290552][T16898] ? copy_mm+0x108/0x1b0 [ 563.294631][T16898] ? copy_process+0x1295/0x3250 [ 563.299319][T16898] ? kernel_clone+0x22d/0x990 [ 563.303832][T16898] ? __x64_sys_clone3+0x375/0x3a0 [ 563.308693][T16898] ? do_syscall_64+0x44/0xd0 [ 563.313117][T16898] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 563.319023][T16898] copy_page_range+0xc1e/0x1090 [ 563.323715][T16898] ? pfn_valid+0x1e0/0x1e0 [ 563.327967][T16898] dup_mmap+0x99f/0xea0 [ 563.331956][T16898] ? __delayed_free_task+0x20/0x20 [ 563.336901][T16898] ? mm_init+0x807/0x960 [ 563.340981][T16898] dup_mm+0x91/0x330 [ 563.344710][T16898] copy_mm+0x108/0x1b0 [ 563.348617][T16898] copy_process+0x1295/0x3250 [ 563.353133][T16898] ? check_stack_object+0x117/0x130 [ 563.358166][T16898] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 563.363111][T16898] ? copy_clone_args_from_user+0x6f0/0x790 [ 563.368752][T16898] kernel_clone+0x22d/0x990 [ 563.373093][T16898] ? dup_mmap+0xea0/0xea0 [ 563.377262][T16898] ? create_io_thread+0x1e0/0x1e0 [ 563.382117][T16898] ? file_end_write+0x1b0/0x1b0 [ 563.386806][T16898] __x64_sys_clone3+0x375/0x3a0 [ 563.391496][T16898] ? __ia32_sys_clone+0x300/0x300 [ 563.396355][T16898] ? ksys_write+0x25f/0x2c0 [ 563.400692][T16898] ? debug_smp_processor_id+0x17/0x20 [ 563.405898][T16898] do_syscall_64+0x44/0xd0 [ 563.410151][T16898] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 563.415885][T16898] RIP: 0033:0x7f40712a70d9 [ 563.420140][T16898] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 563.439579][T16898] RSP: 002b:00007f407001a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 563.447823][T16898] RAX: ffffffffffffffda RBX: 00007f40713c6f80 RCX: 00007f40712a70d9 [ 563.455629][T16898] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007f407001a050 [ 563.463448][T16898] RBP: 00007f407001a1d0 R08: 0000000000000000 R09: 0000000000000058 [ 563.471253][T16898] R10: 00007f407001a050 R11: 0000000000000246 R12: 0000000000000058 [ 563.479066][T16898] R13: 00007ffcef72a83f R14: 00007f407001a300 R15: 0000000000022000 [ 563.486881][T16898] [ 563.489741][T16899] CPU: 0 PID: 16899 Comm: syz-executor.0 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 563.499815][T16899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 563.509709][T16899] Call Trace: [ 563.512830][T16899] [ 563.515605][T16899] dump_stack_lvl+0x151/0x1b7 [ 563.520127][T16899] ? bfq_pos_tree_add_move+0x43e/0x43e [ 563.525422][T16899] dump_stack+0x15/0x17 [ 563.529406][T16899] should_fail+0x3c0/0x510 [ 563.533661][T16899] __should_failslab+0x9f/0xe0 [ 563.538261][T16899] should_failslab+0x9/0x20 [ 563.542603][T16899] kmem_cache_alloc+0x4f/0x2f0 [ 563.547202][T16899] ? vm_area_dup+0x26/0x1d0 [ 563.551540][T16899] vm_area_dup+0x26/0x1d0 [ 563.555705][T16899] dup_mmap+0x6b8/0xea0 [ 563.559701][T16899] ? __delayed_free_task+0x20/0x20 [ 563.559732][T16908] FAULT_INJECTION: forcing a failure. [ 563.559732][T16908] name failslab, interval 1, probability 0, space 0, times 0 [ 563.564641][T16899] ? mm_init+0x807/0x960 [ 563.564668][T16899] dup_mm+0x91/0x330 [ 563.584866][T16899] copy_mm+0x108/0x1b0 [ 563.588859][T16899] copy_process+0x1295/0x3250 [ 563.593372][T16899] ? check_stack_object+0x117/0x130 [ 563.598403][T16899] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 563.603348][T16899] ? copy_clone_args_from_user+0x6f0/0x790 [ 563.608990][T16899] kernel_clone+0x22d/0x990 [ 563.613329][T16899] ? dup_mmap+0xea0/0xea0 [ 563.617496][T16899] ? create_io_thread+0x1e0/0x1e0 [ 563.622358][T16899] ? file_end_write+0x1b0/0x1b0 [ 563.627043][T16899] __x64_sys_clone3+0x375/0x3a0 [ 563.631736][T16899] ? __ia32_sys_clone+0x300/0x300 [ 563.636597][T16899] ? ksys_write+0x25f/0x2c0 [ 563.640932][T16899] ? debug_smp_processor_id+0x17/0x20 [ 563.646137][T16899] do_syscall_64+0x44/0xd0 [ 563.650393][T16899] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 563.656117][T16899] RIP: 0033:0x7fa07a6ec0d9 [ 563.660376][T16899] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 563.679817][T16899] RSP: 002b:00007fa07945f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 563.688090][T16899] RAX: ffffffffffffffda RBX: 00007fa07a80bf80 RCX: 00007fa07a6ec0d9 [ 563.695869][T16899] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fa07945f050 [ 563.703680][T16899] RBP: 00007fa07945f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 563.711491][T16899] R10: 00007fa07945f050 R11: 0000000000000246 R12: 0000000000000058 [ 563.719303][T16899] R13: 00007ffd55a8aedf R14: 00007fa07945f300 R15: 0000000000022000 [ 563.727116][T16899] 17:19:12 executing program 2: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 61) [ 563.729977][T16908] CPU: 1 PID: 16908 Comm: syz-executor.2 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 563.740048][T16908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 563.749940][T16908] Call Trace: [ 563.753063][T16908] [ 563.755844][T16908] dump_stack_lvl+0x151/0x1b7 [ 563.760355][T16908] ? bfq_pos_tree_add_move+0x43e/0x43e [ 563.765736][T16908] dump_stack+0x15/0x17 [ 563.769727][T16908] should_fail+0x3c0/0x510 [ 563.773978][T16908] __should_failslab+0x9f/0xe0 [ 563.778667][T16908] should_failslab+0x9/0x20 [ 563.783004][T16908] kmem_cache_alloc+0x4f/0x2f0 [ 563.787613][T16908] ? vm_area_dup+0x26/0x1d0 [ 563.791951][T16908] vm_area_dup+0x26/0x1d0 [ 563.796120][T16908] dup_mmap+0x6b8/0xea0 [ 563.800109][T16908] ? __delayed_free_task+0x20/0x20 [ 563.805050][T16908] ? mm_init+0x807/0x960 [ 563.809151][T16908] dup_mm+0x91/0x330 [ 563.812869][T16908] copy_mm+0x108/0x1b0 [ 563.816781][T16908] copy_process+0x1295/0x3250 [ 563.821463][T16908] ? check_stack_object+0x117/0x130 [ 563.826499][T16908] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 563.831437][T16908] ? copy_clone_args_from_user+0x6f0/0x790 [ 563.837088][T16908] kernel_clone+0x22d/0x990 [ 563.841423][T16908] ? dup_mmap+0xea0/0xea0 [ 563.845583][T16908] ? create_io_thread+0x1e0/0x1e0 [ 563.850479][T16908] ? file_end_write+0x1b0/0x1b0 [ 563.855132][T16908] __x64_sys_clone3+0x375/0x3a0 [ 563.859818][T16908] ? __ia32_sys_clone+0x300/0x300 [ 563.864688][T16908] ? ksys_write+0x25f/0x2c0 [ 563.869020][T16908] ? debug_smp_processor_id+0x17/0x20 [ 563.874315][T16908] do_syscall_64+0x44/0xd0 [ 563.878564][T16908] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 563.884293][T16908] RIP: 0033:0x7f40712a70d9 [ 563.888545][T16908] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 563.907988][T16908] RSP: 002b:00007f407001a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 563.916229][T16908] RAX: ffffffffffffffda RBX: 00007f40713c6f80 RCX: 00007f40712a70d9 17:19:13 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) 17:19:13 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0xff0f) 17:19:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xb4}, {0x0}, {&(0x7f0000002a80)=""/4096, 0xe14}], 0x3, 0x0, 0xc80e0000}}], 0x300, 0x0, 0x0) 17:19:13 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0xfffffffb, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 563.924040][T16908] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007f407001a050 [ 563.931854][T16908] RBP: 00007f407001a1d0 R08: 0000000000000000 R09: 0000000000000058 [ 563.939750][T16908] R10: 00007f407001a050 R11: 0000000000000246 R12: 0000000000000058 [ 563.947564][T16908] R13: 00007ffcef72a83f R14: 00007f407001a300 R15: 0000000000022000 [ 563.955463][T16908] 17:19:13 executing program 2: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 62) 17:19:13 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x100000800, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 17:19:13 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 60) 17:19:13 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x1b0be1f000, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 563.997683][T16912] __nla_validate_parse: 98 callbacks suppressed [ 563.997701][T16912] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 564.019194][T16912] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 564.031188][T16920] FAULT_INJECTION: forcing a failure. [ 564.031188][T16920] name fail_page_alloc, interval 1, probability 0, space 0, times 0 17:19:13 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) [ 564.050830][T16922] FAULT_INJECTION: forcing a failure. [ 564.050830][T16922] name failslab, interval 1, probability 0, space 0, times 0 [ 564.064000][T16924] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 564.073501][T16920] CPU: 0 PID: 16920 Comm: syz-executor.2 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 564.074954][T16924] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 564.083564][T16920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 564.083580][T16920] Call Trace: [ 564.083587][T16920] [ 564.083599][T16920] dump_stack_lvl+0x151/0x1b7 [ 564.083625][T16920] ? bfq_pos_tree_add_move+0x43e/0x43e [ 564.083643][T16920] dump_stack+0x15/0x17 [ 564.083659][T16920] should_fail+0x3c0/0x510 [ 564.083676][T16920] should_fail_alloc_page+0x58/0x70 [ 564.122014][T16924] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 564.122274][T16920] __alloc_pages+0x1de/0x7c0 [ 564.136340][T16924] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 564.140671][T16920] ? __count_vm_events+0x30/0x30 [ 564.140696][T16920] ? __this_cpu_preempt_check+0x13/0x20 [ 564.140714][T16920] ? __mod_node_page_state+0xac/0xf0 [ 564.140730][T16920] pte_alloc_one+0x73/0x1b0 [ 564.156581][T16924] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 564.158985][T16920] ? pfn_modify_allowed+0x2e0/0x2e0 [ 564.159016][T16920] __pte_alloc+0x86/0x350 [ 564.159036][T16920] ? irqentry_exit+0x30/0x40 [ 564.167896][T16924] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 564.169485][T16920] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 564.169512][T16920] ? free_pgtables+0x210/0x210 [ 564.177529][T16924] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 564.182939][T16920] copy_pte_range+0x1b1f/0x20b0 [ 564.182969][T16920] ? __kunmap_atomic+0x80/0x80 [ 564.201259][T16924] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 564.205762][T16920] ? __kasan_slab_alloc+0xc4/0xe0 [ 564.248389][T16920] ? __kasan_slab_alloc+0xb2/0xe0 [ 564.253240][T16920] ? kmem_cache_alloc+0x189/0x2f0 [ 564.258099][T16920] ? vm_area_dup+0x26/0x1d0 [ 564.262440][T16920] ? dup_mmap+0x6b8/0xea0 [ 564.266605][T16920] ? dup_mm+0x91/0x330 [ 564.270509][T16920] ? copy_mm+0x108/0x1b0 [ 564.274588][T16920] ? copy_process+0x1295/0x3250 [ 564.279278][T16920] ? kernel_clone+0x22d/0x990 [ 564.283787][T16920] ? __x64_sys_clone3+0x375/0x3a0 [ 564.288655][T16920] ? do_syscall_64+0x44/0xd0 [ 564.293077][T16920] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 564.298982][T16920] copy_page_range+0xc1e/0x1090 [ 564.303668][T16920] ? pfn_valid+0x1e0/0x1e0 [ 564.307918][T16920] dup_mmap+0x99f/0xea0 [ 564.311913][T16920] ? __delayed_free_task+0x20/0x20 [ 564.316944][T16920] ? mm_init+0x807/0x960 [ 564.321030][T16920] dup_mm+0x91/0x330 [ 564.324761][T16920] copy_mm+0x108/0x1b0 [ 564.328665][T16920] copy_process+0x1295/0x3250 [ 564.333180][T16920] ? check_stack_object+0x117/0x130 [ 564.338213][T16920] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 564.343163][T16920] ? copy_clone_args_from_user+0x6f0/0x790 [ 564.348804][T16920] kernel_clone+0x22d/0x990 [ 564.353138][T16920] ? dup_mmap+0xea0/0xea0 [ 564.357316][T16920] ? create_io_thread+0x1e0/0x1e0 [ 564.362170][T16920] ? file_end_write+0x1b0/0x1b0 [ 564.366852][T16920] __x64_sys_clone3+0x375/0x3a0 [ 564.371631][T16920] ? __ia32_sys_clone+0x300/0x300 [ 564.376581][T16920] ? ksys_write+0x25f/0x2c0 [ 564.380923][T16920] ? debug_smp_processor_id+0x17/0x20 [ 564.386134][T16920] do_syscall_64+0x44/0xd0 [ 564.390383][T16920] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 564.396107][T16920] RIP: 0033:0x7f40712a70d9 17:19:13 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) [ 564.400381][T16920] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 564.419805][T16920] RSP: 002b:00007f407001a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 564.428047][T16920] RAX: ffffffffffffffda RBX: 00007f40713c6f80 RCX: 00007f40712a70d9 [ 564.435860][T16920] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007f407001a050 [ 564.443670][T16920] RBP: 00007f407001a1d0 R08: 0000000000000000 R09: 0000000000000058 17:19:13 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) 17:19:13 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x10002) 17:19:13 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x29bd2ba1f000, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 17:19:13 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x553a29402000, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 564.451484][T16920] R10: 00007f407001a050 R11: 0000000000000246 R12: 0000000000000058 [ 564.459291][T16920] R13: 00007ffcef72a83f R14: 00007f407001a300 R15: 0000000000022000 [ 564.467540][T16920] [ 564.490913][T16922] CPU: 1 PID: 16922 Comm: syz-executor.0 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 564.501014][T16922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 564.510884][T16922] Call Trace: [ 564.514007][T16922] [ 564.516781][T16922] dump_stack_lvl+0x151/0x1b7 [ 564.521297][T16922] ? bfq_pos_tree_add_move+0x43e/0x43e [ 564.526592][T16922] dump_stack+0x15/0x17 [ 564.530580][T16922] should_fail+0x3c0/0x510 [ 564.534836][T16922] __should_failslab+0x9f/0xe0 [ 564.539437][T16922] should_failslab+0x9/0x20 [ 564.543775][T16922] kmem_cache_alloc+0x4f/0x2f0 [ 564.548373][T16922] ? vm_area_dup+0x26/0x1d0 [ 564.552713][T16922] vm_area_dup+0x26/0x1d0 [ 564.556880][T16922] dup_mmap+0x6b8/0xea0 [ 564.560873][T16922] ? __delayed_free_task+0x20/0x20 [ 564.565819][T16922] ? mm_init+0x807/0x960 [ 564.569899][T16922] dup_mm+0x91/0x330 [ 564.573630][T16922] copy_mm+0x108/0x1b0 [ 564.577536][T16922] copy_process+0x1295/0x3250 [ 564.582050][T16922] ? check_stack_object+0x117/0x130 [ 564.587102][T16922] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 564.592031][T16922] ? copy_clone_args_from_user+0x6f0/0x790 [ 564.597673][T16922] kernel_clone+0x22d/0x990 [ 564.602010][T16922] ? dup_mmap+0xea0/0xea0 [ 564.606177][T16922] ? create_io_thread+0x1e0/0x1e0 [ 564.611039][T16922] ? file_end_write+0x1b0/0x1b0 [ 564.615724][T16922] __x64_sys_clone3+0x375/0x3a0 [ 564.620411][T16922] ? __ia32_sys_clone+0x300/0x300 [ 564.625273][T16922] ? ksys_write+0x25f/0x2c0 [ 564.629612][T16922] ? debug_smp_processor_id+0x17/0x20 [ 564.634855][T16922] do_syscall_64+0x44/0xd0 [ 564.639071][T16922] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 564.644798][T16922] RIP: 0033:0x7fa07a6ec0d9 [ 564.649054][T16922] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 564.668927][T16922] RSP: 002b:00007fa07945f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 564.677178][T16922] RAX: ffffffffffffffda RBX: 00007fa07a80bf80 RCX: 00007fa07a6ec0d9 [ 564.684983][T16922] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fa07945f050 [ 564.692797][T16922] RBP: 00007fa07945f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 564.700612][T16922] R10: 00007fa07945f050 R11: 0000000000000246 R12: 0000000000000058 [ 564.708424][T16922] R13: 00007ffd55a8aedf R14: 00007fa07945f300 R15: 0000000000022000 [ 564.716237][T16922] 17:19:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xb4}, {0x0}, {&(0x7f0000002a80)=""/4096, 0xe14}], 0x3, 0x0, 0xcc0a0000}}], 0x300, 0x0, 0x0) 17:19:14 executing program 2: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 63) 17:19:14 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 61) 17:19:14 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x2001000000000, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 17:19:14 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x10746) 17:19:14 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) [ 564.834274][T16945] FAULT_INJECTION: forcing a failure. [ 564.834274][T16945] name failslab, interval 1, probability 0, space 0, times 0 [ 564.847881][T16945] CPU: 0 PID: 16945 Comm: syz-executor.0 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 564.852365][T16952] FAULT_INJECTION: forcing a failure. [ 564.852365][T16952] name failslab, interval 1, probability 0, space 0, times 0 [ 564.857955][T16945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 564.857975][T16945] Call Trace: [ 564.857983][T16945] [ 564.857990][T16945] dump_stack_lvl+0x151/0x1b7 [ 564.858017][T16945] ? bfq_pos_tree_add_move+0x43e/0x43e [ 564.858037][T16945] dump_stack+0x15/0x17 [ 564.858052][T16945] should_fail+0x3c0/0x510 [ 564.904212][T16945] __should_failslab+0x9f/0xe0 [ 564.908815][T16945] should_failslab+0x9/0x20 [ 564.913158][T16945] kmem_cache_alloc+0x4f/0x2f0 [ 564.917841][T16945] ? vm_area_dup+0x26/0x1d0 [ 564.922177][T16945] vm_area_dup+0x26/0x1d0 [ 564.926343][T16945] dup_mmap+0x6b8/0xea0 17:19:14 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x2020000000000, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 564.930352][T16945] ? __delayed_free_task+0x20/0x20 [ 564.935443][T16945] ? mm_init+0x807/0x960 [ 564.939512][T16945] dup_mm+0x91/0x330 [ 564.943242][T16945] copy_mm+0x108/0x1b0 [ 564.947172][T16945] copy_process+0x1295/0x3250 [ 564.951665][T16945] ? check_stack_object+0x117/0x130 [ 564.956701][T16945] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 564.961640][T16945] ? copy_clone_args_from_user+0x6f0/0x790 [ 564.967284][T16945] kernel_clone+0x22d/0x990 [ 564.971620][T16945] ? dup_mmap+0xea0/0xea0 [ 564.975788][T16945] ? create_io_thread+0x1e0/0x1e0 [ 564.980646][T16945] ? file_end_write+0x1b0/0x1b0 [ 564.985418][T16945] __x64_sys_clone3+0x375/0x3a0 [ 564.990109][T16945] ? __ia32_sys_clone+0x300/0x300 [ 564.994965][T16945] ? ksys_write+0x25f/0x2c0 [ 564.999304][T16945] ? debug_smp_processor_id+0x17/0x20 [ 565.004513][T16945] do_syscall_64+0x44/0xd0 [ 565.008772][T16945] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 565.014497][T16945] RIP: 0033:0x7fa07a6ec0d9 [ 565.018748][T16945] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 565.038212][T16945] RSP: 002b:00007fa07945f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 565.046431][T16945] RAX: ffffffffffffffda RBX: 00007fa07a80bf80 RCX: 00007fa07a6ec0d9 [ 565.054243][T16945] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fa07945f050 [ 565.062054][T16945] RBP: 00007fa07945f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 565.069867][T16945] R10: 00007fa07945f050 R11: 0000000000000246 R12: 0000000000000058 17:19:14 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x122c9) 17:19:14 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 62) [ 565.077676][T16945] R13: 00007ffd55a8aedf R14: 00007fa07945f300 R15: 0000000000022000 [ 565.085494][T16945] [ 565.091485][T16952] CPU: 0 PID: 16952 Comm: syz-executor.2 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 565.101558][T16952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 565.111452][T16952] Call Trace: [ 565.114574][T16952] [ 565.117355][T16952] dump_stack_lvl+0x151/0x1b7 [ 565.121869][T16952] ? bfq_pos_tree_add_move+0x43e/0x43e [ 565.127168][T16952] dump_stack+0x15/0x17 [ 565.131153][T16952] should_fail+0x3c0/0x510 17:19:14 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x12800) 17:19:14 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) [ 565.135407][T16952] __should_failslab+0x9f/0xe0 [ 565.140005][T16952] should_failslab+0x9/0x20 [ 565.144350][T16952] kmem_cache_alloc+0x4f/0x2f0 [ 565.148950][T16952] ? vm_area_dup+0x26/0x1d0 [ 565.153306][T16952] vm_area_dup+0x26/0x1d0 [ 565.157450][T16952] dup_mmap+0x6b8/0xea0 [ 565.161447][T16952] ? __delayed_free_task+0x20/0x20 [ 565.166403][T16952] ? mm_init+0x807/0x960 [ 565.170571][T16952] dup_mm+0x91/0x330 [ 565.174338][T16952] copy_mm+0x108/0x1b0 [ 565.178307][T16952] copy_process+0x1295/0x3250 17:19:14 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x8000000000000, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 565.182820][T16952] ? check_stack_object+0x117/0x130 [ 565.187852][T16952] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 565.192802][T16952] ? copy_clone_args_from_user+0x6f0/0x790 [ 565.198443][T16952] kernel_clone+0x22d/0x990 [ 565.202785][T16952] ? dup_mmap+0xea0/0xea0 [ 565.206948][T16952] ? create_io_thread+0x1e0/0x1e0 [ 565.211805][T16952] ? file_end_write+0x1b0/0x1b0 [ 565.216489][T16952] __x64_sys_clone3+0x375/0x3a0 [ 565.221179][T16952] ? __ia32_sys_clone+0x300/0x300 [ 565.226043][T16952] ? ksys_write+0x25f/0x2c0 [ 565.230388][T16952] ? debug_smp_processor_id+0x17/0x20 [ 565.235585][T16952] do_syscall_64+0x44/0xd0 [ 565.239838][T16952] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 565.245571][T16952] RIP: 0033:0x7f40712a70d9 [ 565.249820][T16952] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 565.269386][T16952] RSP: 002b:00007f407001a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 565.277626][T16952] RAX: ffffffffffffffda RBX: 00007f40713c6f80 RCX: 00007f40712a70d9 [ 565.285524][T16952] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007f407001a050 [ 565.293339][T16952] RBP: 00007f407001a1d0 R08: 0000000000000000 R09: 0000000000000058 [ 565.301144][T16952] R10: 00007f407001a050 R11: 0000000000000246 R12: 0000000000000058 [ 565.308958][T16952] R13: 00007ffcef72a83f R14: 00007f407001a300 R15: 0000000000022000 [ 565.316774][T16952] [ 565.338762][T16967] FAULT_INJECTION: forcing a failure. [ 565.338762][T16967] name failslab, interval 1, probability 0, space 0, times 0 [ 565.357435][T16967] CPU: 0 PID: 16967 Comm: syz-executor.0 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 565.367513][T16967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 565.377406][T16967] Call Trace: [ 565.380527][T16967] [ 565.383314][T16967] dump_stack_lvl+0x151/0x1b7 [ 565.387817][T16967] ? bfq_pos_tree_add_move+0x43e/0x43e [ 565.393115][T16967] ? do_syscall_64+0x44/0xd0 [ 565.398032][T16967] dump_stack+0x15/0x17 [ 565.402013][T16967] should_fail+0x3c0/0x510 [ 565.406277][T16967] __should_failslab+0x9f/0xe0 [ 565.410866][T16967] should_failslab+0x9/0x20 [ 565.415206][T16967] kmem_cache_alloc+0x4f/0x2f0 [ 565.419806][T16967] ? anon_vma_clone+0xa1/0x4f0 [ 565.424406][T16967] anon_vma_clone+0xa1/0x4f0 [ 565.428835][T16967] anon_vma_fork+0x91/0x4f0 [ 565.433171][T16967] ? anon_vma_name+0x43/0x70 [ 565.437600][T16967] dup_mmap+0x750/0xea0 [ 565.441594][T16967] ? __delayed_free_task+0x20/0x20 [ 565.446539][T16967] ? mm_init+0x807/0x960 [ 565.450792][T16967] dup_mm+0x91/0x330 [ 565.454526][T16967] copy_mm+0x108/0x1b0 [ 565.458432][T16967] copy_process+0x1295/0x3250 [ 565.462945][T16967] ? check_stack_object+0x117/0x130 [ 565.467977][T16967] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 565.472921][T16967] ? copy_clone_args_from_user+0x6f0/0x790 [ 565.478564][T16967] kernel_clone+0x22d/0x990 [ 565.482906][T16967] ? dup_mmap+0xea0/0xea0 [ 565.487073][T16967] ? create_io_thread+0x1e0/0x1e0 [ 565.491931][T16967] ? file_end_write+0x1b0/0x1b0 [ 565.496621][T16967] __x64_sys_clone3+0x375/0x3a0 [ 565.501306][T16967] ? __ia32_sys_clone+0x300/0x300 [ 565.506164][T16967] ? ksys_write+0x25f/0x2c0 [ 565.510508][T16967] ? debug_smp_processor_id+0x17/0x20 [ 565.515712][T16967] do_syscall_64+0x44/0xd0 [ 565.519965][T16967] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 565.525692][T16967] RIP: 0033:0x7fa07a6ec0d9 [ 565.529946][T16967] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 565.549390][T16967] RSP: 002b:00007fa07945f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 565.557741][T16967] RAX: ffffffffffffffda RBX: 00007fa07a80bf80 RCX: 00007fa07a6ec0d9 [ 565.565548][T16967] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fa07945f050 [ 565.573356][T16967] RBP: 00007fa07945f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 565.581168][T16967] R10: 00007fa07945f050 R11: 0000000000000246 R12: 0000000000000058 [ 565.588978][T16967] R13: 00007ffd55a8aedf R14: 00007fa07945f300 R15: 0000000000022000 [ 565.596973][T16967] 17:19:15 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xb4}, {0x0}, {&(0x7f0000002a80)=""/4096, 0xe14}], 0x3, 0x0, 0xd00a0000}}], 0x300, 0x0, 0x0) 17:19:15 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x8000001000000, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 17:19:15 executing program 2: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 64) 17:19:15 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 63) 17:19:15 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) 17:19:15 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x14800) [ 565.690737][T16975] FAULT_INJECTION: forcing a failure. [ 565.690737][T16975] name failslab, interval 1, probability 0, space 0, times 0 [ 565.696166][T16979] FAULT_INJECTION: forcing a failure. [ 565.696166][T16979] name failslab, interval 1, probability 0, space 0, times 0 [ 565.715784][T16979] CPU: 1 PID: 16979 Comm: syz-executor.0 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 565.725853][T16979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 565.735742][T16979] Call Trace: [ 565.738863][T16979] [ 565.741640][T16979] dump_stack_lvl+0x151/0x1b7 [ 565.746163][T16979] ? bfq_pos_tree_add_move+0x43e/0x43e [ 565.751454][T16979] dump_stack+0x15/0x17 [ 565.755604][T16979] should_fail+0x3c0/0x510 [ 565.759858][T16979] __should_failslab+0x9f/0xe0 [ 565.764457][T16979] should_failslab+0x9/0x20 [ 565.768800][T16979] kmem_cache_alloc+0x4f/0x2f0 [ 565.773390][T16979] ? vm_area_dup+0x26/0x1d0 [ 565.777860][T16979] vm_area_dup+0x26/0x1d0 [ 565.782016][T16979] dup_mmap+0x6b8/0xea0 [ 565.786010][T16979] ? __delayed_free_task+0x20/0x20 [ 565.790985][T16979] ? mm_init+0x807/0x960 [ 565.795042][T16979] dup_mm+0x91/0x330 [ 565.798770][T16979] copy_mm+0x108/0x1b0 [ 565.802668][T16979] copy_process+0x1295/0x3250 [ 565.807192][T16979] ? check_stack_object+0x117/0x130 [ 565.812227][T16979] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 565.817253][T16979] ? copy_clone_args_from_user+0x6f0/0x790 [ 565.822903][T16979] kernel_clone+0x22d/0x990 [ 565.827232][T16979] ? dup_mmap+0xea0/0xea0 [ 565.831405][T16979] ? create_io_thread+0x1e0/0x1e0 [ 565.836352][T16979] ? file_end_write+0x1b0/0x1b0 [ 565.841080][T16979] __x64_sys_clone3+0x375/0x3a0 [ 565.845720][T16979] ? __ia32_sys_clone+0x300/0x300 [ 565.850586][T16979] ? ksys_write+0x25f/0x2c0 [ 565.855009][T16979] ? debug_smp_processor_id+0x17/0x20 [ 565.860213][T16979] do_syscall_64+0x44/0xd0 [ 565.864468][T16979] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 565.870310][T16979] RIP: 0033:0x7fa07a6ec0d9 [ 565.874534][T16979] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 565.894065][T16979] RSP: 002b:00007fa07945f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 565.902393][T16979] RAX: ffffffffffffffda RBX: 00007fa07a80bf80 RCX: 00007fa07a6ec0d9 [ 565.910203][T16979] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fa07945f050 [ 565.918014][T16979] RBP: 00007fa07945f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 565.925911][T16979] R10: 00007fa07945f050 R11: 0000000000000246 R12: 0000000000000058 [ 565.933731][T16979] R13: 00007ffd55a8aedf R14: 00007fa07945f300 R15: 0000000000022000 17:19:15 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x10100000000000, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 565.941538][T16979] [ 565.944412][T16975] CPU: 0 PID: 16975 Comm: syz-executor.2 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 565.954472][T16975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 565.964369][T16975] Call Trace: [ 565.967489][T16975] [ 565.970264][T16975] dump_stack_lvl+0x151/0x1b7 [ 565.974875][T16975] ? bfq_pos_tree_add_move+0x43e/0x43e [ 565.980166][T16975] dump_stack+0x15/0x17 [ 565.984150][T16975] should_fail+0x3c0/0x510 [ 565.988403][T16975] __should_failslab+0x9f/0xe0 [ 565.993020][T16975] should_failslab+0x9/0x20 [ 565.997477][T16975] kmem_cache_alloc+0x4f/0x2f0 [ 566.002078][T16975] ? vm_area_dup+0x26/0x1d0 [ 566.006416][T16975] vm_area_dup+0x26/0x1d0 [ 566.010575][T16975] dup_mmap+0x6b8/0xea0 [ 566.014567][T16975] ? __delayed_free_task+0x20/0x20 [ 566.019511][T16975] ? mm_init+0x807/0x960 [ 566.023592][T16975] dup_mm+0x91/0x330 [ 566.027439][T16975] copy_mm+0x108/0x1b0 [ 566.031360][T16975] copy_process+0x1295/0x3250 [ 566.035962][T16975] ? check_stack_object+0x117/0x130 [ 566.040987][T16975] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 566.045940][T16975] ? copy_clone_args_from_user+0x6f0/0x790 [ 566.051579][T16975] kernel_clone+0x22d/0x990 [ 566.055914][T16975] ? dup_mmap+0xea0/0xea0 [ 566.060079][T16975] ? create_io_thread+0x1e0/0x1e0 [ 566.065061][T16975] ? file_end_write+0x1b0/0x1b0 [ 566.069729][T16975] __x64_sys_clone3+0x375/0x3a0 [ 566.074410][T16975] ? __ia32_sys_clone+0x300/0x300 [ 566.080660][T16975] ? ksys_write+0x25f/0x2c0 [ 566.084998][T16975] ? debug_smp_processor_id+0x17/0x20 [ 566.090209][T16975] do_syscall_64+0x44/0xd0 [ 566.094460][T16975] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 566.100185][T16975] RIP: 0033:0x7f40712a70d9 [ 566.104445][T16975] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 566.123881][T16975] RSP: 002b:00007f407001a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 566.132132][T16975] RAX: ffffffffffffffda RBX: 00007f40713c6f80 RCX: 00007f40712a70d9 17:19:15 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) 17:19:15 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 64) 17:19:15 executing program 2: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 65) 17:19:15 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x201a0000000000, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 566.139940][T16975] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007f407001a050 [ 566.147747][T16975] RBP: 00007f407001a1d0 R08: 0000000000000000 R09: 0000000000000058 [ 566.155567][T16975] R10: 00007f407001a050 R11: 0000000000000246 R12: 0000000000000058 [ 566.163379][T16975] R13: 00007ffcef72a83f R14: 00007f407001a300 R15: 0000000000022000 [ 566.172664][T16975] 17:19:15 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x2040293a550000, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 17:19:15 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x17800) [ 566.225843][T16989] FAULT_INJECTION: forcing a failure. [ 566.225843][T16989] name failslab, interval 1, probability 0, space 0, times 0 [ 566.253897][T16994] FAULT_INJECTION: forcing a failure. [ 566.253897][T16994] name failslab, interval 1, probability 0, space 0, times 0 [ 566.276218][T16989] CPU: 1 PID: 16989 Comm: syz-executor.0 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 566.286297][T16989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 566.296194][T16989] Call Trace: [ 566.299313][T16989] [ 566.302088][T16989] dump_stack_lvl+0x151/0x1b7 [ 566.306689][T16989] ? bfq_pos_tree_add_move+0x43e/0x43e [ 566.311983][T16989] dump_stack+0x15/0x17 [ 566.315974][T16989] should_fail+0x3c0/0x510 [ 566.320227][T16989] __should_failslab+0x9f/0xe0 [ 566.324832][T16989] should_failslab+0x9/0x20 [ 566.329171][T16989] kmem_cache_alloc+0x4f/0x2f0 [ 566.333768][T16989] ? vm_area_dup+0x26/0x1d0 [ 566.338229][T16989] vm_area_dup+0x26/0x1d0 [ 566.342388][T16989] dup_mmap+0x6b8/0xea0 [ 566.346381][T16989] ? __delayed_free_task+0x20/0x20 [ 566.351337][T16989] ? mm_init+0x807/0x960 [ 566.355412][T16989] dup_mm+0x91/0x330 [ 566.359139][T16989] copy_mm+0x108/0x1b0 [ 566.363048][T16989] copy_process+0x1295/0x3250 [ 566.367559][T16989] ? check_stack_object+0x117/0x130 [ 566.372589][T16989] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 566.377538][T16989] ? copy_clone_args_from_user+0x6f0/0x790 [ 566.383180][T16989] kernel_clone+0x22d/0x990 [ 566.387518][T16989] ? dup_mmap+0xea0/0xea0 [ 566.391684][T16989] ? create_io_thread+0x1e0/0x1e0 [ 566.396546][T16989] ? file_end_write+0x1b0/0x1b0 [ 566.401232][T16989] __x64_sys_clone3+0x375/0x3a0 [ 566.405919][T16989] ? __ia32_sys_clone+0x300/0x300 [ 566.410779][T16989] ? ksys_write+0x25f/0x2c0 [ 566.415118][T16989] ? debug_smp_processor_id+0x17/0x20 [ 566.420326][T16989] do_syscall_64+0x44/0xd0 [ 566.424579][T16989] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 566.430306][T16989] RIP: 0033:0x7fa07a6ec0d9 [ 566.434564][T16989] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 566.454005][T16989] RSP: 002b:00007fa07945f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 566.462249][T16989] RAX: ffffffffffffffda RBX: 00007fa07a80bf80 RCX: 00007fa07a6ec0d9 [ 566.470063][T16989] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fa07945f050 [ 566.477869][T16989] RBP: 00007fa07945f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 566.485685][T16989] R10: 00007fa07945f050 R11: 0000000000000246 R12: 0000000000000058 [ 566.493494][T16989] R13: 00007ffd55a8aedf R14: 00007fa07945f300 R15: 0000000000022000 [ 566.501308][T16989] [ 566.504168][T16994] CPU: 0 PID: 16994 Comm: syz-executor.2 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 566.514241][T16994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 566.524185][T16994] Call Trace: [ 566.527255][T16994] [ 566.530033][T16994] dump_stack_lvl+0x151/0x1b7 [ 566.534549][T16994] ? bfq_pos_tree_add_move+0x43e/0x43e [ 566.539837][T16994] ? vma_interval_tree_augment_rotate+0x210/0x210 [ 566.546083][T16994] dump_stack+0x15/0x17 [ 566.550080][T16994] should_fail+0x3c0/0x510 [ 566.554328][T16994] __should_failslab+0x9f/0xe0 [ 566.558928][T16994] should_failslab+0x9/0x20 [ 566.563269][T16994] kmem_cache_alloc+0x4f/0x2f0 [ 566.567872][T16994] ? anon_vma_fork+0xf7/0x4f0 [ 566.572380][T16994] anon_vma_fork+0xf7/0x4f0 [ 566.576835][T16994] ? anon_vma_name+0x43/0x70 [ 566.581259][T16994] dup_mmap+0x750/0xea0 [ 566.585252][T16994] ? __delayed_free_task+0x20/0x20 [ 566.590300][T16994] ? mm_init+0x807/0x960 [ 566.594382][T16994] dup_mm+0x91/0x330 [ 566.598108][T16994] copy_mm+0x108/0x1b0 [ 566.602009][T16994] copy_process+0x1295/0x3250 [ 566.606530][T16994] ? check_stack_object+0x117/0x130 [ 566.611678][T16994] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 566.616619][T16994] ? copy_clone_args_from_user+0x6f0/0x790 [ 566.622260][T16994] kernel_clone+0x22d/0x990 [ 566.626600][T16994] ? dup_mmap+0xea0/0xea0 [ 566.630769][T16994] ? create_io_thread+0x1e0/0x1e0 [ 566.635644][T16994] ? file_end_write+0x1b0/0x1b0 [ 566.640432][T16994] __x64_sys_clone3+0x375/0x3a0 [ 566.645117][T16994] ? __ia32_sys_clone+0x300/0x300 [ 566.649977][T16994] ? ksys_write+0x25f/0x2c0 [ 566.654324][T16994] ? debug_smp_processor_id+0x17/0x20 [ 566.659528][T16994] do_syscall_64+0x44/0xd0 [ 566.663779][T16994] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 566.669504][T16994] RIP: 0033:0x7f40712a70d9 [ 566.673759][T16994] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 566.693307][T16994] RSP: 002b:00007f407001a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 566.701550][T16994] RAX: ffffffffffffffda RBX: 00007f40713c6f80 RCX: 00007f40712a70d9 [ 566.709358][T16994] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007f407001a050 [ 566.717174][T16994] RBP: 00007f407001a1d0 R08: 0000000000000000 R09: 0000000000000058 17:19:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xb4}, {0x0}, {&(0x7f0000002a80)=""/4096, 0xe14}], 0x3, 0x0, 0xf40b0000}}], 0x300, 0x0, 0x0) 17:19:16 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0xf0a12bbd290000, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 17:19:16 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) 17:19:16 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x18000) 17:19:16 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 65) 17:19:16 executing program 2: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 66) [ 566.724983][T16994] R10: 00007f407001a050 R11: 0000000000000246 R12: 0000000000000058 [ 566.732793][T16994] R13: 00007ffcef72a83f R14: 00007f407001a300 R15: 0000000000022000 [ 566.740696][T16994] 17:19:16 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0xf0e10b1b000000, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 566.772975][T17009] FAULT_INJECTION: forcing a failure. [ 566.772975][T17009] name failslab, interval 1, probability 0, space 0, times 0 [ 566.797438][T17009] CPU: 1 PID: 17009 Comm: syz-executor.0 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 566.807516][T17009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 566.817412][T17009] Call Trace: [ 566.820536][T17009] 17:19:16 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) [ 566.823313][T17009] dump_stack_lvl+0x151/0x1b7 [ 566.827827][T17009] ? bfq_pos_tree_add_move+0x43e/0x43e [ 566.833135][T17009] dump_stack+0x15/0x17 [ 566.837131][T17009] should_fail+0x3c0/0x510 [ 566.841361][T17009] __should_failslab+0x9f/0xe0 [ 566.845965][T17009] should_failslab+0x9/0x20 [ 566.850302][T17009] kmem_cache_alloc+0x4f/0x2f0 [ 566.854898][T17009] ? vm_area_dup+0x26/0x1d0 [ 566.859240][T17009] vm_area_dup+0x26/0x1d0 [ 566.863411][T17009] dup_mmap+0x6b8/0xea0 [ 566.867407][T17009] ? __delayed_free_task+0x20/0x20 [ 566.872345][T17009] ? mm_init+0x807/0x960 [ 566.876540][T17009] dup_mm+0x91/0x330 [ 566.880251][T17009] copy_mm+0x108/0x1b0 [ 566.884250][T17009] copy_process+0x1295/0x3250 [ 566.888761][T17009] ? check_stack_object+0x117/0x130 [ 566.893798][T17009] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 566.898768][T17009] ? copy_clone_args_from_user+0x6f0/0x790 [ 566.904377][T17009] kernel_clone+0x22d/0x990 [ 566.908717][T17009] ? dup_mmap+0xea0/0xea0 [ 566.912882][T17009] ? create_io_thread+0x1e0/0x1e0 [ 566.917747][T17009] ? file_end_write+0x1b0/0x1b0 [ 566.922491][T17009] __x64_sys_clone3+0x375/0x3a0 [ 566.927120][T17009] ? __ia32_sys_clone+0x300/0x300 [ 566.931981][T17009] ? ksys_write+0x25f/0x2c0 [ 566.936320][T17009] ? debug_smp_processor_id+0x17/0x20 [ 566.941526][T17009] do_syscall_64+0x44/0xd0 [ 566.945781][T17009] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 566.951512][T17009] RIP: 0033:0x7fa07a6ec0d9 [ 566.955760][T17009] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 566.975200][T17009] RSP: 002b:00007fa07945f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 566.983443][T17009] RAX: ffffffffffffffda RBX: 00007fa07a80bf80 RCX: 00007fa07a6ec0d9 [ 566.991258][T17009] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fa07945f050 [ 566.999103][T17009] RBP: 00007fa07945f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 567.006876][T17009] R10: 00007fa07945f050 R11: 0000000000000246 R12: 0000000000000058 [ 567.014688][T17009] R13: 00007ffd55a8aedf R14: 00007fa07945f300 R15: 0000000000022000 17:19:16 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 66) 17:19:16 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0xf0ff1f00000000, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 17:19:16 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x18081) [ 567.022506][T17009] [ 567.032462][T17018] FAULT_INJECTION: forcing a failure. [ 567.032462][T17018] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 567.046541][T17018] CPU: 0 PID: 17018 Comm: syz-executor.2 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 567.056611][T17018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 567.066509][T17018] Call Trace: [ 567.069631][T17018] [ 567.072410][T17018] dump_stack_lvl+0x151/0x1b7 [ 567.076929][T17018] ? bfq_pos_tree_add_move+0x43e/0x43e [ 567.082218][T17018] dump_stack+0x15/0x17 [ 567.086210][T17018] should_fail+0x3c0/0x510 [ 567.090460][T17018] should_fail_alloc_page+0x58/0x70 [ 567.093164][T17021] FAULT_INJECTION: forcing a failure. [ 567.093164][T17021] name failslab, interval 1, probability 0, space 0, times 0 [ 567.095578][T17018] __alloc_pages+0x1de/0x7c0 [ 567.095607][T17018] ? __count_vm_events+0x30/0x30 [ 567.117194][T17018] ? __this_cpu_preempt_check+0x13/0x20 [ 567.122573][T17018] ? __mod_node_page_state+0xac/0xf0 [ 567.127693][T17018] pte_alloc_one+0x73/0x1b0 [ 567.132031][T17018] ? pfn_modify_allowed+0x2e0/0x2e0 [ 567.137064][T17018] __pte_alloc+0x86/0x350 [ 567.141230][T17018] ? free_pgtables+0x210/0x210 [ 567.145828][T17018] ? _raw_spin_lock+0xa3/0x1b0 [ 567.150428][T17018] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 567.155641][T17018] ? __kernel_text_address+0x9a/0x110 [ 567.160847][T17018] copy_pte_range+0x1b1f/0x20b0 [ 567.165535][T17018] ? __kunmap_atomic+0x80/0x80 [ 567.170134][T17018] ? __kasan_slab_alloc+0xc4/0xe0 17:19:16 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) [ 567.174998][T17018] ? __kasan_slab_alloc+0xb2/0xe0 [ 567.179854][T17018] ? kmem_cache_alloc+0x189/0x2f0 [ 567.184712][T17018] ? vm_area_dup+0x26/0x1d0 [ 567.189081][T17018] ? dup_mmap+0x6b8/0xea0 [ 567.193218][T17018] ? dup_mm+0x91/0x330 [ 567.197125][T17018] ? copy_mm+0x108/0x1b0 [ 567.201205][T17018] ? copy_process+0x1295/0x3250 [ 567.205889][T17018] ? kernel_clone+0x22d/0x990 [ 567.210404][T17018] ? __x64_sys_clone3+0x375/0x3a0 [ 567.215264][T17018] ? do_syscall_64+0x44/0xd0 [ 567.219691][T17018] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 567.225594][T17018] copy_page_range+0xc1e/0x1090 [ 567.230283][T17018] ? pfn_valid+0x1e0/0x1e0 [ 567.234534][T17018] dup_mmap+0x99f/0xea0 [ 567.238526][T17018] ? __delayed_free_task+0x20/0x20 [ 567.243469][T17018] ? mm_init+0x807/0x960 [ 567.247549][T17018] dup_mm+0x91/0x330 [ 567.251284][T17018] copy_mm+0x108/0x1b0 [ 567.255188][T17018] copy_process+0x1295/0x3250 [ 567.259699][T17018] ? check_stack_object+0x117/0x130 [ 567.264735][T17018] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 567.269691][T17018] ? copy_clone_args_from_user+0x6f0/0x790 [ 567.275322][T17018] kernel_clone+0x22d/0x990 [ 567.279664][T17018] ? dup_mmap+0xea0/0xea0 [ 567.283827][T17018] ? create_io_thread+0x1e0/0x1e0 [ 567.288697][T17018] ? file_end_write+0x1b0/0x1b0 [ 567.293466][T17018] __x64_sys_clone3+0x375/0x3a0 [ 567.298159][T17018] ? __ia32_sys_clone+0x300/0x300 [ 567.303018][T17018] ? ksys_write+0x25f/0x2c0 [ 567.307357][T17018] ? debug_smp_processor_id+0x17/0x20 [ 567.312652][T17018] do_syscall_64+0x44/0xd0 [ 567.316906][T17018] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 567.322631][T17018] RIP: 0033:0x7f40712a70d9 [ 567.326889][T17018] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 567.346333][T17018] RSP: 002b:00007f407001a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 567.354572][T17018] RAX: ffffffffffffffda RBX: 00007f40713c6f80 RCX: 00007f40712a70d9 [ 567.362381][T17018] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007f407001a050 [ 567.370312][T17018] RBP: 00007f407001a1d0 R08: 0000000000000000 R09: 0000000000000058 [ 567.378123][T17018] R10: 00007f407001a050 R11: 0000000000000246 R12: 0000000000000058 [ 567.385932][T17018] R13: 00007ffcef72a83f R14: 00007f407001a300 R15: 0000000000022000 [ 567.393748][T17018] [ 567.402712][T17021] CPU: 0 PID: 17021 Comm: syz-executor.0 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 567.412784][T17021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 567.422756][T17021] Call Trace: [ 567.425879][T17021] [ 567.428658][T17021] dump_stack_lvl+0x151/0x1b7 [ 567.433181][T17021] ? bfq_pos_tree_add_move+0x43e/0x43e [ 567.438472][T17021] dump_stack+0x15/0x17 [ 567.442460][T17021] should_fail+0x3c0/0x510 [ 567.446713][T17021] __should_failslab+0x9f/0xe0 [ 567.451311][T17021] should_failslab+0x9/0x20 [ 567.455654][T17021] kmem_cache_alloc+0x4f/0x2f0 [ 567.460255][T17021] ? vm_area_dup+0x26/0x1d0 [ 567.464594][T17021] vm_area_dup+0x26/0x1d0 [ 567.468761][T17021] dup_mmap+0x6b8/0xea0 [ 567.472758][T17021] ? __delayed_free_task+0x20/0x20 [ 567.477697][T17021] ? mm_init+0x807/0x960 [ 567.481779][T17021] dup_mm+0x91/0x330 [ 567.485507][T17021] copy_mm+0x108/0x1b0 [ 567.489414][T17021] copy_process+0x1295/0x3250 [ 567.493928][T17021] ? check_stack_object+0x117/0x130 [ 567.498961][T17021] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 567.503907][T17021] ? copy_clone_args_from_user+0x6f0/0x790 [ 567.509547][T17021] kernel_clone+0x22d/0x990 [ 567.513898][T17021] ? dup_mmap+0xea0/0xea0 [ 567.518052][T17021] ? create_io_thread+0x1e0/0x1e0 [ 567.522914][T17021] ? file_end_write+0x1b0/0x1b0 [ 567.527799][T17021] __x64_sys_clone3+0x375/0x3a0 [ 567.532460][T17021] ? __ia32_sys_clone+0x300/0x300 [ 567.537323][T17021] ? ksys_write+0x25f/0x2c0 [ 567.541690][T17021] ? debug_smp_processor_id+0x17/0x20 [ 567.546870][T17021] do_syscall_64+0x44/0xd0 [ 567.551121][T17021] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 567.556851][T17021] RIP: 0033:0x7fa07a6ec0d9 [ 567.561103][T17021] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 567.580543][T17021] RSP: 002b:00007fa07945f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 567.588796][T17021] RAX: ffffffffffffffda RBX: 00007fa07a80bf80 RCX: 00007fa07a6ec0d9 [ 567.596599][T17021] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fa07945f050 [ 567.604418][T17021] RBP: 00007fa07945f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 567.612222][T17021] R10: 00007fa07945f050 R11: 0000000000000246 R12: 0000000000000058 17:19:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xb4}, {0x0}, {&(0x7f0000002a80)=""/4096, 0xe14}], 0x3, 0x0, 0xffffff7f}}], 0x300, 0x0, 0x0) 17:19:17 executing program 2: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 67) 17:19:17 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x100000000000000, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 17:19:17 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 67) [ 567.620122][T17021] R13: 00007ffd55a8aedf R14: 00007fa07945f300 R15: 0000000000022000 [ 567.627935][T17021] 17:19:17 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x180b0) [ 567.670496][T17034] FAULT_INJECTION: forcing a failure. [ 567.670496][T17034] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 567.685610][T17034] CPU: 1 PID: 17034 Comm: syz-executor.2 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 567.686612][T17037] FAULT_INJECTION: forcing a failure. [ 567.686612][T17037] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 567.695680][T17034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 567.695699][T17034] Call Trace: [ 567.695706][T17034] [ 567.695712][T17034] dump_stack_lvl+0x151/0x1b7 [ 567.729011][T17034] ? bfq_pos_tree_add_move+0x43e/0x43e [ 567.734299][T17034] dump_stack+0x15/0x17 [ 567.738290][T17034] should_fail+0x3c0/0x510 [ 567.742546][T17034] should_fail_alloc_page+0x58/0x70 [ 567.747577][T17034] __alloc_pages+0x1de/0x7c0 [ 567.752042][T17034] ? __count_vm_events+0x30/0x30 [ 567.756783][T17034] pte_alloc_one+0x73/0x1b0 [ 567.761119][T17034] ? pfn_modify_allowed+0x2e0/0x2e0 [ 567.766152][T17034] __pte_alloc+0x86/0x350 [ 567.770316][T17034] ? is_module_text_address+0xe1/0x140 [ 567.775612][T17034] ? free_pgtables+0x210/0x210 [ 567.780212][T17034] ? __kernel_text_address+0x9a/0x110 [ 567.785420][T17034] ? unwind_get_return_address+0x4c/0x90 [ 567.790894][T17034] copy_pte_range+0x1b1f/0x20b0 [ 567.795770][T17034] ? stack_trace_save+0x12d/0x1f0 [ 567.800620][T17034] ? anon_vma_clone+0xa1/0x4f0 [ 567.805226][T17034] ? __kunmap_atomic+0x80/0x80 [ 567.809819][T17034] ? dup_mmap+0x750/0xea0 [ 567.813985][T17034] ? dup_mm+0x91/0x330 [ 567.817890][T17034] ? copy_mm+0x108/0x1b0 [ 567.821970][T17034] ? copy_process+0x1295/0x3250 [ 567.826655][T17034] ? kernel_clone+0x22d/0x990 [ 567.831168][T17034] ? __x64_sys_clone3+0x375/0x3a0 [ 567.836034][T17034] ? do_syscall_64+0x44/0xd0 [ 567.840458][T17034] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 567.846359][T17034] copy_page_range+0xc1e/0x1090 [ 567.851049][T17034] ? pfn_valid+0x1e0/0x1e0 [ 567.855302][T17034] dup_mmap+0x99f/0xea0 [ 567.859292][T17034] ? __delayed_free_task+0x20/0x20 [ 567.864239][T17034] ? mm_init+0x807/0x960 [ 567.868424][T17034] dup_mm+0x91/0x330 [ 567.872151][T17034] copy_mm+0x108/0x1b0 [ 567.876062][T17034] copy_process+0x1295/0x3250 [ 567.880572][T17034] ? check_stack_object+0x117/0x130 [ 567.885606][T17034] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 567.890548][T17034] ? copy_clone_args_from_user+0x6f0/0x790 [ 567.896192][T17034] kernel_clone+0x22d/0x990 [ 567.900531][T17034] ? dup_mmap+0xea0/0xea0 [ 567.904695][T17034] ? create_io_thread+0x1e0/0x1e0 [ 567.909557][T17034] ? file_end_write+0x1b0/0x1b0 [ 567.914241][T17034] __x64_sys_clone3+0x375/0x3a0 [ 567.918930][T17034] ? __ia32_sys_clone+0x300/0x300 [ 567.923790][T17034] ? ksys_write+0x25f/0x2c0 [ 567.928130][T17034] ? debug_smp_processor_id+0x17/0x20 [ 567.933339][T17034] do_syscall_64+0x44/0xd0 [ 567.937591][T17034] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 567.943316][T17034] RIP: 0033:0x7f40712a70d9 [ 567.947572][T17034] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 17:19:17 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x200000000000000, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 567.967011][T17034] RSP: 002b:00007f407001a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 567.975257][T17034] RAX: ffffffffffffffda RBX: 00007f40713c6f80 RCX: 00007f40712a70d9 [ 567.983067][T17034] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007f407001a050 [ 567.990880][T17034] RBP: 00007f407001a1d0 R08: 0000000000000000 R09: 0000000000000058 [ 567.998690][T17034] R10: 00007f407001a050 R11: 0000000000000246 R12: 0000000000000058 [ 568.006500][T17034] R13: 00007ffcef72a83f R14: 00007f407001a300 R15: 0000000000022000 [ 568.014316][T17034] 17:19:17 executing program 2: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 68) 17:19:17 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) [ 568.017180][T17037] CPU: 0 PID: 17037 Comm: syz-executor.0 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 568.027343][T17037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 568.037319][T17037] Call Trace: [ 568.040526][T17037] [ 568.043308][T17037] dump_stack_lvl+0x151/0x1b7 [ 568.047906][T17037] ? bfq_pos_tree_add_move+0x43e/0x43e [ 568.053200][T17037] dump_stack+0x15/0x17 [ 568.057190][T17037] should_fail+0x3c0/0x510 [ 568.061447][T17037] should_fail_alloc_page+0x58/0x70 [ 568.066477][T17037] __alloc_pages+0x1de/0x7c0 17:19:17 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x18800) 17:19:17 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x700000000000000, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 568.070909][T17037] ? __count_vm_events+0x30/0x30 [ 568.075679][T17037] ? __this_cpu_preempt_check+0x13/0x20 [ 568.081059][T17037] ? __mod_node_page_state+0xac/0xf0 [ 568.086180][T17037] pte_alloc_one+0x73/0x1b0 [ 568.090537][T17037] ? pfn_modify_allowed+0x2e0/0x2e0 [ 568.095557][T17037] __pte_alloc+0x86/0x350 [ 568.099722][T17037] ? free_pgtables+0x210/0x210 [ 568.104319][T17037] ? _raw_spin_lock+0xa3/0x1b0 [ 568.108921][T17037] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 568.114130][T17037] ? __kernel_text_address+0x9a/0x110 17:19:17 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) 17:19:17 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x800000000000000, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 568.119336][T17037] copy_pte_range+0x1b1f/0x20b0 [ 568.124028][T17037] ? __kunmap_atomic+0x80/0x80 [ 568.128623][T17037] ? __kasan_slab_alloc+0xc4/0xe0 [ 568.133482][T17037] ? __kasan_slab_alloc+0xb2/0xe0 [ 568.138463][T17037] ? kmem_cache_alloc+0x189/0x2f0 [ 568.143320][T17037] ? vm_area_dup+0x26/0x1d0 [ 568.147662][T17037] ? dup_mmap+0x6b8/0xea0 [ 568.151827][T17037] ? dup_mm+0x91/0x330 [ 568.155731][T17037] ? copy_mm+0x108/0x1b0 [ 568.159812][T17037] ? copy_process+0x1295/0x3250 [ 568.164499][T17037] ? kernel_clone+0x22d/0x990 [ 568.169016][T17037] ? __x64_sys_clone3+0x375/0x3a0 [ 568.173871][T17037] ? do_syscall_64+0x44/0xd0 [ 568.178298][T17037] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 568.184204][T17037] copy_page_range+0xc1e/0x1090 [ 568.188891][T17037] ? pfn_valid+0x1e0/0x1e0 [ 568.193150][T17037] dup_mmap+0x99f/0xea0 [ 568.197135][T17037] ? __delayed_free_task+0x20/0x20 [ 568.202081][T17037] ? mm_init+0x807/0x960 [ 568.206157][T17037] dup_mm+0x91/0x330 [ 568.209887][T17037] copy_mm+0x108/0x1b0 [ 568.213794][T17037] copy_process+0x1295/0x3250 [ 568.218310][T17037] ? check_stack_object+0x117/0x130 [ 568.223344][T17037] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 568.228294][T17037] ? copy_clone_args_from_user+0x6f0/0x790 [ 568.233930][T17037] kernel_clone+0x22d/0x990 [ 568.238271][T17037] ? dup_mmap+0xea0/0xea0 [ 568.242438][T17037] ? create_io_thread+0x1e0/0x1e0 [ 568.247310][T17037] ? file_end_write+0x1b0/0x1b0 [ 568.252196][T17037] __x64_sys_clone3+0x375/0x3a0 [ 568.256881][T17037] ? __ia32_sys_clone+0x300/0x300 [ 568.261740][T17037] ? ksys_write+0x25f/0x2c0 [ 568.266212][T17037] ? debug_smp_processor_id+0x17/0x20 [ 568.271419][T17037] do_syscall_64+0x44/0xd0 [ 568.275669][T17037] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 568.281397][T17037] RIP: 0033:0x7fa07a6ec0d9 [ 568.285651][T17037] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 568.305101][T17037] RSP: 002b:00007fa07945f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 568.313342][T17037] RAX: ffffffffffffffda RBX: 00007fa07a80bf80 RCX: 00007fa07a6ec0d9 [ 568.321149][T17037] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fa07945f050 [ 568.328961][T17037] RBP: 00007fa07945f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 568.336776][T17037] R10: 00007fa07945f050 R11: 0000000000000246 R12: 0000000000000058 [ 568.344693][T17037] R13: 00007ffd55a8aedf R14: 00007fa07945f300 R15: 0000000000022000 [ 568.352503][T17037] 17:19:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xb4}, {0x0}, {&(0x7f0000002a80)=""/4096, 0xe14}], 0x3, 0x0, 0xffffffc3}}], 0x300, 0x0, 0x0) 17:19:17 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x1b000) 17:19:17 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x900000000000000, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 17:19:17 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) 17:19:17 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 68) 17:19:17 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x1100000000000000, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 568.536143][T17061] FAULT_INJECTION: forcing a failure. [ 568.536143][T17061] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 568.569335][T17061] CPU: 0 PID: 17061 Comm: syz-executor.0 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 568.579412][T17061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 568.589305][T17061] Call Trace: [ 568.592429][T17061] [ 568.595209][T17061] dump_stack_lvl+0x151/0x1b7 [ 568.599721][T17061] ? bfq_pos_tree_add_move+0x43e/0x43e [ 568.605017][T17061] dump_stack+0x15/0x17 [ 568.609007][T17061] should_fail+0x3c0/0x510 [ 568.613260][T17061] should_fail_alloc_page+0x58/0x70 [ 568.618292][T17061] __alloc_pages+0x1de/0x7c0 [ 568.622722][T17061] ? __count_vm_events+0x30/0x30 [ 568.627583][T17061] ? __this_cpu_preempt_check+0x13/0x20 [ 568.632961][T17061] ? __mod_node_page_state+0xac/0xf0 [ 568.638085][T17061] pte_alloc_one+0x73/0x1b0 [ 568.642421][T17061] ? pfn_modify_allowed+0x2e0/0x2e0 [ 568.647551][T17061] __pte_alloc+0x86/0x350 [ 568.651712][T17061] ? free_pgtables+0x210/0x210 [ 568.656314][T17061] ? _raw_spin_lock+0xa3/0x1b0 [ 568.660950][T17061] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 568.666115][T17061] ? __kernel_text_address+0x9a/0x110 [ 568.671327][T17061] copy_pte_range+0x1b1f/0x20b0 [ 568.676016][T17061] ? __kunmap_atomic+0x80/0x80 [ 568.680611][T17061] ? __kasan_slab_alloc+0xc4/0xe0 [ 568.685475][T17061] ? __kasan_slab_alloc+0xb2/0xe0 [ 568.690329][T17061] ? kmem_cache_alloc+0x189/0x2f0 [ 568.695189][T17061] ? vm_area_dup+0x26/0x1d0 [ 568.699530][T17061] ? dup_mmap+0x6b8/0xea0 [ 568.703694][T17061] ? dup_mm+0x91/0x330 [ 568.707598][T17061] ? copy_mm+0x108/0x1b0 [ 568.711677][T17061] ? copy_process+0x1295/0x3250 [ 568.716367][T17061] ? kernel_clone+0x22d/0x990 [ 568.720877][T17061] ? __x64_sys_clone3+0x375/0x3a0 [ 568.725739][T17061] ? do_syscall_64+0x44/0xd0 [ 568.730250][T17061] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 568.736162][T17061] copy_page_range+0xc1e/0x1090 [ 568.740848][T17061] ? pfn_valid+0x1e0/0x1e0 [ 568.745098][T17061] dup_mmap+0x99f/0xea0 [ 568.749090][T17061] ? __delayed_free_task+0x20/0x20 [ 568.754038][T17061] ? mm_init+0x807/0x960 [ 568.758135][T17061] dup_mm+0x91/0x330 [ 568.761846][T17061] copy_mm+0x108/0x1b0 [ 568.765753][T17061] copy_process+0x1295/0x3250 [ 568.770272][T17061] ? check_stack_object+0x117/0x130 [ 568.775301][T17061] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 568.780246][T17061] ? copy_clone_args_from_user+0x6f0/0x790 [ 568.785894][T17061] kernel_clone+0x22d/0x990 [ 568.790225][T17061] ? dup_mmap+0xea0/0xea0 [ 568.794399][T17061] ? create_io_thread+0x1e0/0x1e0 [ 568.799259][T17061] ? file_end_write+0x1b0/0x1b0 [ 568.803936][T17061] __x64_sys_clone3+0x375/0x3a0 [ 568.808626][T17061] ? __ia32_sys_clone+0x300/0x300 [ 568.813497][T17061] ? ksys_write+0x25f/0x2c0 [ 568.817835][T17061] ? debug_smp_processor_id+0x17/0x20 [ 568.823038][T17061] do_syscall_64+0x44/0xd0 [ 568.827287][T17061] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 568.833019][T17061] RIP: 0033:0x7fa07a6ec0d9 [ 568.837268][T17061] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 568.856797][T17061] RSP: 002b:00007fa07945f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 568.865043][T17061] RAX: ffffffffffffffda RBX: 00007fa07a80bf80 RCX: 00007fa07a6ec0d9 [ 568.872851][T17061] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fa07945f050 [ 568.880663][T17061] RBP: 00007fa07945f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 568.888555][T17061] R10: 00007fa07945f050 R11: 0000000000000246 R12: 0000000000000058 [ 568.896368][T17061] R13: 00007ffd55a8aedf R14: 00007fa07945f300 R15: 0000000000022000 [ 568.904180][T17061] [ 569.197926][ T1289] device bridge_slave_1 left promiscuous mode [ 569.203918][ T1289] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.211253][ T1289] device bridge_slave_0 left promiscuous mode [ 569.217263][ T1289] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.224864][ T1289] device veth1_macvtap left promiscuous mode [ 569.230767][ T1289] device veth0_vlan left promiscuous mode [ 570.150580][T17068] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.157565][T17068] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.164809][T17068] device bridge_slave_0 entered promiscuous mode [ 570.171811][T17068] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.178779][T17068] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.185917][T17068] device bridge_slave_1 entered promiscuous mode [ 570.224029][T17068] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.230900][T17068] bridge0: port 2(bridge_slave_1) entered forwarding state [ 570.238002][T17068] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.244770][T17068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 570.262379][ T5965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 570.270165][ T5965] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.277609][ T5965] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.297063][T17068] device veth0_vlan entered promiscuous mode [ 570.305219][ T5987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 570.313554][ T5987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 570.321331][ T5987] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 570.329101][ T5987] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 570.336352][ T5987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 570.344392][ T5987] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.351244][ T5987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 570.358477][ T5987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 570.366402][ T5987] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.373256][ T5987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 570.380461][ T5987] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 570.388384][ T5987] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 570.400162][ T5993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 570.408927][T17068] device veth1_macvtap entered promiscuous mode [ 570.417666][ T5965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 570.429515][ T5965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 570.448255][T17073] FAULT_INJECTION: forcing a failure. [ 570.448255][T17073] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 570.462335][T17073] CPU: 0 PID: 17073 Comm: syz-executor.2 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 570.472408][T17073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 570.482298][T17073] Call Trace: [ 570.485422][T17073] [ 570.488199][T17073] dump_stack_lvl+0x151/0x1b7 [ 570.492710][T17073] ? bfq_pos_tree_add_move+0x43e/0x43e [ 570.498006][T17073] dump_stack+0x15/0x17 [ 570.501997][T17073] should_fail+0x3c0/0x510 [ 570.506251][T17073] should_fail_alloc_page+0x58/0x70 [ 570.511286][T17073] __alloc_pages+0x1de/0x7c0 [ 570.515711][T17073] ? __count_vm_events+0x30/0x30 [ 570.520493][T17073] ? __this_cpu_preempt_check+0x13/0x20 [ 570.525871][T17073] ? __mod_node_page_state+0xac/0xf0 [ 570.530988][T17073] pte_alloc_one+0x73/0x1b0 [ 570.535325][T17073] ? pfn_modify_allowed+0x2e0/0x2e0 [ 570.540360][T17073] __pte_alloc+0x86/0x350 [ 570.544525][T17073] ? free_pgtables+0x210/0x210 [ 570.549126][T17073] ? _raw_spin_lock+0xa3/0x1b0 [ 570.553724][T17073] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 570.558934][T17073] ? __kernel_text_address+0x9a/0x110 [ 570.564140][T17073] copy_pte_range+0x1b1f/0x20b0 [ 570.568841][T17073] ? __kunmap_atomic+0x80/0x80 [ 570.573427][T17073] ? __kasan_slab_alloc+0xc4/0xe0 [ 570.578288][T17073] ? __kasan_slab_alloc+0xb2/0xe0 [ 570.583145][T17073] ? kmem_cache_alloc+0x189/0x2f0 [ 570.588010][T17073] ? vm_area_dup+0x26/0x1d0 [ 570.592348][T17073] ? dup_mmap+0x6b8/0xea0 [ 570.596514][T17073] ? dup_mm+0x91/0x330 [ 570.600419][T17073] ? copy_mm+0x108/0x1b0 [ 570.604606][T17073] ? copy_process+0x1295/0x3250 [ 570.609292][T17073] ? kernel_clone+0x22d/0x990 [ 570.613806][T17073] ? __x64_sys_clone3+0x375/0x3a0 [ 570.618673][T17073] ? do_syscall_64+0x44/0xd0 [ 570.623100][T17073] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 570.628996][T17073] copy_page_range+0xc1e/0x1090 [ 570.633684][T17073] ? pfn_valid+0x1e0/0x1e0 [ 570.637941][T17073] dup_mmap+0x99f/0xea0 [ 570.641928][T17073] ? __delayed_free_task+0x20/0x20 [ 570.646876][T17073] ? mm_init+0x807/0x960 [ 570.650955][T17073] dup_mm+0x91/0x330 [ 570.654825][T17073] copy_mm+0x108/0x1b0 [ 570.658727][T17073] copy_process+0x1295/0x3250 [ 570.663241][T17073] ? check_stack_object+0x117/0x130 [ 570.668276][T17073] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 570.673222][T17073] ? copy_clone_args_from_user+0x6f0/0x790 [ 570.678867][T17073] kernel_clone+0x22d/0x990 [ 570.683203][T17073] ? dup_mmap+0xea0/0xea0 [ 570.687370][T17073] ? create_io_thread+0x1e0/0x1e0 [ 570.692230][T17073] ? file_end_write+0x1b0/0x1b0 [ 570.696924][T17073] __x64_sys_clone3+0x375/0x3a0 [ 570.701603][T17073] ? __ia32_sys_clone+0x300/0x300 [ 570.706464][T17073] ? ksys_write+0x25f/0x2c0 [ 570.710810][T17073] ? debug_smp_processor_id+0x17/0x20 [ 570.716013][T17073] do_syscall_64+0x44/0xd0 [ 570.720269][T17073] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 570.725991][T17073] RIP: 0033:0x7f64a55310d9 [ 570.730332][T17073] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 570.749774][T17073] RSP: 002b:00007f64a42a4038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 570.758018][T17073] RAX: ffffffffffffffda RBX: 00007f64a5650f80 RCX: 00007f64a55310d9 [ 570.765827][T17073] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007f64a42a4050 17:19:20 executing program 2: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 69) 17:19:20 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x1f00000000000000, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 17:19:20 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) 17:19:20 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x1b800) 17:19:20 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 69) 17:19:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xb4}, {0x0}, {&(0x7f0000002a80)=""/4096, 0xe14}], 0x3, 0x0, 0x7ffffffff000}}], 0x300, 0x0, 0x0) [ 570.773642][T17073] RBP: 00007f64a42a41d0 R08: 0000000000000000 R09: 0000000000000058 [ 570.781451][T17073] R10: 00007f64a42a4050 R11: 0000000000000246 R12: 0000000000000058 [ 570.789261][T17073] R13: 00007ffc9478d42f R14: 00007f64a42a4300 R15: 0000000000022000 [ 570.797075][T17073] [ 570.816220][T17080] __nla_validate_parse: 152 callbacks suppressed 17:19:20 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x2000000000000000, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 570.816239][T17080] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 570.819910][T17082] FAULT_INJECTION: forcing a failure. [ 570.819910][T17082] name failslab, interval 1, probability 0, space 0, times 0 [ 570.825046][T17080] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 570.841035][T17082] CPU: 0 PID: 17082 Comm: syz-executor.0 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 570.853364][T17080] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 570.853815][T17082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 570.853829][T17082] Call Trace: [ 570.853834][T17082] [ 570.853841][T17082] dump_stack_lvl+0x151/0x1b7 [ 570.881991][T17080] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 570.882891][T17082] ? bfq_pos_tree_add_move+0x43e/0x43e [ 570.886133][T17080] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 570.888794][T17082] dump_stack+0x15/0x17 [ 570.888818][T17082] should_fail+0x3c0/0x510 [ 570.888835][T17082] __should_failslab+0x9f/0xe0 [ 570.888853][T17082] should_failslab+0x9/0x20 [ 570.888867][T17082] kmem_cache_alloc+0x4f/0x2f0 [ 570.888884][T17082] ? vm_area_dup+0x26/0x1d0 [ 570.901505][T17080] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 570.902594][T17082] vm_area_dup+0x26/0x1d0 [ 570.902620][T17082] dup_mmap+0x6b8/0xea0 [ 570.908424][T17080] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 570.917002][T17082] ? __delayed_free_task+0x20/0x20 [ 570.917033][T17082] ? mm_init+0x807/0x960 [ 570.917049][T17082] dup_mm+0x91/0x330 [ 570.926041][T17080] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 570.929846][T17082] copy_mm+0x108/0x1b0 [ 570.929871][T17082] copy_process+0x1295/0x3250 [ 570.929888][T17082] ? check_stack_object+0x117/0x130 [ 570.929912][T17082] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 570.929927][T17082] ? copy_clone_args_from_user+0x6f0/0x790 [ 570.935049][T17080] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 17:19:20 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x4000000000000000, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 570.938784][T17082] kernel_clone+0x22d/0x990 [ 570.938808][T17082] ? dup_mmap+0xea0/0xea0 [ 570.938823][T17082] ? create_io_thread+0x1e0/0x1e0 [ 570.938838][T17082] ? file_end_write+0x1b0/0x1b0 [ 570.938857][T17082] __x64_sys_clone3+0x375/0x3a0 [ 570.938873][T17082] ? __ia32_sys_clone+0x300/0x300 [ 570.949543][T17080] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 570.952242][T17082] ? ksys_write+0x25f/0x2c0 [ 570.972150][T17086] FAULT_INJECTION: forcing a failure. [ 570.972150][T17086] name failslab, interval 1, probability 0, space 0, times 0 [ 570.974462][T17082] ? debug_smp_processor_id+0x17/0x20 [ 571.083383][T17082] do_syscall_64+0x44/0xd0 [ 571.087635][T17082] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 571.093362][T17082] RIP: 0033:0x7fa07a6ec0d9 [ 571.097614][T17082] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 571.117055][T17082] RSP: 002b:00007fa07945f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 17:19:20 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0xf5ffffff00000000, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 17:19:20 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0xfbffffff00000000, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 17:19:20 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) 17:19:20 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x1c000) [ 571.125299][T17082] RAX: ffffffffffffffda RBX: 00007fa07a80bf80 RCX: 00007fa07a6ec0d9 [ 571.133114][T17082] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fa07945f050 [ 571.140925][T17082] RBP: 00007fa07945f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 571.148746][T17082] R10: 00007fa07945f050 R11: 0000000000000246 R12: 0000000000000058 [ 571.156545][T17082] R13: 00007ffd55a8aedf R14: 00007fa07945f300 R15: 0000000000022000 [ 571.164364][T17082] [ 571.176088][T17086] CPU: 1 PID: 17086 Comm: syz-executor.2 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 571.186163][T17086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 571.196056][T17086] Call Trace: [ 571.199180][T17086] [ 571.201956][T17086] dump_stack_lvl+0x151/0x1b7 [ 571.206472][T17086] ? bfq_pos_tree_add_move+0x43e/0x43e [ 571.211764][T17086] dump_stack+0x15/0x17 [ 571.215753][T17086] should_fail+0x3c0/0x510 [ 571.220004][T17086] __should_failslab+0x9f/0xe0 [ 571.224606][T17086] should_failslab+0x9/0x20 [ 571.228941][T17086] kmem_cache_alloc+0x4f/0x2f0 [ 571.233541][T17086] ? vm_area_dup+0x26/0x1d0 [ 571.237880][T17086] ? __kasan_check_read+0x11/0x20 [ 571.242744][T17086] vm_area_dup+0x26/0x1d0 [ 571.246912][T17086] dup_mmap+0x6b8/0xea0 [ 571.250905][T17086] ? __delayed_free_task+0x20/0x20 [ 571.255848][T17086] ? mm_init+0x807/0x960 [ 571.259928][T17086] dup_mm+0x91/0x330 [ 571.263665][T17086] copy_mm+0x108/0x1b0 [ 571.267565][T17086] copy_process+0x1295/0x3250 [ 571.272078][T17086] ? check_stack_object+0x117/0x130 [ 571.277112][T17086] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 571.282060][T17086] ? copy_clone_args_from_user+0x6f0/0x790 [ 571.287702][T17086] kernel_clone+0x22d/0x990 [ 571.292069][T17086] ? dup_mmap+0xea0/0xea0 [ 571.296206][T17086] ? create_io_thread+0x1e0/0x1e0 [ 571.301073][T17086] ? file_end_write+0x1b0/0x1b0 [ 571.305756][T17086] __x64_sys_clone3+0x375/0x3a0 [ 571.310450][T17086] ? __ia32_sys_clone+0x300/0x300 [ 571.315305][T17086] ? ksys_write+0x25f/0x2c0 [ 571.319642][T17086] ? debug_smp_processor_id+0x17/0x20 [ 571.324850][T17086] do_syscall_64+0x44/0xd0 [ 571.329101][T17086] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 571.334828][T17086] RIP: 0033:0x7f64a55310d9 [ 571.339083][T17086] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 571.358524][T17086] RSP: 002b:00007f64a42a4038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 571.366771][T17086] RAX: ffffffffffffffda RBX: 00007f64a5650f80 RCX: 00007f64a55310d9 17:19:20 executing program 2: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 70) 17:19:20 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 70) 17:19:20 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0xff0f010000000000, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 17:19:20 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x1c800) [ 571.374580][T17086] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007f64a42a4050 [ 571.382396][T17086] RBP: 00007f64a42a41d0 R08: 0000000000000000 R09: 0000000000000058 [ 571.390329][T17086] R10: 00007f64a42a4050 R11: 0000000000000246 R12: 0000000000000058 [ 571.398137][T17086] R13: 00007ffc9478d42f R14: 00007f64a42a4300 R15: 0000000000022000 [ 571.405952][T17086] [ 571.438968][T17103] FAULT_INJECTION: forcing a failure. [ 571.438968][T17103] name failslab, interval 1, probability 0, space 0, times 0 [ 571.456356][T17106] FAULT_INJECTION: forcing a failure. [ 571.456356][T17106] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 571.456359][T17103] CPU: 1 PID: 17103 Comm: syz-executor.0 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 571.456384][T17103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 571.456393][T17103] Call Trace: [ 571.492472][T17103] [ 571.495240][T17103] dump_stack_lvl+0x151/0x1b7 [ 571.499754][T17103] ? bfq_pos_tree_add_move+0x43e/0x43e [ 571.505053][T17103] dump_stack+0x15/0x17 [ 571.509056][T17103] should_fail+0x3c0/0x510 [ 571.513293][T17103] __should_failslab+0x9f/0xe0 [ 571.517892][T17103] should_failslab+0x9/0x20 [ 571.522235][T17103] kmem_cache_alloc+0x4f/0x2f0 [ 571.526830][T17103] ? anon_vma_clone+0xa1/0x4f0 [ 571.531429][T17103] anon_vma_clone+0xa1/0x4f0 [ 571.535859][T17103] anon_vma_fork+0x91/0x4f0 [ 571.540195][T17103] ? anon_vma_name+0x43/0x70 [ 571.544625][T17103] dup_mmap+0x750/0xea0 [ 571.548617][T17103] ? __delayed_free_task+0x20/0x20 [ 571.553563][T17103] ? mm_init+0x807/0x960 [ 571.557649][T17103] dup_mm+0x91/0x330 [ 571.561373][T17103] copy_mm+0x108/0x1b0 [ 571.565280][T17103] copy_process+0x1295/0x3250 [ 571.569889][T17103] ? check_stack_object+0x117/0x130 [ 571.574925][T17103] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 571.579871][T17103] ? copy_clone_args_from_user+0x6f0/0x790 [ 571.585511][T17103] kernel_clone+0x22d/0x990 [ 571.589850][T17103] ? dup_mmap+0xea0/0xea0 [ 571.594015][T17103] ? create_io_thread+0x1e0/0x1e0 [ 571.598877][T17103] ? file_end_write+0x1b0/0x1b0 [ 571.603564][T17103] __x64_sys_clone3+0x375/0x3a0 [ 571.608251][T17103] ? __ia32_sys_clone+0x300/0x300 [ 571.613113][T17103] ? ksys_write+0x25f/0x2c0 [ 571.617475][T17103] ? debug_smp_processor_id+0x17/0x20 [ 571.622659][T17103] do_syscall_64+0x44/0xd0 [ 571.626912][T17103] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 571.632674][T17103] RIP: 0033:0x7fa07a6ec0d9 [ 571.636893][T17103] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 571.656332][T17103] RSP: 002b:00007fa07945f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 571.664578][T17103] RAX: ffffffffffffffda RBX: 00007fa07a80bf80 RCX: 00007fa07a6ec0d9 [ 571.672389][T17103] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fa07945f050 [ 571.680196][T17103] RBP: 00007fa07945f1d0 R08: 0000000000000000 R09: 0000000000000058 17:19:20 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0xffffffff00000000, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 571.688011][T17103] R10: 00007fa07945f050 R11: 0000000000000246 R12: 0000000000000058 [ 571.695827][T17103] R13: 00007ffd55a8aedf R14: 00007fa07945f300 R15: 0000000000022000 [ 571.703726][T17103] [ 571.706615][T17106] CPU: 0 PID: 17106 Comm: syz-executor.2 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 571.716657][T17106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 571.726549][T17106] Call Trace: [ 571.729677][T17106] [ 571.732452][T17106] dump_stack_lvl+0x151/0x1b7 [ 571.736973][T17106] ? bfq_pos_tree_add_move+0x43e/0x43e [ 571.742259][T17106] dump_stack+0x15/0x17 [ 571.746253][T17106] should_fail+0x3c0/0x510 [ 571.750502][T17106] should_fail_alloc_page+0x58/0x70 [ 571.755535][T17106] __alloc_pages+0x1de/0x7c0 [ 571.759996][T17106] ? __count_vm_events+0x30/0x30 [ 571.764733][T17106] ? __this_cpu_preempt_check+0x13/0x20 [ 571.770216][T17106] ? __mod_node_page_state+0xac/0xf0 [ 571.775337][T17106] pte_alloc_one+0x73/0x1b0 [ 571.779685][T17106] ? pfn_modify_allowed+0x2e0/0x2e0 [ 571.784708][T17106] __pte_alloc+0x86/0x350 [ 571.788873][T17106] ? irqentry_exit+0x30/0x40 [ 571.793299][T17106] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 571.798943][T17106] ? free_pgtables+0x210/0x210 [ 571.803539][T17106] copy_pte_range+0x1b1f/0x20b0 [ 571.808229][T17106] ? __kunmap_atomic+0x80/0x80 [ 571.812826][T17106] ? __kasan_slab_alloc+0xc4/0xe0 [ 571.817686][T17106] ? __kasan_slab_alloc+0xb2/0xe0 [ 571.822554][T17106] ? kmem_cache_alloc+0x189/0x2f0 [ 571.827411][T17106] ? vm_area_dup+0x26/0x1d0 [ 571.831750][T17106] ? dup_mmap+0x6b8/0xea0 [ 571.835914][T17106] ? dup_mm+0x91/0x330 [ 571.839820][T17106] ? copy_mm+0x108/0x1b0 [ 571.843896][T17106] ? copy_process+0x1295/0x3250 [ 571.848594][T17106] ? kernel_clone+0x22d/0x990 [ 571.853098][T17106] ? __x64_sys_clone3+0x375/0x3a0 [ 571.857957][T17106] ? do_syscall_64+0x44/0xd0 [ 571.862388][T17106] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 571.868291][T17106] copy_page_range+0xc1e/0x1090 [ 571.872979][T17106] ? pfn_valid+0x1e0/0x1e0 [ 571.877235][T17106] dup_mmap+0x99f/0xea0 [ 571.881218][T17106] ? __delayed_free_task+0x20/0x20 [ 571.886174][T17106] ? mm_init+0x807/0x960 [ 571.890245][T17106] dup_mm+0x91/0x330 [ 571.893980][T17106] copy_mm+0x108/0x1b0 [ 571.897883][T17106] copy_process+0x1295/0x3250 [ 571.902396][T17106] ? check_stack_object+0x117/0x130 [ 571.907431][T17106] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 571.912380][T17106] ? copy_clone_args_from_user+0x6f0/0x790 [ 571.918017][T17106] kernel_clone+0x22d/0x990 [ 571.922360][T17106] ? dup_mmap+0xea0/0xea0 [ 571.926539][T17106] ? create_io_thread+0x1e0/0x1e0 [ 571.931383][T17106] ? file_end_write+0x1b0/0x1b0 [ 571.936073][T17106] __x64_sys_clone3+0x375/0x3a0 [ 571.940759][T17106] ? __ia32_sys_clone+0x300/0x300 [ 571.945620][T17106] ? ksys_write+0x25f/0x2c0 [ 571.949960][T17106] ? debug_smp_processor_id+0x17/0x20 [ 571.955166][T17106] do_syscall_64+0x44/0xd0 [ 571.959418][T17106] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 571.965145][T17106] RIP: 0033:0x7f64a55310d9 [ 571.969401][T17106] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 17:19:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xb4}, {0x0}, {&(0x7f0000002a80)=""/4096, 0xe14}], 0x3, 0x0, 0x4000000000000}}], 0x300, 0x0, 0x0) 17:19:21 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) 17:19:21 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x3}, 0x58) 17:19:21 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 71) 17:19:21 executing program 2: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 71) [ 571.988842][T17106] RSP: 002b:00007f64a42a4038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 571.997086][T17106] RAX: ffffffffffffffda RBX: 00007f64a5650f80 RCX: 00007f64a55310d9 [ 572.004896][T17106] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007f64a42a4050 [ 572.012708][T17106] RBP: 00007f64a42a41d0 R08: 0000000000000000 R09: 0000000000000058 [ 572.020517][T17106] R10: 00007f64a42a4050 R11: 0000000000000246 R12: 0000000000000058 [ 572.028331][T17106] R13: 00007ffc9478d42f R14: 00007f64a42a4300 R15: 0000000000022000 [ 572.036144][T17106] 17:19:21 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x1d800) 17:19:21 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x7}, 0x58) [ 572.084374][T17120] FAULT_INJECTION: forcing a failure. [ 572.084374][T17120] name failslab, interval 1, probability 0, space 0, times 0 [ 572.104645][T17120] CPU: 1 PID: 17120 Comm: syz-executor.0 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 572.109817][T17121] FAULT_INJECTION: forcing a failure. [ 572.109817][T17121] name failslab, interval 1, probability 0, space 0, times 0 [ 572.114722][T17120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 572.114741][T17120] Call Trace: [ 572.114747][T17120] [ 572.142929][T17120] dump_stack_lvl+0x151/0x1b7 [ 572.147440][T17120] ? bfq_pos_tree_add_move+0x43e/0x43e [ 572.152741][T17120] dump_stack+0x15/0x17 [ 572.156728][T17120] should_fail+0x3c0/0x510 [ 572.160980][T17120] __should_failslab+0x9f/0xe0 [ 572.165586][T17120] should_failslab+0x9/0x20 [ 572.169918][T17120] kmem_cache_alloc+0x4f/0x2f0 [ 572.174517][T17120] ? anon_vma_clone+0xa1/0x4f0 [ 572.179118][T17120] anon_vma_clone+0xa1/0x4f0 [ 572.183547][T17120] anon_vma_fork+0x91/0x4f0 [ 572.187883][T17120] ? anon_vma_name+0x43/0x70 [ 572.192333][T17120] dup_mmap+0x750/0xea0 [ 572.196308][T17120] ? __delayed_free_task+0x20/0x20 [ 572.201256][T17120] ? mm_init+0x807/0x960 [ 572.205350][T17120] dup_mm+0x91/0x330 [ 572.209063][T17120] copy_mm+0x108/0x1b0 [ 572.212967][T17120] copy_process+0x1295/0x3250 [ 572.217484][T17120] ? check_stack_object+0x117/0x130 [ 572.222514][T17120] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 572.227461][T17120] ? copy_clone_args_from_user+0x6f0/0x790 [ 572.233106][T17120] kernel_clone+0x22d/0x990 [ 572.237444][T17120] ? dup_mmap+0xea0/0xea0 [ 572.241610][T17120] ? create_io_thread+0x1e0/0x1e0 [ 572.246507][T17120] ? file_end_write+0x1b0/0x1b0 [ 572.251155][T17120] __x64_sys_clone3+0x375/0x3a0 [ 572.255842][T17120] ? __ia32_sys_clone+0x300/0x300 [ 572.260705][T17120] ? ksys_write+0x25f/0x2c0 [ 572.265042][T17120] ? debug_smp_processor_id+0x17/0x20 [ 572.270253][T17120] do_syscall_64+0x44/0xd0 [ 572.274502][T17120] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 572.280233][T17120] RIP: 0033:0x7fa07a6ec0d9 [ 572.284489][T17120] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 572.303926][T17120] RSP: 002b:00007fa07945f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 572.312168][T17120] RAX: ffffffffffffffda RBX: 00007fa07a80bf80 RCX: 00007fa07a6ec0d9 [ 572.319980][T17120] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fa07945f050 [ 572.327790][T17120] RBP: 00007fa07945f1d0 R08: 0000000000000000 R09: 0000000000000058 17:19:21 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) 17:19:21 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0xb}, 0x58) 17:19:21 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 72) [ 572.335602][T17120] R10: 00007fa07945f050 R11: 0000000000000246 R12: 0000000000000058 [ 572.343415][T17120] R13: 00007ffd55a8aedf R14: 00007fa07945f300 R15: 0000000000022000 [ 572.351314][T17120] [ 572.354177][T17121] CPU: 0 PID: 17121 Comm: syz-executor.2 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 572.364247][T17121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 572.374142][T17121] Call Trace: [ 572.377268][T17121] [ 572.380047][T17121] dump_stack_lvl+0x151/0x1b7 [ 572.384599][T17121] ? bfq_pos_tree_add_move+0x43e/0x43e [ 572.389853][T17121] dump_stack+0x15/0x17 [ 572.393844][T17121] should_fail+0x3c0/0x510 [ 572.398102][T17121] __should_failslab+0x9f/0xe0 [ 572.402695][T17121] should_failslab+0x9/0x20 [ 572.407032][T17121] kmem_cache_alloc+0x4f/0x2f0 [ 572.411639][T17121] ? anon_vma_clone+0xa1/0x4f0 [ 572.416237][T17121] anon_vma_clone+0xa1/0x4f0 [ 572.420664][T17121] anon_vma_fork+0x91/0x4f0 [ 572.425002][T17121] ? anon_vma_name+0x43/0x70 [ 572.429435][T17121] dup_mmap+0x750/0xea0 [ 572.432014][T17132] FAULT_INJECTION: forcing a failure. [ 572.432014][T17132] name failslab, interval 1, probability 0, space 0, times 0 [ 572.433420][T17121] ? __delayed_free_task+0x20/0x20 [ 572.433449][T17121] ? mm_init+0x807/0x960 [ 572.454858][T17121] dup_mm+0x91/0x330 [ 572.458590][T17121] copy_mm+0x108/0x1b0 [ 572.462497][T17121] copy_process+0x1295/0x3250 [ 572.467007][T17121] ? check_stack_object+0x117/0x130 [ 572.472044][T17121] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 572.476987][T17121] ? copy_clone_args_from_user+0x6f0/0x790 [ 572.482628][T17121] kernel_clone+0x22d/0x990 [ 572.486969][T17121] ? dup_mmap+0xea0/0xea0 [ 572.491135][T17121] ? create_io_thread+0x1e0/0x1e0 [ 572.495995][T17121] ? file_end_write+0x1b0/0x1b0 [ 572.500771][T17121] __x64_sys_clone3+0x375/0x3a0 [ 572.505454][T17121] ? __ia32_sys_clone+0x300/0x300 [ 572.510315][T17121] ? ksys_write+0x25f/0x2c0 [ 572.514662][T17121] ? debug_smp_processor_id+0x17/0x20 [ 572.519861][T17121] do_syscall_64+0x44/0xd0 [ 572.524115][T17121] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 572.529847][T17121] RIP: 0033:0x7f64a55310d9 [ 572.534095][T17121] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 572.553543][T17121] RSP: 002b:00007f64a42a4038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 572.561780][T17121] RAX: ffffffffffffffda RBX: 00007f64a5650f80 RCX: 00007f64a55310d9 [ 572.569592][T17121] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007f64a42a4050 [ 572.577403][T17121] RBP: 00007f64a42a41d0 R08: 0000000000000000 R09: 0000000000000058 [ 572.585214][T17121] R10: 00007f64a42a4050 R11: 0000000000000246 R12: 0000000000000058 [ 572.593025][T17121] R13: 00007ffc9478d42f R14: 00007f64a42a4300 R15: 0000000000022000 [ 572.600841][T17121] [ 572.613217][T17132] CPU: 0 PID: 17132 Comm: syz-executor.0 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 572.623296][T17132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 572.633193][T17132] Call Trace: 17:19:22 executing program 2: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 72) 17:19:22 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) [ 572.636313][T17132] [ 572.639090][T17132] dump_stack_lvl+0x151/0x1b7 [ 572.643606][T17132] ? bfq_pos_tree_add_move+0x43e/0x43e [ 572.648898][T17132] dump_stack+0x15/0x17 [ 572.652894][T17132] should_fail+0x3c0/0x510 [ 572.657155][T17132] __should_failslab+0x9f/0xe0 [ 572.661751][T17132] should_failslab+0x9/0x20 [ 572.664539][T17135] FAULT_INJECTION: forcing a failure. [ 572.664539][T17135] name failslab, interval 1, probability 0, space 0, times 0 [ 572.666078][T17132] kmem_cache_alloc+0x4f/0x2f0 [ 572.666106][T17132] ? vm_area_dup+0x26/0x1d0 [ 572.687434][T17132] vm_area_dup+0x26/0x1d0 [ 572.691598][T17132] dup_mmap+0x6b8/0xea0 [ 572.695591][T17132] ? __delayed_free_task+0x20/0x20 [ 572.700534][T17132] ? mm_init+0x807/0x960 [ 572.704616][T17132] dup_mm+0x91/0x330 [ 572.708349][T17132] copy_mm+0x108/0x1b0 [ 572.712252][T17132] copy_process+0x1295/0x3250 [ 572.716766][T17132] ? check_stack_object+0x117/0x130 [ 572.721800][T17132] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 572.726745][T17132] ? copy_clone_args_from_user+0x6f0/0x790 [ 572.732388][T17132] kernel_clone+0x22d/0x990 [ 572.736729][T17132] ? dup_mmap+0xea0/0xea0 [ 572.740899][T17132] ? create_io_thread+0x1e0/0x1e0 [ 572.745757][T17132] ? file_end_write+0x1b0/0x1b0 [ 572.750445][T17132] __x64_sys_clone3+0x375/0x3a0 [ 572.755129][T17132] ? __ia32_sys_clone+0x300/0x300 [ 572.759991][T17132] ? ksys_write+0x25f/0x2c0 [ 572.764334][T17132] ? debug_smp_processor_id+0x17/0x20 [ 572.769537][T17132] do_syscall_64+0x44/0xd0 [ 572.773789][T17132] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 572.779514][T17132] RIP: 0033:0x7fa07a6ec0d9 [ 572.783774][T17132] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 572.803211][T17132] RSP: 002b:00007fa07945f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 572.811455][T17132] RAX: ffffffffffffffda RBX: 00007fa07a80bf80 RCX: 00007fa07a6ec0d9 [ 572.819265][T17132] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fa07945f050 [ 572.827079][T17132] RBP: 00007fa07945f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 572.834890][T17132] R10: 00007fa07945f050 R11: 0000000000000246 R12: 0000000000000058 [ 572.842698][T17132] R13: 00007ffd55a8aedf R14: 00007fa07945f300 R15: 0000000000022000 [ 572.850513][T17132] [ 572.853374][T17135] CPU: 1 PID: 17135 Comm: syz-executor.2 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 572.863447][T17135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 572.873338][T17135] Call Trace: [ 572.876458][T17135] [ 572.879237][T17135] dump_stack_lvl+0x151/0x1b7 [ 572.883752][T17135] ? bfq_pos_tree_add_move+0x43e/0x43e [ 572.889050][T17135] dump_stack+0x15/0x17 [ 572.893043][T17135] should_fail+0x3c0/0x510 [ 572.897290][T17135] __should_failslab+0x9f/0xe0 [ 572.901996][T17135] should_failslab+0x9/0x20 [ 572.906333][T17135] kmem_cache_alloc+0x4f/0x2f0 [ 572.910943][T17135] ? anon_vma_clone+0xa1/0x4f0 [ 572.915550][T17135] anon_vma_clone+0xa1/0x4f0 [ 572.919959][T17135] anon_vma_fork+0x91/0x4f0 [ 572.924298][T17135] ? anon_vma_name+0x43/0x70 [ 572.928725][T17135] dup_mmap+0x750/0xea0 [ 572.932722][T17135] ? __delayed_free_task+0x20/0x20 [ 572.937665][T17135] ? mm_init+0x807/0x960 [ 572.941748][T17135] dup_mm+0x91/0x330 [ 572.945477][T17135] copy_mm+0x108/0x1b0 [ 572.949468][T17135] copy_process+0x1295/0x3250 [ 572.954093][T17135] ? check_stack_object+0x117/0x130 [ 572.959128][T17135] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 572.964192][T17135] ? copy_clone_args_from_user+0x6f0/0x790 [ 572.969834][T17135] kernel_clone+0x22d/0x990 [ 572.974173][T17135] ? dup_mmap+0xea0/0xea0 [ 572.978339][T17135] ? create_io_thread+0x1e0/0x1e0 [ 572.983198][T17135] ? file_end_write+0x1b0/0x1b0 [ 572.987887][T17135] __x64_sys_clone3+0x375/0x3a0 [ 572.992573][T17135] ? __ia32_sys_clone+0x300/0x300 [ 572.997520][T17135] ? ksys_write+0x25f/0x2c0 [ 573.001861][T17135] ? debug_smp_processor_id+0x17/0x20 [ 573.007087][T17135] do_syscall_64+0x44/0xd0 [ 573.011319][T17135] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 573.017049][T17135] RIP: 0033:0x7f64a55310d9 [ 573.021310][T17135] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 573.040742][T17135] RSP: 002b:00007f64a42a4038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 573.048991][T17135] RAX: ffffffffffffffda RBX: 00007f64a5650f80 RCX: 00007f64a55310d9 [ 573.056805][T17135] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007f64a42a4050 [ 573.064607][T17135] RBP: 00007f64a42a41d0 R08: 0000000000000000 R09: 0000000000000058 [ 573.072436][T17135] R10: 00007f64a42a4050 R11: 0000000000000246 R12: 0000000000000058 [ 573.080232][T17135] R13: 00007ffc9478d42f R14: 00007f64a42a4300 R15: 0000000000022000 17:19:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xb4}, {0x0}, {&(0x7f0000002a80)=""/4096, 0xe14}], 0x3, 0x0, 0x20000000000000}}], 0x300, 0x0, 0x0) 17:19:22 executing program 5: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x7f1282a830a8) 17:19:22 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x1dfd1) 17:19:22 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 73) [ 573.088043][T17135] [ 573.124092][T17146] FAULT_INJECTION: forcing a failure. [ 573.124092][T17146] name failslab, interval 1, probability 0, space 0, times 0 [ 573.139123][T17146] CPU: 0 PID: 17146 Comm: syz-executor.0 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 573.149196][T17146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 573.159092][T17146] Call Trace: [ 573.162209][T17146] [ 573.164987][T17146] dump_stack_lvl+0x151/0x1b7 [ 573.169503][T17146] ? bfq_pos_tree_add_move+0x43e/0x43e [ 573.174821][T17146] dump_stack+0x15/0x17 [ 573.178796][T17146] should_fail+0x3c0/0x510 [ 573.183051][T17146] __should_failslab+0x9f/0xe0 [ 573.187642][T17146] should_failslab+0x9/0x20 [ 573.191981][T17146] kmem_cache_alloc+0x4f/0x2f0 [ 573.196586][T17146] ? anon_vma_fork+0x1b9/0x4f0 [ 573.201185][T17146] anon_vma_fork+0x1b9/0x4f0 [ 573.205609][T17146] dup_mmap+0x750/0xea0 [ 573.209612][T17146] ? __delayed_free_task+0x20/0x20 [ 573.214548][T17146] ? mm_init+0x807/0x960 [ 573.218273][T17151] FAULT_INJECTION: forcing a failure. [ 573.218273][T17151] name failslab, interval 1, probability 0, space 0, times 0 [ 573.218623][T17146] dup_mm+0x91/0x330 [ 573.234781][T17146] copy_mm+0x108/0x1b0 [ 573.238765][T17146] copy_process+0x1295/0x3250 [ 573.243278][T17146] ? check_stack_object+0x117/0x130 [ 573.248309][T17146] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 573.253256][T17146] ? copy_clone_args_from_user+0x6f0/0x790 [ 573.258896][T17146] kernel_clone+0x22d/0x990 [ 573.263235][T17146] ? dup_mmap+0xea0/0xea0 [ 573.267404][T17146] ? create_io_thread+0x1e0/0x1e0 [ 573.272261][T17146] ? file_end_write+0x1b0/0x1b0 [ 573.276952][T17146] __x64_sys_clone3+0x375/0x3a0 [ 573.281634][T17146] ? __ia32_sys_clone+0x300/0x300 [ 573.286495][T17146] ? ksys_write+0x25f/0x2c0 [ 573.290927][T17146] ? debug_smp_processor_id+0x17/0x20 [ 573.296128][T17146] do_syscall_64+0x44/0xd0 [ 573.300384][T17146] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 573.306108][T17146] RIP: 0033:0x7fa07a6ec0d9 [ 573.310364][T17146] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 573.329807][T17146] RSP: 002b:00007fa07945f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 573.338052][T17146] RAX: ffffffffffffffda RBX: 00007fa07a80bf80 RCX: 00007fa07a6ec0d9 [ 573.345866][T17146] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fa07945f050 [ 573.353673][T17146] RBP: 00007fa07945f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 573.361483][T17146] R10: 00007fa07945f050 R11: 0000000000000246 R12: 0000000000000058 17:19:22 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x3, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4004440) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @empty}, 0x44, r4}) r5 = gettid() r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001ac0)=@newtaction={0x2a74, 0x30, 0x300, 0x70bd25, 0x25dfdbfc, {}, [{0xcc, 0x1, [@m_csum={0xc8, 0x3, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x7, 0x0, 0xffff, 0x5}, 0x44}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x80000001, 0x101, 0x0, 0x83, 0xff}, 0x25}}]}, {0x62, 0x6, "52e1f94a968fadc55a3cfe2f62eeb9245740be60539ceddb47a86698d2cdecdc16d994de1e7a7205673746de966020fabcabf679c31017996447f6b9e6807b40641552c963ccfffe095891305c52d697336e70cc3ea454b6450052966f3e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, {0x2b4, 0x1, [@m_connmark={0xe4, 0x10, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9a, 0x3a, 0x10000000, 0xb9, 0x3ff}, 0x1f}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1000, 0x10001, 0x7, 0x9, 0x401}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x40, 0x1, 0x2, 0x1, 0x3}, 0xfffc}}]}, {0x5f, 0x6, "d6340941ae7603c2069f92a8578a6c5043a4f81962dd19c0158ef2dbb11ca744fbd1559b2edfb84bfccb5617b427fd740b92f30c18e31129a9c9a81767b317d816b3458bd68ffdb14e5a4ced8fd2f01d3f164f2724486219b0a63f"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mirred={0x144, 0x3, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0xcd3, 0x5, 0x401, 0x2}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5ed3, 0x3, 0xffffffffffffffff, 0x4, 0xb589}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x1000, 0x2, 0x8000, 0x3}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x200, 0x2, 0x0, 0xfff, 0x2}, 0x1, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3cbad03a, 0x5, 0x10000000, 0x6, 0x6}, 0x3, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x5, 0x0, 0x7, 0x7f}, 0x1, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x401, 0x7, 0x0, 0x2, 0x10000}, 0x1, r4}}]}, {0x37, 0x6, "9764a5531edd15a9bc2ca70988984f66805563ee34381ae10e86ef9e969f9e2e384a68635b2c530f8e9e43bcf14b77266b9e25"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_xt={0x88, 0x2, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}]}, {0x56, 0x6, "9345bb66e6653b9fb06bdff44831c3de9a7c371f7205b0ce0fa8298aa6a2e02fb0483434a28b99e040f27af72f4fa3af9da9d11c1a2233fdd43b0bb65969124eac2b8bfd4367960310945c57797590f438ac"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, {0x26e0, 0x1, [@m_ipt={0x48, 0x4, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}]}, {0x17, 0x6, "c65a92b9baea6174ca1f051fc7e7276883d444"}, {0xc}, {0xc, 0x8, {0x5, 0x3}}}}, @m_tunnel_key={0x198, 0x1f, 0x0, 0x0, {{0xf}, {0x88, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast1}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x9, 0x0}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x4, 0x0, 0x1, 0x3ff}, 0x2}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0xca}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x4, 0x4, 0x1f, 0x8}, 0x1}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0xf0}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x1}]}, {0xe2, 0x6, "75676eda69af9572e72706bafb211478a57a9e59db030115724fc15bd0c20f8302b6835beba447f2404021d9489165d67b776f2f34e1607b4deb21e19a37b984e99c8b52238d85de03a8f6c880ab25d4d7be4918e09137f05fffa3a7ab9077b1d76a9f2866d5218f69b02dd66b1cbe2203ede17b25933300ce45a3510308620aff206d9219c93a73c99b24f90e51814ec2b988c196896002730cdfdcfa9d9b7c5bdaba9d284b9e8baa3f74832eea887abce462ccce389dfcc90c364378fea60c118b9caca93004b2be70ffbadcdbbbeba4ab171a3cb36b397ce74709199a"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_ctinfo={0xe8, 0xd, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x6, 0x80000000, 0x7, 0x5a2f3ff8, 0x3}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xffff}]}, {0x9c, 0x6, "1425952e8e309c9d4847f7bf87e87e40c78ca6aba1ebc7f2fe216fa6314bdb527ef257c8d4e7e824c67773eb31f9bb1f900bf0dd7a4ddc8ae43a2d6c7109c00e7968c9f98ad10338885d1e20af2f8c1981a6a057186061556dd1633d39708891c166bde1861425c0a0d3831f9b3ca0db9fa5fc550387bab89f0fdce2a607cb96ec01919421a00fe35f9741583c018cf0a69048193b944ae0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x6}}}}, @m_bpf={0x11c, 0xe, 0x0, 0x0, {{0x8}, {0x70, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x9, 0xffffffffffffffff}}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1ff, 0x6aa6fdba, 0x6, 0x7, 0x45000000}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x8000, 0x5, 0x20000000, 0x5}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x85, 0x6, "2165608932a49d71783d22480111c26a0855292c6ea378daa3fcbe5ecb9aff96bb4734e525a872ee5fb7aeea55cac664702b6d124ae6cc2fe7079288b3f1baa093364939ddeefb14e95ca54acfa3eead958399b0f0cae73ce078613b483d0101667833641088ed4a9062c0514dfdfeac52e0faf08bce1e07ad07c7581491e9048c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x6}}}}, @m_xt={0x228, 0x2, 0x0, 0x0, {{0x7}, {0x190, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xd3, 0x6, {0x6, 'filter\x00', 0x1, 0x1ff, "96c546792e882a2248e67e93d3164fc76bfc2b80a1334844e93342ccfe744209b9b13ff71ff5e21c77c25003b4318192f113849f9e30f082e78b09a89aebc1f7316c7fb2d9e93a4871566a15e5636f1c0421a2ce5be6d07708f8881e240f6e741eda136860b4d105e85d31d00d8066dd776f4c6c04c744ce749f549d922441021145b3205e74bc5d5f9e8fce9809f8e2ebaa4393aaeb86206ba86af618c21f6807de2a0292fa99d373"}}, @TCA_IPT_TARG={0x9e, 0x6, {0x2, 'nat\x00', 0x3f, 0x2, "242fb2b2b1136ee9869031dd7f993524141466b3474ccbebf0e82c90f6a3a387f621fe6a0b25e172358936a72b0e76d5074a56ab4dddbe072dba9368d8169dc397f195a60107b1811f8909066cca9df4875b14acac448525ea189755ee8cd4652a4a1cd01b03c249f2cb225c2fbcc1ee4598e83f"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x68}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}]}, {0x74, 0x6, "f5f20ddff369fe3343dcaa8cbb0733721a6d9e93564959e83bddab140b3f64dabc4c8ff60da519a3cab7f3399a8967d1bb9be7dddafbc9992d3e7a5b04d1c7d586bffdee02fc0f070cba52f9f3ad154ce9d317f5c4e3830df2d720ea020675e54ac6e0be7ce5e3483b3ad3f48ca3a114"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_ife={0x1080, 0xb, 0x0, 0x0, {{0x8}, {0x58, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x4, 0x1, 0x7, 0x7}, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0x401, 0x20000000, 0x101, 0x3}, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0x7, 0xffffffffffffffff, 0x3f, 0x8}}}]}, {0x1004, 0x6, "88c69815585c7ee665c64b3783d09e6806b85ea8cdd54c49e44d1e280502ab1ece68e4a36385ee35acc78484a0bec1076f456d11f56b7cd7571b957c7033b94a1fed4c02a81d614b3fc5166fd69a1bccc81badb6f0c8a2174a64d810a6dbfe31f305c9a42d00b5a50f1dd48db1b8061582030efb8973eebd5a8efce80bc8568407891d09e5993b6dca1d8902fe6b37e9493afaa87ea410f80392ede24d0cda4832247c1e80fb4294cd5e3493197731818342f9b886074c7071cdff691f5664751f4ae14a9f8dfe13fef9c4fb97dfd64b6f03a2682434278aa2a3a032c15a7aec1933b03af28664b7c74e647d6e01460f8234227e8a7a4382662e3fd00e27e337acabb4ffd13674ddc1e6a4ea4a1e992fd4e4f555d747a217cfa54719a2d94ea7d36df66c5be8a1bf73e813517b519939ae915f91e70c71bc7bbc9cf47992cba1fbd943a055d11508925e4f0896ddd24da16947353d86c976567e2af12b222911d96e355181a7bbdcb1d4cbaacb41c2db0beecf62d16c7b10a9e0e5aa1470b6f5187f13160844c5e8b108a448d1dfe04b49eb0d2afcbcba2670d1936f4cc44bf5652f1d42e4b8770584a734029cb08b41bd38c0579323f91bb539b178dcd19b9601b03362af61763028c62fdd3983f345283317b866a3513d73fd653598acb51c5d93f65eda5b5b7bd2f6fb41f07b523374cca2375857a1103a46f9f2285f53ab89a28506b6e5865c3a8382aa439b1b9c2253a6ba07c2370396979c128a0b57f4a62e93557517929a6a24a89a66d55f197ef7c2ba38211a4822e8a5937801cac7ef637ee54d0e5ef34f06449eed99a821676ed515e9e8762b9179e624aefa8f5a143a7fa091bb6c2e3ca2b6adc1c98b30ca37160327cdf09f29d0fdd1ac77609144ef9233e7bfa227d82d648568d577253b85910881851c1d034784147c8b2a003996edb5485e08f9eb864069096790141113e60e0a86d0c2695db7dadd9be27e4786dded5848c808388ac66231e3e71e990facbdd59d1fd1bf25ae3ba58f08fbce463dfd51a2111b5afcff63a1d095ff56573b7402ea535e0ec0d9494dcbc38458f0eb23329beb6f6e6ed913695ae0d6ed825b0b0e0355f7293aeca201a8113be7049e454806d635fd5a9233f16157c6f84997b78a9ca1353d0b576af4e0c1794d2f32b4409cd9e19686651494be114cfb12e1085f9090c5218fd652c6d0d155cc1b6da74c5ec53712366330424729633e098f57e734d33cd483bb59870f705e9ec1a371ebc88c63873c21782245b00e23a3817a3f587b1de37422de18347773fe7e26e6da968eae7b524f1bf24ed8cb6a81cb2b3b11d45e7815786b8c33796a82466567b5c56281963507821ca076ee6d16e8ae59d35971e91d34dbd2e8d8009dac26b5029b85d1d9636e801a86db52e6dc703aba0cc881edee6c4c28edc5fb2f739a1f2d79f0d80642c276f9d80c80bd18487e462bb6a1a920e7b6e504f0e18621e40a6d85337ebe58172526f4ed3a6effbc05e99943493363902bdfa77db459eea77112e517742c384c48e546133645f0668a0be2ad13288f798e73e7699aee811998ede5edcb49a4391aeee16df3a873d6756a83625cceae48ee3c993cd092d25f046e7ace3d617d1e212ee629ef56607bdc930510af4c2dcf9a7aec0da071a188cf889e4bca2428130f77c056dee2d49410ce50c21f286277fe1581a8ed05e9215de7a84010002fc33935186443a299498c34a6658b519306b4f97c32bbdeff4ad06dfbfb319f4ea39db04a0d13862eb4a73a1eb889185d77ea0b458615e8d491b898c206b3072e5876b3b902d70f1582a4a5fd3b5936bd1da011dc5753069a05a0c60e34ef2c7082189acd228af132dfbaa78d56f3a36c93bcb52eefbc80acfc0ea7fab59e4633c732fb75a7d30c9563aa5c6644263405819a13a9ca6c2730139925f7511c8202a3e2e853bd571d498d279c42dd160535463ac3001c54f747b81f7b40b95fb761e23a4f946035192989e9a00faf0b48b8e71202f05f761f8815bb796ce7a636b24164588c3909b353a9e85f19646d5afb7bd9df481523fa4f7ce06e9488d5568b93b9453fe5e7f695400891bae41494bc884a49a6760204460b3455c10aecc8730c28faaa8b555e60798a29e819dfa6c12cbbd227be0c92ac158e3ec8cd34dc67786939e410f096b300cdca6c217fc97f99e4aa2d23851d747c376a087fd28f3d40394188cac46aef485f74207f1d0d614b550172cdc03617e7e1562d5e2f5611edae439181d698f1e6b61a6f7ba38db27fef20c171d647a6b491234c3e4a68f77c7b732029888470ae59c5db98fa3c69b888e7d83544780253fbacd0c09c6f1c5b6c2fb03a8b54b44ca2b9bf89ecc3488cc1e2cc48b924c19a9cceb883db449500cd581627a4678613219e26800f36af40b44cc226288accec96ce4ce4ad1293156abb4d3cbe96d1c5e664d0f157839e7ad053820f77b9569aaf8260f84591b2deb6307396cd6380239e3a6670571a980d8715074afdf7e72f022874b33d07b9d0a37c2806a0e127bde3df00e7f59753668eebe2d116dab710e7750a7d21ae8db9cffd0e71c61f6701b1decf93d06695f23ab57343a8c4b5bfb55b6f511e6bb0fefb9f0e8654efebbf22ff0fb6768dcdfcf8f3c9a769ab2aaa7f78212383d1e52932a8229880ecc94b5a8e5fa6740885978d58ca7430228a117567f9cac56bbf8252560a63277758bcfb8902c3630903d9119b1e6cbb3850c2f39c6e5ecf1f8a7a883789a0544e886bf60212deb8e1c62f147723824ed57a203818f0420212da9129080a19437218f388d9ac63eae359ced86ad8a234054ff041261d30a8b866d9c964b4b729a0433f3abe326c41fe79c5e0a790eab655783c9c0a220ca6095bfc66134f10fd50a1d08e1b8ce20d388293b0eb924b01f05d072b7867d53e812a0daccdd1c9c8ac1bc0a2a25a1e12de36d802767411760c2a9c5672e8bc5c4472beece440c9a1083e3fe99e754ef8e0976cd1235e1b1900047afdeacd4392de053735dd04ba3d1dabf774eb99a0ec036acad360cca8b6f56801b5620e3235b249bfd815228fdf206bea8595e716d726b61483c523cb993f5f391328e7321975f6b11ca31cf505ac1e07dd621811eb829e799b49a960e7fb03198f43415d47af5d41a334a1ac06bf83d4e514b1eb7f6cca6279023e4e9245c613a0589948d2063fc6fd89a564f6e851f1aa01b009f4f04528bb96ad6edcea3bdf0ef3420db0d6fe471ef6ce34513d689adac38b3143554a10482839779bca3d379fdb0039f4a14eec4ffe2850e1d2b6436cfc69be59dcfbfb612edc48831e46ca43039aa0b0c5bced09750d4174f62fc8d7bce33fd7f452fad4f42f3dc0893840685e51b255b2b13ae9f92afffc40bde85afed2c2dbe545932317af1a94f52e926d7e69bb4f7abc3ac7e2d192c71df719df85f6de98cba583744c59cb5394e02145f4e706818825b1b4924c77ba85fe813922de5ebfe772efa5e64a86a02f569e80ff859be3d1abd122bee22a4cb1465da8efe9b665cd47ea996da8d2ce91d0f93bdedf77563eef1db8846565c5ea02c19ca31cfd51d6df50611cf6609c46ab458e18607f297e6bcd5f453602bd645632e220d2fbef770613bf42791d09cb5da1b3ca068d441de7731952427deab3bdc6114c3eea1d4d6f275727a05c5631c3f76a892c1277bfb6c56015e605e9c65e8089756fdb9e2a8a9d94995fc397ed32ccd3f9c9894933f0b80d23052d8e615ac65cf4405febd84661267b452bef5a47e960c1d4104406f3f160f4e177c6afb6d134c79c7b9a8552beb03bf3479ff1b94e8cc84252230a899168b515fbd491d3c9bfbb42e0e619f4f6d513ad6578be00fc6b0666713dc51fa8cca9a188a44b26cb89199f729e4d9b7f31ef66981fb5b2fcc0b6211f69ae8c1f00bcfd87f23a7b558f23f5b79d0c5372e3dc4fffa5242315ea84d535734887fcf47e12fb0cbb4d89a7a62a4c02c7f8061708a61efdc07de575247d1aab4cb9a94760ee80dc8d9f42b564b585fa0e80617557a1d5c3b0c75e1faa9511f05c146db0fc8c9745a8226df81a932002bce7725c0d83c2f025a66c74cb8320b29d72a99462cdb000ff880c905f2b0ddf934339e1479ba0f7cc99f9a25c2e350039c595604ecc26fea59db3e5ca802ded400154203d3d64960d79f9d4cf674d4057735b34bd7d683dcfba900a6f081a4675055d8697f3d6840cd23b27116d98929754deef0012aaa536a65afb3ec84157825942bf7bc4357ed2de9449f3d5eeec5b88626102822db516cf9282b795b9ea0e32006b5a88501bd25bc149762a773fc2be08052f540984a4a65c38c9e2951ce5372ce33f05b22b6359cd882d420d1dad981bc4f933f3d0441e25d45fdae3e7f2375317ef32bd11ad87db2195db0cc4e92c39e5dabd67bfc57263013ba8e6e7d0ad768aa75c28ddf0edb186589abc9f6e8a47b8930f40264757888c46c77297b8b031eb0d80d77c5da03bd796ec6f2bc7075c8b23c58554b592aa45e1474b836f601cbd00ab2358c29d083d12dcf7eda40661690743272af48e026f43ab0678cbf407f493811456709c8e89d4f9514d372e12808bc58238ded32e3068705871d8f97a59342b0204ed20071ccf4e0d484a74ba37a1f38be534a3135be66e70743f1a399e554a211f6f645c5ac409b8c473a09ab680555ce2ef9c1a7c8c56109034b9941cb394cdc885a011639e3a205a3b8d04d684c8a9fe522ee3e728a0e15bb82dca0a2b9252a88240dedbf67f43917311380f147724f78c0216ff164c7918185c101635da628ce3db5ce7d7701b2f6fcda1f59ca269e42b7a9558b1a59d849875a1505eb20d00a42dcdac0a6072be5062f891da8d5c651ca0569f8d1ce77eac287db42cf888361b13b155daf238a897dd11194998f0cb7b2f9623d033dfb4d516626fecc9344cd06002cef2635da4ea75896ac2448113de7d2cedb5e2d8e590700f591c2cbc4ed1d8758b5f9d7092366d5ac9265b2aa7a2a105d19cfd3c4d499e94f7740589985f2e78e2c333afc7e89a4ef71bbd88f1da006fcb62de502dc9d12632a957d969b52bc32be924e9a8e412a8942e5d3a046edf9c4f2ce091a2b37e4d7f9aba467cdce678d6bd178c3ce41a8ecd8c5948697814c29570af6951c3747d92986593f7524d4c8c298d8b3bd721613f6a3f5f0632401326ca6c8d00669cb0e1fa4ececd3ef902c39abfc24a1db33a9b835282511ec9022d87ed4864f6a37ae8c3979f0aecf7c1eb7b99e1d0aae60e577194b84da97f15edfec1da08550d67b8757275e0b92cb6eebe8dd34e3e1dcef67f2cf07ba459ed499665fb16551b6097eb9ac0dfb41954c3da240ea0ecedfc331fa18072e17c1e57d2ab20e0f2532b5b7449b4ec45abde18ae94ebe053ab079b3b9b307e26629dbb8dcaab7bbcf08ee2782f14f88d688a44c5b42c885bdb51b2f72b8fb83ce35c2c9b4295c1a25f6cddbf3062272476fb6b9e3928dc166db5ee7326a07b20f0425e452e8ccb561db9e318ae78b8ced46f879f2973ddf25d2bfee7f44883946ccad9e3391ec0f56b3d14d43807e4a743a3b160eac7c98e6a7234a9a44d20fb21e12a637b1b7a77e7bd652ed6fa0492fda5f8accb7fbc762eb38e5fe88f2b0c02f6d737f5b2fa2cbafc4332d4209b290567ec5d19f04ad6f702035bde57a15a4f8468945b116bc3e06d2da88c2d94a87206f8aa08244c794dad3b2548ffdd7f0bb9e2dfc1a2bac869a2292ca7d89b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x4, 0x4}}}}, @m_sample={0x1050, 0x17, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x7}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x4}]}, {0x1004, 0x6, "2a489869da86727aab652af4fcbeffa998d20592f4f57466a514d4a1a09f52b83ea0d166f0573cae188fd455c15dfdae5798b4fecce202d39eff6c720e3c76c34393cf92f28d7b47dbea0defef21290673f89f42f0b7ff9506b54abf763f7319549316a7161c4230f3c04bf4f3e0e179598f2065c331891c8efa678291da52dc3c2c3159ea1a57e686d8fd522aac959b5d121e2756a62e1efe7cf17f2ade4c5eab9f8ee6f26c1af0f33571d2c452ebd441f7357bc1924ca0d7c113bde4f5811b9b80d0ba2413a8c525bde2e76945cf5bd3ca8d3c1fdc87ddc6ac9a2155ea8c5bcc72c7f61b01c3b150dd46ebe8daf80ccb7d2f63353e86aaf49e54105e265bddaf094066eaecc71f5a579cdcedd61db0a742f62d54bbda1d8246a0c6247ae562475460d03e6fb264f5878d04b5992dbb438365869278b31800ca8700e47a9ae00a8333f6938e84613f7bbf9cd43560ecbfaf3208bacea4e9fdca5e338f6a411948d23dcdcebb0e1d4ee9cdf8382e0e4888dc32401af30fa05bf2a8403c76744e4332725a838426f45aa2ce9f8a7582967fee8c1c21b3a8c259bb81a19f4aa7b77d88759a43d01e16dc64aac77a2f704904a34c5965aee349a381955961ef5eeecb192f2a2ebbbf079d1bf4e7dd801e878287ddeaab6fe99fc82819c13f0aa01ee03b5ee94e8ba0684bf355274eea93fe61c51ccf1a677a115e8c028eeac55a03c6ad5df106ef07f04c1dcbfce8faaceeafa8534bbaa2aacc8cd04a01f21df3f87f568f847615b2913876ab10ae26590d93d8734c3ed45ff8bf46ae8747a80fe81083aa03204f711e4e6ea83b7a450b4c4fc64d3fcb60bd818ad2b5a975dafd8a3457180d8f2c494f4f27be5af28e14d9ec4e6432c34222b332238b6e988ae74de85a43239757a127303047699e3a25cce6f7303f3c8657c4f3c615dcdb0038c6294f807faa9cfb84ad67aa71c2c9511bb01dca6552426624cb27232007ee49c5dd1b4a6276a8dfd60aef76893a4369b87deb7ef25bb7d74d01049e85c22f5d5ab3b4e1c80403557078c57b436dd5a6fd30ff62b48f7daa9ee43c7380059b493e9ef0ab0e3c35576e47cf5fc6e0d6999bfafc291e835390deb260dbb0f16a15486e8062785e6268cf896eb7b346c179c6c20d93ae61fef2783ed39701fa3a8126805bce8e4d0286b0d6063196623fb5da6540e7df41a7fa65bda27e0762d523bb56902d372c938018d927afa380928ba5cd2b846dc86a4acb96f0ede3d5d7f15b2d4d1ea2a276a7173abf274007c6462bd04ee1d59b4a6fa2f2b7302ce3381b305019eec4cdc1e89640b263e9113cedf8765c583a4e4e86f84e0b9b39db04e39aeeedea98216060b40e981f5b4f1636d2a20f5b655585493bc8b230b3ffae91acebf045027681ab31f0d0a428fa44c6dd4940d1027cadc5af2cf9671a8d158c2485a699a585ae9386028f04eeaf76e54ee2ea4910bd1f7ffbefdd29c1b63fc465b4292657da435a2df9a647b83010f198d04c6a0ee7480230f8a22ff7bee6e0590121f6e13901663e6c93fae6ec8e39e3eb9c2be9f5c814e43dd8941c5bbc427b88c232edcf48984783889f67010ec4d263a9dbe7dad65f0ce82328a2c0738b0bfb5caffb827bfc834242009c092fe58434a1995d76026e665de9476ee917ae56ae7a5101250c69be109af3aa71ef856af79d59b9258b437269f55cd8c40fc7224f8e69e867979ed6200c668dc8f0ded0e95220aedb431392d89a07b8e636631f2ce532f2bdf7ac7a6b101bceed257b77a41b2f8288ce459ff805ac8029330bf02cc9bf7b9f78317316d66a29e4df303c41500cece8ebd25fae25af0cdcf93bc2692c4cbfb99cf689ea666663041ff84151331c820eb2905c32972c0ae88e6ba54cb1156f113db87af574e59dcc65e4115964d5865ee49f4b7be014ff8236cdd7d397ab671f4d375bb49c9f75f2f5573d77b1e1b64060274aa75f3890d117573253c6223a4942a6e87ba0d76f633a3a4e188f0b10f975f43a56d944fad68b5565df0230e760fcb3446d8f80a9ae9ef21497955a93a8207227608fa2558094aadbfa24d5854ca5a31c991899dc6b4fb4944dd4fb3252b16234c60ef03c64b94c0c1d07f5c224825b4e52ffdb0e7e2c61336d0dbbce3d2d9a9e329b3cff070856cb9192e0fd44706486525befbebc162b814c85040eca2671807fb110462ec7791e2a2ce82e4c49a0e1f7ce80ff2213cbddd2c592a24402d7bf3b1a19661295cce33196359304bae4812dd6c0274fae6bb4e51eb4921cd7ede4745c8f73b2598969b7f30a5a34f26aa1da80cec3756884afc11ca768879e482738de5d56b5b65b0c679e09bbf99b8d20f1ef1769a0c3b0277fbdd40a824c739f8bab97965644943b6f0f71451160b360ce50c03089106e41010beb25b074e1f01d01abdc65f01a7ad6c9822adc4068f6affff6a46444670d85d60bb05cacb28b3fc2ba5a50f75ab0f1fcd07ead4f35a477c6aaf96b4a3e80adb7656cc593e9b8389a6ec4262c8310aebe0fe0dba7ebaa392546adee8c734d69eb4c058887e2ce7bae34b3ce83387b10b66d6ba569fc918de53fd9360c9762714bdac47160dc787cfe8667368632f8c205b7509af17d42cf56e9068b8d0d70fe6119be614a5adc86da56e95a5a9e977da599530a4e4a04bbde867353e395cab9c3dff346075119c68a8cabbdb12aeedc0edc61047e27338d9f426176adf8ac408321186e8af8c0b81efa00f70c68fdd8942de6473bc76813714864fb3a55ed9f4595d029b1ab2f40e250436656e742d8ac720b73e7d0968cbd779dd2bd2e922cb87fc38a038b0f55e890c7bcbb77bad3a81055f203942d2b17321e948a467340fd0dc9f3a1898b7ebbc18184c1b01e82dd9ec56978d85647b9431c6318411aa50952b7014dce4c39dc7ac74299686d713e7198aa2ba37ce7158b9f03831885500ce8c01d079dc29f7d21a4928318b56a660dff47ccaf2e77570d059397ba9f057ed3f57d3490afde0c56f00fe1599f02df5e5d2ec6d0ac387698130086dceb1d81b3647a7bcec9b6cc25b43bcd02c0f6a2f12c3ce6e949e74789afbe888ffcb36eb02164db3d624da60555f742902a43751725d3520b2596794549af62c04e1b8c2649bd34203bc5a2e4fabd84a40ce1a9a0cac2945286af0fa6c6abeb06a85f8015faa9bb0e0974e9142c542dc995303574795e18247dff6d52318a6ce2f678a8b293a165a21fd9c3ad886228c5b583b1431f2aa60258dc3feb4a91f303b1296e034f3a4a68f658f295a90d7d9317e428342ef869447e4c3080de0baaa6ee447ceecd455db7e33fa16fdb975e340a82208a960f52ac14884a778deed103c66cd0d2d3933085e8c8e61b333216a8685e155eae9d69dfcad425ba447d822fc28a4ee4e6e411944c5b6c2967973901eca18aed59cd760d5caff5a55cc1d32f730bd167638d185e65486daebf35f08052016bbe4b12e11e0db937ad91e304b38f8b5c34786f2d2f92ffed62a0a44dfa3ef4b4e031980839db1a4b1538de534f5ed0c09ce6d114ad19113bba6377d6d9e2b73be21978d0ee9ba8b64b8ada4cd90919524ee20357d8dd9bfa6e493df369ba8ba68eface68ceb5902227a8c2b71665fb19826cd0d6d6433b2c8252a17835db5e9c7976360be1f4b3d09067663b0fc0d063ecbe3284799966ddf83c9983647a9655d1e1d1d98be3fa71c00465ddd2740790ea7d3899dd2bd049cbfc4f9eef86a30b963b4b6b87cca10c027e4c73304e72b0cc60fc6bb519a64eecfcdde5f0a001fbe78f12878e7b61e60c2deab0bf51f8894a0a616b38add9d19937dfda889ada19d1ae303c46d6bc55724257f08f86d0d5603c80a390fc1a0f27bc733ca4b66eeab9623f40da670898016326803817bfa7195aad67d2efa73f005105e0134601c2edd9ccba5d94619aeb78ec07d28c51685c46f4b6333c42ad0c42cd6b761c7f307721350f7c6f56e1441dacfe418447b2f04c2feea49358751de52d66c4f70f9be34501235c8553e2f32e3ea721955c73962332451455dec7fce49530d140f645dd4bd756017907b90e82a87c79dd2349e8734773f964a6a8f9232c2b9355264ab014243bf1ba6abb945cef525019f5a75ad186b361e0bf36b50ffbe08b1577a6dfc5c940e90149262df8a684d4341cf0c92cecc96ace1dd1c1a38b1fba42728320595c0d80c1f7505f8809e2a0f56bacec64dfb6240fbcd789a4580059ee9b2f83fda55f6e6522d454a43ea2ff2e0553d19e74d38c35d432ff999c286ddaa2ad01e6d0bac381e44c9cc22434541f1768267af12b20a502105a21696c59d4f710b36f2813c4ec73ef3fef4781fa0279b3a9e74e64a17c5db981e86ba73c353928e3885468cabfdf6eadfb387cc495b7ac82b559ae3c6dc10d456b04178ad8d03e8d0ff321e1bd0c2a52d7306e3aea924427e0a2b0349d7375024c7611370484b243b7db15298a86ce51bcdb42908e6ea9b781eafa7e2de6ed0e35d4252eafb56f1e90dc67a815b04f9e1c4a0ba05b796365114942da50de4163c77b0bff6b89eed29a0677ac653fded527815d93c2d25c0058f23a38500ac24cae26f868440001e837cf6682c61cbf56d617894ecb9f688f7f695a7814b40fd1328a2e42002aede3e325034eed1be05fea495b7a6663ecb7625109679d537e847b9cadcf2e38e81657b63802dcfb7452b211f9f229aa584c3313b80fdefb9bacb22beb3769ec3216e82728cbaa145e1ca769a4bffcdd528290f0265771ffe0bfb2db4bc2c557a4854e70b7439e08ac863172d7a4db402d8582c5265d236b186c2042a78bba1a0a655df01f1f8a7fb793af4ab7967fb774fe72a580a98100a3b37e23a03a9f2a52eeb8a4477fd10fd91c4cddf6ba8b234b9250d6f1bd87ddad34334d1b4c96a056ae3c684bbce109edc40b43f5e922b47261190e00dc530d3901025214b3ba0c83702593e4f4a30b9e1e3c0177115eec5bd26feb314742fdd2ce52b6a29ec5727e2d59c0535cc23be10778b65e635ff1f31acfad90d16cbedd84ea09039dece98446136fd1ca5eedb2068d5d3da23adb254df60ddb48bfb48519abb26ae78d592e56f293811d32b34f3feb542a1a3cbdbdd08bbbb35e9fdc14f7b8d0d67e61a9de39534bb3a83bbe9ba2e3e72f6ada2e7e1e777a905d45ae63cef09ecbac9cebf49dad958913d113aa07b4a13da9046ec3f1b3c1919b7c4300a0fe5786edcfa79afc52da6f3f88efad9febfbe735f24cac074867e1b541df5545206467ce8bcab05b8671b7aecab1308465a28806dfdac83751ec9de82f570c393a1d7bfa6dd4f7293d2f388a63225ef6dd45e2a22163c4045a201212db911ad4f3613027c7cd0aecafd79447f7929bee195e57fe1728d790769b9aa43b039ea98384b6c9ed4dc38e204759f5114a940405489dc67048eadc384ea821d5203a612d86c681a33cc45d1c5d8fa2647e0b5c3134003686f5e8aebf4d0c96d1418581ca19962b442aa0a1f68e0aa17a803bfe40144a3ce14e60408a5cb250fcb943163e90b75ea3c345d5d5af7d6d59ba0015dfe990f556f43828b166a5680e6dc05c33a0d8a6963785ac19dc8d3bb0db5fa809a21782ca21292bed7931e13e68af607a37bead8d97d1fb77ffab7fbded6687b7f809420fb94f3220accfda1ae31e50c60c2d4321e93f2527700c2767e7eabc84f2b3fab1e1d369cebdd8ba8a07d5dd197d7f82cd74527ca8a2a0e421b5ad67b1e91cbb4a135f5bc2a0941c25a4c6cf3c35aaed9f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x5, 0x3}}}}]}]}, 0x2a74}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r13, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=@RTM_NEWMDB={0xf8, 0x54, 0x8, 0x70bd25, 0x25dfdbfd, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x2, 0x4, {@ip4=@dev={0xac, 0x14, 0x14, 0xf}, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x1, {@in6_addr=@mcast1}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x0, 0x2, 0x1, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@private=0xa010101, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x2, 0x2, {@in6_addr=@private1}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x0, 0x2, {@ip4=@empty, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r13, 0x1, 0x2, 0x1, {@in6_addr=@ipv4={'\x00', '\xff\xff', @rand_addr=0x8}, 0x10dba}}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40080}, 0x82) syz_clone3(&(0x7f0000000800)={0x801000, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[r5, 0x0], 0x6}, 0x58) 17:19:22 executing program 2: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 73) 17:19:22 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) [ 573.369295][T17146] R13: 00007ffd55a8aedf R14: 00007fa07945f300 R15: 0000000000022000 [ 573.377109][T17146] [ 573.379969][T17151] CPU: 1 PID: 17151 Comm: syz-executor.2 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 573.390040][T17151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 573.399939][T17151] Call Trace: [ 573.403060][T17151] [ 573.405839][T17151] dump_stack_lvl+0x151/0x1b7 [ 573.410354][T17151] ? bfq_pos_tree_add_move+0x43e/0x43e [ 573.410497][T17160] FAULT_INJECTION: forcing a failure. [ 573.410497][T17160] name failslab, interval 1, probability 0, space 0, times 0 [ 573.415641][T17151] dump_stack+0x15/0x17 [ 573.415667][T17151] should_fail+0x3c0/0x510 [ 573.436300][T17151] __should_failslab+0x9f/0xe0 [ 573.440896][T17151] should_failslab+0x9/0x20 [ 573.445239][T17151] kmem_cache_alloc+0x4f/0x2f0 [ 573.449839][T17151] ? vm_area_dup+0x26/0x1d0 [ 573.454177][T17151] vm_area_dup+0x26/0x1d0 [ 573.458363][T17151] dup_mmap+0x6b8/0xea0 [ 573.462337][T17151] ? __delayed_free_task+0x20/0x20 [ 573.467281][T17151] ? mm_init+0x807/0x960 [ 573.471366][T17151] dup_mm+0x91/0x330 [ 573.475095][T17151] copy_mm+0x108/0x1b0 [ 573.478996][T17151] copy_process+0x1295/0x3250 [ 573.483514][T17151] ? check_stack_object+0x117/0x130 [ 573.488544][T17151] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 573.493495][T17151] ? copy_clone_args_from_user+0x6f0/0x790 [ 573.499133][T17151] kernel_clone+0x22d/0x990 [ 573.503524][T17151] ? dup_mmap+0xea0/0xea0 [ 573.507638][T17151] ? create_io_thread+0x1e0/0x1e0 [ 573.512500][T17151] ? file_end_write+0x1b0/0x1b0 [ 573.517189][T17151] __x64_sys_clone3+0x375/0x3a0 [ 573.521873][T17151] ? __ia32_sys_clone+0x300/0x300 [ 573.526734][T17151] ? ksys_write+0x25f/0x2c0 [ 573.531074][T17151] ? debug_smp_processor_id+0x17/0x20 [ 573.536282][T17151] do_syscall_64+0x44/0xd0 [ 573.540536][T17151] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 573.546266][T17151] RIP: 0033:0x7f64a55310d9 [ 573.550515][T17151] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 17:19:22 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x1e000) 17:19:22 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 74) [ 573.569956][T17151] RSP: 002b:00007f64a42a4038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 573.578198][T17151] RAX: ffffffffffffffda RBX: 00007f64a5650f80 RCX: 00007f64a55310d9 [ 573.586012][T17151] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007f64a42a4050 [ 573.593822][T17151] RBP: 00007f64a42a41d0 R08: 0000000000000000 R09: 0000000000000058 [ 573.601632][T17151] R10: 00007f64a42a4050 R11: 0000000000000246 R12: 0000000000000058 [ 573.609444][T17151] R13: 00007ffc9478d42f R14: 00007f64a42a4300 R15: 0000000000022000 [ 573.617271][T17151] [ 573.620131][T17160] CPU: 0 PID: 17160 Comm: syz-executor.0 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 573.630191][T17160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 573.640085][T17160] Call Trace: [ 573.643204][T17160] [ 573.645984][T17160] dump_stack_lvl+0x151/0x1b7 [ 573.650496][T17160] ? bfq_pos_tree_add_move+0x43e/0x43e [ 573.655799][T17160] dump_stack+0x15/0x17 [ 573.659786][T17160] should_fail+0x3c0/0x510 [ 573.664045][T17160] __should_failslab+0x9f/0xe0 [ 573.668655][T17160] should_failslab+0x9/0x20 [ 573.672976][T17160] kmem_cache_alloc+0x4f/0x2f0 [ 573.677602][T17160] ? vm_area_dup+0x26/0x1d0 [ 573.681920][T17160] ? __kasan_check_read+0x11/0x20 [ 573.686778][T17160] vm_area_dup+0x26/0x1d0 [ 573.690941][T17160] dup_mmap+0x6b8/0xea0 [ 573.694934][T17160] ? __delayed_free_task+0x20/0x20 [ 573.699881][T17160] ? mm_init+0x807/0x960 [ 573.703960][T17160] dup_mm+0x91/0x330 [ 573.707691][T17160] copy_mm+0x108/0x1b0 [ 573.711597][T17160] copy_process+0x1295/0x3250 [ 573.716112][T17160] ? check_stack_object+0x117/0x130 [ 573.721143][T17160] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 573.726090][T17160] ? copy_clone_args_from_user+0x6f0/0x790 [ 573.731734][T17160] kernel_clone+0x22d/0x990 [ 573.736073][T17160] ? dup_mmap+0xea0/0xea0 [ 573.740246][T17160] ? create_io_thread+0x1e0/0x1e0 [ 573.745298][T17160] ? file_end_write+0x1b0/0x1b0 [ 573.749974][T17160] __x64_sys_clone3+0x375/0x3a0 [ 573.754659][T17160] ? __ia32_sys_clone+0x300/0x300 [ 573.759522][T17160] ? ksys_write+0x25f/0x2c0 [ 573.763875][T17160] ? debug_smp_processor_id+0x17/0x20 [ 573.769067][T17160] do_syscall_64+0x44/0xd0 [ 573.773322][T17160] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 573.779047][T17160] RIP: 0033:0x7fa07a6ec0d9 [ 573.783304][T17160] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 573.802741][T17160] RSP: 002b:00007fa07945f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 573.810993][T17160] RAX: ffffffffffffffda RBX: 00007fa07a80bf80 RCX: 00007fa07a6ec0d9 [ 573.818797][T17160] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fa07945f050 17:19:23 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) 17:19:23 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 75) 17:19:23 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) [ 573.826612][T17160] RBP: 00007fa07945f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 573.834431][T17160] R10: 00007fa07945f050 R11: 0000000000000246 R12: 0000000000000058 [ 573.842232][T17160] R13: 00007ffd55a8aedf R14: 00007fa07945f300 R15: 0000000000022000 [ 573.850047][T17160] [ 573.910309][T17167] FAULT_INJECTION: forcing a failure. [ 573.910309][T17167] name failslab, interval 1, probability 0, space 0, times 0 [ 573.936760][T17167] CPU: 0 PID: 17167 Comm: syz-executor.0 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 573.946834][T17167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 573.956726][T17167] Call Trace: [ 573.959855][T17167] [ 573.962629][T17167] dump_stack_lvl+0x151/0x1b7 [ 573.967150][T17167] ? bfq_pos_tree_add_move+0x43e/0x43e [ 573.972439][T17167] ? do_syscall_64+0x44/0xd0 [ 573.976863][T17167] dump_stack+0x15/0x17 [ 573.980853][T17167] should_fail+0x3c0/0x510 [ 573.985191][T17167] __should_failslab+0x9f/0xe0 [ 573.989797][T17167] should_failslab+0x9/0x20 [ 573.994130][T17167] kmem_cache_alloc+0x4f/0x2f0 [ 573.998730][T17167] ? anon_vma_clone+0xa1/0x4f0 [ 574.003330][T17167] anon_vma_clone+0xa1/0x4f0 [ 574.007759][T17167] anon_vma_fork+0x91/0x4f0 [ 574.012096][T17167] ? anon_vma_name+0x43/0x70 [ 574.016524][T17167] dup_mmap+0x750/0xea0 [ 574.020515][T17167] ? __delayed_free_task+0x20/0x20 [ 574.025472][T17167] ? mm_init+0x807/0x960 [ 574.029543][T17167] dup_mm+0x91/0x330 [ 574.033273][T17167] copy_mm+0x108/0x1b0 [ 574.037211][T17167] copy_process+0x1295/0x3250 [ 574.041695][T17167] ? check_stack_object+0x117/0x130 [ 574.046725][T17167] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 574.051673][T17167] ? copy_clone_args_from_user+0x6f0/0x790 [ 574.057320][T17167] kernel_clone+0x22d/0x990 [ 574.061655][T17167] ? dup_mmap+0xea0/0xea0 [ 574.065819][T17167] ? create_io_thread+0x1e0/0x1e0 [ 574.070822][T17167] ? file_end_write+0x1b0/0x1b0 [ 574.075507][T17167] __x64_sys_clone3+0x375/0x3a0 [ 574.080194][T17167] ? __ia32_sys_clone+0x300/0x300 [ 574.085054][T17167] ? ksys_write+0x25f/0x2c0 [ 574.089401][T17167] ? debug_smp_processor_id+0x17/0x20 [ 574.094599][T17167] do_syscall_64+0x44/0xd0 [ 574.098854][T17167] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 574.104580][T17167] RIP: 0033:0x7fa07a6ec0d9 [ 574.108835][T17167] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 574.128276][T17167] RSP: 002b:00007fa07945f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 574.136526][T17167] RAX: ffffffffffffffda RBX: 00007fa07a80bf80 RCX: 00007fa07a6ec0d9 [ 574.144333][T17167] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fa07945f050 [ 574.152167][T17167] RBP: 00007fa07945f1d0 R08: 0000000000000000 R09: 0000000000000058 17:19:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xb4}, {0x0}, {&(0x7f0000002a80)=""/4096, 0xe14}], 0x3, 0x0, 0x80030000000000}}], 0x300, 0x0, 0x0) 17:19:23 executing program 2: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 74) 17:19:23 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x1e76d) 17:19:23 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x3, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4004440) (async) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @empty}, 0x44, r4}) r5 = gettid() r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) (async) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001ac0)=@newtaction={0x2a74, 0x30, 0x300, 0x70bd25, 0x25dfdbfc, {}, [{0xcc, 0x1, [@m_csum={0xc8, 0x3, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x7, 0x0, 0xffff, 0x5}, 0x44}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x80000001, 0x101, 0x0, 0x83, 0xff}, 0x25}}]}, {0x62, 0x6, "52e1f94a968fadc55a3cfe2f62eeb9245740be60539ceddb47a86698d2cdecdc16d994de1e7a7205673746de966020fabcabf679c31017996447f6b9e6807b40641552c963ccfffe095891305c52d697336e70cc3ea454b6450052966f3e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, {0x2b4, 0x1, [@m_connmark={0xe4, 0x10, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9a, 0x3a, 0x10000000, 0xb9, 0x3ff}, 0x1f}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1000, 0x10001, 0x7, 0x9, 0x401}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x40, 0x1, 0x2, 0x1, 0x3}, 0xfffc}}]}, {0x5f, 0x6, "d6340941ae7603c2069f92a8578a6c5043a4f81962dd19c0158ef2dbb11ca744fbd1559b2edfb84bfccb5617b427fd740b92f30c18e31129a9c9a81767b317d816b3458bd68ffdb14e5a4ced8fd2f01d3f164f2724486219b0a63f"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mirred={0x144, 0x3, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0xcd3, 0x5, 0x401, 0x2}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5ed3, 0x3, 0xffffffffffffffff, 0x4, 0xb589}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x1000, 0x2, 0x8000, 0x3}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x200, 0x2, 0x0, 0xfff, 0x2}, 0x1, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3cbad03a, 0x5, 0x10000000, 0x6, 0x6}, 0x3, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x5, 0x0, 0x7, 0x7f}, 0x1, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x401, 0x7, 0x0, 0x2, 0x10000}, 0x1, r4}}]}, {0x37, 0x6, "9764a5531edd15a9bc2ca70988984f66805563ee34381ae10e86ef9e969f9e2e384a68635b2c530f8e9e43bcf14b77266b9e25"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_xt={0x88, 0x2, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}]}, {0x56, 0x6, "9345bb66e6653b9fb06bdff44831c3de9a7c371f7205b0ce0fa8298aa6a2e02fb0483434a28b99e040f27af72f4fa3af9da9d11c1a2233fdd43b0bb65969124eac2b8bfd4367960310945c57797590f438ac"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, {0x26e0, 0x1, [@m_ipt={0x48, 0x4, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}]}, {0x17, 0x6, "c65a92b9baea6174ca1f051fc7e7276883d444"}, {0xc}, {0xc, 0x8, {0x5, 0x3}}}}, @m_tunnel_key={0x198, 0x1f, 0x0, 0x0, {{0xf}, {0x88, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast1}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x9, 0x0}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x4, 0x0, 0x1, 0x3ff}, 0x2}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0xca}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x4, 0x4, 0x1f, 0x8}, 0x1}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0xf0}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x1}]}, {0xe2, 0x6, "75676eda69af9572e72706bafb211478a57a9e59db030115724fc15bd0c20f8302b6835beba447f2404021d9489165d67b776f2f34e1607b4deb21e19a37b984e99c8b52238d85de03a8f6c880ab25d4d7be4918e09137f05fffa3a7ab9077b1d76a9f2866d5218f69b02dd66b1cbe2203ede17b25933300ce45a3510308620aff206d9219c93a73c99b24f90e51814ec2b988c196896002730cdfdcfa9d9b7c5bdaba9d284b9e8baa3f74832eea887abce462ccce389dfcc90c364378fea60c118b9caca93004b2be70ffbadcdbbbeba4ab171a3cb36b397ce74709199a"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_ctinfo={0xe8, 0xd, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x6, 0x80000000, 0x7, 0x5a2f3ff8, 0x3}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xffff}]}, {0x9c, 0x6, "1425952e8e309c9d4847f7bf87e87e40c78ca6aba1ebc7f2fe216fa6314bdb527ef257c8d4e7e824c67773eb31f9bb1f900bf0dd7a4ddc8ae43a2d6c7109c00e7968c9f98ad10338885d1e20af2f8c1981a6a057186061556dd1633d39708891c166bde1861425c0a0d3831f9b3ca0db9fa5fc550387bab89f0fdce2a607cb96ec01919421a00fe35f9741583c018cf0a69048193b944ae0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x6}}}}, @m_bpf={0x11c, 0xe, 0x0, 0x0, {{0x8}, {0x70, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x9, 0xffffffffffffffff}}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1ff, 0x6aa6fdba, 0x6, 0x7, 0x45000000}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x8000, 0x5, 0x20000000, 0x5}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x85, 0x6, "2165608932a49d71783d22480111c26a0855292c6ea378daa3fcbe5ecb9aff96bb4734e525a872ee5fb7aeea55cac664702b6d124ae6cc2fe7079288b3f1baa093364939ddeefb14e95ca54acfa3eead958399b0f0cae73ce078613b483d0101667833641088ed4a9062c0514dfdfeac52e0faf08bce1e07ad07c7581491e9048c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x6}}}}, @m_xt={0x228, 0x2, 0x0, 0x0, {{0x7}, {0x190, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xd3, 0x6, {0x6, 'filter\x00', 0x1, 0x1ff, "96c546792e882a2248e67e93d3164fc76bfc2b80a1334844e93342ccfe744209b9b13ff71ff5e21c77c25003b4318192f113849f9e30f082e78b09a89aebc1f7316c7fb2d9e93a4871566a15e5636f1c0421a2ce5be6d07708f8881e240f6e741eda136860b4d105e85d31d00d8066dd776f4c6c04c744ce749f549d922441021145b3205e74bc5d5f9e8fce9809f8e2ebaa4393aaeb86206ba86af618c21f6807de2a0292fa99d373"}}, @TCA_IPT_TARG={0x9e, 0x6, {0x2, 'nat\x00', 0x3f, 0x2, "242fb2b2b1136ee9869031dd7f993524141466b3474ccbebf0e82c90f6a3a387f621fe6a0b25e172358936a72b0e76d5074a56ab4dddbe072dba9368d8169dc397f195a60107b1811f8909066cca9df4875b14acac448525ea189755ee8cd4652a4a1cd01b03c249f2cb225c2fbcc1ee4598e83f"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x68}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}]}, {0x74, 0x6, "f5f20ddff369fe3343dcaa8cbb0733721a6d9e93564959e83bddab140b3f64dabc4c8ff60da519a3cab7f3399a8967d1bb9be7dddafbc9992d3e7a5b04d1c7d586bffdee02fc0f070cba52f9f3ad154ce9d317f5c4e3830df2d720ea020675e54ac6e0be7ce5e3483b3ad3f48ca3a114"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_ife={0x1080, 0xb, 0x0, 0x0, {{0x8}, {0x58, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x4, 0x1, 0x7, 0x7}, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0x401, 0x20000000, 0x101, 0x3}, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0x7, 0xffffffffffffffff, 0x3f, 0x8}}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x4, 0x4}}}}, @m_sample={0x1050, 0x17, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x7}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x4}]}, {0x1004, 0x6, "2a489869da86727aab652af4fcbeffa998d20592f4f57466a514d4a1a09f52b83ea0d166f0573cae188fd455c15dfdae5798b4fecce202d39eff6c720e3c76c34393cf92f28d7b47dbea0defef21290673f89f42f0b7ff9506b54abf763f7319549316a7161c4230f3c04bf4f3e0e179598f2065c331891c8efa678291da52dc3c2c3159ea1a57e686d8fd522aac959b5d121e2756a62e1efe7cf17f2ade4c5eab9f8ee6f26c1af0f33571d2c452ebd441f7357bc1924ca0d7c113bde4f5811b9b80d0ba2413a8c525bde2e76945cf5bd3ca8d3c1fdc87ddc6ac9a2155ea8c5bcc72c7f61b01c3b150dd46ebe8daf80ccb7d2f63353e86aaf49e54105e265bddaf094066eaecc71f5a579cdcedd61db0a742f62d54bbda1d8246a0c6247ae562475460d03e6fb264f5878d04b5992dbb438365869278b31800ca8700e47a9ae00a8333f6938e84613f7bbf9cd43560ecbfaf3208bacea4e9fdca5e338f6a411948d23dcdcebb0e1d4ee9cdf8382e0e4888dc32401af30fa05bf2a8403c76744e4332725a838426f45aa2ce9f8a7582967fee8c1c21b3a8c259bb81a19f4aa7b77d88759a43d01e16dc64aac77a2f704904a34c5965aee349a381955961ef5eeecb192f2a2ebbbf079d1bf4e7dd801e878287ddeaab6fe99fc82819c13f0aa01ee03b5ee94e8ba0684bf355274eea93fe61c51ccf1a677a115e8c028eeac55a03c6ad5df106ef07f04c1dcbfce8faaceeafa8534bbaa2aacc8cd04a01f21df3f87f568f847615b2913876ab10ae26590d93d8734c3ed45ff8bf46ae8747a80fe81083aa03204f711e4e6ea83b7a450b4c4fc64d3fcb60bd818ad2b5a975dafd8a3457180d8f2c494f4f27be5af28e14d9ec4e6432c34222b332238b6e988ae74de85a43239757a127303047699e3a25cce6f7303f3c8657c4f3c615dcdb0038c6294f807faa9cfb84ad67aa71c2c9511bb01dca6552426624cb27232007ee49c5dd1b4a6276a8dfd60aef76893a4369b87deb7ef25bb7d74d01049e85c22f5d5ab3b4e1c80403557078c57b436dd5a6fd30ff62b48f7daa9ee43c7380059b493e9ef0ab0e3c35576e47cf5fc6e0d6999bfafc291e835390deb260dbb0f16a15486e8062785e6268cf896eb7b346c179c6c20d93ae61fef2783ed39701fa3a8126805bce8e4d0286b0d6063196623fb5da6540e7df41a7fa65bda27e0762d523bb56902d372c938018d927afa380928ba5cd2b846dc86a4acb96f0ede3d5d7f15b2d4d1ea2a276a7173abf274007c6462bd04ee1d59b4a6fa2f2b7302ce3381b305019eec4cdc1e89640b263e9113cedf8765c583a4e4e86f84e0b9b39db04e39aeeedea98216060b40e981f5b4f1636d2a20f5b655585493bc8b230b3ffae91acebf045027681ab31f0d0a428fa44c6dd4940d1027cadc5af2cf9671a8d158c2485a699a585ae9386028f04eeaf76e54ee2ea4910bd1f7ffbefdd29c1b63fc465b4292657da435a2df9a647b83010f198d04c6a0ee7480230f8a22ff7bee6e0590121f6e13901663e6c93fae6ec8e39e3eb9c2be9f5c814e43dd8941c5bbc427b88c232edcf48984783889f67010ec4d263a9dbe7dad65f0ce82328a2c0738b0bfb5caffb827bfc834242009c092fe58434a1995d76026e665de9476ee917ae56ae7a5101250c69be109af3aa71ef856af79d59b9258b437269f55cd8c40fc7224f8e69e867979ed6200c668dc8f0ded0e95220aedb431392d89a07b8e636631f2ce532f2bdf7ac7a6b101bceed257b77a41b2f8288ce459ff805ac8029330bf02cc9bf7b9f78317316d66a29e4df303c41500cece8ebd25fae25af0cdcf93bc2692c4cbfb99cf689ea666663041ff84151331c820eb2905c32972c0ae88e6ba54cb1156f113db87af574e59dcc65e4115964d5865ee49f4b7be014ff8236cdd7d397ab671f4d375bb49c9f75f2f5573d77b1e1b64060274aa75f3890d117573253c6223a4942a6e87ba0d76f633a3a4e188f0b10f975f43a56d944fad68b5565df0230e760fcb3446d8f80a9ae9ef21497955a93a8207227608fa2558094aadbfa24d5854ca5a31c991899dc6b4fb4944dd4fb3252b16234c60ef03c64b94c0c1d07f5c224825b4e52ffdb0e7e2c61336d0dbbce3d2d9a9e329b3cff070856cb9192e0fd44706486525befbebc162b814c85040eca2671807fb110462ec7791e2a2ce82e4c49a0e1f7ce80ff2213cbddd2c592a24402d7bf3b1a19661295cce33196359304bae4812dd6c0274fae6bb4e51eb4921cd7ede4745c8f73b2598969b7f30a5a34f26aa1da80cec3756884afc11ca768879e482738de5d56b5b65b0c679e09bbf99b8d20f1ef1769a0c3b0277fbdd40a824c739f8bab97965644943b6f0f71451160b360ce50c03089106e41010beb25b074e1f01d01abdc65f01a7ad6c9822adc4068f6affff6a46444670d85d60bb05cacb28b3fc2ba5a50f75ab0f1fcd07ead4f35a477c6aaf96b4a3e80adb7656cc593e9b8389a6ec4262c8310aebe0fe0dba7ebaa392546adee8c734d69eb4c058887e2ce7bae34b3ce83387b10b66d6ba569fc918de53fd9360c9762714bdac47160dc787cfe8667368632f8c205b7509af17d42cf56e9068b8d0d70fe6119be614a5adc86da56e95a5a9e977da599530a4e4a04bbde867353e395cab9c3dff346075119c68a8cabbdb12aeedc0edc61047e27338d9f426176adf8ac408321186e8af8c0b81efa00f70c68fdd8942de6473bc76813714864fb3a55ed9f4595d029b1ab2f40e250436656e742d8ac720b73e7d0968cbd779dd2bd2e922cb87fc38a038b0f55e890c7bcbb77bad3a81055f203942d2b17321e948a467340fd0dc9f3a1898b7ebbc18184c1b01e82dd9ec56978d85647b9431c6318411aa50952b7014dce4c39dc7ac74299686d713e7198aa2ba37ce7158b9f03831885500ce8c01d079dc29f7d21a4928318b56a660dff47ccaf2e77570d059397ba9f057ed3f57d3490afde0c56f00fe1599f02df5e5d2ec6d0ac387698130086dceb1d81b3647a7bcec9b6cc25b43bcd02c0f6a2f12c3ce6e949e74789afbe888ffcb36eb02164db3d624da60555f742902a43751725d3520b2596794549af62c04e1b8c2649bd34203bc5a2e4fabd84a40ce1a9a0cac2945286af0fa6c6abeb06a85f8015faa9bb0e0974e9142c542dc995303574795e18247dff6d52318a6ce2f678a8b293a165a21fd9c3ad886228c5b583b1431f2aa60258dc3feb4a91f303b1296e034f3a4a68f658f295a90d7d9317e428342ef869447e4c3080de0baaa6ee447ceecd455db7e33fa16fdb975e340a82208a960f52ac14884a778deed103c66cd0d2d3933085e8c8e61b333216a8685e155eae9d69dfcad425ba447d822fc28a4ee4e6e411944c5b6c2967973901eca18aed59cd760d5caff5a55cc1d32f730bd167638d185e65486daebf35f08052016bbe4b12e11e0db937ad91e304b38f8b5c34786f2d2f92ffed62a0a44dfa3ef4b4e031980839db1a4b1538de534f5ed0c09ce6d114ad19113bba6377d6d9e2b73be21978d0ee9ba8b64b8ada4cd90919524ee20357d8dd9bfa6e493df369ba8ba68eface68ceb5902227a8c2b71665fb19826cd0d6d6433b2c8252a17835db5e9c7976360be1f4b3d09067663b0fc0d063ecbe3284799966ddf83c9983647a9655d1e1d1d98be3fa71c00465ddd2740790ea7d3899dd2bd049cbfc4f9eef86a30b963b4b6b87cca10c027e4c73304e72b0cc60fc6bb519a64eecfcdde5f0a001fbe78f12878e7b61e60c2deab0bf51f8894a0a616b38add9d19937dfda889ada19d1ae303c46d6bc55724257f08f86d0d5603c80a390fc1a0f27bc733ca4b66eeab9623f40da670898016326803817bfa7195aad67d2efa73f005105e0134601c2edd9ccba5d94619aeb78ec07d28c51685c46f4b6333c42ad0c42cd6b761c7f307721350f7c6f56e1441dacfe418447b2f04c2feea49358751de52d66c4f70f9be34501235c8553e2f32e3ea721955c73962332451455dec7fce49530d140f645dd4bd756017907b90e82a87c79dd2349e8734773f964a6a8f9232c2b9355264ab014243bf1ba6abb945cef525019f5a75ad186b361e0bf36b50ffbe08b1577a6dfc5c940e90149262df8a684d4341cf0c92cecc96ace1dd1c1a38b1fba42728320595c0d80c1f7505f8809e2a0f56bacec64dfb6240fbcd789a4580059ee9b2f83fda55f6e6522d454a43ea2ff2e0553d19e74d38c35d432ff999c286ddaa2ad01e6d0bac381e44c9cc22434541f1768267af12b20a502105a21696c59d4f710b36f2813c4ec73ef3fef4781fa0279b3a9e74e64a17c5db981e86ba73c353928e3885468cabfdf6eadfb387cc495b7ac82b559ae3c6dc10d456b04178ad8d03e8d0ff321e1bd0c2a52d7306e3aea924427e0a2b0349d7375024c7611370484b243b7db15298a86ce51bcdb42908e6ea9b781eafa7e2de6ed0e35d4252eafb56f1e90dc67a815b04f9e1c4a0ba05b796365114942da50de4163c77b0bff6b89eed29a0677ac653fded527815d93c2d25c0058f23a38500ac24cae26f868440001e837cf6682c61cbf56d617894ecb9f688f7f695a7814b40fd1328a2e42002aede3e325034eed1be05fea495b7a6663ecb7625109679d537e847b9cadcf2e38e81657b63802dcfb7452b211f9f229aa584c3313b80fdefb9bacb22beb3769ec3216e82728cbaa145e1ca769a4bffcdd528290f0265771ffe0bfb2db4bc2c557a4854e70b7439e08ac863172d7a4db402d8582c5265d236b186c2042a78bba1a0a655df01f1f8a7fb793af4ab7967fb774fe72a580a98100a3b37e23a03a9f2a52eeb8a4477fd10fd91c4cddf6ba8b234b9250d6f1bd87ddad34334d1b4c96a056ae3c684bbce109edc40b43f5e922b47261190e00dc530d3901025214b3ba0c83702593e4f4a30b9e1e3c0177115eec5bd26feb314742fdd2ce52b6a29ec5727e2d59c0535cc23be10778b65e635ff1f31acfad90d16cbedd84ea09039dece98446136fd1ca5eedb2068d5d3da23adb254df60ddb48bfb48519abb26ae78d592e56f293811d32b34f3feb542a1a3cbdbdd08bbbb35e9fdc14f7b8d0d67e61a9de39534bb3a83bbe9ba2e3e72f6ada2e7e1e777a905d45ae63cef09ecbac9cebf49dad958913d113aa07b4a13da9046ec3f1b3c1919b7c4300a0fe5786edcfa79afc52da6f3f88efad9febfbe735f24cac074867e1b541df5545206467ce8bcab05b8671b7aecab1308465a28806dfdac83751ec9de82f570c393a1d7bfa6dd4f7293d2f388a63225ef6dd45e2a22163c4045a201212db911ad4f3613027c7cd0aecafd79447f7929bee195e57fe1728d790769b9aa43b039ea98384b6c9ed4dc38e204759f5114a940405489dc67048eadc384ea821d5203a612d86c681a33cc45d1c5d8fa2647e0b5c3134003686f5e8aebf4d0c96d1418581ca19962b442aa0a1f68e0aa17a803bfe40144a3ce14e60408a5cb250fcb943163e90b75ea3c345d5d5af7d6d59ba0015dfe990f556f43828b166a5680e6dc05c33a0d8a6963785ac19dc8d3bb0db5fa809a21782ca21292bed7931e13e68af607a37bead8d97d1fb77ffab7fbded6687b7f809420fb94f3220accfda1ae31e50c60c2d4321e93f2527700c2767e7eabc84f2b3fab1e1d369cebdd8ba8a07d5dd197d7f82cd74527ca8a2a0e421b5ad67b1e91cbb4a135f5bc2a0941c25a4c6cf3c35aaed9f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x5, 0x3}}}}]}]}, 0x2a74}}, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) (async) r10 = socket$netlink(0x10, 0x3, 0x0) (async) r11 = socket$netlink(0x10, 0x3, 0x0) (async) r12 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) (async) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r13, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=@RTM_NEWMDB={0xf8, 0x54, 0x8, 0x70bd25, 0x25dfdbfd, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x2, 0x4, {@ip4=@dev={0xac, 0x14, 0x14, 0xf}, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x1, {@in6_addr=@mcast1}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x0, 0x2, 0x1, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@private=0xa010101, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x2, 0x2, {@in6_addr=@private1}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x0, 0x2, {@ip4=@empty, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r13, 0x1, 0x2, 0x1, {@in6_addr=@ipv4={'\x00', '\xff\xff', @rand_addr=0x8}, 0x10dba}}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40080}, 0x82) (async) syz_clone3(&(0x7f0000000800)={0x801000, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[r5, 0x0], 0x6}, 0x58) 17:19:23 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) [ 574.159952][T17167] R10: 00007fa07945f050 R11: 0000000000000246 R12: 0000000000000058 [ 574.167765][T17167] R13: 00007ffd55a8aedf R14: 00007fa07945f300 R15: 0000000000022000 [ 574.175581][T17167] [ 574.191921][T17175] FAULT_INJECTION: forcing a failure. [ 574.191921][T17175] name failslab, interval 1, probability 0, space 0, times 0 17:19:23 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 76) 17:19:23 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) [ 574.205445][T17175] CPU: 0 PID: 17175 Comm: syz-executor.2 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 574.215514][T17175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 574.225424][T17175] Call Trace: [ 574.228536][T17175] [ 574.231310][T17175] dump_stack_lvl+0x151/0x1b7 [ 574.235825][T17175] ? bfq_pos_tree_add_move+0x43e/0x43e [ 574.241119][T17175] dump_stack+0x15/0x17 [ 574.245111][T17175] should_fail+0x3c0/0x510 [ 574.249368][T17175] __should_failslab+0x9f/0xe0 [ 574.253964][T17175] should_failslab+0x9/0x20 17:19:23 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r2 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x3, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4004440) (async) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @empty}, 0x44, r4}) r5 = gettid() (async, rerun: 64) r6 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) (async) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001ac0)=@newtaction={0x2a74, 0x30, 0x300, 0x70bd25, 0x25dfdbfc, {}, [{0xcc, 0x1, [@m_csum={0xc8, 0x3, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x7, 0x0, 0xffff, 0x5}, 0x44}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x80000001, 0x101, 0x0, 0x83, 0xff}, 0x25}}]}, {0x62, 0x6, "52e1f94a968fadc55a3cfe2f62eeb9245740be60539ceddb47a86698d2cdecdc16d994de1e7a7205673746de966020fabcabf679c31017996447f6b9e6807b40641552c963ccfffe095891305c52d697336e70cc3ea454b6450052966f3e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, {0x2b4, 0x1, [@m_connmark={0xe4, 0x10, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9a, 0x3a, 0x10000000, 0xb9, 0x3ff}, 0x1f}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1000, 0x10001, 0x7, 0x9, 0x401}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x40, 0x1, 0x2, 0x1, 0x3}, 0xfffc}}]}, {0x5f, 0x6, "d6340941ae7603c2069f92a8578a6c5043a4f81962dd19c0158ef2dbb11ca744fbd1559b2edfb84bfccb5617b427fd740b92f30c18e31129a9c9a81767b317d816b3458bd68ffdb14e5a4ced8fd2f01d3f164f2724486219b0a63f"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mirred={0x144, 0x3, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0xcd3, 0x5, 0x401, 0x2}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5ed3, 0x3, 0xffffffffffffffff, 0x4, 0xb589}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x1000, 0x2, 0x8000, 0x3}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x200, 0x2, 0x0, 0xfff, 0x2}, 0x1, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3cbad03a, 0x5, 0x10000000, 0x6, 0x6}, 0x3, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x5, 0x0, 0x7, 0x7f}, 0x1, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x401, 0x7, 0x0, 0x2, 0x10000}, 0x1, r4}}]}, {0x37, 0x6, "9764a5531edd15a9bc2ca70988984f66805563ee34381ae10e86ef9e969f9e2e384a68635b2c530f8e9e43bcf14b77266b9e25"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_xt={0x88, 0x2, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}]}, {0x56, 0x6, "9345bb66e6653b9fb06bdff44831c3de9a7c371f7205b0ce0fa8298aa6a2e02fb0483434a28b99e040f27af72f4fa3af9da9d11c1a2233fdd43b0bb65969124eac2b8bfd4367960310945c57797590f438ac"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, {0x26e0, 0x1, [@m_ipt={0x48, 0x4, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}]}, {0x17, 0x6, "c65a92b9baea6174ca1f051fc7e7276883d444"}, {0xc}, {0xc, 0x8, {0x5, 0x3}}}}, @m_tunnel_key={0x198, 0x1f, 0x0, 0x0, {{0xf}, {0x88, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast1}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x9, 0x0}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x4, 0x0, 0x1, 0x3ff}, 0x2}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0xca}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x4, 0x4, 0x1f, 0x8}, 0x1}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0xf0}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x1}]}, {0xe2, 0x6, "75676eda69af9572e72706bafb211478a57a9e59db030115724fc15bd0c20f8302b6835beba447f2404021d9489165d67b776f2f34e1607b4deb21e19a37b984e99c8b52238d85de03a8f6c880ab25d4d7be4918e09137f05fffa3a7ab9077b1d76a9f2866d5218f69b02dd66b1cbe2203ede17b25933300ce45a3510308620aff206d9219c93a73c99b24f90e51814ec2b988c196896002730cdfdcfa9d9b7c5bdaba9d284b9e8baa3f74832eea887abce462ccce389dfcc90c364378fea60c118b9caca93004b2be70ffbadcdbbbeba4ab171a3cb36b397ce74709199a"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_ctinfo={0xe8, 0xd, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x6, 0x80000000, 0x7, 0x5a2f3ff8, 0x3}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xffff}]}, {0x9c, 0x6, "1425952e8e309c9d4847f7bf87e87e40c78ca6aba1ebc7f2fe216fa6314bdb527ef257c8d4e7e824c67773eb31f9bb1f900bf0dd7a4ddc8ae43a2d6c7109c00e7968c9f98ad10338885d1e20af2f8c1981a6a057186061556dd1633d39708891c166bde1861425c0a0d3831f9b3ca0db9fa5fc550387bab89f0fdce2a607cb96ec01919421a00fe35f9741583c018cf0a69048193b944ae0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x6}}}}, @m_bpf={0x11c, 0xe, 0x0, 0x0, {{0x8}, {0x70, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x9, 0xffffffffffffffff}}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1ff, 0x6aa6fdba, 0x6, 0x7, 0x45000000}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x8000, 0x5, 0x20000000, 0x5}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x85, 0x6, "2165608932a49d71783d22480111c26a0855292c6ea378daa3fcbe5ecb9aff96bb4734e525a872ee5fb7aeea55cac664702b6d124ae6cc2fe7079288b3f1baa093364939ddeefb14e95ca54acfa3eead958399b0f0cae73ce078613b483d0101667833641088ed4a9062c0514dfdfeac52e0faf08bce1e07ad07c7581491e9048c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x6}}}}, @m_xt={0x228, 0x2, 0x0, 0x0, {{0x7}, {0x190, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xd3, 0x6, {0x6, 'filter\x00', 0x1, 0x1ff, "96c546792e882a2248e67e93d3164fc76bfc2b80a1334844e93342ccfe744209b9b13ff71ff5e21c77c25003b4318192f113849f9e30f082e78b09a89aebc1f7316c7fb2d9e93a4871566a15e5636f1c0421a2ce5be6d07708f8881e240f6e741eda136860b4d105e85d31d00d8066dd776f4c6c04c744ce749f549d922441021145b3205e74bc5d5f9e8fce9809f8e2ebaa4393aaeb86206ba86af618c21f6807de2a0292fa99d373"}}, @TCA_IPT_TARG={0x9e, 0x6, {0x2, 'nat\x00', 0x3f, 0x2, "242fb2b2b1136ee9869031dd7f993524141466b3474ccbebf0e82c90f6a3a387f621fe6a0b25e172358936a72b0e76d5074a56ab4dddbe072dba9368d8169dc397f195a60107b1811f8909066cca9df4875b14acac448525ea189755ee8cd4652a4a1cd01b03c249f2cb225c2fbcc1ee4598e83f"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x68}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}]}, {0x74, 0x6, "f5f20ddff369fe3343dcaa8cbb0733721a6d9e93564959e83bddab140b3f64dabc4c8ff60da519a3cab7f3399a8967d1bb9be7dddafbc9992d3e7a5b04d1c7d586bffdee02fc0f070cba52f9f3ad154ce9d317f5c4e3830df2d720ea020675e54ac6e0be7ce5e3483b3ad3f48ca3a114"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_ife={0x1080, 0xb, 0x0, 0x0, {{0x8}, {0x58, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x4, 0x1, 0x7, 0x7}, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0x401, 0x20000000, 0x101, 0x3}, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0x7, 0xffffffffffffffff, 0x3f, 0x8}}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x4, 0x4}}}}, @m_sample={0x1050, 0x17, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x7}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x4}]}, {0x1004, 0x6, "2a489869da86727aab652af4fcbeffa998d20592f4f57466a514d4a1a09f52b83ea0d166f0573cae188fd455c15dfdae5798b4fecce202d39eff6c720e3c76c34393cf92f28d7b47dbea0defef21290673f89f42f0b7ff9506b54abf763f7319549316a7161c4230f3c04bf4f3e0e179598f2065c331891c8efa678291da52dc3c2c3159ea1a57e686d8fd522aac959b5d121e2756a62e1efe7cf17f2ade4c5eab9f8ee6f26c1af0f33571d2c452ebd441f7357bc1924ca0d7c113bde4f5811b9b80d0ba2413a8c525bde2e76945cf5bd3ca8d3c1fdc87ddc6ac9a2155ea8c5bcc72c7f61b01c3b150dd46ebe8daf80ccb7d2f63353e86aaf49e54105e265bddaf094066eaecc71f5a579cdcedd61db0a742f62d54bbda1d8246a0c6247ae562475460d03e6fb264f5878d04b5992dbb438365869278b31800ca8700e47a9ae00a8333f6938e84613f7bbf9cd43560ecbfaf3208bacea4e9fdca5e338f6a411948d23dcdcebb0e1d4ee9cdf8382e0e4888dc32401af30fa05bf2a8403c76744e4332725a838426f45aa2ce9f8a7582967fee8c1c21b3a8c259bb81a19f4aa7b77d88759a43d01e16dc64aac77a2f704904a34c5965aee349a381955961ef5eeecb192f2a2ebbbf079d1bf4e7dd801e878287ddeaab6fe99fc82819c13f0aa01ee03b5ee94e8ba0684bf355274eea93fe61c51ccf1a677a115e8c028eeac55a03c6ad5df106ef07f04c1dcbfce8faaceeafa8534bbaa2aacc8cd04a01f21df3f87f568f847615b2913876ab10ae26590d93d8734c3ed45ff8bf46ae8747a80fe81083aa03204f711e4e6ea83b7a450b4c4fc64d3fcb60bd818ad2b5a975dafd8a3457180d8f2c494f4f27be5af28e14d9ec4e6432c34222b332238b6e988ae74de85a43239757a127303047699e3a25cce6f7303f3c8657c4f3c615dcdb0038c6294f807faa9cfb84ad67aa71c2c9511bb01dca6552426624cb27232007ee49c5dd1b4a6276a8dfd60aef76893a4369b87deb7ef25bb7d74d01049e85c22f5d5ab3b4e1c80403557078c57b436dd5a6fd30ff62b48f7daa9ee43c7380059b493e9ef0ab0e3c35576e47cf5fc6e0d6999bfafc291e835390deb260dbb0f16a15486e8062785e6268cf896eb7b346c179c6c20d93ae61fef2783ed39701fa3a8126805bce8e4d0286b0d6063196623fb5da6540e7df41a7fa65bda27e0762d523bb56902d372c938018d927afa380928ba5cd2b846dc86a4acb96f0ede3d5d7f15b2d4d1ea2a276a7173abf274007c6462bd04ee1d59b4a6fa2f2b7302ce3381b305019eec4cdc1e89640b263e9113cedf8765c583a4e4e86f84e0b9b39db04e39aeeedea98216060b40e981f5b4f1636d2a20f5b655585493bc8b230b3ffae91acebf045027681ab31f0d0a428fa44c6dd4940d1027cadc5af2cf9671a8d158c2485a699a585ae9386028f04eeaf76e54ee2ea4910bd1f7ffbefdd29c1b63fc465b4292657da435a2df9a647b83010f198d04c6a0ee7480230f8a22ff7bee6e0590121f6e13901663e6c93fae6ec8e39e3eb9c2be9f5c814e43dd8941c5bbc427b88c232edcf48984783889f67010ec4d263a9dbe7dad65f0ce82328a2c0738b0bfb5caffb827bfc834242009c092fe58434a1995d76026e665de9476ee917ae56ae7a5101250c69be109af3aa71ef856af79d59b9258b437269f55cd8c40fc7224f8e69e867979ed6200c668dc8f0ded0e95220aedb431392d89a07b8e636631f2ce532f2bdf7ac7a6b101bceed257b77a41b2f8288ce459ff805ac8029330bf02cc9bf7b9f78317316d66a29e4df303c41500cece8ebd25fae25af0cdcf93bc2692c4cbfb99cf689ea666663041ff84151331c820eb2905c32972c0ae88e6ba54cb1156f113db87af574e59dcc65e4115964d5865ee49f4b7be014ff8236cdd7d397ab671f4d375bb49c9f75f2f5573d77b1e1b64060274aa75f3890d117573253c6223a4942a6e87ba0d76f633a3a4e188f0b10f975f43a56d944fad68b5565df0230e760fcb3446d8f80a9ae9ef21497955a93a8207227608fa2558094aadbfa24d5854ca5a31c991899dc6b4fb4944dd4fb3252b16234c60ef03c64b94c0c1d07f5c224825b4e52ffdb0e7e2c61336d0dbbce3d2d9a9e329b3cff070856cb9192e0fd44706486525befbebc162b814c85040eca2671807fb110462ec7791e2a2ce82e4c49a0e1f7ce80ff2213cbddd2c592a24402d7bf3b1a19661295cce33196359304bae4812dd6c0274fae6bb4e51eb4921cd7ede4745c8f73b2598969b7f30a5a34f26aa1da80cec3756884afc11ca768879e482738de5d56b5b65b0c679e09bbf99b8d20f1ef1769a0c3b0277fbdd40a824c739f8bab97965644943b6f0f71451160b360ce50c03089106e41010beb25b074e1f01d01abdc65f01a7ad6c9822adc4068f6affff6a46444670d85d60bb05cacb28b3fc2ba5a50f75ab0f1fcd07ead4f35a477c6aaf96b4a3e80adb7656cc593e9b8389a6ec4262c8310aebe0fe0dba7ebaa392546adee8c734d69eb4c058887e2ce7bae34b3ce83387b10b66d6ba569fc918de53fd9360c9762714bdac47160dc787cfe8667368632f8c205b7509af17d42cf56e9068b8d0d70fe6119be614a5adc86da56e95a5a9e977da599530a4e4a04bbde867353e395cab9c3dff346075119c68a8cabbdb12aeedc0edc61047e27338d9f426176adf8ac408321186e8af8c0b81efa00f70c68fdd8942de6473bc76813714864fb3a55ed9f4595d029b1ab2f40e250436656e742d8ac720b73e7d0968cbd779dd2bd2e922cb87fc38a038b0f55e890c7bcbb77bad3a81055f203942d2b17321e948a467340fd0dc9f3a1898b7ebbc18184c1b01e82dd9ec56978d85647b9431c6318411aa50952b7014dce4c39dc7ac74299686d713e7198aa2ba37ce7158b9f03831885500ce8c01d079dc29f7d21a4928318b56a660dff47ccaf2e77570d059397ba9f057ed3f57d3490afde0c56f00fe1599f02df5e5d2ec6d0ac387698130086dceb1d81b3647a7bcec9b6cc25b43bcd02c0f6a2f12c3ce6e949e74789afbe888ffcb36eb02164db3d624da60555f742902a43751725d3520b2596794549af62c04e1b8c2649bd34203bc5a2e4fabd84a40ce1a9a0cac2945286af0fa6c6abeb06a85f8015faa9bb0e0974e9142c542dc995303574795e18247dff6d52318a6ce2f678a8b293a165a21fd9c3ad886228c5b583b1431f2aa60258dc3feb4a91f303b1296e034f3a4a68f658f295a90d7d9317e428342ef869447e4c3080de0baaa6ee447ceecd455db7e33fa16fdb975e340a82208a960f52ac14884a778deed103c66cd0d2d3933085e8c8e61b333216a8685e155eae9d69dfcad425ba447d822fc28a4ee4e6e411944c5b6c2967973901eca18aed59cd760d5caff5a55cc1d32f730bd167638d185e65486daebf35f08052016bbe4b12e11e0db937ad91e304b38f8b5c34786f2d2f92ffed62a0a44dfa3ef4b4e031980839db1a4b1538de534f5ed0c09ce6d114ad19113bba6377d6d9e2b73be21978d0ee9ba8b64b8ada4cd90919524ee20357d8dd9bfa6e493df369ba8ba68eface68ceb5902227a8c2b71665fb19826cd0d6d6433b2c8252a17835db5e9c7976360be1f4b3d09067663b0fc0d063ecbe3284799966ddf83c9983647a9655d1e1d1d98be3fa71c00465ddd2740790ea7d3899dd2bd049cbfc4f9eef86a30b963b4b6b87cca10c027e4c73304e72b0cc60fc6bb519a64eecfcdde5f0a001fbe78f12878e7b61e60c2deab0bf51f8894a0a616b38add9d19937dfda889ada19d1ae303c46d6bc55724257f08f86d0d5603c80a390fc1a0f27bc733ca4b66eeab9623f40da670898016326803817bfa7195aad67d2efa73f005105e0134601c2edd9ccba5d94619aeb78ec07d28c51685c46f4b6333c42ad0c42cd6b761c7f307721350f7c6f56e1441dacfe418447b2f04c2feea49358751de52d66c4f70f9be34501235c8553e2f32e3ea721955c73962332451455dec7fce49530d140f645dd4bd756017907b90e82a87c79dd2349e8734773f964a6a8f9232c2b9355264ab014243bf1ba6abb945cef525019f5a75ad186b361e0bf36b50ffbe08b1577a6dfc5c940e90149262df8a684d4341cf0c92cecc96ace1dd1c1a38b1fba42728320595c0d80c1f7505f8809e2a0f56bacec64dfb6240fbcd789a4580059ee9b2f83fda55f6e6522d454a43ea2ff2e0553d19e74d38c35d432ff999c286ddaa2ad01e6d0bac381e44c9cc22434541f1768267af12b20a502105a21696c59d4f710b36f2813c4ec73ef3fef4781fa0279b3a9e74e64a17c5db981e86ba73c353928e3885468cabfdf6eadfb387cc495b7ac82b559ae3c6dc10d456b04178ad8d03e8d0ff321e1bd0c2a52d7306e3aea924427e0a2b0349d7375024c7611370484b243b7db15298a86ce51bcdb42908e6ea9b781eafa7e2de6ed0e35d4252eafb56f1e90dc67a815b04f9e1c4a0ba05b796365114942da50de4163c77b0bff6b89eed29a0677ac653fded527815d93c2d25c0058f23a38500ac24cae26f868440001e837cf6682c61cbf56d617894ecb9f688f7f695a7814b40fd1328a2e42002aede3e325034eed1be05fea495b7a6663ecb7625109679d537e847b9cadcf2e38e81657b63802dcfb7452b211f9f229aa584c3313b80fdefb9bacb22beb3769ec3216e82728cbaa145e1ca769a4bffcdd528290f0265771ffe0bfb2db4bc2c557a4854e70b7439e08ac863172d7a4db402d8582c5265d236b186c2042a78bba1a0a655df01f1f8a7fb793af4ab7967fb774fe72a580a98100a3b37e23a03a9f2a52eeb8a4477fd10fd91c4cddf6ba8b234b9250d6f1bd87ddad34334d1b4c96a056ae3c684bbce109edc40b43f5e922b47261190e00dc530d3901025214b3ba0c83702593e4f4a30b9e1e3c0177115eec5bd26feb314742fdd2ce52b6a29ec5727e2d59c0535cc23be10778b65e635ff1f31acfad90d16cbedd84ea09039dece98446136fd1ca5eedb2068d5d3da23adb254df60ddb48bfb48519abb26ae78d592e56f293811d32b34f3feb542a1a3cbdbdd08bbbb35e9fdc14f7b8d0d67e61a9de39534bb3a83bbe9ba2e3e72f6ada2e7e1e777a905d45ae63cef09ecbac9cebf49dad958913d113aa07b4a13da9046ec3f1b3c1919b7c4300a0fe5786edcfa79afc52da6f3f88efad9febfbe735f24cac074867e1b541df5545206467ce8bcab05b8671b7aecab1308465a28806dfdac83751ec9de82f570c393a1d7bfa6dd4f7293d2f388a63225ef6dd45e2a22163c4045a201212db911ad4f3613027c7cd0aecafd79447f7929bee195e57fe1728d790769b9aa43b039ea98384b6c9ed4dc38e204759f5114a940405489dc67048eadc384ea821d5203a612d86c681a33cc45d1c5d8fa2647e0b5c3134003686f5e8aebf4d0c96d1418581ca19962b442aa0a1f68e0aa17a803bfe40144a3ce14e60408a5cb250fcb943163e90b75ea3c345d5d5af7d6d59ba0015dfe990f556f43828b166a5680e6dc05c33a0d8a6963785ac19dc8d3bb0db5fa809a21782ca21292bed7931e13e68af607a37bead8d97d1fb77ffab7fbded6687b7f809420fb94f3220accfda1ae31e50c60c2d4321e93f2527700c2767e7eabc84f2b3fab1e1d369cebdd8ba8a07d5dd197d7f82cd74527ca8a2a0e421b5ad67b1e91cbb4a135f5bc2a0941c25a4c6cf3c35aaed9f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x5, 0x3}}}}]}]}, 0x2a74}}, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) (async) r10 = socket$netlink(0x10, 0x3, 0x0) (async) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) (async, rerun: 32) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 32) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r13, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) (rerun: 64) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) (async, rerun: 32) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=@RTM_NEWMDB={0xf8, 0x54, 0x8, 0x70bd25, 0x25dfdbfd, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x2, 0x4, {@ip4=@dev={0xac, 0x14, 0x14, 0xf}, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x1, {@in6_addr=@mcast1}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x0, 0x2, 0x1, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@private=0xa010101, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x2, 0x2, {@in6_addr=@private1}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x0, 0x2, {@ip4=@empty, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r13, 0x1, 0x2, 0x1, {@in6_addr=@ipv4={'\x00', '\xff\xff', @rand_addr=0x8}, 0x10dba}}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40080}, 0x82) (async, rerun: 32) syz_clone3(&(0x7f0000000800)={0x801000, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[r5, 0x0], 0x6}, 0x58) [ 574.258302][T17175] kmem_cache_alloc+0x4f/0x2f0 [ 574.263071][T17175] ? vm_area_dup+0x26/0x1d0 [ 574.267402][T17175] vm_area_dup+0x26/0x1d0 [ 574.271573][T17175] dup_mmap+0x6b8/0xea0 [ 574.275561][T17175] ? __delayed_free_task+0x20/0x20 [ 574.280519][T17175] ? mm_init+0x807/0x960 [ 574.284595][T17175] dup_mm+0x91/0x330 [ 574.288317][T17175] copy_mm+0x108/0x1b0 [ 574.292223][T17175] copy_process+0x1295/0x3250 [ 574.296755][T17175] ? check_stack_object+0x117/0x130 [ 574.301771][T17175] ? pidfd_show_fdinfo+0x2b0/0x2b0 17:19:23 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) [ 574.306721][T17175] ? copy_clone_args_from_user+0x6f0/0x790 [ 574.312407][T17175] kernel_clone+0x22d/0x990 [ 574.316699][T17175] ? dup_mmap+0xea0/0xea0 [ 574.320866][T17175] ? create_io_thread+0x1e0/0x1e0 [ 574.325731][T17175] ? file_end_write+0x1b0/0x1b0 [ 574.330413][T17175] __x64_sys_clone3+0x375/0x3a0 [ 574.335099][T17175] ? __ia32_sys_clone+0x300/0x300 [ 574.339958][T17175] ? ksys_write+0x25f/0x2c0 [ 574.344303][T17175] ? debug_smp_processor_id+0x17/0x20 [ 574.349502][T17175] do_syscall_64+0x44/0xd0 [ 574.353761][T17175] entry_SYSCALL_64_after_hwframe+0x61/0xcb 17:19:23 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) [ 574.359489][T17175] RIP: 0033:0x7f64a55310d9 [ 574.363740][T17175] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 574.383183][T17175] RSP: 002b:00007f64a42a4038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 574.391422][T17175] RAX: ffffffffffffffda RBX: 00007f64a5650f80 RCX: 00007f64a55310d9 [ 574.399233][T17175] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007f64a42a4050 17:19:23 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x1e800) [ 574.407102][T17175] RBP: 00007f64a42a41d0 R08: 0000000000000000 R09: 0000000000000058 [ 574.414855][T17175] R10: 00007f64a42a4050 R11: 0000000000000246 R12: 0000000000000058 [ 574.422664][T17175] R13: 00007ffc9478d42f R14: 00007f64a42a4300 R15: 0000000000022000 [ 574.430480][T17175] [ 574.438764][T17195] FAULT_INJECTION: forcing a failure. [ 574.438764][T17195] name failslab, interval 1, probability 0, space 0, times 0 17:19:23 executing program 5: r0 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x6}, 0x10) r1 = dup3(r0, r0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={r1, 0x15, 0x0, 0x51c, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x20) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000200), 0x1, 0x28c002) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYRES16=r1, @ANYRES8=r1, @ANYRES16=r0, @ANYBLOB="1ed42efb93ae5e184e91f7197255d0102423007110353d8bc034dde97f9baa7921a62bb70a90230fd40f2f7d42f0776ecdd518921755463fb5f543fad0c870df8d402e799f94ea4a75f6908e56fce71a66dc5c542486646fe0cd802f1b28818e38af584cb8fae3ae0f652b68205330fe867c03d934f016ac2c99bc08d8edecccf5a4cd3de8e8d60183246594e3cff0814091222f5cf82fde9044239318d1a9f93f80ca301c4b73f9b4c3bc596bd62c63fc9d741bdc", @ANYRES32=r2, @ANYRESOCT=r1, @ANYRES32=r2, @ANYRESDEC], 0x2c}}, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x1, 0x22, 0x0) close_range(r0, r2, 0x2) [ 574.466129][T17195] CPU: 0 PID: 17195 Comm: syz-executor.0 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 574.476206][T17195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 574.486101][T17195] Call Trace: [ 574.489226][T17195] [ 574.492002][T17195] dump_stack_lvl+0x151/0x1b7 [ 574.496512][T17195] ? bfq_pos_tree_add_move+0x43e/0x43e [ 574.501811][T17195] dump_stack+0x15/0x17 [ 574.505803][T17195] should_fail+0x3c0/0x510 [ 574.510059][T17195] __should_failslab+0x9f/0xe0 [ 574.514653][T17195] should_failslab+0x9/0x20 [ 574.518992][T17195] kmem_cache_alloc+0x4f/0x2f0 [ 574.523595][T17195] ? anon_vma_clone+0xa1/0x4f0 [ 574.528198][T17195] anon_vma_clone+0xa1/0x4f0 [ 574.532623][T17195] anon_vma_fork+0x91/0x4f0 [ 574.537052][T17195] ? anon_vma_name+0x4c/0x70 [ 574.541474][T17195] dup_mmap+0x750/0xea0 [ 574.545460][T17195] ? __delayed_free_task+0x20/0x20 [ 574.550407][T17195] ? mm_init+0x807/0x960 [ 574.554491][T17195] dup_mm+0x91/0x330 [ 574.558216][T17195] copy_mm+0x108/0x1b0 [ 574.562123][T17195] copy_process+0x1295/0x3250 [ 574.566636][T17195] ? check_stack_object+0x117/0x130 [ 574.571669][T17195] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 574.576617][T17195] ? copy_clone_args_from_user+0x6f0/0x790 [ 574.582380][T17195] kernel_clone+0x22d/0x990 [ 574.586723][T17195] ? dup_mmap+0xea0/0xea0 [ 574.590871][T17195] ? create_io_thread+0x1e0/0x1e0 [ 574.595734][T17195] ? file_end_write+0x1b0/0x1b0 [ 574.600420][T17195] __x64_sys_clone3+0x375/0x3a0 [ 574.605105][T17195] ? __ia32_sys_clone+0x300/0x300 [ 574.609975][T17195] ? ksys_write+0x25f/0x2c0 [ 574.614467][T17195] ? debug_smp_processor_id+0x17/0x20 [ 574.619675][T17195] do_syscall_64+0x44/0xd0 [ 574.623926][T17195] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 574.629740][T17195] RIP: 0033:0x7fa07a6ec0d9 [ 574.633997][T17195] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 574.653680][T17195] RSP: 002b:00007fa07945f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 574.661920][T17195] RAX: ffffffffffffffda RBX: 00007fa07a80bf80 RCX: 00007fa07a6ec0d9 [ 574.669728][T17195] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fa07945f050 [ 574.677541][T17195] RBP: 00007fa07945f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 574.685353][T17195] R10: 00007fa07945f050 R11: 0000000000000246 R12: 0000000000000058 [ 574.693163][T17195] R13: 00007ffd55a8aedf R14: 00007fa07945f300 R15: 0000000000022000 [ 574.700979][T17195] 17:19:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xb4}, {0x0}, {&(0x7f0000002a80)=""/4096, 0xe14}], 0x3, 0x0, 0xc0010000000000}}], 0x300, 0x0, 0x0) 17:19:24 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x1ef50) 17:19:24 executing program 2: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 75) 17:19:24 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) 17:19:24 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 77) 17:19:24 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x1f000) [ 575.032358][T17214] FAULT_INJECTION: forcing a failure. [ 575.032358][T17214] name failslab, interval 1, probability 0, space 0, times 0 [ 575.044820][T17214] CPU: 0 PID: 17214 Comm: syz-executor.2 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 575.054839][T17218] FAULT_INJECTION: forcing a failure. [ 575.054839][T17218] name failslab, interval 1, probability 0, space 0, times 0 [ 575.054856][T17214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 575.054870][T17214] Call Trace: [ 575.054876][T17214] [ 575.083063][T17214] dump_stack_lvl+0x151/0x1b7 [ 575.087572][T17214] ? bfq_pos_tree_add_move+0x43e/0x43e [ 575.092871][T17214] ? do_syscall_64+0x44/0xd0 [ 575.097313][T17214] dump_stack+0x15/0x17 [ 575.101286][T17214] should_fail+0x3c0/0x510 [ 575.105539][T17214] __should_failslab+0x9f/0xe0 [ 575.110136][T17214] should_failslab+0x9/0x20 [ 575.114484][T17214] kmem_cache_alloc+0x4f/0x2f0 [ 575.119076][T17214] ? anon_vma_clone+0xa1/0x4f0 [ 575.123681][T17214] anon_vma_clone+0xa1/0x4f0 [ 575.128104][T17214] anon_vma_fork+0x91/0x4f0 [ 575.132440][T17214] ? anon_vma_name+0x43/0x70 [ 575.136868][T17214] dup_mmap+0x750/0xea0 [ 575.140872][T17214] ? __delayed_free_task+0x20/0x20 [ 575.145807][T17214] ? mm_init+0x807/0x960 [ 575.149888][T17214] dup_mm+0x91/0x330 [ 575.153617][T17214] copy_mm+0x108/0x1b0 [ 575.157525][T17214] copy_process+0x1295/0x3250 [ 575.162039][T17214] ? check_stack_object+0x117/0x130 [ 575.167071][T17214] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 575.172024][T17214] ? copy_clone_args_from_user+0x6f0/0x790 [ 575.177661][T17214] kernel_clone+0x22d/0x990 [ 575.181998][T17214] ? dup_mmap+0xea0/0xea0 [ 575.186177][T17214] ? create_io_thread+0x1e0/0x1e0 [ 575.191031][T17214] ? file_end_write+0x1b0/0x1b0 [ 575.195717][T17214] __x64_sys_clone3+0x375/0x3a0 [ 575.200402][T17214] ? __ia32_sys_clone+0x300/0x300 [ 575.205259][T17214] ? ksys_write+0x25f/0x2c0 [ 575.209598][T17214] ? debug_smp_processor_id+0x17/0x20 [ 575.214894][T17214] do_syscall_64+0x44/0xd0 [ 575.219147][T17214] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 575.224873][T17214] RIP: 0033:0x7f64a55310d9 [ 575.229129][T17214] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 575.248569][T17214] RSP: 002b:00007f64a42a4038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 575.256900][T17214] RAX: ffffffffffffffda RBX: 00007f64a5650f80 RCX: 00007f64a55310d9 [ 575.264708][T17214] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007f64a42a4050 [ 575.272521][T17214] RBP: 00007f64a42a41d0 R08: 0000000000000000 R09: 0000000000000058 [ 575.280416][T17214] R10: 00007f64a42a4050 R11: 0000000000000246 R12: 0000000000000058 [ 575.288228][T17214] R13: 00007ffc9478d42f R14: 00007f64a42a4300 R15: 0000000000022000 [ 575.296043][T17214] [ 575.298905][T17218] CPU: 1 PID: 17218 Comm: syz-executor.0 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 575.308976][T17218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 575.318870][T17218] Call Trace: [ 575.321992][T17218] [ 575.324770][T17218] dump_stack_lvl+0x151/0x1b7 [ 575.329284][T17218] ? bfq_pos_tree_add_move+0x43e/0x43e [ 575.334575][T17218] dump_stack+0x15/0x17 [ 575.338566][T17218] should_fail+0x3c0/0x510 [ 575.342822][T17218] __should_failslab+0x9f/0xe0 [ 575.347423][T17218] should_failslab+0x9/0x20 [ 575.351758][T17218] kmem_cache_alloc+0x4f/0x2f0 [ 575.356360][T17218] ? anon_vma_clone+0xa1/0x4f0 [ 575.360960][T17218] anon_vma_clone+0xa1/0x4f0 [ 575.365384][T17218] anon_vma_fork+0x91/0x4f0 [ 575.369724][T17218] ? anon_vma_name+0x43/0x70 [ 575.374153][T17218] dup_mmap+0x750/0xea0 [ 575.378142][T17218] ? __delayed_free_task+0x20/0x20 [ 575.383089][T17218] ? mm_init+0x807/0x960 [ 575.387171][T17218] dup_mm+0x91/0x330 [ 575.390900][T17218] copy_mm+0x108/0x1b0 [ 575.394808][T17218] copy_process+0x1295/0x3250 [ 575.399321][T17218] ? check_stack_object+0x117/0x130 [ 575.404355][T17218] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 575.409300][T17218] ? copy_clone_args_from_user+0x6f0/0x790 [ 575.414941][T17218] kernel_clone+0x22d/0x990 [ 575.419281][T17218] ? dup_mmap+0xea0/0xea0 [ 575.423448][T17218] ? create_io_thread+0x1e0/0x1e0 [ 575.428310][T17218] ? file_end_write+0x1b0/0x1b0 [ 575.432996][T17218] __x64_sys_clone3+0x375/0x3a0 [ 575.437680][T17218] ? __ia32_sys_clone+0x300/0x300 [ 575.442543][T17218] ? ksys_write+0x25f/0x2c0 [ 575.446884][T17218] ? debug_smp_processor_id+0x17/0x20 [ 575.452088][T17218] do_syscall_64+0x44/0xd0 [ 575.456340][T17218] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 575.462069][T17218] RIP: 0033:0x7fa07a6ec0d9 [ 575.466324][T17218] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 575.485764][T17218] RSP: 002b:00007fa07945f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 575.494011][T17218] RAX: ffffffffffffffda RBX: 00007fa07a80bf80 RCX: 00007fa07a6ec0d9 [ 575.501821][T17218] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fa07945f050 [ 575.509630][T17218] RBP: 00007fa07945f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 575.517441][T17218] R10: 00007fa07945f050 R11: 0000000000000246 R12: 0000000000000058 [ 575.525255][T17218] R13: 00007ffd55a8aedf R14: 00007fa07945f300 R15: 0000000000022000 17:19:24 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) 17:19:24 executing program 2: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 76) 17:19:24 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x1f733) 17:19:24 executing program 5: r0 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x6}, 0x10) r1 = dup3(r0, r0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={r1, 0x15, 0x0, 0x51c, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x20) (async, rerun: 64) r2 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r3 = syz_open_dev$vcsn(&(0x7f0000000200), 0x1, 0x28c002) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYRES16=r1, @ANYRES8=r1, @ANYRES16=r0, @ANYBLOB="1ed42efb93ae5e184e91f7197255d0102423007110353d8bc034dde97f9baa7921a62bb70a90230fd40f2f7d42f0776ecdd518921755463fb5f543fad0c870df8d402e799f94ea4a75f6908e56fce71a66dc5c542486646fe0cd802f1b28818e38af584cb8fae3ae0f652b68205330fe867c03d934f016ac2c99bc08d8edecccf5a4cd3de8e8d60183246594e3cff0814091222f5cf82fde9044239318d1a9f93f80ca301c4b73f9b4c3bc596bd62c63fc9d741bdc", @ANYRES32=r2, @ANYRESOCT=r1, @ANYRES32=r2, @ANYRESDEC], 0x2c}}, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x1, 0x22, 0x0) (async) close_range(r0, r2, 0x2) [ 575.533067][T17218] 17:19:24 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 78) 17:19:24 executing program 5: r0 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x6}, 0x10) r1 = dup3(r0, r0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={r1, 0x15, 0x0, 0x51c, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x20) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000200), 0x1, 0x28c002) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYRES16=r1, @ANYRES8=r1, @ANYRES16=r0, @ANYBLOB="1ed42efb93ae5e184e91f7197255d0102423007110353d8bc034dde97f9baa7921a62bb70a90230fd40f2f7d42f0776ecdd518921755463fb5f543fad0c870df8d402e799f94ea4a75f6908e56fce71a66dc5c542486646fe0cd802f1b28818e38af584cb8fae3ae0f652b68205330fe867c03d934f016ac2c99bc08d8edecccf5a4cd3de8e8d60183246594e3cff0814091222f5cf82fde9044239318d1a9f93f80ca301c4b73f9b4c3bc596bd62c63fc9d741bdc", @ANYRES32=r2, @ANYRESOCT=r1, @ANYRES32=r2, @ANYRESDEC], 0x2c}}, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x1, 0x22, 0x0) close_range(r0, r2, 0x2) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x6}, 0x10) (async) dup3(r0, r0, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={r1, 0x15, 0x0, 0x51c, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x20) (async) socket$netlink(0x10, 0x3, 0x0) (async) syz_open_dev$vcsn(&(0x7f0000000200), 0x1, 0x28c002) (async) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYRES16=r1, @ANYRES8=r1, @ANYRES16=r0, @ANYBLOB="1ed42efb93ae5e184e91f7197255d0102423007110353d8bc034dde97f9baa7921a62bb70a90230fd40f2f7d42f0776ecdd518921755463fb5f543fad0c870df8d402e799f94ea4a75f6908e56fce71a66dc5c542486646fe0cd802f1b28818e38af584cb8fae3ae0f652b68205330fe867c03d934f016ac2c99bc08d8edecccf5a4cd3de8e8d60183246594e3cff0814091222f5cf82fde9044239318d1a9f93f80ca301c4b73f9b4c3bc596bd62c63fc9d741bdc", @ANYRES32=r2, @ANYRESOCT=r1, @ANYRES32=r2, @ANYRESDEC], 0x2c}}, 0x0) (async) recvmmsg(r2, &(0x7f0000000040), 0x1, 0x22, 0x0) (async) close_range(r0, r2, 0x2) (async) [ 575.566599][T17228] FAULT_INJECTION: forcing a failure. [ 575.566599][T17228] name failslab, interval 1, probability 0, space 0, times 0 [ 575.580591][T17228] CPU: 0 PID: 17228 Comm: syz-executor.2 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 575.590674][T17228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 575.600569][T17228] Call Trace: [ 575.603691][T17228] [ 575.606467][T17228] dump_stack_lvl+0x151/0x1b7 [ 575.610984][T17228] ? bfq_pos_tree_add_move+0x43e/0x43e [ 575.616275][T17228] ? do_syscall_64+0x44/0xd0 [ 575.620710][T17228] dump_stack+0x15/0x17 [ 575.624694][T17228] should_fail+0x3c0/0x510 [ 575.626346][T17235] FAULT_INJECTION: forcing a failure. [ 575.626346][T17235] name failslab, interval 1, probability 0, space 0, times 0 [ 575.628946][T17228] __should_failslab+0x9f/0xe0 [ 575.628975][T17228] should_failslab+0x9/0x20 [ 575.628993][T17228] kmem_cache_alloc+0x4f/0x2f0 [ 575.654899][T17228] ? anon_vma_clone+0xa1/0x4f0 [ 575.659495][T17228] anon_vma_clone+0xa1/0x4f0 [ 575.663920][T17228] anon_vma_fork+0x91/0x4f0 [ 575.668263][T17228] ? anon_vma_name+0x43/0x70 [ 575.672692][T17228] dup_mmap+0x750/0xea0 [ 575.676682][T17228] ? __delayed_free_task+0x20/0x20 [ 575.681628][T17228] ? mm_init+0x807/0x960 [ 575.685704][T17228] dup_mm+0x91/0x330 [ 575.689446][T17228] copy_mm+0x108/0x1b0 [ 575.693341][T17228] copy_process+0x1295/0x3250 [ 575.697947][T17228] ? check_stack_object+0x117/0x130 [ 575.702978][T17228] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 575.707923][T17228] ? copy_clone_args_from_user+0x6f0/0x790 [ 575.713659][T17228] kernel_clone+0x22d/0x990 [ 575.718029][T17228] ? dup_mmap+0xea0/0xea0 [ 575.722163][T17228] ? create_io_thread+0x1e0/0x1e0 [ 575.727029][T17228] ? file_end_write+0x1b0/0x1b0 [ 575.731712][T17228] __x64_sys_clone3+0x375/0x3a0 [ 575.736397][T17228] ? __ia32_sys_clone+0x300/0x300 [ 575.741260][T17228] ? ksys_write+0x25f/0x2c0 [ 575.745599][T17228] ? debug_smp_processor_id+0x17/0x20 [ 575.750894][T17228] do_syscall_64+0x44/0xd0 [ 575.755147][T17228] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 575.760874][T17228] RIP: 0033:0x7f64a55310d9 [ 575.765129][T17228] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 575.784567][T17228] RSP: 002b:00007f64a42a4038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 575.793768][T17228] RAX: ffffffffffffffda RBX: 00007f64a5650f80 RCX: 00007f64a55310d9 [ 575.801582][T17228] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007f64a42a4050 [ 575.809388][T17228] RBP: 00007f64a42a41d0 R08: 0000000000000000 R09: 0000000000000058 [ 575.817201][T17228] R10: 00007f64a42a4050 R11: 0000000000000246 R12: 0000000000000058 [ 575.825014][T17228] R13: 00007ffc9478d42f R14: 00007f64a42a4300 R15: 0000000000022000 [ 575.832831][T17228] [ 575.835689][T17235] CPU: 1 PID: 17235 Comm: syz-executor.0 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 575.845758][T17235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 575.855764][T17235] Call Trace: [ 575.858885][T17235] [ 575.861669][T17235] dump_stack_lvl+0x151/0x1b7 17:19:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xb4}, {0x0}, {&(0x7f0000002a80)=""/4096, 0xe14}], 0x3, 0x0, 0xf0ffffff7f0000}}], 0x300, 0x0, 0x0) 17:19:25 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) [ 575.866171][T17235] ? bfq_pos_tree_add_move+0x43e/0x43e [ 575.871474][T17235] dump_stack+0x15/0x17 [ 575.875467][T17235] should_fail+0x3c0/0x510 [ 575.879717][T17235] __should_failslab+0x9f/0xe0 [ 575.883258][T17240] __nla_validate_parse: 129 callbacks suppressed [ 575.883275][T17240] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 575.884313][T17235] should_failslab+0x9/0x20 [ 575.884337][T17235] kmem_cache_alloc+0x4f/0x2f0 [ 575.891259][T17240] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 575.899677][T17235] ? anon_vma_clone+0xa1/0x4f0 [ 575.899709][T17235] anon_vma_clone+0xa1/0x4f0 [ 575.899725][T17235] anon_vma_fork+0x91/0x4f0 [ 575.899742][T17235] ? anon_vma_name+0x43/0x70 [ 575.907243][T17240] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 575.908624][T17235] dup_mmap+0x750/0xea0 [ 575.917913][T17240] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 575.922332][T17235] ? __delayed_free_task+0x20/0x20 [ 575.922361][T17235] ? mm_init+0x807/0x960 [ 575.926937][T17240] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 575.931096][T17235] dup_mm+0x91/0x330 [ 575.931118][T17235] copy_mm+0x108/0x1b0 [ 575.931133][T17235] copy_process+0x1295/0x3250 [ 575.939613][T17240] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 575.944641][T17235] ? check_stack_object+0x117/0x130 [ 575.949098][T17240] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 575.957828][T17235] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 575.957852][T17235] ? copy_clone_args_from_user+0x6f0/0x790 [ 575.957872][T17235] kernel_clone+0x22d/0x990 [ 575.965430][T17240] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 575.966850][T17235] ? dup_mmap+0xea0/0xea0 [ 575.966876][T17235] ? create_io_thread+0x1e0/0x1e0 [ 575.976393][T17240] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 575.979695][T17235] ? file_end_write+0x1b0/0x1b0 [ 575.979722][T17235] __x64_sys_clone3+0x375/0x3a0 [ 575.979740][T17235] ? __ia32_sys_clone+0x300/0x300 [ 575.984034][T17240] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 575.988115][T17235] ? ksys_write+0x25f/0x2c0 [ 575.988141][T17235] ? debug_smp_processor_id+0x17/0x20 [ 575.988158][T17235] do_syscall_64+0x44/0xd0 [ 576.091575][T17235] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 576.097457][T17235] RIP: 0033:0x7fa07a6ec0d9 [ 576.101705][T17235] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 576.121143][T17235] RSP: 002b:00007fa07945f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 576.129389][T17235] RAX: ffffffffffffffda RBX: 00007fa07a80bf80 RCX: 00007fa07a6ec0d9 [ 576.137201][T17235] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fa07945f050 [ 576.145014][T17235] RBP: 00007fa07945f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 576.152908][T17235] R10: 00007fa07945f050 R11: 0000000000000246 R12: 0000000000000058 [ 576.160716][T17235] R13: 00007ffd55a8aedf R14: 00007fa07945f300 R15: 0000000000022000 17:19:25 executing program 2: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 77) 17:19:25 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="7f0000000000000008ec53773e1ea1a5ddc1d668442b917af584643d150a397967b8ced40d57fcb8c5061bf3372bccdbd64707a2312431d1d865657f2c593d5d121c3632c10a85cd21ff826b0d796f29094b0fd98519e79ba69cd126"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xb4}, {0x0}, {&(0x7f0000002a80)=""/4096, 0xe14}], 0x3}}], 0x300, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000000)="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") syz_clone3(&(0x7f0000000800)={0x8004000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x10000}, 0xc) 17:19:25 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x1f800) [ 576.168533][T17235] 17:19:25 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 79) 17:19:25 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) [ 576.194031][T17254] FAULT_INJECTION: forcing a failure. [ 576.194031][T17254] name failslab, interval 1, probability 0, space 0, times 0 [ 576.216805][T17254] CPU: 1 PID: 17254 Comm: syz-executor.2 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 576.226877][T17254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 576.236764][T17254] Call Trace: [ 576.239890][T17254] [ 576.242666][T17254] dump_stack_lvl+0x151/0x1b7 [ 576.247183][T17254] ? bfq_pos_tree_add_move+0x43e/0x43e [ 576.252492][T17254] dump_stack+0x15/0x17 [ 576.256470][T17254] should_fail+0x3c0/0x510 [ 576.260720][T17254] __should_failslab+0x9f/0xe0 [ 576.265322][T17254] should_failslab+0x9/0x20 [ 576.269663][T17254] kmem_cache_alloc+0x4f/0x2f0 [ 576.274265][T17254] ? anon_vma_clone+0xa1/0x4f0 [ 576.278857][T17254] anon_vma_clone+0xa1/0x4f0 [ 576.283284][T17254] anon_vma_fork+0x91/0x4f0 [ 576.287624][T17254] ? anon_vma_name+0x43/0x70 [ 576.292051][T17254] dup_mmap+0x750/0xea0 [ 576.296044][T17254] ? __delayed_free_task+0x20/0x20 [ 576.300993][T17254] ? mm_init+0x807/0x960 [ 576.305074][T17254] dup_mm+0x91/0x330 [ 576.308801][T17254] copy_mm+0x108/0x1b0 [ 576.312708][T17254] copy_process+0x1295/0x3250 [ 576.317222][T17254] ? check_stack_object+0x117/0x130 [ 576.322255][T17254] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 576.327203][T17254] ? copy_clone_args_from_user+0x6f0/0x790 [ 576.332849][T17254] kernel_clone+0x22d/0x990 [ 576.337188][T17254] ? dup_mmap+0xea0/0xea0 [ 576.341350][T17254] ? create_io_thread+0x1e0/0x1e0 [ 576.346209][T17254] ? file_end_write+0x1b0/0x1b0 [ 576.350901][T17254] __x64_sys_clone3+0x375/0x3a0 [ 576.355582][T17254] ? __ia32_sys_clone+0x300/0x300 [ 576.360446][T17254] ? ksys_write+0x25f/0x2c0 [ 576.364786][T17254] ? debug_smp_processor_id+0x17/0x20 [ 576.369989][T17254] do_syscall_64+0x44/0xd0 [ 576.374243][T17254] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 576.379974][T17254] RIP: 0033:0x7f64a55310d9 [ 576.384226][T17254] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 576.403666][T17254] RSP: 002b:00007f64a42a4038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 576.411908][T17254] RAX: ffffffffffffffda RBX: 00007f64a5650f80 RCX: 00007f64a55310d9 [ 576.419721][T17254] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007f64a42a4050 [ 576.427537][T17254] RBP: 00007f64a42a41d0 R08: 0000000000000000 R09: 0000000000000058 [ 576.435431][T17254] R10: 00007f64a42a4050 R11: 0000000000000246 R12: 0000000000000058 17:19:25 executing program 2: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 78) [ 576.443244][T17254] R13: 00007ffc9478d42f R14: 00007f64a42a4300 R15: 0000000000022000 [ 576.451066][T17254] [ 576.475273][T17263] FAULT_INJECTION: forcing a failure. [ 576.475273][T17263] name failslab, interval 1, probability 0, space 0, times 0 17:19:25 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x1fef3) 17:19:25 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) [ 576.488001][T17263] CPU: 0 PID: 17263 Comm: syz-executor.0 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 576.498072][T17263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 576.507965][T17263] Call Trace: [ 576.511087][T17263] [ 576.513866][T17263] dump_stack_lvl+0x151/0x1b7 [ 576.518379][T17263] ? bfq_pos_tree_add_move+0x43e/0x43e [ 576.523674][T17263] ? vma_interval_tree_augment_rotate+0x210/0x210 [ 576.529922][T17263] dump_stack+0x15/0x17 [ 576.533915][T17263] should_fail+0x3c0/0x510 [ 576.538168][T17263] __should_failslab+0x9f/0xe0 17:19:25 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) [ 576.542768][T17263] should_failslab+0x9/0x20 [ 576.547106][T17263] kmem_cache_alloc+0x4f/0x2f0 [ 576.551705][T17263] ? anon_vma_fork+0xf7/0x4f0 [ 576.556221][T17263] anon_vma_fork+0xf7/0x4f0 [ 576.560558][T17263] ? anon_vma_name+0x43/0x70 [ 576.564996][T17263] dup_mmap+0x750/0xea0 [ 576.568980][T17263] ? __delayed_free_task+0x20/0x20 [ 576.573924][T17263] ? mm_init+0x807/0x960 [ 576.578003][T17263] dup_mm+0x91/0x330 [ 576.581733][T17263] copy_mm+0x108/0x1b0 [ 576.585638][T17263] copy_process+0x1295/0x3250 [ 576.590159][T17263] ? check_stack_object+0x117/0x130 [ 576.591694][T17268] FAULT_INJECTION: forcing a failure. [ 576.591694][T17268] name failslab, interval 1, probability 0, space 0, times 0 [ 576.595185][T17263] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 576.612553][T17263] ? copy_clone_args_from_user+0x6f0/0x790 [ 576.618187][T17263] kernel_clone+0x22d/0x990 [ 576.622529][T17263] ? dup_mmap+0xea0/0xea0 [ 576.626702][T17263] ? create_io_thread+0x1e0/0x1e0 [ 576.631558][T17263] ? file_end_write+0x1b0/0x1b0 [ 576.636250][T17263] __x64_sys_clone3+0x375/0x3a0 [ 576.640924][T17263] ? __ia32_sys_clone+0x300/0x300 17:19:26 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x20000) [ 576.645786][T17263] ? ksys_write+0x25f/0x2c0 [ 576.650124][T17263] ? debug_smp_processor_id+0x17/0x20 [ 576.655331][T17263] do_syscall_64+0x44/0xd0 [ 576.659583][T17263] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 576.665317][T17263] RIP: 0033:0x7fa07a6ec0d9 [ 576.669568][T17263] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 17:19:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xb4}, {0x0}, {&(0x7f0000002a80)=""/4096, 0xe14}], 0x3, 0x0, 0x100000000000000}}], 0x300, 0x0, 0x0) [ 576.689012][T17263] RSP: 002b:00007fa07945f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 576.697254][T17263] RAX: ffffffffffffffda RBX: 00007fa07a80bf80 RCX: 00007fa07a6ec0d9 [ 576.705062][T17263] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fa07945f050 [ 576.712873][T17263] RBP: 00007fa07945f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 576.720689][T17263] R10: 00007fa07945f050 R11: 0000000000000246 R12: 0000000000000058 [ 576.728502][T17263] R13: 00007ffd55a8aedf R14: 00007fa07945f300 R15: 0000000000022000 [ 576.736316][T17263] [ 576.739210][T17268] CPU: 1 PID: 17268 Comm: syz-executor.2 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 576.749243][T17268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 576.759144][T17268] Call Trace: [ 576.762256][T17268] [ 576.765032][T17268] dump_stack_lvl+0x151/0x1b7 [ 576.769545][T17268] ? bfq_pos_tree_add_move+0x43e/0x43e [ 576.774842][T17268] dump_stack+0x15/0x17 [ 576.778836][T17268] should_fail+0x3c0/0x510 [ 576.783084][T17268] __should_failslab+0x9f/0xe0 [ 576.787691][T17268] should_failslab+0x9/0x20 [ 576.792029][T17268] kmem_cache_alloc+0x4f/0x2f0 [ 576.796625][T17268] ? anon_vma_clone+0xa1/0x4f0 [ 576.801227][T17268] anon_vma_clone+0xa1/0x4f0 [ 576.805655][T17268] anon_vma_fork+0x91/0x4f0 [ 576.809992][T17268] ? anon_vma_name+0x43/0x70 [ 576.814428][T17268] dup_mmap+0x750/0xea0 [ 576.818416][T17268] ? __delayed_free_task+0x20/0x20 [ 576.823363][T17268] ? mm_init+0x807/0x960 [ 576.827443][T17268] dup_mm+0x91/0x330 [ 576.831173][T17268] copy_mm+0x108/0x1b0 [ 576.835078][T17268] copy_process+0x1295/0x3250 [ 576.839588][T17268] ? check_stack_object+0x117/0x130 [ 576.844621][T17268] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 576.849568][T17268] ? copy_clone_args_from_user+0x6f0/0x790 [ 576.855212][T17268] kernel_clone+0x22d/0x990 [ 576.859550][T17268] ? dup_mmap+0xea0/0xea0 [ 576.863716][T17268] ? create_io_thread+0x1e0/0x1e0 [ 576.868574][T17268] ? file_end_write+0x1b0/0x1b0 [ 576.873263][T17268] __x64_sys_clone3+0x375/0x3a0 [ 576.877949][T17268] ? __ia32_sys_clone+0x300/0x300 [ 576.882810][T17268] ? ksys_write+0x25f/0x2c0 [ 576.887151][T17268] ? debug_smp_processor_id+0x17/0x20 [ 576.892365][T17268] do_syscall_64+0x44/0xd0 [ 576.896610][T17268] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 576.902337][T17268] RIP: 0033:0x7f64a55310d9 [ 576.906595][T17268] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 576.926034][T17268] RSP: 002b:00007f64a42a4038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 576.934275][T17268] RAX: ffffffffffffffda RBX: 00007f64a5650f80 RCX: 00007f64a55310d9 17:19:26 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 80) 17:19:26 executing program 2: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 79) [ 576.942086][T17268] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007f64a42a4050 [ 576.949898][T17268] RBP: 00007f64a42a41d0 R08: 0000000000000000 R09: 0000000000000058 [ 576.957708][T17268] R10: 00007f64a42a4050 R11: 0000000000000246 R12: 0000000000000058 [ 576.965522][T17268] R13: 00007ffc9478d42f R14: 00007f64a42a4300 R15: 0000000000022000 [ 576.973335][T17268] [ 577.020989][T17280] FAULT_INJECTION: forcing a failure. [ 577.020989][T17280] name failslab, interval 1, probability 0, space 0, times 0 [ 577.033597][T17280] CPU: 1 PID: 17280 Comm: syz-executor.2 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 577.043670][T17280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 577.053648][T17280] Call Trace: [ 577.056781][T17280] [ 577.059549][T17280] dump_stack_lvl+0x151/0x1b7 [ 577.064063][T17280] ? bfq_pos_tree_add_move+0x43e/0x43e [ 577.069355][T17280] dump_stack+0x15/0x17 [ 577.073346][T17280] should_fail+0x3c0/0x510 [ 577.077599][T17280] __should_failslab+0x9f/0xe0 [ 577.082199][T17280] should_failslab+0x9/0x20 [ 577.086539][T17280] kmem_cache_alloc+0x4f/0x2f0 [ 577.091140][T17280] ? anon_vma_fork+0x1b9/0x4f0 [ 577.095744][T17280] anon_vma_fork+0x1b9/0x4f0 [ 577.100166][T17280] dup_mmap+0x750/0xea0 [ 577.104157][T17280] ? __delayed_free_task+0x20/0x20 [ 577.109107][T17280] ? mm_init+0x807/0x960 [ 577.113185][T17280] dup_mm+0x91/0x330 [ 577.116915][T17280] copy_mm+0x108/0x1b0 [ 577.120823][T17280] copy_process+0x1295/0x3250 [ 577.125335][T17280] ? check_stack_object+0x117/0x130 [ 577.130369][T17280] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 577.135319][T17280] ? copy_clone_args_from_user+0x6f0/0x790 [ 577.140956][T17280] kernel_clone+0x22d/0x990 [ 577.145296][T17280] ? dup_mmap+0xea0/0xea0 [ 577.149465][T17280] ? create_io_thread+0x1e0/0x1e0 [ 577.154429][T17280] ? file_end_write+0x1b0/0x1b0 [ 577.159115][T17280] __x64_sys_clone3+0x375/0x3a0 [ 577.163803][T17280] ? __ia32_sys_clone+0x300/0x300 [ 577.168874][T17280] ? ksys_write+0x25f/0x2c0 [ 577.173212][T17280] ? debug_smp_processor_id+0x17/0x20 [ 577.178426][T17280] do_syscall_64+0x44/0xd0 [ 577.182672][T17280] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 577.188398][T17280] RIP: 0033:0x7f64a55310d9 [ 577.192653][T17280] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 577.212182][T17280] RSP: 002b:00007f64a42a4038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 577.220430][T17280] RAX: ffffffffffffffda RBX: 00007f64a5650f80 RCX: 00007f64a55310d9 [ 577.228236][T17280] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007f64a42a4050 [ 577.236164][T17280] RBP: 00007f64a42a41d0 R08: 0000000000000000 R09: 0000000000000058 [ 577.243961][T17280] R10: 00007f64a42a4050 R11: 0000000000000246 R12: 0000000000000058 [ 577.251774][T17280] R13: 00007ffc9478d42f R14: 00007f64a42a4300 R15: 0000000000022000 [ 577.259588][T17280] 17:19:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="7f0000000000000008ec53773e1ea1a5ddc1d668442b917af584643d150a397967b8ced40d57fcb8c5061bf3372bccdbd64707a2312431d1d865657f2c593d5d121c3632c10a85cd21ff826b0d796f29094b0fd98519e79ba69cd126"], 0x2c}}, 0x0) (async, rerun: 64) recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xb4}, {0x0}, {&(0x7f0000002a80)=""/4096, 0xe14}], 0x3}}], 0x300, 0x0, 0x0) (async, rerun: 64) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000000)="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") (async, rerun: 64) syz_clone3(&(0x7f0000000800)={0x8004000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) (async, rerun: 64) connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x10000}, 0xc) 17:19:26 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) 17:19:26 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x206b0) [ 577.268041][T17280] ------------[ cut here ]------------ [ 577.273421][T17280] refcount_t: underflow; use-after-free. [ 577.286073][T17280] WARNING: CPU: 0 PID: 17280 at lib/refcount.c:28 refcount_warn_saturate+0x165/0x1b0 17:19:26 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) 17:19:26 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x20800) [ 577.318750][T17280] Modules linked in: [ 577.325225][T17280] CPU: 0 PID: 17280 Comm: syz-executor.2 Not tainted 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 577.339046][T17280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 577.352345][T17280] RIP: 0010:refcount_warn_saturate+0x165/0x1b0 [ 577.361773][T17280] Code: c7 80 61 87 85 31 c0 e8 e9 32 e0 fe 0f 0b eb 83 e8 80 c0 0e ff c6 05 ef 4e 9f 04 01 48 c7 c7 e0 61 87 85 31 c0 e8 cb 32 e0 fe <0f> 0b e9 62 ff ff ff e8 5f c0 0e ff c6 05 cf 4e 9f 04 01 48 c7 c7 17:19:26 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x20eb0) 17:19:26 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x21000) [ 577.414036][T17280] RSP: 0018:ffffc9000756f880 EFLAGS: 00010246 [ 577.430848][T17280] RAX: bc6c7f56b1217300 RBX: 0000000000000003 RCX: 0000000000040000 [ 577.446439][T17280] RDX: ffffc90008254000 RSI: 000000000001569a RDI: 000000000001569b 17:19:26 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) [ 577.480300][T17280] RBP: ffffc9000756f890 R08: ffffffff81583989 R09: ffffed103ee065e8 [ 577.515851][T17280] R10: ffffed103ee065e8 R11: 1ffff1103ee065e7 R12: ffff88811e6840a0 17:19:26 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x216b0) 17:19:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xb4}, {0x0}, {&(0x7f0000002a80)=""/4096, 0xe14}], 0x3, 0x0, 0x200000000000000}}], 0x300, 0x0, 0x0) [ 577.540670][T17280] R13: 1ffff11023cd0814 R14: 0000000000000003 R15: ffff88815bc053d0 [ 577.566110][T17280] FS: 00007f64a42a4700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 577.600231][T17280] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 577.619816][T17280] CR2: 00007ffe69b00c38 CR3: 000000015627e000 CR4: 00000000003506b0 [ 577.636463][T17280] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 577.655298][T17280] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 577.671939][T17280] Call Trace: [ 577.678421][T17280] [ 577.684493][T17280] vm_area_free+0x208/0x230 [ 577.695715][T17280] dup_mmap+0xbcd/0xea0 [ 577.704202][T17280] ? __delayed_free_task+0x20/0x20 [ 577.713564][T17280] ? mm_init+0x807/0x960 [ 577.722223][T17280] dup_mm+0x91/0x330 [ 577.728113][ T593] device bridge_slave_1 left promiscuous mode [ 577.735258][ T593] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.744177][T17280] copy_mm+0x108/0x1b0 [ 577.753767][T17280] copy_process+0x1295/0x3250 [ 577.759672][ T593] device bridge_slave_0 left promiscuous mode [ 577.771025][T17280] ? check_stack_object+0x117/0x130 [ 577.777512][ T593] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.792486][T17280] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 577.798343][ T593] device veth1_macvtap left promiscuous mode [ 577.810812][ T593] device veth0_vlan left promiscuous mode [ 577.817395][T17280] ? copy_clone_args_from_user+0x6f0/0x790 [ 577.832442][T17280] kernel_clone+0x22d/0x990 [ 577.848161][T17280] ? dup_mmap+0xea0/0xea0 [ 577.863267][T17280] ? create_io_thread+0x1e0/0x1e0 [ 577.882401][T17280] ? file_end_write+0x1b0/0x1b0 [ 577.893896][T17280] __x64_sys_clone3+0x375/0x3a0 [ 577.901342][T17280] ? __ia32_sys_clone+0x300/0x300 [ 577.916261][T17280] ? ksys_write+0x25f/0x2c0 [ 577.926264][T17280] ? debug_smp_processor_id+0x17/0x20 [ 577.937759][T17280] do_syscall_64+0x44/0xd0 [ 577.943902][T17280] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 577.951037][T17280] RIP: 0033:0x7f64a55310d9 [ 577.955432][T17280] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 577.977174][T17280] RSP: 002b:00007f64a42a4038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 577.986727][T17280] RAX: ffffffffffffffda RBX: 00007f64a5650f80 RCX: 00007f64a55310d9 [ 577.994837][T17280] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007f64a42a4050 [ 578.017992][T17280] RBP: 00007f64a42a41d0 R08: 0000000000000000 R09: 0000000000000058 [ 578.035893][T17280] R10: 00007f64a42a4050 R11: 0000000000000246 R12: 0000000000000058 [ 578.051388][T17280] R13: 00007ffc9478d42f R14: 00007f64a42a4300 R15: 0000000000022000 [ 578.063298][T17280] [ 578.066235][T17280] ---[ end trace 105421f41ca3a163 ]--- [ 579.217648][T17308] ================================================================== [ 579.225539][T17308] BUG: KASAN: use-after-free in __rb_insert_augmented+0xaa/0x670 [ 579.233099][T17308] Read of size 8 at addr ffff8881c0000008 by task syz-executor.0/17308 [ 579.241162][T17308] [ 579.243339][T17308] CPU: 0 PID: 17308 Comm: syz-executor.0 Tainted: G W 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 579.254787][T17308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 579.264682][T17308] Call Trace: [ 579.267805][T17308] [ 579.270697][T17308] dump_stack_lvl+0x151/0x1b7 [ 579.275210][T17308] ? bfq_pos_tree_add_move+0x43e/0x43e [ 579.280505][T17308] ? __wake_up_klogd+0xd9/0x110 [ 579.285194][T17308] ? panic+0x727/0x727 [ 579.289095][T17308] ? do_execveat_common+0xa92/0xc80 [ 579.294130][T17308] print_address_description+0x87/0x3d0 [ 579.299520][T17308] ? current_time+0x1c4/0x310 [ 579.304128][T17308] kasan_report+0x1a6/0x1f0 [ 579.308468][T17308] ? __rb_insert_augmented+0xaa/0x670 [ 579.313674][T17308] ? __rb_insert_augmented+0xaa/0x670 [ 579.318884][T17308] __asan_report_load8_noabort+0x14/0x20 [ 579.324351][T17308] __rb_insert_augmented+0xaa/0x670 [ 579.329385][T17308] ? anon_vma_interval_tree_iter_next+0x3b0/0x3b0 [ 579.335632][T17308] vma_interval_tree_insert+0x2f3/0x310 [ 579.341015][T17308] vma_link+0x18a/0x1f0 [ 579.345008][T17308] mmap_region+0x16dd/0x1af0 [ 579.349432][T17308] ? arch_get_unmapped_area+0x790/0x790 [ 579.354815][T17308] ? file_mmap_ok+0x150/0x150 [ 579.359325][T17308] ? file_mmap_ok+0x104/0x150 [ 579.363841][T17308] do_mmap+0x785/0xe40 [ 579.367746][T17308] vm_mmap_pgoff+0x1d4/0x420 [ 579.372171][T17308] ? account_locked_vm+0x260/0x260 [ 579.377125][T17308] ? __kasan_check_write+0x14/0x20 [ 579.382075][T17308] ? vm_munmap+0x1ac/0x270 [ 579.386318][T17308] ? do_munmap+0x40/0x40 [ 579.390404][T17308] vm_mmap+0x8d/0xb0 [ 579.394130][T17308] elf_map+0x1b1/0x310 [ 579.398037][T17308] load_elf_binary+0x101c/0x27c0 [ 579.402813][T17308] ? load_script+0x8d0/0x8d0 [ 579.407241][T17308] ? _raw_read_unlock+0x25/0x40 [ 579.411922][T17308] ? load_misc_binary+0x88c/0xaf0 [ 579.416784][T17308] ? load_script+0x12d/0x8d0 [ 579.421211][T17308] exec_binprm+0x2a8/0xbc0 [ 579.425464][T17308] ? __bprm_mm_init+0x3d0/0x3d0 [ 579.430148][T17308] ? prepare_creds+0x485/0x690 [ 579.434747][T17308] bprm_execve+0x4f0/0x7f0 [ 579.439001][T17308] do_execveat_common+0xa92/0xc80 [ 579.443865][T17308] __x64_sys_execve+0x92/0xb0 [ 579.448374][T17308] do_syscall_64+0x44/0xd0 [ 579.452628][T17308] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 579.458356][T17308] RIP: 0033:0x4ae0d6 [ 579.462100][T17308] Code: Unable to access opcode bytes at RIP 0x4ae0ac. [ 579.468771][T17308] RSP: 002b:000000c00336b288 EFLAGS: 00000206 ORIG_RAX: 000000000000003b [ 579.477015][T17308] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000004ae0d6 [ 579.484828][T17308] RDX: 000000c01319c960 RSI: 000000c00b5e6048 RDI: 000000c01bcbe318 [ 579.492640][T17308] RBP: 000000c00336b430 R08: 0000000000000008 R09: 0000000000000000 [ 579.500450][T17308] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000004a4aef [ 579.508261][T17308] R13: 0000000000000001 R14: 000000c0004bb040 R15: ffffffffffffffff [ 579.516075][T17308] [ 579.518936][T17308] [ 579.521104][T17308] The buggy address belongs to the page: [ 579.526579][T17308] page:ffffea0007000000 refcount:0 mapcount:-128 mapping:0000000000000000 index:0x0 pfn:0x1c0000 [ 579.536901][T17308] flags: 0x4000000000000000(zone=1) [ 579.541942][T17308] raw: 4000000000000000 ffffea0007010008 ffffea0006ff0008 0000000000000000 [ 579.550445][T17308] raw: 0000000000000000 000000000000000a 00000000ffffff7f 0000000000000000 [ 579.558861][T17308] page dumped because: kasan: bad access detected [ 579.565109][T17308] page_owner info is not present (never set?) [ 579.571015][T17308] [ 579.573180][T17308] Memory state around the buggy address: [ 579.578665][T17308] ffff8881bfffff00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 579.586550][T17308] ffff8881bfffff80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 579.594448][T17308] >ffff8881c0000000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 579.602342][T17308] ^ [ 579.606512][T17308] ffff8881c0000080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 579.614409][T17308] ffff8881c0000100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 579.622307][T17308] ================================================================== [ 579.630208][T17308] Disabling lock debugging due to kernel taint [ 579.696492][T17309] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.703415][T17309] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.710772][T17309] device bridge_slave_0 entered promiscuous mode [ 579.717521][T17309] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.724344][T17309] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.731633][T17309] device bridge_slave_1 entered promiscuous mode [ 579.766671][T17309] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.773544][T17309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 579.780639][T17309] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.787422][T17309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 579.805174][ T5994] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.812353][ T5994] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.819699][ T5994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 579.826946][ T5994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 579.836503][ T5985] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 579.844574][ T5985] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.851451][ T5985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 579.860214][ T5987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 579.868328][ T5987] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.875258][ T5987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 579.893097][T17309] device veth0_vlan entered promiscuous mode [ 579.900718][ T5985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 579.909013][ T5985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 579.916677][ T5985] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 579.924054][ T5985] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 579.931380][ T5985] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 579.939131][ T5985] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 579.952146][T17309] device veth1_macvtap entered promiscuous mode [ 579.958932][ T5993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 579.972229][ T5993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 579.980618][ T5993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 580.000328][T17315] FAULT_INJECTION: forcing a failure. [ 580.000328][T17315] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 580.013716][T17315] CPU: 0 PID: 17315 Comm: syz-executor.0 Tainted: G B W 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 580.025297][T17315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 580.035189][T17315] Call Trace: [ 580.038400][T17315] [ 580.041170][T17315] dump_stack_lvl+0x151/0x1b7 [ 580.045839][T17315] ? bfq_pos_tree_add_move+0x43e/0x43e [ 580.051126][T17315] dump_stack+0x15/0x17 [ 580.055122][T17315] should_fail+0x3c0/0x510 [ 580.059371][T17315] should_fail_alloc_page+0x58/0x70 [ 580.064411][T17315] __alloc_pages+0x1de/0x7c0 [ 580.068839][T17315] ? __count_vm_events+0x30/0x30 [ 580.073606][T17315] pte_alloc_one+0x73/0x1b0 [ 580.077944][T17315] ? pfn_modify_allowed+0x2e0/0x2e0 [ 580.082978][T17315] __pte_alloc+0x86/0x350 [ 580.087150][T17315] ? free_pgtables+0x210/0x210 [ 580.091787][T17315] ? _raw_spin_lock+0xa3/0x1b0 [ 580.096341][T17315] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 580.101550][T17315] ? unwind_get_return_address+0x4c/0x90 [ 580.107052][T17315] copy_pte_range+0x1b1f/0x20b0 [ 580.111706][T17315] ? stack_trace_save+0x12d/0x1f0 [ 580.116587][T17315] ? anon_vma_clone+0xa1/0x4f0 [ 580.121164][T17315] ? __kunmap_atomic+0x80/0x80 [ 580.125777][T17315] ? dup_mmap+0x750/0xea0 [ 580.129929][T17315] ? copy_mm+0x108/0x1b0 [ 580.134008][T17315] ? copy_process+0x1295/0x3250 [ 580.138702][T17315] ? kernel_clone+0x22d/0x990 [ 580.143216][T17315] ? __x64_sys_clone3+0x375/0x3a0 [ 580.148140][T17315] ? do_syscall_64+0x44/0xd0 [ 580.152505][T17315] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 580.158400][T17315] copy_page_range+0xc1e/0x1090 [ 580.163092][T17315] ? pfn_valid+0x1e0/0x1e0 [ 580.167338][T17315] dup_mmap+0x99f/0xea0 [ 580.171329][T17315] ? __delayed_free_task+0x20/0x20 [ 580.176278][T17315] ? mm_init+0x807/0x960 [ 580.180356][T17315] dup_mm+0x91/0x330 [ 580.184089][T17315] copy_mm+0x108/0x1b0 [ 580.187994][T17315] copy_process+0x1295/0x3250 [ 580.192599][T17315] ? check_stack_object+0x117/0x130 [ 580.197628][T17315] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 580.202583][T17315] ? copy_clone_args_from_user+0x6f0/0x790 [ 580.208434][T17315] kernel_clone+0x22d/0x990 [ 580.212773][T17315] ? dup_mmap+0xea0/0xea0 [ 580.216938][T17315] ? create_io_thread+0x1e0/0x1e0 [ 580.221802][T17315] ? file_end_write+0x1b0/0x1b0 [ 580.226489][T17315] __x64_sys_clone3+0x375/0x3a0 [ 580.231171][T17315] ? __ia32_sys_clone+0x300/0x300 [ 580.236031][T17315] ? ksys_write+0x25f/0x2c0 [ 580.240588][T17315] ? debug_smp_processor_id+0x17/0x20 [ 580.245791][T17315] do_syscall_64+0x44/0xd0 [ 580.250046][T17315] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 580.255770][T17315] RIP: 0033:0x7fda5ac0c0d9 [ 580.260134][T17315] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 580.279832][T17315] RSP: 002b:00007fda5997f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 580.288326][T17315] RAX: ffffffffffffffda RBX: 00007fda5ad2bf80 RCX: 00007fda5ac0c0d9 [ 580.296143][T17315] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fda5997f050 [ 580.304322][T17315] RBP: 00007fda5997f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 580.312135][T17315] R10: 00007fda5997f050 R11: 0000000000000246 R12: 0000000000000058 17:19:29 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 81) 17:19:29 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x21800) 17:19:29 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) 17:19:29 executing program 2: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 80) 17:19:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="7f0000000000000008ec53773e1ea1a5ddc1d668442b917af584643d150a397967b8ced40d57fcb8c5061bf3372bccdbd64707a2312431d1d865657f2c593d5d121c3632c10a85cd21ff826b0d796f29094b0fd98519e79ba69cd126"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xb4}, {0x0}, {&(0x7f0000002a80)=""/4096, 0xe14}], 0x3}}], 0x300, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000000)="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") syz_clone3(&(0x7f0000000800)={0x8004000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x10000}, 0xc) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="7f0000000000000008ec53773e1ea1a5ddc1d668442b917af584643d150a397967b8ced40d57fcb8c5061bf3372bccdbd64707a2312431d1d865657f2c593d5d121c3632c10a85cd21ff826b0d796f29094b0fd98519e79ba69cd126"], 0x2c}}, 0x0) (async) recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xb4}, {0x0}, {&(0x7f0000002a80)=""/4096, 0xe14}], 0x3}}], 0x300, 0x0, 0x0) (async) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000000)="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") (async) syz_clone3(&(0x7f0000000800)={0x8004000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) (async) connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x10000}, 0xc) (async) 17:19:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xb4}, {0x0}, {&(0x7f0000002a80)=""/4096, 0xe14}], 0x3, 0x0, 0x300000000000000}}], 0x300, 0x0, 0x0) [ 580.319943][T17315] R13: 00007fffdae7e02f R14: 00007fda5997f300 R15: 0000000000022000 [ 580.327758][T17315] [ 580.351497][T17321] FAULT_INJECTION: forcing a failure. [ 580.351497][T17321] name failslab, interval 1, probability 0, space 0, times 0 [ 580.363989][T17321] CPU: 0 PID: 17321 Comm: syz-executor.2 Tainted: G B W 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 580.375378][T17321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 580.385271][T17321] Call Trace: [ 580.388402][T17321] [ 580.388688][T17327] FAULT_INJECTION: forcing a failure. [ 580.388688][T17327] name failslab, interval 1, probability 0, space 0, times 0 [ 580.391170][T17321] dump_stack_lvl+0x151/0x1b7 [ 580.391201][T17321] ? bfq_pos_tree_add_move+0x43e/0x43e [ 580.413483][T17321] dump_stack+0x15/0x17 [ 580.417469][T17321] should_fail+0x3c0/0x510 [ 580.422161][T17321] __should_failslab+0x9f/0xe0 [ 580.426757][T17321] should_failslab+0x9/0x20 [ 580.431096][T17321] kmem_cache_alloc+0x4f/0x2f0 [ 580.435696][T17321] ? anon_vma_fork+0x1b9/0x4f0 [ 580.440292][T17321] anon_vma_fork+0x1b9/0x4f0 [ 580.444719][T17321] dup_mmap+0x750/0xea0 [ 580.448713][T17321] ? __delayed_free_task+0x20/0x20 [ 580.453658][T17321] ? mm_init+0x807/0x960 [ 580.457739][T17321] dup_mm+0x91/0x330 [ 580.461469][T17321] copy_mm+0x108/0x1b0 [ 580.465379][T17321] copy_process+0x1295/0x3250 [ 580.469889][T17321] ? check_stack_object+0x117/0x130 [ 580.474922][T17321] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 580.479869][T17321] ? copy_clone_args_from_user+0x6f0/0x790 [ 580.485514][T17321] kernel_clone+0x22d/0x990 [ 580.489857][T17321] ? dup_mmap+0xea0/0xea0 [ 580.494015][T17321] ? create_io_thread+0x1e0/0x1e0 [ 580.498877][T17321] ? file_end_write+0x1b0/0x1b0 [ 580.503566][T17321] __x64_sys_clone3+0x375/0x3a0 [ 580.508249][T17321] ? __ia32_sys_clone+0x300/0x300 [ 580.513111][T17321] ? ksys_write+0x25f/0x2c0 [ 580.517453][T17321] ? debug_smp_processor_id+0x17/0x20 [ 580.522657][T17321] do_syscall_64+0x44/0xd0 [ 580.526911][T17321] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 580.532637][T17321] RIP: 0033:0x7f64a55310d9 [ 580.536892][T17321] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 580.556335][T17321] RSP: 002b:00007f64a42a4038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 580.564577][T17321] RAX: ffffffffffffffda RBX: 00007f64a5650f80 RCX: 00007f64a55310d9 [ 580.572386][T17321] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007f64a42a4050 [ 580.580213][T17321] RBP: 00007f64a42a41d0 R08: 0000000000000000 R09: 0000000000000058 [ 580.588009][T17321] R10: 00007f64a42a4050 R11: 0000000000000246 R12: 0000000000000058 [ 580.596026][T17321] R13: 00007ffc9478d42f R14: 00007f64a42a4300 R15: 0000000000022000 [ 580.603840][T17321] [ 580.606698][T17327] CPU: 1 PID: 17327 Comm: syz-executor.0 Tainted: G B W 5.15.75-syzkaller-00546-gd9d889009b78 #0 17:19:30 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x21eb0) 17:19:30 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) [ 580.618157][T17327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 580.628053][T17327] Call Trace: [ 580.631175][T17327] [ 580.633951][T17327] dump_stack_lvl+0x151/0x1b7 [ 580.638465][T17327] ? bfq_pos_tree_add_move+0x43e/0x43e [ 580.643762][T17327] dump_stack+0x15/0x17 [ 580.647751][T17327] should_fail+0x3c0/0x510 [ 580.652093][T17327] __should_failslab+0x9f/0xe0 [ 580.656713][T17327] should_failslab+0x9/0x20 [ 580.661028][T17327] kmem_cache_alloc+0x4f/0x2f0 [ 580.665762][T17327] ? vm_area_dup+0x26/0x1d0 [ 580.670100][T17327] ? __kasan_check_read+0x11/0x20 [ 580.674963][T17327] vm_area_dup+0x26/0x1d0 [ 580.679125][T17327] dup_mmap+0x6b8/0xea0 [ 580.683118][T17327] ? __delayed_free_task+0x20/0x20 [ 580.688060][T17327] ? mm_init+0x807/0x960 [ 580.692141][T17327] dup_mm+0x91/0x330 [ 580.695871][T17327] copy_mm+0x108/0x1b0 [ 580.699777][T17327] copy_process+0x1295/0x3250 [ 580.704294][T17327] ? check_stack_object+0x117/0x130 [ 580.709332][T17327] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 580.714277][T17327] ? copy_clone_args_from_user+0x6f0/0x790 [ 580.719918][T17327] kernel_clone+0x22d/0x990 [ 580.724251][T17327] ? dup_mmap+0xea0/0xea0 [ 580.728419][T17327] ? create_io_thread+0x1e0/0x1e0 [ 580.733277][T17327] ? file_end_write+0x1b0/0x1b0 [ 580.737966][T17327] __x64_sys_clone3+0x375/0x3a0 [ 580.742652][T17327] ? __ia32_sys_clone+0x300/0x300 [ 580.747516][T17327] ? ksys_write+0x25f/0x2c0 [ 580.751859][T17327] ? debug_smp_processor_id+0x17/0x20 [ 580.757061][T17327] do_syscall_64+0x44/0xd0 [ 580.761314][T17327] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 580.767148][T17327] RIP: 0033:0x7fda5ac0c0d9 [ 580.771400][T17327] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 580.790843][T17327] RSP: 002b:00007fda5997f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 580.799085][T17327] RAX: ffffffffffffffda RBX: 00007fda5ad2bf80 RCX: 00007fda5ac0c0d9 [ 580.806897][T17327] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fda5997f050 [ 580.814709][T17327] RBP: 00007fda5997f1d0 R08: 0000000000000000 R09: 0000000000000058 17:19:30 executing program 2: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 81) 17:19:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xb4}, {0x0}, {&(0x7f0000002a80)=""/4096, 0xe14}], 0x3}}], 0x300, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfffd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8001}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) syz_clone3(&(0x7f0000000800)={0x10e104080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000880)={0x560, r2, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x782}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x260, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ID={0x7c, 0x3, "55c0b6088db3d98a87e68861e7d4d61260e6e6d913c12ed4147d22fd553faacd19a8be9c0f4e9cc37170c4554771f2e2e273bdbde3e74093a510f6213b8cb7584f5a760faa1a84c977b2b83fba979d864e3f3fb6616053bf4a836163071f13a99f8514c54950a9fb676c17c59e67e1dfb79a2e6e3e46e0b5"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ID={0xfe, 0x3, "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"}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "3e3b609fbe41f714dfbb8eb948d993815b0d143f3664b1d6966e5715d0757745"}}, @TIPC_NLA_NODE_ID={0x33, 0x3, "eb5a93f6314d28e76f6af07c1ae4150dcb4c02ae389f2058f6557bacd1a9afa0bace368f9d17ca922d181ebe3fd0cf"}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "235ea22fbd5446a551e94e5b363aa8d4781d03e5adab691661b4a1f7"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3d5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6d}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}]}]}, @TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x71c}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x81}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9ef6}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK={0x16c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1415}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xcb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb07b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdbc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x53c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}]}, @TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "9e4b63d592ff4361206f862fed7e84ff85e479e79492a49618"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}]}]}, 0x560}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 580.822533][T17327] R10: 00007fda5997f050 R11: 0000000000000246 R12: 0000000000000058 [ 580.830337][T17327] R13: 00007fffdae7e02f R14: 00007fda5997f300 R15: 0000000000022000 [ 580.838143][T17327] [ 580.861619][T17342] FAULT_INJECTION: forcing a failure. [ 580.861619][T17342] name failslab, interval 1, probability 0, space 0, times 0 [ 580.863388][T17344] __nla_validate_parse: 98 callbacks suppressed [ 580.863405][T17344] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 580.875555][T17342] CPU: 0 PID: 17342 Comm: syz-executor.2 Tainted: G B W 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 580.894735][T17344] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 580.900945][T17342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 580.900966][T17342] Call Trace: [ 580.900971][T17342] [ 580.900977][T17342] dump_stack_lvl+0x151/0x1b7 [ 580.901004][T17342] ? bfq_pos_tree_add_move+0x43e/0x43e [ 580.901023][T17342] dump_stack+0x15/0x17 [ 580.901038][T17342] should_fail+0x3c0/0x510 [ 580.901055][T17342] __should_failslab+0x9f/0xe0 [ 580.919840][T17344] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 580.919959][T17342] should_failslab+0x9/0x20 [ 580.923307][T17344] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 580.925856][T17342] kmem_cache_alloc+0x4f/0x2f0 [ 580.925883][T17342] ? anon_vma_fork+0x1b9/0x4f0 [ 580.925903][T17342] anon_vma_fork+0x1b9/0x4f0 [ 580.930640][T17344] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 580.935663][T17342] dup_mmap+0x750/0xea0 [ 580.935690][T17342] ? __delayed_free_task+0x20/0x20 [ 580.935707][T17342] ? mm_init+0x807/0x960 [ 580.939926][T17344] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 580.943906][T17342] dup_mm+0x91/0x330 [ 580.943927][T17342] copy_mm+0x108/0x1b0 17:19:30 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) 17:19:30 executing program 0: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 82) 17:19:30 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x22000) [ 580.943944][T17342] copy_process+0x1295/0x3250 [ 580.948717][T17344] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 580.957626][T17342] ? check_stack_object+0x117/0x130 [ 580.957652][T17342] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 580.957669][T17342] ? copy_clone_args_from_user+0x6f0/0x790 [ 580.962182][T17344] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 580.971073][T17342] kernel_clone+0x22d/0x990 [ 580.971095][T17342] ? dup_mmap+0xea0/0xea0 [ 580.971111][T17342] ? create_io_thread+0x1e0/0x1e0 17:19:30 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) [ 580.971126][T17342] ? file_end_write+0x1b0/0x1b0 [ 580.976643][T17344] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 580.980272][T17342] __x64_sys_clone3+0x375/0x3a0 [ 580.980296][T17342] ? __ia32_sys_clone+0x300/0x300 [ 580.980314][T17342] ? ksys_write+0x25f/0x2c0 [ 580.980335][T17342] ? debug_smp_processor_id+0x17/0x20 [ 580.984918][T17344] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 580.993813][T17342] do_syscall_64+0x44/0xd0 [ 580.993836][T17342] entry_SYSCALL_64_after_hwframe+0x61/0xcb 17:19:30 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x22681) 17:19:30 executing program 2: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) (fail_nth: 82) [ 580.993855][T17342] RIP: 0033:0x7f64a55310d9 [ 580.993869][T17342] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 581.024157][T17345] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17345 comm=syz-executor.5 [ 581.028097][T17342] RSP: 002b:00007f64a42a4038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 17:19:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000120005ff"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xb4}, {0x0}, {&(0x7f0000002a80)=""/4096, 0xe14}], 0x3, 0x0, 0x400000000000000}}], 0x300, 0x0, 0x0) [ 581.028124][T17342] RAX: ffffffffffffffda RBX: 00007f64a5650f80 RCX: 00007f64a55310d9 [ 581.028136][T17342] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007f64a42a4050 [ 581.028148][T17342] RBP: 00007f64a42a41d0 R08: 0000000000000000 R09: 0000000000000058 [ 581.110283][T17352] FAULT_INJECTION: forcing a failure. [ 581.110283][T17352] name failslab, interval 1, probability 0, space 0, times 0 [ 581.117318][T17342] R10: 00007f64a42a4050 R11: 0000000000000246 R12: 0000000000000058 [ 581.117339][T17342] R13: 00007ffc9478d42f R14: 00007f64a42a4300 R15: 0000000000022000 [ 581.117354][T17342] [ 581.117739][T17353] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17353 comm=syz-executor.5 [ 581.122111][T17352] CPU: 1 PID: 17352 Comm: syz-executor.0 Tainted: G B W 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 581.250474][T17352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 581.260363][T17352] Call Trace: [ 581.263485][T17352] [ 581.266280][T17352] dump_stack_lvl+0x151/0x1b7 [ 581.270774][T17352] ? bfq_pos_tree_add_move+0x43e/0x43e [ 581.276071][T17352] dump_stack+0x15/0x17 [ 581.280064][T17352] should_fail+0x3c0/0x510 [ 581.284314][T17352] __should_failslab+0x9f/0xe0 [ 581.288920][T17352] should_failslab+0x9/0x20 [ 581.293252][T17352] kmem_cache_alloc+0x4f/0x2f0 [ 581.297854][T17352] ? anon_vma_fork+0x1b9/0x4f0 [ 581.302452][T17352] anon_vma_fork+0x1b9/0x4f0 [ 581.306982][T17352] dup_mmap+0x750/0xea0 [ 581.310973][T17352] ? __delayed_free_task+0x20/0x20 [ 581.315920][T17352] ? mm_init+0x807/0x960 [ 581.320001][T17352] dup_mm+0x91/0x330 [ 581.323733][T17352] copy_mm+0x108/0x1b0 [ 581.327638][T17352] copy_process+0x1295/0x3250 [ 581.332156][T17352] ? check_stack_object+0x117/0x130 [ 581.337189][T17352] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 581.342136][T17352] ? copy_clone_args_from_user+0x6f0/0x790 [ 581.347780][T17352] kernel_clone+0x22d/0x990 [ 581.352121][T17352] ? dup_mmap+0xea0/0xea0 [ 581.356279][T17352] ? create_io_thread+0x1e0/0x1e0 [ 581.361142][T17352] ? file_end_write+0x1b0/0x1b0 [ 581.365826][T17352] __x64_sys_clone3+0x375/0x3a0 [ 581.370522][T17352] ? __ia32_sys_clone+0x300/0x300 [ 581.375406][T17352] ? ksys_write+0x25f/0x2c0 [ 581.379714][T17352] ? debug_smp_processor_id+0x17/0x20 [ 581.384927][T17352] do_syscall_64+0x44/0xd0 [ 581.389173][T17352] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 581.394901][T17352] RIP: 0033:0x7fda5ac0c0d9 [ 581.399156][T17352] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 581.418595][T17352] RSP: 002b:00007fda5997f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 581.426840][T17352] RAX: ffffffffffffffda RBX: 00007fda5ad2bf80 RCX: 00007fda5ac0c0d9 [ 581.434651][T17352] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fda5997f050 [ 581.442463][T17352] RBP: 00007fda5997f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 581.450273][T17352] R10: 00007fda5997f050 R11: 0000000000000246 R12: 0000000000000058 [ 581.458172][T17352] R13: 00007fffdae7e02f R14: 00007fda5997f300 R15: 0000000000022000 [ 581.465989][T17352] [ 581.496174][T17363] FAULT_INJECTION: forcing a failure. [ 581.496174][T17363] name failslab, interval 1, probability 0, space 0, times 0 [ 581.507806][T17352] BUG: unable to handle page fault for address: ffffed1800000017 [ 581.510034][T17363] CPU: 0 PID: 17363 Comm: syz-executor.2 Tainted: G B W 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 581.516181][T17352] #PF: supervisor read access in kernel mode [ 581.527597][T17363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 581.533410][T17352] #PF: error_code(0x0000) - not-present page [ 581.543307][T17363] Call Trace: [ 581.549130][T17352] PGD 23fff2067 P4D 23fff2067 [ 581.552257][T17363] [ 581.552267][T17363] dump_stack_lvl+0x151/0x1b7 [ 581.556846][T17352] PUD 0 [ 581.559625][T17363] ? bfq_pos_tree_add_move+0x43e/0x43e [ 581.564135][T17352] [ 581.564143][T17352] Oops: 0000 [#1] PREEMPT SMP KASAN [ 581.566829][T17363] dump_stack+0x15/0x17 [ 581.572120][T17352] CPU: 1 PID: 17352 Comm: syz-executor.0 Tainted: G B W 5.15.75-syzkaller-00546-gd9d889009b78 #0 [ 581.574290][T17363] should_fail+0x3c0/0x510 [ 581.579326][T17352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 581.583318][T17363] __should_failslab+0x9f/0xe0 [ 581.594774][T17352] RIP: 0010:__rb_erase_color+0x849/0xb60 [ 581.599027][T17363] should_failslab+0x9/0x20 [ 581.608928][T17352] Code: 07 00 74 08 4c 89 ef e8 c5 e3 2c ff 4d 89 65 00 48 85 db 74 5a 4c 8d 7b 10 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 ff e8 f9 e2 2c ff 48 8d 43 08 4c 39 6b 10 [ 581.613538][T17363] kmem_cache_alloc+0x4f/0x2f0 [ 581.618991][T17352] RSP: 0018:ffffc90000d57728 EFLAGS: 00010a06 [ 581.623329][T17363] ? anon_vma_fork+0x1b9/0x4f0 [ 581.642770][T17352] [ 581.642778][T17352] RAX: 1ffff11800000017 RBX: ffff88c0000000a8 RCX: dffffc0000000000 [ 581.647370][T17363] anon_vma_fork+0x1b9/0x4f0 [ 581.653358][T17352] RDX: ffffffff81a70d60 RSI: ffff888109a77828 RDI: ffff8881297d1d10 [ 581.657961][T17363] dup_mmap+0x750/0xea0 [ 581.660127][T17352] RBP: ffffc90000d57788 R08: ffffffff81a6eef9 R09: ffffed102134ef09 [ 581.667942][T17363] ? __delayed_free_task+0x20/0x20 [ 581.672364][T17352] R10: ffffed102134ef09 R11: 1ffff1102134ef08 R12: ffff8881530e5ac1 [ 581.680178][T17363] ? mm_init+0x807/0x960 [ 581.684168][T17352] R13: ffff8881297d1d10 R14: ffff8881530e5ac0 R15: ffff88c0000000b8 [ 581.691981][T17363] dup_mm+0x91/0x330 [ 581.696931][T17352] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 581.704739][T17363] copy_mm+0x108/0x1b0 [ 581.708816][T17352] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 581.716629][T17363] copy_process+0x1295/0x3250 [ 581.720359][T17352] CR2: ffffed1800000017 CR3: 000000011c10a000 CR4: 00000000003506a0 [ 581.729133][T17363] ? check_stack_object+0x117/0x130 [ 581.733035][T17352] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 581.739455][T17363] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 581.743968][T17352] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 581.751952][T17363] ? copy_clone_args_from_user+0x6f0/0x790 [ 581.756988][T17352] Call Trace: [ 581.756996][T17352] [ 581.764800][T17363] kernel_clone+0x22d/0x990 [ 581.769745][T17352] ? anon_vma_interval_tree_iter_next+0x3b0/0x3b0 [ 581.777556][T17363] ? dup_mmap+0xea0/0xea0 [ 581.783198][T17352] vma_interval_tree_remove+0xa66/0xa80 [ 581.786324][T17363] ? create_io_thread+0x1e0/0x1e0 [ 581.789099][T17352] unlink_file_vma+0xd9/0xf0 [ 581.793437][T17363] ? file_end_write+0x1b0/0x1b0 [ 581.799776][T17352] free_pgtables+0x13b/0x210 [ 581.803941][T17363] __x64_sys_clone3+0x375/0x3a0 [ 581.809333][T17352] exit_mmap+0x466/0x7a0 [ 581.814189][T17363] ? __ia32_sys_clone+0x300/0x300 [ 581.818635][T17352] ? exit_aio+0x270/0x3b0 [ 581.823395][T17363] ? ksys_write+0x25f/0x2c0 [ 581.827903][T17352] ? vm_brk+0x30/0x30 [ 581.832589][T17363] ? debug_smp_processor_id+0x17/0x20 [ 581.836666][T17352] ? mutex_unlock+0xa2/0x110 [ 581.841530][T17363] do_syscall_64+0x44/0xd0 [ 581.845695][T17352] ? uprobe_clear_state+0x2c2/0x320 [ 581.850034][T17363] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 581.853852][T17352] __mmput+0x95/0x300 [ 581.859058][T17363] RIP: 0033:0x7f64a55310d9 [ 581.863487][T17352] mmput+0x50/0x60 [ 581.867740][T17363] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 581.872772][T17352] exit_mm+0x50d/0x760 [ 581.878500][T17363] RSP: 002b:00007f64a42a4038 EFLAGS: 00000246 [ 581.882319][T17352] ? exit_itimers+0x694/0x6e0 [ 581.886571][T17363] ORIG_RAX: 00000000000001b3 [ 581.890132][T17352] ? do_exit+0x24d0/0x24d0 [ 581.909574][T17363] RAX: ffffffffffffffda RBX: 00007f64a5650f80 RCX: 00007f64a55310d9 [ 581.913478][T17352] ? taskstats_exit+0x3a0/0xa20 17:19:31 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a40)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)=@mpls_getroute={0xec, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x40, 0xfd, 0x0, 0xfe, 0xa, 0x3800}, [@RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x26, "f2a1cf90ef690a957436b73544ff"}}, @RTA_NEWDST={0x84, 0x13, [{0x9f}, {0x65, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x9}, {0xe}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9b1, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8001}, {0x7c}, {0x3}, {}, {0x200, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xfff}, {0x66fb, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x2f, 0x0, 0x1}, {0x3bab3}, {0x3}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xfd}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2, 0xf5, r0}}, @RTA_VIA={0x14, 0x12, {0xf, "61c2f64817fd364f9eacdc1887ad"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x2fc81, 0x2811fdff) creat(&(0x7f0000000240)='./file0\x00', 0x0) [ 581.919385][T17363] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007f64a42a4050 [ 581.923893][T17352] do_exit+0x63c/0x24d0 [ 581.928404][T17363] RBP: 00007f64a42a41d0 R08: 0000000000000000 R09: 0000000000000058 [ 581.932666][T17352] ? get_task_struct+0x80/0x80 [ 581.940468][T17363] R10: 00007f64a42a4050 R11: 0000000000000246 R12: 0000000000000058 [ 581.945157][T17352] ? call_rcu+0xe0f/0x1400 [ 581.952966][T17363] R13: 00007ffc9478d42f R14: 00007f64a42a4300 R15: 0000000000022000 [ 581.956966][T17352] ? _raw_spin_lock_irqsave+0x210/0x210 [ 581.964776][T17363] [ 581.969379][T17352] do_group_exit+0x13a/0x300 [ 582.002097][T17352] ? __kasan_check_write+0x14/0x20 [ 582.007039][T17352] get_signal+0x77e/0x1600 [ 582.011294][T17352] arch_do_signal_or_restart+0x9f/0x670 [ 582.016674][T17352] ? get_sigframe_size+0x10/0x10 [ 582.021447][T17352] exit_to_user_mode_loop+0xd4/0x110 [ 582.026569][T17352] syscall_exit_to_user_mode+0x79/0xc0 [ 582.031867][T17352] do_syscall_64+0x50/0xd0 [ 582.036216][T17352] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 582.041939][T17352] RIP: 0033:0x7fda5ac0c0d9 [ 582.046195][T17352] Code: Unable to access opcode bytes at RIP 0x7fda5ac0c0af. [ 582.053408][T17352] RSP: 002b:00007fda5997f218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 582.061641][T17352] RAX: fffffffffffffe00 RBX: 00007fda5ad2bf88 RCX: 00007fda5ac0c0d9 [ 582.069486][T17352] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fda5ad2bf88 [ 582.077265][T17352] RBP: 00007fda5ad2bf80 R08: 0000000000000000 R09: 0000000000000000 [ 582.085073][T17352] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fda5ad2bf8c [ 582.092885][T17352] R13: 00007fffdae7e02f R14: 00007fda5997f300 R15: 0000000000022000 [ 582.100787][T17352] [ 582.103646][T17352] Modules linked in: [ 582.107381][T17352] CR2: ffffed1800000017 [ 582.111387][T17352] ---[ end trace 105421f41ca3a164 ]--- [ 582.116669][T17352] RIP: 0010:__rb_erase_color+0x849/0xb60 [ 582.122133][T17352] Code: 07 00 74 08 4c 89 ef e8 c5 e3 2c ff 4d 89 65 00 48 85 db 74 5a 4c 8d 7b 10 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 ff e8 f9 e2 2c ff 48 8d 43 08 4c 39 6b 10 [ 582.141582][T17352] RSP: 0018:ffffc90000d57728 EFLAGS: 00010a06 [ 582.147488][T17352] RAX: 1ffff11800000017 RBX: ffff88c0000000a8 RCX: dffffc0000000000 [ 582.155291][T17352] RDX: ffffffff81a70d60 RSI: ffff888109a77828 RDI: ffff8881297d1d10 [ 582.163101][T17352] RBP: ffffc90000d57788 R08: ffffffff81a6eef9 R09: ffffed102134ef09 [ 582.170909][T17352] R10: ffffed102134ef09 R11: 1ffff1102134ef08 R12: ffff8881530e5ac1 [ 582.178722][T17352] R13: ffff8881297d1d10 R14: ffff8881530e5ac0 R15: ffff88c0000000b8 [ 582.186539][T17352] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 582.195305][T17352] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 582.201723][T17352] CR2: ffffed1800000017 CR3: 000000011c10a000 CR4: 00000000003506a0 [ 582.209539][T17352] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 582.217346][T17352] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 582.225161][T17352] Kernel panic - not syncing: Fatal exception [ 582.231220][T17352] Kernel Offset: disabled [ 582.235345][T17352] Rebooting in 86400 seconds..