0, 0x880}, 0x240408d0) 23:12:31 executing program 4: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}, 0x58) 23:12:31 executing program 0: r0 = syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={0xffffffffffffffff, 0xb, 0x1, 0x2, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}, 0x20) (async, rerun: 64) syz_clone3(&(0x7f00000003c0)={0x1841400, &(0x7f00000001c0), &(0x7f0000000200)=0x0, &(0x7f0000000240), {0x24}, &(0x7f0000000280)=""/47, 0x2f, &(0x7f00000002c0)=""/136, &(0x7f0000000380)=[r0, r0, r0, r0, 0xffffffffffffffff, r0], 0x6}, 0x58) (rerun: 64) syz_clone3(&(0x7f0000000480)={0x40000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x19}, &(0x7f00000000c0)=""/78, 0x4e, &(0x7f0000000140)=""/109, &(0x7f0000000440)=[r1], 0x1}, 0x58) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500)={0xffffffffffffffff, 0x10001, 0x8}, 0xc) 23:12:31 executing program 4: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x8000001000000}, 0x58) 23:12:31 executing program 5: bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={&(0x7f0000000000)="a776b1f1b8560725c56d15dd5c4df87c2c01db71089fdc13a6cbba0253eb7877794dd4e3eb1cb687ac0ab4a91d755665e603239f9457ce9aef0f5fe4ef06cb5af418b5b8ac7ff6ee0ce3c4a2e92f", &(0x7f0000000280)=""/3, &(0x7f00000002c0)="56de2ab55e1171c3413a2cba04b29c9b3987810a0a00af9e6ec75c3ccc3dce61870b03f9111e796f697af8ed388341ac916dcb91d4dc52c64e305b01b2405cc327acb21b2583c1b22378f16138bdb4c9839f32f776461a6ba582699e0b769db473fe55c804a6a6d599151ef968d43c36e44c5a9f85f5581ba5f7e911277c4438a5e7895d63ae94e4db422a9757acc008de5619c8fd87362ec9", &(0x7f00000001c0)="65589604ab0c165ae07cea6c104452d54d87cc1fdbee6fa98a641c7487e69ea8c3efaa8fc4a8c2ccf045fddba0c883767dd8522b10e193e7b7d397fa6dfff304197f659badfcaaa5d310d4a4b55b", 0x1003, 0x1}, 0x38) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) 23:12:31 executing program 3: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x101000}, 0x58) [ 489.237665][T10100] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007feb5d37f050 [ 489.245662][T10100] RBP: 00007feb5d37f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 489.253548][T10100] R10: 00007feb5d37f050 R11: 0000000000000246 R12: 0000000000000058 [ 489.261359][T10100] R13: 00007ffc843a962f R14: 00007feb5d37f300 R15: 0000000000022000 [ 489.269345][T10100] 23:12:31 executing program 5: bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={&(0x7f0000000000)="a776b1f1b8560725c56d15dd5c4df87c2c01db71089fdc13a6cbba0253eb7877794dd4e3eb1cb687ac0ab4a91d755665e603239f9457ce9aef0f5fe4ef06cb5af418b5b8ac7ff6ee0ce3c4a2e92f", &(0x7f0000000280)=""/3, &(0x7f00000002c0)="56de2ab55e1171c3413a2cba04b29c9b3987810a0a00af9e6ec75c3ccc3dce61870b03f9111e796f697af8ed388341ac916dcb91d4dc52c64e305b01b2405cc327acb21b2583c1b22378f16138bdb4c9839f32f776461a6ba582699e0b769db473fe55c804a6a6d599151ef968d43c36e44c5a9f85f5581ba5f7e911277c4438a5e7895d63ae94e4db422a9757acc008de5619c8fd87362ec9", &(0x7f00000001c0)="65589604ab0c165ae07cea6c104452d54d87cc1fdbee6fa98a641c7487e69ea8c3efaa8fc4a8c2ccf045fddba0c883767dd8522b10e193e7b7d397fa6dfff304197f659badfcaaa5d310d4a4b55b", 0x1003, 0x1}, 0x38) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) 23:12:31 executing program 3: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xf0ff1f}, 0x58) 23:12:31 executing program 4: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10100000000000}, 0x58) [ 489.313117][T10139] FAULT_INJECTION: forcing a failure. [ 489.313117][T10139] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 489.367219][T10139] CPU: 1 PID: 10139 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 489.377299][T10139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 489.387628][T10139] Call Trace: [ 489.390752][T10139] [ 489.393526][T10139] dump_stack_lvl+0x151/0x1b7 [ 489.398040][T10139] ? bfq_pos_tree_add_move+0x43e/0x43e [ 489.403351][T10139] dump_stack+0x15/0x17 [ 489.407334][T10139] should_fail+0x3c0/0x510 [ 489.411583][T10139] should_fail_alloc_page+0x58/0x70 [ 489.416613][T10139] __alloc_pages+0x1de/0x7c0 [ 489.421043][T10139] ? __count_vm_events+0x30/0x30 [ 489.425813][T10139] ? dup_mm+0x91/0x330 [ 489.429815][T10139] ? copy_mm+0x108/0x1b0 [ 489.433881][T10139] ? copy_process+0x1295/0x3250 [ 489.438605][T10139] ? kernel_clone+0x22d/0x990 [ 489.443110][T10139] ? __x64_sys_clone3+0x375/0x3a0 [ 489.448218][T10139] pte_alloc_one+0x73/0x1b0 [ 489.452548][T10139] ? pfn_modify_allowed+0x2e0/0x2e0 [ 489.457582][T10139] ? __kasan_check_write+0x14/0x20 [ 489.462539][T10139] ? __set_page_owner+0x2ee/0x310 [ 489.467389][T10139] __pte_alloc+0x86/0x350 [ 489.471560][T10139] ? post_alloc_hook+0x1ab/0x1b0 [ 489.476333][T10139] ? free_pgtables+0x210/0x210 [ 489.480925][T10139] ? get_page_from_freelist+0x38b/0x400 [ 489.486308][T10139] copy_pte_range+0x1b1f/0x20b0 [ 489.491087][T10139] ? __kunmap_atomic+0x80/0x80 [ 489.495683][T10139] ? __pud_alloc+0x260/0x260 [ 489.500108][T10139] ? __pud_alloc+0x218/0x260 [ 489.504532][T10139] ? do_handle_mm_fault+0x2370/0x2370 [ 489.509744][T10139] copy_page_range+0xc1e/0x1090 [ 489.514430][T10139] ? pfn_valid+0x1e0/0x1e0 [ 489.518681][T10139] dup_mmap+0x99f/0xea0 [ 489.522676][T10139] ? __delayed_free_task+0x20/0x20 [ 489.527649][T10139] ? mm_init+0x807/0x960 [ 489.531717][T10139] dup_mm+0x91/0x330 [ 489.535464][T10139] copy_mm+0x108/0x1b0 [ 489.539425][T10139] copy_process+0x1295/0x3250 [ 489.543954][T10139] ? check_stack_object+0xf7/0x130 [ 489.548894][T10139] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 489.553830][T10139] ? copy_clone_args_from_user+0x6cf/0x790 [ 489.559475][T10139] kernel_clone+0x22d/0x990 [ 489.563818][T10139] ? dup_mmap+0xea0/0xea0 [ 489.567977][T10139] ? create_io_thread+0x1e0/0x1e0 [ 489.572837][T10139] ? file_end_write+0x1b0/0x1b0 [ 489.577546][T10139] __x64_sys_clone3+0x375/0x3a0 [ 489.582211][T10139] ? __ia32_sys_clone+0x300/0x300 [ 489.587080][T10139] ? ksys_write+0x25f/0x2c0 [ 489.591415][T10139] ? debug_smp_processor_id+0x17/0x20 [ 489.596629][T10139] do_syscall_64+0x44/0xd0 [ 489.601046][T10139] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 489.606772][T10139] RIP: 0033:0x7feb5e60c0c9 [ 489.611026][T10139] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 489.630563][T10139] RSP: 002b:00007feb5d37f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 489.639057][T10139] RAX: ffffffffffffffda RBX: 00007feb5e72bf80 RCX: 00007feb5e60c0c9 [ 489.646870][T10139] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007feb5d37f050 [ 489.654682][T10139] RBP: 00007feb5d37f1d0 R08: 0000000000000000 R09: 0000000000000058 23:12:32 executing program 3: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x58) 23:12:32 executing program 5: bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={&(0x7f0000000000)="a776b1f1b8560725c56d15dd5c4df87c2c01db71089fdc13a6cbba0253eb7877794dd4e3eb1cb687ac0ab4a91d755665e603239f9457ce9aef0f5fe4ef06cb5af418b5b8ac7ff6ee0ce3c4a2e92f", &(0x7f0000000280)=""/3, &(0x7f00000002c0)="56de2ab55e1171c3413a2cba04b29c9b3987810a0a00af9e6ec75c3ccc3dce61870b03f9111e796f697af8ed388341ac916dcb91d4dc52c64e305b01b2405cc327acb21b2583c1b22378f16138bdb4c9839f32f776461a6ba582699e0b769db473fe55c804a6a6d599151ef968d43c36e44c5a9f85f5581ba5f7e911277c4438a5e7895d63ae94e4db422a9757acc008de5619c8fd87362ec9", &(0x7f00000001c0)="65589604ab0c165ae07cea6c104452d54d87cc1fdbee6fa98a641c7487e69ea8c3efaa8fc4a8c2ccf045fddba0c883767dd8522b10e193e7b7d397fa6dfff304197f659badfcaaa5d310d4a4b55b", 0x1003, 0x1}, 0x38) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) 23:12:32 executing program 4: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x20f1263a550000}, 0x58) 23:12:32 executing program 1: r0 = socket(0x2c, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, 0x0) (async) bind$bt_rfcomm(r1, &(0x7f0000000400)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0xa) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r2, 0xffffffffffffffff, 0x4}, 0x48) (async, rerun: 32) r3 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="183700000200000000000000000000000054ff0f09000000181b0000", @ANYRES32, @ANYBLOB="0000000000000000185b00000300000000000000000000001837000000000000000000000000000018260000", @ANYRES32, @ANYBLOB="000000001000000018202000", @ANYRES32, @ANYBLOB="00000000ffffff7f"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x19, '\x00', r2, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r3}, 0x80) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r4, 0xffffffffffffffff, 0x4}, 0x48) (async) r5 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="183700000200000000000000000000000054ff0f09000000181b0000", @ANYRES32, @ANYBLOB="0000000000000000185b00000300000000000000000000001837000000000000000000000000000018260000", @ANYRES32, @ANYBLOB="00000000140000000800000096c3782e1438658919a32026fc73818475692404e4f39181f524a938c4b9ead71da43bab77", @ANYRES32, @ANYBLOB="00000000ffffff7f"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r4, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r5}, 0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1100008}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x174, 0x0, 0x8, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x880}, 0x240408d0) 23:12:32 executing program 0: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000740)='devices.allow\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000001400)={0x428, 0x0, 0x2, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x8000, 0x5e}}}}, [@NL80211_ATTR_TESTDATA={0x98, 0x45, "8d70265e4bb82b1322ec3a6e23a7fad4dcc883adbf14c41344b0fb43870c9df6bb445af1bb58016a4809b3ef51c59208f03afe9fb65f13a5c7c11fa5ae54f11db792524a7dbec13e50afb16db89e2f48033ced8fa19ad5b136a22d387b72bd250f6b50812982f9226d095a64a401599a4065e7b3243bfc6cd965e13c360271d73c5a8cb4111b8e14e02f4bf07a44b5604dc7eb4a"}, @NL80211_ATTR_TESTDATA={0x14e, 0x45, "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"}, @NL80211_ATTR_TESTDATA={0xec, 0x45, "baa06eae8682cea96ca329b4998e9dec1099a2451dc243a330f06959fd4e7f381553aaacc7225e19b0eeeb284b22a99c722ebf04ca2bf8b3d8d2493cd939219ce74d85150861f9cea3eb13b266981ea887f51c97d013a88dfef9d6d0e27bfe788511b0842fdd0c8775e5e1e44927df861dfcc6989449b04dbdf743f2a9ea802f91957865528f2737b4f385f93937a412c44ed23148cec5edadbaf7d540c8144173ba66a07b863b5672c23f8ee796d0d3e71fa1cf3e03327551580946950e75db4e2cda93269bda37d2009fe82875a4f7a29de188cdc007e34b3bb63d837e528bd353c3ad39c0afc2"}, @NL80211_ATTR_TESTDATA={0x3c, 0x45, "a494338a14ff435d0b7029680b1b291bac140a6d210f6ead3a6c170e48ee46a1dd7a396952dc6625b216ada991b85633634e22b3c6dac18f"}, @NL80211_ATTR_TESTDATA={0xee, 0x45, "838047a1a51eae0f51c97bf95915d59f4d871f1675d80ffb3bcc9dd0ef335efd4ef4c7357c179976904d16591c6ad65e9032762d437e16726d372c1e14961bb6436ecd3aae01e91a5415b4a7d0fb793eb703d1900002e84c625e9a9ecec72084b8abb78ed90ab99dba4c8ba6cc796fdfa2c035494015b73e4251d389f3f44dae8756131cc0cec44c860bdae2859000d6cd8b863e328e9a781edef53d5a6bfe278c6c31112004043334a5209f06aa760ef9c8354cf11ee4bc5828919aac22ce476e94800b7403e8d24b667214f06b8306145f558c2549906a402a8244a0f9df99fd938cfca61dabee2711"}]}, 0x428}, 0x1, 0x0, 0x0, 0x20040085}, 0xc0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/class/scsi_device', 0x531800, 0x149) openat$cgroup(0xffffffffffffffff, &(0x7f0000000780)='syz0\x00', 0x200002, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x14, 0x0, 0x800, 0x70bd25, 0x25dfdbfe}, 0x78}, 0x1, 0x0, 0x0, 0x890}, 0x8000) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_lsm={0x1d, 0xd, &(0x7f00000007c0)=@raw=[@btf_id={0x18, 0xa, 0x3, 0x0, 0x4}, @generic={0x4, 0xf, 0x2, 0x2, 0x8}, @generic={0xc0, 0xe, 0x4, 0x0, 0x4}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @call={0x85, 0x0, 0x0, 0xb7}, @alu={0x4, 0x0, 0x5, 0x1, 0x3, 0x40, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x200}], &(0x7f0000000840)='GPL\x00', 0x10001, 0x3d, &(0x7f0000000880)=""/61, 0x41000, 0x0, '\x00', 0x0, 0x1b, r1, 0x8, &(0x7f00000008c0)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000900)={0x3, 0xc, 0x5, 0x1}, 0x10}, 0x80) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000009c0)={r2, r3, 0x1e}, 0x10) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="07000000040d00000500000000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="030000e001000000010000201d0200001081f1b97d61b45d02fd942e164d90f4b33601f4992ef294a3102edccd08e5b07b94cd0e06980b7eb7d72aea2775b593d94dd700"/80], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 23:12:32 executing program 3: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x58) 23:12:32 executing program 2: syz_clone3(&(0x7f0000000b40)={0x1000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 37) 23:12:32 executing program 0: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000740)='devices.allow\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000001400)={0x428, 0x0, 0x2, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x8000, 0x5e}}}}, [@NL80211_ATTR_TESTDATA={0x98, 0x45, "8d70265e4bb82b1322ec3a6e23a7fad4dcc883adbf14c41344b0fb43870c9df6bb445af1bb58016a4809b3ef51c59208f03afe9fb65f13a5c7c11fa5ae54f11db792524a7dbec13e50afb16db89e2f48033ced8fa19ad5b136a22d387b72bd250f6b50812982f9226d095a64a401599a4065e7b3243bfc6cd965e13c360271d73c5a8cb4111b8e14e02f4bf07a44b5604dc7eb4a"}, @NL80211_ATTR_TESTDATA={0x14e, 0x45, "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"}, @NL80211_ATTR_TESTDATA={0xec, 0x45, "baa06eae8682cea96ca329b4998e9dec1099a2451dc243a330f06959fd4e7f381553aaacc7225e19b0eeeb284b22a99c722ebf04ca2bf8b3d8d2493cd939219ce74d85150861f9cea3eb13b266981ea887f51c97d013a88dfef9d6d0e27bfe788511b0842fdd0c8775e5e1e44927df861dfcc6989449b04dbdf743f2a9ea802f91957865528f2737b4f385f93937a412c44ed23148cec5edadbaf7d540c8144173ba66a07b863b5672c23f8ee796d0d3e71fa1cf3e03327551580946950e75db4e2cda93269bda37d2009fe82875a4f7a29de188cdc007e34b3bb63d837e528bd353c3ad39c0afc2"}, @NL80211_ATTR_TESTDATA={0x3c, 0x45, "a494338a14ff435d0b7029680b1b291bac140a6d210f6ead3a6c170e48ee46a1dd7a396952dc6625b216ada991b85633634e22b3c6dac18f"}, @NL80211_ATTR_TESTDATA={0xee, 0x45, "838047a1a51eae0f51c97bf95915d59f4d871f1675d80ffb3bcc9dd0ef335efd4ef4c7357c179976904d16591c6ad65e9032762d437e16726d372c1e14961bb6436ecd3aae01e91a5415b4a7d0fb793eb703d1900002e84c625e9a9ecec72084b8abb78ed90ab99dba4c8ba6cc796fdfa2c035494015b73e4251d389f3f44dae8756131cc0cec44c860bdae2859000d6cd8b863e328e9a781edef53d5a6bfe278c6c31112004043334a5209f06aa760ef9c8354cf11ee4bc5828919aac22ce476e94800b7403e8d24b667214f06b8306145f558c2549906a402a8244a0f9df99fd938cfca61dabee2711"}]}, 0x428}, 0x1, 0x0, 0x0, 0x20040085}, 0xc0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/class/scsi_device', 0x531800, 0x149) openat$cgroup(0xffffffffffffffff, &(0x7f0000000780)='syz0\x00', 0x200002, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x14, 0x0, 0x800, 0x70bd25, 0x25dfdbfe}, 0x78}, 0x1, 0x0, 0x0, 0x890}, 0x8000) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_lsm={0x1d, 0xd, &(0x7f00000007c0)=@raw=[@btf_id={0x18, 0xa, 0x3, 0x0, 0x4}, @generic={0x4, 0xf, 0x2, 0x2, 0x8}, @generic={0xc0, 0xe, 0x4, 0x0, 0x4}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @call={0x85, 0x0, 0x0, 0xb7}, @alu={0x4, 0x0, 0x5, 0x1, 0x3, 0x40, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x200}], &(0x7f0000000840)='GPL\x00', 0x10001, 0x3d, &(0x7f0000000880)=""/61, 0x41000, 0x0, '\x00', 0x0, 0x1b, r1, 0x8, &(0x7f00000008c0)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000900)={0x3, 0xc, 0x5, 0x1}, 0x10}, 0x80) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000009c0)={r2, r3, 0x1e}, 0x10) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="07000000040d00000500000000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="030000e001000000010000201d0200001081f1b97d61b45d02fd942e164d90f4b33601f4992ef294a3102edccd08e5b07b94cd0e06980b7eb7d72aea2775b593d94dd700"/80], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) (async) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000740)='devices.allow\x00', 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000001400)={0x428, 0x0, 0x2, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x8000, 0x5e}}}}, [@NL80211_ATTR_TESTDATA={0x98, 0x45, "8d70265e4bb82b1322ec3a6e23a7fad4dcc883adbf14c41344b0fb43870c9df6bb445af1bb58016a4809b3ef51c59208f03afe9fb65f13a5c7c11fa5ae54f11db792524a7dbec13e50afb16db89e2f48033ced8fa19ad5b136a22d387b72bd250f6b50812982f9226d095a64a401599a4065e7b3243bfc6cd965e13c360271d73c5a8cb4111b8e14e02f4bf07a44b5604dc7eb4a"}, @NL80211_ATTR_TESTDATA={0x14e, 0x45, "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"}, @NL80211_ATTR_TESTDATA={0xec, 0x45, "baa06eae8682cea96ca329b4998e9dec1099a2451dc243a330f06959fd4e7f381553aaacc7225e19b0eeeb284b22a99c722ebf04ca2bf8b3d8d2493cd939219ce74d85150861f9cea3eb13b266981ea887f51c97d013a88dfef9d6d0e27bfe788511b0842fdd0c8775e5e1e44927df861dfcc6989449b04dbdf743f2a9ea802f91957865528f2737b4f385f93937a412c44ed23148cec5edadbaf7d540c8144173ba66a07b863b5672c23f8ee796d0d3e71fa1cf3e03327551580946950e75db4e2cda93269bda37d2009fe82875a4f7a29de188cdc007e34b3bb63d837e528bd353c3ad39c0afc2"}, @NL80211_ATTR_TESTDATA={0x3c, 0x45, "a494338a14ff435d0b7029680b1b291bac140a6d210f6ead3a6c170e48ee46a1dd7a396952dc6625b216ada991b85633634e22b3c6dac18f"}, @NL80211_ATTR_TESTDATA={0xee, 0x45, "838047a1a51eae0f51c97bf95915d59f4d871f1675d80ffb3bcc9dd0ef335efd4ef4c7357c179976904d16591c6ad65e9032762d437e16726d372c1e14961bb6436ecd3aae01e91a5415b4a7d0fb793eb703d1900002e84c625e9a9ecec72084b8abb78ed90ab99dba4c8ba6cc796fdfa2c035494015b73e4251d389f3f44dae8756131cc0cec44c860bdae2859000d6cd8b863e328e9a781edef53d5a6bfe278c6c31112004043334a5209f06aa760ef9c8354cf11ee4bc5828919aac22ce476e94800b7403e8d24b667214f06b8306145f558c2549906a402a8244a0f9df99fd938cfca61dabee2711"}]}, 0x428}, 0x1, 0x0, 0x0, 0x20040085}, 0xc0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/class/scsi_device', 0x531800, 0x149) (async) openat$cgroup(0xffffffffffffffff, &(0x7f0000000780)='syz0\x00', 0x200002, 0x0) (async) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x14, 0x0, 0x800, 0x70bd25, 0x25dfdbfe}, 0x78}, 0x1, 0x0, 0x0, 0x890}, 0x8000) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_lsm={0x1d, 0xd, &(0x7f00000007c0)=@raw=[@btf_id={0x18, 0xa, 0x3, 0x0, 0x4}, @generic={0x4, 0xf, 0x2, 0x2, 0x8}, @generic={0xc0, 0xe, 0x4, 0x0, 0x4}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @call={0x85, 0x0, 0x0, 0xb7}, @alu={0x4, 0x0, 0x5, 0x1, 0x3, 0x40, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x200}], &(0x7f0000000840)='GPL\x00', 0x10001, 0x3d, &(0x7f0000000880)=""/61, 0x41000, 0x0, '\x00', 0x0, 0x1b, r1, 0x8, &(0x7f00000008c0)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000900)={0x3, 0xc, 0x5, 0x1}, 0x10}, 0x80) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/block/loop7', 0x0, 0x0) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, 0x0) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000009c0)={r2, r3, 0x1e}, 0x10) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) (async) sendmsg$can_bcm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="07000000040d00000500000000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="030000e001000000010000201d0200001081f1b97d61b45d02fd942e164d90f4b33601f4992ef294a3102edccd08e5b07b94cd0e06980b7eb7d72aea2775b593d94dd700"/80], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) (async) [ 489.662499][T10139] R10: 00007feb5d37f050 R11: 0000000000000246 R12: 0000000000000058 [ 489.670388][T10139] R13: 00007ffc843a962f R14: 00007feb5d37f300 R15: 0000000000022000 [ 489.678200][T10139] 23:12:32 executing program 4: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x302be5cd290000}, 0x58) 23:12:32 executing program 5: bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={&(0x7f0000000000)="a776b1f1b8560725c56d15dd5c4df87c2c01db71089fdc13a6cbba0253eb7877794dd4e3eb1cb687ac0ab4a91d755665e603239f9457ce9aef0f5fe4ef06cb5af418b5b8ac7ff6ee0ce3c4a2e92fe4", 0x0, &(0x7f00000002c0)="56de2ab55e1171c3413a2cba04b29c9b3987810a0a00af9e6ec75c3ccc3dce61870b03f9111e796f697af8ed388341ac916dcb91d4dc52c64e305b01b2405cc327acb21b2583c1b22378f16138bdb4c9839f32f776461a6ba582699e0b769db473fe55c804a6a6d599151ef968d43c36e44c5a9f85f5581ba5f7e911277c4438a5e7895d63ae94e4db422a9757acc008de5619c8fd87362ec9", &(0x7f00000001c0)="65589604ab0c165ae07cea6c104452d54d87cc1fdbee6fa98a641c7487e69ea8c3efaa8fc4a8c2ccf045fddba0c883767dd8522b10e193e7b7d397fa6dfff304197f659badfcaaa5d310d4a4b55b", 0x1003, 0x1}, 0x38) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) 23:12:32 executing program 3: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x7000000}, 0x58) 23:12:32 executing program 0: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) (async) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000740)='devices.allow\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000001400)={0x428, 0x0, 0x2, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x8000, 0x5e}}}}, [@NL80211_ATTR_TESTDATA={0x98, 0x45, "8d70265e4bb82b1322ec3a6e23a7fad4dcc883adbf14c41344b0fb43870c9df6bb445af1bb58016a4809b3ef51c59208f03afe9fb65f13a5c7c11fa5ae54f11db792524a7dbec13e50afb16db89e2f48033ced8fa19ad5b136a22d387b72bd250f6b50812982f9226d095a64a401599a4065e7b3243bfc6cd965e13c360271d73c5a8cb4111b8e14e02f4bf07a44b5604dc7eb4a"}, @NL80211_ATTR_TESTDATA={0x14e, 0x45, "2056d5671975879721df738b513b367cd869cfe5d79a4986945dd2b9aab179e4eb86c9c950ee810a2841c602cd0daa78232455f9fb7e94c47b59a887fda52d51686c100904c4054692b6b2154b077e5b0ae5e58f54a62f1e3e963fa4f06d5ea77bd64e9ff10ae51aa51d46d6229c45b5d858a17e85c4ced8756f109fc0a7f97b46dbcf5bd193c9d79290311101b8e82f940e9e2db1652e18927c40501ce79015065640e725382fd0768de26a715092123dcc18a3448f798a32b90d96e072dcaaa9190c0e6e723390c4698e788ea3c86ab2b411cb97ad2fe253e0a32aeb806010f1977968382d0d7b72bc986e42ac0269bf58484e607cf654a72396425596b18c0d37736f09b3b7682e3f81a5463a6f9590a51da747e06da7278e8ad613a6fbefb4bbda9ff63a133136b73b52f97b10c9b4337376c0bf678ed66f8aa4ce57e59f1ac4215822a342a1f445"}, @NL80211_ATTR_TESTDATA={0xec, 0x45, "baa06eae8682cea96ca329b4998e9dec1099a2451dc243a330f06959fd4e7f381553aaacc7225e19b0eeeb284b22a99c722ebf04ca2bf8b3d8d2493cd939219ce74d85150861f9cea3eb13b266981ea887f51c97d013a88dfef9d6d0e27bfe788511b0842fdd0c8775e5e1e44927df861dfcc6989449b04dbdf743f2a9ea802f91957865528f2737b4f385f93937a412c44ed23148cec5edadbaf7d540c8144173ba66a07b863b5672c23f8ee796d0d3e71fa1cf3e03327551580946950e75db4e2cda93269bda37d2009fe82875a4f7a29de188cdc007e34b3bb63d837e528bd353c3ad39c0afc2"}, @NL80211_ATTR_TESTDATA={0x3c, 0x45, "a494338a14ff435d0b7029680b1b291bac140a6d210f6ead3a6c170e48ee46a1dd7a396952dc6625b216ada991b85633634e22b3c6dac18f"}, @NL80211_ATTR_TESTDATA={0xee, 0x45, "838047a1a51eae0f51c97bf95915d59f4d871f1675d80ffb3bcc9dd0ef335efd4ef4c7357c179976904d16591c6ad65e9032762d437e16726d372c1e14961bb6436ecd3aae01e91a5415b4a7d0fb793eb703d1900002e84c625e9a9ecec72084b8abb78ed90ab99dba4c8ba6cc796fdfa2c035494015b73e4251d389f3f44dae8756131cc0cec44c860bdae2859000d6cd8b863e328e9a781edef53d5a6bfe278c6c31112004043334a5209f06aa760ef9c8354cf11ee4bc5828919aac22ce476e94800b7403e8d24b667214f06b8306145f558c2549906a402a8244a0f9df99fd938cfca61dabee2711"}]}, 0x428}, 0x1, 0x0, 0x0, 0x20040085}, 0xc0) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/class/scsi_device', 0x531800, 0x149) openat$cgroup(0xffffffffffffffff, &(0x7f0000000780)='syz0\x00', 0x200002, 0x0) (async) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x14, 0x0, 0x800, 0x70bd25, 0x25dfdbfe}, 0x78}, 0x1, 0x0, 0x0, 0x890}, 0x8000) (async) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_lsm={0x1d, 0xd, &(0x7f00000007c0)=@raw=[@btf_id={0x18, 0xa, 0x3, 0x0, 0x4}, @generic={0x4, 0xf, 0x2, 0x2, 0x8}, @generic={0xc0, 0xe, 0x4, 0x0, 0x4}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @call={0x85, 0x0, 0x0, 0xb7}, @alu={0x4, 0x0, 0x5, 0x1, 0x3, 0x40, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x200}], &(0x7f0000000840)='GPL\x00', 0x10001, 0x3d, &(0x7f0000000880)=""/61, 0x41000, 0x0, '\x00', 0x0, 0x1b, r1, 0x8, &(0x7f00000008c0)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000900)={0x3, 0xc, 0x5, 0x1}, 0x10}, 0x80) (async) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, 0x0) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000009c0)={r2, r3, 0x1e}, 0x10) (async) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) (async) sendmsg$can_bcm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="07000000040d00000500000000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="030000e001000000010000201d0200001081f1b97d61b45d02fd942e164d90f4b33601f4992ef294a3102edccd08e5b07b94cd0e06980b7eb7d72aea2775b593d94dd700"/80], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) [ 489.717609][T10167] FAULT_INJECTION: forcing a failure. [ 489.717609][T10167] name failslab, interval 1, probability 0, space 0, times 0 [ 489.778376][T10167] CPU: 0 PID: 10167 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 489.788467][T10167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 489.798464][T10167] Call Trace: [ 489.801582][T10167] [ 489.804361][T10167] dump_stack_lvl+0x151/0x1b7 [ 489.808873][T10167] ? bfq_pos_tree_add_move+0x43e/0x43e [ 489.814170][T10167] dump_stack+0x15/0x17 [ 489.818250][T10167] should_fail+0x3c0/0x510 [ 489.822497][T10167] __should_failslab+0x9f/0xe0 [ 489.827098][T10167] should_failslab+0x9/0x20 [ 489.831453][T10167] kmem_cache_alloc+0x4f/0x2f0 [ 489.836040][T10167] ? vm_area_dup+0x26/0x1d0 [ 489.840403][T10167] vm_area_dup+0x26/0x1d0 [ 489.844542][T10167] dup_mmap+0x6b8/0xea0 [ 489.848536][T10167] ? __delayed_free_task+0x20/0x20 [ 489.853475][T10167] ? mm_init+0x807/0x960 [ 489.858251][T10167] dup_mm+0x91/0x330 [ 489.861979][T10167] copy_mm+0x108/0x1b0 [ 489.865973][T10167] copy_process+0x1295/0x3250 [ 489.870489][T10167] ? check_stack_object+0xf7/0x130 [ 489.875434][T10167] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 489.880385][T10167] ? copy_clone_args_from_user+0x6cf/0x790 [ 489.886109][T10167] kernel_clone+0x22d/0x990 [ 489.890450][T10167] ? dup_mmap+0xea0/0xea0 [ 489.894700][T10167] ? create_io_thread+0x1e0/0x1e0 [ 489.899703][T10167] ? file_end_write+0x1b0/0x1b0 [ 489.904333][T10167] __x64_sys_clone3+0x375/0x3a0 [ 489.909108][T10167] ? __ia32_sys_clone+0x300/0x300 [ 489.913968][T10167] ? ksys_write+0x25f/0x2c0 [ 489.918308][T10167] ? debug_smp_processor_id+0x17/0x20 [ 489.923515][T10167] do_syscall_64+0x44/0xd0 [ 489.927767][T10167] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 489.933497][T10167] RIP: 0033:0x7feb5e60c0c9 [ 489.937751][T10167] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 489.957511][T10167] RSP: 002b:00007feb5d37f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 489.965745][T10167] RAX: ffffffffffffffda RBX: 00007feb5e72bf80 RCX: 00007feb5e60c0c9 23:12:32 executing program 2: syz_clone3(&(0x7f0000000b40)={0x1000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 38) 23:12:32 executing program 5: bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={&(0x7f0000000000)="a776b1f1b8560725c56d15dd5c4df87c2c01db71089fdc13a6cbba0253eb7877794dd4e3eb1cb687ac0ab4a91d755665e603239f9457ce9aef0f5fe4ef06cb5af418b5b8ac7ff6ee0ce3c4a2e92fe4", 0x0, 0x0, &(0x7f00000001c0)="65589604ab0c165ae07cea6c104452d54d87cc1fdbee6fa98a641c7487e69ea8c3efaa8fc4a8c2ccf045fddba0c883767dd8522b10e193e7b7d397fa6dfff304197f659badfcaaa5d310d4a4b55b", 0x1003, 0x1}, 0x38) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) 23:12:32 executing program 4: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xf0010d1b000000}, 0x58) 23:12:32 executing program 3: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x9000000}, 0x58) 23:12:32 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f00000007c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000780)={&(0x7f0000000080)={0x6e4, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x6ad, 0x33, @data_frame={@qos_no_ht={{@type01={{0x0, 0x2, 0xe, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x1f}, @device_a, @from_mac=@broadcast, @device_b, {0x9, 0x8}}, {0x0, 0x1, 0x2, 0x0, 0x4}}, {@type11={{0x0, 0x2, 0xb, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x3}, @device_a, @device_b, @random="aa4dfa9f4b75", {0x2, 0xb3}}, {0x0, 0x1, 0x3, 0x1, 0x8}}}, @random="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"}}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {0x7f}, @device_a, @broadcast}}]}, 0x6e4}, 0x1, 0x0, 0x0, 0x800}, 0x4040001) syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) 23:12:32 executing program 1: r0 = socket(0x2c, 0x0, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x48, r1, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0xffff63e1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x80000001}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c811}, 0x4000854) 23:12:32 executing program 4: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xf0ff1f00000000}, 0x58) 23:12:32 executing program 1: r0 = socket(0x2c, 0x0, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x48, r1, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0xffff63e1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x80000001}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c811}, 0x4000854) [ 489.973540][T10167] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007feb5d37f050 [ 489.981351][T10167] RBP: 00007feb5d37f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 489.989165][T10167] R10: 00007feb5d37f050 R11: 0000000000000246 R12: 0000000000000058 [ 489.996972][T10167] R13: 00007ffc843a962f R14: 00007feb5d37f300 R15: 0000000000022000 [ 490.004786][T10167] 23:12:32 executing program 5: bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={&(0x7f0000000000)="a776b1f1b8560725c56d15dd5c4df87c2c01db71089fdc13a6cbba0253eb7877794dd4e3eb1cb687ac0ab4a91d755665e603239f9457ce9aef0f5fe4ef06cb5af418b5b8ac7ff6ee0ce3c4a2e92fe4", 0x0, 0x0, 0x0, 0x1003, 0x1}, 0x38) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) 23:12:32 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f00000007c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000780)={&(0x7f0000000080)={0x6e4, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x6ad, 0x33, @data_frame={@qos_no_ht={{@type01={{0x0, 0x2, 0xe, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x1f}, @device_a, @from_mac=@broadcast, @device_b, {0x9, 0x8}}, {0x0, 0x1, 0x2, 0x0, 0x4}}, {@type11={{0x0, 0x2, 0xb, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x3}, @device_a, @device_b, @random="aa4dfa9f4b75", {0x2, 0xb3}}, {0x0, 0x1, 0x3, 0x1, 0x8}}}, @random="74f9a008f5a6a95eebe05a5b794ca9dbbb885859c4fa7f4b0df252a5bb9ba46639e22561ef94ee3a27de3229d55791dc445326f387eb611257ddd021b9ea068b8c0bbe4da7cbb000747cca067fe497ab42efbad35984ad407be4df36434f3cce1dcf9db3d109afd80db43f01ac7c20f01663ec9f8bbeca97ddf5e0da700fa08d8688f10583ef7b3b6fb2a64efe321b8fec71d7ab5011af69a51c954fc86958cb56b6d9e27dc3bddeeefd006cfd65794b9210151706b30a2815df9dbf0c426c786203841ff0aa098329bb0ca08c93e9844930c6635e718f759bd811137e8fe0f21f1a1f99f18dfd4776b0142aba6b8262c66d7963785f56e99ad41b4b084605a4539b19144761853bc35647473e056088499be815434dbadecbd5771a235c5076711334a5904419bd1061791ba1c191ae2a411344485b13768a8ad5fe54b560880e475d0bade0cd70badcbaa1d3ab11d96aa8bbda644528115d7cda98223fa017124be386313a9d786a53ed6edf711c9308ac3e79706c64de284c8015e664eacb6ddfc4446415bf0aaf25e29f366ff87c09f66c5b199c7dbf51181c7f57c5e7348d14cf94378c26cbf29c2fca0db21fc4521601f3a2bfb66dcbe9e09c2fb884979f51554c7c8379e64f0f5a6c39bebbc46d3f5efa2ab394ee58f4749ecfd21a6e72d09abd87360bb1d8718be7338eeeec5e3cb65f25062828dc40d25dd445e34523364f962c4bde83fb4ca8ea4877f552c0444c42788350d1b2d33dbd897b6e24a6856bcfcea54297002a982c5b1f425764d44d8650de3fb90886e9722644c8979ab749e8f5639e02f2bbcdfaabd565b9002f49bdb36dea42ca19655dd8f98985d20ab1b0810da314f2b8d854e4cb1a5c9f6aa4a881b086aa6abcf8a90983d856762e0e2d0d5ea68cbd5b76566d78402f1f93d24c30c62717e780469b893cfa8488c8431427ca9df23b1b1f9c63ef712a2347e82818e4cca2b0d2d272194a813d94f0c9d2fc5197c3220aeb8d184fa89afa8bf0e00a461a57dc30e9ca7cd94c414d5f44e1e9a6ef04a0fe4372d1eb6207df4a7bebce37a0b1cd6ec054508c5945a3381e3322e3e51626ddacd0c24e917655384e55493673f362990bb42db5ef575644643cec8206798cbf74c9517200b7546ce8c9415d1bde6f123e16bc3b126171846d3f144d25b6691db1a3dda8a68e04131bc2474b4d39d60d07d640b17ab9551944901e39a8ae991260a3623981d220bb20f4fe3bec6fe969d2fbb135418c70d41034ed9b6e970ce4d89a6a9a3202978a72568921d431179259ca0cce004f777c9e802cfd36e1f3a1221a479a15652d44a3a75a4fdbfa6e16b441db0406837506ce1a63b55d37f59d40b2e336dd89ead269393e6130c010a21fd1f1031a167abfd055f6ca50ca7cbecf203a75565537b9ba5d7e6665401dbd7e9b38b81fef1cafdeb377f502924efd38cd067050ac5ba42bc1f3d950b0ff0679db8847e530c7ab85cad9c31dc303bd064573e87a5c96b43e8ef081705e6e015d449c6be17388ef2970004d0ff44ffbf971a5ab28719d28e393453c7602f63c7a85e9c1eec9c554aa470e26cf48857ef7504d36033afea15bbc146e0b5b82d6d0e91fd15d27578c8bef9a41d2ed9a81962d1bf38da661bd5a60132c55771ef556fede3332ccb9e17267ba2823c6ece48c04a07287007ec03951ed174001fa58fefa13d020e86fdef424b5fe64cdb2476b980cf660a6ee19af50cbe960c7f4ed474a35bc8c54b7f8007698e5eeed1b86f98c49323239a94d0b001b1de2384bc35a595c35fadf1d7bcee2281b58a15c3c59e18aa9e2433704d8f6984497b365206f511787aee49c257728128b9c72baeb94912b31e1dfbcb88c9011f31bfaf3ed87821ebf29c7bcdb962734df86105db1732e2ffe73c0bd04daf8a7a0ffdd62104f4afefef1cca9bc5c06762a539cdfa20c3dd37b37430214aaf37d811932e1913324053c8e5a7f63de483e1ae8981af6a0215b1f89b2944055cd4db51f42ffd89853692d55ff2acffc6fae39e2be95cf9934a784c237e0d5a4bab30761fad4f3bbcdb51a2bdc1ac251588a96c6d9145bfb613494a341a390d2f35fa16d4d3785421dce4e83d07afe4e9cec3a806daccc88b1e468bf24de294f8a986c1605807450065b4a81a9b648cd38fd52ffd5da6ddda2f4729a2723c02229320316c7b8107d35e6902c5849061f3bacf67b8c51a5d35388f51198b7065fb68a434bad15dabc859445475c9e8c0e825a62be97b9c30dc2f8751461817738148e9a20a3cddb4cabe74fee8f709bb752edaa334dda9ade56bb4fab"}}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {0x7f}, @device_a, @broadcast}}]}, 0x6e4}, 0x1, 0x0, 0x0, 0x800}, 0x4040001) syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) 23:12:32 executing program 3: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10000200}, 0x58) 23:12:32 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f00000007c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000780)={&(0x7f0000000080)={0x6e4, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x6ad, 0x33, @data_frame={@qos_no_ht={{@type01={{0x0, 0x2, 0xe, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x1f}, @device_a, @from_mac=@broadcast, @device_b, {0x9, 0x8}}, {0x0, 0x1, 0x2, 0x0, 0x4}}, {@type11={{0x0, 0x2, 0xb, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x3}, @device_a, @device_b, @random="aa4dfa9f4b75", {0x2, 0xb3}}, {0x0, 0x1, 0x3, 0x1, 0x8}}}, @random="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"}}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {0x7f}, @device_a, @broadcast}}]}, 0x6e4}, 0x1, 0x0, 0x0, 0x800}, 0x4040001) syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) [ 490.044947][T10209] FAULT_INJECTION: forcing a failure. [ 490.044947][T10209] name failslab, interval 1, probability 0, space 0, times 0 [ 490.070218][T10209] CPU: 0 PID: 10209 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 490.080293][T10209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 490.091227][T10209] Call Trace: [ 490.094349][T10209] [ 490.097127][T10209] dump_stack_lvl+0x151/0x1b7 [ 490.101644][T10209] ? bfq_pos_tree_add_move+0x43e/0x43e [ 490.106932][T10209] dump_stack+0x15/0x17 [ 490.110928][T10209] should_fail+0x3c0/0x510 [ 490.115176][T10209] __should_failslab+0x9f/0xe0 [ 490.119778][T10209] should_failslab+0x9/0x20 [ 490.124113][T10209] kmem_cache_alloc+0x4f/0x2f0 [ 490.128715][T10209] ? vm_area_dup+0x26/0x1d0 [ 490.133057][T10209] ? __kasan_check_read+0x11/0x20 [ 490.137914][T10209] vm_area_dup+0x26/0x1d0 [ 490.142167][T10209] dup_mmap+0x6b8/0xea0 [ 490.146161][T10209] ? __delayed_free_task+0x20/0x20 [ 490.151108][T10209] ? mm_init+0x807/0x960 [ 490.155187][T10209] dup_mm+0x91/0x330 [ 490.158919][T10209] copy_mm+0x108/0x1b0 [ 490.162824][T10209] copy_process+0x1295/0x3250 [ 490.167337][T10209] ? check_stack_object+0xf7/0x130 [ 490.172285][T10209] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 490.177232][T10209] ? copy_clone_args_from_user+0x6cf/0x790 [ 490.182883][T10209] kernel_clone+0x22d/0x990 [ 490.187213][T10209] ? dup_mmap+0xea0/0xea0 [ 490.191378][T10209] ? create_io_thread+0x1e0/0x1e0 [ 490.196238][T10209] ? file_end_write+0x1b0/0x1b0 [ 490.200925][T10209] __x64_sys_clone3+0x375/0x3a0 [ 490.205619][T10209] ? __ia32_sys_clone+0x300/0x300 [ 490.210484][T10209] ? ksys_write+0x25f/0x2c0 [ 490.214812][T10209] ? debug_smp_processor_id+0x17/0x20 [ 490.220109][T10209] do_syscall_64+0x44/0xd0 [ 490.224358][T10209] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 490.230112][T10209] RIP: 0033:0x7feb5e60c0c9 [ 490.234342][T10209] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 490.253963][T10209] RSP: 002b:00007feb5d37f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 490.262200][T10209] RAX: ffffffffffffffda RBX: 00007feb5e72bf80 RCX: 00007feb5e60c0c9 [ 490.270011][T10209] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007feb5d37f050 [ 490.277821][T10209] RBP: 00007feb5d37f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 490.285634][T10209] R10: 00007feb5d37f050 R11: 0000000000000246 R12: 0000000000000058 23:12:32 executing program 2: syz_clone3(&(0x7f0000000b40)={0x1000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 39) 23:12:32 executing program 4: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x58) 23:12:32 executing program 5: bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={&(0x7f0000000000)="a776b1f1b8560725c56d15dd5c4df87c2c01db71089fdc13a6cbba0253eb7877794dd4e3eb1cb687ac0ab4a91d755665e603239f9457ce9aef0f5fe4ef06cb5af418b5b8ac7ff6ee0ce3c4a2e92fe4", 0x0, 0x0, 0x0, 0x0, 0x1}, 0x38) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) 23:12:32 executing program 3: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x58) 23:12:32 executing program 1: r0 = socket(0x2c, 0x0, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x48, r1, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0xffff63e1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x80000001}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c811}, 0x4000854) 23:12:32 executing program 0: r0 = syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$clear(0x7, r1) r2 = getpgrp(r0) r3 = syz_clone3(&(0x7f0000000480)={0x2a000, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300), {0x28}, &(0x7f0000000340)=""/228, 0xe4, &(0x7f0000000bc0)=""/4096, &(0x7f0000000440)=[r0, 0x0, r0, r0, r0], 0x5}, 0x58) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x1d}, 0x10) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001bc0)={r5, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000840)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x5, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000940)=[{}], 0x8, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) syz_clone3(&(0x7f0000000540)={0xa4080000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x23}, &(0x7f0000000140)=""/28, 0x1c, &(0x7f0000000180)=""/244, &(0x7f0000000500)=[r0, r2, r0, r3], 0x4, {r4}}, 0x58) ioctl$KDSKBSENT(r4, 0x4b49, &(0x7f0000000600)={0x0, "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"}) keyctl$unlink(0x9, 0x0, r1) 23:12:32 executing program 3: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1f000000}, 0x58) 23:12:32 executing program 4: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, 0x58) 23:12:32 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000080)={0x3a8, 0x13, 0x1, 0x70bd2d, 0x25dfdbfe, {0x1d, 0x3f, 0x7, 0x4, {0x4e20, 0x4e22, [0x1, 0x1ff, 0x5, 0x1], [0xc305, 0x40000000, 0x4, 0x6624b780], 0x0, [0x1, 0x563]}, 0x98, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x1f, 0x1, "f5f3481f16e81322f5be860464e03c5296270ff06865979788e40a"}, @INET_DIAG_REQ_BYTECODE={0xbb, 0x1, "2686e8ef78062e7710f5012cf42f2983f34a8c8d8774481c364d58e1560b8af4cabee032c30bd8ec69df967b12a36bd893206d85b2fdc7a1918067eb3220fa922f451c148aa15252da52d7c93da04cd06212a4c890b107260db99acb29579009888a92957d83fa036c54559c03b2a159ee50e38b233efb84f67ed15f7686e4cfea7c6c1a132cc63fa45834224ca21063efd69c1115c3fb8446989d1a7d732d2b8c54b3095938d8a47311f0b098d5741022c849f456766c"}, @INET_DIAG_REQ_BYTECODE={0x2f, 0x1, "a7b5acb9d1ef0cd116f9d0269bd9b3d85f21d4243633f06eb63c633eee69a71534cf51add8bdbb9ad70bdb"}, @INET_DIAG_REQ_BYTECODE={0x83, 0x1, "65bea786e281da9aa27189e92f0e73cf80ffb16d174b475c5e02686c9c31bf244377cfae674685bb8f66c427131e404d9ddc1b0468da7da41957b6460ea1c198e080961073b172205bf4c025881e12d85ab660daad7c9949de93ccecd9bcfa61e735e0c3cb55f33bd21fc50f11950f7da194ba05d4285db7f3e60eac0a2484"}, @INET_DIAG_REQ_BYTECODE={0x4e, 0x1, "9fe1bc79baa7e74e563a9a8794e18288b111d23b3f5fffd2ed3997853a812723b51b47ef51072c4d877e22cc5e7e248ca1e20386fd2dc04e20de8d075d8736526ddf939ed8363545f1a5"}, @INET_DIAG_REQ_BYTECODE={0xe7, 0x1, "acc9c4b8a849e747fbcb4bd68ef4665749c0ae733ca11a5b7c7b13eaa4ea865f191722306f2c64e4bc7aa89b7f101fcc04657b3c0e4392559b948747e1d477ccde9f506194a2644d80acda60c041db08acd9985f54b99c505ea5b76787c940dafd88689145b79213aaf73a6e81d26cd8a09992869a19911bee06dc8ed3c8b6265cc59415197ac58a685a646f82c55143131330d2c39ee94e8be7c8190ebbc8b2435c21b3e315c73c05c4380195df47935b9ca5d42934678e612f0fe347e304460dabbaa8e3993d6260faa5731bb44f083aafd973ccc0c7ea040d3329b5809e3bae566d"}, @INET_DIAG_REQ_BYTECODE={0x8e, 0x1, "28caf32f7122ed1c52e92994b6c78b78776e9690e71acbd0f1da960a2c8cd148a34678f4b2c3cf07eac448ae271a46bd81b01bc10a60806b7587ee1795d53da71e8c76da7a869775dc12a77707c97e6230a7d427d3c429263c3d20af203343ed7108986aaa1d6c23550be5e39e4d5a78276186199231e7dac2d36885ef934f28bec78b8bbefd3148b3c4"}]}, 0x3a8}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) syz_clone3(&(0x7f00000078c0)={0x20000, &(0x7f0000007600), &(0x7f0000007640), 0x0, {}, &(0x7f00000076c0)=""/132, 0x84, &(0x7f0000007780)=""/210, &(0x7f0000007880)=[0x0], 0x1}, 0x58) syz_open_dev$tty1(0xc, 0x4, 0x4) socket(0x2c, 0x0, 0x0) 23:12:32 executing program 5: bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={&(0x7f0000000000)="a776b1f1b8560725c56d15dd5c4df87c2c01db71089fdc13a6cbba0253eb7877794dd4e3eb1cb687ac0ab4a91d755665e603239f9457ce9aef0f5fe4ef06cb5af418b5b8ac7ff6ee0ce3c4a2e92fe4", 0x0, 0x0, 0x0, 0x0, 0x1}, 0x38) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 490.293444][T10209] R13: 00007ffc843a962f R14: 00007feb5d37f300 R15: 0000000000022000 [ 490.301258][T10209] 23:12:32 executing program 4: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x700000000000000}, 0x58) 23:12:32 executing program 5: bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={&(0x7f0000000000)="a776b1f1b8560725c56d15dd5c4df87c2c01db71089fdc13a6cbba0253eb7877794dd4e3eb1cb687ac0ab4a91d755665e603239f9457ce9aef0f5fe4ef06cb5af418b5b8ac7ff6ee0ce3c4a2e92fe4", 0x0, 0x0, 0x0, 0x0, 0x1}, 0x38) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 490.344256][T10236] FAULT_INJECTION: forcing a failure. [ 490.344256][T10236] name failslab, interval 1, probability 0, space 0, times 0 [ 490.360941][T10236] CPU: 0 PID: 10236 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 490.371014][T10236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 490.380997][T10236] Call Trace: [ 490.384120][T10236] [ 490.386901][T10236] dump_stack_lvl+0x151/0x1b7 23:12:32 executing program 4: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, 0x58) 23:12:32 executing program 2: syz_clone3(&(0x7f0000000b40)={0x1000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 40) 23:12:32 executing program 0: r0 = syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$clear(0x7, r1) r2 = getpgrp(r0) r3 = syz_clone3(&(0x7f0000000480)={0x2a000, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300), {0x28}, &(0x7f0000000340)=""/228, 0xe4, &(0x7f0000000bc0)=""/4096, &(0x7f0000000440)=[r0, 0x0, r0, r0, r0], 0x5}, 0x58) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x1d}, 0x10) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001bc0)={r5, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000840)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x5, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000940)=[{}], 0x8, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) syz_clone3(&(0x7f0000000540)={0xa4080000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x23}, &(0x7f0000000140)=""/28, 0x1c, &(0x7f0000000180)=""/244, &(0x7f0000000500)=[r0, r2, r0, r3], 0x4, {r4}}, 0x58) ioctl$KDSKBSENT(r4, 0x4b49, &(0x7f0000000600)={0x0, "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"}) keyctl$unlink(0x9, 0x0, r1) syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) (async) keyctl$clear(0x7, r1) (async) getpgrp(r0) (async) syz_clone3(&(0x7f0000000480)={0x2a000, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300), {0x28}, &(0x7f0000000340)=""/228, 0xe4, &(0x7f0000000bc0)=""/4096, &(0x7f0000000440)=[r0, 0x0, r0, r0, r0], 0x5}, 0x58) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x1d}, 0x10) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001bc0)={r5, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000840)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x5, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000940)=[{}], 0x8, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) (async) syz_clone3(&(0x7f0000000540)={0xa4080000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x23}, &(0x7f0000000140)=""/28, 0x1c, &(0x7f0000000180)=""/244, &(0x7f0000000500)=[r0, r2, r0, r3], 0x4, {r4}}, 0x58) (async) ioctl$KDSKBSENT(r4, 0x4b49, &(0x7f0000000600)={0x0, "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"}) (async) keyctl$unlink(0x9, 0x0, r1) (async) 23:12:32 executing program 3: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1ffff000}, 0x58) 23:12:32 executing program 5: bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={&(0x7f0000000000)="a776b1f1b8560725c56d15dd5c4df87c2c01db71089fdc13a6cbba0253eb7877794dd4e3eb1cb687ac0ab4a91d755665e603239f9457ce9aef0f5fe4ef06cb5af418b5b8ac7ff6ee0ce3c4a2e92fe4", 0x0, 0x0, 0x0, 0x0, 0x1}, 0x38) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 23:12:32 executing program 4: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x900000000000000}, 0x58) [ 490.391420][T10236] ? bfq_pos_tree_add_move+0x43e/0x43e [ 490.396713][T10236] dump_stack+0x15/0x17 [ 490.400709][T10236] should_fail+0x3c0/0x510 [ 490.404951][T10236] __should_failslab+0x9f/0xe0 [ 490.409563][T10236] should_failslab+0x9/0x20 [ 490.413903][T10236] kmem_cache_alloc+0x4f/0x2f0 [ 490.413931][T10236] ? vm_area_dup+0x26/0x1d0 [ 490.413949][T10236] vm_area_dup+0x26/0x1d0 [ 490.413965][T10236] dup_mmap+0x6b8/0xea0 [ 490.413983][T10236] ? __delayed_free_task+0x20/0x20 [ 490.414000][T10236] ? mm_init+0x807/0x960 [ 490.414014][T10236] dup_mm+0x91/0x330 [ 490.414037][T10236] copy_mm+0x108/0x1b0 [ 490.414052][T10236] copy_process+0x1295/0x3250 [ 490.414071][T10236] ? check_stack_object+0xf7/0x130 [ 490.414090][T10236] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 490.414104][T10236] ? copy_clone_args_from_user+0x6cf/0x790 [ 490.414121][T10236] kernel_clone+0x22d/0x990 [ 490.414136][T10236] ? dup_mmap+0xea0/0xea0 23:12:32 executing program 3: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x58) 23:12:32 executing program 4: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000}, 0x58) [ 490.414151][T10236] ? create_io_thread+0x1e0/0x1e0 [ 490.414167][T10236] ? file_end_write+0x1b0/0x1b0 [ 490.414184][T10236] __x64_sys_clone3+0x375/0x3a0 [ 490.414201][T10236] ? __ia32_sys_clone+0x300/0x300 [ 490.414217][T10236] ? ksys_write+0x25f/0x2c0 [ 490.414232][T10236] ? debug_smp_processor_id+0x17/0x20 [ 490.414249][T10236] do_syscall_64+0x44/0xd0 [ 490.414268][T10236] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 490.414286][T10236] RIP: 0033:0x7feb5e60c0c9 [ 490.414300][T10236] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 490.414315][T10236] RSP: 002b:00007feb5d37f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 490.414334][T10236] RAX: ffffffffffffffda RBX: 00007feb5e72bf80 RCX: 00007feb5e60c0c9 [ 490.414346][T10236] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007feb5d37f050 [ 490.414358][T10236] RBP: 00007feb5d37f1d0 R08: 0000000000000000 R09: 0000000000000058 23:12:32 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000080)={0x3a8, 0x13, 0x1, 0x70bd2d, 0x25dfdbfe, {0x1d, 0x3f, 0x7, 0x4, {0x4e20, 0x4e22, [0x1, 0x1ff, 0x5, 0x1], [0xc305, 0x40000000, 0x4, 0x6624b780], 0x0, [0x1, 0x563]}, 0x98, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x1f, 0x1, "f5f3481f16e81322f5be860464e03c5296270ff06865979788e40a"}, @INET_DIAG_REQ_BYTECODE={0xbb, 0x1, "2686e8ef78062e7710f5012cf42f2983f34a8c8d8774481c364d58e1560b8af4cabee032c30bd8ec69df967b12a36bd893206d85b2fdc7a1918067eb3220fa922f451c148aa15252da52d7c93da04cd06212a4c890b107260db99acb29579009888a92957d83fa036c54559c03b2a159ee50e38b233efb84f67ed15f7686e4cfea7c6c1a132cc63fa45834224ca21063efd69c1115c3fb8446989d1a7d732d2b8c54b3095938d8a47311f0b098d5741022c849f456766c"}, @INET_DIAG_REQ_BYTECODE={0x2f, 0x1, "a7b5acb9d1ef0cd116f9d0269bd9b3d85f21d4243633f06eb63c633eee69a71534cf51add8bdbb9ad70bdb"}, @INET_DIAG_REQ_BYTECODE={0x83, 0x1, "65bea786e281da9aa27189e92f0e73cf80ffb16d174b475c5e02686c9c31bf244377cfae674685bb8f66c427131e404d9ddc1b0468da7da41957b6460ea1c198e080961073b172205bf4c025881e12d85ab660daad7c9949de93ccecd9bcfa61e735e0c3cb55f33bd21fc50f11950f7da194ba05d4285db7f3e60eac0a2484"}, @INET_DIAG_REQ_BYTECODE={0x4e, 0x1, "9fe1bc79baa7e74e563a9a8794e18288b111d23b3f5fffd2ed3997853a812723b51b47ef51072c4d877e22cc5e7e248ca1e20386fd2dc04e20de8d075d8736526ddf939ed8363545f1a5"}, @INET_DIAG_REQ_BYTECODE={0xe7, 0x1, "acc9c4b8a849e747fbcb4bd68ef4665749c0ae733ca11a5b7c7b13eaa4ea865f191722306f2c64e4bc7aa89b7f101fcc04657b3c0e4392559b948747e1d477ccde9f506194a2644d80acda60c041db08acd9985f54b99c505ea5b76787c940dafd88689145b79213aaf73a6e81d26cd8a09992869a19911bee06dc8ed3c8b6265cc59415197ac58a685a646f82c55143131330d2c39ee94e8be7c8190ebbc8b2435c21b3e315c73c05c4380195df47935b9ca5d42934678e612f0fe347e304460dabbaa8e3993d6260faa5731bb44f083aafd973ccc0c7ea040d3329b5809e3bae566d"}, @INET_DIAG_REQ_BYTECODE={0x8e, 0x1, "28caf32f7122ed1c52e92994b6c78b78776e9690e71acbd0f1da960a2c8cd148a34678f4b2c3cf07eac448ae271a46bd81b01bc10a60806b7587ee1795d53da71e8c76da7a869775dc12a77707c97e6230a7d427d3c429263c3d20af203343ed7108986aaa1d6c23550be5e39e4d5a78276186199231e7dac2d36885ef934f28bec78b8bbefd3148b3c4"}]}, 0x3a8}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) syz_clone3(&(0x7f00000078c0)={0x20000, &(0x7f0000007600), &(0x7f0000007640), 0x0, {}, &(0x7f00000076c0)=""/132, 0x84, &(0x7f0000007780)=""/210, &(0x7f0000007880)=[0x0], 0x1}, 0x58) syz_open_dev$tty1(0xc, 0x4, 0x4) socket(0x2c, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) (async) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000080)={0x3a8, 0x13, 0x1, 0x70bd2d, 0x25dfdbfe, {0x1d, 0x3f, 0x7, 0x4, {0x4e20, 0x4e22, [0x1, 0x1ff, 0x5, 0x1], [0xc305, 0x40000000, 0x4, 0x6624b780], 0x0, [0x1, 0x563]}, 0x98, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x1f, 0x1, "f5f3481f16e81322f5be860464e03c5296270ff06865979788e40a"}, @INET_DIAG_REQ_BYTECODE={0xbb, 0x1, "2686e8ef78062e7710f5012cf42f2983f34a8c8d8774481c364d58e1560b8af4cabee032c30bd8ec69df967b12a36bd893206d85b2fdc7a1918067eb3220fa922f451c148aa15252da52d7c93da04cd06212a4c890b107260db99acb29579009888a92957d83fa036c54559c03b2a159ee50e38b233efb84f67ed15f7686e4cfea7c6c1a132cc63fa45834224ca21063efd69c1115c3fb8446989d1a7d732d2b8c54b3095938d8a47311f0b098d5741022c849f456766c"}, @INET_DIAG_REQ_BYTECODE={0x2f, 0x1, "a7b5acb9d1ef0cd116f9d0269bd9b3d85f21d4243633f06eb63c633eee69a71534cf51add8bdbb9ad70bdb"}, @INET_DIAG_REQ_BYTECODE={0x83, 0x1, "65bea786e281da9aa27189e92f0e73cf80ffb16d174b475c5e02686c9c31bf244377cfae674685bb8f66c427131e404d9ddc1b0468da7da41957b6460ea1c198e080961073b172205bf4c025881e12d85ab660daad7c9949de93ccecd9bcfa61e735e0c3cb55f33bd21fc50f11950f7da194ba05d4285db7f3e60eac0a2484"}, @INET_DIAG_REQ_BYTECODE={0x4e, 0x1, "9fe1bc79baa7e74e563a9a8794e18288b111d23b3f5fffd2ed3997853a812723b51b47ef51072c4d877e22cc5e7e248ca1e20386fd2dc04e20de8d075d8736526ddf939ed8363545f1a5"}, @INET_DIAG_REQ_BYTECODE={0xe7, 0x1, "acc9c4b8a849e747fbcb4bd68ef4665749c0ae733ca11a5b7c7b13eaa4ea865f191722306f2c64e4bc7aa89b7f101fcc04657b3c0e4392559b948747e1d477ccde9f506194a2644d80acda60c041db08acd9985f54b99c505ea5b76787c940dafd88689145b79213aaf73a6e81d26cd8a09992869a19911bee06dc8ed3c8b6265cc59415197ac58a685a646f82c55143131330d2c39ee94e8be7c8190ebbc8b2435c21b3e315c73c05c4380195df47935b9ca5d42934678e612f0fe347e304460dabbaa8e3993d6260faa5731bb44f083aafd973ccc0c7ea040d3329b5809e3bae566d"}, @INET_DIAG_REQ_BYTECODE={0x8e, 0x1, "28caf32f7122ed1c52e92994b6c78b78776e9690e71acbd0f1da960a2c8cd148a34678f4b2c3cf07eac448ae271a46bd81b01bc10a60806b7587ee1795d53da71e8c76da7a869775dc12a77707c97e6230a7d427d3c429263c3d20af203343ed7108986aaa1d6c23550be5e39e4d5a78276186199231e7dac2d36885ef934f28bec78b8bbefd3148b3c4"}]}, 0x3a8}, 0x1, 0x0, 0x0, 0x4}, 0x80) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) (async) syz_clone3(&(0x7f00000078c0)={0x20000, &(0x7f0000007600), &(0x7f0000007640), 0x0, {}, &(0x7f00000076c0)=""/132, 0x84, &(0x7f0000007780)=""/210, &(0x7f0000007880)=[0x0], 0x1}, 0x58) (async) syz_open_dev$tty1(0xc, 0x4, 0x4) (async) socket(0x2c, 0x0, 0x0) (async) 23:12:32 executing program 0: r0 = syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$clear(0x7, r1) r2 = getpgrp(r0) r3 = syz_clone3(&(0x7f0000000480)={0x2a000, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300), {0x28}, &(0x7f0000000340)=""/228, 0xe4, &(0x7f0000000bc0)=""/4096, &(0x7f0000000440)=[r0, 0x0, r0, r0, r0], 0x5}, 0x58) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x1d}, 0x10) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001bc0)={r5, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000840)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x5, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000940)=[{}], 0x8, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) syz_clone3(&(0x7f0000000540)={0xa4080000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x23}, &(0x7f0000000140)=""/28, 0x1c, &(0x7f0000000180)=""/244, &(0x7f0000000500)=[r0, r2, r0, r3], 0x4, {r4}}, 0x58) ioctl$KDSKBSENT(r4, 0x4b49, &(0x7f0000000600)={0x0, "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"}) keyctl$unlink(0x9, 0x0, r1) syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) (async) keyctl$clear(0x7, r1) (async) getpgrp(r0) (async) syz_clone3(&(0x7f0000000480)={0x2a000, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300), {0x28}, &(0x7f0000000340)=""/228, 0xe4, &(0x7f0000000bc0)=""/4096, &(0x7f0000000440)=[r0, 0x0, r0, r0, r0], 0x5}, 0x58) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x1d}, 0x10) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001bc0)={r5, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000840)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x5, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000940)=[{}], 0x8, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) (async) syz_clone3(&(0x7f0000000540)={0xa4080000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x23}, &(0x7f0000000140)=""/28, 0x1c, &(0x7f0000000180)=""/244, &(0x7f0000000500)=[r0, r2, r0, r3], 0x4, {r4}}, 0x58) (async) ioctl$KDSKBSENT(r4, 0x4b49, &(0x7f0000000600)={0x0, "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"}) (async) keyctl$unlink(0x9, 0x0, r1) (async) 23:12:32 executing program 5: r0 = syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$clear(0x7, r1) r2 = getpgrp(r0) r3 = syz_clone3(&(0x7f0000000480)={0x2a000, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300), {0x28}, &(0x7f0000000340)=""/228, 0xe4, &(0x7f0000000bc0)=""/4096, &(0x7f0000000440)=[r0, 0x0, r0, r0, r0], 0x5}, 0x58) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x1d}, 0x10) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001bc0)={r5, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000840)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x5, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000940)=[{}], 0x8, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) syz_clone3(&(0x7f0000000540)={0xa4080000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x23}, &(0x7f0000000140)=""/28, 0x1c, &(0x7f0000000180)=""/244, &(0x7f0000000500)=[r0, r2, r0, r3], 0x4, {r4}}, 0x58) ioctl$KDSKBSENT(r4, 0x4b49, &(0x7f0000000600)={0x0, "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"}) keyctl$unlink(0x9, 0x0, r1) 23:12:32 executing program 3: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x58) 23:12:32 executing program 4: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000}, 0x58) [ 490.414368][T10236] R10: 00007feb5d37f050 R11: 0000000000000246 R12: 0000000000000058 [ 490.414378][T10236] R13: 00007ffc843a962f R14: 00007feb5d37f300 R15: 0000000000022000 [ 490.414393][T10236] [ 490.454601][T10254] FAULT_INJECTION: forcing a failure. [ 490.454601][T10254] name failslab, interval 1, probability 0, space 0, times 0 [ 490.627492][T10254] CPU: 1 PID: 10254 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 490.637472][T10254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 490.647799][T10254] Call Trace: [ 490.650922][T10254] [ 490.653699][T10254] dump_stack_lvl+0x151/0x1b7 [ 490.658210][T10254] ? bfq_pos_tree_add_move+0x43e/0x43e [ 490.663507][T10254] dump_stack+0x15/0x17 [ 490.667500][T10254] should_fail+0x3c0/0x510 [ 490.671751][T10254] __should_failslab+0x9f/0xe0 [ 490.676367][T10254] should_failslab+0x9/0x20 [ 490.680689][T10254] kmem_cache_alloc+0x4f/0x2f0 [ 490.685377][T10254] ? vm_area_dup+0x26/0x1d0 [ 490.689713][T10254] ? __kasan_check_read+0x11/0x20 [ 490.694581][T10254] vm_area_dup+0x26/0x1d0 [ 490.698743][T10254] dup_mmap+0x6b8/0xea0 [ 490.702736][T10254] ? __delayed_free_task+0x20/0x20 [ 490.707689][T10254] ? mm_init+0x807/0x960 [ 490.711761][T10254] dup_mm+0x91/0x330 [ 490.715497][T10254] copy_mm+0x108/0x1b0 [ 490.719402][T10254] copy_process+0x1295/0x3250 [ 490.723915][T10254] ? check_stack_object+0xf7/0x130 [ 490.728861][T10254] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 490.733809][T10254] ? copy_clone_args_from_user+0x6cf/0x790 [ 490.739462][T10254] kernel_clone+0x22d/0x990 [ 490.743797][T10254] ? dup_mmap+0xea0/0xea0 23:12:33 executing program 2: syz_clone3(&(0x7f0000000b40)={0x1000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 41) 23:12:33 executing program 5: r0 = syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$clear(0x7, r1) r2 = getpgrp(r0) r3 = syz_clone3(&(0x7f0000000480)={0x2a000, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300), {0x28}, &(0x7f0000000340)=""/228, 0xe4, &(0x7f0000000bc0)=""/4096, &(0x7f0000000440)=[r0, 0x0, r0, r0, r0], 0x5}, 0x58) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x1d}, 0x10) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001bc0)={r5, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000840)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x5, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000940)=[{}], 0x8, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) syz_clone3(&(0x7f0000000540)={0xa4080000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x23}, &(0x7f0000000140)=""/28, 0x1c, &(0x7f0000000180)=""/244, &(0x7f0000000500)=[r0, r2, r0, r3], 0x4, {r4}}, 0x58) ioctl$KDSKBSENT(r4, 0x4b49, &(0x7f0000000600)={0x0, "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"}) keyctl$unlink(0x9, 0x0, r1) 23:12:33 executing program 3: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff}, 0x58) 23:12:33 executing program 4: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x58) 23:12:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000002d00)={0x0, 0x0, &(0x7f0000002cc0)={&(0x7f00000018c0)={0xe84, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0xe70, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type01={{0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1}, {}, @device_b}}}, @a_msdu=[{@broadcast, @device_a, 0xd7, "9713703b83e3d14b6fb18cdaa476dbfe532a4cbebb737b1ada11d8cdda55b31954b586253f019c3462b8ac9bae4542b63d878d9b51a7d195bc4f72bfb9b44a6a67417a79db3f3739e4e362cc6d79d81accd96fdda96473e0ba1359ca84a9e371109606c093cc26d4b9d35507ca942ebce32eb30488eb39f5f92aeae3870a02eb40be5731a31a642119ceb63a3588090af2be681c3b0daba83dc5218dae98ad5fb157140794e4bcbb83718633f9e57129eae492dce2cfbf6b5dc260cfce95a02e459d1d5066abeff4fb9e17588c00f17e06965c6a57ba5d"}, {@broadcast, @device_b, 0xd3f, "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"}]}}]}, 0xe84}}, 0x0) r1 = syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f00000003c0)={0x50008100, &(0x7f00000001c0), &(0x7f0000000200)=0x0, &(0x7f0000000240), {0x1e}, &(0x7f0000000280)=""/6, 0x6, &(0x7f00000002c0)=""/131, &(0x7f0000000380)=[r1, r1, r1], 0x3}, 0x58) r3 = syz_clone3(&(0x7f0000000700)={0x40000000, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0), {0x37}, &(0x7f0000000500)=""/149, 0x95, &(0x7f00000005c0)=""/242, &(0x7f00000006c0)=[r1, r1, 0x0, r1, r1], 0x5}, 0x58) r4 = syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f0000000280)={0x10000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r4], 0x1}, 0x58) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x101002, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000880), 0x10240, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r6, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x30, r8, 0x8, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x2a}, @val={0x8}, @val={0xc, 0x99, {0x3, 0x3c}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4001) syz_clone3(&(0x7f0000000800)={0x100000000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x1d}, &(0x7f00000000c0)=""/188, 0xbc, &(0x7f0000000180)=""/3, &(0x7f0000000780)=[r2, r3, r4, r1, r1, r1], 0x6, {r5}}, 0x58) [ 490.747954][T10254] ? create_io_thread+0x1e0/0x1e0 [ 490.752846][T10254] ? file_end_write+0x1b0/0x1b0 [ 490.757503][T10254] __x64_sys_clone3+0x375/0x3a0 [ 490.762382][T10254] ? __ia32_sys_clone+0x300/0x300 [ 490.762401][T10254] ? ksys_write+0x25f/0x2c0 [ 490.762412][T10254] ? debug_smp_processor_id+0x17/0x20 [ 490.762424][T10254] do_syscall_64+0x44/0xd0 23:12:33 executing program 3: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xfbffffff}, 0x58) 23:12:33 executing program 4: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x58) [ 490.762435][T10254] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 490.762447][T10254] RIP: 0033:0x7feb5e60c0c9 [ 490.762457][T10254] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 490.762473][T10254] RSP: 002b:00007feb5d37f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 490.762485][T10254] RAX: ffffffffffffffda RBX: 00007feb5e72bf80 RCX: 00007feb5e60c0c9 [ 490.762493][T10254] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007feb5d37f050 [ 490.762500][T10254] RBP: 00007feb5d37f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 490.762506][T10254] R10: 00007feb5d37f050 R11: 0000000000000246 R12: 0000000000000058 [ 490.762513][T10254] R13: 00007ffc843a962f R14: 00007feb5d37f300 R15: 0000000000022000 [ 490.762521][T10254] [ 490.809268][T10308] FAULT_INJECTION: forcing a failure. [ 490.809268][T10308] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 490.809295][T10308] CPU: 0 PID: 10308 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 490.809315][T10308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 490.809325][T10308] Call Trace: [ 490.809330][T10308] [ 490.809336][T10308] dump_stack_lvl+0x151/0x1b7 [ 490.809359][T10308] ? bfq_pos_tree_add_move+0x43e/0x43e [ 490.809380][T10308] dump_stack+0x15/0x17 [ 490.809396][T10308] should_fail+0x3c0/0x510 [ 490.809414][T10308] should_fail_alloc_page+0x58/0x70 [ 490.809432][T10308] __alloc_pages+0x1de/0x7c0 [ 490.809450][T10308] ? __count_vm_events+0x30/0x30 [ 490.809465][T10308] ? dup_mm+0x91/0x330 [ 490.809481][T10308] ? copy_mm+0x108/0x1b0 [ 490.809499][T10308] ? copy_process+0x1295/0x3250 [ 490.809514][T10308] ? kernel_clone+0x22d/0x990 [ 490.809528][T10308] ? __x64_sys_clone3+0x375/0x3a0 [ 490.809547][T10308] pte_alloc_one+0x73/0x1b0 [ 490.809564][T10308] ? pfn_modify_allowed+0x2e0/0x2e0 [ 490.809582][T10308] ? __kasan_check_write+0x14/0x20 [ 490.809600][T10308] ? __set_page_owner+0x2ee/0x310 [ 490.809618][T10308] __pte_alloc+0x86/0x350 [ 490.809636][T10308] ? post_alloc_hook+0x1ab/0x1b0 [ 490.809653][T10308] ? free_pgtables+0x210/0x210 [ 490.809671][T10308] ? get_page_from_freelist+0x38b/0x400 [ 490.809690][T10308] copy_pte_range+0x1b1f/0x20b0 [ 490.809711][T10308] ? __kunmap_atomic+0x80/0x80 [ 490.809727][T10308] ? __pud_alloc+0x260/0x260 [ 490.809742][T10308] ? __pud_alloc+0x218/0x260 [ 490.809757][T10308] ? do_handle_mm_fault+0x2370/0x2370 [ 490.809775][T10308] copy_page_range+0xc1e/0x1090 [ 490.809797][T10308] ? pfn_valid+0x1e0/0x1e0 [ 490.809817][T10308] dup_mmap+0x99f/0xea0 [ 490.809835][T10308] ? __delayed_free_task+0x20/0x20 [ 490.809852][T10308] ? mm_init+0x807/0x960 [ 490.809869][T10308] dup_mm+0x91/0x330 [ 490.809884][T10308] copy_mm+0x108/0x1b0 [ 490.809901][T10308] copy_process+0x1295/0x3250 [ 490.809920][T10308] ? check_stack_object+0xf7/0x130 [ 490.809938][T10308] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 490.809955][T10308] ? copy_clone_args_from_user+0x6cf/0x790 [ 490.809983][T10308] kernel_clone+0x22d/0x990 [ 490.810000][T10308] ? dup_mmap+0xea0/0xea0 [ 490.810018][T10308] ? create_io_thread+0x1e0/0x1e0 [ 490.810036][T10308] ? file_end_write+0x1b0/0x1b0 [ 490.810057][T10308] __x64_sys_clone3+0x375/0x3a0 [ 490.810075][T10308] ? __ia32_sys_clone+0x300/0x300 [ 490.810095][T10308] ? ksys_write+0x25f/0x2c0 [ 490.810112][T10308] ? debug_smp_processor_id+0x17/0x20 [ 490.810130][T10308] do_syscall_64+0x44/0xd0 [ 490.810148][T10308] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 490.810167][T10308] RIP: 0033:0x7feb5e60c0c9 [ 490.810182][T10308] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 490.810197][T10308] RSP: 002b:00007feb5d37f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 490.810217][T10308] RAX: ffffffffffffffda RBX: 00007feb5e72bf80 RCX: 00007feb5e60c0c9 [ 490.810230][T10308] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007feb5d37f050 [ 490.810242][T10308] RBP: 00007feb5d37f1d0 R08: 0000000000000000 R09: 0000000000000058 23:12:33 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000080)={0x3a8, 0x13, 0x1, 0x70bd2d, 0x25dfdbfe, {0x1d, 0x3f, 0x7, 0x4, {0x4e20, 0x4e22, [0x1, 0x1ff, 0x5, 0x1], [0xc305, 0x40000000, 0x4, 0x6624b780], 0x0, [0x1, 0x563]}, 0x98, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x1f, 0x1, "f5f3481f16e81322f5be860464e03c5296270ff06865979788e40a"}, @INET_DIAG_REQ_BYTECODE={0xbb, 0x1, "2686e8ef78062e7710f5012cf42f2983f34a8c8d8774481c364d58e1560b8af4cabee032c30bd8ec69df967b12a36bd893206d85b2fdc7a1918067eb3220fa922f451c148aa15252da52d7c93da04cd06212a4c890b107260db99acb29579009888a92957d83fa036c54559c03b2a159ee50e38b233efb84f67ed15f7686e4cfea7c6c1a132cc63fa45834224ca21063efd69c1115c3fb8446989d1a7d732d2b8c54b3095938d8a47311f0b098d5741022c849f456766c"}, @INET_DIAG_REQ_BYTECODE={0x2f, 0x1, "a7b5acb9d1ef0cd116f9d0269bd9b3d85f21d4243633f06eb63c633eee69a71534cf51add8bdbb9ad70bdb"}, @INET_DIAG_REQ_BYTECODE={0x83, 0x1, "65bea786e281da9aa27189e92f0e73cf80ffb16d174b475c5e02686c9c31bf244377cfae674685bb8f66c427131e404d9ddc1b0468da7da41957b6460ea1c198e080961073b172205bf4c025881e12d85ab660daad7c9949de93ccecd9bcfa61e735e0c3cb55f33bd21fc50f11950f7da194ba05d4285db7f3e60eac0a2484"}, @INET_DIAG_REQ_BYTECODE={0x4e, 0x1, "9fe1bc79baa7e74e563a9a8794e18288b111d23b3f5fffd2ed3997853a812723b51b47ef51072c4d877e22cc5e7e248ca1e20386fd2dc04e20de8d075d8736526ddf939ed8363545f1a5"}, @INET_DIAG_REQ_BYTECODE={0xe7, 0x1, "acc9c4b8a849e747fbcb4bd68ef4665749c0ae733ca11a5b7c7b13eaa4ea865f191722306f2c64e4bc7aa89b7f101fcc04657b3c0e4392559b948747e1d477ccde9f506194a2644d80acda60c041db08acd9985f54b99c505ea5b76787c940dafd88689145b79213aaf73a6e81d26cd8a09992869a19911bee06dc8ed3c8b6265cc59415197ac58a685a646f82c55143131330d2c39ee94e8be7c8190ebbc8b2435c21b3e315c73c05c4380195df47935b9ca5d42934678e612f0fe347e304460dabbaa8e3993d6260faa5731bb44f083aafd973ccc0c7ea040d3329b5809e3bae566d"}, @INET_DIAG_REQ_BYTECODE={0x8e, 0x1, "28caf32f7122ed1c52e92994b6c78b78776e9690e71acbd0f1da960a2c8cd148a34678f4b2c3cf07eac448ae271a46bd81b01bc10a60806b7587ee1795d53da71e8c76da7a869775dc12a77707c97e6230a7d427d3c429263c3d20af203343ed7108986aaa1d6c23550be5e39e4d5a78276186199231e7dac2d36885ef934f28bec78b8bbefd3148b3c4"}]}, 0x3a8}, 0x1, 0x0, 0x0, 0x4}, 0x80) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) (async) syz_clone3(&(0x7f00000078c0)={0x20000, &(0x7f0000007600), &(0x7f0000007640), 0x0, {}, &(0x7f00000076c0)=""/132, 0x84, &(0x7f0000007780)=""/210, &(0x7f0000007880)=[0x0], 0x1}, 0x58) (async) syz_open_dev$tty1(0xc, 0x4, 0x4) (async) socket(0x2c, 0x0, 0x0) 23:12:33 executing program 4: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff00000000}, 0x58) 23:12:33 executing program 3: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0x58) 23:12:33 executing program 2: syz_clone3(&(0x7f0000000b40)={0x1000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 42) 23:12:33 executing program 5: r0 = syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$clear(0x7, r1) r2 = getpgrp(r0) r3 = syz_clone3(&(0x7f0000000480)={0x2a000, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300), {0x28}, &(0x7f0000000340)=""/228, 0xe4, &(0x7f0000000bc0)=""/4096, &(0x7f0000000440)=[r0, 0x0, r0, r0, r0], 0x5}, 0x58) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x1d}, 0x10) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001bc0)={r5, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000840)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x5, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000940)=[{}], 0x8, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) syz_clone3(&(0x7f0000000540)={0xa4080000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x23}, &(0x7f0000000140)=""/28, 0x1c, &(0x7f0000000180)=""/244, &(0x7f0000000500)=[r0, r2, r0, r3], 0x4, {r4}}, 0x58) ioctl$KDSKBSENT(r4, 0x4b49, &(0x7f0000000600)={0x0, "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"}) keyctl$unlink(0x9, 0x0, r1) 23:12:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000002d00)={0x0, 0x0, &(0x7f0000002cc0)={&(0x7f00000018c0)={0xe84, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0xe70, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type01={{0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1}, {}, @device_b}}}, @a_msdu=[{@broadcast, @device_a, 0xd7, "9713703b83e3d14b6fb18cdaa476dbfe532a4cbebb737b1ada11d8cdda55b31954b586253f019c3462b8ac9bae4542b63d878d9b51a7d195bc4f72bfb9b44a6a67417a79db3f3739e4e362cc6d79d81accd96fdda96473e0ba1359ca84a9e371109606c093cc26d4b9d35507ca942ebce32eb30488eb39f5f92aeae3870a02eb40be5731a31a642119ceb63a3588090af2be681c3b0daba83dc5218dae98ad5fb157140794e4bcbb83718633f9e57129eae492dce2cfbf6b5dc260cfce95a02e459d1d5066abeff4fb9e17588c00f17e06965c6a57ba5d"}, {@broadcast, @device_b, 0xd3f, "557c991b1d4c3e73cc661868c932b0fe5c5959cdb479b5f3685474e5b13c0cb92c49e7b76164cc7c348223af0d03c74c7ca0e408c788e27b121837dc76647a22d0156ef86378aa424d03a89ef7c9060d61adf391edd327fc27363a998f4f36fc6c0717d61a58b3a3681aba7efd5916a347f4f09cda8760cdb3c48f0300b90be9e522072b034ca9f712e3cdd3aae45d3c77357248ea24c958f67f4ed63786daed65b17d61b3f0aea524c834b1fe3270938a6f287d0e82c3f4f2b879d4019c40c6a45eff5c79616d0633735c47795d62670ad755abd09352ab62d981e78ddadcfba9ef7444478b3f75c1081270879babce4c92151c7163e2812bc1fed6bee8d842ca85b3cecc95c8022221e156b1dcacc0456f3b9aed3b542a1db7b03ec936d42066dfca728c6e76b91a323aecfee62c3adddd3a6f8c3fe771952f501275bbdafecb14bfc3aa90d6615fa96b2fa55db5604ca0defebcc8c29a503ccdc556372421393a07059538fd5d8fbd7895ae399d11f536fb47f6210cf4e7fc2232c94d39f03b5b652b20bd59ac3c645069a777950a3c106fc5e676c7c3d124bc9aad009776902dbc9787ebc1fdbaae2cea847cc9902bed3e18b35bc24362743bf36ab27ddbfbcbeaa1594dbafdd9d61b46417b755a927dcddd05ded44ec046cc26cc2341d377a1de153f9dba2664362e88b1210899ded8a278cd32c4356fecf3f6f8929d970f0ae946bf8cc7039af977390b46f2e23488edd00ad940713fe8426e05498a0b719d83422ed1f80fad8f3ee338aea7fe0a4a71a6545b2de216dd930aba94865b7f7bfa8ad5382edb6d3346a99f76ad590462712a1b64ed1ef86e6278daadf90adce6bcfc4afb3b8e0168a597f80735807b9307bb7e4a2b66b204a22ad2bbf3ca5bdded5dacc29e41760aac2f369199b6911f632db302396bc57441c7ce2299661faa08d23d90b914c779c3b464b30df82384bea96baee8e834f547bc39bb79359842c3597166fe2b5d1cf3384d8056c4cfeb68c429ba1a6dc168d91c004d645b7d99a8d029aed5e7328e19770a2a5fb808eae9c93a08f5b1a6b20c660f8c0f6e4a5b3956697bd8e8fda39ef129692627073788f8c88381babc14ce79d64b0c964034e4673278df73e49c30bccc67b195e3c74953d6807d5be82e77ccbe14a950ed7f8fb93194d1efeb294e1ba56662d3ed94976cedb7ba5a9c6b09049277b877deb8303ebfe367103fd9c51455866e3e791780aa379f255946b1a76ecdcc279b604505942af4034599edf0a110fef5d1a7954c7a9c94343370c71d21ea118f65ca51e30dbd8a63981430a3e7248482e507fea9c59b002b0951943f19eb88d547332b8953e1690c78a6ad8af6f5d7cc6e6c948ab97b7d5ae6277f4ebc868671911f34168882826657d212d280939657a16bed5f8f47f172a70cee29c777a2a1efe6c58171b4fb06b05fd29d91e2d81d3a5b8974ecb22bbf3a5d389708a4a64421f2f1d8e24582805a90d75a10f44ba69e140e11ea4506c6a0bab1c3fddf0d3a2936c2dc88f191a7e19117b729eec6ad872890f75decf6ca40dcde1f46ae42fd71ded7db56f8b5bb555314a4154a8459ec00cb893b18ff55a7f88248ca5ddf91dfdcfd5aae7b30aed3e98495df1c74ca32e6d1ec5af058d71a232cf7aa359759754ca11f22b2cb6fa167b671bc97976a94c83c7bfe72aba95c0776a97d941e8e5fcbc3faf4c1d68e2c72f62b3720200851da3be7089e0ccfbf7c49d75cb1e9a1274c59f1367c19bfd1f1d3af854e203c03b08261ca8abbed2ccb13d9a1a32dfc774c74bf9d2000063a21cfa28d7b859bc573a46eed209de43ba5a78ed64c5b0eb67d1fe2e553b1561d565071e488fa6a140c5bb5019c60f042c369f35a5e59a62438bddf3b991beef82fd329ce273ec64313208b1691e6424d949d7dc6b5fd35f8e362e760d9c4dfc7e47acf48afd46905a966cfa4da796f7769228e7a60571a9a20e533bbb3f8733a43283e15310f7474a62550302ff98b9701605153f3c5c5b8b1768b1eefc148c24371489c10986a470ae30e0cda6c250c0d71bb0333500f484df97a3ae2dabbe835cd8aff03025d08774c6d3193e630d5de1965f90448bc6997e0cf11fda15268ac6ceae75ba7ba48bd99d38ecab04c2f980ef59a96de86075494901f55ee53025d6ffafe2526120375f53a5b9d4c0958ce60e98d1551cccef0fdf850562d168ae8309d84ad19ca7a4a07d85d63ad977e9da50df76bfa8b894923e3378303b8c35496ea87f0b6fa1111974c262c0cc2fbe7589ba170c82eac08959240129897a11f312f609fd3389081574f998c98fe3c007b8373eff4f55cf6814915265bd4004ec43382c607f62fa831cf78c279992deb07251e226c38ab3683ae42c1d6da1cafb9893f19a14dee48a9d47714b90224a062b7f7df0e09481ee53a07c295c27921b28606878c3c1014d634923a3781b36b7e97e8de94e23905d1fae96142b9195a73f8826ecf7ba23b833ac069d4bb7595a417207eb51c07eadcbb86593a52b4e609ca8d3201724e43d09203cafe4a5b7806ec8f1cb485dec76fe9fb312c787b4ffa980aae1ea2a70ad805965c25ec92d4bf8c4f6d4f4117d43c3e5477227e89524c2a5b17a8fd3c0cabed6df3713084d72d378db4ed2d4686d1346c273346e4cb8ae516260b8da2517682b3ddf6d33c49ae087bbcad89b5b0633ca24be2b5558c72600b6e590802b7ac83e675179d9769421f91dc6c2b2eec886d6893b172c80115d54d5de9af4bccc19a402903246fba2c7f3f3d4e9a30512f0aad3bf481e79f6fab66cb4913b3afee891581320d2b9baf2de75da2265df54792e78bae71c5dcaa93c9f75309895f56022ae2edd9bb79abc6ec4833872d19c6a22a82b296ffe6de4027b8e9fc26ebf8e995f37e476025a10dfedd4149c047be0a74dd85e780280305f09279bdfd2a34a17de262015794b4f39d536b873987daea0337af8e99ffbfa7e8f72897feb0a8cb0905c452179747e7c1399daf52d09dca435c47738df3d22b5db4c6f1a33cc02cd1b8318b1545b418fb67f3da7ea049c6d8e0f381bb6de732b6948628d4bd88c19f50e36052fa9969cc06f9e352259be407ea2ddaf12d54c91047d67e3cc639af997455ac5a209cb646158b95b7e15f02acd8c0a544a0e98d1f1275df1b87a1c996463a30816222e39a5ac1a50a34f803b07055325cefce32f3ee53d1cf8fc4bf556124dc5dcc01c8b63530ff3f0d0d98c301bc0a897402ebe08d9522d0d6ed3eb7e385d636629ed52036c2311b0c26ffab2bb5f76812aca7958b1a525e977c5145ab5e3852fec0ece48474b3c2ce251d03bf9c7b5bca8d36616dce0ec3bdc29a54d7f325233d16df269d133082da6b2e24445778382162d519c2acecf32262a09542a6a2ec94e061481139a5b81325bb5efd31acda0fddbfc7190a9ae457a6df23fecd86567bfa36a005d69dfc10fcdd38c1cf6cb29f25f581740436f0fd1309d7781ab2b11f64e27dfd751c040efaa5d6cdbb3a77e406b3dc51a32ee62e6312e0a3acfdeef2a96549cc9c2a8f7fc3441479fc8fbcf3c32e51f463c35db6b7df79c70dec9b9e0f600e5f1a82be58fc2d5306d4ecde73a14e259fe57ccb01a74dc2c7252cc4b5f441282f28c67400e19b79ab646c76a60d05a0694975e10a963b81dd38e193183f930537b17747a52963dcf41d2314fc9289e4388efe1219d15000f09957f50791797e95f5fb278960ec1c066df20c017e3e970f9a3a1b7ac40121a38bb89dda2e60b35b0c6c33b12dd77d1a2926cbf09ad0f3c1cf36d0ecb4a39dc0ff89418e037b1232a14322be41a917d38c66861522e22ec99cd44ea4db05e3fc14e603fa87e62e1f2356078dc856651feca7a5844ac29644ef1959c43acc5e0758d07f2cfc011ad02c22ce30f43cf2d325686ad5255ffad0f570e718406394f8da4f8a565d8f354bd8b5e9f99abec9a7a2ff19f0681fa7e4dd5748f70796a2a9b32e0d7b29e764b1359c5d2a045426836c69ccae4313549d0e434e15c977e1b4dbe6cf9989a85f620f53a9d90d46abd61094d1624a3282590981060c657ec500d07bf016c548bf1437ce0b20b29451bdfa22ccf8f2720714b8c5d215c717d0a1dda455aad69e755a41b647427a702dd79bf4ca4982c3ebcdad6a03af027383dc537c258bdc7e5568749105f50ab863393c5b54cec565e8e0406401e45995800bf8b0a49df4498042f91eafb9d2004a3b754c0766d0a0a9db0b16796a2d5d980cc1d93c85e592d4cfeaa72c7f8099ca90b432e05debc31b256b11797410183bbf5a7be3640cc664d06ef181e4f6792463648defaf4bdf033981c8b3fc027237e459541e7ed2e61d1d01e265439dde635de32b13132e063908df1ccac13de4f8d2805b5c76138ce0f0c79ec21159def1dd4498da92c7db9dc3256d0a61b9860eb9c2ac33e0c258929cdcc8d90239b88599ecaeee9165ebe8a49103cfb36e745b77e9bfd8c13a1aa12fda2cc5b3b041c3350d534a62af7708bfcf22c0dd7dfb4e65b82f0c0add87fb9d44f40f2d13de67a0006878b715c1b7e36787abd7450aa9fc913162e54844fadddc67ee61d0759ceefe05b122dc8c581b7c159973bbf4a4d6f3122736c683fcb5473fc8a641ab77c2328cc9d655d954a306ba94e1221e5ac919f6c1e3d8fdf6bc698dd0bb1d28ebc726e09006473a8f01a4bc965de9d975384a678776967afe278f89557b526891238cfed86840682b0c375aa6a00ffce6bb2d6257101449d6662bad"}]}}]}, 0xe84}}, 0x0) (async) r1 = syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f00000003c0)={0x50008100, &(0x7f00000001c0), &(0x7f0000000200)=0x0, &(0x7f0000000240), {0x1e}, &(0x7f0000000280)=""/6, 0x6, &(0x7f00000002c0)=""/131, &(0x7f0000000380)=[r1, r1, r1], 0x3}, 0x58) (async) r3 = syz_clone3(&(0x7f0000000700)={0x40000000, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0), {0x37}, &(0x7f0000000500)=""/149, 0x95, &(0x7f00000005c0)=""/242, &(0x7f00000006c0)=[r1, r1, 0x0, r1, r1], 0x5}, 0x58) (async) r4 = syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f0000000280)={0x10000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r4], 0x1}, 0x58) (async) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x101002, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000880), 0x10240, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_GET_COALESCE(r6, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x30, r8, 0x8, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x2a}, @val={0x8}, @val={0xc, 0x99, {0x3, 0x3c}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4001) (async) syz_clone3(&(0x7f0000000800)={0x100000000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x1d}, &(0x7f00000000c0)=""/188, 0xbc, &(0x7f0000000180)=""/3, &(0x7f0000000780)=[r2, r3, r4, r1, r1, r1], 0x6, {r5}}, 0x58) 23:12:33 executing program 4: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xfbffffff00000000}, 0x58) 23:12:33 executing program 3: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x58) 23:12:33 executing program 5: r0 = syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$clear(0x7, r1) r2 = getpgrp(r0) r3 = syz_clone3(&(0x7f0000000480)={0x2a000, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300), {0x28}, &(0x7f0000000340)=""/228, 0xe4, &(0x7f0000000bc0)=""/4096, &(0x7f0000000440)=[r0, 0x0, r0, r0, r0], 0x5}, 0x58) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x1d}, 0x10) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001bc0)={r5, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000840)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x5, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000940)=[{}], 0x8, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) syz_clone3(&(0x7f0000000540)={0xa4080000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x23}, &(0x7f0000000140)=""/28, 0x1c, &(0x7f0000000180)=""/244, &(0x7f0000000500)=[r0, r2, r0, r3], 0x4, {r4}}, 0x58) ioctl$KDSKBSENT(r4, 0x4b49, &(0x7f0000000600)={0x0, "88aa6248ca533907fe24aec12ec04ed0271ec7dbc7246d9cc4b0d318a7e7164df855a13bbf400d32569e1ca9c019ce6313b11b5dfbbcb9938f80747458d5828d081459014471945d02b673e7bc786be200a2dd3cb980b2c4a6a9898aaef7aaf052a0644e3bdb9356d4b81563bdaa838fcaa4d62f77c94b9a92a1ddc5f7c0f060c402d7315ddab3c6a2e976be58013dece592cc0b14f4d53fd702b198274251975e8ec7794933d33543c8060f1999ff312d10fd0177e10869f8c7562f61a6927669fe5c4a4b91a39963f787238ace23fe6e6a918a9bde12aea8387cc6bc873d6ee23ef3268a6d4861f4a26ff78d9c13eb4649fd8acf9394a85a6dd311f6e434d9f8fc94a8f987a6685fd1f4c29900b2443a6ded53b5fb5c05b820413305e8f36004dee63f81a2ff9a6ed285fffd727cf06cdcb667802e706f0a9adee71ea129dbd51eb75e4c34abac848f82195fd6316418d5247705d35713f17492376cafe866175d3d783b5b3f9b1343c3ddc42e211b83a1e78d34a26e7eea52d30e82f763b27d11d2a1b635d4d0b7447a843f4b982a1a5aeb5dfc59e23a674ef80f42d933a1ede0293c03963cb77ac76c3a15d683cdce948562959869d874a4d85ebedbd0ff81e46568c83b2fcdd9b655e7331c2256d41572422b797e2350cdd9fbbcdb7cdaa3a64d5497091bd411603696f11b4aaca583b085d7899f5350cdd3800c202d8f"}) [ 490.810255][T10308] R10: 00007feb5d37f050 R11: 0000000000000246 R12: 0000000000000058 [ 490.810267][T10308] R13: 00007ffc843a962f R14: 00007feb5d37f300 R15: 0000000000022000 [ 490.810282][T10308] [ 491.274164][T10328] FAULT_INJECTION: forcing a failure. [ 491.274164][T10328] name failslab, interval 1, probability 0, space 0, times 0 23:12:33 executing program 3: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x100000800}, 0x58) 23:12:33 executing program 4: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, 0x58) 23:12:33 executing program 1: r0 = socket(0x2c, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x4, 0x70bd29, 0x8000, {{}, {@void, @void, @val={0xc, 0x99, {0xbe3e, 0x21}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x2000800}, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r3, 0xffffffffffffffff, 0x4}, 0x48) r5 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r7, 0xffffffffffffffff, 0x4}, 0x48) r8 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r7, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r8}, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vcan0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r1, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000400)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r11, 0xffffffffffffffff, 0x4}, 0x48) r12 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r11, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r12}, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000700)={'vxcan0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000007c0)={r4, 0x58, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000a40)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000800)={0x1fc, r6, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfaf025ca9245336e}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x4001}, 0x40800) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r3, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r5}, 0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r15, 0xffffffffffffffff, 0x4}, 0x48) r16 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r15, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r16}, 0x80) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x134, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x1f}, @ETHTOOL_A_LINKINFO_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x1f}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x4c}, @ETHTOOL_A_LINKINFO_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x40440}, 0x20004011) 23:12:33 executing program 3: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1b0cc1f000}, 0x58) [ 491.359689][T10328] CPU: 1 PID: 10328 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 491.369784][T10328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 491.379846][T10328] Call Trace: [ 491.382966][T10328] [ 491.385746][T10328] dump_stack_lvl+0x151/0x1b7 [ 491.390285][T10328] ? bfq_pos_tree_add_move+0x43e/0x43e [ 491.395557][T10328] dump_stack+0x15/0x17 [ 491.399547][T10328] should_fail+0x3c0/0x510 [ 491.403797][T10328] __should_failslab+0x9f/0xe0 23:12:33 executing program 3: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x2a8f0414d000}, 0x58) 23:12:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000002d00)={0x0, 0x0, &(0x7f0000002cc0)={&(0x7f00000018c0)={0xe84, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0xe70, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type01={{0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1}, {}, @device_b}}}, @a_msdu=[{@broadcast, @device_a, 0xd7, "9713703b83e3d14b6fb18cdaa476dbfe532a4cbebb737b1ada11d8cdda55b31954b586253f019c3462b8ac9bae4542b63d878d9b51a7d195bc4f72bfb9b44a6a67417a79db3f3739e4e362cc6d79d81accd96fdda96473e0ba1359ca84a9e371109606c093cc26d4b9d35507ca942ebce32eb30488eb39f5f92aeae3870a02eb40be5731a31a642119ceb63a3588090af2be681c3b0daba83dc5218dae98ad5fb157140794e4bcbb83718633f9e57129eae492dce2cfbf6b5dc260cfce95a02e459d1d5066abeff4fb9e17588c00f17e06965c6a57ba5d"}, {@broadcast, @device_b, 0xd3f, "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"}]}}]}, 0xe84}}, 0x0) (async, rerun: 64) r1 = syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) (rerun: 64) syz_clone3(&(0x7f00000003c0)={0x50008100, &(0x7f00000001c0), &(0x7f0000000200)=0x0, &(0x7f0000000240), {0x1e}, &(0x7f0000000280)=""/6, 0x6, &(0x7f00000002c0)=""/131, &(0x7f0000000380)=[r1, r1, r1], 0x3}, 0x58) (async) r3 = syz_clone3(&(0x7f0000000700)={0x40000000, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0), {0x37}, &(0x7f0000000500)=""/149, 0x95, &(0x7f00000005c0)=""/242, &(0x7f00000006c0)=[r1, r1, 0x0, r1, r1], 0x5}, 0x58) r4 = syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f0000000280)={0x10000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r4], 0x1}, 0x58) (async) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x101002, 0x0) (async, rerun: 32) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000880), 0x10240, 0x0) (rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_GET_COALESCE(r6, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x30, r8, 0x8, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x2a}, @val={0x8}, @val={0xc, 0x99, {0x3, 0x3c}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4001) (rerun: 32) syz_clone3(&(0x7f0000000800)={0x100000000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x1d}, &(0x7f00000000c0)=""/188, 0xbc, &(0x7f0000000180)=""/3, &(0x7f0000000780)=[r2, r3, r4, r1, r1, r1], 0x6, {r5}}, 0x58) [ 491.408396][T10328] should_failslab+0x9/0x20 [ 491.412734][T10328] kmem_cache_alloc+0x4f/0x2f0 [ 491.417334][T10328] ? anon_vma_clone+0xa1/0x4f0 [ 491.421936][T10328] anon_vma_clone+0xa1/0x4f0 [ 491.426360][T10328] anon_vma_fork+0x91/0x4f0 [ 491.431514][T10328] ? anon_vma_name+0x4c/0x70 [ 491.435999][T10328] dup_mmap+0x750/0xea0 [ 491.439987][T10328] ? __delayed_free_task+0x20/0x20 [ 491.445161][T10328] ? mm_init+0x807/0x960 [ 491.449232][T10328] dup_mm+0x91/0x330 [ 491.452964][T10328] copy_mm+0x108/0x1b0 [ 491.456875][T10328] copy_process+0x1295/0x3250 [ 491.461382][T10328] ? check_stack_object+0xf7/0x130 [ 491.466333][T10328] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 491.471284][T10328] ? copy_clone_args_from_user+0x6cf/0x790 [ 491.476923][T10328] kernel_clone+0x22d/0x990 [ 491.481265][T10328] ? dup_mmap+0xea0/0xea0 [ 491.485423][T10328] ? create_io_thread+0x1e0/0x1e0 [ 491.490300][T10328] ? file_end_write+0x1b0/0x1b0 [ 491.494968][T10328] __x64_sys_clone3+0x375/0x3a0 [ 491.499656][T10328] ? __ia32_sys_clone+0x300/0x300 [ 491.504520][T10328] ? ksys_write+0x25f/0x2c0 [ 491.508957][T10328] ? debug_smp_processor_id+0x17/0x20 [ 491.514148][T10328] do_syscall_64+0x44/0xd0 [ 491.519095][T10328] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 491.524824][T10328] RIP: 0033:0x7feb5e60c0c9 [ 491.529076][T10328] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 491.548625][T10328] RSP: 002b:00007feb5d37f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 23:12:33 executing program 2: syz_clone3(&(0x7f0000000b40)={0x1000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 43) 23:12:33 executing program 4: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x7f233b0270a8) 23:12:33 executing program 0: ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, &(0x7f0000000000)) syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {0x3a}, &(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffff35}, 0x58) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"fe911ffc5d51240ec31369edb75b9219", 0x0, 0x0, {0xffffffff, 0x7}, {0x800, 0xc9}, 0xfffffffffffffffb, [0x100000001, 0x29d4, 0x7fffffffffffffff, 0xe8, 0x0, 0x4, 0x7f, 0x1f, 0x4eb, 0x7fff, 0x20, 0x8000000000000000, 0x7, 0x3, 0x80000001, 0x6fd5]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000140)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000340)={"98b6352a5c5ac6c2c09c83ec7006f0c3", r1, r2, {0x3ff, 0x2}, {0x4, 0x2}, 0xff, [0x19c, 0x7, 0xffff, 0xa0, 0x413, 0x9, 0x1ff, 0x1, 0x9, 0x100000000, 0x3, 0x7, 0x7, 0x854, 0x8, 0x40]}) 23:12:33 executing program 3: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x553a26eea000}, 0x58) 23:12:33 executing program 5: r0 = syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$clear(0x7, r1) r2 = getpgrp(r0) r3 = syz_clone3(&(0x7f0000000480)={0x2a000, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300), {0x28}, &(0x7f0000000340)=""/228, 0xe4, &(0x7f0000000bc0)=""/4096, &(0x7f0000000440)=[r0, 0x0, r0, r0, r0], 0x5}, 0x58) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x1d}, 0x10) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001bc0)={r5, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000840)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x5, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000940)=[{}], 0x8, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) syz_clone3(&(0x7f0000000540)={0xa4080000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x23}, &(0x7f0000000140)=""/28, 0x1c, &(0x7f0000000180)=""/244, &(0x7f0000000500)=[r0, r2, r0, r3], 0x4, {r4}}, 0x58) 23:12:33 executing program 1: r0 = socket(0x2c, 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x4, 0x70bd29, 0x8000, {{}, {@void, @void, @val={0xc, 0x99, {0xbe3e, 0x21}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x2000800}, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r3, 0xffffffffffffffff, 0x4}, 0x48) r5 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r7, 0xffffffffffffffff, 0x4}, 0x48) r8 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r7, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r8}, 0x80) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vcan0\x00', 0x0}) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r1, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000400)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r11, 0xffffffffffffffff, 0x4}, 0x48) (async) r12 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r11, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r12}, 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000700)={'vxcan0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000007c0)={r4, 0x58, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000a40)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000800)={0x1fc, r6, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfaf025ca9245336e}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x4001}, 0x40800) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r3, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r5}, 0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r15, 0xffffffffffffffff, 0x4}, 0x48) (async, rerun: 32) r16 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r15, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r16}, 0x80) (async) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x134, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x1f}, @ETHTOOL_A_LINKINFO_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x1f}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x4c}, @ETHTOOL_A_LINKINFO_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x40440}, 0x20004011) 23:12:33 executing program 3: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x2001000000000}, 0x58) 23:12:33 executing program 5: r0 = syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$clear(0x7, r1) r2 = getpgrp(r0) r3 = syz_clone3(&(0x7f0000000480)={0x2a000, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300), {0x28}, &(0x7f0000000340)=""/228, 0xe4, &(0x7f0000000bc0)=""/4096, &(0x7f0000000440)=[r0, 0x0, r0, r0, r0], 0x5}, 0x58) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x1d}, 0x10) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, 0x0) syz_clone3(&(0x7f0000000540)={0xa4080000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x23}, &(0x7f0000000140)=""/28, 0x1c, &(0x7f0000000180)=""/244, &(0x7f0000000500)=[r0, r2, r0, r3], 0x4, {r4}}, 0x58) 23:12:33 executing program 4: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)='io.pressure\x00', 0x2, 0x0) [ 491.556870][T10328] RAX: ffffffffffffffda RBX: 00007feb5e72bf80 RCX: 00007feb5e60c0c9 [ 491.564767][T10328] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007feb5d37f050 [ 491.572575][T10328] RBP: 00007feb5d37f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 491.580475][T10328] R10: 00007feb5d37f050 R11: 0000000000000246 R12: 0000000000000058 [ 491.588290][T10328] R13: 00007ffc843a962f R14: 00007feb5d37f300 R15: 0000000000022000 [ 491.596108][T10328] 23:12:33 executing program 0: ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, &(0x7f0000000000)) syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {0x3a}, &(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffff35}, 0x58) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"fe911ffc5d51240ec31369edb75b9219", 0x0, 0x0, {0xffffffff, 0x7}, {0x800, 0xc9}, 0xfffffffffffffffb, [0x100000001, 0x29d4, 0x7fffffffffffffff, 0xe8, 0x0, 0x4, 0x7f, 0x1f, 0x4eb, 0x7fff, 0x20, 0x8000000000000000, 0x7, 0x3, 0x80000001, 0x6fd5]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000140)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000340)={"98b6352a5c5ac6c2c09c83ec7006f0c3", r1, r2, {0x3ff, 0x2}, {0x4, 0x2}, 0xff, [0x19c, 0x7, 0xffff, 0xa0, 0x413, 0x9, 0x1ff, 0x1, 0x9, 0x100000000, 0x3, 0x7, 0x7, 0x854, 0x8, 0x40]}) ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, &(0x7f0000000000)) (async) syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {0x3a}, &(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffff35}, 0x58) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"fe911ffc5d51240ec31369edb75b9219", 0x0, 0x0, {0xffffffff, 0x7}, {0x800, 0xc9}, 0xfffffffffffffffb, [0x100000001, 0x29d4, 0x7fffffffffffffff, 0xe8, 0x0, 0x4, 0x7f, 0x1f, 0x4eb, 0x7fff, 0x20, 0x8000000000000000, 0x7, 0x3, 0x80000001, 0x6fd5]}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000140)) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000340)={"98b6352a5c5ac6c2c09c83ec7006f0c3", r1, r2, {0x3ff, 0x2}, {0x4, 0x2}, 0xff, [0x19c, 0x7, 0xffff, 0xa0, 0x413, 0x9, 0x1ff, 0x1, 0x9, 0x100000000, 0x3, 0x7, 0x7, 0x854, 0x8, 0x40]}) (async) 23:12:33 executing program 3: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x2020000000000}, 0x58) [ 491.643074][T10375] FAULT_INJECTION: forcing a failure. [ 491.643074][T10375] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 491.687318][T10375] CPU: 1 PID: 10375 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 491.697391][T10375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 491.707289][T10375] Call Trace: [ 491.710407][T10375] [ 491.713185][T10375] dump_stack_lvl+0x151/0x1b7 [ 491.717705][T10375] ? bfq_pos_tree_add_move+0x43e/0x43e [ 491.722995][T10375] dump_stack+0x15/0x17 [ 491.726984][T10375] should_fail+0x3c0/0x510 [ 491.731241][T10375] should_fail_alloc_page+0x58/0x70 [ 491.736273][T10375] __alloc_pages+0x1de/0x7c0 [ 491.740699][T10375] ? __count_vm_events+0x30/0x30 [ 491.745573][T10375] ? __this_cpu_preempt_check+0x13/0x20 [ 491.750951][T10375] ? __mod_node_page_state+0xac/0xf0 [ 491.756078][T10375] pte_alloc_one+0x73/0x1b0 [ 491.760418][T10375] ? pfn_modify_allowed+0x2e0/0x2e0 [ 491.765541][T10375] __pte_alloc+0x86/0x350 [ 491.769708][T10375] ? free_pgtables+0x210/0x210 [ 491.774395][T10375] ? _raw_spin_lock+0xa3/0x1b0 [ 491.778995][T10375] ? _raw_spin_trylock_bh+0x1d0/0x1d0 23:12:34 executing program 0: ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, &(0x7f0000000000)) (async, rerun: 64) syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {0x3a}, &(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffff35}, 0x58) (async, rerun: 64) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"fe911ffc5d51240ec31369edb75b9219", 0x0, 0x0, {0xffffffff, 0x7}, {0x800, 0xc9}, 0xfffffffffffffffb, [0x100000001, 0x29d4, 0x7fffffffffffffff, 0xe8, 0x0, 0x4, 0x7f, 0x1f, 0x4eb, 0x7fff, 0x20, 0x8000000000000000, 0x7, 0x3, 0x80000001, 0x6fd5]}) (async, rerun: 32) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000140)={0x0, ""/256, 0x0, 0x0, 0x0}) (rerun: 32) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000340)={"98b6352a5c5ac6c2c09c83ec7006f0c3", r1, r2, {0x3ff, 0x2}, {0x4, 0x2}, 0xff, [0x19c, 0x7, 0xffff, 0xa0, 0x413, 0x9, 0x1ff, 0x1, 0x9, 0x100000000, 0x3, 0x7, 0x7, 0x854, 0x8, 0x40]}) [ 491.784204][T10375] ? __kernel_text_address+0x9a/0x110 [ 491.789409][T10375] copy_pte_range+0x1b1f/0x20b0 [ 491.794104][T10375] ? __kunmap_atomic+0x80/0x80 [ 491.798698][T10375] ? __kasan_slab_alloc+0xc4/0xe0 [ 491.803992][T10375] ? __kasan_slab_alloc+0xb2/0xe0 [ 491.808857][T10375] ? kmem_cache_alloc+0x189/0x2f0 [ 491.813793][T10375] ? vm_area_dup+0x26/0x1d0 [ 491.818136][T10375] ? dup_mmap+0x6b8/0xea0 [ 491.822307][T10375] ? dup_mm+0x91/0x330 [ 491.826211][T10375] ? copy_mm+0x108/0x1b0 [ 491.830286][T10375] ? copy_process+0x1295/0x3250 [ 491.834982][T10375] ? kernel_clone+0x22d/0x990 [ 491.839507][T10375] ? __x64_sys_clone3+0x375/0x3a0 [ 491.844346][T10375] ? do_syscall_64+0x44/0xd0 [ 491.848770][T10375] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 491.854682][T10375] copy_page_range+0xc1e/0x1090 [ 491.859552][T10375] ? pfn_valid+0x1e0/0x1e0 [ 491.863795][T10375] dup_mmap+0x99f/0xea0 [ 491.867785][T10375] ? __delayed_free_task+0x20/0x20 [ 491.872848][T10375] ? mm_init+0x807/0x960 [ 491.876902][T10375] dup_mm+0x91/0x330 [ 491.880635][T10375] copy_mm+0x108/0x1b0 [ 491.884535][T10375] copy_process+0x1295/0x3250 [ 491.889058][T10375] ? check_stack_object+0xf7/0x130 [ 491.894004][T10375] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 491.898961][T10375] ? copy_clone_args_from_user+0x6cf/0x790 [ 491.904760][T10375] kernel_clone+0x22d/0x990 [ 491.909111][T10375] ? dup_mmap+0xea0/0xea0 [ 491.913270][T10375] ? create_io_thread+0x1e0/0x1e0 [ 491.918125][T10375] ? file_end_write+0x1b0/0x1b0 [ 491.922897][T10375] __x64_sys_clone3+0x375/0x3a0 [ 491.927594][T10375] ? __ia32_sys_clone+0x300/0x300 [ 491.932548][T10375] ? ksys_write+0x25f/0x2c0 [ 491.936876][T10375] ? debug_smp_processor_id+0x17/0x20 [ 491.942078][T10375] do_syscall_64+0x44/0xd0 [ 491.946330][T10375] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 491.952361][T10375] RIP: 0033:0x7feb5e60c0c9 [ 491.956615][T10375] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 491.976141][T10375] RSP: 002b:00007feb5d37f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 23:12:34 executing program 2: syz_clone3(&(0x7f0000000b40)={0x1000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 44) 23:12:34 executing program 4: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)='io.pressure\x00', 0x2, 0x0) syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)='io.pressure\x00', 0x2, 0x0) (async) 23:12:34 executing program 0: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r0, 0x1}, 0xc) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000080), 0x2, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r1, 0x12}, 0x10) 23:12:34 executing program 3: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}, 0x58) 23:12:34 executing program 1: r0 = socket(0x2c, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x4, 0x70bd29, 0x8000, {{}, {@void, @void, @val={0xc, 0x99, {0xbe3e, 0x21}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x2000800}, 0x4000) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r3, 0xffffffffffffffff, 0x4}, 0x48) (async) r5 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r7, 0xffffffffffffffff, 0x4}, 0x48) r8 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r7, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r8}, 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vcan0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r1, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000400)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r11, 0xffffffffffffffff, 0x4}, 0x48) (async) r12 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r11, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r12}, 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000700)={'vxcan0\x00', 0x0}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000007c0)={r4, 0x58, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000a40)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000800)={0x1fc, r6, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfaf025ca9245336e}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x4001}, 0x40800) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r3, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r5}, 0x80) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r15, 0xffffffffffffffff, 0x4}, 0x48) r16 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r15, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r16}, 0x80) (async) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x134, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x1f}, @ETHTOOL_A_LINKINFO_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x1f}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x4c}, @ETHTOOL_A_LINKINFO_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x40440}, 0x20004011) 23:12:34 executing program 5: r0 = syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$clear(0x7, r1) r2 = getpgrp(r0) r3 = syz_clone3(&(0x7f0000000480)={0x2a000, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300), {0x28}, &(0x7f0000000340)=""/228, 0xe4, &(0x7f0000000bc0)=""/4096, &(0x7f0000000440)=[r0, 0x0, r0, r0, r0], 0x5}, 0x58) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x1d}, 0x10) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) syz_clone3(&(0x7f0000000540)={0xa4080000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x23}, &(0x7f0000000140)=""/28, 0x1c, &(0x7f0000000180)=""/244, &(0x7f0000000500)=[r0, r2, r0, r3], 0x4, {r4}}, 0x58) 23:12:34 executing program 3: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x8000001000000}, 0x58) 23:12:34 executing program 0: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r0, 0x1}, 0xc) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000080), 0x2, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r1, 0x12}, 0x10) syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r0, 0x1}, 0xc) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000080), 0x2, 0x0) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r1, 0x12}, 0x10) (async) [ 491.984387][T10375] RAX: ffffffffffffffda RBX: 00007feb5e72bf80 RCX: 00007feb5e60c0c9 [ 491.992198][T10375] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007feb5d37f050 [ 492.000010][T10375] RBP: 00007feb5d37f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 492.007822][T10375] R10: 00007feb5d37f050 R11: 0000000000000246 R12: 0000000000000058 [ 492.015630][T10375] R13: 00007ffc843a962f R14: 00007feb5d37f300 R15: 0000000000022000 [ 492.023447][T10375] 23:12:34 executing program 4: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)='io.pressure\x00', 0x2, 0x0) 23:12:34 executing program 5: r0 = syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$clear(0x7, r1) r2 = getpgrp(r0) r3 = syz_clone3(&(0x7f0000000480)={0x2a000, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300), {0x28}, &(0x7f0000000340)=""/228, 0xe4, &(0x7f0000000bc0)=""/4096, &(0x7f0000000440)=[r0, 0x0, r0, r0, r0], 0x5}, 0x58) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x1d}, 0x10) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) syz_clone3(&(0x7f0000000540)={0xa4080000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x23}, &(0x7f0000000140)=""/28, 0x1c, &(0x7f0000000180)=""/244, &(0x7f0000000500)=[r0, r2, r0, r3], 0x4, {r4}}, 0x58) 23:12:34 executing program 0: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) (async) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r0, 0x1}, 0xc) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000080), 0x2, 0x0) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r1, 0x12}, 0x10) 23:12:34 executing program 3: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10100000000000}, 0x58) [ 492.073999][T10416] FAULT_INJECTION: forcing a failure. [ 492.073999][T10416] name failslab, interval 1, probability 0, space 0, times 0 [ 492.116923][T10416] CPU: 1 PID: 10416 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 492.127002][T10416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 492.136895][T10416] Call Trace: [ 492.140020][T10416] [ 492.142793][T10416] dump_stack_lvl+0x151/0x1b7 [ 492.147405][T10416] ? bfq_pos_tree_add_move+0x43e/0x43e [ 492.152690][T10416] dump_stack+0x15/0x17 [ 492.156689][T10416] should_fail+0x3c0/0x510 [ 492.161024][T10416] __should_failslab+0x9f/0xe0 [ 492.165619][T10416] should_failslab+0x9/0x20 [ 492.169963][T10416] kmem_cache_alloc+0x4f/0x2f0 [ 492.174643][T10416] ? anon_vma_fork+0x1b9/0x4f0 [ 492.179244][T10416] anon_vma_fork+0x1b9/0x4f0 [ 492.183671][T10416] dup_mmap+0x750/0xea0 [ 492.187661][T10416] ? __delayed_free_task+0x20/0x20 [ 492.192608][T10416] ? mm_init+0x807/0x960 [ 492.196688][T10416] dup_mm+0x91/0x330 [ 492.200427][T10416] copy_mm+0x108/0x1b0 [ 492.204347][T10416] copy_process+0x1295/0x3250 [ 492.208839][T10416] ? check_stack_object+0xf7/0x130 [ 492.213792][T10416] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 492.218732][T10416] ? copy_clone_args_from_user+0x6cf/0x790 [ 492.224474][T10416] kernel_clone+0x22d/0x990 [ 492.228801][T10416] ? dup_mmap+0xea0/0xea0 [ 492.232975][T10416] ? create_io_thread+0x1e0/0x1e0 [ 492.238357][T10416] ? file_end_write+0x1b0/0x1b0 [ 492.243035][T10416] __x64_sys_clone3+0x375/0x3a0 [ 492.247723][T10416] ? __ia32_sys_clone+0x300/0x300 [ 492.252583][T10416] ? ksys_write+0x25f/0x2c0 [ 492.257010][T10416] ? debug_smp_processor_id+0x17/0x20 [ 492.262390][T10416] do_syscall_64+0x44/0xd0 [ 492.266642][T10416] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 492.272371][T10416] RIP: 0033:0x7feb5e60c0c9 [ 492.276622][T10416] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 492.296275][T10416] RSP: 002b:00007feb5d37f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 492.304521][T10416] RAX: ffffffffffffffda RBX: 00007feb5e72bf80 RCX: 00007feb5e60c0c9 23:12:34 executing program 2: syz_clone3(&(0x7f0000000b40)={0x1000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 45) 23:12:34 executing program 4: syz_clone3(&(0x7f0000000140)={0x2000, 0x0, 0x0, 0x0, {0x4034}, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffe4b) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000380), 0x10000, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r1, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_devices(r0, &(0x7f00000003c0)='devices.allow\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x94, r4, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x22}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x25}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x31}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]]}, 0x94}, 0x1, 0x0, 0x0, 0x8040}, 0x0) openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={r0, 0x24, 0x0, 0xffffffff, &(0x7f0000000040)=[0x0], 0x1}, 0x20) 23:12:34 executing program 3: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xa0ee263a550000}, 0x58) 23:12:34 executing program 0: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={r0, 0x20, 0x1, 0x5, &(0x7f0000000000)=[0x0], 0x1}, 0x20) 23:12:34 executing program 1: r0 = socket(0x2c, 0x0, 0x0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7e}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x80004) 23:12:34 executing program 5: r0 = syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$clear(0x7, r1) r2 = getpgrp(r0) r3 = syz_clone3(&(0x7f0000000480)={0x2a000, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300), {0x28}, &(0x7f0000000340)=""/228, 0xe4, &(0x7f0000000bc0)=""/4096, &(0x7f0000000440)=[r0, 0x0, r0, r0, r0], 0x5}, 0x58) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x1d}, 0x10) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) syz_clone3(&(0x7f0000000540)={0xa4080000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x23}, &(0x7f0000000140)=""/28, 0x1c, &(0x7f0000000180)=""/244, &(0x7f0000000500)=[r0, r2, r0, r3], 0x4, {r4}}, 0x58) 23:12:34 executing program 5: r0 = syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$clear(0x7, r1) r2 = getpgrp(r0) r3 = syz_clone3(&(0x7f0000000480)={0x2a000, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300), {0x28}, &(0x7f0000000340)=""/228, 0xe4, &(0x7f0000000bc0)=""/4096, &(0x7f0000000440)=[r0, 0x0, r0, r0, r0], 0x5}, 0x58) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x1d}, 0x10) syz_clone3(&(0x7f0000000540)={0xa4080000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x23}, &(0x7f0000000140)=""/28, 0x1c, &(0x7f0000000180)=""/244, &(0x7f0000000500)=[r0, r2, r0, r3], 0x4}, 0x58) 23:12:34 executing program 0: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={r0, 0x20, 0x1, 0x5, &(0x7f0000000000)=[0x0], 0x1}, 0x20) syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={r0, 0x20, 0x1, 0x5, &(0x7f0000000000)=[0x0], 0x1}, 0x20) (async) 23:12:34 executing program 3: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xd014048f2a0000}, 0x58) [ 492.312426][T10416] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007feb5d37f050 [ 492.320322][T10416] RBP: 00007feb5d37f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 492.328124][T10416] R10: 00007feb5d37f050 R11: 0000000000000246 R12: 0000000000000058 [ 492.336023][T10416] R13: 00007ffc843a962f R14: 00007feb5d37f300 R15: 0000000000022000 [ 492.343927][T10416] 23:12:34 executing program 5: r0 = syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$clear(0x7, r1) r2 = getpgrp(r0) r3 = syz_clone3(&(0x7f0000000480)={0x2a000, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300), {0x28}, &(0x7f0000000340)=""/228, 0xe4, &(0x7f0000000bc0)=""/4096, &(0x7f0000000440)=[r0, 0x0, r0, r0, r0], 0x5}, 0x58) syz_clone3(&(0x7f0000000540)={0xa4080000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x23}, &(0x7f0000000140)=""/28, 0x1c, &(0x7f0000000180)=""/244, &(0x7f0000000500)=[r0, r2, r0, r3], 0x4}, 0x58) 23:12:34 executing program 3: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xf0c10c1b000000}, 0x58) 23:12:34 executing program 0: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={r0, 0x20, 0x1, 0x5, &(0x7f0000000000)=[0x0], 0x1}, 0x20) syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={r0, 0x20, 0x1, 0x5, &(0x7f0000000000)=[0x0], 0x1}, 0x20) (async) [ 492.393885][T10451] FAULT_INJECTION: forcing a failure. [ 492.393885][T10451] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 492.425743][T10451] CPU: 1 PID: 10451 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 492.435833][T10451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 492.445714][T10451] Call Trace: [ 492.449279][T10451] [ 492.452045][T10451] dump_stack_lvl+0x151/0x1b7 [ 492.456567][T10451] ? bfq_pos_tree_add_move+0x43e/0x43e [ 492.461861][T10451] ? stack_trace_save+0x1f0/0x1f0 [ 492.466713][T10451] ? __kernel_text_address+0x9a/0x110 [ 492.471924][T10451] dump_stack+0x15/0x17 [ 492.475915][T10451] should_fail+0x3c0/0x510 [ 492.480169][T10451] should_fail_alloc_page+0x58/0x70 [ 492.485202][T10451] __alloc_pages+0x1de/0x7c0 [ 492.489625][T10451] ? stack_trace_save+0x12d/0x1f0 [ 492.494489][T10451] ? stack_trace_snprint+0x100/0x100 [ 492.499706][T10451] ? __count_vm_events+0x30/0x30 [ 492.504471][T10451] ? __kasan_slab_alloc+0xc4/0xe0 [ 492.509419][T10451] ? __kasan_slab_alloc+0xb2/0xe0 [ 492.514296][T10451] ? kmem_cache_alloc+0x189/0x2f0 [ 492.519222][T10451] ? anon_vma_fork+0x1b9/0x4f0 [ 492.523908][T10451] get_zeroed_page+0x19/0x40 [ 492.528336][T10451] __pud_alloc+0x8b/0x260 [ 492.532504][T10451] ? do_handle_mm_fault+0x2370/0x2370 [ 492.537714][T10451] copy_page_range+0xd9e/0x1090 [ 492.542409][T10451] ? pfn_valid+0x1e0/0x1e0 [ 492.546659][T10451] dup_mmap+0x99f/0xea0 [ 492.550659][T10451] ? __delayed_free_task+0x20/0x20 [ 492.555598][T10451] ? mm_init+0x807/0x960 [ 492.559671][T10451] dup_mm+0x91/0x330 [ 492.563663][T10451] copy_mm+0x108/0x1b0 [ 492.567567][T10451] copy_process+0x1295/0x3250 [ 492.572102][T10451] ? check_stack_object+0xf7/0x130 [ 492.577025][T10451] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 492.581973][T10451] ? copy_clone_args_from_user+0x6cf/0x790 [ 492.587612][T10451] kernel_clone+0x22d/0x990 [ 492.591952][T10451] ? dup_mmap+0xea0/0xea0 [ 492.596117][T10451] ? create_io_thread+0x1e0/0x1e0 [ 492.600987][T10451] ? file_end_write+0x1b0/0x1b0 [ 492.606446][T10451] __x64_sys_clone3+0x375/0x3a0 [ 492.611136][T10451] ? __ia32_sys_clone+0x300/0x300 [ 492.615995][T10451] ? ksys_write+0x25f/0x2c0 [ 492.620326][T10451] ? debug_smp_processor_id+0x17/0x20 [ 492.625533][T10451] do_syscall_64+0x44/0xd0 [ 492.629788][T10451] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 492.635600][T10451] RIP: 0033:0x7feb5e60c0c9 [ 492.639866][T10451] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 492.659295][T10451] RSP: 002b:00007feb5d37f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 492.667540][T10451] RAX: ffffffffffffffda RBX: 00007feb5e72bf80 RCX: 00007feb5e60c0c9 [ 492.675611][T10451] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007feb5d37f050 [ 492.684030][T10451] RBP: 00007feb5d37f1d0 R08: 0000000000000000 R09: 0000000000000058 23:12:35 executing program 2: syz_clone3(&(0x7f0000000b40)={0x1000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 46) 23:12:35 executing program 1: r0 = socket(0x2c, 0x0, 0x0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7e}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x80004) 23:12:35 executing program 4: syz_clone3(&(0x7f0000000140)={0x2000, 0x0, 0x0, 0x0, {0x4034}, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffe4b) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000380), 0x10000, 0x0) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r1, &(0x7f00000000c0), 0x2, 0x0) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_devices(r0, &(0x7f00000003c0)='devices.allow\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x94, r4, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x22}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x25}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x31}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]]}, 0x94}, 0x1, 0x0, 0x0, 0x8040}, 0x0) openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={r0, 0x24, 0x0, 0xffffffff, &(0x7f0000000040)=[0x0], 0x1}, 0x20) 23:12:35 executing program 5: r0 = syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$clear(0x7, r1) r2 = getpgrp(r0) syz_clone3(&(0x7f0000000540)={0xa4080000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x23}, &(0x7f0000000140)=""/28, 0x1c, &(0x7f0000000180)=""/244, &(0x7f0000000500)=[r0, r2, r0, 0x0], 0x4}, 0x58) 23:12:35 executing program 3: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xf0ff1f00000000}, 0x58) 23:12:35 executing program 0: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {0x1c}, &(0x7f0000000780), 0x0, 0x0, 0x0}, 0x58) 23:12:35 executing program 3: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x58) 23:12:35 executing program 0: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {0x1c}, &(0x7f0000000780), 0x0, 0x0, 0x0}, 0x58) 23:12:35 executing program 0: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {0x1c}, &(0x7f0000000780), 0x0, 0x0, 0x0}, 0x58) [ 492.691842][T10451] R10: 00007feb5d37f050 R11: 0000000000000246 R12: 0000000000000058 [ 492.699659][T10451] R13: 00007ffc843a962f R14: 00007feb5d37f300 R15: 0000000000022000 [ 492.708941][T10451] 23:12:35 executing program 4: syz_clone3(&(0x7f0000000140)={0x2000, 0x0, 0x0, 0x0, {0x4034}, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffe4b) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000380), 0x10000, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r1, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_devices(r0, &(0x7f00000003c0)='devices.allow\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x94, r4, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x22}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x25}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x31}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]]}, 0x94}, 0x1, 0x0, 0x0, 0x8040}, 0x0) openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={r0, 0x24, 0x0, 0xffffffff, &(0x7f0000000040)=[0x0], 0x1}, 0x20) syz_clone3(&(0x7f0000000140)={0x2000, 0x0, 0x0, 0x0, {0x4034}, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffe4b) (async) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000380), 0x10000, 0x0) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async) openat$cgroup_freezer_state(r1, &(0x7f00000000c0), 0x2, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$cgroup_devices(r0, &(0x7f00000003c0)='devices.allow\x00', 0x2, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x94, r4, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x22}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x25}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x31}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]]}, 0x94}, 0x1, 0x0, 0x0, 0x8040}, 0x0) (async) openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={r0, 0x24, 0x0, 0xffffffff, &(0x7f0000000040)=[0x0], 0x1}, 0x20) (async) 23:12:35 executing program 5: r0 = syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$clear(0x7, r1) syz_clone3(&(0x7f0000000540)={0xa4080000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x23}, &(0x7f0000000140)=""/28, 0x1c, &(0x7f0000000180)=""/244, &(0x7f0000000500)=[r0, 0x0, r0, 0x0], 0x4}, 0x58) 23:12:35 executing program 1: r0 = socket(0x2c, 0x0, 0x0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7e}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x80004) socket(0x2c, 0x0, 0x0) (async) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7e}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x80004) (async) [ 492.763616][T10486] FAULT_INJECTION: forcing a failure. [ 492.763616][T10486] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 492.795438][T10486] CPU: 0 PID: 10486 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 492.805513][T10486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 492.815408][T10486] Call Trace: [ 492.818531][T10486] [ 492.821301][T10486] dump_stack_lvl+0x151/0x1b7 [ 492.825816][T10486] ? bfq_pos_tree_add_move+0x43e/0x43e [ 492.831106][T10486] dump_stack+0x15/0x17 [ 492.835141][T10486] should_fail+0x3c0/0x510 [ 492.839359][T10486] should_fail_alloc_page+0x58/0x70 [ 492.844387][T10486] __alloc_pages+0x1de/0x7c0 [ 492.848822][T10486] ? __count_vm_events+0x30/0x30 [ 492.853588][T10486] ? dup_mm+0x91/0x330 [ 492.857493][T10486] ? copy_mm+0x108/0x1b0 [ 492.861570][T10486] ? copy_process+0x1295/0x3250 [ 492.866257][T10486] ? kernel_clone+0x22d/0x990 [ 492.870771][T10486] ? __x64_sys_clone3+0x375/0x3a0 [ 492.875717][T10486] pte_alloc_one+0x73/0x1b0 [ 492.880151][T10486] ? pfn_modify_allowed+0x2e0/0x2e0 [ 492.885179][T10486] ? __kasan_check_write+0x14/0x20 [ 492.890126][T10486] ? __set_page_owner+0x2ee/0x310 [ 492.894988][T10486] __pte_alloc+0x86/0x350 [ 492.899152][T10486] ? post_alloc_hook+0x1ab/0x1b0 [ 492.903926][T10486] ? free_pgtables+0x210/0x210 [ 492.908527][T10486] ? get_page_from_freelist+0x38b/0x400 [ 492.913905][T10486] copy_pte_range+0x1b1f/0x20b0 [ 492.919115][T10486] ? __kunmap_atomic+0x80/0x80 [ 492.923714][T10486] ? __pud_alloc+0x260/0x260 [ 492.928139][T10486] ? __pud_alloc+0x218/0x260 [ 492.932567][T10486] ? do_handle_mm_fault+0x2370/0x2370 [ 492.937783][T10486] copy_page_range+0xc1e/0x1090 [ 492.942468][T10486] ? pfn_valid+0x1e0/0x1e0 [ 492.946714][T10486] dup_mmap+0x99f/0xea0 [ 492.950714][T10486] ? __delayed_free_task+0x20/0x20 [ 492.955652][T10486] ? mm_init+0x807/0x960 [ 492.960514][T10486] dup_mm+0x91/0x330 [ 492.964245][T10486] copy_mm+0x108/0x1b0 [ 492.968152][T10486] copy_process+0x1295/0x3250 [ 492.972668][T10486] ? check_stack_object+0xf7/0x130 [ 492.977699][T10486] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 492.982645][T10486] ? copy_clone_args_from_user+0x6cf/0x790 [ 492.988288][T10486] kernel_clone+0x22d/0x990 [ 492.992638][T10486] ? dup_mmap+0xea0/0xea0 [ 492.996792][T10486] ? create_io_thread+0x1e0/0x1e0 [ 493.001658][T10486] ? file_end_write+0x1b0/0x1b0 [ 493.006341][T10486] __x64_sys_clone3+0x375/0x3a0 [ 493.011034][T10486] ? __ia32_sys_clone+0x300/0x300 [ 493.015888][T10486] ? ksys_write+0x25f/0x2c0 [ 493.020230][T10486] ? debug_smp_processor_id+0x17/0x20 [ 493.025433][T10486] do_syscall_64+0x44/0xd0 [ 493.029688][T10486] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 493.035501][T10486] RIP: 0033:0x7feb5e60c0c9 [ 493.039759][T10486] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 23:12:35 executing program 2: syz_clone3(&(0x7f0000000b40)={0x1000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 47) 23:12:35 executing program 3: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, 0x58) 23:12:35 executing program 0: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000000)) 23:12:35 executing program 5: r0 = syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) syz_clone3(&(0x7f0000000540)={0xa4080000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x23}, &(0x7f0000000140)=""/28, 0x1c, &(0x7f0000000180)=""/244, &(0x7f0000000500)=[r0, 0x0, r0, 0x0], 0x4}, 0x58) 23:12:35 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='freezer.state\x00', 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0xcc, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x15}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x44}, 0x20000120) socket(0x2c, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000090}, 0x810) 23:12:35 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/dma', 0x2000, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010000000000000000000c006b77be660300", @ANYRES32=0x0, @ANYBLOB="17d8551fcefee484000b20c90cc84507813d2bc2caea5b4a962c368030e2708441e5b5e47f52d07184afa05f1ed0d295e5ac230d440512118a8ed6def3ad7d02b34cf9d8d5f56d7621939529f9c211d6aa0a0aca1b4c74ceea9c2396cd52822cc711b47c27419df922e18c5bc9d45bacf248cdd51c38b91feb988d0df9cc832c0ee4b826660689e6feee0183ae6fffb788efd5d83192"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}}, 0xc) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f0000000000)) syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 493.059197][T10486] RSP: 002b:00007feb5d37f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 493.067442][T10486] RAX: ffffffffffffffda RBX: 00007feb5e72bf80 RCX: 00007feb5e60c0c9 [ 493.075255][T10486] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007feb5d37f050 [ 493.083092][T10486] RBP: 00007feb5d37f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 493.090881][T10486] R10: 00007feb5d37f050 R11: 0000000000000246 R12: 0000000000000058 [ 493.099647][T10486] R13: 00007ffc843a962f R14: 00007feb5d37f300 R15: 0000000000022000 [ 493.107476][T10486] 23:12:35 executing program 3: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x700000000000000}, 0x58) [ 493.124583][T10516] FAULT_INJECTION: forcing a failure. [ 493.124583][T10516] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 493.138914][T10516] CPU: 0 PID: 10516 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 493.149076][T10516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 493.158972][T10516] Call Trace: [ 493.162119][T10516] [ 493.164873][T10516] dump_stack_lvl+0x151/0x1b7 [ 493.169385][T10516] ? bfq_pos_tree_add_move+0x43e/0x43e [ 493.174684][T10516] ? __kasan_check_write+0x14/0x20 [ 493.179636][T10516] ? __set_page_owner+0x2ee/0x310 [ 493.184485][T10516] dump_stack+0x15/0x17 [ 493.188481][T10516] should_fail+0x3c0/0x510 [ 493.192732][T10516] should_fail_alloc_page+0x58/0x70 [ 493.193913][T10528] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 493.197762][T10516] __alloc_pages+0x1de/0x7c0 [ 493.211221][T10516] ? __count_vm_events+0x30/0x30 [ 493.215999][T10516] ? __count_vm_events+0x30/0x30 23:12:35 executing program 0: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000000)) syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) (async) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000000)) (async) 23:12:35 executing program 5: r0 = syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f0000000540)={0xa4080000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x23}, &(0x7f0000000140)=""/28, 0x1c, &(0x7f0000000180)=""/244, &(0x7f0000000500)=[r0, 0x0, r0, 0x0], 0x4}, 0x58) 23:12:35 executing program 0: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000000)) syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) (async) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000000)) (async) 23:12:35 executing program 0: syz_clone3(&(0x7f0000000000)={0xa7800, 0x0, 0x0, 0x0, {0x38}, &(0x7f0000000080)=""/10, 0xa, 0x0, 0x0}, 0x58) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) openat$cgroup_subtree(r0, &(0x7f00000000c0), 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x16, 0xa, &(0x7f0000001300)=@raw=[@jmp={0x5, 0x0, 0x5, 0x7, 0x7, 0xc}, @generic={0x40, 0x0, 0x5, 0x7, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x2d}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x2, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x81}, @jmp={0x5, 0x1, 0x8, 0x2, 0xc4c640369e20b754, 0xffffffffffffffe0, 0xfffffffffffffffc}], &(0x7f0000001380)='syzkaller\x00', 0xfffffff7, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x27, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000001400)={0x3, 0x10, 0x4, 0x7fffffff}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f0000001440)=[r0]}, 0x80) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001500)={@map=r0, r1, 0x1d}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000012c0)={&(0x7f0000000100)="d984ceb7adde6723cdb98d6a187fcad5063fc61fd3cd5aa658cbed4188d64469db40979664ca2245762091832338c6dea674c4c393b46b57893b9bdb3a947396455efa499766deb0784865de0419f44f", &(0x7f0000000180)=""/119, &(0x7f0000000200)="07a8dda4b8cbbf6c8d53acefec58bcb5f5a1bf9dfef1615da09be721a914babad6f13dc28c2360af297627b6ea8e4f15fe15ac567c6e01afe80b575155e8b1733decf658bd7cf3aa5b3627149ff7a06dd0d2e050cfa66f77c283c5aac083587cad420d2b6618d74202e4bd8b2652922fbc14073bdee69cef50b3cebef09c9d35d91e8313726af51ed1ab68e5ce80ebd21adf3ce3c6e180216560813f741a84668ce940ce710bdccff66024b89553a54ae564f3af33e9a05d6a1ff008e55fa8035dc7a85b81bbc61cdf4bbd411c09f9770f8b7b08940c60510ec2238c59dd1aad98e2813fafe852d9f9f9faa9a3a2bca700d3f20eeb3b17da23e5767213751ef27c5eb44ac1008b2b61efed042ad8c8edfa989edc076134819802cac21d5f4a1944786f1d0ae9acc5483c50cdfe08ebb85f151679f381f63160a81c9b3f2be2689232e6bbe4759115cc6271a84626932087d7dcfdf691eaa0edcf17717e5456d42b739cd7f0e7968e3849d7d1681312297c38288cbc3a35206940d8c5700db42b66cd5eb5eca0a66b6f8411fbf04134d6370bc4c9337ac9d5e3152ab8dfaf2b80b49cd810005c81bac16bc5f6c2dec65a7f69d52674192bd48b27f329f05b2caa9e533626d5589ce5e87b9fe297e374e2d4b83893bf7f33db5faa1e6a856db8900a3b1cb93841e5e44cbbc83e7fa553be0333cf5c08df4eaf4cfeaea6fb6609a7b16198e0880548f22bfc694429c0538516491741b4da805501682eb324fda6239353638c1d903878ea74436258822a6c5fbb9800a12e2272a3efb1159191bd570fe850b2552e1569c8a50616e5d792c1190b7b4c99e98e866488a1e8d0a1d49bc8647b94c9b5fd78f399bf03ca3a094b76eb109bc9514537291f6b80e522cee91bb9fbb4b01cea5e9790f7c254c022b2411224da24ed4f8f76c7d566e4a1b571c22d6481452625240b0a29caaf801cfb5394eca8b76fd4443e871585791a5b749c8d943c3f4c5c2db948b21a7b838ae8bea68e150c7148ed98b73a907e35194d0157cbaafeb49d0486c78feceb7040d370471fe29bb8634b45cefa3c59040bdfa744024068e4af440f70b644faa0b1ef0ba411ccc92862b2111c054ea4d2c3b04cbea599fd7af65fa1bea94bbd1d74b5ae0e5cf8987ee1463a0e009c3f7230c24fe0fb48e9f3071c6c9e9854b84e38bd2a02f73ced6c09384f3e181a8c03ca0e1fcd553c4d2515f076528dccc0988ecf33664183f6fe36967bbe5cdc6314544ec4e5081b8575168e737aed6989d0da2dfe3133ef35a64e4a07b32c36ee3729b4e527cd084fb6031cf1e76f1c8d78c23c499e2b5a1230c712f4237ca81f0554486ff06bdc8f4efe0c8e15587e998c43d8acc51a5077756dc56e910e232730aef0b61d5b7ab5b3ddb871a9b32ad2b30b5159c521ff25c78a8119b17f6f9b16f1f47049581f3f1d7325b60bc4bd1b205e8b487d6a765a93b93a6c0399a79f264b504241cbe625660d4a2eb1fe9d3218b598698552651930565509bf292eb975ae7ff1cbc8953a7e622e02034d8041923133f51e3d032737a2541a1a4594bbc2f5ea1fc3e27f41355e3535b98241dadf89e058370f0916cd7b1658a505b1c966bc222297f35e132e77210abe20b45f8d81b30a5de6a949a7e8ba7d24907efb4627ea164fe3881e4a1016f00eca110e80f842bf617367f1de3c67a493d03fbd61138aa1c533f5100fa8bbacb32647e22951ca34808b342dd585282cf9963ea067755e91a879ca6d61d40456665363e449e2ef03daf77f680443537f461097cc8825ce7fbd4667264aeb968c437c2fefb81244885cf20f8f1361b1adcc913ed77694fb18ddbaa9c2b6c172831e1d152a2a0f0af6d156d8586e53a60268417cd24c66b6f0352f501ab635dc1d99ac149ff9491ec611ad634e9ec9a8fdfd40a7844d71d877f75ea5e7d67cb2c4d15f3f346cb1008f308faca7a3e870513b0726149e90d69efed10c840d2c1dd401f1c3ce3d1c6a307f908bdcf575b2300a5b60278f4fd09405a5cf9d51c35458167948cd340452ec0d8bd1f52783605408285615d88f1810149ec18c06ceb2b9315f90d84c3147f1e34829f347a6247909908a5c377816b03c9b10aa4463f9a31962200f7b957490c497ae71bbacdbb8829d429a0dfec817d0e347356c20343bef639e0f8ec56e6caa185998ed5de0b909eb9b3543008235f439825e8d1fefc7054a2bca1b4f40c0332e311e307b300392424445d81bc527524c0b8b3527c44fb5931430dd9dbf7b11345417a4384e8e9d08482b90eeb9681e30ed81c2c380b4c2ba5bc7e3d8ba56e26eb838a011e9b55e78fe6680bcf4425a17b512b5ee16214fd83a3fc936f95bf163ea3dda6336ddfe30aa387cbc0e35f914ca0a3f2477b57d8b9df258c345efd108cd0740a6de6f9daa340ac21e2415ce8dcc07545cb919d74a02369eb8e750201eb58e081d2658bfe328f7946e53dfe4415c586a69b0e29abdef17deeb827396e6e5b792fee01e33985d673665abc3744db5f982d19ce98294abc39350be2a8b38d42672d3c4c80b2e210023186734a0a0286840a80a93df50cec5860e3402c0296757e3b54ce95e44eb92407ae0e83afe9b93f334d29657f5268e28c71ea01ed2b510ce88a60b604c5f9c55ab1c7dc2795a9f033ac4910accf7003dd576165a2ebf00e374704c450092d25bdff197108b316ffa129508d273a228758ab3c598326f23655bf07e63ccaa86a57f272e8a417da172b780cf8912cfa3829b831fe35d6368d3e82174f5240fea64313a3d4d77f0a483f26aafcedddfa1bcc2ae55a47a3470efc4adf421fd5ea1c67457e5222ca2c2ba25f2284982b16614ff9fd36f701e51cd1c99bb3efae57f67af7f88186684377be757f6977c65926c8952b84f4542dc7ce226a512d9aa8352ac61d3c84cc5dbf4258df6279c066d316b0a4a7dca94700f6422132369ad053d9cbe719dd0d3abbadd58664b7e536628b40ba580e86f573fceed5533998f348cf1deef836607213003c4956ffe5ced61c418c7951b1147fce3f3cd7ca6013a00bf0a6b50dc8c4d20d23b769670cbad219ca024c642aa61eb2a16274a16b97a433bb10511a4bea54a2aaba51277fc872465fb3962df5822d9c1461dd7d13e60923c04a250d0de252c539ce42e51ecf3c31e871dab06b091b56da7c928cd445f5eb005086c5a8de95f06e5fdcc5b3d28d8bfd048490d6a7d25f002f058f3bb2e23223499e8397a5e7644d21746dbed3d42ac9e5191e66dc4dd5a57f5a1cc8728b1909e20461b4d963936fbfdef150f493c3afc81f17ddacdf81b7d4dd950939bdc854aee8cd922ffd9bf47bdd113818bf0c0105558838866aa9afb8bfea9e58accd3777ff235e1f129dcb870e9de5c23844b1b6927578c7af4f5cbcfc490fe8006c9f8b868be8452f00676d31d4a6b884935c1cb94b73370026cbc9abb81030b280285da2362d59d96bdc16d1c70a4e24262dbd0d7c6b58c2ef1350bf27114523341e2bdb2bc7e5b5c9e5350eaced17c3609525ed010d1c1999da0e2e5c02448d2b4b697a9dd75aaa44a757a3dcaf6b9ea11759e3bdc7df2454f8548ca76e2e3a8ffee5a89c7afdc35a5c08b0327973ec9a64218f64ba14e4797b9c83c56c6526f7deaebc8828af1b7480a26d3806d43eb5fe5439b7a8c3c5ae72a1cfb4eb6d6be94201fae943f95f2ea43c6cf8bb7a79a7c58ba5fab2bf01b737a86b8b693e93a704929bbdcba044e01919308643c51131e8cc6c534125ed44f81ca499462afcfe61ee3b5ed33819f82ecf36bcbfe30eb10137583fc2e93b7131a9a3dcb50a82407a75f9c6863ed4d5bd207180ee82bbf34a705c292b9156c8312f407aca531d320515e37dfe7e590f287a50a4e5e76164b0978d9c4047a3f506bd0f7ec09d23b4174a23b5c5ef194d5143753b06e46e472d97dd9543e60d5ba72bf91f6453af59b178742f981c81df0f597c0c6fe0748a4385039e2e9889e7bc3975d4188297acd4893e8d471cea2e47ce81929498970f69b96f27813405e5f1132f317e0cbf4f067519d2964eb4240e4f77838778e958edc692c18126586f5db9cba8bbadacacf1640f3da09a135ee8bc162a6f4d696d8c1da0f29a1985ea6f7325f8f8dede2b13fd2e212ca4b95cf4c71df59dd9ee9cc67106190ba2c9d1dcfc644ff66dbb536ff9f4fa6fb0853ffd0ebadbf564168355dffe225cf0d8849e7d1b1fe98b4ff37b39a3ba484e3f124f3fcd364cf297dee8a79b6c35adcdb5bc14b3509ce653f0f0471365d16f481b524891b62745208fd0c095a6ecd615d506fcfb956bb97486a4dfcdfaff2d41e96288e3036d8879cd06cee4df886afb952fbe708d41831482b61ea0db83e4526f1ccae652fbdbe32cc2c19a4ba950b6b42c661a93d711c3e278e44736823b78bd3d94efde9d0cadd698ea22e1a1ba93bc789ae6d5a1b1f8e84e86630dbf5470b4680dec351c984810de70c8c95285039eeb6c81728f8635380c48a5d9a1a58e069cccab3cdd2784cc7f4db4d6f4f2532bfec48c0962f9b3209eb16a5a125ad16e1e49f52fba700580df05e4a7a96177ccd8589a140a891b1b25e18dc9d291e0f1adcef36ed50abd38cfe79cf4d03593273ef3d9035139f109bd23f66ea45fa5fc74f2d163439ba755284876d65f0ce089b5061546b0b995aaf5da972bd5c1abc305888dda1827bcbf0700f8f99c45e58308a2f3bd568aca8ee2fa3ce35dd16a141f80536674a2f7c51a33aaf11337d9692c1c39a6e02f9ffa76f677502ab2ae07f7919111884568e17a46898b1c8f872fd936a454223c666f4f1d19cafe33999305e49756b6164c3c6d52249196493c2cfddde1f4b7b4351caa0d0e0fe63ca35b5d7d0f160b2695aef16b70370da78b7f19bbfe19399c768b4199104b25b926617b664803724c5290f73182eb706aba3f17d9e2a0cd572cf6e4ee438541bcb06078fe82f96163e6a738c6d417d3588c4074d3c7ec3da325c125fe18c9a9998287fe4ce966dd3fd6c77ac33d02116e2172e8e932d7d0feef075f2d42e696d43cdd886fd21abad74ceb7af40ce41cbe563a3010a87755682b27f8aabb4147cb6834b2d5d930bffe59a3267e5672812b972638d2d0e05cc893e81c3da98c606b432ba1cdc260fc10af60cb0c9d64363097a504e3270cdafccc0dc1484178a86e78e9a8cc3a11ecac097d2e33ec9225e9d8c9518671e8e9daa8f25b1e2db875f8b848e7d430ddc0aae107ee3458a7609cf0cfb16800e637df190e833891f2628664c914099a9b25e7631f65747ac205b9659efc524bf9c57b2491276a4f324fe11f223d040f0f390567fb77adb7961a555babccfa61127fa6abe2efeea075cd615f190d10009513b27fa51edac51dbbfcb5815c8a464c5080607578e51d4f5cf2dc3fccee08ed47e67fbe1d33c4ec481e9115362283ec93c5e262ccf8cdef760dbff409337f7d820290eb1f959f9b86daf297289bd93a7ab0f816d72cecfac227180c191a46147bf42dcc309303f88940e50821c704831a81bba54b52387335d2039d2d92bd4f2487bbc31eba31edce8de1719cac89809ca72aec676b274a73800de849b4ece68bd1afb326060f40e04f61d465117b20fd509557fe5594735a0ea4e8615279892b90c083550cb3be81e9a64dffc85dccd78c46b22c8f3f68f59f5c7b8393b9020001b791e35bfbd58b7c0e0cf02ef8c6c37e22020875bd9dd2bda0a928cc107c390545ad5e5015ae2d58d078d50b294a219a3db13e2", &(0x7f0000001200)="6d25e20f7948dc898a32167a70bc08daa1721f409bf8ec64464dd64ac50c916a9087f1a03b91bf5508a6d2b39a110a138024e24c7c12fbd20b7d3b6d9285f39351962f0e411f2b66a417872da042f0e68f3aa00e55be217136b0b7ce97379aadcc62e7d7803d1bf5a677d26a9483645218c1c43bdd61a12a74fafb47dda0b79a926c2a44765ed398ee65a416acddda8660ab636bb1aa539bf2fc9bbe0df826fbc337b039227727731acc1506", 0xc1c, r0, 0x4}, 0x38) 23:12:35 executing program 5: r0 = syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f0000000540)={0xa4080000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x23}, &(0x7f0000000140)=""/28, 0x1c, &(0x7f0000000180)=""/244, &(0x7f0000000500)=[r0, 0x0, r0, 0x0], 0x4}, 0x58) [ 493.220763][T10516] ? __kasan_check_write+0x14/0x20 [ 493.225711][T10516] ? _raw_spin_lock+0xa3/0x1b0 [ 493.230315][T10516] __pmd_alloc+0xb1/0x550 [ 493.234479][T10516] ? kmem_cache_alloc+0x189/0x2f0 [ 493.239339][T10516] ? anon_vma_fork+0x1b9/0x4f0 [ 493.243938][T10516] ? __pud_alloc+0x260/0x260 [ 493.248372][T10516] ? __pud_alloc+0x218/0x260 [ 493.252790][T10516] ? do_handle_mm_fault+0x2370/0x2370 [ 493.258097][T10516] copy_page_range+0xd04/0x1090 [ 493.262775][T10516] ? pfn_valid+0x1e0/0x1e0 [ 493.267027][T10516] dup_mmap+0x99f/0xea0 [ 493.271018][T10516] ? __delayed_free_task+0x20/0x20 [ 493.275962][T10516] ? mm_init+0x807/0x960 [ 493.280047][T10516] dup_mm+0x91/0x330 [ 493.283781][T10516] copy_mm+0x108/0x1b0 [ 493.287680][T10516] copy_process+0x1295/0x3250 [ 493.292195][T10516] ? check_stack_object+0xf7/0x130 [ 493.297143][T10516] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 493.302178][T10516] ? copy_clone_args_from_user+0x6cf/0x790 [ 493.307828][T10516] kernel_clone+0x22d/0x990 [ 493.312159][T10516] ? dup_mmap+0xea0/0xea0 [ 493.316330][T10516] ? create_io_thread+0x1e0/0x1e0 [ 493.321182][T10516] ? file_end_write+0x1b0/0x1b0 [ 493.325874][T10516] __x64_sys_clone3+0x375/0x3a0 [ 493.330555][T10516] ? __ia32_sys_clone+0x300/0x300 [ 493.335430][T10516] ? ksys_write+0x25f/0x2c0 [ 493.339842][T10516] ? debug_smp_processor_id+0x17/0x20 [ 493.345051][T10516] do_syscall_64+0x44/0xd0 [ 493.349649][T10516] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 493.355372][T10516] RIP: 0033:0x7feb5e60c0c9 [ 493.359628][T10516] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 493.379161][T10516] RSP: 002b:00007feb5d37f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 493.387398][T10516] RAX: ffffffffffffffda RBX: 00007feb5e72bf80 RCX: 00007feb5e60c0c9 [ 493.395295][T10516] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007feb5d37f050 [ 493.403200][T10516] RBP: 00007feb5d37f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 493.411021][T10516] R10: 00007feb5d37f050 R11: 0000000000000246 R12: 0000000000000058 23:12:35 executing program 2: syz_clone3(&(0x7f0000000b40)={0x1000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 48) 23:12:35 executing program 0: syz_clone3(&(0x7f0000000000)={0xa7800, 0x0, 0x0, 0x0, {0x38}, &(0x7f0000000080)=""/10, 0xa, 0x0, 0x0}, 0x58) (async, rerun: 64) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) (rerun: 64) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) (async) openat$cgroup_subtree(r0, &(0x7f00000000c0), 0x2, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x16, 0xa, &(0x7f0000001300)=@raw=[@jmp={0x5, 0x0, 0x5, 0x7, 0x7, 0xc}, @generic={0x40, 0x0, 0x5, 0x7, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x2d}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x2, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x81}, @jmp={0x5, 0x1, 0x8, 0x2, 0xc4c640369e20b754, 0xffffffffffffffe0, 0xfffffffffffffffc}], &(0x7f0000001380)='syzkaller\x00', 0xfffffff7, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x27, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000001400)={0x3, 0x10, 0x4, 0x7fffffff}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f0000001440)=[r0]}, 0x80) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001500)={@map=r0, r1, 0x1d}, 0x10) (async, rerun: 32) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000012c0)={&(0x7f0000000100)="d984ceb7adde6723cdb98d6a187fcad5063fc61fd3cd5aa658cbed4188d64469db40979664ca2245762091832338c6dea674c4c393b46b57893b9bdb3a947396455efa499766deb0784865de0419f44f", &(0x7f0000000180)=""/119, &(0x7f0000000200)="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", &(0x7f0000001200)="6d25e20f7948dc898a32167a70bc08daa1721f409bf8ec64464dd64ac50c916a9087f1a03b91bf5508a6d2b39a110a138024e24c7c12fbd20b7d3b6d9285f39351962f0e411f2b66a417872da042f0e68f3aa00e55be217136b0b7ce97379aadcc62e7d7803d1bf5a677d26a9483645218c1c43bdd61a12a74fafb47dda0b79a926c2a44765ed398ee65a416acddda8660ab636bb1aa539bf2fc9bbe0df826fbc337b039227727731acc1506", 0xc1c, r0, 0x4}, 0x38) (rerun: 32) 23:12:35 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='freezer.state\x00', 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0xcc, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x15}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x44}, 0x20000120) socket(0x2c, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000090}, 0x810) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='freezer.state\x00', 0x0, 0x0) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0xcc, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x15}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x44}, 0x20000120) (async) socket(0x2c, 0x5, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000090}, 0x810) (async) 23:12:35 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/dma', 0x2000, 0x1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010000000000000000000c006b77be660300", @ANYRES32=0x0, @ANYBLOB="17d8551fcefee484000b20c90cc84507813d2bc2caea5b4a962c368030e2708441e5b5e47f52d07184afa05f1ed0d295e5ac230d440512118a8ed6def3ad7d02b34cf9d8d5f56d7621939529f9c211d6aa0a0aca1b4c74ceea9c2396cd52822cc711b47c27419df922e18c5bc9d45bacf248cdd51c38b91feb988d0df9cc832c0ee4b826660689e6feee0183ae6fffb788efd5d83192"], 0x1c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}}, 0xc) (async) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f0000000000)) syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:12:35 executing program 3: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x900000000000000}, 0x58) 23:12:35 executing program 5: r0 = syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f0000000540)={0xa4080000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x23}, &(0x7f0000000140)=""/28, 0x1c, &(0x7f0000000180)=""/244, &(0x7f0000000500)=[r0, 0x0, r0, 0x0], 0x4}, 0x58) 23:12:35 executing program 3: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000}, 0x58) 23:12:35 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='freezer.state\x00', 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0xcc, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x15}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x44}, 0x20000120) (async) socket(0x2c, 0x5, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000090}, 0x810) 23:12:35 executing program 0: syz_clone3(&(0x7f0000000000)={0xa7800, 0x0, 0x0, 0x0, {0x38}, &(0x7f0000000080)=""/10, 0xa, 0x0, 0x0}, 0x58) (async) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) (async) openat$cgroup_subtree(r0, &(0x7f00000000c0), 0x2, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x16, 0xa, &(0x7f0000001300)=@raw=[@jmp={0x5, 0x0, 0x5, 0x7, 0x7, 0xc}, @generic={0x40, 0x0, 0x5, 0x7, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x2d}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x2, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x81}, @jmp={0x5, 0x1, 0x8, 0x2, 0xc4c640369e20b754, 0xffffffffffffffe0, 0xfffffffffffffffc}], &(0x7f0000001380)='syzkaller\x00', 0xfffffff7, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x27, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000001400)={0x3, 0x10, 0x4, 0x7fffffff}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f0000001440)=[r0]}, 0x80) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001500)={@map=r0, r1, 0x1d}, 0x10) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000012c0)={&(0x7f0000000100)="d984ceb7adde6723cdb98d6a187fcad5063fc61fd3cd5aa658cbed4188d64469db40979664ca2245762091832338c6dea674c4c393b46b57893b9bdb3a947396455efa499766deb0784865de0419f44f", &(0x7f0000000180)=""/119, &(0x7f0000000200)="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", &(0x7f0000001200)="6d25e20f7948dc898a32167a70bc08daa1721f409bf8ec64464dd64ac50c916a9087f1a03b91bf5508a6d2b39a110a138024e24c7c12fbd20b7d3b6d9285f39351962f0e411f2b66a417872da042f0e68f3aa00e55be217136b0b7ce97379aadcc62e7d7803d1bf5a677d26a9483645218c1c43bdd61a12a74fafb47dda0b79a926c2a44765ed398ee65a416acddda8660ab636bb1aa539bf2fc9bbe0df826fbc337b039227727731acc1506", 0xc1c, r0, 0x4}, 0x38) [ 493.419605][T10516] R13: 00007ffc843a962f R14: 00007feb5d37f300 R15: 0000000000022000 [ 493.427426][T10516] 23:12:35 executing program 5: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) syz_clone3(&(0x7f0000000540)={0xa4080000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x23}, &(0x7f0000000140)=""/28, 0x1c, &(0x7f0000000180)=""/244, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 23:12:35 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/dma', 0x2000, 0x1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010000000000000000000c006b77be660300", @ANYRES32=0x0, @ANYBLOB="17d8551fcefee484000b20c90cc84507813d2bc2caea5b4a962c368030e2708441e5b5e47f52d07184afa05f1ed0d295e5ac230d440512118a8ed6def3ad7d02b34cf9d8d5f56d7621939529f9c211d6aa0a0aca1b4c74ceea9c2396cd52822cc711b47c27419df922e18c5bc9d45bacf248cdd51c38b91feb988d0df9cc832c0ee4b826660689e6feee0183ae6fffb788efd5d83192"], 0x1c}}, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}}, 0xc) (async, rerun: 64) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f0000000000)) (async, rerun: 64) syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:12:35 executing program 3: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000}, 0x58) [ 493.492444][T10573] FAULT_INJECTION: forcing a failure. [ 493.492444][T10573] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 493.514529][T10573] CPU: 1 PID: 10573 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 493.524601][T10573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 493.534496][T10573] Call Trace: [ 493.537633][T10573] [ 493.540391][T10573] dump_stack_lvl+0x151/0x1b7 [ 493.544907][T10573] ? bfq_pos_tree_add_move+0x43e/0x43e [ 493.550200][T10573] dump_stack+0x15/0x17 [ 493.554191][T10573] should_fail+0x3c0/0x510 [ 493.558444][T10573] should_fail_alloc_page+0x58/0x70 [ 493.564607][T10573] __alloc_pages+0x1de/0x7c0 [ 493.569038][T10573] ? __count_vm_events+0x30/0x30 [ 493.573805][T10573] ? __this_cpu_preempt_check+0x13/0x20 [ 493.579187][T10573] ? __mod_node_page_state+0xac/0xf0 [ 493.584318][T10573] pte_alloc_one+0x73/0x1b0 [ 493.589437][T10573] ? pfn_modify_allowed+0x2e0/0x2e0 [ 493.594463][T10573] __pte_alloc+0x86/0x350 [ 493.598628][T10573] ? free_pgtables+0x210/0x210 [ 493.603237][T10573] ? _raw_spin_lock+0xa3/0x1b0 [ 493.607832][T10573] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 493.613035][T10573] ? __kernel_text_address+0x9a/0x110 [ 493.618263][T10573] copy_pte_range+0x1b1f/0x20b0 [ 493.622934][T10573] ? __kunmap_atomic+0x80/0x80 [ 493.627623][T10573] ? __kasan_slab_alloc+0xc4/0xe0 [ 493.632761][T10573] ? __kasan_slab_alloc+0xb2/0xe0 [ 493.637686][T10573] ? kmem_cache_alloc+0x189/0x2f0 [ 493.642545][T10573] ? vm_area_dup+0x26/0x1d0 [ 493.646883][T10573] ? dup_mmap+0x6b8/0xea0 [ 493.651052][T10573] ? dup_mm+0x91/0x330 [ 493.654957][T10573] ? copy_mm+0x108/0x1b0 [ 493.659822][T10573] ? copy_process+0x1295/0x3250 [ 493.664503][T10573] ? kernel_clone+0x22d/0x990 [ 493.669026][T10573] ? __x64_sys_clone3+0x375/0x3a0 [ 493.673877][T10573] ? do_syscall_64+0x44/0xd0 [ 493.678317][T10573] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 493.684295][T10573] copy_page_range+0xc1e/0x1090 [ 493.689755][T10573] ? pfn_valid+0x1e0/0x1e0 [ 493.694019][T10573] dup_mmap+0x99f/0xea0 [ 493.698035][T10573] ? __delayed_free_task+0x20/0x20 [ 493.702953][T10573] ? mm_init+0x807/0x960 [ 493.707034][T10573] dup_mm+0x91/0x330 [ 493.710775][T10573] copy_mm+0x108/0x1b0 [ 493.714670][T10573] copy_process+0x1295/0x3250 [ 493.719185][T10573] ? check_stack_object+0xf7/0x130 [ 493.724131][T10573] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 493.729085][T10573] ? copy_clone_args_from_user+0x6cf/0x790 [ 493.734720][T10573] kernel_clone+0x22d/0x990 [ 493.739062][T10573] ? dup_mmap+0xea0/0xea0 [ 493.743223][T10573] ? create_io_thread+0x1e0/0x1e0 [ 493.748596][T10573] ? file_end_write+0x1b0/0x1b0 [ 493.753369][T10573] __x64_sys_clone3+0x375/0x3a0 [ 493.758054][T10573] ? __ia32_sys_clone+0x300/0x300 [ 493.762912][T10573] ? ksys_write+0x25f/0x2c0 [ 493.767258][T10573] ? debug_smp_processor_id+0x17/0x20 [ 493.772458][T10573] do_syscall_64+0x44/0xd0 [ 493.776719][T10573] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 493.782699][T10573] RIP: 0033:0x7feb5e60c0c9 [ 493.786952][T10573] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 493.806393][T10573] RSP: 002b:00007feb5d37f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 493.814638][T10573] RAX: ffffffffffffffda RBX: 00007feb5e72bf80 RCX: 00007feb5e60c0c9 [ 493.822454][T10573] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007feb5d37f050 [ 493.830258][T10573] RBP: 00007feb5d37f1d0 R08: 0000000000000000 R09: 0000000000000058 23:12:36 executing program 2: syz_clone3(&(0x7f0000000b40)={0x1000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 49) 23:12:36 executing program 4: syz_clone3(&(0x7f0000000b40)={0x42020080, 0x0, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff3c}, 0x58) socket(0x28, 0x4, 0x8000) 23:12:36 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/msr', 0x80400, 0x80) syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {0x2}, &(0x7f0000000780), 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) 23:12:36 executing program 1: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x80004) socket(0x2c, 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r1, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000280)={0x3, 0x10, 0x0, {}, {0x0, 0xea60}, {0x4, 0x1, 0x1}, 0x1, @can={{}, 0x1, 0x1, 0x0, 0x0, "493d28f4e827ae90"}}, 0x48}, 0x1, 0x0, 0x0, 0x4044811}, 0x20000001) 23:12:36 executing program 5: add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) syz_clone3(&(0x7f0000000540)={0xa4080000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x23}, &(0x7f0000000140)=""/28, 0x1c, &(0x7f0000000180)=""/244, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 23:12:36 executing program 3: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x58) [ 493.838071][T10573] R10: 00007feb5d37f050 R11: 0000000000000246 R12: 0000000000000058 [ 493.846065][T10573] R13: 00007ffc843a962f R14: 00007feb5d37f300 R15: 0000000000022000 [ 493.854309][T10573] [ 493.874575][T10585] FAULT_INJECTION: forcing a failure. [ 493.874575][T10585] name failslab, interval 1, probability 0, space 0, times 0 [ 493.895862][ T30] audit: type=1400 audit(1673219556.199:136): avc: denied { write } for pid=10583 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 493.898749][T10585] CPU: 1 PID: 10585 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 493.925467][T10585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 493.935368][T10585] Call Trace: [ 493.938484][T10585] [ 493.941254][T10585] dump_stack_lvl+0x151/0x1b7 [ 493.945769][T10585] ? bfq_pos_tree_add_move+0x43e/0x43e [ 493.951063][T10585] ? do_syscall_64+0x44/0xd0 [ 493.955491][T10585] dump_stack+0x15/0x17 [ 493.959480][T10585] should_fail+0x3c0/0x510 [ 493.963752][T10585] __should_failslab+0x9f/0xe0 [ 493.968420][T10585] should_failslab+0x9/0x20 [ 493.972760][T10585] kmem_cache_alloc+0x4f/0x2f0 [ 493.977359][T10585] ? anon_vma_clone+0xa1/0x4f0 [ 493.982046][T10585] anon_vma_clone+0xa1/0x4f0 [ 493.986472][T10585] anon_vma_fork+0x91/0x4f0 [ 493.990817][T10585] ? anon_vma_name+0x4c/0x70 [ 493.995934][T10585] dup_mmap+0x750/0xea0 [ 494.000099][T10585] ? __delayed_free_task+0x20/0x20 [ 494.005046][T10585] ? mm_init+0x807/0x960 [ 494.009124][T10585] dup_mm+0x91/0x330 [ 494.012858][T10585] copy_mm+0x108/0x1b0 [ 494.016765][T10585] copy_process+0x1295/0x3250 [ 494.021278][T10585] ? check_stack_object+0xf7/0x130 [ 494.026223][T10585] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 494.031189][T10585] ? copy_clone_args_from_user+0x6cf/0x790 [ 494.036815][T10585] kernel_clone+0x22d/0x990 [ 494.041153][T10585] ? dup_mmap+0xea0/0xea0 [ 494.045318][T10585] ? create_io_thread+0x1e0/0x1e0 [ 494.050183][T10585] ? file_end_write+0x1b0/0x1b0 [ 494.054864][T10585] __x64_sys_clone3+0x375/0x3a0 [ 494.060404][T10585] ? __ia32_sys_clone+0x300/0x300 [ 494.065268][T10585] ? ksys_write+0x25f/0x2c0 [ 494.069601][T10585] ? debug_smp_processor_id+0x17/0x20 [ 494.074807][T10585] do_syscall_64+0x44/0xd0 [ 494.079062][T10585] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 494.084791][T10585] RIP: 0033:0x7feb5e60c0c9 [ 494.089045][T10585] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 494.108486][T10585] RSP: 002b:00007feb5d37f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 494.116731][T10585] RAX: ffffffffffffffda RBX: 00007feb5e72bf80 RCX: 00007feb5e60c0c9 [ 494.124632][T10585] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007feb5d37f050 [ 494.132438][T10585] RBP: 00007feb5d37f1d0 R08: 0000000000000000 R09: 0000000000000058 23:12:36 executing program 5: add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) syz_clone3(&(0x7f0000000540)={0xa4080000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x23}, &(0x7f0000000140)=""/28, 0x1c, &(0x7f0000000180)=""/244, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 23:12:36 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/msr', 0x80400, 0x80) syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {0x2}, &(0x7f0000000780), 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) 23:12:36 executing program 3: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x58) 23:12:36 executing program 4: syz_clone3(&(0x7f0000000b40)={0x42020080, 0x0, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff3c}, 0x58) (async, rerun: 32) socket(0x28, 0x4, 0x8000) (rerun: 32) 23:12:36 executing program 1: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x80004) (async) socket(0x2c, 0x0, 0x0) (async, rerun: 64) r1 = socket$can_bcm(0x1d, 0x2, 0x2) (rerun: 64) sendmsg$can_bcm(r1, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000280)={0x3, 0x10, 0x0, {}, {0x0, 0xea60}, {0x4, 0x1, 0x1}, 0x1, @can={{}, 0x1, 0x1, 0x0, 0x0, "493d28f4e827ae90"}}, 0x48}, 0x1, 0x0, 0x0, 0x4044811}, 0x20000001) 23:12:36 executing program 2: syz_clone3(&(0x7f0000000b40)={0x1000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 50) 23:12:36 executing program 4: syz_clone3(&(0x7f0000000b40)={0x42020080, 0x0, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff3c}, 0x58) (async, rerun: 64) socket(0x28, 0x4, 0x8000) (rerun: 64) 23:12:36 executing program 3: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff00000000}, 0x58) 23:12:36 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/msr', 0x80400, 0x80) syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {0x2}, &(0x7f0000000780), 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/msr', 0x80400, 0x80) (async) syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {0x2}, &(0x7f0000000780), 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async) [ 494.140257][T10585] R10: 00007feb5d37f050 R11: 0000000000000246 R12: 0000000000000058 [ 494.148245][T10585] R13: 00007ffc843a962f R14: 00007feb5d37f300 R15: 0000000000022000 [ 494.156048][T10585] 23:12:36 executing program 5: add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) syz_clone3(&(0x7f0000000540)={0xa4080000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x23}, &(0x7f0000000140)=""/28, 0x1c, &(0x7f0000000180)=""/244, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 23:12:36 executing program 3: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xfbffffff00000000}, 0x58) 23:12:36 executing program 0: getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0x1, 0x8}, 0xc) syz_clone3(&(0x7f0000000b40)={0x8000200, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x0, 0x0, 0x0}, 0x58) 23:12:36 executing program 4: syz_clone3(&(0x7f0000000b40)={0x202902100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:12:36 executing program 1: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x80004) (async) socket(0x2c, 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r1, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000280)={0x3, 0x10, 0x0, {}, {0x0, 0xea60}, {0x4, 0x1, 0x1}, 0x1, @can={{}, 0x1, 0x1, 0x0, 0x0, "493d28f4e827ae90"}}, 0x48}, 0x1, 0x0, 0x0, 0x4044811}, 0x20000001) 23:12:36 executing program 3: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, 0x58) 23:12:36 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={r0, 0x1d, 0x0, 0xffffffff, &(0x7f0000000000)=[0x0, 0x0], 0x2}, 0x20) 23:12:36 executing program 4: syz_clone3(&(0x7f0000000b40)={0x202902100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f0000000b40)={0x202902100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) [ 494.234259][T10622] FAULT_INJECTION: forcing a failure. [ 494.234259][T10622] name failslab, interval 1, probability 0, space 0, times 0 [ 494.294541][T10622] CPU: 1 PID: 10622 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 494.304621][T10622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 494.314514][T10622] Call Trace: [ 494.317722][T10622] [ 494.320518][T10622] dump_stack_lvl+0x151/0x1b7 [ 494.325018][T10622] ? bfq_pos_tree_add_move+0x43e/0x43e [ 494.330315][T10622] dump_stack+0x15/0x17 [ 494.334388][T10622] should_fail+0x3c0/0x510 [ 494.338638][T10622] __should_failslab+0x9f/0xe0 [ 494.343255][T10622] should_failslab+0x9/0x20 [ 494.347584][T10622] kmem_cache_alloc+0x4f/0x2f0 [ 494.352274][T10622] ? vm_area_dup+0x26/0x1d0 [ 494.356605][T10622] ? __kasan_check_read+0x11/0x20 [ 494.361464][T10622] vm_area_dup+0x26/0x1d0 [ 494.365641][T10622] dup_mmap+0x6b8/0xea0 [ 494.369650][T10622] ? __delayed_free_task+0x20/0x20 [ 494.374572][T10622] ? mm_init+0x807/0x960 [ 494.378649][T10622] dup_mm+0x91/0x330 [ 494.382381][T10622] copy_mm+0x108/0x1b0 [ 494.386288][T10622] copy_process+0x1295/0x3250 [ 494.390802][T10622] ? check_stack_object+0xf7/0x130 [ 494.395747][T10622] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 494.400698][T10622] ? copy_clone_args_from_user+0x6cf/0x790 [ 494.406339][T10622] kernel_clone+0x22d/0x990 [ 494.410675][T10622] ? dup_mmap+0xea0/0xea0 [ 494.414844][T10622] ? create_io_thread+0x1e0/0x1e0 [ 494.419700][T10622] ? file_end_write+0x1b0/0x1b0 [ 494.424388][T10622] __x64_sys_clone3+0x375/0x3a0 [ 494.429076][T10622] ? __ia32_sys_clone+0x300/0x300 [ 494.433935][T10622] ? ksys_write+0x25f/0x2c0 [ 494.438591][T10622] ? debug_smp_processor_id+0x17/0x20 [ 494.443981][T10622] do_syscall_64+0x44/0xd0 [ 494.448315][T10622] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 494.454040][T10622] RIP: 0033:0x7feb5e60c0c9 [ 494.458289][T10622] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 494.478164][T10622] RSP: 002b:00007feb5d37f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 494.486587][T10622] RAX: ffffffffffffffda RBX: 00007feb5e72bf80 RCX: 00007feb5e60c0c9 23:12:36 executing program 2: syz_clone3(&(0x7f0000000b40)={0x1000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 51) 23:12:36 executing program 0: getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0x1, 0x8}, 0xc) syz_clone3(&(0x7f0000000b40)={0x8000200, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x0, 0x0, 0x0}, 0x58) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0x1, 0x8}, 0xc) (async) syz_clone3(&(0x7f0000000b40)={0x8000200, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x0, 0x0, 0x0}, 0x58) (async) 23:12:36 executing program 5: add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_clone3(&(0x7f0000000540)={0xa4080000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x23}, &(0x7f0000000140)=""/28, 0x1c, &(0x7f0000000180)=""/244, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 23:12:36 executing program 3: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x7fe459a990a8) 23:12:36 executing program 4: syz_clone3(&(0x7f0000000b40)={0x202902100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:12:36 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={r0, 0x1d, 0x0, 0xffffffff, &(0x7f0000000000)=[0x0, 0x0], 0x2}, 0x20) 23:12:36 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={r0, 0x1d, 0x0, 0xffffffff, &(0x7f0000000000)=[0x0, 0x0], 0x2}, 0x20) [ 494.494406][T10622] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007feb5d37f050 [ 494.502564][T10622] RBP: 00007feb5d37f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 494.510628][T10622] R10: 00007feb5d37f050 R11: 0000000000000246 R12: 0000000000000058 [ 494.518476][T10622] R13: 00007ffc843a962f R14: 00007feb5d37f300 R15: 0000000000022000 [ 494.526253][T10622] 23:12:36 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000040)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000240)={"54044689a278227f641c5e06d40af394", 0x0, r1, {0x8000, 0x4}, {0x8e3, 0x8000}, 0xe1, [0x43, 0x5, 0x0, 0xf6, 0x7ff, 0x1f, 0xfffffffffffffffb, 0x7436, 0x3ff, 0x7, 0x7ff, 0xffffffffffffff16, 0x1, 0x0, 0x9, 0xffffffffffff0000]}) ioctl$KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000380)={0x0, 0x7, 0x7, &(0x7f0000000340)=0x3ff}) socket(0x2c, 0x0, 0x0) 23:12:36 executing program 0: getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0x1, 0x8}, 0xc) (async) syz_clone3(&(0x7f0000000b40)={0x8000200, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x0, 0x0, 0x0}, 0x58) 23:12:36 executing program 0: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) [ 494.567588][T10651] FAULT_INJECTION: forcing a failure. [ 494.567588][T10651] name failslab, interval 1, probability 0, space 0, times 0 23:12:36 executing program 5: add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_clone3(0x0, 0x0) 23:12:36 executing program 4: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_migrate\x00', 0x2, 0x0) [ 494.610993][T10651] CPU: 0 PID: 10651 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 494.621065][T10651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 494.631168][T10651] Call Trace: [ 494.634262][T10651] [ 494.637035][T10651] dump_stack_lvl+0x151/0x1b7 [ 494.641724][T10651] ? bfq_pos_tree_add_move+0x43e/0x43e [ 494.647114][T10651] dump_stack+0x15/0x17 [ 494.651103][T10651] should_fail+0x3c0/0x510 [ 494.655362][T10651] __should_failslab+0x9f/0xe0 [ 494.659977][T10651] should_failslab+0x9/0x20 [ 494.664297][T10651] kmem_cache_alloc+0x4f/0x2f0 [ 494.668982][T10651] ? vm_area_dup+0x26/0x1d0 [ 494.673324][T10651] vm_area_dup+0x26/0x1d0 [ 494.677504][T10651] dup_mmap+0x6b8/0xea0 [ 494.681574][T10651] ? __delayed_free_task+0x20/0x20 [ 494.686540][T10651] ? mm_init+0x807/0x960 [ 494.690602][T10651] dup_mm+0x91/0x330 [ 494.694329][T10651] copy_mm+0x108/0x1b0 [ 494.698230][T10651] copy_process+0x1295/0x3250 [ 494.702743][T10651] ? check_stack_object+0xf7/0x130 [ 494.707688][T10651] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 494.712634][T10651] ? copy_clone_args_from_user+0x6cf/0x790 [ 494.718365][T10651] kernel_clone+0x22d/0x990 [ 494.722716][T10651] ? dup_mmap+0xea0/0xea0 [ 494.726870][T10651] ? create_io_thread+0x1e0/0x1e0 [ 494.731737][T10651] ? file_end_write+0x1b0/0x1b0 [ 494.736422][T10651] __x64_sys_clone3+0x375/0x3a0 [ 494.741192][T10651] ? __ia32_sys_clone+0x300/0x300 [ 494.745974][T10651] ? ksys_write+0x25f/0x2c0 [ 494.750316][T10651] ? debug_smp_processor_id+0x17/0x20 [ 494.755511][T10651] do_syscall_64+0x44/0xd0 [ 494.759764][T10651] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 494.765500][T10651] RIP: 0033:0x7feb5e60c0c9 [ 494.769750][T10651] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 494.789188][T10651] RSP: 002b:00007feb5d37f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 494.797435][T10651] RAX: ffffffffffffffda RBX: 00007feb5e72bf80 RCX: 00007feb5e60c0c9 23:12:37 executing program 2: syz_clone3(&(0x7f0000000b40)={0x1000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 52) 23:12:37 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000040)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000240)={"54044689a278227f641c5e06d40af394", 0x0, r1, {0x8000, 0x4}, {0x8e3, 0x8000}, 0xe1, [0x43, 0x5, 0x0, 0xf6, 0x7ff, 0x1f, 0xfffffffffffffffb, 0x7436, 0x3ff, 0x7, 0x7ff, 0xffffffffffffff16, 0x1, 0x0, 0x9, 0xffffffffffff0000]}) ioctl$KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000380)={0x0, 0x7, 0x7, &(0x7f0000000340)=0x3ff}) socket(0x2c, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000040)) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000240)={"54044689a278227f641c5e06d40af394", 0x0, r1, {0x8000, 0x4}, {0x8e3, 0x8000}, 0xe1, [0x43, 0x5, 0x0, 0xf6, 0x7ff, 0x1f, 0xfffffffffffffffb, 0x7436, 0x3ff, 0x7, 0x7ff, 0xffffffffffffff16, 0x1, 0x0, 0x9, 0xffffffffffff0000]}) (async) ioctl$KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000380)={0x0, 0x7, 0x7, &(0x7f0000000340)=0x3ff}) (async) socket(0x2c, 0x0, 0x0) (async) 23:12:37 executing program 5: add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_clone3(0x0, 0x0) 23:12:37 executing program 3: r0 = syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f0000000280)={0x10000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r1], 0x1}, 0x58) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000640), 0x2, 0x0) r2 = syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f0000000280)={0x10000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r2], 0x1}, 0x58) getpgrp(r0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000680)='blkio.bfq.idle_time\x00', 0x0, 0x0) r3 = getpid() r4 = syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f0000000280)={0x10000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r4], 0x1}, 0x58) r5 = syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f0000000280)={0x10000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r5], 0x1}, 0x58) r6 = syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f0000000280)={0x10000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r6], 0x1}, 0x58) r7 = syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f0000000280)={0x10000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r7], 0x1}, 0x58) syz_clone3(&(0x7f00000005c0)={0xc123000, &(0x7f00000003c0), &(0x7f0000000480), &(0x7f0000000440), {0xf}, &(0x7f00000006c0)=""/148, 0x94, &(0x7f0000000540)=""/30, &(0x7f0000000400)=[r5, r0, 0xffffffffffffffff, r3, r6, r4, r7], 0x7}, 0x58) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r8, 0xd000943e, 0x0) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)={&(0x7f0000000300)='./file0\x00', 0x0, 0x34}, 0x10) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000380)={&(0x7f00000000c0)="4869f532f5efe0da655772b977e45e428091950f305ecf82706a9a8a74c7033d2dc7f31fc618edfc8c84359cea9602bd9c20cadbd91b57a8eb7a380cccb621ad915619918a2ddda7d8a2d7716a46eaea927f4f275f234a5ffcc136928164b2c2a4924740ae7d18f874006f114d53d0306b760a4452ef31a3ff58436adda778d43dd24b2f07b9b6a202a93821d529ed4cac8716a33e8bd486a9fcaeb54f83d66a7b1d1753f97ba6d058", &(0x7f0000000180)=""/237, &(0x7f0000000bc0)="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", &(0x7f0000000280)="b3efbad516ea0cb2203b2a374dfbe172f9798f5403d8054319ea1580a633dec55f7bea3404da7f4c7a1fd32d2cf5c3206a2270ba70b8ad47a3397a541c5d1401ecd68cc33ee87f73f39be910db801c3733b829", 0x3, r9}, 0x38) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r10, 0xd000943e, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r11, &(0x7f0000000000), 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) 23:12:37 executing program 4: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_migrate\x00', 0x2, 0x0) 23:12:37 executing program 0: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) (async) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) 23:12:37 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000040)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000240)={"54044689a278227f641c5e06d40af394", 0x0, r1, {0x8000, 0x4}, {0x8e3, 0x8000}, 0xe1, [0x43, 0x5, 0x0, 0xf6, 0x7ff, 0x1f, 0xfffffffffffffffb, 0x7436, 0x3ff, 0x7, 0x7ff, 0xffffffffffffff16, 0x1, 0x0, 0x9, 0xffffffffffff0000]}) ioctl$KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000380)={0x0, 0x7, 0x7, &(0x7f0000000340)=0x3ff}) socket(0x2c, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000040)) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000240)={"54044689a278227f641c5e06d40af394", 0x0, r1, {0x8000, 0x4}, {0x8e3, 0x8000}, 0xe1, [0x43, 0x5, 0x0, 0xf6, 0x7ff, 0x1f, 0xfffffffffffffffb, 0x7436, 0x3ff, 0x7, 0x7ff, 0xffffffffffffff16, 0x1, 0x0, 0x9, 0xffffffffffff0000]}) (async) ioctl$KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000380)={0x0, 0x7, 0x7, &(0x7f0000000340)=0x3ff}) (async) socket(0x2c, 0x0, 0x0) (async) 23:12:37 executing program 0: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) (async) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) (async) [ 494.806027][T10651] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007feb5d37f050 [ 494.813835][T10651] RBP: 00007feb5d37f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 494.821656][T10651] R10: 00007feb5d37f050 R11: 0000000000000246 R12: 0000000000000058 [ 494.829543][T10651] R13: 00007ffc843a962f R14: 00007feb5d37f300 R15: 0000000000022000 [ 494.837538][T10651] 23:12:37 executing program 5: add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_clone3(0x0, 0x0) 23:12:37 executing program 5: add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_clone3(&(0x7f0000000540)={0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x23}, &(0x7f0000000140)=""/28, 0x1c, &(0x7f0000000180)=""/244, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) [ 494.869659][T10682] FAULT_INJECTION: forcing a failure. [ 494.869659][T10682] name failslab, interval 1, probability 0, space 0, times 0 [ 494.885647][T10682] CPU: 0 PID: 10682 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 494.895960][T10682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 494.905830][T10682] Call Trace: [ 494.908967][T10682] [ 494.911735][T10682] dump_stack_lvl+0x151/0x1b7 23:12:37 executing program 5: add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_clone3(&(0x7f0000000540)={0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x23}, &(0x7f0000000140)=""/28, 0x1c, &(0x7f0000000180)=""/244, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 23:12:37 executing program 5: add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_clone3(&(0x7f0000000540)={0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x23}, &(0x7f0000000140)=""/28, 0x1c, &(0x7f0000000180)=""/244, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) [ 494.916243][T10682] ? bfq_pos_tree_add_move+0x43e/0x43e [ 494.921627][T10682] dump_stack+0x15/0x17 [ 494.925616][T10682] should_fail+0x3c0/0x510 [ 494.930479][T10682] __should_failslab+0x9f/0xe0 [ 494.935077][T10682] should_failslab+0x9/0x20 [ 494.939423][T10682] kmem_cache_alloc+0x4f/0x2f0 [ 494.944015][T10682] ? anon_vma_fork+0x1b9/0x4f0 [ 494.948617][T10682] anon_vma_fork+0x1b9/0x4f0 [ 494.953048][T10682] dup_mmap+0x750/0xea0 [ 494.957036][T10682] ? __delayed_free_task+0x20/0x20 [ 494.961994][T10682] ? mm_init+0x807/0x960 [ 494.966063][T10682] dup_mm+0x91/0x330 [ 494.969792][T10682] copy_mm+0x108/0x1b0 [ 494.973698][T10682] copy_process+0x1295/0x3250 [ 494.978216][T10682] ? check_stack_object+0xf7/0x130 [ 494.983162][T10682] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 494.988106][T10682] ? copy_clone_args_from_user+0x6cf/0x790 [ 494.993748][T10682] kernel_clone+0x22d/0x990 [ 494.998090][T10682] ? dup_mmap+0xea0/0xea0 [ 495.002265][T10682] ? create_io_thread+0x1e0/0x1e0 [ 495.007114][T10682] ? file_end_write+0x1b0/0x1b0 [ 495.011800][T10682] __x64_sys_clone3+0x375/0x3a0 [ 495.016489][T10682] ? __ia32_sys_clone+0x300/0x300 [ 495.021522][T10682] ? ksys_write+0x25f/0x2c0 [ 495.025863][T10682] ? debug_smp_processor_id+0x17/0x20 [ 495.031067][T10682] do_syscall_64+0x44/0xd0 [ 495.035315][T10682] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 495.041047][T10682] RIP: 0033:0x7feb5e60c0c9 [ 495.045300][T10682] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 23:12:37 executing program 2: syz_clone3(&(0x7f0000000b40)={0x1000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 53) 23:12:37 executing program 5: add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_clone3(&(0x7f0000000540)={0xa4080000, 0x0, &(0x7f00000000c0), &(0x7f0000000100), {0x23}, &(0x7f0000000140)=""/28, 0x1c, &(0x7f0000000180)=""/244, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 23:12:37 executing program 4: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_migrate\x00', 0x2, 0x0) [ 495.064998][T10682] RSP: 002b:00007feb5d37f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 495.073331][T10682] RAX: ffffffffffffffda RBX: 00007feb5e72bf80 RCX: 00007feb5e60c0c9 [ 495.081230][T10682] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007feb5d37f050 [ 495.089039][T10682] RBP: 00007feb5d37f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 495.096854][T10682] R10: 00007feb5d37f050 R11: 0000000000000246 R12: 0000000000000058 [ 495.104767][T10682] R13: 00007ffc843a962f R14: 00007feb5d37f300 R15: 0000000000022000 [ 495.112560][T10682] 23:12:37 executing program 3: r0 = syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) r1 = syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f0000000280)={0x10000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r1], 0x1}, 0x58) (async) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000640), 0x2, 0x0) (async) r2 = syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f0000000280)={0x10000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r2], 0x1}, 0x58) (async) getpgrp(r0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000680)='blkio.bfq.idle_time\x00', 0x0, 0x0) (async) r3 = getpid() r4 = syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f0000000280)={0x10000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r4], 0x1}, 0x58) (async) r5 = syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f0000000280)={0x10000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r5], 0x1}, 0x58) r6 = syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f0000000280)={0x10000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r6], 0x1}, 0x58) (async) r7 = syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f0000000280)={0x10000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r7], 0x1}, 0x58) (async) syz_clone3(&(0x7f00000005c0)={0xc123000, &(0x7f00000003c0), &(0x7f0000000480), &(0x7f0000000440), {0xf}, &(0x7f00000006c0)=""/148, 0x94, &(0x7f0000000540)=""/30, &(0x7f0000000400)=[r5, r0, 0xffffffffffffffff, r3, r6, r4, r7], 0x7}, 0x58) (async) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r8, 0xd000943e, 0x0) (async) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)={&(0x7f0000000300)='./file0\x00', 0x0, 0x34}, 0x10) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000380)={&(0x7f00000000c0)="4869f532f5efe0da655772b977e45e428091950f305ecf82706a9a8a74c7033d2dc7f31fc618edfc8c84359cea9602bd9c20cadbd91b57a8eb7a380cccb621ad915619918a2ddda7d8a2d7716a46eaea927f4f275f234a5ffcc136928164b2c2a4924740ae7d18f874006f114d53d0306b760a4452ef31a3ff58436adda778d43dd24b2f07b9b6a202a93821d529ed4cac8716a33e8bd486a9fcaeb54f83d66a7b1d1753f97ba6d058", &(0x7f0000000180)=""/237, &(0x7f0000000bc0)="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", &(0x7f0000000280)="b3efbad516ea0cb2203b2a374dfbe172f9798f5403d8054319ea1580a633dec55f7bea3404da7f4c7a1fd32d2cf5c3206a2270ba70b8ad47a3397a541c5d1401ecd68cc33ee87f73f39be910db801c3733b829", 0x3, r9}, 0x38) (async) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r10, 0xd000943e, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r11, &(0x7f0000000000), 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) 23:12:37 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="680000002800000125bd7000fedbdf2500000000", @ANYRES32=r1, @ANYBLOB="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"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x4008092) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) 23:12:37 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/snd_timer', 0x400400, 0x7d) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$VT_DISALLOCATE(r0, 0x5608) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x70, r5, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xc9b, 0x70}}}}, [@NL80211_ATTR_KEY_SEQ={0x9, 0xa, "0c22c6af3a"}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "b20469a9432ca9aa8a11e05dcc"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "da3a3d57db85f6a8c024f7dca0"}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x1) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80104000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xbc, r2, 0x8, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ad}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x6]}]}, @NL80211_ATTR_CQM={0x5c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x33}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5c}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x9, 0x5, 0x9, 0x9e]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x456}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x3ff, 0x4, 0x7ff, 0x80000000, 0x1aa4, 0x9]}]}, @NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x81}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1ff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1a}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0xc080}, 0x10) socket(0x2c, 0x0, 0x0) 23:12:37 executing program 5: add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_clone3(&(0x7f0000000540)={0xa4080000, 0x0, 0x0, &(0x7f0000000100), {0x23}, &(0x7f0000000140)=""/28, 0x1c, &(0x7f0000000180)=""/244, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 23:12:37 executing program 4: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000000)='cpu.pressure\x00', 0x2, 0x0) [ 495.147186][T10719] FAULT_INJECTION: forcing a failure. [ 495.147186][T10719] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 495.160739][T10719] CPU: 0 PID: 10719 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 495.171588][T10719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 495.181569][T10719] Call Trace: [ 495.184774][T10719] [ 495.187551][T10719] dump_stack_lvl+0x151/0x1b7 [ 495.192844][T10719] ? bfq_pos_tree_add_move+0x43e/0x43e [ 495.198148][T10719] ? __switch_to+0x617/0x1170 [ 495.202654][T10719] ? native_set_ldt+0x360/0x360 [ 495.207338][T10719] dump_stack+0x15/0x17 [ 495.211329][T10719] should_fail+0x3c0/0x510 [ 495.215583][T10719] should_fail_alloc_page+0x58/0x70 [ 495.220619][T10719] __alloc_pages+0x1de/0x7c0 [ 495.225047][T10719] ? __count_vm_events+0x30/0x30 [ 495.229817][T10719] ? __this_cpu_preempt_check+0x13/0x20 [ 495.235202][T10719] pte_alloc_one+0x73/0x1b0 [ 495.239542][T10719] ? pfn_modify_allowed+0x2e0/0x2e0 [ 495.246069][T10719] __pte_alloc+0x86/0x350 [ 495.250215][T10719] ? free_pgtables+0x210/0x210 [ 495.254811][T10719] ? _raw_spin_lock+0xa3/0x1b0 [ 495.259412][T10719] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 495.264622][T10719] ? __kernel_text_address+0x9a/0x110 [ 495.269830][T10719] copy_pte_range+0x1b1f/0x20b0 [ 495.274529][T10719] ? __kunmap_atomic+0x80/0x80 [ 495.279114][T10719] ? __kasan_slab_alloc+0xc4/0xe0 [ 495.283978][T10719] ? __kasan_slab_alloc+0xb2/0xe0 [ 495.288837][T10719] ? kmem_cache_alloc+0x189/0x2f0 [ 495.293691][T10719] ? vm_area_dup+0x26/0x1d0 [ 495.298036][T10719] ? dup_mmap+0x6b8/0xea0 [ 495.302200][T10719] ? dup_mm+0x91/0x330 [ 495.307408][T10719] ? copy_mm+0x108/0x1b0 [ 495.311577][T10719] ? copy_process+0x1295/0x3250 [ 495.316258][T10719] ? kernel_clone+0x22d/0x990 [ 495.320773][T10719] ? __x64_sys_clone3+0x375/0x3a0 [ 495.325642][T10719] ? do_syscall_64+0x44/0xd0 [ 495.331013][T10719] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 495.337091][T10719] copy_page_range+0xc1e/0x1090 [ 495.341771][T10719] ? pfn_valid+0x1e0/0x1e0 [ 495.346020][T10719] dup_mmap+0x99f/0xea0 [ 495.350008][T10719] ? __delayed_free_task+0x20/0x20 [ 495.354961][T10719] ? mm_init+0x807/0x960 [ 495.359036][T10719] dup_mm+0x91/0x330 [ 495.362949][T10719] copy_mm+0x108/0x1b0 [ 495.366850][T10719] copy_process+0x1295/0x3250 [ 495.371371][T10719] ? check_stack_object+0xf7/0x130 [ 495.376399][T10719] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 495.381343][T10719] ? copy_clone_args_from_user+0x6cf/0x790 [ 495.386987][T10719] kernel_clone+0x22d/0x990 [ 495.391337][T10719] ? dup_mmap+0xea0/0xea0 [ 495.395488][T10719] ? create_io_thread+0x1e0/0x1e0 [ 495.400352][T10719] ? file_end_write+0x1b0/0x1b0 [ 495.405042][T10719] __x64_sys_clone3+0x375/0x3a0 [ 495.409724][T10719] ? __ia32_sys_clone+0x300/0x300 [ 495.414588][T10719] ? ksys_write+0x25f/0x2c0 [ 495.419016][T10719] ? debug_smp_processor_id+0x17/0x20 [ 495.424316][T10719] do_syscall_64+0x44/0xd0 [ 495.428650][T10719] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 495.434469][T10719] RIP: 0033:0x7feb5e60c0c9 [ 495.440203][T10719] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 495.459821][T10719] RSP: 002b:00007feb5d37f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 495.468151][T10719] RAX: ffffffffffffffda RBX: 00007feb5e72bf80 RCX: 00007feb5e60c0c9 [ 495.475959][T10719] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007feb5d37f050 [ 495.483770][T10719] RBP: 00007feb5d37f1d0 R08: 0000000000000000 R09: 0000000000000058 23:12:37 executing program 4: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000000)='cpu.pressure\x00', 0x2, 0x0) syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) (async) openat$cgroup_pressure(r0, &(0x7f0000000000)='cpu.pressure\x00', 0x2, 0x0) (async) 23:12:37 executing program 4: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) (async) openat$cgroup_pressure(r0, &(0x7f0000000000)='cpu.pressure\x00', 0x2, 0x0) 23:12:37 executing program 4: syz_clone3(&(0x7f0000000b40)={0x162044000, 0x0, 0x0, 0x0, {0xb6}, 0x0, 0x5, 0x0, 0x0, 0x61}, 0x5f) 23:12:37 executing program 4: syz_clone3(&(0x7f0000000b40)={0x162044000, 0x0, 0x0, 0x0, {0xb6}, 0x0, 0x5, 0x0, 0x0, 0x61}, 0x5f) 23:12:37 executing program 2: syz_clone3(&(0x7f0000000b40)={0x1000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 54) 23:12:37 executing program 4: syz_clone3(&(0x7f0000000b40)={0x162044000, 0x0, 0x0, 0x0, {0xb6}, 0x0, 0x5, 0x0, 0x0, 0x61}, 0x5f) 23:12:37 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="680000002800000125bd7000fedbdf2500000000", @ANYRES32=r1, @ANYBLOB="0c000300000002000dffe0ff0b0001006d756c74a1697100000c000100696e67726573730006000500207300000b0001006d75647469710000080001007366620006000500ff5400000600050001070000232d9aca5eaa535cb80ca2a9a1192d0d619012eb6a2761b8b4ea55fd1e9a66ff16688beee0779dac7011b32a4e47cf2d02faafb4b34791cbbcd5b378fcc6c1145d1198cad0f8ade6b4f3b280e4454ab4fec583b8cfd432971a18b71e7009c91ddc8b62d2defbce3d7700bcfff9410837526d7fb55d0a42728f25dedd5ed4ceb0f36a34ea1b0a60b7d41995dd9d01cb696face8a52275e7154bd0986f4dc19135cadc5a95a0f56b7013f47ed900ffb6843c10f5f7ead7cf646c7472c128"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x4008092) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) 23:12:37 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/snd_timer', 0x400400, 0x7d) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$VT_DISALLOCATE(r0, 0x5608) (async) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x70, r5, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xc9b, 0x70}}}}, [@NL80211_ATTR_KEY_SEQ={0x9, 0xa, "0c22c6af3a"}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "b20469a9432ca9aa8a11e05dcc"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "da3a3d57db85f6a8c024f7dca0"}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x1) (async) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80104000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xbc, r2, 0x8, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ad}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x6]}]}, @NL80211_ATTR_CQM={0x5c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x33}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5c}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x9, 0x5, 0x9, 0x9e]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x456}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x3ff, 0x4, 0x7ff, 0x80000000, 0x1aa4, 0x9]}]}, @NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x81}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1ff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1a}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0xc080}, 0x10) (async) socket(0x2c, 0x0, 0x0) 23:12:37 executing program 5: add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_clone3(&(0x7f0000000540)={0xa4080000, 0x0, 0x0, 0x0, {0x23}, &(0x7f0000000140)=""/28, 0x1c, &(0x7f0000000180)=""/244, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 23:12:37 executing program 3: r0 = syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f0000000280)={0x10000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r1], 0x1}, 0x58) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000640), 0x2, 0x0) (async) r2 = syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f0000000280)={0x10000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r2], 0x1}, 0x58) (async) getpgrp(r0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000680)='blkio.bfq.idle_time\x00', 0x0, 0x0) (async) r3 = getpid() r4 = syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f0000000280)={0x10000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r4], 0x1}, 0x58) (async) r5 = syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f0000000280)={0x10000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r5], 0x1}, 0x58) r6 = syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f0000000280)={0x10000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r6], 0x1}, 0x58) (async) r7 = syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f0000000280)={0x10000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r7], 0x1}, 0x58) (async) syz_clone3(&(0x7f00000005c0)={0xc123000, &(0x7f00000003c0), &(0x7f0000000480), &(0x7f0000000440), {0xf}, &(0x7f00000006c0)=""/148, 0x94, &(0x7f0000000540)=""/30, &(0x7f0000000400)=[r5, r0, 0xffffffffffffffff, r3, r6, r4, r7], 0x7}, 0x58) (async) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r8, 0xd000943e, 0x0) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)={&(0x7f0000000300)='./file0\x00', 0x0, 0x34}, 0x10) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000380)={&(0x7f00000000c0)="4869f532f5efe0da655772b977e45e428091950f305ecf82706a9a8a74c7033d2dc7f31fc618edfc8c84359cea9602bd9c20cadbd91b57a8eb7a380cccb621ad915619918a2ddda7d8a2d7716a46eaea927f4f275f234a5ffcc136928164b2c2a4924740ae7d18f874006f114d53d0306b760a4452ef31a3ff58436adda778d43dd24b2f07b9b6a202a93821d529ed4cac8716a33e8bd486a9fcaeb54f83d66a7b1d1753f97ba6d058", &(0x7f0000000180)=""/237, &(0x7f0000000bc0)="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", &(0x7f0000000280)="b3efbad516ea0cb2203b2a374dfbe172f9798f5403d8054319ea1580a633dec55f7bea3404da7f4c7a1fd32d2cf5c3206a2270ba70b8ad47a3397a541c5d1401ecd68cc33ee87f73f39be910db801c3733b829", 0x3, r9}, 0x38) (async) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r10, 0xd000943e, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) (async) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r11, &(0x7f0000000000), 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) 23:12:37 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="680000002800000125bd7000fedbdf2500000000", @ANYRES32=r1, @ANYBLOB="0c000300000002000dffe0ff0b0001006d756c74a1697100000c000100696e67726573730006000500207300000b0001006d75647469710000080001007366620006000500ff5400000600050001070000232d9aca5eaa535cb80ca2a9a1192d0d619012eb6a2761b8b4ea55fd1e9a66ff16688beee0779dac7011b32a4e47cf2d02faafb4b34791cbbcd5b378fcc6c1145d1198cad0f8ade6b4f3b280e4454ab4fec583b8cfd432971a18b71e7009c91ddc8b62d2defbce3d7700bcfff9410837526d7fb55d0a42728f25dedd5ed4ceb0f36a34ea1b0a60b7d41995dd9d01cb696face8a52275e7154bd0986f4dc19135cadc5a95a0f56b7013f47ed900ffb6843c10f5f7ead7cf646c7472c128"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x4008092) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) (async) syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) 23:12:37 executing program 5: add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_clone3(&(0x7f0000000540)={0xa4080000, 0x0, 0x0, 0x0, {}, &(0x7f0000000140)=""/28, 0x1c, &(0x7f0000000180)=""/244, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) [ 495.491678][T10719] R10: 00007feb5d37f050 R11: 0000000000000246 R12: 0000000000000058 [ 495.499485][T10719] R13: 00007ffc843a962f R14: 00007feb5d37f300 R15: 0000000000022000 [ 495.507650][T10719] 23:12:37 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/snd_timer', 0x400400, 0x7d) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$VT_DISALLOCATE(r0, 0x5608) (async) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x70, r5, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xc9b, 0x70}}}}, [@NL80211_ATTR_KEY_SEQ={0x9, 0xa, "0c22c6af3a"}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "b20469a9432ca9aa8a11e05dcc"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "da3a3d57db85f6a8c024f7dca0"}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x1) (async) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80104000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xbc, r2, 0x8, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ad}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x6]}]}, @NL80211_ATTR_CQM={0x5c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x33}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5c}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x9, 0x5, 0x9, 0x9e]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x456}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x3ff, 0x4, 0x7ff, 0x80000000, 0x1aa4, 0x9]}]}, @NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x81}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1ff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1a}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0xc080}, 0x10) (async) socket(0x2c, 0x0, 0x0) 23:12:37 executing program 0: syz_clone3(&(0x7f0000000b40)={0x2082a0800, 0x0, 0x0, 0x0, {0x2d}, &(0x7f0000000040)=""/1, 0x0, 0x0, 0x0}, 0x3c7aefe993602043) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000080)) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) 23:12:37 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$clear(0x7, r0) keyctl$get_persistent(0x16, 0x0, r0) syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 495.555593][T10774] FAULT_INJECTION: forcing a failure. [ 495.555593][T10774] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 495.579840][T10774] CPU: 0 PID: 10774 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 495.589920][T10774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 495.599814][T10774] Call Trace: [ 495.602940][T10774] 23:12:37 executing program 5: add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_clone3(&(0x7f0000000540)={0xa4080000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000180)=""/244, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) [ 495.605717][T10774] dump_stack_lvl+0x151/0x1b7 [ 495.610230][T10774] ? bfq_pos_tree_add_move+0x43e/0x43e [ 495.615522][T10774] ? stack_trace_save+0x1f0/0x1f0 [ 495.620398][T10774] ? __kernel_text_address+0x9a/0x110 [ 495.625594][T10774] dump_stack+0x15/0x17 [ 495.629583][T10774] should_fail+0x3c0/0x510 [ 495.633836][T10774] should_fail_alloc_page+0x58/0x70 [ 495.638869][T10774] __alloc_pages+0x1de/0x7c0 [ 495.643296][T10774] ? stack_trace_save+0x12d/0x1f0 [ 495.648155][T10774] ? stack_trace_snprint+0x100/0x100 [ 495.653275][T10774] ? __count_vm_events+0x30/0x30 [ 495.658053][T10774] ? __kasan_slab_alloc+0xc4/0xe0 [ 495.663004][T10774] ? __kasan_slab_alloc+0xb2/0xe0 [ 495.667951][T10774] ? kmem_cache_alloc+0x189/0x2f0 [ 495.672809][T10774] ? anon_vma_fork+0x1b9/0x4f0 [ 495.677418][T10774] get_zeroed_page+0x19/0x40 [ 495.681844][T10774] __pud_alloc+0x8b/0x260 [ 495.686005][T10774] ? do_handle_mm_fault+0x2370/0x2370 [ 495.691215][T10774] copy_page_range+0xd9e/0x1090 [ 495.695902][T10774] ? pfn_valid+0x1e0/0x1e0 [ 495.700155][T10774] dup_mmap+0x99f/0xea0 [ 495.704143][T10774] ? __delayed_free_task+0x20/0x20 [ 495.709096][T10774] ? mm_init+0x807/0x960 [ 495.713165][T10774] dup_mm+0x91/0x330 [ 495.716899][T10774] copy_mm+0x108/0x1b0 [ 495.720804][T10774] copy_process+0x1295/0x3250 [ 495.725317][T10774] ? check_stack_object+0xf7/0x130 [ 495.730445][T10774] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 495.735391][T10774] ? copy_clone_args_from_user+0x6cf/0x790 [ 495.741034][T10774] kernel_clone+0x22d/0x990 [ 495.745383][T10774] ? dup_mmap+0xea0/0xea0 [ 495.749538][T10774] ? create_io_thread+0x1e0/0x1e0 [ 495.754499][T10774] ? file_end_write+0x1b0/0x1b0 [ 495.759196][T10774] __x64_sys_clone3+0x375/0x3a0 [ 495.763888][T10774] ? __ia32_sys_clone+0x300/0x300 [ 495.768747][T10774] ? ksys_write+0x25f/0x2c0 [ 495.773064][T10774] ? debug_smp_processor_id+0x17/0x20 [ 495.778272][T10774] do_syscall_64+0x44/0xd0 [ 495.782521][T10774] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 495.788248][T10774] RIP: 0033:0x7feb5e60c0c9 [ 495.792503][T10774] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 495.811944][T10774] RSP: 002b:00007feb5d37f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 495.820186][T10774] RAX: ffffffffffffffda RBX: 00007feb5e72bf80 RCX: 00007feb5e60c0c9 [ 495.827997][T10774] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007feb5d37f050 [ 495.836016][T10774] RBP: 00007feb5d37f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 495.843905][T10774] R10: 00007feb5d37f050 R11: 0000000000000246 R12: 0000000000000058 23:12:38 executing program 2: syz_clone3(&(0x7f0000000b40)={0x1000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 55) 23:12:38 executing program 0: syz_clone3(&(0x7f0000000b40)={0x2082a0800, 0x0, 0x0, 0x0, {0x2d}, &(0x7f0000000040)=""/1, 0x0, 0x0, 0x0}, 0x3c7aefe993602043) (async) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000080)) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 32) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) (rerun: 32) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) 23:12:38 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$clear(0x7, r0) (async) keyctl$get_persistent(0x16, 0x0, r0) (async, rerun: 64) syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (rerun: 64) 23:12:38 executing program 5: add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_clone3(&(0x7f0000000540)={0xa4080000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 23:12:38 executing program 1: r0 = socket(0x2c, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r3, 0xffffffffffffffff, 0x4}, 0x48) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000340)=""/47, &(0x7f0000000380)=0x2f) r4 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r3, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r4}, 0x80) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x98, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x9}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x3f}]}, 0x98}}, 0x4005) 23:12:38 executing program 3: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x104, r3, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x25}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xd0}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x302}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x8}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x28c}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xd}], @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xd0}, @NL80211_ATTR_MAC={0xa}]}, 0x104}, 0x1, 0x0, 0x0, 0x80}, 0x8084) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, r2, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1608}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x43}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0xc, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x0]}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x4) 23:12:38 executing program 0: syz_clone3(&(0x7f0000000b40)={0x2082a0800, 0x0, 0x0, 0x0, {0x2d}, &(0x7f0000000040)=""/1, 0x0, 0x0, 0x0}, 0x3c7aefe993602043) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000080)) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) syz_clone3(&(0x7f0000000b40)={0x2082a0800, 0x0, 0x0, 0x0, {0x2d}, &(0x7f0000000040)=""/1, 0x0, 0x0, 0x0}, 0x3c7aefe993602043) (async) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000080)) (async) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) (async) 23:12:38 executing program 5: add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_clone3(&(0x7f0000000540)={0xa4080000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 495.852069][T10774] R13: 00007ffc843a962f R14: 00007feb5d37f300 R15: 0000000000022000 [ 495.860065][T10774] [ 495.915295][T10820] FAULT_INJECTION: forcing a failure. [ 495.915295][T10820] name failslab, interval 1, probability 0, space 0, times 0 [ 495.941238][T10820] CPU: 1 PID: 10820 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 495.951309][T10820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 495.961206][T10820] Call Trace: [ 495.964331][T10820] [ 495.967111][T10820] dump_stack_lvl+0x151/0x1b7 [ 495.971623][T10820] ? bfq_pos_tree_add_move+0x43e/0x43e [ 495.977698][T10820] dump_stack+0x15/0x17 [ 495.981775][T10820] should_fail+0x3c0/0x510 [ 495.986027][T10820] __should_failslab+0x9f/0xe0 [ 495.990735][T10820] should_failslab+0x9/0x20 [ 495.995072][T10820] kmem_cache_alloc+0x4f/0x2f0 [ 495.999683][T10820] ? vm_area_dup+0x26/0x1d0 [ 496.004189][T10820] vm_area_dup+0x26/0x1d0 [ 496.008354][T10820] dup_mmap+0x6b8/0xea0 23:12:38 executing program 3: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x104, r3, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x25}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xd0}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x302}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x8}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x28c}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xd}], @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xd0}, @NL80211_ATTR_MAC={0xa}]}, 0x104}, 0x1, 0x0, 0x0, 0x80}, 0x8084) (async) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, r2, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1608}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x43}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0xc, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x0]}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x4) 23:12:38 executing program 1: r0 = socket(0x2c, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r3, 0xffffffffffffffff, 0x4}, 0x48) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000340)=""/47, &(0x7f0000000380)=0x2f) r4 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r3, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r4}, 0x80) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x98, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x9}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x3f}]}, 0x98}}, 0x4005) socket(0x2c, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vlan0\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00'}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r3, 0xffffffffffffffff, 0x4}, 0x48) (async) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000340)=""/47, &(0x7f0000000380)=0x2f) (async) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r3, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r4}, 0x80) (async) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x98, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x9}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x3f}]}, 0x98}}, 0x4005) (async) [ 496.012346][T10820] ? __delayed_free_task+0x20/0x20 [ 496.018103][T10820] ? mm_init+0x807/0x960 [ 496.018458][T10813] cgroup: fork rejected by pids controller in [ 496.022145][T10820] dup_mm+0x91/0x330 [ 496.022166][T10820] copy_mm+0x108/0x1b0 [ 496.022181][T10820] copy_process+0x1295/0x3250 [ 496.040293][T10820] ? check_stack_object+0xf7/0x130 [ 496.045126][T10813] /syz4 [ 496.045231][T10820] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 496.052787][T10820] ? copy_clone_args_from_user+0x6cf/0x790 [ 496.058431][T10820] kernel_clone+0x22d/0x990 [ 496.062768][T10820] ? dup_mmap+0xea0/0xea0 [ 496.066931][T10820] ? create_io_thread+0x1e0/0x1e0 [ 496.071794][T10820] ? file_end_write+0x1b0/0x1b0 [ 496.076917][T10820] __x64_sys_clone3+0x375/0x3a0 [ 496.081603][T10820] ? __ia32_sys_clone+0x300/0x300 [ 496.086462][T10820] ? ksys_write+0x25f/0x2c0 [ 496.090802][T10820] ? debug_smp_processor_id+0x17/0x20 [ 496.096020][T10820] do_syscall_64+0x44/0xd0 [ 496.100262][T10820] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 496.105986][T10820] RIP: 0033:0x7feb5e60c0c9 23:12:38 executing program 1: r0 = socket(0x2c, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r3, 0xffffffffffffffff, 0x4}, 0x48) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000340)=""/47, &(0x7f0000000380)=0x2f) r4 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r3, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r4}, 0x80) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x98, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x9}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x3f}]}, 0x98}}, 0x4005) [ 496.110249][T10820] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 496.129770][T10820] RSP: 002b:00007feb5d37f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 496.138452][T10820] RAX: ffffffffffffffda RBX: 00007feb5e72bf80 RCX: 00007feb5e60c0c9 [ 496.146263][T10820] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007feb5d37f050 [ 496.154075][T10820] RBP: 00007feb5d37f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 496.161884][T10820] R10: 00007feb5d37f050 R11: 0000000000000246 R12: 0000000000000058 [ 496.169696][T10820] R13: 00007ffc843a962f R14: 00007feb5d37f300 R15: 0000000000022000 [ 496.178291][T10820] 23:12:38 executing program 2: syz_clone3(&(0x7f0000000b40)={0x1000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 56) 23:12:38 executing program 3: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x104, r3, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x25}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xd0}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x302}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x8}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x28c}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xd}], @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xd0}, @NL80211_ATTR_MAC={0xa}]}, 0x104}, 0x1, 0x0, 0x0, 0x80}, 0x8084) (async) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, r2, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1608}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x43}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0xc, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x0]}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x4) 23:12:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x100, 0x57}}}}}, 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x18000080}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_TX={0x5}]}, 0x1c}}, 0x20020000) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x14c, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x2}}}}, [@NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_CQM={0x70, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x15b}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x80000000}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}, @NL80211_ATTR_CQM_RSSI_THOLD={0x28, 0x1, [0x4, 0xae5, 0x7ff, 0x7, 0x7, 0xfff, 0x401e6a77, 0x5, 0x3]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7fff}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x7fff, 0x8]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x56}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x639}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3f}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x101}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x561}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x266}]}, @NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5fc}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x668}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x67}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xcd}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x15}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xeab7}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x289}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xe1a}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x37}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4050}, 0x1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000080)}, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="040026bd7000ffdbdf258800000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900030000005900006b2583824884000a0006000802110000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x40080) syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) [ 496.234049][T10880] FAULT_INJECTION: forcing a failure. [ 496.234049][T10880] name failslab, interval 1, probability 0, space 0, times 0 [ 496.279327][T10880] CPU: 1 PID: 10880 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 496.289404][T10880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 496.299302][T10880] Call Trace: [ 496.302426][T10880] [ 496.305200][T10880] dump_stack_lvl+0x151/0x1b7 [ 496.309725][T10880] ? bfq_pos_tree_add_move+0x43e/0x43e [ 496.317006][T10880] dump_stack+0x15/0x17 [ 496.320997][T10880] should_fail+0x3c0/0x510 [ 496.325248][T10880] __should_failslab+0x9f/0xe0 [ 496.329943][T10880] should_failslab+0x9/0x20 [ 496.334298][T10880] kmem_cache_alloc+0x4f/0x2f0 [ 496.338881][T10880] ? vm_area_dup+0x26/0x1d0 [ 496.343232][T10880] vm_area_dup+0x26/0x1d0 [ 496.348872][T10880] dup_mmap+0x6b8/0xea0 [ 496.352858][T10880] ? __delayed_free_task+0x20/0x20 [ 496.357808][T10880] ? mm_init+0x807/0x960 [ 496.361881][T10880] dup_mm+0x91/0x330 [ 496.365615][T10880] copy_mm+0x108/0x1b0 [ 496.369517][T10880] copy_process+0x1295/0x3250 [ 496.374211][T10880] ? check_stack_object+0xf7/0x130 [ 496.379334][T10880] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 496.384275][T10880] ? copy_clone_args_from_user+0x6cf/0x790 [ 496.390012][T10880] kernel_clone+0x22d/0x990 [ 496.394355][T10880] ? dup_mmap+0xea0/0xea0 [ 496.398520][T10880] ? create_io_thread+0x1e0/0x1e0 [ 496.403380][T10880] ? file_end_write+0x1b0/0x1b0 [ 496.408061][T10880] __x64_sys_clone3+0x375/0x3a0 [ 496.412837][T10880] ? __ia32_sys_clone+0x300/0x300 [ 496.417705][T10880] ? ksys_write+0x25f/0x2c0 [ 496.422076][T10880] ? debug_smp_processor_id+0x17/0x20 [ 496.427241][T10880] do_syscall_64+0x44/0xd0 [ 496.431845][T10880] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 496.437941][T10880] RIP: 0033:0x7feb5e60c0c9 [ 496.442523][T10880] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 496.462230][T10880] RSP: 002b:00007feb5d37f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 496.470466][T10880] RAX: ffffffffffffffda RBX: 00007feb5e72bf80 RCX: 00007feb5e60c0c9 [ 496.478365][T10880] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007feb5d37f050 [ 496.486187][T10880] RBP: 00007feb5d37f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 496.494163][T10880] R10: 00007feb5d37f050 R11: 0000000000000246 R12: 0000000000000058 [ 496.502235][T10880] R13: 00007ffc843a962f R14: 00007feb5d37f300 R15: 0000000000022000 [ 496.510134][T10880] 23:12:38 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$clear(0x7, r0) keyctl$get_persistent(0x16, 0x0, r0) (async) syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:12:38 executing program 5: add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_clone3(&(0x7f0000000540)={0xa4080000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:12:38 executing program 3: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"e83e091f18d18ee81f9a164ca9823d0b", 0x0, 0x0, {0x10000, 0x4673}, {0x8, 0x6}, 0x0, [0x8, 0x1, 0x8000000000000001, 0xe1, 0x1, 0x7, 0xfffffffffffffffd, 0x10001, 0xff, 0x0, 0x7, 0x7ff, 0x3b5, 0xffffffffffff8001, 0x2, 0x6]}) syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:12:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x100, 0x57}}}}}, 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x18000080}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_TX={0x5}]}, 0x1c}}, 0x20020000) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x14c, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x2}}}}, [@NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_CQM={0x70, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x15b}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x80000000}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}, @NL80211_ATTR_CQM_RSSI_THOLD={0x28, 0x1, [0x4, 0xae5, 0x7ff, 0x7, 0x7, 0xfff, 0x401e6a77, 0x5, 0x3]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7fff}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x7fff, 0x8]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x56}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x639}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3f}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x101}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x561}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x266}]}, @NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5fc}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x668}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x67}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xcd}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x15}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xeab7}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x289}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xe1a}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x37}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4050}, 0x1) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000080)}, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="040026bd7000ffdbdf258800000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900030000005900006b2583824884000a0006000802110000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x40080) (async) syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) 23:12:38 executing program 1: socket(0x2c, 0x0, 0x1) 23:12:38 executing program 2: syz_clone3(&(0x7f0000000b40)={0x1000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 57) 23:12:38 executing program 3: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"e83e091f18d18ee81f9a164ca9823d0b", 0x0, 0x0, {0x10000, 0x4673}, {0x8, 0x6}, 0x0, [0x8, 0x1, 0x8000000000000001, 0xe1, 0x1, 0x7, 0xfffffffffffffffd, 0x10001, 0xff, 0x0, 0x7, 0x7ff, 0x3b5, 0xffffffffffff8001, 0x2, 0x6]}) syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"e83e091f18d18ee81f9a164ca9823d0b", 0x0, 0x0, {0x10000, 0x4673}, {0x8, 0x6}, 0x0, [0x8, 0x1, 0x8000000000000001, 0xe1, 0x1, 0x7, 0xfffffffffffffffd, 0x10001, 0xff, 0x0, 0x7, 0x7ff, 0x3b5, 0xffffffffffff8001, 0x2, 0x6]}) (async) syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) 23:12:38 executing program 1: socket(0x2c, 0x0, 0x1) socket(0x2c, 0x0, 0x1) (async) 23:12:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x100, 0x57}}}}}, 0x28}}, 0x0) (async) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x18000080}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_TX={0x5}]}, 0x1c}}, 0x20020000) (async) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x14c, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x2}}}}, [@NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_CQM={0x70, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x15b}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x80000000}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}, @NL80211_ATTR_CQM_RSSI_THOLD={0x28, 0x1, [0x4, 0xae5, 0x7ff, 0x7, 0x7, 0xfff, 0x401e6a77, 0x5, 0x3]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7fff}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x7fff, 0x8]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x56}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x639}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3f}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x101}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x561}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x266}]}, @NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5fc}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x668}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x67}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xcd}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x15}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xeab7}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x289}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xe1a}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x37}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4050}, 0x1) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000080)}, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="040026bd7000ffdbdf258800000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900030000005900006b2583824884000a0006000802110000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x40080) (async) syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) 23:12:39 executing program 0: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {0x2a}, &(0x7f0000000780), 0x0, 0x0, 0x0}, 0x58) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) 23:12:39 executing program 5: add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_clone3(&(0x7f0000000540)={0xa4080000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:12:39 executing program 4: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000400)={0x4, 0x7fff, 0x4, 0x2, 0x15, "a513afd34b7d00e0"}) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x1d, 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="1859000000000009000000000800800088e6e9b12560ef91b75a72cd9bb845f60418749d54fd12e8069c18b0c55667d3788627d4c8512674ea17888d9cc9633c7fac9fefcaa54ddee53a36e4a61b8d02432f8d04fa893db2f5da07142424dc6d7a65bdfcd986270e7c7d244639e475813bef657320db9b3e2cab56d96e55584e84c75426495863f5f5e7d225b9e2b074601758daa0cf54213df8d170da8f33"], &(0x7f0000000040)='GPL\x00', 0x8001, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x7, 0x5}, 0x8, 0x10, &(0x7f00000000c0)={0x2, 0x2, 0x2, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000100)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, 0x0) ioctl$HIDIOCGRDESCSIZE(r1, 0x80044801, &(0x7f00000003c0)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)) syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:12:39 executing program 1: socket(0x2c, 0x0, 0x1) [ 496.684511][T10941] FAULT_INJECTION: forcing a failure. [ 496.684511][T10941] name failslab, interval 1, probability 0, space 0, times 0 [ 496.711216][T10941] CPU: 1 PID: 10941 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 496.721652][T10941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 496.731547][T10941] Call Trace: 23:12:39 executing program 3: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"e83e091f18d18ee81f9a164ca9823d0b", 0x0, 0x0, {0x10000, 0x4673}, {0x8, 0x6}, 0x0, [0x8, 0x1, 0x8000000000000001, 0xe1, 0x1, 0x7, 0xfffffffffffffffd, 0x10001, 0xff, 0x0, 0x7, 0x7ff, 0x3b5, 0xffffffffffff8001, 0x2, 0x6]}) (async, rerun: 64) syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (rerun: 64) [ 496.734775][T10941] [ 496.737718][T10941] dump_stack_lvl+0x151/0x1b7 [ 496.742221][T10941] ? bfq_pos_tree_add_move+0x43e/0x43e [ 496.747601][T10941] dump_stack+0x15/0x17 [ 496.751593][T10941] should_fail+0x3c0/0x510 [ 496.755947][T10941] __should_failslab+0x9f/0xe0 [ 496.760625][T10941] should_failslab+0x9/0x20 [ 496.764960][T10941] kmem_cache_alloc+0x4f/0x2f0 [ 496.769557][T10941] ? vm_area_dup+0x26/0x1d0 [ 496.774000][T10941] vm_area_dup+0x26/0x1d0 [ 496.778240][T10941] dup_mmap+0x6b8/0xea0 [ 496.782234][T10941] ? __delayed_free_task+0x20/0x20 [ 496.787264][T10941] ? mm_init+0x807/0x960 [ 496.791354][T10941] dup_mm+0x91/0x330 [ 496.795108][T10941] copy_mm+0x108/0x1b0 [ 496.798990][T10941] copy_process+0x1295/0x3250 [ 496.803499][T10941] ? check_stack_object+0xf7/0x130 [ 496.808544][T10941] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 496.813757][T10941] ? copy_clone_args_from_user+0x6cf/0x790 [ 496.819390][T10941] kernel_clone+0x22d/0x990 [ 496.823725][T10941] ? dup_mmap+0xea0/0xea0 [ 496.827894][T10941] ? create_io_thread+0x1e0/0x1e0 [ 496.832927][T10941] ? file_end_write+0x1b0/0x1b0 [ 496.837702][T10941] __x64_sys_clone3+0x375/0x3a0 [ 496.842474][T10941] ? __ia32_sys_clone+0x300/0x300 [ 496.847423][T10941] ? ksys_write+0x25f/0x2c0 [ 496.851851][T10941] ? debug_smp_processor_id+0x17/0x20 [ 496.857141][T10941] do_syscall_64+0x44/0xd0 [ 496.860657][T10963] cgroup: fork rejected by pids controller in [ 496.862172][T10941] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 496.862200][T10941] RIP: 0033:0x7feb5e60c0c9 [ 496.875054][T10963] /syz3 [ 496.878229][T10941] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 496.882861][T10963] [ 496.900362][T10941] RSP: 002b:00007feb5d37f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 496.900389][T10941] RAX: ffffffffffffffda RBX: 00007feb5e72bf80 RCX: 00007feb5e60c0c9 [ 496.900402][T10941] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007feb5d37f050 [ 496.900412][T10941] RBP: 00007feb5d37f1d0 R08: 0000000000000000 R09: 0000000000000058 23:12:39 executing program 0: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {0x2a}, &(0x7f0000000780), 0x0, 0x0, 0x0}, 0x58) (async) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) 23:12:39 executing program 4: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000400)={0x4, 0x7fff, 0x4, 0x2, 0x15, "a513afd34b7d00e0"}) (async) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x1d, 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="1859000000000009000000000800800088e6e9b12560ef91b75a72cd9bb845f60418749d54fd12e8069c18b0c55667d3788627d4c8512674ea17888d9cc9633c7fac9fefcaa54ddee53a36e4a61b8d02432f8d04fa893db2f5da07142424dc6d7a65bdfcd986270e7c7d244639e475813bef657320db9b3e2cab56d96e55584e84c75426495863f5f5e7d225b9e2b074601758daa0cf54213df8d170da8f33"], &(0x7f0000000040)='GPL\x00', 0x8001, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x7, 0x5}, 0x8, 0x10, &(0x7f00000000c0)={0x2, 0x2, 0x2, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000100)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, 0x0) (async) ioctl$HIDIOCGRDESCSIZE(r1, 0x80044801, &(0x7f00000003c0)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)) (async) syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:12:39 executing program 5: add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_clone3(&(0x7f0000000540)={0xa4080000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0], 0x3}, 0x58) [ 496.900423][T10941] R10: 00007feb5d37f050 R11: 0000000000000246 R12: 0000000000000058 [ 496.900434][T10941] R13: 00007ffc843a962f R14: 00007feb5d37f300 R15: 0000000000022000 [ 496.900447][T10941] 23:12:39 executing program 2: syz_clone3(&(0x7f0000000b40)={0x1000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 58) 23:12:39 executing program 0: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {0x2a}, &(0x7f0000000780), 0x0, 0x0, 0x0}, 0x58) (async) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) 23:12:39 executing program 5: add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_clone3(&(0x7f0000000540)={0xa4080000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0x0, 0x0], 0x2}, 0x58) 23:12:39 executing program 1: r0 = socket(0x2c, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x4040040) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0xa4, r5, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3ff, 0x6f}}}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xfffffffc}]}, @NL80211_ATTR_CQM={0x30, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x170}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2f6}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x0, 0xffff, 0x80000000, 0x3, 0x1f, 0xff]}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x40}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x52f}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x46}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000041}, 0x8000) 23:12:39 executing program 4: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000400)={0x4, 0x7fff, 0x4, 0x2, 0x15, "a513afd34b7d00e0"}) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x1d, 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="1859000000000009000000000800800088e6e9b12560ef91b75a72cd9bb845f60418749d54fd12e8069c18b0c55667d3788627d4c8512674ea17888d9cc9633c7fac9fefcaa54ddee53a36e4a61b8d02432f8d04fa893db2f5da07142424dc6d7a65bdfcd986270e7c7d244639e475813bef657320db9b3e2cab56d96e55584e84c75426495863f5f5e7d225b9e2b074601758daa0cf54213df8d170da8f33"], &(0x7f0000000040)='GPL\x00', 0x8001, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x7, 0x5}, 0x8, 0x10, &(0x7f00000000c0)={0x2, 0x2, 0x2, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000100)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, 0x0) ioctl$HIDIOCGRDESCSIZE(r1, 0x80044801, &(0x7f00000003c0)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)) syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000400)={0x4, 0x7fff, 0x4, 0x2, 0x15, "a513afd34b7d00e0"}) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x1d, 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="1859000000000009000000000800800088e6e9b12560ef91b75a72cd9bb845f60418749d54fd12e8069c18b0c55667d3788627d4c8512674ea17888d9cc9633c7fac9fefcaa54ddee53a36e4a61b8d02432f8d04fa893db2f5da07142424dc6d7a65bdfcd986270e7c7d244639e475813bef657320db9b3e2cab56d96e55584e84c75426495863f5f5e7d225b9e2b074601758daa0cf54213df8d170da8f33"], &(0x7f0000000040)='GPL\x00', 0x8001, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x7, 0x5}, 0x8, 0x10, &(0x7f00000000c0)={0x2, 0x2, 0x2, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000100)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, 0x0) (async) ioctl$HIDIOCGRDESCSIZE(r1, 0x80044801, &(0x7f00000003c0)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)) (async) syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) 23:12:39 executing program 1: r0 = socket(0x2c, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x4040040) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0xa4, r5, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3ff, 0x6f}}}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xfffffffc}]}, @NL80211_ATTR_CQM={0x30, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x170}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2f6}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x0, 0xffff, 0x80000000, 0x3, 0x1f, 0xff]}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x40}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x52f}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x46}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000041}, 0x8000) socket(0x2c, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) sendmsg$NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x4040040) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0xa4, r5, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3ff, 0x6f}}}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xfffffffc}]}, @NL80211_ATTR_CQM={0x30, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x170}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2f6}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x0, 0xffff, 0x80000000, 0x3, 0x1f, 0xff]}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x40}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x52f}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x46}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000041}, 0x8000) (async) 23:12:39 executing program 0: syz_clone3(&(0x7f0000000b40)={0x200043200, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/4, 0x0, 0x0, 0x0, 0x17}, 0x58) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000340)={&(0x7f0000000100)="b8d38a378488a44c91bf9eb4ffd0d25f1df9e2a3e7ac27946bd41cef014bdb882c39936479a55d88c45fa8611a5351404e040cab5de85b702384047bb45f582d9b85b953980a1dd7", &(0x7f0000000180)=""/111, &(0x7f0000000200)="660ee2ec088b8793d1158adec3814897b7e0bca216cf647b5380e21b4b6b607b92227ec32345074125d52465f7967eefcca6cb8e234b89a210a7187893ab7842d6d34b45778872599182d8e13f8f7891e1d5cfd86ce63b5c56e930ed123757cf9b0d63fcf2601aed6016e39bd0e1ea155386b29ad400b0e8b72d99fcfd0001fecf3394baee198b407a6631eaff", &(0x7f00000002c0)="7d736278ad3ba4c66300c63419a3052013f2519fd68dec8b3da343311472528edc8ac0503a1e333cb90ca81a155e2b4d671a628a2f4abae37fd57a74f23786bb1ce0b7", 0x4ff8, r1}, 0x38) mkdirat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x1ff) openat$cgroup_subtree(r0, &(0x7f0000000080), 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/spi', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@cgroup=r0, r2, 0x25}, 0x10) 23:12:39 executing program 4: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000000), 0x2, 0x0) [ 497.177639][T11050] FAULT_INJECTION: forcing a failure. [ 497.177639][T11050] name failslab, interval 1, probability 0, space 0, times 0 [ 497.225927][T11050] CPU: 1 PID: 11050 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 497.236005][T11050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 497.245903][T11050] Call Trace: [ 497.249025][T11050] [ 497.251804][T11050] dump_stack_lvl+0x151/0x1b7 [ 497.256317][T11050] ? bfq_pos_tree_add_move+0x43e/0x43e [ 497.261702][T11050] dump_stack+0x15/0x17 [ 497.265700][T11050] should_fail+0x3c0/0x510 [ 497.269943][T11050] __should_failslab+0x9f/0xe0 [ 497.274543][T11050] should_failslab+0x9/0x20 [ 497.278880][T11050] kmem_cache_alloc+0x4f/0x2f0 [ 497.283480][T11050] ? vm_area_dup+0x26/0x1d0 [ 497.287824][T11050] vm_area_dup+0x26/0x1d0 [ 497.291986][T11050] dup_mmap+0x6b8/0xea0 [ 497.295984][T11050] ? __delayed_free_task+0x20/0x20 [ 497.300925][T11050] ? mm_init+0x807/0x960 [ 497.305007][T11050] dup_mm+0x91/0x330 [ 497.308749][T11050] copy_mm+0x108/0x1b0 [ 497.312643][T11050] copy_process+0x1295/0x3250 [ 497.317158][T11050] ? check_stack_object+0xf7/0x130 [ 497.322142][T11050] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 497.327050][T11050] ? copy_clone_args_from_user+0x6cf/0x790 [ 497.332821][T11050] kernel_clone+0x22d/0x990 [ 497.337156][T11050] ? dup_mmap+0xea0/0xea0 [ 497.341323][T11050] ? create_io_thread+0x1e0/0x1e0 [ 497.346269][T11050] ? file_end_write+0x1b0/0x1b0 [ 497.350956][T11050] __x64_sys_clone3+0x375/0x3a0 [ 497.355642][T11050] ? __ia32_sys_clone+0x300/0x300 [ 497.360504][T11050] ? ksys_write+0x25f/0x2c0 [ 497.364844][T11050] ? debug_smp_processor_id+0x17/0x20 [ 497.370052][T11050] do_syscall_64+0x44/0xd0 [ 497.374302][T11050] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 497.380031][T11050] RIP: 0033:0x7feb5e60c0c9 [ 497.384284][T11050] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 497.403732][T11050] RSP: 002b:00007feb5d37f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 497.411973][T11050] RAX: ffffffffffffffda RBX: 00007feb5e72bf80 RCX: 00007feb5e60c0c9 23:12:39 executing program 3: syz_clone3(&(0x7f0000000b40)={0x620a8000, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0}, 0x58) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) 23:12:39 executing program 0: syz_clone3(&(0x7f0000000b40)={0x200043200, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/4, 0x0, 0x0, 0x0, 0x17}, 0x58) (async) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, 0x0) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000340)={&(0x7f0000000100)="b8d38a378488a44c91bf9eb4ffd0d25f1df9e2a3e7ac27946bd41cef014bdb882c39936479a55d88c45fa8611a5351404e040cab5de85b702384047bb45f582d9b85b953980a1dd7", &(0x7f0000000180)=""/111, &(0x7f0000000200)="660ee2ec088b8793d1158adec3814897b7e0bca216cf647b5380e21b4b6b607b92227ec32345074125d52465f7967eefcca6cb8e234b89a210a7187893ab7842d6d34b45778872599182d8e13f8f7891e1d5cfd86ce63b5c56e930ed123757cf9b0d63fcf2601aed6016e39bd0e1ea155386b29ad400b0e8b72d99fcfd0001fecf3394baee198b407a6631eaff", &(0x7f00000002c0)="7d736278ad3ba4c66300c63419a3052013f2519fd68dec8b3da343311472528edc8ac0503a1e333cb90ca81a155e2b4d671a628a2f4abae37fd57a74f23786bb1ce0b7", 0x4ff8, r1}, 0x38) mkdirat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x1ff) openat$cgroup_subtree(r0, &(0x7f0000000080), 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/spi', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@cgroup=r0, r2, 0x25}, 0x10) 23:12:39 executing program 4: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) (async) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000000), 0x2, 0x0) 23:12:39 executing program 1: r0 = socket(0x2c, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x4040040) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0xa4, r5, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3ff, 0x6f}}}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xfffffffc}]}, @NL80211_ATTR_CQM={0x30, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x170}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2f6}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x0, 0xffff, 0x80000000, 0x3, 0x1f, 0xff]}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x40}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x52f}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x46}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000041}, 0x8000) socket(0x2c, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) sendmsg$NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x4040040) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0xa4, r5, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3ff, 0x6f}}}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xfffffffc}]}, @NL80211_ATTR_CQM={0x30, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x170}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2f6}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x0, 0xffff, 0x80000000, 0x3, 0x1f, 0xff]}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x40}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x52f}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x46}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000041}, 0x8000) (async) [ 497.419782][T11050] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007feb5d37f050 [ 497.427688][T11050] RBP: 00007feb5d37f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 497.435491][T11050] R10: 00007feb5d37f050 R11: 0000000000000246 R12: 0000000000000058 [ 497.443303][T11050] R13: 00007ffc843a962f R14: 00007feb5d37f300 R15: 0000000000022000 [ 497.451116][T11050] 23:12:39 executing program 0: syz_clone3(&(0x7f0000000b40)={0x200043200, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/4, 0x0, 0x0, 0x0, 0x17}, 0x58) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000340)={&(0x7f0000000100)="b8d38a378488a44c91bf9eb4ffd0d25f1df9e2a3e7ac27946bd41cef014bdb882c39936479a55d88c45fa8611a5351404e040cab5de85b702384047bb45f582d9b85b953980a1dd7", &(0x7f0000000180)=""/111, &(0x7f0000000200)="660ee2ec088b8793d1158adec3814897b7e0bca216cf647b5380e21b4b6b607b92227ec32345074125d52465f7967eefcca6cb8e234b89a210a7187893ab7842d6d34b45778872599182d8e13f8f7891e1d5cfd86ce63b5c56e930ed123757cf9b0d63fcf2601aed6016e39bd0e1ea155386b29ad400b0e8b72d99fcfd0001fecf3394baee198b407a6631eaff", &(0x7f00000002c0)="7d736278ad3ba4c66300c63419a3052013f2519fd68dec8b3da343311472528edc8ac0503a1e333cb90ca81a155e2b4d671a628a2f4abae37fd57a74f23786bb1ce0b7", 0x4ff8, r1}, 0x38) mkdirat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x1ff) openat$cgroup_subtree(r0, &(0x7f0000000080), 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/spi', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@cgroup=r0, r2, 0x25}, 0x10) syz_clone3(&(0x7f0000000b40)={0x200043200, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/4, 0x0, 0x0, 0x0, 0x17}, 0x58) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, 0x0) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000340)={&(0x7f0000000100)="b8d38a378488a44c91bf9eb4ffd0d25f1df9e2a3e7ac27946bd41cef014bdb882c39936479a55d88c45fa8611a5351404e040cab5de85b702384047bb45f582d9b85b953980a1dd7", &(0x7f0000000180)=""/111, &(0x7f0000000200)="660ee2ec088b8793d1158adec3814897b7e0bca216cf647b5380e21b4b6b607b92227ec32345074125d52465f7967eefcca6cb8e234b89a210a7187893ab7842d6d34b45778872599182d8e13f8f7891e1d5cfd86ce63b5c56e930ed123757cf9b0d63fcf2601aed6016e39bd0e1ea155386b29ad400b0e8b72d99fcfd0001fecf3394baee198b407a6631eaff", &(0x7f00000002c0)="7d736278ad3ba4c66300c63419a3052013f2519fd68dec8b3da343311472528edc8ac0503a1e333cb90ca81a155e2b4d671a628a2f4abae37fd57a74f23786bb1ce0b7", 0x4ff8, r1}, 0x38) (async) mkdirat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x1ff) (async) openat$cgroup_subtree(r0, &(0x7f0000000080), 0x2, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/spi', 0x0, 0x0) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@cgroup=r0, r2, 0x25}, 0x10) (async) 23:12:39 executing program 5: add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_clone3(&(0x7f0000000540)={0xa4080000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0x0], 0x1}, 0x58) 23:12:39 executing program 1: r0 = socket(0x2c, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0x1, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000007c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="ec010000", @ANYRES16=r1, @ANYBLOB="200028bd7000fedbdf250f000000600001801400020076657468315f766c616e0000000000001400020073797a6b616c6c657231000000000000080003000300000008000300070000001400020076657468305f746f5f68737200000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="3400018008000100", @ANYRES32=0x0, @ANYBLOB="1400020070696d36726567000000000000000000140002006d6163766c616e3100000000000000003400018008000100", @ANYRES32=0x0, @ANYBLOB="1400020065727370616e300000000000000000001400020076657468315f766972745f77696669001400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="64000180140002006e65747063693000000000000000000008000300010000001400020076657468315f766972745f77696669000800030000000000080003000000000008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=r3, @ANYBLOB="740001801400020076657468315f746f5f6873720000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300000000001400020076657468305f766c616e00000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020064766d7270300000000000000000000014000200766972745f776966693000000000000008000100", @ANYRES32=r4, @ANYBLOB="2400018008000100", @ANYRES32=r5, @ANYBLOB="08000300010f000008000300000000000800030002000000cfafd63b9135ca1c8dbf2577df2598604ac00a2abace5638052e059ca05dee68fee29cecedc7c206d47ea02918001a0e0d60c42f6164748572eb606d7ff2d0a0bee69aa71be1a9dcc80ba8c4fca4b0e07cc5eb49b1108f64b6e48529c96af8b8211021cf4509b5274c6d3557be07e8ac8c17c9023b5e4fc32ad936fe31d92e2ab068d2b738983e08e508b90a15f16031cba1ad25a550a9adf78a74abdf3c22dc88a1dbbdac3b3c8b4f29"], 0x1ec}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 23:12:39 executing program 4: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) (async) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000000), 0x2, 0x0) 23:12:39 executing program 2: syz_clone3(&(0x7f0000000b40)={0x1000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 59) 23:12:39 executing program 1: r0 = socket(0x2c, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0x1, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000007c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="ec010000", @ANYRES16=r1, @ANYBLOB="200028bd7000fedbdf250f000000600001801400020076657468315f766c616e0000000000001400020073797a6b616c6c657231000000000000080003000300000008000300070000001400020076657468305f746f5f68737200000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="3400018008000100", @ANYRES32=0x0, @ANYBLOB="1400020070696d36726567000000000000000000140002006d6163766c616e3100000000000000003400018008000100", @ANYRES32=0x0, @ANYBLOB="1400020065727370616e300000000000000000001400020076657468315f766972745f77696669001400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="64000180140002006e65747063693000000000000000000008000300010000001400020076657468315f766972745f77696669000800030000000000080003000000000008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=r3, @ANYBLOB="740001801400020076657468315f746f5f6873720000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300000000001400020076657468305f766c616e00000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020064766d7270300000000000000000000014000200766972745f776966693000000000000008000100", @ANYRES32=r4, @ANYBLOB="2400018008000100", @ANYRES32=r5, @ANYBLOB="08000300010f000008000300000000000800030002000000cfafd63b9135ca1c8dbf2577df2598604ac00a2abace5638052e059ca05dee68fee29cecedc7c206d47ea02918001a0e0d60c42f6164748572eb606d7ff2d0a0bee69aa71be1a9dcc80ba8c4fca4b0e07cc5eb49b1108f64b6e48529c96af8b8211021cf4509b5274c6d3557be07e8ac8c17c9023b5e4fc32ad936fe31d92e2ab068d2b738983e08e508b90a15f16031cba1ad25a550a9adf78a74abdf3c22dc88a1dbbdac3b3c8b4f29"], 0x1ec}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 23:12:39 executing program 3: syz_clone3(&(0x7f0000000b40)={0x620a8000, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0}, 0x58) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x1ff) (async) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) 23:12:39 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x397042, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040), 0x2, 0x0) syz_clone3(&(0x7f0000000b40)={0x27b83c00, 0x0, 0x0, 0x0, {0xd}, &(0x7f0000000780), 0x0, 0x0, 0x0}, 0x58) 23:12:39 executing program 3: syz_clone3(&(0x7f0000000b40)={0x620a8000, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0}, 0x58) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) syz_clone3(&(0x7f0000000b40)={0x620a8000, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x1ff) (async) openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) (async) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) (async) 23:12:39 executing program 1: r0 = socket(0x2c, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0x1, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000007c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="ec010000", @ANYRES16=r1, @ANYBLOB="200028bd7000fedbdf250f000000600001801400020076657468315f766c616e0000000000001400020073797a6b616c6c657231000000000000080003000300000008000300070000001400020076657468305f746f5f68737200000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="3400018008000100", @ANYRES32=0x0, @ANYBLOB="1400020070696d36726567000000000000000000140002006d6163766c616e3100000000000000003400018008000100", @ANYRES32=0x0, @ANYBLOB="1400020065727370616e300000000000000000001400020076657468315f766972745f77696669001400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="64000180140002006e65747063693000000000000000000008000300010000001400020076657468315f766972745f77696669000800030000000000080003000000000008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=r3, @ANYBLOB="740001801400020076657468315f746f5f6873720000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300000000001400020076657468305f766c616e00000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020064766d7270300000000000000000000014000200766972745f776966693000000000000008000100", @ANYRES32=r4, @ANYBLOB="2400018008000100", @ANYRES32=r5, @ANYBLOB="08000300010f000008000300000000000800030002000000cfafd63b9135ca1c8dbf2577df2598604ac00a2abace5638052e059ca05dee68fee29cecedc7c206d47ea02918001a0e0d60c42f6164748572eb606d7ff2d0a0bee69aa71be1a9dcc80ba8c4fca4b0e07cc5eb49b1108f64b6e48529c96af8b8211021cf4509b5274c6d3557be07e8ac8c17c9023b5e4fc32ad936fe31d92e2ab068d2b738983e08e508b90a15f16031cba1ad25a550a9adf78a74abdf3c22dc88a1dbbdac3b3c8b4f29"], 0x1ec}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 23:12:39 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000000080)={0x0, 0x1bad, 0x7fff, &(0x7f0000000040)=0x85}) syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:12:39 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x397042, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040), 0x2, 0x0) syz_clone3(&(0x7f0000000b40)={0x27b83c00, 0x0, 0x0, 0x0, {0xd}, &(0x7f0000000780), 0x0, 0x0, 0x0}, 0x58) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x397042, 0x0) (async) openat$cgroup_subtree(r0, &(0x7f0000000040), 0x2, 0x0) (async) syz_clone3(&(0x7f0000000b40)={0x27b83c00, 0x0, 0x0, 0x0, {0xd}, &(0x7f0000000780), 0x0, 0x0, 0x0}, 0x58) (async) [ 497.560174][T11145] FAULT_INJECTION: forcing a failure. [ 497.560174][T11145] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 497.623559][T11145] CPU: 0 PID: 11145 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 497.633637][T11145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 497.643530][T11145] Call Trace: [ 497.646665][T11145] [ 497.649432][T11145] dump_stack_lvl+0x151/0x1b7 [ 497.653946][T11145] ? bfq_pos_tree_add_move+0x43e/0x43e [ 497.659242][T11145] dump_stack+0x15/0x17 [ 497.663320][T11145] should_fail+0x3c0/0x510 [ 497.667593][T11145] should_fail_alloc_page+0x58/0x70 [ 497.672606][T11145] __alloc_pages+0x1de/0x7c0 [ 497.677031][T11145] ? __count_vm_events+0x30/0x30 [ 497.681804][T11145] ? __this_cpu_preempt_check+0x13/0x20 [ 497.687193][T11145] ? __mod_node_page_state+0xac/0xf0 [ 497.692304][T11145] pte_alloc_one+0x73/0x1b0 [ 497.696644][T11145] ? pfn_modify_allowed+0x2e0/0x2e0 [ 497.701685][T11145] __pte_alloc+0x86/0x350 [ 497.706636][T11145] ? free_pgtables+0x210/0x210 [ 497.711243][T11145] ? _raw_spin_lock+0xa3/0x1b0 [ 497.715843][T11145] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 497.721029][T11145] ? __kernel_text_address+0x9a/0x110 [ 497.726247][T11145] copy_pte_range+0x1b1f/0x20b0 [ 497.730937][T11145] ? __kunmap_atomic+0x80/0x80 [ 497.735529][T11145] ? __kasan_slab_alloc+0xc4/0xe0 [ 497.740386][T11145] ? __kasan_slab_alloc+0xb2/0xe0 [ 497.745248][T11145] ? kmem_cache_alloc+0x189/0x2f0 [ 497.750106][T11145] ? vm_area_dup+0x26/0x1d0 [ 497.754443][T11145] ? dup_mmap+0x6b8/0xea0 [ 497.758608][T11145] ? dup_mm+0x91/0x330 [ 497.762792][T11145] ? copy_mm+0x108/0x1b0 [ 497.766869][T11145] ? copy_process+0x1295/0x3250 [ 497.771631][T11145] ? kernel_clone+0x22d/0x990 [ 497.776144][T11145] ? __x64_sys_clone3+0x375/0x3a0 [ 497.781008][T11145] ? do_syscall_64+0x44/0xd0 [ 497.785432][T11145] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 497.794985][T11145] copy_page_range+0xc1e/0x1090 [ 497.799770][T11145] ? pfn_valid+0x1e0/0x1e0 [ 497.804094][T11145] dup_mmap+0x99f/0xea0 [ 497.808096][T11145] ? __delayed_free_task+0x20/0x20 [ 497.813117][T11145] ? mm_init+0x807/0x960 [ 497.817202][T11145] dup_mm+0x91/0x330 [ 497.821018][T11145] copy_mm+0x108/0x1b0 [ 497.824932][T11145] copy_process+0x1295/0x3250 [ 497.830220][T11145] ? check_stack_object+0xf7/0x130 [ 497.835164][T11145] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 497.840110][T11145] ? copy_clone_args_from_user+0x6cf/0x790 [ 497.845780][T11145] kernel_clone+0x22d/0x990 [ 497.850089][T11145] ? dup_mmap+0xea0/0xea0 [ 497.854259][T11145] ? create_io_thread+0x1e0/0x1e0 [ 497.859125][T11145] ? file_end_write+0x1b0/0x1b0 [ 497.863825][T11145] __x64_sys_clone3+0x375/0x3a0 [ 497.868496][T11145] ? __ia32_sys_clone+0x300/0x300 [ 497.873446][T11145] ? ksys_write+0x25f/0x2c0 [ 497.877781][T11145] ? debug_smp_processor_id+0x17/0x20 [ 497.882989][T11145] do_syscall_64+0x44/0xd0 [ 497.887251][T11145] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 497.892983][T11145] RIP: 0033:0x7feb5e60c0c9 [ 497.897221][T11145] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 497.916748][T11145] RSP: 002b:00007feb5d37f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 23:12:40 executing program 2: syz_clone3(&(0x7f0000000b40)={0x1000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 60) 23:12:40 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x397042, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040), 0x2, 0x0) syz_clone3(&(0x7f0000000b40)={0x27b83c00, 0x0, 0x0, 0x0, {0xd}, &(0x7f0000000780), 0x0, 0x0, 0x0}, 0x58) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x397042, 0x0) (async) openat$cgroup_subtree(r0, &(0x7f0000000040), 0x2, 0x0) (async) syz_clone3(&(0x7f0000000b40)={0x27b83c00, 0x0, 0x0, 0x0, {0xd}, &(0x7f0000000780), 0x0, 0x0, 0x0}, 0x58) (async) 23:12:40 executing program 3: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x6000, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000040)="0cfd2a78eaa07a0012d92b25e00e5e2f63e3a70617cd34ae2953bfe33eeeafd9c50105a01b14106df86ed50d6a676a9f626dced5174c118ea895fb05185fb19dc68b586fd83343343ce7b4f5ada3389df035f9c711b134993b9a2557f209d7a4ba66362e6c87b2fe57b15b608791bccc7bd2255bb9def71b72c4469a843d728cb569b2d615518a3565d35873b6d28b9f8f1b16e215e1579191d451e773d7a69912f14b5b62f37919de67f90950dec61993f0c848ede1d2c69468a5fd65a95439357f50c04066", &(0x7f0000000140)=@tcp=r1}, 0x20) 23:12:40 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000000080)={0x0, 0x1bad, 0x7fff, &(0x7f0000000040)=0x85}) syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:12:40 executing program 1: ioperm(0x8, 0x0, 0x8) socket(0x2c, 0x0, 0x0) 23:12:40 executing program 5: add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_clone3(&(0x7f0000000540)={0xa4080000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000500)}, 0x58) 23:12:40 executing program 1: ioperm(0x8, 0x0, 0x8) socket(0x2c, 0x0, 0x0) 23:12:40 executing program 3: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async, rerun: 64) socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x6000, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, 0x0) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000040)="0cfd2a78eaa07a0012d92b25e00e5e2f63e3a70617cd34ae2953bfe33eeeafd9c50105a01b14106df86ed50d6a676a9f626dced5174c118ea895fb05185fb19dc68b586fd83343343ce7b4f5ada3389df035f9c711b134993b9a2557f209d7a4ba66362e6c87b2fe57b15b608791bccc7bd2255bb9def71b72c4469a843d728cb569b2d615518a3565d35873b6d28b9f8f1b16e215e1579191d451e773d7a69912f14b5b62f37919de67f90950dec61993f0c848ede1d2c69468a5fd65a95439357f50c04066", &(0x7f0000000140)=@tcp=r1}, 0x20) 23:12:40 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000000080)={0x0, 0x1bad, 0x7fff, &(0x7f0000000040)=0x85}) syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000000080)={0x0, 0x1bad, 0x7fff, &(0x7f0000000040)=0x85}) (async) syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) [ 497.924988][T11145] RAX: ffffffffffffffda RBX: 00007feb5e72bf80 RCX: 00007feb5e60c0c9 [ 497.932806][T11145] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007feb5d37f050 [ 497.940609][T11145] RBP: 00007feb5d37f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 497.948423][T11145] R10: 00007feb5d37f050 R11: 0000000000000246 R12: 0000000000000058 [ 497.956234][T11145] R13: 00007ffc843a962f R14: 00007feb5d37f300 R15: 0000000000022000 [ 497.964051][T11145] 23:12:40 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/cpuidle_haltpoll', 0x109c42, 0x8) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x81, 0x69}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x19a}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x77}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x11a}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x401}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x4048094) syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) 23:12:40 executing program 1: ioperm(0x8, 0x0, 0x8) socket(0x2c, 0x0, 0x0) ioperm(0x8, 0x0, 0x8) (async) socket(0x2c, 0x0, 0x0) (async) 23:12:40 executing program 5: add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_clone3(&(0x7f0000000540)={0xa4080000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000500)}, 0x58) [ 498.007803][T11175] FAULT_INJECTION: forcing a failure. [ 498.007803][T11175] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 498.045388][T11175] CPU: 1 PID: 11175 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 498.055467][T11175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 498.065361][T11175] Call Trace: [ 498.068484][T11175] [ 498.071264][T11175] dump_stack_lvl+0x151/0x1b7 [ 498.075782][T11175] ? bfq_pos_tree_add_move+0x43e/0x43e [ 498.081158][T11175] dump_stack+0x15/0x17 [ 498.085149][T11175] should_fail+0x3c0/0x510 [ 498.089405][T11175] should_fail_alloc_page+0x58/0x70 [ 498.094434][T11175] __alloc_pages+0x1de/0x7c0 [ 498.098863][T11175] ? __count_vm_events+0x30/0x30 [ 498.103635][T11175] ? __this_cpu_preempt_check+0x13/0x20 [ 498.109017][T11175] ? __mod_node_page_state+0xac/0xf0 [ 498.114152][T11175] pte_alloc_one+0x73/0x1b0 [ 498.118480][T11175] ? pfn_modify_allowed+0x2e0/0x2e0 [ 498.123531][T11175] __pte_alloc+0x86/0x350 [ 498.127681][T11175] ? free_pgtables+0x210/0x210 [ 498.132276][T11175] ? _raw_spin_lock+0xa3/0x1b0 [ 498.136879][T11175] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 498.142093][T11175] ? __kernel_text_address+0x9a/0x110 [ 498.147298][T11175] copy_pte_range+0x1b1f/0x20b0 [ 498.152770][T11175] ? __kunmap_atomic+0x80/0x80 [ 498.157366][T11175] ? __kasan_slab_alloc+0xc4/0xe0 [ 498.162218][T11175] ? __kasan_slab_alloc+0xb2/0xe0 [ 498.167170][T11175] ? kmem_cache_alloc+0x189/0x2f0 [ 498.172025][T11175] ? vm_area_dup+0x26/0x1d0 [ 498.176367][T11175] ? dup_mmap+0x6b8/0xea0 [ 498.180533][T11175] ? dup_mm+0x91/0x330 [ 498.184435][T11175] ? copy_mm+0x108/0x1b0 [ 498.188518][T11175] ? copy_process+0x1295/0x3250 [ 498.193203][T11175] ? kernel_clone+0x22d/0x990 [ 498.197723][T11175] ? __x64_sys_clone3+0x375/0x3a0 [ 498.202577][T11175] ? do_syscall_64+0x44/0xd0 [ 498.207002][T11175] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 498.212909][T11175] copy_page_range+0xc1e/0x1090 [ 498.217595][T11175] ? pfn_valid+0x1e0/0x1e0 [ 498.221936][T11175] dup_mmap+0x99f/0xea0 [ 498.225925][T11175] ? __delayed_free_task+0x20/0x20 [ 498.230895][T11175] ? mm_init+0x807/0x960 [ 498.234965][T11175] dup_mm+0x91/0x330 [ 498.238687][T11175] copy_mm+0x108/0x1b0 [ 498.242645][T11175] copy_process+0x1295/0x3250 [ 498.247276][T11175] ? check_stack_object+0xf7/0x130 [ 498.252220][T11175] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 498.257169][T11175] ? copy_clone_args_from_user+0x6cf/0x790 [ 498.262813][T11175] kernel_clone+0x22d/0x990 [ 498.267152][T11175] ? dup_mmap+0xea0/0xea0 [ 498.271316][T11175] ? create_io_thread+0x1e0/0x1e0 [ 498.276185][T11175] ? file_end_write+0x1b0/0x1b0 [ 498.280878][T11175] __x64_sys_clone3+0x375/0x3a0 [ 498.285552][T11175] ? __ia32_sys_clone+0x300/0x300 [ 498.290512][T11175] ? ksys_write+0x25f/0x2c0 [ 498.295107][T11175] ? debug_smp_processor_id+0x17/0x20 [ 498.300308][T11175] do_syscall_64+0x44/0xd0 [ 498.304559][T11175] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 498.310385][T11175] RIP: 0033:0x7feb5e60c0c9 [ 498.314634][T11175] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 498.334075][T11175] RSP: 002b:00007feb5d37f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 498.342316][T11175] RAX: ffffffffffffffda RBX: 00007feb5e72bf80 RCX: 00007feb5e60c0c9 [ 498.350126][T11175] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007feb5d37f050 23:12:40 executing program 2: syz_clone3(&(0x7f0000000b40)={0x1000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 61) 23:12:40 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/cpuidle_haltpoll', 0x109c42, 0x8) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x81, 0x69}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x19a}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x77}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x11a}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x401}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x4048094) (async) syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) 23:12:40 executing program 5: add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_clone3(&(0x7f0000000540)={0xa4080000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000500)}, 0x58) 23:12:40 executing program 1: socket(0x2c, 0x800, 0x4000000) 23:12:40 executing program 3: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x6000, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000040)="0cfd2a78eaa07a0012d92b25e00e5e2f63e3a70617cd34ae2953bfe33eeeafd9c50105a01b14106df86ed50d6a676a9f626dced5174c118ea895fb05185fb19dc68b586fd83343343ce7b4f5ada3389df035f9c711b134993b9a2557f209d7a4ba66362e6c87b2fe57b15b608791bccc7bd2255bb9def71b72c4469a843d728cb569b2d615518a3565d35873b6d28b9f8f1b16e215e1579191d451e773d7a69912f14b5b62f37919de67f90950dec61993f0c848ede1d2c69468a5fd65a95439357f50c04066", &(0x7f0000000140)=@tcp=r1}, 0x20) syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x6000, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, 0x0) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000040)="0cfd2a78eaa07a0012d92b25e00e5e2f63e3a70617cd34ae2953bfe33eeeafd9c50105a01b14106df86ed50d6a676a9f626dced5174c118ea895fb05185fb19dc68b586fd83343343ce7b4f5ada3389df035f9c711b134993b9a2557f209d7a4ba66362e6c87b2fe57b15b608791bccc7bd2255bb9def71b72c4469a843d728cb569b2d615518a3565d35873b6d28b9f8f1b16e215e1579191d451e773d7a69912f14b5b62f37919de67f90950dec61993f0c848ede1d2c69468a5fd65a95439357f50c04066", &(0x7f0000000140)=@tcp=r1}, 0x20) (async) 23:12:40 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x7, 0x1, 0x80000001, 0x200, r0, 0x4, '\x00', 0x0, r1, 0x4, 0x3}, 0x48) 23:12:40 executing program 1: socket(0x2c, 0x800, 0x4000000) socket(0x2c, 0x800, 0x4000000) (async) 23:12:40 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/cpuidle_haltpoll', 0x109c42, 0x8) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x81, 0x69}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x19a}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x77}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x11a}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x401}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x4048094) (async) syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) [ 498.358028][T11175] RBP: 00007feb5d37f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 498.365838][T11175] R10: 00007feb5d37f050 R11: 0000000000000246 R12: 0000000000000058 [ 498.373655][T11175] R13: 00007ffc843a962f R14: 00007feb5d37f300 R15: 0000000000022000 [ 498.381461][T11175] 23:12:40 executing program 1: socket(0x2c, 0x800, 0x4000000) socket(0x2c, 0x800, 0x4000000) (async) 23:12:40 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x7, 0x1, 0x80000001, 0x200, r0, 0x4, '\x00', 0x0, r1, 0x4, 0x3}, 0x48) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x7, 0x1, 0x80000001, 0x200, r0, 0x4, '\x00', 0x0, r1, 0x4, 0x3}, 0x48) (async) 23:12:40 executing program 5: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x6000, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000040)="0cfd2a78eaa07a0012d92b25e00e5e2f63e3a70617cd34ae2953bfe33eeeafd9c50105a01b14106df86ed50d6a676a9f626dced5174c118ea895fb05185fb19dc68b586fd83343343ce7b4f5ada3389df035f9c711b134993b9a2557f209d7a4ba66362e6c87b2fe57b15b608791bccc7bd2255bb9def71b72c4469a843d728cb569b2d615518a3565d35873b6d28b9f8f1b16e215e1579191d451e773d7a69912f14b5b62f37919de67f90950dec61993f0c848ede1d2c69468a5fd65a95439357f50c04066", &(0x7f0000000140)=@tcp=r1}, 0x20) 23:12:40 executing program 0: ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000000)=0x1) syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000080), 0x0, 0x0, 0x0}, 0x58) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) [ 498.443398][T11279] FAULT_INJECTION: forcing a failure. [ 498.443398][T11279] name failslab, interval 1, probability 0, space 0, times 0 [ 498.472616][T11279] CPU: 0 PID: 11279 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 498.482859][T11279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 498.492833][T11279] Call Trace: [ 498.495954][T11279] [ 498.498787][T11279] dump_stack_lvl+0x151/0x1b7 [ 498.503243][T11279] ? bfq_pos_tree_add_move+0x43e/0x43e [ 498.508541][T11279] dump_stack+0x15/0x17 [ 498.512530][T11279] should_fail+0x3c0/0x510 [ 498.516867][T11279] __should_failslab+0x9f/0xe0 [ 498.521466][T11279] should_failslab+0x9/0x20 [ 498.525806][T11279] kmem_cache_alloc+0x4f/0x2f0 [ 498.530406][T11279] ? vm_area_dup+0x26/0x1d0 [ 498.534752][T11279] vm_area_dup+0x26/0x1d0 [ 498.538913][T11279] dup_mmap+0x6b8/0xea0 [ 498.542908][T11279] ? __delayed_free_task+0x20/0x20 [ 498.547852][T11279] ? mm_init+0x807/0x960 [ 498.551949][T11279] dup_mm+0x91/0x330 [ 498.555748][T11279] copy_mm+0x108/0x1b0 [ 498.559658][T11279] copy_process+0x1295/0x3250 [ 498.564256][T11279] ? check_stack_object+0xf7/0x130 [ 498.569200][T11279] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 498.574147][T11279] ? copy_clone_args_from_user+0x6cf/0x790 [ 498.580667][T11279] kernel_clone+0x22d/0x990 [ 498.585007][T11279] ? dup_mmap+0xea0/0xea0 [ 498.589163][T11279] ? create_io_thread+0x1e0/0x1e0 [ 498.594023][T11279] ? file_end_write+0x1b0/0x1b0 [ 498.598714][T11279] __x64_sys_clone3+0x375/0x3a0 [ 498.603926][T11279] ? __ia32_sys_clone+0x300/0x300 [ 498.608791][T11279] ? ksys_write+0x25f/0x2c0 [ 498.613233][T11279] ? debug_smp_processor_id+0x17/0x20 [ 498.618438][T11279] do_syscall_64+0x44/0xd0 [ 498.622697][T11279] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 498.628419][T11279] RIP: 0033:0x7feb5e60c0c9 [ 498.632675][T11279] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 498.652720][T11279] RSP: 002b:00007feb5d37f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 498.660964][T11279] RAX: ffffffffffffffda RBX: 00007feb5e72bf80 RCX: 00007feb5e60c0c9 [ 498.668787][T11279] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007feb5d37f050 [ 498.676763][T11279] RBP: 00007feb5d37f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 498.684666][T11279] R10: 00007feb5d37f050 R11: 0000000000000246 R12: 0000000000000058 23:12:41 executing program 2: syz_clone3(&(0x7f0000000b40)={0x1000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 62) 23:12:41 executing program 0: ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000000)=0x1) (async) syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000080), 0x0, 0x0, 0x0}, 0x58) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) 23:12:41 executing program 1: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r0, 0xffffffffffffffff, 0x4}, 0x48) r1 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="183700000200000000000000000000000054ff0f09000000181b0000", @ANYRES32, @ANYBLOB="0000000000000000185b00000300000000000000002d3e0f7a7eb6af0c72adab7a98edb1cd00000018370000", @ANYRES32, @ANYBLOB="000000001000000018200000", @ANYRES32, @ANYBLOB="00000000ffffff7f"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r1}, 0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r2, 0xffffffffffffffff, 0x4}, 0x48) r3 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r2, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r3}, 0x80) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x60}, 0x1, 0x0, 0x0, 0xc010}, 0x240440c0) socket(0x2c, 0x0, 0x0) 23:12:41 executing program 5: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x6000, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000040)="0cfd2a78eaa07a0012d92b25e00e5e2f63e3a70617cd34ae2953bfe33eeeafd9c50105a01b14106df86ed50d6a676a9f626dced5174c118ea895fb05185fb19dc68b586fd83343343ce7b4f5ada3389df035f9c711b134993b9a2557f209d7a4ba66362e6c87b2fe57b15b608791bccc7bd2255bb9def71b72c4469a843d728cb569b2d615518a3565d35873b6d28b9f8f1b16e215e1579191d451e773d7a69912f14b5b62f37919de67f90950dec61993f0c848ede1d2c69468a5fd65a95439357f50c04066", &(0x7f0000000140)=@tcp=r1}, 0x20) 23:12:41 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x7, 0x1, 0x80000001, 0x200, r0, 0x4, '\x00', 0x0, r1, 0x4, 0x3}, 0x48) 23:12:41 executing program 3: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {0x9}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0) openat$cgroup_type(r0, &(0x7f0000000040), 0x2, 0x0) r1 = io_uring_setup(0x2147, &(0x7f0000000080)={0x0, 0x5a4b, 0x100, 0x0, 0x3bf, 0x0, r0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000300)) 23:12:41 executing program 4: sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000040}, 0x8000) syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:12:41 executing program 0: ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000000)=0x1) syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000080), 0x0, 0x0, 0x0}, 0x58) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000000)=0x1) (async) syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000080), 0x0, 0x0, 0x0}, 0x58) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) (async) 23:12:41 executing program 3: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {0x9}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0) openat$cgroup_type(r0, &(0x7f0000000040), 0x2, 0x0) r1 = io_uring_setup(0x2147, &(0x7f0000000080)={0x0, 0x5a4b, 0x100, 0x0, 0x3bf, 0x0, r0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000300)) syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {0x9}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0) (async) openat$cgroup_type(r0, &(0x7f0000000040), 0x2, 0x0) (async) io_uring_setup(0x2147, &(0x7f0000000080)={0x0, 0x5a4b, 0x100, 0x0, 0x3bf, 0x0, r0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000300)) (async) [ 498.692470][T11279] R13: 00007ffc843a962f R14: 00007feb5d37f300 R15: 0000000000022000 [ 498.700284][T11279] 23:12:41 executing program 5: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x6000, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000040)="0cfd2a78eaa07a0012d92b25e00e5e2f63e3a70617cd34ae2953bfe33eeeafd9c50105a01b14106df86ed50d6a676a9f626dced5174c118ea895fb05185fb19dc68b586fd83343343ce7b4f5ada3389df035f9c711b134993b9a2557f209d7a4ba66362e6c87b2fe57b15b608791bccc7bd2255bb9def71b72c4469a843d728cb569b2d615518a3565d35873b6d28b9f8f1b16e215e1579191d451e773d7a69912f14b5b62f37919de67f90950dec61993f0c848ede1d2c69468a5fd65a95439357f50c04066", &(0x7f0000000140)=@tcp=r1}, 0x20) 23:12:41 executing program 4: sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000040}, 0x8000) syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000040}, 0x8000) (async) syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) 23:12:41 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f0000000100)={0x3f0, 0x15, 0x8, 0x70bd26, 0x25dfdbff, {0xf, 0x5}, [@INET_DIAG_REQ_BYTECODE={0x7a, 0x1, "c8137520b1561ff89f6e66b7f5f1e99e15c0742dde169e7f3d47c58b2d2b82b0f46f2b8d57dbf4e79bf40c8aa51d762ccaa414daf1e2d4d8efd4f5b9d1abba8384ee6116821b94a3f6cfaecb598606cb2d5a04e978c1a084dc3f569f3ad4db4401d6b6f6b5aa9c5012889df73068454d23b546a12737"}, @INET_DIAG_REQ_BYTECODE={0xf2, 0x1, "4ae995219cfb37ea12787c64659b02c3325dac20a30220e237b22de2f3d250d62b73cdb097008e19b693a054dc8eb2e07d12b2a5dacf90145367d542b98bebe049cbf3026e54b1a2fe013647f5a1d8e9aaff9afcde35926f55341377dda7ae766bd6de05f23997c860525aa78b9de2c3d39549563d61a1b67fea28c6d0727b6b2538fad07084ec1a1e331aa452e807885ee093da21afe06890455b258a3dd192a71b19369398cfa2a2ad58cbf3569baefd0bc90d75205d0b94c02d96b07c2d66763087f5b3c61342cd8d7cd8b9e2cbdf28c2de525ab09e287a47187d05632d1502b7c0df3d4bfcd82bb42f17b2d4"}, @INET_DIAG_REQ_BYTECODE={0xd7, 0x1, "f6f18bef968136bf2c5b69d35323761324f814ee9b57e90890a0ad7fb049ad6a0b7f909178e0b6645270457d81d0e0b7fef3190e1e609412178a121539603f92eb4bb659482034a12eafb99e40aab60dd417eac8f919cf2433421cfb1e9e12f4d354a8745cb653c9f4f05edb5ed55a17bcb90eb8280cf3349b3a0966cc83a752b798d5f0a5b4bc0bc4ef53806957975a9a59c0bb256e944c973fb808bb690abc3f1e9d33bfd5772ea66571b01e4283ad4818442aa8ba128a0adf87b01cfda3eee9c2835af662bdd51b766356d372b37376fc61"}, @INET_DIAG_REQ_BYTECODE={0xb2, 0x1, "8b2558861b6de3a2899722819af54d45d99e1ff60e39a766d0d1507e9a40b8ec6b1b2207eb56d69fb279daeeca336d5e785fd8f3ab1b3d42217ee2cb8b68d1b339e60ff1ca5040b839d206d1702fd9dc86597e2a6bcd32586c9612ad0d83ac33013c9f04879b0d1103dd91d0bee570526d294ce915a54168a1426c04e4704629cca6e90786f8d9c31ab81100acd35647003066e4b4bfaef00b3fbaedd81ab864f6b491380bf5fd1add9b456b56ef"}, @INET_DIAG_REQ_BYTECODE={0xde, 0x1, "9a343f5345b18b844508989976d0d1921cfd71292a6e1423fab14dd8832002d3ae6b7810f1c09b34f61d6cd07f4f1bafb93e62e3db889a5fbc31f031b955f386fa039628808ae4ad510a4973fd3a36eb1cc8f1d517b2e18165d4adf72af74a9081ecdd688ea3b5569c3e47364c61fc0089e95a5646396195d9bfcaf6befec23e2022ea6e6e541b87469527c4fa265ce3bcb9915e9f2c13a3f822194ee1a05d4078bf0307cb7b9f934e48e9bba865824108be27e3f794105ac68a891060163e57c467d9590edb094600d59744fc3451b732e89b33f491d8ed3aa3"}]}, 0x3f0}, 0x1, 0x0, 0x0, 0x80}, 0x20040000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x50, 0x13, 0x1, 0x70bd26, 0x25dfdbfb, {0xf, 0x93, 0xc5, 0x40, {0x4e23, 0x4e23, [0x1, 0xff, 0xfff, 0x7], [0xfffffff9, 0x4, 0x6, 0x10000], 0x0, [0x3ff, 0x7]}, 0xffffffff, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) syz_clone3(&(0x7f0000000000)={0x202440500, 0x0, 0x0, 0x0, {0x1}, &(0x7f0000000080)=""/9, 0x0, 0x0, 0x0, 0xfffffd65, {r1}}, 0x58) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0xe}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000007c0)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000800), 0x2, 0x0) [ 498.757623][T11316] FAULT_INJECTION: forcing a failure. [ 498.757623][T11316] name failslab, interval 1, probability 0, space 0, times 0 [ 498.800700][T11316] CPU: 0 PID: 11316 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 498.810868][T11316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 498.821543][T11316] Call Trace: [ 498.824666][T11316] [ 498.827447][T11316] dump_stack_lvl+0x151/0x1b7 [ 498.831988][T11316] ? bfq_pos_tree_add_move+0x43e/0x43e [ 498.837255][T11316] dump_stack+0x15/0x17 [ 498.841250][T11316] should_fail+0x3c0/0x510 [ 498.845507][T11316] __should_failslab+0x9f/0xe0 [ 498.850096][T11316] should_failslab+0x9/0x20 [ 498.854433][T11316] kmem_cache_alloc+0x4f/0x2f0 [ 498.859088][T11316] ? anon_vma_clone+0xa1/0x4f0 [ 498.863632][T11316] anon_vma_clone+0xa1/0x4f0 [ 498.868065][T11316] anon_vma_fork+0x91/0x4f0 [ 498.872397][T11316] ? anon_vma_name+0x43/0x70 [ 498.876826][T11316] dup_mmap+0x750/0xea0 [ 498.880826][T11316] ? __delayed_free_task+0x20/0x20 [ 498.885761][T11316] ? mm_init+0x807/0x960 [ 498.889843][T11316] dup_mm+0x91/0x330 [ 498.893574][T11316] copy_mm+0x108/0x1b0 [ 498.897484][T11316] copy_process+0x1295/0x3250 [ 498.901993][T11316] ? check_stack_object+0xf7/0x130 [ 498.906939][T11316] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 498.911888][T11316] ? copy_clone_args_from_user+0x6cf/0x790 [ 498.917543][T11316] kernel_clone+0x22d/0x990 [ 498.921870][T11316] ? dup_mmap+0xea0/0xea0 [ 498.926034][T11316] ? create_io_thread+0x1e0/0x1e0 [ 498.930906][T11316] ? file_end_write+0x1b0/0x1b0 [ 498.935586][T11316] __x64_sys_clone3+0x375/0x3a0 [ 498.940275][T11316] ? __ia32_sys_clone+0x300/0x300 [ 498.945137][T11316] ? ksys_write+0x25f/0x2c0 [ 498.949470][T11316] ? debug_smp_processor_id+0x17/0x20 [ 498.954686][T11316] do_syscall_64+0x44/0xd0 [ 498.958936][T11316] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 498.964763][T11316] RIP: 0033:0x7feb5e60c0c9 [ 498.969001][T11316] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 498.988791][T11316] RSP: 002b:00007feb5d37f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 23:12:41 executing program 2: syz_clone3(&(0x7f0000000b40)={0x1000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 63) 23:12:41 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f0000000100)={0x3f0, 0x15, 0x8, 0x70bd26, 0x25dfdbff, {0xf, 0x5}, [@INET_DIAG_REQ_BYTECODE={0x7a, 0x1, "c8137520b1561ff89f6e66b7f5f1e99e15c0742dde169e7f3d47c58b2d2b82b0f46f2b8d57dbf4e79bf40c8aa51d762ccaa414daf1e2d4d8efd4f5b9d1abba8384ee6116821b94a3f6cfaecb598606cb2d5a04e978c1a084dc3f569f3ad4db4401d6b6f6b5aa9c5012889df73068454d23b546a12737"}, @INET_DIAG_REQ_BYTECODE={0xf2, 0x1, "4ae995219cfb37ea12787c64659b02c3325dac20a30220e237b22de2f3d250d62b73cdb097008e19b693a054dc8eb2e07d12b2a5dacf90145367d542b98bebe049cbf3026e54b1a2fe013647f5a1d8e9aaff9afcde35926f55341377dda7ae766bd6de05f23997c860525aa78b9de2c3d39549563d61a1b67fea28c6d0727b6b2538fad07084ec1a1e331aa452e807885ee093da21afe06890455b258a3dd192a71b19369398cfa2a2ad58cbf3569baefd0bc90d75205d0b94c02d96b07c2d66763087f5b3c61342cd8d7cd8b9e2cbdf28c2de525ab09e287a47187d05632d1502b7c0df3d4bfcd82bb42f17b2d4"}, @INET_DIAG_REQ_BYTECODE={0xd7, 0x1, "f6f18bef968136bf2c5b69d35323761324f814ee9b57e90890a0ad7fb049ad6a0b7f909178e0b6645270457d81d0e0b7fef3190e1e609412178a121539603f92eb4bb659482034a12eafb99e40aab60dd417eac8f919cf2433421cfb1e9e12f4d354a8745cb653c9f4f05edb5ed55a17bcb90eb8280cf3349b3a0966cc83a752b798d5f0a5b4bc0bc4ef53806957975a9a59c0bb256e944c973fb808bb690abc3f1e9d33bfd5772ea66571b01e4283ad4818442aa8ba128a0adf87b01cfda3eee9c2835af662bdd51b766356d372b37376fc61"}, @INET_DIAG_REQ_BYTECODE={0xb2, 0x1, "8b2558861b6de3a2899722819af54d45d99e1ff60e39a766d0d1507e9a40b8ec6b1b2207eb56d69fb279daeeca336d5e785fd8f3ab1b3d42217ee2cb8b68d1b339e60ff1ca5040b839d206d1702fd9dc86597e2a6bcd32586c9612ad0d83ac33013c9f04879b0d1103dd91d0bee570526d294ce915a54168a1426c04e4704629cca6e90786f8d9c31ab81100acd35647003066e4b4bfaef00b3fbaedd81ab864f6b491380bf5fd1add9b456b56ef"}, @INET_DIAG_REQ_BYTECODE={0xde, 0x1, "9a343f5345b18b844508989976d0d1921cfd71292a6e1423fab14dd8832002d3ae6b7810f1c09b34f61d6cd07f4f1bafb93e62e3db889a5fbc31f031b955f386fa039628808ae4ad510a4973fd3a36eb1cc8f1d517b2e18165d4adf72af74a9081ecdd688ea3b5569c3e47364c61fc0089e95a5646396195d9bfcaf6befec23e2022ea6e6e541b87469527c4fa265ce3bcb9915e9f2c13a3f822194ee1a05d4078bf0307cb7b9f934e48e9bba865824108be27e3f794105ac68a891060163e57c467d9590edb094600d59744fc3451b732e89b33f491d8ed3aa3"}]}, 0x3f0}, 0x1, 0x0, 0x0, 0x80}, 0x20040000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x50, 0x13, 0x1, 0x70bd26, 0x25dfdbfb, {0xf, 0x93, 0xc5, 0x40, {0x4e23, 0x4e23, [0x1, 0xff, 0xfff, 0x7], [0xfffffff9, 0x4, 0x6, 0x10000], 0x0, [0x3ff, 0x7]}, 0xffffffff, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) syz_clone3(&(0x7f0000000000)={0x202440500, 0x0, 0x0, 0x0, {0x1}, &(0x7f0000000080)=""/9, 0x0, 0x0, 0x0, 0xfffffd65, {r1}}, 0x58) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0xe}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000007c0)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000800), 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) (async) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f0000000100)={0x3f0, 0x15, 0x8, 0x70bd26, 0x25dfdbff, {0xf, 0x5}, [@INET_DIAG_REQ_BYTECODE={0x7a, 0x1, "c8137520b1561ff89f6e66b7f5f1e99e15c0742dde169e7f3d47c58b2d2b82b0f46f2b8d57dbf4e79bf40c8aa51d762ccaa414daf1e2d4d8efd4f5b9d1abba8384ee6116821b94a3f6cfaecb598606cb2d5a04e978c1a084dc3f569f3ad4db4401d6b6f6b5aa9c5012889df73068454d23b546a12737"}, @INET_DIAG_REQ_BYTECODE={0xf2, 0x1, "4ae995219cfb37ea12787c64659b02c3325dac20a30220e237b22de2f3d250d62b73cdb097008e19b693a054dc8eb2e07d12b2a5dacf90145367d542b98bebe049cbf3026e54b1a2fe013647f5a1d8e9aaff9afcde35926f55341377dda7ae766bd6de05f23997c860525aa78b9de2c3d39549563d61a1b67fea28c6d0727b6b2538fad07084ec1a1e331aa452e807885ee093da21afe06890455b258a3dd192a71b19369398cfa2a2ad58cbf3569baefd0bc90d75205d0b94c02d96b07c2d66763087f5b3c61342cd8d7cd8b9e2cbdf28c2de525ab09e287a47187d05632d1502b7c0df3d4bfcd82bb42f17b2d4"}, @INET_DIAG_REQ_BYTECODE={0xd7, 0x1, "f6f18bef968136bf2c5b69d35323761324f814ee9b57e90890a0ad7fb049ad6a0b7f909178e0b6645270457d81d0e0b7fef3190e1e609412178a121539603f92eb4bb659482034a12eafb99e40aab60dd417eac8f919cf2433421cfb1e9e12f4d354a8745cb653c9f4f05edb5ed55a17bcb90eb8280cf3349b3a0966cc83a752b798d5f0a5b4bc0bc4ef53806957975a9a59c0bb256e944c973fb808bb690abc3f1e9d33bfd5772ea66571b01e4283ad4818442aa8ba128a0adf87b01cfda3eee9c2835af662bdd51b766356d372b37376fc61"}, @INET_DIAG_REQ_BYTECODE={0xb2, 0x1, "8b2558861b6de3a2899722819af54d45d99e1ff60e39a766d0d1507e9a40b8ec6b1b2207eb56d69fb279daeeca336d5e785fd8f3ab1b3d42217ee2cb8b68d1b339e60ff1ca5040b839d206d1702fd9dc86597e2a6bcd32586c9612ad0d83ac33013c9f04879b0d1103dd91d0bee570526d294ce915a54168a1426c04e4704629cca6e90786f8d9c31ab81100acd35647003066e4b4bfaef00b3fbaedd81ab864f6b491380bf5fd1add9b456b56ef"}, @INET_DIAG_REQ_BYTECODE={0xde, 0x1, "9a343f5345b18b844508989976d0d1921cfd71292a6e1423fab14dd8832002d3ae6b7810f1c09b34f61d6cd07f4f1bafb93e62e3db889a5fbc31f031b955f386fa039628808ae4ad510a4973fd3a36eb1cc8f1d517b2e18165d4adf72af74a9081ecdd688ea3b5569c3e47364c61fc0089e95a5646396195d9bfcaf6befec23e2022ea6e6e541b87469527c4fa265ce3bcb9915e9f2c13a3f822194ee1a05d4078bf0307cb7b9f934e48e9bba865824108be27e3f794105ac68a891060163e57c467d9590edb094600d59744fc3451b732e89b33f491d8ed3aa3"}]}, 0x3f0}, 0x1, 0x0, 0x0, 0x80}, 0x20040000) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, 0x0) (async) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x50, 0x13, 0x1, 0x70bd26, 0x25dfdbfb, {0xf, 0x93, 0xc5, 0x40, {0x4e23, 0x4e23, [0x1, 0xff, 0xfff, 0x7], [0xfffffff9, 0x4, 0x6, 0x10000], 0x0, [0x3ff, 0x7]}, 0xffffffff, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) (async) syz_clone3(&(0x7f0000000000)={0x202440500, 0x0, 0x0, 0x0, {0x1}, &(0x7f0000000080)=""/9, 0x0, 0x0, 0x0, 0xfffffd65, {r1}}, 0x58) (async) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0xe}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x800) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000007c0)='./cgroup/syz1\x00', 0x200002, 0x0) (async) openat$cgroup_subtree(r2, &(0x7f0000000800), 0x2, 0x0) (async) 23:12:41 executing program 3: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {0x9}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0) openat$cgroup_type(r0, &(0x7f0000000040), 0x2, 0x0) (async) r1 = io_uring_setup(0x2147, &(0x7f0000000080)={0x0, 0x5a4b, 0x100, 0x0, 0x3bf, 0x0, r0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000300)) 23:12:41 executing program 4: sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000040}, 0x8000) syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:12:41 executing program 5: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$inet_udp(0x2, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x6000, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) 23:12:41 executing program 1: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r0, 0xffffffffffffffff, 0x4}, 0x48) (async) r1 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="183700000200000000000000000000000054ff0f09000000181b0000", @ANYRES32, @ANYBLOB="0000000000000000185b00000300000000000000002d3e0f7a7eb6af0c72adab7a98edb1cd00000018370000", @ANYRES32, @ANYBLOB="000000001000000018200000", @ANYRES32, @ANYBLOB="00000000ffffff7f"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r1}, 0x80) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r2, 0xffffffffffffffff, 0x4}, 0x48) r3 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r2, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r3}, 0x80) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x60}, 0x1, 0x0, 0x0, 0xc010}, 0x240440c0) socket(0x2c, 0x0, 0x0) 23:12:41 executing program 3: r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000bc0)={{0x0, 0xa19, 0xee, 0xfd, 0x3, 0x200000007, 0x2000000, 0xffff, 0x3, 0x20000846, 0xff, 0x400000000000009, 0x5, 0x0, 0xa20}}) syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r3, &(0x7f0000000580), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000001bc0)={0x9, [{r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}], 0x1, "f585f4d4dafd85"}) syz_io_uring_setup(0x2f4f, &(0x7f0000000440)={0x0, 0x5816, 0x4, 0x3, 0x24a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000002bc0)={0x0, r4, "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", "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"}) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000140)={0x250, 0x14, 0x2, 0x70bd27, 0x25dfdbfe, {0xf, 0x20}, [@INET_DIAG_REQ_BYTECODE={0xc6, 0x1, "ee9a6ebd7e076e0d6b92de4a003adddb487f24030f86261dc49e30cddde6ed17cf8d0768bf4ffaec0ff2efc5e2ccb92410287702d27b08724f19ef19da051ef3c3edc1386eed452dbe0695e71e13a78c8abb90ce6ad2b6ab51fe1a450e45680a45dd024b8397373bc06887052d73166eabd574a57b29a70de94081c3add0203a50a0f8f7323986238eae760c590fd10c451e48abcc8a4270a93d07bce6ab683cfd4c1e6bec404badb8fc6cf7ecbb46d1f5f32a0bd2569361c308a73ff30ff010eda4"}, @INET_DIAG_REQ_BYTECODE={0x69, 0x1, "e9ddb7496939993a0b4e97343325abb2fbad433e421a2a4f9bf4d4ef49a8c47f9d06be5e7a883b0b625148df4bc90aae9e5f572f04d92dfd77f7afe4aada8861285e2bac08d6b03fd64b69f12861a9cb05703e4acce5ad65293be30f3fa67e0e7d99db3f26"}, @INET_DIAG_REQ_BYTECODE={0x9b, 0x1, "99b15f8f09f691a4da3cb0ea30b1e35f0c6aa0aa43bbc7eb5652f2e397e925621bf73e0b3830f3fb037e520f85439d499b43155d4d822a63fcd2d7dfdeeee004750ba9be3c2c0726ad825cc97fd9d925e6185e6232fb8fd97b409bf26b2dd86cfad9bde441f7c2b1039fc21e14f9fbbf2a940150ca32ea8f631cfe410be18331271bbec090ed11c66c77856c68c1ff80137894d7e2ec2b"}, @INET_DIAG_REQ_BYTECODE={0xc, 0x1, "e3977d0477ee69fc"}, @INET_DIAG_REQ_BYTECODE={0x46, 0x1, "5d595c2bcfc877cb6c13a57bb2ac5a17cb147508a45c0116cd976a5d8fa900023fd76be87d66a6f9c32bed877972b776596c2010c3c178e58d2a601e67e96eff234b"}, @INET_DIAG_REQ_BYTECODE={0x16, 0x1, "698dce4b84cda6afe8d2cc0ab7ad551d1aba"}]}, 0x250}, 0x1, 0x0, 0x0, 0x40}, 0x1) 23:12:41 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f0000000100)={0x3f0, 0x15, 0x8, 0x70bd26, 0x25dfdbff, {0xf, 0x5}, [@INET_DIAG_REQ_BYTECODE={0x7a, 0x1, "c8137520b1561ff89f6e66b7f5f1e99e15c0742dde169e7f3d47c58b2d2b82b0f46f2b8d57dbf4e79bf40c8aa51d762ccaa414daf1e2d4d8efd4f5b9d1abba8384ee6116821b94a3f6cfaecb598606cb2d5a04e978c1a084dc3f569f3ad4db4401d6b6f6b5aa9c5012889df73068454d23b546a12737"}, @INET_DIAG_REQ_BYTECODE={0xf2, 0x1, "4ae995219cfb37ea12787c64659b02c3325dac20a30220e237b22de2f3d250d62b73cdb097008e19b693a054dc8eb2e07d12b2a5dacf90145367d542b98bebe049cbf3026e54b1a2fe013647f5a1d8e9aaff9afcde35926f55341377dda7ae766bd6de05f23997c860525aa78b9de2c3d39549563d61a1b67fea28c6d0727b6b2538fad07084ec1a1e331aa452e807885ee093da21afe06890455b258a3dd192a71b19369398cfa2a2ad58cbf3569baefd0bc90d75205d0b94c02d96b07c2d66763087f5b3c61342cd8d7cd8b9e2cbdf28c2de525ab09e287a47187d05632d1502b7c0df3d4bfcd82bb42f17b2d4"}, @INET_DIAG_REQ_BYTECODE={0xd7, 0x1, "f6f18bef968136bf2c5b69d35323761324f814ee9b57e90890a0ad7fb049ad6a0b7f909178e0b6645270457d81d0e0b7fef3190e1e609412178a121539603f92eb4bb659482034a12eafb99e40aab60dd417eac8f919cf2433421cfb1e9e12f4d354a8745cb653c9f4f05edb5ed55a17bcb90eb8280cf3349b3a0966cc83a752b798d5f0a5b4bc0bc4ef53806957975a9a59c0bb256e944c973fb808bb690abc3f1e9d33bfd5772ea66571b01e4283ad4818442aa8ba128a0adf87b01cfda3eee9c2835af662bdd51b766356d372b37376fc61"}, @INET_DIAG_REQ_BYTECODE={0xb2, 0x1, "8b2558861b6de3a2899722819af54d45d99e1ff60e39a766d0d1507e9a40b8ec6b1b2207eb56d69fb279daeeca336d5e785fd8f3ab1b3d42217ee2cb8b68d1b339e60ff1ca5040b839d206d1702fd9dc86597e2a6bcd32586c9612ad0d83ac33013c9f04879b0d1103dd91d0bee570526d294ce915a54168a1426c04e4704629cca6e90786f8d9c31ab81100acd35647003066e4b4bfaef00b3fbaedd81ab864f6b491380bf5fd1add9b456b56ef"}, @INET_DIAG_REQ_BYTECODE={0xde, 0x1, "9a343f5345b18b844508989976d0d1921cfd71292a6e1423fab14dd8832002d3ae6b7810f1c09b34f61d6cd07f4f1bafb93e62e3db889a5fbc31f031b955f386fa039628808ae4ad510a4973fd3a36eb1cc8f1d517b2e18165d4adf72af74a9081ecdd688ea3b5569c3e47364c61fc0089e95a5646396195d9bfcaf6befec23e2022ea6e6e541b87469527c4fa265ce3bcb9915e9f2c13a3f822194ee1a05d4078bf0307cb7b9f934e48e9bba865824108be27e3f794105ac68a891060163e57c467d9590edb094600d59744fc3451b732e89b33f491d8ed3aa3"}]}, 0x3f0}, 0x1, 0x0, 0x0, 0x80}, 0x20040000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, 0x0) (async) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x50, 0x13, 0x1, 0x70bd26, 0x25dfdbfb, {0xf, 0x93, 0xc5, 0x40, {0x4e23, 0x4e23, [0x1, 0xff, 0xfff, 0x7], [0xfffffff9, 0x4, 0x6, 0x10000], 0x0, [0x3ff, 0x7]}, 0xffffffff, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) syz_clone3(&(0x7f0000000000)={0x202440500, 0x0, 0x0, 0x0, {0x1}, &(0x7f0000000080)=""/9, 0x0, 0x0, 0x0, 0xfffffd65, {r1}}, 0x58) (async, rerun: 32) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0xe}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x800) (async, rerun: 32) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000007c0)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000800), 0x2, 0x0) [ 498.997048][T11316] RAX: ffffffffffffffda RBX: 00007feb5e72bf80 RCX: 00007feb5e60c0c9 [ 499.004935][T11316] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007feb5d37f050 [ 499.012834][T11316] RBP: 00007feb5d37f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 499.020730][T11316] R10: 00007feb5d37f050 R11: 0000000000000246 R12: 0000000000000058 [ 499.030284][T11316] R13: 00007ffc843a962f R14: 00007feb5d37f300 R15: 0000000000022000 [ 499.038095][T11316] 23:12:41 executing program 5: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$inet_udp(0x2, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x6000, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) [ 499.084802][T11365] FAULT_INJECTION: forcing a failure. [ 499.084802][T11365] name failslab, interval 1, probability 0, space 0, times 0 23:12:41 executing program 3: r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000bc0)={{0x0, 0xa19, 0xee, 0xfd, 0x3, 0x200000007, 0x2000000, 0xffff, 0x3, 0x20000846, 0xff, 0x400000000000009, 0x5, 0x0, 0xa20}}) (async) syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r3, &(0x7f0000000580), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000001bc0)={0x9, [{r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}], 0x1, "f585f4d4dafd85"}) syz_io_uring_setup(0x2f4f, &(0x7f0000000440)={0x0, 0x5816, 0x4, 0x3, 0x24a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000002bc0)={0x0, r4, "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", "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"}) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000140)={0x250, 0x14, 0x2, 0x70bd27, 0x25dfdbfe, {0xf, 0x20}, [@INET_DIAG_REQ_BYTECODE={0xc6, 0x1, "ee9a6ebd7e076e0d6b92de4a003adddb487f24030f86261dc49e30cddde6ed17cf8d0768bf4ffaec0ff2efc5e2ccb92410287702d27b08724f19ef19da051ef3c3edc1386eed452dbe0695e71e13a78c8abb90ce6ad2b6ab51fe1a450e45680a45dd024b8397373bc06887052d73166eabd574a57b29a70de94081c3add0203a50a0f8f7323986238eae760c590fd10c451e48abcc8a4270a93d07bce6ab683cfd4c1e6bec404badb8fc6cf7ecbb46d1f5f32a0bd2569361c308a73ff30ff010eda4"}, @INET_DIAG_REQ_BYTECODE={0x69, 0x1, "e9ddb7496939993a0b4e97343325abb2fbad433e421a2a4f9bf4d4ef49a8c47f9d06be5e7a883b0b625148df4bc90aae9e5f572f04d92dfd77f7afe4aada8861285e2bac08d6b03fd64b69f12861a9cb05703e4acce5ad65293be30f3fa67e0e7d99db3f26"}, @INET_DIAG_REQ_BYTECODE={0x9b, 0x1, "99b15f8f09f691a4da3cb0ea30b1e35f0c6aa0aa43bbc7eb5652f2e397e925621bf73e0b3830f3fb037e520f85439d499b43155d4d822a63fcd2d7dfdeeee004750ba9be3c2c0726ad825cc97fd9d925e6185e6232fb8fd97b409bf26b2dd86cfad9bde441f7c2b1039fc21e14f9fbbf2a940150ca32ea8f631cfe410be18331271bbec090ed11c66c77856c68c1ff80137894d7e2ec2b"}, @INET_DIAG_REQ_BYTECODE={0xc, 0x1, "e3977d0477ee69fc"}, @INET_DIAG_REQ_BYTECODE={0x46, 0x1, "5d595c2bcfc877cb6c13a57bb2ac5a17cb147508a45c0116cd976a5d8fa900023fd76be87d66a6f9c32bed877972b776596c2010c3c178e58d2a601e67e96eff234b"}, @INET_DIAG_REQ_BYTECODE={0x16, 0x1, "698dce4b84cda6afe8d2cc0ab7ad551d1aba"}]}, 0x250}, 0x1, 0x0, 0x0, 0x40}, 0x1) 23:12:41 executing program 0: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r2, 0xffffffffffffffff, 0x4}, 0x48) r3 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r2, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r3}, 0x80) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x1a8, r1, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x20000040}, 0x48014) [ 499.143766][T11365] CPU: 1 PID: 11365 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 499.153839][T11365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 499.163741][T11365] Call Trace: [ 499.166858][T11365] [ 499.169637][T11365] dump_stack_lvl+0x151/0x1b7 [ 499.174158][T11365] ? bfq_pos_tree_add_move+0x43e/0x43e [ 499.179442][T11365] ? do_syscall_64+0x44/0xd0 [ 499.183870][T11365] dump_stack+0x15/0x17 [ 499.187864][T11365] should_fail+0x3c0/0x510 23:12:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000001c0), 0x0, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x10, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r3, 0xffffffffffffffff, 0x4}, 0x48) r4 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="183700000200000000000000000000000054ff0f09000000181b0000", @ANYRES32, @ANYBLOB="0000000000000000185b00000300eaffffffffffffff00001837000000000000000000000000000018260000", @ANYRES32, @ANYBLOB="000000001000000018200000", @ANYRES32, @ANYBLOB="00000000ffffff7f"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r3, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r4}, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0x58, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'macvlan0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0x58, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r8, 0xffffffffffffffff, 0x4}, 0x48) r9 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r8, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r9}, 0x80) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000b00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000940)={0x160, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x160}}, 0x20040810) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) syz_clone3(&(0x7f0000000040)={0x22000100, 0x0, 0x0, 0x0, {0x26}, 0x0, 0x0, 0x0, 0x0, 0xff4c}, 0x58) [ 499.192125][T11365] __should_failslab+0x9f/0xe0 [ 499.196805][T11365] should_failslab+0x9/0x20 [ 499.201317][T11365] kmem_cache_alloc+0x4f/0x2f0 [ 499.205918][T11365] ? anon_vma_clone+0xa1/0x4f0 [ 499.210529][T11365] anon_vma_clone+0xa1/0x4f0 [ 499.214942][T11365] anon_vma_fork+0x91/0x4f0 [ 499.219279][T11365] ? anon_vma_name+0x43/0x70 [ 499.223725][T11365] dup_mmap+0x750/0xea0 [ 499.227703][T11365] ? __delayed_free_task+0x20/0x20 [ 499.232733][T11365] ? mm_init+0x807/0x960 [ 499.236808][T11365] dup_mm+0x91/0x330 [ 499.240541][T11365] copy_mm+0x108/0x1b0 [ 499.244446][T11365] copy_process+0x1295/0x3250 [ 499.249074][T11365] ? check_stack_object+0xf7/0x130 [ 499.254001][T11365] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 499.258945][T11365] ? copy_clone_args_from_user+0x6cf/0x790 [ 499.264585][T11365] kernel_clone+0x22d/0x990 [ 499.268930][T11365] ? dup_mmap+0xea0/0xea0 [ 499.273086][T11365] ? create_io_thread+0x1e0/0x1e0 [ 499.277950][T11365] ? file_end_write+0x1b0/0x1b0 [ 499.282685][T11365] __x64_sys_clone3+0x375/0x3a0 [ 499.287325][T11365] ? __ia32_sys_clone+0x300/0x300 [ 499.292446][T11365] ? ksys_write+0x25f/0x2c0 [ 499.296876][T11365] ? debug_smp_processor_id+0x17/0x20 [ 499.302077][T11365] do_syscall_64+0x44/0xd0 [ 499.306327][T11365] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 499.312057][T11365] RIP: 0033:0x7feb5e60c0c9 [ 499.316309][T11365] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 499.335753][T11365] RSP: 002b:00007feb5d37f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 499.344084][T11365] RAX: ffffffffffffffda RBX: 00007feb5e72bf80 RCX: 00007feb5e60c0c9 [ 499.351980][T11365] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007feb5d37f050 [ 499.359814][T11365] RBP: 00007feb5d37f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 499.367690][T11365] R10: 00007feb5d37f050 R11: 0000000000000246 R12: 0000000000000058 [ 499.375638][T11365] R13: 00007ffc843a962f R14: 00007feb5d37f300 R15: 0000000000022000 [ 499.383409][T11365] 23:12:41 executing program 2: syz_clone3(&(0x7f0000000b40)={0x1000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 64) 23:12:41 executing program 0: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r2, 0xffffffffffffffff, 0x4}, 0x48) (async) r3 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r2, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r3}, 0x80) (async) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x1a8, r1, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x20000040}, 0x48014) 23:12:41 executing program 1: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r0, 0xffffffffffffffff, 0x4}, 0x48) r1 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="183700000200000000000000000000000054ff0f09000000181b0000", @ANYRES32, @ANYBLOB="0000000000000000185b00000300000000000000002d3e0f7a7eb6af0c72adab7a98edb1cd00000018370000", @ANYRES32, @ANYBLOB="000000001000000018200000", @ANYRES32, @ANYBLOB="00000000ffffff7f"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r1}, 0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r2, 0xffffffffffffffff, 0x4}, 0x48) (async) r3 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r2, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r3}, 0x80) (async) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x60}, 0x1, 0x0, 0x0, 0xc010}, 0x240440c0) (async) socket(0x2c, 0x0, 0x0) 23:12:41 executing program 5: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$inet_udp(0x2, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x6000, 0x0) 23:12:41 executing program 3: r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000bc0)={{0x0, 0xa19, 0xee, 0xfd, 0x3, 0x200000007, 0x2000000, 0xffff, 0x3, 0x20000846, 0xff, 0x400000000000009, 0x5, 0x0, 0xa20}}) syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r3, &(0x7f0000000580), 0x2, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000001bc0)={0x9, [{r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}], 0x1, "f585f4d4dafd85"}) (async) syz_io_uring_setup(0x2f4f, &(0x7f0000000440)={0x0, 0x5816, 0x4, 0x3, 0x24a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000002bc0)={0x0, r4, "a5c822f364911cb6810bcf2946ddaf531045ad9b1a8b3a21999258fcff9e507cc18be660317384e1d18b7344dde838484eacea3fc164cbc6a2a816b7dcaa832172300f582339ddf0eb3d8aedac77d9482407e2f95abb3e8c9af01a9bfa72f53dd1954fdb4ef62ae5a89de46bf4cc544e3ea2bf081a4170f4b485ce61b5f37725ba3f931652ff3fc816cf80548d16222836d11d4741750af351729d7a4d8e935cf9a919edeec41bd7f8fc456da1bed7d2afb62efbcbf091471ee0421b9c66101a88abd62a7c4651fb70fbc7a812310c51b0bfe02171e2e6d2c9a48d331f2afe0c461071e64a1ef062048a4506eb20790c63ceac2ed9ab631159043cf48de7b40c", "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"}) (async, rerun: 64) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4) (async, rerun: 64) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000140)={0x250, 0x14, 0x2, 0x70bd27, 0x25dfdbfe, {0xf, 0x20}, [@INET_DIAG_REQ_BYTECODE={0xc6, 0x1, "ee9a6ebd7e076e0d6b92de4a003adddb487f24030f86261dc49e30cddde6ed17cf8d0768bf4ffaec0ff2efc5e2ccb92410287702d27b08724f19ef19da051ef3c3edc1386eed452dbe0695e71e13a78c8abb90ce6ad2b6ab51fe1a450e45680a45dd024b8397373bc06887052d73166eabd574a57b29a70de94081c3add0203a50a0f8f7323986238eae760c590fd10c451e48abcc8a4270a93d07bce6ab683cfd4c1e6bec404badb8fc6cf7ecbb46d1f5f32a0bd2569361c308a73ff30ff010eda4"}, @INET_DIAG_REQ_BYTECODE={0x69, 0x1, "e9ddb7496939993a0b4e97343325abb2fbad433e421a2a4f9bf4d4ef49a8c47f9d06be5e7a883b0b625148df4bc90aae9e5f572f04d92dfd77f7afe4aada8861285e2bac08d6b03fd64b69f12861a9cb05703e4acce5ad65293be30f3fa67e0e7d99db3f26"}, @INET_DIAG_REQ_BYTECODE={0x9b, 0x1, "99b15f8f09f691a4da3cb0ea30b1e35f0c6aa0aa43bbc7eb5652f2e397e925621bf73e0b3830f3fb037e520f85439d499b43155d4d822a63fcd2d7dfdeeee004750ba9be3c2c0726ad825cc97fd9d925e6185e6232fb8fd97b409bf26b2dd86cfad9bde441f7c2b1039fc21e14f9fbbf2a940150ca32ea8f631cfe410be18331271bbec090ed11c66c77856c68c1ff80137894d7e2ec2b"}, @INET_DIAG_REQ_BYTECODE={0xc, 0x1, "e3977d0477ee69fc"}, @INET_DIAG_REQ_BYTECODE={0x46, 0x1, "5d595c2bcfc877cb6c13a57bb2ac5a17cb147508a45c0116cd976a5d8fa900023fd76be87d66a6f9c32bed877972b776596c2010c3c178e58d2a601e67e96eff234b"}, @INET_DIAG_REQ_BYTECODE={0x16, 0x1, "698dce4b84cda6afe8d2cc0ab7ad551d1aba"}]}, 0x250}, 0x1, 0x0, 0x0, 0x40}, 0x1) 23:12:41 executing program 5: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x6000, 0x0) 23:12:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000001c0), 0x0, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x10, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r3, 0xffffffffffffffff, 0x4}, 0x48) r4 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="183700000200000000000000000000000054ff0f09000000181b0000", @ANYRES32, @ANYBLOB="0000000000000000185b00000300eaffffffffffffff00001837000000000000000000000000000018260000", @ANYRES32, @ANYBLOB="000000001000000018200000", @ANYRES32, @ANYBLOB="00000000ffffff7f"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r3, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r4}, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0x58, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'macvlan0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0x58, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r8, 0xffffffffffffffff, 0x4}, 0x48) r9 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r8, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r9}, 0x80) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000b00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000940)={0x160, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x160}}, 0x20040810) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) syz_clone3(&(0x7f0000000040)={0x22000100, 0x0, 0x0, 0x0, {0x26}, 0x0, 0x0, 0x0, 0x0, 0xff4c}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000001c0), 0x0, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x10, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00'}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r3, 0xffffffffffffffff, 0x4}, 0x48) (async) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="183700000200000000000000000000000054ff0f09000000181b0000", @ANYRES32, @ANYBLOB="0000000000000000185b00000300eaffffffffffffff00001837000000000000000000000000000018260000", @ANYRES32, @ANYBLOB="000000001000000018200000", @ANYRES32, @ANYBLOB="00000000ffffff7f"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r3, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r4}, 0x80) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0x58, &(0x7f0000000780)}, 0x10) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'macvlan0\x00'}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0x58, &(0x7f0000000880)}, 0x10) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00'}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r8, 0xffffffffffffffff, 0x4}, 0x48) (async) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r8, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r9}, 0x80) (async) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000b00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000940)={0x160, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x160}}, 0x20040810) (async) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) (async) syz_clone3(&(0x7f0000000040)={0x22000100, 0x0, 0x0, 0x0, {0x26}, 0x0, 0x0, 0x0, 0x0, 0xff4c}, 0x58) (async) 23:12:41 executing program 3: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f0000000000)) 23:12:41 executing program 5: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x6000, 0x0) 23:12:41 executing program 3: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f0000000000)) syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) (async) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f0000000000)) (async) 23:12:41 executing program 5: openat$hwrng(0xffffffffffffff9c, 0x0, 0x6000, 0x0) [ 499.477288][T11403] FAULT_INJECTION: forcing a failure. [ 499.477288][T11403] name failslab, interval 1, probability 0, space 0, times 0 23:12:41 executing program 0: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r2, 0xffffffffffffffff, 0x4}, 0x48) r3 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r2, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r3}, 0x80) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x1a8, r1, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x20000040}, 0x48014) syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00'}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r2, 0xffffffffffffffff, 0x4}, 0x48) (async) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r2, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r3}, 0x80) (async) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x1a8, r1, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x20000040}, 0x48014) (async) [ 499.562881][T11403] CPU: 1 PID: 11403 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 499.573053][T11403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 499.582951][T11403] Call Trace: [ 499.586244][T11403] [ 499.589023][T11403] dump_stack_lvl+0x151/0x1b7 [ 499.593535][T11403] ? bfq_pos_tree_add_move+0x43e/0x43e [ 499.598828][T11403] ? vma_interval_tree_augment_rotate+0x210/0x210 [ 499.605077][T11403] dump_stack+0x15/0x17 [ 499.609071][T11403] should_fail+0x3c0/0x510 [ 499.613338][T11403] __should_failslab+0x9f/0xe0 [ 499.617921][T11403] should_failslab+0x9/0x20 [ 499.622260][T11403] kmem_cache_alloc+0x4f/0x2f0 [ 499.626859][T11403] ? anon_vma_fork+0xf7/0x4f0 [ 499.631377][T11403] anon_vma_fork+0xf7/0x4f0 [ 499.635716][T11403] ? anon_vma_name+0x43/0x70 [ 499.640232][T11403] dup_mmap+0x750/0xea0 [ 499.644226][T11403] ? __delayed_free_task+0x20/0x20 [ 499.649253][T11403] ? mm_init+0x807/0x960 [ 499.653335][T11403] dup_mm+0x91/0x330 [ 499.657061][T11403] copy_mm+0x108/0x1b0 [ 499.661140][T11403] copy_process+0x1295/0x3250 [ 499.666042][T11403] ? check_stack_object+0xf7/0x130 [ 499.671120][T11403] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 499.676177][T11403] ? copy_clone_args_from_user+0x6cf/0x790 [ 499.682087][T11403] kernel_clone+0x22d/0x990 [ 499.687003][T11403] ? dup_mmap+0xea0/0xea0 [ 499.691159][T11403] ? create_io_thread+0x1e0/0x1e0 [ 499.696384][T11403] ? file_end_write+0x1b0/0x1b0 [ 499.701053][T11403] __x64_sys_clone3+0x375/0x3a0 [ 499.705918][T11403] ? __ia32_sys_clone+0x300/0x300 [ 499.710860][T11403] ? ksys_write+0x25f/0x2c0 [ 499.715204][T11403] ? debug_smp_processor_id+0x17/0x20 [ 499.720405][T11403] do_syscall_64+0x44/0xd0 [ 499.724745][T11403] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 499.730668][T11403] RIP: 0033:0x7feb5e60c0c9 [ 499.734923][T11403] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 499.754829][T11403] RSP: 002b:00007feb5d37f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 499.763329][T11403] RAX: ffffffffffffffda RBX: 00007feb5e72bf80 RCX: 00007feb5e60c0c9 [ 499.771335][T11403] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007feb5d37f050 [ 499.779385][T11403] RBP: 00007feb5d37f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 499.787375][T11403] R10: 00007feb5d37f050 R11: 0000000000000246 R12: 0000000000000058 [ 499.795300][T11403] R13: 00007ffc843a962f R14: 00007feb5d37f300 R15: 0000000000022000 [ 499.803199][T11403] [ 499.806311][T11403] ------------[ cut here ]------------ [ 499.821384][T11403] refcount_t: underflow; use-after-free. [ 499.830688][T11403] WARNING: CPU: 1 PID: 11403 at lib/refcount.c:28 refcount_warn_saturate+0x165/0x1b0 [ 499.840045][T11403] Modules linked in: [ 499.843813][T11403] CPU: 1 PID: 11403 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 499.854447][T11403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 499.864570][T11403] RIP: 0010:refcount_warn_saturate+0x165/0x1b0 [ 499.870644][T11403] Code: c7 40 60 87 85 31 c0 e8 39 2f e0 fe 0f 0b eb 83 e8 d0 bc 0e ff c6 05 1f 3b 9f 04 01 48 c7 c7 a0 60 87 85 31 c0 e8 1b 2f e0 fe <0f> 0b e9 62 ff ff ff e8 af bc 0e ff c6 05 ff 3a 9f 04 01 48 c7 c7 [ 499.890214][T11403] RSP: 0018:ffffc900091a7880 EFLAGS: 00010246 [ 499.896045][T11403] RAX: 5f241e8dc278a700 RBX: 0000000000000003 RCX: 0000000000040000 [ 499.903910][T11403] RDX: ffffc90004847000 RSI: 0000000000015e95 RDI: 0000000000015e96 [ 499.911771][T11403] RBP: ffffc900091a7890 R08: ffffffff81584ba9 R09: fffff52001234e49 [ 499.919580][T11403] R10: fffff52001234e49 R11: 1ffff92001234e48 R12: ffff888114138418 [ 499.927370][T11403] R13: 1ffff11022827083 R14: 0000000000000003 R15: ffff88812e529ac1 [ 499.935204][T11403] FS: 00007feb5d37f700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 499.944052][T11403] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 499.950474][T11403] CR2: 00007fe45ae1f058 CR3: 000000012e486000 CR4: 00000000003506a0 [ 499.958285][T11403] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 499.966214][T11403] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 499.974511][T11403] Call Trace: [ 499.977624][T11403] [ 499.980422][T11403] vm_area_free+0x208/0x230 [ 499.984777][T11403] dup_mmap+0xbcd/0xea0 [ 499.988917][T11403] ? __delayed_free_task+0x20/0x20 [ 499.994130][T11403] ? mm_init+0x807/0x960 [ 499.998228][T11403] dup_mm+0x91/0x330 [ 500.002055][T11403] copy_mm+0x108/0x1b0 [ 500.006203][T11403] copy_process+0x1295/0x3250 [ 500.010837][T11403] ? check_stack_object+0xf7/0x130 [ 500.015745][T11403] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 500.020978][T11403] ? copy_clone_args_from_user+0x6cf/0x790 [ 500.026545][T11403] kernel_clone+0x22d/0x990 [ 500.030869][T11403] ? dup_mmap+0xea0/0xea0 [ 500.035014][T11403] ? create_io_thread+0x1e0/0x1e0 [ 500.039981][T11403] ? file_end_write+0x1b0/0x1b0 [ 500.045080][T11403] __x64_sys_clone3+0x375/0x3a0 [ 500.049790][T11403] ? __ia32_sys_clone+0x300/0x300 [ 500.054628][T11403] ? ksys_write+0x25f/0x2c0 [ 500.058973][T11403] ? debug_smp_processor_id+0x17/0x20 [ 500.064199][T11403] do_syscall_64+0x44/0xd0 [ 500.068434][T11403] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 500.074178][T11403] RIP: 0033:0x7feb5e60c0c9 [ 500.078412][T11403] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 500.098146][T11403] RSP: 002b:00007feb5d37f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 500.106667][T11403] RAX: ffffffffffffffda RBX: 00007feb5e72bf80 RCX: 00007feb5e60c0c9 [ 500.114651][T11403] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007feb5d37f050 23:12:42 executing program 2: syz_clone3(&(0x7f0000000b40)={0x1000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 65) 23:12:42 executing program 5: openat$hwrng(0xffffffffffffff9c, 0x0, 0x6000, 0x0) 23:12:42 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x9, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x43}, [@btf_id={0x18, 0xb, 0x3, 0x0, 0x1}, @initr0, @cb_func={0x18, 0x4, 0x4, 0x0, 0x6}]}, &(0x7f0000000040)='syzkaller\x00', 0x20, 0x4c, &(0x7f0000000180)=""/76, 0x40f00, 0x1, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000200)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0xf, 0xfffff000, 0x2}, 0x10}, 0x80) syz_clone3(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, {0x400}, &(0x7f0000000000)=""/2, 0x2, 0x0, 0x0}, 0x58) 23:12:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000001c0), 0x0, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x10, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r3, 0xffffffffffffffff, 0x4}, 0x48) r4 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="183700000200000000000000000000000054ff0f09000000181b0000", @ANYRES32, @ANYBLOB="0000000000000000185b00000300eaffffffffffffff00001837000000000000000000000000000018260000", @ANYRES32, @ANYBLOB="000000001000000018200000", @ANYRES32, @ANYBLOB="00000000ffffff7f"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r3, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r4}, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0x58, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'macvlan0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0x58, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r8, 0xffffffffffffffff, 0x4}, 0x48) r9 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r8, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r9}, 0x80) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000b00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000940)={0x160, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x160}}, 0x20040810) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) syz_clone3(&(0x7f0000000040)={0x22000100, 0x0, 0x0, 0x0, {0x26}, 0x0, 0x0, 0x0, 0x0, 0xff4c}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000001c0), 0x0, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x10, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00'}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r3, 0xffffffffffffffff, 0x4}, 0x48) (async) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="183700000200000000000000000000000054ff0f09000000181b0000", @ANYRES32, @ANYBLOB="0000000000000000185b00000300eaffffffffffffff00001837000000000000000000000000000018260000", @ANYRES32, @ANYBLOB="000000001000000018200000", @ANYRES32, @ANYBLOB="00000000ffffff7f"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r3, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r4}, 0x80) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0x58, &(0x7f0000000780)}, 0x10) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'macvlan0\x00'}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0x58, &(0x7f0000000880)}, 0x10) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00'}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r8, 0xffffffffffffffff, 0x4}, 0x48) (async) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r8, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r9}, 0x80) (async) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000b00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000940)={0x160, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x160}}, 0x20040810) (async) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) (async) syz_clone3(&(0x7f0000000040)={0x22000100, 0x0, 0x0, 0x0, {0x26}, 0x0, 0x0, 0x0, 0x0, 0xff4c}, 0x58) (async) 23:12:42 executing program 3: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async, rerun: 64) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) (rerun: 64) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) (async) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f0000000000)) 23:12:42 executing program 1: r0 = syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f0000000280)={0x10000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r0], 0x1}, 0x58) r1 = getpgrp(0xffffffffffffffff) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/fs/9p', 0x141200, 0x2) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f0000000580)={0x0, 0x1, 0x4, &(0x7f0000000540)=0x9}) openat$cgroup_pressure(r2, &(0x7f0000000500)='cpu.pressure\x00', 0x2, 0x0) r3 = syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f0000000280)={0x10000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r3], 0x1}, 0x58) syz_clone3(&(0x7f0000000440)={0x100000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/107, 0x6b, &(0x7f0000000300)=""/255, &(0x7f0000000400)=[r0, 0xffffffffffffffff, 0x0, r1, 0x0, r3, 0x0, 0x0], 0x8}, 0x58) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000000)) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$HIDIOCSFEATURE(r4, 0xc0404806, &(0x7f0000000100)="b77530b44540f6d63cbd653753564f98bc7b95bfbf149696452854056fa7a0a7fab7e01428ee2c187c4fcf4e5c12c15a88cb7414fc8f2e693f6a2fcc4636db6a896c5e9e48b9764e1909b13cacc5ae4511b2637c8d9eda34be85cba24c0dc1e418b7e782b3677a113b409b366dfffd60c9991b47001b5f279375bb4f1a8d2eeb6e4e3d7e76590ee0818af387d4394dec3917e16612af7d36d1df84dfda5d") ioctl$HIDIOCGFEATURE(r4, 0xc0404807, &(0x7f0000000080)={0x6, "7047e5ade52d029d21c8a7e94db0daeb3cfb7d62d7ab5165dc09fdf5281f2460fecdf98e6d4448b37c9706ad3b3a0b98a876f7f394052423ba6bc81da9880cff"}) 23:12:42 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x9, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x43}, [@btf_id={0x18, 0xb, 0x3, 0x0, 0x1}, @initr0, @cb_func={0x18, 0x4, 0x4, 0x0, 0x6}]}, &(0x7f0000000040)='syzkaller\x00', 0x20, 0x4c, &(0x7f0000000180)=""/76, 0x40f00, 0x1, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000200)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0xf, 0xfffff000, 0x2}, 0x10}, 0x80) (async) syz_clone3(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, {0x400}, &(0x7f0000000000)=""/2, 0x2, 0x0, 0x0}, 0x58) 23:12:42 executing program 5: openat$hwrng(0xffffffffffffff9c, 0x0, 0x6000, 0x0) 23:12:42 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x9, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x43}, [@btf_id={0x18, 0xb, 0x3, 0x0, 0x1}, @initr0, @cb_func={0x18, 0x4, 0x4, 0x0, 0x6}]}, &(0x7f0000000040)='syzkaller\x00', 0x20, 0x4c, &(0x7f0000000180)=""/76, 0x40f00, 0x1, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000200)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0xf, 0xfffff000, 0x2}, 0x10}, 0x80) syz_clone3(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, {0x400}, &(0x7f0000000000)=""/2, 0x2, 0x0, 0x0}, 0x58) [ 500.122467][T11403] RBP: 00007feb5d37f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 500.130281][T11403] R10: 00007feb5d37f050 R11: 0000000000000246 R12: 0000000000000058 [ 500.138067][T11403] R13: 00007ffc843a962f R14: 00007feb5d37f300 R15: 0000000000022000 [ 500.146079][T11403] [ 500.148942][T11403] ---[ end trace 3866b3ca29631941 ]--- 23:12:42 executing program 0: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000040)={0x0, 0x4, 0x401, &(0x7f0000000000)=0x3}) ioctl$KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000140)={0x0, 0x3, 0x9, &(0x7f0000000100)=0x9d1e1b8}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={0xffffffffffffffff, 0xa, 0x0, 0xfffffff7, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x20) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f00000001c0)={0x0, 0x8, 0x1, &(0x7f0000000180)=0x20}) 23:12:42 executing program 5: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 23:12:42 executing program 0: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000040)={0x0, 0x4, 0x401, &(0x7f0000000000)=0x3}) ioctl$KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000140)={0x0, 0x3, 0x9, &(0x7f0000000100)=0x9d1e1b8}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={0xffffffffffffffff, 0xa, 0x0, 0xfffffff7, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x20) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f00000001c0)={0x0, 0x8, 0x1, &(0x7f0000000180)=0x20}) syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) (async) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000040)={0x0, 0x4, 0x401, &(0x7f0000000000)=0x3}) (async) ioctl$KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000140)={0x0, 0x3, 0x9, &(0x7f0000000100)=0x9d1e1b8}) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={0xffffffffffffffff, 0xa, 0x0, 0xfffffff7, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x20) (async) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f00000001c0)={0x0, 0x8, 0x1, &(0x7f0000000180)=0x20}) (async) [ 500.203209][T11481] FAULT_INJECTION: forcing a failure. [ 500.203209][T11481] name failslab, interval 1, probability 0, space 0, times 0 [ 500.245973][T11481] CPU: 0 PID: 11481 Comm: syz-executor.2 Tainted: G W 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 500.257445][T11481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 500.267508][T11481] Call Trace: [ 500.270629][T11481] [ 500.273403][T11481] dump_stack_lvl+0x151/0x1b7 [ 500.278110][T11481] ? bfq_pos_tree_add_move+0x43e/0x43e [ 500.283388][T11481] dump_stack+0x15/0x17 [ 500.287383][T11481] should_fail+0x3c0/0x510 [ 500.291637][T11481] __should_failslab+0x9f/0xe0 [ 500.296233][T11481] should_failslab+0x9/0x20 [ 500.300578][T11481] kmem_cache_alloc+0x4f/0x2f0 [ 500.305171][T11481] ? anon_vma_fork+0x1b9/0x4f0 [ 500.310638][T11481] anon_vma_fork+0x1b9/0x4f0 [ 500.315067][T11481] dup_mmap+0x750/0xea0 [ 500.319059][T11481] ? __delayed_free_task+0x20/0x20 [ 500.324006][T11481] ? mm_init+0x807/0x960 [ 500.328081][T11481] dup_mm+0x91/0x330 [ 500.331904][T11481] copy_mm+0x108/0x1b0 [ 500.335814][T11481] copy_process+0x1295/0x3250 [ 500.340325][T11481] ? check_stack_object+0xf7/0x130 [ 500.345271][T11481] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 500.350218][T11481] ? copy_clone_args_from_user+0x6cf/0x790 [ 500.355859][T11481] kernel_clone+0x22d/0x990 [ 500.360205][T11481] ? dup_mmap+0xea0/0xea0 [ 500.364364][T11481] ? create_io_thread+0x1e0/0x1e0 [ 500.369229][T11481] ? file_end_write+0x1b0/0x1b0 [ 500.373996][T11481] __x64_sys_clone3+0x375/0x3a0 [ 500.378683][T11481] ? __ia32_sys_clone+0x300/0x300 [ 500.383550][T11481] ? ksys_write+0x25f/0x2c0 [ 500.387884][T11481] ? debug_smp_processor_id+0x17/0x20 [ 500.393092][T11481] do_syscall_64+0x44/0xd0 [ 500.397349][T11481] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 500.403163][T11481] RIP: 0033:0x7feb5e60c0c9 [ 500.407427][T11481] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 500.426855][T11481] RSP: 002b:00007feb5d37f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 500.435376][T11481] RAX: ffffffffffffffda RBX: 00007feb5e72bf80 RCX: 00007feb5e60c0c9 23:12:42 executing program 2: syz_clone3(&(0x7f0000000b40)={0x1000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 66) 23:12:42 executing program 1: r0 = syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f0000000280)={0x10000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r0], 0x1}, 0x58) (async) r1 = getpgrp(0xffffffffffffffff) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/fs/9p', 0x141200, 0x2) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f0000000580)={0x0, 0x1, 0x4, &(0x7f0000000540)=0x9}) openat$cgroup_pressure(r2, &(0x7f0000000500)='cpu.pressure\x00', 0x2, 0x0) r3 = syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f0000000280)={0x10000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r3], 0x1}, 0x58) (async) syz_clone3(&(0x7f0000000440)={0x100000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/107, 0x6b, &(0x7f0000000300)=""/255, &(0x7f0000000400)=[r0, 0xffffffffffffffff, 0x0, r1, 0x0, r3, 0x0, 0x0], 0x8}, 0x58) (async) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000000)) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$HIDIOCSFEATURE(r4, 0xc0404806, &(0x7f0000000100)="b77530b44540f6d63cbd653753564f98bc7b95bfbf149696452854056fa7a0a7fab7e01428ee2c187c4fcf4e5c12c15a88cb7414fc8f2e693f6a2fcc4636db6a896c5e9e48b9764e1909b13cacc5ae4511b2637c8d9eda34be85cba24c0dc1e418b7e782b3677a113b409b366dfffd60c9991b47001b5f279375bb4f1a8d2eeb6e4e3d7e76590ee0818af387d4394dec3917e16612af7d36d1df84dfda5d") (async) ioctl$HIDIOCGFEATURE(r4, 0xc0404807, &(0x7f0000000080)={0x6, "7047e5ade52d029d21c8a7e94db0daeb3cfb7d62d7ab5165dc09fdf5281f2460fecdf98e6d4448b37c9706ad3b3a0b98a876f7f394052423ba6bc81da9880cff"}) 23:12:42 executing program 5: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 23:12:42 executing program 4: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r0, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1000}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffff7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x1) 23:12:42 executing program 3: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.stat\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0) 23:12:42 executing program 0: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) (async) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000040)={0x0, 0x4, 0x401, &(0x7f0000000000)=0x3}) ioctl$KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000140)={0x0, 0x3, 0x9, &(0x7f0000000100)=0x9d1e1b8}) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={0xffffffffffffffff, 0xa, 0x0, 0xfffffff7, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x20) (async) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f00000001c0)={0x0, 0x8, 0x1, &(0x7f0000000180)=0x20}) [ 500.443170][T11481] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007feb5d37f050 [ 500.450980][T11481] RBP: 00007feb5d37f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 500.458793][T11481] R10: 00007feb5d37f050 R11: 0000000000000246 R12: 0000000000000058 [ 500.466612][T11481] R13: 00007ffc843a962f R14: 00007feb5d37f300 R15: 0000000000022000 [ 500.474431][T11481] 23:12:42 executing program 5: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 23:12:42 executing program 4: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r0, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1000}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffff7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x1) 23:12:42 executing program 5: r0 = syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f0000000280)={0x10000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r0], 0x1}, 0x58) r1 = getpgrp(0xffffffffffffffff) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/fs/9p', 0x141200, 0x2) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f0000000580)={0x0, 0x1, 0x4, &(0x7f0000000540)=0x9}) openat$cgroup_pressure(r2, &(0x7f0000000500)='cpu.pressure\x00', 0x2, 0x0) r3 = syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f0000000280)={0x10000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r3], 0x1}, 0x58) syz_clone3(&(0x7f0000000440)={0x100000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/107, 0x6b, &(0x7f0000000300)=""/255, &(0x7f0000000400)=[r0, 0xffffffffffffffff, 0x0, r1, 0x0, r3, 0x0, 0x0], 0x8}, 0x58) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000000)) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$HIDIOCSFEATURE(r4, 0xc0404806, &(0x7f0000000100)="b77530b44540f6d63cbd653753564f98bc7b95bfbf149696452854056fa7a0a7fab7e01428ee2c187c4fcf4e5c12c15a88cb7414fc8f2e693f6a2fcc4636db6a896c5e9e48b9764e1909b13cacc5ae4511b2637c8d9eda34be85cba24c0dc1e418b7e782b3677a113b409b366dfffd60c9991b47001b5f279375bb4f1a8d2eeb6e4e3d7e76590ee0818af387d4394dec3917e16612af7d36d1df84dfda5d") ioctl$HIDIOCGFEATURE(r4, 0xc0404807, &(0x7f0000000080)={0x6, "7047e5ade52d029d21c8a7e94db0daeb3cfb7d62d7ab5165dc09fdf5281f2460fecdf98e6d4448b37c9706ad3b3a0b98a876f7f394052423ba6bc81da9880cff"}) 23:12:42 executing program 0: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000000)) syz_init_net_socket$nfc_raw(0x27, 0x6, 0x0) 23:12:42 executing program 4: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r0, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1000}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffff7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x1) [ 500.560279][T11584] FAULT_INJECTION: forcing a failure. [ 500.560279][T11584] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 500.575354][T11584] CPU: 0 PID: 11584 Comm: syz-executor.2 Tainted: G W 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 500.586823][T11584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 500.596712][T11584] Call Trace: [ 500.599846][T11584] [ 500.602610][T11584] dump_stack_lvl+0x151/0x1b7 23:12:42 executing program 3: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.stat\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0) [ 500.607126][T11584] ? bfq_pos_tree_add_move+0x43e/0x43e [ 500.612427][T11584] dump_stack+0x15/0x17 [ 500.616416][T11584] should_fail+0x3c0/0x510 [ 500.620663][T11584] should_fail_alloc_page+0x58/0x70 [ 500.625704][T11584] __alloc_pages+0x1de/0x7c0 [ 500.630132][T11584] ? __count_vm_events+0x30/0x30 [ 500.634901][T11584] pte_alloc_one+0x73/0x1b0 [ 500.639245][T11584] ? pfn_modify_allowed+0x2e0/0x2e0 [ 500.644376][T11584] __pte_alloc+0x86/0x350 [ 500.648966][T11584] ? is_module_text_address+0xe1/0x140 [ 500.654259][T11584] ? free_pgtables+0x210/0x210 [ 500.658947][T11584] ? __kernel_text_address+0x9a/0x110 [ 500.664156][T11584] ? unwind_get_return_address+0x4c/0x90 [ 500.669710][T11584] copy_pte_range+0x1b1f/0x20b0 [ 500.674412][T11584] ? stack_trace_save+0x12d/0x1f0 [ 500.679436][T11584] ? anon_vma_clone+0xa1/0x4f0 [ 500.684072][T11584] ? __kunmap_atomic+0x80/0x80 [ 500.688630][T11584] ? dup_mmap+0x750/0xea0 [ 500.693151][T11584] ? dup_mm+0x91/0x330 [ 500.697058][T11584] ? copy_mm+0x108/0x1b0 [ 500.701137][T11584] ? copy_process+0x1295/0x3250 [ 500.705833][T11584] ? kernel_clone+0x22d/0x990 [ 500.710337][T11584] ? __x64_sys_clone3+0x375/0x3a0 [ 500.715198][T11584] ? do_syscall_64+0x44/0xd0 [ 500.719617][T11584] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 500.725641][T11584] copy_page_range+0xc1e/0x1090 [ 500.730328][T11584] ? pfn_valid+0x1e0/0x1e0 [ 500.734601][T11584] dup_mmap+0x99f/0xea0 [ 500.738659][T11584] ? __delayed_free_task+0x20/0x20 [ 500.743786][T11584] ? mm_init+0x807/0x960 [ 500.747861][T11584] dup_mm+0x91/0x330 [ 500.751604][T11584] copy_mm+0x108/0x1b0 [ 500.755595][T11584] copy_process+0x1295/0x3250 [ 500.760095][T11584] ? check_stack_object+0xf7/0x130 [ 500.765041][T11584] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 500.769986][T11584] ? copy_clone_args_from_user+0x6cf/0x790 [ 500.775664][T11584] kernel_clone+0x22d/0x990 [ 500.779976][T11584] ? dup_mmap+0xea0/0xea0 [ 500.784132][T11584] ? create_io_thread+0x1e0/0x1e0 [ 500.789077][T11584] ? file_end_write+0x1b0/0x1b0 [ 500.793767][T11584] __x64_sys_clone3+0x375/0x3a0 [ 500.798454][T11584] ? __ia32_sys_clone+0x300/0x300 [ 500.803325][T11584] ? ksys_write+0x25f/0x2c0 [ 500.807655][T11584] ? debug_smp_processor_id+0x17/0x20 [ 500.812862][T11584] do_syscall_64+0x44/0xd0 [ 500.817213][T11584] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 500.822928][T11584] RIP: 0033:0x7feb5e60c0c9 [ 500.827179][T11584] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 500.846621][T11584] RSP: 002b:00007feb5d37f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 23:12:43 executing program 2: syz_clone3(&(0x7f0000000b40)={0x1000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 67) 23:12:43 executing program 1: r0 = syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f0000000280)={0x10000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r0], 0x1}, 0x58) r1 = getpgrp(0xffffffffffffffff) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/fs/9p', 0x141200, 0x2) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f0000000580)={0x0, 0x1, 0x4, &(0x7f0000000540)=0x9}) (async) openat$cgroup_pressure(r2, &(0x7f0000000500)='cpu.pressure\x00', 0x2, 0x0) r3 = syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f0000000280)={0x10000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r3], 0x1}, 0x58) syz_clone3(&(0x7f0000000440)={0x100000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/107, 0x6b, &(0x7f0000000300)=""/255, &(0x7f0000000400)=[r0, 0xffffffffffffffff, 0x0, r1, 0x0, r3, 0x0, 0x0], 0x8}, 0x58) (async) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000000)) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$HIDIOCSFEATURE(r4, 0xc0404806, &(0x7f0000000100)="b77530b44540f6d63cbd653753564f98bc7b95bfbf149696452854056fa7a0a7fab7e01428ee2c187c4fcf4e5c12c15a88cb7414fc8f2e693f6a2fcc4636db6a896c5e9e48b9764e1909b13cacc5ae4511b2637c8d9eda34be85cba24c0dc1e418b7e782b3677a113b409b366dfffd60c9991b47001b5f279375bb4f1a8d2eeb6e4e3d7e76590ee0818af387d4394dec3917e16612af7d36d1df84dfda5d") (async) ioctl$HIDIOCGFEATURE(r4, 0xc0404807, &(0x7f0000000080)={0x6, "7047e5ade52d029d21c8a7e94db0daeb3cfb7d62d7ab5165dc09fdf5281f2460fecdf98e6d4448b37c9706ad3b3a0b98a876f7f394052423ba6bc81da9880cff"}) 23:12:43 executing program 3: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.stat\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0) syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.stat\x00', 0x0, 0x0) (async) openat$cgroup_int(r0, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0) (async) 23:12:43 executing program 4: r0 = syz_open_dev$char_usb(0xc, 0xb4, 0xffffffffffffff7f) write$char_usb(r0, &(0x7f0000000000)="d60e6ec0535f2a9477c16347c7725b70017d8dfb616316792cceb462310a8606dcaa022b38097934779f640e186bfea5351f34254a588b8998c39c7237c61cb24e960f793664c059dc9f2fd433a2509b81f4d3213adf42c02e8de0c25bf8a3", 0x5f) syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:12:43 executing program 5: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000040)={0x0, 0x4, 0x401, &(0x7f0000000000)=0x3}) ioctl$KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000140)={0x0, 0x3, 0x9, &(0x7f0000000100)=0x9d1e1b8}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={0xffffffffffffffff, 0xa, 0x0, 0xfffffff7, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x20) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f00000001c0)={0x0, 0x8, 0x1, &(0x7f0000000180)=0x20}) 23:12:43 executing program 0: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000000)) syz_init_net_socket$nfc_raw(0x27, 0x6, 0x0) syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000000)) (async) syz_init_net_socket$nfc_raw(0x27, 0x6, 0x0) (async) [ 500.854865][T11584] RAX: ffffffffffffffda RBX: 00007feb5e72bf80 RCX: 00007feb5e60c0c9 [ 500.862677][T11584] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007feb5d37f050 [ 500.871358][T11584] RBP: 00007feb5d37f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 500.879175][T11584] R10: 00007feb5d37f050 R11: 0000000000000246 R12: 0000000000000058 [ 500.886978][T11584] R13: 00007ffc843a962f R14: 00007feb5d37f300 R15: 0000000000022000 [ 500.894791][T11584] [ 500.918949][T11611] FAULT_INJECTION: forcing a failure. [ 500.918949][T11611] name failslab, interval 1, probability 0, space 0, times 0 [ 500.935610][T11611] CPU: 1 PID: 11611 Comm: syz-executor.2 Tainted: G W 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 500.947069][T11611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 500.956966][T11611] Call Trace: [ 500.960089][T11611] [ 500.963034][T11611] dump_stack_lvl+0x151/0x1b7 [ 500.967547][T11611] ? bfq_pos_tree_add_move+0x43e/0x43e [ 500.972842][T11611] dump_stack+0x15/0x17 [ 500.976834][T11611] should_fail+0x3c0/0x510 [ 500.981087][T11611] __should_failslab+0x9f/0xe0 [ 500.985693][T11611] should_failslab+0x9/0x20 [ 500.990027][T11611] kmem_cache_alloc+0x4f/0x2f0 [ 500.994628][T11611] ? vm_area_dup+0x26/0x1d0 [ 500.998970][T11611] vm_area_dup+0x26/0x1d0 [ 501.003131][T11611] dup_mmap+0x6b8/0xea0 [ 501.007126][T11611] ? __delayed_free_task+0x20/0x20 [ 501.012072][T11611] ? mm_init+0x807/0x960 [ 501.016152][T11611] dup_mm+0x91/0x330 [ 501.019885][T11611] copy_mm+0x108/0x1b0 [ 501.023789][T11611] copy_process+0x1295/0x3250 [ 501.028308][T11611] ? check_stack_object+0xf7/0x130 [ 501.033251][T11611] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 501.038202][T11611] ? copy_clone_args_from_user+0x6cf/0x790 [ 501.044011][T11611] kernel_clone+0x22d/0x990 [ 501.048350][T11611] ? dup_mmap+0xea0/0xea0 [ 501.052516][T11611] ? create_io_thread+0x1e0/0x1e0 [ 501.057380][T11611] ? file_end_write+0x1b0/0x1b0 [ 501.062066][T11611] __x64_sys_clone3+0x375/0x3a0 [ 501.066755][T11611] ? __ia32_sys_clone+0x300/0x300 [ 501.071614][T11611] ? ksys_write+0x25f/0x2c0 [ 501.075953][T11611] ? debug_smp_processor_id+0x17/0x20 [ 501.081180][T11611] do_syscall_64+0x44/0xd0 [ 501.085410][T11611] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 501.091138][T11611] RIP: 0033:0x7feb5e60c0c9 [ 501.095394][T11611] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 23:12:43 executing program 1: socket(0x2c, 0x0, 0x0) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) 23:12:43 executing program 0: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000000)) syz_init_net_socket$nfc_raw(0x27, 0x6, 0x0) 23:12:43 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 23:12:43 executing program 5: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000040)={0x0, 0x4, 0x401, &(0x7f0000000000)=0x3}) ioctl$KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000140)={0x0, 0x3, 0x9, &(0x7f0000000100)=0x9d1e1b8}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={0xffffffffffffffff, 0xa, 0x0, 0xfffffff7, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x20) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f00000001c0)={0x0, 0x8, 0x1, &(0x7f0000000180)=0x20}) 23:12:43 executing program 4: r0 = syz_open_dev$char_usb(0xc, 0xb4, 0xffffffffffffff7f) write$char_usb(r0, &(0x7f0000000000)="d60e6ec0535f2a9477c16347c7725b70017d8dfb616316792cceb462310a8606dcaa022b38097934779f640e186bfea5351f34254a588b8998c39c7237c61cb24e960f793664c059dc9f2fd433a2509b81f4d3213adf42c02e8de0c25bf8a3", 0x5f) (async) syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 501.114835][T11611] RSP: 002b:00007feb5d37f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 501.123078][T11611] RAX: ffffffffffffffda RBX: 00007feb5e72bf80 RCX: 00007feb5e60c0c9 [ 501.130977][T11611] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007feb5d37f050 [ 501.139393][T11611] RBP: 00007feb5d37f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 501.147213][T11611] R10: 00007feb5d37f050 R11: 0000000000000246 R12: 0000000000000058 [ 501.155028][T11611] R13: 00007ffc843a962f R14: 00007feb5d37f300 R15: 0000000000022000 [ 501.162830][T11611] 23:12:43 executing program 4: r0 = syz_open_dev$char_usb(0xc, 0xb4, 0xffffffffffffff7f) write$char_usb(r0, &(0x7f0000000000)="d60e6ec0535f2a9477c16347c7725b70017d8dfb616316792cceb462310a8606dcaa022b38097934779f640e186bfea5351f34254a588b8998c39c7237c61cb24e960f793664c059dc9f2fd433a2509b81f4d3213adf42c02e8de0c25bf8a3", 0x5f) (async) syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:12:43 executing program 2: syz_clone3(&(0x7f0000000b40)={0x1000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 68) 23:12:43 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 23:12:43 executing program 5: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000040)={0x0, 0x4, 0x401, &(0x7f0000000000)=0x3}) ioctl$KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000140)={0x0, 0x3, 0x9, &(0x7f0000000100)=0x9d1e1b8}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={0xffffffffffffffff, 0xa, 0x0, 0xfffffff7, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x20) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f00000001c0)={0x0, 0x8, 0x1, &(0x7f0000000180)=0x20}) 23:12:43 executing program 1: socket(0x2c, 0x0, 0x0) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) socket(0x2c, 0x0, 0x0) (async) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) (async) 23:12:43 executing program 5: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000040)={0x0, 0x4, 0x401, &(0x7f0000000000)=0x3}) ioctl$KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000140)={0x0, 0x3, 0x9, &(0x7f0000000100)=0x9d1e1b8}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={0xffffffffffffffff, 0xa, 0x0, 0xfffffff7, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x20) 23:12:43 executing program 1: socket(0x2c, 0x0, 0x0) (async) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) 23:12:43 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 23:12:43 executing program 4: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000100)={0x3, 0xffffffffffffffff, 0x1}) r1 = socket(0x1, 0x80000, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r1) ioctl$KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, &(0x7f0000000080)={0x0, 0x7, 0x100000000, &(0x7f0000000040)=0x5}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 23:12:43 executing program 5: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000040)={0x0, 0x4, 0x401, &(0x7f0000000000)=0x3}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={0xffffffffffffffff, 0xa, 0x0, 0xfffffff7, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x20) [ 501.257843][T11651] FAULT_INJECTION: forcing a failure. [ 501.257843][T11651] name fail_page_alloc, interval 1, probability 0, space 0, times 0 23:12:43 executing program 4: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000100)={0x3, 0xffffffffffffffff, 0x1}) r1 = socket(0x1, 0x80000, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r1) ioctl$KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, &(0x7f0000000080)={0x0, 0x7, 0x100000000, &(0x7f0000000040)=0x5}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000100)={0x3, 0xffffffffffffffff, 0x1}) (async) socket(0x1, 0x80000, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r1) (async) ioctl$KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, &(0x7f0000000080)={0x0, 0x7, 0x100000000, &(0x7f0000000040)=0x5}) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) 23:12:43 executing program 5: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={0xffffffffffffffff, 0xa, 0x0, 0xfffffff7, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x20) 23:12:43 executing program 1: r0 = request_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000001c0)=':\x00t;\x97@\xdaELn\x7f\x12>)\xd4\xb8\xfc]\xe7\r\xa2\xc9W\xd9\x10g\\\xc27?H\xcchBs\xe3\xbc\x9d\v\x83\xd1\x7fj\xe1+\xff\x01\'\xdeG\x86\xe1z\x0f\xb9{\xd2\xd8N\xee\x0e;:i\xd4fW@\xf0\xd5\xd3tK\xf7b\x1c0o\x0f\xddA\xe8\"\r\x01\x93-f\xc5\x89\xfc\xe9\xba\x98\xb3gU\xd2\x91\x9e\xff2S\aI\xfb\x98nfn\xe0\xa0N|bod]\x19\xa2\xf4\x055\x85kA\xf8{H\x9d<\x18\vt\x87/\x1am\xbd\xf4\xd9\x9b\x9d;\xe5\xd9\xfb\xc2\xf1[@\x899\x02\r\x86h\x11\x0f|\x12\'F\xe4\x0fR\x82G\xe3\"\xeb\xd1\xf6\x1a\xba\x04\x7fd\xf3\x1bVi\xa0\xe4\xc9\x98\xc9\x1dY\xbdz2\x8bc\xc7\t\x1a\xde\xdc\xcf\xcbm\xfau\xdb\xdb\xad\xfc\xc7\x82\xb8\xc8\xe2', 0xfffffffffffffffe) socket(0x10, 0x0, 0xffffffff) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$clear(0x7, r2) r3 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r1, r2, r3, 0x0) prctl$PR_SET_TSC(0x1a, 0x3) [ 501.319720][T11651] CPU: 1 PID: 11651 Comm: syz-executor.2 Tainted: G W 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 501.331194][T11651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 501.341117][T11651] Call Trace: [ 501.344207][T11651] [ 501.346985][T11651] dump_stack_lvl+0x151/0x1b7 [ 501.351509][T11651] ? bfq_pos_tree_add_move+0x43e/0x43e [ 501.356793][T11651] dump_stack+0x15/0x17 [ 501.360869][T11651] should_fail+0x3c0/0x510 [ 501.365124][T11651] should_fail_alloc_page+0x58/0x70 [ 501.370252][T11651] __alloc_pages+0x1de/0x7c0 [ 501.374688][T11651] ? __count_vm_events+0x30/0x30 [ 501.379450][T11651] ? __this_cpu_preempt_check+0x13/0x20 [ 501.384832][T11651] ? __mod_node_page_state+0xac/0xf0 [ 501.389955][T11651] pte_alloc_one+0x73/0x1b0 [ 501.394305][T11651] ? pfn_modify_allowed+0x2e0/0x2e0 [ 501.399339][T11651] __pte_alloc+0x86/0x350 [ 501.403506][T11651] ? free_pgtables+0x210/0x210 [ 501.408090][T11651] ? _raw_spin_lock+0xa3/0x1b0 [ 501.412694][T11651] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 501.417898][T11651] ? __kernel_text_address+0x9a/0x110 [ 501.423109][T11651] copy_pte_range+0x1b1f/0x20b0 [ 501.427884][T11651] ? __kunmap_atomic+0x80/0x80 [ 501.432491][T11651] ? __kasan_slab_alloc+0xc4/0xe0 [ 501.437342][T11651] ? __kasan_slab_alloc+0xb2/0xe0 [ 501.442208][T11651] ? kmem_cache_alloc+0x189/0x2f0 [ 501.447061][T11651] ? vm_area_dup+0x26/0x1d0 [ 501.451403][T11651] ? dup_mmap+0x6b8/0xea0 [ 501.456346][T11651] ? dup_mm+0x91/0x330 [ 501.460250][T11651] ? copy_mm+0x108/0x1b0 [ 501.464338][T11651] ? copy_process+0x1295/0x3250 [ 501.469016][T11651] ? kernel_clone+0x22d/0x990 [ 501.473547][T11651] ? __x64_sys_clone3+0x375/0x3a0 [ 501.478393][T11651] ? do_syscall_64+0x44/0xd0 [ 501.482818][T11651] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 501.488723][T11651] copy_page_range+0xc1e/0x1090 [ 501.493419][T11651] ? pfn_valid+0x1e0/0x1e0 [ 501.497661][T11651] dup_mmap+0x99f/0xea0 [ 501.501655][T11651] ? __delayed_free_task+0x20/0x20 [ 501.506599][T11651] ? mm_init+0x807/0x960 [ 501.511288][T11651] dup_mm+0x91/0x330 [ 501.515017][T11651] copy_mm+0x108/0x1b0 [ 501.518935][T11651] copy_process+0x1295/0x3250 [ 501.523614][T11651] ? check_stack_object+0xf7/0x130 [ 501.528560][T11651] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 501.533508][T11651] ? copy_clone_args_from_user+0x6cf/0x790 [ 501.539150][T11651] kernel_clone+0x22d/0x990 [ 501.543495][T11651] ? dup_mmap+0xea0/0xea0 [ 501.547652][T11651] ? create_io_thread+0x1e0/0x1e0 [ 501.552530][T11651] ? file_end_write+0x1b0/0x1b0 [ 501.557200][T11651] __x64_sys_clone3+0x375/0x3a0 [ 501.561890][T11651] ? __ia32_sys_clone+0x300/0x300 [ 501.566754][T11651] ? ksys_write+0x25f/0x2c0 [ 501.571200][T11651] ? debug_smp_processor_id+0x17/0x20 [ 501.576401][T11651] do_syscall_64+0x44/0xd0 [ 501.580654][T11651] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 501.586423][T11651] RIP: 0033:0x7feb5e60c0c9 [ 501.590627][T11651] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 501.610064][T11651] RSP: 002b:00007feb5d37f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 501.618329][T11651] RAX: ffffffffffffffda RBX: 00007feb5e72bf80 RCX: 00007feb5e60c0c9 [ 501.626132][T11651] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007feb5d37f050 [ 501.633934][T11651] RBP: 00007feb5d37f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 501.641746][T11651] R10: 00007feb5d37f050 R11: 0000000000000246 R12: 0000000000000058 [ 501.649561][T11651] R13: 00007ffc843a962f R14: 00007feb5d37f300 R15: 0000000000022000 [ 501.657371][T11651] 23:12:44 executing program 2: syz_clone3(&(0x7f0000000b40)={0x1000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 69) 23:12:44 executing program 4: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000100)={0x3, 0xffffffffffffffff, 0x1}) (async) r1 = socket(0x1, 0x80000, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r1) (async) ioctl$KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, &(0x7f0000000080)={0x0, 0x7, 0x100000000, &(0x7f0000000040)=0x5}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 23:12:44 executing program 0: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) 23:12:44 executing program 1: r0 = request_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000001c0)=':\x00t;\x97@\xdaELn\x7f\x12>)\xd4\xb8\xfc]\xe7\r\xa2\xc9W\xd9\x10g\\\xc27?H\xcchBs\xe3\xbc\x9d\v\x83\xd1\x7fj\xe1+\xff\x01\'\xdeG\x86\xe1z\x0f\xb9{\xd2\xd8N\xee\x0e;:i\xd4fW@\xf0\xd5\xd3tK\xf7b\x1c0o\x0f\xddA\xe8\"\r\x01\x93-f\xc5\x89\xfc\xe9\xba\x98\xb3gU\xd2\x91\x9e\xff2S\aI\xfb\x98nfn\xe0\xa0N|bod]\x19\xa2\xf4\x055\x85kA\xf8{H\x9d<\x18\vt\x87/\x1am\xbd\xf4\xd9\x9b\x9d;\xe5\xd9\xfb\xc2\xf1[@\x899\x02\r\x86h\x11\x0f|\x12\'F\xe4\x0fR\x82G\xe3\"\xeb\xd1\xf6\x1a\xba\x04\x7fd\xf3\x1bVi\xa0\xe4\xc9\x98\xc9\x1dY\xbdz2\x8bc\xc7\t\x1a\xde\xdc\xcf\xcbm\xfau\xdb\xdb\xad\xfc\xc7\x82\xb8\xc8\xe2', 0xfffffffffffffffe) socket(0x10, 0x0, 0xffffffff) (async, rerun: 32) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r0) (rerun: 32) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$clear(0x7, r2) (async, rerun: 64) r3 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, r0) (rerun: 64) keyctl$KEYCTL_MOVE(0x1e, r1, r2, r3, 0x0) (async) prctl$PR_SET_TSC(0x1a, 0x3) 23:12:44 executing program 5: bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={0xffffffffffffffff, 0xa, 0x0, 0xfffffff7, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x20) 23:12:44 executing program 0: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) 23:12:44 executing program 1: r0 = request_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000001c0)=':\x00t;\x97@\xdaELn\x7f\x12>)\xd4\xb8\xfc]\xe7\r\xa2\xc9W\xd9\x10g\\\xc27?H\xcchBs\xe3\xbc\x9d\v\x83\xd1\x7fj\xe1+\xff\x01\'\xdeG\x86\xe1z\x0f\xb9{\xd2\xd8N\xee\x0e;:i\xd4fW@\xf0\xd5\xd3tK\xf7b\x1c0o\x0f\xddA\xe8\"\r\x01\x93-f\xc5\x89\xfc\xe9\xba\x98\xb3gU\xd2\x91\x9e\xff2S\aI\xfb\x98nfn\xe0\xa0N|bod]\x19\xa2\xf4\x055\x85kA\xf8{H\x9d<\x18\vt\x87/\x1am\xbd\xf4\xd9\x9b\x9d;\xe5\xd9\xfb\xc2\xf1[@\x899\x02\r\x86h\x11\x0f|\x12\'F\xe4\x0fR\x82G\xe3\"\xeb\xd1\xf6\x1a\xba\x04\x7fd\xf3\x1bVi\xa0\xe4\xc9\x98\xc9\x1dY\xbdz2\x8bc\xc7\t\x1a\xde\xdc\xcf\xcbm\xfau\xdb\xdb\xad\xfc\xc7\x82\xb8\xc8\xe2', 0xfffffffffffffffe) socket(0x10, 0x0, 0xffffffff) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$clear(0x7, r2) r3 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r1, r2, r3, 0x0) prctl$PR_SET_TSC(0x1a, 0x3) request_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000001c0)=':\x00t;\x97@\xdaELn\x7f\x12>)\xd4\xb8\xfc]\xe7\r\xa2\xc9W\xd9\x10g\\\xc27?H\xcchBs\xe3\xbc\x9d\v\x83\xd1\x7fj\xe1+\xff\x01\'\xdeG\x86\xe1z\x0f\xb9{\xd2\xd8N\xee\x0e;:i\xd4fW@\xf0\xd5\xd3tK\xf7b\x1c0o\x0f\xddA\xe8\"\r\x01\x93-f\xc5\x89\xfc\xe9\xba\x98\xb3gU\xd2\x91\x9e\xff2S\aI\xfb\x98nfn\xe0\xa0N|bod]\x19\xa2\xf4\x055\x85kA\xf8{H\x9d<\x18\vt\x87/\x1am\xbd\xf4\xd9\x9b\x9d;\xe5\xd9\xfb\xc2\xf1[@\x899\x02\r\x86h\x11\x0f|\x12\'F\xe4\x0fR\x82G\xe3\"\xeb\xd1\xf6\x1a\xba\x04\x7fd\xf3\x1bVi\xa0\xe4\xc9\x98\xc9\x1dY\xbdz2\x8bc\xc7\t\x1a\xde\xdc\xcf\xcbm\xfau\xdb\xdb\xad\xfc\xc7\x82\xb8\xc8\xe2', 0xfffffffffffffffe) (async) socket(0x10, 0x0, 0xffffffff) (async) add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) (async) keyctl$clear(0x7, r2) (async) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, r0) (async) keyctl$KEYCTL_MOVE(0x1e, r1, r2, r3, 0x0) (async) prctl$PR_SET_TSC(0x1a, 0x3) (async) 23:12:44 executing program 5: bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) [ 501.724711][T11691] FAULT_INJECTION: forcing a failure. [ 501.724711][T11691] name failslab, interval 1, probability 0, space 0, times 0 [ 501.747804][T11691] CPU: 0 PID: 11691 Comm: syz-executor.2 Tainted: G W 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 501.759283][T11691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 501.769170][T11691] Call Trace: [ 501.772302][T11691] [ 501.775076][T11691] dump_stack_lvl+0x151/0x1b7 [ 501.780276][T11691] ? bfq_pos_tree_add_move+0x43e/0x43e [ 501.785575][T11691] ? do_syscall_64+0x44/0xd0 [ 501.789998][T11691] dump_stack+0x15/0x17 [ 501.793999][T11691] should_fail+0x3c0/0x510 [ 501.798262][T11691] __should_failslab+0x9f/0xe0 [ 501.802841][T11691] should_failslab+0x9/0x20 [ 501.807267][T11691] kmem_cache_alloc+0x4f/0x2f0 [ 501.811864][T11691] ? anon_vma_clone+0xa1/0x4f0 [ 501.816471][T11691] anon_vma_clone+0xa1/0x4f0 [ 501.822140][T11691] anon_vma_fork+0x91/0x4f0 [ 501.826468][T11691] ? anon_vma_name+0x43/0x70 [ 501.830905][T11691] dup_mmap+0x750/0xea0 [ 501.834903][T11691] ? __delayed_free_task+0x20/0x20 [ 501.839919][T11691] ? mm_init+0x807/0x960 [ 501.844001][T11691] dup_mm+0x91/0x330 [ 501.847820][T11691] copy_mm+0x108/0x1b0 [ 501.851727][T11691] copy_process+0x1295/0x3250 [ 501.856240][T11691] ? check_stack_object+0xf7/0x130 [ 501.861187][T11691] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 501.866132][T11691] ? copy_clone_args_from_user+0x6cf/0x790 [ 501.871776][T11691] kernel_clone+0x22d/0x990 [ 501.876198][T11691] ? dup_mmap+0xea0/0xea0 [ 501.881154][T11691] ? create_io_thread+0x1e0/0x1e0 [ 501.886009][T11691] ? file_end_write+0x1b0/0x1b0 [ 501.890696][T11691] __x64_sys_clone3+0x375/0x3a0 [ 501.895526][T11691] ? __ia32_sys_clone+0x300/0x300 [ 501.900388][T11691] ? ksys_write+0x25f/0x2c0 [ 501.904727][T11691] ? debug_smp_processor_id+0x17/0x20 [ 501.910018][T11691] do_syscall_64+0x44/0xd0 [ 501.914298][T11691] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 501.920000][T11691] RIP: 0033:0x7feb5e60c0c9 [ 501.924254][T11691] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 501.943781][T11691] RSP: 002b:00007feb5d37f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 501.952024][T11691] RAX: ffffffffffffffda RBX: 00007feb5e72bf80 RCX: 00007feb5e60c0c9 [ 501.959839][T11691] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007feb5d37f050 23:12:44 executing program 5: bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) 23:12:44 executing program 5: bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) 23:12:44 executing program 5: bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0, 0xfffffff7, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x20) 23:12:44 executing program 1: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x8, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000140)=[{}, {}], 0x10, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000440)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r2, 0xffffffffffffffff, 0x4}, 0x48) r3 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r2, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r3}, 0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r4, 0xffffffffffffffff, 0x4}, 0x48) r5 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r4, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r5}, 0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r6, 0xffffffffffffffff, 0x4}, 0x48) r7 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r6, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r7}, 0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r8, 0xffffffffffffffff, 0x4}, 0x48) r9 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r8, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r9}, 0x80) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000680)={0x19c, 0x0, 0x65e2bacf5e390ef2, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r10, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r11, 0x400, 0x1b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x404c080}, 0x4800) socket(0x2c, 0x0, 0x0) 23:12:44 executing program 2: syz_clone3(&(0x7f0000000b40)={0x1000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 70) 23:12:44 executing program 0: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) (rerun: 64) 23:12:44 executing program 5: bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0, 0xfffffff7, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x20) 23:12:44 executing program 4: r0 = syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f0000000280)={0x10000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r1], 0x1}, 0x58) r2 = syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) openat$cgroup_subtree(r3, &(0x7f0000000580), 0x2, 0x0) syz_clone3(&(0x7f0000000280)={0x10000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r2], 0x1}, 0x58) r4 = syz_clone3(&(0x7f0000000400)={0x8000480, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x28}, &(0x7f0000000280)=""/143, 0x8f, &(0x7f0000000340)=""/102, &(0x7f00000003c0)=[r0, r0, r0, r0], 0x4}, 0x58) syz_clone3(&(0x7f00000004c0)={0x200, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x1b}, &(0x7f00000000c0)=""/21, 0x15, &(0x7f0000000100)=""/143, &(0x7f0000000480)=[r1, r2, r4], 0x3}, 0x58) [ 501.967648][T11691] RBP: 00007feb5d37f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 501.976243][T11691] R10: 00007feb5d37f050 R11: 0000000000000246 R12: 0000000000000058 [ 501.984052][T11691] R13: 00007ffc843a962f R14: 00007feb5d37f300 R15: 0000000000022000 [ 501.991868][T11691] 23:12:44 executing program 1: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x8, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000140)=[{}, {}], 0x10, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000440)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r2, 0xffffffffffffffff, 0x4}, 0x48) r3 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r2, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r3}, 0x80) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r4, 0xffffffffffffffff, 0x4}, 0x48) r5 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r4, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r5}, 0x80) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r6, 0xffffffffffffffff, 0x4}, 0x48) r7 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r6, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r7}, 0x80) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r8, 0xffffffffffffffff, 0x4}, 0x48) (async) r9 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r8, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r9}, 0x80) (async) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000680)={0x19c, 0x0, 0x65e2bacf5e390ef2, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r10, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r11, 0x400, 0x1b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x404c080}, 0x4800) (async) socket(0x2c, 0x0, 0x0) 23:12:44 executing program 0: r0 = syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) time(&(0x7f0000000080)) r1 = getpid() r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f00000002c0)={0x4820000, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), {0x22}, &(0x7f0000000180)=""/80, 0x50, &(0x7f0000000200)=""/48, &(0x7f0000000240)=[r0, r0, r1], 0x3, {r2}}, 0x58) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={r3, 0x0, 0x0, 0x7ff, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}, 0x20) 23:12:44 executing program 5: bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0, 0xfffffff7, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x20) [ 502.055702][T11720] FAULT_INJECTION: forcing a failure. [ 502.055702][T11720] name failslab, interval 1, probability 0, space 0, times 0 [ 502.113638][T11720] CPU: 0 PID: 11720 Comm: syz-executor.2 Tainted: G W 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 502.125122][T11720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 502.135106][T11720] Call Trace: [ 502.138218][T11720] [ 502.140996][T11720] dump_stack_lvl+0x151/0x1b7 [ 502.145520][T11720] ? bfq_pos_tree_add_move+0x43e/0x43e [ 502.150808][T11720] dump_stack+0x15/0x17 [ 502.154795][T11720] should_fail+0x3c0/0x510 [ 502.159071][T11720] __should_failslab+0x9f/0xe0 [ 502.163654][T11720] should_failslab+0x9/0x20 [ 502.167989][T11720] kmem_cache_alloc+0x4f/0x2f0 [ 502.172587][T11720] ? vm_area_dup+0x26/0x1d0 [ 502.176929][T11720] vm_area_dup+0x26/0x1d0 [ 502.181190][T11720] dup_mmap+0x6b8/0xea0 [ 502.185180][T11720] ? __delayed_free_task+0x20/0x20 [ 502.190128][T11720] ? mm_init+0x807/0x960 [ 502.194264][T11720] dup_mm+0x91/0x330 [ 502.197956][T11720] copy_mm+0x108/0x1b0 [ 502.202017][T11720] copy_process+0x1295/0x3250 [ 502.206539][T11720] ? check_stack_object+0xf7/0x130 [ 502.211491][T11720] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 502.216423][T11720] ? copy_clone_args_from_user+0x6cf/0x790 [ 502.222250][T11720] kernel_clone+0x22d/0x990 [ 502.226579][T11720] ? dup_mmap+0xea0/0xea0 [ 502.230793][T11720] ? create_io_thread+0x1e0/0x1e0 [ 502.235604][T11720] ? file_end_write+0x1b0/0x1b0 [ 502.240466][T11720] __x64_sys_clone3+0x375/0x3a0 [ 502.245160][T11720] ? __ia32_sys_clone+0x300/0x300 [ 502.250015][T11720] ? ksys_write+0x25f/0x2c0 [ 502.254355][T11720] ? debug_smp_processor_id+0x17/0x20 [ 502.259559][T11720] do_syscall_64+0x44/0xd0 [ 502.263911][T11720] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 502.269625][T11720] RIP: 0033:0x7feb5e60c0c9 [ 502.274139][T11720] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 502.293582][T11720] RSP: 002b:00007feb5d37f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 502.303387][T11720] RAX: ffffffffffffffda RBX: 00007feb5e72bf80 RCX: 00007feb5e60c0c9 23:12:44 executing program 4: r0 = syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) r1 = syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f0000000280)={0x10000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r1], 0x1}, 0x58) (async) r2 = syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) openat$cgroup_subtree(r3, &(0x7f0000000580), 0x2, 0x0) (async) syz_clone3(&(0x7f0000000280)={0x10000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r2], 0x1}, 0x58) r4 = syz_clone3(&(0x7f0000000400)={0x8000480, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x28}, &(0x7f0000000280)=""/143, 0x8f, &(0x7f0000000340)=""/102, &(0x7f00000003c0)=[r0, r0, r0, r0], 0x4}, 0x58) syz_clone3(&(0x7f00000004c0)={0x200, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x1b}, &(0x7f00000000c0)=""/21, 0x15, &(0x7f0000000100)=""/143, &(0x7f0000000480)=[r1, r2, r4], 0x3}, 0x58) 23:12:44 executing program 1: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x8, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000140)=[{}, {}], 0x10, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000440)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r2, 0xffffffffffffffff, 0x4}, 0x48) (async) r3 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r2, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r3}, 0x80) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r4, 0xffffffffffffffff, 0x4}, 0x48) r5 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r4, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r5}, 0x80) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r6, 0xffffffffffffffff, 0x4}, 0x48) r7 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r6, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r7}, 0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r8, 0xffffffffffffffff, 0x4}, 0x48) (async) r9 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r8, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r9}, 0x80) (async) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000680)={0x19c, 0x0, 0x65e2bacf5e390ef2, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r10, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r11, 0x400, 0x1b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x404c080}, 0x4800) (async) socket(0x2c, 0x0, 0x0) 23:12:44 executing program 5: bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={0xffffffffffffffff, 0xa, 0x0, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x20) 23:12:44 executing program 0: r0 = syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) time(&(0x7f0000000080)) r1 = getpid() r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f00000002c0)={0x4820000, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), {0x22}, &(0x7f0000000180)=""/80, 0x50, &(0x7f0000000200)=""/48, &(0x7f0000000240)=[r0, r0, r1], 0x3, {r2}}, 0x58) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={r3, 0x0, 0x0, 0x7ff, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}, 0x20) syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) (async) time(&(0x7f0000000080)) (async) getpid() (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async) syz_clone3(&(0x7f00000002c0)={0x4820000, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), {0x22}, &(0x7f0000000180)=""/80, 0x50, &(0x7f0000000200)=""/48, &(0x7f0000000240)=[r0, r0, r1], 0x3, {r2}}, 0x58) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={r3, 0x0, 0x0, 0x7ff, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}, 0x20) (async) 23:12:44 executing program 5: bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={0xffffffffffffffff, 0xa, 0x0, 0x0, 0x0}, 0x20) [ 502.311200][T11720] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007feb5d37f050 [ 502.320835][T11720] RBP: 00007feb5d37f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 502.328647][T11720] R10: 00007feb5d37f050 R11: 0000000000000246 R12: 0000000000000058 [ 502.336458][T11720] R13: 00007ffc843a962f R14: 00007feb5d37f300 R15: 0000000000022000 [ 502.344358][T11720] 23:12:44 executing program 2: syz_clone3(&(0x7f0000000b40)={0x1000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 71) 23:12:44 executing program 4: r0 = syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f0000000280)={0x10000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r1], 0x1}, 0x58) r2 = syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) openat$cgroup_subtree(r3, &(0x7f0000000580), 0x2, 0x0) syz_clone3(&(0x7f0000000280)={0x10000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r2], 0x1}, 0x58) r4 = syz_clone3(&(0x7f0000000400)={0x8000480, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x28}, &(0x7f0000000280)=""/143, 0x8f, &(0x7f0000000340)=""/102, &(0x7f00000003c0)=[r0, r0, r0, r0], 0x4}, 0x58) syz_clone3(&(0x7f00000004c0)={0x200, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x1b}, &(0x7f00000000c0)=""/21, 0x15, &(0x7f0000000100)=""/143, &(0x7f0000000480)=[r1, r2, r4], 0x3}, 0x58) syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f0000000280)={0x10000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r1], 0x1}, 0x58) (async) syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) (async) openat$cgroup_subtree(r3, &(0x7f0000000580), 0x2, 0x0) (async) syz_clone3(&(0x7f0000000280)={0x10000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r2], 0x1}, 0x58) (async) syz_clone3(&(0x7f0000000400)={0x8000480, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x28}, &(0x7f0000000280)=""/143, 0x8f, &(0x7f0000000340)=""/102, &(0x7f00000003c0)=[r0, r0, r0, r0], 0x4}, 0x58) (async) syz_clone3(&(0x7f00000004c0)={0x200, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x1b}, &(0x7f00000000c0)=""/21, 0x15, &(0x7f0000000100)=""/143, &(0x7f0000000480)=[r1, r2, r4], 0x3}, 0x58) (async) 23:12:44 executing program 1: r0 = socket(0x2c, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r1, 0xffffffffffffffff, 0x4}, 0x48) r2 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r1, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r2}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)=@delqdisc={0x1f8, 0x25, 0x214, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xb, 0x10}, {0xa, 0xfff2}, {0xd, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_PLIMIT={0x8, 0x1, 0x80000000}]}}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x1ff}}, @TCA_STAB={0xd4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x4, 0x4, 0x1, 0x1, 0x101, 0x4, 0x6}}, {0x10, 0x2, [0xe6c, 0xc12, 0x4, 0xc82, 0x4, 0x1401]}}, {{0x1c, 0x1, {0x8, 0x0, 0x5, 0x5, 0x1, 0x400, 0x40, 0x2}}, {0x8, 0x2, [0x2, 0x7]}}, {{0x1c, 0x1, {0x20, 0x0, 0x9, 0x1, 0x0, 0xffff, 0xffffffff, 0x3}}, {0xa, 0x2, [0xe18, 0x7, 0x5aa]}}, {{0x1c, 0x1, {0x20, 0x80, 0x3f, 0x0, 0x1, 0xa5e, 0x7, 0x7}}, {0x12, 0x2, [0x4, 0x9, 0x8001, 0x3, 0x0, 0x7, 0x0]}}, {{0x1c, 0x1, {0x81, 0x40, 0x0, 0x5, 0x3, 0x3, 0xfffffffd, 0x3}}, {0xa, 0x2, [0x1, 0x80, 0x1]}}]}, @TCA_STAB={0xd8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8a, 0x81, 0x400, 0x0, 0x1, 0x8000, 0xfffffeff, 0x4}}, {0xc, 0x2, [0xdf, 0x7, 0xd1d6, 0x2]}}, {{0x1c, 0x1, {0x6, 0x0, 0x4, 0x35f6bfbd, 0x1, 0xb4d, 0x80, 0x2}}, {0x8, 0x2, [0xdf, 0x8001]}}, {{0x1c, 0x1, {0xa5, 0x6a, 0x1ff, 0x9, 0x0, 0x10000, 0x5, 0x7}}, {0x12, 0x2, [0x2, 0xfff, 0x6, 0x9, 0x8000, 0x4000, 0x4ce0]}}, {{0x1c, 0x1, {0x7f, 0x3, 0x5, 0x7, 0x6, 0x6, 0x9, 0xa}}, {0x18, 0x2, [0x91, 0x1, 0x1f, 0x2, 0x0, 0x800, 0x9, 0x5, 0x0, 0x0]}}, {{0x1c, 0x1, {0xff, 0x7f, 0x7fff, 0x5, 0x0, 0x6, 0x3, 0x2}}, {0x8, 0x2, [0x9, 0x0]}}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x4000001}, 0x80) 23:12:44 executing program 0: r0 = syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) time(&(0x7f0000000080)) (async, rerun: 64) r1 = getpid() (async, rerun: 64) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f00000002c0)={0x4820000, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), {0x22}, &(0x7f0000000180)=""/80, 0x50, &(0x7f0000000200)=""/48, &(0x7f0000000240)=[r0, r0, r1], 0x3, {r2}}, 0x58) (async) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={r3, 0x0, 0x0, 0x7ff, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}, 0x20) 23:12:44 executing program 5: r0 = syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) time(&(0x7f0000000080)) r1 = getpid() r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f00000002c0)={0x4820000, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), {0x22}, &(0x7f0000000180)=""/80, 0x50, &(0x7f0000000200)=""/48, &(0x7f0000000240)=[r0, r0, r1], 0x3, {r2}}, 0x58) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={r3, 0x0, 0x0, 0x7ff, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}, 0x20) [ 502.428605][T11763] FAULT_INJECTION: forcing a failure. [ 502.428605][T11763] name failslab, interval 1, probability 0, space 0, times 0 [ 502.473032][T11763] CPU: 1 PID: 11763 Comm: syz-executor.2 Tainted: G W 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 502.484513][T11763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 502.494439][T11763] Call Trace: [ 502.497522][T11763] [ 502.500311][T11763] dump_stack_lvl+0x151/0x1b7 [ 502.504830][T11763] ? bfq_pos_tree_add_move+0x43e/0x43e [ 502.510105][T11763] dump_stack+0x15/0x17 [ 502.514361][T11763] should_fail+0x3c0/0x510 [ 502.518706][T11763] __should_failslab+0x9f/0xe0 [ 502.523295][T11763] should_failslab+0x9/0x20 [ 502.527640][T11763] kmem_cache_alloc+0x4f/0x2f0 [ 502.532324][T11763] ? vm_area_dup+0x26/0x1d0 [ 502.536667][T11763] vm_area_dup+0x26/0x1d0 [ 502.540829][T11763] dup_mmap+0x6b8/0xea0 [ 502.544831][T11763] ? __delayed_free_task+0x20/0x20 [ 502.549910][T11763] ? mm_init+0x807/0x960 [ 502.554074][T11763] dup_mm+0x91/0x330 [ 502.557806][T11763] copy_mm+0x108/0x1b0 [ 502.561717][T11763] copy_process+0x1295/0x3250 [ 502.566235][T11763] ? check_stack_object+0xf7/0x130 [ 502.571439][T11763] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 502.576384][T11763] ? copy_clone_args_from_user+0x6cf/0x790 [ 502.582030][T11763] kernel_clone+0x22d/0x990 [ 502.586372][T11763] ? dup_mmap+0xea0/0xea0 [ 502.590533][T11763] ? create_io_thread+0x1e0/0x1e0 [ 502.595392][T11763] ? file_end_write+0x1b0/0x1b0 [ 502.600080][T11763] __x64_sys_clone3+0x375/0x3a0 [ 502.605726][T11763] ? __ia32_sys_clone+0x300/0x300 [ 502.610582][T11763] ? ksys_write+0x25f/0x2c0 [ 502.614927][T11763] ? debug_smp_processor_id+0x17/0x20 [ 502.620214][T11763] do_syscall_64+0x44/0xd0 [ 502.624465][T11763] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 502.630212][T11763] RIP: 0033:0x7feb5e60c0c9 [ 502.634451][T11763] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 502.653891][T11763] RSP: 002b:00007feb5d37f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 502.662134][T11763] RAX: ffffffffffffffda RBX: 00007feb5e72bf80 RCX: 00007feb5e60c0c9 23:12:44 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vlan0\x00'}) syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) 23:12:44 executing program 5: r0 = syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) time(&(0x7f0000000080)) r1 = getpid() r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f00000002c0)={0x4820000, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), {0x22}, &(0x7f0000000180)=""/80, 0x50, &(0x7f0000000200)=""/48, &(0x7f0000000240)=[r0, r0, r1], 0x3, {r2}}, 0x58) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={r3, 0x0, 0x0, 0x7ff, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}, 0x20) 23:12:45 executing program 1: r0 = socket(0x2c, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r1, 0xffffffffffffffff, 0x4}, 0x48) (async) r2 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r1, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r2}, 0x80) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)=@delqdisc={0x1f8, 0x25, 0x214, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xb, 0x10}, {0xa, 0xfff2}, {0xd, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_PLIMIT={0x8, 0x1, 0x80000000}]}}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x1ff}}, @TCA_STAB={0xd4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x4, 0x4, 0x1, 0x1, 0x101, 0x4, 0x6}}, {0x10, 0x2, [0xe6c, 0xc12, 0x4, 0xc82, 0x4, 0x1401]}}, {{0x1c, 0x1, {0x8, 0x0, 0x5, 0x5, 0x1, 0x400, 0x40, 0x2}}, {0x8, 0x2, [0x2, 0x7]}}, {{0x1c, 0x1, {0x20, 0x0, 0x9, 0x1, 0x0, 0xffff, 0xffffffff, 0x3}}, {0xa, 0x2, [0xe18, 0x7, 0x5aa]}}, {{0x1c, 0x1, {0x20, 0x80, 0x3f, 0x0, 0x1, 0xa5e, 0x7, 0x7}}, {0x12, 0x2, [0x4, 0x9, 0x8001, 0x3, 0x0, 0x7, 0x0]}}, {{0x1c, 0x1, {0x81, 0x40, 0x0, 0x5, 0x3, 0x3, 0xfffffffd, 0x3}}, {0xa, 0x2, [0x1, 0x80, 0x1]}}]}, @TCA_STAB={0xd8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8a, 0x81, 0x400, 0x0, 0x1, 0x8000, 0xfffffeff, 0x4}}, {0xc, 0x2, [0xdf, 0x7, 0xd1d6, 0x2]}}, {{0x1c, 0x1, {0x6, 0x0, 0x4, 0x35f6bfbd, 0x1, 0xb4d, 0x80, 0x2}}, {0x8, 0x2, [0xdf, 0x8001]}}, {{0x1c, 0x1, {0xa5, 0x6a, 0x1ff, 0x9, 0x0, 0x10000, 0x5, 0x7}}, {0x12, 0x2, [0x2, 0xfff, 0x6, 0x9, 0x8000, 0x4000, 0x4ce0]}}, {{0x1c, 0x1, {0x7f, 0x3, 0x5, 0x7, 0x6, 0x6, 0x9, 0xa}}, {0x18, 0x2, [0x91, 0x1, 0x1f, 0x2, 0x0, 0x800, 0x9, 0x5, 0x0, 0x0]}}, {{0x1c, 0x1, {0xff, 0x7f, 0x7fff, 0x5, 0x0, 0x6, 0x3, 0x2}}, {0x8, 0x2, [0x9, 0x0]}}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x4000001}, 0x80) [ 502.669945][T11763] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007feb5d37f050 [ 502.677846][T11763] RBP: 00007feb5d37f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 502.685654][T11763] R10: 00007feb5d37f050 R11: 0000000000000246 R12: 0000000000000058 [ 502.693482][T11763] R13: 00007ffc843a962f R14: 00007feb5d37f300 R15: 0000000000022000 [ 502.701282][T11763] 23:12:45 executing program 0: syz_clone3(&(0x7f0000000000)={0x40801b00, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x0, 0x0, 0x0}, 0x58) 23:12:45 executing program 0: syz_clone3(&(0x7f0000000000)={0x40801b00, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x0, 0x0, 0x0}, 0x58) 23:12:45 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vlan0\x00'}) (async) syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) 23:12:45 executing program 2: syz_clone3(&(0x7f0000000b40)={0x1000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 72) 23:12:45 executing program 0: syz_clone3(&(0x7f0000000000)={0x40801b00, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f0000000000)={0x40801b00, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x0, 0x0, 0x0}, 0x58) (async) [ 502.719425][ T30] audit: type=1400 audit(1673219565.019:137): avc: denied { ioctl } for pid=11786 comm="syz-executor.4" path="socket:[148401]" dev="sockfs" ino=148401 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 23:12:45 executing program 0: ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000000)={0x2, "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"}) syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) 23:12:45 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vlan0\x00'}) (async) syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) 23:12:45 executing program 5: r0 = syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) time(&(0x7f0000000080)) r1 = getpid() r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f00000002c0)={0x4820000, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), {0x22}, &(0x7f0000000180)=""/80, 0x50, &(0x7f0000000200)=""/48, &(0x7f0000000240)=[r0, r0, r1], 0x3, {r2}}, 0x58) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={r3, 0x0, 0x0, 0x7ff, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}, 0x20) 23:12:45 executing program 1: r0 = socket(0x2c, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r1, 0xffffffffffffffff, 0x4}, 0x48) r2 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r1, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r2}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)=@delqdisc={0x1f8, 0x25, 0x214, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xb, 0x10}, {0xa, 0xfff2}, {0xd, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_PLIMIT={0x8, 0x1, 0x80000000}]}}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x1ff}}, @TCA_STAB={0xd4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x4, 0x4, 0x1, 0x1, 0x101, 0x4, 0x6}}, {0x10, 0x2, [0xe6c, 0xc12, 0x4, 0xc82, 0x4, 0x1401]}}, {{0x1c, 0x1, {0x8, 0x0, 0x5, 0x5, 0x1, 0x400, 0x40, 0x2}}, {0x8, 0x2, [0x2, 0x7]}}, {{0x1c, 0x1, {0x20, 0x0, 0x9, 0x1, 0x0, 0xffff, 0xffffffff, 0x3}}, {0xa, 0x2, [0xe18, 0x7, 0x5aa]}}, {{0x1c, 0x1, {0x20, 0x80, 0x3f, 0x0, 0x1, 0xa5e, 0x7, 0x7}}, {0x12, 0x2, [0x4, 0x9, 0x8001, 0x3, 0x0, 0x7, 0x0]}}, {{0x1c, 0x1, {0x81, 0x40, 0x0, 0x5, 0x3, 0x3, 0xfffffffd, 0x3}}, {0xa, 0x2, [0x1, 0x80, 0x1]}}]}, @TCA_STAB={0xd8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8a, 0x81, 0x400, 0x0, 0x1, 0x8000, 0xfffffeff, 0x4}}, {0xc, 0x2, [0xdf, 0x7, 0xd1d6, 0x2]}}, {{0x1c, 0x1, {0x6, 0x0, 0x4, 0x35f6bfbd, 0x1, 0xb4d, 0x80, 0x2}}, {0x8, 0x2, [0xdf, 0x8001]}}, {{0x1c, 0x1, {0xa5, 0x6a, 0x1ff, 0x9, 0x0, 0x10000, 0x5, 0x7}}, {0x12, 0x2, [0x2, 0xfff, 0x6, 0x9, 0x8000, 0x4000, 0x4ce0]}}, {{0x1c, 0x1, {0x7f, 0x3, 0x5, 0x7, 0x6, 0x6, 0x9, 0xa}}, {0x18, 0x2, [0x91, 0x1, 0x1f, 0x2, 0x0, 0x800, 0x9, 0x5, 0x0, 0x0]}}, {{0x1c, 0x1, {0xff, 0x7f, 0x7fff, 0x5, 0x0, 0x6, 0x3, 0x2}}, {0x8, 0x2, [0x9, 0x0]}}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x4000001}, 0x80) socket(0x2c, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00'}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r1, 0xffffffffffffffff, 0x4}, 0x48) (async) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r1, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r2}, 0x80) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)=@delqdisc={0x1f8, 0x25, 0x214, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xb, 0x10}, {0xa, 0xfff2}, {0xd, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_PLIMIT={0x8, 0x1, 0x80000000}]}}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x1ff}}, @TCA_STAB={0xd4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x4, 0x4, 0x1, 0x1, 0x101, 0x4, 0x6}}, {0x10, 0x2, [0xe6c, 0xc12, 0x4, 0xc82, 0x4, 0x1401]}}, {{0x1c, 0x1, {0x8, 0x0, 0x5, 0x5, 0x1, 0x400, 0x40, 0x2}}, {0x8, 0x2, [0x2, 0x7]}}, {{0x1c, 0x1, {0x20, 0x0, 0x9, 0x1, 0x0, 0xffff, 0xffffffff, 0x3}}, {0xa, 0x2, [0xe18, 0x7, 0x5aa]}}, {{0x1c, 0x1, {0x20, 0x80, 0x3f, 0x0, 0x1, 0xa5e, 0x7, 0x7}}, {0x12, 0x2, [0x4, 0x9, 0x8001, 0x3, 0x0, 0x7, 0x0]}}, {{0x1c, 0x1, {0x81, 0x40, 0x0, 0x5, 0x3, 0x3, 0xfffffffd, 0x3}}, {0xa, 0x2, [0x1, 0x80, 0x1]}}]}, @TCA_STAB={0xd8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8a, 0x81, 0x400, 0x0, 0x1, 0x8000, 0xfffffeff, 0x4}}, {0xc, 0x2, [0xdf, 0x7, 0xd1d6, 0x2]}}, {{0x1c, 0x1, {0x6, 0x0, 0x4, 0x35f6bfbd, 0x1, 0xb4d, 0x80, 0x2}}, {0x8, 0x2, [0xdf, 0x8001]}}, {{0x1c, 0x1, {0xa5, 0x6a, 0x1ff, 0x9, 0x0, 0x10000, 0x5, 0x7}}, {0x12, 0x2, [0x2, 0xfff, 0x6, 0x9, 0x8000, 0x4000, 0x4ce0]}}, {{0x1c, 0x1, {0x7f, 0x3, 0x5, 0x7, 0x6, 0x6, 0x9, 0xa}}, {0x18, 0x2, [0x91, 0x1, 0x1f, 0x2, 0x0, 0x800, 0x9, 0x5, 0x0, 0x0]}}, {{0x1c, 0x1, {0xff, 0x7f, 0x7fff, 0x5, 0x0, 0x6, 0x3, 0x2}}, {0x8, 0x2, [0x9, 0x0]}}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x4000001}, 0x80) (async) 23:12:45 executing program 0: ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000000)={0x2, "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"}) syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000000)={0x2, "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"}) (async) syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) (async) [ 502.784409][T11800] FAULT_INJECTION: forcing a failure. [ 502.784409][T11800] name failslab, interval 1, probability 0, space 0, times 0 23:12:45 executing program 0: ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000000)={0x2, "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"}) syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) 23:12:45 executing program 4: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r0, 0xffffffffffffffff, 0x4}, 0x48) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x200400, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="6c000000130020002bbd7440fddbdf2507f00000", @ANYRES32=r0, @ANYBLOB="00816d86fff31fd75dc1000040300000440018800400000000140004006bd6dc268f81bc4b7b57566fc833ef8b93ece9667e40fbfe5f461275bcac140005004d22419c943a0421ef769dcc936273720500"], 0x6c}, 0x1, 0x0, 0x0, 0x4054}, 0x4000080) syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:12:45 executing program 0: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="011b000000227703005cb72dcc070f000000", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000009c0)={0x0, 0x3, 0x10}, 0xc) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b80)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x6, 0x8, 0x8, 0x100, 0x30, 0x1, 0x3, '\x00', r1, 0xffffffffffffffff, 0x5, 0x3}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0x1a, 0xc00000, 0x7, 0x3, 0x1214, 0x1, 0x9, '\x00', r1, 0xffffffffffffffff, 0x3, 0x1, 0x5}, 0x48) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d00)={&(0x7f0000000cc0)='./file0\x00', 0x0, 0x10}, 0x10) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r9, 0xd000943e, 0x0) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)={&(0x7f0000000d40)='./file0\x00', 0x0, 0x18}, 0x10) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r11, 0xd000943e, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0xa, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x7f}, [@func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xd}, @call={0x85, 0x0, 0x0, 0xab}, @jmp={0x5, 0x1, 0x8, 0xa, 0x4, 0x4, 0xffffffffffffffe7}, @map_val={0x18, 0xc, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x433}]}, &(0x7f0000000a80)='GPL\x00', 0x7000000, 0x6, &(0x7f0000000ac0)=""/6, 0x41100, 0xa, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b00)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000b40)={0x3, 0x10, 0x1, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=[r5, r6, 0x1, r7, r8, 0x1, r9, r10, 0xffffffffffffffff, r11]}, 0x80) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x64, r3, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x21}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x66}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x60}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x94, r0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x24000014}, 0x4040004) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000005c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@bloom_filter={0x1e, 0x7, 0x8, 0x2, 0x400, 0x1, 0x3f, '\x00', r12, 0xffffffffffffffff, 0x0, 0x4, 0x5}, 0x48) [ 502.877723][T11800] CPU: 0 PID: 11800 Comm: syz-executor.2 Tainted: G W 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 502.889282][T11800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 502.899183][T11800] Call Trace: [ 502.902396][T11800] [ 502.905166][T11800] dump_stack_lvl+0x151/0x1b7 [ 502.909679][T11800] ? bfq_pos_tree_add_move+0x43e/0x43e [ 502.914974][T11800] dump_stack+0x15/0x17 [ 502.918965][T11800] should_fail+0x3c0/0x510 [ 502.923223][T11800] __should_failslab+0x9f/0xe0 [ 502.928683][T11800] should_failslab+0x9/0x20 [ 502.933025][T11800] kmem_cache_alloc+0x4f/0x2f0 [ 502.937635][T11800] ? anon_vma_fork+0x1b9/0x4f0 [ 502.942314][T11800] anon_vma_fork+0x1b9/0x4f0 [ 502.946738][T11800] dup_mmap+0x750/0xea0 [ 502.950820][T11800] ? __delayed_free_task+0x20/0x20 [ 502.955764][T11800] ? mm_init+0x807/0x960 [ 502.959844][T11800] dup_mm+0x91/0x330 [ 502.963574][T11800] copy_mm+0x108/0x1b0 [ 502.967482][T11800] copy_process+0x1295/0x3250 [ 502.971999][T11800] ? check_stack_object+0xf7/0x130 [ 502.977643][T11800] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 502.982584][T11800] ? copy_clone_args_from_user+0x6cf/0x790 [ 502.988227][T11800] kernel_clone+0x22d/0x990 [ 502.992565][T11800] ? dup_mmap+0xea0/0xea0 [ 502.996736][T11800] ? create_io_thread+0x1e0/0x1e0 [ 503.001593][T11800] ? file_end_write+0x1b0/0x1b0 [ 503.006364][T11800] __x64_sys_clone3+0x375/0x3a0 [ 503.011050][T11800] ? __ia32_sys_clone+0x300/0x300 [ 503.015910][T11800] ? ksys_write+0x25f/0x2c0 [ 503.020251][T11800] ? debug_smp_processor_id+0x17/0x20 [ 503.025462][T11800] do_syscall_64+0x44/0xd0 [ 503.029717][T11800] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 503.035439][T11800] RIP: 0033:0x7feb5e60c0c9 [ 503.039693][T11800] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 503.059147][T11800] RSP: 002b:00007feb5d37f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 503.067377][T11800] RAX: ffffffffffffffda RBX: 00007feb5e72bf80 RCX: 00007feb5e60c0c9 23:12:45 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe2, {r0}}, 0x58) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000040)={0x0, 0x3, 0x100, 0x6, 0xe, "3fb6a1581f3e8e03"}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0) openat$cgroup_type(r2, &(0x7f0000000080), 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000480), 0x141200, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r3, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000580)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000600)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x10, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000840)='/sys/class/gnss', 0x8000, 0x9) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000340)=@raw=[@jmp={0x5, 0x1, 0x4, 0xa, 0x7, 0xfffffffffffffff4, 0xfffffffffffffff0}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}], &(0x7f0000000380)='syzkaller\x00', 0x2, 0x90, &(0x7f00000003c0)=""/144, 0x40f00, 0x4, '\x00', 0x0, 0x1b, r4, 0x8, &(0x7f00000004c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0x8, 0x7fff, 0x3ff}, 0x10, r5, 0x0, 0x0, &(0x7f0000000880)=[r3, r2, r2, r2, r6]}, 0x80) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f000006f9c0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00000709c0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f00000719c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000071bc0)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, &(0x7f0000071dc0)={0x0, 0x0, "dcd249ccdf5014e400c902fd2e832c1bffc67da51b77a6defb5d566f3ef61b5678c1d575570207a31c1a664af1a3acab83dd72ef43aeab0b0b97d8799e506b0a5691af9394f3164c9a9176f393430608c5a63fdfcb7e24a9f73b11198c532d02e045c56f60f8062109a653175d655ab02e65d1dabec8aa77edac643d1019ea7d158df1cea054bbdf16014805e3f44f24310d4b78fa6ee72a68c76a23dddd8c6573dc1aab6ebd5c1fdd5eea4defe06b00df5730909b4d330a8b6cf7add034e8874e5e612ea71f8a2b67877f274f12c8f4b85a7a20193ba6ecc36044d69232c1e1cfadb087bb9a03852deca0a10cb8a22999e9ad823335ee909e46d5b5307e3832", "5eceb06287ec9af7ecd8881646dffcba1eb178199a6f0abe1b5f2ef0932cbcf67f7a7c56952dadf163ee47fc90bac1c18d63af96c6e47c8a1db20cab0e829d3f26453bb63c5207f7007dcaba9079d67f302274c7ce10461cdce90016cd689e818bcc3fea0f1bfb73e31782fe83b78cc0cbec1f885d13f571774da931f758c855511c917852f9e313b6a94ace8cf4d8e7e1616c3047cb6cfb32fff58020c6798ed3f6a72d8faff89174040af23096c50f2ae56338f78b3611cd74d3dfdee75095552e89d65be15de34ffb53899217d52706da75c78da1b20a7e37e6920b6689daa2f0680345ffefe8225c31f376677b7e51f35068ccca9b914ce8bb6d80b6d2c12698c0fba703c0e3d2590876dfc6e54523296af9db03c656902fa1efacbe01c6cbcc5811c76465a4884d4d68e27fc0283f59cddd1b04cdb05c229d3dabe5d95b6b2e420e684b0c6ab6e4dc53aefd80331dba6619b3cb85d16248716f9662c3a25e803759c89712444a60161b1693e5439c03721ee56d716ab2da33d976448c0117cdf3c2a5777a40631bf955b5d4cbb79900c79d84ead15db1071554251da36b7bd578b8cbd942608f7506fe46c6065859521a5124cac1111dc7310dd2755c346f22ec84419edf4e6e33ce830d44b92b541ed800c308469af469e6d09e2009a3c85a9655de8feab7ee73860ac419b102d510d7926b0d6a13c6ffe99767528227ed0e4f70452bb4e8802c53bc4dd8e6625d73cbca8714fb6eb4064290c43e2813ed43b495606383eea5a2f896a7073922df067244d527a83c37ba0e2e38902f47e4d95d530b08a56fbd14c4c7d694935b8fa01cd3adaf21c19b351c0eae5fcfde01cd1dee054ec371a9ea5fb74f921ce153d79ad1c8d3552da37951aa48d28a65bd1959074b925ed558fad6c39337061965c664b9a7220297f26fc608d75314f1fcd5b604f08ce1d2db7cc1a5cefc9dd48ef09d46c811f51e4a8f8bd366e4479125993c296c1f3ea5299fc6b4c45e3628218faa4998370f569b1865c5dbd69a0a47e6972bfaa71bfd443e3872c57707ea04348bde204b8a1cb7e4f3a7d03da785f87d3e6642639ede17d1f1192d2c62ac0c504647fc7c3c825c540c31a49d6d3c90e64a27ace4f74b690790d5a89a662eed620b4237136d02258b3503fc31e2db12480ab844c410ca9869ad8596b40e803a3541291ea69af1577982457da956baf4509cc4d76d93f31aa3abfcd593a4f3086bc7f8f2cca453a14bd90c765058e8aeace961362e77de7af0e2332908fbc9bf8bf7750c1943baf7f63782a96d937147a8d4cc05b38cb87ccec37506588631ac63ee6ad0765d431b4cec5708919efb54c54965dddb563f7f61aba2674b27e49597b72297de8af17f5d793df950604df6155150c112777271956d1b99a78d330a0f841b15cc05cd0459925e9068e382bf7ced56b762ab1992bde23a6dd69601d712ce63310375bba548dec48f8961d2cef9d588e5dbcaabb52ad71a765dc8c25a69e70e2ff27eecb54fd82ff5b13d2e8983b7e9d121cb5c75ac96f91dae33b8eceadb75c5aed7d6ca820015d818dbfb8e8aa58754d38f1b1eab35d01d640bb42ebf1b24d8d3db47fa5c34703afda69236bc01275c76ba49f599e18014af7338ef21f1be89de6aae98891f1ac3594fdfa21cde027eb18800cfbcbd0e173dc92312637b827c267427ee98dd71d4d53687ffc952f3b894e8072d7b043be92573f2d3ef9711383308f9b9d00bf374f1b1e5fdef9e03b5f5b3e3eb56210d750069c6145acff872c4aa69e2389d456ead988a08c11475a8f79fe14ac5ff615a2d3c72725cc3b668ad81f6a91e91481eb568bb9a143c3a8270a89f5b6cfda223c5b1836179426dbff43166c31af0b3f0106810a9f294e1b54befc32aeec29da6fc9b42621461d8345c3e824068536637c4332c352a501dd9638ceea8bb9c2d423ac4e84bd5d1a2039155eb6f2bddda6d8ba09c9b78e7c708d01e444f8a32dc0aa02c94f441fe383aca78dfd52a9ddeb1f68b8681f9d9368399a90317460fb6cfd1d98a14e446fda819a2e07952023bb76df7bd73af2852ef0f1a8fcb9994b20479c83ff2c6c244c05ce7895207877b8c420d219fbc51cd3faf1183ea9b0334fb6fbb7070f465aa1cf9b0abda23d8ca7a0972b16ee927d5acfe7c2638a5ada39df5df44edf72be4eb063aba2e361c07f2f9299137bcc2a091beed015754c0f8944699fd535236d4190d6128fcd4a9f6f38313a898b2c9047f3667a3fb3135895a7e44721f2e0eaaadbb18f41cbd4c52068a7e5bbf506b193be076d04022a3c13dcec60a3e048d82214e1f323786802cb7a30c93e1215db77dce3c0b1647455337364efb06828616ba87bcd49427ba278d47ceb517ab2bd05a0526ed8c6b24ba8ce5ae77705c6f9fe45b707485185be7ceaacd6814ba6b9bd03734c08baf221f9fc322267d8ed30025cb5714ec0009cfb0aa0bfefbf3ee1ebb7aa6dd2334879c2aff7bfd42917bdaaca95ea90c0ab5c78d4b4e5d8c4ff6e35ba5fa80689731ef08442c8415e96ba3fc21266abe15168279d47dde0d3feae378d40d68363372062d65ecfc81cfcdfad49ab8a6d1634734ea452b97edf156ecc9ccf14c7e1de11ef65d49270268ab3cc82a9f49dc9976a437f2084c3433a3b6a14c9d63b91c1ea68043fcf1b78207d3c7bcd71fefd26ac176a68a611e7b3f10f2c9ed7a9e3429a3f169266e0d248e1cacaf35002606fa36639f46f8ed9b643c61aa4ae7c256c56023298a31ca7984602c99886656dfd25b7fbf11e4a2c17a48037149183022469d229392193ee65c6f2c2623a4ec69898fab3f60bd9e6556dcd1440fa69f1edc136fdc3e0040fa2c29e8335a7b08c0123992b686fcf71cc7fe7456ad76ef1bc0859967d56342d34c9ffcfe8574d26ad2e95d0002a0343d3c5bb316b0f20453c81afb411370a5d084aa40605d606fbeaefe493a868bb9d39c0daae51da341d59743a4a5b59b8c529c73e57a78cb7057e85c27680eb810293d583b4550d7ee893d14991637f5435f188fbcdc07cb9ad624119fa9d534ae7a239992b4be2e73afcaff0810a4ddb4554f581e54f1ea4e482b1d270511bf20d7290e52135330315c9055b4a7126626fc4512f87a9e67a40ea8cbeba18549823693bf40a26ac889f9a10f2a45ca50e830439b9722a3819eb04efe412f27743a9b9dd93d68313aeb31bcc1c6f93b6640257b10638e18a4ce59456a5b3e9256ac6bca872e0e21e6e62c7a9e1f412df65866bcab59e4ca328e4b038f2f66d0ea1dae6e1cd731bf1123f48a72ac7f26802e083e61260b2b9df20d2278c506400f6494ee4025e63e8194f75ad9fec538c91d34ae49b7088f2aadf79c258ef30342eb8336f819e0fae062a146f0a054ed24a17ccd397961b00fed050cb7e817f545352e439163ca453efe0cdc51768ba656037c74f7334a5a8f91bbe4b54433a791cf0a4219250fa070073067217a702c1427cc13f138f25c2fcaa700c748bcf4469acab2e75f95de5783c3b4290fe7933dcb890a5a7c17c1599af4bb17b5b4a6e9cb28403564859d42b5c8533f67679d3499c8b84a8972695741e56820610df22901a462ddbaad75dafa93ba6894e5705dd030cbf720b77578c6b888f95e3026d0b7d2afbf1da3fcfa55d4e82622c27f0ed07a1d9a42fbd5ab7aad8435b20c3dc5e585e410a636b2cabbce2192550407810a90bdd6747f624641a630ed8f84c12fe6e432229f647f7f466e7c358d64564515372233f69e54cc4a358ba4f1a3f42261ddd780502953b463b52007f9fc879b15bad983f1c12ab4fcac0b268bfd175f2aa0891edd50ee9c6529fe885afacf33e36b7e28949dda10c7f08c8f8a89293d3d64244e3688ca4bb908bc9ade7fb238a6b2596fc36660782da7d454d2e41b41b7ee229c0e3a46350965f3c3275a915a3f1b805e895670ec8be0e57a457927be0cc2d70b5ddca39ab4d13b1cc77373182546b65a5858151ae9a35fa50a192ff29464ef0c998a80ff7267c8b23f28800e00fb6d47e2c1249aaba3d22a564936baaa6e535a037435c0dd366e4a2fed737dea6095479ebfda802401397dd0e85bb3edd418ece596664873bc454f2fbd7b1a96a2908c066a970ecb49fdac9c5d4e74f38353fa64b6b078c1d4a838231823232aa03ffd8c7bc746c2852ee60e390ceb2f03fafe6a2f43beac56860aebc4c73594d8e941276d7a9b94024f8d7c5d3dbab61a6397088e7d3db20ee12de378adcab90a9e9eb0e798b750c5bfa5b2d4c4e866e944bd3908a45f850af94be0793b1ebd2be656e769cad7f1ed1a38f7cfeb60658135a56e2ac7771cf2025feb718d4e8b20b30ffdb90b6e42b59983d9bcba0ee2d72e16ef36b098dd9ecd6e8d9e56fb7c9ebe6c245be41bf32e7f7e67e5124c364030d2cc7f03da63fee33a92f37ecf8262b8ddcd6ccc76a64557d057211674214c3e50f5149ad514de6acd6241452ce3b9cc39a35a0f2d01fcb6a380558d32ed4562ad2f0265ece2b4701f6e1c6c1fee101e96f639612a25450a5a4560dd08a90eb0e5333e458315e31883ea15bb167cecd96e7ecc768465dd44158eadf3ae19c7fa88a6a6ecc00a1038dcf1d2a353f1d94d5a365c5bc8733db2d2d1d89a0ea8918beec8049bfb6d70ccb8a1396fdaa2406d357f63bda10c90318449f8d965be474ac3a6d5063001f0767532c603cfcce4aac942483b8e68a9828de814afcbb3b06fea98c805c576fe5078028cf461c03c46f17c50afde40b2f29f53a8df0dea9f3bcda66a91ed81e6f2a7d8f8405168b79fba293c6b8fba487928b4b9b28a925a6d15b971068048e1621f43cb3a3bbbd8a796a90a2e8379748475e69234d990d3c565c323598194caaff5cc01648d2d5b8c446f549d1090b5dec669a5d6178d426b210b2bfa3f61948f3a47b8dec8693e564fa40ebf69844e60e96b46c8a8eb94d9be04e515ea41aa2d73d209c78951aa5301f33db4b70a07bcd43a404797d745d4b110e6d41c9d1b75d6eaf4fcc4aee78e17698f4a5d819b57dbf2ad249fdd9d3fd865c2226af8929b1c49102d6d3ea788713021719a32507df2d36f81bae9307bb258c086ee9d49d7650595df69d5524e1fd13180558a36a3024cc7755b4a04fa80fa21af34e839fdd3198ec79d38d0f52237714282da9c1ee976c359a6d39d5c0de5f0b48881bca7659942083daa45696bcfc5df4835e1643cdbfed91d13e9ee96cd59a30c2146e311133c8db0784e3fe9c1a83f4db0144816dbde4d9bce5e2e59c4722e000f73f070b9e7745979461f398dd7a2a084b864e65c5e2dff15a88f4b633ee3d348ef1bc32ab173ab61b7cd7c19141217e7f74eadc8603cb4cfb3588303582a976c7a272bf0a75f35"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000072dc0)={0x51, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0xad, "92c15e3a811a18"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000073dc0)={0x821, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x0, "af2274d307958e"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000074dc0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000074fc0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000751c0)={{0x0, 0x5, 0x20, 0x0, 0x7ff, 0x0, 0x5, 0x49f, 0xfff, 0x9, 0x3a17, 0x328, 0x1, 0x7fffffffffffffff, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000761c0)={0x5a8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {r9}, {0x0, r10}, {r11}, {0x0, r12}, {}, {r13}, {}, {}, {r14}, {0x0, r15}, {}, {r16}, {}, {r17}], 0x3f, "452db34604e5de"}) r18 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffff8, 0x40}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$NL80211_CMD_DEL_KEY(r18, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r18, 0xc0c89425, &(0x7f0000000100)={"0af5f667a8d0792234037a4e235f729c", 0x0, 0x0, {0x8000, 0x7fff}, {0x5, 0x40}, 0x3, [0x2, 0x6, 0x0, 0x8000000000000001, 0x0, 0x8, 0x4ce, 0x5, 0xfb5, 0x3, 0x1, 0x0, 0x8, 0x6, 0xfffffffffffffffe, 0x4]}) openat$cgroup_netprio_ifpriomap(r3, &(0x7f00000000c0), 0x2, 0x0) 23:12:45 executing program 5: r0 = syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) time(&(0x7f0000000080)) r1 = getpid() r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f00000002c0)={0x4820000, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), {0x22}, &(0x7f0000000180)=""/80, 0x50, &(0x7f0000000200)=""/48, &(0x7f0000000240)=[r0, r0, r1], 0x3, {r2}}, 0x58) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, 0x0) 23:12:45 executing program 2: syz_clone3(&(0x7f0000000b40)={0x1000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 73) 23:12:45 executing program 4: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r0, 0xffffffffffffffff, 0x4}, 0x48) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x200400, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="6c000000130020002bbd7440fddbdf2507f00000", @ANYRES32=r0, @ANYBLOB="00816d86fff31fd75dc1000040300000440018800400000000140004006bd6dc268f81bc4b7b57566fc833ef8b93ece9667e40fbfe5f461275bcac140005004d22419c943a0421ef769dcc936273720500"], 0x6c}, 0x1, 0x0, 0x0, 0x4054}, 0x4000080) syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00'}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r0, 0xffffffffffffffff, 0x4}, 0x48) (async) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x200400, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="6c000000130020002bbd7440fddbdf2507f00000", @ANYRES32=r0, @ANYBLOB="00816d86fff31fd75dc1000040300000440018800400000000140004006bd6dc268f81bc4b7b57566fc833ef8b93ece9667e40fbfe5f461275bcac140005004d22419c943a0421ef769dcc936273720500"], 0x6c}, 0x1, 0x0, 0x0, 0x4054}, 0x4000080) (async) syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) 23:12:45 executing program 0: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="011b000000227703005cb72dcc070f000000", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000009c0)={0x0, 0x3, 0x10}, 0xc) (async) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b80)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x6, 0x8, 0x8, 0x100, 0x30, 0x1, 0x3, '\x00', r1, 0xffffffffffffffff, 0x5, 0x3}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0x1a, 0xc00000, 0x7, 0x3, 0x1214, 0x1, 0x9, '\x00', r1, 0xffffffffffffffff, 0x3, 0x1, 0x5}, 0x48) (async) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d00)={&(0x7f0000000cc0)='./file0\x00', 0x0, 0x10}, 0x10) (async) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r9, 0xd000943e, 0x0) (async) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)={&(0x7f0000000d40)='./file0\x00', 0x0, 0x18}, 0x10) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r11, 0xd000943e, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0xa, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x7f}, [@func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xd}, @call={0x85, 0x0, 0x0, 0xab}, @jmp={0x5, 0x1, 0x8, 0xa, 0x4, 0x4, 0xffffffffffffffe7}, @map_val={0x18, 0xc, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x433}]}, &(0x7f0000000a80)='GPL\x00', 0x7000000, 0x6, &(0x7f0000000ac0)=""/6, 0x41100, 0xa, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b00)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000b40)={0x3, 0x10, 0x1, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=[r5, r6, 0x1, r7, r8, 0x1, r9, r10, 0xffffffffffffffff, r11]}, 0x80) (async) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x64, r3, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x21}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x66}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x60}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x94, r0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x24000014}, 0x4040004) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000005c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@bloom_filter={0x1e, 0x7, 0x8, 0x2, 0x400, 0x1, 0x3f, '\x00', r12, 0xffffffffffffffff, 0x0, 0x4, 0x5}, 0x48) 23:12:45 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe2, {r0}}, 0x58) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000040)={0x0, 0x3, 0x100, 0x6, 0xe, "3fb6a1581f3e8e03"}) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0) (async, rerun: 64) openat$cgroup_type(r2, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 64) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000480), 0x141200, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r3, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000580)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000600)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x10, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) (async, rerun: 32) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000840)='/sys/class/gnss', 0x8000, 0x9) (rerun: 32) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000340)=@raw=[@jmp={0x5, 0x1, 0x4, 0xa, 0x7, 0xfffffffffffffff4, 0xfffffffffffffff0}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}], &(0x7f0000000380)='syzkaller\x00', 0x2, 0x90, &(0x7f00000003c0)=""/144, 0x40f00, 0x4, '\x00', 0x0, 0x1b, r4, 0x8, &(0x7f00000004c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0x8, 0x7fff, 0x3ff}, 0x10, r5, 0x0, 0x0, &(0x7f0000000880)=[r3, r2, r2, r2, r6]}, 0x80) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f000006f9c0)={0x0, 0x0, "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", "863de575594397477e3e82f7bf27622d38e71c8ccb270d6af9d8ba51d8543be733e8b5ca014ccffd4ef1d0b5148fb2254f66a5c7d1bb1e4d7bda1c9a9c5de1a422e642e3b4c9c285beb7a1c56c3474f49412db75fb5759f0214c067baa73d393dfc64784b192ad73312695dce45097ef9df7515bd6d859fe04665bac965a50dd3b31f3b7bfa338db632a80d1fa736db47a928876d616b86009f6e33da3e6c6f64ac2e82bef441319e82e65719129f0ad0b86d8def091387e7f15ec5c6356574f9334cf3756b2d64efb860411dd67670bc62e78261ac8c5984337951072683e09ac83a9a148bd26af3ca93035f91723066ca535845d516fa4ad97233b67d5b93e8b88a81f0d4c0a9d1439469f286d41b7edce5b446820d50f8ce47b07eedce097657698df0743e6c33b3e76e666124b4ebe20f8d217501c0370a6ac597b70dc35b383178330e74cb39416f78adfb82f63535b016ee68ffcfad9bb7edd6a6fce06e3b36fd4929ee10804cd8f565c56819b9c667c7580c258fe6ddbdc1518c9e61e09ac0d885b16f952ef5886f0f4e1e499ad25b690ff8afbf044b44b7f7fb58585553ca9bd806c6bab079754cc5150f077db454a89c1e885546ec6515c4a529845e458103392166cb52337a1cced4a4fcfe538f514c1b48b9a781df7bec51099a00d0a1d5d7c2704b7f011c36c65ab7238309f5d8d0eeef325a0c792ee82deaa3e1eb790d2756fa1fe150b4282a631439a1da0a37b3cff75248289e1a6c86f31568907296096361c5655edded017e97f013f21cdb6f4aa0e0ab043d1e93de12ba00a2c41efeec3a2edaa73c928a61c01b24a2fa2eecca0d1ebac861d21d4bb1bb6a039d15bb27dd67b385bb23e05cd9c06edff403bfb9f08dbe0bf1e68ab983eb48352307dc14fc0a6f03d90f1a4caef3685ae73de437a63742c0cf2224dd686077ff0096a5ac10fb9a8e679b8b3f4aa199731b2a515d95d8df80d13ff3f25e3d03d22cafb1c6e5cb77b04a335ade142353c36b3e70beb15711b7fe338273e288a01d9f0b5b7fa90efc4f9eef23232c414329581f37334870eadd44e66522ba2bcfb18ca4dd12107db5305382418738cb6c4f6958063aeed21130167a5d8fd80d6cfecd8fa2e124d70aa869bbe0e2f7bf784012e44295bce608deafd503856f32c84e9c215731a594ab3e079cb0161e898463fb19e405e675085cdae31fd5f5a8d3bf24fb03ad63de524f226458f15730984fc7d3a7b888d635fb463a11be565027c86df477ee263441a57a5857af6e7fdd47c2447cedd52304d9c970c618000a2b99c32a4c6902df88b2496d2db7c39d963815ff0f957bce97527c4e42781fa8dcd07054443f6e2615a87636f55c1c08036ba984abe746dc9925719bbff93004be249be0efd043e05c9a26fd81a0bd7d5b0b769ef3fb3ead5a310796da8b7b71950dc530260dfe08ea502a0a0b743a37e0245a28c35577675a2a5628376b0b8710ed5292797d0641158b5ce55f027cd660ec4009aafbaadc68da24560cea7cf8802a25eaa6b2e13bf71505763fcab8f23cbe276d1036740fa1145cefbaaab9f064fd612270de15d7d5bc850556240fa772dde6e8bafaffbc06f0598eeb5c06cfc10ae5d137098dee2503d847a8a9be7a523493cd3f18dec1388ec40e367a697f12a166b130b70cbfda416c43d2862334ad25b8afe44987bd97ea8456a8ef633da1234dd116dd0d2f5442765c9b2c488e78d0d4201e44bd2c22179ef0e08947544d26738599a7f1b5d072348bd86eeca85fa5628028861796b11bcc5bdaea01357c6ba21c4b14f6d93bb1dc82d6152d14f4a038168dcbe6cd89bb901e0c69b14e0a0cd41befb910ef17a45da0f65b9e6f4a7c2bc3413ac427f913bedf59418b2ce3fff79b8943fa972c07b95789293bb021e8496d2dff23cc094c0b7a98f9f688a3c962f48f30a4393004a69e76f376264fce55775d5fb03707fc36e2953e217c96405d99c9efd20a6470bc4a61e30b8f1fe3ef2866f3ff86ccd4d8ebdd07ec76c8ee65fb0ee4bd7a0f301b841444f3ede30dbb4ac7273c051cb5347c19d83f06f3c210bc5d5817ea0cca4eed5800100b7d6906e589afa3332a9a8c881ae17c6046d6d54c1e4478fec1ac7ff6a05ef924ac1f7af0637edb068f99e2faa3e869183222cfaee92b659058fa78ea03ae77976d925aa1b1b6e38e2ba7f02f0ae5ce09e565047c45fbe1fc75fff2857a1861b4a9a39170033685ba0499400daa36504c93e66d1ba3951b10b22011308016bee6385a9eeb96b7f144d8239e93d2f4aac0cdf7186f6b2bf81e2c234606eed321d6acfdf2265a06980e53862cee09827a8713a250dee46390d5b254d185e502049258e649f88564bc3ad488d6b934eeeb9ba935de95db582ff6abd24b08a685fa2934e04b862172e46e9e5c2fd62ede4558eb54202c28ecff11b191ba9aa0297fb1e4eaaacbb74d041eda66593a395ecfe106634a4dff178dd846f2e22531c95bcea4eaa40464ed15b18d95aaa66109de0bc602c0abb7702ea547ebedc580d72d163dfad2b3e870e90d8add5121d976dc28caab63617eced637d0a2048b4b436436dab98522b10328141414f0e31eb17cbeeb1d292b27f4ec562c3925186c86debff1f66695a1bb2bcc2c8e7bfc2a814c2b41da76da008d912d06a4a664b8f009af70f60da62b41f971d9bc41526090112be37119d1df6ae5bfa2a137133997e1b5033f75a209b88b99f961343ac7703ee8925081d34c800be8429dd05fe260af0d83e2930c850f242932a74cd402ad1eadf297e4dab6d5bc246334fa96c994f4951730cb8d7bd914070de8744fc8d19605f2327474ab9957689f86a0cb1d44eddfd4f58bb131eeae5aad2feebf3d2e4024ad0ad5a2f9225714f19919cefb54e7b119714d97d2e3753b6a8c68079dcfde10d84eb7300c005ae5c7d9caa921f9825991d190fd11220200c25d3a1f7cc7b3bb1da00593673a01f9b0840b914217d618ce561d9c99f2fb6bf01f33c900d5af00e2c1a55fb1075b84c6a5788f9aa228b9cd9c8c3880e40bbcc4f6d3b15a86f9ef04757253a20d4e7f71cc41bb6ad254badf74f11d186524fa48e2bee15989e4859b705b194724d94dca0aa1b45186566743214c188b3dc4e40bd131b3449d317cf4ac520e388d2d405c88be3bb72473bbabe4be3ed15ed40fba80130419342c0837781fbfe11cbec66bef7e6951cd63fefc4c3af9e967c43bf1664fd5a9f8d09715a38b570951e54a2ce828954537577504f880f725dd80e571216f389d30bdd305499d6674d1f536cd151718210d71b30b831a6e8d102f254c11040407f1da88bcdc1f80049efa4903a4826be8d8865895b1b47a807cfb8f8f5b3a7c9b10239c2b9f01c50cc8a84357ddd4c4903debdcfbc5758dc09a04d65217c7420676cae365210dfb07671bec6ec9821ef4cebdd4a899983366da11628462bf507ce7913fd80890291204bb41336e0b2b682849d67c0205fcd462e0f5cc3606dc45adb19841ca0b4c962c6adb98b245fab35e3ca26302527d50320ef70c9ddb1ecbc850573cb5c69da9c70e86b0f1a35cac0af93f47ad2a19787cb6a837a01a45d980a5f64f7e1f8779e54006c9d1b6324659066489a8a010662d8b17f169cc3b3253d54a0cf9d347ccd201f42a7bb838dd81d5d513d0d7194f88d9032f4164dfe9c71373f57007c5f7d478bebbfcec1148e5d1af8e488d517ea2e9a768e263bf9a28fd33636b54ad9cd791ed18991a25c182d13d1d7926d4b871f402cfcfd572846e5ec42ba2f5818e1b8fdcb02cc0e93b88c05cc4f61e1f2d0967ee3998e90ed6b879cb84be3d0f6d68c3d1e69ff3f17853005f85f5953a2c0d70ab6077271c0117392c981151b7043fe7b79b34c5917e6e577f34cdf28c30a1e92fc26c639071ad4d4127e565f47aaea170c34e5945f120832fdc3dd2def2cec147797fd2fcd6808094af92b6614e41ba70a2e9546bdc3ff7f9278b86aab54ed95be80b850adf77c60b00dba6d89d837de7a0af95835fa61f713ecb28a496a0e1cc744d7fd16d099a0d5d2380b835fe4f34e29daab6ad4db60fb03079e13dcc007a150bd2861a297ce753099f96a353fd069f9177a8e6e19e023bf4528a8b2dcd030e87c1b7668f55d686aaef9bb6adb8c127e6d7f68ff6215a5736117291bd40cbfdb420c8db16118d38e48612be27527b82bc04c1d76d111f7d3928bd8c58f8433d210c9f119bff2bfe97ba91f2c450c879453bc759ece434f21daf1251091649cf5286cc183951bca032b909f35c8e47f9547b685f3f81e5eab018ccce9c0135e372aec62d82506b287c56e4e3be1004b584ab4b2520670c96a58f9ad43f4786a6b9b5aa198dd839b322d82cc7201a620e2e0638591c1a390d5349070aac7a7a757bce614ba00d5c36f558d27ba527a2be279a2bec6638d1aa774cf934ec9676d4fce384475344058dcfb7f3d67dd2da4bdb4e18ef108e068ff32a05c43e7bee706bccaa0ccc3baafc0f4c2f5c9d11f77ec6b0af493c5469b75dc43f148fb0d8128cb6c1cd936a16da5f0c19471a6c0cb8d9d569bebcc59fc5c635f4c597debb5de67b9eead490847ad1e6b5951e4610dc4756de11e2c90ca5157c6313f6d710984eb7c025a8a11fe7e79f3d3dd0e5c676804bc254e89616b2be51e6036b3ac7d0d2535210d90b069427cf7635926df7c5e77417193de1e650cda672f25459807beca0ac526e5d0f2df86c93cacbe6d2cb7c5b2408610d0cf7b5bf18dea05fecce71ce87e5966d321e7357c3a5bc2d4db8dec1bf81cecfd98a09d45ba14cfca122912470bc7cfae86460d88b3aef5d49603968cfb44f4c6b91047a7d42afd9cae5d0d62d90a51b8ed236dbc78932161c8e05ef1c501c4d6a6624b3d2c04e599634fea82da8d349b18d3815fa2d63c49375bd43540f73a32a47443039d5478481089b6fef933b9418a9655cd958c2ae6e5cc59f628088d6cc78dd5c61e3621144a8ae0ebd5d77c95fa784b12310dcb7ff07704537b646f30856095a30ea7eacd37a975926e86675cefb38d1001d55d6cd83d5a43abf31e8783fbce54bdf2dd59b18d27685a30859d08e0b6fa947432cd2c5b7a3fa9946a34f2cdd1acd9cd115a6354238636d5a2dad4fb0bfa2656ce8494139da2dc7778c47f22740265fa6e200c06794ff41e229f845e0feb809b141a225cddc49911389918df40bbcba726603f315d3725d8c790f8e7921319d6d01e7f8ec193f39aade28e21b3de66403bc8b984c772acc5d78745fbef72f87f7e117cddf1a8493d1a4f428da314ad6c3daa99069419aa7538920fa0f4806b7b821c05c56a44ef02132241bd36b2107c4a11eca197f9c2ebc23d2cbc4fcb8ff0569901b594d47f9b1d170a"}) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00000709c0)={0x0, 0x0, "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", "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"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f00000719c0)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000071bc0)={0x0}) (async, rerun: 64) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, &(0x7f0000071dc0)={0x0, 0x0, "dcd249ccdf5014e400c902fd2e832c1bffc67da51b77a6defb5d566f3ef61b5678c1d575570207a31c1a664af1a3acab83dd72ef43aeab0b0b97d8799e506b0a5691af9394f3164c9a9176f393430608c5a63fdfcb7e24a9f73b11198c532d02e045c56f60f8062109a653175d655ab02e65d1dabec8aa77edac643d1019ea7d158df1cea054bbdf16014805e3f44f24310d4b78fa6ee72a68c76a23dddd8c6573dc1aab6ebd5c1fdd5eea4defe06b00df5730909b4d330a8b6cf7add034e8874e5e612ea71f8a2b67877f274f12c8f4b85a7a20193ba6ecc36044d69232c1e1cfadb087bb9a03852deca0a10cb8a22999e9ad823335ee909e46d5b5307e3832", "5eceb06287ec9af7ecd8881646dffcba1eb178199a6f0abe1b5f2ef0932cbcf67f7a7c56952dadf163ee47fc90bac1c18d63af96c6e47c8a1db20cab0e829d3f26453bb63c5207f7007dcaba9079d67f302274c7ce10461cdce90016cd689e818bcc3fea0f1bfb73e31782fe83b78cc0cbec1f885d13f571774da931f758c855511c917852f9e313b6a94ace8cf4d8e7e1616c3047cb6cfb32fff58020c6798ed3f6a72d8faff89174040af23096c50f2ae56338f78b3611cd74d3dfdee75095552e89d65be15de34ffb53899217d52706da75c78da1b20a7e37e6920b6689daa2f0680345ffefe8225c31f376677b7e51f35068ccca9b914ce8bb6d80b6d2c12698c0fba703c0e3d2590876dfc6e54523296af9db03c656902fa1efacbe01c6cbcc5811c76465a4884d4d68e27fc0283f59cddd1b04cdb05c229d3dabe5d95b6b2e420e684b0c6ab6e4dc53aefd80331dba6619b3cb85d16248716f9662c3a25e803759c89712444a60161b1693e5439c03721ee56d716ab2da33d976448c0117cdf3c2a5777a40631bf955b5d4cbb79900c79d84ead15db1071554251da36b7bd578b8cbd942608f7506fe46c6065859521a5124cac1111dc7310dd2755c346f22ec84419edf4e6e33ce830d44b92b541ed800c308469af469e6d09e2009a3c85a9655de8feab7ee73860ac419b102d510d7926b0d6a13c6ffe99767528227ed0e4f70452bb4e8802c53bc4dd8e6625d73cbca8714fb6eb4064290c43e2813ed43b495606383eea5a2f896a7073922df067244d527a83c37ba0e2e38902f47e4d95d530b08a56fbd14c4c7d694935b8fa01cd3adaf21c19b351c0eae5fcfde01cd1dee054ec371a9ea5fb74f921ce153d79ad1c8d3552da37951aa48d28a65bd1959074b925ed558fad6c39337061965c664b9a7220297f26fc608d75314f1fcd5b604f08ce1d2db7cc1a5cefc9dd48ef09d46c811f51e4a8f8bd366e4479125993c296c1f3ea5299fc6b4c45e3628218faa4998370f569b1865c5dbd69a0a47e6972bfaa71bfd443e3872c57707ea04348bde204b8a1cb7e4f3a7d03da785f87d3e6642639ede17d1f1192d2c62ac0c504647fc7c3c825c540c31a49d6d3c90e64a27ace4f74b690790d5a89a662eed620b4237136d02258b3503fc31e2db12480ab844c410ca9869ad8596b40e803a3541291ea69af1577982457da956baf4509cc4d76d93f31aa3abfcd593a4f3086bc7f8f2cca453a14bd90c765058e8aeace961362e77de7af0e2332908fbc9bf8bf7750c1943baf7f63782a96d937147a8d4cc05b38cb87ccec37506588631ac63ee6ad0765d431b4cec5708919efb54c54965dddb563f7f61aba2674b27e49597b72297de8af17f5d793df950604df6155150c112777271956d1b99a78d330a0f841b15cc05cd0459925e9068e382bf7ced56b762ab1992bde23a6dd69601d712ce63310375bba548dec48f8961d2cef9d588e5dbcaabb52ad71a765dc8c25a69e70e2ff27eecb54fd82ff5b13d2e8983b7e9d121cb5c75ac96f91dae33b8eceadb75c5aed7d6ca820015d818dbfb8e8aa58754d38f1b1eab35d01d640bb42ebf1b24d8d3db47fa5c34703afda69236bc01275c76ba49f599e18014af7338ef21f1be89de6aae98891f1ac3594fdfa21cde027eb18800cfbcbd0e173dc92312637b827c267427ee98dd71d4d53687ffc952f3b894e8072d7b043be92573f2d3ef9711383308f9b9d00bf374f1b1e5fdef9e03b5f5b3e3eb56210d750069c6145acff872c4aa69e2389d456ead988a08c11475a8f79fe14ac5ff615a2d3c72725cc3b668ad81f6a91e91481eb568bb9a143c3a8270a89f5b6cfda223c5b1836179426dbff43166c31af0b3f0106810a9f294e1b54befc32aeec29da6fc9b42621461d8345c3e824068536637c4332c352a501dd9638ceea8bb9c2d423ac4e84bd5d1a2039155eb6f2bddda6d8ba09c9b78e7c708d01e444f8a32dc0aa02c94f441fe383aca78dfd52a9ddeb1f68b8681f9d9368399a90317460fb6cfd1d98a14e446fda819a2e07952023bb76df7bd73af2852ef0f1a8fcb9994b20479c83ff2c6c244c05ce7895207877b8c420d219fbc51cd3faf1183ea9b0334fb6fbb7070f465aa1cf9b0abda23d8ca7a0972b16ee927d5acfe7c2638a5ada39df5df44edf72be4eb063aba2e361c07f2f9299137bcc2a091beed015754c0f8944699fd535236d4190d6128fcd4a9f6f38313a898b2c9047f3667a3fb3135895a7e44721f2e0eaaadbb18f41cbd4c52068a7e5bbf506b193be076d04022a3c13dcec60a3e048d82214e1f323786802cb7a30c93e1215db77dce3c0b1647455337364efb06828616ba87bcd49427ba278d47ceb517ab2bd05a0526ed8c6b24ba8ce5ae77705c6f9fe45b707485185be7ceaacd6814ba6b9bd03734c08baf221f9fc322267d8ed30025cb5714ec0009cfb0aa0bfefbf3ee1ebb7aa6dd2334879c2aff7bfd42917bdaaca95ea90c0ab5c78d4b4e5d8c4ff6e35ba5fa80689731ef08442c8415e96ba3fc21266abe15168279d47dde0d3feae378d40d68363372062d65ecfc81cfcdfad49ab8a6d1634734ea452b97edf156ecc9ccf14c7e1de11ef65d49270268ab3cc82a9f49dc9976a437f2084c3433a3b6a14c9d63b91c1ea68043fcf1b78207d3c7bcd71fefd26ac176a68a611e7b3f10f2c9ed7a9e3429a3f169266e0d248e1cacaf35002606fa36639f46f8ed9b643c61aa4ae7c256c56023298a31ca7984602c99886656dfd25b7fbf11e4a2c17a48037149183022469d229392193ee65c6f2c2623a4ec69898fab3f60bd9e6556dcd1440fa69f1edc136fdc3e0040fa2c29e8335a7b08c0123992b686fcf71cc7fe7456ad76ef1bc0859967d56342d34c9ffcfe8574d26ad2e95d0002a0343d3c5bb316b0f20453c81afb411370a5d084aa40605d606fbeaefe493a868bb9d39c0daae51da341d59743a4a5b59b8c529c73e57a78cb7057e85c27680eb810293d583b4550d7ee893d14991637f5435f188fbcdc07cb9ad624119fa9d534ae7a239992b4be2e73afcaff0810a4ddb4554f581e54f1ea4e482b1d270511bf20d7290e52135330315c9055b4a7126626fc4512f87a9e67a40ea8cbeba18549823693bf40a26ac889f9a10f2a45ca50e830439b9722a3819eb04efe412f27743a9b9dd93d68313aeb31bcc1c6f93b6640257b10638e18a4ce59456a5b3e9256ac6bca872e0e21e6e62c7a9e1f412df65866bcab59e4ca328e4b038f2f66d0ea1dae6e1cd731bf1123f48a72ac7f26802e083e61260b2b9df20d2278c506400f6494ee4025e63e8194f75ad9fec538c91d34ae49b7088f2aadf79c258ef30342eb8336f819e0fae062a146f0a054ed24a17ccd397961b00fed050cb7e817f545352e439163ca453efe0cdc51768ba656037c74f7334a5a8f91bbe4b54433a791cf0a4219250fa070073067217a702c1427cc13f138f25c2fcaa700c748bcf4469acab2e75f95de5783c3b4290fe7933dcb890a5a7c17c1599af4bb17b5b4a6e9cb28403564859d42b5c8533f67679d3499c8b84a8972695741e56820610df22901a462ddbaad75dafa93ba6894e5705dd030cbf720b77578c6b888f95e3026d0b7d2afbf1da3fcfa55d4e82622c27f0ed07a1d9a42fbd5ab7aad8435b20c3dc5e585e410a636b2cabbce2192550407810a90bdd6747f624641a630ed8f84c12fe6e432229f647f7f466e7c358d64564515372233f69e54cc4a358ba4f1a3f42261ddd780502953b463b52007f9fc879b15bad983f1c12ab4fcac0b268bfd175f2aa0891edd50ee9c6529fe885afacf33e36b7e28949dda10c7f08c8f8a89293d3d64244e3688ca4bb908bc9ade7fb238a6b2596fc36660782da7d454d2e41b41b7ee229c0e3a46350965f3c3275a915a3f1b805e895670ec8be0e57a457927be0cc2d70b5ddca39ab4d13b1cc77373182546b65a5858151ae9a35fa50a192ff29464ef0c998a80ff7267c8b23f28800e00fb6d47e2c1249aaba3d22a564936baaa6e535a037435c0dd366e4a2fed737dea6095479ebfda802401397dd0e85bb3edd418ece596664873bc454f2fbd7b1a96a2908c066a970ecb49fdac9c5d4e74f38353fa64b6b078c1d4a838231823232aa03ffd8c7bc746c2852ee60e390ceb2f03fafe6a2f43beac56860aebc4c73594d8e941276d7a9b94024f8d7c5d3dbab61a6397088e7d3db20ee12de378adcab90a9e9eb0e798b750c5bfa5b2d4c4e866e944bd3908a45f850af94be0793b1ebd2be656e769cad7f1ed1a38f7cfeb60658135a56e2ac7771cf2025feb718d4e8b20b30ffdb90b6e42b59983d9bcba0ee2d72e16ef36b098dd9ecd6e8d9e56fb7c9ebe6c245be41bf32e7f7e67e5124c364030d2cc7f03da63fee33a92f37ecf8262b8ddcd6ccc76a64557d057211674214c3e50f5149ad514de6acd6241452ce3b9cc39a35a0f2d01fcb6a380558d32ed4562ad2f0265ece2b4701f6e1c6c1fee101e96f639612a25450a5a4560dd08a90eb0e5333e458315e31883ea15bb167cecd96e7ecc768465dd44158eadf3ae19c7fa88a6a6ecc00a1038dcf1d2a353f1d94d5a365c5bc8733db2d2d1d89a0ea8918beec8049bfb6d70ccb8a1396fdaa2406d357f63bda10c90318449f8d965be474ac3a6d5063001f0767532c603cfcce4aac942483b8e68a9828de814afcbb3b06fea98c805c576fe5078028cf461c03c46f17c50afde40b2f29f53a8df0dea9f3bcda66a91ed81e6f2a7d8f8405168b79fba293c6b8fba487928b4b9b28a925a6d15b971068048e1621f43cb3a3bbbd8a796a90a2e8379748475e69234d990d3c565c323598194caaff5cc01648d2d5b8c446f549d1090b5dec669a5d6178d426b210b2bfa3f61948f3a47b8dec8693e564fa40ebf69844e60e96b46c8a8eb94d9be04e515ea41aa2d73d209c78951aa5301f33db4b70a07bcd43a404797d745d4b110e6d41c9d1b75d6eaf4fcc4aee78e17698f4a5d819b57dbf2ad249fdd9d3fd865c2226af8929b1c49102d6d3ea788713021719a32507df2d36f81bae9307bb258c086ee9d49d7650595df69d5524e1fd13180558a36a3024cc7755b4a04fa80fa21af34e839fdd3198ec79d38d0f52237714282da9c1ee976c359a6d39d5c0de5f0b48881bca7659942083daa45696bcfc5df4835e1643cdbfed91d13e9ee96cd59a30c2146e311133c8db0784e3fe9c1a83f4db0144816dbde4d9bce5e2e59c4722e000f73f070b9e7745979461f398dd7a2a084b864e65c5e2dff15a88f4b633ee3d348ef1bc32ab173ab61b7cd7c19141217e7f74eadc8603cb4cfb3588303582a976c7a272bf0a75f35"}) (rerun: 64) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000072dc0)={0x51, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0xad, "92c15e3a811a18"}) (async, rerun: 64) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000073dc0)={0x821, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x0, "af2274d307958e"}) (async, rerun: 64) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000074dc0)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000074fc0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000751c0)={{0x0, 0x5, 0x20, 0x0, 0x7ff, 0x0, 0x5, 0x49f, 0xfff, 0x9, 0x3a17, 0x328, 0x1, 0x7fffffffffffffff, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000761c0)={0x5a8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {r9}, {0x0, r10}, {r11}, {0x0, r12}, {}, {r13}, {}, {}, {r14}, {0x0, r15}, {}, {r16}, {}, {r17}], 0x3f, "452db34604e5de"}) (async) r18 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffff8, 0x40}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x40) (rerun: 32) sendmsg$NL80211_CMD_DEL_KEY(r18, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r18, 0xc0c89425, &(0x7f0000000100)={"0af5f667a8d0792234037a4e235f729c", 0x0, 0x0, {0x8000, 0x7fff}, {0x5, 0x40}, 0x3, [0x2, 0x6, 0x0, 0x8000000000000001, 0x0, 0x8, 0x4ce, 0x5, 0xfb5, 0x3, 0x1, 0x0, 0x8, 0x6, 0xfffffffffffffffe, 0x4]}) openat$cgroup_netprio_ifpriomap(r3, &(0x7f00000000c0), 0x2, 0x0) [ 503.075195][T11800] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007feb5d37f050 [ 503.082999][T11800] RBP: 00007feb5d37f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 503.090820][T11800] R10: 00007feb5d37f050 R11: 0000000000000246 R12: 0000000000000058 [ 503.098631][T11800] R13: 00007ffc843a962f R14: 00007feb5d37f300 R15: 0000000000022000 [ 503.106437][T11800] 23:12:45 executing program 1: r0 = socket(0x2c, 0x0, 0x0) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x0, 0x18}, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7f}, [@cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffff8}]}, &(0x7f0000000180)='GPL\x00', 0x5, 0x78, &(0x7f0000000200)=""/120, 0x0, 0x2, '\x00', r3, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x7, 0xfff, 0x782a04c4}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)=[r1, r4]}, 0x80) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={0x34, r6, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000801}, 0xc000) 23:12:45 executing program 5: r0 = syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) time(&(0x7f0000000080)) r1 = getpid() r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f00000002c0)={0x4820000, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), {0x22}, &(0x7f0000000180)=""/80, 0x50, &(0x7f0000000200)=""/48, &(0x7f0000000240)=[r0, r0, r1], 0x3, {r2}}, 0x58) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) 23:12:45 executing program 0: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="011b000000227703005cb72dcc070f000000", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) (async, rerun: 64) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000009c0)={0x0, 0x3, 0x10}, 0xc) (async, rerun: 64) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b80)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x6, 0x8, 0x8, 0x100, 0x30, 0x1, 0x3, '\x00', r1, 0xffffffffffffffff, 0x5, 0x3}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0x1a, 0xc00000, 0x7, 0x3, 0x1214, 0x1, 0x9, '\x00', r1, 0xffffffffffffffff, 0x3, 0x1, 0x5}, 0x48) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d00)={&(0x7f0000000cc0)='./file0\x00', 0x0, 0x10}, 0x10) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r9, 0xd000943e, 0x0) (async) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)={&(0x7f0000000d40)='./file0\x00', 0x0, 0x18}, 0x10) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r11, 0xd000943e, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0xa, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x7f}, [@func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xd}, @call={0x85, 0x0, 0x0, 0xab}, @jmp={0x5, 0x1, 0x8, 0xa, 0x4, 0x4, 0xffffffffffffffe7}, @map_val={0x18, 0xc, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x433}]}, &(0x7f0000000a80)='GPL\x00', 0x7000000, 0x6, &(0x7f0000000ac0)=""/6, 0x41100, 0xa, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b00)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000b40)={0x3, 0x10, 0x1, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=[r5, r6, 0x1, r7, r8, 0x1, r9, r10, 0xffffffffffffffff, r11]}, 0x80) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x64, r3, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x21}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x66}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x60}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x94, r0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x24000014}, 0x4040004) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000005c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@bloom_filter={0x1e, 0x7, 0x8, 0x2, 0x400, 0x1, 0x3f, '\x00', r12, 0xffffffffffffffff, 0x0, 0x4, 0x5}, 0x48) [ 503.172077][T11844] FAULT_INJECTION: forcing a failure. [ 503.172077][T11844] name failslab, interval 1, probability 0, space 0, times 0 [ 503.196187][T11844] CPU: 1 PID: 11844 Comm: syz-executor.2 Tainted: G W 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 503.207655][T11844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 503.219026][T11844] Call Trace: 23:12:45 executing program 0: syz_clone3(&(0x7f0000000b40)={0x9000, 0x0, 0x0, 0x0, {}, &(0x7f0000000000)=""/1, 0x1, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000040)) 23:12:45 executing program 4: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r0, 0xffffffffffffffff, 0x4}, 0x48) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x200400, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="6c000000130020002bbd7440fddbdf2507f00000", @ANYRES32=r0, @ANYBLOB="00816d86fff31fd75dc1000040300000440018800400000000140004006bd6dc268f81bc4b7b57566fc833ef8b93ece9667e40fbfe5f461275bcac140005004d22419c943a0421ef769dcc936273720500"], 0x6c}, 0x1, 0x0, 0x0, 0x4054}, 0x4000080) syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00'}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r0, 0xffffffffffffffff, 0x4}, 0x48) (async) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x200400, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="6c000000130020002bbd7440fddbdf2507f00000", @ANYRES32=r0, @ANYBLOB="00816d86fff31fd75dc1000040300000440018800400000000140004006bd6dc268f81bc4b7b57566fc833ef8b93ece9667e40fbfe5f461275bcac140005004d22419c943a0421ef769dcc936273720500"], 0x6c}, 0x1, 0x0, 0x0, 0x4054}, 0x4000080) (async) syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) [ 503.222180][T11844] [ 503.224924][T11844] dump_stack_lvl+0x151/0x1b7 [ 503.229438][T11844] ? bfq_pos_tree_add_move+0x43e/0x43e [ 503.235002][T11844] dump_stack+0x15/0x17 [ 503.238992][T11844] should_fail+0x3c0/0x510 [ 503.243244][T11844] __should_failslab+0x9f/0xe0 [ 503.247844][T11844] should_failslab+0x9/0x20 [ 503.252189][T11844] kmem_cache_alloc+0x4f/0x2f0 [ 503.256801][T11844] ? vm_area_dup+0x26/0x1d0 [ 503.261121][T11844] vm_area_dup+0x26/0x1d0 [ 503.265290][T11844] dup_mmap+0x6b8/0xea0 23:12:45 executing program 0: syz_clone3(&(0x7f0000000b40)={0x9000, 0x0, 0x0, 0x0, {}, &(0x7f0000000000)=""/1, 0x1, 0x0, 0x0}, 0x58) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000040)) 23:12:45 executing program 4: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x80000001, 0x0}, 0xfffffffffffffc2f) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x608080, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x18, 0x3722, 0x1ff, 0x80, 0x110, 0xffffffffffffffff, 0x4cdc, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x48) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x28042, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x17, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="180000007f00000000000000d02e0000185000000f00000000000000000000eed044fcff0100000000000000000100009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x3ff, 0x50, &(0x7f00000000c0)=""/80, 0x40f00, 0x8, '\x00', 0x0, 0xf, r1, 0x8, &(0x7f0000000180)={0x6, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0x6, 0x8, 0x10081}, 0x10, r0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[r2, r3]}, 0x80) [ 503.269291][T11844] ? __delayed_free_task+0x20/0x20 [ 503.274228][T11844] ? mm_init+0x807/0x960 [ 503.278309][T11844] dup_mm+0x91/0x330 [ 503.282127][T11844] copy_mm+0x108/0x1b0 [ 503.286034][T11844] copy_process+0x1295/0x3250 [ 503.290546][T11844] ? check_stack_object+0xf7/0x130 [ 503.295494][T11844] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 503.300441][T11844] ? copy_clone_args_from_user+0x6cf/0x790 [ 503.306454][T11844] kernel_clone+0x22d/0x990 [ 503.310786][T11844] ? dup_mmap+0xea0/0xea0 [ 503.314956][T11844] ? create_io_thread+0x1e0/0x1e0 23:12:45 executing program 4: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x80000001, 0x0}, 0xfffffffffffffc2f) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x608080, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x18, 0x3722, 0x1ff, 0x80, 0x110, 0xffffffffffffffff, 0x4cdc, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x48) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x28042, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x17, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="180000007f00000000000000d02e0000185000000f00000000000000000000eed044fcff0100000000000000000100009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x3ff, 0x50, &(0x7f00000000c0)=""/80, 0x40f00, 0x8, '\x00', 0x0, 0xf, r1, 0x8, &(0x7f0000000180)={0x6, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0x6, 0x8, 0x10081}, 0x10, r0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[r2, r3]}, 0x80) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x80000001}, 0xfffffffffffffc2f) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x608080, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x18, 0x3722, 0x1ff, 0x80, 0x110, 0xffffffffffffffff, 0x4cdc, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x48) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x28042, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x17, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="180000007f00000000000000d02e0000185000000f00000000000000000000eed044fcff0100000000000000000100009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x3ff, 0x50, &(0x7f00000000c0)=""/80, 0x40f00, 0x8, '\x00', 0x0, 0xf, r1, 0x8, &(0x7f0000000180)={0x6, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0x6, 0x8, 0x10081}, 0x10, r0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[r2, r3]}, 0x80) (async) [ 503.319816][T11844] ? file_end_write+0x1b0/0x1b0 [ 503.324502][T11844] __x64_sys_clone3+0x375/0x3a0 [ 503.329193][T11844] ? __ia32_sys_clone+0x300/0x300 [ 503.334137][T11844] ? ksys_write+0x25f/0x2c0 [ 503.338654][T11844] ? debug_smp_processor_id+0x17/0x20 [ 503.343868][T11844] do_syscall_64+0x44/0xd0 [ 503.348134][T11844] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 503.353926][T11844] RIP: 0033:0x7feb5e60c0c9 [ 503.358177][T11844] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 503.377625][T11844] RSP: 002b:00007feb5d37f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 503.385891][T11844] RAX: ffffffffffffffda RBX: 00007feb5e72bf80 RCX: 00007feb5e60c0c9 [ 503.385906][T11844] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007feb5d37f050 23:12:45 executing program 2: syz_clone3(&(0x7f0000000b40)={0x1000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 74) 23:12:45 executing program 0: syz_clone3(&(0x7f0000000b40)={0x9000, 0x0, 0x0, 0x0, {}, &(0x7f0000000000)=""/1, 0x1, 0x0, 0x0}, 0x58) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000040)) 23:12:45 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) (async, rerun: 32) syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe2, {r0}}, 0x58) (async, rerun: 32) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000040)={0x0, 0x3, 0x100, 0x6, 0xe, "3fb6a1581f3e8e03"}) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0) openat$cgroup_type(r2, &(0x7f0000000080), 0x2, 0x0) (async) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000480), 0x141200, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r3, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000580)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000600)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x10, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) (async) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000840)='/sys/class/gnss', 0x8000, 0x9) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000340)=@raw=[@jmp={0x5, 0x1, 0x4, 0xa, 0x7, 0xfffffffffffffff4, 0xfffffffffffffff0}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}], &(0x7f0000000380)='syzkaller\x00', 0x2, 0x90, &(0x7f00000003c0)=""/144, 0x40f00, 0x4, '\x00', 0x0, 0x1b, r4, 0x8, &(0x7f00000004c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0x8, 0x7fff, 0x3ff}, 0x10, r5, 0x0, 0x0, &(0x7f0000000880)=[r3, r2, r2, r2, r6]}, 0x80) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f000006f9c0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00000709c0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f00000719c0)={0x0, ""/256, 0x0, 0x0}) (async, rerun: 64) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000071bc0)={0x0}) (async, rerun: 64) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, &(0x7f0000071dc0)={0x0, 0x0, "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", "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"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000072dc0)={0x51, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0xad, "92c15e3a811a18"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000073dc0)={0x821, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x0, "af2274d307958e"}) (async, rerun: 64) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000074dc0)={0x0, ""/256, 0x0, 0x0}) (rerun: 64) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000074fc0)={0x0, ""/256, 0x0}) (async) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000751c0)={{0x0, 0x5, 0x20, 0x0, 0x7ff, 0x0, 0x5, 0x49f, 0xfff, 0x9, 0x3a17, 0x328, 0x1, 0x7fffffffffffffff, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000761c0)={0x5a8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {r9}, {0x0, r10}, {r11}, {0x0, r12}, {}, {r13}, {}, {}, {r14}, {0x0, r15}, {}, {r16}, {}, {r17}], 0x3f, "452db34604e5de"}) (async, rerun: 64) r18 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffff8, 0x40}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x40) (async) sendmsg$NL80211_CMD_DEL_KEY(r18, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r18, 0xc0c89425, &(0x7f0000000100)={"0af5f667a8d0792234037a4e235f729c", 0x0, 0x0, {0x8000, 0x7fff}, {0x5, 0x40}, 0x3, [0x2, 0x6, 0x0, 0x8000000000000001, 0x0, 0x8, 0x4ce, 0x5, 0xfb5, 0x3, 0x1, 0x0, 0x8, 0x6, 0xfffffffffffffffe, 0x4]}) (async) openat$cgroup_netprio_ifpriomap(r3, &(0x7f00000000c0), 0x2, 0x0) 23:12:45 executing program 1: r0 = socket(0x2c, 0x0, 0x0) (async, rerun: 32) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x0, 0x18}, 0xc) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) (async) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) (async, rerun: 32) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7f}, [@cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffff8}]}, &(0x7f0000000180)='GPL\x00', 0x5, 0x78, &(0x7f0000000200)=""/120, 0x0, 0x2, '\x00', r3, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x7, 0xfff, 0x782a04c4}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)=[r1, r4]}, 0x80) (rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$NL80211_CMD_DEL_KEY(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={0x34, r6, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000801}, 0xc000) 23:12:45 executing program 5: r0 = syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) time(&(0x7f0000000080)) r1 = getpid() r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f00000002c0)={0x4820000, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), {0x22}, &(0x7f0000000180)=""/80, 0x50, &(0x7f0000000200)=""/48, &(0x7f0000000240)=[r0, r0, r1], 0x3, {r2}}, 0x58) 23:12:45 executing program 5: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) time(&(0x7f0000000080)) getpid() openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) 23:12:45 executing program 0: syz_clone3(&(0x7f00000003c0)={0x84000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)=0x0, {0x1}, &(0x7f0000000240)=""/255, 0xff, &(0x7f0000000340)=""/9, &(0x7f0000000380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x7}, 0x58) r1 = syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f0000000280)={0x10000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r1], 0x1}, 0x58) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0) syz_clone3(&(0x7f0000000480)={0x2001000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x11}, &(0x7f00000000c0)=""/6, 0x6, &(0x7f0000000100)=""/119, &(0x7f0000000440)=[r0, r1, 0x0], 0x3, {r2}}, 0x58) syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) [ 503.385914][T11844] RBP: 00007feb5d37f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 503.385921][T11844] R10: 00007feb5d37f050 R11: 0000000000000246 R12: 0000000000000058 [ 503.385928][T11844] R13: 00007ffc843a962f R14: 00007feb5d37f300 R15: 0000000000022000 [ 503.385937][T11844] 23:12:45 executing program 5: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) time(&(0x7f0000000080)) getpid() 23:12:45 executing program 3: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={r0, 0x16, 0x0, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) getuid() bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, &(0x7f0000000080)="82a8c43fe9bc34eb96a0e81b5ce951afe3cabf33d51d737fad2a74461d8011d5b4440febbc947689293210a816e635bedcc00e35743e57b03737122c95a7e93005a305612cea16ba50d9c464949fe4717ee5e7bf5ffdfed1a31e87fe792845fe5456811f138dc30ddab9857e2e4778ad54a756e256a2ee468441ab0dd7d5e61ba7171095f8ade877e6de9937294e5aa39c6be160b5d95bdd405cad8a2f54b0531d2b60fd898be45e8bf5f81edbbcf140c8b164822e2bb1907fe6799fa88cea193d50554b927b06f6c32e9f35275842", &(0x7f0000000180)=""/125}, 0x20) 23:12:45 executing program 4: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x80000001, 0x0}, 0xfffffffffffffc2f) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x608080, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x18, 0x3722, 0x1ff, 0x80, 0x110, 0xffffffffffffffff, 0x4cdc, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x48) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x28042, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x17, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="180000007f00000000000000d02e0000185000000f00000000000000000000eed044fcff0100000000000000000100009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x3ff, 0x50, &(0x7f00000000c0)=""/80, 0x40f00, 0x8, '\x00', 0x0, 0xf, r1, 0x8, &(0x7f0000000180)={0x6, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0x6, 0x8, 0x10081}, 0x10, r0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[r2, r3]}, 0x80) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x80000001}, 0xfffffffffffffc2f) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x608080, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x18, 0x3722, 0x1ff, 0x80, 0x110, 0xffffffffffffffff, 0x4cdc, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x48) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x28042, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x17, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="180000007f00000000000000d02e0000185000000f00000000000000000000eed044fcff0100000000000000000100009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x3ff, 0x50, &(0x7f00000000c0)=""/80, 0x40f00, 0x8, '\x00', 0x0, 0xf, r1, 0x8, &(0x7f0000000180)={0x6, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0x6, 0x8, 0x10081}, 0x10, r0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[r2, r3]}, 0x80) (async) [ 503.478195][T11912] FAULT_INJECTION: forcing a failure. [ 503.478195][T11912] name failslab, interval 1, probability 0, space 0, times 0 23:12:45 executing program 5: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) time(&(0x7f0000000080)) 23:12:45 executing program 0: syz_clone3(&(0x7f00000003c0)={0x84000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)=0x0, {0x1}, &(0x7f0000000240)=""/255, 0xff, &(0x7f0000000340)=""/9, &(0x7f0000000380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x7}, 0x58) (async) r1 = syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f0000000280)={0x10000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r1], 0x1}, 0x58) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0) (async) syz_clone3(&(0x7f0000000480)={0x2001000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x11}, &(0x7f00000000c0)=""/6, 0x6, &(0x7f0000000100)=""/119, &(0x7f0000000440)=[r0, r1, 0x0], 0x3, {r2}}, 0x58) (async, rerun: 32) syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) (rerun: 32) [ 503.524601][T11912] CPU: 1 PID: 11912 Comm: syz-executor.2 Tainted: G W 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 503.536159][T11912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 503.546057][T11912] Call Trace: [ 503.549173][T11912] [ 503.552037][T11912] dump_stack_lvl+0x151/0x1b7 [ 503.556550][T11912] ? bfq_pos_tree_add_move+0x43e/0x43e [ 503.561933][T11912] ? do_syscall_64+0x44/0xd0 [ 503.566365][T11912] dump_stack+0x15/0x17 [ 503.570442][T11912] should_fail+0x3c0/0x510 [ 503.574696][T11912] __should_failslab+0x9f/0xe0 [ 503.579291][T11912] should_failslab+0x9/0x20 [ 503.583632][T11912] kmem_cache_alloc+0x4f/0x2f0 [ 503.588231][T11912] ? anon_vma_clone+0xa1/0x4f0 [ 503.592829][T11912] anon_vma_clone+0xa1/0x4f0 [ 503.597707][T11912] anon_vma_fork+0x91/0x4f0 [ 503.602033][T11912] ? anon_vma_name+0x43/0x70 [ 503.606456][T11912] dup_mmap+0x750/0xea0 [ 503.610452][T11912] ? __delayed_free_task+0x20/0x20 [ 503.615399][T11912] ? mm_init+0x807/0x960 [ 503.619474][T11912] dup_mm+0x91/0x330 [ 503.623210][T11912] copy_mm+0x108/0x1b0 [ 503.627140][T11912] copy_process+0x1295/0x3250 [ 503.631638][T11912] ? check_stack_object+0xf7/0x130 [ 503.636575][T11912] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 503.641522][T11912] ? copy_clone_args_from_user+0x6cf/0x790 [ 503.647164][T11912] kernel_clone+0x22d/0x990 [ 503.651500][T11912] ? dup_mmap+0xea0/0xea0 [ 503.655668][T11912] ? create_io_thread+0x1e0/0x1e0 [ 503.660530][T11912] ? file_end_write+0x1b0/0x1b0 [ 503.665217][T11912] __x64_sys_clone3+0x375/0x3a0 [ 503.669900][T11912] ? __ia32_sys_clone+0x300/0x300 [ 503.674765][T11912] ? ksys_write+0x25f/0x2c0 [ 503.679107][T11912] ? debug_smp_processor_id+0x17/0x20 [ 503.684311][T11912] do_syscall_64+0x44/0xd0 [ 503.688561][T11912] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 503.694289][T11912] RIP: 0033:0x7feb5e60c0c9 [ 503.698542][T11912] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 23:12:46 executing program 2: syz_clone3(&(0x7f0000000b40)={0x1000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 75) 23:12:46 executing program 5: time(&(0x7f0000000080)) 23:12:46 executing program 3: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={r0, 0x16, 0x0, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) getuid() (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, &(0x7f0000000080)="82a8c43fe9bc34eb96a0e81b5ce951afe3cabf33d51d737fad2a74461d8011d5b4440febbc947689293210a816e635bedcc00e35743e57b03737122c95a7e93005a305612cea16ba50d9c464949fe4717ee5e7bf5ffdfed1a31e87fe792845fe5456811f138dc30ddab9857e2e4778ad54a756e256a2ee468441ab0dd7d5e61ba7171095f8ade877e6de9937294e5aa39c6be160b5d95bdd405cad8a2f54b0531d2b60fd898be45e8bf5f81edbbcf140c8b164822e2bb1907fe6799fa88cea193d50554b927b06f6c32e9f35275842", &(0x7f0000000180)=""/125}, 0x20) 23:12:46 executing program 0: syz_clone3(&(0x7f00000003c0)={0x84000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)=0x0, {0x1}, &(0x7f0000000240)=""/255, 0xff, &(0x7f0000000340)=""/9, &(0x7f0000000380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x7}, 0x58) (async) r1 = syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f0000000280)={0x10000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r1], 0x1}, 0x58) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0) syz_clone3(&(0x7f0000000480)={0x2001000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x11}, &(0x7f00000000c0)=""/6, 0x6, &(0x7f0000000100)=""/119, &(0x7f0000000440)=[r0, r1, 0x0], 0x3, {r2}}, 0x58) (async) syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) 23:12:46 executing program 1: r0 = socket(0x2c, 0x0, 0x0) (async, rerun: 64) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x0, 0x18}, 0xc) (rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) (async, rerun: 64) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) (rerun: 64) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7f}, [@cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffff8}]}, &(0x7f0000000180)='GPL\x00', 0x5, 0x78, &(0x7f0000000200)=""/120, 0x0, 0x2, '\x00', r3, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x7, 0xfff, 0x782a04c4}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)=[r1, r4]}, 0x80) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={0x34, r6, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000801}, 0xc000) 23:12:46 executing program 4: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000040)={0x0, 0x8, 0x1, &(0x7f0000000000)=0x4}) 23:12:46 executing program 5: time(&(0x7f0000000080)) [ 503.718077][T11912] RSP: 002b:00007feb5d37f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 503.726405][T11912] RAX: ffffffffffffffda RBX: 00007feb5e72bf80 RCX: 00007feb5e60c0c9 [ 503.734232][T11912] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007feb5d37f050 [ 503.742107][T11912] RBP: 00007feb5d37f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 503.749919][T11912] R10: 00007feb5d37f050 R11: 0000000000000246 R12: 0000000000000058 [ 503.757729][T11912] R13: 00007ffc843a962f R14: 00007feb5d37f300 R15: 0000000000022000 [ 503.765716][T11912] 23:12:46 executing program 3: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={r0, 0x16, 0x0, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) (async) getuid() (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, &(0x7f0000000080)="82a8c43fe9bc34eb96a0e81b5ce951afe3cabf33d51d737fad2a74461d8011d5b4440febbc947689293210a816e635bedcc00e35743e57b03737122c95a7e93005a305612cea16ba50d9c464949fe4717ee5e7bf5ffdfed1a31e87fe792845fe5456811f138dc30ddab9857e2e4778ad54a756e256a2ee468441ab0dd7d5e61ba7171095f8ade877e6de9937294e5aa39c6be160b5d95bdd405cad8a2f54b0531d2b60fd898be45e8bf5f81edbbcf140c8b164822e2bb1907fe6799fa88cea193d50554b927b06f6c32e9f35275842", &(0x7f0000000180)=""/125}, 0x20) 23:12:46 executing program 4: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000040)={0x0, 0x8, 0x1, &(0x7f0000000000)=0x4}) 23:12:46 executing program 5: time(&(0x7f0000000080)) [ 503.806548][T11954] FAULT_INJECTION: forcing a failure. [ 503.806548][T11954] name failslab, interval 1, probability 0, space 0, times 0 [ 503.840309][T11954] CPU: 0 PID: 11954 Comm: syz-executor.2 Tainted: G W 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 503.851880][T11954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 503.861781][T11954] Call Trace: [ 503.864903][T11954] [ 503.867676][T11954] dump_stack_lvl+0x151/0x1b7 [ 503.872192][T11954] ? bfq_pos_tree_add_move+0x43e/0x43e [ 503.877490][T11954] dump_stack+0x15/0x17 [ 503.881478][T11954] should_fail+0x3c0/0x510 [ 503.885733][T11954] __should_failslab+0x9f/0xe0 [ 503.890333][T11954] should_failslab+0x9/0x20 [ 503.894673][T11954] kmem_cache_alloc+0x4f/0x2f0 [ 503.899270][T11954] ? vm_area_dup+0x26/0x1d0 [ 503.903610][T11954] ? __kasan_check_read+0x11/0x20 [ 503.908814][T11954] vm_area_dup+0x26/0x1d0 [ 503.912980][T11954] dup_mmap+0x6b8/0xea0 [ 503.916974][T11954] ? __delayed_free_task+0x20/0x20 [ 503.921919][T11954] ? mm_init+0x807/0x960 [ 503.925998][T11954] dup_mm+0x91/0x330 [ 503.929819][T11954] copy_mm+0x108/0x1b0 [ 503.933737][T11954] copy_process+0x1295/0x3250 [ 503.938238][T11954] ? check_stack_object+0xf7/0x130 [ 503.943186][T11954] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 503.948129][T11954] ? copy_clone_args_from_user+0x6cf/0x790 [ 503.953771][T11954] kernel_clone+0x22d/0x990 [ 503.958201][T11954] ? dup_mmap+0xea0/0xea0 [ 503.962366][T11954] ? create_io_thread+0x1e0/0x1e0 [ 503.967227][T11954] ? file_end_write+0x1b0/0x1b0 [ 503.971910][T11954] __x64_sys_clone3+0x375/0x3a0 [ 503.976603][T11954] ? __ia32_sys_clone+0x300/0x300 [ 503.981460][T11954] ? ksys_write+0x25f/0x2c0 [ 503.985800][T11954] ? debug_smp_processor_id+0x17/0x20 [ 503.991007][T11954] do_syscall_64+0x44/0xd0 [ 503.995344][T11954] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 504.001103][T11954] RIP: 0033:0x7feb5e60c0c9 [ 504.005328][T11954] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 504.024775][T11954] RSP: 002b:00007feb5d37f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 504.033925][T11954] RAX: ffffffffffffffda RBX: 00007feb5e72bf80 RCX: 00007feb5e60c0c9 [ 504.041805][T11954] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007feb5d37f050 [ 504.049881][T11954] RBP: 00007feb5d37f1d0 R08: 0000000000000000 R09: 0000000000000058 23:12:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r2, 0xffffffffffffffff, 0x4}, 0x48) r3 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r2, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r3}, 0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r4, 0xffffffffffffffff, 0x4}, 0x48) r5 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r4, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r5}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0], 0x0, 0x8, &(0x7f0000000140)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r7, 0xffffffffffffffff, 0x4}, 0x48) r8 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000940)=ANY=[@ANYBLOB="183700000200000000000000000000000054ff0f09000000182e247e347fccaae8280900ccd4861b00007233b5e753363f3bb4edc79fc3dc4c99227e476825886a0d62b3278190f9acb9693a011990e6513a48fe967b96b83a9bf45c1fa9594b2c43d00bc7dd42780d47b9178db814c193ea62846a71cc86e611fa6e33b4c504d4e0376d9494509fe7e6e27077951d8793208ddd6316cc9c8f461c1aaf", @ANYRES32, @ANYBLOB="0000000000000000185b00000300000000000000000000001837000000000000000000000000000018260000", @ANYRES32, @ANYBLOB="000000001000000018200000", @ANYRES32, @ANYBLOB="00000000ffffff7f"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r7, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r8}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x9, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000440)=[{}, {}], 0x10, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'veth0_to_hsr\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'veth1_macvtap\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000900)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000700)={0x1a8, r1, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x4}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x8000}, 0x40c0) 23:12:46 executing program 4: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000040)={0x0, 0x8, 0x1, &(0x7f0000000000)=0x4}) 23:12:46 executing program 2: syz_clone3(&(0x7f0000000b40)={0x1000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 76) 23:12:46 executing program 0: ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000bc0)={{0x0, 0x3, 0x100, 0x7, 0x6, 0xef66, 0x1f, 0x4, 0xff, 0x81, 0x5, 0x4, 0x1f, 0xd0, 0x8}}) syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) 23:12:46 executing program 5: syz_clone3(0x0, 0x0) time(&(0x7f0000000080)) 23:12:46 executing program 4: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x1a, 0x0, 0x0}, 0x58) 23:12:46 executing program 3: keyctl$negate(0xd, 0x0, 0x5, 0xfffffffffffffffd) r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$link(0x8, r0, 0xfffffffffffffffe) syz_clone3(&(0x7f0000000000)={0x810400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 504.057697][T11954] R10: 00007feb5d37f050 R11: 0000000000000246 R12: 0000000000000058 [ 504.065584][T11954] R13: 00007ffc843a962f R14: 00007feb5d37f300 R15: 0000000000022000 [ 504.073491][T11954] 23:12:46 executing program 0: ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000bc0)={{0x0, 0x3, 0x100, 0x7, 0x6, 0xef66, 0x1f, 0x4, 0xff, 0x81, 0x5, 0x4, 0x1f, 0xd0, 0x8}}) (async) syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) 23:12:46 executing program 3: keyctl$negate(0xd, 0x0, 0x5, 0xfffffffffffffffd) (async) r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$link(0x8, r0, 0xfffffffffffffffe) syz_clone3(&(0x7f0000000000)={0x810400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:12:46 executing program 5: syz_clone3(0x0, 0x0) time(&(0x7f0000000080)) 23:12:46 executing program 4: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x1a, 0x0, 0x0}, 0x58) 23:12:46 executing program 0: ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000bc0)={{0x0, 0x3, 0x100, 0x7, 0x6, 0xef66, 0x1f, 0x4, 0xff, 0x81, 0x5, 0x4, 0x1f, 0xd0, 0x8}}) (async) syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) [ 504.130440][T11988] FAULT_INJECTION: forcing a failure. [ 504.130440][T11988] name failslab, interval 1, probability 0, space 0, times 0 [ 504.168448][T11988] CPU: 0 PID: 11988 Comm: syz-executor.2 Tainted: G W 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 504.180002][T11988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 504.189895][T11988] Call Trace: [ 504.193023][T11988] [ 504.195806][T11988] dump_stack_lvl+0x151/0x1b7 [ 504.200311][T11988] ? bfq_pos_tree_add_move+0x43e/0x43e [ 504.205608][T11988] dump_stack+0x15/0x17 [ 504.209598][T11988] should_fail+0x3c0/0x510 [ 504.213915][T11988] __should_failslab+0x9f/0xe0 [ 504.218709][T11988] should_failslab+0x9/0x20 [ 504.223047][T11988] kmem_cache_alloc+0x4f/0x2f0 [ 504.227740][T11988] ? vm_area_dup+0x26/0x1d0 [ 504.232176][T11988] ? __kasan_check_read+0x11/0x20 [ 504.237364][T11988] vm_area_dup+0x26/0x1d0 [ 504.241532][T11988] dup_mmap+0x6b8/0xea0 [ 504.245616][T11988] ? __delayed_free_task+0x20/0x20 [ 504.250800][T11988] ? mm_init+0x807/0x960 [ 504.254883][T11988] dup_mm+0x91/0x330 [ 504.258611][T11988] copy_mm+0x108/0x1b0 [ 504.262598][T11988] copy_process+0x1295/0x3250 [ 504.267374][T11988] ? check_stack_object+0xf7/0x130 [ 504.272318][T11988] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 504.277267][T11988] ? copy_clone_args_from_user+0x6cf/0x790 [ 504.283098][T11988] kernel_clone+0x22d/0x990 [ 504.287511][T11988] ? dup_mmap+0xea0/0xea0 [ 504.291673][T11988] ? create_io_thread+0x1e0/0x1e0 [ 504.296639][T11988] ? file_end_write+0x1b0/0x1b0 [ 504.301306][T11988] __x64_sys_clone3+0x375/0x3a0 [ 504.305995][T11988] ? __ia32_sys_clone+0x300/0x300 [ 504.310857][T11988] ? ksys_write+0x25f/0x2c0 [ 504.315295][T11988] ? debug_smp_processor_id+0x17/0x20 [ 504.320513][T11988] do_syscall_64+0x44/0xd0 [ 504.324753][T11988] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 504.330486][T11988] RIP: 0033:0x7feb5e60c0c9 [ 504.334995][T11988] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 504.354991][T11988] RSP: 002b:00007feb5d37f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 504.363400][T11988] RAX: ffffffffffffffda RBX: 00007feb5e72bf80 RCX: 00007feb5e60c0c9 [ 504.371670][T11988] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007feb5d37f050 23:12:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r2, 0xffffffffffffffff, 0x4}, 0x48) r3 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r2, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r3}, 0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r4, 0xffffffffffffffff, 0x4}, 0x48) r5 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r4, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r5}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0], 0x0, 0x8, &(0x7f0000000140)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r7, 0xffffffffffffffff, 0x4}, 0x48) r8 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000940)=ANY=[@ANYBLOB="183700000200000000000000000000000054ff0f09000000182e247e347fccaae8280900ccd4861b00007233b5e753363f3bb4edc79fc3dc4c99227e476825886a0d62b3278190f9acb9693a011990e6513a48fe967b96b83a9bf45c1fa9594b2c43d00bc7dd42780d47b9178db814c193ea62846a71cc86e611fa6e33b4c504d4e0376d9494509fe7e6e27077951d8793208ddd6316cc9c8f461c1aaf", @ANYRES32, @ANYBLOB="0000000000000000185b00000300000000000000000000001837000000000000000000000000000018260000", @ANYRES32, @ANYBLOB="000000001000000018200000", @ANYRES32, @ANYBLOB="00000000ffffff7f"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r7, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r8}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x9, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000440)=[{}, {}], 0x10, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'veth0_to_hsr\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'veth1_macvtap\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000900)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000700)={0x1a8, r1, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x4}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x8000}, 0x40c0) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00'}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r2, 0xffffffffffffffff, 0x4}, 0x48) (async) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r2, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r3}, 0x80) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00'}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r4, 0xffffffffffffffff, 0x4}, 0x48) (async) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r4, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r5}, 0x80) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0], 0x0, 0x8, &(0x7f0000000140)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00'}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r7, 0xffffffffffffffff, 0x4}, 0x48) (async) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000940)=ANY=[@ANYBLOB="183700000200000000000000000000000054ff0f09000000182e247e347fccaae8280900ccd4861b00007233b5e753363f3bb4edc79fc3dc4c99227e476825886a0d62b3278190f9acb9693a011990e6513a48fe967b96b83a9bf45c1fa9594b2c43d00bc7dd42780d47b9178db814c193ea62846a71cc86e611fa6e33b4c504d4e0376d9494509fe7e6e27077951d8793208ddd6316cc9c8f461c1aaf", @ANYRES32, @ANYBLOB="0000000000000000185b00000300000000000000000000001837000000000000000000000000000018260000", @ANYRES32, @ANYBLOB="000000001000000018200000", @ANYRES32, @ANYBLOB="00000000ffffff7f"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r7, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r8}, 0x80) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x9, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000440)=[{}, {}], 0x10, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'veth0_to_hsr\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'veth1_macvtap\x00'}) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000900)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000700)={0x1a8, r1, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x4}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x8000}, 0x40c0) (async) 23:12:46 executing program 3: keyctl$negate(0xd, 0x0, 0x5, 0xfffffffffffffffd) r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$link(0x8, r0, 0xfffffffffffffffe) syz_clone3(&(0x7f0000000000)={0x810400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) keyctl$negate(0xd, 0x0, 0x5, 0xfffffffffffffffd) (async) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) (async) keyctl$link(0x8, r0, 0xfffffffffffffffe) (async) syz_clone3(&(0x7f0000000000)={0x810400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) [ 504.379474][T11988] RBP: 00007feb5d37f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 504.387283][T11988] R10: 00007feb5d37f050 R11: 0000000000000246 R12: 0000000000000058 [ 504.395094][T11988] R13: 00007ffc843a962f R14: 00007feb5d37f300 R15: 0000000000022000 [ 504.403452][T11988] 23:12:46 executing program 2: syz_clone3(&(0x7f0000000b40)={0x1000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 77) 23:12:46 executing program 0: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x0, 0x0, 0x0}, 0x58) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) openat$cgroup_type(r0, &(0x7f0000000000), 0x2, 0x0) 23:12:46 executing program 5: syz_clone3(0x0, 0x0) time(&(0x7f0000000080)) 23:12:46 executing program 4: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x1a, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x1a, 0x0, 0x0}, 0x58) (async) 23:12:46 executing program 3: ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000000)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='freezer.parent_freezing\x00', 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/class/ppp', 0x125480, 0x2) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000bc0)={0x1230, 0x14, 0x100, 0x70bd29, 0x25dfdbfe, {0x11, 0x5}, [@INET_DIAG_REQ_BYTECODE={0x58, 0x1, "9ceda6ebd3d232a9725d2b7ee005b9b795032853a3d869e005a922e305ebfd061f65bba290aa633d0b2b63eeaa28125e9e1afc0bcfdb980b2828910a4fa2974214de793f48c265d8654424dfd9680d569c181b7b"}, @INET_DIAG_REQ_BYTECODE={0x76, 0x1, "0422fce5e5178168924318355366fefb1ec2e18e19ab4460ad6fed838a4e2b2453b660d72a2ea00425e2a2a6360b898d147e4c9fd73741679f1f26456e7e48d15432449e1d6899a1e73c426f5192d863ed5759d76d2a8c561a2bb439d267e217ea1609e9022eeeb26cf4cdb0645eb75c9334"}, @INET_DIAG_REQ_BYTECODE={0xab, 0x1, "73a0319908a9132917a49464fe85631d775c35adb2ef593c928e0dbc24ec3222a45dc1afe4ff69297975d128ba9a7ff43d1335abfd33c976f7dca4604ddac40097ccb175571aed53fc5997400dfae65626fcc50ea5c5ea51e1fa493cd102e559e3a26c14e303a4d06067d69d73ff013e7078bb2c6164f541438357127412ec886b6a251936828ba320ff98bee979dbd30179a5d201db070b2668a61ac3ebc7166645cf9fe1ccf4"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x9b, 0x1, "11f8d1179b341a6d7db84e928b9111ade028f4d42d380309885c65dd7c655947fafaec7f12dbe2f2e057d70e2660c7d226cad92bee60c6e74607d065a0e387fe3239bb85af23a2c43df5db22fcc821d2e30381ddc8cc0f284f02817175b060bf3a3be0607ce475726ec86fc979c98cb642e41891674f77a3626e4e34a1dc0cd82344b9f18fa112f6c1e48aa89e829b556da01c3116ad6c"}]}, 0x1230}, 0x1, 0x0, 0x0, 0x4048800}, 0x4c850) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x2, &(0x7f0000000040)=@raw=[@generic={0x6, 0x6, 0x4, 0x400, 0x4}, @generic={0x3f, 0x2, 0x2, 0x7, 0x3ff}], &(0x7f0000000080)='syzkaller\x00', 0xffffffff, 0x87, &(0x7f00000000c0)=""/135, 0x0, 0x0, '\x00', 0x0, 0x26, r0, 0x8, &(0x7f00000001c0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x2, 0x0, 0x3000000, 0x7fff}, 0x10, 0xffffffffffffffff, r1, 0x0, &(0x7f00000002c0)=[r2]}, 0x80) syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:12:46 executing program 0: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x0, 0x0, 0x0}, 0x58) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) openat$cgroup_type(r0, &(0x7f0000000000), 0x2, 0x0) syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x0, 0x0, 0x0}, 0x58) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) (async) openat$cgroup_type(r0, &(0x7f0000000000), 0x2, 0x0) (async) 23:12:46 executing program 4: openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='pids.max\x00', 0x2, 0x0) syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:12:46 executing program 5: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) time(&(0x7f0000000080)) 23:12:46 executing program 3: ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000000)) (async) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='freezer.parent_freezing\x00', 0x0, 0x0) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/class/ppp', 0x125480, 0x2) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, 0x0) (async) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000bc0)={0x1230, 0x14, 0x100, 0x70bd29, 0x25dfdbfe, {0x11, 0x5}, [@INET_DIAG_REQ_BYTECODE={0x58, 0x1, "9ceda6ebd3d232a9725d2b7ee005b9b795032853a3d869e005a922e305ebfd061f65bba290aa633d0b2b63eeaa28125e9e1afc0bcfdb980b2828910a4fa2974214de793f48c265d8654424dfd9680d569c181b7b"}, @INET_DIAG_REQ_BYTECODE={0x76, 0x1, "0422fce5e5178168924318355366fefb1ec2e18e19ab4460ad6fed838a4e2b2453b660d72a2ea00425e2a2a6360b898d147e4c9fd73741679f1f26456e7e48d15432449e1d6899a1e73c426f5192d863ed5759d76d2a8c561a2bb439d267e217ea1609e9022eeeb26cf4cdb0645eb75c9334"}, @INET_DIAG_REQ_BYTECODE={0xab, 0x1, "73a0319908a9132917a49464fe85631d775c35adb2ef593c928e0dbc24ec3222a45dc1afe4ff69297975d128ba9a7ff43d1335abfd33c976f7dca4604ddac40097ccb175571aed53fc5997400dfae65626fcc50ea5c5ea51e1fa493cd102e559e3a26c14e303a4d06067d69d73ff013e7078bb2c6164f541438357127412ec886b6a251936828ba320ff98bee979dbd30179a5d201db070b2668a61ac3ebc7166645cf9fe1ccf4"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x9b, 0x1, "11f8d1179b341a6d7db84e928b9111ade028f4d42d380309885c65dd7c655947fafaec7f12dbe2f2e057d70e2660c7d226cad92bee60c6e74607d065a0e387fe3239bb85af23a2c43df5db22fcc821d2e30381ddc8cc0f284f02817175b060bf3a3be0607ce475726ec86fc979c98cb642e41891674f77a3626e4e34a1dc0cd82344b9f18fa112f6c1e48aa89e829b556da01c3116ad6c"}]}, 0x1230}, 0x1, 0x0, 0x0, 0x4048800}, 0x4c850) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x2, &(0x7f0000000040)=@raw=[@generic={0x6, 0x6, 0x4, 0x400, 0x4}, @generic={0x3f, 0x2, 0x2, 0x7, 0x3ff}], &(0x7f0000000080)='syzkaller\x00', 0xffffffff, 0x87, &(0x7f00000000c0)=""/135, 0x0, 0x0, '\x00', 0x0, 0x26, r0, 0x8, &(0x7f00000001c0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x2, 0x0, 0x3000000, 0x7fff}, 0x10, 0xffffffffffffffff, r1, 0x0, &(0x7f00000002c0)=[r2]}, 0x80) (async, rerun: 32) syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (rerun: 32) 23:12:46 executing program 4: openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='pids.max\x00', 0x2, 0x0) (async) syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 504.491773][T12019] FAULT_INJECTION: forcing a failure. [ 504.491773][T12019] name failslab, interval 1, probability 0, space 0, times 0 [ 504.515329][T12019] CPU: 0 PID: 12019 Comm: syz-executor.2 Tainted: G W 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 504.526882][T12019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 504.536788][T12019] Call Trace: [ 504.539900][T12019] [ 504.542677][T12019] dump_stack_lvl+0x151/0x1b7 [ 504.547186][T12019] ? bfq_pos_tree_add_move+0x43e/0x43e [ 504.552574][T12019] ? do_syscall_64+0x44/0xd0 [ 504.557018][T12019] dump_stack+0x15/0x17 [ 504.560999][T12019] should_fail+0x3c0/0x510 [ 504.565246][T12019] __should_failslab+0x9f/0xe0 [ 504.569841][T12019] should_failslab+0x9/0x20 [ 504.574200][T12019] kmem_cache_alloc+0x4f/0x2f0 [ 504.578780][T12019] ? anon_vma_clone+0xa1/0x4f0 [ 504.583384][T12019] anon_vma_clone+0xa1/0x4f0 [ 504.587810][T12019] anon_vma_fork+0x91/0x4f0 [ 504.592146][T12019] ? anon_vma_name+0x43/0x70 [ 504.596576][T12019] dup_mmap+0x750/0xea0 [ 504.600568][T12019] ? __delayed_free_task+0x20/0x20 [ 504.605513][T12019] ? mm_init+0x807/0x960 [ 504.609593][T12019] dup_mm+0x91/0x330 [ 504.613409][T12019] copy_mm+0x108/0x1b0 [ 504.617318][T12019] copy_process+0x1295/0x3250 [ 504.621830][T12019] ? check_stack_object+0xf7/0x130 [ 504.626779][T12019] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 504.631810][T12019] ? copy_clone_args_from_user+0x6cf/0x790 [ 504.637980][T12019] kernel_clone+0x22d/0x990 [ 504.642320][T12019] ? dup_mmap+0xea0/0xea0 [ 504.647172][T12019] ? create_io_thread+0x1e0/0x1e0 [ 504.652029][T12019] ? file_end_write+0x1b0/0x1b0 [ 504.656715][T12019] __x64_sys_clone3+0x375/0x3a0 [ 504.661402][T12019] ? __ia32_sys_clone+0x300/0x300 [ 504.666261][T12019] ? ksys_write+0x25f/0x2c0 [ 504.670602][T12019] ? debug_smp_processor_id+0x17/0x20 [ 504.675815][T12019] do_syscall_64+0x44/0xd0 [ 504.680079][T12019] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 504.685794][T12019] RIP: 0033:0x7feb5e60c0c9 [ 504.690265][T12019] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 504.709712][T12019] RSP: 002b:00007feb5d37f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 504.718195][T12019] RAX: ffffffffffffffda RBX: 00007feb5e72bf80 RCX: 00007feb5e60c0c9 [ 504.726437][T12019] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007feb5d37f050 [ 504.734254][T12019] RBP: 00007feb5d37f1d0 R08: 0000000000000000 R09: 0000000000000058 23:12:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r2, 0xffffffffffffffff, 0x4}, 0x48) (async) r3 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r2, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r3}, 0x80) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r4, 0xffffffffffffffff, 0x4}, 0x48) (async) r5 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r4, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r5}, 0x80) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0], 0x0, 0x8, &(0x7f0000000140)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r7, 0xffffffffffffffff, 0x4}, 0x48) (async) r8 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000940)=ANY=[@ANYBLOB="183700000200000000000000000000000054ff0f09000000182e247e347fccaae8280900ccd4861b00007233b5e753363f3bb4edc79fc3dc4c99227e476825886a0d62b3278190f9acb9693a011990e6513a48fe967b96b83a9bf45c1fa9594b2c43d00bc7dd42780d47b9178db814c193ea62846a71cc86e611fa6e33b4c504d4e0376d9494509fe7e6e27077951d8793208ddd6316cc9c8f461c1aaf", @ANYRES32, @ANYBLOB="0000000000000000185b00000300000000000000000000001837000000000000000000000000000018260000", @ANYRES32, @ANYBLOB="000000001000000018200000", @ANYRES32, @ANYBLOB="00000000ffffff7f"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r7, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r8}, 0x80) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x9, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000440)=[{}, {}], 0x10, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'veth0_to_hsr\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'veth1_macvtap\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000900)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000700)={0x1a8, r1, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x4}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x8000}, 0x40c0) 23:12:47 executing program 4: openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='pids.max\x00', 0x2, 0x0) (async) syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:12:47 executing program 2: syz_clone3(&(0x7f0000000b40)={0x1000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 78) 23:12:47 executing program 0: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x0, 0x0, 0x0}, 0x58) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) openat$cgroup_type(r0, &(0x7f0000000000), 0x2, 0x0) 23:12:47 executing program 5: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) time(&(0x7f0000000080)) 23:12:47 executing program 3: ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000000)) (async) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='freezer.parent_freezing\x00', 0x0, 0x0) (async, rerun: 32) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/class/ppp', 0x125480, 0x2) (async, rerun: 32) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) (rerun: 32) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, 0x0) (async) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000bc0)={0x1230, 0x14, 0x100, 0x70bd29, 0x25dfdbfe, {0x11, 0x5}, [@INET_DIAG_REQ_BYTECODE={0x58, 0x1, "9ceda6ebd3d232a9725d2b7ee005b9b795032853a3d869e005a922e305ebfd061f65bba290aa633d0b2b63eeaa28125e9e1afc0bcfdb980b2828910a4fa2974214de793f48c265d8654424dfd9680d569c181b7b"}, @INET_DIAG_REQ_BYTECODE={0x76, 0x1, "0422fce5e5178168924318355366fefb1ec2e18e19ab4460ad6fed838a4e2b2453b660d72a2ea00425e2a2a6360b898d147e4c9fd73741679f1f26456e7e48d15432449e1d6899a1e73c426f5192d863ed5759d76d2a8c561a2bb439d267e217ea1609e9022eeeb26cf4cdb0645eb75c9334"}, @INET_DIAG_REQ_BYTECODE={0xab, 0x1, "73a0319908a9132917a49464fe85631d775c35adb2ef593c928e0dbc24ec3222a45dc1afe4ff69297975d128ba9a7ff43d1335abfd33c976f7dca4604ddac40097ccb175571aed53fc5997400dfae65626fcc50ea5c5ea51e1fa493cd102e559e3a26c14e303a4d06067d69d73ff013e7078bb2c6164f541438357127412ec886b6a251936828ba320ff98bee979dbd30179a5d201db070b2668a61ac3ebc7166645cf9fe1ccf4"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x9b, 0x1, "11f8d1179b341a6d7db84e928b9111ade028f4d42d380309885c65dd7c655947fafaec7f12dbe2f2e057d70e2660c7d226cad92bee60c6e74607d065a0e387fe3239bb85af23a2c43df5db22fcc821d2e30381ddc8cc0f284f02817175b060bf3a3be0607ce475726ec86fc979c98cb642e41891674f77a3626e4e34a1dc0cd82344b9f18fa112f6c1e48aa89e829b556da01c3116ad6c"}]}, 0x1230}, 0x1, 0x0, 0x0, 0x4048800}, 0x4c850) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x2, &(0x7f0000000040)=@raw=[@generic={0x6, 0x6, 0x4, 0x400, 0x4}, @generic={0x3f, 0x2, 0x2, 0x7, 0x3ff}], &(0x7f0000000080)='syzkaller\x00', 0xffffffff, 0x87, &(0x7f00000000c0)=""/135, 0x0, 0x0, '\x00', 0x0, 0x26, r0, 0x8, &(0x7f00000001c0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x2, 0x0, 0x3000000, 0x7fff}, 0x10, 0xffffffffffffffff, r1, 0x0, &(0x7f00000002c0)=[r2]}, 0x80) syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:12:47 executing program 0: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) [ 504.742062][T12019] R10: 00007feb5d37f050 R11: 0000000000000246 R12: 0000000000000058 [ 504.749866][T12019] R13: 00007ffc843a962f R14: 00007feb5d37f300 R15: 0000000000022000 [ 504.757687][T12019] 23:12:47 executing program 0: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) 23:12:47 executing program 5: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) time(&(0x7f0000000080)) 23:12:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r1, 0xffffffffffffffff, 0x4}, 0x48) r2 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r1, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r2}, 0x80) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000002f00)='memory.pressure\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f00000006c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000480)={0x1f8, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x4, 0x76}}}}, [@NL80211_ATTR_MAC_ADDRS={0x70, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0xb0, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x3ff}, @ETHTOOL_A_CHANNELS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @ETHTOOL_A_CHANNELS_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x3}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8001}, 0x8880) syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:12:47 executing program 0: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) (async) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) (async) 23:12:47 executing program 5: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) time(0x0) 23:12:47 executing program 1: socket(0x2c, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000340)={0x2c1, 0x81, 0x100, 0xa59b, 0x7, "0cc572f3a4d5eb9b"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r1, 0xffffffffffffffff, 0x4}, 0x48) r3 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r1, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r3}, 0x80) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r2, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000003c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000480)=[{}], 0x8, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000780)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000088}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)=@ipv6_getnexthop={0x44, 0x6a, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NHA_MASTER={0x8}, @NHA_OIF={0x8, 0x5, r5}, @NHA_GROUPS={0x4}, @NHA_GROUPS={0x4}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_GROUPS={0x4}, @NHA_ID={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x4008800) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1240}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@newlinkprop={0x28, 0x6c, 0x4, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, 0x4, 0x80}, [@IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x387c}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004040}, 0x800) 23:12:47 executing program 5: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) time(0x0) [ 504.949057][T12135] FAULT_INJECTION: forcing a failure. [ 504.949057][T12135] name failslab, interval 1, probability 0, space 0, times 0 [ 504.961520][T12135] CPU: 0 PID: 12135 Comm: syz-executor.2 Tainted: G W 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 504.973019][T12135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 504.983018][T12135] Call Trace: [ 504.986126][T12135] [ 504.988904][T12135] dump_stack_lvl+0x151/0x1b7 [ 504.993418][T12135] ? bfq_pos_tree_add_move+0x43e/0x43e [ 504.998705][T12135] dump_stack+0x15/0x17 [ 505.002703][T12135] should_fail+0x3c0/0x510 [ 505.006958][T12135] __should_failslab+0x9f/0xe0 [ 505.011558][T12135] should_failslab+0x9/0x20 [ 505.015889][T12135] kmem_cache_alloc+0x4f/0x2f0 [ 505.020489][T12135] ? anon_vma_fork+0x1b9/0x4f0 [ 505.025093][T12135] anon_vma_fork+0x1b9/0x4f0 [ 505.029537][T12135] dup_mmap+0x750/0xea0 [ 505.033508][T12135] ? __delayed_free_task+0x20/0x20 [ 505.038463][T12135] ? mm_init+0x807/0x960 [ 505.042537][T12135] dup_mm+0x91/0x330 [ 505.046266][T12135] copy_mm+0x108/0x1b0 [ 505.050173][T12135] copy_process+0x1295/0x3250 [ 505.054688][T12135] ? check_stack_object+0xf7/0x130 [ 505.059640][T12135] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 505.064585][T12135] ? copy_clone_args_from_user+0x6cf/0x790 [ 505.070222][T12135] kernel_clone+0x22d/0x990 [ 505.074563][T12135] ? dup_mmap+0xea0/0xea0 [ 505.078726][T12135] ? create_io_thread+0x1e0/0x1e0 [ 505.083591][T12135] ? file_end_write+0x1b0/0x1b0 [ 505.088284][T12135] __x64_sys_clone3+0x375/0x3a0 [ 505.094006][T12135] ? __ia32_sys_clone+0x300/0x300 [ 505.098861][T12135] ? ksys_write+0x25f/0x2c0 [ 505.103203][T12135] ? debug_smp_processor_id+0x17/0x20 [ 505.108416][T12135] do_syscall_64+0x44/0xd0 [ 505.112750][T12135] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 505.118562][T12135] RIP: 0033:0x7feb5e60c0c9 [ 505.122815][T12135] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 23:12:47 executing program 2: syz_clone3(&(0x7f0000000b40)={0x1000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 79) 23:12:47 executing program 3: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"d5fab0371696ca8330f7b6180b458e69", 0x0, 0x0, {0x6, 0x30000000}, {0x4, 0xfffffff8}, 0x7ff, [0x17, 0x9, 0x4, 0x0, 0x5, 0x7fff, 0x6, 0x10001, 0x4, 0x5, 0xffff, 0xffffffffffffffff, 0x10001, 0xfffffffffffffff8, 0x4, 0x7f]}) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000bc0)={{0x0, 0x14ec, 0xfffffffffffffff7, 0x0, 0x401, 0xbb4c, 0xff, 0x4, 0x6, 0x1, 0x7, 0x1, 0x5, 0x80, 0x7fffffffffffffff}}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000001bc0)={{r1, 0xfffffffffffffffb, 0x3009cb05, 0x7fffffffffffffff, 0x7, 0x1ff, 0xfffffffffffffffe, 0x8, 0x6, 0x80000001, 0x5, 0x9, 0x0, 0x3, 0x9}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth1_to_hsr\x00'}) 23:12:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/nf_conntrack_sane', 0x141940, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000002c0)={'vcan0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x60, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000320001002dbd7000ffdbdf2500f20e9c2bc2170000000800"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20004000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x800, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x108d6}, 0x20000050) syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) 23:12:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) (rerun: 32) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r1, 0xffffffffffffffff, 0x4}, 0x48) (async) r2 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r1, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r2}, 0x80) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000002f00)='memory.pressure\x00', 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f00000006c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000480)={0x1f8, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x4, 0x76}}}}, [@NL80211_ATTR_MAC_ADDRS={0x70, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) (async) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0xb0, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x3ff}, @ETHTOOL_A_CHANNELS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @ETHTOOL_A_CHANNELS_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x3}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8001}, 0x8880) (async) syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:12:47 executing program 5: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) time(0x0) 23:12:47 executing program 1: socket(0x2c, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000340)={0x2c1, 0x81, 0x100, 0xa59b, 0x7, "0cc572f3a4d5eb9b"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r1, 0xffffffffffffffff, 0x4}, 0x48) r3 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r1, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r3}, 0x80) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r2, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000003c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000480)=[{}], 0x8, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000780)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000088}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)=@ipv6_getnexthop={0x44, 0x6a, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NHA_MASTER={0x8}, @NHA_OIF={0x8, 0x5, r5}, @NHA_GROUPS={0x4}, @NHA_GROUPS={0x4}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_GROUPS={0x4}, @NHA_ID={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x4008800) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1240}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@newlinkprop={0x28, 0x6c, 0x4, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, 0x4, 0x80}, [@IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x387c}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004040}, 0x800) socket(0x2c, 0x0, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) (async) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000340)={0x2c1, 0x81, 0x100, 0xa59b, 0x7, "0cc572f3a4d5eb9b"}) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00'}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r1, 0xffffffffffffffff, 0x4}, 0x48) (async) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r1, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r3}, 0x80) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r2, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000003c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000480)=[{}], 0x8, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) (async) sendmsg$nl_route(r4, &(0x7f0000000780)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000088}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)=@ipv6_getnexthop={0x44, 0x6a, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NHA_MASTER={0x8}, @NHA_OIF={0x8, 0x5, r5}, @NHA_GROUPS={0x4}, @NHA_GROUPS={0x4}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_GROUPS={0x4}, @NHA_ID={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x4008800) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1240}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@newlinkprop={0x28, 0x6c, 0x4, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, 0x4, 0x80}, [@IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x387c}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004040}, 0x800) (async) 23:12:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r1, 0xffffffffffffffff, 0x4}, 0x48) r2 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r1, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r2}, 0x80) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000002f00)='memory.pressure\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f00000006c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000480)={0x1f8, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x4, 0x76}}}}, [@NL80211_ATTR_MAC_ADDRS={0x70, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0xb0, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x3ff}, @ETHTOOL_A_CHANNELS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @ETHTOOL_A_CHANNELS_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x3}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8001}, 0x8880) syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:12:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/nf_conntrack_sane', 0x141940, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000002c0)={'vcan0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x60, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) (async) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000320001002dbd7000ffdbdf2500f20e9c2bc2170000000800"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20004000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x800, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x108d6}, 0x20000050) (async) syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) [ 505.142262][T12135] RSP: 002b:00007feb5d37f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 505.150503][T12135] RAX: ffffffffffffffda RBX: 00007feb5e72bf80 RCX: 00007feb5e60c0c9 [ 505.158313][T12135] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007feb5d37f050 [ 505.166134][T12135] RBP: 00007feb5d37f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 505.173959][T12135] R10: 00007feb5d37f050 R11: 0000000000000246 R12: 0000000000000058 [ 505.181749][T12135] R13: 00007ffc843a962f R14: 00007feb5d37f300 R15: 0000000000022000 [ 505.189738][T12135] 23:12:47 executing program 3: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"d5fab0371696ca8330f7b6180b458e69", 0x0, 0x0, {0x6, 0x30000000}, {0x4, 0xfffffff8}, 0x7ff, [0x17, 0x9, 0x4, 0x0, 0x5, 0x7fff, 0x6, 0x10001, 0x4, 0x5, 0xffff, 0xffffffffffffffff, 0x10001, 0xfffffffffffffff8, 0x4, 0x7f]}) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000bc0)={{0x0, 0x14ec, 0xfffffffffffffff7, 0x0, 0x401, 0xbb4c, 0xff, 0x4, 0x6, 0x1, 0x7, 0x1, 0x5, 0x80, 0x7fffffffffffffff}}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000001bc0)={{r1, 0xfffffffffffffffb, 0x3009cb05, 0x7fffffffffffffff, 0x7, 0x1ff, 0xfffffffffffffffe, 0x8, 0x6, 0x80000001, 0x5, 0x9, 0x0, 0x3, 0x9}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth1_to_hsr\x00'}) [ 505.240788][T12151] FAULT_INJECTION: forcing a failure. [ 505.240788][T12151] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 505.278016][T12151] CPU: 0 PID: 12151 Comm: syz-executor.2 Tainted: G W 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 505.289482][T12151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 505.299378][T12151] Call Trace: [ 505.302501][T12151] [ 505.305280][T12151] dump_stack_lvl+0x151/0x1b7 [ 505.309792][T12151] ? bfq_pos_tree_add_move+0x43e/0x43e [ 505.315091][T12151] dump_stack+0x15/0x17 [ 505.319078][T12151] should_fail+0x3c0/0x510 [ 505.323602][T12151] should_fail_alloc_page+0x58/0x70 [ 505.328622][T12151] __alloc_pages+0x1de/0x7c0 [ 505.333151][T12151] ? __count_vm_events+0x30/0x30 [ 505.337915][T12151] pte_alloc_one+0x73/0x1b0 [ 505.342256][T12151] ? pfn_modify_allowed+0x2e0/0x2e0 [ 505.347286][T12151] __pte_alloc+0x86/0x350 [ 505.351448][T12151] ? free_pgtables+0x210/0x210 [ 505.356047][T12151] ? _raw_spin_lock+0xa3/0x1b0 [ 505.360744][T12151] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 505.366034][T12151] ? unwind_get_return_address+0x4c/0x90 [ 505.371675][T12151] copy_pte_range+0x1b1f/0x20b0 [ 505.376361][T12151] ? stack_trace_save+0x12d/0x1f0 [ 505.381226][T12151] ? anon_vma_clone+0xa1/0x4f0 [ 505.385824][T12151] ? __kunmap_atomic+0x80/0x80 [ 505.390422][T12151] ? dup_mmap+0x750/0xea0 [ 505.394589][T12151] ? copy_mm+0x108/0x1b0 [ 505.398674][T12151] ? copy_process+0x1295/0x3250 [ 505.403355][T12151] ? kernel_clone+0x22d/0x990 [ 505.407866][T12151] ? __x64_sys_clone3+0x375/0x3a0 [ 505.412725][T12151] ? do_syscall_64+0x44/0xd0 [ 505.417263][T12151] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 505.423150][T12151] copy_page_range+0xc1e/0x1090 [ 505.427927][T12151] ? pfn_valid+0x1e0/0x1e0 [ 505.432172][T12151] dup_mmap+0x99f/0xea0 [ 505.436164][T12151] ? __delayed_free_task+0x20/0x20 [ 505.441115][T12151] ? mm_init+0x807/0x960 [ 505.445188][T12151] dup_mm+0x91/0x330 [ 505.448921][T12151] copy_mm+0x108/0x1b0 [ 505.452826][T12151] copy_process+0x1295/0x3250 [ 505.457340][T12151] ? check_stack_object+0xf7/0x130 [ 505.462292][T12151] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 505.467238][T12151] ? copy_clone_args_from_user+0x6cf/0x790 [ 505.472896][T12151] kernel_clone+0x22d/0x990 [ 505.477216][T12151] ? dup_mmap+0xea0/0xea0 [ 505.482248][T12151] ? create_io_thread+0x1e0/0x1e0 [ 505.487116][T12151] ? file_end_write+0x1b0/0x1b0 [ 505.491799][T12151] __x64_sys_clone3+0x375/0x3a0 [ 505.496489][T12151] ? __ia32_sys_clone+0x300/0x300 [ 505.501347][T12151] ? ksys_write+0x25f/0x2c0 [ 505.505687][T12151] ? debug_smp_processor_id+0x17/0x20 [ 505.510902][T12151] do_syscall_64+0x44/0xd0 [ 505.515145][T12151] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 505.520897][T12151] RIP: 0033:0x7feb5e60c0c9 [ 505.525124][T12151] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 505.544738][T12151] RSP: 002b:00007feb5d37f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 505.552983][T12151] RAX: ffffffffffffffda RBX: 00007feb5e72bf80 RCX: 00007feb5e60c0c9 [ 505.560794][T12151] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007feb5d37f050 [ 505.568606][T12151] RBP: 00007feb5d37f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 505.576418][T12151] R10: 00007feb5d37f050 R11: 0000000000000246 R12: 0000000000000058 [ 505.584230][T12151] R13: 00007ffc843a962f R14: 00007feb5d37f300 R15: 0000000000022000 23:12:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r1, 0xffffffffffffffff, 0x4}, 0x48) r2 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r1, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r2}, 0x80) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000002f00)='memory.pressure\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f00000006c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000480)={0x1f8, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x4, 0x76}}}}, [@NL80211_ATTR_MAC_ADDRS={0x70, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0xb0, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x3ff}, @ETHTOOL_A_CHANNELS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @ETHTOOL_A_CHANNELS_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x3}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8001}, 0x8880) syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00'}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r1, 0xffffffffffffffff, 0x4}, 0x48) (async) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r1, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r2}, 0x80) (async) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000002f00)='memory.pressure\x00', 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6gre0\x00'}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000440)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f00000006c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000480)={0x1f8, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x4, 0x76}}}}, [@NL80211_ATTR_MAC_ADDRS={0x70, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) (async) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0xb0, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x3ff}, @ETHTOOL_A_CHANNELS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @ETHTOOL_A_CHANNELS_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x3}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8001}, 0x8880) (async) syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) 23:12:47 executing program 1: socket(0x2c, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000340)={0x2c1, 0x81, 0x100, 0xa59b, 0x7, "0cc572f3a4d5eb9b"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r1, 0xffffffffffffffff, 0x4}, 0x48) r3 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r1, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r3}, 0x80) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r2, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000003c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000480)=[{}], 0x8, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000780)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000088}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)=@ipv6_getnexthop={0x44, 0x6a, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NHA_MASTER={0x8}, @NHA_OIF={0x8, 0x5, r5}, @NHA_GROUPS={0x4}, @NHA_GROUPS={0x4}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_GROUPS={0x4}, @NHA_ID={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x4008800) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1240}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@newlinkprop={0x28, 0x6c, 0x4, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, 0x4, 0x80}, [@IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x387c}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004040}, 0x800) socket(0x2c, 0x0, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) (async) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000340)={0x2c1, 0x81, 0x100, 0xa59b, 0x7, "0cc572f3a4d5eb9b"}) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00'}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r1, 0xffffffffffffffff, 0x4}, 0x48) (async) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r1, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r3}, 0x80) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r2, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000003c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000480)=[{}], 0x8, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) (async) sendmsg$nl_route(r4, &(0x7f0000000780)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000088}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)=@ipv6_getnexthop={0x44, 0x6a, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NHA_MASTER={0x8}, @NHA_OIF={0x8, 0x5, r5}, @NHA_GROUPS={0x4}, @NHA_GROUPS={0x4}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_GROUPS={0x4}, @NHA_ID={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x4008800) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1240}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@newlinkprop={0x28, 0x6c, 0x4, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, 0x4, 0x80}, [@IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x387c}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004040}, 0x800) (async) 23:12:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/nf_conntrack_sane', 0x141940, 0x0) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000002c0)={'vcan0\x00', 0x0}) (rerun: 64) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x60, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) (async) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000320001002dbd7000ffdbdf2500f20e9c2bc2170000000800"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20004000) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x800, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x108d6}, 0x20000050) syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) [ 505.592046][T12151] 23:12:47 executing program 2: syz_clone3(&(0x7f0000000b40)={0x1000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 80) 23:12:47 executing program 5: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) time(0x0) 23:12:47 executing program 3: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"d5fab0371696ca8330f7b6180b458e69", 0x0, 0x0, {0x6, 0x30000000}, {0x4, 0xfffffff8}, 0x7ff, [0x17, 0x9, 0x4, 0x0, 0x5, 0x7fff, 0x6, 0x10001, 0x4, 0x5, 0xffff, 0xffffffffffffffff, 0x10001, 0xfffffffffffffff8, 0x4, 0x7f]}) (async) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000bc0)={{0x0, 0x14ec, 0xfffffffffffffff7, 0x0, 0x401, 0xbb4c, 0xff, 0x4, 0x6, 0x1, 0x7, 0x1, 0x5, 0x80, 0x7fffffffffffffff}}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000001bc0)={{r1, 0xfffffffffffffffb, 0x3009cb05, 0x7fffffffffffffff, 0x7, 0x1ff, 0xfffffffffffffffe, 0x8, 0x6, 0x80000001, 0x5, 0x9, 0x0, 0x3, 0x9}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth1_to_hsr\x00'}) 23:12:47 executing program 0: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r1, 0xffffffffffffffff, 0x4}, 0x48) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xa0, r2, 0x300, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2df, 0x2f}}}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x240000b0}, 0x101) r3 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r1, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r3}, 0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'tunl0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x98, r0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1}, @ETHTOOL_A_CHANNELS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CHANNELS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x4}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x81c) 23:12:47 executing program 5: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) time(0x0) 23:12:48 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/hid_logitech', 0x82000, 0x11) syz_clone3(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r1, 0xffffffffffffffff, 0x4}, 0x48) r2 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r1, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r2}, 0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r3, 0xffffffffffffffff, 0x4}, 0x48) r4 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x11}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r3, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r4}, 0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r5, 0xffffffffffffffff, 0x4}, 0x48) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r7, 0xffffffffffffffff, 0x4}, 0x48) r8 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r7, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r8}, 0x80) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x18820681}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="90010000", @ANYRES16=0x0, @ANYBLOB="02002abd7000fddbdf250d00000078000180080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400020069705f7674693000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020073797a5f74756e00000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0800030001000000140002006272696467655f736c6176655f3100005400018008000300020000001400020067656e657665310000000000000000000800030000000000080003000100000008000300040000001400020069705f7674693000000000000000000008000100", @ANYRES32=r1, @ANYBLOB="18000180140002007465616d5f736c6176655f30000000003c0001801400020070696d72656700000000000000000000140002000000000000000000000000000000000008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="2000018008000100", @ANYRES32=0x0, @ANYBLOB="140002006272696467655f736c6176655f3000003c00018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08004100f5c53b9e5618d6e7cc517761567a12a54a2f5d92f908ed6dd5afd53a15dafb3dbd58e5b9f3ec49eec0313423be3ef0220723a922bc1856582697531c202316b2fa787705075f9b4acd7da84dd501f4c12dbd71393c1b317a42d46fa295b440f239a50aa98337a314b56e7b514d4b1b47e4163db2e7ed696d16f24c410c0159ef2ac55124959f365efd7554e02448601ac70c59a3dc9a65ca44cf8b130da9e02cc171", @ANYRES32=0x0, @ANYBLOB="080003000000000008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB], 0x190}, 0x1, 0x0, 0x0, 0x804}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r12 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r12, 0xd000943e, 0x0) read$hidraw(r12, &(0x7f0000000200)=""/104, 0x68) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r9, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400001a", @ANYRES16=r11, @ANYBLOB="00082dbd7000fbdbdf2566000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r0) [ 505.662081][T12186] FAULT_INJECTION: forcing a failure. [ 505.662081][T12186] name failslab, interval 1, probability 0, space 0, times 0 [ 505.697772][T12186] CPU: 1 PID: 12186 Comm: syz-executor.2 Tainted: G W 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 505.709248][T12186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 505.719233][T12186] Call Trace: [ 505.722342][T12186] [ 505.725138][T12186] dump_stack_lvl+0x151/0x1b7 [ 505.730123][T12186] ? bfq_pos_tree_add_move+0x43e/0x43e [ 505.735362][T12186] dump_stack+0x15/0x17 [ 505.739359][T12186] should_fail+0x3c0/0x510 [ 505.743607][T12186] __should_failslab+0x9f/0xe0 [ 505.748205][T12186] should_failslab+0x9/0x20 [ 505.752546][T12186] kmem_cache_alloc+0x4f/0x2f0 [ 505.757146][T12186] ? vm_area_dup+0x26/0x1d0 [ 505.761580][T12186] ? __kasan_check_read+0x11/0x20 [ 505.766433][T12186] vm_area_dup+0x26/0x1d0 [ 505.770614][T12186] dup_mmap+0x6b8/0xea0 [ 505.774594][T12186] ? __delayed_free_task+0x20/0x20 [ 505.779537][T12186] ? mm_init+0x807/0x960 [ 505.783618][T12186] dup_mm+0x91/0x330 [ 505.787353][T12186] copy_mm+0x108/0x1b0 [ 505.791262][T12186] copy_process+0x1295/0x3250 [ 505.795769][T12186] ? check_stack_object+0xf7/0x130 [ 505.800716][T12186] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 505.805664][T12186] ? copy_clone_args_from_user+0x6cf/0x790 23:12:48 executing program 0: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r1, 0xffffffffffffffff, 0x4}, 0x48) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xa0, r2, 0x300, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2df, 0x2f}}}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x240000b0}, 0x101) r3 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r1, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r3}, 0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'tunl0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x98, r0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1}, @ETHTOOL_A_CHANNELS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CHANNELS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x4}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x81c) syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00'}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r1, 0xffffffffffffffff, 0x4}, 0x48) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xa0, r2, 0x300, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2df, 0x2f}}}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x240000b0}, 0x101) (async) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r1, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r3}, 0x80) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'tunl0\x00'}) (async) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x98, r0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1}, @ETHTOOL_A_CHANNELS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CHANNELS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x4}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x81c) (async) 23:12:48 executing program 4: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000000)={0x53c4b7ff48d08477, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x572e6eb2ba71ab2e, 0x0, 0x0, 0x0, {r0}}, 0x58) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 23:12:48 executing program 1: r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001680)={{0x0, 0x4, 0x7fffffffffffffff, 0x4, 0xffffffffffffffff, 0x0, 0x1, 0x10001, 0x3ff, 0x3ff, 0xaab0, 0x7, 0x3f, 0x8, 0xb43}}) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000080)={0xffff, 0x2}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x6) r3 = socket(0x2c, 0x0, 0x0) ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, &(0x7f0000000000)) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000001640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001600)={&(0x7f0000000100)=ANY=[@ANYBLOB="f8140000120020002cbd7000fddbdf252c40803f4e234e2302000000ff0300001f000000ffff000001010000000000000900000006000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x14f8}, 0x1, 0x0, 0x0, 0x6}, 0x801) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000002680), 0x20240, 0x0) openat$cgroup_subtree(r4, &(0x7f00000026c0), 0x2, 0x0) 23:12:48 executing program 5: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) time(0x0) [ 505.811306][T12186] kernel_clone+0x22d/0x990 [ 505.815643][T12186] ? dup_mmap+0xea0/0xea0 [ 505.819813][T12186] ? create_io_thread+0x1e0/0x1e0 [ 505.824670][T12186] ? file_end_write+0x1b0/0x1b0 [ 505.829362][T12186] __x64_sys_clone3+0x375/0x3a0 [ 505.834043][T12186] ? __ia32_sys_clone+0x300/0x300 [ 505.838906][T12186] ? ksys_write+0x25f/0x2c0 [ 505.843245][T12186] ? debug_smp_processor_id+0x17/0x20 [ 505.848457][T12186] do_syscall_64+0x44/0xd0 [ 505.852715][T12186] entry_SYSCALL_64_after_hwframe+0x61/0xcb 23:12:48 executing program 5: time(0x0) 23:12:48 executing program 1: r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001680)={{0x0, 0x4, 0x7fffffffffffffff, 0x4, 0xffffffffffffffff, 0x0, 0x1, 0x10001, 0x3ff, 0x3ff, 0xaab0, 0x7, 0x3f, 0x8, 0xb43}}) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000080)={0xffff, 0x2}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x6) r3 = socket(0x2c, 0x0, 0x0) ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, &(0x7f0000000000)) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000001640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001600)={&(0x7f0000000100)=ANY=[@ANYBLOB="f8140000120020002cbd7000fddbdf252c40803f4e234e2302000000ff0300001f000000ffff000001010000000000000900000006000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x14f8}, 0x1, 0x0, 0x0, 0x6}, 0x801) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000002680), 0x20240, 0x0) openat$cgroup_subtree(r4, &(0x7f00000026c0), 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001680)={{0x0, 0x4, 0x7fffffffffffffff, 0x4, 0xffffffffffffffff, 0x0, 0x1, 0x10001, 0x3ff, 0x3ff, 0xaab0, 0x7, 0x3f, 0x8, 0xb43}}) (async) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000080)={0xffff, 0x2}) (async) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x6) (async) socket(0x2c, 0x0, 0x0) (async) ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, &(0x7f0000000000)) (async) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000001640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001600)={&(0x7f0000000100)=ANY=[@ANYBLOB="f8140000120020002cbd7000fddbdf252c40803f4e234e2302000000ff0300001f000000ffff000001010000000000000900000006000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x14f8}, 0x1, 0x0, 0x0, 0x6}, 0x801) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000002680), 0x20240, 0x0) (async) openat$cgroup_subtree(r4, &(0x7f00000026c0), 0x2, 0x0) (async) 23:12:48 executing program 2: syz_clone3(&(0x7f0000000b40)={0x1000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 81) 23:12:48 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/hid_logitech', 0x82000, 0x11) syz_clone3(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r1, 0xffffffffffffffff, 0x4}, 0x48) (async) r2 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r1, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r2}, 0x80) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r3, 0xffffffffffffffff, 0x4}, 0x48) (async) r4 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x11}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r3, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r4}, 0x80) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r5, 0xffffffffffffffff, 0x4}, 0x48) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r7, 0xffffffffffffffff, 0x4}, 0x48) (async) r8 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r7, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r8}, 0x80) (async) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x18820681}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="90010000", @ANYRES16=0x0, @ANYBLOB="02002abd7000fddbdf250d00000078000180080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400020069705f7674693000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020073797a5f74756e00000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0800030001000000140002006272696467655f736c6176655f3100005400018008000300020000001400020067656e657665310000000000000000000800030000000000080003000100000008000300040000001400020069705f7674693000000000000000000008000100", @ANYRES32=r1, @ANYBLOB="18000180140002007465616d5f736c6176655f30000000003c0001801400020070696d72656700000000000000000000140002000000000000000000000000000000000008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="2000018008000100", @ANYRES32=0x0, @ANYBLOB="140002006272696467655f736c6176655f3000003c00018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08004100f5c53b9e5618d6e7cc517761567a12a54a2f5d92f908ed6dd5afd53a15dafb3dbd58e5b9f3ec49eec0313423be3ef0220723a922bc1856582697531c202316b2fa787705075f9b4acd7da84dd501f4c12dbd71393c1b317a42d46fa295b440f239a50aa98337a314b56e7b514d4b1b47e4163db2e7ed696d16f24c410c0159ef2ac55124959f365efd7554e02448601ac70c59a3dc9a65ca44cf8b130da9e02cc171", @ANYRES32=0x0, @ANYBLOB="080003000000000008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB], 0x190}, 0x1, 0x0, 0x0, 0x804}, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) (async) r12 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r12, 0xd000943e, 0x0) read$hidraw(r12, &(0x7f0000000200)=""/104, 0x68) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r9, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400001a", @ANYRES16=r11, @ANYBLOB="00082dbd7000fbdbdf2566000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r0) 23:12:48 executing program 5: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) time(&(0x7f0000000080)) 23:12:48 executing program 1: r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001680)={{0x0, 0x4, 0x7fffffffffffffff, 0x4, 0xffffffffffffffff, 0x0, 0x1, 0x10001, 0x3ff, 0x3ff, 0xaab0, 0x7, 0x3f, 0x8, 0xb43}}) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000080)={0xffff, 0x2}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x6) r3 = socket(0x2c, 0x0, 0x0) ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, &(0x7f0000000000)) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000001640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001600)={&(0x7f0000000100)=ANY=[@ANYBLOB="f8140000120020002cbd7000fddbdf252c40803f4e234e2302000000ff0300001f000000ffff000001010000000000000900000006000000", @ANYRES32=0x0, @ANYBLOB="0000000004000000ceb400000100000080000100c5ed0b69580c882c3c7f915ced703735f7a8e3d8e8765e88721c9c499ff8e83b880969a3587133d21b4aad31489d4d22e8d6b4d05c5c63879ff4b12fa7610ff9d2d5a9eba9d5919ffc79a6c4f46ea4257fc0971250ba583912d266a0d66fa0ffcc2af9cc60013e872a23e30ced7b7734f67ee8946d97f485c719a923e80001007714ddd5344c2183f511d15b3192f07f7eb226767d7a54ae07d8623a185c5fc0c54d700252ff2e4863c8005bc3aeb9b5d3b609b0963e8e1f95cad9309d4ae2b91dc6580e3af921a3f4def971c98d2800478c247bb76f9c3d82d27b65b03e976998664cc8047887d5ad19ba6f76a4e71a5a4c4c9b609f3d084a3c91ea4c2e2df0878f6b7bca8bc24bca07f49f51c3953e6c106f86614859b52699fd898a0ac472b6e353b2d035cec88092ceb4331258369a941620ed30b0dd9475210fd7e14d3557f1c164dc637d2b8935829e241241d5de88d6bde7373aeb83a9f2211fd9bb4ff26a1ff204100100c87553576002a60db5ccde4383b242f785447718b89b43b99dd597efcdc051915828c671b3543216361a62f81c3df26f9cb715fbd67198608fba50567d798c6365da687897845362aa2e6ad9ee1791b2183a783948db7a07b561a0af7a5654f25cb29e330326e25915fecbaebb0380e2b191590a9c4e6801afe047088a5d78c37d642ead4898941f3005e2d29cb68e688b4e18e011c34750f586d8001d817fd2f1e4dc22b84573fd5914619a7364a7685fce6453106e6d36a64a00f31d3620cbb80388d0c07645ddb22857b45195b87662dd9f81453524bf3171328d9f8664ee7652d9cf5d3a9c1610f1fc58f263f298e5dd1be9004c3e36955eea24b7cc47711a295617819f27dae07e7b57983c643ed1b1b1dc61caa6fe7fe99ef98e31e48b95d36660ef6c6ba016015c37e47ff0f8f2672299465d40dcebc8b95e71c201e6dd41dd94bb6d84e81ae8f36329e31963d305da35a29050b464e9b694fcd1247f2e8f6f6eb8316fe79ea9e767c92379909466a2b1177a3ac02f494aec32b015513de2244a891b018f782d5a9bb79136dafe95c18d6d0ee505218205101b007e8fc44ffdd295e47a51018bc46720b24c59038e2ebfdbd50bcc0b940d823d6742a0d9295c8d5457fa91b15dba9c319f089b306941203959dd92a5b6a0de89feaf72e5d982879ba082705a92116f96eac2f5d9c28107bfe5ca0891db7cbfa3bd6be63737a1b1286d5caebcf6a744d9dd6645faa4341a8937827a8db0b3492019ce33f205c30912fb5ebd1f6c1a4fd622a7059a6db4b496465d2d05f265d9626eb47397177a636e25e61699d3fff34af46cf308fc1a98e4add7a4dbff65937ec7bde1d9275d3a37489e0680422d3a473ec9a9c3a6a82709fceb0dbd3699b4281ab5d2b95bd856064a9071da91416629251fb20953defabb227b9149c983d71544f59bb4660d5912c17090338b5bf328adb297ca3c8845ae10eb2fb3a13b3ebd74a5a90ba1c232e5be2f21cad742c986be49f4323334f8dcbd59aa72f96645faa96285005e168ab8ce780d9887893c9518673bc1fdb9944be3f177f733922ef116bcb3d9b5e5394c32e2241df276ef234b25cbb59c8bb12095a402f8bdeac57afaa91e488374f591ce1535a2e56404dfd98f30119286093f37ba8f2f51fab9d53a111d58743c11ee335c6e1e014a573d55069a51b3017aafad5c7b7583f7b7c09266861d5f149c380b88b7225657fed0e3058e938a03be05de471eef1f3bbb6b2bc95f7c29079893759c020e196d7d331913a839dbf51eb346267c3a93f0b2292a0bfdf3e6e79a68400a957a3d2cacbb2ea7c8a08e9cb0ea6276d47aea2058c44c2ce12739ab40771ef88ad99a09056237043a10ae53d9ac207e5e6a14c3757a9b0f87d7567dbe13dd4cd2d7cc941dd63183601bc2ec84999ed399909d98a43c14a82b8abed04f78c535f203bb9ab2e13e6fc0420874c10e58feeeb82b75b45766ecfff5112adf091a275660b35a1b648296d9878aa3ae4e6e61baec43c4ee038e4b740a931a22aac2a8152140c191a49830eae0d97bfcf6b83bee4a9bc0ee15a93b3ed1f26429e80c5b19721dc8d19426d7602a527a9dd3bb861668d59f78179f17f894569416b9639b678a096e12de133064cc31dd9ddef1a3a1f573f3d0ebe88cabbfb33e63449a5dc04f39873aa7961e13fa0e7fcc4840e4e595dfd1ab74781081effdc9d3f98869f717a72467968ef6ef88d061b53d632bb5c0724e32201709bd95e80459233d9259efac7bed9a9a4e19dab55139e08f6e969b5ba4aa61cccc38c7291bfe45092f0725eb90c051efab726813047e5f64f5e8943ffa582787e77b61043a5a7f3d79c9c5fbf4fb72a15b1e33290a069d62c5994fc7f855c5c70897379e155c7cc67cf942758059076ac90c72c32765069b3a9f49b46fb3a7614c09a0c512c82ed8dd59e0c08be43a3a74f0da5da384be8c0f54d65de242cc3d4520e49f470b6ce9f029fccdd97e51a7d0288b1b60d44d74f3cab885c3444def3088d80942ccd03b5fc1a33fcb3125f283dd5ec02eee11a015d24347f148cc0e1d3c720eaab7d7d1f7063beddda18f7a07a30cf2bcceb241a758165263909260ed73198f68f42ad96639cf2ef0824b33bf43998a06b7a04ab9ccecdf5fa518a6974100c24fb979ea24e8d3c8085fd809956dc763da0561bcdea9f14543550d7ed1d3ab14537c9c57eece829e455c8f2bc1f729b4dee77afd9ce4dd88706f9782283275b0e71ee3ea349c66e4e4cf86492823592422aefa4f600c96da1abd6eaf9653cb4212a02a3b8d3d5ae46651f116218e11158621202dc795845574e24b263a6a02053cad9fe6e26f07317946c56217cdab884d957acda3dc6cc0bcdd0c9d1bdabba53d0a96f58a150a7a1667dd7dda1062530539850c29aa5d642ee0db603055d0c3ea17fa6cb988ef0b18856ea46f488eecab7e725ee760dcdb65f540a6739bfaa00975324da83162856541a4c3c4b9a4f62d46e6cd7a5bacc3fedb6ad7df7ff7d8ee4b51fd0a0905741a073c36ba92507f8e98f95ed0bac8a4737cd7e88a846b9037d38ecab3f55116addae3036d59a30dc991dfc80caf41d1d0657499e956df2d0e02250c578b9059760b09e59b03e8c6eac7ad5280d0f80a8e469b5381ef4d742268b7295785f8279b6cad1922ff67cfc171041f24227d543c8dd8d99183934c6f055f9af68c907951e784a6456d930c0bd90f647f313600863e0ecdfa4f6bc0e4ca5bf7c7e651ed1ac347d6aa8e9de30a44a5d095d3c97a2dbdc929877ad6751c341262650a6ae848681b4f510bb27348a8a309c190e5d14ee5c3b3c453e7d5f817676387e42db659b79c10cefeb65a7456ea261861b625cab230d44c9cc2e7c3fd82468f1d9b78f424ceedb53e3f26c6ffeb67d04e50f7bce71559722da0fb376669f1640ca8a54603f7de8c9677275fe9153522c948b4a73f3ad07786e90b01f46a4501dcde31531c9934dc82e1e6e5ae4cdfd8436bf0ff8eb2a1279bc5387f64b2d23b5498006a664f30c04853277a832496d348cb3c7da8ea7eedce13ba4b5ec9f3eea6c0c2b1ccb999d1bb377233ea03fb7ed41501e8e869acd8ba1d7b2aefc34401e5161bcf0d8836f153738e6edf1abb035ec06baa8873de2a75d1b0833580330eefb82fcb1fd4eab8988f5c973d61d9f7ea60dfcb948f55ba5310ef20e78e8679c9c25e181348db816fdc356a72e50b3ff4a4e9936654b8eb8aa4f4650b4c743b23dccd8da72f0be5aeefc820480aacf0ed81c958cf85fe4385012a3dc16ca5f0bf5a697d2b8c84a2011a4b79a9c4515141e70e9b86aa6a7a8637819d9237be67854fadf54b02fe8a1b7d1652e8c2e4a0ae9fdd0dbdf378b4d35bd03236ac56e8deb886f73bc56c33771a54d078c2838d03f80c7d414fdab52cd98bfb094dd78c245f781660ac57d890dbdd4c2b26d6a22f7790282665a2f0b1e8467458f75a870f2e8b0df2ce04b0c0810843d7414414faf0a4616b6009263ec895f626097141fb855cd857a295de914492228755a4558c44f4bda3f8666d4ce4ff61f6d758658863b1c64f3ad5c24d601bc8304c0eb8b0c9489d26e0422aec30c0ffc669acf191e1bfaddb3cfe46886daf380bdce148049d098a57d1b685bb240cfc33aa6fb65bd6ca32731fd60af5f949d2e1cb2e36d591a84e40df51d88ad61263e10d4b357ef741c53797786930e1acd787b84f1f1eaa195f261f4e9a4d034014d42e52023b269401dbaba9b6f3f921d01e9e7ca538d5756e0d95389ad37352ba396a278f35a93e0f7420db702d533875103e70a1d4d906b7503123dec19bddd2b67028b28060cbacc15b4125d298cdf5c137d09ef3002d1abf94f5a076f8006cf5a97c98acfa5a0bb09c21527a6543191bbddcb90c370305c2d68f63f24c90f1eb7a434b164ff6c0763cc921a5be18ea65f2562d7a894c9a30fc1390e0c98b0a8c744ef4cecb9956255dd2959d7b9ea019826d0ab2fd8b4720b967731838f1e5b93fead1003468295f418a4f1517bb495e0ca15a173ba15ec2c8d92a1ae41a31616744f7f834a9bb961b60c1b4bf418549ed4c3fda688aa719f083030d2547b724fcf372fbeb38c18f3105fd8a1524891e801e3f84057e6486daee2fb71d36e33dc48e3cffa152a1fa913739b41fedfc7f8bbb68764344c5b9de9b61a8aef1cbadcea5f5f081cf51ba4ebb3f5cd8edc5949b11d6525d6d88a0390f1480a2ca04a1181faf577af768df2cc76dbbcac9792f78378091b8779c5a8b524d2c05614c67f2490119844e63b119ae1f3ecf98bb17c21d73c3a7771c25192c7b09ec3370e1c07a665b06973f6834acd311e80c624cd18948e4732d04b62f83105e3371c5a98ac369900ed5e3e9b598f8b8aa5a783a5e957616f5f20b22c5afd6341579b120b7722abdc802f198978b278b36ad4b7e7020f5c141d1d09cd8454df174bf08eff5dede20991565e418360b70bd5e52930645f81005768f9346b7c121961257338e3679154e38f2845de4e42901f017ae6bfa64cda7f093804c69c110c783ce09cac13a5fb8097b5d3247cc4354867883fdeec4a00ae1f57108e909429decc1f3e69d4dfde65f49344af0030da272e8a21ebd5885cde804fe17c69be00d8503e356076c29d0c8ebbd350d1d23e7aeae5d82931ddb1f3c9e95d5f870bb1ba14e2c3f759ed48e533878673ffe13d6e1f5a8b15f6d66892056d35dd423cc1255010cc96936433f7edea0d781fe76a14c8c828644cfa1931397b978198a44489b46f37ea9abc60db66847ece655954cffdfa377e4edb40a6332eeac276bf016413ac0cc64eec05b97f62d6f6ee3c89015d88a5d0091dbace0361f4b8c4e4462a217917ed7462c782ed5d11d95ccd9dce07064d5e94eb4b7adfaba5e87fec84433527ff363f399776386afe10d1d80524dccbc560a9ba2e95f236be03555f18a0baa757670eaafd8cb71277606741f67260b42112621537c4be523237aa8214486b0ac315abdf9d76ee39635517abbcd09048e9fbf7eb06d9582c95897a42e9230284030cc849faa70f6ed51155448a8e036e93e16c7fc4217f472877bc0a1ddda830dc761b6e85ef2ff829bcb8fed968b847a4349fbefbadbd869f325ae03d7edb37fcb885d54eff7c5b168985859dc03b30811f26c523d2adb827467f041c9bde19f1edd40f34b49cb669b7f3854fd788d0b49154961ee5f4e25b17fcd163a56be634dc6919fb190caecb74344f99fdbdc7526f5ee3b1f83509a81f4cae2528d0028d6ffa616b6a9469146851235768fb1c29fe825356a47005ff52eff92405a3cc29a342b35b84f443ba2eca6124fdc9fb0bb6e80ef25685eb7df38270a31be5a9a788b3b708b6ecf420707a3a9115c341ca7962864e96bef2ffff661423f9c12cf50d91e36bae9f3b41124daf8b50bb3252ef46d8e81a0e2ffd75a58f1346ad41c878c14ae5b8b4b3f628a896314c67da1cb1fe683d162f0174837ab9d72996fdb82b072cbb7a6990e6573c6137e49788b13e9637d908e8c9ba9d85374fb2b30f37dafc6fba675a242c2737ac722be6593fe8b43c914a11c293bbe4c4aaafe855675805888dfcc0026a7aff66e63c6d845a81d6725b34849430542888c95e6ce5b1fd2bbfbf188ca3d81d68a17e13231780cc4b3b07ae997f2b8b2762876b0507e278ea980cd61756fcdd8f68fa718e49ac32b10d816ee6f90c7f13108b4666e1d88019bf81efb397c4dac1103eaa2222f83c73ff31d85292dca06d0e89f0001002f9fc8701bd03d1d77b38f0b5868d9eb7c0896dd54d4ea661565046081299519a4455af2c859064b79bf1740ace542a9df90f941ae6fb90aabcee9c473affc8819bef2b4f92569c3f279a677280e9a0160df613970f1a509a25843a78aa95898880eed877cddb0fd20fc5431146e0a45ab08129ae829be821458a2a6cc2df4b573a1bc1424b7f4cbabe2d62e79c99f706f1364b835f34b55b3ce5c0075000100571c79fab2db5e9c649049efdf4d8c24f825cd0a3fa4711753d4c2d24f554db7fef9454f3272f10673a103bc9a9370ef97e01b8727ef9aef31e5667c326054cbc168e0db27d40cebd0e391dc9513763dbb7b6f95ba71178e6391ebcaf92f2addf69d64176fb3dd3c46788e277b10a5d19a00000040000100b0b70ecccef39d05213558db19f7c090796542a3103c981509caaeb9a9a7912d56aa7d71db25707e196bffc883b6765db4bd2a1de01b4624ed0329e104000100bc000100371ac954ed811680015764f6ccb89ec52609afd087533808ef5567294e9cfa1ef307935ed94ab448e6281e1f47974cda394404ac2b6deea0681e7c460afb79123c26b9fdc69a6711683217d5a25a8d318302e5a914a38a2fd29790c03c6d8f1387ca6ec710cdb21e383a113a55d1db9817cba0166e8bf1bf3cb072275a311aecf9cf63e0412fd7e50952f8beab2550c8797f0ab224e0695c9880b7b2ecfb67ce722e4346ac1790fb2e6f96c363d7bde3db58df3456d021295200010009ba259efb5d389de9f6cb58d0f366911faedd3724c76be1e9f1992dcbb0c1993d340d27c5e736f653a231404da0a15eecb07237f128f64dbd46459122064660b675c3b67344b12216947e953d6e0000d2000100f81e28d8e82be606b7e52062d2430b81fc77298d9eb1c80695130e9145daafec4842cd93545f16cfed91cf432066982bf9fdd29531e1190f95a455a4fcdaf29d6029ef6ca4096aacd9a17efaf2163f718a6287c4a1aa2b27c9a42e47b23b1b996556f1cf4fc676dbe0de6749864f3ad3e0c5ce63579da113dfebf0f9a289ff5e8799d48c848ab3666a3e62782bc22096f80564ff3e05c129caa6923a878cc798fc4e855189a84e03316813b92475e2d59d2f67c8c2289da7b6b262a0bff95206b983842738d827b1be4d25c7e6eb0000"], 0x14f8}, 0x1, 0x0, 0x0, 0x6}, 0x801) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000002680), 0x20240, 0x0) openat$cgroup_subtree(r4, &(0x7f00000026c0), 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001680)={{0x0, 0x4, 0x7fffffffffffffff, 0x4, 0xffffffffffffffff, 0x0, 0x1, 0x10001, 0x3ff, 0x3ff, 0xaab0, 0x7, 0x3f, 0x8, 0xb43}}) (async) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000080)={0xffff, 0x2}) (async) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x6) (async) socket(0x2c, 0x0, 0x0) (async) ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, &(0x7f0000000000)) (async) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000001640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001600)={&(0x7f0000000100)=ANY=[@ANYBLOB="f8140000120020002cbd7000fddbdf252c40803f4e234e2302000000ff0300001f000000ffff000001010000000000000900000006000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x14f8}, 0x1, 0x0, 0x0, 0x6}, 0x801) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000002680), 0x20240, 0x0) (async) openat$cgroup_subtree(r4, &(0x7f00000026c0), 0x2, 0x0) (async) [ 505.852744][T12186] RIP: 0033:0x7feb5e60c0c9 [ 505.852760][T12186] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 23:12:48 executing program 2: syz_clone3(&(0x7f0000000b40)={0x1000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 82) 23:12:48 executing program 5: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) time(&(0x7f0000000080)) 23:12:48 executing program 0: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r1, 0xffffffffffffffff, 0x4}, 0x48) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xa0, r2, 0x300, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2df, 0x2f}}}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x240000b0}, 0x101) r3 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r1, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r3}, 0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'tunl0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x98, r0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1}, @ETHTOOL_A_CHANNELS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CHANNELS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x4}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x81c) syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00'}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r1, 0xffffffffffffffff, 0x4}, 0x48) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xa0, r2, 0x300, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2df, 0x2f}}}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x240000b0}, 0x101) (async) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r1, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r3}, 0x80) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'tunl0\x00'}) (async) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x98, r0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1}, @ETHTOOL_A_CHANNELS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CHANNELS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x4}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x81c) (async) [ 505.852776][T12186] RSP: 002b:00007feb5d37f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 505.852797][T12186] RAX: ffffffffffffffda RBX: 00007feb5e72bf80 RCX: 00007feb5e60c0c9 [ 505.852811][T12186] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007feb5d37f050 [ 505.852823][T12186] RBP: 00007feb5d37f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 505.852836][T12186] R10: 00007feb5d37f050 R11: 0000000000000246 R12: 0000000000000058 [ 505.852848][T12186] R13: 00007ffc843a962f R14: 00007feb5d37f300 R15: 0000000000022000 [ 505.852870][T12186] [ 505.932983][T12239] FAULT_INJECTION: forcing a failure. [ 505.932983][T12239] name failslab, interval 1, probability 0, space 0, times 0 [ 505.933013][T12239] CPU: 0 PID: 12239 Comm: syz-executor.2 Tainted: G W 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 505.933035][T12239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 505.933046][T12239] Call Trace: [ 505.933052][T12239] [ 505.933058][T12239] dump_stack_lvl+0x151/0x1b7 [ 505.933083][T12239] ? bfq_pos_tree_add_move+0x43e/0x43e [ 505.933101][T12239] dump_stack+0x15/0x17 [ 505.933115][T12239] should_fail+0x3c0/0x510 [ 505.933132][T12239] __should_failslab+0x9f/0xe0 [ 505.933151][T12239] should_failslab+0x9/0x20 [ 505.933166][T12239] kmem_cache_alloc+0x4f/0x2f0 [ 505.933182][T12239] ? vm_area_dup+0x26/0x1d0 [ 505.933197][T12239] ? __kasan_check_read+0x11/0x20 [ 505.933212][T12239] vm_area_dup+0x26/0x1d0 [ 505.933227][T12239] dup_mmap+0x6b8/0xea0 [ 505.933243][T12239] ? __delayed_free_task+0x20/0x20 [ 505.933260][T12239] ? mm_init+0x807/0x960 [ 505.933274][T12239] dup_mm+0x91/0x330 [ 505.933288][T12239] copy_mm+0x108/0x1b0 [ 505.933304][T12239] copy_process+0x1295/0x3250 [ 505.933321][T12239] ? check_stack_object+0xf7/0x130 [ 505.933338][T12239] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 505.933365][T12239] ? copy_clone_args_from_user+0x6cf/0x790 [ 505.933387][T12239] kernel_clone+0x22d/0x990 [ 505.933420][T12239] ? dup_mmap+0xea0/0xea0 [ 505.933438][T12239] ? create_io_thread+0x1e0/0x1e0 [ 505.933456][T12239] ? file_end_write+0x1b0/0x1b0 [ 505.933478][T12239] __x64_sys_clone3+0x375/0x3a0 [ 505.933496][T12239] ? __ia32_sys_clone+0x300/0x300 [ 505.933514][T12239] ? ksys_write+0x25f/0x2c0 [ 505.933530][T12239] ? debug_smp_processor_id+0x17/0x20 [ 505.933547][T12239] do_syscall_64+0x44/0xd0 [ 505.933563][T12239] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 505.933581][T12239] RIP: 0033:0x7feb5e60c0c9 [ 505.933596][T12239] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 505.933610][T12239] RSP: 002b:00007feb5d37f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 505.933632][T12239] RAX: ffffffffffffffda RBX: 00007feb5e72bf80 RCX: 00007feb5e60c0c9 [ 505.933646][T12239] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007feb5d37f050 [ 505.933660][T12239] RBP: 00007feb5d37f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 505.933672][T12239] R10: 00007feb5d37f050 R11: 0000000000000246 R12: 0000000000000058 [ 505.933684][T12239] R13: 00007ffc843a962f R14: 00007feb5d37f300 R15: 0000000000022000 [ 505.933699][T12239] [ 505.987011][T12256] FAULT_INJECTION: forcing a failure. [ 505.987011][T12256] name failslab, interval 1, probability 0, space 0, times 0 [ 505.987041][T12256] CPU: 0 PID: 12256 Comm: syz-executor.2 Tainted: G W 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 505.987062][T12256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 505.987073][T12256] Call Trace: [ 505.987080][T12256] [ 505.987086][T12256] dump_stack_lvl+0x151/0x1b7 [ 505.987111][T12256] ? bfq_pos_tree_add_move+0x43e/0x43e [ 505.987133][T12256] dump_stack+0x15/0x17 [ 505.987151][T12256] should_fail+0x3c0/0x510 [ 505.987169][T12256] __should_failslab+0x9f/0xe0 [ 505.987187][T12256] should_failslab+0x9/0x20 [ 505.987203][T12256] kmem_cache_alloc+0x4f/0x2f0 [ 505.987221][T12256] ? anon_vma_clone+0xa1/0x4f0 [ 505.987240][T12256] anon_vma_clone+0xa1/0x4f0 [ 505.987261][T12256] anon_vma_fork+0x91/0x4f0 [ 505.987279][T12256] ? anon_vma_name+0x4c/0x70 [ 505.987298][T12256] dup_mmap+0x750/0xea0 [ 505.987317][T12256] ? __delayed_free_task+0x20/0x20 [ 505.987335][T12256] ? mm_init+0x807/0x960 [ 505.987361][T12256] dup_mm+0x91/0x330 [ 505.987377][T12256] copy_mm+0x108/0x1b0 [ 505.987394][T12256] copy_process+0x1295/0x3250 [ 505.987414][T12256] ? check_stack_object+0xf7/0x130 [ 505.987435][T12256] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 505.987453][T12256] ? copy_clone_args_from_user+0x6cf/0x790 [ 505.987473][T12256] kernel_clone+0x22d/0x990 [ 505.987490][T12256] ? dup_mmap+0xea0/0xea0 [ 505.987508][T12256] ? create_io_thread+0x1e0/0x1e0 [ 505.987525][T12256] ? file_end_write+0x1b0/0x1b0 [ 505.987545][T12256] __x64_sys_clone3+0x375/0x3a0 [ 505.987563][T12256] ? __ia32_sys_clone+0x300/0x300 [ 505.987582][T12256] ? ksys_write+0x25f/0x2c0 [ 505.987599][T12256] ? debug_smp_processor_id+0x17/0x20 [ 505.987616][T12256] do_syscall_64+0x44/0xd0 [ 505.987634][T12256] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 505.987653][T12256] RIP: 0033:0x7feb5e60c0c9 [ 505.987668][T12256] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 23:12:48 executing program 2: syz_clone3(&(0x7f0000000b40)={0x1000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 83) 23:12:48 executing program 4: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000000)={0x53c4b7ff48d08477, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x572e6eb2ba71ab2e, 0x0, 0x0, 0x0, {r0}}, 0x58) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) (async) syz_clone3(&(0x7f0000000000)={0x53c4b7ff48d08477, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x572e6eb2ba71ab2e, 0x0, 0x0, 0x0, {r0}}, 0x58) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) (async) ioctl$PPPIOCDISCONN(r1, 0x7439) (async) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) (async) 23:12:48 executing program 5: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) time(&(0x7f0000000080)) 23:12:48 executing program 1: r0 = socket(0x2c, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vxcan0\x00'}) r2 = socket(0x1, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x88, 0x0, 0x209, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x240000c0}, 0x20004080) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={r3, 0x1ff, 0xc}, 0xc) 23:12:48 executing program 0: r0 = syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) r1 = getpgrp(r0) r2 = getpgrp(r0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, 0x0) syz_clone3(&(0x7f0000000240)={0x10d000800, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2f}, &(0x7f00000000c0)=""/169, 0xa9, &(0x7f0000000180)=""/98, &(0x7f0000000200)=[r1, r0, r0, r2], 0x4, {r3}}, 0x58) [ 505.987683][T12256] RSP: 002b:00007feb5d37f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 505.987703][T12256] RAX: ffffffffffffffda RBX: 00007feb5e72bf80 RCX: 00007feb5e60c0c9 [ 505.987718][T12256] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007feb5d37f050 [ 505.987730][T12256] RBP: 00007feb5d37f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 505.987742][T12256] R10: 00007feb5d37f050 R11: 0000000000000246 R12: 0000000000000058 [ 505.987755][T12256] R13: 00007ffc843a962f R14: 00007feb5d37f300 R15: 0000000000022000 [ 505.987770][T12256] 23:12:48 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/hid_logitech', 0x82000, 0x11) syz_clone3(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r1, 0xffffffffffffffff, 0x4}, 0x48) r2 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r1, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r2}, 0x80) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r3, 0xffffffffffffffff, 0x4}, 0x48) (async) r4 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x11}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r3, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r4}, 0x80) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r5, 0xffffffffffffffff, 0x4}, 0x48) (async) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r7, 0xffffffffffffffff, 0x4}, 0x48) (async) r8 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r7, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r8}, 0x80) (async) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x18820681}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="90010000", @ANYRES16=0x0, @ANYBLOB="02002abd7000fddbdf250d00000078000180080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400020069705f7674693000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020073797a5f74756e00000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0800030001000000140002006272696467655f736c6176655f3100005400018008000300020000001400020067656e657665310000000000000000000800030000000000080003000100000008000300040000001400020069705f7674693000000000000000000008000100", @ANYRES32=r1, @ANYBLOB="18000180140002007465616d5f736c6176655f30000000003c0001801400020070696d72656700000000000000000000140002000000000000000000000000000000000008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="2000018008000100", @ANYRES32=0x0, @ANYBLOB="140002006272696467655f736c6176655f3000003c00018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08004100f5c53b9e5618d6e7cc517761567a12a54a2f5d92f908ed6dd5afd53a15dafb3dbd58e5b9f3ec49eec0313423be3ef0220723a922bc1856582697531c202316b2fa787705075f9b4acd7da84dd501f4c12dbd71393c1b317a42d46fa295b440f239a50aa98337a314b56e7b514d4b1b47e4163db2e7ed696d16f24c410c0159ef2ac55124959f365efd7554e02448601ac70c59a3dc9a65ca44cf8b130da9e02cc171", @ANYRES32=0x0, @ANYBLOB="080003000000000008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB], 0x190}, 0x1, 0x0, 0x0, 0x804}, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) (async) r12 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r12, 0xd000943e, 0x0) read$hidraw(r12, &(0x7f0000000200)=""/104, 0x68) (async) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r9, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400001a", @ANYRES16=r11, @ANYBLOB="00082dbd7000fbdbdf2566000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r0) 23:12:48 executing program 0: r0 = syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) r1 = getpgrp(r0) r2 = getpgrp(r0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, 0x0) syz_clone3(&(0x7f0000000240)={0x10d000800, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2f}, &(0x7f00000000c0)=""/169, 0xa9, &(0x7f0000000180)=""/98, &(0x7f0000000200)=[r1, r0, r0, r2], 0x4, {r3}}, 0x58) syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) (async) getpgrp(r0) (async) getpgrp(r0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, 0x0) (async) syz_clone3(&(0x7f0000000240)={0x10d000800, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2f}, &(0x7f00000000c0)=""/169, 0xa9, &(0x7f0000000180)=""/98, &(0x7f0000000200)=[r1, r0, r0, r2], 0x4, {r3}}, 0x58) (async) [ 506.585838][T12296] FAULT_INJECTION: forcing a failure. [ 506.585838][T12296] name failslab, interval 1, probability 0, space 0, times 0 [ 506.599559][T12296] CPU: 0 PID: 12296 Comm: syz-executor.2 Tainted: G W 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 506.611018][T12296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 506.621031][T12296] Call Trace: [ 506.624140][T12296] [ 506.626904][T12296] dump_stack_lvl+0x151/0x1b7 23:12:48 executing program 5: time(&(0x7f0000000080)) 23:12:48 executing program 5: time(&(0x7f0000000080)) 23:12:48 executing program 1: r0 = socket(0x2c, 0x0, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vxcan0\x00'}) (async) r2 = socket(0x1, 0x2, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x88, 0x0, 0x209, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x240000c0}, 0x20004080) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={r3, 0x1ff, 0xc}, 0xc) 23:12:48 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.throttle.io_serviced\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000080)={0x718, r2, 0x10, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0xe6, 0x33, @mgmt_frame=@reassoc_resp={@with_ht={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x4}, @device_b, @broadcast, @from_mac=@device_b, {0x4}}, @ver_80211n={0x0, 0x2, 0x3, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, 0xaeff5065a85e14de, 0x5, @default, @val={0x1, 0x2, [{0x16}, {0x4, 0x1}]}, @void, [{0xdd, 0xba, "95b4a1666d47ae2bb34543b25c7b3cd7280fef796b80161e4f5101d5f69c61c498ddb5e7917500c02f6707b1771e97f81b87ba9345d23700271c5f61cb82b75ea6f7c9f476fd6fcbbc445f6d11a9c6427395184074bb1753b4c82cce04b8b6e39efa2879a787fed45ec6a668d5f702252d845da28f190c0aa94bd05c3fa750e4698b2f1e7f84034eecd896672c270a61a7dce8891b812ce6e98b4ba9dfa45c186b9fd04eafd8987cd85021b96d9bba7605c519ec6476e54d890f"}]}}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack={{}, {0x2}, @device_b}}, @NL80211_ATTR_FRAME={0x5dd, 0x33, @data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xb, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x1}, @random="5422f6ead78c", @device_b, @device_b, {0x0, 0x2}}, {0x9, 0x0, 0x0, 0x0, 0x5}}, {@type00={{0x0, 0x2, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @broadcast, @device_a, @initial, {0x8, 0xfff}}, {0x5, 0x0, 0x3, 0x1, 0x1}}}, @ver_80211n={0x0, 0x9d, 0x2, 0x3, 0x0, 0x0, 0x1}}, @random="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"}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x718}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 23:12:49 executing program 1: r0 = socket(0x2c, 0x0, 0x0) (async, rerun: 32) r1 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vxcan0\x00'}) (async) r2 = socket(0x1, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x88, 0x0, 0x209, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x240000c0}, 0x20004080) (async, rerun: 64) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={r3, 0x1ff, 0xc}, 0xc) (rerun: 64) [ 506.631416][T12296] ? bfq_pos_tree_add_move+0x43e/0x43e [ 506.636713][T12296] dump_stack+0x15/0x17 [ 506.640705][T12296] should_fail+0x3c0/0x510 [ 506.644976][T12296] __should_failslab+0x9f/0xe0 [ 506.649564][T12296] should_failslab+0x9/0x20 [ 506.653904][T12296] kmem_cache_alloc+0x4f/0x2f0 [ 506.658491][T12296] ? anon_vma_clone+0xa1/0x4f0 [ 506.663099][T12296] anon_vma_clone+0xa1/0x4f0 [ 506.667535][T12296] anon_vma_fork+0x91/0x4f0 [ 506.671871][T12296] ? anon_vma_name+0x43/0x70 23:12:49 executing program 2: syz_clone3(&(0x7f0000000b40)={0x1000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 84) 23:12:49 executing program 4: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000000)={0x53c4b7ff48d08477, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x572e6eb2ba71ab2e, 0x0, 0x0, 0x0, {r0}}, 0x58) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 23:12:49 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.throttle.io_serviced\x00', 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000080)={0x718, r2, 0x10, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0xe6, 0x33, @mgmt_frame=@reassoc_resp={@with_ht={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x4}, @device_b, @broadcast, @from_mac=@device_b, {0x4}}, @ver_80211n={0x0, 0x2, 0x3, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, 0xaeff5065a85e14de, 0x5, @default, @val={0x1, 0x2, [{0x16}, {0x4, 0x1}]}, @void, [{0xdd, 0xba, "95b4a1666d47ae2bb34543b25c7b3cd7280fef796b80161e4f5101d5f69c61c498ddb5e7917500c02f6707b1771e97f81b87ba9345d23700271c5f61cb82b75ea6f7c9f476fd6fcbbc445f6d11a9c6427395184074bb1753b4c82cce04b8b6e39efa2879a787fed45ec6a668d5f702252d845da28f190c0aa94bd05c3fa750e4698b2f1e7f84034eecd896672c270a61a7dce8891b812ce6e98b4ba9dfa45c186b9fd04eafd8987cd85021b96d9bba7605c519ec6476e54d890f"}]}}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack={{}, {0x2}, @device_b}}, @NL80211_ATTR_FRAME={0x5dd, 0x33, @data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xb, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x1}, @random="5422f6ead78c", @device_b, @device_b, {0x0, 0x2}}, {0x9, 0x0, 0x0, 0x0, 0x5}}, {@type00={{0x0, 0x2, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @broadcast, @device_a, @initial, {0x8, 0xfff}}, {0x5, 0x0, 0x3, 0x1, 0x1}}}, @ver_80211n={0x0, 0x9d, 0x2, 0x3, 0x0, 0x0, 0x1}}, @random="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"}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x718}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 23:12:49 executing program 0: r0 = syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) r1 = getpgrp(r0) (async) r2 = getpgrp(r0) (async) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, 0x0) syz_clone3(&(0x7f0000000240)={0x10d000800, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2f}, &(0x7f00000000c0)=""/169, 0xa9, &(0x7f0000000180)=""/98, &(0x7f0000000200)=[r1, r0, r0, r2], 0x4, {r3}}, 0x58) 23:12:49 executing program 5: time(&(0x7f0000000080)) 23:12:49 executing program 1: keyctl$link(0x8, 0x0, 0xfffffffffffffff8) r0 = socket(0x2c, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000000)={"a7dffb019b168af4ebecf5f9801724c2", 0x0, 0x0, {0xa1, 0x7fff}, {0x400000000000003, 0x6}, 0x4, [0x4, 0x3, 0x0, 0x6, 0x8, 0x2, 0xaa4, 0x3, 0x6, 0xfff, 0x53fe, 0xffffffffffffffff, 0x3, 0xbf, 0x5, 0x2]}) [ 506.671901][T12296] dup_mmap+0x750/0xea0 [ 506.671921][T12296] ? __delayed_free_task+0x20/0x20 [ 506.671940][T12296] ? mm_init+0x807/0x960 [ 506.671958][T12296] dup_mm+0x91/0x330 [ 506.671975][T12296] copy_mm+0x108/0x1b0 [ 506.671992][T12296] copy_process+0x1295/0x3250 [ 506.672011][T12296] ? check_stack_object+0xf7/0x130 23:12:49 executing program 0: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@cgroup, 0xffffffffffffffff, 0x28}, 0x10) 23:12:49 executing program 1: keyctl$link(0x8, 0x0, 0xfffffffffffffff8) r0 = socket(0x2c, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000000)={"a7dffb019b168af4ebecf5f9801724c2", 0x0, 0x0, {0xa1, 0x7fff}, {0x400000000000003, 0x6}, 0x4, [0x4, 0x3, 0x0, 0x6, 0x8, 0x2, 0xaa4, 0x3, 0x6, 0xfff, 0x53fe, 0xffffffffffffffff, 0x3, 0xbf, 0x5, 0x2]}) 23:12:49 executing program 5: syz_clone3(0x0, 0x0) time(&(0x7f0000000080)) 23:12:49 executing program 0: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@cgroup, 0xffffffffffffffff, 0x28}, 0x10) 23:12:49 executing program 5: syz_clone3(0x0, 0x0) time(&(0x7f0000000080)) [ 506.672030][T12296] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 506.672046][T12296] ? copy_clone_args_from_user+0x6cf/0x790 [ 506.672064][T12296] kernel_clone+0x22d/0x990 [ 506.672080][T12296] ? dup_mmap+0xea0/0xea0 [ 506.672096][T12296] ? create_io_thread+0x1e0/0x1e0 [ 506.672113][T12296] ? file_end_write+0x1b0/0x1b0 [ 506.672134][T12296] __x64_sys_clone3+0x375/0x3a0 [ 506.672151][T12296] ? __ia32_sys_clone+0x300/0x300 [ 506.672168][T12296] ? ksys_write+0x25f/0x2c0 [ 506.672186][T12296] ? debug_smp_processor_id+0x17/0x20 [ 506.672204][T12296] do_syscall_64+0x44/0xd0 23:12:49 executing program 1: keyctl$link(0x8, 0x0, 0xfffffffffffffff8) r0 = socket(0x2c, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000000)={"a7dffb019b168af4ebecf5f9801724c2", 0x0, 0x0, {0xa1, 0x7fff}, {0x400000000000003, 0x6}, 0x4, [0x4, 0x3, 0x0, 0x6, 0x8, 0x2, 0xaa4, 0x3, 0x6, 0xfff, 0x53fe, 0xffffffffffffffff, 0x3, 0xbf, 0x5, 0x2]}) [ 506.672221][T12296] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 506.672240][T12296] RIP: 0033:0x7feb5e60c0c9 [ 506.672256][T12296] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 506.672272][T12296] RSP: 002b:00007feb5d37f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 506.672293][T12296] RAX: ffffffffffffffda RBX: 00007feb5e72bf80 RCX: 00007feb5e60c0c9 [ 506.672306][T12296] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007feb5d37f050 [ 506.672318][T12296] RBP: 00007feb5d37f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 506.672329][T12296] R10: 00007feb5d37f050 R11: 0000000000000246 R12: 0000000000000058 [ 506.672340][T12296] R13: 00007ffc843a962f R14: 00007feb5d37f300 R15: 0000000000022000 [ 506.672355][T12296] [ 506.737683][T12338] FAULT_INJECTION: forcing a failure. [ 506.737683][T12338] name failslab, interval 1, probability 0, space 0, times 0 [ 506.895012][T12338] CPU: 0 PID: 12338 Comm: syz-executor.2 Tainted: G W 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 506.906386][T12338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 506.916283][T12338] Call Trace: [ 506.919398][T12338] [ 506.922174][T12338] dump_stack_lvl+0x151/0x1b7 [ 506.926690][T12338] ? bfq_pos_tree_add_move+0x43e/0x43e [ 506.931993][T12338] ? vma_interval_tree_augment_rotate+0x210/0x210 [ 506.938237][T12338] dump_stack+0x15/0x17 [ 506.942311][T12338] should_fail+0x3c0/0x510 [ 506.946568][T12338] __should_failslab+0x9f/0xe0 [ 506.951170][T12338] should_failslab+0x9/0x20 [ 506.955504][T12338] kmem_cache_alloc+0x4f/0x2f0 [ 506.960113][T12338] ? anon_vma_fork+0xf7/0x4f0 [ 506.964702][T12338] anon_vma_fork+0xf7/0x4f0 [ 506.969216][T12338] ? anon_vma_name+0x43/0x70 [ 506.973654][T12338] dup_mmap+0x750/0xea0 [ 506.977637][T12338] ? __delayed_free_task+0x20/0x20 [ 506.982581][T12338] ? mm_init+0x807/0x960 [ 506.986663][T12338] dup_mm+0x91/0x330 [ 506.990394][T12338] copy_mm+0x108/0x1b0 [ 506.994299][T12338] copy_process+0x1295/0x3250 [ 506.998817][T12338] ? check_stack_object+0xf7/0x130 [ 507.003759][T12338] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 507.008711][T12338] ? copy_clone_args_from_user+0x6cf/0x790 [ 507.014346][T12338] kernel_clone+0x22d/0x990 [ 507.018687][T12338] ? dup_mmap+0xea0/0xea0 [ 507.022941][T12338] ? create_io_thread+0x1e0/0x1e0 [ 507.027975][T12338] ? file_end_write+0x1b0/0x1b0 [ 507.032671][T12338] __x64_sys_clone3+0x375/0x3a0 [ 507.037351][T12338] ? __ia32_sys_clone+0x300/0x300 [ 507.042207][T12338] ? ksys_write+0x25f/0x2c0 [ 507.048230][T12338] ? debug_smp_processor_id+0x17/0x20 [ 507.053437][T12338] do_syscall_64+0x44/0xd0 [ 507.057689][T12338] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 507.063433][T12338] RIP: 0033:0x7feb5e60c0c9 [ 507.067669][T12338] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 507.087113][T12338] RSP: 002b:00007feb5d37f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 507.095356][T12338] RAX: ffffffffffffffda RBX: 00007feb5e72bf80 RCX: 00007feb5e60c0c9 [ 507.103169][T12338] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007feb5d37f050 [ 507.110977][T12338] RBP: 00007feb5d37f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 507.118800][T12338] R10: 00007feb5d37f050 R11: 0000000000000246 R12: 0000000000000058 [ 507.126602][T12338] R13: 00007ffc843a962f R14: 00007feb5d37f300 R15: 0000000000022000 [ 507.134540][T12338] [ 507.137488][T12338] ================================================================== [ 507.145372][T12338] BUG: KASAN: use-after-free in vm_area_free+0x7e/0x230 [ 507.152143][T12338] Write of size 4 at addr ffff88811642b870 by task syz-executor.2/12338 [ 507.160417][T12338] [ 507.162585][T12338] CPU: 0 PID: 12338 Comm: syz-executor.2 Tainted: G W 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 507.174127][T12338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 507.184112][T12338] Call Trace: [ 507.187232][T12338] [ 507.190015][T12338] dump_stack_lvl+0x151/0x1b7 [ 507.194784][T12338] ? bfq_pos_tree_add_move+0x43e/0x43e [ 507.200170][T12338] ? panic+0x727/0x727 [ 507.204068][T12338] ? slab_free_freelist_hook+0xc9/0x1a0 [ 507.209540][T12338] print_address_description+0x87/0x3d0 [ 507.214917][T12338] kasan_report+0x1a6/0x1f0 [ 507.219259][T12338] ? vm_area_free+0x7e/0x230 [ 507.223685][T12338] ? vm_area_free+0x7e/0x230 [ 507.228212][T12338] kasan_check_range+0x2aa/0x2e0 [ 507.233276][T12338] __kasan_check_write+0x14/0x20 [ 507.238049][T12338] vm_area_free+0x7e/0x230 [ 507.242303][T12338] dup_mmap+0xbcd/0xea0 [ 507.246296][T12338] ? __delayed_free_task+0x20/0x20 [ 507.251240][T12338] ? mm_init+0x807/0x960 [ 507.255346][T12338] dup_mm+0x91/0x330 [ 507.259055][T12338] copy_mm+0x108/0x1b0 [ 507.262961][T12338] copy_process+0x1295/0x3250 [ 507.267473][T12338] ? check_stack_object+0xf7/0x130 [ 507.272417][T12338] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 507.277364][T12338] ? copy_clone_args_from_user+0x6cf/0x790 [ 507.283007][T12338] kernel_clone+0x22d/0x990 [ 507.287345][T12338] ? dup_mmap+0xea0/0xea0 [ 507.291520][T12338] ? create_io_thread+0x1e0/0x1e0 [ 507.296370][T12338] ? file_end_write+0x1b0/0x1b0 [ 507.301061][T12338] __x64_sys_clone3+0x375/0x3a0 [ 507.305751][T12338] ? __ia32_sys_clone+0x300/0x300 [ 507.310607][T12338] ? ksys_write+0x25f/0x2c0 [ 507.314960][T12338] ? debug_smp_processor_id+0x17/0x20 [ 507.320598][T12338] do_syscall_64+0x44/0xd0 [ 507.324843][T12338] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 507.330583][T12338] RIP: 0033:0x7feb5e60c0c9 [ 507.334833][T12338] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 507.354506][T12338] RSP: 002b:00007feb5d37f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 507.362689][T12338] RAX: ffffffffffffffda RBX: 00007feb5e72bf80 RCX: 00007feb5e60c0c9 [ 507.370491][T12338] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007feb5d37f050 [ 507.378317][T12338] RBP: 00007feb5d37f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 507.386113][T12338] R10: 00007feb5d37f050 R11: 0000000000000246 R12: 0000000000000058 [ 507.393927][T12338] R13: 00007ffc843a962f R14: 00007feb5d37f300 R15: 0000000000022000 [ 507.401750][T12338] [ 507.404690][T12338] [ 507.406862][T12338] Allocated by task 12296: [ 507.411112][T12338] __kasan_slab_alloc+0xb2/0xe0 [ 507.415797][T12338] kmem_cache_alloc+0x189/0x2f0 [ 507.420482][T12338] vm_area_dup+0x26/0x1d0 [ 507.424656][T12338] dup_mmap+0x6b8/0xea0 [ 507.428666][T12338] dup_mm+0x91/0x330 [ 507.432377][T12338] copy_mm+0x108/0x1b0 [ 507.436369][T12338] copy_process+0x1295/0x3250 [ 507.441761][T12338] kernel_clone+0x22d/0x990 [ 507.446092][T12338] __x64_sys_clone3+0x375/0x3a0 [ 507.450773][T12338] do_syscall_64+0x44/0xd0 [ 507.455026][T12338] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 507.460768][T12338] [ 507.462924][T12338] Freed by task 12332: [ 507.466832][T12338] kasan_set_track+0x4c/0x70 [ 507.471255][T12338] kasan_set_free_info+0x23/0x40 [ 507.476029][T12338] ____kasan_slab_free+0x126/0x160 [ 507.480977][T12338] __kasan_slab_free+0x11/0x20 [ 507.485585][T12338] slab_free_freelist_hook+0xc9/0x1a0 [ 507.491481][T12338] kmem_cache_free+0x11a/0x2e0 [ 507.496079][T12338] vm_area_free+0x1ae/0x230 [ 507.500437][T12338] exit_mmap+0x5dd/0x7a0 [ 507.504498][T12338] __mmput+0x95/0x300 [ 507.508317][T12338] mmput+0x50/0x60 [ 507.511874][T12338] exit_mm+0x50d/0x760 [ 507.515780][T12338] do_exit+0x63c/0x24d0 [ 507.519773][T12338] __ia32_sys_exit+0x0/0x40 [ 507.524132][T12338] do_syscall_64+0x44/0xd0 [ 507.528367][T12338] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 507.534097][T12338] [ 507.536269][T12338] The buggy address belongs to the object at ffff88811642b818 [ 507.536269][T12338] which belongs to the cache vm_area_struct of size 232 [ 507.550498][T12338] The buggy address is located 88 bytes inside of [ 507.550498][T12338] 232-byte region [ffff88811642b818, ffff88811642b900) [ 507.563517][T12338] The buggy address belongs to the page: [ 507.568986][T12338] page:ffffea0004590ac0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11642b [ 507.579052][T12338] flags: 0x4000000000000200(slab|zone=1) [ 507.584529][T12338] raw: 4000000000000200 dead000000000100 dead000000000122 ffff888100274d80 [ 507.592943][T12338] raw: 0000000000000000 00000000000d000d 00000001ffffffff 0000000000000000 [ 507.601356][T12338] page dumped because: kasan: bad access detected [ 507.607616][T12338] page_owner tracks the page as allocated [ 507.613159][T12338] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 8427, ts 471846763969, free_ts 467700035768 [ 507.629131][T12338] post_alloc_hook+0x1ab/0x1b0 [ 507.633858][T12338] get_page_from_freelist+0x38b/0x400 [ 507.639052][T12338] __alloc_pages+0x3a8/0x7c0 [ 507.643478][T12338] allocate_slab+0x62/0x580 [ 507.647819][T12338] ___slab_alloc+0x2e2/0x6f0 [ 507.652252][T12338] __slab_alloc+0x4a/0x90 [ 507.656411][T12338] kmem_cache_alloc+0x205/0x2f0 [ 507.661095][T12338] vm_area_alloc+0x24/0x130 [ 507.665439][T12338] mmap_region+0xb80/0x1af0 [ 507.669779][T12338] do_mmap+0x785/0xe40 [ 507.673707][T12338] vm_mmap_pgoff+0x1d4/0x420 [ 507.678115][T12338] ksys_mmap_pgoff+0xed/0x1e0 [ 507.682712][T12338] __x64_sys_mmap+0x103/0x120 [ 507.687344][T12338] do_syscall_64+0x44/0xd0 [ 507.691573][T12338] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 507.697345][T12338] page last free stack trace: [ 507.701819][T12338] free_pcp_prepare+0x448/0x450 [ 507.706513][T12338] free_unref_page_list+0x16a/0xad0 [ 507.711801][T12338] release_pages+0xf3e/0xf90 [ 507.718205][T12338] free_pages_and_swap_cache+0x97/0xb0 [ 507.723500][T12338] tlb_flush_mmu+0x860/0xa00 [ 507.727934][T12338] tlb_finish_mmu+0xd2/0x1f0 [ 507.732527][T12338] exit_mmap+0x46e/0x7a0 [ 507.736605][T12338] __mmput+0x95/0x300 [ 507.740423][T12338] mmput+0x50/0x60 [ 507.744066][T12338] exit_mm+0x50d/0x760 [ 507.747971][T12338] do_exit+0x63c/0x24d0 [ 507.751967][T12338] do_group_exit+0x13a/0x300 [ 507.756390][T12338] get_signal+0x77e/0x1600 [ 507.760645][T12338] arch_do_signal_or_restart+0x9f/0x670 [ 507.766024][T12338] exit_to_user_mode_loop+0xd4/0x110 [ 507.771146][T12338] syscall_exit_to_user_mode+0x79/0xc0 [ 507.776442][T12338] [ 507.778609][T12338] Memory state around the buggy address: [ 507.784079][T12338] ffff88811642b700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 507.791982][T12338] ffff88811642b780: fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc fc 23:12:50 executing program 2: syz_clone3(&(0x7f0000000b40)={0x1000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 85) 23:12:50 executing program 0: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@cgroup, 0xffffffffffffffff, 0x28}, 0x10) 23:12:50 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.throttle.io_serviced\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000080)={0x718, r2, 0x10, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0xe6, 0x33, @mgmt_frame=@reassoc_resp={@with_ht={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x4}, @device_b, @broadcast, @from_mac=@device_b, {0x4}}, @ver_80211n={0x0, 0x2, 0x3, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, 0xaeff5065a85e14de, 0x5, @default, @val={0x1, 0x2, [{0x16}, {0x4, 0x1}]}, @void, [{0xdd, 0xba, "95b4a1666d47ae2bb34543b25c7b3cd7280fef796b80161e4f5101d5f69c61c498ddb5e7917500c02f6707b1771e97f81b87ba9345d23700271c5f61cb82b75ea6f7c9f476fd6fcbbc445f6d11a9c6427395184074bb1753b4c82cce04b8b6e39efa2879a787fed45ec6a668d5f702252d845da28f190c0aa94bd05c3fa750e4698b2f1e7f84034eecd896672c270a61a7dce8891b812ce6e98b4ba9dfa45c186b9fd04eafd8987cd85021b96d9bba7605c519ec6476e54d890f"}]}}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack={{}, {0x2}, @device_b}}, @NL80211_ATTR_FRAME={0x5dd, 0x33, @data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xb, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x1}, @random="5422f6ead78c", @device_b, @device_b, {0x0, 0x2}}, {0x9, 0x0, 0x0, 0x0, 0x5}}, {@type00={{0x0, 0x2, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @broadcast, @device_a, @initial, {0x8, 0xfff}}, {0x5, 0x0, 0x3, 0x1, 0x1}}}, @ver_80211n={0x0, 0x9d, 0x2, 0x3, 0x0, 0x0, 0x1}}, @random="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"}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x718}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 23:12:50 executing program 5: syz_clone3(0x0, 0x0) time(&(0x7f0000000080)) 23:12:50 executing program 1: socket(0x25, 0x80000, 0x5) 23:12:50 executing program 4: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x240200, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.time_recursive\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000280)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_delrule={0x34, 0x21, 0xf08, 0x70bd28, 0x25dfdbfb, {0x2, 0x80, 0x90, 0xae, 0x5, 0x0, 0x0, 0x1, 0x836dbeb5bb4e20e2}, [@FRA_DST={0x8, 0x1, @rand_addr=0x64010101}, @FRA_FLOW={0x8, 0xb, 0x92}, @FRA_SRC={0x8, 0x2, @broadcast}]}, 0x34}}, 0x4000) [ 507.799881][T12338] >ffff88811642b800: fc fc fc fa fb fb fb fb fb fb fb fb fb fb fb fb [ 507.807801][T12338] ^ [ 507.815762][T12338] ffff88811642b880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 507.823750][T12338] ffff88811642b900: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 507.831641][T12338] ================================================================== [ 507.839906][T12338] Disabling lock debugging due to kernel taint 23:12:50 executing program 1: socket(0x25, 0x80000, 0x5) socket(0x25, 0x80000, 0x5) (async) 23:12:50 executing program 4: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x240200, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) (async) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.time_recursive\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000280)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_delrule={0x34, 0x21, 0xf08, 0x70bd28, 0x25dfdbfb, {0x2, 0x80, 0x90, 0xae, 0x5, 0x0, 0x0, 0x1, 0x836dbeb5bb4e20e2}, [@FRA_DST={0x8, 0x1, @rand_addr=0x64010101}, @FRA_FLOW={0x8, 0xb, 0x92}, @FRA_SRC={0x8, 0x2, @broadcast}]}, 0x34}}, 0x4000) 23:12:50 executing program 5: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) time(0x0) 23:12:50 executing program 3: syz_clone3(&(0x7f0000000000)={0xe317200, 0x0, 0x0, 0x0, {0x26}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:12:50 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000000), 0x2, 0x0) syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) 23:12:50 executing program 1: socket(0x25, 0x80000, 0x5) [ 507.866823][ T30] audit: type=1400 audit(1673219570.169:138): avc: denied { create } for pid=12373 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 507.871462][T12376] FAULT_INJECTION: forcing a failure. [ 507.871462][T12376] name failslab, interval 1, probability 0, space 0, times 0 [ 507.929858][T12376] CPU: 0 PID: 12376 Comm: syz-executor.2 Tainted: G B W 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 507.941325][T12376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 507.951216][T12376] Call Trace: [ 507.954341][T12376] [ 507.957123][T12376] dump_stack_lvl+0x151/0x1b7 [ 507.961719][T12376] ? bfq_pos_tree_add_move+0x43e/0x43e [ 507.967013][T12376] dump_stack+0x15/0x17 [ 507.971005][T12376] should_fail+0x3c0/0x510 [ 507.975256][T12376] __should_failslab+0x9f/0xe0 [ 507.980033][T12376] should_failslab+0x9/0x20 [ 507.984376][T12376] kmem_cache_alloc+0x4f/0x2f0 [ 507.988979][T12376] ? anon_vma_fork+0x1b9/0x4f0 [ 507.993570][T12376] anon_vma_fork+0x1b9/0x4f0 [ 507.997999][T12376] dup_mmap+0x750/0xea0 [ 508.001992][T12376] ? __delayed_free_task+0x20/0x20 [ 508.006938][T12376] ? mm_init+0x807/0x960 [ 508.011275][T12376] dup_mm+0x91/0x330 [ 508.015004][T12376] copy_mm+0x108/0x1b0 [ 508.018912][T12376] copy_process+0x1295/0x3250 [ 508.023511][T12376] ? check_stack_object+0xf7/0x130 [ 508.028462][T12376] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 508.033402][T12376] ? copy_clone_args_from_user+0x6cf/0x790 [ 508.039044][T12376] kernel_clone+0x22d/0x990 [ 508.043472][T12376] ? dup_mmap+0xea0/0xea0 [ 508.047648][T12376] ? create_io_thread+0x1e0/0x1e0 [ 508.052506][T12376] ? file_end_write+0x1b0/0x1b0 [ 508.057185][T12376] __x64_sys_clone3+0x375/0x3a0 [ 508.061872][T12376] ? __ia32_sys_clone+0x300/0x300 [ 508.066819][T12376] ? ksys_write+0x25f/0x2c0 [ 508.071166][T12376] ? debug_smp_processor_id+0x17/0x20 [ 508.076373][T12376] do_syscall_64+0x44/0xd0 [ 508.080618][T12376] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 508.086348][T12376] RIP: 0033:0x7feb5e60c0c9 [ 508.090600][T12376] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 508.110050][T12376] RSP: 002b:00007feb5d37f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 508.118283][T12376] RAX: ffffffffffffffda RBX: 00007feb5e72bf80 RCX: 00007feb5e60c0c9 23:12:50 executing program 2: syz_clone3(&(0x7f0000000b40)={0x1000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 86) 23:12:50 executing program 3: syz_clone3(&(0x7f0000000000)={0xe317200, 0x0, 0x0, 0x0, {0x26}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:12:50 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000000), 0x2, 0x0) syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) 23:12:50 executing program 4: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x240200, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.time_recursive\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000280)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_delrule={0x34, 0x21, 0xf08, 0x70bd28, 0x25dfdbfb, {0x2, 0x80, 0x90, 0xae, 0x5, 0x0, 0x0, 0x1, 0x836dbeb5bb4e20e2}, [@FRA_DST={0x8, 0x1, @rand_addr=0x64010101}, @FRA_FLOW={0x8, 0xb, 0x92}, @FRA_SRC={0x8, 0x2, @broadcast}]}, 0x34}}, 0x4000) 23:12:50 executing program 1: socket(0x2c, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r1, 0xffffffffffffffff, 0x4}, 0x48) r2 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r1, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r2}, 0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r3, 0xffffffffffffffff, 0x4}, 0x48) r4 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r3, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r4}, 0x80) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x88, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x99}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5}, @ETHTOOL_A_LINKINFO_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4880}, 0x800) 23:12:50 executing program 5: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) time(0x0) 23:12:50 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000000), 0x2, 0x0) syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) [ 508.126095][T12376] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007feb5d37f050 [ 508.133921][T12376] RBP: 00007feb5d37f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 508.141722][T12376] R10: 00007feb5d37f050 R11: 0000000000000246 R12: 0000000000000058 [ 508.149534][T12376] R13: 00007ffc843a962f R14: 00007feb5d37f300 R15: 0000000000022000 [ 508.157780][T12376] 23:12:50 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffd10) 23:12:50 executing program 3: syz_clone3(&(0x7f0000000000)={0xe317200, 0x0, 0x0, 0x0, {0x26}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:12:50 executing program 3: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {0x23}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:12:50 executing program 0: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) 23:12:50 executing program 5: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) time(0x0) [ 508.197766][T12414] FAULT_INJECTION: forcing a failure. [ 508.197766][T12414] name failslab, interval 1, probability 0, space 0, times 0 [ 508.263153][T12414] CPU: 1 PID: 12414 Comm: syz-executor.2 Tainted: G B W 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 508.275577][T12414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 508.285468][T12414] Call Trace: [ 508.288598][T12414] [ 508.291370][T12414] dump_stack_lvl+0x151/0x1b7 [ 508.295892][T12414] ? bfq_pos_tree_add_move+0x43e/0x43e [ 508.301182][T12414] dump_stack+0x15/0x17 [ 508.305172][T12414] should_fail+0x3c0/0x510 [ 508.309426][T12414] __should_failslab+0x9f/0xe0 [ 508.314031][T12414] should_failslab+0x9/0x20 [ 508.318362][T12414] kmem_cache_alloc+0x4f/0x2f0 [ 508.322960][T12414] ? vm_area_dup+0x26/0x1d0 [ 508.327307][T12414] ? __kasan_check_read+0x11/0x20 [ 508.332164][T12414] vm_area_dup+0x26/0x1d0 [ 508.336450][T12414] dup_mmap+0x6b8/0xea0 [ 508.340553][T12414] ? __delayed_free_task+0x20/0x20 [ 508.345494][T12414] ? mm_init+0x807/0x960 [ 508.349568][T12414] dup_mm+0x91/0x330 [ 508.353321][T12414] copy_mm+0x108/0x1b0 [ 508.357206][T12414] copy_process+0x1295/0x3250 [ 508.361722][T12414] ? check_stack_object+0xf7/0x130 [ 508.366675][T12414] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 508.371615][T12414] ? copy_clone_args_from_user+0x6cf/0x790 [ 508.377370][T12414] kernel_clone+0x22d/0x990 [ 508.381698][T12414] ? dup_mmap+0xea0/0xea0 [ 508.385866][T12414] ? create_io_thread+0x1e0/0x1e0 [ 508.390807][T12414] ? file_end_write+0x1b0/0x1b0 [ 508.395498][T12414] __x64_sys_clone3+0x375/0x3a0 [ 508.400357][T12414] ? __ia32_sys_clone+0x300/0x300 [ 508.405302][T12414] ? ksys_write+0x25f/0x2c0 [ 508.409650][T12414] ? debug_smp_processor_id+0x17/0x20 [ 508.414860][T12414] do_syscall_64+0x44/0xd0 [ 508.419102][T12414] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 508.424846][T12414] RIP: 0033:0x7feb5e60c0c9 [ 508.429082][T12414] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 508.448702][T12414] RSP: 002b:00007feb5d37f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 508.457028][T12414] RAX: ffffffffffffffda RBX: 00007feb5e72bf80 RCX: 00007feb5e60c0c9 23:12:50 executing program 2: syz_clone3(&(0x7f0000000b40)={0x1000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 87) 23:12:50 executing program 3: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {0x23}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {0x23}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) 23:12:50 executing program 0: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) (async) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) 23:12:50 executing program 5: socket(0x25, 0x80000, 0x5) 23:12:50 executing program 1: socket(0x2c, 0x0, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r1, 0xffffffffffffffff, 0x4}, 0x48) (async) r2 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r1, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r2}, 0x80) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r3, 0xffffffffffffffff, 0x4}, 0x48) (async) r4 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r3, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r4}, 0x80) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x88, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x99}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5}, @ETHTOOL_A_LINKINFO_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4880}, 0x800) 23:12:50 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) (async) syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffd10) 23:12:50 executing program 0: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) (async) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) (async) [ 508.465017][T12414] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007feb5d37f050 [ 508.472840][T12414] RBP: 00007feb5d37f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 508.480639][T12414] R10: 00007feb5d37f050 R11: 0000000000000246 R12: 0000000000000058 [ 508.488455][T12414] R13: 00007ffc843a962f R14: 00007feb5d37f300 R15: 0000000000022000 [ 508.496265][T12414] 23:12:50 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) (async) syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffd10) 23:12:50 executing program 0: syz_clone3(&(0x7f0000000b40)={0x100223800, 0x0, 0x0, 0x0, {}, &(0x7f0000000000)=""/2, 0x2, 0x0, 0x0}, 0xffffffffffffff92) 23:12:50 executing program 3: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {0x23}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:12:50 executing program 5: socket(0x25, 0x80000, 0x5) 23:12:50 executing program 3: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/vtconsole', 0x240000, 0x10) openat$cgroup_pressure(r0, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) [ 508.538089][T12448] FAULT_INJECTION: forcing a failure. [ 508.538089][T12448] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 508.587866][T12448] CPU: 0 PID: 12448 Comm: syz-executor.2 Tainted: G B W 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 508.599509][T12448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 508.609403][T12448] Call Trace: [ 508.612523][T12448] [ 508.615299][T12448] dump_stack_lvl+0x151/0x1b7 [ 508.619826][T12448] ? bfq_pos_tree_add_move+0x43e/0x43e [ 508.625195][T12448] dump_stack+0x15/0x17 [ 508.629190][T12448] should_fail+0x3c0/0x510 [ 508.633440][T12448] should_fail_alloc_page+0x58/0x70 [ 508.638660][T12448] __alloc_pages+0x1de/0x7c0 [ 508.643424][T12448] ? __count_vm_events+0x30/0x30 [ 508.648197][T12448] ? dup_mm+0x91/0x330 [ 508.652101][T12448] ? copy_mm+0x108/0x1b0 [ 508.656179][T12448] ? copy_process+0x1295/0x3250 [ 508.660866][T12448] ? kernel_clone+0x22d/0x990 [ 508.665390][T12448] ? __x64_sys_clone3+0x375/0x3a0 [ 508.670242][T12448] pte_alloc_one+0x73/0x1b0 [ 508.674579][T12448] ? pfn_modify_allowed+0x2e0/0x2e0 [ 508.679615][T12448] ? __kasan_check_write+0x14/0x20 [ 508.685091][T12448] ? __set_page_owner+0x2ee/0x310 [ 508.689944][T12448] __pte_alloc+0x86/0x350 [ 508.694106][T12448] ? post_alloc_hook+0x1ab/0x1b0 [ 508.698882][T12448] ? free_pgtables+0x210/0x210 [ 508.703480][T12448] ? get_page_from_freelist+0x38b/0x400 [ 508.708867][T12448] copy_pte_range+0x1b1f/0x20b0 [ 508.713579][T12448] ? __kunmap_atomic+0x80/0x80 [ 508.718152][T12448] ? __pud_alloc+0x260/0x260 [ 508.722579][T12448] copy_page_range+0xc1e/0x1090 [ 508.727372][T12448] ? pfn_valid+0x1e0/0x1e0 [ 508.731717][T12448] dup_mmap+0x99f/0xea0 [ 508.735704][T12448] ? __delayed_free_task+0x20/0x20 [ 508.740654][T12448] ? mm_init+0x807/0x960 [ 508.744727][T12448] dup_mm+0x91/0x330 [ 508.748804][T12448] copy_mm+0x108/0x1b0 [ 508.752712][T12448] copy_process+0x1295/0x3250 [ 508.757224][T12448] ? check_stack_object+0xf7/0x130 [ 508.762172][T12448] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 508.767141][T12448] ? copy_clone_args_from_user+0x6cf/0x790 [ 508.772760][T12448] kernel_clone+0x22d/0x990 [ 508.777102][T12448] ? dup_mmap+0xea0/0xea0 [ 508.781274][T12448] ? create_io_thread+0x1e0/0x1e0 [ 508.786129][T12448] ? file_end_write+0x1b0/0x1b0 [ 508.790822][T12448] __x64_sys_clone3+0x375/0x3a0 [ 508.795519][T12448] ? __ia32_sys_clone+0x300/0x300 [ 508.800625][T12448] ? ksys_write+0x25f/0x2c0 [ 508.804967][T12448] ? debug_smp_processor_id+0x17/0x20 [ 508.810435][T12448] do_syscall_64+0x44/0xd0 [ 508.814688][T12448] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 508.820597][T12448] RIP: 0033:0x7feb5e60c0c9 [ 508.824856][T12448] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 508.845246][T12448] RSP: 002b:00007feb5d37f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 508.853599][T12448] RAX: ffffffffffffffda RBX: 00007feb5e72bf80 RCX: 00007feb5e60c0c9 [ 508.861493][T12448] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007feb5d37f050 [ 508.869292][T12448] RBP: 00007feb5d37f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 508.877280][T12448] R10: 00007feb5d37f050 R11: 0000000000000246 R12: 0000000000000058 23:12:51 executing program 2: syz_clone3(&(0x7f0000000b40)={0x1000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 88) 23:12:51 executing program 5: socket(0x25, 0x80000, 0x5) 23:12:51 executing program 4: request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='\x00', 0x0) syz_clone3(&(0x7f0000000b40)={0x48a80400, 0x0, 0x0, 0x0, {0x35}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:12:51 executing program 0: syz_clone3(&(0x7f0000000b40)={0x100223800, 0x0, 0x0, 0x0, {}, &(0x7f0000000000)=""/2, 0x2, 0x0, 0x0}, 0xffffffffffffff92) 23:12:51 executing program 1: socket(0x2c, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) (rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r1, 0xffffffffffffffff, 0x4}, 0x48) r2 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r1, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r2}, 0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r3, 0xffffffffffffffff, 0x4}, 0x48) (async) r4 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r3, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r4}, 0x80) (async) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x88, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x99}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5}, @ETHTOOL_A_LINKINFO_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4880}, 0x800) 23:12:51 executing program 3: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/vtconsole', 0x240000, 0x10) openat$cgroup_pressure(r0, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) 23:12:51 executing program 0: syz_clone3(&(0x7f0000000b40)={0x100223800, 0x0, 0x0, 0x0, {}, &(0x7f0000000000)=""/2, 0x2, 0x0, 0x0}, 0xffffffffffffff92) 23:12:51 executing program 4: request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='\x00', 0x0) (async) syz_clone3(&(0x7f0000000b40)={0x48a80400, 0x0, 0x0, 0x0, {0x35}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 508.885363][T12448] R13: 00007ffc843a962f R14: 00007feb5d37f300 R15: 0000000000022000 [ 508.893176][T12448] 23:12:51 executing program 5: socket(0x0, 0x80000, 0x5) 23:12:51 executing program 0: syz_clone3(&(0x7f0000000b40)={0x108120200, 0x0, 0x0, 0x0, {0xfffffffc}, &(0x7f0000000000)=""/4, 0x4, 0x0, 0x0}, 0x58) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) openat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) 23:12:51 executing program 5: socket(0x0, 0x80000, 0x5) 23:12:51 executing program 3: syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/vtconsole', 0x240000, 0x10) openat$cgroup_pressure(r0, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) [ 508.952652][T12477] FAULT_INJECTION: forcing a failure. [ 508.952652][T12477] name failslab, interval 1, probability 0, space 0, times 0 [ 508.999693][T12477] CPU: 0 PID: 12477 Comm: syz-executor.2 Tainted: G B W 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 509.011276][T12477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 509.021176][T12477] Call Trace: [ 509.024300][T12477] [ 509.027079][T12477] dump_stack_lvl+0x151/0x1b7 [ 509.031840][T12477] ? bfq_pos_tree_add_move+0x43e/0x43e [ 509.037164][T12477] dump_stack+0x15/0x17 [ 509.041136][T12477] should_fail+0x3c0/0x510 [ 509.045465][T12477] __should_failslab+0x9f/0xe0 [ 509.050155][T12477] should_failslab+0x9/0x20 [ 509.054496][T12477] kmem_cache_alloc+0x4f/0x2f0 [ 509.059179][T12477] ? vm_area_dup+0x26/0x1d0 [ 509.063517][T12477] vm_area_dup+0x26/0x1d0 [ 509.067771][T12477] dup_mmap+0x6b8/0xea0 [ 509.071764][T12477] ? __delayed_free_task+0x20/0x20 [ 509.076971][T12477] ? mm_init+0x807/0x960 [ 509.081051][T12477] dup_mm+0x91/0x330 [ 509.084799][T12477] copy_mm+0x108/0x1b0 [ 509.088700][T12477] copy_process+0x1295/0x3250 [ 509.093202][T12477] ? check_stack_object+0xf7/0x130 [ 509.098163][T12477] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 509.103267][T12477] ? copy_clone_args_from_user+0x6cf/0x790 [ 509.109175][T12477] kernel_clone+0x22d/0x990 [ 509.113522][T12477] ? dup_mmap+0xea0/0xea0 [ 509.117678][T12477] ? create_io_thread+0x1e0/0x1e0 [ 509.122569][T12477] ? file_end_write+0x1b0/0x1b0 [ 509.127300][T12477] __x64_sys_clone3+0x375/0x3a0 [ 509.132003][T12477] ? __ia32_sys_clone+0x300/0x300 [ 509.136872][T12477] ? ksys_write+0x25f/0x2c0 [ 509.141204][T12477] ? debug_smp_processor_id+0x17/0x20 [ 509.146406][T12477] do_syscall_64+0x44/0xd0 [ 509.150658][T12477] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 509.157174][T12477] RIP: 0033:0x7feb5e60c0c9 [ 509.161435][T12477] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 509.181034][T12477] RSP: 002b:00007feb5d37f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 509.189276][T12477] RAX: ffffffffffffffda RBX: 00007feb5e72bf80 RCX: 00007feb5e60c0c9 23:12:51 executing program 2: syz_clone3(&(0x7f0000000b40)={0x1000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 89) 23:12:51 executing program 4: request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='\x00', 0x0) syz_clone3(&(0x7f0000000b40)={0x48a80400, 0x0, 0x0, 0x0, {0x35}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:12:51 executing program 1: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r0, 0xffffffffffffffff, 0x4}, 0x48) r1 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r1}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@delneigh={0x38, 0x1d, 0x400, 0x70bd2c, 0x25dfdbfc, {0x7, 0x0, 0x0, r0, 0x2, 0x9, 0x9}, [@NDA_LINK_NETNSID={0x8, 0xa, 0x9}, @NDA_CACHEINFO={0x14, 0x3, {0x40, 0x0, 0x7, 0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040800}, 0x4000) socket(0x2c, 0x5, 0x201) 23:12:51 executing program 0: syz_clone3(&(0x7f0000000b40)={0x108120200, 0x0, 0x0, 0x0, {0xfffffffc}, &(0x7f0000000000)=""/4, 0x4, 0x0, 0x0}, 0x58) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) openat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000b40)={0x108120200, 0x0, 0x0, 0x0, {0xfffffffc}, &(0x7f0000000000)=""/4, 0x4, 0x0, 0x0}, 0x58) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) (async) openat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) (async) 23:12:51 executing program 5: socket(0x0, 0x80000, 0x5) 23:12:51 executing program 0: syz_clone3(&(0x7f0000000b40)={0x108120200, 0x0, 0x0, 0x0, {0xfffffffc}, &(0x7f0000000000)=""/4, 0x4, 0x0, 0x0}, 0x58) (async) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) (async) openat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) [ 509.197112][T12477] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007feb5d37f050 [ 509.204902][T12477] RBP: 00007feb5d37f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 509.212712][T12477] R10: 00007feb5d37f050 R11: 0000000000000246 R12: 0000000000000058 [ 509.220523][T12477] R13: 00007ffc843a962f R14: 00007feb5d37f300 R15: 0000000000022000 [ 509.228339][T12477] 23:12:51 executing program 5: socket(0x25, 0x0, 0x5) 23:12:51 executing program 0: r0 = syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f0000000200)={0x1000200, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2f}, &(0x7f00000000c0)=""/22, 0x16, &(0x7f0000000100)=""/150, &(0x7f00000001c0)=[r0, r0], 0x2}, 0x58) 23:12:51 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="00120000", @ANYRES16=r0, @ANYBLOB="00082dbd7000fedbdf255d0000000c00990000000000280000000800a50001000000"], 0x28}, 0x1, 0x0, 0x0, 0x40888}, 0x20008004) syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:12:51 executing program 5: socket(0x25, 0x0, 0x0) [ 509.278973][T12509] FAULT_INJECTION: forcing a failure. [ 509.278973][T12509] name failslab, interval 1, probability 0, space 0, times 0 23:12:51 executing program 0: r0 = syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f0000000200)={0x1000200, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2f}, &(0x7f00000000c0)=""/22, 0x16, &(0x7f0000000100)=""/150, &(0x7f00000001c0)=[r0, r0], 0x2}, 0x58) 23:12:51 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="00120000", @ANYRES16=r0, @ANYBLOB="00082dbd7000fedbdf255d0000000c00990000000000280000000800a50001000000"], 0x28}, 0x1, 0x0, 0x0, 0x40888}, 0x20008004) (async) syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 509.319568][T12509] CPU: 0 PID: 12509 Comm: syz-executor.2 Tainted: G B W 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 509.331031][T12509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 509.340929][T12509] Call Trace: [ 509.344058][T12509] [ 509.346849][T12509] dump_stack_lvl+0x151/0x1b7 [ 509.351534][T12509] ? bfq_pos_tree_add_move+0x43e/0x43e [ 509.356813][T12509] dump_stack+0x15/0x17 [ 509.360805][T12509] should_fail+0x3c0/0x510 [ 509.365056][T12509] __should_failslab+0x9f/0xe0 [ 509.369654][T12509] should_failslab+0x9/0x20 [ 509.374006][T12509] kmem_cache_alloc+0x4f/0x2f0 [ 509.378599][T12509] ? anon_vma_clone+0xa1/0x4f0 [ 509.383195][T12509] anon_vma_clone+0xa1/0x4f0 [ 509.387621][T12509] anon_vma_fork+0x91/0x4f0 [ 509.391961][T12509] ? anon_vma_name+0x4c/0x70 [ 509.396407][T12509] dup_mmap+0x750/0xea0 [ 509.400472][T12509] ? __delayed_free_task+0x20/0x20 [ 509.405416][T12509] ? mm_init+0x807/0x960 [ 509.409495][T12509] dup_mm+0x91/0x330 [ 509.413234][T12509] copy_mm+0x108/0x1b0 [ 509.417217][T12509] copy_process+0x1295/0x3250 [ 509.421731][T12509] ? check_stack_object+0xf7/0x130 [ 509.426689][T12509] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 509.431626][T12509] ? copy_clone_args_from_user+0x6cf/0x790 [ 509.437354][T12509] kernel_clone+0x22d/0x990 [ 509.441804][T12509] ? dup_mmap+0xea0/0xea0 [ 509.445974][T12509] ? create_io_thread+0x1e0/0x1e0 [ 509.451007][T12509] ? file_end_write+0x1b0/0x1b0 [ 509.455700][T12509] __x64_sys_clone3+0x375/0x3a0 [ 509.460376][T12509] ? __ia32_sys_clone+0x300/0x300 [ 509.465413][T12509] ? ksys_write+0x25f/0x2c0 [ 509.469749][T12509] ? debug_smp_processor_id+0x17/0x20 [ 509.474964][T12509] do_syscall_64+0x44/0xd0 [ 509.479656][T12509] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 509.485368][T12509] RIP: 0033:0x7feb5e60c0c9 [ 509.489627][T12509] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 509.509175][T12509] RSP: 002b:00007feb5d37f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 23:12:51 executing program 2: syz_clone3(&(0x7f0000000b40)={0x1000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 90) 23:12:51 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="00120000", @ANYRES16=r0, @ANYBLOB="00082dbd7000fedbdf255d0000000c00990000000000280000000800a50001000000"], 0x28}, 0x1, 0x0, 0x0, 0x40888}, 0x20008004) syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="00120000", @ANYRES16=r0, @ANYBLOB="00082dbd7000fedbdf255d0000000c00990000000000280000000800a50001000000"], 0x28}, 0x1, 0x0, 0x0, 0x40888}, 0x20008004) (async) syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) 23:12:51 executing program 1: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r0, 0xffffffffffffffff, 0x4}, 0x48) r1 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r1}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@delneigh={0x38, 0x1d, 0x400, 0x70bd2c, 0x25dfdbfc, {0x7, 0x0, 0x0, r0, 0x2, 0x9, 0x9}, [@NDA_LINK_NETNSID={0x8, 0xa, 0x9}, @NDA_CACHEINFO={0x14, 0x3, {0x40, 0x0, 0x7, 0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040800}, 0x4000) socket(0x2c, 0x5, 0x201) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00'}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r0, 0xffffffffffffffff, 0x4}, 0x48) (async) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r1}, 0x80) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@delneigh={0x38, 0x1d, 0x400, 0x70bd2c, 0x25dfdbfc, {0x7, 0x0, 0x0, r0, 0x2, 0x9, 0x9}, [@NDA_LINK_NETNSID={0x8, 0xa, 0x9}, @NDA_CACHEINFO={0x14, 0x3, {0x40, 0x0, 0x7, 0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040800}, 0x4000) (async) socket(0x2c, 0x5, 0x201) (async) [ 509.517432][T12509] RAX: ffffffffffffffda RBX: 00007feb5e72bf80 RCX: 00007feb5e60c0c9 [ 509.525228][T12509] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007feb5d37f050 [ 509.533219][T12509] RBP: 00007feb5d37f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 509.541023][T12509] R10: 00007feb5d37f050 R11: 0000000000000246 R12: 0000000000000058 [ 509.548841][T12509] R13: 00007ffc843a962f R14: 00007feb5d37f300 R15: 0000000000022000 [ 509.556811][T12509] 23:12:51 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="00120000", @ANYRES16=r0, @ANYBLOB="00082dbd7000fedbdf255d0000000c00990000000000280000000800a50001000000"], 0x28}, 0x1, 0x0, 0x0, 0x40888}, 0x20008004) syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:12:51 executing program 0: r0 = syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f0000000200)={0x1000200, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2f}, &(0x7f00000000c0)=""/22, 0x16, &(0x7f0000000100)=""/150, &(0x7f00000001c0)=[r0, r0], 0x2}, 0x58) syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f0000000200)={0x1000200, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2f}, &(0x7f00000000c0)=""/22, 0x16, &(0x7f0000000100)=""/150, &(0x7f00000001c0)=[r0, r0], 0x2}, 0x58) (async) 23:12:51 executing program 4: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000000)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000200)={"da79e495dc7b869e1954e78b2e141987", r0, r1, {0x2a, 0x7}, {0x61, 0x2}, 0xdb2, [0x5, 0x5, 0xfff, 0x3, 0xffffffffffffffff, 0x1, 0x3, 0x2, 0x3ff, 0x80, 0x7, 0x7fffffffffffffff, 0x6, 0x6, 0x7, 0x9]}) 23:12:51 executing program 5: request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='\x00', 0x0) syz_clone3(&(0x7f0000000b40)={0x48a80400, 0x0, 0x0, 0x0, {0x35}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:12:51 executing program 0: syz_clone3(&(0x7f0000000000)={0x103000, 0x0, 0x0, 0x0, {0x1b}, &(0x7f0000000080)=""/6, 0x6, 0x0, 0x0}, 0x58) 23:12:51 executing program 4: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000000)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000200)={"da79e495dc7b869e1954e78b2e141987", r0, r1, {0x2a, 0x7}, {0x61, 0x2}, 0xdb2, [0x5, 0x5, 0xfff, 0x3, 0xffffffffffffffff, 0x1, 0x3, 0x2, 0x3ff, 0x80, 0x7, 0x7fffffffffffffff, 0x6, 0x6, 0x7, 0x9]}) 23:12:51 executing program 0: syz_clone3(&(0x7f0000000000)={0x103000, 0x0, 0x0, 0x0, {0x1b}, &(0x7f0000000080)=""/6, 0x6, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f0000000000)={0x103000, 0x0, 0x0, 0x0, {0x1b}, &(0x7f0000000080)=""/6, 0x6, 0x0, 0x0}, 0x58) (async) 23:12:51 executing program 4: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000000)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000200)={"da79e495dc7b869e1954e78b2e141987", r0, r1, {0x2a, 0x7}, {0x61, 0x2}, 0xdb2, [0x5, 0x5, 0xfff, 0x3, 0xffffffffffffffff, 0x1, 0x3, 0x2, 0x3ff, 0x80, 0x7, 0x7fffffffffffffff, 0x6, 0x6, 0x7, 0x9]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000000)) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000200)={"da79e495dc7b869e1954e78b2e141987", r0, r1, {0x2a, 0x7}, {0x61, 0x2}, 0xdb2, [0x5, 0x5, 0xfff, 0x3, 0xffffffffffffffff, 0x1, 0x3, 0x2, 0x3ff, 0x80, 0x7, 0x7fffffffffffffff, 0x6, 0x6, 0x7, 0x9]}) (async) [ 509.632609][T12546] FAULT_INJECTION: forcing a failure. [ 509.632609][T12546] name failslab, interval 1, probability 0, space 0, times 0 [ 509.688347][T12546] CPU: 1 PID: 12546 Comm: syz-executor.2 Tainted: G B W 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 509.700077][T12546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 509.709970][T12546] Call Trace: [ 509.713098][T12546] [ 509.715955][T12546] dump_stack_lvl+0x151/0x1b7 [ 509.720478][T12546] ? bfq_pos_tree_add_move+0x43e/0x43e [ 509.725764][T12546] ? preempt_count_add+0x90/0x1a0 [ 509.730626][T12546] dump_stack+0x15/0x17 [ 509.734620][T12546] should_fail+0x3c0/0x510 [ 509.738871][T12546] __should_failslab+0x9f/0xe0 [ 509.743472][T12546] should_failslab+0x9/0x20 [ 509.747809][T12546] kmem_cache_alloc+0x4f/0x2f0 [ 509.753112][T12546] ? copy_thread+0x353/0x750 [ 509.757536][T12546] ? alloc_pid+0x9c/0xad0 [ 509.761791][T12546] alloc_pid+0x9c/0xad0 [ 509.765791][T12546] copy_process+0x1658/0x3250 [ 509.770389][T12546] ? check_stack_object+0xf7/0x130 [ 509.775331][T12546] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 509.780277][T12546] ? copy_clone_args_from_user+0x6cf/0x790 [ 509.786097][T12546] kernel_clone+0x22d/0x990 [ 509.790433][T12546] ? dup_mmap+0xea0/0xea0 [ 509.794609][T12546] ? create_io_thread+0x1e0/0x1e0 [ 509.799463][T12546] ? file_end_write+0x1b0/0x1b0 [ 509.804154][T12546] __x64_sys_clone3+0x375/0x3a0 [ 509.808835][T12546] ? __ia32_sys_clone+0x300/0x300 [ 509.813705][T12546] ? ksys_write+0x25f/0x2c0 [ 509.818045][T12546] ? debug_smp_processor_id+0x17/0x20 [ 509.823263][T12546] do_syscall_64+0x44/0xd0 [ 509.827529][T12546] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 509.833223][T12546] RIP: 0033:0x7feb5e60c0c9 [ 509.837486][T12546] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 509.857004][T12546] RSP: 002b:00007feb5d37f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 509.865343][T12546] RAX: ffffffffffffffda RBX: 00007feb5e72bf80 RCX: 00007feb5e60c0c9 [ 509.873240][T12546] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007feb5d37f050 [ 509.881050][T12546] RBP: 00007feb5d37f1d0 R08: 0000000000000000 R09: 0000000000000058 23:12:52 executing program 5: request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='\x00', 0x0) syz_clone3(&(0x7f0000000b40)={0x48a80400, 0x0, 0x0, 0x0, {0x35}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:12:52 executing program 2: syz_clone3(&(0x7f0000000b40)={0x1000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 91) 23:12:52 executing program 4: mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000, 0x30, 0xffffffffffffffff, 0x10000000) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/typec', 0x80, 0x12) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, 0x0) syz_io_uring_setup(0x7899, &(0x7f0000000200)={0x0, 0x906d, 0x10, 0x2, 0x28a, 0x0, r1}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, &(0x7f0000000080)="09ed2f8ea79bc9b7d4d3dc339f96d2128bf292a053997f7a21960f1d847175079b35c454b55d1a94eeb3edff3ceb58252c74748cd57c6ace2c68384cd7013a1bbd2853e19cd273a270508a40203fc74162e01a3d2b4b9b741618dd4f11b6e77c917728dfcede48ef318fbc2c3e774b28f010adeac4bf51c979d2afa36d0e1f3e21b9d2b5612210bd4f2df681944dbef698f42c3a3f0d8fbb1390b03d2fcbdbce6307b27de31b984322422c656121b0", &(0x7f00000001c0)=""/45}, 0x20) 23:12:52 executing program 1: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r0, 0xffffffffffffffff, 0x4}, 0x48) r1 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r1}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@delneigh={0x38, 0x1d, 0x400, 0x70bd2c, 0x25dfdbfc, {0x7, 0x0, 0x0, r0, 0x2, 0x9, 0x9}, [@NDA_LINK_NETNSID={0x8, 0xa, 0x9}, @NDA_CACHEINFO={0x14, 0x3, {0x40, 0x0, 0x7, 0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040800}, 0x4000) socket(0x2c, 0x5, 0x201) 23:12:52 executing program 5: request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='\x00', 0x0) syz_clone3(&(0x7f0000000b40)={0x48a80400, 0x0, 0x0, 0x0, {0x35}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:12:52 executing program 0: syz_clone3(&(0x7f0000000000)={0x103000, 0x0, 0x0, 0x0, {0x1b}, &(0x7f0000000080)=""/6, 0x6, 0x0, 0x0}, 0x58) [ 509.888861][T12546] R10: 00007feb5d37f050 R11: 0000000000000246 R12: 0000000000000058 [ 509.898407][T12546] R13: 00007ffc843a962f R14: 00007feb5d37f300 R15: 0000000000022000 [ 509.906236][T12546] 23:12:52 executing program 0: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) 23:12:52 executing program 4: mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000, 0x30, 0xffffffffffffffff, 0x10000000) (async) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/typec', 0x80, 0x12) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, 0x0) (async, rerun: 64) syz_io_uring_setup(0x7899, &(0x7f0000000200)={0x0, 0x906d, 0x10, 0x2, 0x28a, 0x0, r1}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) (async, rerun: 64) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, &(0x7f0000000080)="09ed2f8ea79bc9b7d4d3dc339f96d2128bf292a053997f7a21960f1d847175079b35c454b55d1a94eeb3edff3ceb58252c74748cd57c6ace2c68384cd7013a1bbd2853e19cd273a270508a40203fc74162e01a3d2b4b9b741618dd4f11b6e77c917728dfcede48ef318fbc2c3e774b28f010adeac4bf51c979d2afa36d0e1f3e21b9d2b5612210bd4f2df681944dbef698f42c3a3f0d8fbb1390b03d2fcbdbce6307b27de31b984322422c656121b0", &(0x7f00000001c0)=""/45}, 0x20) [ 509.963679][T12572] FAULT_INJECTION: forcing a failure. [ 509.963679][T12572] name failslab, interval 1, probability 0, space 0, times 0 [ 509.989621][T12572] CPU: 1 PID: 12572 Comm: syz-executor.2 Tainted: G B W 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 510.001087][T12572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 510.011156][T12572] Call Trace: [ 510.014281][T12572] [ 510.017087][T12572] dump_stack_lvl+0x151/0x1b7 [ 510.021576][T12572] ? bfq_pos_tree_add_move+0x43e/0x43e [ 510.027817][T12572] ? preempt_count_add+0x90/0x1a0 [ 510.032679][T12572] dump_stack+0x15/0x17 [ 510.036669][T12572] should_fail+0x3c0/0x510 [ 510.040934][T12572] __should_failslab+0x9f/0xe0 [ 510.045534][T12572] should_failslab+0x9/0x20 [ 510.049876][T12572] kmem_cache_alloc+0x4f/0x2f0 [ 510.054462][T12572] ? copy_thread+0x353/0x750 [ 510.058889][T12572] ? alloc_pid+0x9c/0xad0 [ 510.063062][T12572] alloc_pid+0x9c/0xad0 [ 510.067136][T12572] copy_process+0x1658/0x3250 [ 510.071647][T12572] ? check_stack_object+0xf7/0x130 [ 510.076596][T12572] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 510.081541][T12572] ? copy_clone_args_from_user+0x6cf/0x790 [ 510.087193][T12572] kernel_clone+0x22d/0x990 [ 510.091534][T12572] ? dup_mmap+0xea0/0xea0 [ 510.095705][T12572] ? create_io_thread+0x1e0/0x1e0 [ 510.100550][T12572] ? file_end_write+0x1b0/0x1b0 [ 510.105257][T12572] __x64_sys_clone3+0x375/0x3a0 [ 510.109929][T12572] ? __ia32_sys_clone+0x300/0x300 [ 510.114796][T12572] ? ksys_write+0x25f/0x2c0 [ 510.119219][T12572] ? debug_smp_processor_id+0x17/0x20 [ 510.124680][T12572] do_syscall_64+0x44/0xd0 [ 510.128934][T12572] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 510.134660][T12572] RIP: 0033:0x7feb5e60c0c9 [ 510.138920][T12572] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 23:12:52 executing program 5: syz_clone3(&(0x7f0000000b40)={0x48a80400, 0x0, 0x0, 0x0, {0x35}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:12:52 executing program 0: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) (async) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) (async) openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) 23:12:52 executing program 4: mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000, 0x30, 0xffffffffffffffff, 0x10000000) (async) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/typec', 0x80, 0x12) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, 0x0) (async) syz_io_uring_setup(0x7899, &(0x7f0000000200)={0x0, 0x906d, 0x10, 0x2, 0x28a, 0x0, r1}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000280)) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, &(0x7f0000000080)="09ed2f8ea79bc9b7d4d3dc339f96d2128bf292a053997f7a21960f1d847175079b35c454b55d1a94eeb3edff3ceb58252c74748cd57c6ace2c68384cd7013a1bbd2853e19cd273a270508a40203fc74162e01a3d2b4b9b741618dd4f11b6e77c917728dfcede48ef318fbc2c3e774b28f010adeac4bf51c979d2afa36d0e1f3e21b9d2b5612210bd4f2df681944dbef698f42c3a3f0d8fbb1390b03d2fcbdbce6307b27de31b984322422c656121b0", &(0x7f00000001c0)=""/45}, 0x20) 23:12:52 executing program 0: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) (async) openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) (async) [ 510.158616][T12572] RSP: 002b:00007feb5d37f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 510.166876][T12572] RAX: ffffffffffffffda RBX: 00007feb5e72bf80 RCX: 00007feb5e60c0c9 [ 510.174672][T12572] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007feb5d37f050 [ 510.182568][T12572] RBP: 00007feb5d37f1d0 R08: 0000000000000000 R09: 0000000000000058 [ 510.190382][T12572] R10: 00007feb5d37f050 R11: 0000000000000246 R12: 0000000000000058 [ 510.198196][T12572] R13: 00007ffc843a962f R14: 00007feb5d37f300 R15: 0000000000022000 [ 510.206008][T12572] 23:12:52 executing program 2: syz_clone3(&(0x7f0000000b40)={0x1000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 92) 23:12:52 executing program 1: r0 = socket(0x2c, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/hidp', 0x0, 0x85) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) sendmsg$NL80211_CMD_LEAVE_IBSS(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r5, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0xd}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4004840}, 0x20) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYRES64=r3], 0x38}, 0x1, 0x0, 0x0, 0x20000008}, 0x40000) [ 510.238299][T12594] FAULT_INJECTION: forcing a failure. [ 510.238299][T12594] name failslab, interval 1, probability 0, space 0, times 0 [ 510.259589][T12594] CPU: 1 PID: 12594 Comm: syz-executor.2 Tainted: G B W 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 510.271145][T12594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 510.281038][T12594] Call Trace: [ 510.284162][T12594] [ 510.287028][T12594] dump_stack_lvl+0x151/0x1b7 [ 510.291539][T12594] ? bfq_pos_tree_add_move+0x43e/0x43e [ 510.296844][T12594] dump_stack+0x15/0x17 [ 510.301608][T12594] should_fail+0x3c0/0x510 [ 510.305858][T12594] __should_failslab+0x9f/0xe0 [ 510.310460][T12594] should_failslab+0x9/0x20 [ 510.314796][T12594] kmem_cache_alloc+0x4f/0x2f0 [ 510.319399][T12594] ? anon_vma_clone+0xa1/0x4f0 [ 510.324001][T12594] anon_vma_clone+0xa1/0x4f0 [ 510.328512][T12594] anon_vma_fork+0x91/0x4f0 [ 510.332852][T12594] ? anon_vma_name+0x4c/0x70 [ 510.337279][T12594] dup_mmap+0x750/0xea0 [ 510.341274][T12594] ? __delayed_free_task+0x20/0x20 [ 510.346222][T12594] ? mm_init+0x807/0x960 [ 510.350732][T12594] dup_mm+0x91/0x330 [ 510.354473][T12594] copy_mm+0x108/0x1b0 [ 510.358369][T12594] copy_process+0x1295/0x3250 [ 510.362883][T12594] ? check_stack_object+0xf7/0x130 [ 510.367830][T12594] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 510.372776][T12594] ? copy_clone_args_from_user+0x6cf/0x790 [ 510.378418][T12594] kernel_clone+0x22d/0x990 [ 510.382759][T12594] ? dup_mmap+0xea0/0xea0 [ 510.386925][T12594] ? create_io_thread+0x1e0/0x1e0 [ 510.391784][T12594] ? file_end_write+0x1b0/0x1b0 [ 510.396493][T12594] __x64_sys_clone3+0x375/0x3a0 [ 510.401211][T12594] ? __ia32_sys_clone+0x300/0x300 [ 510.406018][T12594] ? ksys_write+0x25f/0x2c0 [ 510.410354][T12594] ? debug_smp_processor_id+0x17/0x20 [ 510.415649][T12594] do_syscall_64+0x44/0xd0 [ 510.419902][T12594] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 510.425649][T12594] RIP: 0033:0x7feb5e60c0c9 [ 510.429981][T12594] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 510.450370][T12594] RSP: 002b:00007feb5d37f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 510.458630][T12594] RAX: ffffffffffffffda RBX: 00007feb5e72bf80 RCX: 00007feb5e60c0c9 [ 510.466469][T12594] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007feb5d37f050 [ 510.474238][T12594] RBP: 00007feb5d37f1d0 R08: 0000000000000000 R09: 0000000000000058 23:12:52 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="34000000cd5020afbddcf661f04910656caebcd363868f0de73a0c7069912468c4e143178fbc10e85111c70dc0b24146bdc0dd0479af9b41d6c99f1123a3d74cbf7aceb2f35f4fb78a40ae1a069f166dc63cb9b313", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fedbdf255d00000008000300", @ANYRES32=0x0, @ANYRES16=r0], 0x34}}, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x0, 0x8, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2dc}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xf7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x8040) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340), 0x400000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000840)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="c7"], 0x20}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r5, 0xffffffffffffffff, 0x4}, 0x48) r7 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r5, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r7}, 0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r8, 0xffffffffffffffff, 0x4}, 0x48) r9 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000840)=ANY=[@ANYBLOB="183700000200000000000000000020000054ff0f09000000181b0000ab28ea38ac15d12b64792c5b3e1368bcc1c2073485100b4cccb3158ef4e1cc1ef65113fcbffec3921f027f7644724df5bad2bf4405e18f2b2790ea0f562e87bf6740806f7b12aee603416312e26d9336f5bbd4af1eb42e72efdd5066739554644b1edc026145dea64b8996b480b944960000000000000000", @ANYRES32, @ANYBLOB="0000000000000000185b00000300000000000000000000001837000000000000000000000000000018260000", @ANYRES32, @ANYBLOB="000000001000000018200000", @ANYRES32, @ANYBLOB="00000000ffffff7f"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r8, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r9}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r0, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000003c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000000800)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xec, r1, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x20000090}, 0x40004) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth0_to_bridge\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r1, 0x98b, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x14004}, 0x4000080) syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:12:52 executing program 5: syz_clone3(0x0, 0x0) 23:12:52 executing program 5: syz_clone3(0x0, 0x0) 23:12:52 executing program 5: syz_clone3(0x0, 0x0) 23:12:52 executing program 5: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {0x35}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:12:52 executing program 5: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {0x35}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:12:52 executing program 5: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {0x35}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:12:52 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) (async) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="34000000cd5020afbddcf661f04910656caebcd363868f0de73a0c7069912468c4e143178fbc10e85111c70dc0b24146bdc0dd0479af9b41d6c99f1123a3d74cbf7aceb2f35f4fb78a40ae1a069f166dc63cb9b313", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fedbdf255d00000008000300", @ANYRES32=0x0, @ANYRES16=r0], 0x34}}, 0x4000) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x0, 0x8, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2dc}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xf7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x8040) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340), 0x400000, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000840)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="c7"], 0x20}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r5, 0xffffffffffffffff, 0x4}, 0x48) (async) r7 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r5, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r7}, 0x80) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r8, 0xffffffffffffffff, 0x4}, 0x48) (async) r9 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000840)=ANY=[@ANYBLOB="183700000200000000000000000020000054ff0f09000000181b0000ab28ea38ac15d12b64792c5b3e1368bcc1c2073485100b4cccb3158ef4e1cc1ef65113fcbffec3921f027f7644724df5bad2bf4405e18f2b2790ea0f562e87bf6740806f7b12aee603416312e26d9336f5bbd4af1eb42e72efdd5066739554644b1edc026145dea64b8996b480b944960000000000000000", @ANYRES32, @ANYBLOB="0000000000000000185b00000300000000000000000000001837000000000000000000000000000018260000", @ANYRES32, @ANYBLOB="000000001000000018200000", @ANYRES32, @ANYBLOB="00000000ffffff7f"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r8, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r9}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r0, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000003c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000000800)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xec, r1, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x20000090}, 0x40004) (async) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth0_to_bridge\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r1, 0x98b, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x14004}, 0x4000080) (async) syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:12:52 executing program 5: syz_clone3(&(0x7f0000000b40)={0x48a80400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:12:52 executing program 0: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) openat$cgroup(r0, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) 23:12:52 executing program 2: syz_clone3(&(0x7f0000000b40)={0x1000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 93) 23:12:52 executing program 1: r0 = socket(0x2c, 0x0, 0x0) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/hidp', 0x0, 0x85) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) sendmsg$NL80211_CMD_LEAVE_IBSS(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r5, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0xd}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4004840}, 0x20) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYRES64=r3], 0x38}, 0x1, 0x0, 0x0, 0x20000008}, 0x40000) 23:12:52 executing program 5: syz_clone3(&(0x7f0000000000)={0x103000, 0x0, 0x0, 0x0, {0x1b}, &(0x7f0000000080)=""/6, 0x6, 0x0, 0x0}, 0x58) 23:12:52 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) (async) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="34000000cd5020afbddcf661f04910656caebcd363868f0de73a0c7069912468c4e143178fbc10e85111c70dc0b24146bdc0dd0479af9b41d6c99f1123a3d74cbf7aceb2f35f4fb78a40ae1a069f166dc63cb9b313", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fedbdf255d00000008000300", @ANYRES32=0x0, @ANYRES16=r0], 0x34}}, 0x4000) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x0, 0x8, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2dc}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xf7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x8040) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340), 0x400000, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000840)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="c7"], 0x20}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r5, 0xffffffffffffffff, 0x4}, 0x48) (async, rerun: 32) r7 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @generic={0x0, 0x4, 0x5, 0xfff, 0x9}, @map_fd={0x18, 0xb}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r5, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r7}, 0x80) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x10, 0x1, 0x4, '\x00', r8, 0xffffffffffffffff, 0x4}, 0x48) (async) r9 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_socket_sendmsg\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000840)=ANY=[@ANYBLOB="183700000200000000000000000020000054ff0f09000000181b0000ab28ea38ac15d12b64792c5b3e1368bcc1c2073485100b4cccb3158ef4e1cc1ef65113fcbffec3921f027f7644724df5bad2bf4405e18f2b2790ea0f562e87bf6740806f7b12aee603416312e26d9336f5bbd4af1eb42e72efdd5066739554644b1edc026145dea64b8996b480b944960000000000000000", @ANYRES32, @ANYBLOB="0000000000000000185b00000300000000000000000000001837000000000000000000000000000018260000", @ANYRES32, @ANYBLOB="000000001000000018200000", @ANYRES32, @ANYBLOB="00000000ffffff7f"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x3d, &(0x7f00000001c0)=""/61, 0x41100, 0x8, '\x00', r8, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x5}, 0x10, r9}, 0x80) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r0, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000003c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000000800)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xec, r1, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x20000090}, 0x40004) (async) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth0_to_bridge\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r1, 0x98b, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x14004}, 0x4000080) syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 510.482049][T12594] R10: 00007feb5d37f050 R11: 0000000000000246 R12: 0000000000000058 [ 510.489858][T12594] R13: 00007ffc843a962f R14: 00007feb5d37f300 R15: 0000000000022000 [ 510.497780][T12594] 23:12:52 executing program 0: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) (async) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) openat$cgroup(r0, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) 23:12:52 executing program 1: r0 = socket(0x2c, 0x0, 0x0) (async, rerun: 32) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/hidp', 0x0, 0x85) (rerun: 32) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async, rerun: 32) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) (rerun: 32) sendmsg$NL80211_CMD_LEAVE_IBSS(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r5, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0xd}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4004840}, 0x20) (async, rerun: 32) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYRES64=r3], 0x38}, 0x1, 0x0, 0x0, 0x20000008}, 0x40000) 23:12:52 executing program 5: syz_clone3(&(0x7f0000000000)={0x103000, 0x0, 0x0, 0x0, {0x1b}, &(0x7f0000000080)=""/6, 0x6, 0x0, 0x0}, 0x58) 23:12:52 executing program 0: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) openat$cgroup(r0, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) 23:12:52 executing program 0: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'rose0\x00'}) 23:12:52 executing program 1: socket(0x2c, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wg1\x00'}) 23:12:52 executing program 5: syz_clone3(&(0x7f0000000000)={0x103000, 0x0, 0x0, 0x0, {0x1b}, &(0x7f0000000080)=""/6, 0x6, 0x0, 0x0}, 0x58) [ 510.571967][T12640] FAULT_INJECTION: forcing a failure. [ 510.571967][T12640] name fail_usercopy, interval 1, probability 0, space 0, times 0 23:12:52 executing program 0: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) (async) socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'rose0\x00'}) [ 510.640676][T12640] CPU: 1 PID: 12640 Comm: syz-executor.2 Tainted: G B W 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 510.652373][T12640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 510.662528][T12640] Call Trace: [ 510.665655][T12640] [ 510.668427][T12640] dump_stack_lvl+0x151/0x1b7 [ 510.672944][T12640] ? bfq_pos_tree_add_move+0x43e/0x43e [ 510.678235][T12640] dump_stack+0x15/0x17 [ 510.682229][T12640] should_fail+0x3c0/0x510 [ 510.686485][T12640] should_fail_usercopy+0x1a/0x20 [ 510.691435][T12640] _copy_to_user+0x20/0x90 [ 510.695682][T12640] simple_read_from_buffer+0xdd/0x160 [ 510.700891][T12640] proc_fail_nth_read+0x1af/0x220 [ 510.705760][T12640] ? proc_fault_inject_write+0x3a0/0x3a0 [ 510.711217][T12640] ? security_file_permission+0x497/0x5f0 [ 510.716772][T12640] ? proc_fault_inject_write+0x3a0/0x3a0 [ 510.722415][T12640] vfs_read+0x299/0xd80 [ 510.726424][T12640] ? kernel_read+0x1f0/0x1f0 [ 510.731097][T12640] ? __kasan_check_write+0x14/0x20 [ 510.736047][T12640] ? mutex_lock+0xb6/0x130 [ 510.740292][T12640] ? wait_for_completion_killable_timeout+0x10/0x10 [ 510.746810][T12640] ? __fdget_pos+0x26d/0x310 [ 510.751316][T12640] ? ksys_read+0x77/0x2c0 [ 510.755483][T12640] ksys_read+0x198/0x2c0 [ 510.759565][T12640] ? vfs_write+0x1050/0x1050 [ 510.763988][T12640] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 510.769892][T12640] __x64_sys_read+0x7b/0x90 [ 510.774229][T12640] do_syscall_64+0x44/0xd0 [ 510.778485][T12640] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 510.784215][T12640] RIP: 0033:0x7feb5e5bdeec [ 510.788462][T12640] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 510.807905][T12640] RSP: 002b:00007feb5d37f160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 510.816149][T12640] RAX: ffffffffffffffda RBX: 00007feb5e72bf80 RCX: 00007feb5e5bdeec [ 510.824071][T12640] RDX: 000000000000000f RSI: 00007feb5d37f1e0 RDI: 0000000000000003 [ 510.831881][T12640] RBP: 00007feb5d37f1d0 R08: 0000000000000000 R09: 0000000000000058 23:12:53 executing program 2: syz_clone3(&(0x7f0000000b40)={0x1000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:12:53 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) connect$can_bcm(r0, &(0x7f0000000000), 0x10) syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:12:53 executing program 5: syz_clone3(0x0, 0x0) 23:12:53 executing program 0: syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'rose0\x00'}) syz_clone3(&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000780), 0x8000001000000, 0x0, 0x0}, 0x58) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'rose0\x00'}) (async) 23:12:53 executing program 1: socket(0x2c, 0x0, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wg1\x00'}) [ 510.839766][T12640] R10: 00007feb5d37f050 R11: 0000000000000246 R12: 0000000000000002 [ 510.847624][T12640] R13: 00007ffc843a962f R14: 00007feb5d37f300 R15: 0000000000022000 [ 510.855399][T12640] 23:12:53 executing program 5: syz_clone3(0x0, 0x0) 23:12:53 executing program 1: socket(0x2c, 0x0, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wg1\x00'}) 23:12:53 executing program 1: r0 = socket(0x2c, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'team0\x00'}) socket(0x1a, 0xa, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) socket(0x8, 0x9, 0x8009410) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCPKT(r1, 0x5420, 0x0) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000000)={0x0, "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"}) 23:12:53 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) connect$can_bcm(r0, &(0x7f0000000000), 0x10) syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) (async) connect$can_bcm(r0, &(0x7f0000000000), 0x10) (async) syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) 23:12:53 executing program 5: syz_clone3(0x0, 0x0) [ 510.964431][ T30] audit: type=1400 audit(1673219573.269:139): avc: denied { create } for pid=12694 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 23:12:53 executing program 5: syz_clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {0x1b}, &(0x7f0000000080)=""/6, 0x6, 0x0, 0x0}, 0x58) 23:12:53 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop7', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) (async) connect$can_bcm(r0, &(0x7f0000000000), 0x10) syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:12:53 executing program 2: syz_clone3(&(0x7f0000000b40)={0x40000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:12:53 executing program 5: syz_clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {0x1b}, &(0x7f0000000080)=""/6, 0x6, 0x0, 0x0}, 0x58) 23:12:53 executing program 1: r0 = socket(0x2c, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'team0\x00'}) socket(0x1a, 0xa, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) socket(0x8, 0x9, 0x8009410) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCPKT(r1, 0x5420, 0x0) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000000)={0x0, "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"}) socket(0x2c, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'team0\x00'}) (async) socket(0x1a, 0xa, 0x4) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) socket(0x8, 0x9, 0x8009410) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TIOCPKT(r1, 0x5420, 0x0) (async) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000000)={0x0, "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"}) (async) [ 511.017719][ T30] audit: type=1400 audit(1673219573.299:140): avc: denied { create } for pid=12694 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 23:12:53 executing program 2: syz_clone3(&(0x7f0000000b40)={0x140200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:12:53 executing program 4: ptrace$setsig(0x4203, 0xffffffffffffffff, 0xe, &(0x7f0000000000)={0x40, 0x80000000, 0x7}) syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:12:53 executing program 4: ptrace$setsig(0x4203, 0xffffffffffffffff, 0xe, &(0x7f0000000000)={0x40, 0x80000000, 0x7}) syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setsig(0x4203, 0xffffffffffffffff, 0xe, &(0x7f0000000000)={0x40, 0x80000000, 0x7}) (async) syz_clone3(&(0x7f0000000b40)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) [ 511.139842][T12698] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 511.151415][T12698] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 511.159734][T12698] CPU: 1 PID: 12698 Comm: syz-executor.4 Tainted: G B W 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 511.171459][T12698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 511.181356][T12698] RIP: 0010:__rb_erase_color+0x208/0xb60 [ 511.186808][T12698] Code: 00 00 00 00 fc ff df 41 80 3c 07 00 74 08 48 89 df e8 4c e6 2c ff 4c 8b 33 4d 89 f4 49 c1 ec 03 48 b8 00 00 00 00 00 fc ff df <41> 80 3c 04 00 74 08 4c 89 f7 e8 29 e6 2c ff 41 f6 06 01 48 89 5d [ 511.206510][T12698] RSP: 0018:ffffc900079df988 EFLAGS: 00010246 [ 511.212410][T12698] RAX: dffffc0000000000 RBX: ffff888126f92ad0 RCX: ffff888119da8000 [ 511.221009][T12698] RDX: ffffffff81a72020 RSI: ffff88810b16a080 RDI: ffff888126f92ac0 [ 511.228913][T12698] RBP: ffffc900079df9e8 R08: ffffffff81a701b9 R09: ffffed102162d414 [ 511.236802][T12698] R10: ffffed102162d414 R11: 1ffff1102162d413 R12: 0000000000000000 [ 511.244703][T12698] R13: ffff888126f92ac0 R14: 0000000000000000 R15: 1ffff11024df255a [ 511.252514][T12698] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 511.261281][T12698] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 511.267706][T12698] CR2: 00007f233c3d5988 CR3: 0000000130e0e000 CR4: 00000000003506a0 [ 511.275521][T12698] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 511.283368][T12698] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 511.291142][T12698] Call Trace: [ 511.294258][T12698] [ 511.297040][T12698] ? anon_vma_interval_tree_iter_next+0x3b0/0x3b0 [ 511.303285][T12698] ? __kasan_check_write+0x14/0x20 [ 511.308233][T12698] ? down_write+0xdd/0x140 [ 511.312499][T12698] vma_interval_tree_remove+0xa66/0xa80 [ 511.318477][T12698] unlink_file_vma+0xd9/0xf0 [ 511.322909][T12698] free_pgtables+0x13b/0x210 [ 511.327506][T12698] exit_mmap+0x466/0x7a0 [ 511.331586][T12698] ? exit_aio+0x270/0x3b0 [ 511.335747][T12698] ? vm_brk+0x30/0x30 [ 511.339658][T12698] ? mutex_unlock+0xa2/0x110 [ 511.344435][T12698] ? uprobe_clear_state+0x2c2/0x320 [ 511.349549][T12698] __mmput+0x95/0x300 [ 511.353370][T12698] mmput+0x50/0x60 [ 511.356936][T12698] exit_mm+0x50d/0x760 [ 511.361525][T12698] ? exit_itimers+0x694/0x6e0 [ 511.366128][T12698] ? do_exit+0x24d0/0x24d0 [ 511.370384][T12698] ? taskstats_exit+0x3a0/0xa20 [ 511.375241][T12698] do_exit+0x63c/0x24d0 [ 511.379318][T12698] ? __kasan_check_write+0x14/0x20 [ 511.384359][T12698] ? fpregs_restore_userregs+0x1f0/0x3a0 [ 511.389836][T12698] ? get_task_struct+0x80/0x80 [ 511.394504][T12698] ? __x64_sys_clock_nanosleep+0x360/0x3f0 [ 511.400148][T12698] __x64_sys_exit+0x40/0x40 [ 511.404488][T12698] do_syscall_64+0x44/0xd0 [ 511.408753][T12698] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 511.414467][T12698] RIP: 0033:0x7f233c2b40c9 [ 511.418720][T12698] Code: Unable to access opcode bytes at RIP 0x7f233c2b409f. [ 511.426191][T12698] RSP: 002b:00007f233b027038 EFLAGS: 00000246 ORIG_RAX: 000000000000003c 23:12:53 executing program 2: syz_clone3(&(0x7f0000000b40)={0x1000002, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 511.434542][T12698] RAX: ffffffffffffffda RBX: 00007f233c3d3f80 RCX: 00007f233c2b40c9 [ 511.442413][T12698] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 511.450229][T12698] RBP: 00007f233c30fae9 R08: 0000000000000058 R09: 0000000000000058 [ 511.458209][T12698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000058 [ 511.466022][T12698] R13: 00007fffc2e0325f R14: 00007f233b027300 R15: 0000000000022000 [ 511.473950][T12698] [ 511.476804][T12698] Modules linked in: 23:12:53 executing program 1: r0 = socket(0x2c, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'team0\x00'}) (async) socket(0x1a, 0xa, 0x4) (async, rerun: 64) syz_open_dev$tty1(0xc, 0x4, 0x1) (rerun: 64) socket(0x8, 0x9, 0x8009410) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCPKT(r1, 0x5420, 0x0) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000000)={0x0, "a3b38294d1d3ac7145a0126266ef5a9cd30900000000000000d5a21f45c6eacdac39a5c2dee2f38d436fda7b7a3d16f4ef02fccf4f49522ecbe14e4eb8d0934e2a6dc92163ea4aa76ea3aba3fafe9085cece5023d931aa682eb117c78ecfd0cb49734d8bd4cdb40d589dd1a39b0ff9ee0034ed136ab20181817dbaf73df6564283b53356451f80ea6eda41a8afe7a500800000b1cb90ff51727e52d88cac0f9cfea67d408606504b36e9ad69f5ae3459ce7bd72b6d53e2ce0b40c2ea34bc81637d15b834fc4814c242a10e7212934f2e006c7dfe495422324b5bab93ac4118be135dd181000000000000001c89cc6e989867d9e9ed7d4a9e486745dc1f063cd336c03dde13941908daa5010000007498f5b87781ab8c6ef7e92bae24a48de323029b7a01ca501655ac123273cfc81ce74d82b9e9ccf1a7928692ce1ed55540bea4ea68d1cd16c0771a54c8e26da737b6581d5f439296fc11aad1578aedc515864d566104d1c8de24b54609fcdb4b682fd0d35461dc4be3d1d814f61f1b46a04d021a62e0676d2db2a9c604f1b88048502817bf413f3091020a346cb3c558b86d900b57aa6855c1ac2033bd0000453b7afd915a9892dc286a14ae815d5eb28fff0ac2b37c160146ecf9ee1f0d0a62ef41c62ddbd9faedb6d80eeb0d1516267f3ff20ec5017fbb26c5c8038a1437832e695d5ead8f66136353188acd347300"}) [ 511.491104][T12698] ---[ end trace 3866b3ca29631942 ]--- [ 511.504366][T12698] RIP: 0010:__rb_erase_color+0x208/0xb60 [ 511.533900][T12698] Code: 00 00 00 00 fc ff df 41 80 3c 07 00 74 08 48 89 df e8 4c e6 2c ff 4c 8b 33 4d 89 f4 49 c1 ec 03 48 b8 00 00 00 00 00 fc ff df <41> 80 3c 04 00 74 08 4c 89 f7 e8 29 e6 2c ff 41 f6 06 01 48 89 5d [ 511.611682][T12698] RSP: 0018:ffffc900079df988 EFLAGS: 00010246 [ 511.617769][T12698] RAX: dffffc0000000000 RBX: ffff888126f92ad0 RCX: ffff888119da8000 [ 511.645988][T12698] RDX: ffffffff81a72020 RSI: ffff88810b16a080 RDI: ffff888126f92ac0 [ 511.660613][T12698] RBP: ffffc900079df9e8 R08: ffffffff81a701b9 R09: ffffed102162d414 [ 511.676676][T12698] R10: ffffed102162d414 R11: 1ffff1102162d413 R12: 0000000000000000 [ 511.686252][T12698] R13: ffff888126f92ac0 R14: 0000000000000000 R15: 1ffff11024df255a [ 511.699177][T12698] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 511.723354][T12698] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 511.735060][T12698] CR2: 000000c0011d3000 CR3: 0000000131b07000 CR4: 00000000003506b0 [ 511.743189][T12698] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 511.751191][T12698] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 511.759057][T12698] Kernel panic - not syncing: Fatal exception [ 511.765061][T12698] Kernel Offset: disabled [ 511.769193][T12698] Rebooting in 86400 seconds..