(0x10, &(0x7f00000001c0)={@map=r8, 0x8, 0x1, 0x7, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000100), &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r10 = openat$cgroup(0xffffffffffffffff, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r10, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r11 = openat$cgroup_ro(r10, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r11, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r11}, 0x20) r12 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r11}, 0x8) recvmsg$unix(r12, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYRESHEX, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000802000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001400000071c8373eb1eefacb6f6e0000000100000097a3f4429b22145dc0d78935ce5c5a85fa73fda37d1c1e278a904cb0f5329f9e171408222f8a465c1650cd69c279a407aa32b152914161f916123f4b0a13d9eac11111923cb5a331d578a8f64f7621ca1bca0dd7abe1b6ca64588e520f5b17816bba4865f85232772976714aba6eeb965fee21dcad961e5f455b12174dd102", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x58}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1c, 0x6, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xbd1f, 0x0, 0x0, 0x0, 0x6}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x62}, @generic={0x0, 0x1, 0x9, 0x1ff, 0x81}]}, &(0x7f0000000280)='GPL\x00', 0x9, 0xdf, &(0x7f0000000380)=""/223, 0x41100, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0xc, 0x8, 0x75}, 0x10, 0x1f073, r12, 0x8, 0x0, &(0x7f0000000480)=[{0x0, 0x1, 0x2, 0x4}, {0x2, 0x2, 0x3, 0x6}, {0x1, 0x3, 0x8, 0x2}, {0x4, 0x5, 0x10, 0x9}, {0x5, 0x5, 0x0, 0x7}, {0x4, 0x5, 0x7, 0x6}, {0x3, 0x4, 0x0, 0x4}, {0x1, 0x4, 0x6, 0x7}], 0x10, 0x48}, 0x90) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r4, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r4}, 0x20) r13 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r4}, 0x8) recvmsg$unix(r13, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}]}, 0x10102) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r13, 0x4) 18:24:26 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, 0x0, 0x0) close(r1) 18:24:26 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) close(r1) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) 18:24:26 executing program 0: bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001540)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0)=0xffffffffffffffff, 0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002880)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0xffffffffffffffe0, &(0x7f0000001440)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/192, 0xc0}], 0x7, &(0x7f00000014c0)=""/15, 0xf}, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000001580), 0x8) recvmsg$unix(r1, &(0x7f0000002840)={&(0x7f00000015c0)=@abs, 0x6e, &(0x7f0000002740)=[{&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/215, 0xd7}], 0x2, &(0x7f0000002780)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x2042) 18:24:26 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40022140) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup(r2, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r3, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r4 = openat$cgroup_ro(r3, 0x0, 0x0, 0x0) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup(r5, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r6, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r7 = openat$cgroup_ro(r6, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r7, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r7}, 0x20) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r7}, 0x8) r9 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) openat$cgroup(r9, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup(r9, &(0x7f0000001640)='syz0\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r9, &(0x7f0000000200), 0x2, 0x0) recvmsg$unix(r8, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000810400920461f768ad067e6f1c002e00d2099cc7bc90e540e27a01980ac5ca098055601fac8f9e4a0a"], 0x58}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map=r8, 0x8, 0x1, 0x7, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000100), &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r10 = openat$cgroup(0xffffffffffffffff, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r10, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r11 = openat$cgroup_ro(r10, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r11, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r11}, 0x20) r12 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r11}, 0x8) recvmsg$unix(r12, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYRESHEX, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000802000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001400000071c8373eb1eefacb6f6e0000000100000097a3f4429b22145dc0d78935ce5c5a85fa73fda37d1c1e278a904cb0f5329f9e171408222f8a465c1650cd69c279a407aa32b152914161f916123f4b0a13d9eac11111923cb5a331d578a8f64f7621ca1bca0dd7abe1b6ca64588e520f5b17816bba4865f85232772976714aba6eeb965fee21dcad961e5f455b12174dd102", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x58}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1c, 0x6, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xbd1f, 0x0, 0x0, 0x0, 0x6}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x62}, @generic={0x0, 0x1, 0x9, 0x1ff, 0x81}]}, &(0x7f0000000280)='GPL\x00', 0x9, 0xdf, &(0x7f0000000380)=""/223, 0x41100, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0xc, 0x8, 0x75}, 0x10, 0x1f073, r12, 0x8, 0x0, &(0x7f0000000480)=[{0x0, 0x1, 0x2, 0x4}, {0x2, 0x2, 0x3, 0x6}, {0x1, 0x3, 0x8, 0x2}, {0x4, 0x5, 0x10, 0x9}, {0x5, 0x5, 0x0, 0x7}, {0x4, 0x5, 0x7, 0x6}, {0x3, 0x4, 0x0, 0x4}, {0x1, 0x4, 0x6, 0x7}], 0x10, 0x48}, 0x90) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r4, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r4}, 0x20) r13 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r4}, 0x8) recvmsg$unix(r13, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}]}, 0x10102) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r13, 0x4) 18:24:26 executing program 0: bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001540)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0)=0xffffffffffffffff, 0x12) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002880)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0xffffffffffffffe0, &(0x7f0000001440)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/192, 0xc0}], 0x7, &(0x7f00000014c0)=""/15, 0xf}, 0x0) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000001580), 0x8) recvmsg$unix(r1, &(0x7f0000002840)={&(0x7f00000015c0)=@abs, 0x6e, &(0x7f0000002740)=[{&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/215, 0xd7}], 0x2, &(0x7f0000002780)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x2042) 18:24:26 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40022140) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup(r2, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r3, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r4 = openat$cgroup_ro(r3, 0x0, 0x0, 0x0) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup(r5, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r6, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r7 = openat$cgroup_ro(r6, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r7, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r7}, 0x20) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r7}, 0x8) r9 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) openat$cgroup(r9, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup(r9, &(0x7f0000001640)='syz0\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r9, &(0x7f0000000200), 0x2, 0x0) recvmsg$unix(r8, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000810400920461f768ad067e6f1c002e00d2099cc7bc90e540e27a01980ac5ca098055601fac8f9e4a0a"], 0x58}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map=r8, 0x8, 0x1, 0x7, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000100), &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r10 = openat$cgroup(0xffffffffffffffff, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r10, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r11 = openat$cgroup_ro(r10, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r11, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r11}, 0x20) r12 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r11}, 0x8) recvmsg$unix(r12, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYRESHEX, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000802000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001400000071c8373eb1eefacb6f6e0000000100000097a3f4429b22145dc0d78935ce5c5a85fa73fda37d1c1e278a904cb0f5329f9e171408222f8a465c1650cd69c279a407aa32b152914161f916123f4b0a13d9eac11111923cb5a331d578a8f64f7621ca1bca0dd7abe1b6ca64588e520f5b17816bba4865f85232772976714aba6eeb965fee21dcad961e5f455b12174dd102", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x58}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1c, 0x6, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xbd1f, 0x0, 0x0, 0x0, 0x6}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x62}, @generic={0x0, 0x1, 0x9, 0x1ff, 0x81}]}, &(0x7f0000000280)='GPL\x00', 0x9, 0xdf, &(0x7f0000000380)=""/223, 0x41100, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0xc, 0x8, 0x75}, 0x10, 0x1f073, r12, 0x8, 0x0, &(0x7f0000000480)=[{0x0, 0x1, 0x2, 0x4}, {0x2, 0x2, 0x3, 0x6}, {0x1, 0x3, 0x8, 0x2}, {0x4, 0x5, 0x10, 0x9}, {0x5, 0x5, 0x0, 0x7}, {0x4, 0x5, 0x7, 0x6}, {0x3, 0x4, 0x0, 0x4}, {0x1, 0x4, 0x6, 0x7}], 0x10, 0x48}, 0x90) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r4, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r4}, 0x20) r13 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r4}, 0x8) recvmsg$unix(r13, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}]}, 0x10102) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r13, 0x4) 18:24:26 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x7) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0) recvmsg(r0, 0x0, 0x0) 18:24:26 executing program 0: bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001540)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0)=0xffffffffffffffff, 0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002880)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0xffffffffffffffe0, &(0x7f0000001440)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/192, 0xc0}], 0x7, &(0x7f00000014c0)=""/15, 0xf}, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000001580), 0x8) recvmsg$unix(r1, &(0x7f0000002840)={&(0x7f00000015c0)=@abs, 0x6e, &(0x7f0000002740)=[{&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/215, 0xd7}], 0x2, &(0x7f0000002780)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x2042) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001540)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) (async) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0)=0xffffffffffffffff, 0x12) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002880)) (async) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0xffffffffffffffe0, &(0x7f0000001440)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/192, 0xc0}], 0x7, &(0x7f00000014c0)=""/15, 0xf}, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000001580), 0x8) (async) recvmsg$unix(r1, &(0x7f0000002840)={&(0x7f00000015c0)=@abs, 0x6e, &(0x7f0000002740)=[{&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/215, 0xd7}], 0x2, &(0x7f0000002780)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x2042) (async) 18:24:26 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000001500), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r0, &(0x7f0000001440)={&(0x7f0000001480)=@abs, 0x6e, &(0x7f0000001380)=[{&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)}, {&(0x7f0000001140)=""/193, 0xc1}, {&(0x7f0000001240)=""/98, 0x62}, {&(0x7f0000000000)=""/31, 0x1f}, {&(0x7f0000001300)=""/84, 0x54}], 0x6, &(0x7f0000001400)=[@cred={{0x1c}}], 0x20}, 0x10000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001100)) close(r1) 18:24:27 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) recvmsg(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) 18:24:27 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) (async) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) close(r1) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) 18:24:27 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000240)={&(0x7f0000000000)="e5b4cd620ea29022e75b313a74473d1e1adef0051611412cb3e4fd6a226f876fe9481df622caf153e726543356bf25c5c992d5ed2131759564cb660af0b45f02d5a628f92abe8074906c0628582cb258cc520e8b34260e9f7716f52b255b4192dbfcb9e0f147121b2a69593bfe5cc83705acc21f1f372465c6ffc93c8d40", &(0x7f0000000080)=""/6, &(0x7f0000000100)="822c9f895888649dfb571fb5f4d956f22636455ca899fa716f9f1a003619e2a699d11eb1a3eff78e0461b348e0041aa34b0c898684ab3047f517fec36b55e147964dc11a805abe78f06f70a417af189a1e0bc455a9e79816c764b6195cb473f93f7205c7f3a4e03424f9c4bf2249f1e52078e41089ceac4f13c86464cec9ebb5a8761020d126fa2eb1286e1727b088ed08140229f8c2171b7b1683097a432ada082e09310250216600be5ad273d6e863628c5514983b", &(0x7f00000001c0)="7cdde0ce405620e7dafa3efba660dc7c242a0c61dba506041c03cfa5dbcaa4eeec8d4d7f0ac125b18df3e9b11aaa59f217c7c406a6d14a622f272ad7c525baac0f5eafbf3fdcd255ccf7a449a8adf2e0a80840ebaab5a6b5b8348ac681e32289c451b8540047dd813c50936a88835d044e0cd383e9b91e097d2ffa64", 0x9, 0x1, 0x4}, 0x38) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x11f) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 18:24:27 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r1, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r1, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r2, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r2}, 0x20) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r2}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001880)={0x18, 0xf, &(0x7f00000015c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x28}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_fd={0x18, 0x5, 0x1, 0x0, 0x1}, @exit, @map_idx={0x18, 0x7, 0x5, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0xbf}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000001640)='GPL\x00', 0x401, 0xfe, &(0x7f0000001680)=""/254, 0x41100, 0x29, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001780)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000017c0)={0x0, 0x6, 0x1, 0xc803}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000001800)=[{0x1, 0x5, 0x5, 0x5}, {0x5, 0xd3, 0x10, 0x1}, {0x4, 0x2, 0xe, 0x8}, {0x4, 0x5, 0x5, 0x6}, {0x1, 0x1, 0x5, 0xc}], 0x10, 0x9}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) perf_event_open(&(0x7f0000001540)={0x2, 0x80, 0x1e, 0x8, 0x4, 0x7, 0x0, 0x4, 0x4820, 0x6, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000000), 0xa}, 0x2, 0x7, 0x6, 0x0, 0x7f, 0x7f, 0x1800, 0x0, 0xf7c, 0x0, 0x3f}, 0x0, 0xa, 0xffffffffffffffff, 0xb) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000001940), 0x4c0000, 0x0) ioctl$TUNSETSTEERINGEBPF(r5, 0x800454e0, &(0x7f0000001980)=r3) recvmsg(r4, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0xffffffffffffffe0, &(0x7f0000001440)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/192, 0xc0}], 0x7, &(0x7f00000014c0)=""/15, 0xf}, 0x0) 18:24:27 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000001500), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r0, &(0x7f0000001440)={&(0x7f0000001480)=@abs, 0x6e, &(0x7f0000001380)=[{&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)}, {&(0x7f0000001140)=""/193, 0xc1}, {&(0x7f0000001240)=""/98, 0x62}, {&(0x7f0000000000)=""/31, 0x1f}, {&(0x7f0000001300)=""/84, 0x54}], 0x6, &(0x7f0000001400)=[@cred={{0x1c}}], 0x20}, 0x10000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001100)) close(r1) 18:24:27 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000001500), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x18) socketpair(0x29, 0x2, 0x1, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000500)={&(0x7f0000000340)=@abs, 0x6e, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/140, 0x8c}, {&(0x7f0000000480)=""/106, 0x6a}], 0x2}, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r5 = openat$cgroup(r4, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r5, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r6 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0xa3, 0x8, 0xfb, 0xff, 0x0, 0x6, 0x44000, 0xa, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0xa}, 0x200, 0x2, 0x5, 0x1, 0x3, 0x0, 0x6, 0x0, 0xde, 0x0, 0x100}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0xa) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0) ioctl$TUNATTACHFILTER(r7, 0x401054d5, 0x0) ioctl$TUNSETFILTEREBPF(r7, 0x800454e1, &(0x7f0000000280)=r2) ioctl$PERF_EVENT_IOC_REFRESH(r6, 0x2402, 0x7ff) r8 = openat$cgroup_ro(r5, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r8, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r8}, 0x20) r9 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r8}, 0x8) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r10, 0x0, 0x0) recvmsg$unix(r9, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="c81ace575d6f102cea1e52c2c378590000006d63c8b20100f6b761", @ANYRESDEC=r10, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x58}, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r9}, 0x8) close(r1) 18:24:27 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) openat$cgroup(r0, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) (async) r1 = openat$cgroup(r0, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r1, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r1, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r2, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r2}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r2}, 0x8) (async) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r2}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001880)={0x18, 0xf, &(0x7f00000015c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x28}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_fd={0x18, 0x5, 0x1, 0x0, 0x1}, @exit, @map_idx={0x18, 0x7, 0x5, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0xbf}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000001640)='GPL\x00', 0x401, 0xfe, &(0x7f0000001680)=""/254, 0x41100, 0x29, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001780)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000017c0)={0x0, 0x6, 0x1, 0xc803}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000001800)=[{0x1, 0x5, 0x5, 0x5}, {0x5, 0xd3, 0x10, 0x1}, {0x4, 0x2, 0xe, 0x8}, {0x4, 0x5, 0x5, 0x6}, {0x1, 0x1, 0x5, 0xc}], 0x10, 0x9}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001880)={0x18, 0xf, &(0x7f00000015c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x28}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_fd={0x18, 0x5, 0x1, 0x0, 0x1}, @exit, @map_idx={0x18, 0x7, 0x5, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0xbf}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000001640)='GPL\x00', 0x401, 0xfe, &(0x7f0000001680)=""/254, 0x41100, 0x29, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001780)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000017c0)={0x0, 0x6, 0x1, 0xc803}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000001800)=[{0x1, 0x5, 0x5, 0x5}, {0x5, 0xd3, 0x10, 0x1}, {0x4, 0x2, 0xe, 0x8}, {0x4, 0x5, 0x5, 0x6}, {0x1, 0x1, 0x5, 0xc}], 0x10, 0x9}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) perf_event_open(&(0x7f0000001540)={0x2, 0x80, 0x1e, 0x8, 0x4, 0x7, 0x0, 0x4, 0x4820, 0x6, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000000), 0xa}, 0x2, 0x7, 0x6, 0x0, 0x7f, 0x7f, 0x1800, 0x0, 0xf7c, 0x0, 0x3f}, 0x0, 0xa, 0xffffffffffffffff, 0xb) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000001940), 0x4c0000, 0x0) ioctl$TUNSETSTEERINGEBPF(r5, 0x800454e0, &(0x7f0000001980)=r3) (async) ioctl$TUNSETSTEERINGEBPF(r5, 0x800454e0, &(0x7f0000001980)=r3) recvmsg(r4, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0xffffffffffffffe0, &(0x7f0000001440)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/192, 0xc0}], 0x7, &(0x7f00000014c0)=""/15, 0xf}, 0x0) 18:24:27 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r1, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) (async) r2 = openat$cgroup_ro(r1, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r2, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r2}, 0x20) (async) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r2}, 0x8) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001880)={0x18, 0xf, &(0x7f00000015c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x28}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_fd={0x18, 0x5, 0x1, 0x0, 0x1}, @exit, @map_idx={0x18, 0x7, 0x5, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0xbf}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000001640)='GPL\x00', 0x401, 0xfe, &(0x7f0000001680)=""/254, 0x41100, 0x29, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001780)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000017c0)={0x0, 0x6, 0x1, 0xc803}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000001800)=[{0x1, 0x5, 0x5, 0x5}, {0x5, 0xd3, 0x10, 0x1}, {0x4, 0x2, 0xe, 0x8}, {0x4, 0x5, 0x5, 0x6}, {0x1, 0x1, 0x5, 0xc}], 0x10, 0x9}, 0x90) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) (async) perf_event_open(&(0x7f0000001540)={0x2, 0x80, 0x1e, 0x8, 0x4, 0x7, 0x0, 0x4, 0x4820, 0x6, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000000), 0xa}, 0x2, 0x7, 0x6, 0x0, 0x7f, 0x7f, 0x1800, 0x0, 0xf7c, 0x0, 0x3f}, 0x0, 0xa, 0xffffffffffffffff, 0xb) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000001940), 0x4c0000, 0x0) ioctl$TUNSETSTEERINGEBPF(r5, 0x800454e0, &(0x7f0000001980)=r3) (async, rerun: 32) recvmsg(r4, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0xffffffffffffffe0, &(0x7f0000001440)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/192, 0xc0}], 0x7, &(0x7f00000014c0)=""/15, 0xf}, 0x0) (rerun: 32) 18:24:27 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0xffffffffffffffe0, &(0x7f0000001440)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/192, 0xc0}], 0x7, &(0x7f00000014c0)=""/15, 0xf}, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001640)={@cgroup=r1, 0x13, 0x0, 0xf171, &(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000001580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000015c0)=[0x0, 0x0, 0x0], &(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0]}, 0x40) 18:24:27 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0xffffffffffffffe0, &(0x7f0000001440)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/192, 0xc0}], 0x7, &(0x7f00000014c0)=""/15, 0xf}, 0x0) (async) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0xffffffffffffffe0, &(0x7f0000001440)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/192, 0xc0}], 0x7, &(0x7f00000014c0)=""/15, 0xf}, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001640)={@cgroup=r1, 0x13, 0x0, 0xf171, &(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000001580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000015c0)=[0x0, 0x0, 0x0], &(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0]}, 0x40) 18:24:27 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0xffffffffffffffe0, &(0x7f0000001440)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/192, 0xc0}], 0x7, &(0x7f00000014c0)=""/15, 0xf}, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001640)={@cgroup=r1, 0x13, 0x0, 0xf171, &(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000001580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000015c0)=[0x0, 0x0, 0x0], &(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0]}, 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0xffffffffffffffe0, &(0x7f0000001440)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/192, 0xc0}], 0x7, &(0x7f00000014c0)=""/15, 0xf}, 0x0) (async) openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001640)={@cgroup=r1, 0x13, 0x0, 0xf171, &(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000001580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000015c0)=[0x0, 0x0, 0x0], &(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0]}, 0x40) (async) 18:24:27 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) (async) close(r1) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) 18:24:28 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0xffffffffffffffe0, &(0x7f0000001440)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/192, 0xc0}], 0x7, &(0x7f00000014c0)=""/15, 0xf}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x10000) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001540)={0xffffffffffffffff, 0x5, 0x18}, 0xc) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000015c0)={r1, &(0x7f0000001580)="888d153543331dce87"}, 0x20) 18:24:28 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) 18:24:28 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) 18:24:28 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, 0x0, 0x0) recvmsg(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/235, 0xeb}, 0x40) close(r0) 18:24:28 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair(0x10, 0x6, 0x8, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000001580)=@nl=@unspec, 0x80, &(0x7f0000000040), 0x0, &(0x7f00000000c0)=""/39, 0x27}, 0x2000) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001540)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x18) 18:24:28 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x599b01, 0x0) recvmsg(r0, 0x0, 0x0) 18:24:28 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, 0x0, 0x0) (async) recvmsg(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/235, 0xeb}, 0x40) (async) close(r0) 18:24:28 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair(0x10, 0x6, 0x8, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000001580)=@nl=@unspec, 0x80, &(0x7f0000000040), 0x0, &(0x7f00000000c0)=""/39, 0x27}, 0x2000) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001540)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x18) 18:24:28 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000100)=[{}, {}], 0x10, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@ifindex=r0, 0x2f, 0x1, 0x2, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40022140) 18:24:28 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0xffffffffffffffe0, &(0x7f0000001440)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/192, 0xc0}], 0x7, &(0x7f00000014c0)=""/15, 0xf}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x10000) (async) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001540)={0xffffffffffffffff, 0x5, 0x18}, 0xc) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000015c0)={r1, &(0x7f0000001580)="888d153543331dce87"}, 0x20) 18:24:28 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) 18:24:28 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair(0x10, 0x6, 0x8, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000001580)=@nl=@unspec, 0x80, &(0x7f0000000040), 0x0, &(0x7f00000000c0)=""/39, 0x27}, 0x2000) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001540)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x18) 18:24:28 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, 0x0, 0x0) (async) recvmsg(r1, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, 0x0, 0x0) recvmsg(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/235, 0xeb}, 0x40) close(r0) 18:24:28 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x0, 0xfffffffb, 0x0, 0x100, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x1, 0xf}, 0x48) close(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0xa, &(0x7f0000000040)=ANY=[@ANYBLOB="5775dc000000000018350000d20000000000000000000000950000000000000085000000af00000018270000", @ANYRES32, @ANYBLOB="00000000000200008cf704000100070000000000000000002b4923fdab152603"], &(0x7f00000000c0)='GPL\x00', 0x7, 0xd8, &(0x7f0000000100)=""/216, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x9, 0x9, 0xffffffff}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000280)=[0xffffffffffffffff], &(0x7f00000002c0)=[{0x0, 0x2, 0x5be, 0x7}, {0x4, 0x2, 0xb}, {0x5, 0x3, 0x0, 0x7}], 0x10, 0x2}, 0x90) close(r3) openat$tun(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0) recvmsg(r0, 0x0, 0x0) 18:24:28 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0xffffffffffffffe0, &(0x7f0000001440)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/192, 0xc0}], 0x7, &(0x7f00000014c0)=""/15, 0xf}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x10000) (async) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001540)={0xffffffffffffffff, 0x5, 0x18}, 0xc) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000015c0)={r1, &(0x7f0000001580)="888d153543331dce87"}, 0x20) 18:24:28 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x0, 0xfffffffb, 0x0, 0x100, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x1, 0xf}, 0x48) close(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0xa, &(0x7f0000000040)=ANY=[@ANYBLOB="5775dc000000000018350000d20000000000000000000000950000000000000085000000af00000018270000", @ANYRES32, @ANYBLOB="00000000000200008cf704000100070000000000000000002b4923fdab152603"], &(0x7f00000000c0)='GPL\x00', 0x7, 0xd8, &(0x7f0000000100)=""/216, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x9, 0x9, 0xffffffff}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000280)=[0xffffffffffffffff], &(0x7f00000002c0)=[{0x0, 0x2, 0x5be, 0x7}, {0x4, 0x2, 0xb}, {0x5, 0x3, 0x0, 0x7}], 0x10, 0x2}, 0x90) close(r3) openat$tun(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0) recvmsg(r0, 0x0, 0x0) 18:24:28 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair(0x10, 0x6, 0x8, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000001580)=@nl=@unspec, 0x80, &(0x7f0000000040), 0x0, &(0x7f00000000c0)=""/39, 0x27}, 0x2000) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001540)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) 18:24:28 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x40010120) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) close(r1) 18:24:28 executing program 5: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) 18:24:28 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='cgroup.kill\x00', 0x0, 0x0) r1 = openat$cgroup(r0, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) r2 = openat$cgroup(r1, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r2, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) r3 = openat$cgroup_ro(r2, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r3, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r3}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r3}, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1b, 0xff, 0xfffffffd, 0xfffffffe, 0x820, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000040)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xe}], &(0x7f0000000080)='syzkaller\x00', 0x80, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000100)={0x3, 0xa, 0x101, 0x3}, 0x10, 0x0, 0x0, 0x9, &(0x7f00000001c0)=[0xffffffffffffffff, r3, 0x1, r4, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000200)=[{0x5, 0x3, 0x3, 0x9}, {0x2, 0x2, 0xe, 0x7}, {0x3, 0x2, 0x1, 0xa}, {0x0, 0x2, 0xa, 0xb}, {0x1, 0x2, 0x2, 0x1}, {0x1, 0x3, 0x6, 0x9}, {0x4, 0x4, 0x7, 0x8}, {0x0, 0x3, 0x8, 0x5}, {0x4, 0x5, 0xf, 0xc}], 0x10, 0x3f}, 0x90) 18:24:28 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001d00)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f00000022c0)={0x0, 0x0, 0x0}, 0x40) recvmsg$unix(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000002440)=""/4096, 0x1000}], 0x1}, 0x40010040) r3 = openat$cgroup(r1, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r3, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r4 = openat$cgroup_ro(r3, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r4, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r4}, 0x20) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r4}, 0x8) recvmsg$unix(r5, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000100)={r5, 0x0, 0xe, 0x0, &(0x7f0000000040)="8c210d43e059eaf17b4dae4a3586", 0x0, 0xffffffc0, 0x0, 0x30, 0x0, &(0x7f0000000080)="02d5ef00c907f3b94ea6f27a1a2d8eb8e3af19092d90153e58ceacb170aba863c3ec2d200d242f10d3e2dc7cacb8601c", 0x0, 0x2, 0x0, 0x5}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0) recvmsg(r0, 0x0, 0x0) 18:24:28 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair(0x10, 0x6, 0x8, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000001580)=@nl=@unspec, 0x80, &(0x7f0000000040), 0x0, &(0x7f00000000c0)=""/39, 0x27}, 0x2000) 18:24:28 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2000000}, 0x40022140) 18:24:28 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x4008c080, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 18:24:28 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x40010120) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) (async) close(r1) 18:24:28 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='cgroup.kill\x00', 0x0, 0x0) r1 = openat$cgroup(r0, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) r2 = openat$cgroup(r1, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r2, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) r3 = openat$cgroup_ro(r2, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r3, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r3}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r3}, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1b, 0xff, 0xfffffffd, 0xfffffffe, 0x820, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000040)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xe}], &(0x7f0000000080)='syzkaller\x00', 0x80, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000100)={0x3, 0xa, 0x101, 0x3}, 0x10, 0x0, 0x0, 0x9, &(0x7f00000001c0)=[0xffffffffffffffff, r3, 0x1, r4, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000200)=[{0x5, 0x3, 0x3, 0x9}, {0x2, 0x2, 0xe, 0x7}, {0x3, 0x2, 0x1, 0xa}, {0x0, 0x2, 0xa, 0xb}, {0x1, 0x2, 0x2, 0x1}, {0x1, 0x3, 0x6, 0x9}, {0x4, 0x4, 0x7, 0x8}, {0x0, 0x3, 0x8, 0x5}, {0x4, 0x5, 0xf, 0xc}], 0x10, 0x3f}, 0x90) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='cgroup.kill\x00', 0x0, 0x0) (async) openat$cgroup(r0, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) (async) openat$cgroup(r1, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) (async) openat$cgroup_pressure(r2, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) (async) openat$cgroup_ro(r2, 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r3, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r3}, 0x20) (async) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r3}, 0x8) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1b, 0xff, 0xfffffffd, 0xfffffffe, 0x820, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000040)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xe}], &(0x7f0000000080)='syzkaller\x00', 0x80, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000100)={0x3, 0xa, 0x101, 0x3}, 0x10, 0x0, 0x0, 0x9, &(0x7f00000001c0)=[0xffffffffffffffff, r3, 0x1, r4, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000200)=[{0x5, 0x3, 0x3, 0x9}, {0x2, 0x2, 0xe, 0x7}, {0x3, 0x2, 0x1, 0xa}, {0x0, 0x2, 0xa, 0xb}, {0x1, 0x2, 0x2, 0x1}, {0x1, 0x3, 0x6, 0x9}, {0x4, 0x4, 0x7, 0x8}, {0x0, 0x3, 0x8, 0x5}, {0x4, 0x5, 0xf, 0xc}], 0x10, 0x3f}, 0x90) (async) 18:24:28 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair(0x10, 0x6, 0x8, &(0x7f0000000040)) 18:24:28 executing program 5: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 18:24:28 executing program 2: socketpair(0x10, 0x6, 0x8, &(0x7f0000000040)) 18:24:28 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xd}, 0x48) (fail_nth: 1) 18:24:28 executing program 5: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 18:24:28 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) (async, rerun: 32) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='cgroup.kill\x00', 0x0, 0x0) (rerun: 32) r1 = openat$cgroup(r0, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) r2 = openat$cgroup(r1, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r2, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) r3 = openat$cgroup_ro(r2, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r3, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r3}, 0x20) (async) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r3}, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1b, 0xff, 0xfffffffd, 0xfffffffe, 0x820, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000040)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xe}], &(0x7f0000000080)='syzkaller\x00', 0x80, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000100)={0x3, 0xa, 0x101, 0x3}, 0x10, 0x0, 0x0, 0x9, &(0x7f00000001c0)=[0xffffffffffffffff, r3, 0x1, r4, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000200)=[{0x5, 0x3, 0x3, 0x9}, {0x2, 0x2, 0xe, 0x7}, {0x3, 0x2, 0x1, 0xa}, {0x0, 0x2, 0xa, 0xb}, {0x1, 0x2, 0x2, 0x1}, {0x1, 0x3, 0x6, 0x9}, {0x4, 0x4, 0x7, 0x8}, {0x0, 0x3, 0x8, 0x5}, {0x4, 0x5, 0xf, 0xc}], 0x10, 0x3f}, 0x90) 18:24:28 executing program 2: socketpair(0x0, 0x6, 0x8, &(0x7f0000000040)) 18:24:28 executing program 5: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 18:24:28 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x40010120) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) close(r1) [ 2461.252764][T31130] FAULT_INJECTION: forcing a failure. [ 2461.252764][T31130] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2461.318670][T31130] CPU: 1 PID: 31130 Comm: syz-executor.3 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2461.328849][T31130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2461.338748][T31130] Call Trace: [ 2461.341868][T31130] [ 2461.344640][T31130] dump_stack_lvl+0x151/0x1b7 [ 2461.349243][T31130] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2461.354714][T31130] dump_stack+0x15/0x17 [ 2461.358703][T31130] should_fail+0x3c6/0x510 [ 2461.362967][T31130] should_fail_usercopy+0x1a/0x20 [ 2461.367816][T31130] _copy_from_user+0x20/0xd0 [ 2461.372249][T31130] __sys_bpf+0x1e9/0x760 [ 2461.376465][T31130] ? fput_many+0x160/0x1b0 [ 2461.380720][T31130] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 2461.385930][T31130] ? debug_smp_processor_id+0x17/0x20 [ 2461.391136][T31130] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2461.397035][T31130] __x64_sys_bpf+0x7c/0x90 [ 2461.401297][T31130] do_syscall_64+0x3d/0xb0 [ 2461.405541][T31130] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2461.411272][T31130] RIP: 0033:0x7fbe91d95ae9 [ 2461.415523][T31130] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2461.434968][T31130] RSP: 002b:00007fbe90b180c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2461.443210][T31130] RAX: ffffffffffffffda RBX: 00007fbe91eb4f80 RCX: 00007fbe91d95ae9 [ 2461.451021][T31130] RDX: 0000000000000048 RSI: 0000000020000540 RDI: 0000000000000000 [ 2461.458972][T31130] RBP: 00007fbe90b18120 R08: 0000000000000000 R09: 0000000000000000 [ 2461.466761][T31130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2461.474571][T31130] R13: 000000000000000b R14: 00007fbe91eb4f80 R15: 00007ffe1abf6238 [ 2461.482388][T31130] 18:24:28 executing program 1: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 18:24:28 executing program 2: socketpair(0x0, 0x6, 0x8, &(0x7f0000000040)) 18:24:28 executing program 5: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 18:24:28 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, 0x0, 0x0) close(r2) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0xffffffffffffffe0, &(0x7f0000001440)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/192, 0xc0}], 0x7, &(0x7f00000014c0)=""/15, 0xf}, 0x0) recvmsg$unix(r1, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001540)=""/95, 0x5f}, {&(0x7f00000015c0)=""/200, 0xc8}], 0x2, &(0x7f00000016c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}, 0x40004022) 18:24:28 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) close(r1) 18:24:28 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xd}, 0x48) (fail_nth: 2) 18:24:28 executing program 2: socketpair(0x0, 0x6, 0x8, &(0x7f0000000040)) [ 2461.669295][T31161] FAULT_INJECTION: forcing a failure. [ 2461.669295][T31161] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2461.693279][T31161] CPU: 1 PID: 31161 Comm: syz-executor.3 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2461.703544][T31161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2461.713488][T31161] Call Trace: [ 2461.716560][T31161] [ 2461.716902][T31167] FAULT_INJECTION: forcing a failure. [ 2461.716902][T31167] name failslab, interval 1, probability 0, space 0, times 0 [ 2461.719336][T31161] dump_stack_lvl+0x151/0x1b7 [ 2461.719369][T31161] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2461.741821][T31161] ? kstrtouint_from_user+0x20a/0x2a0 [ 2461.747030][T31161] dump_stack+0x15/0x17 [ 2461.751017][T31161] should_fail+0x3c6/0x510 [ 2461.755273][T31161] should_fail_usercopy+0x1a/0x20 [ 2461.760134][T31161] _copy_to_user+0x20/0x90 [ 2461.764398][T31161] simple_read_from_buffer+0xc7/0x150 18:24:29 executing program 2: socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) 18:24:29 executing program 2: socketpair(0x10, 0x0, 0x0, &(0x7f0000000040)) 18:24:29 executing program 2: socketpair(0x10, 0x0, 0x0, &(0x7f0000000040)) [ 2461.769592][T31161] proc_fail_nth_read+0x1a3/0x210 [ 2461.774451][T31161] ? proc_fault_inject_write+0x390/0x390 [ 2461.779921][T31161] ? fsnotify_perm+0x470/0x5d0 [ 2461.784608][T31161] ? security_file_permission+0x86/0xb0 [ 2461.789987][T31161] ? proc_fault_inject_write+0x390/0x390 [ 2461.795545][T31161] vfs_read+0x27d/0xd40 [ 2461.799536][T31161] ? kernel_read+0x1f0/0x1f0 [ 2461.803961][T31161] ? __kasan_check_write+0x14/0x20 [ 2461.808907][T31161] ? mutex_lock+0xb6/0x1e0 [ 2461.813162][T31161] ? wait_for_completion_killable_timeout+0x10/0x10 [ 2461.819587][T31161] ? __fdget_pos+0x2e7/0x3a0 [ 2461.824006][T31161] ? ksys_read+0x77/0x2c0 [ 2461.828200][T31161] ksys_read+0x199/0x2c0 [ 2461.832262][T31161] ? vfs_write+0x1110/0x1110 [ 2461.836685][T31161] ? debug_smp_processor_id+0x17/0x20 [ 2461.841888][T31161] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2461.847790][T31161] __x64_sys_read+0x7b/0x90 [ 2461.852132][T31161] do_syscall_64+0x3d/0xb0 [ 2461.856384][T31161] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2461.862110][T31161] RIP: 0033:0x7fbe91d9478c [ 2461.866364][T31161] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 59 81 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 af 81 02 00 48 [ 2461.885802][T31161] RSP: 002b:00007fbe90b180c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2461.894057][T31161] RAX: ffffffffffffffda RBX: 00007fbe91eb4f80 RCX: 00007fbe91d9478c [ 2461.901860][T31161] RDX: 000000000000000f RSI: 00007fbe90b18130 RDI: 0000000000000003 [ 2461.909671][T31161] RBP: 00007fbe90b18120 R08: 0000000000000000 R09: 0000000000000000 [ 2461.917480][T31161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2461.925752][T31161] R13: 000000000000000b R14: 00007fbe91eb4f80 R15: 00007ffe1abf6238 [ 2461.933563][T31161] [ 2461.936422][T31167] CPU: 0 PID: 31167 Comm: syz-executor.1 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2461.946581][T31167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2461.956477][T31167] Call Trace: [ 2461.959603][T31167] [ 2461.962377][T31167] dump_stack_lvl+0x151/0x1b7 [ 2461.966890][T31167] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2461.972360][T31167] dump_stack+0x15/0x17 [ 2461.976352][T31167] should_fail+0x3c6/0x510 [ 2461.976899][T31176] FAULT_INJECTION: forcing a failure. [ 2461.976899][T31176] name failslab, interval 1, probability 0, space 0, times 0 [ 2461.980599][T31167] __should_failslab+0xa4/0xe0 [ 2461.980628][T31167] ? dup_task_struct+0x53/0xc60 [ 2461.980654][T31167] should_failslab+0x9/0x20 [ 2461.980674][T31167] slab_pre_alloc_hook+0x37/0xd0 [ 2462.011414][T31167] ? dup_task_struct+0x53/0xc60 [ 2462.016096][T31167] kmem_cache_alloc+0x44/0x200 [ 2462.020702][T31167] dup_task_struct+0x53/0xc60 [ 2462.025218][T31167] ? __kasan_check_write+0x14/0x20 [ 2462.030158][T31167] copy_process+0x5c4/0x3260 [ 2462.034589][T31167] ? __kasan_check_write+0x14/0x20 [ 2462.039548][T31167] ? proc_fail_nth_write+0x20b/0x290 [ 2462.044653][T31167] ? selinux_file_permission+0x2c4/0x570 [ 2462.050123][T31167] ? fsnotify_perm+0x6a/0x5d0 [ 2462.054633][T31167] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2462.059582][T31167] ? vfs_write+0x9ec/0x1110 [ 2462.063926][T31167] kernel_clone+0x21e/0x9e0 18:24:29 executing program 5: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 18:24:29 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xd}, 0x48) [ 2462.068259][T31167] ? file_end_write+0x1c0/0x1c0 [ 2462.072953][T31167] ? create_io_thread+0x1e0/0x1e0 [ 2462.077805][T31167] ? mutex_unlock+0xb2/0x260 [ 2462.082239][T31167] ? __mutex_lock_slowpath+0x10/0x10 [ 2462.087355][T31167] __x64_sys_clone+0x23f/0x290 [ 2462.091956][T31167] ? __do_sys_vfork+0x130/0x130 [ 2462.096638][T31167] ? ksys_write+0x260/0x2c0 [ 2462.100981][T31167] ? debug_smp_processor_id+0x17/0x20 [ 2462.106195][T31167] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2462.112089][T31167] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2462.117562][T31167] do_syscall_64+0x3d/0xb0 [ 2462.121812][T31167] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2462.127535][T31167] RIP: 0033:0x7f5d9d9bdae9 [ 2462.131790][T31167] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2462.151414][T31167] RSP: 002b:00007f5d9c740078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2462.159650][T31167] RAX: ffffffffffffffda RBX: 00007f5d9dadcf80 RCX: 00007f5d9d9bdae9 [ 2462.167475][T31167] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022001200 [ 2462.175275][T31167] RBP: 00007f5d9c740120 R08: 0000000000000000 R09: 0000000000000000 [ 2462.183107][T31167] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 2462.191506][T31167] R13: 000000000000000b R14: 00007f5d9dadcf80 R15: 00007ffc4df72f68 [ 2462.199318][T31167] [ 2462.202688][T31176] CPU: 1 PID: 31176 Comm: syz-executor.5 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2462.212770][T31176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2462.222672][T31176] Call Trace: [ 2462.225793][T31176] [ 2462.228566][T31176] dump_stack_lvl+0x151/0x1b7 [ 2462.233080][T31176] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2462.240428][T31176] dump_stack+0x15/0x17 [ 2462.244362][T31176] should_fail+0x3c6/0x510 [ 2462.248619][T31176] __should_failslab+0xa4/0xe0 [ 2462.253214][T31176] ? dup_task_struct+0x53/0xc60 [ 2462.258021][T31176] should_failslab+0x9/0x20 [ 2462.262339][T31176] slab_pre_alloc_hook+0x37/0xd0 [ 2462.267289][T31176] ? dup_task_struct+0x53/0xc60 [ 2462.271972][T31176] kmem_cache_alloc+0x44/0x200 [ 2462.276572][T31176] dup_task_struct+0x53/0xc60 [ 2462.281099][T31176] ? __kasan_check_write+0x14/0x20 [ 2462.286035][T31176] copy_process+0x5c4/0x3260 [ 2462.290464][T31176] ? __kasan_check_write+0x14/0x20 [ 2462.295406][T31176] ? proc_fail_nth_write+0x20b/0x290 [ 2462.300526][T31176] ? selinux_file_permission+0x2c4/0x570 [ 2462.305992][T31176] ? fsnotify_perm+0x6a/0x5d0 [ 2462.310509][T31176] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2462.315450][T31176] ? vfs_write+0x9ec/0x1110 [ 2462.319791][T31176] kernel_clone+0x21e/0x9e0 [ 2462.324132][T31176] ? file_end_write+0x1c0/0x1c0 [ 2462.328816][T31176] ? create_io_thread+0x1e0/0x1e0 [ 2462.333680][T31176] ? mutex_unlock+0xb2/0x260 [ 2462.338110][T31176] ? __mutex_lock_slowpath+0x10/0x10 [ 2462.343231][T31176] __x64_sys_clone+0x23f/0x290 [ 2462.347828][T31176] ? __do_sys_vfork+0x130/0x130 [ 2462.352513][T31176] ? ksys_write+0x260/0x2c0 [ 2462.357500][T31176] ? debug_smp_processor_id+0x17/0x20 [ 2462.362985][T31176] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2462.368968][T31176] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2462.374425][T31176] do_syscall_64+0x3d/0xb0 [ 2462.378676][T31176] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2462.384412][T31176] RIP: 0033:0x7fdfd1d08ae9 [ 2462.388659][T31176] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2462.408099][T31176] RSP: 002b:00007fdfd0a8b078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 18:24:29 executing program 1: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) 18:24:29 executing program 3: bpf$MAP_CREATE(0x2, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:29 executing program 2: socketpair(0x10, 0x0, 0x0, &(0x7f0000000040)) [ 2462.416344][T31176] RAX: ffffffffffffffda RBX: 00007fdfd1e27f80 RCX: 00007fdfd1d08ae9 [ 2462.424151][T31176] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022001200 [ 2462.431963][T31176] RBP: 00007fdfd0a8b120 R08: 0000000000000000 R09: 0000000000000000 [ 2462.439778][T31176] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 2462.447587][T31176] R13: 000000000000000b R14: 00007fdfd1e27f80 R15: 00007fff62717c48 [ 2462.455663][T31176] 18:24:29 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, 0x0, 0x0) close(r2) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0xffffffffffffffe0, &(0x7f0000001440)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/192, 0xc0}], 0x7, &(0x7f00000014c0)=""/15, 0xf}, 0x0) recvmsg$unix(r1, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001540)=""/95, 0x5f}, {&(0x7f00000015c0)=""/200, 0xc8}], 0x2, &(0x7f00000016c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}, 0x40004022) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)) (async) recvmsg(r2, 0x0, 0x0) (async) close(r2) (async) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0xffffffffffffffe0, &(0x7f0000001440)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/192, 0xc0}], 0x7, &(0x7f00000014c0)=""/15, 0xf}, 0x0) (async) recvmsg$unix(r1, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001540)=""/95, 0x5f}, {&(0x7f00000015c0)=""/200, 0xc8}], 0x2, &(0x7f00000016c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}, 0x40004022) (async) 18:24:29 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) close(r1) 18:24:29 executing program 5: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) 18:24:29 executing program 3: bpf$MAP_CREATE(0x3, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:29 executing program 2: socketpair(0x10, 0x0, 0x8, 0x0) [ 2462.488551][T31182] FAULT_INJECTION: forcing a failure. [ 2462.488551][T31182] name failslab, interval 1, probability 0, space 0, times 0 [ 2462.521252][T31187] FAULT_INJECTION: forcing a failure. [ 2462.521252][T31187] name failslab, interval 1, probability 0, space 0, times 0 [ 2462.531580][T31182] CPU: 1 PID: 31182 Comm: syz-executor.1 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2462.544111][T31182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2462.554006][T31182] Call Trace: [ 2462.557122][T31182] [ 2462.559904][T31182] dump_stack_lvl+0x151/0x1b7 [ 2462.564422][T31182] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2462.570054][T31182] ? __kasan_slab_alloc+0xc3/0xe0 [ 2462.575881][T31182] ? __kasan_slab_alloc+0xb1/0xe0 [ 2462.581445][T31182] ? slab_post_alloc_hook+0x53/0x2c0 [ 2462.586567][T31182] ? dup_task_struct+0x53/0xc60 [ 2462.592931][T31182] ? copy_process+0x5c4/0x3260 [ 2462.598901][T31182] ? kernel_clone+0x21e/0x9e0 [ 2462.603419][T31182] dump_stack+0x15/0x17 [ 2462.607426][T31182] should_fail+0x3c6/0x510 [ 2462.611658][T31182] __should_failslab+0xa4/0xe0 [ 2462.616257][T31182] should_failslab+0x9/0x20 [ 2462.620601][T31182] slab_pre_alloc_hook+0x37/0xd0 [ 2462.626499][T31182] kmem_cache_alloc_trace+0x48/0x210 [ 2462.631619][T31182] ? __get_vm_area_node+0x117/0x360 18:24:29 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, 0x0, 0x0) close(r2) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0xffffffffffffffe0, &(0x7f0000001440)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/192, 0xc0}], 0x7, &(0x7f00000014c0)=""/15, 0xf}, 0x0) (async) recvmsg$unix(r1, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001540)=""/95, 0x5f}, {&(0x7f00000015c0)=""/200, 0xc8}], 0x2, &(0x7f00000016c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}, 0x40004022) 18:24:29 executing program 2: socketpair(0x10, 0x0, 0x8, 0x0) [ 2462.636669][T31182] __get_vm_area_node+0x117/0x360 [ 2462.641518][T31182] __vmalloc_node_range+0xe2/0x8d0 [ 2462.646466][T31182] ? copy_process+0x5c4/0x3260 [ 2462.651908][T31182] ? slab_post_alloc_hook+0x72/0x2c0 [ 2462.658342][T31182] ? dup_task_struct+0x53/0xc60 [ 2462.663200][T31182] dup_task_struct+0x416/0xc60 [ 2462.668127][T31182] ? copy_process+0x5c4/0x3260 [ 2462.672900][T31182] ? __kasan_check_write+0x14/0x20 [ 2462.677857][T31182] copy_process+0x5c4/0x3260 [ 2462.682275][T31182] ? __kasan_check_write+0x14/0x20 [ 2462.687218][T31182] ? proc_fail_nth_write+0x20b/0x290 [ 2462.692337][T31182] ? selinux_file_permission+0x2c4/0x570 [ 2462.697909][T31182] ? fsnotify_perm+0x6a/0x5d0 [ 2462.702408][T31182] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2462.707360][T31182] ? vfs_write+0x9ec/0x1110 [ 2462.711707][T31182] kernel_clone+0x21e/0x9e0 [ 2462.716034][T31182] ? file_end_write+0x1c0/0x1c0 [ 2462.720804][T31182] ? create_io_thread+0x1e0/0x1e0 [ 2462.725666][T31182] ? mutex_unlock+0xb2/0x260 [ 2462.730106][T31182] ? __mutex_lock_slowpath+0x10/0x10 [ 2462.735216][T31182] __x64_sys_clone+0x23f/0x290 [ 2462.739826][T31182] ? __do_sys_vfork+0x130/0x130 [ 2462.744502][T31182] ? ksys_write+0x260/0x2c0 [ 2462.748847][T31182] ? debug_smp_processor_id+0x17/0x20 [ 2462.754053][T31182] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2462.759952][T31182] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2462.765428][T31182] do_syscall_64+0x3d/0xb0 [ 2462.769760][T31182] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2462.775488][T31182] RIP: 0033:0x7f5d9d9bdae9 [ 2462.779762][T31182] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2462.799196][T31182] RSP: 002b:00007f5d9c740078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2462.807426][T31182] RAX: ffffffffffffffda RBX: 00007f5d9dadcf80 RCX: 00007f5d9d9bdae9 [ 2462.815234][T31182] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022001200 [ 2462.823291][T31182] RBP: 00007f5d9c740120 R08: 0000000000000000 R09: 0000000000000000 [ 2462.831196][T31182] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 2462.839014][T31182] R13: 000000000000000b R14: 00007f5d9dadcf80 R15: 00007ffc4df72f68 [ 2462.846821][T31182] [ 2462.849720][T31187] CPU: 0 PID: 31187 Comm: syz-executor.5 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2462.855686][T31182] syz-executor.1: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2462.859917][T31187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2462.859934][T31187] Call Trace: [ 2462.859940][T31187] [ 2462.859950][T31187] dump_stack_lvl+0x151/0x1b7 [ 2462.872775][T31182] ,cpuset= [ 2462.882586][T31187] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2462.882619][T31187] ? __kasan_slab_alloc+0xc3/0xe0 [ 2462.886461][T31182] syz1 [ 2462.889169][T31187] ? __kasan_slab_alloc+0xb1/0xe0 [ 2462.893755][T31182] ,mems_allowed=0 [ 2462.896541][T31187] ? slab_post_alloc_hook+0x53/0x2c0 [ 2462.896569][T31187] ? dup_task_struct+0x53/0xc60 [ 2462.902132][T31182] [ 2462.906866][T31187] ? copy_process+0x5c4/0x3260 [ 2462.906894][T31187] ? kernel_clone+0x21e/0x9e0 [ 2462.938813][T31187] dump_stack+0x15/0x17 [ 2462.942819][T31187] should_fail+0x3c6/0x510 [ 2462.947061][T31187] __should_failslab+0xa4/0xe0 [ 2462.951664][T31187] should_failslab+0x9/0x20 [ 2462.956173][T31187] slab_pre_alloc_hook+0x37/0xd0 [ 2462.960960][T31187] kmem_cache_alloc_trace+0x48/0x210 [ 2462.966085][T31187] ? __get_vm_area_node+0x117/0x360 [ 2462.971103][T31187] __get_vm_area_node+0x117/0x360 [ 2462.975961][T31187] __vmalloc_node_range+0xe2/0x8d0 [ 2462.981085][T31187] ? copy_process+0x5c4/0x3260 [ 2462.985769][T31187] ? slab_post_alloc_hook+0x72/0x2c0 [ 2462.991075][T31187] ? dup_task_struct+0x53/0xc60 [ 2462.995748][T31187] ? dup_task_struct+0x53/0xc60 [ 2463.000437][T31187] dup_task_struct+0x416/0xc60 [ 2463.005124][T31187] ? copy_process+0x5c4/0x3260 [ 2463.009751][T31187] ? __kasan_check_write+0x14/0x20 [ 2463.014671][T31187] copy_process+0x5c4/0x3260 [ 2463.019096][T31187] ? __kasan_check_write+0x14/0x20 [ 2463.024043][T31187] ? proc_fail_nth_write+0x20b/0x290 [ 2463.029164][T31187] ? selinux_file_permission+0x2c4/0x570 [ 2463.034642][T31187] ? fsnotify_perm+0x6a/0x5d0 [ 2463.039147][T31187] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2463.044092][T31187] ? vfs_write+0x9ec/0x1110 [ 2463.048432][T31187] kernel_clone+0x21e/0x9e0 [ 2463.052774][T31187] ? file_end_write+0x1c0/0x1c0 [ 2463.057546][T31187] ? create_io_thread+0x1e0/0x1e0 [ 2463.062405][T31187] ? mutex_unlock+0xb2/0x260 [ 2463.066835][T31187] ? __mutex_lock_slowpath+0x10/0x10 [ 2463.071953][T31187] __x64_sys_clone+0x23f/0x290 [ 2463.076552][T31187] ? __do_sys_vfork+0x130/0x130 [ 2463.081238][T31187] ? ksys_write+0x260/0x2c0 [ 2463.085579][T31187] ? debug_smp_processor_id+0x17/0x20 [ 2463.090781][T31187] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2463.096776][T31187] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2463.102241][T31187] do_syscall_64+0x3d/0xb0 [ 2463.106495][T31187] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2463.112231][T31187] RIP: 0033:0x7fdfd1d08ae9 [ 2463.117348][T31187] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 18:24:30 executing program 3: bpf$MAP_CREATE(0x4, &(0x7f0000000540)=@base={0xd}, 0x48) [ 2463.137275][T31187] RSP: 002b:00007fdfd0a8b078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2463.146109][T31187] RAX: ffffffffffffffda RBX: 00007fdfd1e27f80 RCX: 00007fdfd1d08ae9 [ 2463.154199][T31187] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022001200 [ 2463.162254][T31187] RBP: 00007fdfd0a8b120 R08: 0000000000000000 R09: 0000000000000000 [ 2463.170071][T31187] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 2463.177877][T31187] R13: 000000000000000b R14: 00007fdfd1e27f80 R15: 00007fff62717c48 [ 2463.185695][T31187] 18:24:30 executing program 2: socketpair(0x10, 0x0, 0x8, 0x0) [ 2463.191203][T31182] CPU: 0 PID: 31182 Comm: syz-executor.1 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2463.202495][T31182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2463.212441][T31182] Call Trace: [ 2463.215602][T31182] [ 2463.218385][T31182] dump_stack_lvl+0x151/0x1b7 [ 2463.222899][T31182] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2463.228361][T31182] ? __rcu_read_unlock+0x7e/0xd0 [ 2463.233309][T31182] dump_stack+0x15/0x17 [ 2463.237298][T31182] warn_alloc+0x21a/0x390 [ 2463.241462][T31182] ? should_failslab+0x9/0x20 [ 2463.245970][T31182] ? zone_watermark_ok_safe+0x270/0x270 [ 2463.251356][T31182] ? __get_vm_area_node+0x347/0x360 [ 2463.256388][T31182] __vmalloc_node_range+0x2c1/0x8d0 [ 2463.261422][T31182] ? slab_post_alloc_hook+0x72/0x2c0 [ 2463.266543][T31182] ? dup_task_struct+0x53/0xc60 [ 2463.271231][T31182] dup_task_struct+0x416/0xc60 [ 2463.275832][T31182] ? copy_process+0x5c4/0x3260 [ 2463.280430][T31182] ? __kasan_check_write+0x14/0x20 [ 2463.285375][T31182] copy_process+0x5c4/0x3260 [ 2463.290068][T31182] ? __kasan_check_write+0x14/0x20 [ 2463.295029][T31182] ? proc_fail_nth_write+0x20b/0x290 [ 2463.300131][T31182] ? selinux_file_permission+0x2c4/0x570 [ 2463.305598][T31182] ? fsnotify_perm+0x6a/0x5d0 [ 2463.310114][T31182] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2463.315058][T31182] ? vfs_write+0x9ec/0x1110 [ 2463.319401][T31182] kernel_clone+0x21e/0x9e0 [ 2463.323737][T31182] ? file_end_write+0x1c0/0x1c0 [ 2463.328426][T31182] ? create_io_thread+0x1e0/0x1e0 [ 2463.333287][T31182] ? mutex_unlock+0xb2/0x260 [ 2463.337711][T31182] ? __mutex_lock_slowpath+0x10/0x10 [ 2463.343761][T31182] __x64_sys_clone+0x23f/0x290 [ 2463.348357][T31182] ? __do_sys_vfork+0x130/0x130 [ 2463.353039][T31182] ? ksys_write+0x260/0x2c0 [ 2463.357403][T31182] ? debug_smp_processor_id+0x17/0x20 [ 2463.362591][T31182] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2463.368488][T31182] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2463.373959][T31182] do_syscall_64+0x3d/0xb0 [ 2463.378216][T31182] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2463.383935][T31182] RIP: 0033:0x7f5d9d9bdae9 [ 2463.388190][T31182] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2463.408172][T31182] RSP: 002b:00007f5d9c740078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2463.416665][T31182] RAX: ffffffffffffffda RBX: 00007f5d9dadcf80 RCX: 00007f5d9d9bdae9 [ 2463.424903][T31182] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022001200 [ 2463.432889][T31182] RBP: 00007f5d9c740120 R08: 0000000000000000 R09: 0000000000000000 [ 2463.440701][T31182] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 2463.448506][T31182] R13: 000000000000000b R14: 00007f5d9dadcf80 R15: 00007ffc4df72f68 [ 2463.456323][T31182] [ 2463.460663][T31182] Mem-Info: [ 2463.463726][T31182] active_anon:14952 inactive_anon:13687 isolated_anon:0 [ 2463.463726][T31182] active_file:9665 inactive_file:8912 isolated_file:0 [ 2463.463726][T31182] unevictable:0 dirty:40 writeback:0 [ 2463.463726][T31182] slab_reclaimable:16344 slab_unreclaimable:71987 [ 2463.463726][T31182] mapped:28591 shmem:15523 pagetables:543 bounce:0 [ 2463.463726][T31182] kernel_misc_reclaimable:0 [ 2463.463726][T31182] free:1531652 free_pcp:23635 free_cma:0 [ 2463.506112][T31182] Node 0 active_anon:59808kB inactive_anon:54648kB active_file:38660kB inactive_file:35648kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:114264kB dirty:160kB writeback:0kB shmem:62092kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:4328kB pagetables:2072kB all_unreclaimable? no [ 2463.538099][T31182] DMA32 free:2976724kB min:62592kB low:78240kB high:93888kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2981496kB mlocked:0kB bounce:0kB free_pcp:4772kB local_pcp:56kB free_cma:0kB [ 2463.565254][T31182] lowmem_reserve[]: 0 3941 3941 [ 2463.570089][T31182] Normal free:3149884kB min:84860kB low:106072kB high:127284kB reserved_highatomic:0KB active_anon:59808kB inactive_anon:54648kB active_file:38660kB inactive_file:35648kB unevictable:0kB writepending:160kB present:5242880kB managed:4035848kB mlocked:0kB bounce:0kB free_pcp:89848kB local_pcp:42204kB free_cma:0kB [ 2463.599538][T31182] lowmem_reserve[]: 0 0 0 [ 2463.603752][T31182] DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (UM) 4*2048kB (UM) 723*4096kB (M) = 2976724kB [ 2463.619146][T31182] Normal: 18531*4kB (UME) 13662*8kB (UME) 7118*16kB (UME) 4127*32kB (UME) 3016*64kB (UME) 1156*128kB (UM) 221*256kB (UM) 25*512kB (UM) 4*1024kB (UM) 0*2048kB 563*4096kB (ME) = 3149884kB [ 2463.637755][T31182] 34106 total pagecache pages 18:24:30 executing program 1: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) 18:24:30 executing program 3: bpf$MAP_CREATE(0x5, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:30 executing program 2: socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) (fail_nth: 1) 18:24:30 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) (async) close(r1) 18:24:30 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0xffffffffffffffe0, &(0x7f0000001440)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/192, 0xc0}], 0x7, &(0x7f00000014c0)=""/15, 0xf}, 0x0) unlink(&(0x7f0000000000)='./file0\x00') 18:24:30 executing program 5: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) [ 2463.642351][T31182] 0 pages in swap cache [ 2463.646236][T31182] Swap cache stats: add 0, delete 0, find 0/0 [ 2463.652353][T31182] Free swap = 124996kB [ 2463.656365][T31182] Total swap = 124996kB [ 2463.660511][T31182] 2097051 pages RAM [ 2463.664175][T31182] 0 pages HighMem/MovableOnly [ 2463.668664][T31182] 342715 pages reserved [ 2463.672696][T31182] 0 pages cma reserved 18:24:31 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0xffffffffffffffe0, &(0x7f0000001440)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/192, 0xc0}], 0x7, &(0x7f00000014c0)=""/15, 0xf}, 0x0) unlink(&(0x7f0000000000)='./file0\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0xffffffffffffffe0, &(0x7f0000001440)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/192, 0xc0}], 0x7, &(0x7f00000014c0)=""/15, 0xf}, 0x0) (async) unlink(&(0x7f0000000000)='./file0\x00') (async) [ 2463.690747][T31220] FAULT_INJECTION: forcing a failure. [ 2463.690747][T31220] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2463.705614][T31225] FAULT_INJECTION: forcing a failure. [ 2463.705614][T31225] name failslab, interval 1, probability 0, space 0, times 0 [ 2463.711653][T31220] CPU: 0 PID: 31220 Comm: syz-executor.2 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2463.728212][T31220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2463.738103][T31220] Call Trace: [ 2463.741215][T31220] [ 2463.743995][T31220] dump_stack_lvl+0x151/0x1b7 [ 2463.748506][T31220] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2463.753975][T31220] dump_stack+0x15/0x17 [ 2463.758017][T31220] should_fail+0x3c6/0x510 [ 2463.762228][T31220] should_fail_alloc_page+0x5a/0x80 [ 2463.767338][T31220] prepare_alloc_pages+0x15c/0x700 [ 2463.772295][T31220] ? __alloc_pages_bulk+0xe60/0xe60 [ 2463.777321][T31220] __alloc_pages+0x138/0x5e0 [ 2463.781747][T31220] ? prep_new_page+0x110/0x110 [ 2463.786350][T31220] __pmd_alloc+0xb1/0x550 [ 2463.790516][T31220] ? __pud_alloc+0x260/0x260 [ 2463.795200][T31220] ? cgroup_rstat_updated+0xe5/0x370 [ 2463.800322][T31220] ? _raw_spin_trylock+0xcd/0x1a0 [ 2463.805182][T31220] do_handle_mm_fault+0xd9d/0x2330 [ 2463.810131][T31220] ? lru_cache_add+0x279/0x540 [ 2463.814728][T31220] ? numa_migrate_prep+0xe0/0xe0 [ 2463.819501][T31220] ? kstrtouint_from_user+0x20a/0x2a0 [ 2463.824706][T31220] ? kstrtol_from_user+0x310/0x310 [ 2463.829666][T31220] ? do_handle_mm_fault+0x1949/0x2330 [ 2463.834867][T31220] ? down_read_trylock+0x1f9/0x300 [ 2463.839812][T31220] ? __find_vma+0x136/0x150 [ 2463.844175][T31220] exc_page_fault+0x3b5/0x830 [ 2463.848755][T31220] asm_exc_page_fault+0x27/0x30 [ 2463.853436][T31220] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 2463.859002][T31220] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 0f 1f 44 00 00 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 66 0f 1f 44 00 00 48 bb f9 ef ff ff ff 7f [ 2463.878432][T31220] RSP: 0018:ffffc90004b3fdf8 EFLAGS: 00050293 [ 2463.884339][T31220] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 0000000020000040 [ 2463.892144][T31220] RDX: ffff88810960cf00 RSI: 0000000000000005 RDI: 0000000000000000 [ 2463.899959][T31220] RBP: ffffc90004b3fee8 R08: ffffffff83da45de R09: ffffed10234002c5 [ 2463.907945][T31220] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 2463.915752][T31220] R13: 1ffff92000967fc8 R14: 1ffff92000967fd0 R15: 0000000020000040 [ 2463.923662][T31220] ? __sys_socketpair+0x14e/0x6e0 [ 2463.928514][T31220] ? __sys_socketpair+0x171/0x6e0 [ 2463.933811][T31220] ? __ia32_sys_socket+0x90/0x90 [ 2463.938583][T31220] ? debug_smp_processor_id+0x17/0x20 [ 2463.943791][T31220] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2463.949861][T31220] __x64_sys_socketpair+0x9b/0xb0 [ 2463.954727][T31220] do_syscall_64+0x3d/0xb0 [ 2463.958976][T31220] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2463.964702][T31220] RIP: 0033:0x7f77057afae9 [ 2463.968956][T31220] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2463.988396][T31220] RSP: 002b:00007f77045320c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 2463.996736][T31220] RAX: ffffffffffffffda RBX: 00007f77058cef80 RCX: 00007f77057afae9 [ 2464.004545][T31220] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000010 [ 2464.012358][T31220] RBP: 00007f7704532120 R08: 0000000000000000 R09: 0000000000000000 [ 2464.020685][T31220] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 2464.028497][T31220] R13: 000000000000000b R14: 00007f77058cef80 R15: 00007fffa5f1a258 [ 2464.036317][T31220] [ 2464.039976][T31225] CPU: 0 PID: 31225 Comm: syz-executor.5 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2464.050134][T31225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2464.060045][T31225] Call Trace: [ 2464.063147][T31225] [ 2464.065940][T31225] dump_stack_lvl+0x151/0x1b7 [ 2464.071396][T31225] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2464.075601][T31228] FAULT_INJECTION: forcing a failure. [ 2464.075601][T31228] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2464.076862][T31225] dump_stack+0x15/0x17 18:24:31 executing program 3: bpf$MAP_CREATE(0x6, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:31 executing program 2: socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) (fail_nth: 2) 18:24:31 executing program 3: bpf$MAP_CREATE(0x7, &(0x7f0000000540)=@base={0xd}, 0x48) [ 2464.076893][T31225] should_fail+0x3c6/0x510 [ 2464.098478][T31225] __should_failslab+0xa4/0xe0 [ 2464.103077][T31225] should_failslab+0x9/0x20 [ 2464.107585][T31225] slab_pre_alloc_hook+0x37/0xd0 [ 2464.112586][T31225] __kmalloc+0x6d/0x270 [ 2464.116552][T31225] ? security_prepare_creds+0x4d/0x140 [ 2464.121842][T31225] security_prepare_creds+0x4d/0x140 [ 2464.126964][T31225] prepare_creds+0x472/0x6a0 [ 2464.131577][T31225] copy_creds+0xf0/0x630 [ 2464.135649][T31225] ? dup_task_struct+0x7e6/0xc60 [ 2464.140427][T31225] copy_process+0x7c3/0x3260 18:24:31 executing program 3: bpf$MAP_CREATE(0x8, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:31 executing program 3: bpf$MAP_CREATE(0x9, &(0x7f0000000540)=@base={0xd}, 0x48) [ 2464.144854][T31225] ? __kasan_check_write+0x14/0x20 [ 2464.149811][T31225] ? proc_fail_nth_write+0x20b/0x290 [ 2464.154925][T31225] ? selinux_file_permission+0x2c4/0x570 [ 2464.160822][T31225] ? fsnotify_perm+0x6a/0x5d0 [ 2464.165339][T31225] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2464.170278][T31225] ? vfs_write+0x9ec/0x1110 [ 2464.174646][T31225] kernel_clone+0x21e/0x9e0 [ 2464.178965][T31225] ? file_end_write+0x1c0/0x1c0 [ 2464.183650][T31225] ? create_io_thread+0x1e0/0x1e0 [ 2464.188514][T31225] ? mutex_unlock+0xb2/0x260 [ 2464.193029][T31225] ? __mutex_lock_slowpath+0x10/0x10 [ 2464.198142][T31225] __x64_sys_clone+0x23f/0x290 [ 2464.202748][T31225] ? __do_sys_vfork+0x130/0x130 [ 2464.207429][T31225] ? ksys_write+0x260/0x2c0 [ 2464.211773][T31225] ? debug_smp_processor_id+0x17/0x20 [ 2464.216975][T31225] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2464.222965][T31225] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2464.228649][T31225] do_syscall_64+0x3d/0xb0 [ 2464.232855][T31225] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2464.238591][T31225] RIP: 0033:0x7fdfd1d08ae9 [ 2464.242843][T31225] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2464.262366][T31225] RSP: 002b:00007fdfd0a8b078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2464.271402][T31225] RAX: ffffffffffffffda RBX: 00007fdfd1e27f80 RCX: 00007fdfd1d08ae9 [ 2464.279213][T31225] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022001200 [ 2464.287023][T31225] RBP: 00007fdfd0a8b120 R08: 0000000000000000 R09: 0000000000000000 [ 2464.294836][T31225] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 2464.302767][T31225] R13: 000000000000000b R14: 00007fdfd1e27f80 R15: 00007fff62717c48 [ 2464.310573][T31225] [ 2464.313437][T31228] CPU: 1 PID: 31228 Comm: syz-executor.2 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2464.323849][T31228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2464.333745][T31228] Call Trace: [ 2464.336863][T31228] [ 2464.339638][T31228] dump_stack_lvl+0x151/0x1b7 [ 2464.344151][T31228] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2464.349619][T31228] ? prep_new_page+0x1b/0x110 [ 2464.354136][T31228] dump_stack+0x15/0x17 [ 2464.358130][T31228] should_fail+0x3c6/0x510 [ 2464.362377][T31228] should_fail_alloc_page+0x5a/0x80 [ 2464.367414][T31228] prepare_alloc_pages+0x15c/0x700 [ 2464.372449][T31228] ? __alloc_pages_bulk+0xe60/0xe60 [ 2464.377495][T31228] __alloc_pages+0x138/0x5e0 [ 2464.381911][T31228] ? prep_new_page+0x110/0x110 [ 2464.386510][T31228] ? __alloc_pages+0x5e0/0x5e0 [ 2464.391110][T31228] pte_alloc_one+0x73/0x1b0 [ 2464.395447][T31228] ? pfn_modify_allowed+0x2f0/0x2f0 [ 2464.400482][T31228] ? __alloc_pages+0x206/0x5e0 [ 2464.405253][T31228] __pte_alloc+0x86/0x350 [ 2464.409424][T31228] ? free_pgtables+0x280/0x280 [ 2464.414019][T31228] ? _raw_spin_lock+0xa4/0x1b0 [ 2464.418618][T31228] ? _raw_spin_trylock_bh+0x190/0x190 [ 2464.423828][T31228] ? __mod_node_page_state+0xac/0xf0 [ 2464.428948][T31228] handle_pte_fault+0x1f41/0x2340 [ 2464.434593][T31228] ? __pud_alloc+0x260/0x260 [ 2464.439033][T31228] ? fault_around_bytes_set+0xc0/0xc0 [ 2464.444223][T31228] ? __pagevec_lru_add+0xcde/0xd70 [ 2464.449174][T31228] do_handle_mm_fault+0x1fed/0x2330 [ 2464.454206][T31228] ? numa_migrate_prep+0xe0/0xe0 [ 2464.458990][T31228] ? kstrtouint_from_user+0x20a/0x2a0 [ 2464.464184][T31228] ? kstrtol_from_user+0x310/0x310 [ 2464.469133][T31228] ? do_handle_mm_fault+0x1949/0x2330 [ 2464.474343][T31228] ? down_read_trylock+0x1f9/0x300 [ 2464.479288][T31228] ? __find_vma+0x136/0x150 [ 2464.483681][T31228] exc_page_fault+0x3b5/0x830 [ 2464.488145][T31228] asm_exc_page_fault+0x27/0x30 [ 2464.494130][T31228] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 2464.499684][T31228] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 0f 1f 44 00 00 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 66 0f 1f 44 00 00 48 bb f9 ef ff ff ff 7f [ 2464.519124][T31228] RSP: 0018:ffffc90004b3fdf8 EFLAGS: 00050293 [ 2464.525034][T31228] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 0000000020000040 [ 2464.533618][T31228] RDX: ffff8881148f62c0 RSI: 0000000000000005 RDI: 0000000000000000 [ 2464.541433][T31228] RBP: ffffc90004b3fee8 R08: ffffffff83da45de R09: ffffed1020eb4f65 [ 2464.549269][T31228] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 2464.557571][T31228] R13: 1ffff92000967fc8 R14: 1ffff92000967fd0 R15: 0000000020000040 [ 2464.565384][T31228] ? __sys_socketpair+0x14e/0x6e0 [ 2464.570248][T31228] ? __sys_socketpair+0x171/0x6e0 [ 2464.575197][T31228] ? __ia32_sys_socket+0x90/0x90 [ 2464.579969][T31228] ? debug_smp_processor_id+0x17/0x20 [ 2464.585179][T31228] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2464.591074][T31228] __x64_sys_socketpair+0x9b/0xb0 [ 2464.595936][T31228] do_syscall_64+0x3d/0xb0 [ 2464.600190][T31228] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2464.605919][T31228] RIP: 0033:0x7f77057afae9 [ 2464.610172][T31228] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2464.630393][T31228] RSP: 002b:00007f77045320c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 2464.638639][T31228] RAX: ffffffffffffffda RBX: 00007f77058cef80 RCX: 00007f77057afae9 18:24:32 executing program 4: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040), 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$LINK_DETACH(0x22, &(0x7f0000000700), 0x4) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) bpf$ITER_CREATE(0x21, &(0x7f0000000740)={r3}, 0x8) recvmsg$unix(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000100)=""/201, 0xc9}, {&(0x7f0000000200)=""/37, 0x25}, {&(0x7f00000003c0)=""/123, 0x7b}, {&(0x7f0000000440)=""/75, 0x4b}, {&(0x7f00000004c0)=""/92, 0x5c}, {&(0x7f0000000540)=""/177, 0xb1}, {&(0x7f0000000600)=""/94, 0x5e}], 0x7}, 0x20) close(r2) 18:24:32 executing program 3: bpf$MAP_CREATE(0xa, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:32 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0xffffffffffffffe0, &(0x7f0000001440)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/192, 0xc0}], 0x7, &(0x7f00000014c0)=""/15, 0xf}, 0x0) (async) unlink(&(0x7f0000000000)='./file0\x00') 18:24:32 executing program 5: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4) 18:24:32 executing program 2: socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) (fail_nth: 3) 18:24:32 executing program 1: syz_clone(0x22001202, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2464.646447][T31228] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000010 [ 2464.654263][T31228] RBP: 00007f7704532120 R08: 0000000000000000 R09: 0000000000000000 [ 2464.662158][T31228] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 2464.669972][T31228] R13: 000000000000000b R14: 00007f77058cef80 R15: 00007fffa5f1a258 [ 2464.677793][T31228] 18:24:32 executing program 3: bpf$MAP_CREATE(0xb, &(0x7f0000000540)=@base={0xd}, 0x48) [ 2464.731046][T31250] FAULT_INJECTION: forcing a failure. [ 2464.731046][T31250] name failslab, interval 1, probability 0, space 0, times 0 [ 2464.742415][T31252] FAULT_INJECTION: forcing a failure. [ 2464.742415][T31252] name failslab, interval 1, probability 0, space 0, times 0 [ 2464.761190][T31250] CPU: 1 PID: 31250 Comm: syz-executor.5 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2464.771363][T31250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2464.781258][T31250] Call Trace: [ 2464.784394][T31250] [ 2464.787163][T31250] dump_stack_lvl+0x151/0x1b7 [ 2464.791674][T31250] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2464.797143][T31250] dump_stack+0x15/0x17 [ 2464.801133][T31250] should_fail+0x3c6/0x510 [ 2464.805387][T31250] __should_failslab+0xa4/0xe0 [ 2464.809987][T31250] ? alloc_vmap_area+0x644/0x1a80 [ 2464.814854][T31250] should_failslab+0x9/0x20 [ 2464.819189][T31250] slab_pre_alloc_hook+0x37/0xd0 [ 2464.823963][T31250] ? alloc_vmap_area+0x644/0x1a80 18:24:32 executing program 4: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040), 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$LINK_DETACH(0x22, &(0x7f0000000700), 0x4) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) bpf$ITER_CREATE(0x21, &(0x7f0000000740)={r3}, 0x8) recvmsg$unix(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000100)=""/201, 0xc9}, {&(0x7f0000000200)=""/37, 0x25}, {&(0x7f00000003c0)=""/123, 0x7b}, {&(0x7f0000000440)=""/75, 0x4b}, {&(0x7f00000004c0)=""/92, 0x5c}, {&(0x7f0000000540)=""/177, 0xb1}, {&(0x7f0000000600)=""/94, 0x5e}], 0x7}, 0x20) (async) recvmsg$unix(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000100)=""/201, 0xc9}, {&(0x7f0000000200)=""/37, 0x25}, {&(0x7f00000003c0)=""/123, 0x7b}, {&(0x7f0000000440)=""/75, 0x4b}, {&(0x7f00000004c0)=""/92, 0x5c}, {&(0x7f0000000540)=""/177, 0xb1}, {&(0x7f0000000600)=""/94, 0x5e}], 0x7}, 0x20) close(r2) (async) close(r2) 18:24:32 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0x0, 0x6, 0x18}, 0xc) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000003c0)={&(0x7f0000000100)="1f06836ee159682fbb4cfbe98b3851d7990b3b70796f9f0846b2941a5698b592b21fd399197e9068c87ef7f312f934d6c8a9b49206b0cc9759b376791cc8925893a48cbc55f3cb7744d2936c", &(0x7f0000000000)=""/15, &(0x7f0000000600)="67fded1f217a27351e40dba0ee3008799845175f77eaee0c84b6dcbb86ec4253e9a95b2ab278ee6abb847e9e14714bdb36334e6bf5f692716b84ea38ad4b88498c75061e0dfdcdd12b16755556fe7e04a4d9287699a47123c000f4684b5492102ce04498ae9a9bea6e4ef4abaf5203656c1d3d8853e5ff7aab677a707fbbfa34999aa325753b61129ebec9157befccb521e0c65037b0ececded4bb1d20522ff340fdc84ac790f3cffce623c2d6c50ae63d023f8462c39730d69d9b11f8302a57c8e72ab87c869bbaa790c026d8b2cf32272fb9d249ee592bfdd1cdc4b6b275ffc3d1b599bcbb", &(0x7f0000000700)="0df4699fb2c096eac209b6d5c930c2ec19968323f32a5ed0e21b9e4442bb1dd3e3e7c9d5d860e4388bc461923ce7e421c4b507c32e80ac7fdde0798b2c00290a26abbdc17c2291830cf155f4bdb3017f60c3d108c3dcea745b9fc9351c3559e9bd89629bf6aa596724fc0c48ab12530ab157bd436e583b22fb0042f8538184a413ca3a33813ef8decb1950d0a60bad9b", 0x9, r1}, 0x38) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000540)=""/140, 0x7f}, {&(0x7f00000001c0)=""/77, 0x4d}, {&(0x7f0000000240)=""/179, 0xb3}, {&(0x7f0000000340)=""/115, 0x73}, {&(0x7f0000000400)=""/187, 0xbb}], 0x5, &(0x7f0000000300)=""/16, 0x4}, 0x0) 18:24:32 executing program 3: bpf$MAP_CREATE(0xc, &(0x7f0000000540)=@base={0xd}, 0x48) [ 2464.828825][T31250] kmem_cache_alloc+0x44/0x200 [ 2464.833423][T31250] alloc_vmap_area+0x644/0x1a80 [ 2464.838108][T31250] ? vm_map_ram+0xa90/0xa90 [ 2464.842445][T31250] ? kmem_cache_alloc_trace+0x115/0x210 [ 2464.847824][T31250] ? __get_vm_area_node+0x117/0x360 [ 2464.852866][T31250] __get_vm_area_node+0x158/0x360 [ 2464.857726][T31250] __vmalloc_node_range+0xe2/0x8d0 [ 2464.862667][T31250] ? copy_process+0x5c4/0x3260 [ 2464.867272][T31250] ? slab_post_alloc_hook+0x72/0x2c0 [ 2464.872388][T31250] ? dup_task_struct+0x53/0xc60 [ 2464.877075][T31250] dup_task_struct+0x416/0xc60 [ 2464.881691][T31250] ? copy_process+0x5c4/0x3260 [ 2464.886298][T31250] ? __kasan_check_write+0x14/0x20 [ 2464.891225][T31250] copy_process+0x5c4/0x3260 [ 2464.895649][T31250] ? __kasan_check_write+0x14/0x20 [ 2464.900683][T31250] ? proc_fail_nth_write+0x20b/0x290 [ 2464.905805][T31250] ? selinux_file_permission+0x2c4/0x570 [ 2464.911359][T31250] ? fsnotify_perm+0x6a/0x5d0 [ 2464.915878][T31250] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2464.920819][T31250] ? vfs_write+0x9ec/0x1110 [ 2464.925165][T31250] kernel_clone+0x21e/0x9e0 [ 2464.929503][T31250] ? file_end_write+0x1c0/0x1c0 [ 2464.934271][T31250] ? create_io_thread+0x1e0/0x1e0 [ 2464.939132][T31250] ? mutex_unlock+0xb2/0x260 [ 2464.943557][T31250] ? __mutex_lock_slowpath+0x10/0x10 [ 2464.948682][T31250] __x64_sys_clone+0x23f/0x290 [ 2464.953280][T31250] ? __do_sys_vfork+0x130/0x130 [ 2464.957970][T31250] ? ksys_write+0x260/0x2c0 [ 2464.962316][T31250] ? debug_smp_processor_id+0x17/0x20 [ 2464.967516][T31250] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2464.973508][T31250] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2464.978973][T31250] do_syscall_64+0x3d/0xb0 [ 2464.983232][T31250] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2464.988952][T31250] RIP: 0033:0x7fdfd1d08ae9 [ 2464.993212][T31250] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2465.012652][T31250] RSP: 002b:00007fdfd0a8b078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2465.020890][T31250] RAX: ffffffffffffffda RBX: 00007fdfd1e27f80 RCX: 00007fdfd1d08ae9 [ 2465.028706][T31250] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022001200 [ 2465.036512][T31250] RBP: 00007fdfd0a8b120 R08: 0000000000000000 R09: 0000000000000000 [ 2465.044327][T31250] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 2465.052136][T31250] R13: 000000000000000b R14: 00007fdfd1e27f80 R15: 00007fff62717c48 [ 2465.059951][T31250] [ 2465.062811][T31252] CPU: 0 PID: 31252 Comm: syz-executor.2 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 18:24:32 executing program 1: syz_clone(0x22001207, 0x0, 0x0, 0x0, 0x0, 0x0) 18:24:32 executing program 1: syz_clone(0x22001209, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2465.072972][T31252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2465.082876][T31252] Call Trace: [ 2465.085991][T31252] [ 2465.088765][T31252] dump_stack_lvl+0x151/0x1b7 [ 2465.093283][T31252] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2465.098751][T31252] ? __mod_node_page_state+0xac/0xf0 [ 2465.103878][T31252] dump_stack+0x15/0x17 [ 2465.107873][T31252] should_fail+0x3c6/0x510 [ 2465.112118][T31252] __should_failslab+0xa4/0xe0 [ 2465.116715][T31252] ? __anon_vma_prepare+0x56/0x430 [ 2465.121664][T31252] should_failslab+0x9/0x20 [ 2465.126018][T31252] slab_pre_alloc_hook+0x37/0xd0 18:24:32 executing program 1: syz_clone(0x22001211, 0x0, 0x0, 0x0, 0x0, 0x0) 18:24:32 executing program 1: syz_clone(0x22001f00, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2465.130776][T31252] ? __anon_vma_prepare+0x56/0x430 [ 2465.135789][T31252] kmem_cache_alloc+0x44/0x200 [ 2465.140321][T31252] ? _raw_spin_lock+0xa4/0x1b0 [ 2465.144947][T31252] __anon_vma_prepare+0x56/0x430 [ 2465.149693][T31252] handle_pte_fault+0x1fd4/0x2340 [ 2465.154556][T31252] ? __pud_alloc+0x260/0x260 [ 2465.158984][T31252] ? fault_around_bytes_set+0xc0/0xc0 [ 2465.164189][T31252] ? _raw_spin_trylock+0xcd/0x1a0 [ 2465.169063][T31252] do_handle_mm_fault+0x1fed/0x2330 [ 2465.174088][T31252] ? numa_migrate_prep+0xe0/0xe0 18:24:32 executing program 1: syz_clone(0x22001200, 0x0, 0x2, 0x0, 0x0, 0x0) [ 2465.178945][T31252] ? kstrtouint_from_user+0x20a/0x2a0 [ 2465.184155][T31252] ? kstrtol_from_user+0x310/0x310 [ 2465.189099][T31252] ? do_handle_mm_fault+0x1949/0x2330 [ 2465.194308][T31252] ? down_read_trylock+0x1f9/0x300 [ 2465.199256][T31252] ? __find_vma+0x136/0x150 [ 2465.203594][T31252] exc_page_fault+0x3b5/0x830 [ 2465.208115][T31252] asm_exc_page_fault+0x27/0x30 [ 2465.212806][T31252] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 2465.218360][T31252] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 0f 1f 44 00 00 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 66 0f 1f 44 00 00 48 bb f9 ef ff ff ff 7f [ 2465.237789][T31252] RSP: 0018:ffffc90004cc7df8 EFLAGS: 00050293 [ 2465.243698][T31252] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 0000000020000040 [ 2465.251510][T31252] RDX: ffff88812685e2c0 RSI: 0000000000000005 RDI: 0000000000000000 [ 2465.259309][T31252] RBP: ffffc90004cc7ee8 R08: ffffffff83da45de R09: ffffed10258b3405 [ 2465.267121][T31252] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 2465.274935][T31252] R13: 1ffff92000998fc8 R14: 1ffff92000998fd0 R15: 0000000020000040 [ 2465.282751][T31252] ? __sys_socketpair+0x14e/0x6e0 [ 2465.287605][T31252] ? __sys_socketpair+0x171/0x6e0 [ 2465.292463][T31252] ? __ia32_sys_socket+0x90/0x90 [ 2465.297256][T31252] ? debug_smp_processor_id+0x17/0x20 [ 2465.302581][T31252] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2465.308480][T31252] __x64_sys_socketpair+0x9b/0xb0 [ 2465.313344][T31252] do_syscall_64+0x3d/0xb0 [ 2465.317597][T31252] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2465.323320][T31252] RIP: 0033:0x7f77057afae9 [ 2465.327724][T31252] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2465.347162][T31252] RSP: 002b:00007f77045320c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 2465.355404][T31252] RAX: ffffffffffffffda RBX: 00007f77058cef80 RCX: 00007f77057afae9 [ 2465.363216][T31252] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000010 [ 2465.371025][T31252] RBP: 00007f7704532120 R08: 0000000000000000 R09: 0000000000000000 18:24:32 executing program 5: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5) 18:24:32 executing program 2: socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) (fail_nth: 4) 18:24:32 executing program 1: syz_clone(0x22001200, 0x0, 0x7, 0x0, 0x0, 0x0) 18:24:32 executing program 3: bpf$MAP_CREATE(0xd, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:32 executing program 4: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040), 0x2, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$LINK_DETACH(0x22, &(0x7f0000000700), 0x4) (async) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) (async) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) bpf$ITER_CREATE(0x21, &(0x7f0000000740)={r3}, 0x8) (async) recvmsg$unix(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000100)=""/201, 0xc9}, {&(0x7f0000000200)=""/37, 0x25}, {&(0x7f00000003c0)=""/123, 0x7b}, {&(0x7f0000000440)=""/75, 0x4b}, {&(0x7f00000004c0)=""/92, 0x5c}, {&(0x7f0000000540)=""/177, 0xb1}, {&(0x7f0000000600)=""/94, 0x5e}], 0x7}, 0x20) close(r2) [ 2465.378837][T31252] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 2465.386654][T31252] R13: 000000000000000b R14: 00007f77058cef80 R15: 00007fffa5f1a258 [ 2465.394476][T31252] [ 2465.426030][T31292] FAULT_INJECTION: forcing a failure. [ 2465.426030][T31292] name failslab, interval 1, probability 0, space 0, times 0 [ 2465.442284][T31292] CPU: 0 PID: 31292 Comm: syz-executor.5 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2465.452469][T31292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2465.462356][T31292] Call Trace: [ 2465.465477][T31292] [ 2465.468256][T31292] dump_stack_lvl+0x151/0x1b7 [ 2465.472767][T31292] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2465.477773][T31297] FAULT_INJECTION: forcing a failure. [ 2465.477773][T31297] name failslab, interval 1, probability 0, space 0, times 0 [ 2465.478232][T31292] dump_stack+0x15/0x17 [ 2465.494637][T31292] should_fail+0x3c6/0x510 [ 2465.498895][T31292] __should_failslab+0xa4/0xe0 [ 2465.503500][T31292] should_failslab+0x9/0x20 [ 2465.507832][T31292] slab_pre_alloc_hook+0x37/0xd0 [ 2465.512604][T31292] kmem_cache_alloc_trace+0x48/0x210 [ 2465.517736][T31292] ? alloc_fdtable+0xaf/0x2a0 [ 2465.522240][T31292] alloc_fdtable+0xaf/0x2a0 [ 2465.526575][T31292] dup_fd+0x759/0xb00 [ 2465.530391][T31292] ? avc_has_perm+0x16f/0x260 [ 2465.534909][T31292] copy_files+0xe6/0x200 [ 2465.538985][T31292] ? perf_event_attrs+0x30/0x30 [ 2465.543669][T31292] ? dup_task_struct+0xc60/0xc60 [ 2465.548445][T31292] ? security_task_alloc+0xf9/0x130 [ 2465.553481][T31292] copy_process+0x11f3/0x3260 [ 2465.558004][T31292] ? proc_fail_nth_write+0x20b/0x290 [ 2465.563114][T31292] ? fsnotify_perm+0x6a/0x5d0 [ 2465.567626][T31292] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2465.572573][T31292] ? vfs_write+0x9ec/0x1110 [ 2465.576919][T31292] kernel_clone+0x21e/0x9e0 [ 2465.581253][T31292] ? file_end_write+0x1c0/0x1c0 [ 2465.585944][T31292] ? create_io_thread+0x1e0/0x1e0 [ 2465.590805][T31292] ? mutex_unlock+0xb2/0x260 [ 2465.595233][T31292] ? __mutex_lock_slowpath+0x10/0x10 [ 2465.600349][T31292] __x64_sys_clone+0x23f/0x290 [ 2465.604953][T31292] ? __do_sys_vfork+0x130/0x130 [ 2465.609634][T31292] ? ksys_write+0x260/0x2c0 [ 2465.613979][T31292] ? debug_smp_processor_id+0x17/0x20 [ 2465.619181][T31292] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2465.625084][T31292] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2465.630556][T31292] do_syscall_64+0x3d/0xb0 [ 2465.634805][T31292] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2465.640531][T31292] RIP: 0033:0x7fdfd1d08ae9 [ 2465.644784][T31292] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2465.664234][T31292] RSP: 002b:00007fdfd0a8b078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2465.672471][T31292] RAX: ffffffffffffffda RBX: 00007fdfd1e27f80 RCX: 00007fdfd1d08ae9 [ 2465.680284][T31292] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022001200 [ 2465.688097][T31292] RBP: 00007fdfd0a8b120 R08: 0000000000000000 R09: 0000000000000000 [ 2465.695907][T31292] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 2465.703719][T31292] R13: 000000000000000b R14: 00007fdfd1e27f80 R15: 00007fff62717c48 [ 2465.711532][T31292] [ 2465.714395][T31297] CPU: 1 PID: 31297 Comm: syz-executor.2 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2465.724548][T31297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2465.734439][T31297] Call Trace: [ 2465.737567][T31297] [ 2465.740345][T31297] dump_stack_lvl+0x151/0x1b7 [ 2465.744858][T31297] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2465.750325][T31297] dump_stack+0x15/0x17 [ 2465.754315][T31297] should_fail+0x3c6/0x510 [ 2465.758568][T31297] __should_failslab+0xa4/0xe0 [ 2465.763170][T31297] ? __anon_vma_prepare+0xa0/0x430 [ 2465.768119][T31297] should_failslab+0x9/0x20 [ 2465.772455][T31297] slab_pre_alloc_hook+0x37/0xd0 [ 2465.777231][T31297] ? __anon_vma_prepare+0xa0/0x430 [ 2465.782176][T31297] kmem_cache_alloc+0x44/0x200 [ 2465.786783][T31297] __anon_vma_prepare+0xa0/0x430 [ 2465.791550][T31297] handle_pte_fault+0x1fd4/0x2340 [ 2465.796547][T31297] ? __pud_alloc+0x260/0x260 [ 2465.800975][T31297] ? fault_around_bytes_set+0xc0/0xc0 [ 2465.806184][T31297] ? _raw_spin_trylock+0xcd/0x1a0 [ 2465.811074][T31297] do_handle_mm_fault+0x1fed/0x2330 [ 2465.816119][T31297] ? numa_migrate_prep+0xe0/0xe0 [ 2465.820850][T31297] ? kstrtouint_from_user+0x20a/0x2a0 [ 2465.826053][T31297] ? kstrtol_from_user+0x310/0x310 [ 2465.831001][T31297] ? do_handle_mm_fault+0x1949/0x2330 [ 2465.836211][T31297] ? down_read_trylock+0x1f9/0x300 [ 2465.841162][T31297] ? __find_vma+0x136/0x150 [ 2465.845498][T31297] exc_page_fault+0x3b5/0x830 [ 2465.850014][T31297] asm_exc_page_fault+0x27/0x30 [ 2465.854695][T31297] RIP: 0010:__put_user_nocheck_4+0x3/0x11 18:24:33 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) (async) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0x0, 0x6, 0x18}, 0xc) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000003c0)={&(0x7f0000000100)="1f06836ee159682fbb4cfbe98b3851d7990b3b70796f9f0846b2941a5698b592b21fd399197e9068c87ef7f312f934d6c8a9b49206b0cc9759b376791cc8925893a48cbc55f3cb7744d2936c", &(0x7f0000000000)=""/15, &(0x7f0000000600)="67fded1f217a27351e40dba0ee3008799845175f77eaee0c84b6dcbb86ec4253e9a95b2ab278ee6abb847e9e14714bdb36334e6bf5f692716b84ea38ad4b88498c75061e0dfdcdd12b16755556fe7e04a4d9287699a47123c000f4684b5492102ce04498ae9a9bea6e4ef4abaf5203656c1d3d8853e5ff7aab677a707fbbfa34999aa325753b61129ebec9157befccb521e0c65037b0ececded4bb1d20522ff340fdc84ac790f3cffce623c2d6c50ae63d023f8462c39730d69d9b11f8302a57c8e72ab87c869bbaa790c026d8b2cf32272fb9d249ee592bfdd1cdc4b6b275ffc3d1b599bcbb", &(0x7f0000000700)="0df4699fb2c096eac209b6d5c930c2ec19968323f32a5ed0e21b9e4442bb1dd3e3e7c9d5d860e4388bc461923ce7e421c4b507c32e80ac7fdde0798b2c00290a26abbdc17c2291830cf155f4bdb3017f60c3d108c3dcea745b9fc9351c3559e9bd89629bf6aa596724fc0c48ab12530ab157bd436e583b22fb0042f8538184a413ca3a33813ef8decb1950d0a60bad9b", 0x9, r1}, 0x38) (async) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000540)=""/140, 0x7f}, {&(0x7f00000001c0)=""/77, 0x4d}, {&(0x7f0000000240)=""/179, 0xb3}, {&(0x7f0000000340)=""/115, 0x73}, {&(0x7f0000000400)=""/187, 0xbb}], 0x5, &(0x7f0000000300)=""/16, 0x4}, 0x0) 18:24:33 executing program 3: bpf$MAP_CREATE(0xe, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:33 executing program 1: syz_clone(0x22001200, 0x0, 0x8, 0x0, 0x0, 0x0) 18:24:33 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) openat$cgroup(r2, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup(r2, &(0x7f0000001640)='syz0\x00', 0x200002, 0x0) r3 = syz_clone(0xe0200200, &(0x7f0000000080)="7b96f3041eb417310cbaafa7db610618a95c680a4427ae85", 0x18, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f00000003c0)="b7c90a9246e75f00b77880638b63bca5726e139fbd72b240c6711afbced75b32e7a56f4eaece3d94ce60a45b37835a99f341d79c058ed8ea184e8030cc2032556193761dc5089350cd01ce1f3c686f9621755af3db40aace049482be30d0feece727b3293c434dc2337e712652afe325baaff87a841d51dfad00488ce1d28175b3a68bbf3fc4eb99efc257a750e7c23b16cf0c5425c0fa17b624b644ff0e59380e487cb586ae248c7f7a12ab64") perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3d, 0x4, @perf_bp={&(0x7f0000000040), 0x1}, 0x0, 0x8, 0x2000000, 0x8, 0x1, 0x7fffffff, 0x9, 0x0, 0x7, 0x0, 0x6}, r3, 0x10, 0xffffffffffffffff, 0x8) openat$cgroup_ro(r2, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) close(r1) [ 2465.860249][T31297] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 0f 1f 44 00 00 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 66 0f 1f 44 00 00 48 bb f9 ef ff ff ff 7f [ 2465.879803][T31297] RSP: 0018:ffffc90004d9fdf8 EFLAGS: 00050293 [ 2465.885699][T31297] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 0000000020000040 [ 2465.893509][T31297] RDX: ffff888166d9a780 RSI: 0000000000000005 RDI: 0000000000000000 [ 2465.901330][T31297] RBP: ffffc90004d9fee8 R08: ffffffff83da45de R09: ffffed1022a96e65 [ 2465.909138][T31297] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 2465.916957][T31297] R13: 1ffff920009b3fc8 R14: 1ffff920009b3fd0 R15: 0000000020000040 18:24:33 executing program 1: syz_clone(0x22001200, 0x0, 0x9, 0x0, 0x0, 0x0) 18:24:33 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0x0, 0x6, 0x18}, 0xc) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000003c0)={&(0x7f0000000100)="1f06836ee159682fbb4cfbe98b3851d7990b3b70796f9f0846b2941a5698b592b21fd399197e9068c87ef7f312f934d6c8a9b49206b0cc9759b376791cc8925893a48cbc55f3cb7744d2936c", &(0x7f0000000000)=""/15, &(0x7f0000000600)="67fded1f217a27351e40dba0ee3008799845175f77eaee0c84b6dcbb86ec4253e9a95b2ab278ee6abb847e9e14714bdb36334e6bf5f692716b84ea38ad4b88498c75061e0dfdcdd12b16755556fe7e04a4d9287699a47123c000f4684b5492102ce04498ae9a9bea6e4ef4abaf5203656c1d3d8853e5ff7aab677a707fbbfa34999aa325753b61129ebec9157befccb521e0c65037b0ececded4bb1d20522ff340fdc84ac790f3cffce623c2d6c50ae63d023f8462c39730d69d9b11f8302a57c8e72ab87c869bbaa790c026d8b2cf32272fb9d249ee592bfdd1cdc4b6b275ffc3d1b599bcbb", &(0x7f0000000700)="0df4699fb2c096eac209b6d5c930c2ec19968323f32a5ed0e21b9e4442bb1dd3e3e7c9d5d860e4388bc461923ce7e421c4b507c32e80ac7fdde0798b2c00290a26abbdc17c2291830cf155f4bdb3017f60c3d108c3dcea745b9fc9351c3559e9bd89629bf6aa596724fc0c48ab12530ab157bd436e583b22fb0042f8538184a413ca3a33813ef8decb1950d0a60bad9b", 0x9, r1}, 0x38) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000540)=""/140, 0x7f}, {&(0x7f00000001c0)=""/77, 0x4d}, {&(0x7f0000000240)=""/179, 0xb3}, {&(0x7f0000000340)=""/115, 0x73}, {&(0x7f0000000400)=""/187, 0xbb}], 0x5, &(0x7f0000000300)=""/16, 0x4}, 0x0) (async) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000540)=""/140, 0x7f}, {&(0x7f00000001c0)=""/77, 0x4d}, {&(0x7f0000000240)=""/179, 0xb3}, {&(0x7f0000000340)=""/115, 0x73}, {&(0x7f0000000400)=""/187, 0xbb}], 0x5, &(0x7f0000000300)=""/16, 0x4}, 0x0) [ 2465.924765][T31297] ? __sys_socketpair+0x14e/0x6e0 [ 2465.929625][T31297] ? __sys_socketpair+0x171/0x6e0 [ 2465.934486][T31297] ? __ia32_sys_socket+0x90/0x90 [ 2465.939257][T31297] ? debug_smp_processor_id+0x17/0x20 [ 2465.944461][T31297] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2465.950379][T31297] __x64_sys_socketpair+0x9b/0xb0 [ 2465.955225][T31297] do_syscall_64+0x3d/0xb0 [ 2465.959476][T31297] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2465.965209][T31297] RIP: 0033:0x7f77057afae9 18:24:33 executing program 3: bpf$MAP_CREATE(0xf, &(0x7f0000000540)=@base={0xd}, 0x48) [ 2465.969461][T31297] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2465.988905][T31297] RSP: 002b:00007f77045320c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 2465.997151][T31297] RAX: ffffffffffffffda RBX: 00007f77058cef80 RCX: 00007f77057afae9 [ 2466.004956][T31297] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000010 [ 2466.012769][T31297] RBP: 00007f7704532120 R08: 0000000000000000 R09: 0000000000000000 [ 2466.020580][T31297] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 18:24:33 executing program 5: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 6) 18:24:33 executing program 2: socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) (fail_nth: 5) 18:24:33 executing program 1: syz_clone(0x22001200, 0x0, 0x11, 0x0, 0x0, 0x0) 18:24:33 executing program 3: bpf$MAP_CREATE(0x10, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:33 executing program 3: bpf$MAP_CREATE(0x11, &(0x7f0000000540)=@base={0xd}, 0x48) [ 2466.028392][T31297] R13: 000000000000000b R14: 00007f77058cef80 R15: 00007fffa5f1a258 [ 2466.036208][T31297] [ 2466.066007][T31320] FAULT_INJECTION: forcing a failure. [ 2466.066007][T31320] name failslab, interval 1, probability 0, space 0, times 0 18:24:33 executing program 3: bpf$MAP_CREATE(0x12, &(0x7f0000000540)=@base={0xd}, 0x48) [ 2466.115059][T31328] FAULT_INJECTION: forcing a failure. [ 2466.115059][T31328] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2466.119131][T31320] CPU: 1 PID: 31320 Comm: syz-executor.5 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2466.138285][T31320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2466.148183][T31320] Call Trace: [ 2466.151310][T31320] [ 2466.154082][T31320] dump_stack_lvl+0x151/0x1b7 [ 2466.158597][T31320] ? io_uring_drop_tctx_refs+0x190/0x190 18:24:33 executing program 3: bpf$MAP_CREATE(0x13, &(0x7f0000000540)=@base={0xd}, 0x48) [ 2466.164063][T31320] ? __kasan_kmalloc+0x9/0x10 [ 2466.168575][T31320] ? alloc_fdtable+0xaf/0x2a0 [ 2466.173088][T31320] ? dup_fd+0x759/0xb00 [ 2466.177079][T31320] ? copy_files+0xe6/0x200 [ 2466.181346][T31320] ? kernel_clone+0x21e/0x9e0 [ 2466.185846][T31320] ? __x64_sys_clone+0x23f/0x290 [ 2466.190621][T31320] ? do_syscall_64+0x3d/0xb0 [ 2466.195048][T31320] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2466.200949][T31320] dump_stack+0x15/0x17 [ 2466.204943][T31320] should_fail+0x3c6/0x510 [ 2466.209205][T31320] __should_failslab+0xa4/0xe0 [ 2466.213799][T31320] should_failslab+0x9/0x20 [ 2466.218135][T31320] slab_pre_alloc_hook+0x37/0xd0 [ 2466.222912][T31320] __kmalloc+0x6d/0x270 [ 2466.226902][T31320] ? kvmalloc_node+0x1f0/0x4d0 [ 2466.231498][T31320] kvmalloc_node+0x1f0/0x4d0 [ 2466.235928][T31320] ? vm_mmap+0xb0/0xb0 [ 2466.239834][T31320] ? __kasan_kmalloc+0x9/0x10 [ 2466.244346][T31320] ? kmem_cache_alloc_trace+0x115/0x210 [ 2466.249725][T31320] ? alloc_fdtable+0xaf/0x2a0 [ 2466.254240][T31320] alloc_fdtable+0xeb/0x2a0 [ 2466.258585][T31320] dup_fd+0x759/0xb00 18:24:33 executing program 3: bpf$MAP_CREATE(0x14, &(0x7f0000000540)=@base={0xd}, 0x48) [ 2466.262398][T31320] ? avc_has_perm+0x16f/0x260 [ 2466.266913][T31320] copy_files+0xe6/0x200 [ 2466.270991][T31320] ? perf_event_attrs+0x30/0x30 [ 2466.275689][T31320] ? dup_task_struct+0xc60/0xc60 [ 2466.280452][T31320] ? security_task_alloc+0xf9/0x130 [ 2466.285487][T31320] copy_process+0x11f3/0x3260 [ 2466.290162][T31320] ? proc_fail_nth_write+0x20b/0x290 [ 2466.295362][T31320] ? fsnotify_perm+0x6a/0x5d0 [ 2466.299882][T31320] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2466.304823][T31320] ? vfs_write+0x9ec/0x1110 [ 2466.309170][T31320] kernel_clone+0x21e/0x9e0 [ 2466.313506][T31320] ? file_end_write+0x1c0/0x1c0 [ 2466.318193][T31320] ? create_io_thread+0x1e0/0x1e0 [ 2466.323049][T31320] ? mutex_unlock+0xb2/0x260 [ 2466.327477][T31320] ? __mutex_lock_slowpath+0x10/0x10 [ 2466.332599][T31320] __x64_sys_clone+0x23f/0x290 [ 2466.337198][T31320] ? __do_sys_vfork+0x130/0x130 [ 2466.341968][T31320] ? ksys_write+0x260/0x2c0 [ 2466.346312][T31320] ? debug_smp_processor_id+0x17/0x20 [ 2466.351519][T31320] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2466.357424][T31320] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2466.362894][T31320] do_syscall_64+0x3d/0xb0 [ 2466.367145][T31320] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2466.372874][T31320] RIP: 0033:0x7fdfd1d08ae9 [ 2466.377124][T31320] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2466.396566][T31320] RSP: 002b:00007fdfd0a8b078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2466.404810][T31320] RAX: ffffffffffffffda RBX: 00007fdfd1e27f80 RCX: 00007fdfd1d08ae9 [ 2466.412619][T31320] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022001200 [ 2466.420433][T31320] RBP: 00007fdfd0a8b120 R08: 0000000000000000 R09: 0000000000000000 [ 2466.428248][T31320] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 2466.436066][T31320] R13: 000000000000000b R14: 00007fdfd1e27f80 R15: 00007fff62717c48 [ 2466.443870][T31320] [ 2466.449685][T31328] CPU: 0 PID: 31328 Comm: syz-executor.2 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2466.459858][T31328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2466.470021][T31328] Call Trace: [ 2466.473147][T31328] [ 2466.475913][T31328] dump_stack_lvl+0x151/0x1b7 [ 2466.480430][T31328] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2466.485897][T31328] ? do_handle_mm_fault+0x1fed/0x2330 [ 2466.491110][T31328] ? asm_exc_page_fault+0x27/0x30 [ 2466.496071][T31328] ? __put_user_nocheck_4+0x3/0x11 [ 2466.501029][T31328] ? __x64_sys_socketpair+0x9b/0xb0 [ 2466.507618][T31328] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2466.513780][T31328] dump_stack+0x15/0x17 [ 2466.517858][T31328] should_fail+0x3c6/0x510 [ 2466.522112][T31328] should_fail_alloc_page+0x5a/0x80 [ 2466.527145][T31328] prepare_alloc_pages+0x15c/0x700 [ 2466.532094][T31328] ? __alloc_pages_bulk+0xe60/0xe60 [ 2466.537143][T31328] __alloc_pages+0x138/0x5e0 [ 2466.541549][T31328] ? vma_interval_tree_augment_rotate+0x1d0/0x1d0 [ 2466.547803][T31328] ? prep_new_page+0x110/0x110 [ 2466.552405][T31328] ? up_write+0x79/0x1f0 [ 2466.556484][T31328] ? __anon_vma_prepare+0x3a4/0x430 [ 2466.561513][T31328] handle_pte_fault+0xe1f/0x2340 [ 2466.566283][T31328] ? __pud_alloc+0x260/0x260 [ 2466.570708][T31328] ? fault_around_bytes_set+0xc0/0xc0 [ 2466.575916][T31328] ? _raw_spin_trylock+0xcd/0x1a0 [ 2466.580781][T31328] do_handle_mm_fault+0x1fed/0x2330 [ 2466.585814][T31328] ? numa_migrate_prep+0xe0/0xe0 [ 2466.590585][T31328] ? kstrtouint_from_user+0x20a/0x2a0 [ 2466.595793][T31328] ? kstrtol_from_user+0x310/0x310 [ 2466.600738][T31328] ? do_handle_mm_fault+0x1949/0x2330 [ 2466.605962][T31328] ? down_read_trylock+0x1f9/0x300 [ 2466.611007][T31328] ? __find_vma+0x136/0x150 [ 2466.615338][T31328] exc_page_fault+0x3b5/0x830 [ 2466.619863][T31328] asm_exc_page_fault+0x27/0x30 [ 2466.624543][T31328] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 2466.630089][T31328] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 0f 1f 44 00 00 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 66 0f 1f 44 00 00 48 bb f9 ef ff ff ff 7f [ 2466.649534][T31328] RSP: 0018:ffffc90005697df8 EFLAGS: 00050293 [ 2466.655437][T31328] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 0000000020000040 [ 2466.663243][T31328] RDX: ffff888117d03b40 RSI: 0000000000000005 RDI: 0000000000000000 [ 2466.671057][T31328] RBP: ffffc90005697ee8 R08: ffffffff83da45de R09: ffffed1022a96f35 [ 2466.678870][T31328] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 2466.686678][T31328] R13: 1ffff92000ad2fc8 R14: 1ffff92000ad2fd0 R15: 0000000020000040 [ 2466.694495][T31328] ? __sys_socketpair+0x14e/0x6e0 [ 2466.699352][T31328] ? __sys_socketpair+0x171/0x6e0 [ 2466.704211][T31328] ? __ia32_sys_socket+0x90/0x90 [ 2466.708987][T31328] ? debug_smp_processor_id+0x17/0x20 [ 2466.714192][T31328] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2466.720094][T31328] __x64_sys_socketpair+0x9b/0xb0 [ 2466.724953][T31328] do_syscall_64+0x3d/0xb0 [ 2466.729208][T31328] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2466.734935][T31328] RIP: 0033:0x7f77057afae9 [ 2466.739192][T31328] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2466.758632][T31328] RSP: 002b:00007f77045320c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 18:24:34 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) openat$cgroup(r2, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup(r2, &(0x7f0000001640)='syz0\x00', 0x200002, 0x0) r3 = syz_clone(0xe0200200, &(0x7f0000000080)="7b96f3041eb417310cbaafa7db610618a95c680a4427ae85", 0x18, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f00000003c0)="b7c90a9246e75f00b77880638b63bca5726e139fbd72b240c6711afbced75b32e7a56f4eaece3d94ce60a45b37835a99f341d79c058ed8ea184e8030cc2032556193761dc5089350cd01ce1f3c686f9621755af3db40aace049482be30d0feece727b3293c434dc2337e712652afe325baaff87a841d51dfad00488ce1d28175b3a68bbf3fc4eb99efc257a750e7c23b16cf0c5425c0fa17b624b644ff0e59380e487cb586ae248c7f7a12ab64") perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3d, 0x4, @perf_bp={&(0x7f0000000040), 0x1}, 0x0, 0x8, 0x2000000, 0x8, 0x1, 0x7fffffff, 0x9, 0x0, 0x7, 0x0, 0x6}, r3, 0x10, 0xffffffffffffffff, 0x8) openat$cgroup_ro(r2, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) (async) openat$cgroup(r2, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) (async) openat$cgroup(r2, &(0x7f0000001640)='syz0\x00', 0x200002, 0x0) (async) syz_clone(0xe0200200, &(0x7f0000000080)="7b96f3041eb417310cbaafa7db610618a95c680a4427ae85", 0x18, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f00000003c0)="b7c90a9246e75f00b77880638b63bca5726e139fbd72b240c6711afbced75b32e7a56f4eaece3d94ce60a45b37835a99f341d79c058ed8ea184e8030cc2032556193761dc5089350cd01ce1f3c686f9621755af3db40aace049482be30d0feece727b3293c434dc2337e712652afe325baaff87a841d51dfad00488ce1d28175b3a68bbf3fc4eb99efc257a750e7c23b16cf0c5425c0fa17b624b644ff0e59380e487cb586ae248c7f7a12ab64") (async) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3d, 0x4, @perf_bp={&(0x7f0000000040), 0x1}, 0x0, 0x8, 0x2000000, 0x8, 0x1, 0x7fffffff, 0x9, 0x0, 0x7, 0x0, 0x6}, r3, 0x10, 0xffffffffffffffff, 0x8) (async) openat$cgroup_ro(r2, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) (async) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) (async) close(r1) (async) 18:24:34 executing program 1: syz_clone(0x22001200, 0x0, 0x700, 0x0, 0x0, 0x0) 18:24:34 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='pids.current\x00', 0x0, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000180), 0x2, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0)={r0}, 0x8) r3 = openat$cgroup(r1, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) openat$cgroup_subtree(r3, &(0x7f0000000280), 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0xfffffffffffffff9, 0x12) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x20, 0x77, 0x6, 0x2e, 0x0, 0xe1, 0x400, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x2, 0xad8}, 0x102012, 0x7, 0x10001, 0x5, 0xfffffffffffffff9, 0x6, 0x8, 0x0, 0x11, 0x0, 0x2}, 0xffffffffffffffff, 0x10, r2, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@ifindex, 0x2f, 0x1, 0x6, &(0x7f00000002c0)=[0x0], 0x1, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) [ 2466.766875][T31328] RAX: ffffffffffffffda RBX: 00007f77058cef80 RCX: 00007f77057afae9 [ 2466.774686][T31328] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000010 [ 2466.782498][T31328] RBP: 00007f7704532120 R08: 0000000000000000 R09: 0000000000000000 [ 2466.790309][T31328] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 2466.798121][T31328] R13: 000000000000000b R14: 00007f77058cef80 R15: 00007fffa5f1a258 [ 2466.806040][T31328] 18:24:34 executing program 3: bpf$MAP_CREATE(0x15, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:34 executing program 5: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 7) 18:24:34 executing program 2: socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) (fail_nth: 6) 18:24:34 executing program 3: bpf$MAP_CREATE(0x16, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:34 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='pids.current\x00', 0x0, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000180), 0x2, 0x0) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0)={r0}, 0x8) r3 = openat$cgroup(r1, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) openat$cgroup_subtree(r3, &(0x7f0000000280), 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0xfffffffffffffff9, 0x12) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x20, 0x77, 0x6, 0x2e, 0x0, 0xe1, 0x400, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x2, 0xad8}, 0x102012, 0x7, 0x10001, 0x5, 0xfffffffffffffff9, 0x6, 0x8, 0x0, 0x11, 0x0, 0x2}, 0xffffffffffffffff, 0x10, r2, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@ifindex, 0x2f, 0x1, 0x6, &(0x7f00000002c0)=[0x0], 0x1, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) 18:24:34 executing program 3: bpf$MAP_CREATE(0x17, &(0x7f0000000540)=@base={0xd}, 0x48) [ 2466.840705][T31343] FAULT_INJECTION: forcing a failure. [ 2466.840705][T31343] name failslab, interval 1, probability 0, space 0, times 0 [ 2466.870159][T31350] FAULT_INJECTION: forcing a failure. [ 2466.870159][T31350] name failslab, interval 1, probability 0, space 0, times 0 [ 2466.887855][T31343] CPU: 0 PID: 31343 Comm: syz-executor.5 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2466.898031][T31343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2466.907927][T31343] Call Trace: [ 2466.911050][T31343] [ 2466.913832][T31343] dump_stack_lvl+0x151/0x1b7 [ 2466.918340][T31343] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2466.923811][T31343] dump_stack+0x15/0x17 [ 2466.927806][T31343] should_fail+0x3c6/0x510 [ 2466.932057][T31343] __should_failslab+0xa4/0xe0 [ 2466.936652][T31343] should_failslab+0x9/0x20 18:24:34 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='pids.current\x00', 0x0, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000180), 0x2, 0x0) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0)={r0}, 0x8) r3 = openat$cgroup(r1, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) openat$cgroup_subtree(r3, &(0x7f0000000280), 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0xfffffffffffffff9, 0x12) (async) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x20, 0x77, 0x6, 0x2e, 0x0, 0xe1, 0x400, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x2, 0xad8}, 0x102012, 0x7, 0x10001, 0x5, 0xfffffffffffffff9, 0x6, 0x8, 0x0, 0x11, 0x0, 0x2}, 0xffffffffffffffff, 0x10, r2, 0x2) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@ifindex, 0x2f, 0x1, 0x6, &(0x7f00000002c0)=[0x0], 0x1, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) (rerun: 64) 18:24:34 executing program 3: bpf$MAP_CREATE(0x18, &(0x7f0000000540)=@base={0xd}, 0x48) [ 2466.940987][T31343] slab_pre_alloc_hook+0x37/0xd0 [ 2466.945762][T31343] __kmalloc+0x6d/0x270 [ 2466.949761][T31343] ? __vmalloc_node_range+0x2d6/0x8d0 [ 2466.954965][T31343] __vmalloc_node_range+0x2d6/0x8d0 [ 2466.960003][T31343] ? dup_task_struct+0x53/0xc60 [ 2466.964684][T31343] ? dup_task_struct+0x53/0xc60 [ 2466.969372][T31343] dup_task_struct+0x416/0xc60 [ 2466.973974][T31343] ? copy_process+0x5c4/0x3260 [ 2466.978570][T31343] ? __kasan_check_write+0x14/0x20 [ 2466.983524][T31343] copy_process+0x5c4/0x3260 18:24:34 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0xffffffffffffffe0, &(0x7f0000001440)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/192, 0xc0}], 0x7, &(0x7f00000014c0)=""/15, 0xf}, 0x0) recvmsg(r0, &(0x7f00000018c0)={&(0x7f0000001540)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000001880)=[{&(0x7f00000015c0)=""/169, 0xa9}, {}, {&(0x7f0000001680)=""/226, 0xe2}, {&(0x7f0000001780)=""/216, 0xd8}], 0x4}, 0x20) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup(r1, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r2, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r2, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r3, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r3}, 0x20) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r3}, 0x8) recvmsg$unix(r4, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001980)={r4, 0x20, &(0x7f0000001940)={&(0x7f0000000000)=""/35, 0x23, 0x0, &(0x7f0000001900)=""/48, 0x30}}, 0x10) [ 2466.987948][T31343] ? __kasan_check_write+0x14/0x20 [ 2466.993004][T31343] ? proc_fail_nth_write+0x20b/0x290 [ 2466.998103][T31343] ? selinux_file_permission+0x2c4/0x570 [ 2467.003570][T31343] ? fsnotify_perm+0x6a/0x5d0 [ 2467.008087][T31343] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2467.013171][T31343] ? vfs_write+0x9ec/0x1110 [ 2467.017509][T31343] kernel_clone+0x21e/0x9e0 [ 2467.021849][T31343] ? file_end_write+0x1c0/0x1c0 [ 2467.026538][T31343] ? create_io_thread+0x1e0/0x1e0 [ 2467.031394][T31343] ? mutex_unlock+0xb2/0x260 [ 2467.035818][T31343] ? __mutex_lock_slowpath+0x10/0x10 [ 2467.040940][T31343] __x64_sys_clone+0x23f/0x290 [ 2467.045541][T31343] ? __do_sys_vfork+0x130/0x130 [ 2467.050229][T31343] ? ksys_write+0x260/0x2c0 [ 2467.054573][T31343] ? debug_smp_processor_id+0x17/0x20 [ 2467.059776][T31343] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2467.065678][T31343] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2467.071145][T31343] do_syscall_64+0x3d/0xb0 [ 2467.075404][T31343] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2467.081355][T31343] RIP: 0033:0x7fdfd1d08ae9 [ 2467.085609][T31343] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2467.105180][T31343] RSP: 002b:00007fdfd0a8b078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2467.113423][T31343] RAX: ffffffffffffffda RBX: 00007fdfd1e27f80 RCX: 00007fdfd1d08ae9 [ 2467.121364][T31343] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022001200 [ 2467.129172][T31343] RBP: 00007fdfd0a8b120 R08: 0000000000000000 R09: 0000000000000000 [ 2467.136981][T31343] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 2467.144788][T31343] R13: 000000000000000b R14: 00007fdfd1e27f80 R15: 00007fff62717c48 [ 2467.152738][T31343] [ 2467.155973][T31350] CPU: 1 PID: 31350 Comm: syz-executor.2 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2467.166134][T31350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2467.176036][T31350] Call Trace: [ 2467.179155][T31350] [ 2467.181930][T31350] dump_stack_lvl+0x151/0x1b7 [ 2467.186443][T31350] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2467.191917][T31350] ? avc_has_perm+0x16f/0x260 [ 2467.196438][T31350] dump_stack+0x15/0x17 [ 2467.200429][T31350] should_fail+0x3c6/0x510 [ 2467.204676][T31350] __should_failslab+0xa4/0xe0 [ 2467.209280][T31350] ? sock_alloc_inode+0x1b/0xb0 [ 2467.213959][T31350] should_failslab+0x9/0x20 [ 2467.218295][T31350] slab_pre_alloc_hook+0x37/0xd0 [ 2467.223069][T31350] ? sock_alloc_inode+0x1b/0xb0 [ 2467.227756][T31350] kmem_cache_alloc+0x44/0x200 [ 2467.232357][T31350] ? sockfs_init_fs_context+0xb0/0xb0 [ 2467.237664][T31350] sock_alloc_inode+0x1b/0xb0 [ 2467.242176][T31350] ? sockfs_init_fs_context+0xb0/0xb0 [ 2467.247396][T31350] new_inode_pseudo+0x64/0x220 [ 2467.252098][T31350] __sock_create+0x135/0x760 [ 2467.256513][T31350] ? __sys_socketpair+0x14e/0x6e0 [ 2467.261377][T31350] __sys_socketpair+0x29f/0x6e0 [ 2467.266198][T31350] ? __ia32_sys_socket+0x90/0x90 [ 2467.270968][T31350] ? debug_smp_processor_id+0x17/0x20 [ 2467.276299][T31350] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2467.282284][T31350] __x64_sys_socketpair+0x9b/0xb0 [ 2467.287226][T31350] do_syscall_64+0x3d/0xb0 [ 2467.291488][T31350] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2467.297209][T31350] RIP: 0033:0x7f77057afae9 [ 2467.301459][T31350] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2467.320902][T31350] RSP: 002b:00007f77045320c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 2467.329145][T31350] RAX: ffffffffffffffda RBX: 00007f77058cef80 RCX: 00007f77057afae9 18:24:34 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) openat$cgroup(r2, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup(r2, &(0x7f0000001640)='syz0\x00', 0x200002, 0x0) r3 = syz_clone(0xe0200200, &(0x7f0000000080)="7b96f3041eb417310cbaafa7db610618a95c680a4427ae85", 0x18, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f00000003c0)="b7c90a9246e75f00b77880638b63bca5726e139fbd72b240c6711afbced75b32e7a56f4eaece3d94ce60a45b37835a99f341d79c058ed8ea184e8030cc2032556193761dc5089350cd01ce1f3c686f9621755af3db40aace049482be30d0feece727b3293c434dc2337e712652afe325baaff87a841d51dfad00488ce1d28175b3a68bbf3fc4eb99efc257a750e7c23b16cf0c5425c0fa17b624b644ff0e59380e487cb586ae248c7f7a12ab64") perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3d, 0x4, @perf_bp={&(0x7f0000000040), 0x1}, 0x0, 0x8, 0x2000000, 0x8, 0x1, 0x7fffffff, 0x9, 0x0, 0x7, 0x0, 0x6}, r3, 0x10, 0xffffffffffffffff, 0x8) (async) openat$cgroup_ro(r2, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) (async) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) (async) close(r1) 18:24:34 executing program 1: syz_clone(0x22001200, 0x0, 0x900, 0x0, 0x0, 0x0) 18:24:34 executing program 3: bpf$MAP_CREATE(0x19, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:34 executing program 3: bpf$MAP_CREATE(0x1a, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:34 executing program 5: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 8) [ 2467.336961][T31350] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000010 [ 2467.344767][T31350] RBP: 00007f7704532120 R08: 0000000000000000 R09: 0000000000000000 [ 2467.352582][T31350] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 2467.360389][T31350] R13: 000000000000000b R14: 00007f77058cef80 R15: 00007fffa5f1a258 [ 2467.368211][T31350] [ 2467.426912][T31387] FAULT_INJECTION: forcing a failure. [ 2467.426912][T31387] name failslab, interval 1, probability 0, space 0, times 0 [ 2467.464088][T31387] CPU: 1 PID: 31387 Comm: syz-executor.5 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 18:24:34 executing program 2: socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) (fail_nth: 7) 18:24:34 executing program 1: syz_clone(0x22001200, 0x0, 0x1100, 0x0, 0x0, 0x0) 18:24:34 executing program 3: bpf$MAP_CREATE(0x1b, &(0x7f0000000540)=@base={0xd}, 0x48) [ 2467.474271][T31387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2467.479216][T31350] socket: no more sockets [ 2467.484156][T31387] Call Trace: [ 2467.484168][T31387] [ 2467.484177][T31387] dump_stack_lvl+0x151/0x1b7 [ 2467.498747][T31387] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2467.504211][T31387] ? _raw_spin_lock+0xa4/0x1b0 [ 2467.508809][T31387] ? dup_fd+0x4ef/0xb00 [ 2467.512798][T31387] dump_stack+0x15/0x17 [ 2467.516799][T31387] should_fail+0x3c6/0x510 [ 2467.521045][T31387] __should_failslab+0xa4/0xe0 [ 2467.525644][T31387] ? copy_sighand+0x54/0x250 [ 2467.530081][T31387] should_failslab+0x9/0x20 [ 2467.534410][T31387] slab_pre_alloc_hook+0x37/0xd0 [ 2467.539191][T31387] ? copy_sighand+0x54/0x250 [ 2467.543608][T31387] kmem_cache_alloc+0x44/0x200 [ 2467.548212][T31387] copy_sighand+0x54/0x250 [ 2467.552462][T31387] copy_process+0x1249/0x3260 [ 2467.556978][T31387] ? proc_fail_nth_write+0x20b/0x290 [ 2467.562104][T31387] ? fsnotify_perm+0x6a/0x5d0 [ 2467.566614][T31387] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2467.571561][T31387] ? vfs_write+0x9ec/0x1110 [ 2467.575900][T31387] kernel_clone+0x21e/0x9e0 [ 2467.580234][T31387] ? file_end_write+0x1c0/0x1c0 [ 2467.584923][T31387] ? create_io_thread+0x1e0/0x1e0 [ 2467.589784][T31387] ? mutex_unlock+0xb2/0x260 [ 2467.594213][T31387] ? __mutex_lock_slowpath+0x10/0x10 [ 2467.599338][T31387] __x64_sys_clone+0x23f/0x290 [ 2467.603934][T31387] ? __do_sys_vfork+0x130/0x130 [ 2467.608614][T31387] ? ksys_write+0x260/0x2c0 [ 2467.612957][T31387] ? debug_smp_processor_id+0x17/0x20 [ 2467.618166][T31387] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2467.624068][T31387] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2467.629533][T31387] do_syscall_64+0x3d/0xb0 [ 2467.633786][T31387] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2467.639517][T31387] RIP: 0033:0x7fdfd1d08ae9 [ 2467.643776][T31387] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2467.663211][T31387] RSP: 002b:00007fdfd0a8b078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 18:24:35 executing program 3: bpf$MAP_CREATE(0x1c, &(0x7f0000000540)=@base={0xd}, 0x48) [ 2467.671542][T31387] RAX: ffffffffffffffda RBX: 00007fdfd1e27f80 RCX: 00007fdfd1d08ae9 [ 2467.679374][T31387] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022001200 [ 2467.687166][T31387] RBP: 00007fdfd0a8b120 R08: 0000000000000000 R09: 0000000000000000 [ 2467.694976][T31387] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 2467.702791][T31387] R13: 000000000000000b R14: 00007fdfd1e27f80 R15: 00007fff62717c48 [ 2467.710608][T31387] [ 2467.723803][T31397] FAULT_INJECTION: forcing a failure. [ 2467.723803][T31397] name failslab, interval 1, probability 0, space 0, times 0 [ 2467.736770][T31397] CPU: 1 PID: 31397 Comm: syz-executor.2 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2467.746938][T31397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2467.756833][T31397] Call Trace: [ 2467.759955][T31397] [ 2467.762731][T31397] dump_stack_lvl+0x151/0x1b7 [ 2467.767249][T31397] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2467.772715][T31397] dump_stack+0x15/0x17 [ 2467.776703][T31397] should_fail+0x3c6/0x510 [ 2467.780959][T31397] __should_failslab+0xa4/0xe0 [ 2467.785556][T31397] ? security_inode_alloc+0x29/0x120 [ 2467.790675][T31397] should_failslab+0x9/0x20 [ 2467.795019][T31397] slab_pre_alloc_hook+0x37/0xd0 [ 2467.799790][T31397] ? security_inode_alloc+0x29/0x120 [ 2467.804913][T31397] kmem_cache_alloc+0x44/0x200 [ 2467.809515][T31397] security_inode_alloc+0x29/0x120 [ 2467.814462][T31397] inode_init_always+0x76d/0x9d0 [ 2467.819231][T31397] ? sockfs_init_fs_context+0xb0/0xb0 18:24:35 executing program 1: syz_clone(0x22001200, 0x0, 0x1f00, 0x0, 0x0, 0x0) [ 2467.824439][T31397] new_inode_pseudo+0x93/0x220 [ 2467.829038][T31397] __sock_create+0x135/0x760 [ 2467.833474][T31397] ? __sys_socketpair+0x14e/0x6e0 [ 2467.838326][T31397] __sys_socketpair+0x29f/0x6e0 [ 2467.843015][T31397] ? __ia32_sys_socket+0x90/0x90 [ 2467.847798][T31397] ? debug_smp_processor_id+0x17/0x20 [ 2467.852993][T31397] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2467.858899][T31397] __x64_sys_socketpair+0x9b/0xb0 [ 2467.863783][T31397] do_syscall_64+0x3d/0xb0 [ 2467.868012][T31397] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2467.873739][T31397] RIP: 0033:0x7f77057afae9 [ 2467.877989][T31397] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2467.897431][T31397] RSP: 002b:00007f77045320c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 2467.905671][T31397] RAX: ffffffffffffffda RBX: 00007f77058cef80 RCX: 00007f77057afae9 [ 2467.913481][T31397] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000010 [ 2467.921297][T31397] RBP: 00007f7704532120 R08: 0000000000000000 R09: 0000000000000000 18:24:35 executing program 2: socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) (fail_nth: 8) 18:24:35 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0xffffffffffffffe0, &(0x7f0000001440)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/192, 0xc0}], 0x7, &(0x7f00000014c0)=""/15, 0xf}, 0x0) recvmsg(r0, &(0x7f00000018c0)={&(0x7f0000001540)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000001880)=[{&(0x7f00000015c0)=""/169, 0xa9}, {}, {&(0x7f0000001680)=""/226, 0xe2}, {&(0x7f0000001780)=""/216, 0xd8}], 0x4}, 0x20) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup(r1, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r2, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r2, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r3, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r3}, 0x20) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r3}, 0x8) recvmsg$unix(r4, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001980)={r4, 0x20, &(0x7f0000001940)={&(0x7f0000000000)=""/35, 0x23, 0x0, &(0x7f0000001900)=""/48, 0x30}}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0xffffffffffffffe0, &(0x7f0000001440)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/192, 0xc0}], 0x7, &(0x7f00000014c0)=""/15, 0xf}, 0x0) (async) recvmsg(r0, &(0x7f00000018c0)={&(0x7f0000001540)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000001880)=[{&(0x7f00000015c0)=""/169, 0xa9}, {}, {&(0x7f0000001680)=""/226, 0xe2}, {&(0x7f0000001780)=""/216, 0xd8}], 0x4}, 0x20) (async) openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) (async) openat$cgroup(r1, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) (async) openat$cgroup_pressure(r2, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) (async) openat$cgroup_ro(r2, 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r3, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r3}, 0x20) (async) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r3}, 0x8) (async) recvmsg$unix(r4, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001980)={r4, 0x20, &(0x7f0000001940)={&(0x7f0000000000)=""/35, 0x23, 0x0, &(0x7f0000001900)=""/48, 0x30}}, 0x10) (async) [ 2467.929106][T31397] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 2467.936917][T31397] R13: 000000000000000b R14: 00007f77058cef80 R15: 00007fffa5f1a258 [ 2467.944735][T31397] [ 2467.959476][T31397] socket: no more sockets [ 2468.014777][T31410] FAULT_INJECTION: forcing a failure. [ 2468.014777][T31410] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2468.032221][T31410] CPU: 0 PID: 31410 Comm: syz-executor.2 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2468.042409][T31410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2468.052305][T31410] Call Trace: [ 2468.055422][T31410] [ 2468.058196][T31410] dump_stack_lvl+0x151/0x1b7 [ 2468.062714][T31410] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2468.068183][T31410] dump_stack+0x15/0x17 [ 2468.072175][T31410] should_fail+0x3c6/0x510 [ 2468.076425][T31410] should_fail_usercopy+0x1a/0x20 [ 2468.081283][T31410] _copy_to_user+0x20/0x90 [ 2468.085532][T31410] simple_read_from_buffer+0xc7/0x150 [ 2468.090743][T31410] proc_fail_nth_read+0x1a3/0x210 [ 2468.095613][T31410] ? proc_fault_inject_write+0x390/0x390 [ 2468.101073][T31410] ? fsnotify_perm+0x470/0x5d0 [ 2468.105669][T31410] ? security_file_permission+0x86/0xb0 [ 2468.111047][T31410] ? proc_fault_inject_write+0x390/0x390 [ 2468.116519][T31410] vfs_read+0x27d/0xd40 [ 2468.120511][T31410] ? kernel_read+0x1f0/0x1f0 [ 2468.124938][T31410] ? __kasan_check_write+0x14/0x20 [ 2468.129886][T31410] ? mutex_lock+0xb6/0x1e0 [ 2468.134135][T31410] ? wait_for_completion_killable_timeout+0x10/0x10 [ 2468.140559][T31410] ? __fdget_pos+0x2e7/0x3a0 [ 2468.144983][T31410] ? ksys_read+0x77/0x2c0 [ 2468.149155][T31410] ksys_read+0x199/0x2c0 [ 2468.153234][T31410] ? vfs_write+0x1110/0x1110 [ 2468.157664][T31410] ? debug_smp_processor_id+0x17/0x20 [ 2468.162873][T31410] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2468.168770][T31410] __x64_sys_read+0x7b/0x90 [ 2468.173108][T31410] do_syscall_64+0x3d/0xb0 [ 2468.177357][T31410] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2468.183091][T31410] RIP: 0033:0x7f77057ae78c [ 2468.187344][T31410] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 59 81 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 af 81 02 00 48 [ 2468.206813][T31410] RSP: 002b:00007f77045320c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 18:24:35 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x19, 0x6, 0x7, &(0x7f0000000000)) socketpair(0xa, 0x6, 0x4, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) close(r1) 18:24:35 executing program 3: bpf$MAP_CREATE(0x1d, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:35 executing program 1: syz_clone(0x22001200, 0x0, 0x2000, 0x0, 0x0, 0x0) 18:24:35 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0xffffffffffffffe0, &(0x7f0000001440)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/192, 0xc0}], 0x7, &(0x7f00000014c0)=""/15, 0xf}, 0x0) recvmsg(r0, &(0x7f00000018c0)={&(0x7f0000001540)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000001880)=[{&(0x7f00000015c0)=""/169, 0xa9}, {}, {&(0x7f0000001680)=""/226, 0xe2}, {&(0x7f0000001780)=""/216, 0xd8}], 0x4}, 0x20) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup(r1, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r2, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r2, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r3, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r3}, 0x20) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r3}, 0x8) recvmsg$unix(r4, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001980)={r4, 0x20, &(0x7f0000001940)={&(0x7f0000000000)=""/35, 0x23, 0x0, &(0x7f0000001900)=""/48, 0x30}}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0xffffffffffffffe0, &(0x7f0000001440)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/192, 0xc0}], 0x7, &(0x7f00000014c0)=""/15, 0xf}, 0x0) (async) recvmsg(r0, &(0x7f00000018c0)={&(0x7f0000001540)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000001880)=[{&(0x7f00000015c0)=""/169, 0xa9}, {}, {&(0x7f0000001680)=""/226, 0xe2}, {&(0x7f0000001780)=""/216, 0xd8}], 0x4}, 0x20) (async) openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) (async) openat$cgroup(r1, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) (async) openat$cgroup_pressure(r2, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) (async) openat$cgroup_ro(r2, 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r3, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r3}, 0x20) (async) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r3}, 0x8) (async) recvmsg$unix(r4, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001980)={r4, 0x20, &(0x7f0000001940)={&(0x7f0000000000)=""/35, 0x23, 0x0, &(0x7f0000001900)=""/48, 0x30}}, 0x10) (async) 18:24:35 executing program 5: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 9) 18:24:35 executing program 2: socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) [ 2468.215035][T31410] RAX: ffffffffffffffda RBX: 00007f77058cef80 RCX: 00007f77057ae78c [ 2468.222925][T31410] RDX: 000000000000000f RSI: 00007f7704532130 RDI: 0000000000000003 [ 2468.230738][T31410] RBP: 00007f7704532120 R08: 0000000000000000 R09: 0000000000000000 [ 2468.238546][T31410] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 2468.246357][T31410] R13: 000000000000000b R14: 00007f77058cef80 R15: 00007fffa5f1a258 [ 2468.254175][T31410] 18:24:35 executing program 3: bpf$MAP_CREATE(0x1e, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:35 executing program 1: syz_clone(0x22001200, 0x0, 0x80000, 0x0, 0x0, 0x0) [ 2468.297222][T31430] FAULT_INJECTION: forcing a failure. [ 2468.297222][T31430] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2468.316397][T31430] CPU: 1 PID: 31430 Comm: syz-executor.5 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2468.326575][T31430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2468.336583][T31430] Call Trace: [ 2468.339712][T31430] [ 2468.342481][T31430] dump_stack_lvl+0x151/0x1b7 [ 2468.346994][T31430] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2468.352465][T31430] ? __stack_depot_save+0x34/0x470 [ 2468.357410][T31430] dump_stack+0x15/0x17 [ 2468.361405][T31430] should_fail+0x3c6/0x510 [ 2468.365657][T31430] should_fail_alloc_page+0x5a/0x80 [ 2468.370774][T31430] prepare_alloc_pages+0x15c/0x700 [ 2468.375724][T31430] ? __alloc_pages+0x5e0/0x5e0 [ 2468.380325][T31430] ? __alloc_pages_bulk+0xe60/0xe60 [ 2468.385358][T31430] __alloc_pages+0x138/0x5e0 [ 2468.389787][T31430] ? prep_new_page+0x110/0x110 18:24:35 executing program 2: socketpair(0x2, 0x0, 0x8, &(0x7f0000000040)) 18:24:35 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socketpair(0x19, 0x6, 0x7, &(0x7f0000000000)) socketpair(0xa, 0x6, 0x4, &(0x7f0000000040)) (async) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) (async) close(r1) 18:24:35 executing program 2: socketpair(0x5, 0x0, 0x8, &(0x7f0000000040)) [ 2468.394383][T31430] ? __kasan_kmalloc+0x9/0x10 [ 2468.398902][T31430] ? __kmalloc+0x13a/0x270 [ 2468.403151][T31430] ? __vmalloc_node_range+0x2d6/0x8d0 [ 2468.408359][T31430] __vmalloc_node_range+0x482/0x8d0 [ 2468.413402][T31430] dup_task_struct+0x416/0xc60 [ 2468.417988][T31430] ? copy_process+0x5c4/0x3260 [ 2468.422593][T31430] ? __kasan_check_write+0x14/0x20 [ 2468.427537][T31430] copy_process+0x5c4/0x3260 [ 2468.431971][T31430] ? __kasan_check_write+0x14/0x20 [ 2468.436912][T31430] ? proc_fail_nth_write+0x20b/0x290 [ 2468.442030][T31430] ? selinux_file_permission+0x2c4/0x570 18:24:35 executing program 2: socketpair(0xa, 0x0, 0x8, &(0x7f0000000040)) [ 2468.447500][T31430] ? fsnotify_perm+0x6a/0x5d0 [ 2468.452011][T31430] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2468.456954][T31430] ? vfs_write+0x9ec/0x1110 [ 2468.461308][T31430] kernel_clone+0x21e/0x9e0 [ 2468.465640][T31430] ? file_end_write+0x1c0/0x1c0 [ 2468.470327][T31430] ? create_io_thread+0x1e0/0x1e0 [ 2468.475186][T31430] ? mutex_unlock+0xb2/0x260 [ 2468.479617][T31430] ? __mutex_lock_slowpath+0x10/0x10 [ 2468.484737][T31430] __x64_sys_clone+0x23f/0x290 [ 2468.489335][T31430] ? __do_sys_vfork+0x130/0x130 18:24:35 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x19, 0x6, 0x7, &(0x7f0000000000)) socketpair(0xa, 0x6, 0x4, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7) (async) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) (async) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) close(r1) 18:24:35 executing program 1: syz_clone(0x22001200, 0x0, 0xf0ff1f, 0x0, 0x0, 0x0) [ 2468.494022][T31430] ? ksys_write+0x260/0x2c0 [ 2468.498361][T31430] ? debug_smp_processor_id+0x17/0x20 [ 2468.503571][T31430] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2468.509473][T31430] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2468.514939][T31430] do_syscall_64+0x3d/0xb0 [ 2468.519208][T31430] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2468.525064][T31430] RIP: 0033:0x7fdfd1d08ae9 [ 2468.529320][T31430] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2468.548755][T31430] RSP: 002b:00007fdfd0a8b078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2468.557006][T31430] RAX: ffffffffffffffda RBX: 00007fdfd1e27f80 RCX: 00007fdfd1d08ae9 [ 2468.564991][T31430] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022001200 [ 2468.572925][T31430] RBP: 00007fdfd0a8b120 R08: 0000000000000000 R09: 0000000000000000 [ 2468.580728][T31430] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 2468.588544][T31430] R13: 000000000000000b R14: 00007fdfd1e27f80 R15: 00007fff62717c48 18:24:35 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)=')\x00') recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0xffffffffffffffe0, &(0x7f0000001440)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/192, 0xc0}], 0x7, &(0x7f00000014c0)=""/15, 0xf}, 0x0) 18:24:35 executing program 3: bpf$MAP_CREATE(0x21, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:35 executing program 5: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 10) 18:24:35 executing program 2: socketpair(0xf, 0x0, 0x8, &(0x7f0000000040)) [ 2468.596352][T31430] 18:24:35 executing program 3: bpf$MAP_CREATE(0x22, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:35 executing program 3: bpf$MAP_CREATE(0x23, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:35 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)=')\x00') (async) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0xffffffffffffffe0, &(0x7f0000001440)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/192, 0xc0}], 0x7, &(0x7f00000014c0)=""/15, 0xf}, 0x0) 18:24:35 executing program 1: syz_clone(0x22001200, 0x0, 0x1000000, 0x0, 0x0, 0x0) 18:24:35 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)=')\x00') recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0xffffffffffffffe0, &(0x7f0000001440)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/192, 0xc0}], 0x7, &(0x7f00000014c0)=""/15, 0xf}, 0x0) 18:24:35 executing program 2: socketpair(0x11, 0x0, 0x8, &(0x7f0000000040)) [ 2468.668001][T31479] FAULT_INJECTION: forcing a failure. [ 2468.668001][T31479] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2468.710126][T31479] CPU: 1 PID: 31479 Comm: syz-executor.5 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2468.720316][T31479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2468.730210][T31479] Call Trace: [ 2468.733329][T31479] [ 2468.736105][T31479] dump_stack_lvl+0x151/0x1b7 [ 2468.740622][T31479] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2468.746090][T31479] ? __stack_depot_save+0x34/0x470 [ 2468.751040][T31479] dump_stack+0x15/0x17 [ 2468.755027][T31479] should_fail+0x3c6/0x510 18:24:36 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)={'full', 0x20, 0x3, 0x20, 0x7}, 0x2f) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/245, 0xf5}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) close(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, 0x0, 0x0) recvmsg(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000200)=""/17, 0x11}, {&(0x7f0000000240)=""/199, 0xc7}, {&(0x7f0000000340)=""/206, 0xce}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x4, &(0x7f0000001480)=""/187, 0xbb}, 0x40010102) 18:24:36 executing program 3: bpf$MAP_CREATE(0x300, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:36 executing program 1: syz_clone(0x22001200, 0x0, 0x2000000, 0x0, 0x0, 0x0) [ 2468.759279][T31479] should_fail_alloc_page+0x5a/0x80 [ 2468.764311][T31479] prepare_alloc_pages+0x15c/0x700 [ 2468.769263][T31479] ? __alloc_pages+0x5e0/0x5e0 [ 2468.773862][T31479] ? __alloc_pages_bulk+0xe60/0xe60 [ 2468.778895][T31479] __alloc_pages+0x138/0x5e0 [ 2468.783320][T31479] ? prep_new_page+0x110/0x110 [ 2468.787921][T31479] ? __kasan_kmalloc+0x9/0x10 [ 2468.792432][T31479] ? __kmalloc+0x13a/0x270 [ 2468.796688][T31479] ? __vmalloc_node_range+0x2d6/0x8d0 [ 2468.801898][T31479] __vmalloc_node_range+0x482/0x8d0 [ 2468.806933][T31479] dup_task_struct+0x416/0xc60 [ 2468.811530][T31479] ? copy_process+0x5c4/0x3260 [ 2468.816132][T31479] ? __kasan_check_write+0x14/0x20 [ 2468.821079][T31479] copy_process+0x5c4/0x3260 [ 2468.825502][T31479] ? __kasan_check_write+0x14/0x20 [ 2468.830455][T31479] ? proc_fail_nth_write+0x20b/0x290 [ 2468.835575][T31479] ? selinux_file_permission+0x2c4/0x570 [ 2468.841040][T31479] ? fsnotify_perm+0x6a/0x5d0 [ 2468.845559][T31479] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2468.850496][T31479] ? vfs_write+0x9ec/0x1110 [ 2468.854841][T31479] kernel_clone+0x21e/0x9e0 18:24:36 executing program 3: bpf$MAP_CREATE(0x500, &(0x7f0000000540)=@base={0xd}, 0x48) [ 2468.859175][T31479] ? file_end_write+0x1c0/0x1c0 [ 2468.863870][T31479] ? create_io_thread+0x1e0/0x1e0 [ 2468.868724][T31479] ? mutex_unlock+0xb2/0x260 [ 2468.873154][T31479] ? __mutex_lock_slowpath+0x10/0x10 [ 2468.878280][T31479] __x64_sys_clone+0x23f/0x290 [ 2468.882876][T31479] ? __do_sys_vfork+0x130/0x130 [ 2468.887561][T31479] ? ksys_write+0x260/0x2c0 [ 2468.891904][T31479] ? debug_smp_processor_id+0x17/0x20 [ 2468.897105][T31479] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2468.903010][T31479] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2468.908478][T31479] do_syscall_64+0x3d/0xb0 [ 2468.912729][T31479] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2468.918457][T31479] RIP: 0033:0x7fdfd1d08ae9 [ 2468.922717][T31479] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2468.942159][T31479] RSP: 002b:00007fdfd0a8b078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2468.950399][T31479] RAX: ffffffffffffffda RBX: 00007fdfd1e27f80 RCX: 00007fdfd1d08ae9 18:24:36 executing program 5: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 11) 18:24:36 executing program 3: bpf$MAP_CREATE(0x600, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:36 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000001440)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000001540)=""/103, 0x67}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/192, 0xc0}], 0x7, &(0x7f00000014c0)=""/15, 0xf}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) 18:24:36 executing program 1: syz_clone(0x22001200, 0x0, 0x7000000, 0x0, 0x0, 0x0) 18:24:36 executing program 2: socketpair(0x2d, 0x0, 0x8, &(0x7f0000000040)) [ 2468.958212][T31479] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022001200 [ 2468.966020][T31479] RBP: 00007fdfd0a8b120 R08: 0000000000000000 R09: 0000000000000000 [ 2468.973833][T31479] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2468.981647][T31479] R13: 000000000000000b R14: 00007fdfd1e27f80 R15: 00007fff62717c48 [ 2468.989461][T31479] 18:24:36 executing program 2: socketpair(0x10, 0x2, 0x8, &(0x7f0000000040)) 18:24:36 executing program 3: bpf$MAP_CREATE(0x700, &(0x7f0000000540)=@base={0xd}, 0x48) [ 2469.025575][T31510] FAULT_INJECTION: forcing a failure. [ 2469.025575][T31510] name failslab, interval 1, probability 0, space 0, times 0 [ 2469.046705][T31510] CPU: 1 PID: 31510 Comm: syz-executor.5 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2469.056885][T31510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2469.066784][T31510] Call Trace: [ 2469.069902][T31510] 18:24:36 executing program 2: socketpair(0x10, 0x3, 0x8, &(0x7f0000000040)) [ 2469.072679][T31510] dump_stack_lvl+0x151/0x1b7 [ 2469.077197][T31510] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2469.082664][T31510] dump_stack+0x15/0x17 [ 2469.086655][T31510] should_fail+0x3c6/0x510 [ 2469.090909][T31510] __should_failslab+0xa4/0xe0 [ 2469.095503][T31510] should_failslab+0x9/0x20 [ 2469.099849][T31510] slab_pre_alloc_hook+0x37/0xd0 [ 2469.104631][T31510] kmem_cache_alloc_trace+0x48/0x210 [ 2469.109746][T31510] ? mm_init+0x39a/0x970 [ 2469.113820][T31510] mm_init+0x39a/0x970 [ 2469.117729][T31510] copy_mm+0x1e3/0x13e0 [ 2469.121718][T31510] ? _raw_spin_lock+0xa4/0x1b0 [ 2469.126324][T31510] ? copy_signal+0x610/0x610 [ 2469.130747][T31510] ? __kasan_check_write+0x14/0x20 [ 2469.135698][T31510] ? __init_rwsem+0xd6/0x1c0 [ 2469.140121][T31510] ? copy_signal+0x4e3/0x610 [ 2469.144543][T31510] copy_process+0x12bc/0x3260 [ 2469.149063][T31510] ? proc_fail_nth_write+0x20b/0x290 [ 2469.154182][T31510] ? fsnotify_perm+0x6a/0x5d0 [ 2469.158690][T31510] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2469.163650][T31510] ? vfs_write+0x9ec/0x1110 [ 2469.167987][T31510] kernel_clone+0x21e/0x9e0 [ 2469.172315][T31510] ? file_end_write+0x1c0/0x1c0 [ 2469.177003][T31510] ? create_io_thread+0x1e0/0x1e0 [ 2469.181869][T31510] ? mutex_unlock+0xb2/0x260 [ 2469.186293][T31510] ? __mutex_lock_slowpath+0x10/0x10 [ 2469.191411][T31510] __x64_sys_clone+0x23f/0x290 [ 2469.196010][T31510] ? __do_sys_vfork+0x130/0x130 [ 2469.200697][T31510] ? ksys_write+0x260/0x2c0 [ 2469.205045][T31510] ? debug_smp_processor_id+0x17/0x20 [ 2469.210246][T31510] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2469.216149][T31510] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2469.221627][T31510] do_syscall_64+0x3d/0xb0 [ 2469.225885][T31510] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2469.231608][T31510] RIP: 0033:0x7fdfd1d08ae9 [ 2469.235849][T31510] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2469.255289][T31510] RSP: 002b:00007fdfd0a8b078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2469.263531][T31510] RAX: ffffffffffffffda RBX: 00007fdfd1e27f80 RCX: 00007fdfd1d08ae9 [ 2469.271344][T31510] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022001200 [ 2469.279157][T31510] RBP: 00007fdfd0a8b120 R08: 0000000000000000 R09: 0000000000000000 [ 2469.286967][T31510] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2469.294784][T31510] R13: 000000000000000b R14: 00007fdfd1e27f80 R15: 00007fff62717c48 [ 2469.302603][T31510] 18:24:36 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)={'full', 0x20, 0x3, 0x20, 0x7}, 0x2f) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/245, 0xf5}, 0x0) (async) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/245, 0xf5}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) close(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, 0x0, 0x0) recvmsg(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000200)=""/17, 0x11}, {&(0x7f0000000240)=""/199, 0xc7}, {&(0x7f0000000340)=""/206, 0xce}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x4, &(0x7f0000001480)=""/187, 0xbb}, 0x40010102) (async) recvmsg(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000200)=""/17, 0x11}, {&(0x7f0000000240)=""/199, 0xc7}, {&(0x7f0000000340)=""/206, 0xce}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x4, &(0x7f0000001480)=""/187, 0xbb}, 0x40010102) 18:24:36 executing program 2: socketpair(0x10, 0x4, 0x8, &(0x7f0000000040)) 18:24:36 executing program 1: syz_clone(0x22001200, 0x0, 0x9000000, 0x0, 0x0, 0x0) 18:24:36 executing program 3: bpf$MAP_CREATE(0x900, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:36 executing program 5: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 12) 18:24:36 executing program 3: bpf$MAP_CREATE(0xa00, &(0x7f0000000540)=@base={0xd}, 0x48) [ 2469.669553][T31528] FAULT_INJECTION: forcing a failure. [ 2469.669553][T31528] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2469.683887][T31528] CPU: 1 PID: 31528 Comm: syz-executor.5 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2469.694084][T31528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2469.703961][T31528] Call Trace: [ 2469.707089][T31528] [ 2469.709865][T31528] dump_stack_lvl+0x151/0x1b7 [ 2469.714373][T31528] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2469.719842][T31528] ? stack_trace_save+0x113/0x1c0 [ 2469.724724][T31528] ? stack_trace_snprint+0xf0/0xf0 [ 2469.729648][T31528] ? stack_trace_snprint+0xf0/0xf0 [ 2469.734593][T31528] dump_stack+0x15/0x17 [ 2469.738583][T31528] should_fail+0x3c6/0x510 [ 2469.742842][T31528] should_fail_alloc_page+0x5a/0x80 [ 2469.747872][T31528] prepare_alloc_pages+0x15c/0x700 [ 2469.752831][T31528] ? __alloc_pages_bulk+0xe60/0xe60 [ 2469.757855][T31528] ? __kasan_check_write+0x14/0x20 [ 2469.762804][T31528] ? pcpu_memcg_post_alloc_hook+0x1b1/0x260 [ 2469.768540][T31528] __alloc_pages+0x138/0x5e0 [ 2469.773203][T31528] ? prep_new_page+0x110/0x110 [ 2469.777798][T31528] ? pcpu_alloc+0xda0/0x13e0 [ 2469.782251][T31528] __get_free_pages+0xe/0x30 [ 2469.786662][T31528] pgd_alloc+0x21/0x2c0 [ 2469.790648][T31528] mm_init+0x5c7/0x970 [ 2469.794547][T31528] copy_mm+0x1e3/0x13e0 [ 2469.798543][T31528] ? _raw_spin_lock+0xa4/0x1b0 [ 2469.803145][T31528] ? copy_signal+0x610/0x610 [ 2469.807569][T31528] ? __kasan_check_write+0x14/0x20 [ 2469.812517][T31528] ? __init_rwsem+0xd6/0x1c0 18:24:37 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000001440)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000001540)=""/103, 0x67}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/192, 0xc0}], 0x7, &(0x7f00000014c0)=""/15, 0xf}, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) 18:24:37 executing program 2: socketpair(0x10, 0x8, 0x8, &(0x7f0000000040)) 18:24:37 executing program 1: syz_clone(0x22001200, 0x0, 0x11000000, 0x0, 0x0, 0x0) 18:24:37 executing program 3: bpf$MAP_CREATE(0xb00, &(0x7f0000000540)=@base={0xd}, 0x48) [ 2469.816945][T31528] ? copy_signal+0x4e3/0x610 [ 2469.821369][T31528] copy_process+0x12bc/0x3260 [ 2469.825890][T31528] ? proc_fail_nth_write+0x20b/0x290 [ 2469.831015][T31528] ? fsnotify_perm+0x6a/0x5d0 [ 2469.835521][T31528] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2469.840463][T31528] ? vfs_write+0x9ec/0x1110 [ 2469.844801][T31528] kernel_clone+0x21e/0x9e0 [ 2469.849142][T31528] ? file_end_write+0x1c0/0x1c0 [ 2469.853839][T31528] ? create_io_thread+0x1e0/0x1e0 [ 2469.858694][T31528] ? mutex_unlock+0xb2/0x260 [ 2469.863126][T31528] ? __mutex_lock_slowpath+0x10/0x10 18:24:37 executing program 1: syz_clone(0x22001200, 0x0, 0x1f000000, 0x0, 0x0, 0x0) 18:24:37 executing program 3: bpf$MAP_CREATE(0xc00, &(0x7f0000000540)=@base={0xd}, 0x48) [ 2469.868243][T31528] __x64_sys_clone+0x23f/0x290 [ 2469.872842][T31528] ? __do_sys_vfork+0x130/0x130 [ 2469.877529][T31528] ? ksys_write+0x260/0x2c0 [ 2469.881868][T31528] ? debug_smp_processor_id+0x17/0x20 [ 2469.887078][T31528] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2469.892981][T31528] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2469.898447][T31528] do_syscall_64+0x3d/0xb0 [ 2469.902703][T31528] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2469.908639][T31528] RIP: 0033:0x7fdfd1d08ae9 [ 2469.912896][T31528] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2469.932340][T31528] RSP: 002b:00007fdfd0a8b078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2469.940580][T31528] RAX: ffffffffffffffda RBX: 00007fdfd1e27f80 RCX: 00007fdfd1d08ae9 [ 2469.948390][T31528] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022001200 [ 2469.956203][T31528] RBP: 00007fdfd0a8b120 R08: 0000000000000000 R09: 0000000000000000 [ 2469.964012][T31528] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2469.971826][T31528] R13: 000000000000000b R14: 00007fdfd1e27f80 R15: 00007fff62717c48 [ 2469.979640][T31528] 18:24:37 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)={'full', 0x20, 0x3, 0x20, 0x7}, 0x2f) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/245, 0xf5}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) close(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, 0x0, 0x0) (async) recvmsg(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000200)=""/17, 0x11}, {&(0x7f0000000240)=""/199, 0xc7}, {&(0x7f0000000340)=""/206, 0xce}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x4, &(0x7f0000001480)=""/187, 0xbb}, 0x40010102) 18:24:37 executing program 2: socketpair(0x10, 0xa, 0x8, &(0x7f0000000040)) 18:24:37 executing program 1: syz_clone(0x22001200, 0x0, 0x1ffff000, 0x0, 0x0, 0x0) 18:24:37 executing program 3: bpf$MAP_CREATE(0xd00, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:37 executing program 5: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 13) 18:24:37 executing program 2: socketpair(0x10, 0x2f6, 0x8, &(0x7f0000000040)) [ 2470.525705][T31562] FAULT_INJECTION: forcing a failure. [ 2470.525705][T31562] name failslab, interval 1, probability 0, space 0, times 0 [ 2470.538254][T31562] CPU: 1 PID: 31562 Comm: syz-executor.5 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2470.548536][T31562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2470.558553][T31562] Call Trace: [ 2470.561675][T31562] [ 2470.564454][T31562] dump_stack_lvl+0x151/0x1b7 [ 2470.568967][T31562] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2470.574437][T31562] ? __alloc_pages+0x206/0x5e0 [ 2470.579034][T31562] dump_stack+0x15/0x17 [ 2470.583029][T31562] should_fail+0x3c6/0x510 [ 2470.587284][T31562] __should_failslab+0xa4/0xe0 [ 2470.591878][T31562] ? vm_area_dup+0x26/0x230 [ 2470.596219][T31562] should_failslab+0x9/0x20 [ 2470.600556][T31562] slab_pre_alloc_hook+0x37/0xd0 [ 2470.605331][T31562] ? vm_area_dup+0x26/0x230 [ 2470.609666][T31562] kmem_cache_alloc+0x44/0x200 [ 2470.614266][T31562] vm_area_dup+0x26/0x230 [ 2470.618431][T31562] copy_mm+0x9a1/0x13e0 [ 2470.622431][T31562] ? copy_signal+0x610/0x610 [ 2470.626851][T31562] ? __init_rwsem+0xd6/0x1c0 [ 2470.631277][T31562] ? copy_signal+0x4e3/0x610 [ 2470.635703][T31562] copy_process+0x12bc/0x3260 [ 2470.640233][T31562] ? proc_fail_nth_write+0x20b/0x290 [ 2470.645339][T31562] ? fsnotify_perm+0x6a/0x5d0 [ 2470.649856][T31562] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2470.654909][T31562] ? vfs_write+0x9ec/0x1110 [ 2470.659244][T31562] kernel_clone+0x21e/0x9e0 [ 2470.663583][T31562] ? file_end_write+0x1c0/0x1c0 [ 2470.668274][T31562] ? create_io_thread+0x1e0/0x1e0 [ 2470.673167][T31562] ? mutex_unlock+0xb2/0x260 [ 2470.677558][T31562] ? __mutex_lock_slowpath+0x10/0x10 [ 2470.682683][T31562] __x64_sys_clone+0x23f/0x290 [ 2470.687278][T31562] ? __do_sys_vfork+0x130/0x130 [ 2470.691970][T31562] ? ksys_write+0x260/0x2c0 [ 2470.696304][T31562] ? debug_smp_processor_id+0x17/0x20 [ 2470.701509][T31562] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2470.707414][T31562] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2470.712983][T31562] do_syscall_64+0x3d/0xb0 [ 2470.717228][T31562] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2470.722957][T31562] RIP: 0033:0x7fdfd1d08ae9 [ 2470.727209][T31562] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2470.746652][T31562] RSP: 002b:00007fdfd0a8b078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2470.754894][T31562] RAX: ffffffffffffffda RBX: 00007fdfd1e27f80 RCX: 00007fdfd1d08ae9 [ 2470.762705][T31562] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022001200 18:24:38 executing program 3: bpf$MAP_CREATE(0xe00, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:38 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000001440)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000001540)=""/103, 0x67}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/192, 0xc0}], 0x7, &(0x7f00000014c0)=""/15, 0xf}, 0x0) (async, rerun: 32) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (rerun: 32) 18:24:38 executing program 1: syz_clone(0x22001200, 0x0, 0x20000000, 0x0, 0x0, 0x0) 18:24:38 executing program 2: socketpair(0x10, 0x300, 0x8, &(0x7f0000000040)) 18:24:38 executing program 5: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 14) 18:24:38 executing program 3: bpf$MAP_CREATE(0xf00, &(0x7f0000000540)=@base={0xd}, 0x48) [ 2470.770519][T31562] RBP: 00007fdfd0a8b120 R08: 0000000000000000 R09: 0000000000000000 [ 2470.778328][T31562] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2470.786142][T31562] R13: 000000000000000b R14: 00007fdfd1e27f80 R15: 00007fff62717c48 [ 2470.793956][T31562] [ 2470.828417][T31579] FAULT_INJECTION: forcing a failure. [ 2470.828417][T31579] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2470.846885][T31579] CPU: 1 PID: 31579 Comm: syz-executor.5 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2470.857060][T31579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2470.866953][T31579] Call Trace: [ 2470.870076][T31579] [ 2470.872854][T31579] dump_stack_lvl+0x151/0x1b7 [ 2470.877370][T31579] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2470.882838][T31579] ? __stack_depot_save+0x34/0x470 [ 2470.887784][T31579] dump_stack+0x15/0x17 [ 2470.891774][T31579] should_fail+0x3c6/0x510 [ 2470.896031][T31579] should_fail_alloc_page+0x5a/0x80 [ 2470.901062][T31579] prepare_alloc_pages+0x15c/0x700 [ 2470.906014][T31579] ? __alloc_pages+0x5e0/0x5e0 [ 2470.910609][T31579] ? __alloc_pages_bulk+0xe60/0xe60 [ 2470.915655][T31579] __alloc_pages+0x138/0x5e0 [ 2470.920070][T31579] ? prep_new_page+0x110/0x110 [ 2470.924669][T31579] ? __kasan_kmalloc+0x9/0x10 [ 2470.929194][T31579] ? __kmalloc+0x13a/0x270 [ 2470.933440][T31579] ? __vmalloc_node_range+0x2d6/0x8d0 [ 2470.938644][T31579] __vmalloc_node_range+0x482/0x8d0 [ 2470.943680][T31579] dup_task_struct+0x416/0xc60 [ 2470.948281][T31579] ? copy_process+0x5c4/0x3260 [ 2470.952875][T31579] ? __kasan_check_write+0x14/0x20 [ 2470.957960][T31579] copy_process+0x5c4/0x3260 [ 2470.962469][T31579] ? __kasan_check_write+0x14/0x20 [ 2470.967413][T31579] ? proc_fail_nth_write+0x20b/0x290 [ 2470.972533][T31579] ? selinux_file_permission+0x2c4/0x570 [ 2470.978005][T31579] ? fsnotify_perm+0x6a/0x5d0 [ 2470.982523][T31579] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2470.987462][T31579] ? vfs_write+0x9ec/0x1110 [ 2470.991802][T31579] kernel_clone+0x21e/0x9e0 [ 2470.996154][T31579] ? file_end_write+0x1c0/0x1c0 [ 2471.000828][T31579] ? create_io_thread+0x1e0/0x1e0 [ 2471.005686][T31579] ? mutex_unlock+0xb2/0x260 [ 2471.010116][T31579] ? __mutex_lock_slowpath+0x10/0x10 [ 2471.015239][T31579] __x64_sys_clone+0x23f/0x290 [ 2471.019838][T31579] ? __do_sys_vfork+0x130/0x130 [ 2471.024523][T31579] ? ksys_write+0x260/0x2c0 [ 2471.028866][T31579] ? debug_smp_processor_id+0x17/0x20 [ 2471.034074][T31579] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2471.039981][T31579] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2471.045442][T31579] do_syscall_64+0x3d/0xb0 [ 2471.049692][T31579] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2471.055419][T31579] RIP: 0033:0x7fdfd1d08ae9 [ 2471.059674][T31579] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2471.079118][T31579] RSP: 002b:00007fdfd0a8b078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2471.087358][T31579] RAX: ffffffffffffffda RBX: 00007fdfd1e27f80 RCX: 00007fdfd1d08ae9 [ 2471.095169][T31579] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022001200 [ 2471.102980][T31579] RBP: 00007fdfd0a8b120 R08: 0000000000000000 R09: 0000000000000000 [ 2471.110802][T31579] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2471.118606][T31579] R13: 000000000000000b R14: 00007fdfd1e27f80 R15: 00007fff62717c48 [ 2471.126422][T31579] 18:24:38 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) r1 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, 0x0, 0x0) socketpair(0x21, 0x800, 0x944, &(0x7f0000000000)) close(r1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0) ioctl$TUNATTACHFILTER(r4, 0x401054d5, 0x0) ioctl$TUNGETVNETHDRSZ(r4, 0x800454d7, &(0x7f0000000040)) 18:24:38 executing program 2: socketpair(0x10, 0xa00, 0x8, &(0x7f0000000040)) 18:24:38 executing program 3: bpf$MAP_CREATE(0x1100, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:38 executing program 1: syz_clone(0x22001200, 0x0, 0xf5ffffff, 0x0, 0x0, 0x0) 18:24:38 executing program 5: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 15) 18:24:38 executing program 2: socketpair(0x10, 0x2000, 0x8, &(0x7f0000000040)) [ 2471.393604][T31592] FAULT_INJECTION: forcing a failure. [ 2471.393604][T31592] name failslab, interval 1, probability 0, space 0, times 0 [ 2471.406566][T31592] CPU: 0 PID: 31592 Comm: syz-executor.5 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2471.416730][T31592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2471.426637][T31592] Call Trace: [ 2471.429754][T31592] [ 2471.432534][T31592] dump_stack_lvl+0x151/0x1b7 [ 2471.437041][T31592] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2471.442511][T31592] dump_stack+0x15/0x17 [ 2471.446500][T31592] should_fail+0x3c6/0x510 [ 2471.450752][T31592] __should_failslab+0xa4/0xe0 [ 2471.455362][T31592] ? vm_area_dup+0x26/0x230 [ 2471.459696][T31592] should_failslab+0x9/0x20 [ 2471.464040][T31592] slab_pre_alloc_hook+0x37/0xd0 [ 2471.468807][T31592] ? vm_area_dup+0x26/0x230 [ 2471.473145][T31592] kmem_cache_alloc+0x44/0x200 [ 2471.477747][T31592] vm_area_dup+0x26/0x230 [ 2471.481912][T31592] copy_mm+0x9a1/0x13e0 [ 2471.485908][T31592] ? copy_signal+0x610/0x610 [ 2471.490334][T31592] ? __init_rwsem+0xd6/0x1c0 [ 2471.494756][T31592] ? copy_signal+0x4e3/0x610 [ 2471.499180][T31592] copy_process+0x12bc/0x3260 [ 2471.503698][T31592] ? proc_fail_nth_write+0x20b/0x290 [ 2471.508814][T31592] ? fsnotify_perm+0x6a/0x5d0 [ 2471.513333][T31592] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2471.518277][T31592] ? vfs_write+0x9ec/0x1110 [ 2471.522646][T31592] kernel_clone+0x21e/0x9e0 [ 2471.526957][T31592] ? file_end_write+0x1c0/0x1c0 [ 2471.531640][T31592] ? create_io_thread+0x1e0/0x1e0 [ 2471.536502][T31592] ? mutex_unlock+0xb2/0x260 [ 2471.540930][T31592] ? __mutex_lock_slowpath+0x10/0x10 [ 2471.546053][T31592] __x64_sys_clone+0x23f/0x290 [ 2471.550649][T31592] ? __do_sys_vfork+0x130/0x130 [ 2471.555336][T31592] ? ksys_write+0x260/0x2c0 [ 2471.559680][T31592] ? debug_smp_processor_id+0x17/0x20 [ 2471.564885][T31592] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2471.570787][T31592] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2471.576254][T31592] do_syscall_64+0x3d/0xb0 [ 2471.580507][T31592] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2471.586232][T31592] RIP: 0033:0x7fdfd1d08ae9 [ 2471.590488][T31592] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2471.609930][T31592] RSP: 002b:00007fdfd0a8b078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2471.618172][T31592] RAX: ffffffffffffffda RBX: 00007fdfd1e27f80 RCX: 00007fdfd1d08ae9 [ 2471.625986][T31592] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022001200 [ 2471.633798][T31592] RBP: 00007fdfd0a8b120 R08: 0000000000000000 R09: 0000000000000000 18:24:38 executing program 3: bpf$MAP_CREATE(0x1200, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:38 executing program 1: syz_clone(0x22001200, 0x0, 0xfbffffff, 0x0, 0x0, 0x0) 18:24:38 executing program 2: socketpair(0x10, 0x4000, 0x8, &(0x7f0000000040)) 18:24:38 executing program 5: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 16) 18:24:38 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f00000017c0)) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0xffffffffffffffe0, &(0x7f0000001440)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/192, 0xc0}], 0x7, &(0x7f00000014c0)=""/15, 0xf}, 0x0) socketpair(0xa, 0x80000, 0x1, &(0x7f0000001840)={0xffffffffffffffff}) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001880)=@o_path={&(0x7f0000001800)='./file0\x00', 0xffffffffffffffff, 0x4000, r1}, 0x18) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001680)=@bpf_lsm={0x1d, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1833000001000000000000000000000085100000fcffffff8520000001000000950000000000000002c40600018000000e3c80654c17fd56bbf6185500000600"], &(0x7f0000001540)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001580)={0xa, 0x2}, 0x8, 0x10, &(0x7f00000015c0)={0x5, 0x4, 0xad0, 0x8e}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001600)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000001640)=[{0x5, 0x2, 0xb, 0x6}, {0x2, 0x1, 0x3}, {0x2, 0x4, 0x9, 0xc}], 0x10, 0x1}, 0x90) mkdir(&(0x7f0000001780)='./file0\x00', 0x24) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001740)={@ifindex, r2, 0x1a, 0x26, 0xffffffffffffffff, @link_id}, 0x20) 18:24:38 executing program 3: bpf$MAP_CREATE(0x1300, &(0x7f0000000540)=@base={0xd}, 0x48) [ 2471.641611][T31592] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2471.649437][T31592] R13: 000000000000000b R14: 00007fdfd1e27f80 R15: 00007fff62717c48 [ 2471.657236][T31592] [ 2471.705655][T31609] FAULT_INJECTION: forcing a failure. [ 2471.705655][T31609] name failslab, interval 1, probability 0, space 0, times 0 [ 2471.719527][T31609] CPU: 1 PID: 31609 Comm: syz-executor.5 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2471.729699][T31609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2471.739593][T31609] Call Trace: [ 2471.742724][T31609] [ 2471.745497][T31609] dump_stack_lvl+0x151/0x1b7 [ 2471.750011][T31609] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2471.755478][T31609] dump_stack+0x15/0x17 [ 2471.759477][T31609] should_fail+0x3c6/0x510 [ 2471.763741][T31609] __should_failslab+0xa4/0xe0 [ 2471.768320][T31609] ? vm_area_dup+0x26/0x230 [ 2471.772661][T31609] should_failslab+0x9/0x20 [ 2471.776998][T31609] slab_pre_alloc_hook+0x37/0xd0 [ 2471.781774][T31609] ? vm_area_dup+0x26/0x230 [ 2471.786111][T31609] kmem_cache_alloc+0x44/0x200 [ 2471.790715][T31609] vm_area_dup+0x26/0x230 [ 2471.794881][T31609] copy_mm+0x9a1/0x13e0 [ 2471.798981][T31609] ? copy_signal+0x610/0x610 [ 2471.803406][T31609] ? __init_rwsem+0xd6/0x1c0 [ 2471.807833][T31609] ? copy_signal+0x4e3/0x610 [ 2471.812259][T31609] copy_process+0x12bc/0x3260 [ 2471.816773][T31609] ? proc_fail_nth_write+0x20b/0x290 [ 2471.821893][T31609] ? fsnotify_perm+0x6a/0x5d0 [ 2471.826408][T31609] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2471.831357][T31609] ? vfs_write+0x9ec/0x1110 [ 2471.835695][T31609] kernel_clone+0x21e/0x9e0 [ 2471.840038][T31609] ? file_end_write+0x1c0/0x1c0 [ 2471.844717][T31609] ? create_io_thread+0x1e0/0x1e0 [ 2471.849579][T31609] ? mutex_unlock+0xb2/0x260 [ 2471.854004][T31609] ? __mutex_lock_slowpath+0x10/0x10 [ 2471.859129][T31609] __x64_sys_clone+0x23f/0x290 [ 2471.863727][T31609] ? __do_sys_vfork+0x130/0x130 [ 2471.868412][T31609] ? ksys_write+0x260/0x2c0 [ 2471.872755][T31609] ? debug_smp_processor_id+0x17/0x20 [ 2471.877961][T31609] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2471.883863][T31609] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2471.889334][T31609] do_syscall_64+0x3d/0xb0 [ 2471.893592][T31609] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2471.899312][T31609] RIP: 0033:0x7fdfd1d08ae9 [ 2471.903568][T31609] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2471.923012][T31609] RSP: 002b:00007fdfd0a8b078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2471.931353][T31609] RAX: ffffffffffffffda RBX: 00007fdfd1e27f80 RCX: 00007fdfd1d08ae9 [ 2471.939159][T31609] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022001200 [ 2471.946970][T31609] RBP: 00007fdfd0a8b120 R08: 0000000000000000 R09: 0000000000000000 [ 2471.954785][T31609] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2471.962590][T31609] R13: 000000000000000b R14: 00007fdfd1e27f80 R15: 00007fff62717c48 [ 2471.970416][T31609] 18:24:39 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f00000017c0)) (async) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0xffffffffffffffe0, &(0x7f0000001440)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/192, 0xc0}], 0x7, &(0x7f00000014c0)=""/15, 0xf}, 0x0) (async) socketpair(0xa, 0x80000, 0x1, &(0x7f0000001840)={0xffffffffffffffff}) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001880)=@o_path={&(0x7f0000001800)='./file0\x00', 0xffffffffffffffff, 0x4000, r1}, 0x18) (async) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001680)=@bpf_lsm={0x1d, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1833000001000000000000000000000085100000fcffffff8520000001000000950000000000000002c40600018000000e3c80654c17fd56bbf6185500000600"], &(0x7f0000001540)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001580)={0xa, 0x2}, 0x8, 0x10, &(0x7f00000015c0)={0x5, 0x4, 0xad0, 0x8e}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001600)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000001640)=[{0x5, 0x2, 0xb, 0x6}, {0x2, 0x1, 0x3}, {0x2, 0x4, 0x9, 0xc}], 0x10, 0x1}, 0x90) mkdir(&(0x7f0000001780)='./file0\x00', 0x24) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001740)={@ifindex, r2, 0x1a, 0x26, 0xffffffffffffffff, @link_id}, 0x20) 18:24:39 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) (async) r1 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, 0x0, 0x0) socketpair(0x21, 0x800, 0x944, &(0x7f0000000000)) close(r1) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0) ioctl$TUNATTACHFILTER(r4, 0x401054d5, 0x0) (async) ioctl$TUNGETVNETHDRSZ(r4, 0x800454d7, &(0x7f0000000040)) 18:24:39 executing program 2: socketpair(0x10, 0xf602, 0x8, &(0x7f0000000040)) 18:24:39 executing program 1: syz_clone(0x22001200, 0x0, 0xfffffff5, 0x0, 0x0, 0x0) 18:24:39 executing program 3: bpf$MAP_CREATE(0x1400, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:39 executing program 5: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 17) 18:24:39 executing program 2: socketpair(0x10, 0x18100, 0x8, &(0x7f0000000040)) 18:24:39 executing program 3: bpf$MAP_CREATE(0x1500, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:39 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f00000017c0)) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0xffffffffffffffe0, &(0x7f0000001440)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/192, 0xc0}], 0x7, &(0x7f00000014c0)=""/15, 0xf}, 0x0) socketpair(0xa, 0x80000, 0x1, &(0x7f0000001840)={0xffffffffffffffff}) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001880)=@o_path={&(0x7f0000001800)='./file0\x00', 0xffffffffffffffff, 0x4000, r1}, 0x18) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001680)=@bpf_lsm={0x1d, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1833000001000000000000000000000085100000fcffffff8520000001000000950000000000000002c40600018000000e3c80654c17fd56bbf6185500000600"], &(0x7f0000001540)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001580)={0xa, 0x2}, 0x8, 0x10, &(0x7f00000015c0)={0x5, 0x4, 0xad0, 0x8e}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001600)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000001640)=[{0x5, 0x2, 0xb, 0x6}, {0x2, 0x1, 0x3}, {0x2, 0x4, 0x9, 0xc}], 0x10, 0x1}, 0x90) mkdir(&(0x7f0000001780)='./file0\x00', 0x24) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001740)={@ifindex, r2, 0x1a, 0x26, 0xffffffffffffffff, @link_id}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f00000017c0)) (async) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0xffffffffffffffe0, &(0x7f0000001440)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/192, 0xc0}], 0x7, &(0x7f00000014c0)=""/15, 0xf}, 0x0) (async) socketpair(0xa, 0x80000, 0x1, &(0x7f0000001840)) (async) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001880)=@o_path={&(0x7f0000001800)='./file0\x00', 0xffffffffffffffff, 0x4000, r1}, 0x18) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001680)=@bpf_lsm={0x1d, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1833000001000000000000000000000085100000fcffffff8520000001000000950000000000000002c40600018000000e3c80654c17fd56bbf6185500000600"], &(0x7f0000001540)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001580)={0xa, 0x2}, 0x8, 0x10, &(0x7f00000015c0)={0x5, 0x4, 0xad0, 0x8e}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001600)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000001640)=[{0x5, 0x2, 0xb, 0x6}, {0x2, 0x1, 0x3}, {0x2, 0x4, 0x9, 0xc}], 0x10, 0x1}, 0x90) (async) mkdir(&(0x7f0000001780)='./file0\x00', 0x24) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001740)={@ifindex, r2, 0x1a, 0x26, 0xffffffffffffffff, @link_id}, 0x20) (async) [ 2472.241220][T31619] FAULT_INJECTION: forcing a failure. [ 2472.241220][T31619] name failslab, interval 1, probability 0, space 0, times 0 [ 2472.274224][T31619] CPU: 1 PID: 31619 Comm: syz-executor.5 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2472.284407][T31619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2472.294404][T31619] Call Trace: [ 2472.297528][T31619] [ 2472.300303][T31619] dump_stack_lvl+0x151/0x1b7 [ 2472.304820][T31619] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2472.310309][T31619] ? avc_denied+0x1b0/0x1b0 [ 2472.314626][T31619] dump_stack+0x15/0x17 [ 2472.318613][T31619] should_fail+0x3c6/0x510 [ 2472.322871][T31619] __should_failslab+0xa4/0xe0 [ 2472.327492][T31619] ? vm_area_dup+0x26/0x230 [ 2472.331806][T31619] should_failslab+0x9/0x20 [ 2472.336146][T31619] slab_pre_alloc_hook+0x37/0xd0 [ 2472.340921][T31619] ? vm_area_dup+0x26/0x230 [ 2472.345261][T31619] kmem_cache_alloc+0x44/0x200 [ 2472.349864][T31619] vm_area_dup+0x26/0x230 [ 2472.354025][T31619] copy_mm+0x9a1/0x13e0 [ 2472.358023][T31619] ? copy_signal+0x610/0x610 [ 2472.362444][T31619] ? __init_rwsem+0xd6/0x1c0 [ 2472.367023][T31619] ? copy_signal+0x4e3/0x610 [ 2472.371444][T31619] copy_process+0x12bc/0x3260 [ 2472.375967][T31619] ? proc_fail_nth_write+0x20b/0x290 [ 2472.381083][T31619] ? fsnotify_perm+0x6a/0x5d0 [ 2472.385593][T31619] ? pidfd_show_fdinfo+0x2b0/0x2b0 18:24:39 executing program 1: syz_clone(0x22001200, 0x0, 0xfffffffb, 0x0, 0x0, 0x0) 18:24:39 executing program 2: socketpair(0x10, 0x200000, 0x8, &(0x7f0000000040)) 18:24:39 executing program 1: syz_clone(0x22001200, 0x0, 0x1b10d1f000, 0x0, 0x0, 0x0) 18:24:39 executing program 2: socketpair(0x10, 0x810100, 0x8, &(0x7f0000000040)) [ 2472.390544][T31619] ? vfs_write+0x9ec/0x1110 [ 2472.394888][T31619] kernel_clone+0x21e/0x9e0 [ 2472.399223][T31619] ? file_end_write+0x1c0/0x1c0 [ 2472.403904][T31619] ? create_io_thread+0x1e0/0x1e0 [ 2472.408767][T31619] ? mutex_unlock+0xb2/0x260 [ 2472.413198][T31619] ? __mutex_lock_slowpath+0x10/0x10 [ 2472.418312][T31619] __x64_sys_clone+0x23f/0x290 [ 2472.422933][T31619] ? __do_sys_vfork+0x130/0x130 [ 2472.427600][T31619] ? ksys_write+0x260/0x2c0 [ 2472.431947][T31619] ? debug_smp_processor_id+0x17/0x20 [ 2472.437148][T31619] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2472.443047][T31619] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2472.448511][T31619] do_syscall_64+0x3d/0xb0 [ 2472.452766][T31619] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2472.458496][T31619] RIP: 0033:0x7fdfd1d08ae9 [ 2472.462747][T31619] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2472.482278][T31619] RSP: 002b:00007fdfd0a8b078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2472.490518][T31619] RAX: ffffffffffffffda RBX: 00007fdfd1e27f80 RCX: 00007fdfd1d08ae9 [ 2472.498335][T31619] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022001200 [ 2472.506149][T31619] RBP: 00007fdfd0a8b120 R08: 0000000000000000 R09: 0000000000000000 [ 2472.513954][T31619] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2472.521773][T31619] R13: 000000000000000b R14: 00007fdfd1e27f80 R15: 00007fff62717c48 [ 2472.529582][T31619] 18:24:40 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) (async) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) (async) r1 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, 0x0, 0x0) (async) recvmsg(r2, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, 0x0, 0x0) (async) recvmsg(r3, 0x0, 0x0) socketpair(0x21, 0x800, 0x944, &(0x7f0000000000)) close(r1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0) ioctl$TUNATTACHFILTER(r4, 0x401054d5, 0x0) ioctl$TUNGETVNETHDRSZ(r4, 0x800454d7, &(0x7f0000000040)) 18:24:40 executing program 1: syz_clone(0x22001200, 0x0, 0x2a0846641000, 0x0, 0x0, 0x0) 18:24:40 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0xffffffffffffffe0, &(0x7f0000001440)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/192, 0xc0}], 0x7, &(0x7f00000014c0)=""/15, 0xf}, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000015c0), 0x20000, 0x0) ioctl$TUNGETVNETLE(r2, 0x800454dd, &(0x7f0000001600)) r3 = openat$cgroup(r1, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r3, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r4 = openat$cgroup_ro(r3, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r4, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r4}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r4}, 0x8) openat$cgroup(0xffffffffffffffff, &(0x7f0000001580)='syz1\x00', 0x200002, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001540)=@generic={&(0x7f0000000000)='./file0\x00', r4}, 0x18) 18:24:40 executing program 2: socketpair(0x10, 0x1000000, 0x8, &(0x7f0000000040)) 18:24:40 executing program 3: bpf$MAP_CREATE(0x1600, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:40 executing program 5: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 18) 18:24:40 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0xffffffffffffffe0, &(0x7f0000001440)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/192, 0xc0}], 0x7, &(0x7f00000014c0)=""/15, 0xf}, 0x0) (async) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0xffffffffffffffe0, &(0x7f0000001440)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/192, 0xc0}], 0x7, &(0x7f00000014c0)=""/15, 0xf}, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) (async) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000015c0), 0x20000, 0x0) ioctl$TUNGETVNETLE(r2, 0x800454dd, &(0x7f0000001600)) openat$cgroup(r1, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) (async) r3 = openat$cgroup(r1, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r3, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r4 = openat$cgroup_ro(r3, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r4, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r4}, 0x20) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r4, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r4}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r4}, 0x8) openat$cgroup(0xffffffffffffffff, &(0x7f0000001580)='syz1\x00', 0x200002, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001540)=@generic={&(0x7f0000000000)='./file0\x00', r4}, 0x18) 18:24:40 executing program 1: syz_clone(0x22001200, 0x0, 0x553a2359d000, 0x0, 0x0, 0x0) 18:24:40 executing program 3: bpf$MAP_CREATE(0x1700, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:40 executing program 2: socketpair(0x10, 0x2000000, 0x8, &(0x7f0000000040)) [ 2473.095324][T31659] FAULT_INJECTION: forcing a failure. [ 2473.095324][T31659] name failslab, interval 1, probability 0, space 0, times 0 [ 2473.114535][T31659] CPU: 1 PID: 31659 Comm: syz-executor.5 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2473.124713][T31659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2473.134611][T31659] Call Trace: [ 2473.137729][T31659] [ 2473.140507][T31659] dump_stack_lvl+0x151/0x1b7 18:24:40 executing program 3: bpf$MAP_CREATE(0x1800, &(0x7f0000000540)=@base={0xd}, 0x48) [ 2473.145020][T31659] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2473.150492][T31659] ? avc_has_perm_noaudit+0x348/0x430 [ 2473.155696][T31659] dump_stack+0x15/0x17 [ 2473.159685][T31659] should_fail+0x3c6/0x510 [ 2473.163944][T31659] __should_failslab+0xa4/0xe0 [ 2473.168539][T31659] ? dup_fd+0x72/0xb00 [ 2473.172443][T31659] should_failslab+0x9/0x20 [ 2473.176783][T31659] slab_pre_alloc_hook+0x37/0xd0 [ 2473.181669][T31659] ? dup_fd+0x72/0xb00 [ 2473.185564][T31659] kmem_cache_alloc+0x44/0x200 [ 2473.190169][T31659] dup_fd+0x72/0xb00 18:24:40 executing program 2: socketpair(0x10, 0x3000000, 0x8, &(0x7f0000000040)) [ 2473.193894][T31659] ? avc_has_perm+0x16f/0x260 [ 2473.198411][T31659] ? avc_has_perm_noaudit+0x430/0x430 [ 2473.203619][T31659] copy_files+0xe6/0x200 [ 2473.207697][T31659] ? perf_event_attrs+0x30/0x30 [ 2473.212380][T31659] ? dup_task_struct+0xc60/0xc60 [ 2473.217160][T31659] ? security_task_alloc+0xf9/0x130 [ 2473.222195][T31659] copy_process+0x11f3/0x3260 [ 2473.226708][T31659] ? proc_fail_nth_write+0x20b/0x290 [ 2473.231830][T31659] ? fsnotify_perm+0x6a/0x5d0 [ 2473.236338][T31659] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2473.241286][T31659] ? vfs_write+0x9ec/0x1110 [ 2473.245626][T31659] kernel_clone+0x21e/0x9e0 [ 2473.249968][T31659] ? file_end_write+0x1c0/0x1c0 [ 2473.254652][T31659] ? create_io_thread+0x1e0/0x1e0 [ 2473.259509][T31659] ? mutex_unlock+0xb2/0x260 [ 2473.263938][T31659] ? __mutex_lock_slowpath+0x10/0x10 [ 2473.269059][T31659] __x64_sys_clone+0x23f/0x290 [ 2473.273661][T31659] ? __do_sys_vfork+0x130/0x130 [ 2473.278349][T31659] ? ksys_write+0x260/0x2c0 [ 2473.282686][T31659] ? debug_smp_processor_id+0x17/0x20 [ 2473.287902][T31659] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2473.293796][T31659] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2473.299388][T31659] do_syscall_64+0x3d/0xb0 [ 2473.303634][T31659] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2473.309366][T31659] RIP: 0033:0x7fdfd1d08ae9 [ 2473.313617][T31659] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2473.333060][T31659] RSP: 002b:00007fdfd0a8b078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2473.341316][T31659] RAX: ffffffffffffffda RBX: 00007fdfd1e27f80 RCX: 00007fdfd1d08ae9 [ 2473.349115][T31659] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022001200 [ 2473.356923][T31659] RBP: 00007fdfd0a8b120 R08: 0000000000000000 R09: 0000000000000000 [ 2473.364735][T31659] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2473.372546][T31659] R13: 000000000000000b R14: 00007fdfd1e27f80 R15: 00007fff62717c48 [ 2473.380367][T31659] 18:24:41 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000025c0)={0xffffffffffffffff, 0x58, &(0x7f0000002540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(r2, &(0x7f0000002680)={0x0, 0x0, &(0x7f00000024c0)=[{&(0x7f0000000100)="6d469cd5fde95f30b8c1428f30b0b057301c287d96070c7652d198113fc4be0d57642bbf682d05b7c6afa31f4ca98c27076b1613a78212d794801a85d09a398b4129c24cc9e8eafd3668202d2b", 0x4d}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f0000000080)="bd75573af8997bebe875380a8be560dc485e5dec35bf0206dc87c6f52a3c2b5deef301bdf3ab5b3052", 0x29}, {&(0x7f00000013c0)="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", 0x1000}, {&(0x7f0000000180)="0c49c4df18b1509bd57936f0c4d555094708762079d531d5a2b5badfa2ed1dac49dfbf58d6d2b26ab7037fbf68d7438e1a16e9cb6965fdb7057439fdb7598ec6f7f990248df7da07292b9d3093f18723354214d3304c73b98d355c2ac8b4b4eb51738bad5ecf334326ee6462e30f71369227b04619eb38114de9c4984d61b54c155e453e7e3f42b48b9bfcec4d9d689dc45dd8afec98d23c1e5a210e6cb9720f6f24a17eb67a08f3610d7ffe9dadbdb32607deb82357880c4465091f354ef35a10f9f5f82c730e16911ae885279eed7f8013e19af334fd1c37dd66c86e6fcd2ab4a5a06f1b1c27", 0xe7}, {&(0x7f00000023c0)="8f75bc13a1de8a0b2c33c6f4d013ce60f9907e1ce6fe5f4943118016617abaa33efcd1cd55aa20a50588b40e5dea578342b5e76cb3920751e8d91bb4bb3a711ebd0509f1d95db3e4b38db9dcc112065e7b111c98ad676bfdb2bc1bd0114383ace9a0b2e4095a11da9e9984916c47079645bb3b9b52a60db95dbb8b4637fd26e9e7e310787e9a9b7691f0db4d4d07d168f3711f6871bc4c0affa28df26298216fca92afd6bf965e3c5932d1dfa1116239ad0b0f7ff2c6d854715337a290b20ec6b4e507b7bc10255daab7094b9d7bfa325a01d95af4b175510327e1ababa8a22e59528b", 0xe3}], 0x6, &(0x7f0000002600)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xffff0001}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @remote, @multicast1}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3f}}, @ip_tos_int={{0x14}}], 0x80}, 0x0) close(r1) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000000)) 18:24:41 executing program 1: syz_clone(0x22001200, 0x0, 0x8000000000000, 0x0, 0x0, 0x0) 18:24:41 executing program 2: socketpair(0x10, 0x4000000, 0x8, &(0x7f0000000040)) 18:24:41 executing program 3: bpf$MAP_CREATE(0x1900, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:41 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0xffffffffffffffe0, &(0x7f0000001440)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/192, 0xc0}], 0x7, &(0x7f00000014c0)=""/15, 0xf}, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000015c0), 0x20000, 0x0) ioctl$TUNGETVNETLE(r2, 0x800454dd, &(0x7f0000001600)) (async) r3 = openat$cgroup(r1, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r3, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) (async) r4 = openat$cgroup_ro(r3, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r4, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r4}, 0x20) (async) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r4}, 0x8) (async) openat$cgroup(0xffffffffffffffff, &(0x7f0000001580)='syz1\x00', 0x200002, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001540)=@generic={&(0x7f0000000000)='./file0\x00', r4}, 0x18) 18:24:41 executing program 5: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 19) 18:24:41 executing program 2: socketpair(0x10, 0x8000000, 0x8, &(0x7f0000000040)) 18:24:41 executing program 3: bpf$MAP_CREATE(0x1a00, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:41 executing program 1: syz_clone(0x22001200, 0x0, 0x106446082a0000, 0x0, 0x0, 0x0) 18:24:41 executing program 3: bpf$MAP_CREATE(0x1b00, &(0x7f0000000540)=@base={0xd}, 0x48) [ 2474.111681][T31696] FAULT_INJECTION: forcing a failure. [ 2474.111681][T31696] name failslab, interval 1, probability 0, space 0, times 0 [ 2474.140300][T31696] CPU: 0 PID: 31696 Comm: syz-executor.5 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2474.150480][T31696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2474.160374][T31696] Call Trace: [ 2474.163492][T31696] [ 2474.166276][T31696] dump_stack_lvl+0x151/0x1b7 [ 2474.170795][T31696] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2474.176253][T31696] dump_stack+0x15/0x17 [ 2474.180241][T31696] should_fail+0x3c6/0x510 [ 2474.184498][T31696] __should_failslab+0xa4/0xe0 [ 2474.189097][T31696] ? anon_vma_clone+0x9a/0x500 [ 2474.193696][T31696] should_failslab+0x9/0x20 [ 2474.198032][T31696] slab_pre_alloc_hook+0x37/0xd0 [ 2474.202810][T31696] ? anon_vma_clone+0x9a/0x500 [ 2474.207407][T31696] kmem_cache_alloc+0x44/0x200 [ 2474.212020][T31696] anon_vma_clone+0x9a/0x500 [ 2474.216436][T31696] anon_vma_fork+0x91/0x4e0 [ 2474.220774][T31696] ? anon_vma_name+0x4c/0x70 [ 2474.225202][T31696] ? vm_area_dup+0x17a/0x230 [ 2474.229627][T31696] copy_mm+0xa3a/0x13e0 [ 2474.233624][T31696] ? copy_signal+0x610/0x610 [ 2474.238048][T31696] ? __init_rwsem+0xd6/0x1c0 [ 2474.242471][T31696] ? copy_signal+0x4e3/0x610 [ 2474.246901][T31696] copy_process+0x12bc/0x3260 [ 2474.251417][T31696] ? proc_fail_nth_write+0x20b/0x290 [ 2474.256534][T31696] ? fsnotify_perm+0x6a/0x5d0 [ 2474.261047][T31696] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2474.266000][T31696] ? vfs_write+0x9ec/0x1110 [ 2474.270332][T31696] kernel_clone+0x21e/0x9e0 [ 2474.274672][T31696] ? file_end_write+0x1c0/0x1c0 [ 2474.279367][T31696] ? create_io_thread+0x1e0/0x1e0 [ 2474.284226][T31696] ? mutex_unlock+0xb2/0x260 [ 2474.288648][T31696] ? __mutex_lock_slowpath+0x10/0x10 [ 2474.293767][T31696] __x64_sys_clone+0x23f/0x290 [ 2474.298366][T31696] ? __do_sys_vfork+0x130/0x130 [ 2474.303059][T31696] ? ksys_write+0x260/0x2c0 [ 2474.307403][T31696] ? debug_smp_processor_id+0x17/0x20 [ 2474.312610][T31696] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2474.318503][T31696] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2474.323971][T31696] do_syscall_64+0x3d/0xb0 [ 2474.328573][T31696] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2474.334385][T31696] RIP: 0033:0x7fdfd1d08ae9 [ 2474.338637][T31696] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 18:24:41 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0xffffffffffffffe0, &(0x7f0000001440)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/192, 0xc0}], 0x7, &(0x7f00000014c0)=""/15, 0xf}, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000015c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) write$cgroup_pid(r2, &(0x7f0000001600), 0x12) r3 = openat$cgroup(r1, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r3, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r4 = openat$cgroup_ro(r3, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r4, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r4}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r4}, 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r4, 0x58, &(0x7f0000001540)}, 0x10) 18:24:41 executing program 2: socketpair(0x10, 0xa000000, 0x8, &(0x7f0000000040)) [ 2474.358085][T31696] RSP: 002b:00007fdfd0a8b078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2474.366329][T31696] RAX: ffffffffffffffda RBX: 00007fdfd1e27f80 RCX: 00007fdfd1d08ae9 [ 2474.374137][T31696] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022001200 [ 2474.381946][T31696] RBP: 00007fdfd0a8b120 R08: 0000000000000000 R09: 0000000000000000 [ 2474.389759][T31696] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2474.397567][T31696] R13: 000000000000000b R14: 00007fdfd1e27f80 R15: 00007fff62717c48 [ 2474.405387][T31696] 18:24:41 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000025c0)={0xffffffffffffffff, 0x58, &(0x7f0000002540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(r2, &(0x7f0000002680)={0x0, 0x0, &(0x7f00000024c0)=[{&(0x7f0000000100)="6d469cd5fde95f30b8c1428f30b0b057301c287d96070c7652d198113fc4be0d57642bbf682d05b7c6afa31f4ca98c27076b1613a78212d794801a85d09a398b4129c24cc9e8eafd3668202d2b", 0x4d}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f0000000080)="bd75573af8997bebe875380a8be560dc485e5dec35bf0206dc87c6f52a3c2b5deef301bdf3ab5b3052", 0x29}, {&(0x7f00000013c0)="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", 0x1000}, {&(0x7f0000000180)="0c49c4df18b1509bd57936f0c4d555094708762079d531d5a2b5badfa2ed1dac49dfbf58d6d2b26ab7037fbf68d7438e1a16e9cb6965fdb7057439fdb7598ec6f7f990248df7da07292b9d3093f18723354214d3304c73b98d355c2ac8b4b4eb51738bad5ecf334326ee6462e30f71369227b04619eb38114de9c4984d61b54c155e453e7e3f42b48b9bfcec4d9d689dc45dd8afec98d23c1e5a210e6cb9720f6f24a17eb67a08f3610d7ffe9dadbdb32607deb82357880c4465091f354ef35a10f9f5f82c730e16911ae885279eed7f8013e19af334fd1c37dd66c86e6fcd2ab4a5a06f1b1c27", 0xe7}, {&(0x7f00000023c0)="8f75bc13a1de8a0b2c33c6f4d013ce60f9907e1ce6fe5f4943118016617abaa33efcd1cd55aa20a50588b40e5dea578342b5e76cb3920751e8d91bb4bb3a711ebd0509f1d95db3e4b38db9dcc112065e7b111c98ad676bfdb2bc1bd0114383ace9a0b2e4095a11da9e9984916c47079645bb3b9b52a60db95dbb8b4637fd26e9e7e310787e9a9b7691f0db4d4d07d168f3711f6871bc4c0affa28df26298216fca92afd6bf965e3c5932d1dfa1116239ad0b0f7ff2c6d854715337a290b20ec6b4e507b7bc10255daab7094b9d7bfa325a01d95af4b175510327e1ababa8a22e59528b", 0xe3}], 0x6, &(0x7f0000002600)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xffff0001}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @remote, @multicast1}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3f}}, @ip_tos_int={{0x14}}], 0x80}, 0x0) (async) close(r1) (async) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000000)) 18:24:41 executing program 3: bpf$MAP_CREATE(0x1c00, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:41 executing program 5: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 20) 18:24:41 executing program 1: syz_clone(0x22001200, 0x0, 0xd059233a550000, 0x0, 0x0, 0x0) 18:24:41 executing program 2: socketpair(0x10, 0x20000000, 0x8, &(0x7f0000000040)) 18:24:41 executing program 1: syz_clone(0x22001200, 0x0, 0xf0d1101b000000, 0x0, 0x0, 0x0) 18:24:41 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0xffffffffffffffe0, &(0x7f0000001440)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/192, 0xc0}], 0x7, &(0x7f00000014c0)=""/15, 0xf}, 0x0) (async) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0xffffffffffffffe0, &(0x7f0000001440)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/192, 0xc0}], 0x7, &(0x7f00000014c0)=""/15, 0xf}, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000015c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) write$cgroup_pid(r2, &(0x7f0000001600), 0x12) (async) write$cgroup_pid(r2, &(0x7f0000001600), 0x12) r3 = openat$cgroup(r1, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r3, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r4 = openat$cgroup_ro(r3, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r4, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r4}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r4}, 0x8) (async) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r4}, 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r4, 0x58, &(0x7f0000001540)}, 0x10) [ 2474.482972][T31718] FAULT_INJECTION: forcing a failure. [ 2474.482972][T31718] name failslab, interval 1, probability 0, space 0, times 0 [ 2474.503245][T31718] CPU: 1 PID: 31718 Comm: syz-executor.5 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2474.513426][T31718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2474.523315][T31718] Call Trace: [ 2474.526445][T31718] 18:24:41 executing program 1: syz_clone(0x22001200, 0x0, 0xf0ff1f00000000, 0x0, 0x0, 0x0) 18:24:41 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0xffffffffffffffe0, &(0x7f0000001440)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/192, 0xc0}], 0x7, &(0x7f00000014c0)=""/15, 0xf}, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000015c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) write$cgroup_pid(r2, &(0x7f0000001600), 0x12) r3 = openat$cgroup(r1, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r3, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r4 = openat$cgroup_ro(r3, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r4, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r4}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r4}, 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r4, 0x58, &(0x7f0000001540)}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0xffffffffffffffe0, &(0x7f0000001440)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/192, 0xc0}], 0x7, &(0x7f00000014c0)=""/15, 0xf}, 0x0) (async) openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) (async) openat$cgroup_ro(r1, &(0x7f00000015c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) (async) write$cgroup_pid(r2, &(0x7f0000001600), 0x12) (async) openat$cgroup(r1, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) (async) openat$cgroup_pressure(r3, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) (async) openat$cgroup_ro(r3, 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r4, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r4}, 0x20) (async) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r4}, 0x8) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r4, 0x58, &(0x7f0000001540)}, 0x10) (async) [ 2474.529216][T31718] dump_stack_lvl+0x151/0x1b7 [ 2474.533743][T31718] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2474.539198][T31718] dump_stack+0x15/0x17 [ 2474.543189][T31718] should_fail+0x3c6/0x510 [ 2474.547452][T31718] __should_failslab+0xa4/0xe0 [ 2474.552047][T31718] should_failslab+0x9/0x20 [ 2474.556381][T31718] slab_pre_alloc_hook+0x37/0xd0 [ 2474.561159][T31718] __kmalloc+0x6d/0x270 [ 2474.565145][T31718] ? kvmalloc_node+0x1f0/0x4d0 [ 2474.569753][T31718] kvmalloc_node+0x1f0/0x4d0 [ 2474.574173][T31718] ? vm_mmap+0xb0/0xb0 [ 2474.578077][T31718] ? __kasan_kmalloc+0x9/0x10 18:24:41 executing program 1: syz_clone(0x22001200, 0x0, 0x100000000000000, 0x0, 0x0, 0x0) 18:24:41 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) openat$cgroup(r1, &(0x7f0000000380)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup(r1, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r2, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r2, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r3, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r3}, 0x20) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r3}, 0x8) recvmsg$unix(r4, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000240)=r4) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000001740)=[{&(0x7f0000001540)=""/235, 0xeb}, {&(0x7f0000001380)=""/118, 0x76}, {&(0x7f0000000280)=""/59, 0x8c1c87e65cede416}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000000100)=""/171, 0xab}, {&(0x7f0000001640)=""/243, 0xf3}, {&(0x7f0000000000)=""/39, 0x27}, {&(0x7f00000001c0)=""/86, 0x56}], 0xa, &(0x7f00000014c0)=""/15, 0xf}, 0x0) 18:24:41 executing program 2: socketpair(0x10, 0x40000000, 0x8, &(0x7f0000000040)) [ 2474.582593][T31718] ? kmem_cache_alloc_trace+0x115/0x210 [ 2474.587971][T31718] ? alloc_fdtable+0xaf/0x2a0 [ 2474.592488][T31718] alloc_fdtable+0x163/0x2a0 [ 2474.596914][T31718] dup_fd+0x759/0xb00 [ 2474.600736][T31718] ? avc_has_perm+0x16f/0x260 [ 2474.605250][T31718] copy_files+0xe6/0x200 [ 2474.609326][T31718] ? perf_event_attrs+0x30/0x30 [ 2474.614009][T31718] ? dup_task_struct+0xc60/0xc60 [ 2474.618784][T31718] ? security_task_alloc+0xf9/0x130 [ 2474.623816][T31718] copy_process+0x11f3/0x3260 [ 2474.628333][T31718] ? proc_fail_nth_write+0x20b/0x290 [ 2474.633454][T31718] ? fsnotify_perm+0x6a/0x5d0 [ 2474.637964][T31718] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2474.642916][T31718] ? vfs_write+0x9ec/0x1110 [ 2474.647251][T31718] kernel_clone+0x21e/0x9e0 [ 2474.651588][T31718] ? file_end_write+0x1c0/0x1c0 [ 2474.656273][T31718] ? create_io_thread+0x1e0/0x1e0 [ 2474.661134][T31718] ? mutex_unlock+0xb2/0x260 [ 2474.665588][T31718] ? __mutex_lock_slowpath+0x10/0x10 [ 2474.670683][T31718] __x64_sys_clone+0x23f/0x290 [ 2474.675281][T31718] ? __do_sys_vfork+0x130/0x130 [ 2474.679967][T31718] ? ksys_write+0x260/0x2c0 [ 2474.684311][T31718] ? debug_smp_processor_id+0x17/0x20 [ 2474.689515][T31718] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2474.695418][T31718] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2474.700889][T31718] do_syscall_64+0x3d/0xb0 [ 2474.705141][T31718] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2474.710868][T31718] RIP: 0033:0x7fdfd1d08ae9 [ 2474.715121][T31718] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2474.734824][T31718] RSP: 002b:00007fdfd0a8b078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2474.743065][T31718] RAX: ffffffffffffffda RBX: 00007fdfd1e27f80 RCX: 00007fdfd1d08ae9 [ 2474.750877][T31718] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022001200 [ 2474.758955][T31718] RBP: 00007fdfd0a8b120 R08: 0000000000000000 R09: 0000000000000000 [ 2474.766850][T31718] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2474.774659][T31718] R13: 000000000000000b R14: 00007fdfd1e27f80 R15: 00007fff62717c48 18:24:42 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000025c0)={0xffffffffffffffff, 0x58, &(0x7f0000002540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(r2, &(0x7f0000002680)={0x0, 0x0, &(0x7f00000024c0)=[{&(0x7f0000000100)="6d469cd5fde95f30b8c1428f30b0b057301c287d96070c7652d198113fc4be0d57642bbf682d05b7c6afa31f4ca98c27076b1613a78212d794801a85d09a398b4129c24cc9e8eafd3668202d2b", 0x4d}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f0000000080)="bd75573af8997bebe875380a8be560dc485e5dec35bf0206dc87c6f52a3c2b5deef301bdf3ab5b3052", 0x29}, {&(0x7f00000013c0)="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", 0x1000}, {&(0x7f0000000180)="0c49c4df18b1509bd57936f0c4d555094708762079d531d5a2b5badfa2ed1dac49dfbf58d6d2b26ab7037fbf68d7438e1a16e9cb6965fdb7057439fdb7598ec6f7f990248df7da07292b9d3093f18723354214d3304c73b98d355c2ac8b4b4eb51738bad5ecf334326ee6462e30f71369227b04619eb38114de9c4984d61b54c155e453e7e3f42b48b9bfcec4d9d689dc45dd8afec98d23c1e5a210e6cb9720f6f24a17eb67a08f3610d7ffe9dadbdb32607deb82357880c4465091f354ef35a10f9f5f82c730e16911ae885279eed7f8013e19af334fd1c37dd66c86e6fcd2ab4a5a06f1b1c27", 0xe7}, {&(0x7f00000023c0)="8f75bc13a1de8a0b2c33c6f4d013ce60f9907e1ce6fe5f4943118016617abaa33efcd1cd55aa20a50588b40e5dea578342b5e76cb3920751e8d91bb4bb3a711ebd0509f1d95db3e4b38db9dcc112065e7b111c98ad676bfdb2bc1bd0114383ace9a0b2e4095a11da9e9984916c47079645bb3b9b52a60db95dbb8b4637fd26e9e7e310787e9a9b7691f0db4d4d07d168f3711f6871bc4c0affa28df26298216fca92afd6bf965e3c5932d1dfa1116239ad0b0f7ff2c6d854715337a290b20ec6b4e507b7bc10255daab7094b9d7bfa325a01d95af4b175510327e1ababa8a22e59528b", 0xe3}], 0x6, &(0x7f0000002600)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xffff0001}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @remote, @multicast1}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3f}}, @ip_tos_int={{0x14}}], 0x80}, 0x0) (async) sendmsg$inet(r2, &(0x7f0000002680)={0x0, 0x0, &(0x7f00000024c0)=[{&(0x7f0000000100)="6d469cd5fde95f30b8c1428f30b0b057301c287d96070c7652d198113fc4be0d57642bbf682d05b7c6afa31f4ca98c27076b1613a78212d794801a85d09a398b4129c24cc9e8eafd3668202d2b", 0x4d}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f0000000080)="bd75573af8997bebe875380a8be560dc485e5dec35bf0206dc87c6f52a3c2b5deef301bdf3ab5b3052", 0x29}, {&(0x7f00000013c0)="af8e9de3297fc349535a6dbea0e07c2d3b2d8febab340b7619aa31f8242e2a89d4f4501648f001d298cd58d4dcd201ce72dd3cd65e4567714ddfd2d3b75e6f1d7b23ba3b9ee57d6885ffed611c077b878fba5cc6390b5e93755232427e9cb4ccc27dda56ecac93d60213edde4137676b886ff453c01d3250689c4c95c2000b6bb9f37452d1089d4f41b289bcae915521e0f81d3845afafb42f893b6a32b408e62dcf3e0bd9af8c85be3dab840d0212b32ec3a5caa6c67e7db744bbb74886e819b747a5cf133196511d926a3210250858101bc80fc3d89517379c2f4ec290b13b20c50b68339292e5467c14c921e8d307fedf10e3e2ed0531369845d1670e01adce819472b8c19b03c6ae945f90f4a05378547df0f8e2879d96febfe9f4d839789ce8a45a5310ab654e8ab3d18988a7b738a2fe511b404c21575cfe3e51b349830f417708979dfe4ab1d26c039c9a5f6e8021345ab45e585a1c82a9bcec46ebfb856e1df978d60dba42e1a3622b8e0b39f12174e85dfb233fb9f725f4317e14c5e43c0d48f1f7d0d0ed99c3629ec2e3838f9db9f6de75c9d6d01717646a7c5de1658cdaf253ad70d72ecfd08d4793229e8123bdca90e835f3da568dd495b8a252bbe22a5d39f5be7bf8b91f0bf509fe162a163a54140b6bc3dfdde2d9672905302f0c1c5e3c0f33f05462e1a2712ad46517a298a66aacf8ec7adb8c9bfb86f00c332e525cb14e79259d7cd1e3992f968b508194a2caf141e75985e41ebc6e196db64c9cd14312c56ce4c25ad8d70f36d094c51262cfaa4ba3ffc9769b46c292339d997e47af792c81e15a63dac617a974c03a9e65fb995bf2f60c03bf2092940efd1d055dda77a7acb48a414a9c68732628145ac92d844c276574dac8905518df2d4138bdd95ecebc0d12cb02c6324d87a220136c8d59681eafbf6c7ac10ddf5ea749d957dc5bde4fd5be78346ce603ec9cc15313feb140e62a61114f29fc60e41c5c7aa97623bf3707c834cf0bfd232bc2af35ea7b6c462617454fe20b0074b80a9e690c5db15aad75699a906bbc4be6294d45610decc362798fcd14567a10013456ad7256f731b729265f9a9e0e391fd0d9f8f92330cc316959331a6a81484ed2f550a8d461435f79c3b7f443c4c629897f5c60a9d92afd0914101d68894a57969f2e46f462909120149298841ac99012ae7d6034b5ab6319262ccae9c7c578f555ad5726979c22a08a6b94b3c1e60d627b0efd4061153eaa74743523d5e10f0fcd6fadd9d8ea9bb219466350380d51822c9254fe258026180b511cb610b65cc81929aa098ca419f01cc30815207c5f80dba48db634b5fad17f7a647a57e1895bb9bbcce90c6b83c8cec33cde343551069144d7a59a62792f2dbc654e20c20868cff827e24b3c33c0daa7eda4ee840456c395478226872bc48dcd040cc89eb0720440980e7ec3f231491c14a779199125f1203d5a8bea0c0db7faf5524160f401fb3632eee1abc5eb88642823689872650d4a65b34024233c5b9d1e1d49f5f635a6dd9870dcc97e5feab682473dee62f92e4698f2ec4e0a6cacaf8e1e7427fcbe650b2eafaeda48dfeb0ac5f9805215f98af87849687ff5a785a92802cc2e9d59ff4c521006cefa00054c4b4559a675d5222f3e57247cea6528b58c25e36baaea007342cd2aa761807be6173460847797677f2443657e9a26f3dbe39baa2f797d85397e055ee06a8513ca16cded7e0a9db582e9503633d0f8a2975491f61463933e4e1d367356708bfb3083989ba865297b3c85804a69ecf22c5569fb834d2c4e2f1b71a360755de93cc139ea10b43a71c5173e494f64ee5342994610085e35ee9f9b97601ac3f2d4428605f2766c22a437e5b19f3508c20a3a6b6f299821a211ce1aa8160eee9a8cd6ec08db692f1f437b07ea85343f420d2cff0dfc583f23b8a7a19c8f24a37830cc474d9c5794f7d6b75e2e5e7bdf43a21305744742cf250a4a32cdda8cc8f8b95e79ececc9f5b81cb560f62b3a03d70e1122b5d48fb13c15036823a1e7b59cfef7c039a7ef747e596861a8f7788ec187ad45d0def9d97acc45bfa6bce0871e2592878fa581b792f48b8379e01b9d8adef949edecaffd8ed70d625cc23ad1e5ea3e05e88d9e47968f26934c43b79a6e7bdd18e7944ff8717f5226461124645a08b5346b8978e3cd07f2bcd1a5585b47dc64a13c91cc9910f42d91014ab5d32cbc177f777a465a64c732774031c393f22091a7d426b47ed5f29c5ec8fcdb68c89db2270f5eae9c7766a7169ccf9e39b2275adbf9d07919a223831416694826708c2a41a78715ea6514d9e4fc277a30b12f2ac1998ffd4c95f30cea4d100a41cacc063c29dddfb4343355b0e60dfeb00554567d9735e1bf2b5efa4ed0d2f4b862c2c5936af2c3f2aa6b5b9c5a10eff22249ad86dfadceec33e364961056d1c16dac92723f50310ed204c5bd080f3bd52ea3ceba8a5bd41f119241dd9380ae159d8f2a458f479224d2b0074bba803e24370e9fcb2bcbf849329703686177ea181ae962f44c4719c68fd8fe776aab90bf8a4ee499d015b9f261524171c23086c3e05ba77a6e2910d637c67716e2377e86cbcf546b106d8fa9eda31550aeb488331fed5015406fce19a8502f22df1266c75bf5f31b2393abdaeaa68118b9fd45fb23efe993c60985b48b683bc25e66cd3779b3267051afe54bd804b0714516ea6d04f3b530b30ffb20f0cdd8bd898218cc4c04377666c1ff82c6034dfdc6f4fb993cdb405f5900650103a766e5d3041237c68fc1d38fc231e6aa510cf72c7eb46823ee90fb233642c6c2eb4292f58c35146481b207b9811f56191d37929895d7348e8d1dbba653518c3bc7f23709cd838624afb2df1a1ef8ce3ad5182beca236db222eced8721b3f77a29af8ac60da06aba0c82f32d345209393d497a5344a32aee51cd6733f51cd4ce7edd5bb52ddcd10a1daa594671e269eae4429d3d81c0963700ad53cf8afb4263914376293654ef6affc0537a98f674099fb7775340477c1d0112a5ea59b7778e2dd6353be12588cd88791252592a396a8b8f93c0d133afaf490329deb98094a120b7cf1a208aadd8d969b8957688ed0138d2ba1ba65eae16afe2c47d4145e76e86d19e9cc642eaec197b73a30d21a072486bb7d4e1c2b82c4f0d0685aa5ad96fa8436081fa6af65974daf2a8a2083d7b9ced58fa3ffcdffe06abddbe59936538a6ecd1d9f9645dc88e50bb5f188127deb3616c30afe86e648e9421cd2dd10a33a9572733bdc945825d0b5ae864107725a07310902319b7358323b6f830554f3985892a0b4701f6152b4d760cf1370dede28ca683b01f36ba0cc1f34dbf942f84eb590e3541741407210d50007f1f8e7bd3c7d98da7e7e69e012f1517fc256f7189772e120c4c3020fb4abfa745f8dd8cb234f268344d539e87f02004f3569da5c20cfdc738b9a06c948fc430a7b41f7ed275b2ba62b3ccacbdeabdcf92682372142b00bb3212c45d65e1a4fda80ef481d6a86d3e71160519eaa2a7d43b686a56f5f4919e41c54a436ea6122173ff0859babf57c1f0a14b4594c7e633a864173a4928c5f11bbcc1a0418e1249de41bfc57d76c94119b3082b8c94464b656891624511be9c81c364c7509bdd2df04c3bbf5478d9ef1ef44b746b6ccd8e4c807c95d9d9a2796384600f50a39f5f0a25b6d11cfea2a358ca4adee706f7db321a0aca6d15fd436bf87171a52ab3a53d3c87dce67e07d858bf3636f40e8471b47689b81b6e8dd72e0291e311044c4979f56eacbb03da72b5373a91fe528ea4b42ab74c5a1dfa103505577138e13691e75d3171f85f4a8f87def0b109e84f5f2bfa17a0c248aef91f521ebc7d016546c61661b3298b8e50f2be2fd5700bcc0eb52f9d12680be44e53f9e38d92fd0500fe74c2f5e699b562d1e16483568884dba21890290189c9884cae8a24af5d6d6ccc8575401d03347c4fc9d3718305fb538fb5a046a70c138f93f49f11970037437d15ead9de0ce6906f39ffa3d467217778c9abe3f2b4fad45a155dc05f6e057f967a0c198332c3d276438276ab3e61e8e27f6e6dcdfec8ac17a692d92f9266105c69e8be3bc9569d2bca5cf015c6f7e176477031340da1c591ae4183425ef6f8823bac3a2b2c0eb0f0e5481506c7fc7c9eb93ee425e51f1174bb4c65df645f7febc208a9d90091ba2f6bcf64333c3ef63616e22cdaf6849c039bd611be59f8ce7eba65fb789bd646d0f5e02fdb8229517c2587fb3a57ad8a9d32ef1b102fa3120782bc4f576a74289bb7887b7db2f1f8579c1a8502e450fe2c724e09032ab92c8fc18772aec4342c3c194b380f5d1d0fc4eff7997b2dce768f1417395337f3a362843776ef043a84a5991e89c44ed472abe76ce0de6f9b2865a98d5e59f6889576712366935a76fb75955af29845a1add3bdb455425923df9f37e3c3f4bd78302aa244dbd4973fe25f1fc22f6d75eddb88edcc3ddfea65d8508091bd9be2e4e82da206c4aa0decc0c9ed22acf00fdd43890ed18603dd95624550e498c8a61706a2559a4bd2d88867ebbf9a237cd73f9199f69c75bfc6440da2a0ed648ef6d16c22bde3d89ae2ceed4b39d2da2042dbbd450862816a0672f44962d9013427dba356dad2430f04ca52c1d7c4dd6d9ec4673cbedf065d518aa93df328c15cb454d955990e12d44d63e8dd2d2357e15289e526a76259cb4dcd537e5ac5c84964a3d31626a32124f97eb134bee987452f36b8c2ff96af82d3529e7e8916a176d94fd2e77edd538a93d27d19ca2ce3e6dec23abe069a34e05cd2c399ffb9fa4ff5a26e3358fdd16886c5739962b966d9e01107e5dae8ebe7e816c3d6fe31692fa4c95ae173c79a3ab68ac51250346614bd5a5da1d986098994e246d617ad821af58f73cd852854b8d7a00ba5c7c78fc73a8f097600b3683aab84a01e7e98c9c5e2e79bfb72b4c83f16637fd7ffa0f32b76d847b3a2ef17d63ca8609b8ccd2529273b5de8e1429dbd68b773d99187efd920a47a6c85cf08281e263f1e0e3d9441cd1eb0394558a816ff0bba14fd575c0d8baa8af047b5d90968d97784b34ee1a1da20f89f9ca2eaf591949e496e7aa14a62c610089e11dd78c2841be413ca09b6e8414e4b7f3efe19f6fbee4606f4945478c1976f01f3d037eb920eff67c3300ea00b51fc458938f924790edce537c9576d05674e3ae268ff26fd5497b09c1caedd93738c2d41d7e0227cbc6ce57805a7f41775325e54a5f9d5eee07e9fae9e6cad52c0cec5301954009067dc211a35c7bca3632181ea6abdeca73f43899bcc4d4f6ab9abbaec97ff7a8dd3cfe09e063fa3be6089c7b084b294eeb3f069ad3cd6106ef5f9ba678925c2fd624dce39bd35066ab46cba67566b42dafcc4be2a5085f03746dff6c191d0b08601fea831ba6b815ea8a6d5bb187e6afcae5af251e642def7dd48d41040cbd85614a1678d7f247d9765f1022e0ce16885ee01226fbed926161cfadae120e2332545e3b8f137a87b5f8dfd1a859c4f94a029e16ed85158a94227206d14d82dabd46f3c12bfb492888531f95e9f4486c677f769a2ad713e0b401b9de15c17527de832038147e13be586667312dcd4ab32b0fb458386fedee7c70ee41fa1ef49dc4308aaab73957d3ed800d768fa206626c42a57962b6a3b7a1ae6bc2f5352e1836040920cf065bc6e47508494a6c480164e54d20149bdaaf90e9fd44151eb4b3d6a011434dfc1fa306e10cf7fb3e12e0809d389fb4054b2b48a2849851f202", 0x1000}, {&(0x7f0000000180)="0c49c4df18b1509bd57936f0c4d555094708762079d531d5a2b5badfa2ed1dac49dfbf58d6d2b26ab7037fbf68d7438e1a16e9cb6965fdb7057439fdb7598ec6f7f990248df7da07292b9d3093f18723354214d3304c73b98d355c2ac8b4b4eb51738bad5ecf334326ee6462e30f71369227b04619eb38114de9c4984d61b54c155e453e7e3f42b48b9bfcec4d9d689dc45dd8afec98d23c1e5a210e6cb9720f6f24a17eb67a08f3610d7ffe9dadbdb32607deb82357880c4465091f354ef35a10f9f5f82c730e16911ae885279eed7f8013e19af334fd1c37dd66c86e6fcd2ab4a5a06f1b1c27", 0xe7}, {&(0x7f00000023c0)="8f75bc13a1de8a0b2c33c6f4d013ce60f9907e1ce6fe5f4943118016617abaa33efcd1cd55aa20a50588b40e5dea578342b5e76cb3920751e8d91bb4bb3a711ebd0509f1d95db3e4b38db9dcc112065e7b111c98ad676bfdb2bc1bd0114383ace9a0b2e4095a11da9e9984916c47079645bb3b9b52a60db95dbb8b4637fd26e9e7e310787e9a9b7691f0db4d4d07d168f3711f6871bc4c0affa28df26298216fca92afd6bf965e3c5932d1dfa1116239ad0b0f7ff2c6d854715337a290b20ec6b4e507b7bc10255daab7094b9d7bfa325a01d95af4b175510327e1ababa8a22e59528b", 0xe3}], 0x6, &(0x7f0000002600)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xffff0001}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @remote, @multicast1}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3f}}, @ip_tos_int={{0x14}}], 0x80}, 0x0) close(r1) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000000)) (async) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000000)) 18:24:42 executing program 3: bpf$MAP_CREATE(0x1d00, &(0x7f0000000540)=@base={0xd}, 0x48) [ 2474.782473][T31718] 18:24:42 executing program 5: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 21) 18:24:42 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) openat$cgroup(r1, &(0x7f0000000380)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup(r1, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r2, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r2, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r3, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r3}, 0x20) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r3, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r3}, 0x20) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r3}, 0x8) recvmsg$unix(r4, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) (async) recvmsg$unix(r4, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000240)=r4) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000001740)=[{&(0x7f0000001540)=""/235, 0xeb}, {&(0x7f0000001380)=""/118, 0x76}, {&(0x7f0000000280)=""/59, 0x8c1c87e65cede416}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000000100)=""/171, 0xab}, {&(0x7f0000001640)=""/243, 0xf3}, {&(0x7f0000000000)=""/39, 0x27}, {&(0x7f00000001c0)=""/86, 0x56}], 0xa, &(0x7f00000014c0)=""/15, 0xf}, 0x0) 18:24:42 executing program 1: syz_clone(0x22001200, 0x0, 0x200000000000000, 0x0, 0x0, 0x0) 18:24:42 executing program 2: socketpair(0x10, 0xf6020000, 0x8, &(0x7f0000000040)) 18:24:42 executing program 3: bpf$MAP_CREATE(0x1e00, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:42 executing program 2: socketpair(0x10, 0xfeffffff, 0x8, &(0x7f0000000040)) 18:24:42 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) (async) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) openat$cgroup(r1, &(0x7f0000000380)='syz0\x00', 0x200002, 0x0) (async) r2 = openat$cgroup(r1, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r2, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r2, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r3, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r3}, 0x20) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r3}, 0x8) recvmsg$unix(r4, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) (async) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000240)=r4) (async) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000001740)=[{&(0x7f0000001540)=""/235, 0xeb}, {&(0x7f0000001380)=""/118, 0x76}, {&(0x7f0000000280)=""/59, 0x8c1c87e65cede416}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000000100)=""/171, 0xab}, {&(0x7f0000001640)=""/243, 0xf3}, {&(0x7f0000000000)=""/39, 0x27}, {&(0x7f00000001c0)=""/86, 0x56}], 0xa, &(0x7f00000014c0)=""/15, 0xf}, 0x0) 18:24:42 executing program 3: bpf$MAP_CREATE(0x1f00, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:42 executing program 2: socketpair(0x10, 0xfffffffe, 0x8, &(0x7f0000000040)) 18:24:42 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) close(r1) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup(r2, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r3, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r4 = openat$cgroup_ro(r3, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r4, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r4}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r4}, 0x8) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', r4, 0x4000, r0}, 0x18) 18:24:42 executing program 3: bpf$MAP_CREATE(0x2000, &(0x7f0000000540)=@base={0xd}, 0x48) [ 2474.859474][T31772] FAULT_INJECTION: forcing a failure. [ 2474.859474][T31772] name failslab, interval 1, probability 0, space 0, times 0 18:24:42 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0xffffffffffffffe0, &(0x7f0000001440)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/192, 0xc0}], 0x7, &(0x7f00000014c0)=""/15, 0xf}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001d00)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f00000022c0)={0x0, 0x0, 0x0}, 0x40) recvmsg$unix(r1, &(0x7f0000001a80)={&(0x7f0000001540), 0x6e, &(0x7f0000001a00)=[{&(0x7f00000015c0)=""/225, 0xe1}, {&(0x7f0000000000)=""/20, 0x14}, {&(0x7f00000016c0)=""/198, 0xc6}, {&(0x7f00000017c0)=""/71, 0x47}, {&(0x7f0000001840)=""/141, 0x8d}, {&(0x7f0000001900)=""/198, 0xc6}], 0x6}, 0x40002120) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001ac0)={0x0, 0x1, 0x10}, 0xc) r3 = openat$cgroup(r2, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r3, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r4 = openat$cgroup_ro(r3, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r4, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r4}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r4}, 0x8) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000001c00)={&(0x7f0000001ac0), &(0x7f0000001b00)=""/133, &(0x7f0000001bc0), &(0x7f0000002300)="aede3bbfc5af394c52725e4914872d8324eac26d7b8cab8d22451bc852745a8b403b428469efafef8b7a6c0409243001dabb67179e18ff94f17aca19dab85f8a57bc71b680fd4dafa0ea04151c9d4cc5bc4a8e921e62438b534ba28b5c024b6a2680d90af760b8bd8cb0937e52a0765406c4bb9d1af17aff3d0ac9c37a738ba259b47504be916b348afee260030f27ae22a8edc5ba4a0d75e6016bbf75b0df82db3371aff164bb904d4c4b3994c3c74a530439575a777d9486dc82f9806e4195a9c9c266b20263757247008e34bea4245754289a0c98f245db673d2932952e7e13d386b6c0532d12571f6fae8dfe76595ec8ddf5bba8f977e0ef393b2f1c966004bc11f78dc71abafe6f61c75222906b09753d582ea38ce669d9737a6ec21b1bd735d896ac095aa1850f4440e79920c9dfa080ba8666c9b233a7a4a7f50fa8ee36aa7fe3bed88cba582828a80eab65ef79dded02141fa6aae0b1c3e852d7346a2e1a392c9f6a83e859e8bf46a2b1f7d802586c0840ed8abc84e6399de0aef7b579bb7a76eb4b521c761cea6e55ac6d7538036dae6837677e2c8113270a926807b2f5cbfd83109fa434690509580551dc86aae9b4f687d24816c96b9a119019d6dc30c22a714a63841fc476bbeeedbef4751d6274b9619eda6b54526e9fda28912fdc6623544637c6c60881e76ddb6871fca93d8104f3aea865aa1b22581f022ea828209343388b60c778842c894d4f67487db32b1fdf877a2930797b221d0d25a206a767ee0f7571fa7ac239a77e0a289b651da65d3dfcb181e1678a36835ba09658f4ec6a23efe5bc113f8aa2882f5780e8ea0c4a779d254058bd450c5b6b14ceb49cb2b14d6bf91c3efbd870805b5854f088b4b84bf7a52d75b012bbfd3c381345ddd5f7f0dc1536f0eb42c210afd170e0d2198eeae044964036c426b437c431aab9eeabb6e7086930972fc5565825524188e960c79bf2efd6f4620ca46f775c60b4e015af455ff9aa47bd3b88e51f9a98cddd1ceb4aa08fe988f12f799017a9ea222105249529d84eb5557dc7894b3a1da2216e62bb1dc831c8f7974c5d44a56e592ee5c084fbf4b0e3b0e61f695632e17f7b0ac1cd113c4a71049acae2f8310be4652e8254f9c12abfad3ac741647acba0b4ffe15550d938a3f5cfd6fd1dfb211cdefa8a5053d1f18ff488acdcb969744daf94639ad0d4f64c6ea738e9341391df78d465329b94a21f10689dc6758a0b0cca563d34d4d28fb96a9b8b9b338e2c8734be13ed7db572b698acdcc71cd99400633bc0a30fbdda98e0516bfee67cf0c490f21ba5386dbfe845708ca4b1a21eaccd0d5261c7ba2d19ea06f9c1863f8b6e2854e3aff5daae1d9714047c72d0c968f5cd9f6bc9453248276c323e5eda150eb8286e08c0bd7957de9e9cefc91a16998b596da3c1abeb76bfe8e6ce3c41061a25310d07f087cd3b20fce929e4ee8e224fb6b8089bc55f4bf541fff54686f50cf1c66d46ecd6b30560f258bf5816937f9dc6cd5dc04e14995e8863597141e1eff5fa36a71b585b1f10d03847fac639a221d2a832b5fded13e8148bdb85e2890791e820c362485822d6bcf6a031b1c7bdff585cdf5bcc0e1d412d75c3687b3172fbdacbaf2f4f95c960e8a5b33698abd3e472bbc46e5f1cfcec1b077c5d74cd806a862ba65f20fc653a6880c27ece66fd0e088f40e5902b05f4a0dca172663ed15d1b794b7e06b506896a61521577c84027744c89dd6a8bc0d894513d90b8ad9f60e5aab5a2ba30740a381b04ae3fad2e9ca308b39e00f33e7e92d6612073d304454240760cf2421b3b15400b207dcaf07aedcc00f6c77c3048c56c608544a26f38fffb1701450c1d867d261f90de53d228dc100ed5d55fa435da8270684239b585c25cf6360e036a162612ae948ee3025d58b554704d2152b75d2d7cec68206788e157a42766e19dfa077de10d6762051252b53200acba5dbca09fefd23c962cec82ac56a1868bbc58096fda3d331ce672dc2f1b8967f28b9937e6c3af58b58ace6ec30e965fef118599f7c0e5d2c27d14ce21fb7a566d6b0c7352b5d610aedfd1733a2bd587b03b6e9166512b7e7309279b4f4e1d0ec01fa1150594e042fefdfe3a61ca3e4f20236cb45b6d1724b911da2188b9737d5211c5753602809f033e20b74941205ee938ae0b3787043f1fa11297a308313a0b2d2135d6c74bacecf2445d9cc1dba5e413454d41df314fad973dd76ac55d348d3489b9bb85faa5ed0cfb97e4d1cb4e2c3d42d2c94c8a7fdcc40ef3651da12285c352fcf44ef09aa809346a5fa6dc3e88414ea086126a7a8b701e41e9f26986b1d6def9fdc467027353cb7f98a109b4b21a501560f70566bc34f3b9df6da4b51fea45bb62e01b1e2211e0a9844b73e486035bd17ee18ae8fbd65c76a1790b8373d72510747da26fda536635928444d3784328031383679dceae372e5396f7e4a5f269e455cfcd5df06ee3f24b7e9db3d7200847c93c2d8c16e36fb9ffd0295b4c0d3e7331b9e2e5a5249806c7e8da70e28d7a4638b5d1e79c1246b0f82ed14b64ded98aacaaed42107cbc8be2210ee74095978387ec3e13ec136690e6792c6666bda8968ad298dfee0d7de78d0d808da8986da5be6ac5a7d38ab0034a83d1be8dabd01834e9bf5e8421064e6a720fe43dc0d9930815ccba8a23f6016b566d586ed006bb010c570deac36f1a58eb3776a4385404198da3bbd59b30dc8d6e776858e8f4d385c93a3e1b41f64faf157ca81f3610576af66ffe21806996fdf49895363d61894d6b4aaa5083b7b31bc8dfec216ddea3f182e40574eca51b679231fe3134e4c7f2e6c0fdcaba30e384f41d83a1fdfbd8be9203e943634b130ed4e5903e7058ef0b7895e216e45132c8962f186cd1a73634168ca463b9f3b901423e47dbef00ccfb0ec67fc66e8681dcceb68187d26f40dcd728604b38180cda002fce06e2ab9d17672f3d10eb4ec85a25c94c8ad3720304a2f752f1c92f05a1008ad39e6e0da3a83f0ac8e6f442f9446be2bbf73bb608a03829dfff97b8aa569bac1b115ef5af5b53c1b8adcf8193c346fb516bb41d489b325b04a4279bd9dfb61fc5ab2ef2108a133290c7d03314ad58bca4a69bbabd1f104916032a355c6d5137016b723304a65a91180856ebc93cd93220d685dde89bb8e6d51a6ec5a0a6844f90c3ff67db68598557583f6c3ebd7046e318814945bef84c7c31bd73105128aa3c6de6b95db9d9b126fb240ccf5e82b96c939a42d7d0956190b8735bf2abd41aa3ef92e21cb3d78566f7c9ee853e4615b68b03f3145062ac942efd9cd918d4b35b73f0b6c50fa93419cf2f2b638a77b407ef0f2974d945f4452080a54e9883801559c947a3bde6879c7689cff6ed7b706d6019b545597926a6db2ca53a2816b74699d1c662b28d7a3a5cbc229bcc6582edb1a9e27d9c9a67adcc145f680cefad620f134aa81b33124912220e28e75f44c75d18d4b07b4fbb061a78d47e987f174a4f77b3eea7de6ecd370a799fce7d3574c144063b1a73151c3bff57561fa932a1f1dd41def4f3c5d09989881e8bddfbf3c8170480690b145bf3881bfaac34d89fcb0c54cf0ff93767be270d2325cdd0c9737d3e235428d8d3a664ba0ac4f717f0a9f52390421b40b1146f2776bb8bc13b10ce35d39e97dcfa539ce456176f4447eb70cbe6fa105f764f5ee120cd355754596fc974571393787c1a4239387007f27848ff35ed6e270b2a72b36de4c89cede701007cba498aea566943d1382cc34c5d60e5b05420f9ed1561ae8109df983e180911a33adbeec67274c8fc9cfc3489cf5c46f9e5ccd777981bdcba8dd63b373582174f4a138503134127af297133e3366bbc7cef8518a1fb5d7219e97a3a0f8506805426d0bd6e64f0b5d03a7b9847d3b7f4618fdb2cc2ebbd921a9c1bfb9e550f26dc1150f76af7356368d4aaa3a622bb278e939b9cdc2b269dc95369d97f3a85ca73df580f3b92f3837a745dce3c3ca682e57de640e029922ef7e3f718ee7687ddbf4828f15a1fd910cdfb0a1b843b78aa9d2d24ef3539bfdaa1c65e525dc835b58adf468d9134c36e32497872c43b12cc824e093a8e9c88eaa1bbf1dc9b8cba1fd0ca4effdf7f85655f41fe6b8c7fc91db4533faf81b345ef81174ee24f505074351300b527ebb13bc655bc3b0c2fcfce214c6ff4bef59ed7537450032499f9d0203ed912f8f83e69753e0eeb95017d25d435d2affc8de238152b9adf93fcebb115f6162cf3cea0979a2fa1c1d3e04c6833e2a10b192b878b8135bd6949f0b53591fbf689f8d74a259f094a7d0bb1a0b7420f239a0a8c065e4ac8187200bef66ba2dd4fa1b754ffa435486bb329f7ee7471524e2546450b9352f7aad1908143e29c5893027cdf80e84da0169909cbb765d2b20ef98ae4a8f79babf6fee49b3ff813a9417fe2bd55ba87d69ffe1e6a1c04c48316ae4bb942e694ff1a42e542793521ab26dce0f35692af98d2e28590b04a61eb0aff134fa6fc20ea02397c5ab49dbb4c3039031e979b06f15c95cebf1b376f4673770486ccd208fbac10947bf8442534e0e771d938d70fc37c437b6c982ebe8f66e43c6aabab4d3ddafbd29601f9e01ebfbc0666d0b37041efe63cf4e19c0536ef0441557c21a17ac8e0d9ddf1efa30ed1677d8ef484277d6a4638a537af1a5dd36e2214b404b3754582b38dc9ef02559527ad4cb4b687bcfbfba96c7a725b28f5f09c14c6198eb0827a392f77429a4210bd8a37fadbcecd90f1a54776a571788455ed3a729b85689cb4ee19f2937723aa79f1bf4810cb464e9d209fc3ce8cae451dab095b1e0df0b01f38a43490e31d9252403f3dbc5af1ce567e8cc45fb307ec070673214e76a7b1c0580d6e6f938adc651fec5f74f72b058774f40552cae03b6573c3f939616544b95e0375a616b6d304acc7f4ff1b816d714ba7487b922f6e6e83fac3d993019f17cf368b69f90c8e4663c2cf0aed4ba9667b9bb3b64d20cd416f4b5552cbbf243e368d6917af06eb17eff39043775eb5d40fa9ab133c12038f5d1c6547f877818ee0327657eef46fcb66607d2942c261db8330b39d25d40591b49084c9e1219b8ef8941d90687254e9bf3dac61493071565b8598aa253b4d2ae812c27c118b36d9e25b7c07a167027d2d386011a4cfe6a7668fd134a39abdb406f71d92d8e4b94f5b160b66acdb50fc72abae916778a4d9162718a6e23242d9974cd38fb405c35ed8c16e60b7460a69e7875b6fee8c40bb8c0f734021a2836749c8e4fb20ee29ea23b4ed18fb0b601e23c97d8010016462237a073a292d641fbeeeae89ff35c353b3c5dd6926b80b4f61da8c737266e325a88081ed55030ca1950abff0f4f08526c12f386f027d5ad15f07e75c432755f2fd52c4d85d237ef09dbbc6993e246e4a4f08edd1471cf9746895f3750b74bbfdfb786134e654d9ac36110ccb671dbe3371852a93bbe4910bf78443f50bd007d882d93123c75876963e3b5f4ddb11104b334d753bb9f6a3cbb8dd96eaf97bd26f7f1a0a976574d52491e13d1387ea5299342f7ed38a38c16b00baada54fd3e062bbd689678ea2cced1039c43d41eaf3dd088d6ab3e8f2efcd109227a15d44f769a64e67e0d93c9cf8a35922e1d88b412fd47fa3ea63cb1b752791d8b0416f8b498ae68279c741290c287ee88a71c0209c06570aeb57bc7fa55ffbaa087acd8c41df7725917113c012c28328031a23273b3216ef147732692c8ef47fb71bfa77f91ac78203503ee3cd", 0xfff, r4}, 0x38) [ 2474.905040][T31772] CPU: 1 PID: 31772 Comm: syz-executor.5 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2474.915220][T31772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2474.925218][T31772] Call Trace: [ 2474.928339][T31772] [ 2474.931111][T31772] dump_stack_lvl+0x151/0x1b7 [ 2474.935632][T31772] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2474.941094][T31772] dump_stack+0x15/0x17 [ 2474.945082][T31772] should_fail+0x3c6/0x510 [ 2474.949338][T31772] __should_failslab+0xa4/0xe0 [ 2474.954285][T31772] ? anon_vma_fork+0xf7/0x4e0 [ 2474.958801][T31772] should_failslab+0x9/0x20 [ 2474.963135][T31772] slab_pre_alloc_hook+0x37/0xd0 [ 2474.968080][T31772] ? anon_vma_fork+0xf7/0x4e0 [ 2474.972592][T31772] kmem_cache_alloc+0x44/0x200 [ 2474.977188][T31772] anon_vma_fork+0xf7/0x4e0 [ 2474.981530][T31772] ? anon_vma_name+0x4c/0x70 [ 2474.985958][T31772] ? vm_area_dup+0x17a/0x230 [ 2474.990386][T31772] copy_mm+0xa3a/0x13e0 [ 2474.994376][T31772] ? copy_signal+0x610/0x610 [ 2474.998800][T31772] ? __init_rwsem+0xd6/0x1c0 [ 2475.003235][T31772] ? copy_signal+0x4e3/0x610 [ 2475.007661][T31772] copy_process+0x12bc/0x3260 [ 2475.012168][T31772] ? proc_fail_nth_write+0x20b/0x290 [ 2475.017289][T31772] ? fsnotify_perm+0x6a/0x5d0 [ 2475.021801][T31772] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2475.026749][T31772] ? vfs_write+0x9ec/0x1110 [ 2475.031089][T31772] kernel_clone+0x21e/0x9e0 [ 2475.035431][T31772] ? file_end_write+0x1c0/0x1c0 [ 2475.040114][T31772] ? create_io_thread+0x1e0/0x1e0 [ 2475.044981][T31772] ? mutex_unlock+0xb2/0x260 [ 2475.049411][T31772] ? __mutex_lock_slowpath+0x10/0x10 [ 2475.054527][T31772] __x64_sys_clone+0x23f/0x290 [ 2475.059148][T31772] ? __do_sys_vfork+0x130/0x130 [ 2475.063807][T31772] ? ksys_write+0x260/0x2c0 [ 2475.068151][T31772] ? debug_smp_processor_id+0x17/0x20 [ 2475.073367][T31772] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2475.079259][T31772] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2475.084727][T31772] do_syscall_64+0x3d/0xb0 [ 2475.088980][T31772] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2475.094707][T31772] RIP: 0033:0x7fdfd1d08ae9 [ 2475.098958][T31772] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2475.118580][T31772] RSP: 002b:00007fdfd0a8b078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2475.126823][T31772] RAX: ffffffffffffffda RBX: 00007fdfd1e27f80 RCX: 00007fdfd1d08ae9 [ 2475.134630][T31772] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022001200 [ 2475.142445][T31772] RBP: 00007fdfd0a8b120 R08: 0000000000000000 R09: 0000000000000000 18:24:42 executing program 5: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 22) 18:24:42 executing program 1: syz_clone(0x22001200, 0x0, 0x700000000000000, 0x0, 0x0, 0x0) 18:24:42 executing program 2: socketpair(0x10, 0x1000000000000, 0x8, &(0x7f0000000040)) 18:24:42 executing program 3: bpf$MAP_CREATE(0x2100, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:42 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) (async) close(r1) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup(r2, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r3, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) (async) r4 = openat$cgroup_ro(r3, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r4, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r4}, 0x20) (async, rerun: 64) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r4}, 0x8) (async, rerun: 64) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', r4, 0x4000, r0}, 0x18) 18:24:42 executing program 2: socketpair(0x10, 0x20000000000000, 0x8, &(0x7f0000000040)) 18:24:42 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) close(r1) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup(r2, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r3, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r4 = openat$cgroup_ro(r3, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r4, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r4}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r4}, 0x8) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', r4, 0x4000, r0}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) (async) close(r1) (async) openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) (async) openat$cgroup(r2, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) (async) openat$cgroup_pressure(r3, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) (async) openat$cgroup_ro(r3, 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r4, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r4}, 0x20) (async) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r4}, 0x8) (async) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', r4, 0x4000, r0}, 0x18) (async) 18:24:42 executing program 3: bpf$MAP_CREATE(0x2200, &(0x7f0000000540)=@base={0xd}, 0x48) [ 2475.150253][T31772] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2475.158131][T31772] R13: 000000000000000b R14: 00007fdfd1e27f80 R15: 00007fff62717c48 [ 2475.165883][T31772] 18:24:42 executing program 1: syz_clone(0x22001200, 0x0, 0x900000000000000, 0x0, 0x0, 0x0) 18:24:42 executing program 2: socketpair(0x10, 0x81010000000000, 0x8, &(0x7f0000000040)) [ 2475.202461][T31805] FAULT_INJECTION: forcing a failure. [ 2475.202461][T31805] name failslab, interval 1, probability 0, space 0, times 0 [ 2475.232969][T31805] CPU: 1 PID: 31805 Comm: syz-executor.5 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 18:24:42 executing program 2: socketpair(0x10, 0x100000000000000, 0x8, &(0x7f0000000040)) [ 2475.243145][T31805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2475.253305][T31805] Call Trace: [ 2475.256427][T31805] [ 2475.259199][T31805] dump_stack_lvl+0x151/0x1b7 [ 2475.263713][T31805] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2475.269183][T31805] dump_stack+0x15/0x17 [ 2475.273321][T31805] should_fail+0x3c6/0x510 [ 2475.277575][T31805] __should_failslab+0xa4/0xe0 [ 2475.282183][T31805] ? anon_vma_fork+0x1df/0x4e0 [ 2475.286775][T31805] should_failslab+0x9/0x20 [ 2475.291288][T31805] slab_pre_alloc_hook+0x37/0xd0 [ 2475.296064][T31805] ? anon_vma_fork+0x1df/0x4e0 [ 2475.300661][T31805] kmem_cache_alloc+0x44/0x200 [ 2475.305259][T31805] anon_vma_fork+0x1df/0x4e0 [ 2475.309696][T31805] copy_mm+0xa3a/0x13e0 [ 2475.313693][T31805] ? copy_signal+0x610/0x610 [ 2475.318106][T31805] ? __init_rwsem+0xd6/0x1c0 [ 2475.322537][T31805] ? copy_signal+0x4e3/0x610 [ 2475.326963][T31805] copy_process+0x12bc/0x3260 [ 2475.331470][T31805] ? proc_fail_nth_write+0x20b/0x290 [ 2475.336586][T31805] ? fsnotify_perm+0x6a/0x5d0 [ 2475.341102][T31805] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2475.346046][T31805] ? vfs_write+0x9ec/0x1110 [ 2475.350391][T31805] kernel_clone+0x21e/0x9e0 [ 2475.354727][T31805] ? file_end_write+0x1c0/0x1c0 [ 2475.359413][T31805] ? create_io_thread+0x1e0/0x1e0 [ 2475.364273][T31805] ? mutex_unlock+0xb2/0x260 [ 2475.368703][T31805] ? __mutex_lock_slowpath+0x10/0x10 [ 2475.373833][T31805] __x64_sys_clone+0x23f/0x290 [ 2475.378437][T31805] ? __do_sys_vfork+0x130/0x130 [ 2475.383106][T31805] ? ksys_write+0x260/0x2c0 [ 2475.387450][T31805] ? debug_smp_processor_id+0x17/0x20 [ 2475.392658][T31805] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2475.398644][T31805] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2475.404112][T31805] do_syscall_64+0x3d/0xb0 [ 2475.408367][T31805] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2475.414096][T31805] RIP: 0033:0x7fdfd1d08ae9 [ 2475.418357][T31805] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2475.437795][T31805] RSP: 002b:00007fdfd0a8b078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2475.446179][T31805] RAX: ffffffffffffffda RBX: 00007fdfd1e27f80 RCX: 00007fdfd1d08ae9 [ 2475.453983][T31805] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022001200 [ 2475.461818][T31805] RBP: 00007fdfd0a8b120 R08: 0000000000000000 R09: 0000000000000000 [ 2475.469687][T31805] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2475.477491][T31805] R13: 000000000000000b R14: 00007fdfd1e27f80 R15: 00007fff62717c48 [ 2475.485306][T31805] 18:24:43 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0xffffffffffffffe0, &(0x7f0000001440)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/192, 0xc0}], 0x7, &(0x7f00000014c0)=""/15, 0xf}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001d00)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f00000022c0)={0x0, 0x0, 0x0}, 0x40) recvmsg$unix(r1, &(0x7f0000001a80)={&(0x7f0000001540), 0x6e, &(0x7f0000001a00)=[{&(0x7f00000015c0)=""/225, 0xe1}, {&(0x7f0000000000)=""/20, 0x14}, {&(0x7f00000016c0)=""/198, 0xc6}, {&(0x7f00000017c0)=""/71, 0x47}, {&(0x7f0000001840)=""/141, 0x8d}, {&(0x7f0000001900)=""/198, 0xc6}], 0x6}, 0x40002120) (async) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001ac0)={0x0, 0x1, 0x10}, 0xc) (async) r3 = openat$cgroup(r2, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r3, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) (async) r4 = openat$cgroup_ro(r3, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r4, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r4}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r4}, 0x8) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000001c00)={&(0x7f0000001ac0), &(0x7f0000001b00)=""/133, &(0x7f0000001bc0), &(0x7f0000002300)="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", 0xfff, r4}, 0x38) 18:24:43 executing program 1: syz_clone(0x22001200, 0x0, 0x1100000000000000, 0x0, 0x0, 0x0) 18:24:43 executing program 2: socketpair(0x10, 0x200000000000000, 0x8, &(0x7f0000000040)) 18:24:43 executing program 3: bpf$MAP_CREATE(0x2300, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:43 executing program 5: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 23) 18:24:43 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/250, 0xfa}, 0x0) close(r1) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) recvmsg(r0, &(0x7f00000003c0)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000200)=""/130, 0x82}, {&(0x7f00000002c0)=""/51, 0x33}], 0x2, &(0x7f0000000340)=""/113, 0x71}, 0x40000002) 18:24:43 executing program 2: socketpair(0x10, 0x300000000000000, 0x8, &(0x7f0000000040)) 18:24:43 executing program 3: bpf$MAP_CREATE(0x1000000, &(0x7f0000000540)=@base={0xd}, 0x48) [ 2475.791644][T31830] FAULT_INJECTION: forcing a failure. [ 2475.791644][T31830] name failslab, interval 1, probability 0, space 0, times 0 [ 2475.815568][T31830] CPU: 1 PID: 31830 Comm: syz-executor.5 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2475.825755][T31830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2475.835840][T31830] Call Trace: [ 2475.838955][T31830] 18:24:43 executing program 1: syz_clone(0x22001200, 0x0, 0x1f00000000000000, 0x0, 0x0, 0x0) 18:24:43 executing program 1: syz_clone(0x22001200, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0) [ 2475.841738][T31830] dump_stack_lvl+0x151/0x1b7 [ 2475.846246][T31830] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2475.851800][T31830] ? slab_post_alloc_hook+0x53/0x2c0 [ 2475.856927][T31830] ? kernel_clone+0x21e/0x9e0 [ 2475.861433][T31830] ? do_syscall_64+0x3d/0xb0 [ 2475.865947][T31830] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2475.871846][T31830] dump_stack+0x15/0x17 [ 2475.875842][T31830] should_fail+0x3c6/0x510 [ 2475.880356][T31830] __should_failslab+0xa4/0xe0 [ 2475.884959][T31830] ? copy_mm+0x192/0x13e0 18:24:43 executing program 1: syz_clone(0x22001200, 0x0, 0xf5ffffff00000000, 0x0, 0x0, 0x0) 18:24:43 executing program 2: socketpair(0x10, 0x400000000000000, 0x8, &(0x7f0000000040)) [ 2475.889726][T31830] should_failslab+0x9/0x20 [ 2475.894117][T31830] slab_pre_alloc_hook+0x37/0xd0 [ 2475.898839][T31830] ? copy_mm+0x192/0x13e0 [ 2475.903007][T31830] kmem_cache_alloc+0x44/0x200 [ 2475.907616][T31830] copy_mm+0x192/0x13e0 [ 2475.911603][T31830] ? _raw_spin_lock+0xa4/0x1b0 [ 2475.916467][T31830] ? copy_signal+0x610/0x610 [ 2475.920887][T31830] ? __kasan_check_write+0x14/0x20 [ 2475.925829][T31830] ? __init_rwsem+0xd6/0x1c0 [ 2475.930259][T31830] ? copy_signal+0x4e3/0x610 [ 2475.934691][T31830] copy_process+0x12bc/0x3260 [ 2475.939369][T31830] ? proc_fail_nth_write+0x20b/0x290 [ 2475.944499][T31830] ? fsnotify_perm+0x6a/0x5d0 [ 2475.949008][T31830] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2475.953951][T31830] ? vfs_write+0x9ec/0x1110 [ 2475.958299][T31830] kernel_clone+0x21e/0x9e0 [ 2475.962892][T31830] ? file_end_write+0x1c0/0x1c0 [ 2475.967666][T31830] ? create_io_thread+0x1e0/0x1e0 [ 2475.972611][T31830] ? mutex_unlock+0xb2/0x260 [ 2475.977072][T31830] ? __mutex_lock_slowpath+0x10/0x10 [ 2475.982189][T31830] __x64_sys_clone+0x23f/0x290 [ 2475.986758][T31830] ? __do_sys_vfork+0x130/0x130 [ 2475.991442][T31830] ? ksys_write+0x260/0x2c0 [ 2475.995788][T31830] ? debug_smp_processor_id+0x17/0x20 [ 2476.000989][T31830] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2476.006898][T31830] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2476.012369][T31830] do_syscall_64+0x3d/0xb0 [ 2476.016704][T31830] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2476.022514][T31830] RIP: 0033:0x7fdfd1d08ae9 [ 2476.026874][T31830] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2476.046321][T31830] RSP: 002b:00007fdfd0a8b078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2476.054553][T31830] RAX: ffffffffffffffda RBX: 00007fdfd1e27f80 RCX: 00007fdfd1d08ae9 [ 2476.062362][T31830] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022001200 [ 2476.070176][T31830] RBP: 00007fdfd0a8b120 R08: 0000000000000000 R09: 0000000000000000 [ 2476.077986][T31830] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 18:24:43 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/250, 0xfa}, 0x0) close(r1) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) recvmsg(r0, &(0x7f00000003c0)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000200)=""/130, 0x82}, {&(0x7f00000002c0)=""/51, 0x33}], 0x2, &(0x7f0000000340)=""/113, 0x71}, 0x40000002) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/250, 0xfa}, 0x0) (async) close(r1) (async) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) (async) recvmsg(r0, &(0x7f00000003c0)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000200)=""/130, 0x82}, {&(0x7f00000002c0)=""/51, 0x33}], 0x2, &(0x7f0000000340)=""/113, 0x71}, 0x40000002) (async) 18:24:43 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0xffffffffffffffe0, &(0x7f0000001440)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/192, 0xc0}], 0x7, &(0x7f00000014c0)=""/15, 0xf}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001d00)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f00000022c0)={0x0, 0x0, 0x0}, 0x40) (async) recvmsg$unix(r1, &(0x7f0000001a80)={&(0x7f0000001540), 0x6e, &(0x7f0000001a00)=[{&(0x7f00000015c0)=""/225, 0xe1}, {&(0x7f0000000000)=""/20, 0x14}, {&(0x7f00000016c0)=""/198, 0xc6}, {&(0x7f00000017c0)=""/71, 0x47}, {&(0x7f0000001840)=""/141, 0x8d}, {&(0x7f0000001900)=""/198, 0xc6}], 0x6}, 0x40002120) (async) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001ac0)={0x0, 0x1, 0x10}, 0xc) (async) r3 = openat$cgroup(r2, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r3, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r4 = openat$cgroup_ro(r3, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r4, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r4}, 0x20) (async, rerun: 64) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r4}, 0x8) (rerun: 64) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000001c00)={&(0x7f0000001ac0), &(0x7f0000001b00)=""/133, &(0x7f0000001bc0), &(0x7f0000002300)="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", 0xfff, r4}, 0x38) 18:24:43 executing program 3: bpf$MAP_CREATE(0x2000000, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:43 executing program 1: syz_clone(0x22001200, 0x0, 0xfbffffff00000000, 0x0, 0x0, 0x0) 18:24:43 executing program 2: socketpair(0x10, 0x800000000000000, 0x8, &(0x7f0000000040)) 18:24:43 executing program 5: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 24) [ 2476.085801][T31830] R13: 000000000000000b R14: 00007fdfd1e27f80 R15: 00007fff62717c48 [ 2476.093621][T31830] 18:24:43 executing program 3: bpf$MAP_CREATE(0x3000000, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:43 executing program 2: socketpair(0x10, 0xa00000000000000, 0x8, &(0x7f0000000040)) 18:24:43 executing program 3: bpf$MAP_CREATE(0x4000000, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:43 executing program 1: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) recvmsg$unix(r0, &(0x7f0000003580)={&(0x7f0000000040), 0x6e, &(0x7f00000033c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f00000020c0)=""/250, 0xfa}, {&(0x7f00000021c0)=""/207, 0xcf}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f00000032c0)=""/208, 0xd0}], 0x6, &(0x7f0000003440)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x120}, 0x0) [ 2476.154504][T31878] FAULT_INJECTION: forcing a failure. [ 2476.154504][T31878] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2476.172699][T31878] CPU: 0 PID: 31878 Comm: syz-executor.5 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2476.182885][T31878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2476.192859][T31878] Call Trace: [ 2476.195981][T31878] [ 2476.198756][T31878] dump_stack_lvl+0x151/0x1b7 18:24:43 executing program 2: socketpair(0x10, 0x2000000000000000, 0x8, &(0x7f0000000040)) 18:24:43 executing program 2: socketpair(0x10, 0x4000000000000000, 0x8, &(0x7f0000000040)) [ 2476.203272][T31878] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2476.208738][T31878] dump_stack+0x15/0x17 [ 2476.212729][T31878] should_fail+0x3c6/0x510 [ 2476.216984][T31878] should_fail_alloc_page+0x5a/0x80 [ 2476.222019][T31878] prepare_alloc_pages+0x15c/0x700 [ 2476.227062][T31878] ? __alloc_pages_bulk+0xe60/0xe60 [ 2476.232090][T31878] __alloc_pages+0x138/0x5e0 [ 2476.236514][T31878] ? prep_new_page+0x110/0x110 [ 2476.241122][T31878] ? __alloc_pages+0x206/0x5e0 [ 2476.245716][T31878] ? stack_trace_save+0x1c0/0x1c0 [ 2476.250576][T31878] ? __kasan_check_write+0x14/0x20 [ 2476.255519][T31878] ? _raw_spin_lock+0xa4/0x1b0 [ 2476.260115][T31878] __pmd_alloc+0xb1/0x550 [ 2476.264280][T31878] ? __pud_alloc+0x260/0x260 [ 2476.268717][T31878] ? __pud_alloc+0x213/0x260 [ 2476.273144][T31878] ? do_handle_mm_fault+0x2330/0x2330 [ 2476.278353][T31878] ? __stack_depot_save+0x34/0x470 [ 2476.283287][T31878] ? anon_vma_clone+0x9a/0x500 [ 2476.287897][T31878] copy_page_range+0x2b3d/0x2f90 [ 2476.292660][T31878] ? __kasan_slab_alloc+0xb1/0xe0 [ 2476.297610][T31878] ? slab_post_alloc_hook+0x53/0x2c0 [ 2476.302743][T31878] ? copy_mm+0xa3a/0x13e0 [ 2476.306904][T31878] ? copy_process+0x12bc/0x3260 [ 2476.311581][T31878] ? kernel_clone+0x21e/0x9e0 [ 2476.316095][T31878] ? do_syscall_64+0x3d/0xb0 [ 2476.320521][T31878] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2476.326427][T31878] ? pfn_valid+0x1e0/0x1e0 [ 2476.330675][T31878] ? rwsem_write_trylock+0x15b/0x290 [ 2476.335802][T31878] ? vma_interval_tree_augment_rotate+0x1d0/0x1d0 [ 2476.342046][T31878] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 2476.347618][T31878] ? __rb_insert_augmented+0x5de/0x610 [ 2476.352900][T31878] copy_mm+0xc7e/0x13e0 [ 2476.356895][T31878] ? copy_signal+0x610/0x610 [ 2476.361318][T31878] ? __init_rwsem+0xd6/0x1c0 [ 2476.365740][T31878] ? copy_signal+0x4e3/0x610 [ 2476.370169][T31878] copy_process+0x12bc/0x3260 [ 2476.374847][T31878] ? proc_fail_nth_write+0x20b/0x290 [ 2476.380055][T31878] ? fsnotify_perm+0x6a/0x5d0 [ 2476.384565][T31878] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2476.389508][T31878] ? vfs_write+0x9ec/0x1110 [ 2476.393855][T31878] kernel_clone+0x21e/0x9e0 [ 2476.398185][T31878] ? file_end_write+0x1c0/0x1c0 [ 2476.402874][T31878] ? create_io_thread+0x1e0/0x1e0 [ 2476.407734][T31878] ? mutex_unlock+0xb2/0x260 [ 2476.412512][T31878] ? __mutex_lock_slowpath+0x10/0x10 [ 2476.417633][T31878] __x64_sys_clone+0x23f/0x290 [ 2476.422236][T31878] ? __do_sys_vfork+0x130/0x130 [ 2476.426915][T31878] ? ksys_write+0x260/0x2c0 [ 2476.431257][T31878] ? debug_smp_processor_id+0x17/0x20 [ 2476.436463][T31878] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2476.442372][T31878] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2476.447836][T31878] do_syscall_64+0x3d/0xb0 [ 2476.452087][T31878] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2476.457815][T31878] RIP: 0033:0x7fdfd1d08ae9 [ 2476.462068][T31878] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2476.481523][T31878] RSP: 002b:00007fdfd0a8b078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2476.489766][T31878] RAX: ffffffffffffffda RBX: 00007fdfd1e27f80 RCX: 00007fdfd1d08ae9 [ 2476.497568][T31878] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022001200 [ 2476.505380][T31878] RBP: 00007fdfd0a8b120 R08: 0000000000000000 R09: 0000000000000000 [ 2476.513187][T31878] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2476.522387][T31878] R13: 000000000000000b R14: 00007fdfd1e27f80 R15: 00007fff62717c48 [ 2476.531071][T31878] 18:24:44 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001740)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000001440)=[{&(0x7f00000018c0)=""/242, 0xf2}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/100, 0x64}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/190, 0xf}], 0x7, &(0x7f00000014c0)=""/15, 0xf}, 0x0) close(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) recvmsg(r3, &(0x7f0000001780)={&(0x7f0000001540)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f00000016c0)=[{&(0x7f00000015c0)=""/99, 0x63}, {&(0x7f0000001700)=""/2, 0x2}, {&(0x7f0000001640)=""/80, 0x50}], 0x3, &(0x7f0000001800)=""/129, 0x81}, 0x10002) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', r3}, 0x18) 18:24:44 executing program 1: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) recvmsg$unix(r0, &(0x7f0000003580)={&(0x7f0000000040), 0x6e, &(0x7f00000033c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f00000020c0)=""/250, 0xfa}, {&(0x7f00000021c0)=""/207, 0xcf}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f00000032c0)=""/208, 0xd0}], 0x6, &(0x7f0000003440)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x120}, 0x0) 18:24:44 executing program 3: bpf$MAP_CREATE(0x5000000, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:44 executing program 2: socketpair(0x10, 0xf602000000000000, 0x8, &(0x7f0000000040)) 18:24:44 executing program 5: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 25) 18:24:44 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/250, 0xfa}, 0x0) (async) close(r1) (async) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) (async) recvmsg(r0, &(0x7f00000003c0)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000200)=""/130, 0x82}, {&(0x7f00000002c0)=""/51, 0x33}], 0x2, &(0x7f0000000340)=""/113, 0x71}, 0x40000002) 18:24:44 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup(r2, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r3, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r4 = openat$cgroup_ro(r3, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r4, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r4}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r4}, 0x8) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup(r5, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r6, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r7 = openat$cgroup_ro(r6, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r7, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r7}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r7}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xd, &(0x7f0000000140)=@raw=[@map_fd={0x18, 0x6, 0x1, 0x0, 0x1}, @alu={0x4, 0x1, 0x0, 0xa, 0x0, 0x6, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @ldst={0x3, 0x2, 0x3, 0x3, 0xb, 0xffffffffffffffc0, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xa}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @alu={0x4, 0x0, 0x5, 0x3, 0x0, 0x6, 0x10}], &(0x7f00000001c0)='GPL\x00', 0x7, 0xb2, &(0x7f00000003c0)=""/178, 0x41100, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0x1, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r4, r7], 0x0, 0x10, 0x1c}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r8, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4000, r8}, 0x18) close(r1) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x18) 18:24:44 executing program 3: bpf$MAP_CREATE(0x6000000, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:44 executing program 2: socketpair(0x10, 0xfeffffff00000000, 0x8, &(0x7f0000000040)) 18:24:44 executing program 3: bpf$MAP_CREATE(0x7000000, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:44 executing program 1: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) recvmsg$unix(r0, &(0x7f0000003580)={&(0x7f0000000040), 0x6e, &(0x7f00000033c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f00000020c0)=""/250, 0xfa}, {&(0x7f00000021c0)=""/207, 0xcf}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f00000032c0)=""/208, 0xd0}], 0x6, &(0x7f0000003440)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x120}, 0x0) syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) recvmsg$unix(r0, &(0x7f0000003580)={&(0x7f0000000040), 0x6e, &(0x7f00000033c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f00000020c0)=""/250, 0xfa}, {&(0x7f00000021c0)=""/207, 0xcf}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f00000032c0)=""/208, 0xd0}], 0x6, &(0x7f0000003440)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x120}, 0x0) (async) [ 2477.005454][T31912] FAULT_INJECTION: forcing a failure. [ 2477.005454][T31912] name failslab, interval 1, probability 0, space 0, times 0 [ 2477.027520][T31912] CPU: 0 PID: 31912 Comm: syz-executor.5 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2477.037689][T31912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2477.047581][T31912] Call Trace: [ 2477.050715][T31912] 18:24:44 executing program 2: socketpair(0x10, 0x0, 0x16, &(0x7f0000000040)) [ 2477.053492][T31912] dump_stack_lvl+0x151/0x1b7 [ 2477.057997][T31912] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2477.063477][T31912] dump_stack+0x15/0x17 [ 2477.067452][T31912] should_fail+0x3c6/0x510 [ 2477.071712][T31912] __should_failslab+0xa4/0xe0 [ 2477.076310][T31912] should_failslab+0x9/0x20 [ 2477.080652][T31912] slab_pre_alloc_hook+0x37/0xd0 [ 2477.085425][T31912] kmem_cache_alloc_trace+0x48/0x210 [ 2477.090540][T31912] ? mm_init+0x39a/0x970 [ 2477.094627][T31912] mm_init+0x39a/0x970 [ 2477.098545][T31912] copy_mm+0x1e3/0x13e0 [ 2477.102543][T31912] ? _raw_spin_lock+0xa4/0x1b0 [ 2477.107123][T31912] ? copy_signal+0x610/0x610 [ 2477.111551][T31912] ? __kasan_check_write+0x14/0x20 [ 2477.116494][T31912] ? __init_rwsem+0xd6/0x1c0 [ 2477.120922][T31912] ? copy_signal+0x4e3/0x610 [ 2477.125355][T31912] copy_process+0x12bc/0x3260 [ 2477.129860][T31912] ? proc_fail_nth_write+0x20b/0x290 [ 2477.134986][T31912] ? fsnotify_perm+0x6a/0x5d0 [ 2477.139494][T31912] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2477.144448][T31912] ? vfs_write+0x9ec/0x1110 [ 2477.148782][T31912] kernel_clone+0x21e/0x9e0 [ 2477.153117][T31912] ? file_end_write+0x1c0/0x1c0 [ 2477.157808][T31912] ? create_io_thread+0x1e0/0x1e0 [ 2477.162924][T31912] ? mutex_unlock+0xb2/0x260 [ 2477.167448][T31912] ? __mutex_lock_slowpath+0x10/0x10 [ 2477.172560][T31912] __x64_sys_clone+0x23f/0x290 [ 2477.177160][T31912] ? __do_sys_vfork+0x130/0x130 [ 2477.183408][T31912] ? ksys_write+0x260/0x2c0 [ 2477.187751][T31912] ? debug_smp_processor_id+0x17/0x20 [ 2477.192959][T31912] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2477.198859][T31912] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2477.204325][T31912] do_syscall_64+0x3d/0xb0 [ 2477.208577][T31912] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2477.214307][T31912] RIP: 0033:0x7fdfd1d08ae9 [ 2477.218559][T31912] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2477.238005][T31912] RSP: 002b:00007fdfd0a8b078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2477.246243][T31912] RAX: ffffffffffffffda RBX: 00007fdfd1e27f80 RCX: 00007fdfd1d08ae9 18:24:44 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001740)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000001440)=[{&(0x7f00000018c0)=""/242, 0xf2}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/100, 0x64}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/190, 0xf}], 0x7, &(0x7f00000014c0)=""/15, 0xf}, 0x0) (async) close(r1) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, 0x0, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) recvmsg(r3, &(0x7f0000001780)={&(0x7f0000001540)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f00000016c0)=[{&(0x7f00000015c0)=""/99, 0x63}, {&(0x7f0000001700)=""/2, 0x2}, {&(0x7f0000001640)=""/80, 0x50}], 0x3, &(0x7f0000001800)=""/129, 0x81}, 0x10002) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', r3}, 0x18) 18:24:44 executing program 2: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x173, 0x173, 0x3, [@typedef={0xe, 0x0, 0x0, 0x8, 0x2}, @const={0x1}, @struct={0x0, 0x8, 0x0, 0x4, 0x1, 0xffffedd6, [{0x5, 0x2, 0x101}, {0xb, 0x4, 0x80}, {0x1, 0x4}, {0x2, 0x2, 0x800}, {0xf, 0x3}, {0xa, 0x0, 0x9}, {0x3, 0x5, 0xfffffffd}, {0x4, 0x3, 0x4}]}, @enum={0xe, 0x1, 0x0, 0x6, 0x4, [{0x6, 0x7fffffff}]}, @ptr={0x2, 0x0, 0x0, 0x2, 0x5}, @fwd={0xd}, @struct={0x2, 0x6, 0x0, 0x4, 0x1, 0x5, [{0x5, 0x3, 0x20000000}, {0x9, 0x2, 0x80000000}, {0xc}, {0xd, 0x2, 0xffffffff}, {0x9, 0x5, 0x7fffffff}, {0x5, 0x1, 0x82}]}, @ptr={0x5, 0x0, 0x0, 0x2, 0x3}, @datasec={0x4, 0x6, 0x0, 0xf, 0x3, [{0x3, 0x2c, 0x400}, {0x4, 0x80000000, 0x5}, {0x3, 0x2}, {0x1, 0x80000000, 0x7a7}, {0x2, 0x4, 0x2}, {0x3, 0x5, 0x7f}], "97544d"}, @volatile={0xe}]}, {0x0, [0x5f]}}, &(0x7f0000000240)=""/44, 0x18f, 0x2c, 0x1, 0x200}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={r0, 0x20, &(0x7f0000000400)={&(0x7f00000002c0)=""/51, 0x33, 0x0, &(0x7f0000000300)=""/245, 0xf5}}, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time\x00') socketpair(0x25, 0x0, 0x8, &(0x7f0000000040)) 18:24:44 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4, 0x3, 0xc6, 0x3ff}, {0x1a53, 0x0, 0x80, 0x4}, {0x2, 0xfa, 0x5, 0xfffffffb}, {0x2, 0x1f, 0x6}, {0x4, 0x9, 0x5, 0x8000}]}) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000000100)) syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) syz_clone(0x30000000, &(0x7f0000000140)="9b7acd1d833046f507c949c69456602eba565bbce48c81755c50eee1c6a66ac3e27be8bb966dcfda43015c3ffedd17a09df9dd5bea53c868a22034c22c9b4ab0ecd56cd866337abd5789070c06633c5c26e90b0cfd8473ee3c93b3344998c548055ddb9df7d7b08c27de76f3b69908ea674ce3c0f08b649e0919f79a6a182fa7197588cc8d952c9826f5d563ade3e018a2803c04c601f30b4f33785ea537fa", 0x9f, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="422f58fcdd136c1a50d310411183adada0456dced72586389f17c5074cc1f99791345da255dd5500dbb73e7b7850af3db769be33bf4ec4ce2bf53a9c93a566a0b7377dcee755421bde00537929def0339454a721a8b4376578398c1accc25045ee09ae73e9662f6ec1d72c3cdb500cbcf5a96af552db5ec211af1e43452762e7a7cd6bce5b3094b34e6252b4fc2c8175ed91e25714c4af4f724092cfaedc307037684a53ace15683854a459a08466db8ca5e06db1bdf264be8244a824a") openat$cgroup_ro(r1, &(0x7f0000000340)='freezer.self_freezing\x00', 0x0, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup(r2, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r3, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r4 = openat$cgroup_ro(r3, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r4, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r4}, 0x20) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r4}, 0x8) recvmsg$unix(r5, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r7 = openat$cgroup(r6, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r7, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r8 = openat$cgroup_ro(r7, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r8, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r8}, 0x20) r9 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r8}, 0x8) r10 = getpid() syz_open_procfs$namespace(r10, 0x0) write$cgroup_pid(r9, &(0x7f0000000380)=r10, 0x12) 18:24:44 executing program 3: bpf$MAP_CREATE(0x8000000, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:44 executing program 5: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 26) 18:24:44 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) (async) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup(r2, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r3, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) (async) r4 = openat$cgroup_ro(r3, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r4, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r4}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r4}, 0x8) (async) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup(r5, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r6, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) (async) r7 = openat$cgroup_ro(r6, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r7, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r7}, 0x20) (async) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r7}, 0x8) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xd, &(0x7f0000000140)=@raw=[@map_fd={0x18, 0x6, 0x1, 0x0, 0x1}, @alu={0x4, 0x1, 0x0, 0xa, 0x0, 0x6, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @ldst={0x3, 0x2, 0x3, 0x3, 0xb, 0xffffffffffffffc0, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xa}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @alu={0x4, 0x0, 0x5, 0x3, 0x0, 0x6, 0x10}], &(0x7f00000001c0)='GPL\x00', 0x7, 0xb2, &(0x7f00000003c0)=""/178, 0x41100, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0x1, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r4, r7], 0x0, 0x10, 0x1c}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r8, 0x0, 0x0) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4000, r8}, 0x18) (async) close(r1) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x18) 18:24:44 executing program 3: bpf$MAP_CREATE(0x9000000, &(0x7f0000000540)=@base={0xd}, 0x48) [ 2477.254057][T31912] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022001200 [ 2477.261879][T31912] RBP: 00007fdfd0a8b120 R08: 0000000000000000 R09: 0000000000000000 [ 2477.269683][T31912] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2477.277493][T31912] R13: 000000000000000b R14: 00007fdfd1e27f80 R15: 00007fff62717c48 [ 2477.285307][T31912] 18:24:44 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001740)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000001440)=[{&(0x7f00000018c0)=""/242, 0xf2}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/100, 0x64}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/190, 0xf}], 0x7, &(0x7f00000014c0)=""/15, 0xf}, 0x0) (async) close(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) recvmsg(r3, &(0x7f0000001780)={&(0x7f0000001540)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f00000016c0)=[{&(0x7f00000015c0)=""/99, 0x63}, {&(0x7f0000001700)=""/2, 0x2}, {&(0x7f0000001640)=""/80, 0x50}], 0x3, &(0x7f0000001800)=""/129, 0x81}, 0x10002) (async) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', r3}, 0x18) 18:24:44 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup(r2, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r3, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) (async) openat$cgroup_pressure(r3, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r4 = openat$cgroup_ro(r3, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r4, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r4}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r4}, 0x8) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup(r5, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r6, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) openat$cgroup_ro(r6, 0x0, 0x0, 0x0) (async) r7 = openat$cgroup_ro(r6, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r7, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r7}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r7}, 0x8) (async) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r7}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xd, &(0x7f0000000140)=@raw=[@map_fd={0x18, 0x6, 0x1, 0x0, 0x1}, @alu={0x4, 0x1, 0x0, 0xa, 0x0, 0x6, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @ldst={0x3, 0x2, 0x3, 0x3, 0xb, 0xffffffffffffffc0, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xa}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @alu={0x4, 0x0, 0x5, 0x3, 0x0, 0x6, 0x10}], &(0x7f00000001c0)='GPL\x00', 0x7, 0xb2, &(0x7f00000003c0)=""/178, 0x41100, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0x1, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r4, r7], 0x0, 0x10, 0x1c}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r8, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4000, r8}, 0x18) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4000, r8}, 0x18) close(r1) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x18) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x18) 18:24:44 executing program 2: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x173, 0x173, 0x3, [@typedef={0xe, 0x0, 0x0, 0x8, 0x2}, @const={0x1}, @struct={0x0, 0x8, 0x0, 0x4, 0x1, 0xffffedd6, [{0x5, 0x2, 0x101}, {0xb, 0x4, 0x80}, {0x1, 0x4}, {0x2, 0x2, 0x800}, {0xf, 0x3}, {0xa, 0x0, 0x9}, {0x3, 0x5, 0xfffffffd}, {0x4, 0x3, 0x4}]}, @enum={0xe, 0x1, 0x0, 0x6, 0x4, [{0x6, 0x7fffffff}]}, @ptr={0x2, 0x0, 0x0, 0x2, 0x5}, @fwd={0xd}, @struct={0x2, 0x6, 0x0, 0x4, 0x1, 0x5, [{0x5, 0x3, 0x20000000}, {0x9, 0x2, 0x80000000}, {0xc}, {0xd, 0x2, 0xffffffff}, {0x9, 0x5, 0x7fffffff}, {0x5, 0x1, 0x82}]}, @ptr={0x5, 0x0, 0x0, 0x2, 0x3}, @datasec={0x4, 0x6, 0x0, 0xf, 0x3, [{0x3, 0x2c, 0x400}, {0x4, 0x80000000, 0x5}, {0x3, 0x2}, {0x1, 0x80000000, 0x7a7}, {0x2, 0x4, 0x2}, {0x3, 0x5, 0x7f}], "97544d"}, @volatile={0xe}]}, {0x0, [0x5f]}}, &(0x7f0000000240)=""/44, 0x18f, 0x2c, 0x1, 0x200}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={r0, 0x20, &(0x7f0000000400)={&(0x7f00000002c0)=""/51, 0x33, 0x0, &(0x7f0000000300)=""/245, 0xf5}}, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time\x00') socketpair(0x25, 0x0, 0x8, &(0x7f0000000040)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x173, 0x173, 0x3, [@typedef={0xe, 0x0, 0x0, 0x8, 0x2}, @const={0x1}, @struct={0x0, 0x8, 0x0, 0x4, 0x1, 0xffffedd6, [{0x5, 0x2, 0x101}, {0xb, 0x4, 0x80}, {0x1, 0x4}, {0x2, 0x2, 0x800}, {0xf, 0x3}, {0xa, 0x0, 0x9}, {0x3, 0x5, 0xfffffffd}, {0x4, 0x3, 0x4}]}, @enum={0xe, 0x1, 0x0, 0x6, 0x4, [{0x6, 0x7fffffff}]}, @ptr={0x2, 0x0, 0x0, 0x2, 0x5}, @fwd={0xd}, @struct={0x2, 0x6, 0x0, 0x4, 0x1, 0x5, [{0x5, 0x3, 0x20000000}, {0x9, 0x2, 0x80000000}, {0xc}, {0xd, 0x2, 0xffffffff}, {0x9, 0x5, 0x7fffffff}, {0x5, 0x1, 0x82}]}, @ptr={0x5, 0x0, 0x0, 0x2, 0x3}, @datasec={0x4, 0x6, 0x0, 0xf, 0x3, [{0x3, 0x2c, 0x400}, {0x4, 0x80000000, 0x5}, {0x3, 0x2}, {0x1, 0x80000000, 0x7a7}, {0x2, 0x4, 0x2}, {0x3, 0x5, 0x7f}], "97544d"}, @volatile={0xe}]}, {0x0, [0x5f]}}, &(0x7f0000000240)=""/44, 0x18f, 0x2c, 0x1, 0x200}, 0x20) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={r0, 0x20, &(0x7f0000000400)={&(0x7f00000002c0)=""/51, 0x33, 0x0, &(0x7f0000000300)=""/245, 0xf5}}, 0x10) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time\x00') (async) socketpair(0x25, 0x0, 0x8, &(0x7f0000000040)) (async) 18:24:44 executing program 3: bpf$MAP_CREATE(0xa000000, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:44 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0xffffffffffffffe0, &(0x7f0000001440)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/192, 0xc0}], 0x7, &(0x7f00000014c0)=""/15, 0xf}, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup(r1, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r2, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r2, 0x0, 0x0, 0x0) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r5 = openat$cgroup(r4, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r5, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r6 = openat$cgroup_ro(r5, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r6, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r6}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r6}, 0x8) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001640)={0x2, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001680)={@map, r3, 0x0, 0x39, 0xffffffffffffffff, @link_id=r7}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r3}, 0x8) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r3, &(0x7f0000001540)="e5e7fbc876f0eef0962dc7d8cf62a81d926be802e494464c4a42d1a8d3162c94089437cc6e170e518c597a85b0cdff7e61d28e283330d725d5b20d1f9ee16d89905eb1aa8aaa8f1944e0924a41c2db2c043f8aa4a91458db687b94b83d8338fc893bc80e9e45363b4c646b2681f99fce3c3c3ef0f7666d99d253e0393643973018a20be29d1e4541165e954335f79bc13dcc4e0682f29100f0e3240d39c1cb7e5889d7042af0e3ae1444d5d636e6628c1b4ccdfb4004a80b724ac9116e43ffaa36a49db10de008cfc827f01178de3637841d7d81eec36fccffc7a35573baa53dddd59401"}, 0x20) [ 2477.332180][T31948] FAULT_INJECTION: forcing a failure. [ 2477.332180][T31948] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2477.377750][T31948] CPU: 1 PID: 31948 Comm: syz-executor.5 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2477.387929][T31948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2477.397832][T31948] Call Trace: [ 2477.400947][T31948] [ 2477.403724][T31948] dump_stack_lvl+0x151/0x1b7 [ 2477.408235][T31948] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2477.413701][T31948] ? stack_trace_save+0x113/0x1c0 [ 2477.418568][T31948] ? stack_trace_snprint+0xf0/0xf0 [ 2477.423511][T31948] ? stack_trace_snprint+0xf0/0xf0 [ 2477.428457][T31948] dump_stack+0x15/0x17 [ 2477.432498][T31948] should_fail+0x3c6/0x510 [ 2477.436715][T31948] should_fail_alloc_page+0x5a/0x80 [ 2477.441736][T31948] prepare_alloc_pages+0x15c/0x700 [ 2477.446716][T31948] ? __alloc_pages_bulk+0xe60/0xe60 [ 2477.451718][T31948] ? __kasan_check_write+0x14/0x20 [ 2477.456755][T31948] ? pcpu_memcg_post_alloc_hook+0x1b1/0x260 [ 2477.462481][T31948] __alloc_pages+0x138/0x5e0 [ 2477.466911][T31948] ? prep_new_page+0x110/0x110 [ 2477.471511][T31948] ? pcpu_alloc+0xda0/0x13e0 [ 2477.475937][T31948] __get_free_pages+0xe/0x30 [ 2477.480363][T31948] pgd_alloc+0x21/0x2c0 [ 2477.484350][T31948] mm_init+0x5c7/0x970 [ 2477.488261][T31948] copy_mm+0x1e3/0x13e0 [ 2477.492256][T31948] ? _raw_spin_lock+0xa4/0x1b0 [ 2477.496865][T31948] ? copy_signal+0x610/0x610 [ 2477.501281][T31948] ? __kasan_check_write+0x14/0x20 [ 2477.506224][T31948] ? __init_rwsem+0xd6/0x1c0 [ 2477.510648][T31948] ? copy_signal+0x4e3/0x610 [ 2477.515078][T31948] copy_process+0x12bc/0x3260 [ 2477.519590][T31948] ? proc_fail_nth_write+0x20b/0x290 18:24:44 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) (async) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4, 0x3, 0xc6, 0x3ff}, {0x1a53, 0x0, 0x80, 0x4}, {0x2, 0xfa, 0x5, 0xfffffffb}, {0x2, 0x1f, 0x6}, {0x4, 0x9, 0x5, 0x8000}]}) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000000100)) (async, rerun: 32) syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) syz_clone(0x30000000, &(0x7f0000000140)="9b7acd1d833046f507c949c69456602eba565bbce48c81755c50eee1c6a66ac3e27be8bb966dcfda43015c3ffedd17a09df9dd5bea53c868a22034c22c9b4ab0ecd56cd866337abd5789070c06633c5c26e90b0cfd8473ee3c93b3344998c548055ddb9df7d7b08c27de76f3b69908ea674ce3c0f08b649e0919f79a6a182fa7197588cc8d952c9826f5d563ade3e018a2803c04c601f30b4f33785ea537fa", 0x9f, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="422f58fcdd136c1a50d310411183adada0456dced72586389f17c5074cc1f99791345da255dd5500dbb73e7b7850af3db769be33bf4ec4ce2bf53a9c93a566a0b7377dcee755421bde00537929def0339454a721a8b4376578398c1accc25045ee09ae73e9662f6ec1d72c3cdb500cbcf5a96af552db5ec211af1e43452762e7a7cd6bce5b3094b34e6252b4fc2c8175ed91e25714c4af4f724092cfaedc307037684a53ace15683854a459a08466db8ca5e06db1bdf264be8244a824a") (async) openat$cgroup_ro(r1, &(0x7f0000000340)='freezer.self_freezing\x00', 0x0, 0x0) (async) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup(r2, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r3, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r4 = openat$cgroup_ro(r3, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r4, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r4}, 0x20) (async, rerun: 32) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r4}, 0x8) (rerun: 32) recvmsg$unix(r5, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r7 = openat$cgroup(r6, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r7, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) (async, rerun: 64) r8 = openat$cgroup_ro(r7, 0x0, 0x0, 0x0) (rerun: 64) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r8, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r8}, 0x20) (async) r9 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r8}, 0x8) (async) r10 = getpid() syz_open_procfs$namespace(r10, 0x0) write$cgroup_pid(r9, &(0x7f0000000380)=r10, 0x12) 18:24:44 executing program 3: bpf$MAP_CREATE(0xb000000, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:44 executing program 3: bpf$MAP_CREATE(0xc000000, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:44 executing program 3: bpf$MAP_CREATE(0xd000000, &(0x7f0000000540)=@base={0xd}, 0x48) [ 2477.524711][T31948] ? fsnotify_perm+0x6a/0x5d0 [ 2477.529225][T31948] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2477.534175][T31948] ? vfs_write+0x9ec/0x1110 [ 2477.538512][T31948] kernel_clone+0x21e/0x9e0 [ 2477.542853][T31948] ? file_end_write+0x1c0/0x1c0 [ 2477.547535][T31948] ? create_io_thread+0x1e0/0x1e0 [ 2477.552397][T31948] ? mutex_unlock+0xb2/0x260 [ 2477.556822][T31948] ? __mutex_lock_slowpath+0x10/0x10 [ 2477.561949][T31948] __x64_sys_clone+0x23f/0x290 [ 2477.566544][T31948] ? __do_sys_vfork+0x130/0x130 [ 2477.571229][T31948] ? ksys_write+0x260/0x2c0 [ 2477.575572][T31948] ? debug_smp_processor_id+0x17/0x20 [ 2477.580778][T31948] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2477.586680][T31948] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2477.592149][T31948] do_syscall_64+0x3d/0xb0 [ 2477.596401][T31948] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2477.602132][T31948] RIP: 0033:0x7fdfd1d08ae9 [ 2477.606384][T31948] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 18:24:45 executing program 5: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 27) 18:24:45 executing program 3: bpf$MAP_CREATE(0xe000000, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:45 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001680), 0x800, 0x0) ioctl$TUNSETDEBUG(r2, 0x400454c9, &(0x7f00000016c0)=0x9) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001640)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x4000, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x600}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/232, 0xe8}, {&(0x7f0000000300)=""/232, 0xe8}], 0x2, &(0x7f0000000080)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x40000042) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000440)=0x69) recvmsg(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff4e, 0x0, 0xffffffffffffff8e, &(0x7f0000000100)=""/245, 0xf5}, 0x1) close(r1) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001600)={&(0x7f00000017c0)="0b399dd6d3dfe259959eb2e3ce16f85ed6e0c52fcd38635ffe920af053076f14991bc97c8356b83f8f0e8003ed669d2041f82841cc34579a854884150cb9cf3415e51a171f7043c8a326cd29c4a61e397057ede46e6f8831c7febe1dcdcccfdba827665e70e0ffdb6e87af8979201b29f81b1b26e110abe3dcfdaa7437427f63c62ddb7068cd72ce7db4081ea734b82c1020b7829c0331f96641", &(0x7f0000000500)=""/120, &(0x7f0000001700)="6a1b5fe744c31ecc0fab47cb86b9cd536e9b0157c0757425b6c03fc5106b51da05288155c519ce41b26674e60d994b77b908f1e051851e4d54ef4941242da26a1cb29fc6b6f487e96a407747c13d954699400c58931b85aef9a4735aae1a9cb1e6f78f8864d7cf96ad1c728bc8e20000000000000000000000000000692074fe47becdae541f50d31e823fa4e0d60022eb514834793db09c86cdffd8c852f8d53921177eec0633a368d70eb166c5a906", &(0x7f0000000600)="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", 0x80000001}, 0x38) 18:24:45 executing program 2: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x173, 0x173, 0x3, [@typedef={0xe, 0x0, 0x0, 0x8, 0x2}, @const={0x1}, @struct={0x0, 0x8, 0x0, 0x4, 0x1, 0xffffedd6, [{0x5, 0x2, 0x101}, {0xb, 0x4, 0x80}, {0x1, 0x4}, {0x2, 0x2, 0x800}, {0xf, 0x3}, {0xa, 0x0, 0x9}, {0x3, 0x5, 0xfffffffd}, {0x4, 0x3, 0x4}]}, @enum={0xe, 0x1, 0x0, 0x6, 0x4, [{0x6, 0x7fffffff}]}, @ptr={0x2, 0x0, 0x0, 0x2, 0x5}, @fwd={0xd}, @struct={0x2, 0x6, 0x0, 0x4, 0x1, 0x5, [{0x5, 0x3, 0x20000000}, {0x9, 0x2, 0x80000000}, {0xc}, {0xd, 0x2, 0xffffffff}, {0x9, 0x5, 0x7fffffff}, {0x5, 0x1, 0x82}]}, @ptr={0x5, 0x0, 0x0, 0x2, 0x3}, @datasec={0x4, 0x6, 0x0, 0xf, 0x3, [{0x3, 0x2c, 0x400}, {0x4, 0x80000000, 0x5}, {0x3, 0x2}, {0x1, 0x80000000, 0x7a7}, {0x2, 0x4, 0x2}, {0x3, 0x5, 0x7f}], "97544d"}, @volatile={0xe}]}, {0x0, [0x5f]}}, &(0x7f0000000240)=""/44, 0x18f, 0x2c, 0x1, 0x200}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={r0, 0x20, &(0x7f0000000400)={&(0x7f00000002c0)=""/51, 0x33, 0x0, &(0x7f0000000300)=""/245, 0xf5}}, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time\x00') socketpair(0x25, 0x0, 0x8, &(0x7f0000000040)) (async) socketpair(0x25, 0x0, 0x8, &(0x7f0000000040)) 18:24:45 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0xffffffffffffffe0, &(0x7f0000001440)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/192, 0xc0}], 0x7, &(0x7f00000014c0)=""/15, 0xf}, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup(r1, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r2, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) (async) r3 = openat$cgroup_ro(r2, 0x0, 0x0, 0x0) (async) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r5 = openat$cgroup(r4, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r5, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) (async, rerun: 64) r6 = openat$cgroup_ro(r5, 0x0, 0x0, 0x0) (rerun: 64) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r6, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r6}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r6}, 0x8) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001640)={0x2, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001680)={@map, r3, 0x0, 0x39, 0xffffffffffffffff, @link_id=r7}, 0x20) (async) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r3}, 0x8) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r3, &(0x7f0000001540)="e5e7fbc876f0eef0962dc7d8cf62a81d926be802e494464c4a42d1a8d3162c94089437cc6e170e518c597a85b0cdff7e61d28e283330d725d5b20d1f9ee16d89905eb1aa8aaa8f1944e0924a41c2db2c043f8aa4a91458db687b94b83d8338fc893bc80e9e45363b4c646b2681f99fce3c3c3ef0f7666d99d253e0393643973018a20be29d1e4541165e954335f79bc13dcc4e0682f29100f0e3240d39c1cb7e5889d7042af0e3ae1444d5d636e6628c1b4ccdfb4004a80b724ac9116e43ffaa36a49db10de008cfc827f01178de3637841d7d81eec36fccffc7a35573baa53dddd59401"}, 0x20) [ 2477.625823][T31948] RSP: 002b:00007fdfd0a8b078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2477.634071][T31948] RAX: ffffffffffffffda RBX: 00007fdfd1e27f80 RCX: 00007fdfd1d08ae9 [ 2477.641881][T31948] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022001200 [ 2477.649691][T31948] RBP: 00007fdfd0a8b120 R08: 0000000000000000 R09: 0000000000000000 [ 2477.657504][T31948] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2477.665316][T31948] R13: 000000000000000b R14: 00007fdfd1e27f80 R15: 00007fff62717c48 [ 2477.673131][T31948] 18:24:45 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001680), 0x800, 0x0) ioctl$TUNSETDEBUG(r2, 0x400454c9, &(0x7f00000016c0)=0x9) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001640)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x4000, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x600}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/232, 0xe8}, {&(0x7f0000000300)=""/232, 0xe8}], 0x2, &(0x7f0000000080)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x40000042) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000440)=0x69) recvmsg(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff4e, 0x0, 0xffffffffffffff8e, &(0x7f0000000100)=""/245, 0xf5}, 0x1) close(r1) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001600)={&(0x7f00000017c0)="0b399dd6d3dfe259959eb2e3ce16f85ed6e0c52fcd38635ffe920af053076f14991bc97c8356b83f8f0e8003ed669d2041f82841cc34579a854884150cb9cf3415e51a171f7043c8a326cd29c4a61e397057ede46e6f8831c7febe1dcdcccfdba827665e70e0ffdb6e87af8979201b29f81b1b26e110abe3dcfdaa7437427f63c62ddb7068cd72ce7db4081ea734b82c1020b7829c0331f96641", &(0x7f0000000500)=""/120, &(0x7f0000001700)="6a1b5fe744c31ecc0fab47cb86b9cd536e9b0157c0757425b6c03fc5106b51da05288155c519ce41b26674e60d994b77b908f1e051851e4d54ef4941242da26a1cb29fc6b6f487e96a407747c13d954699400c58931b85aef9a4735aae1a9cb1e6f78f8864d7cf96ad1c728bc8e20000000000000000000000000000692074fe47becdae541f50d31e823fa4e0d60022eb514834793db09c86cdffd8c852f8d53921177eec0633a368d70eb166c5a906", &(0x7f0000000600)="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", 0x80000001}, 0x38) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000001680), 0x800, 0x0) (async) ioctl$TUNSETDEBUG(r2, 0x400454c9, &(0x7f00000016c0)=0x9) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0) (async) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) (async) ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001640)) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x4000, 0x0) (async) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x600}) (async) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/232, 0xe8}, {&(0x7f0000000300)=""/232, 0xe8}], 0x2, &(0x7f0000000080)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x40000042) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)) (async) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000440)=0x69) (async) recvmsg(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff4e, 0x0, 0xffffffffffffff8e, &(0x7f0000000100)=""/245, 0xf5}, 0x1) (async) close(r1) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001600)={&(0x7f00000017c0)="0b399dd6d3dfe259959eb2e3ce16f85ed6e0c52fcd38635ffe920af053076f14991bc97c8356b83f8f0e8003ed669d2041f82841cc34579a854884150cb9cf3415e51a171f7043c8a326cd29c4a61e397057ede46e6f8831c7febe1dcdcccfdba827665e70e0ffdb6e87af8979201b29f81b1b26e110abe3dcfdaa7437427f63c62ddb7068cd72ce7db4081ea734b82c1020b7829c0331f96641", &(0x7f0000000500)=""/120, &(0x7f0000001700)="6a1b5fe744c31ecc0fab47cb86b9cd536e9b0157c0757425b6c03fc5106b51da05288155c519ce41b26674e60d994b77b908f1e051851e4d54ef4941242da26a1cb29fc6b6f487e96a407747c13d954699400c58931b85aef9a4735aae1a9cb1e6f78f8864d7cf96ad1c728bc8e20000000000000000000000000000692074fe47becdae541f50d31e823fa4e0d60022eb514834793db09c86cdffd8c852f8d53921177eec0633a368d70eb166c5a906", &(0x7f0000000600)="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", 0x80000001}, 0x38) (async) 18:24:45 executing program 3: bpf$MAP_CREATE(0xf000000, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:45 executing program 2: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) openat$cgroup(r0, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup(r0, &(0x7f0000001640)='syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000000), 0x2, 0x0) socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) [ 2477.749314][T32005] FAULT_INJECTION: forcing a failure. [ 2477.749314][T32005] name failslab, interval 1, probability 0, space 0, times 0 [ 2477.779455][T32005] CPU: 1 PID: 32005 Comm: syz-executor.5 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2477.789632][T32005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2477.799522][T32005] Call Trace: [ 2477.802647][T32005] [ 2477.805421][T32005] dump_stack_lvl+0x151/0x1b7 [ 2477.809934][T32005] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2477.815402][T32005] ? __alloc_pages+0x206/0x5e0 [ 2477.820004][T32005] dump_stack+0x15/0x17 [ 2477.823997][T32005] should_fail+0x3c6/0x510 [ 2477.828248][T32005] __should_failslab+0xa4/0xe0 [ 2477.832852][T32005] ? vm_area_dup+0x26/0x230 [ 2477.837199][T32005] should_failslab+0x9/0x20 [ 2477.841530][T32005] slab_pre_alloc_hook+0x37/0xd0 [ 2477.846303][T32005] ? vm_area_dup+0x26/0x230 [ 2477.850644][T32005] kmem_cache_alloc+0x44/0x200 [ 2477.855240][T32005] vm_area_dup+0x26/0x230 [ 2477.859406][T32005] copy_mm+0x9a1/0x13e0 [ 2477.863402][T32005] ? copy_signal+0x610/0x610 [ 2477.867835][T32005] ? __init_rwsem+0xd6/0x1c0 [ 2477.872252][T32005] ? copy_signal+0x4e3/0x610 [ 2477.876680][T32005] copy_process+0x12bc/0x3260 [ 2477.881198][T32005] ? __switch_to+0x62a/0x1190 [ 2477.885705][T32005] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2477.890653][T32005] ? kvm_sched_clock_read+0x18/0x40 [ 2477.895688][T32005] ? sched_clock+0x9/0x10 [ 2477.899857][T32005] kernel_clone+0x21e/0x9e0 [ 2477.904194][T32005] ? _raw_spin_unlock+0x4d/0x70 [ 2477.908881][T32005] ? create_io_thread+0x1e0/0x1e0 [ 2477.913742][T32005] ? __schedule+0xcc6/0x1580 [ 2477.918171][T32005] __x64_sys_clone+0x23f/0x290 [ 2477.922769][T32005] ? __do_sys_vfork+0x130/0x130 [ 2477.927455][T32005] ? switch_fpu_return+0x1ed/0x3d0 [ 2477.932411][T32005] ? __kasan_check_read+0x11/0x20 [ 2477.937271][T32005] ? exit_to_user_mode_prepare+0x7e/0xa0 [ 2477.942728][T32005] do_syscall_64+0x3d/0xb0 [ 2477.946981][T32005] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2477.952712][T32005] RIP: 0033:0x7fdfd1d08ae9 [ 2477.957003][T32005] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2477.976405][T32005] RSP: 002b:00007fdfd0a8b078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2477.984738][T32005] RAX: ffffffffffffffda RBX: 00007fdfd1e27f80 RCX: 00007fdfd1d08ae9 [ 2477.992549][T32005] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022001200 18:24:45 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) (async) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4, 0x3, 0xc6, 0x3ff}, {0x1a53, 0x0, 0x80, 0x4}, {0x2, 0xfa, 0x5, 0xfffffffb}, {0x2, 0x1f, 0x6}, {0x4, 0x9, 0x5, 0x8000}]}) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000000100)) (async) syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) (rerun: 32) syz_clone(0x30000000, &(0x7f0000000140)="9b7acd1d833046f507c949c69456602eba565bbce48c81755c50eee1c6a66ac3e27be8bb966dcfda43015c3ffedd17a09df9dd5bea53c868a22034c22c9b4ab0ecd56cd866337abd5789070c06633c5c26e90b0cfd8473ee3c93b3344998c548055ddb9df7d7b08c27de76f3b69908ea674ce3c0f08b649e0919f79a6a182fa7197588cc8d952c9826f5d563ade3e018a2803c04c601f30b4f33785ea537fa", 0x9f, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="422f58fcdd136c1a50d310411183adada0456dced72586389f17c5074cc1f99791345da255dd5500dbb73e7b7850af3db769be33bf4ec4ce2bf53a9c93a566a0b7377dcee755421bde00537929def0339454a721a8b4376578398c1accc25045ee09ae73e9662f6ec1d72c3cdb500cbcf5a96af552db5ec211af1e43452762e7a7cd6bce5b3094b34e6252b4fc2c8175ed91e25714c4af4f724092cfaedc307037684a53ace15683854a459a08466db8ca5e06db1bdf264be8244a824a") openat$cgroup_ro(r1, &(0x7f0000000340)='freezer.self_freezing\x00', 0x0, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup(r2, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r3, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) (async) r4 = openat$cgroup_ro(r3, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r4, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r4}, 0x20) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r4}, 0x8) recvmsg$unix(r5, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) (async) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r7 = openat$cgroup(r6, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r7, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) (async) r8 = openat$cgroup_ro(r7, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r8, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r8}, 0x20) (async) r9 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r8}, 0x8) (async, rerun: 32) r10 = getpid() (rerun: 32) syz_open_procfs$namespace(r10, 0x0) write$cgroup_pid(r9, &(0x7f0000000380)=r10, 0x12) 18:24:45 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0xffffffffffffffe0, &(0x7f0000001440)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/192, 0xc0}], 0x7, &(0x7f00000014c0)=""/15, 0xf}, 0x0) (async) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup(r1, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r2, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) (async) r3 = openat$cgroup_ro(r2, 0x0, 0x0, 0x0) (async) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r5 = openat$cgroup(r4, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r5, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) (async) r6 = openat$cgroup_ro(r5, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r6, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r6}, 0x20) (async) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r6}, 0x8) (async, rerun: 32) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001640)={0x2, 0x0}, 0x8) (rerun: 32) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001680)={@map, r3, 0x0, 0x39, 0xffffffffffffffff, @link_id=r7}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r3}, 0x8) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r3, &(0x7f0000001540)="e5e7fbc876f0eef0962dc7d8cf62a81d926be802e494464c4a42d1a8d3162c94089437cc6e170e518c597a85b0cdff7e61d28e283330d725d5b20d1f9ee16d89905eb1aa8aaa8f1944e0924a41c2db2c043f8aa4a91458db687b94b83d8338fc893bc80e9e45363b4c646b2681f99fce3c3c3ef0f7666d99d253e0393643973018a20be29d1e4541165e954335f79bc13dcc4e0682f29100f0e3240d39c1cb7e5889d7042af0e3ae1444d5d636e6628c1b4ccdfb4004a80b724ac9116e43ffaa36a49db10de008cfc827f01178de3637841d7d81eec36fccffc7a35573baa53dddd59401"}, 0x20) 18:24:45 executing program 3: bpf$MAP_CREATE(0x10000000, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:45 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001680), 0x800, 0x0) ioctl$TUNSETDEBUG(r2, 0x400454c9, &(0x7f00000016c0)=0x9) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001640)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x4000, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x600}) (async) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/232, 0xe8}, {&(0x7f0000000300)=""/232, 0xe8}], 0x2, &(0x7f0000000080)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x40000042) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000440)=0x69) recvmsg(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff4e, 0x0, 0xffffffffffffff8e, &(0x7f0000000100)=""/245, 0xf5}, 0x1) (async) close(r1) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001600)={&(0x7f00000017c0)="0b399dd6d3dfe259959eb2e3ce16f85ed6e0c52fcd38635ffe920af053076f14991bc97c8356b83f8f0e8003ed669d2041f82841cc34579a854884150cb9cf3415e51a171f7043c8a326cd29c4a61e397057ede46e6f8831c7febe1dcdcccfdba827665e70e0ffdb6e87af8979201b29f81b1b26e110abe3dcfdaa7437427f63c62ddb7068cd72ce7db4081ea734b82c1020b7829c0331f96641", &(0x7f0000000500)=""/120, &(0x7f0000001700)="6a1b5fe744c31ecc0fab47cb86b9cd536e9b0157c0757425b6c03fc5106b51da05288155c519ce41b26674e60d994b77b908f1e051851e4d54ef4941242da26a1cb29fc6b6f487e96a407747c13d954699400c58931b85aef9a4735aae1a9cb1e6f78f8864d7cf96ad1c728bc8e20000000000000000000000000000692074fe47becdae541f50d31e823fa4e0d60022eb514834793db09c86cdffd8c852f8d53921177eec0633a368d70eb166c5a906", &(0x7f0000000600)="8e3931e122f9cf2e3f81707cf9dd33d16a3877ac75c49eaaefc4a7791cab21cf780359ce7c6ee4e4d6c8b966b44c5d3b6d67bc3f2a9509713132331f5d4515ba801fcb72f8b8690e1709edfd53a31faf3d1f207c76cfc0f284ac2f8b135cf3c28c0985898c35cb71e5c91d9ce1b8f16c000ac82a8228f18be5068226d93fda111b2ff59413306e605c71f066878131e5348b2664ca78cbc0739b9c435916ac28849b17361637ba16d20b5680382ee0112a8ee00d312271af95de06bcf37abf7ac659d02bbd896150c4970cb73814cc0c405a0f7140bd9fa65211004239d439142860c1c7547f1d67f829b81d0b82e2f0659797415cf88b80f4ebfe41a131b7388ea446a8cb55b55f104b04f1591555890f78d62774ffe67e324e4f1470c1af77eb08c4ce94384a870224b7aba03384d881f336b03104e13875461ea09e2fb46ba71596574b6432df4410148cb5fbf7f88897172a49d87d98dc4f6c4cfce5ad0f02448e341592983d75db656e1b21ddf7b0f3a6a6cb855d0c3e1920b722293c0779b9d9fd3f674309aa56494ac9ff0c04d6c14d2f046a1e52cfcbfa222d85404fb2015b020cf2de2a30539a77b2e1c536a2a5b6412e3153e1f8e3b6395d36d955496c0d44d35ffee2176251d439a782de22fa12fd3cde40e3ecc8c9051e7a9b218546bb88dc5c1d87eb1630cd52e51b059be12e1436f08075286d9dded4ccc1a801d0e972478479e1450eba40f407a69e4527efbe61d34695b196695246485e96ad3d1a414327a9dbafa28c4cac6997e67a78c2066d5bee3e0eec8ef822e7f5c16dc78c77bd8998fcbd2340c313f9dece0758fc8ee6d3c809afdbbe3181a2318632ba7939241907bd1a4dcb66292fb717477af104f8b43c88021c54821937f155fb09c12314af6a34d5f780d5047f65aa6f35f9049248d8743bdd76a68fdeb98d23a13446e76e79355bbcc94ec54c357d6ed37dd2d1cce463d75fdfadd4a6a4523f282f4376faa338ab157f97f24ea3d95f11968f6cc5eae4e899882b1414b99e0d188f252daa3e9c55dd2e5087505fd0adacaa8600a81c9022885a8ae4fe0ea0a0b318444cf00752807eeed60db4ddeb36e1de1b95b9330fc04ccaadbbb4826cf71653ad47c2230b2dbd4da26612559ff1bdaf5bffe2cefbedb0e4c521e57ec0463b3f17868bc2e768c7099a7a05d85a590509e86f490a8de8bc65e1f4cb316c724e01c8e39c33d954b3cc1746d72b41fe08e1ed380a97390c69613c28d8a6a2200c48853c433b3facbac8f5b59d15724931baf327f5e7df7af4971f04b9eb0cc0058c4568c4281d84506a2ba287d742253bcb7e1f65065585c809c533725c37c2fd089364690a593f3ccefaceb19d5446e6cefac8d407e152cbcda1c12e551c93390ed6f7afce953a32e4512a20198f605b4794904cfd0d684fff5cd6c79f12d108aeb778dfd24ce4bcff0c6ba934b04557f447769fd2ff3537b84b0ce70926584425b17a949b4b71122004553e92a4670a148f8b87a610d3f7c36c1c0133dae5ad458bb71c6ab9111e7e37ab3ceb1aa2754f75080600eb5505a6dd663cadda2b4277506de92b509ba2fc5ae99a697793620c629c2a32e46fbe051260a56ed97e194a2415e2e647db99b60da5bfbe201be313b6e02b824a2b3bb2eaddaa5f833ad5a9787dbff2a503bab7ab18e387f365bd94731930cdd7f84382eccdd40d09fc9e75ef97262221a2512f32f5eb8aa4b2b3010147a1f20c7694bee737c007995e0809e2aa3308dcd8d3a0d12127d9c5528d3da01ecf230a73b0d97330e4ae3d3095a22e02098159ca319ec4a90b450ee54fda7f845c43a9acc36ad4b210fc74d8749a6a4119d87d15b5cfaa99afc06937efd49277657884e4f93d35190edca0bdf730423ac924fbee02484bbc7cd2e08790334633d3ad8c416ba86235b9dc8bcdbab99b661059806a43dcb3924328e4bb095e0c09a1f8eb9c6650b70f6b07618ee60f5425c0365fa2bd616b24b54460962e754907e3ddd3f7c05fd7f32380055c5bfb9941a313ea1135d52defb605b88843be18c1874cda61699bac764a4ffa426685780f4c0a228bc55ac9c3f9150c12dd8cadfa2f602f8b048d570b9b8eaab0fb383d4483e09ec63e8a73854c3250cb19fb30d8911282d070f2a58a0d3399cbded3a56446eca85adedc7bfb0726d478fc14c193085f0622d3f7d2370543070bede23ee98eb682e57bbe38865064425aa76e633e48fa2b48e25790d9efcc54a246c5cb4245fbb3b6c94b6855329e3dfb048bc08e37d78c4bed5e1e125c8ea4e93547ab26062091494178140b6a6922e2c1012f3a380f8fb7238ee99a9c6a8028e1bad8a0a4ed6afebc6aa6f5a2106f6ba3759adbcbd10a5766297e6d58902a0ddbb92d66719ceff275f70a14de3d227aabd103a0418f68f0b7133b6a9d9030fb00942c02ecd7e77d5ec48447dfc2e25c4fc921a2413179e190d7ba6e31d294265c01a18fe0763cc841113217cabca98ec4b11969c6cd0cd97929671ee4d06d26749179f0ca37163d881b0b88120199565f52ecd6321ee5ebddcaaa4f09112272edecace8b62a01585106ecbdc2a9f5ba0cef2adfdb9a2d17a463f5f98de9c34a638919964625d3fee9b479b8b2b41ee2dfe7e39a66506e64903c7b4d046fcfd39d328dca1091a2bee9b20829576b74f3c3b4cb0869b0cd54b3162b2508df42967d2b434913b5254587cd28995b05a26ffc74313e1929d2633cf284b4d242cd669ce5af64ffc7bf0c9fb1e6fa403917bb4121ed0113fede5b9ad72dc3f16a0add34473713f9c2f9accc6ba57f92814c39590d9dcefbd8734ece15d3f04f4151c86ca3eee2d8a1d43642fcfc70b29168c29ca609846db36efd2719055697cf1804895df2bd7cb1df41afa6191e239d59b1e48d53003ca5997fd8359155d70c4300dcd76239e155a9aa46a68ea365152300ff9be6db49e6b506e5a911884c6c5af0f34a33aec07a616ca117e8422bdeb4dc469462aaa9c8f544f18e3f87ec4b7ffdb5854c2a870eab4c400b388274d8e8cbe75fc6962917b376b5bbe90d6c5e7762d6029e5abfec964812ec9c7b8a4a39e905e1698b433efe079d17a61865afa8e834c8b67739cce09bafa447b7520f3ed1f15c74e73c8c12ac6bbdc34389e4224d03ed47f422a44720d4afe3982d134dcbde64827023897a1c3bb60542e912a92ef432ae42bb65d630b9740b7500beadf43e077ebab3e2f83a60c06a5500dc9f447cc90c7a215da6e4f5322de393ba4ac4d68dfd344ce4a19654eb11b6ae53995945108f3fd82423f7435d7c7118ba6992c9fe7aa46a5a363a820014bf76fa3c8001a12bc65186aef61718c1db45f5fb1ea20cb3fa7ccd53da950836cd129904286ebf842de2bf057e5ffc17518885a2df4fa15c7e496dfa8817eb5b4193964bd5b893487dc02b6f057ca279abb76119835101e279f5ec033aac08e529654d959d731e78b0b0173ce7bb17d059cc839188cf18631cc7a83170d72af24c2621e2dc047f278478de4afc5f73e61baefdd8e602cff5b1a4f0f9fa36ffd4ec7770a9caf722ad952648cf01ea634f61488c82a6a22570c76b8dc912223d29deb7cd2549daee6b7e8172ef98eb46bbaa8e1898e0666acb1f7800b941bc22f51e4e9e977e0b0da1f7f746916e01fa6aa337fb8df367e2de8b174c73f10d174ecbb26983d535b8e052453f9179377f71c751dfbdd8270a26997abf83d6101d6e59ab5efa847b95ca2fab5b0f0381ae27596b6b4ae8b6c1c0c1d27b3fdeb3f152ee5ecb857eb6b1da3ed4f317402ea58fc157b7974a709e6e9163753154af8d2ac51812520cce84afa3f35658a451944a11071a2adb32d6c92179a65b2e76fa9ebca54c80470e1c43eb2a73f5717c10ad66240eedca3bca15509b2c55ffb74981527a255faee9a029b59d3a390ce7d27b5e37b15aafac61aef1d324506c19917bb410f074b76e589daa944c2878b76af47ceef69f17a64ed5a80a941f5a55af8a448eb1659bcdad5eedc4c0208df0a0bb23319b6a76e28e7ec5817263cc24073c54b6e12a812515259af1ee7d2c65198c4e8a5f5ec1dcb47393353e7af13aa1d472a4f02339a2338547f620a378083d010213f522d01179ca16144df164ee9265d6ad04c58ff9450199e6f673833c30636aa8c85e4f7c305545980a2e9a41426505bb933898eb9b65bf17126c496d706970bb1330f519817f2b704731eead87625caa0c42989bb603abe17e25bb2b8d4c2642472bd0e86b9a8d5825fb0d5dd75141fc70e4a55d8347d57c0a32d1a131f439b494a9b0afcb1a1ea1a174e514ccfce0accc4fcdcd24115f08100c0c83e9ea4838a27844d0d1746553c5bc00a3a9b71b9ed1d2a396cdd34e8754917ece3ccb39416698676ac35f03ddbdbb568dc58c3293db6661989023a40d50734d30736884e03887cca796dd9127ba01a0698ef7441cb0a939b04833f50625d66638f54b638a3cd189a46d53fe47af615f9bfe5c4fa0aa742edeb371c15da5bcf35e59359cd13bf72c72d8d119e559e7809a8bfc16d42b9d93085d839b842a836519b209b7e4786c5fa31134e07f9ae97c66dbc914ceb598ac8ae3b12b867f4bb29dd4e1cdc8f5f4f85a5b78d627215dd9ad7d7cabf2c8c6e282c2a96e80706529b2ec99a8f993ba5444cb15ab4aad5fe15fccf60d4b07a077355f6f0e75fa46c67a5ede04fad6a881a397458a06643e820721a69095b8e9876013bc9fd848373810510fdc2a8b9b0d6eab1e6e7bdc5448c7508f465fa11581089379fc3d16c9a2290824c3e4ed8a12c34681f7c85ebc8ddeac28797555f0f625444172dd4f33b80b5e257f2c15c239da14f0d79f37025b17be683d520056228eea0a2157bc5d78f233c072e0fb9badec7dfbbc1d419872c20763854d9927da867632ed7a487bf0b9daff1bbe06ed24ada808b20f9329592b002313f1b968dddd0af186aa2654fac57878e3394502aa8fd28d85ee3e5bf55ecc9aa49a0910e8257350174313d8084279af0aa76c18f2543c312ca6f0a98b2cbdb6f6cc51c83db1217cfcb9f9b58bdf55a6e9f44edcbb88103d6f4437a74327092b1f690f5348e8d8c189d2f2fba115c4d355951062920c4c0e31f891b6819a78adaef67abc8943da0852c54d22b21b9eb2fcdd6e25e9d19033bb5836d4a58a08d56a3f77c9f5601cee9ac0c899a994389950d762c279a9b60d605d1d5bd478921aa44e68e1fb7b40ac574163960539d579bfca188c88b569516cbae7e0018642a70da25463208e2505c863b31f299a7d0803efdc906cf6361f6b9dc37b71f7deb16553b35150afe97992567de727a1db6283aef016b77e877e1f655d9715576b346c42927b9e7ccacab9f8c71074dab8b41b3f250527bc5111e420a097738d6cfd14245a75cfd7cda991d0b825890bc7a6325da81bdd0b67b928869daae0125fa15986c830aa847e0536c9a0b07d6a486704cde78bfe3ab09ea40b959c6a22852afd0881a90b8ca0076375c4a661cb48d88e0dc270cad54b7b808825bc302716e479763c4c29e3a739b45ff07b5eacee475771611d598a190675fbd4853982dc6fd26028729ea434511ace093bc94f55e6636c9ef7285a1c562e60d5dc9343509e1be8d23d506da3f4632fa1e78debbab12c374f7ddd95e415fbeda8f49107e9b0c10e4de775a7b3fe6ff323b5b9fa1c5edd7b16ec2c659fc119c959d8fee60a18b5830412a4a289a9d5dcc2d5894918de1567de40671c7886e7", 0x80000001}, 0x38) 18:24:45 executing program 2: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) openat$cgroup(r0, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) (async) openat$cgroup(r0, &(0x7f0000001640)='syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 64) socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) (rerun: 64) 18:24:45 executing program 5: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 28) [ 2478.000362][T32005] RBP: 00007fdfd0a8b120 R08: 0000000000000000 R09: 0000000000000000 [ 2478.008174][T32005] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2478.015983][T32005] R13: 000000000000000b R14: 00007fdfd1e27f80 R15: 00007fff62717c48 [ 2478.023805][T32005] 18:24:45 executing program 2: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) openat$cgroup(r0, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) (async) openat$cgroup(r0, &(0x7f0000001640)='syz0\x00', 0x200002, 0x0) (async) openat$cgroup_subtree(r0, &(0x7f0000000000), 0x2, 0x0) socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) 18:24:45 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup(r2, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r3, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r4 = openat$cgroup_ro(r3, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r4, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r4}, 0x20) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r4}, 0x8) recvmsg$unix(r5, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r5}, 0x8) ioctl$TUNSETTXFILTER(r6, 0x400454d1, &(0x7f0000000100)={0x0, 0x1, [@local]}) r8 = openat$cgroup_ro(r7, &(0x7f0000000140)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r9 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r10 = openat$cgroup(r9, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r10, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r11 = openat$cgroup_ro(r10, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r11, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r11}, 0x20) r12 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r11}, 0x8) recvmsg$unix(r12, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@cgroup=r8, r12, 0x17, 0x24, 0x0, @prog_fd=r6}, 0x20) r13 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r14 = openat$cgroup(r13, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r14, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r15 = openat$cgroup_ro(r14, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r15, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r15}, 0x20) r16 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r15}, 0x20) recvmsg$unix(r16, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x58}, 0x0) write$cgroup_freezer_state(r16, &(0x7f0000000040)='THAWED\x00', 0x7) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/243, 0xf3}, 0x0) close(r1) 18:24:45 executing program 3: bpf$MAP_CREATE(0x11000000, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:45 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x210000, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup(r2, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r3, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r4 = openat$cgroup_ro(r3, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r4, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r4}, 0x20) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r4}, 0x8) recvmsg$unix(r5, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000400)) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f00000003c0)=r5) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000001440)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f0000000380)=""/40, 0x28}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000001380)=""/192, 0xd3}], 0x7, &(0x7f00000002c0)=""/22, 0x16}, 0x0) [ 2478.085037][T32057] FAULT_INJECTION: forcing a failure. [ 2478.085037][T32057] name failslab, interval 1, probability 0, space 0, times 0 [ 2478.133643][T32057] CPU: 1 PID: 32057 Comm: syz-executor.5 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2478.143827][T32057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2478.153721][T32057] Call Trace: [ 2478.156844][T32057] [ 2478.159623][T32057] dump_stack_lvl+0x151/0x1b7 [ 2478.164131][T32057] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2478.169602][T32057] ? avc_denied+0x1b0/0x1b0 [ 2478.173937][T32057] dump_stack+0x15/0x17 [ 2478.177932][T32057] should_fail+0x3c6/0x510 [ 2478.182185][T32057] __should_failslab+0xa4/0xe0 [ 2478.186787][T32057] ? vm_area_dup+0x26/0x230 [ 2478.191127][T32057] should_failslab+0x9/0x20 [ 2478.195465][T32057] slab_pre_alloc_hook+0x37/0xd0 [ 2478.200239][T32057] ? vm_area_dup+0x26/0x230 [ 2478.204578][T32057] kmem_cache_alloc+0x44/0x200 [ 2478.209182][T32057] vm_area_dup+0x26/0x230 [ 2478.213342][T32057] copy_mm+0x9a1/0x13e0 [ 2478.217340][T32057] ? copy_signal+0x610/0x610 [ 2478.221766][T32057] ? __init_rwsem+0xd6/0x1c0 [ 2478.226195][T32057] ? copy_signal+0x4e3/0x610 [ 2478.230618][T32057] copy_process+0x12bc/0x3260 [ 2478.235129][T32057] ? proc_fail_nth_write+0x20b/0x290 [ 2478.240252][T32057] ? fsnotify_perm+0x6a/0x5d0 [ 2478.244761][T32057] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2478.249712][T32057] ? vfs_write+0x9ec/0x1110 [ 2478.254052][T32057] kernel_clone+0x21e/0x9e0 [ 2478.258387][T32057] ? file_end_write+0x1c0/0x1c0 [ 2478.263079][T32057] ? create_io_thread+0x1e0/0x1e0 [ 2478.267940][T32057] ? mutex_unlock+0xb2/0x260 [ 2478.272364][T32057] ? __mutex_lock_slowpath+0x10/0x10 [ 2478.277486][T32057] __x64_sys_clone+0x23f/0x290 [ 2478.282083][T32057] ? __do_sys_vfork+0x130/0x130 [ 2478.286769][T32057] ? ksys_write+0x260/0x2c0 [ 2478.291115][T32057] ? debug_smp_processor_id+0x17/0x20 [ 2478.296317][T32057] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2478.302219][T32057] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2478.307691][T32057] do_syscall_64+0x3d/0xb0 [ 2478.312158][T32057] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2478.317816][T32057] RIP: 0033:0x7fdfd1d08ae9 18:24:45 executing program 3: bpf$MAP_CREATE(0x12000000, &(0x7f0000000540)=@base={0xd}, 0x48) [ 2478.322069][T32057] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2478.341510][T32057] RSP: 002b:00007fdfd0a8b078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2478.349750][T32057] RAX: ffffffffffffffda RBX: 00007fdfd1e27f80 RCX: 00007fdfd1d08ae9 [ 2478.357560][T32057] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022001200 [ 2478.365373][T32057] RBP: 00007fdfd0a8b120 R08: 0000000000000000 R09: 0000000000000000 [ 2478.373183][T32057] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 18:24:45 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) (async) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup(r2, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r3, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) openat$cgroup_ro(r3, 0x0, 0x0, 0x0) (async) r4 = openat$cgroup_ro(r3, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r4, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r4}, 0x20) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r4, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r4}, 0x20) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r4}, 0x8) recvmsg$unix(r5, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r5}, 0x8) ioctl$TUNSETTXFILTER(r6, 0x400454d1, &(0x7f0000000100)={0x0, 0x1, [@local]}) (async) ioctl$TUNSETTXFILTER(r6, 0x400454d1, &(0x7f0000000100)={0x0, 0x1, [@local]}) r8 = openat$cgroup_ro(r7, &(0x7f0000000140)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r9 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) openat$cgroup(r9, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) (async) r10 = openat$cgroup(r9, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r10, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r11 = openat$cgroup_ro(r10, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r11, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r11}, 0x20) r12 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r11}, 0x8) recvmsg$unix(r12, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) (async) recvmsg$unix(r12, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@cgroup=r8, r12, 0x17, 0x24, 0x0, @prog_fd=r6}, 0x20) r13 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r14 = openat$cgroup(r13, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r14, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r15 = openat$cgroup_ro(r14, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r15, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r15}, 0x20) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r15, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r15}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r15}, 0x20) (async) r16 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r15}, 0x20) recvmsg$unix(r16, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x58}, 0x0) (async) recvmsg$unix(r16, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x58}, 0x0) write$cgroup_freezer_state(r16, &(0x7f0000000040)='THAWED\x00', 0x7) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/243, 0xf3}, 0x0) (async) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/243, 0xf3}, 0x0) close(r1) [ 2478.380996][T32057] R13: 000000000000000b R14: 00007fdfd1e27f80 R15: 00007fff62717c48 [ 2478.388815][T32057] 18:24:46 executing program 1: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000), 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/148, 0x94}, {&(0x7f0000000140)=""/78, 0x4e}], 0x2, &(0x7f0000000200)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}, 0x40000002) 18:24:46 executing program 3: bpf$MAP_CREATE(0x13000000, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:46 executing program 2: socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x8010, r0}, 0x18) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={0x1, &(0x7f0000000080)="db1be2c75f4a8d58200fc45d1292ce7bb7f7cb6760c7c04a5f764489176ede20debb1e0565e4713166a658163245c2e52e4eea7e8df6b117915c0693975f69155fa8b7f25ae1ab2d3e32ac9e0188e3b62e969415796d745faa8db532a5226183f95910babd451b762ddf4b7279e33fdbb0b74e8f3a5b0b729285f4be2d0674dd06da71ac2463e4e49e2440cbde9439d4a7e1673e1cb4c4775663036d22203efdf96fd85e82c5a15c0a6dedf4fb73", &(0x7f0000000140)=""/67}, 0x7f) 18:24:46 executing program 5: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 29) 18:24:46 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup(r2, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r3, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r4 = openat$cgroup_ro(r3, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r4, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r4}, 0x20) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r4}, 0x8) recvmsg$unix(r5, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r5}, 0x8) ioctl$TUNSETTXFILTER(r6, 0x400454d1, &(0x7f0000000100)={0x0, 0x1, [@local]}) (async) r8 = openat$cgroup_ro(r7, &(0x7f0000000140)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) (async) r9 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r10 = openat$cgroup(r9, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r10, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r11 = openat$cgroup_ro(r10, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r11, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r11}, 0x20) (async) r12 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r11}, 0x8) recvmsg$unix(r12, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@cgroup=r8, r12, 0x17, 0x24, 0x0, @prog_fd=r6}, 0x20) r13 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r14 = openat$cgroup(r13, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r14, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r15 = openat$cgroup_ro(r14, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r15, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r15}, 0x20) (async) r16 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r15}, 0x20) recvmsg$unix(r16, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x58}, 0x0) (async) write$cgroup_freezer_state(r16, &(0x7f0000000040)='THAWED\x00', 0x7) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/243, 0xf3}, 0x0) (async) close(r1) 18:24:46 executing program 3: bpf$MAP_CREATE(0x14000000, &(0x7f0000000540)=@base={0xd}, 0x48) [ 2478.745110][T32131] FAULT_INJECTION: forcing a failure. [ 2478.745110][T32131] name failslab, interval 1, probability 0, space 0, times 0 [ 2478.759834][T32131] CPU: 0 PID: 32131 Comm: syz-executor.5 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2478.770012][T32131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2478.779943][T32131] Call Trace: [ 2478.783026][T32131] [ 2478.785803][T32131] dump_stack_lvl+0x151/0x1b7 [ 2478.790321][T32131] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2478.795786][T32131] ? avc_denied+0x1b0/0x1b0 [ 2478.800127][T32131] dump_stack+0x15/0x17 [ 2478.804114][T32131] should_fail+0x3c6/0x510 [ 2478.808373][T32131] __should_failslab+0xa4/0xe0 [ 2478.812968][T32131] ? vm_area_dup+0x26/0x230 [ 2478.817307][T32131] should_failslab+0x9/0x20 [ 2478.821668][T32131] slab_pre_alloc_hook+0x37/0xd0 [ 2478.826422][T32131] ? vm_area_dup+0x26/0x230 [ 2478.830767][T32131] kmem_cache_alloc+0x44/0x200 [ 2478.835364][T32131] vm_area_dup+0x26/0x230 [ 2478.839529][T32131] copy_mm+0x9a1/0x13e0 [ 2478.843529][T32131] ? copy_signal+0x610/0x610 [ 2478.847948][T32131] ? __init_rwsem+0xd6/0x1c0 [ 2478.852374][T32131] ? copy_signal+0x4e3/0x610 [ 2478.856802][T32131] copy_process+0x12bc/0x3260 [ 2478.861319][T32131] ? proc_fail_nth_write+0x20b/0x290 [ 2478.866438][T32131] ? fsnotify_perm+0x6a/0x5d0 [ 2478.870968][T32131] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2478.876070][T32131] ? vfs_write+0x9ec/0x1110 [ 2478.880412][T32131] kernel_clone+0x21e/0x9e0 [ 2478.884748][T32131] ? file_end_write+0x1c0/0x1c0 [ 2478.889434][T32131] ? create_io_thread+0x1e0/0x1e0 [ 2478.894298][T32131] ? mutex_unlock+0xb2/0x260 [ 2478.898725][T32131] ? __mutex_lock_slowpath+0x10/0x10 [ 2478.903843][T32131] __x64_sys_clone+0x23f/0x290 [ 2478.908448][T32131] ? __do_sys_vfork+0x130/0x130 [ 2478.913128][T32131] ? ksys_write+0x260/0x2c0 [ 2478.917472][T32131] ? debug_smp_processor_id+0x17/0x20 [ 2478.922691][T32131] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2478.928576][T32131] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2478.934049][T32131] do_syscall_64+0x3d/0xb0 [ 2478.938298][T32131] entry_SYSCALL_64_after_hwframe+0x61/0xcb 18:24:46 executing program 2: socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, 0x0, 0x0) (async) recvmsg(r0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x8010, r0}, 0x18) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={0x1, &(0x7f0000000080)="db1be2c75f4a8d58200fc45d1292ce7bb7f7cb6760c7c04a5f764489176ede20debb1e0565e4713166a658163245c2e52e4eea7e8df6b117915c0693975f69155fa8b7f25ae1ab2d3e32ac9e0188e3b62e969415796d745faa8db532a5226183f95910babd451b762ddf4b7279e33fdbb0b74e8f3a5b0b729285f4be2d0674dd06da71ac2463e4e49e2440cbde9439d4a7e1673e1cb4c4775663036d22203efdf96fd85e82c5a15c0a6dedf4fb73", &(0x7f0000000140)=""/67}, 0x7f) 18:24:46 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) close(r1) openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r2, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r2, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r3, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r3}, 0x20) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r5 = openat$cgroup(r4, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r7 = openat$cgroup(r6, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r7, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r8 = openat$cgroup_ro(r7, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r8, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r8}, 0x20) r9 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r8}, 0x8) recvmsg$unix(r9, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000000140)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000100)=@o_path={&(0x7f0000000080)='./file0\x00', r9}, 0x18) openat$cgroup_pressure(r5, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r10 = openat$cgroup_ro(r5, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r10, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r10}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r8, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @dev={0xac, 0x14, 0x14, 0x31}, @broadcast}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7f}}, @ip_retopts={{0x50, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0x67, 0x1, 0x6, [{@remote, 0x1000}, {@rand_addr=0x64010100, 0x101}]}, @timestamp_prespec={0x44, 0x14, 0x28, 0x3, 0xe, [{@multicast1, 0x8}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3ff}]}, @cipso={0x86, 0x18, 0x0, [{0x2, 0x12, "acc97cfa32eeacd68fe383f353f6e9e4"}]}]}}}], 0xb8}, 0x440a5) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r10}, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r10, 0x40042409, 0x1) r12 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r3}, 0x8) write$cgroup_type(r9, &(0x7f00000001c0), 0x9) recvmsg$unix(r12, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) openat$cgroup_subtree(r12, &(0x7f0000000000), 0x2, 0x0) 18:24:46 executing program 3: bpf$MAP_CREATE(0x15000000, &(0x7f0000000540)=@base={0xd}, 0x48) [ 2478.944027][T32131] RIP: 0033:0x7fdfd1d08ae9 [ 2478.948279][T32131] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2478.967726][T32131] RSP: 002b:00007fdfd0a8b078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2478.975967][T32131] RAX: ffffffffffffffda RBX: 00007fdfd1e27f80 RCX: 00007fdfd1d08ae9 [ 2478.983783][T32131] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022001200 18:24:46 executing program 1: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000), 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/148, 0x94}, {&(0x7f0000000140)=""/78, 0x4e}], 0x2, &(0x7f0000000200)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}, 0x40000002) 18:24:46 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x210000, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup(r2, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r3, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r4 = openat$cgroup_ro(r3, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r4, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r4}, 0x20) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r4}, 0x8) recvmsg$unix(r5, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000400)) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f00000003c0)=r5) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000001440)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f0000000380)=""/40, 0x28}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000001380)=""/192, 0xd3}], 0x7, &(0x7f00000002c0)=""/22, 0x16}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x210000, 0x0) (async) openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) (async) openat$cgroup(r2, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) (async) openat$cgroup_pressure(r3, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) (async) openat$cgroup_ro(r3, 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r4, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r4}, 0x20) (async) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r4}, 0x8) (async) recvmsg$unix(r5, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000400)) (async) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f00000003c0)=r5) (async) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000001440)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f0000000380)=""/40, 0x28}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000001380)=""/192, 0xd3}], 0x7, &(0x7f00000002c0)=""/22, 0x16}, 0x0) (async) 18:24:46 executing program 3: bpf$MAP_CREATE(0x16000000, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:46 executing program 2: socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x8010, r0}, 0x18) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={0x1, &(0x7f0000000080)="db1be2c75f4a8d58200fc45d1292ce7bb7f7cb6760c7c04a5f764489176ede20debb1e0565e4713166a658163245c2e52e4eea7e8df6b117915c0693975f69155fa8b7f25ae1ab2d3e32ac9e0188e3b62e969415796d745faa8db532a5226183f95910babd451b762ddf4b7279e33fdbb0b74e8f3a5b0b729285f4be2d0674dd06da71ac2463e4e49e2440cbde9439d4a7e1673e1cb4c4775663036d22203efdf96fd85e82c5a15c0a6dedf4fb73", &(0x7f0000000140)=""/67}, 0x7f) [ 2478.991593][T32131] RBP: 00007fdfd0a8b120 R08: 0000000000000000 R09: 0000000000000000 [ 2478.999402][T32131] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2479.007209][T32131] R13: 000000000000000b R14: 00007fdfd1e27f80 R15: 00007fff62717c48 [ 2479.015028][T32131] 18:24:46 executing program 5: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 30) 18:24:46 executing program 3: bpf$MAP_CREATE(0x17000000, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:46 executing program 2: r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_ext={0x1c, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x101}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @exit, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @map_fd={0x18, 0xe, 0x1, 0x0, 0x1}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x6f, &(0x7f00000000c0)=""/111, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0x2, 0x9, 0x2}, 0x10, 0xe125, 0xffffffffffffffff, 0x2, 0x0, &(0x7f00000001c0)=[{0x2, 0x3, 0xb, 0xb}, {0x0, 0x2, 0xe, 0x1}]}, 0x90) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@fwd={0xe}, @typedef={0x9, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x30, 0x61]}}, &(0x7f0000000480)=""/81, 0x34, 0x51, 0x1, 0x4}, 0x20) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000005c0), 0x8) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r4 = openat$cgroup(r3, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r4, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r5 = openat$cgroup_ro(r4, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r5, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r5}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r5}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000300)='syzkaller\x00', 0x3ff, 0xcb, &(0x7f0000000340)=""/203, 0x41100, 0x0, '\x00', 0x0, 0x4, r1, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x4, 0x8, 0x7, 0x4}, 0x10, 0x0, r0, 0x1, &(0x7f0000000600)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, r2, r5, 0xffffffffffffffff], &(0x7f0000000640)=[{0x1, 0x3, 0x0, 0x5}], 0x10, 0x7}, 0x90) 18:24:46 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) (async) close(r1) openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) (async) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r2, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) (async) r3 = openat$cgroup_ro(r2, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r3, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r3}, 0x20) (async) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) (async) r5 = openat$cgroup(r4, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) (async) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r7 = openat$cgroup(r6, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r7, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) (async) r8 = openat$cgroup_ro(r7, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r8, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r8}, 0x20) (async) r9 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r8}, 0x8) recvmsg$unix(r9, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000000140)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}, 0x0) (async) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000100)=@o_path={&(0x7f0000000080)='./file0\x00', r9}, 0x18) (async) openat$cgroup_pressure(r5, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) (async) r10 = openat$cgroup_ro(r5, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r10, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r10}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r8, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @dev={0xac, 0x14, 0x14, 0x31}, @broadcast}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7f}}, @ip_retopts={{0x50, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0x67, 0x1, 0x6, [{@remote, 0x1000}, {@rand_addr=0x64010100, 0x101}]}, @timestamp_prespec={0x44, 0x14, 0x28, 0x3, 0xe, [{@multicast1, 0x8}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3ff}]}, @cipso={0x86, 0x18, 0x0, [{0x2, 0x12, "acc97cfa32eeacd68fe383f353f6e9e4"}]}]}}}], 0xb8}, 0x440a5) (async) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r10}, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r10, 0x40042409, 0x1) (async) r12 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r3}, 0x8) write$cgroup_type(r9, &(0x7f00000001c0), 0x9) (async) recvmsg$unix(r12, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) (async) openat$cgroup_subtree(r12, &(0x7f0000000000), 0x2, 0x0) 18:24:46 executing program 3: bpf$MAP_CREATE(0x18000000, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:46 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x210000, 0x0) (async) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup(r2, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r3, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) (async, rerun: 32) r4 = openat$cgroup_ro(r3, 0x0, 0x0, 0x0) (rerun: 32) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r4, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r4}, 0x20) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r4}, 0x8) recvmsg$unix(r5, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000400)) (async) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f00000003c0)=r5) (async, rerun: 32) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000001440)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f0000000380)=""/40, 0x28}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000001380)=""/192, 0xd3}], 0x7, &(0x7f00000002c0)=""/22, 0x16}, 0x0) (rerun: 32) 18:24:46 executing program 2: r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_ext={0x1c, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x101}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @exit, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @map_fd={0x18, 0xe, 0x1, 0x0, 0x1}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x6f, &(0x7f00000000c0)=""/111, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0x2, 0x9, 0x2}, 0x10, 0xe125, 0xffffffffffffffff, 0x2, 0x0, &(0x7f00000001c0)=[{0x2, 0x3, 0xb, 0xb}, {0x0, 0x2, 0xe, 0x1}]}, 0x90) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@fwd={0xe}, @typedef={0x9, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x30, 0x61]}}, &(0x7f0000000480)=""/81, 0x34, 0x51, 0x1, 0x4}, 0x20) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000005c0), 0x8) (async) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r4 = openat$cgroup(r3, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r4, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) (async) r5 = openat$cgroup_ro(r4, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r5, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r5}, 0x20) (async) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r5}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000300)='syzkaller\x00', 0x3ff, 0xcb, &(0x7f0000000340)=""/203, 0x41100, 0x0, '\x00', 0x0, 0x4, r1, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x4, 0x8, 0x7, 0x4}, 0x10, 0x0, r0, 0x1, &(0x7f0000000600)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, r2, r5, 0xffffffffffffffff], &(0x7f0000000640)=[{0x1, 0x3, 0x0, 0x5}], 0x10, 0x7}, 0x90) [ 2479.079034][T32157] FAULT_INJECTION: forcing a failure. [ 2479.079034][T32157] name failslab, interval 1, probability 0, space 0, times 0 18:24:46 executing program 3: bpf$MAP_CREATE(0x19000000, &(0x7f0000000540)=@base={0xd}, 0x48) [ 2479.133743][T32157] CPU: 0 PID: 32157 Comm: syz-executor.5 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2479.143915][T32157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2479.153815][T32157] Call Trace: [ 2479.156938][T32157] [ 2479.159717][T32157] dump_stack_lvl+0x151/0x1b7 [ 2479.164228][T32157] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2479.169697][T32157] dump_stack+0x15/0x17 [ 2479.173687][T32157] should_fail+0x3c6/0x510 [ 2479.177938][T32157] __should_failslab+0xa4/0xe0 [ 2479.182538][T32157] ? anon_vma_fork+0x1df/0x4e0 [ 2479.187153][T32157] should_failslab+0x9/0x20 [ 2479.191476][T32157] slab_pre_alloc_hook+0x37/0xd0 [ 2479.196256][T32157] ? anon_vma_fork+0x1df/0x4e0 [ 2479.200849][T32157] kmem_cache_alloc+0x44/0x200 [ 2479.205451][T32157] anon_vma_fork+0x1df/0x4e0 [ 2479.209879][T32157] copy_mm+0xa3a/0x13e0 [ 2479.213875][T32157] ? copy_signal+0x610/0x610 [ 2479.218298][T32157] ? __init_rwsem+0xd6/0x1c0 [ 2479.222730][T32157] ? copy_signal+0x4e3/0x610 [ 2479.227153][T32157] copy_process+0x12bc/0x3260 18:24:46 executing program 1: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000), 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/148, 0x94}, {&(0x7f0000000140)=""/78, 0x4e}], 0x2, &(0x7f0000000200)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}, 0x40000002) 18:24:46 executing program 2: r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_ext={0x1c, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x101}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @exit, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @map_fd={0x18, 0xe, 0x1, 0x0, 0x1}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x6f, &(0x7f00000000c0)=""/111, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0x2, 0x9, 0x2}, 0x10, 0xe125, 0xffffffffffffffff, 0x2, 0x0, &(0x7f00000001c0)=[{0x2, 0x3, 0xb, 0xb}, {0x0, 0x2, 0xe, 0x1}]}, 0x90) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@fwd={0xe}, @typedef={0x9, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x30, 0x61]}}, &(0x7f0000000480)=""/81, 0x34, 0x51, 0x1, 0x4}, 0x20) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000005c0), 0x8) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r4 = openat$cgroup(r3, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r4, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) (async) openat$cgroup_pressure(r4, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) openat$cgroup_ro(r4, 0x0, 0x0, 0x0) (async) r5 = openat$cgroup_ro(r4, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r5, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r5}, 0x20) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r5, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r5}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r5}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000300)='syzkaller\x00', 0x3ff, 0xcb, &(0x7f0000000340)=""/203, 0x41100, 0x0, '\x00', 0x0, 0x4, r1, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x4, 0x8, 0x7, 0x4}, 0x10, 0x0, r0, 0x1, &(0x7f0000000600)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, r2, r5, 0xffffffffffffffff], &(0x7f0000000640)=[{0x1, 0x3, 0x0, 0x5}], 0x10, 0x7}, 0x90) 18:24:46 executing program 3: bpf$MAP_CREATE(0x1a000000, &(0x7f0000000540)=@base={0xd}, 0x48) [ 2479.231663][T32157] ? proc_fail_nth_write+0x20b/0x290 [ 2479.236781][T32157] ? fsnotify_perm+0x6a/0x5d0 [ 2479.241295][T32157] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2479.246244][T32157] ? vfs_write+0x9ec/0x1110 [ 2479.250586][T32157] kernel_clone+0x21e/0x9e0 [ 2479.254923][T32157] ? file_end_write+0x1c0/0x1c0 [ 2479.259609][T32157] ? create_io_thread+0x1e0/0x1e0 [ 2479.264478][T32157] ? mutex_unlock+0xb2/0x260 [ 2479.268897][T32157] ? __mutex_lock_slowpath+0x10/0x10 [ 2479.274023][T32157] __x64_sys_clone+0x23f/0x290 [ 2479.278622][T32157] ? __do_sys_vfork+0x130/0x130 18:24:46 executing program 2: r0 = syz_clone(0x81080180, &(0x7f00000000c0)="28550e1cb5e1580a61197c1c779edc3dde77e2715cb52c3d7053072e7687e64c8ea69ffc73cde790dde466711fbf2a5a53ee1ffcf86142f637fbcf7a3136ebddb8fef63fe14e7467aaef134b7a7bdda64f58fd482c9de7ece10c6bd7", 0x5c, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="a12c50ad90c35c6b9944cb65eea2e126f6600d6deaf659594a04de6927b20eccfbae8ade707a6036ee65e7f69101bd51da79fa73ca69a8bc6737fd58e758e2333cc30a112a242bb5c3c50862e518d6f5fef417147b8fed99b6e175cc756923de4c7c9da0f2eb2e9186fc9869f897d9d7a6ee2b27d6d32b6dc53cf83c1504890ce9b7a3b558eca26f91ed1ae01836df45d8cae27c6e2274e787d822d4de9f9ba50ac7d08af06e3416630a93f3823697ff1691b0fbf65b5cdd0569b6c02302fb72fc5c29d9a0c3fd1f15c67271defc5893066288587c5f0a651b85d6b10a506029107a6b259424daf1870569ad5758fcea71292d564d735faeb83cac8f") r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) openat$cgroup(r1, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup(r1, &(0x7f0000001640)='syz0\x00', 0x200002, 0x0) r3 = perf_event_open$cgroup(&(0x7f00000015c0)={0x3, 0x80, 0xff, 0x80, 0x20, 0x8, 0x0, 0x0, 0x14000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x4, @perf_bp={&(0x7f0000001580), 0x9}, 0x3001, 0x8000000000000001, 0x8, 0x2, 0x40, 0x800, 0x5, 0x0, 0x5, 0x0, 0x6}, r2, 0x0, 0xffffffffffffffff, 0x11) bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=@base={0x0, 0xdfe, 0xca2, 0x3, 0x1000, r3, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x5}, 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x4, 0x81, 0x7, 0x2, 0x0, 0xdd2, 0x52, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffff8, 0x1, @perf_bp, 0x1, 0xff, 0x2, 0x6, 0x5, 0x3f0, 0x4, 0x0, 0x4, 0x0, 0x4}, r0, 0x9, r3, 0x0) [ 2479.283312][T32157] ? ksys_write+0x260/0x2c0 [ 2479.287646][T32157] ? debug_smp_processor_id+0x17/0x20 [ 2479.292849][T32157] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2479.298757][T32157] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2479.304221][T32157] do_syscall_64+0x3d/0xb0 [ 2479.308474][T32157] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2479.314209][T32157] RIP: 0033:0x7fdfd1d08ae9 [ 2479.318460][T32157] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2479.338074][T32157] RSP: 002b:00007fdfd0a8b078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2479.346502][T32157] RAX: ffffffffffffffda RBX: 00007fdfd1e27f80 RCX: 00007fdfd1d08ae9 [ 2479.354314][T32157] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022001200 [ 2479.362210][T32157] RBP: 00007fdfd0a8b120 R08: 0000000000000000 R09: 0000000000000000 [ 2479.370018][T32157] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2479.377831][T32157] R13: 000000000000000b R14: 00007fdfd1e27f80 R15: 00007fff62717c48 [ 2479.385657][T32157] 18:24:46 executing program 5: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 31) 18:24:46 executing program 1: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = gettid() getpid() r1 = perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x9, 0x0, 0x40, 0x80, 0x0, 0x1, 0xc000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x1f, 0x8001}, 0x8104, 0x10001, 0x56, 0x4, 0x9, 0x1f, 0x7, 0x0, 0x7fffffff, 0x0, 0x1}, r0, 0xf, 0xffffffffffffffff, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup(r2, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r3, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x3, 0xad, 0x6, 0x0, 0x81, 0x400, 0x5, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000100), 0xa}, 0x8, 0x79f, 0x8, 0x5, 0x3ea4, 0x3, 0x1, 0x0, 0x5, 0x0, 0x400}, 0x0, 0xc, r1, 0x1) r4 = openat$cgroup_ro(r3, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r4, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r4}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r4}, 0x8) perf_event_open$cgroup(&(0x7f0000000080)={0x3, 0x80, 0xfc, 0xa2, 0xf7, 0x7f, 0x0, 0xb79e, 0x1310, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x71a, 0x4, @perf_config_ext={0x3, 0x1}, 0x600, 0x100000001, 0x5, 0x4, 0x7fff, 0x1000, 0x7, 0x0, 0x9}, r4, 0x3, r1, 0x1) 18:24:46 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) close(r1) (async) openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) (async) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r2, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) (async) r3 = openat$cgroup_ro(r2, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r3, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r3}, 0x20) (async) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) (async) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r5 = openat$cgroup(r4, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r7 = openat$cgroup(r6, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r7, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) (async) r8 = openat$cgroup_ro(r7, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r8, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r8}, 0x20) (async, rerun: 32) r9 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r8}, 0x8) (rerun: 32) recvmsg$unix(r9, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000000140)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}, 0x0) (async) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000100)=@o_path={&(0x7f0000000080)='./file0\x00', r9}, 0x18) (async) openat$cgroup_pressure(r5, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) (async) r10 = openat$cgroup_ro(r5, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r10, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r10}, 0x20) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r8, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @dev={0xac, 0x14, 0x14, 0x31}, @broadcast}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7f}}, @ip_retopts={{0x50, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0x67, 0x1, 0x6, [{@remote, 0x1000}, {@rand_addr=0x64010100, 0x101}]}, @timestamp_prespec={0x44, 0x14, 0x28, 0x3, 0xe, [{@multicast1, 0x8}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3ff}]}, @cipso={0x86, 0x18, 0x0, [{0x2, 0x12, "acc97cfa32eeacd68fe383f353f6e9e4"}]}]}}}], 0xb8}, 0x440a5) (async) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r10}, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r10, 0x40042409, 0x1) r12 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r3}, 0x8) write$cgroup_type(r9, &(0x7f00000001c0), 0x9) (async) recvmsg$unix(r12, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) (async) openat$cgroup_subtree(r12, &(0x7f0000000000), 0x2, 0x0) 18:24:46 executing program 3: bpf$MAP_CREATE(0x1b000000, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:46 executing program 2: r0 = syz_clone(0x81080180, &(0x7f00000000c0)="28550e1cb5e1580a61197c1c779edc3dde77e2715cb52c3d7053072e7687e64c8ea69ffc73cde790dde466711fbf2a5a53ee1ffcf86142f637fbcf7a3136ebddb8fef63fe14e7467aaef134b7a7bdda64f58fd482c9de7ece10c6bd7", 0x5c, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="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") (async) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) openat$cgroup(r1, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) (async) r2 = openat$cgroup(r1, &(0x7f0000001640)='syz0\x00', 0x200002, 0x0) r3 = perf_event_open$cgroup(&(0x7f00000015c0)={0x3, 0x80, 0xff, 0x80, 0x20, 0x8, 0x0, 0x0, 0x14000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x4, @perf_bp={&(0x7f0000001580), 0x9}, 0x3001, 0x8000000000000001, 0x8, 0x2, 0x40, 0x800, 0x5, 0x0, 0x5, 0x0, 0x6}, r2, 0x0, 0xffffffffffffffff, 0x11) bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=@base={0x0, 0xdfe, 0xca2, 0x3, 0x1000, r3, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x5}, 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x4, 0x81, 0x7, 0x2, 0x0, 0xdd2, 0x52, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffff8, 0x1, @perf_bp, 0x1, 0xff, 0x2, 0x6, 0x5, 0x3f0, 0x4, 0x0, 0x4, 0x0, 0x4}, r0, 0x9, r3, 0x0) [ 2479.538286][T32221] FAULT_INJECTION: forcing a failure. [ 2479.538286][T32221] name failslab, interval 1, probability 0, space 0, times 0 [ 2479.572650][T32221] CPU: 1 PID: 32221 Comm: syz-executor.5 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2479.582832][T32221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2479.592731][T32221] Call Trace: [ 2479.595850][T32221] [ 2479.598623][T32221] dump_stack_lvl+0x151/0x1b7 [ 2479.603139][T32221] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2479.608608][T32221] ? avc_denied+0x1b0/0x1b0 [ 2479.612947][T32221] dump_stack+0x15/0x17 [ 2479.616937][T32221] should_fail+0x3c6/0x510 [ 2479.621191][T32221] __should_failslab+0xa4/0xe0 [ 2479.625795][T32221] ? vm_area_dup+0x26/0x230 [ 2479.630142][T32221] should_failslab+0x9/0x20 [ 2479.634555][T32221] slab_pre_alloc_hook+0x37/0xd0 [ 2479.639330][T32221] ? vm_area_dup+0x26/0x230 [ 2479.643664][T32221] kmem_cache_alloc+0x44/0x200 [ 2479.648795][T32221] vm_area_dup+0x26/0x230 [ 2479.652955][T32221] copy_mm+0x9a1/0x13e0 [ 2479.656956][T32221] ? copy_signal+0x610/0x610 [ 2479.661374][T32221] ? __init_rwsem+0xd6/0x1c0 [ 2479.665803][T32221] ? copy_signal+0x4e3/0x610 [ 2479.670223][T32221] copy_process+0x12bc/0x3260 [ 2479.674740][T32221] ? proc_fail_nth_write+0x20b/0x290 [ 2479.679870][T32221] ? fsnotify_perm+0x6a/0x5d0 [ 2479.684375][T32221] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2479.689327][T32221] ? vfs_write+0x9ec/0x1110 [ 2479.693661][T32221] kernel_clone+0x21e/0x9e0 [ 2479.698001][T32221] ? file_end_write+0x1c0/0x1c0 [ 2479.702685][T32221] ? create_io_thread+0x1e0/0x1e0 [ 2479.707545][T32221] ? mutex_unlock+0xb2/0x260 [ 2479.712024][T32221] ? __mutex_lock_slowpath+0x10/0x10 [ 2479.717096][T32221] __x64_sys_clone+0x23f/0x290 [ 2479.721699][T32221] ? __do_sys_vfork+0x130/0x130 [ 2479.726382][T32221] ? ksys_write+0x260/0x2c0 [ 2479.730721][T32221] ? debug_smp_processor_id+0x17/0x20 [ 2479.735929][T32221] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2479.741831][T32221] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2479.747299][T32221] do_syscall_64+0x3d/0xb0 [ 2479.751550][T32221] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2479.757279][T32221] RIP: 0033:0x7fdfd1d08ae9 [ 2479.761532][T32221] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2479.780974][T32221] RSP: 002b:00007fdfd0a8b078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2479.789220][T32221] RAX: ffffffffffffffda RBX: 00007fdfd1e27f80 RCX: 00007fdfd1d08ae9 [ 2479.797036][T32221] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022001200 [ 2479.804844][T32221] RBP: 00007fdfd0a8b120 R08: 0000000000000000 R09: 0000000000000000 [ 2479.812658][T32221] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2479.820465][T32221] R13: 000000000000000b R14: 00007fdfd1e27f80 R15: 00007fff62717c48 [ 2479.828544][T32221] 18:24:47 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0xffffffffffffffe0, &(0x7f0000001440)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/192, 0xc0}], 0x7, &(0x7f00000014c0)=""/15, 0xf}, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) 18:24:47 executing program 3: bpf$MAP_CREATE(0x1c000000, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:47 executing program 2: r0 = syz_clone(0x81080180, &(0x7f00000000c0)="28550e1cb5e1580a61197c1c779edc3dde77e2715cb52c3d7053072e7687e64c8ea69ffc73cde790dde466711fbf2a5a53ee1ffcf86142f637fbcf7a3136ebddb8fef63fe14e7467aaef134b7a7bdda64f58fd482c9de7ece10c6bd7", 0x5c, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="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") r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) openat$cgroup(r1, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup(r1, &(0x7f0000001640)='syz0\x00', 0x200002, 0x0) (async) r2 = openat$cgroup(r1, &(0x7f0000001640)='syz0\x00', 0x200002, 0x0) r3 = perf_event_open$cgroup(&(0x7f00000015c0)={0x3, 0x80, 0xff, 0x80, 0x20, 0x8, 0x0, 0x0, 0x14000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x4, @perf_bp={&(0x7f0000001580), 0x9}, 0x3001, 0x8000000000000001, 0x8, 0x2, 0x40, 0x800, 0x5, 0x0, 0x5, 0x0, 0x6}, r2, 0x0, 0xffffffffffffffff, 0x11) bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=@base={0x0, 0xdfe, 0xca2, 0x3, 0x1000, r3, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x5}, 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x4, 0x81, 0x7, 0x2, 0x0, 0xdd2, 0x52, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffff8, 0x1, @perf_bp, 0x1, 0xff, 0x2, 0x6, 0x5, 0x3f0, 0x4, 0x0, 0x4, 0x0, 0x4}, r0, 0x9, r3, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x4, 0x81, 0x7, 0x2, 0x0, 0xdd2, 0x52, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffff8, 0x1, @perf_bp, 0x1, 0xff, 0x2, 0x6, 0x5, 0x3f0, 0x4, 0x0, 0x4, 0x0, 0x4}, r0, 0x9, r3, 0x0) 18:24:47 executing program 1: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = gettid() getpid() r1 = perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x9, 0x0, 0x40, 0x80, 0x0, 0x1, 0xc000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x1f, 0x8001}, 0x8104, 0x10001, 0x56, 0x4, 0x9, 0x1f, 0x7, 0x0, 0x7fffffff, 0x0, 0x1}, r0, 0xf, 0xffffffffffffffff, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup(r2, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r3, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x3, 0xad, 0x6, 0x0, 0x81, 0x400, 0x5, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000100), 0xa}, 0x8, 0x79f, 0x8, 0x5, 0x3ea4, 0x3, 0x1, 0x0, 0x5, 0x0, 0x400}, 0x0, 0xc, r1, 0x1) r4 = openat$cgroup_ro(r3, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r4, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r4}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r4}, 0x8) perf_event_open$cgroup(&(0x7f0000000080)={0x3, 0x80, 0xfc, 0xa2, 0xf7, 0x7f, 0x0, 0xb79e, 0x1310, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x71a, 0x4, @perf_config_ext={0x3, 0x1}, 0x600, 0x100000001, 0x5, 0x4, 0x7fff, 0x1000, 0x7, 0x0, 0x9}, r4, 0x3, r1, 0x1) syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (async) gettid() (async) getpid() (async) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x9, 0x0, 0x40, 0x80, 0x0, 0x1, 0xc000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x1f, 0x8001}, 0x8104, 0x10001, 0x56, 0x4, 0x9, 0x1f, 0x7, 0x0, 0x7fffffff, 0x0, 0x1}, r0, 0xf, 0xffffffffffffffff, 0x0) (async) openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) (async) openat$cgroup(r2, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) (async) openat$cgroup_pressure(r3, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x3, 0xad, 0x6, 0x0, 0x81, 0x400, 0x5, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000100), 0xa}, 0x8, 0x79f, 0x8, 0x5, 0x3ea4, 0x3, 0x1, 0x0, 0x5, 0x0, 0x400}, 0x0, 0xc, r1, 0x1) (async) openat$cgroup_ro(r3, 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r4, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r4}, 0x20) (async) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r4}, 0x8) (async) perf_event_open$cgroup(&(0x7f0000000080)={0x3, 0x80, 0xfc, 0xa2, 0xf7, 0x7f, 0x0, 0xb79e, 0x1310, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x71a, 0x4, @perf_config_ext={0x3, 0x1}, 0x600, 0x100000001, 0x5, 0x4, 0x7fff, 0x1000, 0x7, 0x0, 0x9}, r4, 0x3, r1, 0x1) (async) 18:24:47 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) close(r1) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) 18:24:47 executing program 5: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 32) 18:24:47 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0xffffffffffffffe0, &(0x7f0000001440)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/192, 0xc0}], 0x7, &(0x7f00000014c0)=""/15, 0xf}, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) (async) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) 18:24:47 executing program 3: bpf$MAP_CREATE(0x1d000000, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:47 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0xffffffffffffffe0, &(0x7f0000001440)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/192, 0xc0}], 0x7, &(0x7f00000014c0)=""/15, 0xf}, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) 18:24:47 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) (async) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) close(r1) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) [ 2479.976246][T32239] FAULT_INJECTION: forcing a failure. [ 2479.976246][T32239] name fail_page_alloc, interval 1, probability 0, space 0, times 0 18:24:47 executing program 3: bpf$MAP_CREATE(0x1e000000, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:47 executing program 1: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = gettid() getpid() (async) r1 = perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x9, 0x0, 0x40, 0x80, 0x0, 0x1, 0xc000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x1f, 0x8001}, 0x8104, 0x10001, 0x56, 0x4, 0x9, 0x1f, 0x7, 0x0, 0x7fffffff, 0x0, 0x1}, r0, 0xf, 0xffffffffffffffff, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup(r2, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r3, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x3, 0xad, 0x6, 0x0, 0x81, 0x400, 0x5, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000100), 0xa}, 0x8, 0x79f, 0x8, 0x5, 0x3ea4, 0x3, 0x1, 0x0, 0x5, 0x0, 0x400}, 0x0, 0xc, r1, 0x1) r4 = openat$cgroup_ro(r3, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r4, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r4}, 0x20) (async) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r4}, 0x8) (async) perf_event_open$cgroup(&(0x7f0000000080)={0x3, 0x80, 0xfc, 0xa2, 0xf7, 0x7f, 0x0, 0xb79e, 0x1310, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x71a, 0x4, @perf_config_ext={0x3, 0x1}, 0x600, 0x100000001, 0x5, 0x4, 0x7fff, 0x1000, 0x7, 0x0, 0x9}, r4, 0x3, r1, 0x1) 18:24:47 executing program 0: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x7}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0xffffffffffffffe0, &(0x7f0000001440)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/192, 0xc0}], 0x7, &(0x7f00000014c0)=""/15, 0xf}, 0x0) 18:24:47 executing program 2: socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f00000012c0)={&(0x7f0000000080)=@x25={0x9, @remote}, 0x80, &(0x7f0000001200)=[{&(0x7f0000000000)=""/2, 0x2}, {&(0x7f0000000100)=""/197, 0xc5}, {&(0x7f0000000200)=""/4096, 0x1000}], 0x3, &(0x7f0000001240)=""/106, 0x6a}, 0x20) 18:24:47 executing program 0: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x7}, 0x8) (async) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x7}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0xffffffffffffffe0, &(0x7f0000001440)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/192, 0xc0}], 0x7, &(0x7f00000014c0)=""/15, 0xf}, 0x0) 18:24:47 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) close(r1) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) [ 2480.079896][T32239] CPU: 0 PID: 32239 Comm: syz-executor.5 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2480.090065][T32239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2480.099965][T32239] Call Trace: [ 2480.103082][T32239] [ 2480.105865][T32239] dump_stack_lvl+0x151/0x1b7 [ 2480.110397][T32239] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2480.117055][T32239] dump_stack+0x15/0x17 [ 2480.121013][T32239] should_fail+0x3c6/0x510 18:24:47 executing program 0: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x7}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0xffffffffffffffe0, &(0x7f0000001440)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/192, 0xc0}], 0x7, &(0x7f00000014c0)=""/15, 0xf}, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x7}, 0x8) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0xffffffffffffffe0, &(0x7f0000001440)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/192, 0xc0}], 0x7, &(0x7f00000014c0)=""/15, 0xf}, 0x0) (async) [ 2480.125264][T32239] should_fail_alloc_page+0x5a/0x80 [ 2480.130302][T32239] prepare_alloc_pages+0x15c/0x700 [ 2480.135250][T32239] ? __alloc_pages_bulk+0xe60/0xe60 [ 2480.140282][T32239] __alloc_pages+0x138/0x5e0 [ 2480.144706][T32239] ? prep_new_page+0x110/0x110 [ 2480.149303][T32239] ? __alloc_pages+0x206/0x5e0 [ 2480.153903][T32239] ? stack_trace_save+0x1c0/0x1c0 [ 2480.158767][T32239] ? __kasan_check_write+0x14/0x20 [ 2480.163716][T32239] ? _raw_spin_lock+0xa4/0x1b0 [ 2480.168316][T32239] __pmd_alloc+0xb1/0x550 [ 2480.172481][T32239] ? __pud_alloc+0x260/0x260 [ 2480.176906][T32239] ? __pud_alloc+0x213/0x260 [ 2480.181336][T32239] ? do_handle_mm_fault+0x2330/0x2330 [ 2480.186542][T32239] ? __stack_depot_save+0x34/0x470 [ 2480.191490][T32239] ? anon_vma_clone+0x9a/0x500 [ 2480.196090][T32239] copy_page_range+0x2b3d/0x2f90 [ 2480.200860][T32239] ? __kasan_slab_alloc+0xb1/0xe0 [ 2480.205723][T32239] ? slab_post_alloc_hook+0x53/0x2c0 [ 2480.210846][T32239] ? copy_mm+0xa3a/0x13e0 [ 2480.215009][T32239] ? copy_process+0x12bc/0x3260 [ 2480.219694][T32239] ? kernel_clone+0x21e/0x9e0 [ 2480.224657][T32239] ? do_syscall_64+0x3d/0xb0 [ 2480.229071][T32239] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2480.234982][T32239] ? pfn_valid+0x1e0/0x1e0 [ 2480.239679][T32239] ? rwsem_write_trylock+0x15b/0x290 [ 2480.244777][T32239] ? vma_interval_tree_augment_rotate+0x1d0/0x1d0 [ 2480.251034][T32239] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 2480.256624][T32239] ? __rb_insert_augmented+0x5de/0x610 [ 2480.261881][T32239] copy_mm+0xc7e/0x13e0 [ 2480.265876][T32239] ? copy_signal+0x610/0x610 [ 2480.270293][T32239] ? __init_rwsem+0xd6/0x1c0 [ 2480.274721][T32239] ? copy_signal+0x4e3/0x610 [ 2480.279184][T32239] copy_process+0x12bc/0x3260 [ 2480.283672][T32239] ? proc_fail_nth_write+0x20b/0x290 [ 2480.288784][T32239] ? fsnotify_perm+0x6a/0x5d0 [ 2480.293299][T32239] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2480.298329][T32239] ? vfs_write+0x9ec/0x1110 [ 2480.303194][T32239] kernel_clone+0x21e/0x9e0 [ 2480.307545][T32239] ? file_end_write+0x1c0/0x1c0 [ 2480.312219][T32239] ? create_io_thread+0x1e0/0x1e0 [ 2480.317074][T32239] ? mutex_unlock+0xb2/0x260 [ 2480.321528][T32239] ? __mutex_lock_slowpath+0x10/0x10 [ 2480.326800][T32239] __x64_sys_clone+0x23f/0x290 [ 2480.331398][T32239] ? __do_sys_vfork+0x130/0x130 [ 2480.336096][T32239] ? ksys_write+0x260/0x2c0 [ 2480.340424][T32239] ? debug_smp_processor_id+0x17/0x20 [ 2480.346329][T32239] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2480.352314][T32239] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2480.357783][T32239] do_syscall_64+0x3d/0xb0 [ 2480.362033][T32239] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2480.368201][T32239] RIP: 0033:0x7fdfd1d08ae9 [ 2480.372453][T32239] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2480.392158][T32239] RSP: 002b:00007fdfd0a8b078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2480.400649][T32239] RAX: ffffffffffffffda RBX: 00007fdfd1e27f80 RCX: 00007fdfd1d08ae9 [ 2480.408471][T32239] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022001200 [ 2480.416261][T32239] RBP: 00007fdfd0a8b120 R08: 0000000000000000 R09: 0000000000000000 18:24:47 executing program 5: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 33) 18:24:47 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000001440)=[{&(0x7f0000001540)=""/231, 0xe7}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000001380)=""/192, 0xc0}], 0x7, &(0x7f00000014c0)=""/15, 0xf}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup(r1, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r2, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r2, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r3, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r3}, 0x20) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r3}, 0x8) recvmsg$unix(r4, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)=@generic={&(0x7f0000000000)='./file0\x00', r4}, 0x18) 18:24:47 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) 18:24:47 executing program 1: r0 = syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x480, &(0x7f0000000140)="eefcebdc447c0aa24bd51b6d788898bd57504df4485a411b5316dcea392bcc904dc4983c9ad9aecc544808d9c0c5d7ff54458179399ab643c723b07accd6cf9c04d5e9965c3a260992b6c6fbf546e8536dc76d9f604347bd0821acadc130854dab2ddbf4b2d135cf272c062da57e9ef580322136d5c8085f4f670377ed2185fb48295cf7560d9c1fcb490cc67f45deb4f5234635b8706e3d39b9e986244dec352a1736ffd8abfaf844084b78ac0a551e21f4741675f4e88042de37d52defb0f9849589d14fd13c7b47c9c7376739e74db777259d4da2f57b1fed", 0xda, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280)="5bea845db24ccafc2794579bf6123c75cd971c64cc4dd06da5bdc08e1ce030fc1d7e522f5e9af962c5b77d3d4feceb0ce1ab3395c5164a707f148978c112c09fa5c6fd0bb2ae780ec584f55fb3fabd888f63b6cdbcc8efb2021ba7c260512986cb3ff369590559cb6be68bb9c2c4eb17b560bff263c3b5599924580d4d5acc4393317eef61a5761b0dc0ea6af4f81774ea57bca00b1eb87aa382e5ec86cd2db1d49f25f0490cc9491391a26c3b7ec5dc7210da925392d3816523d0e5d6daa77c409bdc6e0485e68f0e257209429decc3c155689abf3712286622ec92723221e3bf0604c847429f10e0d251b0c4") syz_clone(0x941000, &(0x7f0000000540)="188b071d3f5b5230678e6c29b7a06cb675be0f1ae287d8d16629056d6e85f086cf60432ba4a7b4c28e70539fd38d37d4d4c3971a6fdd2277e86a35ab8f860aef2cf05c1dcbb507750c663c948f0ab6b68a95f4481b13d6e9cf9c36f98b5271cf68a0ce3d642ce55d1f6126cc80a36f20ecf5ba75cc619c10bdeab0712f72327f01c8475a6f918da0a9eb42663646a21c1dfc070bf7fe8213a508af06d87314615cc461cc98ef0d4c7860e0d479e40075df180b3c27f0db4d4af3b6722eefcc0cae036a44063b2b239a6d821589e61acd9b3e40772676c3ba7018c6c9ab7491ba7fd4ead5df9abe2e8f35ece4719449", 0xef, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)="7c01dbd646bd1dab63db6775cd6efd094e506b0b3c29f35d2129ef67115b927e") syz_open_procfs$namespace(r0, &(0x7f0000000100)='ns/pid\x00') r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.time\x00', 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000080)=r0, 0x12) syz_clone(0x0, &(0x7f0000000380)="afe095811c901e5f0ed358fc28dbaa11f390702f53f40f4dddfe818c948d32ea5f41839edfefafb6ee758c8b2bcd8587cf6221db3fea7c406eb9eb660a01c7db291dc0b6eb16b8c2fb782fbb741caf74dfafd88546d20f863a24de744b4a25c582937543d37999b1907df795be51bf6d38eff68b703cc4686cba2af7f22e0c8ab06248d383103aadef4f9ffad5a3c6a4e369c845cb2befd63faf9abf764edc3d80d0e250a0b6e70a64a45b52", 0xac, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="8fa7ee76ac9f7a35ca8502e4c9d56990ebf891b341adde683d2830bc8c2d639c9dd59dc328ee4936722546d256e27a2aef4badf346") write$cgroup_pid(r1, &(0x7f0000000040)=0xffffffffffffffff, 0x12) r2 = getpid() syz_open_procfs$namespace(r2, 0x0) syz_open_procfs$namespace(r2, &(0x7f0000000500)='ns/ipc\x00') 18:24:47 executing program 3: bpf$MAP_CREATE(0x1f000000, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:47 executing program 2: socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f00000012c0)={&(0x7f0000000080)=@x25={0x9, @remote}, 0x80, &(0x7f0000001200)=[{&(0x7f0000000000)=""/2, 0x2}, {&(0x7f0000000100)=""/197, 0xc5}, {&(0x7f0000000200)=""/4096, 0x1000}], 0x3, &(0x7f0000001240)=""/106, 0x6a}, 0x20) (async) recvmsg(r0, &(0x7f00000012c0)={&(0x7f0000000080)=@x25={0x9, @remote}, 0x80, &(0x7f0000001200)=[{&(0x7f0000000000)=""/2, 0x2}, {&(0x7f0000000100)=""/197, 0xc5}, {&(0x7f0000000200)=""/4096, 0x1000}], 0x3, &(0x7f0000001240)=""/106, 0x6a}, 0x20) [ 2480.424176][T32239] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2480.432187][T32239] R13: 000000000000000b R14: 00007fdfd1e27f80 R15: 00007fff62717c48 [ 2480.440000][T32239] 18:24:47 executing program 3: bpf$MAP_CREATE(0x20000000, &(0x7f0000000540)=@base={0xd}, 0x48) [ 2480.502403][T32302] FAULT_INJECTION: forcing a failure. [ 2480.502403][T32302] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2480.523289][T32302] CPU: 1 PID: 32302 Comm: syz-executor.5 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2480.533641][T32302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2480.543710][T32302] Call Trace: [ 2480.546830][T32302] 18:24:47 executing program 2: socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f00000012c0)={&(0x7f0000000080)=@x25={0x9, @remote}, 0x80, &(0x7f0000001200)=[{&(0x7f0000000000)=""/2, 0x2}, {&(0x7f0000000100)=""/197, 0xc5}, {&(0x7f0000000200)=""/4096, 0x1000}], 0x3, &(0x7f0000001240)=""/106, 0x6a}, 0x20) [ 2480.549606][T32302] dump_stack_lvl+0x151/0x1b7 [ 2480.554122][T32302] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2480.559604][T32302] dump_stack+0x15/0x17 [ 2480.563602][T32302] should_fail+0x3c6/0x510 [ 2480.567833][T32302] should_fail_alloc_page+0x5a/0x80 [ 2480.572867][T32302] prepare_alloc_pages+0x15c/0x700 [ 2480.577821][T32302] ? __alloc_pages_bulk+0xe60/0xe60 [ 2480.582851][T32302] __alloc_pages+0x138/0x5e0 [ 2480.587278][T32302] ? prep_new_page+0x110/0x110 [ 2480.591873][T32302] ? __alloc_pages+0x206/0x5e0 [ 2480.596476][T32302] ? prep_new_page+0x110/0x110 [ 2480.601085][T32302] ? __kasan_check_write+0x14/0x20 [ 2480.606033][T32302] ? _raw_spin_lock+0xa4/0x1b0 [ 2480.610631][T32302] pte_alloc_one+0x73/0x1b0 [ 2480.614959][T32302] ? pfn_modify_allowed+0x2f0/0x2f0 [ 2480.619993][T32302] ? __pmd_alloc+0x48d/0x550 [ 2480.624595][T32302] __pte_alloc+0x86/0x350 [ 2480.628768][T32302] ? __pud_alloc+0x260/0x260 [ 2480.633191][T32302] ? __pud_alloc+0x213/0x260 [ 2480.637611][T32302] ? free_pgtables+0x280/0x280 [ 2480.642319][T32302] ? do_handle_mm_fault+0x2330/0x2330 [ 2480.647504][T32302] ? __stack_depot_save+0x34/0x470 [ 2480.652451][T32302] ? anon_vma_clone+0x9a/0x500 [ 2480.657063][T32302] copy_page_range+0x28a8/0x2f90 [ 2480.661823][T32302] ? __kasan_slab_alloc+0xb1/0xe0 [ 2480.666686][T32302] ? slab_post_alloc_hook+0x53/0x2c0 [ 2480.671813][T32302] ? kernel_clone+0x21e/0x9e0 [ 2480.676322][T32302] ? do_syscall_64+0x3d/0xb0 [ 2480.680746][T32302] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2480.686657][T32302] ? pfn_valid+0x1e0/0x1e0 [ 2480.690900][T32302] ? rwsem_write_trylock+0x15b/0x290 [ 2480.696019][T32302] ? vma_interval_tree_augment_rotate+0x1d0/0x1d0 [ 2480.702271][T32302] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 2480.707827][T32302] ? __rb_insert_augmented+0x5de/0x610 [ 2480.713124][T32302] copy_mm+0xc7e/0x13e0 [ 2480.717115][T32302] ? copy_signal+0x610/0x610 [ 2480.721573][T32302] ? __init_rwsem+0xd6/0x1c0 [ 2480.725966][T32302] ? copy_signal+0x4e3/0x610 [ 2480.730393][T32302] copy_process+0x12bc/0x3260 [ 2480.734905][T32302] ? proc_fail_nth_write+0x20b/0x290 [ 2480.740024][T32302] ? fsnotify_perm+0x6a/0x5d0 [ 2480.744543][T32302] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2480.749484][T32302] ? vfs_write+0x9ec/0x1110 [ 2480.753828][T32302] kernel_clone+0x21e/0x9e0 [ 2480.758308][T32302] ? file_end_write+0x1c0/0x1c0 [ 2480.762995][T32302] ? create_io_thread+0x1e0/0x1e0 [ 2480.767851][T32302] ? mutex_unlock+0xb2/0x260 [ 2480.772276][T32302] ? __mutex_lock_slowpath+0x10/0x10 [ 2480.777407][T32302] __x64_sys_clone+0x23f/0x290 [ 2480.781996][T32302] ? __do_sys_vfork+0x130/0x130 [ 2480.786681][T32302] ? ksys_write+0x260/0x2c0 [ 2480.791021][T32302] ? debug_smp_processor_id+0x17/0x20 [ 2480.796225][T32302] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2480.802131][T32302] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2480.807601][T32302] do_syscall_64+0x3d/0xb0 [ 2480.811852][T32302] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2480.817581][T32302] RIP: 0033:0x7fdfd1d08ae9 [ 2480.821833][T32302] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2480.841280][T32302] RSP: 002b:00007fdfd0a8b078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 18:24:48 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) (async) close(r0) (async) 18:24:48 executing program 1: r0 = syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x480, &(0x7f0000000140)="eefcebdc447c0aa24bd51b6d788898bd57504df4485a411b5316dcea392bcc904dc4983c9ad9aecc544808d9c0c5d7ff54458179399ab643c723b07accd6cf9c04d5e9965c3a260992b6c6fbf546e8536dc76d9f604347bd0821acadc130854dab2ddbf4b2d135cf272c062da57e9ef580322136d5c8085f4f670377ed2185fb48295cf7560d9c1fcb490cc67f45deb4f5234635b8706e3d39b9e986244dec352a1736ffd8abfaf844084b78ac0a551e21f4741675f4e88042de37d52defb0f9849589d14fd13c7b47c9c7376739e74db777259d4da2f57b1fed", 0xda, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280)="5bea845db24ccafc2794579bf6123c75cd971c64cc4dd06da5bdc08e1ce030fc1d7e522f5e9af962c5b77d3d4feceb0ce1ab3395c5164a707f148978c112c09fa5c6fd0bb2ae780ec584f55fb3fabd888f63b6cdbcc8efb2021ba7c260512986cb3ff369590559cb6be68bb9c2c4eb17b560bff263c3b5599924580d4d5acc4393317eef61a5761b0dc0ea6af4f81774ea57bca00b1eb87aa382e5ec86cd2db1d49f25f0490cc9491391a26c3b7ec5dc7210da925392d3816523d0e5d6daa77c409bdc6e0485e68f0e257209429decc3c155689abf3712286622ec92723221e3bf0604c847429f10e0d251b0c4") syz_clone(0x941000, &(0x7f0000000540)="188b071d3f5b5230678e6c29b7a06cb675be0f1ae287d8d16629056d6e85f086cf60432ba4a7b4c28e70539fd38d37d4d4c3971a6fdd2277e86a35ab8f860aef2cf05c1dcbb507750c663c948f0ab6b68a95f4481b13d6e9cf9c36f98b5271cf68a0ce3d642ce55d1f6126cc80a36f20ecf5ba75cc619c10bdeab0712f72327f01c8475a6f918da0a9eb42663646a21c1dfc070bf7fe8213a508af06d87314615cc461cc98ef0d4c7860e0d479e40075df180b3c27f0db4d4af3b6722eefcc0cae036a44063b2b239a6d821589e61acd9b3e40772676c3ba7018c6c9ab7491ba7fd4ead5df9abe2e8f35ece4719449", 0xef, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)="7c01dbd646bd1dab63db6775cd6efd094e506b0b3c29f35d2129ef67115b927e") syz_open_procfs$namespace(r0, &(0x7f0000000100)='ns/pid\x00') r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.time\x00', 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000080)=r0, 0x12) syz_clone(0x0, &(0x7f0000000380)="afe095811c901e5f0ed358fc28dbaa11f390702f53f40f4dddfe818c948d32ea5f41839edfefafb6ee758c8b2bcd8587cf6221db3fea7c406eb9eb660a01c7db291dc0b6eb16b8c2fb782fbb741caf74dfafd88546d20f863a24de744b4a25c582937543d37999b1907df795be51bf6d38eff68b703cc4686cba2af7f22e0c8ab06248d383103aadef4f9ffad5a3c6a4e369c845cb2befd63faf9abf764edc3d80d0e250a0b6e70a64a45b52", 0xac, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="8fa7ee76ac9f7a35ca8502e4c9d56990ebf891b341adde683d2830bc8c2d639c9dd59dc328ee4936722546d256e27a2aef4badf346") write$cgroup_pid(r1, &(0x7f0000000040)=0xffffffffffffffff, 0x12) r2 = getpid() syz_open_procfs$namespace(r2, 0x0) syz_open_procfs$namespace(r2, &(0x7f0000000500)='ns/ipc\x00') syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x480, &(0x7f0000000140)="eefcebdc447c0aa24bd51b6d788898bd57504df4485a411b5316dcea392bcc904dc4983c9ad9aecc544808d9c0c5d7ff54458179399ab643c723b07accd6cf9c04d5e9965c3a260992b6c6fbf546e8536dc76d9f604347bd0821acadc130854dab2ddbf4b2d135cf272c062da57e9ef580322136d5c8085f4f670377ed2185fb48295cf7560d9c1fcb490cc67f45deb4f5234635b8706e3d39b9e986244dec352a1736ffd8abfaf844084b78ac0a551e21f4741675f4e88042de37d52defb0f9849589d14fd13c7b47c9c7376739e74db777259d4da2f57b1fed", 0xda, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280)="5bea845db24ccafc2794579bf6123c75cd971c64cc4dd06da5bdc08e1ce030fc1d7e522f5e9af962c5b77d3d4feceb0ce1ab3395c5164a707f148978c112c09fa5c6fd0bb2ae780ec584f55fb3fabd888f63b6cdbcc8efb2021ba7c260512986cb3ff369590559cb6be68bb9c2c4eb17b560bff263c3b5599924580d4d5acc4393317eef61a5761b0dc0ea6af4f81774ea57bca00b1eb87aa382e5ec86cd2db1d49f25f0490cc9491391a26c3b7ec5dc7210da925392d3816523d0e5d6daa77c409bdc6e0485e68f0e257209429decc3c155689abf3712286622ec92723221e3bf0604c847429f10e0d251b0c4") (async) syz_clone(0x941000, &(0x7f0000000540)="188b071d3f5b5230678e6c29b7a06cb675be0f1ae287d8d16629056d6e85f086cf60432ba4a7b4c28e70539fd38d37d4d4c3971a6fdd2277e86a35ab8f860aef2cf05c1dcbb507750c663c948f0ab6b68a95f4481b13d6e9cf9c36f98b5271cf68a0ce3d642ce55d1f6126cc80a36f20ecf5ba75cc619c10bdeab0712f72327f01c8475a6f918da0a9eb42663646a21c1dfc070bf7fe8213a508af06d87314615cc461cc98ef0d4c7860e0d479e40075df180b3c27f0db4d4af3b6722eefcc0cae036a44063b2b239a6d821589e61acd9b3e40772676c3ba7018c6c9ab7491ba7fd4ead5df9abe2e8f35ece4719449", 0xef, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)="7c01dbd646bd1dab63db6775cd6efd094e506b0b3c29f35d2129ef67115b927e") (async) syz_open_procfs$namespace(r0, &(0x7f0000000100)='ns/pid\x00') (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.time\x00', 0x0, 0x0) (async) write$cgroup_pid(r1, &(0x7f0000000080)=r0, 0x12) (async) syz_clone(0x0, &(0x7f0000000380)="afe095811c901e5f0ed358fc28dbaa11f390702f53f40f4dddfe818c948d32ea5f41839edfefafb6ee758c8b2bcd8587cf6221db3fea7c406eb9eb660a01c7db291dc0b6eb16b8c2fb782fbb741caf74dfafd88546d20f863a24de744b4a25c582937543d37999b1907df795be51bf6d38eff68b703cc4686cba2af7f22e0c8ab06248d383103aadef4f9ffad5a3c6a4e369c845cb2befd63faf9abf764edc3d80d0e250a0b6e70a64a45b52", 0xac, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="8fa7ee76ac9f7a35ca8502e4c9d56990ebf891b341adde683d2830bc8c2d639c9dd59dc328ee4936722546d256e27a2aef4badf346") (async) write$cgroup_pid(r1, &(0x7f0000000040)=0xffffffffffffffff, 0x12) (async) getpid() (async) syz_open_procfs$namespace(r2, 0x0) (async) syz_open_procfs$namespace(r2, &(0x7f0000000500)='ns/ipc\x00') (async) 18:24:48 executing program 5: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 34) 18:24:48 executing program 2: socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x43, 0x1}, 0x1}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000080)="4aa5e18112fc1f4d302aa41d609c4498fa50cb5a3d2b3f4d5200ff16244bbf85a6cb6d697f34bfa01bf6d34abf2a595e2e0add4b67ed7b13bf28802bfca687f811a569952c42f1d9eb799a2a5fff873045f3d05962f4a11b4bce58c05ae3288e74703d6d40e554c73562e5b4f9445c7003dfda728529fbb67f7e451b9e9c4232e7e25a668da182bd8602b9515cb7828fbf4d537c0964ec5a70f3c2fc0926bf68b0e1eae82608474e1dab6c8b19142ba687a452b09c3c", 0xb6}, {&(0x7f0000000140)="60bc7c6edf85d31db572efb4d474391d8bda9a9f714b886e9d99d5c3e1edde6517f2d84da08ab7da4da26efd78c6846de5cae446da606e4a1eec4a72", 0x3c}, {&(0x7f0000000180)="2b4eb84c5bb3aa216c638d7eaba94fe22caa0115eef4219a0a94fa6505c61038acd804e90baa8e3f70f5d5ecbebc94838c36b474c443f68a9dc1670b74f0c515551c053ff2f33573f38a13f7336b208fda700b47b284ad8742e2", 0x5a}], 0x3, &(0x7f0000000240)="9571a310f207c636a758a0a8c0144825c2935c229a5a8b4e477df7", 0x1b, 0x40088d0}, 0x44040) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup(r1, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r2, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r2, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r3, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r3}, 0x20) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r3}, 0x8) recvmsg$unix(r4, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup(r5, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r6, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r7 = openat$cgroup_ro(r6, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r7, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r7}, 0x20) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r7}, 0x8) recvmsg$unix(r8, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x2, 0x400, 0x8000, 0x102, r4, 0x2, '\x00', 0x0, r8, 0x2, 0x0, 0x5, 0x7}, 0x48) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000480), 0x8) r11 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0)={r10}, 0x8) r12 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@o_path={&(0x7f0000000300)='./file0\x00', 0x0, 0x4018, r9}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000800)={@cgroup=r10, 0x12, 0x0, 0x7ff, &(0x7f0000000600)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000840)={@map=r11, r12, 0x17, 0x3000, r10, @prog_id, r13}, 0x20) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r14, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000000000070000008520000002000000d50bf8fffcffffff85100000080000000097ac24c0e2f831f03000fcffffff185100000600000000000000000000001b00000000000e7cee6f0014d08c097371af91e9e3cabd8d78e61f700be8cdd3266ff4c4f699a0e5ae5a665f8f66b10e26d3899fef18fed930cb592707cfffcbf46c32938840b37bf546e45a406e78d2bb0cc34495f6edeba706c65ad735c3198278f8240634a026230b6ed88e", @ANYRESHEX=r14], &(0x7f0000000340)='syzkaller\x00', 0x615, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0xf, 0x7, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0x1, r9, r10], 0x0, 0x10, 0x4}, 0x53) 18:24:48 executing program 3: bpf$MAP_CREATE(0x21000000, &(0x7f0000000540)=@base={0xd}, 0x48) [ 2480.849517][T32302] RAX: ffffffffffffffda RBX: 00007fdfd1e27f80 RCX: 00007fdfd1d08ae9 [ 2480.857329][T32302] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022001200 [ 2480.865152][T32302] RBP: 00007fdfd0a8b120 R08: 0000000000000000 R09: 0000000000000000 [ 2480.872951][T32302] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2480.880766][T32302] R13: 000000000000000b R14: 00007fdfd1e27f80 R15: 00007fff62717c48 [ 2480.888584][T32302] [ 2481.069553][T32325] FAULT_INJECTION: forcing a failure. [ 2481.069553][T32325] name failslab, interval 1, probability 0, space 0, times 0 [ 2481.082179][T32325] CPU: 0 PID: 32325 Comm: syz-executor.5 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2481.092339][T32325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2481.102242][T32325] Call Trace: [ 2481.105358][T32325] [ 2481.108136][T32325] dump_stack_lvl+0x151/0x1b7 [ 2481.112654][T32325] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2481.118117][T32325] dump_stack+0x15/0x17 [ 2481.122111][T32325] should_fail+0x3c6/0x510 [ 2481.126361][T32325] __should_failslab+0xa4/0xe0 [ 2481.130964][T32325] ? anon_vma_clone+0x9a/0x500 [ 2481.135669][T32325] should_failslab+0x9/0x20 [ 2481.140018][T32325] slab_pre_alloc_hook+0x37/0xd0 [ 2481.144784][T32325] ? anon_vma_clone+0x9a/0x500 [ 2481.149381][T32325] kmem_cache_alloc+0x44/0x200 [ 2481.153986][T32325] anon_vma_clone+0x9a/0x500 [ 2481.158406][T32325] anon_vma_fork+0x91/0x4e0 [ 2481.162751][T32325] ? anon_vma_name+0x4c/0x70 [ 2481.167360][T32325] ? vm_area_dup+0x17a/0x230 [ 2481.171858][T32325] copy_mm+0xa3a/0x13e0 [ 2481.175944][T32325] ? copy_signal+0x610/0x610 [ 2481.180631][T32325] ? __init_rwsem+0xd6/0x1c0 [ 2481.185051][T32325] ? copy_signal+0x4e3/0x610 [ 2481.189480][T32325] copy_process+0x12bc/0x3260 [ 2481.193993][T32325] ? proc_fail_nth_write+0x20b/0x290 [ 2481.199211][T32325] ? fsnotify_perm+0x6a/0x5d0 [ 2481.203798][T32325] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2481.208745][T32325] ? vfs_write+0x9ec/0x1110 [ 2481.213087][T32325] kernel_clone+0x21e/0x9e0 [ 2481.217611][T32325] ? file_end_write+0x1c0/0x1c0 [ 2481.222290][T32325] ? create_io_thread+0x1e0/0x1e0 [ 2481.227143][T32325] ? mutex_unlock+0xb2/0x260 [ 2481.231572][T32325] ? __mutex_lock_slowpath+0x10/0x10 [ 2481.236693][T32325] __x64_sys_clone+0x23f/0x290 [ 2481.241297][T32325] ? __do_sys_vfork+0x130/0x130 [ 2481.245977][T32325] ? ksys_write+0x260/0x2c0 [ 2481.250321][T32325] ? debug_smp_processor_id+0x17/0x20 [ 2481.255533][T32325] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2481.262038][T32325] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2481.267509][T32325] do_syscall_64+0x3d/0xb0 [ 2481.271756][T32325] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2481.277751][T32325] RIP: 0033:0x7fdfd1d08ae9 [ 2481.281997][T32325] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2481.301454][T32325] RSP: 002b:00007fdfd0a8b078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2481.309684][T32325] RAX: ffffffffffffffda RBX: 00007fdfd1e27f80 RCX: 00007fdfd1d08ae9 18:24:48 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000001440)=[{&(0x7f0000001540)=""/231, 0xe7}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000001380)=""/192, 0xc0}], 0x7, &(0x7f00000014c0)=""/15, 0xf}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup(r1, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r2, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) (async) r3 = openat$cgroup_ro(r2, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r3, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r3}, 0x20) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r3}, 0x8) recvmsg$unix(r4, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)=@generic={&(0x7f0000000000)='./file0\x00', r4}, 0x18) 18:24:48 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) 18:24:48 executing program 3: bpf$MAP_CREATE(0x22000000, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:48 executing program 1: r0 = syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x480, &(0x7f0000000140)="eefcebdc447c0aa24bd51b6d788898bd57504df4485a411b5316dcea392bcc904dc4983c9ad9aecc544808d9c0c5d7ff54458179399ab643c723b07accd6cf9c04d5e9965c3a260992b6c6fbf546e8536dc76d9f604347bd0821acadc130854dab2ddbf4b2d135cf272c062da57e9ef580322136d5c8085f4f670377ed2185fb48295cf7560d9c1fcb490cc67f45deb4f5234635b8706e3d39b9e986244dec352a1736ffd8abfaf844084b78ac0a551e21f4741675f4e88042de37d52defb0f9849589d14fd13c7b47c9c7376739e74db777259d4da2f57b1fed", 0xda, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280)="5bea845db24ccafc2794579bf6123c75cd971c64cc4dd06da5bdc08e1ce030fc1d7e522f5e9af962c5b77d3d4feceb0ce1ab3395c5164a707f148978c112c09fa5c6fd0bb2ae780ec584f55fb3fabd888f63b6cdbcc8efb2021ba7c260512986cb3ff369590559cb6be68bb9c2c4eb17b560bff263c3b5599924580d4d5acc4393317eef61a5761b0dc0ea6af4f81774ea57bca00b1eb87aa382e5ec86cd2db1d49f25f0490cc9491391a26c3b7ec5dc7210da925392d3816523d0e5d6daa77c409bdc6e0485e68f0e257209429decc3c155689abf3712286622ec92723221e3bf0604c847429f10e0d251b0c4") (async, rerun: 64) syz_clone(0x941000, &(0x7f0000000540)="188b071d3f5b5230678e6c29b7a06cb675be0f1ae287d8d16629056d6e85f086cf60432ba4a7b4c28e70539fd38d37d4d4c3971a6fdd2277e86a35ab8f860aef2cf05c1dcbb507750c663c948f0ab6b68a95f4481b13d6e9cf9c36f98b5271cf68a0ce3d642ce55d1f6126cc80a36f20ecf5ba75cc619c10bdeab0712f72327f01c8475a6f918da0a9eb42663646a21c1dfc070bf7fe8213a508af06d87314615cc461cc98ef0d4c7860e0d479e40075df180b3c27f0db4d4af3b6722eefcc0cae036a44063b2b239a6d821589e61acd9b3e40772676c3ba7018c6c9ab7491ba7fd4ead5df9abe2e8f35ece4719449", 0xef, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)="7c01dbd646bd1dab63db6775cd6efd094e506b0b3c29f35d2129ef67115b927e") (rerun: 64) syz_open_procfs$namespace(r0, &(0x7f0000000100)='ns/pid\x00') (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.time\x00', 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000080)=r0, 0x12) syz_clone(0x0, &(0x7f0000000380)="afe095811c901e5f0ed358fc28dbaa11f390702f53f40f4dddfe818c948d32ea5f41839edfefafb6ee758c8b2bcd8587cf6221db3fea7c406eb9eb660a01c7db291dc0b6eb16b8c2fb782fbb741caf74dfafd88546d20f863a24de744b4a25c582937543d37999b1907df795be51bf6d38eff68b703cc4686cba2af7f22e0c8ab06248d383103aadef4f9ffad5a3c6a4e369c845cb2befd63faf9abf764edc3d80d0e250a0b6e70a64a45b52", 0xac, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="8fa7ee76ac9f7a35ca8502e4c9d56990ebf891b341adde683d2830bc8c2d639c9dd59dc328ee4936722546d256e27a2aef4badf346") (async) write$cgroup_pid(r1, &(0x7f0000000040)=0xffffffffffffffff, 0x12) r2 = getpid() syz_open_procfs$namespace(r2, 0x0) (async, rerun: 32) syz_open_procfs$namespace(r2, &(0x7f0000000500)='ns/ipc\x00') (rerun: 32) 18:24:48 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001d00)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f00000022c0)={0x0, 0x0, 0x0}, 0x40) recvmsg$unix(r2, &(0x7f0000000500)={&(0x7f0000000000), 0x6e, &(0x7f0000000480)=[{&(0x7f0000000080)=""/40, 0x28}, {&(0x7f0000000240)=""/217, 0xd9}, {&(0x7f0000000340)=""/47, 0x2f}, {&(0x7f00000003c0)=""/52, 0x34}, {&(0x7f0000000400)=""/85, 0x55}], 0x5}, 0x61) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/259, 0x103}, 0x41) close(r1) 18:24:48 executing program 3: bpf$MAP_CREATE(0x23000000, &(0x7f0000000540)=@base={0xd}, 0x48) [ 2481.317498][T32325] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022001200 [ 2481.325309][T32325] RBP: 00007fdfd0a8b120 R08: 0000000000000000 R09: 0000000000000000 [ 2481.333206][T32325] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2481.341017][T32325] R13: 000000000000000b R14: 00007fdfd1e27f80 R15: 00007fff62717c48 [ 2481.348836][T32325] 18:24:48 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001d00)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f00000022c0)={0x0, 0x0, 0x0}, 0x40) recvmsg$unix(r2, &(0x7f0000000500)={&(0x7f0000000000), 0x6e, &(0x7f0000000480)=[{&(0x7f0000000080)=""/40, 0x28}, {&(0x7f0000000240)=""/217, 0xd9}, {&(0x7f0000000340)=""/47, 0x2f}, {&(0x7f00000003c0)=""/52, 0x34}, {&(0x7f0000000400)=""/85, 0x55}], 0x5}, 0x61) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/259, 0x103}, 0x41) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001d00)) (async) recvmsg$unix(r2, &(0x7f00000022c0)={0x0, 0x0, 0x0}, 0x40) (async) recvmsg$unix(r2, &(0x7f0000000500)={&(0x7f0000000000), 0x6e, &(0x7f0000000480)=[{&(0x7f0000000080)=""/40, 0x28}, {&(0x7f0000000240)=""/217, 0xd9}, {&(0x7f0000000340)=""/47, 0x2f}, {&(0x7f00000003c0)=""/52, 0x34}, {&(0x7f0000000400)=""/85, 0x55}], 0x5}, 0x61) (async) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/259, 0x103}, 0x41) (async) close(r1) (async) 18:24:48 executing program 5: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 35) 18:24:48 executing program 3: bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:48 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001d00)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f00000022c0)={0x0, 0x0, 0x0}, 0x40) (async) recvmsg$unix(r2, &(0x7f0000000500)={&(0x7f0000000000), 0x6e, &(0x7f0000000480)=[{&(0x7f0000000080)=""/40, 0x28}, {&(0x7f0000000240)=""/217, 0xd9}, {&(0x7f0000000340)=""/47, 0x2f}, {&(0x7f00000003c0)=""/52, 0x34}, {&(0x7f0000000400)=""/85, 0x55}], 0x5}, 0x61) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/259, 0x103}, 0x41) (async) close(r1) [ 2481.599825][T32363] FAULT_INJECTION: forcing a failure. [ 2481.599825][T32363] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2481.659106][T32363] CPU: 1 PID: 32363 Comm: syz-executor.5 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2481.669293][T32363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2481.679276][T32363] Call Trace: [ 2481.682410][T32363] [ 2481.685178][T32363] dump_stack_lvl+0x151/0x1b7 [ 2481.689686][T32363] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2481.695158][T32363] dump_stack+0x15/0x17 [ 2481.699324][T32363] should_fail+0x3c6/0x510 [ 2481.703578][T32363] should_fail_alloc_page+0x5a/0x80 [ 2481.708608][T32363] prepare_alloc_pages+0x15c/0x700 [ 2481.713555][T32363] ? __alloc_pages+0x5e0/0x5e0 [ 2481.718158][T32363] ? __alloc_pages_bulk+0xe60/0xe60 [ 2481.723192][T32363] __alloc_pages+0x138/0x5e0 [ 2481.727618][T32363] ? prep_new_page+0x110/0x110 [ 2481.732217][T32363] ? is_bpf_text_address+0x172/0x190 [ 2481.737336][T32363] pte_alloc_one+0x73/0x1b0 [ 2481.741678][T32363] ? pfn_modify_allowed+0x2f0/0x2f0 [ 2481.746708][T32363] ? arch_stack_walk+0xf3/0x140 [ 2481.751402][T32363] __pte_alloc+0x86/0x350 [ 2481.755562][T32363] ? free_pgtables+0x280/0x280 [ 2481.760161][T32363] ? _raw_spin_lock+0xa4/0x1b0 [ 2481.765028][T32363] ? __kasan_check_write+0x14/0x20 [ 2481.769975][T32363] copy_page_range+0x28a8/0x2f90 [ 2481.774764][T32363] ? __kasan_slab_alloc+0xb1/0xe0 [ 2481.779614][T32363] ? pfn_valid+0x1e0/0x1e0 [ 2481.783860][T32363] ? vma_gap_callbacks_rotate+0x1b7/0x210 [ 2481.789419][T32363] ? __rb_insert_augmented+0x5de/0x610 [ 2481.794715][T32363] copy_mm+0xc7e/0x13e0 [ 2481.798966][T32363] ? copy_signal+0x610/0x610 [ 2481.803385][T32363] ? __init_rwsem+0xd6/0x1c0 [ 2481.808080][T32363] ? copy_signal+0x4e3/0x610 [ 2481.812515][T32363] copy_process+0x12bc/0x3260 [ 2481.817012][T32363] ? proc_fail_nth_write+0x20b/0x290 [ 2481.822146][T32363] ? fsnotify_perm+0x6a/0x5d0 [ 2481.826659][T32363] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2481.831594][T32363] ? vfs_write+0x9ec/0x1110 [ 2481.835938][T32363] kernel_clone+0x21e/0x9e0 [ 2481.840273][T32363] ? file_end_write+0x1c0/0x1c0 [ 2481.844961][T32363] ? create_io_thread+0x1e0/0x1e0 [ 2481.849830][T32363] ? mutex_unlock+0xb2/0x260 [ 2481.854248][T32363] ? __mutex_lock_slowpath+0x10/0x10 [ 2481.859369][T32363] __x64_sys_clone+0x23f/0x290 [ 2481.863977][T32363] ? __do_sys_vfork+0x130/0x130 [ 2481.868741][T32363] ? ksys_write+0x260/0x2c0 [ 2481.873080][T32363] ? debug_smp_processor_id+0x17/0x20 [ 2481.878288][T32363] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2481.884193][T32363] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2481.889657][T32363] do_syscall_64+0x3d/0xb0 [ 2481.893922][T32363] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2481.899637][T32363] RIP: 0033:0x7fdfd1d08ae9 [ 2481.903894][T32363] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2481.923336][T32363] RSP: 002b:00007fdfd0a8b078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2481.931837][T32363] RAX: ffffffffffffffda RBX: 00007fdfd1e27f80 RCX: 00007fdfd1d08ae9 [ 2481.939739][T32363] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022001200 [ 2481.947547][T32363] RBP: 00007fdfd0a8b120 R08: 0000000000000000 R09: 0000000000000000 [ 2481.955357][T32363] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2481.963170][T32363] R13: 000000000000000b R14: 00007fdfd1e27f80 R15: 00007fff62717c48 [ 2481.970978][T32363] 18:24:49 executing program 2: socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, 0x0, 0x0) (async) sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x43, 0x1}, 0x1}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000080)="4aa5e18112fc1f4d302aa41d609c4498fa50cb5a3d2b3f4d5200ff16244bbf85a6cb6d697f34bfa01bf6d34abf2a595e2e0add4b67ed7b13bf28802bfca687f811a569952c42f1d9eb799a2a5fff873045f3d05962f4a11b4bce58c05ae3288e74703d6d40e554c73562e5b4f9445c7003dfda728529fbb67f7e451b9e9c4232e7e25a668da182bd8602b9515cb7828fbf4d537c0964ec5a70f3c2fc0926bf68b0e1eae82608474e1dab6c8b19142ba687a452b09c3c", 0xb6}, {&(0x7f0000000140)="60bc7c6edf85d31db572efb4d474391d8bda9a9f714b886e9d99d5c3e1edde6517f2d84da08ab7da4da26efd78c6846de5cae446da606e4a1eec4a72", 0x3c}, {&(0x7f0000000180)="2b4eb84c5bb3aa216c638d7eaba94fe22caa0115eef4219a0a94fa6505c61038acd804e90baa8e3f70f5d5ecbebc94838c36b474c443f68a9dc1670b74f0c515551c053ff2f33573f38a13f7336b208fda700b47b284ad8742e2", 0x5a}], 0x3, &(0x7f0000000240)="9571a310f207c636a758a0a8c0144825c2935c229a5a8b4e477df7", 0x1b, 0x40088d0}, 0x44040) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup(r1, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r2, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) (async) r3 = openat$cgroup_ro(r2, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r3, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r3}, 0x20) (async, rerun: 32) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r3}, 0x8) (rerun: 32) recvmsg$unix(r4, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) (async) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup(r5, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r6, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) (async, rerun: 32) r7 = openat$cgroup_ro(r6, 0x0, 0x0, 0x0) (rerun: 32) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r7, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r7}, 0x20) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r7}, 0x8) recvmsg$unix(r8, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x2, 0x400, 0x8000, 0x102, r4, 0x2, '\x00', 0x0, r8, 0x2, 0x0, 0x5, 0x7}, 0x48) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000480), 0x8) r11 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0)={r10}, 0x8) (async, rerun: 32) r12 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@o_path={&(0x7f0000000300)='./file0\x00', 0x0, 0x4018, r9}, 0x18) (async, rerun: 32) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000800)={@cgroup=r10, 0x12, 0x0, 0x7ff, &(0x7f0000000600)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000840)={@map=r11, r12, 0x17, 0x3000, r10, @prog_id, r13}, 0x20) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r14, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000000000070000008520000002000000d50bf8fffcffffff85100000080000000097ac24c0e2f831f03000fcffffff185100000600000000000000000000001b00000000000e7cee6f0014d08c097371af91e9e3cabd8d78e61f700be8cdd3266ff4c4f699a0e5ae5a665f8f66b10e26d3899fef18fed930cb592707cfffcbf46c32938840b37bf546e45a406e78d2bb0cc34495f6edeba706c65ad735c3198278f8240634a026230b6ed88e", @ANYRESHEX=r14], &(0x7f0000000340)='syzkaller\x00', 0x615, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0xf, 0x7, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0x1, r9, r10], 0x0, 0x10, 0x4}, 0x53) 18:24:49 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/245, 0xf5}, 0x0) close(r1) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) openat$cgroup(r2, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup(r2, &(0x7f0000001640)='syz0\x00', 0x200002, 0x0) r4 = perf_event_open$cgroup(&(0x7f00000015c0)={0x3, 0x80, 0xff, 0x80, 0x20, 0x8, 0x0, 0x0, 0x14000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x4, @perf_bp={&(0x7f0000001580), 0x9}, 0x3001, 0x8000000000000001, 0x8, 0x2, 0x40, 0x800, 0x5, 0x0, 0x5, 0x0, 0x6}, r3, 0x0, 0xffffffffffffffff, 0x11) bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=@base={0x0, 0xdfe, 0xca2, 0x3, 0x1000, r4, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x5}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) 18:24:49 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000001440)=[{&(0x7f0000001540)=""/231, 0xe7}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000001380)=""/192, 0xc0}], 0x7, &(0x7f00000014c0)=""/15, 0xf}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup(r1, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r2, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r2, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r3, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r3}, 0x20) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r3}, 0x8) recvmsg$unix(r4, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)=@generic={&(0x7f0000000000)='./file0\x00', r4}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000001440)=[{&(0x7f0000001540)=""/231, 0xe7}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000001380)=""/192, 0xc0}], 0x7, &(0x7f00000014c0)=""/15, 0xf}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) (async) openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) (async) openat$cgroup(r1, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) (async) openat$cgroup_pressure(r2, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) (async) openat$cgroup_ro(r2, 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r3, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r3}, 0x20) (async) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r3}, 0x8) (async) recvmsg$unix(r4, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) (async) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)=@generic={&(0x7f0000000000)='./file0\x00', r4}, 0x18) (async) 18:24:49 executing program 3: bpf$MAP_CREATE(0x200000000000000, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:49 executing program 5: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 36) [ 2482.227909][T32402] FAULT_INJECTION: forcing a failure. [ 2482.227909][T32402] name failslab, interval 1, probability 0, space 0, times 0 [ 2482.263246][T32402] CPU: 1 PID: 32402 Comm: syz-executor.5 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2482.273427][T32402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2482.283339][T32402] Call Trace: [ 2482.286442][T32402] [ 2482.289217][T32402] dump_stack_lvl+0x151/0x1b7 [ 2482.293732][T32402] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2482.299201][T32402] dump_stack+0x15/0x17 [ 2482.303193][T32402] should_fail+0x3c6/0x510 [ 2482.307448][T32402] __should_failslab+0xa4/0xe0 [ 2482.312042][T32402] ? vm_area_dup+0x26/0x230 [ 2482.316385][T32402] should_failslab+0x9/0x20 [ 2482.320727][T32402] slab_pre_alloc_hook+0x37/0xd0 [ 2482.325671][T32402] ? vm_area_dup+0x26/0x230 [ 2482.330014][T32402] kmem_cache_alloc+0x44/0x200 [ 2482.334626][T32402] vm_area_dup+0x26/0x230 [ 2482.338862][T32402] copy_mm+0x9a1/0x13e0 [ 2482.342857][T32402] ? copy_signal+0x610/0x610 [ 2482.347283][T32402] ? __init_rwsem+0xd6/0x1c0 [ 2482.351901][T32402] ? copy_signal+0x4e3/0x610 [ 2482.356320][T32402] copy_process+0x12bc/0x3260 [ 2482.360835][T32402] ? proc_fail_nth_write+0x20b/0x290 [ 2482.365959][T32402] ? fsnotify_perm+0x6a/0x5d0 [ 2482.370688][T32402] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2482.375588][T32402] ? vfs_write+0x9ec/0x1110 [ 2482.379933][T32402] kernel_clone+0x21e/0x9e0 [ 2482.384268][T32402] ? file_end_write+0x1c0/0x1c0 [ 2482.388960][T32402] ? create_io_thread+0x1e0/0x1e0 [ 2482.393816][T32402] ? mutex_unlock+0xb2/0x260 [ 2482.398344][T32402] ? __mutex_lock_slowpath+0x10/0x10 [ 2482.403451][T32402] __x64_sys_clone+0x23f/0x290 [ 2482.408050][T32402] ? __do_sys_vfork+0x130/0x130 [ 2482.412738][T32402] ? ksys_write+0x260/0x2c0 [ 2482.417081][T32402] ? debug_smp_processor_id+0x17/0x20 [ 2482.422283][T32402] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2482.428188][T32402] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2482.433652][T32402] do_syscall_64+0x3d/0xb0 [ 2482.438082][T32402] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2482.443806][T32402] RIP: 0033:0x7fdfd1d08ae9 [ 2482.448076][T32402] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2482.467508][T32402] RSP: 002b:00007fdfd0a8b078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 18:24:49 executing program 1: syz_clone(0x1f0d9080, 0x0, 0xfffffea0, 0x0, 0x0, 0x0) gettid() r0 = getpid() syz_open_procfs$namespace(r0, 0x0) r1 = getpid() r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) openat$cgroup(r2, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup(r2, &(0x7f0000001640)='syz0\x00', 0x200002, 0x0) r4 = perf_event_open$cgroup(&(0x7f00000015c0)={0x3, 0x80, 0xff, 0x80, 0x20, 0x8, 0x0, 0x0, 0x14000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x4, @perf_bp={&(0x7f0000001580), 0x9}, 0x3001, 0x8000000000000001, 0x8, 0x2, 0x40, 0x800, 0x5, 0x0, 0x5, 0x0, 0x6}, r3, 0x0, 0xffffffffffffffff, 0x11) bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=@base={0x0, 0xdfe, 0xca2, 0x3, 0x1000, r4, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x5}, 0x48) perf_event_open(&(0x7f00000006c0)={0x3, 0x80, 0xe1, 0x41, 0x7, 0x0, 0x0, 0x7fff, 0x10002, 0x6, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000680), 0x2}, 0x80010, 0x6eb, 0x5, 0x0, 0x3c, 0x6, 0xa61e, 0x0, 0x6}, 0xffffffffffffffff, 0x5, r4, 0x9) syz_open_procfs$namespace(r1, 0x0) syz_open_procfs$namespace(r1, &(0x7f0000000500)='ns/user\x00') r5 = syz_clone(0x6000, &(0x7f0000000040)="aefa6173ad616ed82357a961dace2a259bbe121ed4fb5fb1feed6bbc91571ff2c26f1e9f32ae3bbed38e9ee3ea93aae2b6b1fca7f1614bac115ff5efbd03f4aacbd98e9d3a74dce1b56013c310131ab2ddd28b392e5f7cce9f0fa34c4a6f9ac1539067edc539bfaa8392927f065fbe8505f00b578625e2d4202a2e1691f55d818d3df7c47c5d85526ad5dc56b0a37d61246586923342b594f411b7c0e3291229bf41465767ad6d655b3fe50a271154654f4f111fc9dbde5da2424b6b24c081b4ae689b15b5d9f476f52782c0ce802f5a7a252cd6d464a678514989c736ac9db52bf7fe3ac99dc22f59e9", 0xea, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="2ae060139ad38790106db7dff003cb8729a75976856da2da375cf91c6a7fd8c7dd2c5cd656399e332cfcbb6395bd7a379a01c19d386d16c5af77bfac2281c26ba01fa4e632905192b8c38196f185364a602ca9c88664978e119d2e0fbf361bcaceff8816d17545e190b6dee476c114645b3be9bd395ade10966290076967e0bb5401ce6c72165e6768bd") r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0x0, 0x3, 0x8}, 0xc) r7 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r8 = openat$cgroup(r7, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r8, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) perf_event_open(&(0x7f00000005c0)={0x4, 0x80, 0x8, 0x7f, 0x1, 0x6, 0x0, 0xb23f, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x450, 0x8000000000000001}, 0x1000, 0x6, 0x9, 0x3, 0x7fff, 0x1f, 0x4, 0x0, 0x7ff, 0x0, 0x401}, r5, 0x6, 0xffffffffffffffff, 0x9) r9 = openat$cgroup_ro(r8, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r9, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r9}, 0x20) r10 = openat$cgroup_ro(r9, &(0x7f0000000540)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) openat$cgroup_int(r10, &(0x7f0000000580)='cpu.weight\x00', 0x2, 0x0) openat$cgroup_ro(r9, &(0x7f0000000640)='blkio.bfq.time\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r9}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x3, &(0x7f00000002c0)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @alu={0x4, 0x1, 0x3, 0x0, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffc}], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0xe, 0x80000001, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000400)=[0xffffffffffffffff, r6, r9], 0x0, 0x10, 0x80}, 0x90) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280)=r5, 0x12) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/time_for_children\x00') 18:24:49 executing program 3: bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:49 executing program 5: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 37) 18:24:49 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0xffffffffffffffe0, &(0x7f0000001440)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/192, 0xc0}], 0x7, &(0x7f00000014c0)=""/15, 0xf}, 0x0) 18:24:49 executing program 2: socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, 0x0, 0x0) (async, rerun: 64) sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x43, 0x1}, 0x1}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000080)="4aa5e18112fc1f4d302aa41d609c4498fa50cb5a3d2b3f4d5200ff16244bbf85a6cb6d697f34bfa01bf6d34abf2a595e2e0add4b67ed7b13bf28802bfca687f811a569952c42f1d9eb799a2a5fff873045f3d05962f4a11b4bce58c05ae3288e74703d6d40e554c73562e5b4f9445c7003dfda728529fbb67f7e451b9e9c4232e7e25a668da182bd8602b9515cb7828fbf4d537c0964ec5a70f3c2fc0926bf68b0e1eae82608474e1dab6c8b19142ba687a452b09c3c", 0xb6}, {&(0x7f0000000140)="60bc7c6edf85d31db572efb4d474391d8bda9a9f714b886e9d99d5c3e1edde6517f2d84da08ab7da4da26efd78c6846de5cae446da606e4a1eec4a72", 0x3c}, {&(0x7f0000000180)="2b4eb84c5bb3aa216c638d7eaba94fe22caa0115eef4219a0a94fa6505c61038acd804e90baa8e3f70f5d5ecbebc94838c36b474c443f68a9dc1670b74f0c515551c053ff2f33573f38a13f7336b208fda700b47b284ad8742e2", 0x5a}], 0x3, &(0x7f0000000240)="9571a310f207c636a758a0a8c0144825c2935c229a5a8b4e477df7", 0x1b, 0x40088d0}, 0x44040) (async, rerun: 64) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup(r1, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r2, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) (async) r3 = openat$cgroup_ro(r2, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r3, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r3}, 0x20) (async) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r3}, 0x8) recvmsg$unix(r4, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) (async) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup(r5, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r6, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r7 = openat$cgroup_ro(r6, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r7, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r7}, 0x20) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r7}, 0x8) recvmsg$unix(r8, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x2, 0x400, 0x8000, 0x102, r4, 0x2, '\x00', 0x0, r8, 0x2, 0x0, 0x5, 0x7}, 0x48) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000480), 0x8) r11 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0)={r10}, 0x8) (async) r12 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@o_path={&(0x7f0000000300)='./file0\x00', 0x0, 0x4018, r9}, 0x18) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000800)={@cgroup=r10, 0x12, 0x0, 0x7ff, &(0x7f0000000600)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000840)={@map=r11, r12, 0x17, 0x3000, r10, @prog_id, r13}, 0x20) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r14, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000000000070000008520000002000000d50bf8fffcffffff85100000080000000097ac24c0e2f831f03000fcffffff185100000600000000000000000000001b00000000000e7cee6f0014d08c097371af91e9e3cabd8d78e61f700be8cdd3266ff4c4f699a0e5ae5a665f8f66b10e26d3899fef18fed930cb592707cfffcbf46c32938840b37bf546e45a406e78d2bb0cc34495f6edeba706c65ad735c3198278f8240634a026230b6ed88e", @ANYRESHEX=r14], &(0x7f0000000340)='syzkaller\x00', 0x615, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0xf, 0x7, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0x1, r9, r10], 0x0, 0x10, 0x4}, 0x53) 18:24:49 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/245, 0xf5}, 0x0) close(r1) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) openat$cgroup(r2, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup(r2, &(0x7f0000001640)='syz0\x00', 0x200002, 0x0) r4 = perf_event_open$cgroup(&(0x7f00000015c0)={0x3, 0x80, 0xff, 0x80, 0x20, 0x8, 0x0, 0x0, 0x14000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x4, @perf_bp={&(0x7f0000001580), 0x9}, 0x3001, 0x8000000000000001, 0x8, 0x2, 0x40, 0x800, 0x5, 0x0, 0x5, 0x0, 0x6}, r3, 0x0, 0xffffffffffffffff, 0x11) bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=@base={0x0, 0xdfe, 0xca2, 0x3, 0x1000, r4, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x5}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/245, 0xf5}, 0x0) (async) close(r1) (async) openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) (async) openat$cgroup(r2, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) (async) openat$cgroup(r2, &(0x7f0000001640)='syz0\x00', 0x200002, 0x0) (async) perf_event_open$cgroup(&(0x7f00000015c0)={0x3, 0x80, 0xff, 0x80, 0x20, 0x8, 0x0, 0x0, 0x14000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x4, @perf_bp={&(0x7f0000001580), 0x9}, 0x3001, 0x8000000000000001, 0x8, 0x2, 0x40, 0x800, 0x5, 0x0, 0x5, 0x0, 0x6}, r3, 0x0, 0xffffffffffffffff, 0x11) (async) bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=@base={0x0, 0xdfe, 0xca2, 0x3, 0x1000, r4, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x5}, 0x48) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) (async) [ 2482.475838][T32402] RAX: ffffffffffffffda RBX: 00007fdfd1e27f80 RCX: 00007fdfd1d08ae9 [ 2482.483649][T32402] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022001200 [ 2482.491468][T32402] RBP: 00007fdfd0a8b120 R08: 0000000000000000 R09: 0000000000000000 [ 2482.499442][T32402] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2482.507254][T32402] R13: 000000000000000b R14: 00007fdfd1e27f80 R15: 00007fff62717c48 [ 2482.515073][T32402] 18:24:49 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0xffffffffffffffe0, &(0x7f0000001440)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/192, 0xc0}], 0x7, &(0x7f00000014c0)=""/15, 0xf}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) (async) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0xffffffffffffffe0, &(0x7f0000001440)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/192, 0xc0}], 0x7, &(0x7f00000014c0)=""/15, 0xf}, 0x0) (async) 18:24:49 executing program 3: bpf$MAP_CREATE(0x400000000000000, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:49 executing program 2: socketpair(0x0, 0x800, 0x37e, &(0x7f0000000040)) 18:24:49 executing program 3: bpf$MAP_CREATE(0x500000000000000, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:49 executing program 2: socketpair(0x0, 0x800, 0x37e, &(0x7f0000000040)) 18:24:49 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) (async) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0xffffffffffffffe0, &(0x7f0000001440)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/192, 0xc0}], 0x7, &(0x7f00000014c0)=""/15, 0xf}, 0x0) [ 2482.576654][T32432] FAULT_INJECTION: forcing a failure. [ 2482.576654][T32432] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2482.643405][T32432] CPU: 0 PID: 32432 Comm: syz-executor.5 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2482.653673][T32432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2482.663687][T32432] Call Trace: [ 2482.666808][T32432] [ 2482.669592][T32432] dump_stack_lvl+0x151/0x1b7 [ 2482.674105][T32432] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2482.679585][T32432] dump_stack+0x15/0x17 [ 2482.683734][T32432] should_fail+0x3c6/0x510 [ 2482.687991][T32432] should_fail_alloc_page+0x5a/0x80 [ 2482.693020][T32432] prepare_alloc_pages+0x15c/0x700 [ 2482.697969][T32432] ? __alloc_pages+0x5e0/0x5e0 [ 2482.702570][T32432] ? __alloc_pages_bulk+0xe60/0xe60 [ 2482.707614][T32432] __alloc_pages+0x138/0x5e0 [ 2482.712207][T32432] ? prep_new_page+0x110/0x110 [ 2482.716802][T32432] ? is_bpf_text_address+0x172/0x190 [ 2482.721921][T32432] pte_alloc_one+0x73/0x1b0 [ 2482.726264][T32432] ? pfn_modify_allowed+0x2f0/0x2f0 [ 2482.731297][T32432] ? arch_stack_walk+0xf3/0x140 [ 2482.736001][T32432] __pte_alloc+0x86/0x350 [ 2482.740147][T32432] ? free_pgtables+0x280/0x280 [ 2482.744751][T32432] ? _raw_spin_lock+0xa4/0x1b0 [ 2482.749348][T32432] ? __kasan_check_write+0x14/0x20 [ 2482.754299][T32432] copy_page_range+0x28a8/0x2f90 [ 2482.759255][T32432] ? __kasan_slab_alloc+0xb1/0xe0 [ 2482.764111][T32432] ? pfn_valid+0x1e0/0x1e0 [ 2482.768464][T32432] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 2482.774024][T32432] ? __rb_insert_augmented+0x5de/0x610 [ 2482.779319][T32432] copy_mm+0xc7e/0x13e0 [ 2482.783303][T32432] ? copy_signal+0x610/0x610 [ 2482.787900][T32432] ? __init_rwsem+0xd6/0x1c0 [ 2482.792336][T32432] ? copy_signal+0x4e3/0x610 [ 2482.796752][T32432] copy_process+0x12bc/0x3260 [ 2482.801280][T32432] ? proc_fail_nth_write+0x20b/0x290 [ 2482.806389][T32432] ? fsnotify_perm+0x6a/0x5d0 [ 2482.810915][T32432] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2482.815845][T32432] ? vfs_write+0x9ec/0x1110 [ 2482.820191][T32432] kernel_clone+0x21e/0x9e0 [ 2482.824525][T32432] ? file_end_write+0x1c0/0x1c0 [ 2482.829210][T32432] ? create_io_thread+0x1e0/0x1e0 [ 2482.834072][T32432] ? mutex_unlock+0xb2/0x260 [ 2482.838511][T32432] ? __mutex_lock_slowpath+0x10/0x10 [ 2482.843622][T32432] __x64_sys_clone+0x23f/0x290 [ 2482.848223][T32432] ? __do_sys_vfork+0x130/0x130 [ 2482.852903][T32432] ? ksys_write+0x260/0x2c0 [ 2482.857247][T32432] ? debug_smp_processor_id+0x17/0x20 [ 2482.862451][T32432] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2482.868357][T32432] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2482.873915][T32432] do_syscall_64+0x3d/0xb0 [ 2482.878166][T32432] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2482.883893][T32432] RIP: 0033:0x7fdfd1d08ae9 [ 2482.888283][T32432] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2482.907723][T32432] RSP: 002b:00007fdfd0a8b078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2482.915983][T32432] RAX: ffffffffffffffda RBX: 00007fdfd1e27f80 RCX: 00007fdfd1d08ae9 [ 2482.923782][T32432] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022001200 [ 2482.931592][T32432] RBP: 00007fdfd0a8b120 R08: 0000000000000000 R09: 0000000000000000 [ 2482.939405][T32432] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2482.947211][T32432] R13: 000000000000000b R14: 00007fdfd1e27f80 R15: 00007fff62717c48 [ 2482.955041][T32432] 18:24:50 executing program 1: syz_clone(0x1f0d9080, 0x0, 0xfffffea0, 0x0, 0x0, 0x0) (async) gettid() (async, rerun: 32) r0 = getpid() (rerun: 32) syz_open_procfs$namespace(r0, 0x0) r1 = getpid() (async, rerun: 64) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) (rerun: 64) openat$cgroup(r2, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) (async) r3 = openat$cgroup(r2, &(0x7f0000001640)='syz0\x00', 0x200002, 0x0) r4 = perf_event_open$cgroup(&(0x7f00000015c0)={0x3, 0x80, 0xff, 0x80, 0x20, 0x8, 0x0, 0x0, 0x14000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x4, @perf_bp={&(0x7f0000001580), 0x9}, 0x3001, 0x8000000000000001, 0x8, 0x2, 0x40, 0x800, 0x5, 0x0, 0x5, 0x0, 0x6}, r3, 0x0, 0xffffffffffffffff, 0x11) bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=@base={0x0, 0xdfe, 0xca2, 0x3, 0x1000, r4, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x5}, 0x48) (async, rerun: 32) perf_event_open(&(0x7f00000006c0)={0x3, 0x80, 0xe1, 0x41, 0x7, 0x0, 0x0, 0x7fff, 0x10002, 0x6, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000680), 0x2}, 0x80010, 0x6eb, 0x5, 0x0, 0x3c, 0x6, 0xa61e, 0x0, 0x6}, 0xffffffffffffffff, 0x5, r4, 0x9) (async, rerun: 32) syz_open_procfs$namespace(r1, 0x0) (async) syz_open_procfs$namespace(r1, &(0x7f0000000500)='ns/user\x00') r5 = syz_clone(0x6000, &(0x7f0000000040)="aefa6173ad616ed82357a961dace2a259bbe121ed4fb5fb1feed6bbc91571ff2c26f1e9f32ae3bbed38e9ee3ea93aae2b6b1fca7f1614bac115ff5efbd03f4aacbd98e9d3a74dce1b56013c310131ab2ddd28b392e5f7cce9f0fa34c4a6f9ac1539067edc539bfaa8392927f065fbe8505f00b578625e2d4202a2e1691f55d818d3df7c47c5d85526ad5dc56b0a37d61246586923342b594f411b7c0e3291229bf41465767ad6d655b3fe50a271154654f4f111fc9dbde5da2424b6b24c081b4ae689b15b5d9f476f52782c0ce802f5a7a252cd6d464a678514989c736ac9db52bf7fe3ac99dc22f59e9", 0xea, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="2ae060139ad38790106db7dff003cb8729a75976856da2da375cf91c6a7fd8c7dd2c5cd656399e332cfcbb6395bd7a379a01c19d386d16c5af77bfac2281c26ba01fa4e632905192b8c38196f185364a602ca9c88664978e119d2e0fbf361bcaceff8816d17545e190b6dee476c114645b3be9bd395ade10966290076967e0bb5401ce6c72165e6768bd") (async, rerun: 32) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0x0, 0x3, 0x8}, 0xc) (async, rerun: 32) r7 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r8 = openat$cgroup(r7, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r8, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) (async, rerun: 64) perf_event_open(&(0x7f00000005c0)={0x4, 0x80, 0x8, 0x7f, 0x1, 0x6, 0x0, 0xb23f, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x450, 0x8000000000000001}, 0x1000, 0x6, 0x9, 0x3, 0x7fff, 0x1f, 0x4, 0x0, 0x7ff, 0x0, 0x401}, r5, 0x6, 0xffffffffffffffff, 0x9) (async, rerun: 64) r9 = openat$cgroup_ro(r8, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r9, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r9}, 0x20) (async, rerun: 32) r10 = openat$cgroup_ro(r9, &(0x7f0000000540)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) (rerun: 32) openat$cgroup_int(r10, &(0x7f0000000580)='cpu.weight\x00', 0x2, 0x0) (async) openat$cgroup_ro(r9, &(0x7f0000000640)='blkio.bfq.time\x00', 0x0, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r9}, 0x8) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x3, &(0x7f00000002c0)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @alu={0x4, 0x1, 0x3, 0x0, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffc}], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0xe, 0x80000001, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000400)=[0xffffffffffffffff, r6, r9], 0x0, 0x10, 0x80}, 0x90) (async, rerun: 32) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280)=r5, 0x12) (async) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/time_for_children\x00') 18:24:50 executing program 3: bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:50 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/245, 0xf5}, 0x0) close(r1) (async) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) openat$cgroup(r2, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup(r2, &(0x7f0000001640)='syz0\x00', 0x200002, 0x0) r4 = perf_event_open$cgroup(&(0x7f00000015c0)={0x3, 0x80, 0xff, 0x80, 0x20, 0x8, 0x0, 0x0, 0x14000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x4, @perf_bp={&(0x7f0000001580), 0x9}, 0x3001, 0x8000000000000001, 0x8, 0x2, 0x40, 0x800, 0x5, 0x0, 0x5, 0x0, 0x6}, r3, 0x0, 0xffffffffffffffff, 0x11) bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=@base={0x0, 0xdfe, 0xca2, 0x3, 0x1000, r4, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x5}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) 18:24:50 executing program 2: socketpair(0x0, 0x800, 0x37e, &(0x7f0000000040)) 18:24:50 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup(r1, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r2, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r2, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r3, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r3}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r3}, 0x8) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r5 = openat$cgroup(r4, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r5, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r6 = openat$cgroup_ro(r5, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r6, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r6}, 0x20) r7 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r6}, 0x8) recvmsg$unix(r7, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x0, 0x7, &(0x7f0000000000)=@raw=[@ldst={0x1, 0x2, 0x1, 0x2, 0x8, 0xfffffffffffffff0, 0x4}, @map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x5}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffb}], &(0x7f0000001540)='syzkaller\x00', 0xfffffffe, 0x54, &(0x7f0000001580)=""/84, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001600)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000001640)={0x1, 0x6, 0x9, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000001680)=[0x1, r0, 0x1], &(0x7f00000016c0)=[{0x5, 0x4, 0x6, 0x9}, {0x3, 0x1, 0x7, 0xb}, {0x2, 0x4, 0xc, 0x4}, {0x5, 0x3, 0xc, 0xb}, {0x0, 0x3, 0xf, 0x6}], 0x10, 0x9c8}, 0x90) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001800)={r3, r7, 0x0, r8}, 0x10) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0xffffffffffffffe0, &(0x7f0000001440)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/192, 0xc0}], 0x7, &(0x7f00000014c0)=""/15, 0xf}, 0x0) 18:24:50 executing program 5: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 38) 18:24:50 executing program 3: bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:50 executing program 2: socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/92, 0x5c}, {&(0x7f0000000a00)=""/227, 0xe3}, {&(0x7f0000000b00)=""/14, 0xe}, {&(0x7f0000000b40)=""/9, 0x9}, {&(0x7f0000000b80)=""/71, 0x47}, {&(0x7f0000000c00)=""/201, 0xc9}], 0x6}, 0x40000000) socketpair$tipc(0x1e, 0x8, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000940)={&(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000700)="ba566684897ce3b27d2c6c8fb66edc7fe8217d1a880d66c96ed51924398eb8d1e45d45df3349320c82d5350ebe664e9ffe2c62714b9c5ea9de02eeec7c84a72ddf920c9518039067d423c662e855d71aef7f84f35cba90504e3cb0566662b902a7846927897a05a7504fa6771559a6f64db1e296fd1604047e01a642278a21a094844564c2cae18b5fa63316", 0x8c}, {&(0x7f00000007c0)="0aeaef8f8d03ba1e6472f4dec4fcd22de4caaeb5015e1c071ee4b7bbd6d7dd69670a3937cdcb13d9b59eea731d7c3b2dd038499cb360f37e1273ac304be9ceec9e0cc25eb9615fd657569e4eeddacfa21e6eed1d273fc4387dbe6a78b85291aae28e44c5a7b1918dff2fef550c5028af928c1886f7e0f01aed905df0492fe5f8aae62eb6977a247e9940c6802be14661b059941b52789a5c641f78aa1d09e8e9760ff975dcf565b081fc0b67b7c6adf96a2cd792625f524efba9f564bc41ba93b75dfccb4d37cbcb53f1", 0xca}, {&(0x7f00000008c0)="6165cfe292d12b4939ed8b1fc093fe4edfdaede6a69bea0a612e3a3451faeffb186523874fa5c59306f1c3552df1366ecc3548868ff43d19615a383fb02583184933e99221210a6fc4c368625945719b8dcc4ffdfbedab9c44a3827123ce89ed1f2237e30599efec603ef29eabb2faf6576eb4fadeb0b91a576bc38954", 0x7d}], 0x3, &(0x7f0000000500)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x38}, 0x40000) sendmsg$inet(r1, &(0x7f0000000540)={&(0x7f0000000580)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000680)="44dbddff8c0932cd4a6b854c71eec6e6efb986364dbf5817963b7072c362d124cd2ee3b9c55358002adab775fe4bfcc4cde344918bbad6688024bb6bbf6d456a2f16387466fc064a6749a152c6c26d5efcbb3327c080216634900529cb9d0ab37ac299b2ef964a1cc0759ad202970bc819", 0x71}, {&(0x7f0000000100)="c7748f93ebdb6af83bf6d73ce3cf243608de1d6d8f5b04376b8edfbbe7f62965bd5589c7ebf653d0806e3da519f5d3cec5ae4ae4b109daf653f310fb0b246c549830ba405a14617007", 0x49}, {&(0x7f0000000180)="f4588a4ff634e0a3cae30589e63d71c9b04d36182d6c48c0bab3130ca284ad64db6c68ab4ae196d3f9175af8b57d4243029b10442220a43740f3abadf2e137d595f459dba1661bea0b6f330df2c998495538dd0036f8a36e0275d4357cb6adaa4191639bfafbafbf3d98d4b7f0bfa76237661c7773f337f8270c478d6ae31c0026d39e70c1ea82e5b73b643efc356a896730e45749027109908f51011e8d337650ad7c87fabb5329ca15490343144958b0a351b73ed39dc3e7a7873cb2330dbed4370d5372198c9d6a88122ecc478c9b2daa7e9152e7090cd3b5701db94485d7b5299ab46d10694561b6319ec9697754b6ec16349f", 0xf5}, {&(0x7f0000000280)="3fd893df4eab453667503b41feb568e2e797b7de026f160539db4720389d46a8e077f02f5e592fa1ebcda9f867c1a68b641e11ad50334b091938eceeb532b0c57947bb1d1f212d1c355e2f92cf66c5a29c0b71a4a7ecb86cbb41da5a90a0f7ba83eaa5f0322ab45303", 0x69}, {&(0x7f0000000300)="62e9e5a18d42285dabf3384407476270929f3cb02f1607e7ad1cb737ec524c3d808e9cf187c510e5df6285ebdde40cded9e8714e95c28a067edaa7ae65452f71617bd0bc7415dcc2f0e4742330d7e4ca4653d3ea653a880d6615381787935c160a96d3c79d9e1c8588aff8dba119c8980d49820cc226f3d19c11b2bcb1651fe48e59327156740736e026a38292e8505b358f779ed666e0fc3bd41cf216509e05cbea6309dfd9aa967659745f30f69a02b68d4853be5290f3d4daacfad45d124ffe56", 0xc2}, {&(0x7f0000000400)="e4ae5bbd", 0x4}, {&(0x7f0000000440)="971532664ef0899182b7ef921c8dd965ffed06b19d0016", 0x17}], 0x7, &(0x7f00000005c0)=[@ip_retopts={{0x90, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x44, 0x24, 0x3, 0x4, [{@loopback, 0xdae}, {@remote, 0x100}, {@broadcast, 0x8}, {@loopback, 0x38}, {@multicast2, 0x43b5202d}, {@loopback, 0x7}, {@remote, 0x5}, {@remote, 0x800}]}, @timestamp_addr={0x44, 0x14, 0xc5, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x101}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x1c, 0x91, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x3d}, 0xff}, {@private=0xa010100, 0x1}, {@dev={0xac, 0x14, 0x14, 0xa}, 0x3}]}, @generic={0x7, 0x6, "0d1b422b"}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0xa8}, 0x4044004) [ 2483.519556][T32466] FAULT_INJECTION: forcing a failure. [ 2483.519556][T32466] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2483.559103][T32466] CPU: 0 PID: 32466 Comm: syz-executor.5 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 18:24:50 executing program 2: socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/92, 0x5c}, {&(0x7f0000000a00)=""/227, 0xe3}, {&(0x7f0000000b00)=""/14, 0xe}, {&(0x7f0000000b40)=""/9, 0x9}, {&(0x7f0000000b80)=""/71, 0x47}, {&(0x7f0000000c00)=""/201, 0xc9}], 0x6}, 0x40000000) socketpair$tipc(0x1e, 0x8, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000940)={&(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000700)="ba566684897ce3b27d2c6c8fb66edc7fe8217d1a880d66c96ed51924398eb8d1e45d45df3349320c82d5350ebe664e9ffe2c62714b9c5ea9de02eeec7c84a72ddf920c9518039067d423c662e855d71aef7f84f35cba90504e3cb0566662b902a7846927897a05a7504fa6771559a6f64db1e296fd1604047e01a642278a21a094844564c2cae18b5fa63316", 0x8c}, {&(0x7f00000007c0)="0aeaef8f8d03ba1e6472f4dec4fcd22de4caaeb5015e1c071ee4b7bbd6d7dd69670a3937cdcb13d9b59eea731d7c3b2dd038499cb360f37e1273ac304be9ceec9e0cc25eb9615fd657569e4eeddacfa21e6eed1d273fc4387dbe6a78b85291aae28e44c5a7b1918dff2fef550c5028af928c1886f7e0f01aed905df0492fe5f8aae62eb6977a247e9940c6802be14661b059941b52789a5c641f78aa1d09e8e9760ff975dcf565b081fc0b67b7c6adf96a2cd792625f524efba9f564bc41ba93b75dfccb4d37cbcb53f1", 0xca}, {&(0x7f00000008c0)="6165cfe292d12b4939ed8b1fc093fe4edfdaede6a69bea0a612e3a3451faeffb186523874fa5c59306f1c3552df1366ecc3548868ff43d19615a383fb02583184933e99221210a6fc4c368625945719b8dcc4ffdfbedab9c44a3827123ce89ed1f2237e30599efec603ef29eabb2faf6576eb4fadeb0b91a576bc38954", 0x7d}], 0x3, &(0x7f0000000500)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x38}, 0x40000) (async) sendmsg$inet(r1, &(0x7f0000000540)={&(0x7f0000000580)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000680)="44dbddff8c0932cd4a6b854c71eec6e6efb986364dbf5817963b7072c362d124cd2ee3b9c55358002adab775fe4bfcc4cde344918bbad6688024bb6bbf6d456a2f16387466fc064a6749a152c6c26d5efcbb3327c080216634900529cb9d0ab37ac299b2ef964a1cc0759ad202970bc819", 0x71}, {&(0x7f0000000100)="c7748f93ebdb6af83bf6d73ce3cf243608de1d6d8f5b04376b8edfbbe7f62965bd5589c7ebf653d0806e3da519f5d3cec5ae4ae4b109daf653f310fb0b246c549830ba405a14617007", 0x49}, {&(0x7f0000000180)="f4588a4ff634e0a3cae30589e63d71c9b04d36182d6c48c0bab3130ca284ad64db6c68ab4ae196d3f9175af8b57d4243029b10442220a43740f3abadf2e137d595f459dba1661bea0b6f330df2c998495538dd0036f8a36e0275d4357cb6adaa4191639bfafbafbf3d98d4b7f0bfa76237661c7773f337f8270c478d6ae31c0026d39e70c1ea82e5b73b643efc356a896730e45749027109908f51011e8d337650ad7c87fabb5329ca15490343144958b0a351b73ed39dc3e7a7873cb2330dbed4370d5372198c9d6a88122ecc478c9b2daa7e9152e7090cd3b5701db94485d7b5299ab46d10694561b6319ec9697754b6ec16349f", 0xf5}, {&(0x7f0000000280)="3fd893df4eab453667503b41feb568e2e797b7de026f160539db4720389d46a8e077f02f5e592fa1ebcda9f867c1a68b641e11ad50334b091938eceeb532b0c57947bb1d1f212d1c355e2f92cf66c5a29c0b71a4a7ecb86cbb41da5a90a0f7ba83eaa5f0322ab45303", 0x69}, {&(0x7f0000000300)="62e9e5a18d42285dabf3384407476270929f3cb02f1607e7ad1cb737ec524c3d808e9cf187c510e5df6285ebdde40cded9e8714e95c28a067edaa7ae65452f71617bd0bc7415dcc2f0e4742330d7e4ca4653d3ea653a880d6615381787935c160a96d3c79d9e1c8588aff8dba119c8980d49820cc226f3d19c11b2bcb1651fe48e59327156740736e026a38292e8505b358f779ed666e0fc3bd41cf216509e05cbea6309dfd9aa967659745f30f69a02b68d4853be5290f3d4daacfad45d124ffe56", 0xc2}, {&(0x7f0000000400)="e4ae5bbd", 0x4}, {&(0x7f0000000440)="971532664ef0899182b7ef921c8dd965ffed06b19d0016", 0x17}], 0x7, &(0x7f00000005c0)=[@ip_retopts={{0x90, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x44, 0x24, 0x3, 0x4, [{@loopback, 0xdae}, {@remote, 0x100}, {@broadcast, 0x8}, {@loopback, 0x38}, {@multicast2, 0x43b5202d}, {@loopback, 0x7}, {@remote, 0x5}, {@remote, 0x800}]}, @timestamp_addr={0x44, 0x14, 0xc5, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x101}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x1c, 0x91, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x3d}, 0xff}, {@private=0xa010100, 0x1}, {@dev={0xac, 0x14, 0x14, 0xa}, 0x3}]}, @generic={0x7, 0x6, "0d1b422b"}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0xa8}, 0x4044004) 18:24:50 executing program 2: socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/92, 0x5c}, {&(0x7f0000000a00)=""/227, 0xe3}, {&(0x7f0000000b00)=""/14, 0xe}, {&(0x7f0000000b40)=""/9, 0x9}, {&(0x7f0000000b80)=""/71, 0x47}, {&(0x7f0000000c00)=""/201, 0xc9}], 0x6}, 0x40000000) socketpair$tipc(0x1e, 0x8, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000940)={&(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000700)="ba566684897ce3b27d2c6c8fb66edc7fe8217d1a880d66c96ed51924398eb8d1e45d45df3349320c82d5350ebe664e9ffe2c62714b9c5ea9de02eeec7c84a72ddf920c9518039067d423c662e855d71aef7f84f35cba90504e3cb0566662b902a7846927897a05a7504fa6771559a6f64db1e296fd1604047e01a642278a21a094844564c2cae18b5fa63316", 0x8c}, {&(0x7f00000007c0)="0aeaef8f8d03ba1e6472f4dec4fcd22de4caaeb5015e1c071ee4b7bbd6d7dd69670a3937cdcb13d9b59eea731d7c3b2dd038499cb360f37e1273ac304be9ceec9e0cc25eb9615fd657569e4eeddacfa21e6eed1d273fc4387dbe6a78b85291aae28e44c5a7b1918dff2fef550c5028af928c1886f7e0f01aed905df0492fe5f8aae62eb6977a247e9940c6802be14661b059941b52789a5c641f78aa1d09e8e9760ff975dcf565b081fc0b67b7c6adf96a2cd792625f524efba9f564bc41ba93b75dfccb4d37cbcb53f1", 0xca}, {&(0x7f00000008c0)="6165cfe292d12b4939ed8b1fc093fe4edfdaede6a69bea0a612e3a3451faeffb186523874fa5c59306f1c3552df1366ecc3548868ff43d19615a383fb02583184933e99221210a6fc4c368625945719b8dcc4ffdfbedab9c44a3827123ce89ed1f2237e30599efec603ef29eabb2faf6576eb4fadeb0b91a576bc38954", 0x7d}], 0x3, &(0x7f0000000500)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x38}, 0x40000) sendmsg$inet(r1, &(0x7f0000000540)={&(0x7f0000000580)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000680)="44dbddff8c0932cd4a6b854c71eec6e6efb986364dbf5817963b7072c362d124cd2ee3b9c55358002adab775fe4bfcc4cde344918bbad6688024bb6bbf6d456a2f16387466fc064a6749a152c6c26d5efcbb3327c080216634900529cb9d0ab37ac299b2ef964a1cc0759ad202970bc819", 0x71}, {&(0x7f0000000100)="c7748f93ebdb6af83bf6d73ce3cf243608de1d6d8f5b04376b8edfbbe7f62965bd5589c7ebf653d0806e3da519f5d3cec5ae4ae4b109daf653f310fb0b246c549830ba405a14617007", 0x49}, {&(0x7f0000000180)="f4588a4ff634e0a3cae30589e63d71c9b04d36182d6c48c0bab3130ca284ad64db6c68ab4ae196d3f9175af8b57d4243029b10442220a43740f3abadf2e137d595f459dba1661bea0b6f330df2c998495538dd0036f8a36e0275d4357cb6adaa4191639bfafbafbf3d98d4b7f0bfa76237661c7773f337f8270c478d6ae31c0026d39e70c1ea82e5b73b643efc356a896730e45749027109908f51011e8d337650ad7c87fabb5329ca15490343144958b0a351b73ed39dc3e7a7873cb2330dbed4370d5372198c9d6a88122ecc478c9b2daa7e9152e7090cd3b5701db94485d7b5299ab46d10694561b6319ec9697754b6ec16349f", 0xf5}, {&(0x7f0000000280)="3fd893df4eab453667503b41feb568e2e797b7de026f160539db4720389d46a8e077f02f5e592fa1ebcda9f867c1a68b641e11ad50334b091938eceeb532b0c57947bb1d1f212d1c355e2f92cf66c5a29c0b71a4a7ecb86cbb41da5a90a0f7ba83eaa5f0322ab45303", 0x69}, {&(0x7f0000000300)="62e9e5a18d42285dabf3384407476270929f3cb02f1607e7ad1cb737ec524c3d808e9cf187c510e5df6285ebdde40cded9e8714e95c28a067edaa7ae65452f71617bd0bc7415dcc2f0e4742330d7e4ca4653d3ea653a880d6615381787935c160a96d3c79d9e1c8588aff8dba119c8980d49820cc226f3d19c11b2bcb1651fe48e59327156740736e026a38292e8505b358f779ed666e0fc3bd41cf216509e05cbea6309dfd9aa967659745f30f69a02b68d4853be5290f3d4daacfad45d124ffe56", 0xc2}, {&(0x7f0000000400)="e4ae5bbd", 0x4}, {&(0x7f0000000440)="971532664ef0899182b7ef921c8dd965ffed06b19d0016", 0x17}], 0x7, &(0x7f00000005c0)=[@ip_retopts={{0x90, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x44, 0x24, 0x3, 0x4, [{@loopback, 0xdae}, {@remote, 0x100}, {@broadcast, 0x8}, {@loopback, 0x38}, {@multicast2, 0x43b5202d}, {@loopback, 0x7}, {@remote, 0x5}, {@remote, 0x800}]}, @timestamp_addr={0x44, 0x14, 0xc5, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x101}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x1c, 0x91, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x3d}, 0xff}, {@private=0xa010100, 0x1}, {@dev={0xac, 0x14, 0x14, 0xa}, 0x3}]}, @generic={0x7, 0x6, "0d1b422b"}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0xa8}, 0x4044004) socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) (async) recvmsg(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/92, 0x5c}, {&(0x7f0000000a00)=""/227, 0xe3}, {&(0x7f0000000b00)=""/14, 0xe}, {&(0x7f0000000b40)=""/9, 0x9}, {&(0x7f0000000b80)=""/71, 0x47}, {&(0x7f0000000c00)=""/201, 0xc9}], 0x6}, 0x40000000) (async) socketpair$tipc(0x1e, 0x8, 0x0, &(0x7f0000000000)) (async) sendmsg$inet(r2, &(0x7f0000000940)={&(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000700)="ba566684897ce3b27d2c6c8fb66edc7fe8217d1a880d66c96ed51924398eb8d1e45d45df3349320c82d5350ebe664e9ffe2c62714b9c5ea9de02eeec7c84a72ddf920c9518039067d423c662e855d71aef7f84f35cba90504e3cb0566662b902a7846927897a05a7504fa6771559a6f64db1e296fd1604047e01a642278a21a094844564c2cae18b5fa63316", 0x8c}, {&(0x7f00000007c0)="0aeaef8f8d03ba1e6472f4dec4fcd22de4caaeb5015e1c071ee4b7bbd6d7dd69670a3937cdcb13d9b59eea731d7c3b2dd038499cb360f37e1273ac304be9ceec9e0cc25eb9615fd657569e4eeddacfa21e6eed1d273fc4387dbe6a78b85291aae28e44c5a7b1918dff2fef550c5028af928c1886f7e0f01aed905df0492fe5f8aae62eb6977a247e9940c6802be14661b059941b52789a5c641f78aa1d09e8e9760ff975dcf565b081fc0b67b7c6adf96a2cd792625f524efba9f564bc41ba93b75dfccb4d37cbcb53f1", 0xca}, {&(0x7f00000008c0)="6165cfe292d12b4939ed8b1fc093fe4edfdaede6a69bea0a612e3a3451faeffb186523874fa5c59306f1c3552df1366ecc3548868ff43d19615a383fb02583184933e99221210a6fc4c368625945719b8dcc4ffdfbedab9c44a3827123ce89ed1f2237e30599efec603ef29eabb2faf6576eb4fadeb0b91a576bc38954", 0x7d}], 0x3, &(0x7f0000000500)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x38}, 0x40000) (async) sendmsg$inet(r1, &(0x7f0000000540)={&(0x7f0000000580)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000680)="44dbddff8c0932cd4a6b854c71eec6e6efb986364dbf5817963b7072c362d124cd2ee3b9c55358002adab775fe4bfcc4cde344918bbad6688024bb6bbf6d456a2f16387466fc064a6749a152c6c26d5efcbb3327c080216634900529cb9d0ab37ac299b2ef964a1cc0759ad202970bc819", 0x71}, {&(0x7f0000000100)="c7748f93ebdb6af83bf6d73ce3cf243608de1d6d8f5b04376b8edfbbe7f62965bd5589c7ebf653d0806e3da519f5d3cec5ae4ae4b109daf653f310fb0b246c549830ba405a14617007", 0x49}, {&(0x7f0000000180)="f4588a4ff634e0a3cae30589e63d71c9b04d36182d6c48c0bab3130ca284ad64db6c68ab4ae196d3f9175af8b57d4243029b10442220a43740f3abadf2e137d595f459dba1661bea0b6f330df2c998495538dd0036f8a36e0275d4357cb6adaa4191639bfafbafbf3d98d4b7f0bfa76237661c7773f337f8270c478d6ae31c0026d39e70c1ea82e5b73b643efc356a896730e45749027109908f51011e8d337650ad7c87fabb5329ca15490343144958b0a351b73ed39dc3e7a7873cb2330dbed4370d5372198c9d6a88122ecc478c9b2daa7e9152e7090cd3b5701db94485d7b5299ab46d10694561b6319ec9697754b6ec16349f", 0xf5}, {&(0x7f0000000280)="3fd893df4eab453667503b41feb568e2e797b7de026f160539db4720389d46a8e077f02f5e592fa1ebcda9f867c1a68b641e11ad50334b091938eceeb532b0c57947bb1d1f212d1c355e2f92cf66c5a29c0b71a4a7ecb86cbb41da5a90a0f7ba83eaa5f0322ab45303", 0x69}, {&(0x7f0000000300)="62e9e5a18d42285dabf3384407476270929f3cb02f1607e7ad1cb737ec524c3d808e9cf187c510e5df6285ebdde40cded9e8714e95c28a067edaa7ae65452f71617bd0bc7415dcc2f0e4742330d7e4ca4653d3ea653a880d6615381787935c160a96d3c79d9e1c8588aff8dba119c8980d49820cc226f3d19c11b2bcb1651fe48e59327156740736e026a38292e8505b358f779ed666e0fc3bd41cf216509e05cbea6309dfd9aa967659745f30f69a02b68d4853be5290f3d4daacfad45d124ffe56", 0xc2}, {&(0x7f0000000400)="e4ae5bbd", 0x4}, {&(0x7f0000000440)="971532664ef0899182b7ef921c8dd965ffed06b19d0016", 0x17}], 0x7, &(0x7f00000005c0)=[@ip_retopts={{0x90, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x44, 0x24, 0x3, 0x4, [{@loopback, 0xdae}, {@remote, 0x100}, {@broadcast, 0x8}, {@loopback, 0x38}, {@multicast2, 0x43b5202d}, {@loopback, 0x7}, {@remote, 0x5}, {@remote, 0x800}]}, @timestamp_addr={0x44, 0x14, 0xc5, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x101}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x1c, 0x91, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x3d}, 0xff}, {@private=0xa010100, 0x1}, {@dev={0xac, 0x14, 0x14, 0xa}, 0x3}]}, @generic={0x7, 0x6, "0d1b422b"}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0xa8}, 0x4044004) (async) [ 2483.569277][T32466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2483.579350][T32466] Call Trace: [ 2483.582570][T32466] [ 2483.585347][T32466] dump_stack_lvl+0x151/0x1b7 [ 2483.589858][T32466] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2483.595332][T32466] dump_stack+0x15/0x17 [ 2483.599318][T32466] should_fail+0x3c6/0x510 [ 2483.603575][T32466] should_fail_alloc_page+0x5a/0x80 [ 2483.608607][T32466] prepare_alloc_pages+0x15c/0x700 [ 2483.613816][T32466] ? __alloc_pages_bulk+0xe60/0xe60 18:24:50 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup(r1, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r2, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r2, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r3, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r3}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r3}, 0x8) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r5 = openat$cgroup(r4, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r5, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r6 = openat$cgroup_ro(r5, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r6, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r6}, 0x20) r7 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r6}, 0x8) recvmsg$unix(r7, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x0, 0x7, &(0x7f0000000000)=@raw=[@ldst={0x1, 0x2, 0x1, 0x2, 0x8, 0xfffffffffffffff0, 0x4}, @map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x5}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffb}], &(0x7f0000001540)='syzkaller\x00', 0xfffffffe, 0x54, &(0x7f0000001580)=""/84, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001600)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000001640)={0x1, 0x6, 0x9, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000001680)=[0x1, r0, 0x1], &(0x7f00000016c0)=[{0x5, 0x4, 0x6, 0x9}, {0x3, 0x1, 0x7, 0xb}, {0x2, 0x4, 0xc, 0x4}, {0x5, 0x3, 0xc, 0xb}, {0x0, 0x3, 0xf, 0x6}], 0x10, 0x9c8}, 0x90) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001800)={r3, r7, 0x0, r8}, 0x10) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0xffffffffffffffe0, &(0x7f0000001440)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/192, 0xc0}], 0x7, &(0x7f00000014c0)=""/15, 0xf}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) (async) openat$cgroup(r1, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) (async) openat$cgroup_pressure(r2, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) (async) openat$cgroup_ro(r2, 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r3, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r3}, 0x20) (async) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r3}, 0x8) (async) openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) (async) openat$cgroup(r4, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) (async) openat$cgroup_pressure(r5, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) (async) openat$cgroup_ro(r5, 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r6, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r6}, 0x20) (async) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r6}, 0x8) (async) recvmsg$unix(r7, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x0, 0x7, &(0x7f0000000000)=@raw=[@ldst={0x1, 0x2, 0x1, 0x2, 0x8, 0xfffffffffffffff0, 0x4}, @map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x5}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffb}], &(0x7f0000001540)='syzkaller\x00', 0xfffffffe, 0x54, &(0x7f0000001580)=""/84, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001600)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000001640)={0x1, 0x6, 0x9, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000001680)=[0x1, r0, 0x1], &(0x7f00000016c0)=[{0x5, 0x4, 0x6, 0x9}, {0x3, 0x1, 0x7, 0xb}, {0x2, 0x4, 0xc, 0x4}, {0x5, 0x3, 0xc, 0xb}, {0x0, 0x3, 0xf, 0x6}], 0x10, 0x9c8}, 0x90) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001800)={r3, r7, 0x0, r8}, 0x10) (async) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0xffffffffffffffe0, &(0x7f0000001440)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/192, 0xc0}], 0x7, &(0x7f00000014c0)=""/15, 0xf}, 0x0) (async) 18:24:50 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000080)) socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) [ 2483.618851][T32466] __alloc_pages+0x138/0x5e0 [ 2483.623276][T32466] ? prep_new_page+0x110/0x110 [ 2483.627876][T32466] ? __alloc_pages+0x206/0x5e0 [ 2483.632473][T32466] ? stack_trace_save+0x1c0/0x1c0 [ 2483.637342][T32466] ? __kasan_check_write+0x14/0x20 [ 2483.642286][T32466] ? _raw_spin_lock+0xa4/0x1b0 [ 2483.646894][T32466] __pmd_alloc+0xb1/0x550 [ 2483.651051][T32466] ? __pud_alloc+0x260/0x260 [ 2483.655475][T32466] ? __pud_alloc+0x213/0x260 [ 2483.659906][T32466] ? do_handle_mm_fault+0x2330/0x2330 [ 2483.665107][T32466] ? __stack_depot_save+0x34/0x470 [ 2483.670054][T32466] ? anon_vma_clone+0x9a/0x500 [ 2483.674659][T32466] copy_page_range+0x2b3d/0x2f90 [ 2483.679430][T32466] ? __kasan_slab_alloc+0xb1/0xe0 [ 2483.684460][T32466] ? slab_post_alloc_hook+0x53/0x2c0 [ 2483.689587][T32466] ? copy_mm+0xa3a/0x13e0 [ 2483.693751][T32466] ? copy_process+0x12bc/0x3260 [ 2483.698434][T32466] ? kernel_clone+0x21e/0x9e0 [ 2483.702948][T32466] ? do_syscall_64+0x3d/0xb0 [ 2483.707374][T32466] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2483.713290][T32466] ? pfn_valid+0x1e0/0x1e0 [ 2483.717536][T32466] ? rwsem_write_trylock+0x15b/0x290 [ 2483.722651][T32466] ? vma_interval_tree_augment_rotate+0x1d0/0x1d0 [ 2483.728901][T32466] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 2483.734455][T32466] ? __rb_insert_augmented+0x5de/0x610 [ 2483.739753][T32466] copy_mm+0xc7e/0x13e0 [ 2483.743749][T32466] ? copy_signal+0x610/0x610 [ 2483.748167][T32466] ? __init_rwsem+0xd6/0x1c0 [ 2483.752596][T32466] ? copy_signal+0x4e3/0x610 [ 2483.757023][T32466] copy_process+0x12bc/0x3260 [ 2483.761535][T32466] ? proc_fail_nth_write+0x20b/0x290 [ 2483.766657][T32466] ? fsnotify_perm+0x6a/0x5d0 [ 2483.771187][T32466] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2483.776139][T32466] ? vfs_write+0x9ec/0x1110 [ 2483.780459][T32466] kernel_clone+0x21e/0x9e0 [ 2483.785054][T32466] ? file_end_write+0x1c0/0x1c0 [ 2483.789743][T32466] ? create_io_thread+0x1e0/0x1e0 [ 2483.794606][T32466] ? mutex_unlock+0xb2/0x260 [ 2483.799030][T32466] ? __mutex_lock_slowpath+0x10/0x10 [ 2483.804329][T32466] __x64_sys_clone+0x23f/0x290 [ 2483.808923][T32466] ? __do_sys_vfork+0x130/0x130 [ 2483.813608][T32466] ? ksys_write+0x260/0x2c0 [ 2483.818038][T32466] ? debug_smp_processor_id+0x17/0x20 [ 2483.823249][T32466] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2483.829145][T32466] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2483.834621][T32466] do_syscall_64+0x3d/0xb0 [ 2483.838867][T32466] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2483.844603][T32466] RIP: 0033:0x7fdfd1d08ae9 [ 2483.848846][T32466] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2483.868294][T32466] RSP: 002b:00007fdfd0a8b078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2483.876539][T32466] RAX: ffffffffffffffda RBX: 00007fdfd1e27f80 RCX: 00007fdfd1d08ae9 [ 2483.884348][T32466] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022001200 [ 2483.892157][T32466] RBP: 00007fdfd0a8b120 R08: 0000000000000000 R09: 0000000000000000 [ 2483.900145][T32466] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2483.907960][T32466] R13: 000000000000000b R14: 00007fdfd1e27f80 R15: 00007fff62717c48 [ 2483.915768][T32466] 18:24:51 executing program 1: syz_clone(0x1f0d9080, 0x0, 0xfffffea0, 0x0, 0x0, 0x0) gettid() (async) r0 = getpid() syz_open_procfs$namespace(r0, 0x0) (async) r1 = getpid() (async) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) openat$cgroup(r2, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup(r2, &(0x7f0000001640)='syz0\x00', 0x200002, 0x0) r4 = perf_event_open$cgroup(&(0x7f00000015c0)={0x3, 0x80, 0xff, 0x80, 0x20, 0x8, 0x0, 0x0, 0x14000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x4, @perf_bp={&(0x7f0000001580), 0x9}, 0x3001, 0x8000000000000001, 0x8, 0x2, 0x40, 0x800, 0x5, 0x0, 0x5, 0x0, 0x6}, r3, 0x0, 0xffffffffffffffff, 0x11) bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=@base={0x0, 0xdfe, 0xca2, 0x3, 0x1000, r4, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x5}, 0x48) (async) perf_event_open(&(0x7f00000006c0)={0x3, 0x80, 0xe1, 0x41, 0x7, 0x0, 0x0, 0x7fff, 0x10002, 0x6, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000680), 0x2}, 0x80010, 0x6eb, 0x5, 0x0, 0x3c, 0x6, 0xa61e, 0x0, 0x6}, 0xffffffffffffffff, 0x5, r4, 0x9) (async) syz_open_procfs$namespace(r1, 0x0) (async) syz_open_procfs$namespace(r1, &(0x7f0000000500)='ns/user\x00') (async) r5 = syz_clone(0x6000, &(0x7f0000000040)="aefa6173ad616ed82357a961dace2a259bbe121ed4fb5fb1feed6bbc91571ff2c26f1e9f32ae3bbed38e9ee3ea93aae2b6b1fca7f1614bac115ff5efbd03f4aacbd98e9d3a74dce1b56013c310131ab2ddd28b392e5f7cce9f0fa34c4a6f9ac1539067edc539bfaa8392927f065fbe8505f00b578625e2d4202a2e1691f55d818d3df7c47c5d85526ad5dc56b0a37d61246586923342b594f411b7c0e3291229bf41465767ad6d655b3fe50a271154654f4f111fc9dbde5da2424b6b24c081b4ae689b15b5d9f476f52782c0ce802f5a7a252cd6d464a678514989c736ac9db52bf7fe3ac99dc22f59e9", 0xea, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="2ae060139ad38790106db7dff003cb8729a75976856da2da375cf91c6a7fd8c7dd2c5cd656399e332cfcbb6395bd7a379a01c19d386d16c5af77bfac2281c26ba01fa4e632905192b8c38196f185364a602ca9c88664978e119d2e0fbf361bcaceff8816d17545e190b6dee476c114645b3be9bd395ade10966290076967e0bb5401ce6c72165e6768bd") (async) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0x0, 0x3, 0x8}, 0xc) r7 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r8 = openat$cgroup(r7, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r8, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) perf_event_open(&(0x7f00000005c0)={0x4, 0x80, 0x8, 0x7f, 0x1, 0x6, 0x0, 0xb23f, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x450, 0x8000000000000001}, 0x1000, 0x6, 0x9, 0x3, 0x7fff, 0x1f, 0x4, 0x0, 0x7ff, 0x0, 0x401}, r5, 0x6, 0xffffffffffffffff, 0x9) (async) r9 = openat$cgroup_ro(r8, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r9, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r9}, 0x20) r10 = openat$cgroup_ro(r9, &(0x7f0000000540)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) openat$cgroup_int(r10, &(0x7f0000000580)='cpu.weight\x00', 0x2, 0x0) openat$cgroup_ro(r9, &(0x7f0000000640)='blkio.bfq.time\x00', 0x0, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r9}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x3, &(0x7f00000002c0)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @alu={0x4, 0x1, 0x3, 0x0, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffc}], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0xe, 0x80000001, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000400)=[0xffffffffffffffff, r6, r9], 0x0, 0x10, 0x80}, 0x90) (async) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280)=r5, 0x12) (async) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/time_for_children\x00') 18:24:51 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000080)) socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000080)) (async) socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) (async) 18:24:51 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup(r1, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r2, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r2, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r3, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r3}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r3}, 0x8) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r5 = openat$cgroup(r4, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r5, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r6 = openat$cgroup_ro(r5, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r6, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r6}, 0x20) r7 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r6}, 0x8) recvmsg$unix(r7, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x0, 0x7, &(0x7f0000000000)=@raw=[@ldst={0x1, 0x2, 0x1, 0x2, 0x8, 0xfffffffffffffff0, 0x4}, @map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x5}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffb}], &(0x7f0000001540)='syzkaller\x00', 0xfffffffe, 0x54, &(0x7f0000001580)=""/84, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001600)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000001640)={0x1, 0x6, 0x9, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000001680)=[0x1, r0, 0x1], &(0x7f00000016c0)=[{0x5, 0x4, 0x6, 0x9}, {0x3, 0x1, 0x7, 0xb}, {0x2, 0x4, 0xc, 0x4}, {0x5, 0x3, 0xc, 0xb}, {0x0, 0x3, 0xf, 0x6}], 0x10, 0x9c8}, 0x90) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001800)={r3, r7, 0x0, r8}, 0x10) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0xffffffffffffffe0, &(0x7f0000001440)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/192, 0xc0}], 0x7, &(0x7f00000014c0)=""/15, 0xf}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) (async) openat$cgroup(r1, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) (async) openat$cgroup_pressure(r2, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) (async) openat$cgroup_ro(r2, 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r3, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r3}, 0x20) (async) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r3}, 0x8) (async) openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) (async) openat$cgroup(r4, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) (async) openat$cgroup_pressure(r5, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) (async) openat$cgroup_ro(r5, 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r6, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r6}, 0x20) (async) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r6}, 0x8) (async) recvmsg$unix(r7, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x0, 0x7, &(0x7f0000000000)=@raw=[@ldst={0x1, 0x2, 0x1, 0x2, 0x8, 0xfffffffffffffff0, 0x4}, @map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x5}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffb}], &(0x7f0000001540)='syzkaller\x00', 0xfffffffe, 0x54, &(0x7f0000001580)=""/84, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001600)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000001640)={0x1, 0x6, 0x9, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000001680)=[0x1, r0, 0x1], &(0x7f00000016c0)=[{0x5, 0x4, 0x6, 0x9}, {0x3, 0x1, 0x7, 0xb}, {0x2, 0x4, 0xc, 0x4}, {0x5, 0x3, 0xc, 0xb}, {0x0, 0x3, 0xf, 0x6}], 0x10, 0x9c8}, 0x90) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001800)={r3, r7, 0x0, r8}, 0x10) (async) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000040)=@nl=@unspec, 0xffffffffffffffe0, &(0x7f0000001440)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/192, 0xc0}], 0x7, &(0x7f00000014c0)=""/15, 0xf}, 0x0) (async) 18:24:51 executing program 5: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 39) 18:24:51 executing program 3: bpf$MAP_CREATE(0x800000000000000, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:51 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, 0x0, 0x0) recvmsg(r0, &(0x7f0000000ac0)={&(0x7f0000000880)=@can, 0x80, &(0x7f0000000180)=[{&(0x7f0000000900)=""/234, 0xea}], 0x1, &(0x7f0000000a00)=""/153, 0x99}, 0x2000) recvmsg(r2, &(0x7f0000000840)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000080)=""/30, 0x1e}, {&(0x7f0000000b00)=""/8, 0x8}, {&(0x7f00000001c0)=""/172, 0xac}, {&(0x7f00000003c0)=""/85, 0x55}, {&(0x7f0000000440)=""/26, 0x1a}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/23, 0x17}, {&(0x7f0000000580)=""/91, 0x5b}, {&(0x7f0000000600)=""/247, 0xf7}], 0x9, &(0x7f00000007c0)=""/116, 0x74}, 0x0) close(r1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000000)='+-+!{*^\xd3-\x00'}, 0x30) 18:24:51 executing program 3: bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:51 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000080)) socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) 18:24:51 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x11, 0x80000, 0x7fff, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000740)=@generic={&(0x7f0000000700)='./file0\x00', 0x0, 0x10}, 0x18) recvmsg(r1, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000001440), 0x0, &(0x7f0000000100)=""/17, 0x11}, 0x10001) recvmsg(r0, &(0x7f00000006c0)={&(0x7f00000001c0)=@nfc, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000240)=""/248, 0xf8}, {&(0x7f0000000340)=""/222, 0xde}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/205, 0xcd}], 0x4, &(0x7f0000000600)=""/165, 0xa5}, 0x41) gettid() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000780)) [ 2484.237156][T32619] FAULT_INJECTION: forcing a failure. [ 2484.237156][T32619] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2484.263924][T32619] CPU: 0 PID: 32619 Comm: syz-executor.5 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2484.274095][T32619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2484.283994][T32619] Call Trace: 18:24:51 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x11, 0x80000, 0x7fff, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000740)=@generic={&(0x7f0000000700)='./file0\x00', 0x0, 0x10}, 0x18) recvmsg(r1, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000001440), 0x0, &(0x7f0000000100)=""/17, 0x11}, 0x10001) recvmsg(r0, &(0x7f00000006c0)={&(0x7f00000001c0)=@nfc, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000240)=""/248, 0xf8}, {&(0x7f0000000340)=""/222, 0xde}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/205, 0xcd}], 0x4, &(0x7f0000000600)=""/165, 0xa5}, 0x41) gettid() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000780)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) socketpair(0x11, 0x80000, 0x7fff, &(0x7f0000000000)) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000740)=@generic={&(0x7f0000000700)='./file0\x00', 0x0, 0x10}, 0x18) (async) recvmsg(r1, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000001440), 0x0, &(0x7f0000000100)=""/17, 0x11}, 0x10001) (async) recvmsg(r0, &(0x7f00000006c0)={&(0x7f00000001c0)=@nfc, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000240)=""/248, 0xf8}, {&(0x7f0000000340)=""/222, 0xde}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/205, 0xcd}], 0x4, &(0x7f0000000600)=""/165, 0xa5}, 0x41) (async) gettid() (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000780)) (async) [ 2484.287113][T32619] [ 2484.289892][T32619] dump_stack_lvl+0x151/0x1b7 [ 2484.294408][T32619] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2484.299873][T32619] dump_stack+0x15/0x17 [ 2484.303863][T32619] should_fail+0x3c6/0x510 [ 2484.308114][T32619] should_fail_alloc_page+0x5a/0x80 [ 2484.313162][T32619] prepare_alloc_pages+0x15c/0x700 [ 2484.318100][T32619] ? __alloc_pages+0x5e0/0x5e0 [ 2484.322698][T32619] ? __alloc_pages_bulk+0xe60/0xe60 [ 2484.327731][T32619] __alloc_pages+0x138/0x5e0 [ 2484.332158][T32619] ? prep_new_page+0x110/0x110 18:24:51 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socketpair(0x11, 0x80000, 0x7fff, &(0x7f0000000000)) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000740)=@generic={&(0x7f0000000700)='./file0\x00', 0x0, 0x10}, 0x18) recvmsg(r1, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000001440), 0x0, &(0x7f0000000100)=""/17, 0x11}, 0x10001) (async) recvmsg(r0, &(0x7f00000006c0)={&(0x7f00000001c0)=@nfc, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000240)=""/248, 0xf8}, {&(0x7f0000000340)=""/222, 0xde}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/205, 0xcd}], 0x4, &(0x7f0000000600)=""/165, 0xa5}, 0x41) (async) gettid() (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000780)) 18:24:51 executing program 0: r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x9, 0x2, 0x40, 0xdf, 0x0, 0x101, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f00000000c0), 0x4}, 0x2000, 0xfffffffffffff000, 0x0, 0x9, 0x9, 0x7, 0x7596, 0x0, 0x9, 0x0, 0x6}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x4) [ 2484.336764][T32619] ? is_bpf_text_address+0x172/0x190 [ 2484.341881][T32619] pte_alloc_one+0x73/0x1b0 [ 2484.346219][T32619] ? pfn_modify_allowed+0x2f0/0x2f0 [ 2484.351255][T32619] ? arch_stack_walk+0xf3/0x140 [ 2484.355943][T32619] __pte_alloc+0x86/0x350 [ 2484.360105][T32619] ? free_pgtables+0x280/0x280 [ 2484.364719][T32619] ? _raw_spin_lock+0xa4/0x1b0 [ 2484.369327][T32619] ? __kasan_check_write+0x14/0x20 [ 2484.374253][T32619] copy_page_range+0x28a8/0x2f90 [ 2484.379202][T32619] ? __kasan_slab_alloc+0xb1/0xe0 [ 2484.384070][T32619] ? pfn_valid+0x1e0/0x1e0 [ 2484.388321][T32619] ? vma_interval_tree_augment_rotate+0x1a3/0x1d0 [ 2484.394578][T32619] copy_mm+0xc7e/0x13e0 [ 2484.398556][T32619] ? copy_signal+0x610/0x610 [ 2484.402980][T32619] ? __init_rwsem+0xd6/0x1c0 [ 2484.407407][T32619] ? copy_signal+0x4e3/0x610 [ 2484.411849][T32619] copy_process+0x12bc/0x3260 [ 2484.416348][T32619] ? proc_fail_nth_write+0x20b/0x290 [ 2484.421469][T32619] ? fsnotify_perm+0x6a/0x5d0 [ 2484.425982][T32619] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2484.430927][T32619] ? vfs_write+0x9ec/0x1110 [ 2484.435270][T32619] kernel_clone+0x21e/0x9e0 [ 2484.439608][T32619] ? file_end_write+0x1c0/0x1c0 [ 2484.444312][T32619] ? create_io_thread+0x1e0/0x1e0 [ 2484.449151][T32619] ? mutex_unlock+0xb2/0x260 [ 2484.453581][T32619] ? __mutex_lock_slowpath+0x10/0x10 [ 2484.458705][T32619] __x64_sys_clone+0x23f/0x290 [ 2484.463317][T32619] ? __do_sys_vfork+0x130/0x130 [ 2484.467984][T32619] ? ksys_write+0x260/0x2c0 [ 2484.472331][T32619] ? debug_smp_processor_id+0x17/0x20 [ 2484.477536][T32619] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2484.483437][T32619] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2484.488923][T32619] do_syscall_64+0x3d/0xb0 [ 2484.493157][T32619] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2484.498885][T32619] RIP: 0033:0x7fdfd1d08ae9 [ 2484.503140][T32619] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2484.522584][T32619] RSP: 002b:00007fdfd0a8b078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2484.530825][T32619] RAX: ffffffffffffffda RBX: 00007fdfd1e27f80 RCX: 00007fdfd1d08ae9 [ 2484.538640][T32619] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022001200 [ 2484.546449][T32619] RBP: 00007fdfd0a8b120 R08: 0000000000000000 R09: 0000000000000000 [ 2484.554277][T32619] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2484.562073][T32619] R13: 000000000000000b R14: 00007fdfd1e27f80 R15: 00007fff62717c48 [ 2484.569901][T32619] 18:24:52 executing program 1: r0 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x81, 0x54, 0x8, 0x0, 0x0, 0x1, 0x4cb04, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xcedcdb7, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x8000, 0xffffffffffff8001, 0x0, 0x3, 0x1, 0x3, 0x9f, 0x0, 0x7ff, 0x0, 0x82}, r0, 0x10, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)=""/160, 0xdb, 0xa0, 0x1, 0x5}, 0x20) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000200)={'ipvlan1\x00'}) 18:24:52 executing program 0: r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x9, 0x2, 0x40, 0xdf, 0x0, 0x101, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f00000000c0), 0x4}, 0x2000, 0xfffffffffffff000, 0x0, 0x9, 0x9, 0x7, 0x7596, 0x0, 0x9, 0x0, 0x6}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x4) perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x9, 0x2, 0x40, 0xdf, 0x0, 0x101, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f00000000c0), 0x4}, 0x2000, 0xfffffffffffff000, 0x0, 0x9, 0x9, 0x7, 0x7596, 0x0, 0x9, 0x0, 0x6}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) (async) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x4) (async) 18:24:52 executing program 3: bpf$MAP_CREATE(0xa00000000000000, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:52 executing program 2: socketpair(0x26, 0x0, 0x8, &(0x7f0000000040)) 18:24:52 executing program 5: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 40) [ 2484.742384][ T313] FAULT_INJECTION: forcing a failure. [ 2484.742384][ T313] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2484.780596][ T313] CPU: 0 PID: 313 Comm: syz-executor.5 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2484.790608][ T313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2484.800507][ T313] Call Trace: [ 2484.803627][ T313] [ 2484.806408][ T313] dump_stack_lvl+0x151/0x1b7 [ 2484.811088][ T313] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2484.816557][ T313] dump_stack+0x15/0x17 [ 2484.820548][ T313] should_fail+0x3c6/0x510 [ 2484.824807][ T313] should_fail_alloc_page+0x5a/0x80 [ 2484.829837][ T313] prepare_alloc_pages+0x15c/0x700 [ 2484.834782][ T313] ? __alloc_pages+0x5e0/0x5e0 [ 2484.839389][ T313] ? __alloc_pages_bulk+0xe60/0xe60 [ 2484.844422][ T313] __alloc_pages+0x138/0x5e0 [ 2484.848844][ T313] ? prep_new_page+0x110/0x110 [ 2484.853450][ T313] ? is_bpf_text_address+0x172/0x190 [ 2484.858566][ T313] pte_alloc_one+0x73/0x1b0 [ 2484.862906][ T313] ? pfn_modify_allowed+0x2f0/0x2f0 [ 2484.867939][ T313] ? arch_stack_walk+0xf3/0x140 [ 2484.872629][ T313] __pte_alloc+0x86/0x350 [ 2484.876792][ T313] ? free_pgtables+0x280/0x280 [ 2484.881392][ T313] ? _raw_spin_lock+0xa4/0x1b0 [ 2484.885994][ T313] ? __kasan_check_write+0x14/0x20 [ 2484.890952][ T313] copy_page_range+0x28a8/0x2f90 [ 2484.895716][ T313] ? __kasan_slab_alloc+0xb1/0xe0 [ 2484.900582][ T313] ? pfn_valid+0x1e0/0x1e0 [ 2484.904825][ T313] ? vma_interval_tree_augment_rotate+0x1a3/0x1d0 [ 2484.911078][ T313] copy_mm+0xc7e/0x13e0 [ 2484.915072][ T313] ? copy_signal+0x610/0x610 [ 2484.919496][ T313] ? __init_rwsem+0xd6/0x1c0 [ 2484.924094][ T313] ? copy_signal+0x4e3/0x610 [ 2484.928518][ T313] copy_process+0x12bc/0x3260 [ 2484.933038][ T313] ? proc_fail_nth_write+0x20b/0x290 [ 2484.938159][ T313] ? fsnotify_perm+0x6a/0x5d0 [ 2484.942670][ T313] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2484.947612][ T313] ? vfs_write+0x9ec/0x1110 [ 2484.951956][ T313] kernel_clone+0x21e/0x9e0 [ 2484.956304][ T313] ? file_end_write+0x1c0/0x1c0 [ 2484.960983][ T313] ? create_io_thread+0x1e0/0x1e0 [ 2484.965843][ T313] ? mutex_unlock+0xb2/0x260 [ 2484.970271][ T313] ? __mutex_lock_slowpath+0x10/0x10 [ 2484.975393][ T313] __x64_sys_clone+0x23f/0x290 [ 2484.979988][ T313] ? __do_sys_vfork+0x130/0x130 [ 2484.984674][ T313] ? ksys_write+0x260/0x2c0 [ 2484.989016][ T313] ? debug_smp_processor_id+0x17/0x20 [ 2484.994223][ T313] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2485.000130][ T313] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2485.005683][ T313] do_syscall_64+0x3d/0xb0 [ 2485.009933][ T313] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2485.015662][ T313] RIP: 0033:0x7fdfd1d08ae9 [ 2485.019916][ T313] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 18:24:52 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, 0x0, 0x0) recvmsg(r0, &(0x7f0000000ac0)={&(0x7f0000000880)=@can, 0x80, &(0x7f0000000180)=[{&(0x7f0000000900)=""/234, 0xea}], 0x1, &(0x7f0000000a00)=""/153, 0x99}, 0x2000) recvmsg(r2, &(0x7f0000000840)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000080)=""/30, 0x1e}, {&(0x7f0000000b00)=""/8, 0x8}, {&(0x7f00000001c0)=""/172, 0xac}, {&(0x7f00000003c0)=""/85, 0x55}, {&(0x7f0000000440)=""/26, 0x1a}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/23, 0x17}, {&(0x7f0000000580)=""/91, 0x5b}, {&(0x7f0000000600)=""/247, 0xf7}], 0x9, &(0x7f00000007c0)=""/116, 0x74}, 0x0) (async) recvmsg(r2, &(0x7f0000000840)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000080)=""/30, 0x1e}, {&(0x7f0000000b00)=""/8, 0x8}, {&(0x7f00000001c0)=""/172, 0xac}, {&(0x7f00000003c0)=""/85, 0x55}, {&(0x7f0000000440)=""/26, 0x1a}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/23, 0x17}, {&(0x7f0000000580)=""/91, 0x5b}, {&(0x7f0000000600)=""/247, 0xf7}], 0x9, &(0x7f00000007c0)=""/116, 0x74}, 0x0) close(r1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000000)='+-+!{*^\xd3-\x00'}, 0x30) 18:24:52 executing program 2: socketpair(0x26, 0x0, 0x8, &(0x7f0000000040)) 18:24:52 executing program 0: r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x9, 0x2, 0x40, 0xdf, 0x0, 0x101, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f00000000c0), 0x4}, 0x2000, 0xfffffffffffff000, 0x0, 0x9, 0x9, 0x7, 0x7596, 0x0, 0x9, 0x0, 0x6}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x4) 18:24:52 executing program 3: bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:52 executing program 1: r0 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x81, 0x54, 0x8, 0x0, 0x0, 0x1, 0x4cb04, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xcedcdb7, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x8000, 0xffffffffffff8001, 0x0, 0x3, 0x1, 0x3, 0x9f, 0x0, 0x7ff, 0x0, 0x82}, r0, 0x10, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)=""/160, 0xdb, 0xa0, 0x1, 0x5}, 0x20) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000200)={'ipvlan1\x00'}) (async) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000200)={'ipvlan1\x00'}) 18:24:52 executing program 3: bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000540)=@base={0xd}, 0x48) [ 2485.039530][ T313] RSP: 002b:00007fdfd0a8b078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2485.047946][ T313] RAX: ffffffffffffffda RBX: 00007fdfd1e27f80 RCX: 00007fdfd1d08ae9 [ 2485.055779][ T313] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022001200 [ 2485.063571][ T313] RBP: 00007fdfd0a8b120 R08: 0000000000000000 R09: 0000000000000000 [ 2485.071379][ T313] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2485.079216][ T313] R13: 000000000000000b R14: 00007fdfd1e27f80 R15: 00007fff62717c48 [ 2485.087529][ T313] 18:24:52 executing program 2: socketpair(0x26, 0x0, 0x8, &(0x7f0000000040)) 18:24:52 executing program 2: socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x2, 0x10}, 0xc) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000080)="5967972bdb1fd1200f84e9ac9fe676b86b63", &(0x7f00000000c0)=""/25, 0x4}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000001c0)={r0, &(0x7f0000000140), &(0x7f0000000180)=""/64}, 0x20) 18:24:52 executing program 3: bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:52 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = getpid() syz_open_procfs$namespace(r0, 0x0) r1 = getpid() syz_open_procfs$namespace(r1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001540)={r1, 0xffffffffffffffff, 0x0, 0x32, &(0x7f00000015c0)='&-\x06\x00\x00\x00w\x88y\x8c8n\x0e! \xd3\xfd\x8d\xbb@f\x18d-\x03w\xad@\xe36\a%\xd3\xa4\xa9\x82\x8f\xf4\xab*L\t\xf6\x05\xfd(\xa8F\xf8\x14\xba\xeb#\x96\x19\xa9\xf7\xeb\xadLf]\xff\x8a\xf6\x8bT\x16\x14K\xab\x7f\xd67\x83\x1c\xbc~\x14\xff\x8e~>\xbd\x00'}, 0x49) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup(r2, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r3, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r4 = openat$cgroup_ro(r3, 0x0, 0x0, 0x0) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup(r5, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r6, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r7 = openat$cgroup_ro(r6, 0x0, 0x0, 0x0) openat$cgroup_devices(r4, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r7, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r7}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r7}, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@ifindex, 0x2b, 0x1, 0xc, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x0}, 0x40) r9 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r10 = openat$cgroup(r9, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) r11 = openat$cgroup_ro(r3, &(0x7f0000000100)='pids.current\x00', 0x0, 0x0) openat$cgroup_procs(r11, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_pressure(r10, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r12 = openat$cgroup_ro(r10, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r12, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r12}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r12}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map=0x1, r4, 0x1b, 0x2d, r12, @link_id=0xffffffffffffffff, r8}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r4}, 0x8) write$cgroup_pid(r4, &(0x7f0000000000)=r0, 0x12) 18:24:52 executing program 3: bpf$MAP_CREATE(0xe00000000000000, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:52 executing program 5: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 41) [ 2485.625240][ T346] FAULT_INJECTION: forcing a failure. [ 2485.625240][ T346] name failslab, interval 1, probability 0, space 0, times 0 [ 2485.648714][ T346] CPU: 0 PID: 346 Comm: syz-executor.5 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2485.658719][ T346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2485.668611][ T346] Call Trace: [ 2485.671732][ T346] [ 2485.674514][ T346] dump_stack_lvl+0x151/0x1b7 [ 2485.679025][ T346] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2485.684490][ T346] ? avc_denied+0x1b0/0x1b0 [ 2485.688837][ T346] dump_stack+0x15/0x17 [ 2485.692836][ T346] should_fail+0x3c6/0x510 [ 2485.697082][ T346] __should_failslab+0xa4/0xe0 [ 2485.701764][ T346] ? vm_area_dup+0x26/0x230 [ 2485.706107][ T346] should_failslab+0x9/0x20 [ 2485.710440][ T346] slab_pre_alloc_hook+0x37/0xd0 [ 2485.715226][ T346] ? vm_area_dup+0x26/0x230 [ 2485.719558][ T346] kmem_cache_alloc+0x44/0x200 [ 2485.724174][ T346] vm_area_dup+0x26/0x230 [ 2485.728322][ T346] copy_mm+0x9a1/0x13e0 [ 2485.732406][ T346] ? copy_signal+0x610/0x610 [ 2485.737089][ T346] ? __init_rwsem+0xd6/0x1c0 [ 2485.741522][ T346] ? copy_signal+0x4e3/0x610 [ 2485.747242][ T346] copy_process+0x12bc/0x3260 [ 2485.751760][ T346] ? proc_fail_nth_write+0x20b/0x290 [ 2485.756879][ T346] ? fsnotify_perm+0x6a/0x5d0 [ 2485.761394][ T346] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2485.766336][ T346] ? vfs_write+0x9ec/0x1110 [ 2485.770685][ T346] kernel_clone+0x21e/0x9e0 [ 2485.775020][ T346] ? file_end_write+0x1c0/0x1c0 [ 2485.779711][ T346] ? create_io_thread+0x1e0/0x1e0 [ 2485.784561][ T346] ? mutex_unlock+0xb2/0x260 [ 2485.789163][ T346] ? __mutex_lock_slowpath+0x10/0x10 [ 2485.794288][ T346] __x64_sys_clone+0x23f/0x290 [ 2485.798885][ T346] ? __do_sys_vfork+0x130/0x130 [ 2485.803570][ T346] ? ksys_write+0x260/0x2c0 [ 2485.808352][ T346] ? debug_smp_processor_id+0x17/0x20 [ 2485.813552][ T346] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2485.819992][ T346] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2485.825464][ T346] do_syscall_64+0x3d/0xb0 [ 2485.829715][ T346] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2485.835441][ T346] RIP: 0033:0x7fdfd1d08ae9 [ 2485.839696][ T346] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2485.859136][ T346] RSP: 002b:00007fdfd0a8b078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2485.867384][ T346] RAX: ffffffffffffffda RBX: 00007fdfd1e27f80 RCX: 00007fdfd1d08ae9 [ 2485.875192][ T346] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022001200 [ 2485.883001][ T346] RBP: 00007fdfd0a8b120 R08: 0000000000000000 R09: 0000000000000000 [ 2485.890822][ T346] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2485.898636][ T346] R13: 000000000000000b R14: 00007fdfd1e27f80 R15: 00007fff62717c48 [ 2485.906456][ T346] 18:24:53 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) (async, rerun: 32) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) recvmsg(r2, 0x0, 0x0) (async, rerun: 32) recvmsg(r0, &(0x7f0000000ac0)={&(0x7f0000000880)=@can, 0x80, &(0x7f0000000180)=[{&(0x7f0000000900)=""/234, 0xea}], 0x1, &(0x7f0000000a00)=""/153, 0x99}, 0x2000) (async, rerun: 32) recvmsg(r2, &(0x7f0000000840)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000080)=""/30, 0x1e}, {&(0x7f0000000b00)=""/8, 0x8}, {&(0x7f00000001c0)=""/172, 0xac}, {&(0x7f00000003c0)=""/85, 0x55}, {&(0x7f0000000440)=""/26, 0x1a}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f0000000540)=""/23, 0x17}, {&(0x7f0000000580)=""/91, 0x5b}, {&(0x7f0000000600)=""/247, 0xf7}], 0x9, &(0x7f00000007c0)=""/116, 0x74}, 0x0) close(r1) (async, rerun: 32) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000000)='+-+!{*^\xd3-\x00'}, 0x30) (rerun: 32) 18:24:53 executing program 2: socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x2, 0x10}, 0xc) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000080)="5967972bdb1fd1200f84e9ac9fe676b86b63", &(0x7f00000000c0)=""/25, 0x4}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000001c0)={r0, &(0x7f0000000140), &(0x7f0000000180)=""/64}, 0x20) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000001c0)={r0, &(0x7f0000000140), &(0x7f0000000180)=""/64}, 0x20) 18:24:53 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = getpid() syz_open_procfs$namespace(r0, 0x0) r1 = getpid() syz_open_procfs$namespace(r1, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001540)={r1, 0xffffffffffffffff, 0x0, 0x32, &(0x7f00000015c0)='&-\x06\x00\x00\x00w\x88y\x8c8n\x0e! \xd3\xfd\x8d\xbb@f\x18d-\x03w\xad@\xe36\a%\xd3\xa4\xa9\x82\x8f\xf4\xab*L\t\xf6\x05\xfd(\xa8F\xf8\x14\xba\xeb#\x96\x19\xa9\xf7\xeb\xadLf]\xff\x8a\xf6\x8bT\x16\x14K\xab\x7f\xd67\x83\x1c\xbc~\x14\xff\x8e~>\xbd\x00'}, 0x49) (async, rerun: 64) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) (rerun: 64) r3 = openat$cgroup(r2, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r3, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) (async) r4 = openat$cgroup_ro(r3, 0x0, 0x0, 0x0) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup(r5, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r6, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) (async) r7 = openat$cgroup_ro(r6, 0x0, 0x0, 0x0) openat$cgroup_devices(r4, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r7, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r7}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r7}, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@ifindex, 0x2b, 0x1, 0xc, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x0}, 0x40) (async, rerun: 32) r9 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) (rerun: 32) r10 = openat$cgroup(r9, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) (async) r11 = openat$cgroup_ro(r3, &(0x7f0000000100)='pids.current\x00', 0x0, 0x0) openat$cgroup_procs(r11, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_pressure(r10, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) (async) r12 = openat$cgroup_ro(r10, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r12, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r12}, 0x20) (async) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r12}, 0x8) (async, rerun: 64) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map=0x1, r4, 0x1b, 0x2d, r12, @link_id=0xffffffffffffffff, r8}, 0x20) (async, rerun: 64) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r4}, 0x8) write$cgroup_pid(r4, &(0x7f0000000000)=r0, 0x12) 18:24:53 executing program 3: bpf$MAP_CREATE(0xf00000000000000, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:53 executing program 1: r0 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x81, 0x54, 0x8, 0x0, 0x0, 0x1, 0x4cb04, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xcedcdb7, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x8000, 0xffffffffffff8001, 0x0, 0x3, 0x1, 0x3, 0x9f, 0x0, 0x7ff, 0x0, 0x82}, r0, 0x10, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)=""/160, 0xdb, 0xa0, 0x1, 0x5}, 0x20) (async) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000200)={'ipvlan1\x00'}) 18:24:53 executing program 5: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 42) 18:24:53 executing program 3: bpf$MAP_CREATE(0x1000000000000000, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:53 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) r0 = getpid() syz_open_procfs$namespace(r0, 0x0) (async) r1 = getpid() syz_open_procfs$namespace(r1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001540)={r1, 0xffffffffffffffff, 0x0, 0x32, &(0x7f00000015c0)='&-\x06\x00\x00\x00w\x88y\x8c8n\x0e! \xd3\xfd\x8d\xbb@f\x18d-\x03w\xad@\xe36\a%\xd3\xa4\xa9\x82\x8f\xf4\xab*L\t\xf6\x05\xfd(\xa8F\xf8\x14\xba\xeb#\x96\x19\xa9\xf7\xeb\xadLf]\xff\x8a\xf6\x8bT\x16\x14K\xab\x7f\xd67\x83\x1c\xbc~\x14\xff\x8e~>\xbd\x00'}, 0x49) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup(r2, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r3, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) (async) r4 = openat$cgroup_ro(r3, 0x0, 0x0, 0x0) (async) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup(r5, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r6, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) (async) r7 = openat$cgroup_ro(r6, 0x0, 0x0, 0x0) openat$cgroup_devices(r4, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r7, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r7}, 0x20) (async) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r7}, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@ifindex, 0x2b, 0x1, 0xc, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x0}, 0x40) (async) r9 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r10 = openat$cgroup(r9, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) r11 = openat$cgroup_ro(r3, &(0x7f0000000100)='pids.current\x00', 0x0, 0x0) openat$cgroup_procs(r11, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) (async) openat$cgroup_pressure(r10, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) (async) r12 = openat$cgroup_ro(r10, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r12, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r12}, 0x20) (async) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r12}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map=0x1, r4, 0x1b, 0x2d, r12, @link_id=0xffffffffffffffff, r8}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r4}, 0x8) (async) write$cgroup_pid(r4, &(0x7f0000000000)=r0, 0x12) 18:24:53 executing program 2: socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x2, 0x10}, 0xc) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000080)="5967972bdb1fd1200f84e9ac9fe676b86b63", &(0x7f00000000c0)=""/25, 0x4}, 0x20) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000001c0)={r0, &(0x7f0000000140), &(0x7f0000000180)=""/64}, 0x20) [ 2485.997909][ T351] FAULT_INJECTION: forcing a failure. [ 2485.997909][ T351] name failslab, interval 1, probability 0, space 0, times 0 18:24:53 executing program 2: socketpair(0x1f, 0x6, 0x4, &(0x7f0000000040)) socketpair(0x23, 0x6, 0x4, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) 18:24:53 executing program 2: socketpair(0x1f, 0x6, 0x4, &(0x7f0000000040)) (async) socketpair(0x23, 0x6, 0x4, &(0x7f0000000000)) (async, rerun: 64) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) (rerun: 64) [ 2486.062894][ T351] CPU: 1 PID: 351 Comm: syz-executor.5 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2486.072903][ T351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2486.082828][ T351] Call Trace: [ 2486.085925][ T351] [ 2486.088694][ T351] dump_stack_lvl+0x151/0x1b7 [ 2486.093215][ T351] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2486.098683][ T351] dump_stack+0x15/0x17 [ 2486.102671][ T351] should_fail+0x3c6/0x510 [ 2486.107040][ T351] __should_failslab+0xa4/0xe0 18:24:53 executing program 2: socketpair(0x1f, 0x6, 0x4, &(0x7f0000000040)) (async) socketpair(0x23, 0x6, 0x4, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) [ 2486.111638][ T351] ? anon_vma_clone+0x9a/0x500 [ 2486.116225][ T351] should_failslab+0x9/0x20 [ 2486.120824][ T351] slab_pre_alloc_hook+0x37/0xd0 [ 2486.125600][ T351] ? anon_vma_clone+0x9a/0x500 [ 2486.130343][ T351] kmem_cache_alloc+0x44/0x200 [ 2486.135146][ T351] anon_vma_clone+0x9a/0x500 [ 2486.139540][ T351] anon_vma_fork+0x91/0x4e0 [ 2486.143883][ T351] ? anon_vma_name+0x4c/0x70 [ 2486.148397][ T351] ? vm_area_dup+0x17a/0x230 [ 2486.152824][ T351] copy_mm+0xa3a/0x13e0 [ 2486.156902][ T351] ? copy_signal+0x610/0x610 [ 2486.161327][ T351] ? __init_rwsem+0xd6/0x1c0 [ 2486.165753][ T351] ? copy_signal+0x4e3/0x610 [ 2486.170181][ T351] copy_process+0x12bc/0x3260 [ 2486.174695][ T351] ? proc_fail_nth_write+0x20b/0x290 [ 2486.179930][ T351] ? fsnotify_perm+0x6a/0x5d0 [ 2486.184424][ T351] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2486.189444][ T351] ? vfs_write+0x9ec/0x1110 [ 2486.193782][ T351] kernel_clone+0x21e/0x9e0 [ 2486.198124][ T351] ? file_end_write+0x1c0/0x1c0 [ 2486.203245][ T351] ? create_io_thread+0x1e0/0x1e0 [ 2486.208103][ T351] ? mutex_unlock+0xb2/0x260 [ 2486.212530][ T351] ? __mutex_lock_slowpath+0x10/0x10 [ 2486.217653][ T351] __x64_sys_clone+0x23f/0x290 [ 2486.222256][ T351] ? __do_sys_vfork+0x130/0x130 [ 2486.226937][ T351] ? ksys_write+0x260/0x2c0 [ 2486.231277][ T351] ? debug_smp_processor_id+0x17/0x20 [ 2486.236482][ T351] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2486.242386][ T351] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2486.247859][ T351] do_syscall_64+0x3d/0xb0 [ 2486.252107][ T351] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2486.257834][ T351] RIP: 0033:0x7fdfd1d08ae9 [ 2486.262091][ T351] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2486.281529][ T351] RSP: 002b:00007fdfd0a8b078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2486.289795][ T351] RAX: ffffffffffffffda RBX: 00007fdfd1e27f80 RCX: 00007fdfd1d08ae9 [ 2486.297584][ T351] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022001200 [ 2486.305395][ T351] RBP: 00007fdfd0a8b120 R08: 0000000000000000 R09: 0000000000000000 [ 2486.313209][ T351] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2486.321024][ T351] R13: 000000000000000b R14: 00007fdfd1e27f80 R15: 00007fff62717c48 [ 2486.328836][ T351] 18:24:54 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f00000005c0)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000100)=""/207, 0xcf}, {&(0x7f0000000200)=""/102, 0x66}, {&(0x7f0000000080)=""/36, 0x24}, {&(0x7f00000003c0)=""/86, 0x56}, {&(0x7f0000000440)=""/45, 0x2d}], 0x5, &(0x7f0000000500)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) close(r1) 18:24:54 executing program 3: bpf$MAP_CREATE(0x1100000000000000, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:54 executing program 2: ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000680)) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r1, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xfffffffffffffffa) r2 = openat$cgroup_ro(r1, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r2, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r2}, 0x20) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r4 = openat$cgroup(r3, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r4, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r5 = openat$cgroup_ro(r4, 0x0, 0x0, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_lsm={0x1d, 0x7, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x341c, 0x0, 0x0, 0x0, 0xfffffeff}, [@ldst={0x1, 0x1, 0x2, 0x0, 0xf, 0x18, 0x4}, @map_fd={0x18, 0xa, 0x1, 0x0, r2}, @ldst={0x3, 0x2, 0x0, 0x3, 0x3}]}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x9c, &(0x7f0000000400)=""/156, 0x41100, 0x0, '\x00', 0x0, 0x1b, r5, 0x8, &(0x7f00000004c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0x4, 0xfff, 0xe8aa}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000540)=[r2, r2, 0x1], &(0x7f0000000580)=[{0x4, 0x1, 0x7, 0xa}, {0x3, 0x2, 0x5, 0x6}], 0x10, 0x4}, 0x90) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r5, 0x0, 0x39, r6, @prog_fd=r5}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r5}, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@cgroup=r5, 0x20, 0x0, 0x1, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0]}, 0x40) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000800)={0x0, 0x4, 0x18}, 0xc) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000880)=@generic={&(0x7f0000000840)='./file0\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0xa, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, [@ldst={0x3, 0x3, 0x2, 0xb, 0xb, 0x10, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x8}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x2}]}, &(0x7f0000000740)='GPL\x00', 0x8c7, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000780)={0xa, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x4, 0xf, 0x5, 0x8}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000008c0)=[r7, r2, r8], &(0x7f0000000900)=[{0x3, 0x3, 0x8, 0xd7a1c38e28a8c73e}], 0x10, 0x9}, 0x90) r9 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r2}, 0x8) recvmsg$unix(r9, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={&(0x7f0000000080)="dd321cbc82df8821d1f4732f066765e7b10d465692729cc4ba501e47aa04b773f0be43dca705f8c59bb4605445aaff1e65e56c17b55cdf0fb3e150ffe1a1b3fc925c42c59982e02e15f5412654f940f8f4e3210aa5c4f5fa22188a2b277d0ec71fd4d7f864a4b985973a86472fb6cd2cfabcffd0645ef839607c14fc248a3342ad49b58114baf14c88ca57ddd5c50d20d88e34b60bb8494c49e24130f3039be016f249a6cc8504d72aa83c9a9ac263e379f7cca795e3023cd4c88190cac016d077503f4a78bf484a400566893a65f09444be93112d2c87e4f0d8ec", &(0x7f0000000180)=""/117, &(0x7f0000000000), &(0x7f0000000200)="c3ee56450fd99cea2b5e4f7743f1cd57397f10d61af6e0a94adeec84ab7d246bd70883ac9fcb22c676949157e0e13e2e7ef0747369", 0xb14, r9, 0x4}, 0x38) socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) 18:24:54 executing program 1: syz_clone(0x2a82580, 0x0, 0x0, 0x0, 0x0, 0x0) 18:24:54 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000300)=@nl=@unspec, 0x80, &(0x7f0000001440)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f00000015c0)=""/117, 0x75}, {&(0x7f0000001540)=""/66, 0x42}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000200)=""/109, 0x6d}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/192, 0xc0}], 0x7, &(0x7f00000014c0)=""/15, 0xf}, 0x0) 18:24:54 executing program 5: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 43) 18:24:54 executing program 3: bpf$MAP_CREATE(0x1200000000000000, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:54 executing program 2: ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000680)) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r1, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xfffffffffffffffa) (async) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xfffffffffffffffa) openat$cgroup_ro(r1, 0x0, 0x0, 0x0) (async) r2 = openat$cgroup_ro(r1, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r2, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r2}, 0x20) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r4 = openat$cgroup(r3, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r4, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r5 = openat$cgroup_ro(r4, 0x0, 0x0, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_lsm={0x1d, 0x7, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x341c, 0x0, 0x0, 0x0, 0xfffffeff}, [@ldst={0x1, 0x1, 0x2, 0x0, 0xf, 0x18, 0x4}, @map_fd={0x18, 0xa, 0x1, 0x0, r2}, @ldst={0x3, 0x2, 0x0, 0x3, 0x3}]}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x9c, &(0x7f0000000400)=""/156, 0x41100, 0x0, '\x00', 0x0, 0x1b, r5, 0x8, &(0x7f00000004c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0x4, 0xfff, 0xe8aa}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000540)=[r2, r2, 0x1], &(0x7f0000000580)=[{0x4, 0x1, 0x7, 0xa}, {0x3, 0x2, 0x5, 0x6}], 0x10, 0x4}, 0x90) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r5, 0x0, 0x39, r6, @prog_fd=r5}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r5}, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@cgroup=r5, 0x20, 0x0, 0x1, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0]}, 0x40) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000800)={0x0, 0x4, 0x18}, 0xc) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000880)=@generic={&(0x7f0000000840)='./file0\x00', 0x0, 0x8}, 0x18) (async) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000880)=@generic={&(0x7f0000000840)='./file0\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0xa, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, [@ldst={0x3, 0x3, 0x2, 0xb, 0xb, 0x10, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x8}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x2}]}, &(0x7f0000000740)='GPL\x00', 0x8c7, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000780)={0xa, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x4, 0xf, 0x5, 0x8}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000008c0)=[r7, r2, r8], &(0x7f0000000900)=[{0x3, 0x3, 0x8, 0xd7a1c38e28a8c73e}], 0x10, 0x9}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0xa, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, [@ldst={0x3, 0x3, 0x2, 0xb, 0xb, 0x10, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x8}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x2}]}, &(0x7f0000000740)='GPL\x00', 0x8c7, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000780)={0xa, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x4, 0xf, 0x5, 0x8}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000008c0)=[r7, r2, r8], &(0x7f0000000900)=[{0x3, 0x3, 0x8, 0xd7a1c38e28a8c73e}], 0x10, 0x9}, 0x90) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r2}, 0x8) (async) r9 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r2}, 0x8) recvmsg$unix(r9, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) (async) recvmsg$unix(r9, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={&(0x7f0000000080)="dd321cbc82df8821d1f4732f066765e7b10d465692729cc4ba501e47aa04b773f0be43dca705f8c59bb4605445aaff1e65e56c17b55cdf0fb3e150ffe1a1b3fc925c42c59982e02e15f5412654f940f8f4e3210aa5c4f5fa22188a2b277d0ec71fd4d7f864a4b985973a86472fb6cd2cfabcffd0645ef839607c14fc248a3342ad49b58114baf14c88ca57ddd5c50d20d88e34b60bb8494c49e24130f3039be016f249a6cc8504d72aa83c9a9ac263e379f7cca795e3023cd4c88190cac016d077503f4a78bf484a400566893a65f09444be93112d2c87e4f0d8ec", &(0x7f0000000180)=""/117, &(0x7f0000000000), &(0x7f0000000200)="c3ee56450fd99cea2b5e4f7743f1cd57397f10d61af6e0a94adeec84ab7d246bd70883ac9fcb22c676949157e0e13e2e7ef0747369", 0xb14, r9, 0x4}, 0x38) socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) (async) socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) [ 2486.920111][ T398] FAULT_INJECTION: forcing a failure. [ 2486.920111][ T398] name fail_page_alloc, interval 1, probability 0, space 0, times 0 18:24:54 executing program 3: bpf$MAP_CREATE(0x1300000000000000, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:54 executing program 2: ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000680)) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r1, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xfffffffffffffffa) r2 = openat$cgroup_ro(r1, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r2, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r2}, 0x20) openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) (async) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r4 = openat$cgroup(r3, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r4, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) (async) openat$cgroup_pressure(r4, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r5 = openat$cgroup_ro(r4, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_lsm={0x1d, 0x7, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x341c, 0x0, 0x0, 0x0, 0xfffffeff}, [@ldst={0x1, 0x1, 0x2, 0x0, 0xf, 0x18, 0x4}, @map_fd={0x18, 0xa, 0x1, 0x0, r2}, @ldst={0x3, 0x2, 0x0, 0x3, 0x3}]}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x9c, &(0x7f0000000400)=""/156, 0x41100, 0x0, '\x00', 0x0, 0x1b, r5, 0x8, &(0x7f00000004c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0x4, 0xfff, 0xe8aa}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000540)=[r2, r2, 0x1], &(0x7f0000000580)=[{0x4, 0x1, 0x7, 0xa}, {0x3, 0x2, 0x5, 0x6}], 0x10, 0x4}, 0x90) (async) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_lsm={0x1d, 0x7, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x341c, 0x0, 0x0, 0x0, 0xfffffeff}, [@ldst={0x1, 0x1, 0x2, 0x0, 0xf, 0x18, 0x4}, @map_fd={0x18, 0xa, 0x1, 0x0, r2}, @ldst={0x3, 0x2, 0x0, 0x3, 0x3}]}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x9c, &(0x7f0000000400)=""/156, 0x41100, 0x0, '\x00', 0x0, 0x1b, r5, 0x8, &(0x7f00000004c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0x4, 0xfff, 0xe8aa}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000540)=[r2, r2, 0x1], &(0x7f0000000580)=[{0x4, 0x1, 0x7, 0xa}, {0x3, 0x2, 0x5, 0x6}], 0x10, 0x4}, 0x90) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r5, 0x0, 0x39, r6, @prog_fd=r5}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r5}, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@cgroup=r5, 0x20, 0x0, 0x1, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0]}, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@cgroup=r5, 0x20, 0x0, 0x1, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0]}, 0x40) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000800)={0x0, 0x4, 0x18}, 0xc) (async) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000800)={0x0, 0x4, 0x18}, 0xc) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000880)=@generic={&(0x7f0000000840)='./file0\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0xa, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, [@ldst={0x3, 0x3, 0x2, 0xb, 0xb, 0x10, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x8}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x2}]}, &(0x7f0000000740)='GPL\x00', 0x8c7, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000780)={0xa, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x4, 0xf, 0x5, 0x8}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000008c0)=[r7, r2, r8], &(0x7f0000000900)=[{0x3, 0x3, 0x8, 0xd7a1c38e28a8c73e}], 0x10, 0x9}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0xa, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, [@ldst={0x3, 0x3, 0x2, 0xb, 0xb, 0x10, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x8}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x2}]}, &(0x7f0000000740)='GPL\x00', 0x8c7, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000780)={0xa, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x4, 0xf, 0x5, 0x8}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000008c0)=[r7, r2, r8], &(0x7f0000000900)=[{0x3, 0x3, 0x8, 0xd7a1c38e28a8c73e}], 0x10, 0x9}, 0x90) r9 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r2}, 0x8) recvmsg$unix(r9, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) (async) recvmsg$unix(r9, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={&(0x7f0000000080)="dd321cbc82df8821d1f4732f066765e7b10d465692729cc4ba501e47aa04b773f0be43dca705f8c59bb4605445aaff1e65e56c17b55cdf0fb3e150ffe1a1b3fc925c42c59982e02e15f5412654f940f8f4e3210aa5c4f5fa22188a2b277d0ec71fd4d7f864a4b985973a86472fb6cd2cfabcffd0645ef839607c14fc248a3342ad49b58114baf14c88ca57ddd5c50d20d88e34b60bb8494c49e24130f3039be016f249a6cc8504d72aa83c9a9ac263e379f7cca795e3023cd4c88190cac016d077503f4a78bf484a400566893a65f09444be93112d2c87e4f0d8ec", &(0x7f0000000180)=""/117, &(0x7f0000000000), &(0x7f0000000200)="c3ee56450fd99cea2b5e4f7743f1cd57397f10d61af6e0a94adeec84ab7d246bd70883ac9fcb22c676949157e0e13e2e7ef0747369", 0xb14, r9, 0x4}, 0x38) socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) [ 2487.060496][ T398] CPU: 1 PID: 398 Comm: syz-executor.5 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2487.070495][ T398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2487.080391][ T398] Call Trace: [ 2487.083516][ T398] [ 2487.086289][ T398] dump_stack_lvl+0x151/0x1b7 [ 2487.090806][ T398] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2487.096278][ T398] dump_stack+0x15/0x17 [ 2487.100264][ T398] should_fail+0x3c6/0x510 [ 2487.104517][ T398] should_fail_alloc_page+0x5a/0x80 [ 2487.109550][ T398] prepare_alloc_pages+0x15c/0x700 [ 2487.114499][ T398] ? __alloc_pages+0x5e0/0x5e0 [ 2487.119098][ T398] ? __alloc_pages_bulk+0xe60/0xe60 [ 2487.124134][ T398] ? sched_clock+0x9/0x10 [ 2487.128302][ T398] __alloc_pages+0x138/0x5e0 [ 2487.132725][ T398] ? prep_new_page+0x110/0x110 [ 2487.137328][ T398] ? is_bpf_text_address+0x172/0x190 [ 2487.142449][ T398] pte_alloc_one+0x73/0x1b0 [ 2487.146785][ T398] ? pfn_modify_allowed+0x2f0/0x2f0 [ 2487.151819][ T398] ? arch_stack_walk+0xf3/0x140 [ 2487.156510][ T398] __pte_alloc+0x86/0x350 [ 2487.160670][ T398] ? free_pgtables+0x280/0x280 [ 2487.165295][ T398] ? _raw_spin_lock+0xa4/0x1b0 [ 2487.169972][ T398] ? __kasan_check_write+0x14/0x20 [ 2487.174918][ T398] copy_page_range+0x28a8/0x2f90 [ 2487.179690][ T398] ? __kasan_slab_alloc+0xb1/0xe0 [ 2487.184560][ T398] ? pfn_valid+0x1e0/0x1e0 [ 2487.188805][ T398] ? vma_gap_callbacks_rotate+0x1b7/0x210 [ 2487.194362][ T398] ? __rb_insert_augmented+0x5de/0x610 [ 2487.199656][ T398] copy_mm+0xc7e/0x13e0 [ 2487.203652][ T398] ? copy_signal+0x610/0x610 [ 2487.208070][ T398] ? __init_rwsem+0xd6/0x1c0 [ 2487.212501][ T398] ? copy_signal+0x4e3/0x610 [ 2487.216922][ T398] copy_process+0x12bc/0x3260 [ 2487.221440][ T398] ? proc_fail_nth_write+0x20b/0x290 [ 2487.226559][ T398] ? fsnotify_perm+0x6a/0x5d0 [ 2487.231076][ T398] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2487.236016][ T398] ? vfs_write+0x9ec/0x1110 [ 2487.240360][ T398] kernel_clone+0x21e/0x9e0 [ 2487.244698][ T398] ? file_end_write+0x1c0/0x1c0 [ 2487.249387][ T398] ? create_io_thread+0x1e0/0x1e0 [ 2487.254240][ T398] ? mutex_unlock+0xb2/0x260 [ 2487.258669][ T398] ? __mutex_lock_slowpath+0x10/0x10 [ 2487.263793][ T398] __x64_sys_clone+0x23f/0x290 [ 2487.268392][ T398] ? __do_sys_vfork+0x130/0x130 [ 2487.273126][ T398] ? ksys_write+0x260/0x2c0 [ 2487.277426][ T398] ? debug_smp_processor_id+0x17/0x20 [ 2487.282625][ T398] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2487.288524][ T398] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2487.293998][ T398] do_syscall_64+0x3d/0xb0 [ 2487.298246][ T398] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2487.303975][ T398] RIP: 0033:0x7fdfd1d08ae9 [ 2487.308235][ T398] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2487.327673][ T398] RSP: 002b:00007fdfd0a8b078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2487.335913][ T398] RAX: ffffffffffffffda RBX: 00007fdfd1e27f80 RCX: 00007fdfd1d08ae9 [ 2487.343845][ T398] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022001200 [ 2487.351658][ T398] RBP: 00007fdfd0a8b120 R08: 0000000000000000 R09: 0000000000000000 18:24:54 executing program 3: bpf$MAP_CREATE(0x1400000000000000, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:54 executing program 5: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 44) [ 2487.359463][ T398] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2487.367275][ T398] R13: 000000000000000b R14: 00007fdfd1e27f80 R15: 00007fff62717c48 [ 2487.375095][ T398] [ 2487.431756][ T424] FAULT_INJECTION: forcing a failure. [ 2487.431756][ T424] name failslab, interval 1, probability 0, space 0, times 0 [ 2487.459138][ T424] CPU: 1 PID: 424 Comm: syz-executor.5 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2487.469141][ T424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2487.479218][ T424] Call Trace: [ 2487.482331][ T424] [ 2487.485111][ T424] dump_stack_lvl+0x151/0x1b7 [ 2487.489625][ T424] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2487.495090][ T424] dump_stack+0x15/0x17 [ 2487.499084][ T424] should_fail+0x3c6/0x510 [ 2487.503335][ T424] __should_failslab+0xa4/0xe0 [ 2487.507941][ T424] ? vm_area_dup+0x26/0x230 [ 2487.512273][ T424] should_failslab+0x9/0x20 [ 2487.516619][ T424] slab_pre_alloc_hook+0x37/0xd0 [ 2487.521388][ T424] ? vm_area_dup+0x26/0x230 [ 2487.525727][ T424] kmem_cache_alloc+0x44/0x200 [ 2487.530334][ T424] vm_area_dup+0x26/0x230 [ 2487.534495][ T424] copy_mm+0x9a1/0x13e0 [ 2487.538497][ T424] ? copy_signal+0x610/0x610 [ 2487.542915][ T424] ? __init_rwsem+0xd6/0x1c0 [ 2487.547338][ T424] ? copy_signal+0x4e3/0x610 [ 2487.551765][ T424] copy_process+0x12bc/0x3260 [ 2487.556284][ T424] ? proc_fail_nth_write+0x20b/0x290 [ 2487.561401][ T424] ? fsnotify_perm+0x6a/0x5d0 [ 2487.565916][ T424] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2487.570860][ T424] ? vfs_write+0x9ec/0x1110 [ 2487.575204][ T424] kernel_clone+0x21e/0x9e0 [ 2487.579542][ T424] ? file_end_write+0x1c0/0x1c0 [ 2487.584232][ T424] ? create_io_thread+0x1e0/0x1e0 [ 2487.589085][ T424] ? mutex_unlock+0xb2/0x260 [ 2487.593514][ T424] ? __mutex_lock_slowpath+0x10/0x10 [ 2487.598642][ T424] __x64_sys_clone+0x23f/0x290 [ 2487.603238][ T424] ? __do_sys_vfork+0x130/0x130 [ 2487.607920][ T424] ? ksys_write+0x260/0x2c0 [ 2487.612264][ T424] ? debug_smp_processor_id+0x17/0x20 [ 2487.617468][ T424] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2487.623379][ T424] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2487.629185][ T424] do_syscall_64+0x3d/0xb0 [ 2487.633439][ T424] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2487.639165][ T424] RIP: 0033:0x7fdfd1d08ae9 [ 2487.643422][ T424] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2487.662864][ T424] RSP: 002b:00007fdfd0a8b078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2487.671107][ T424] RAX: ffffffffffffffda RBX: 00007fdfd1e27f80 RCX: 00007fdfd1d08ae9 [ 2487.678918][ T424] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022001200 [ 2487.686728][ T424] RBP: 00007fdfd0a8b120 R08: 0000000000000000 R09: 0000000000000000 [ 2487.694547][ T424] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2487.702352][ T424] R13: 000000000000000b R14: 00007fdfd1e27f80 R15: 00007fff62717c48 [ 2487.710180][ T424] 18:24:55 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f00000005c0)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000100)=""/207, 0xcf}, {&(0x7f0000000200)=""/102, 0x66}, {&(0x7f0000000080)=""/36, 0x24}, {&(0x7f00000003c0)=""/86, 0x56}, {&(0x7f0000000440)=""/45, 0x2d}], 0x5, &(0x7f0000000500)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}, 0x0) (async) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) (async) close(r1) 18:24:55 executing program 2: socketpair(0x10, 0x803, 0x9, &(0x7f0000000040)) 18:24:55 executing program 3: bpf$MAP_CREATE(0x1500000000000000, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:55 executing program 1: syz_clone(0x2a82580, 0x0, 0x0, 0x0, 0x0, 0x0) 18:24:55 executing program 5: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 45) 18:24:55 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async, rerun: 64) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (rerun: 64) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000300)=@nl=@unspec, 0x80, &(0x7f0000001440)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f00000015c0)=""/117, 0x75}, {&(0x7f0000001540)=""/66, 0x42}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000200)=""/109, 0x6d}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/192, 0xc0}], 0x7, &(0x7f00000014c0)=""/15, 0xf}, 0x0) 18:24:55 executing program 2: socketpair(0x10, 0x803, 0x9, &(0x7f0000000040)) 18:24:55 executing program 3: bpf$MAP_CREATE(0x1600000000000000, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:55 executing program 3: bpf$MAP_CREATE(0x1700000000000000, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:55 executing program 2: socketpair(0x10, 0x803, 0x9, &(0x7f0000000040)) [ 2487.852892][ T441] FAULT_INJECTION: forcing a failure. [ 2487.852892][ T441] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2487.882462][ T441] CPU: 0 PID: 441 Comm: syz-executor.5 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2487.892463][ T441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2487.902360][ T441] Call Trace: [ 2487.905481][ T441] [ 2487.908306][ T441] dump_stack_lvl+0x151/0x1b7 [ 2487.912772][ T441] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2487.918244][ T441] dump_stack+0x15/0x17 [ 2487.922241][ T441] should_fail+0x3c6/0x510 [ 2487.926490][ T441] should_fail_alloc_page+0x5a/0x80 [ 2487.931519][ T441] prepare_alloc_pages+0x15c/0x700 [ 2487.936555][ T441] ? __alloc_pages_bulk+0xe60/0xe60 [ 2487.941592][ T441] __alloc_pages+0x138/0x5e0 [ 2487.946015][ T441] ? stack_trace_save+0x1c0/0x1c0 [ 2487.950883][ T441] ? prep_new_page+0x110/0x110 [ 2487.955479][ T441] get_zeroed_page+0x19/0x40 [ 2487.959912][ T441] __pud_alloc+0x8b/0x260 [ 2487.964072][ T441] ? stack_trace_snprint+0xf0/0xf0 [ 2487.969017][ T441] ? do_handle_mm_fault+0x2330/0x2330 [ 2487.974221][ T441] ? __stack_depot_save+0x34/0x470 [ 2487.979172][ T441] ? anon_vma_clone+0x9a/0x500 [ 2487.983768][ T441] copy_page_range+0x2bcf/0x2f90 [ 2487.988539][ T441] ? __kasan_slab_alloc+0xb1/0xe0 [ 2487.993400][ T441] ? slab_post_alloc_hook+0x53/0x2c0 [ 2487.998519][ T441] ? copy_mm+0xa3a/0x13e0 [ 2488.002692][ T441] ? copy_process+0x12bc/0x3260 [ 2488.007381][ T441] ? kernel_clone+0x21e/0x9e0 [ 2488.011892][ T441] ? __x64_sys_clone+0x23f/0x290 [ 2488.016659][ T441] ? do_syscall_64+0x3d/0xb0 [ 2488.021089][ T441] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2488.026996][ T441] ? pfn_valid+0x1e0/0x1e0 [ 2488.031245][ T441] ? rwsem_write_trylock+0x15b/0x290 [ 2488.036360][ T441] ? vma_interval_tree_augment_rotate+0x1d0/0x1d0 [ 2488.042608][ T441] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 2488.048167][ T441] ? __rb_insert_augmented+0x5de/0x610 [ 2488.053462][ T441] copy_mm+0xc7e/0x13e0 [ 2488.057453][ T441] ? copy_signal+0x610/0x610 [ 2488.061877][ T441] ? __init_rwsem+0xd6/0x1c0 [ 2488.066307][ T441] ? copy_signal+0x4e3/0x610 [ 2488.070730][ T441] copy_process+0x12bc/0x3260 [ 2488.075246][ T441] ? proc_fail_nth_write+0x20b/0x290 [ 2488.080363][ T441] ? fsnotify_perm+0x6a/0x5d0 [ 2488.084879][ T441] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2488.089824][ T441] ? vfs_write+0x9ec/0x1110 [ 2488.094174][ T441] kernel_clone+0x21e/0x9e0 [ 2488.098505][ T441] ? file_end_write+0x1c0/0x1c0 [ 2488.103192][ T441] ? create_io_thread+0x1e0/0x1e0 [ 2488.108052][ T441] ? mutex_unlock+0xb2/0x260 [ 2488.112613][ T441] ? __mutex_lock_slowpath+0x10/0x10 [ 2488.117748][ T441] __x64_sys_clone+0x23f/0x290 [ 2488.122339][ T441] ? __do_sys_vfork+0x130/0x130 [ 2488.127015][ T441] ? ksys_write+0x260/0x2c0 [ 2488.131360][ T441] ? debug_smp_processor_id+0x17/0x20 [ 2488.136561][ T441] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2488.142488][ T441] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2488.147936][ T441] do_syscall_64+0x3d/0xb0 [ 2488.152189][ T441] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2488.157914][ T441] RIP: 0033:0x7fdfd1d08ae9 [ 2488.162169][ T441] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2488.181616][ T441] RSP: 002b:00007fdfd0a8b078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2488.189852][ T441] RAX: ffffffffffffffda RBX: 00007fdfd1e27f80 RCX: 00007fdfd1d08ae9 18:24:55 executing program 3: bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:55 executing program 2: socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000003a00000041441000100000001800000001f8ffff0000000020000000850000002a0000001864000003000000000000000400000085100000fbffffff18400000faffffff000000000000000095566b0000000000"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0xf6, &(0x7f0000000140)=""/246, 0x41100, 0x3, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0xc, 0x1ff, 0xf}, 0x10, 0x0, 0xffffffffffffffff, 0xa, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000300)=[{0x4, 0x4, 0x3, 0x1}, {0x2, 0x3, 0xb, 0xa}, {0x1, 0x4, 0x1, 0x5}, {0x2, 0x4, 0xa, 0x1}, {0x4, 0x3, 0x8, 0x3}, {0x4, 0x3, 0x10, 0x1}, {0x1, 0x3, 0x1, 0xc}, {0x5, 0x2, 0x10, 0x6}, {0x5, 0x5, 0x3, 0x5}, {0x4, 0x2, 0xe}], 0x10, 0x193}, 0x90) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@cgroup, 0x2, 0x0, 0xcf3, &(0x7f0000000480)=[0x0], 0x1, 0x0, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)={@map=0x1, r0, 0x2e, 0x11, r1, @prog_fd, r2}, 0x20) [ 2488.197668][ T441] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022001200 [ 2488.205478][ T441] RBP: 00007fdfd0a8b120 R08: 0000000000000000 R09: 0000000000000000 [ 2488.213289][ T441] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2488.221211][ T441] R13: 000000000000000b R14: 00007fdfd1e27f80 R15: 00007fff62717c48 [ 2488.229028][ T441] 18:24:55 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f00000005c0)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000100)=""/207, 0xcf}, {&(0x7f0000000200)=""/102, 0x66}, {&(0x7f0000000080)=""/36, 0x24}, {&(0x7f00000003c0)=""/86, 0x56}, {&(0x7f0000000440)=""/45, 0x2d}], 0x5, &(0x7f0000000500)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) (async) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) close(r1) 18:24:55 executing program 3: bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:55 executing program 2: socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000003a00000041441000100000001800000001f8ffff0000000020000000850000002a0000001864000003000000000000000400000085100000fbffffff18400000faffffff000000000000000095566b0000000000"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0xf6, &(0x7f0000000140)=""/246, 0x41100, 0x3, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0xc, 0x1ff, 0xf}, 0x10, 0x0, 0xffffffffffffffff, 0xa, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000300)=[{0x4, 0x4, 0x3, 0x1}, {0x2, 0x3, 0xb, 0xa}, {0x1, 0x4, 0x1, 0x5}, {0x2, 0x4, 0xa, 0x1}, {0x4, 0x3, 0x8, 0x3}, {0x4, 0x3, 0x10, 0x1}, {0x1, 0x3, 0x1, 0xc}, {0x5, 0x2, 0x10, 0x6}, {0x5, 0x5, 0x3, 0x5}, {0x4, 0x2, 0xe}], 0x10, 0x193}, 0x90) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@cgroup, 0x2, 0x0, 0xcf3, &(0x7f0000000480)=[0x0], 0x1, 0x0, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)={@map=0x1, r0, 0x2e, 0x11, r1, @prog_fd, r2}, 0x20) socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000003a00000041441000100000001800000001f8ffff0000000020000000850000002a0000001864000003000000000000000400000085100000fbffffff18400000faffffff000000000000000095566b0000000000"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0xf6, &(0x7f0000000140)=""/246, 0x41100, 0x3, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0xc, 0x1ff, 0xf}, 0x10, 0x0, 0xffffffffffffffff, 0xa, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000300)=[{0x4, 0x4, 0x3, 0x1}, {0x2, 0x3, 0xb, 0xa}, {0x1, 0x4, 0x1, 0x5}, {0x2, 0x4, 0xa, 0x1}, {0x4, 0x3, 0x8, 0x3}, {0x4, 0x3, 0x10, 0x1}, {0x1, 0x3, 0x1, 0xc}, {0x5, 0x2, 0x10, 0x6}, {0x5, 0x5, 0x3, 0x5}, {0x4, 0x2, 0xe}], 0x10, 0x193}, 0x90) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@cgroup, 0x2, 0x0, 0xcf3, &(0x7f0000000480)=[0x0], 0x1, 0x0, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0]}, 0x40) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)={@map=0x1, r0, 0x2e, 0x11, r1, @prog_fd, r2}, 0x20) (async) 18:24:55 executing program 1: syz_clone(0x2a82580, 0x0, 0x0, 0x0, 0x0, 0x0) 18:24:55 executing program 5: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 46) [ 2488.672833][ T458] FAULT_INJECTION: forcing a failure. [ 2488.672833][ T458] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2488.706693][ T458] CPU: 0 PID: 458 Comm: syz-executor.5 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2488.716695][ T458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2488.726594][ T458] Call Trace: [ 2488.729719][ T458] [ 2488.732493][ T458] dump_stack_lvl+0x151/0x1b7 [ 2488.737007][ T458] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2488.742476][ T458] dump_stack+0x15/0x17 [ 2488.746462][ T458] should_fail+0x3c6/0x510 [ 2488.750717][ T458] should_fail_alloc_page+0x5a/0x80 [ 2488.755748][ T458] prepare_alloc_pages+0x15c/0x700 [ 2488.760698][ T458] ? __alloc_pages_bulk+0xe60/0xe60 [ 2488.765735][ T458] __alloc_pages+0x138/0x5e0 [ 2488.770159][ T458] ? prep_new_page+0x110/0x110 [ 2488.774759][ T458] ? __alloc_pages+0x206/0x5e0 [ 2488.779357][ T458] ? prep_new_page+0x110/0x110 [ 2488.783960][ T458] ? __kasan_check_write+0x14/0x20 [ 2488.788908][ T458] ? _raw_spin_lock+0xa4/0x1b0 [ 2488.793511][ T458] pte_alloc_one+0x73/0x1b0 [ 2488.797847][ T458] ? pfn_modify_allowed+0x2f0/0x2f0 [ 2488.802885][ T458] ? __pmd_alloc+0x48d/0x550 [ 2488.807305][ T458] __pte_alloc+0x86/0x350 [ 2488.811468][ T458] ? __pud_alloc+0x260/0x260 [ 2488.815914][ T458] ? __pud_alloc+0x213/0x260 [ 2488.820323][ T458] ? free_pgtables+0x280/0x280 [ 2488.824932][ T458] ? do_handle_mm_fault+0x2330/0x2330 [ 2488.830131][ T458] ? __stack_depot_save+0x34/0x470 [ 2488.835192][ T458] ? anon_vma_clone+0x9a/0x500 [ 2488.839794][ T458] copy_page_range+0x28a8/0x2f90 [ 2488.844558][ T458] ? __kasan_slab_alloc+0xb1/0xe0 [ 2488.849418][ T458] ? slab_post_alloc_hook+0x53/0x2c0 [ 2488.854537][ T458] ? kernel_clone+0x21e/0x9e0 [ 2488.859051][ T458] ? do_syscall_64+0x3d/0xb0 [ 2488.863477][ T458] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2488.869385][ T458] ? pfn_valid+0x1e0/0x1e0 [ 2488.873634][ T458] ? rwsem_write_trylock+0x15b/0x290 [ 2488.878755][ T458] ? vma_interval_tree_augment_rotate+0x1d0/0x1d0 [ 2488.885004][ T458] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 2488.890558][ T458] ? __rb_insert_augmented+0x5de/0x610 [ 2488.895857][ T458] copy_mm+0xc7e/0x13e0 [ 2488.899849][ T458] ? copy_signal+0x610/0x610 [ 2488.904269][ T458] ? __init_rwsem+0xd6/0x1c0 [ 2488.908695][ T458] ? copy_signal+0x4e3/0x610 [ 2488.913124][ T458] copy_process+0x12bc/0x3260 [ 2488.917637][ T458] ? proc_fail_nth_write+0x20b/0x290 [ 2488.922758][ T458] ? fsnotify_perm+0x6a/0x5d0 [ 2488.927272][ T458] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2488.932216][ T458] ? vfs_write+0x9ec/0x1110 [ 2488.936560][ T458] kernel_clone+0x21e/0x9e0 [ 2488.940897][ T458] ? file_end_write+0x1c0/0x1c0 [ 2488.945586][ T458] ? create_io_thread+0x1e0/0x1e0 [ 2488.950443][ T458] ? mutex_unlock+0xb2/0x260 [ 2488.954871][ T458] ? __mutex_lock_slowpath+0x10/0x10 [ 2488.959995][ T458] __x64_sys_clone+0x23f/0x290 [ 2488.964592][ T458] ? __do_sys_vfork+0x130/0x130 [ 2488.969276][ T458] ? ksys_write+0x260/0x2c0 [ 2488.973620][ T458] ? debug_smp_processor_id+0x17/0x20 [ 2488.978827][ T458] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2488.984732][ T458] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2488.990197][ T458] do_syscall_64+0x3d/0xb0 [ 2488.994447][ T458] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2489.000177][ T458] RIP: 0033:0x7fdfd1d08ae9 [ 2489.004428][ T458] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 18:24:56 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async, rerun: 64) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (rerun: 64) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000300)=@nl=@unspec, 0x80, &(0x7f0000001440)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f00000015c0)=""/117, 0x75}, {&(0x7f0000001540)=""/66, 0x42}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000200)=""/109, 0x6d}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/192, 0xc0}], 0x7, &(0x7f00000014c0)=""/15, 0xf}, 0x0) 18:24:56 executing program 2: socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) (async) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000003a00000041441000100000001800000001f8ffff0000000020000000850000002a0000001864000003000000000000000400000085100000fbffffff18400000faffffff000000000000000095566b0000000000"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0xf6, &(0x7f0000000140)=""/246, 0x41100, 0x3, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0xc, 0x1ff, 0xf}, 0x10, 0x0, 0xffffffffffffffff, 0xa, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000300)=[{0x4, 0x4, 0x3, 0x1}, {0x2, 0x3, 0xb, 0xa}, {0x1, 0x4, 0x1, 0x5}, {0x2, 0x4, 0xa, 0x1}, {0x4, 0x3, 0x8, 0x3}, {0x4, 0x3, 0x10, 0x1}, {0x1, 0x3, 0x1, 0xc}, {0x5, 0x2, 0x10, 0x6}, {0x5, 0x5, 0x3, 0x5}, {0x4, 0x2, 0xe}], 0x10, 0x193}, 0x90) (async, rerun: 64) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@cgroup, 0x2, 0x0, 0xcf3, &(0x7f0000000480)=[0x0], 0x1, 0x0, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0], 0x0}, 0x40) (rerun: 64) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)={@map=0x1, r0, 0x2e, 0x11, r1, @prog_fd, r2}, 0x20) 18:24:56 executing program 3: bpf$MAP_CREATE(0x1a00000000000000, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:56 executing program 5: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 47) [ 2489.023872][ T458] RSP: 002b:00007fdfd0a8b078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2489.032117][ T458] RAX: ffffffffffffffda RBX: 00007fdfd1e27f80 RCX: 00007fdfd1d08ae9 [ 2489.039930][ T458] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022001200 [ 2489.047738][ T458] RBP: 00007fdfd0a8b120 R08: 0000000000000000 R09: 0000000000000000 [ 2489.055548][ T458] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2489.063362][ T458] R13: 000000000000000b R14: 00007fdfd1e27f80 R15: 00007fff62717c48 [ 2489.071176][ T458] 18:24:56 executing program 1: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r0, &(0x7f00000001c0)='memory.pressure\x00', 0x2, 0x0) r1 = openat$cgroup(r0, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r1, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r1, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r2, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r2}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r2}, 0x8) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r2, &(0x7f0000000000)="4424795902282d9fac9cb9b26d38211750839b7d67f9dda0bf84ad89675845b952cc2f222b7d4b6a42b4218eeb11c0bdd3ca41a0dc8d0639c044e6887dcb3c84adc767fa4cacae749d4625b8a31f0a04d6154c032c4335e61be8d9f39caceea945d2b91df51ba74210fa9bdf7d4668ec4efbc6d8d66ad32264136e7efd7cb0036f1750912122419eb6b24623d0f6dd9d", &(0x7f00000000c0)=""/182, 0x4}, 0x20) syz_clone(0x44000180, 0x0, 0x0, 0x0, 0x0, 0x0) 18:24:56 executing program 3: bpf$MAP_CREATE(0x1b00000000000000, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:56 executing program 2: socketpair(0x10, 0x0, 0x458, &(0x7f0000000000)) 18:24:56 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000005c0)='\x00') close(r1) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup(r2, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r3, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r4 = openat$cgroup_ro(r3, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r4, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r4}, 0x20) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r4}, 0x8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x20, &(0x7f0000000480)={&(0x7f0000000200)=""/66, 0x42, 0x0, &(0x7f00000003c0)=""/131, 0x83}}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$cgroup_ro(r4, &(0x7f0000000600)='memory.current\x00', 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000640)={0xffffffffffffffff, r8, 0x0, r5}, 0x10) recvmsg(r7, 0x0, 0x0) close(r7) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x1d, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="8510000000000000d1221000eff636ff18450000060000000000000000000000180000000000000000040000007f9409003f0000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0xfffffff8, 0xc0, &(0x7f0000000100)=""/192, 0x41100, 0x31, '\x00', 0x0, 0x1b, r4, 0x8, &(0x7f0000000080)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0xf, 0x6, 0x8}, 0x10, r6, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) 18:24:56 executing program 3: bpf$MAP_CREATE(0x1c00000000000000, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:56 executing program 2: socketpair(0x10, 0x0, 0x458, &(0x7f0000000000)) 18:24:56 executing program 2: socketpair(0x10, 0x0, 0x458, &(0x7f0000000000)) socketpair(0x10, 0x0, 0x458, &(0x7f0000000000)) (async) 18:24:56 executing program 3: bpf$MAP_CREATE(0x1d00000000000000, &(0x7f0000000540)=@base={0xd}, 0x48) [ 2489.532786][ T490] FAULT_INJECTION: forcing a failure. [ 2489.532786][ T490] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2489.581119][ T490] CPU: 1 PID: 490 Comm: syz-executor.5 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2489.591119][ T490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2489.601100][ T490] Call Trace: [ 2489.604224][ T490] [ 2489.607012][ T490] dump_stack_lvl+0x151/0x1b7 [ 2489.611513][ T490] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2489.616984][ T490] ? __update_load_avg_cfs_rq+0xb1/0x2f0 [ 2489.622450][ T490] dump_stack+0x15/0x17 [ 2489.626438][ T490] should_fail+0x3c6/0x510 [ 2489.630695][ T490] should_fail_alloc_page+0x5a/0x80 [ 2489.635726][ T490] prepare_alloc_pages+0x15c/0x700 [ 2489.640676][ T490] ? __alloc_pages_bulk+0xe60/0xe60 [ 2489.645709][ T490] ? sched_clock+0x9/0x10 [ 2489.649877][ T490] ? native_set_ldt+0x360/0x360 [ 2489.654567][ T490] __alloc_pages+0x138/0x5e0 [ 2489.659004][ T490] ? _raw_spin_unlock+0x4d/0x70 [ 2489.663673][ T490] ? prep_new_page+0x110/0x110 [ 2489.668278][ T490] pte_alloc_one+0x73/0x1b0 [ 2489.672614][ T490] ? pfn_modify_allowed+0x2f0/0x2f0 [ 2489.677651][ T490] ? preempt_schedule+0xd9/0xe0 [ 2489.682338][ T490] ? preempt_schedule_common+0xbe/0xf0 [ 2489.687629][ T490] __pte_alloc+0x86/0x350 [ 2489.691801][ T490] ? free_pgtables+0x280/0x280 [ 2489.696396][ T490] ? _raw_spin_lock+0xa4/0x1b0 [ 2489.700994][ T490] ? __kasan_check_write+0x14/0x20 [ 2489.705947][ T490] copy_page_range+0x28a8/0x2f90 [ 2489.710716][ T490] ? __kasan_slab_alloc+0xb1/0xe0 [ 2489.715583][ T490] ? pfn_valid+0x1e0/0x1e0 [ 2489.720102][ T490] ? vma_interval_tree_augment_rotate+0x1a3/0x1d0 [ 2489.726346][ T490] copy_mm+0xc7e/0x13e0 [ 2489.730338][ T490] ? copy_signal+0x610/0x610 [ 2489.734754][ T490] ? __init_rwsem+0xd6/0x1c0 [ 2489.739182][ T490] ? copy_signal+0x4e3/0x610 [ 2489.743612][ T490] copy_process+0x12bc/0x3260 [ 2489.748192][ T490] ? proc_fail_nth_write+0x20b/0x290 [ 2489.753242][ T490] ? fsnotify_perm+0x6a/0x5d0 [ 2489.757755][ T490] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2489.762704][ T490] ? vfs_write+0x9ec/0x1110 [ 2489.767052][ T490] kernel_clone+0x21e/0x9e0 [ 2489.771385][ T490] ? file_end_write+0x1c0/0x1c0 [ 2489.776074][ T490] ? create_io_thread+0x1e0/0x1e0 [ 2489.780928][ T490] ? mutex_unlock+0xb2/0x260 [ 2489.785355][ T490] ? __mutex_lock_slowpath+0x10/0x10 [ 2489.790478][ T490] __x64_sys_clone+0x23f/0x290 [ 2489.795081][ T490] ? __do_sys_vfork+0x130/0x130 [ 2489.799765][ T490] ? ksys_write+0x260/0x2c0 [ 2489.804108][ T490] ? debug_smp_processor_id+0x17/0x20 [ 2489.809311][ T490] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2489.815225][ T490] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2489.820699][ T490] do_syscall_64+0x3d/0xb0 [ 2489.824937][ T490] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2489.830663][ T490] RIP: 0033:0x7fdfd1d08ae9 [ 2489.834914][ T490] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2489.854357][ T490] RSP: 002b:00007fdfd0a8b078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2489.862601][ T490] RAX: ffffffffffffffda RBX: 00007fdfd1e27f80 RCX: 00007fdfd1d08ae9 [ 2489.870420][ T490] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022001200 [ 2489.878224][ T490] RBP: 00007fdfd0a8b120 R08: 0000000000000000 R09: 0000000000000000 [ 2489.886050][ T490] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2489.893937][ T490] R13: 000000000000000b R14: 00007fdfd1e27f80 R15: 00007fff62717c48 [ 2489.902011][ T490] 18:24:57 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r0, &(0x7f00000001c0)='memory.pressure\x00', 0x2, 0x0) r1 = openat$cgroup(r0, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r1, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r1, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r2, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r2}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r2}, 0x8) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r2, &(0x7f0000000000)="4424795902282d9fac9cb9b26d38211750839b7d67f9dda0bf84ad89675845b952cc2f222b7d4b6a42b4218eeb11c0bdd3ca41a0dc8d0639c044e6887dcb3c84adc767fa4cacae749d4625b8a31f0a04d6154c032c4335e61be8d9f39caceea945d2b91df51ba74210fa9bdf7d4668ec4efbc6d8d66ad32264136e7efd7cb0036f1750912122419eb6b24623d0f6dd9d", &(0x7f00000000c0)=""/182, 0x4}, 0x20) syz_clone(0x44000180, 0x0, 0x0, 0x0, 0x0, 0x0) 18:24:57 executing program 2: socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000100)=""/192, 0xc0}, {&(0x7f00000001c0)=""/53, 0x35}, {&(0x7f0000000200)=""/104, 0x68}, {&(0x7f0000000280)=""/236, 0xec}], 0x4, &(0x7f00000003c0)=""/255, 0xff}, 0x2101) 18:24:57 executing program 1: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r0, &(0x7f00000001c0)='memory.pressure\x00', 0x2, 0x0) r1 = openat$cgroup(r0, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r1, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r1, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r2, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r2}, 0x20) (async) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r2}, 0x8) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r2, &(0x7f0000000000)="4424795902282d9fac9cb9b26d38211750839b7d67f9dda0bf84ad89675845b952cc2f222b7d4b6a42b4218eeb11c0bdd3ca41a0dc8d0639c044e6887dcb3c84adc767fa4cacae749d4625b8a31f0a04d6154c032c4335e61be8d9f39caceea945d2b91df51ba74210fa9bdf7d4668ec4efbc6d8d66ad32264136e7efd7cb0036f1750912122419eb6b24623d0f6dd9d", &(0x7f00000000c0)=""/182, 0x4}, 0x20) (async) syz_clone(0x44000180, 0x0, 0x0, 0x0, 0x0, 0x0) 18:24:57 executing program 5: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 48) 18:24:57 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000005c0)='\x00') close(r1) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup(r2, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r3, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r4 = openat$cgroup_ro(r3, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r4, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r4}, 0x20) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r4}, 0x8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x20, &(0x7f0000000480)={&(0x7f0000000200)=""/66, 0x42, 0x0, &(0x7f00000003c0)=""/131, 0x83}}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$cgroup_ro(r4, &(0x7f0000000600)='memory.current\x00', 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000640)={0xffffffffffffffff, r8, 0x0, r5}, 0x10) recvmsg(r7, 0x0, 0x0) close(r7) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x1d, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="8510000000000000d1221000eff636ff18450000060000000000000000000000180000000000000000040000007f9409003f0000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0xfffffff8, 0xc0, &(0x7f0000000100)=""/192, 0x41100, 0x31, '\x00', 0x0, 0x1b, r4, 0x8, &(0x7f0000000080)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0xf, 0x6, 0x8}, 0x10, r6, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000005c0)='\x00') (async) close(r1) (async) openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) (async) openat$cgroup(r2, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) (async) openat$cgroup_pressure(r3, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) (async) openat$cgroup_ro(r3, 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r4, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r4}, 0x20) (async) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r4}, 0x8) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x20, &(0x7f0000000480)={&(0x7f0000000200)=""/66, 0x42, 0x0, &(0x7f00000003c0)=""/131, 0x83}}, 0x10) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)) (async) openat$cgroup_ro(r4, &(0x7f0000000600)='memory.current\x00', 0x0, 0x0) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000640)={0xffffffffffffffff, r8, 0x0, r5}, 0x10) (async) recvmsg(r7, 0x0, 0x0) (async) close(r7) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x1d, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="8510000000000000d1221000eff636ff18450000060000000000000000000000180000000000000000040000007f9409003f0000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0xfffffff8, 0xc0, &(0x7f0000000100)=""/192, 0x41100, 0x31, '\x00', 0x0, 0x1b, r4, 0x8, &(0x7f0000000080)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0xf, 0x6, 0x8}, 0x10, r6, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) (async) 18:24:57 executing program 3: bpf$MAP_CREATE(0x1e00000000000000, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:57 executing program 2: socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000100)=""/192, 0xc0}, {&(0x7f00000001c0)=""/53, 0x35}, {&(0x7f0000000200)=""/104, 0x68}, {&(0x7f0000000280)=""/236, 0xec}], 0x4, &(0x7f00000003c0)=""/255, 0xff}, 0x2101) 18:24:57 executing program 0: socketpair(0x10, 0x803, 0x9, &(0x7f0000000040)) 18:24:57 executing program 3: bpf$MAP_CREATE(0x1f00000000000000, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:57 executing program 2: socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000100)=""/192, 0xc0}, {&(0x7f00000001c0)=""/53, 0x35}, {&(0x7f0000000200)=""/104, 0x68}, {&(0x7f0000000280)=""/236, 0xec}], 0x4, &(0x7f00000003c0)=""/255, 0xff}, 0x2101) 18:24:57 executing program 3: bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:57 executing program 3: bpf$MAP_CREATE(0x2100000000000000, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:57 executing program 2: socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000f00), 0x22040, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000080)=""/255) 18:24:57 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000005c0)='\x00') (async) close(r1) (async) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup(r2, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r3, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) (async, rerun: 64) r4 = openat$cgroup_ro(r3, 0x0, 0x0, 0x0) (rerun: 64) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r4, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r4}, 0x20) (async) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r4}, 0x8) (async, rerun: 32) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x20, &(0x7f0000000480)={&(0x7f0000000200)=""/66, 0x42, 0x0, &(0x7f00000003c0)=""/131, 0x83}}, 0x10) (async, rerun: 32) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$cgroup_ro(r4, &(0x7f0000000600)='memory.current\x00', 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000640)={0xffffffffffffffff, r8, 0x0, r5}, 0x10) (async) recvmsg(r7, 0x0, 0x0) (async) close(r7) (async, rerun: 32) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x1d, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="8510000000000000d1221000eff636ff18450000060000000000000000000000180000000000000000040000007f9409003f0000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0xfffffff8, 0xc0, &(0x7f0000000100)=""/192, 0x41100, 0x31, '\x00', 0x0, 0x1b, r4, 0x8, &(0x7f0000000080)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0xf, 0x6, 0x8}, 0x10, r6, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) (rerun: 32) [ 2490.243997][ T524] FAULT_INJECTION: forcing a failure. [ 2490.243997][ T524] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2490.282768][ T524] CPU: 0 PID: 524 Comm: syz-executor.5 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2490.292903][ T524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2490.302798][ T524] Call Trace: [ 2490.305917][ T524] [ 2490.308697][ T524] dump_stack_lvl+0x151/0x1b7 [ 2490.313387][ T524] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2490.318856][ T524] dump_stack+0x15/0x17 [ 2490.322842][ T524] should_fail+0x3c6/0x510 [ 2490.327271][ T524] should_fail_alloc_page+0x5a/0x80 [ 2490.332319][ T524] prepare_alloc_pages+0x15c/0x700 [ 2490.337251][ T524] ? __alloc_pages+0x5e0/0x5e0 [ 2490.341852][ T524] ? __alloc_pages_bulk+0xe60/0xe60 [ 2490.346896][ T524] __alloc_pages+0x138/0x5e0 [ 2490.351425][ T524] ? prep_new_page+0x110/0x110 [ 2490.356144][ T524] ? is_bpf_text_address+0x172/0x190 [ 2490.361265][ T524] pte_alloc_one+0x73/0x1b0 [ 2490.365602][ T524] ? pfn_modify_allowed+0x2f0/0x2f0 [ 2490.370646][ T524] ? arch_stack_walk+0xf3/0x140 [ 2490.375324][ T524] __pte_alloc+0x86/0x350 [ 2490.379493][ T524] ? free_pgtables+0x280/0x280 [ 2490.384090][ T524] ? _raw_spin_lock+0xa4/0x1b0 [ 2490.388686][ T524] ? __kasan_check_write+0x14/0x20 [ 2490.393640][ T524] copy_page_range+0x28a8/0x2f90 [ 2490.398411][ T524] ? __kasan_slab_alloc+0xb1/0xe0 [ 2490.403277][ T524] ? pfn_valid+0x1e0/0x1e0 [ 2490.407529][ T524] ? vma_gap_callbacks_rotate+0x1b7/0x210 [ 2490.413081][ T524] ? __rb_insert_augmented+0x5de/0x610 [ 2490.418379][ T524] copy_mm+0xc7e/0x13e0 [ 2490.422381][ T524] ? copy_signal+0x610/0x610 [ 2490.426796][ T524] ? __init_rwsem+0xd6/0x1c0 [ 2490.431230][ T524] ? copy_signal+0x4e3/0x610 [ 2490.435668][ T524] copy_process+0x12bc/0x3260 [ 2490.440168][ T524] ? proc_fail_nth_write+0x20b/0x290 [ 2490.445288][ T524] ? fsnotify_perm+0x6a/0x5d0 [ 2490.449797][ T524] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2490.454739][ T524] ? vfs_write+0x9ec/0x1110 [ 2490.459087][ T524] kernel_clone+0x21e/0x9e0 [ 2490.463420][ T524] ? file_end_write+0x1c0/0x1c0 [ 2490.468107][ T524] ? create_io_thread+0x1e0/0x1e0 [ 2490.472968][ T524] ? mutex_unlock+0xb2/0x260 [ 2490.477400][ T524] ? __mutex_lock_slowpath+0x10/0x10 [ 2490.482513][ T524] __x64_sys_clone+0x23f/0x290 [ 2490.487112][ T524] ? __do_sys_vfork+0x130/0x130 [ 2490.491799][ T524] ? ksys_write+0x260/0x2c0 [ 2490.496141][ T524] ? debug_smp_processor_id+0x17/0x20 [ 2490.501784][ T524] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2490.507692][ T524] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2490.513150][ T524] do_syscall_64+0x3d/0xb0 [ 2490.517409][ T524] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2490.523128][ T524] RIP: 0033:0x7fdfd1d08ae9 [ 2490.527383][ T524] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2490.547029][ T524] RSP: 002b:00007fdfd0a8b078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2490.555266][ T524] RAX: ffffffffffffffda RBX: 00007fdfd1e27f80 RCX: 00007fdfd1d08ae9 [ 2490.563077][ T524] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022001200 [ 2490.570890][ T524] RBP: 00007fdfd0a8b120 R08: 0000000000000000 R09: 0000000000000000 [ 2490.578704][ T524] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2490.586516][ T524] R13: 000000000000000b R14: 00007fdfd1e27f80 R15: 00007fff62717c48 [ 2490.594332][ T524] 18:24:58 executing program 1: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r0, &(0x7f00000001c0)='memory.pressure\x00', 0x2, 0x0) (async) r1 = openat$cgroup(r0, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r1, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) (async) r2 = openat$cgroup_ro(r1, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r2, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r2}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r2}, 0x8) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r2, &(0x7f0000000000)="4424795902282d9fac9cb9b26d38211750839b7d67f9dda0bf84ad89675845b952cc2f222b7d4b6a42b4218eeb11c0bdd3ca41a0dc8d0639c044e6887dcb3c84adc767fa4cacae749d4625b8a31f0a04d6154c032c4335e61be8d9f39caceea945d2b91df51ba74210fa9bdf7d4668ec4efbc6d8d66ad32264136e7efd7cb0036f1750912122419eb6b24623d0f6dd9d", &(0x7f00000000c0)=""/182, 0x4}, 0x20) (async) syz_clone(0x44000180, 0x0, 0x0, 0x0, 0x0, 0x0) 18:24:58 executing program 3: bpf$MAP_CREATE(0x2200000000000000, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:58 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='io.stat\x00', 0x0, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x1, 0x1}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000100)="037e27f68d7e28b2a5e1ce96233fbf60a705fd4648019a44bfdaee9718cf999e6707dd9927043208b87e3bdd8763c8b3884c9a232c4d70797c3931353f5292c34f5ae823e5f33f17d589e79e90d37056b4d609a2d8211018b506a9564bef17da31b1cac72e3421a8cdbe59b9c8e7d471818a5e4bed0227f78dd0845790575c32f54e3a1d8cf309c7497cf1d0fa8f579bd0b44bf079686102f5973957380685b4baf594678024d1d1ecf9b476232b1b", 0xaf}, {&(0x7f0000000380)="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", 0x1000}], 0x2, &(0x7f0000000200)="d36427f81eaaee81cc3a880c71238e47c752ba4435caee1e084c32da04ac71010f8cab4195caebf4e2", 0x29, 0x8000}, 0x24008000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000013c0)) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001380)) 18:24:58 executing program 0: socketpair(0x10, 0x803, 0x9, &(0x7f0000000040)) 18:24:58 executing program 2: socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000f00), 0x22040, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000080)=""/255) socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000f00), 0x22040, 0x0) (async) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) (async) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000080)=""/255) (async) 18:24:58 executing program 5: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 49) 18:24:58 executing program 0: socketpair(0x10, 0x803, 0x9, &(0x7f0000000040)) [ 2490.723612][ T563] FAULT_INJECTION: forcing a failure. [ 2490.723612][ T563] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2490.752517][ T563] CPU: 1 PID: 563 Comm: syz-executor.5 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2490.762782][ T563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2490.772683][ T563] Call Trace: [ 2490.775803][ T563] [ 2490.778574][ T563] dump_stack_lvl+0x151/0x1b7 [ 2490.783091][ T563] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2490.788824][ T563] dump_stack+0x15/0x17 [ 2490.792904][ T563] should_fail+0x3c6/0x510 [ 2490.797153][ T563] should_fail_alloc_page+0x5a/0x80 [ 2490.802183][ T563] prepare_alloc_pages+0x15c/0x700 [ 2490.807134][ T563] ? __alloc_pages+0x5e0/0x5e0 [ 2490.811741][ T563] ? __alloc_pages_bulk+0xe60/0xe60 [ 2490.816893][ T563] __alloc_pages+0x138/0x5e0 18:24:58 executing program 3: bpf$MAP_CREATE(0x2300000000000000, &(0x7f0000000540)=@base={0xd}, 0x48) [ 2490.821407][ T563] ? prep_new_page+0x110/0x110 [ 2490.825995][ T563] ? is_bpf_text_address+0x172/0x190 [ 2490.831151][ T563] pte_alloc_one+0x73/0x1b0 [ 2490.835454][ T563] ? pfn_modify_allowed+0x2f0/0x2f0 [ 2490.840490][ T563] ? arch_stack_walk+0xf3/0x140 [ 2490.845174][ T563] __pte_alloc+0x86/0x350 [ 2490.849338][ T563] ? free_pgtables+0x280/0x280 [ 2490.853940][ T563] ? _raw_spin_lock+0xa4/0x1b0 [ 2490.858539][ T563] ? __kasan_check_write+0x14/0x20 [ 2490.863494][ T563] copy_page_range+0x28a8/0x2f90 [ 2490.868265][ T563] ? __kasan_slab_alloc+0xb1/0xe0 [ 2490.873130][ T563] ? pfn_valid+0x1e0/0x1e0 [ 2490.877375][ T563] ? vma_gap_callbacks_rotate+0x1b7/0x210 [ 2490.882933][ T563] ? __rb_insert_augmented+0x5de/0x610 [ 2490.888231][ T563] copy_mm+0xc7e/0x13e0 [ 2490.892395][ T563] ? copy_signal+0x610/0x610 [ 2490.896835][ T563] ? __init_rwsem+0xd6/0x1c0 [ 2490.901243][ T563] ? copy_signal+0x4e3/0x610 [ 2490.905672][ T563] copy_process+0x12bc/0x3260 [ 2490.910182][ T563] ? proc_fail_nth_write+0x20b/0x290 [ 2490.915304][ T563] ? fsnotify_perm+0x6a/0x5d0 [ 2490.919819][ T563] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2490.924847][ T563] ? vfs_write+0x9ec/0x1110 [ 2490.929719][ T563] kernel_clone+0x21e/0x9e0 [ 2490.934049][ T563] ? file_end_write+0x1c0/0x1c0 [ 2490.938827][ T563] ? create_io_thread+0x1e0/0x1e0 [ 2490.943771][ T563] ? mutex_unlock+0xb2/0x260 [ 2490.948202][ T563] ? __mutex_lock_slowpath+0x10/0x10 [ 2490.953318][ T563] __x64_sys_clone+0x23f/0x290 [ 2490.957917][ T563] ? __do_sys_vfork+0x130/0x130 [ 2490.962608][ T563] ? ksys_write+0x260/0x2c0 [ 2490.967207][ T563] ? debug_smp_processor_id+0x17/0x20 18:24:58 executing program 0: socketpair(0x0, 0x803, 0x9, &(0x7f0000000040)) [ 2490.972412][ T563] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2490.978321][ T563] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2490.983957][ T563] do_syscall_64+0x3d/0xb0 [ 2490.988210][ T563] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2490.993938][ T563] RIP: 0033:0x7fdfd1d08ae9 [ 2490.998188][ T563] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 18:24:58 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='io.stat\x00', 0x0, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x1, 0x1}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000100)="037e27f68d7e28b2a5e1ce96233fbf60a705fd4648019a44bfdaee9718cf999e6707dd9927043208b87e3bdd8763c8b3884c9a232c4d70797c3931353f5292c34f5ae823e5f33f17d589e79e90d37056b4d609a2d8211018b506a9564bef17da31b1cac72e3421a8cdbe59b9c8e7d471818a5e4bed0227f78dd0845790575c32f54e3a1d8cf309c7497cf1d0fa8f579bd0b44bf079686102f5973957380685b4baf594678024d1d1ecf9b476232b1b", 0xaf}, {&(0x7f0000000380)="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", 0x1000}], 0x2, &(0x7f0000000200)="d36427f81eaaee81cc3a880c71238e47c752ba4435caee1e084c32da04ac71010f8cab4195caebf4e2", 0x29, 0x8000}, 0x24008000) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000013c0)) (async, rerun: 64) close(r1) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001380)) 18:24:58 executing program 0: socketpair(0x0, 0x803, 0x9, &(0x7f0000000040)) 18:24:58 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1c}, 0x48) [ 2491.017637][ T563] RSP: 002b:00007fdfd0a8b078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2491.025886][ T563] RAX: ffffffffffffffda RBX: 00007fdfd1e27f80 RCX: 00007fdfd1d08ae9 [ 2491.033692][ T563] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022001200 [ 2491.041619][ T563] RBP: 00007fdfd0a8b120 R08: 0000000000000000 R09: 0000000000000000 [ 2491.049431][ T563] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2491.057241][ T563] R13: 000000000000000b R14: 00007fdfd1e27f80 R15: 00007fff62717c48 [ 2491.065056][ T563] 18:24:58 executing program 1: syz_clone(0x10000, 0x0, 0x0, 0x0, 0x0, 0x0) 18:24:58 executing program 2: socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000f00), 0x22040, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) (async) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000080)=""/255) 18:24:58 executing program 0: socketpair(0x0, 0x803, 0x9, &(0x7f0000000040)) 18:24:58 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1d}, 0x48) 18:24:58 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='io.stat\x00', 0x0, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x1, 0x1}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000100)="037e27f68d7e28b2a5e1ce96233fbf60a705fd4648019a44bfdaee9718cf999e6707dd9927043208b87e3bdd8763c8b3884c9a232c4d70797c3931353f5292c34f5ae823e5f33f17d589e79e90d37056b4d609a2d8211018b506a9564bef17da31b1cac72e3421a8cdbe59b9c8e7d471818a5e4bed0227f78dd0845790575c32f54e3a1d8cf309c7497cf1d0fa8f579bd0b44bf079686102f5973957380685b4baf594678024d1d1ecf9b476232b1b", 0xaf}, {&(0x7f0000000380)="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", 0x1000}], 0x2, &(0x7f0000000200)="d36427f81eaaee81cc3a880c71238e47c752ba4435caee1e084c32da04ac71010f8cab4195caebf4e2", 0x29, 0x8000}, 0x24008000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000013c0)) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001380)) 18:24:58 executing program 5: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 50) 18:24:58 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xd}, 0x48) 18:24:58 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x1c}, 0x18) unlink(&(0x7f0000000080)='./file0\x00') 18:24:58 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/245, 0xf5}, 0x40000020) close(r1) 18:24:58 executing program 0: socketpair(0x10, 0x0, 0x9, &(0x7f0000000040)) 18:24:58 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x1c}, 0x18) unlink(&(0x7f0000000080)='./file0\x00') (async) unlink(&(0x7f0000000080)='./file0\x00') 18:24:58 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xd, 0x2}, 0x48) 18:24:58 executing program 1: syz_clone(0x10000, 0x0, 0x0, 0x0, 0x0, 0x0) 18:24:58 executing program 0: socketpair(0x10, 0x0, 0x9, &(0x7f0000000040)) 18:24:58 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xd, 0x3}, 0x48) [ 2491.517537][ T621] FAULT_INJECTION: forcing a failure. [ 2491.517537][ T621] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2491.531618][ T621] CPU: 0 PID: 621 Comm: syz-executor.5 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2491.541612][ T621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2491.551519][ T621] Call Trace: [ 2491.554630][ T621] [ 2491.557456][ T621] dump_stack_lvl+0x151/0x1b7 [ 2491.562007][ T621] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2491.567474][ T621] ? __update_load_avg_cfs_rq+0xb1/0x2f0 [ 2491.572944][ T621] dump_stack+0x15/0x17 [ 2491.576938][ T621] should_fail+0x3c6/0x510 [ 2491.581194][ T621] should_fail_alloc_page+0x5a/0x80 [ 2491.586220][ T621] prepare_alloc_pages+0x15c/0x700 [ 2491.591274][ T621] ? __alloc_pages_bulk+0xe60/0xe60 [ 2491.596302][ T621] ? sched_clock+0x9/0x10 [ 2491.600472][ T621] ? native_set_ldt+0x360/0x360 [ 2491.605160][ T621] __alloc_pages+0x138/0x5e0 [ 2491.609844][ T621] ? _raw_spin_unlock+0x4d/0x70 18:24:58 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xd, 0x4}, 0x48) [ 2491.614542][ T621] ? prep_new_page+0x110/0x110 [ 2491.619135][ T621] pte_alloc_one+0x73/0x1b0 [ 2491.623466][ T621] ? pfn_modify_allowed+0x2f0/0x2f0 [ 2491.628504][ T621] ? preempt_schedule+0xd9/0xe0 [ 2491.634064][ T621] ? preempt_schedule_common+0xbe/0xf0 [ 2491.639353][ T621] __pte_alloc+0x86/0x350 [ 2491.643605][ T621] ? free_pgtables+0x280/0x280 [ 2491.648217][ T621] ? _raw_spin_lock+0xa4/0x1b0 [ 2491.652804][ T621] ? __kasan_check_write+0x14/0x20 [ 2491.657750][ T621] copy_page_range+0x28a8/0x2f90 [ 2491.662522][ T621] ? __kasan_slab_alloc+0xb1/0xe0 18:24:58 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xd, 0x5}, 0x48) [ 2491.667390][ T621] ? pfn_valid+0x1e0/0x1e0 [ 2491.671642][ T621] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 2491.677199][ T621] ? __rb_insert_augmented+0x5de/0x610 [ 2491.682668][ T621] copy_mm+0xc7e/0x13e0 [ 2491.686658][ T621] ? copy_signal+0x610/0x610 [ 2491.691080][ T621] ? __init_rwsem+0xd6/0x1c0 [ 2491.695679][ T621] ? copy_signal+0x4e3/0x610 [ 2491.700107][ T621] copy_process+0x12bc/0x3260 [ 2491.704621][ T621] ? proc_fail_nth_write+0x20b/0x290 [ 2491.709742][ T621] ? fsnotify_perm+0x6a/0x5d0 [ 2491.714253][ T621] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2491.719201][ T621] ? vfs_write+0x9ec/0x1110 [ 2491.723541][ T621] kernel_clone+0x21e/0x9e0 [ 2491.727877][ T621] ? file_end_write+0x1c0/0x1c0 [ 2491.732565][ T621] ? create_io_thread+0x1e0/0x1e0 [ 2491.737426][ T621] ? mutex_unlock+0xb2/0x260 [ 2491.741854][ T621] ? __mutex_lock_slowpath+0x10/0x10 [ 2491.746975][ T621] __x64_sys_clone+0x23f/0x290 [ 2491.751575][ T621] ? __do_sys_vfork+0x130/0x130 [ 2491.756256][ T621] ? ksys_write+0x260/0x2c0 [ 2491.760596][ T621] ? debug_smp_processor_id+0x17/0x20 [ 2491.765801][ T621] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2491.771706][ T621] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2491.777179][ T621] do_syscall_64+0x3d/0xb0 [ 2491.781427][ T621] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2491.787161][ T621] RIP: 0033:0x7fdfd1d08ae9 [ 2491.791938][ T621] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 18:24:59 executing program 5: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 51) 18:24:59 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xd, 0x6}, 0x48) 18:24:59 executing program 1: syz_clone(0x10000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x10000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) [ 2491.811375][ T621] RSP: 002b:00007fdfd0a8b078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2491.819617][ T621] RAX: ffffffffffffffda RBX: 00007fdfd1e27f80 RCX: 00007fdfd1d08ae9 [ 2491.827605][ T621] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022001200 [ 2491.835414][ T621] RBP: 00007fdfd0a8b120 R08: 0000000000000000 R09: 0000000000000000 [ 2491.843227][ T621] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2491.851040][ T621] R13: 000000000000000b R14: 00007fdfd1e27f80 R15: 00007fff62717c48 [ 2491.858863][ T621] [ 2491.907378][ T639] FAULT_INJECTION: forcing a failure. [ 2491.907378][ T639] name failslab, interval 1, probability 0, space 0, times 0 [ 2491.946509][ T639] CPU: 1 PID: 639 Comm: syz-executor.5 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2491.956619][ T639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2491.966500][ T639] Call Trace: [ 2491.969619][ T639] [ 2491.972396][ T639] dump_stack_lvl+0x151/0x1b7 [ 2491.976919][ T639] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2491.982385][ T639] dump_stack+0x15/0x17 [ 2491.986369][ T639] should_fail+0x3c6/0x510 [ 2491.990646][ T639] __should_failslab+0xa4/0xe0 [ 2491.995226][ T639] ? vm_area_dup+0x26/0x230 [ 2491.999562][ T639] should_failslab+0x9/0x20 [ 2492.003992][ T639] slab_pre_alloc_hook+0x37/0xd0 [ 2492.008767][ T639] ? vm_area_dup+0x26/0x230 [ 2492.013279][ T639] kmem_cache_alloc+0x44/0x200 [ 2492.017877][ T639] vm_area_dup+0x26/0x230 [ 2492.022219][ T639] copy_mm+0x9a1/0x13e0 [ 2492.026229][ T639] ? copy_signal+0x610/0x610 [ 2492.030811][ T639] ? __init_rwsem+0xd6/0x1c0 [ 2492.035236][ T639] ? copy_signal+0x4e3/0x610 [ 2492.039665][ T639] copy_process+0x12bc/0x3260 [ 2492.044182][ T639] ? proc_fail_nth_write+0x20b/0x290 [ 2492.049297][ T639] ? fsnotify_perm+0x6a/0x5d0 [ 2492.053908][ T639] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2492.058859][ T639] ? vfs_write+0x9ec/0x1110 [ 2492.063197][ T639] kernel_clone+0x21e/0x9e0 [ 2492.067621][ T639] ? file_end_write+0x1c0/0x1c0 [ 2492.072307][ T639] ? create_io_thread+0x1e0/0x1e0 [ 2492.077172][ T639] ? mutex_unlock+0xb2/0x260 [ 2492.081596][ T639] ? __mutex_lock_slowpath+0x10/0x10 [ 2492.086721][ T639] __x64_sys_clone+0x23f/0x290 [ 2492.091315][ T639] ? __do_sys_vfork+0x130/0x130 [ 2492.096000][ T639] ? ksys_write+0x260/0x2c0 [ 2492.100344][ T639] ? debug_smp_processor_id+0x17/0x20 [ 2492.105555][ T639] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2492.111454][ T639] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2492.116921][ T639] do_syscall_64+0x3d/0xb0 [ 2492.121172][ T639] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2492.126901][ T639] RIP: 0033:0x7fdfd1d08ae9 [ 2492.131156][ T639] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2492.150708][ T639] RSP: 002b:00007fdfd0a8b078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2492.158950][ T639] RAX: ffffffffffffffda RBX: 00007fdfd1e27f80 RCX: 00007fdfd1d08ae9 [ 2492.166757][ T639] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022001200 [ 2492.174572][ T639] RBP: 00007fdfd0a8b120 R08: 0000000000000000 R09: 0000000000000000 [ 2492.182472][ T639] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2492.190458][ T639] R13: 000000000000000b R14: 00007fdfd1e27f80 R15: 00007fff62717c48 [ 2492.198270][ T639] 18:24:59 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/245, 0xf5}, 0x40000020) close(r1) 18:24:59 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x1c}, 0x18) (async) unlink(&(0x7f0000000080)='./file0\x00') 18:24:59 executing program 0: socketpair(0x10, 0x0, 0x9, &(0x7f0000000040)) 18:24:59 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xd, 0x7}, 0x48) 18:24:59 executing program 1: syz_clone(0x22011200, 0x0, 0x0, 0x0, 0x0, 0x0) 18:24:59 executing program 5: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 52) 18:24:59 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000440)={&(0x7f0000000140)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0x40) socketpair(0x27, 0x4, 0x4, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x1d, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000dfb30000000000009e3f000085100000feffffff85100000faffffff183b00000400000000000000000000009500000e000000003c0a141de0778da42f14e513"], &(0x7f0000000200)='GPL\x00', 0x9, 0xeb, &(0x7f0000000240)=""/235, 0x1f00, 0x64, '\x00', 0x0, 0x1b, r1, 0x8, &(0x7f0000000340)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0xa, 0x9, 0x9}, 0x10, 0xffffffffffffffff, 0x0, 0x3, &(0x7f00000003c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000400)=[{0x0, 0x3, 0x1, 0xd}, {0x1, 0x4, 0x0, 0x4}, {0x3, 0x3, 0x9, 0x8}]}, 0x90) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup, 0x0, 0x1, 0x4, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000740)=r3, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000680)={@ifindex, r3, 0x2d, 0x2004, 0x0, @link_fd, r4}, 0x20) sendmsg$tipc(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="a01926efb34255c23b1efd8f38d562c7b5a27c61c1cb35bd05ca9eef979fa7209b9020f4f2e03702e78bd7e2ec49bf39a06da7d6145b4c63dbe3caa8458f19d16e7e5e7ae831b5c8ce19d3df142f5b473124989721006ead3bf433c703f88810802908d7b3d1dbffa36422bed40e79affbc73ecea8196df86b74878ca1a91c51443232456192f734d2ad884b71ea985e909439a3d5a17c5d6de5c2eea14834aace365a9b462f9950739511557551b054d2bb23828fe1625352", 0xb9}], 0x1, 0x0, 0x0, 0x40}, 0x4080841) socketpair(0x21, 0x6, 0xfb0, &(0x7f0000000000)) [ 2492.316013][ T647] FAULT_INJECTION: forcing a failure. [ 2492.316013][ T647] name failslab, interval 1, probability 0, space 0, times 0 [ 2492.329682][ T647] CPU: 1 PID: 647 Comm: syz-executor.5 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2492.339976][ T647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2492.349859][ T647] Call Trace: [ 2492.352997][ T647] [ 2492.355761][ T647] dump_stack_lvl+0x151/0x1b7 [ 2492.360278][ T647] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2492.365744][ T647] dump_stack+0x15/0x17 [ 2492.369737][ T647] should_fail+0x3c6/0x510 [ 2492.373994][ T647] __should_failslab+0xa4/0xe0 [ 2492.378593][ T647] ? vm_area_dup+0x26/0x230 [ 2492.382928][ T647] should_failslab+0x9/0x20 [ 2492.387267][ T647] slab_pre_alloc_hook+0x37/0xd0 [ 2492.392038][ T647] ? vm_area_dup+0x26/0x230 [ 2492.396381][ T647] kmem_cache_alloc+0x44/0x200 [ 2492.400980][ T647] vm_area_dup+0x26/0x230 [ 2492.405148][ T647] copy_mm+0x9a1/0x13e0 [ 2492.409147][ T647] ? copy_signal+0x610/0x610 18:24:59 executing program 1: syz_clone(0x22011200, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2492.413563][ T647] ? __init_rwsem+0xd6/0x1c0 [ 2492.417990][ T647] ? copy_signal+0x4e3/0x610 [ 2492.422413][ T647] copy_process+0x12bc/0x3260 [ 2492.426933][ T647] ? proc_fail_nth_write+0x20b/0x290 [ 2492.432054][ T647] ? fsnotify_perm+0x6a/0x5d0 [ 2492.436568][ T647] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2492.441513][ T647] ? vfs_write+0x9ec/0x1110 [ 2492.445891][ T647] kernel_clone+0x21e/0x9e0 [ 2492.450190][ T647] ? file_end_write+0x1c0/0x1c0 [ 2492.454878][ T647] ? create_io_thread+0x1e0/0x1e0 [ 2492.459740][ T647] ? mutex_unlock+0xb2/0x260 18:24:59 executing program 1: syz_clone(0x22011200, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2492.464175][ T647] ? __mutex_lock_slowpath+0x10/0x10 [ 2492.469289][ T647] __x64_sys_clone+0x23f/0x290 [ 2492.473891][ T647] ? __do_sys_vfork+0x130/0x130 [ 2492.478573][ T647] ? ksys_write+0x260/0x2c0 [ 2492.482919][ T647] ? debug_smp_processor_id+0x17/0x20 [ 2492.488119][ T647] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2492.494023][ T647] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2492.499498][ T647] do_syscall_64+0x3d/0xb0 [ 2492.503742][ T647] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2492.509470][ T647] RIP: 0033:0x7fdfd1d08ae9 18:24:59 executing program 1: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r1, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r1, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r2, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r2}, 0x20) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r2}, 0x8) recvmsg$unix(r3, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', r3}, 0x18) syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2492.513726][ T647] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2492.533168][ T647] RSP: 002b:00007fdfd0a8b078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2492.541411][ T647] RAX: ffffffffffffffda RBX: 00007fdfd1e27f80 RCX: 00007fdfd1d08ae9 [ 2492.549232][ T647] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022001200 [ 2492.557037][ T647] RBP: 00007fdfd0a8b120 R08: 0000000000000000 R09: 0000000000000000 18:24:59 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xd, 0x8}, 0x48) 18:24:59 executing program 0: socketpair(0x10, 0x803, 0x0, &(0x7f0000000040)) [ 2492.564850][ T647] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2492.572660][ T647] R13: 000000000000000b R14: 00007fdfd1e27f80 R15: 00007fff62717c48 [ 2492.580486][ T647] 18:25:00 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/245, 0xf5}, 0x40000020) (async) close(r1) 18:25:00 executing program 0: socketpair(0x10, 0x803, 0x0, &(0x7f0000000040)) 18:25:00 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000440)={&(0x7f0000000140)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0x40) socketpair(0x27, 0x4, 0x4, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x1d, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000dfb30000000000009e3f000085100000feffffff85100000faffffff183b00000400000000000000000000009500000e000000003c0a141de0778da42f14e513"], &(0x7f0000000200)='GPL\x00', 0x9, 0xeb, &(0x7f0000000240)=""/235, 0x1f00, 0x64, '\x00', 0x0, 0x1b, r1, 0x8, &(0x7f0000000340)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0xa, 0x9, 0x9}, 0x10, 0xffffffffffffffff, 0x0, 0x3, &(0x7f00000003c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000400)=[{0x0, 0x3, 0x1, 0xd}, {0x1, 0x4, 0x0, 0x4}, {0x3, 0x3, 0x9, 0x8}]}, 0x90) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup, 0x0, 0x1, 0x4, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000740)=r3, 0x4) (async, rerun: 32) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000680)={@ifindex, r3, 0x2d, 0x2004, 0x0, @link_fd, r4}, 0x20) (async, rerun: 32) sendmsg$tipc(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="a01926efb34255c23b1efd8f38d562c7b5a27c61c1cb35bd05ca9eef979fa7209b9020f4f2e03702e78bd7e2ec49bf39a06da7d6145b4c63dbe3caa8458f19d16e7e5e7ae831b5c8ce19d3df142f5b473124989721006ead3bf433c703f88810802908d7b3d1dbffa36422bed40e79affbc73ecea8196df86b74878ca1a91c51443232456192f734d2ad884b71ea985e909439a3d5a17c5d6de5c2eea14834aace365a9b462f9950739511557551b054d2bb23828fe1625352", 0xb9}], 0x1, 0x0, 0x0, 0x40}, 0x4080841) (async, rerun: 32) socketpair(0x21, 0x6, 0xfb0, &(0x7f0000000000)) (rerun: 32) 18:25:00 executing program 5: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 53) 18:25:00 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xd, 0x9}, 0x48) 18:25:00 executing program 1: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r1, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r1, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r2, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r2}, 0x20) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r2}, 0x8) recvmsg$unix(r3, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', r3}, 0x18) syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) (async) openat$cgroup(r0, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) (async) openat$cgroup_pressure(r1, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) (async) openat$cgroup_ro(r1, 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r2, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r2}, 0x20) (async) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r2}, 0x8) (async) recvmsg$unix(r3, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) (async) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', r3}, 0x18) (async) syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 18:25:00 executing program 0: socketpair(0x10, 0x803, 0x0, &(0x7f0000000040)) 18:25:00 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000440)={&(0x7f0000000140)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0x40) socketpair(0x27, 0x4, 0x4, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x1d, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000dfb30000000000009e3f000085100000feffffff85100000faffffff183b00000400000000000000000000009500000e000000003c0a141de0778da42f14e513"], &(0x7f0000000200)='GPL\x00', 0x9, 0xeb, &(0x7f0000000240)=""/235, 0x1f00, 0x64, '\x00', 0x0, 0x1b, r1, 0x8, &(0x7f0000000340)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0xa, 0x9, 0x9}, 0x10, 0xffffffffffffffff, 0x0, 0x3, &(0x7f00000003c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000400)=[{0x0, 0x3, 0x1, 0xd}, {0x1, 0x4, 0x0, 0x4}, {0x3, 0x3, 0x9, 0x8}]}, 0x90) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup, 0x0, 0x1, 0x4, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000740)=r3, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000680)={@ifindex, r3, 0x2d, 0x2004, 0x0, @link_fd, r4}, 0x20) sendmsg$tipc(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="a01926efb34255c23b1efd8f38d562c7b5a27c61c1cb35bd05ca9eef979fa7209b9020f4f2e03702e78bd7e2ec49bf39a06da7d6145b4c63dbe3caa8458f19d16e7e5e7ae831b5c8ce19d3df142f5b473124989721006ead3bf433c703f88810802908d7b3d1dbffa36422bed40e79affbc73ecea8196df86b74878ca1a91c51443232456192f734d2ad884b71ea985e909439a3d5a17c5d6de5c2eea14834aace365a9b462f9950739511557551b054d2bb23828fe1625352", 0xb9}], 0x1, 0x0, 0x0, 0x40}, 0x4080841) socketpair(0x21, 0x6, 0xfb0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)) (async) sendmsg$inet(r0, &(0x7f0000000440)={&(0x7f0000000140)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0x40) (async) socketpair(0x27, 0x4, 0x4, &(0x7f0000000040)) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x1d, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000dfb30000000000009e3f000085100000feffffff85100000faffffff183b00000400000000000000000000009500000e000000003c0a141de0778da42f14e513"], &(0x7f0000000200)='GPL\x00', 0x9, 0xeb, &(0x7f0000000240)=""/235, 0x1f00, 0x64, '\x00', 0x0, 0x1b, r1, 0x8, &(0x7f0000000340)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0xa, 0x9, 0x9}, 0x10, 0xffffffffffffffff, 0x0, 0x3, &(0x7f00000003c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000400)=[{0x0, 0x3, 0x1, 0xd}, {0x1, 0x4, 0x0, 0x4}, {0x3, 0x3, 0x9, 0x8}]}, 0x90) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup, 0x0, 0x1, 0x4, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) (async) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000740)=r3, 0x4) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000680)={@ifindex, r3, 0x2d, 0x2004, 0x0, @link_fd, r4}, 0x20) (async) sendmsg$tipc(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="a01926efb34255c23b1efd8f38d562c7b5a27c61c1cb35bd05ca9eef979fa7209b9020f4f2e03702e78bd7e2ec49bf39a06da7d6145b4c63dbe3caa8458f19d16e7e5e7ae831b5c8ce19d3df142f5b473124989721006ead3bf433c703f88810802908d7b3d1dbffa36422bed40e79affbc73ecea8196df86b74878ca1a91c51443232456192f734d2ad884b71ea985e909439a3d5a17c5d6de5c2eea14834aace365a9b462f9950739511557551b054d2bb23828fe1625352", 0xb9}], 0x1, 0x0, 0x0, 0x40}, 0x4080841) (async) socketpair(0x21, 0x6, 0xfb0, &(0x7f0000000000)) (async) [ 2493.391070][ T680] FAULT_INJECTION: forcing a failure. [ 2493.391070][ T680] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2493.409428][ T680] CPU: 0 PID: 680 Comm: syz-executor.5 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2493.419439][ T680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2493.429427][ T680] Call Trace: [ 2493.432544][ T680] [ 2493.435328][ T680] dump_stack_lvl+0x151/0x1b7 18:25:00 executing program 2: socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x18) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000000)) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) openat$cgroup(r0, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000001640)='syz0\x00', 0x200002, 0x0) r2 = perf_event_open$cgroup(&(0x7f00000015c0)={0x3, 0x80, 0xff, 0x80, 0x20, 0x8, 0x0, 0x0, 0x14000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x4, @perf_bp={&(0x7f0000001580), 0x9}, 0x3001, 0x8000000000000001, 0x8, 0x2, 0x40, 0x800, 0x5, 0x0, 0x5, 0x0, 0x6}, r1, 0x0, 0xffffffffffffffff, 0x11) bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=@base={0x0, 0xdfe, 0xca2, 0x3, 0x1000, r2, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x5}, 0x48) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xff) r3 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x20, 0x20, 0x3f, 0x0, 0x0, 0xffffffff, 0x100, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000100), 0xa}, 0x1012, 0x7e, 0x0, 0x5, 0x8, 0x10001, 0x621f, 0x0, 0x440a, 0x0, 0x7}, 0x0, 0xc, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x0) 18:25:00 executing program 1: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r1, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r1, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r2, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r2}, 0x20) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r2}, 0x8) recvmsg$unix(r3, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) (async) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', r3}, 0x18) (async) syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2493.439831][ T680] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2493.445307][ T680] dump_stack+0x15/0x17 [ 2493.449294][ T680] should_fail+0x3c6/0x510 [ 2493.453549][ T680] should_fail_alloc_page+0x5a/0x80 [ 2493.458586][ T680] prepare_alloc_pages+0x15c/0x700 [ 2493.463529][ T680] ? __alloc_pages+0x5e0/0x5e0 [ 2493.468128][ T680] ? __alloc_pages_bulk+0xe60/0xe60 [ 2493.473163][ T680] __alloc_pages+0x138/0x5e0 [ 2493.477589][ T680] ? prep_new_page+0x110/0x110 [ 2493.482187][ T680] ? is_bpf_text_address+0x172/0x190 18:25:00 executing program 2: socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x18) (async) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000000)) (async, rerun: 32) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) (rerun: 32) openat$cgroup(r0, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) (async) r1 = openat$cgroup(r0, &(0x7f0000001640)='syz0\x00', 0x200002, 0x0) r2 = perf_event_open$cgroup(&(0x7f00000015c0)={0x3, 0x80, 0xff, 0x80, 0x20, 0x8, 0x0, 0x0, 0x14000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x4, @perf_bp={&(0x7f0000001580), 0x9}, 0x3001, 0x8000000000000001, 0x8, 0x2, 0x40, 0x800, 0x5, 0x0, 0x5, 0x0, 0x6}, r1, 0x0, 0xffffffffffffffff, 0x11) bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=@base={0x0, 0xdfe, 0xca2, 0x3, 0x1000, r2, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x5}, 0x48) (async) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xff) (async) r3 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x20, 0x20, 0x3f, 0x0, 0x0, 0xffffffff, 0x100, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000100), 0xa}, 0x1012, 0x7e, 0x0, 0x5, 0x8, 0x10001, 0x621f, 0x0, 0x440a, 0x0, 0x7}, 0x0, 0xc, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x0) 18:25:00 executing program 0: socketpair(0x10, 0x803, 0x9, 0x0) [ 2493.487311][ T680] pte_alloc_one+0x73/0x1b0 [ 2493.491676][ T680] ? pfn_modify_allowed+0x2f0/0x2f0 [ 2493.496684][ T680] ? arch_stack_walk+0xf3/0x140 [ 2493.501368][ T680] __pte_alloc+0x86/0x350 [ 2493.505532][ T680] ? free_pgtables+0x280/0x280 [ 2493.510129][ T680] ? _raw_spin_lock+0xa4/0x1b0 [ 2493.514879][ T680] ? __kasan_check_write+0x14/0x20 [ 2493.519913][ T680] copy_page_range+0x28a8/0x2f90 [ 2493.524682][ T680] ? __kasan_slab_alloc+0xb1/0xe0 [ 2493.529571][ T680] ? pfn_valid+0x1e0/0x1e0 [ 2493.533791][ T680] ? vma_interval_tree_augment_rotate+0x1a3/0x1d0 [ 2493.540044][ T680] copy_mm+0xc7e/0x13e0 [ 2493.544031][ T680] ? copy_signal+0x610/0x610 [ 2493.548457][ T680] ? __init_rwsem+0xd6/0x1c0 [ 2493.552881][ T680] ? copy_signal+0x4e3/0x610 [ 2493.557312][ T680] copy_process+0x12bc/0x3260 [ 2493.561828][ T680] ? proc_fail_nth_write+0x20b/0x290 [ 2493.567084][ T680] ? fsnotify_perm+0x6a/0x5d0 [ 2493.571686][ T680] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2493.576817][ T680] ? vfs_write+0x9ec/0x1110 [ 2493.581155][ T680] kernel_clone+0x21e/0x9e0 [ 2493.586961][ T680] ? file_end_write+0x1c0/0x1c0 [ 2493.591643][ T680] ? create_io_thread+0x1e0/0x1e0 [ 2493.596846][ T680] ? mutex_unlock+0xb2/0x260 [ 2493.601291][ T680] ? __mutex_lock_slowpath+0x10/0x10 [ 2493.607002][ T680] __x64_sys_clone+0x23f/0x290 [ 2493.611864][ T680] ? __do_sys_vfork+0x130/0x130 [ 2493.616547][ T680] ? ksys_write+0x260/0x2c0 [ 2493.620894][ T680] ? debug_smp_processor_id+0x17/0x20 [ 2493.626092][ T680] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2493.631997][ T680] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2493.637728][ T680] do_syscall_64+0x3d/0xb0 [ 2493.642152][ T680] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2493.647903][ T680] RIP: 0033:0x7fdfd1d08ae9 [ 2493.652131][ T680] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2493.671574][ T680] RSP: 002b:00007fdfd0a8b078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2493.679919][ T680] RAX: ffffffffffffffda RBX: 00007fdfd1e27f80 RCX: 00007fdfd1d08ae9 [ 2493.687716][ T680] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022001200 [ 2493.695529][ T680] RBP: 00007fdfd0a8b120 R08: 0000000000000000 R09: 0000000000000000 [ 2493.704226][ T680] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2493.712037][ T680] R13: 000000000000000b R14: 00007fdfd1e27f80 R15: 00007fff62717c48 [ 2493.719852][ T680] 18:25:01 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x6, 0x7, 0x2, 0x45, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x1, 0x2}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r2, 0x58, &(0x7f0000000100)}, 0x10) close(r1) 18:25:01 executing program 2: socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x18) (async) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000000)) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) openat$cgroup(r0, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) (async) r1 = openat$cgroup(r0, &(0x7f0000001640)='syz0\x00', 0x200002, 0x0) r2 = perf_event_open$cgroup(&(0x7f00000015c0)={0x3, 0x80, 0xff, 0x80, 0x20, 0x8, 0x0, 0x0, 0x14000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x4, @perf_bp={&(0x7f0000001580), 0x9}, 0x3001, 0x8000000000000001, 0x8, 0x2, 0x40, 0x800, 0x5, 0x0, 0x5, 0x0, 0x6}, r1, 0x0, 0xffffffffffffffff, 0x11) bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=@base={0x0, 0xdfe, 0xca2, 0x3, 0x1000, r2, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x5}, 0x48) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xff) (async) r3 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x20, 0x20, 0x3f, 0x0, 0x0, 0xffffffff, 0x100, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000100), 0xa}, 0x1012, 0x7e, 0x0, 0x5, 0x8, 0x10001, 0x621f, 0x0, 0x440a, 0x0, 0x7}, 0x0, 0xc, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x0) 18:25:01 executing program 1: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r1, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r1, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r2, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r2}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r2}, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0xffffa4c5, 0x7fff, 0x5, 0x2, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x5, 0xd}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r2, r3}, 0xc) r4 = syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x5, 0x2, 0x7, 0x0, 0x3, 0x84, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x2, @perf_config_ext={0x9, 0x8}, 0x4040, 0x7fff, 0x3, 0x5, 0x800, 0x0, 0x40, 0x0, 0x6, 0x0, 0x7ff}, r4, 0xa, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_DISABLE(r5, 0x2401, 0x6) 18:25:01 executing program 0: socketpair(0x10, 0x803, 0x9, 0x0) 18:25:01 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xd, 0xa}, 0x48) 18:25:01 executing program 5: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 54) 18:25:01 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xd, 0xb}, 0x48) 18:25:01 executing program 2: socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)={0xffffffffffffffff}) unlink(&(0x7f0000000000)='./file0\x00') recvmsg$unix(r0, &(0x7f00000005c0)={&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)=""/139, 0x8b}, {&(0x7f0000000200)=""/106, 0x6a}, {&(0x7f0000000280)=""/41, 0x29}, {&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/127, 0x7f}], 0x5, &(0x7f0000000480)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x110}, 0x10163) socketpair(0x2a, 0xa, 0x6, &(0x7f0000000080)) 18:25:01 executing program 1: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r1, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r1, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r2, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r2}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r2}, 0x8) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0xffffa4c5, 0x7fff, 0x5, 0x2, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x5, 0xd}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r2, r3}, 0xc) (async) r4 = syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x5, 0x2, 0x7, 0x0, 0x3, 0x84, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x2, @perf_config_ext={0x9, 0x8}, 0x4040, 0x7fff, 0x3, 0x5, 0x800, 0x0, 0x40, 0x0, 0x6, 0x0, 0x7ff}, r4, 0xa, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_DISABLE(r5, 0x2401, 0x6) [ 2494.260541][ T733] FAULT_INJECTION: forcing a failure. [ 2494.260541][ T733] name failslab, interval 1, probability 0, space 0, times 0 [ 2494.289488][ T733] CPU: 1 PID: 733 Comm: syz-executor.5 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2494.299492][ T733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 18:25:01 executing program 0: socketpair(0x10, 0x803, 0x9, 0x0) 18:25:01 executing program 1: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r1, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) (async) r2 = openat$cgroup_ro(r1, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r2, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r2}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r2}, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0xffffa4c5, 0x7fff, 0x5, 0x2, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x5, 0xd}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r2, r3}, 0xc) (async) r4 = syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x5, 0x2, 0x7, 0x0, 0x3, 0x84, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x2, @perf_config_ext={0x9, 0x8}, 0x4040, 0x7fff, 0x3, 0x5, 0x800, 0x0, 0x40, 0x0, 0x6, 0x0, 0x7ff}, r4, 0xa, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_DISABLE(r5, 0x2401, 0x6) [ 2494.309397][ T733] Call Trace: [ 2494.312521][ T733] [ 2494.315283][ T733] dump_stack_lvl+0x151/0x1b7 [ 2494.319800][ T733] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2494.325283][ T733] dump_stack+0x15/0x17 [ 2494.329271][ T733] should_fail+0x3c6/0x510 [ 2494.333519][ T733] __should_failslab+0xa4/0xe0 [ 2494.338112][ T733] ? vm_area_dup+0x26/0x230 [ 2494.342464][ T733] should_failslab+0x9/0x20 [ 2494.346801][ T733] slab_pre_alloc_hook+0x37/0xd0 [ 2494.351568][ T733] ? vm_area_dup+0x26/0x230 [ 2494.355908][ T733] kmem_cache_alloc+0x44/0x200 18:25:01 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x6, 0x7, 0x2, 0x45, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x1, 0x2}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r2, 0x58, &(0x7f0000000100)}, 0x10) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x6, 0x7, 0x2, 0x45, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x1, 0x2}, 0x48) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r2, 0x58, &(0x7f0000000100)}, 0x10) (async) close(r1) (async) 18:25:01 executing program 2: socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)={0xffffffffffffffff}) unlink(&(0x7f0000000000)='./file0\x00') (async) recvmsg$unix(r0, &(0x7f00000005c0)={&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)=""/139, 0x8b}, {&(0x7f0000000200)=""/106, 0x6a}, {&(0x7f0000000280)=""/41, 0x29}, {&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/127, 0x7f}], 0x5, &(0x7f0000000480)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x110}, 0x10163) (async) socketpair(0x2a, 0xa, 0x6, &(0x7f0000000080)) [ 2494.360514][ T733] vm_area_dup+0x26/0x230 [ 2494.364673][ T733] copy_mm+0x9a1/0x13e0 [ 2494.368668][ T733] ? copy_signal+0x610/0x610 [ 2494.373089][ T733] ? __init_rwsem+0xd6/0x1c0 [ 2494.377518][ T733] ? copy_signal+0x4e3/0x610 [ 2494.381947][ T733] copy_process+0x12bc/0x3260 [ 2494.386458][ T733] ? proc_fail_nth_write+0x20b/0x290 [ 2494.391589][ T733] ? fsnotify_perm+0x6a/0x5d0 [ 2494.396094][ T733] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2494.401038][ T733] ? vfs_write+0x9ec/0x1110 [ 2494.405385][ T733] kernel_clone+0x21e/0x9e0 18:25:01 executing program 1: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001d00)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f00000022c0)={0x0, 0x0, 0x0}, 0x40) recvmsg$unix(r0, &(0x7f0000001780)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000001680)=[{&(0x7f0000000080)=""/234, 0xea}, {&(0x7f0000000180)=""/213, 0xd5}, {&(0x7f0000000280)=""/24, 0x18}, {&(0x7f00000002c0)=""/188, 0xbc}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/212, 0xd4}, {&(0x7f0000001480)=""/115, 0x73}, {&(0x7f0000001500)=""/248, 0xf8}, {&(0x7f0000001600)=""/93, 0x5d}], 0x9, &(0x7f0000001740)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x40) [ 2494.409805][ T733] ? file_end_write+0x1c0/0x1c0 [ 2494.414497][ T733] ? create_io_thread+0x1e0/0x1e0 [ 2494.419348][ T733] ? mutex_unlock+0xb2/0x260 [ 2494.423780][ T733] ? __mutex_lock_slowpath+0x10/0x10 [ 2494.428904][ T733] __x64_sys_clone+0x23f/0x290 [ 2494.433501][ T733] ? __do_sys_vfork+0x130/0x130 [ 2494.438192][ T733] ? ksys_write+0x260/0x2c0 [ 2494.442543][ T733] ? debug_smp_processor_id+0x17/0x20 [ 2494.447729][ T733] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2494.453637][ T733] ? exit_to_user_mode_prepare+0x39/0xa0 18:25:01 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xd, 0xc}, 0x48) 18:25:01 executing program 2: socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)={0xffffffffffffffff}) unlink(&(0x7f0000000000)='./file0\x00') recvmsg$unix(r0, &(0x7f00000005c0)={&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)=""/139, 0x8b}, {&(0x7f0000000200)=""/106, 0x6a}, {&(0x7f0000000280)=""/41, 0x29}, {&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/127, 0x7f}], 0x5, &(0x7f0000000480)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x110}, 0x10163) socketpair(0x2a, 0xa, 0x6, &(0x7f0000000080)) (async) socketpair(0x2a, 0xa, 0x6, &(0x7f0000000080)) 18:25:01 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r1, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r1, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r2, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r2}, 0x20) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r2}, 0x8) recvmsg$unix(r3, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', r3}, 0x18) syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2494.459101][ T733] do_syscall_64+0x3d/0xb0 [ 2494.463353][ T733] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2494.469085][ T733] RIP: 0033:0x7fdfd1d08ae9 [ 2494.473336][ T733] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2494.492779][ T733] RSP: 002b:00007fdfd0a8b078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2494.501200][ T733] RAX: ffffffffffffffda RBX: 00007fdfd1e27f80 RCX: 00007fdfd1d08ae9 18:25:01 executing program 5: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 55) 18:25:01 executing program 1: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001d00)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f00000022c0)={0x0, 0x0, 0x0}, 0x40) recvmsg$unix(r0, &(0x7f0000001780)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000001680)=[{&(0x7f0000000080)=""/234, 0xea}, {&(0x7f0000000180)=""/213, 0xd5}, {&(0x7f0000000280)=""/24, 0x18}, {&(0x7f00000002c0)=""/188, 0xbc}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/212, 0xd4}, {&(0x7f0000001480)=""/115, 0x73}, {&(0x7f0000001500)=""/248, 0xf8}, {&(0x7f0000001600)=""/93, 0x5d}], 0x9, &(0x7f0000001740)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x40) syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001d00)) (async) recvmsg$unix(r0, &(0x7f00000022c0)={0x0, 0x0, 0x0}, 0x40) (async) recvmsg$unix(r0, &(0x7f0000001780)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000001680)=[{&(0x7f0000000080)=""/234, 0xea}, {&(0x7f0000000180)=""/213, 0xd5}, {&(0x7f0000000280)=""/24, 0x18}, {&(0x7f00000002c0)=""/188, 0xbc}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/212, 0xd4}, {&(0x7f0000001480)=""/115, 0x73}, {&(0x7f0000001500)=""/248, 0xf8}, {&(0x7f0000001600)=""/93, 0x5d}], 0x9, &(0x7f0000001740)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x40) (async) 18:25:01 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xd, 0xd}, 0x48) 18:25:01 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x6, 0x7, 0x2, 0x45, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x1, 0x2}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r2, 0x58, &(0x7f0000000100)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r2, 0x58, &(0x7f0000000100)}, 0x10) close(r1) 18:25:01 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1c}, 0x48) 18:25:01 executing program 2: socketpair(0x29, 0x800, 0x5aaf, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000300)=0x1) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000000)) recvmsg(r0, &(0x7f00000002c0)={&(0x7f0000000080)=@can, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4095, 0xfff}, {&(0x7f0000001400)=""/259, 0x103}, {&(0x7f0000001340)=""/86, 0x56}, {}], 0x4, &(0x7f0000000200)=""/140, 0x8c}, 0x40012100) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) sendmsg$inet(r0, &(0x7f0000001840)={&(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10, &(0x7f00000017c0)=[{&(0x7f0000000140)="13283e7b3edff1f7a9c7852901a7f301ff8d71407956c0d3bd0c35812ef9cc9220419c", 0x23}, {&(0x7f0000000180)="a35c33bac353969e1badcce19872f36aa83cdc31f18cb483948cc1c3", 0x1c}, {&(0x7f00000001c0)="86f3c147976f623b78fe681ec98372557bb847784d7311765b533c9086f825ecb7674afc1a34217f818b7e3909f2bd292bb625c771d11a0c18a2", 0x3a}, {&(0x7f0000001540)="7d47c1547ff2be17c6f57e72c347d20cd5de9ed5463831cd4e22c15fb8f189ca1b8ead6c723ce969d1c98e77e8520a294081a9f15e4ad0548c9e6fde9ae239d6b2f57519f0dfb1bfeb60eacee07db653f5c3813d68", 0x55}, {&(0x7f00000015c0)="4db0c96fdfa9675bf7b34f4274dc65ef37f51e2e9c4b17e51feec049781ca81c72e1c0c5fa7b970a797297f81f205206312cf0fa175f5369e24dce504cc8068a04a11f7094f8f790fd32b17cbbbbef7e742d0c0224bddb165c9f4a21753fbe4394f7dbbb", 0x64}, {&(0x7f0000001640)="2d74b3334bb60d0374804227de425949eb397216bb65f143caf1d4aa1d132f4eb939e1d6a3d4d7f1ea5dd574689faae911ea9f7088a3e855add23dbfc0c7b76825be69ff286454e1", 0x48}, {&(0x7f00000016c0)="63cca18befa3a99935f1bfa74a9ff839dd18d75beb49cd058a4e4327e1ac3570832345d09b2aa806a89113a1f6c35432906f92820cea012cc2589a47fac90714602a26b677b5984c5d13e07897d6a3dfa152d4c26f38ce7ac708303a2a5009f7efffba4fb206f1fba182", 0x6a}, {&(0x7f0000001740)="80e5a5943219b062e5d004a078b76151487adf3110f1520efbde69ea5ea3f9ac8fc5bf5259cd43c91e08b9367900d3719c4b9243c5cf4f762949fbce9d032305fea628afd221741c121f84585d244399aa9a3d79064757d0dbea2444c3ed10c302852099b60156828766785108b20fb8c8f3f37b9e1f13bdbffab238", 0x7c}], 0x8}, 0x4000) [ 2494.509007][ T733] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022001200 [ 2494.516817][ T733] RBP: 00007fdfd0a8b120 R08: 0000000000000000 R09: 0000000000000000 [ 2494.524634][ T733] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2494.532444][ T733] R13: 000000000000000b R14: 00007fdfd1e27f80 R15: 00007fff62717c48 [ 2494.540259][ T733] 18:25:01 executing program 2: socketpair(0x29, 0x800, 0x5aaf, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000300)=0x1) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000000)) (async) recvmsg(r0, &(0x7f00000002c0)={&(0x7f0000000080)=@can, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4095, 0xfff}, {&(0x7f0000001400)=""/259, 0x103}, {&(0x7f0000001340)=""/86, 0x56}, {}], 0x4, &(0x7f0000000200)=""/140, 0x8c}, 0x40012100) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, 0x0) (async) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) (async) sendmsg$inet(r0, &(0x7f0000001840)={&(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10, &(0x7f00000017c0)=[{&(0x7f0000000140)="13283e7b3edff1f7a9c7852901a7f301ff8d71407956c0d3bd0c35812ef9cc9220419c", 0x23}, {&(0x7f0000000180)="a35c33bac353969e1badcce19872f36aa83cdc31f18cb483948cc1c3", 0x1c}, {&(0x7f00000001c0)="86f3c147976f623b78fe681ec98372557bb847784d7311765b533c9086f825ecb7674afc1a34217f818b7e3909f2bd292bb625c771d11a0c18a2", 0x3a}, {&(0x7f0000001540)="7d47c1547ff2be17c6f57e72c347d20cd5de9ed5463831cd4e22c15fb8f189ca1b8ead6c723ce969d1c98e77e8520a294081a9f15e4ad0548c9e6fde9ae239d6b2f57519f0dfb1bfeb60eacee07db653f5c3813d68", 0x55}, {&(0x7f00000015c0)="4db0c96fdfa9675bf7b34f4274dc65ef37f51e2e9c4b17e51feec049781ca81c72e1c0c5fa7b970a797297f81f205206312cf0fa175f5369e24dce504cc8068a04a11f7094f8f790fd32b17cbbbbef7e742d0c0224bddb165c9f4a21753fbe4394f7dbbb", 0x64}, {&(0x7f0000001640)="2d74b3334bb60d0374804227de425949eb397216bb65f143caf1d4aa1d132f4eb939e1d6a3d4d7f1ea5dd574689faae911ea9f7088a3e855add23dbfc0c7b76825be69ff286454e1", 0x48}, {&(0x7f00000016c0)="63cca18befa3a99935f1bfa74a9ff839dd18d75beb49cd058a4e4327e1ac3570832345d09b2aa806a89113a1f6c35432906f92820cea012cc2589a47fac90714602a26b677b5984c5d13e07897d6a3dfa152d4c26f38ce7ac708303a2a5009f7efffba4fb206f1fba182", 0x6a}, {&(0x7f0000001740)="80e5a5943219b062e5d004a078b76151487adf3110f1520efbde69ea5ea3f9ac8fc5bf5259cd43c91e08b9367900d3719c4b9243c5cf4f762949fbce9d032305fea628afd221741c121f84585d244399aa9a3d79064757d0dbea2444c3ed10c302852099b60156828766785108b20fb8c8f3f37b9e1f13bdbffab238", 0x7c}], 0x8}, 0x4000) 18:25:01 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1c}, 0x48) 18:25:01 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xd, 0xe}, 0x48) 18:25:01 executing program 1: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001d00)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f00000022c0)={0x0, 0x0, 0x0}, 0x40) recvmsg$unix(r0, &(0x7f0000001780)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000001680)=[{&(0x7f0000000080)=""/234, 0xea}, {&(0x7f0000000180)=""/213, 0xd5}, {&(0x7f0000000280)=""/24, 0x18}, {&(0x7f00000002c0)=""/188, 0xbc}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/212, 0xd4}, {&(0x7f0000001480)=""/115, 0x73}, {&(0x7f0000001500)=""/248, 0xf8}, {&(0x7f0000001600)=""/93, 0x5d}], 0x9, &(0x7f0000001740)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x40) syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001d00)) (async) recvmsg$unix(r0, &(0x7f00000022c0)={0x0, 0x0, 0x0}, 0x40) (async) recvmsg$unix(r0, &(0x7f0000001780)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000001680)=[{&(0x7f0000000080)=""/234, 0xea}, {&(0x7f0000000180)=""/213, 0xd5}, {&(0x7f0000000280)=""/24, 0x18}, {&(0x7f00000002c0)=""/188, 0xbc}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/212, 0xd4}, {&(0x7f0000001480)=""/115, 0x73}, {&(0x7f0000001500)=""/248, 0xf8}, {&(0x7f0000001600)=""/93, 0x5d}], 0x9, &(0x7f0000001740)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x40) (async) [ 2494.596099][ T791] FAULT_INJECTION: forcing a failure. [ 2494.596099][ T791] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2494.626881][ T791] CPU: 1 PID: 791 Comm: syz-executor.5 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2494.637048][ T791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2494.646944][ T791] Call Trace: [ 2494.650066][ T791] [ 2494.652845][ T791] dump_stack_lvl+0x151/0x1b7 [ 2494.657369][ T791] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2494.662827][ T791] dump_stack+0x15/0x17 [ 2494.666821][ T791] should_fail+0x3c6/0x510 [ 2494.671072][ T791] should_fail_alloc_page+0x5a/0x80 [ 2494.676107][ T791] prepare_alloc_pages+0x15c/0x700 [ 2494.681048][ T791] ? __alloc_pages+0x5e0/0x5e0 [ 2494.685652][ T791] ? __alloc_pages_bulk+0xe60/0xe60 [ 2494.690769][ T791] ? sched_clock+0x9/0x10 18:25:01 executing program 2: socketpair(0x29, 0x800, 0x5aaf, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000300)=0x1) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000000)) recvmsg(r0, &(0x7f00000002c0)={&(0x7f0000000080)=@can, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4095, 0xfff}, {&(0x7f0000001400)=""/259, 0x103}, {&(0x7f0000001340)=""/86, 0x56}, {}], 0x4, &(0x7f0000000200)=""/140, 0x8c}, 0x40012100) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) sendmsg$inet(r0, &(0x7f0000001840)={&(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10, &(0x7f00000017c0)=[{&(0x7f0000000140)="13283e7b3edff1f7a9c7852901a7f301ff8d71407956c0d3bd0c35812ef9cc9220419c", 0x23}, {&(0x7f0000000180)="a35c33bac353969e1badcce19872f36aa83cdc31f18cb483948cc1c3", 0x1c}, {&(0x7f00000001c0)="86f3c147976f623b78fe681ec98372557bb847784d7311765b533c9086f825ecb7674afc1a34217f818b7e3909f2bd292bb625c771d11a0c18a2", 0x3a}, {&(0x7f0000001540)="7d47c1547ff2be17c6f57e72c347d20cd5de9ed5463831cd4e22c15fb8f189ca1b8ead6c723ce969d1c98e77e8520a294081a9f15e4ad0548c9e6fde9ae239d6b2f57519f0dfb1bfeb60eacee07db653f5c3813d68", 0x55}, {&(0x7f00000015c0)="4db0c96fdfa9675bf7b34f4274dc65ef37f51e2e9c4b17e51feec049781ca81c72e1c0c5fa7b970a797297f81f205206312cf0fa175f5369e24dce504cc8068a04a11f7094f8f790fd32b17cbbbbef7e742d0c0224bddb165c9f4a21753fbe4394f7dbbb", 0x64}, {&(0x7f0000001640)="2d74b3334bb60d0374804227de425949eb397216bb65f143caf1d4aa1d132f4eb939e1d6a3d4d7f1ea5dd574689faae911ea9f7088a3e855add23dbfc0c7b76825be69ff286454e1", 0x48}, {&(0x7f00000016c0)="63cca18befa3a99935f1bfa74a9ff839dd18d75beb49cd058a4e4327e1ac3570832345d09b2aa806a89113a1f6c35432906f92820cea012cc2589a47fac90714602a26b677b5984c5d13e07897d6a3dfa152d4c26f38ce7ac708303a2a5009f7efffba4fb206f1fba182", 0x6a}, {&(0x7f0000001740)="80e5a5943219b062e5d004a078b76151487adf3110f1520efbde69ea5ea3f9ac8fc5bf5259cd43c91e08b9367900d3719c4b9243c5cf4f762949fbce9d032305fea628afd221741c121f84585d244399aa9a3d79064757d0dbea2444c3ed10c302852099b60156828766785108b20fb8c8f3f37b9e1f13bdbffab238", 0x7c}], 0x8}, 0x4000) socketpair(0x29, 0x800, 0x5aaf, &(0x7f0000000040)) (async) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000300)=0x1) (async) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000000)) (async) recvmsg(r0, &(0x7f00000002c0)={&(0x7f0000000080)=@can, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4095, 0xfff}, {&(0x7f0000001400)=""/259, 0x103}, {&(0x7f0000001340)=""/86, 0x56}, {}], 0x4, &(0x7f0000000200)=""/140, 0x8c}, 0x40012100) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0) (async) ioctl$TUNATTACHFILTER(r1, 0x401054d5, 0x0) (async) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) (async) sendmsg$inet(r0, &(0x7f0000001840)={&(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10, &(0x7f00000017c0)=[{&(0x7f0000000140)="13283e7b3edff1f7a9c7852901a7f301ff8d71407956c0d3bd0c35812ef9cc9220419c", 0x23}, {&(0x7f0000000180)="a35c33bac353969e1badcce19872f36aa83cdc31f18cb483948cc1c3", 0x1c}, {&(0x7f00000001c0)="86f3c147976f623b78fe681ec98372557bb847784d7311765b533c9086f825ecb7674afc1a34217f818b7e3909f2bd292bb625c771d11a0c18a2", 0x3a}, {&(0x7f0000001540)="7d47c1547ff2be17c6f57e72c347d20cd5de9ed5463831cd4e22c15fb8f189ca1b8ead6c723ce969d1c98e77e8520a294081a9f15e4ad0548c9e6fde9ae239d6b2f57519f0dfb1bfeb60eacee07db653f5c3813d68", 0x55}, {&(0x7f00000015c0)="4db0c96fdfa9675bf7b34f4274dc65ef37f51e2e9c4b17e51feec049781ca81c72e1c0c5fa7b970a797297f81f205206312cf0fa175f5369e24dce504cc8068a04a11f7094f8f790fd32b17cbbbbef7e742d0c0224bddb165c9f4a21753fbe4394f7dbbb", 0x64}, {&(0x7f0000001640)="2d74b3334bb60d0374804227de425949eb397216bb65f143caf1d4aa1d132f4eb939e1d6a3d4d7f1ea5dd574689faae911ea9f7088a3e855add23dbfc0c7b76825be69ff286454e1", 0x48}, {&(0x7f00000016c0)="63cca18befa3a99935f1bfa74a9ff839dd18d75beb49cd058a4e4327e1ac3570832345d09b2aa806a89113a1f6c35432906f92820cea012cc2589a47fac90714602a26b677b5984c5d13e07897d6a3dfa152d4c26f38ce7ac708303a2a5009f7efffba4fb206f1fba182", 0x6a}, {&(0x7f0000001740)="80e5a5943219b062e5d004a078b76151487adf3110f1520efbde69ea5ea3f9ac8fc5bf5259cd43c91e08b9367900d3719c4b9243c5cf4f762949fbce9d032305fea628afd221741c121f84585d244399aa9a3d79064757d0dbea2444c3ed10c302852099b60156828766785108b20fb8c8f3f37b9e1f13bdbffab238", 0x7c}], 0x8}, 0x4000) (async) 18:25:01 executing program 1: r0 = syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='ns/pid\x00'}, 0x30) r1 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000030c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x50) syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/pid\x00') [ 2494.694944][ T791] __alloc_pages+0x138/0x5e0 [ 2494.699364][ T791] ? prep_new_page+0x110/0x110 [ 2494.703966][ T791] ? is_bpf_text_address+0x172/0x190 [ 2494.709085][ T791] pte_alloc_one+0x73/0x1b0 [ 2494.713424][ T791] ? pfn_modify_allowed+0x2f0/0x2f0 [ 2494.718465][ T791] ? arch_stack_walk+0xf3/0x140 [ 2494.723149][ T791] __pte_alloc+0x86/0x350 [ 2494.727398][ T791] ? free_pgtables+0x280/0x280 [ 2494.731997][ T791] ? _raw_spin_lock+0xa4/0x1b0 [ 2494.736598][ T791] ? __kasan_check_write+0x14/0x20 [ 2494.741548][ T791] copy_page_range+0x28a8/0x2f90 [ 2494.746319][ T791] ? __kasan_slab_alloc+0xb1/0xe0 [ 2494.751186][ T791] ? pfn_valid+0x1e0/0x1e0 [ 2494.755524][ T791] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 2494.761074][ T791] ? __rb_insert_augmented+0x5de/0x610 [ 2494.766374][ T791] copy_mm+0xc7e/0x13e0 [ 2494.770403][ T791] ? copy_signal+0x610/0x610 [ 2494.774795][ T791] ? __init_rwsem+0xd6/0x1c0 [ 2494.779211][ T791] ? copy_signal+0x4e3/0x610 [ 2494.783640][ T791] copy_process+0x12bc/0x3260 [ 2494.788150][ T791] ? proc_fail_nth_write+0x20b/0x290 [ 2494.793269][ T791] ? fsnotify_perm+0x6a/0x5d0 [ 2494.797782][ T791] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2494.802739][ T791] ? vfs_write+0x9ec/0x1110 [ 2494.807070][ T791] kernel_clone+0x21e/0x9e0 [ 2494.811410][ T791] ? file_end_write+0x1c0/0x1c0 [ 2494.816101][ T791] ? create_io_thread+0x1e0/0x1e0 [ 2494.820957][ T791] ? mutex_unlock+0xb2/0x260 [ 2494.825384][ T791] ? __mutex_lock_slowpath+0x10/0x10 [ 2494.830502][ T791] __x64_sys_clone+0x23f/0x290 [ 2494.835102][ T791] ? __do_sys_vfork+0x130/0x130 [ 2494.839789][ T791] ? ksys_write+0x260/0x2c0 [ 2494.844130][ T791] ? debug_smp_processor_id+0x17/0x20 [ 2494.849338][ T791] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2494.855240][ T791] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2494.860708][ T791] do_syscall_64+0x3d/0xb0 [ 2494.864959][ T791] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2494.870689][ T791] RIP: 0033:0x7fdfd1d08ae9 [ 2494.874941][ T791] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 18:25:02 executing program 5: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 56) 18:25:02 executing program 1: r0 = syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='ns/pid\x00'}, 0x30) r1 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000030c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x50) syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/pid\x00') (async) syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/pid\x00') 18:25:02 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000600)=@generic={&(0x7f00000005c0)='./file0\x00', 0x0, 0x10}, 0x18) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000640)=r3) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='pids.events\x00', 0x0, 0x0) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000940)=@generic={&(0x7f0000000900)='./file0\x00', 0x0, 0x20}, 0x18) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000980)={r3, r6}, 0xc) recvmsg(r5, 0x0, 0x40000003) recvmsg(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000680)=""/128, 0x80}, {&(0x7f0000000700)=""/156, 0x9c}, {&(0x7f00000007c0)=""/95, 0x5f}], 0x3}, 0x40000000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000240)={&(0x7f0000000040)=@qipcrtr, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)=""/226, 0xe2}, {&(0x7f00000003c0)=""/242, 0xf2}], 0x2, &(0x7f00000004c0)=""/76, 0x4c}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000540)='!\x00'}, 0x30) close(r1) 18:25:02 executing program 2: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r1, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000340)='net_prio.prioidx\x00', 0x0, 0x0) r3 = openat$cgroup_ro(r1, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r3, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r3}, 0x20) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r3}, 0x8) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup(r5, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r6, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r7 = openat$cgroup_ro(r6, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r7, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r7}, 0x20) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r7}, 0x8) recvmsg$unix(r8, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001440)={r8, 0x20, &(0x7f0000001400)={&(0x7f0000000380)=""/4096, 0x1000, 0x0, &(0x7f00000013c0)}}, 0x10) recvmsg$unix(r4, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000002c0)={&(0x7f0000000000)="22be58934d0b8b72e0f3fc35f5d17b8b90b60528a151f1fd8935d21f4acce28f5fdd1bad2c6d03e233f77fcaf79c09c48bd4d389b8d389e1129d0b0de505018cf0d33ad292d9e78144336dff047c94d52285a4359f1c0ce9a8fcc4aa8a5d20ef51cc9535141d151729c08c42b3a56c8c9e565216a91ea1a900a3f950cf486b0b7b1e85f303c39b2a95587cd85068e9c156ead69b50ee35d5f9d90f78fc664bd96de02e505c732bb26d99b0415ff67c4638feeac9b4550a2f8e28d7871ae2897b857f57407c7ca3f657038bebed70e701", &(0x7f0000000100)=""/204, &(0x7f0000000200)="a451d15c9c1b64d5bad3790d54fac60421b25a4805b95591db8066be83373473f437f397ed0e0d9389", &(0x7f0000000240)="3e8522ffdaf47ca1fdff214e985912567f75f4453d49004a9891b2c8276dd6f95d59e46eb1ca49c07db3eed9758344ee0e670db1bc426acaa1b9f4b820fa60d6768f1c", 0x1, r4}, 0x38) 18:25:02 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1c}, 0x48) 18:25:02 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xd, 0xf}, 0x48) 18:25:02 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) [ 2494.894388][ T791] RSP: 002b:00007fdfd0a8b078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2494.902628][ T791] RAX: ffffffffffffffda RBX: 00007fdfd1e27f80 RCX: 00007fdfd1d08ae9 [ 2494.910532][ T791] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022001200 [ 2494.918340][ T791] RBP: 00007fdfd0a8b120 R08: 0000000000000000 R09: 0000000000000000 [ 2494.926148][ T791] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2494.934108][ T791] R13: 000000000000000b R14: 00007fdfd1e27f80 R15: 00007fff62717c48 [ 2494.941909][ T791] 18:25:02 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xd, 0x10}, 0x48) 18:25:02 executing program 2: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r1, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000340)='net_prio.prioidx\x00', 0x0, 0x0) r3 = openat$cgroup_ro(r1, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r3, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r3}, 0x20) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r3}, 0x8) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup(r5, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r6, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r7 = openat$cgroup_ro(r6, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r7, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r7}, 0x20) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r7}, 0x8) recvmsg$unix(r8, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001440)={r8, 0x20, &(0x7f0000001400)={&(0x7f0000000380)=""/4096, 0x1000, 0x0, &(0x7f00000013c0)}}, 0x10) recvmsg$unix(r4, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000002c0)={&(0x7f0000000000)="22be58934d0b8b72e0f3fc35f5d17b8b90b60528a151f1fd8935d21f4acce28f5fdd1bad2c6d03e233f77fcaf79c09c48bd4d389b8d389e1129d0b0de505018cf0d33ad292d9e78144336dff047c94d52285a4359f1c0ce9a8fcc4aa8a5d20ef51cc9535141d151729c08c42b3a56c8c9e565216a91ea1a900a3f950cf486b0b7b1e85f303c39b2a95587cd85068e9c156ead69b50ee35d5f9d90f78fc664bd96de02e505c732bb26d99b0415ff67c4638feeac9b4550a2f8e28d7871ae2897b857f57407c7ca3f657038bebed70e701", &(0x7f0000000100)=""/204, &(0x7f0000000200)="a451d15c9c1b64d5bad3790d54fac60421b25a4805b95591db8066be83373473f437f397ed0e0d9389", &(0x7f0000000240)="3e8522ffdaf47ca1fdff214e985912567f75f4453d49004a9891b2c8276dd6f95d59e46eb1ca49c07db3eed9758344ee0e670db1bc426acaa1b9f4b820fa60d6768f1c", 0x1, r4}, 0x38) openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) (async) openat$cgroup(r0, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) (async) openat$cgroup_pressure(r1, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async) openat$cgroup_ro(r2, &(0x7f0000000340)='net_prio.prioidx\x00', 0x0, 0x0) (async) openat$cgroup_ro(r1, 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r3, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r3}, 0x20) (async) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r3}, 0x8) (async) openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) (async) openat$cgroup(r5, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) (async) openat$cgroup_pressure(r6, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) (async) openat$cgroup_ro(r6, 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r7, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r7}, 0x20) (async) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r7}, 0x8) (async) recvmsg$unix(r8, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001440)={r8, 0x20, &(0x7f0000001400)={&(0x7f0000000380)=""/4096, 0x1000, 0x0, &(0x7f00000013c0)}}, 0x10) (async) recvmsg$unix(r4, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000002c0)={&(0x7f0000000000)="22be58934d0b8b72e0f3fc35f5d17b8b90b60528a151f1fd8935d21f4acce28f5fdd1bad2c6d03e233f77fcaf79c09c48bd4d389b8d389e1129d0b0de505018cf0d33ad292d9e78144336dff047c94d52285a4359f1c0ce9a8fcc4aa8a5d20ef51cc9535141d151729c08c42b3a56c8c9e565216a91ea1a900a3f950cf486b0b7b1e85f303c39b2a95587cd85068e9c156ead69b50ee35d5f9d90f78fc664bd96de02e505c732bb26d99b0415ff67c4638feeac9b4550a2f8e28d7871ae2897b857f57407c7ca3f657038bebed70e701", &(0x7f0000000100)=""/204, &(0x7f0000000200)="a451d15c9c1b64d5bad3790d54fac60421b25a4805b95591db8066be83373473f437f397ed0e0d9389", &(0x7f0000000240)="3e8522ffdaf47ca1fdff214e985912567f75f4453d49004a9891b2c8276dd6f95d59e46eb1ca49c07db3eed9758344ee0e670db1bc426acaa1b9f4b820fa60d6768f1c", 0x1, r4}, 0x38) (async) 18:25:02 executing program 2: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r1, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000340)='net_prio.prioidx\x00', 0x0, 0x0) r3 = openat$cgroup_ro(r1, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r3, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r3}, 0x20) (async, rerun: 64) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r3}, 0x8) (async, rerun: 64) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup(r5, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r6, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) (async) r7 = openat$cgroup_ro(r6, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r7, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r7}, 0x20) (async) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r7}, 0x8) recvmsg$unix(r8, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001440)={r8, 0x20, &(0x7f0000001400)={&(0x7f0000000380)=""/4096, 0x1000, 0x0, &(0x7f00000013c0)}}, 0x10) recvmsg$unix(r4, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000002c0)={&(0x7f0000000000)="22be58934d0b8b72e0f3fc35f5d17b8b90b60528a151f1fd8935d21f4acce28f5fdd1bad2c6d03e233f77fcaf79c09c48bd4d389b8d389e1129d0b0de505018cf0d33ad292d9e78144336dff047c94d52285a4359f1c0ce9a8fcc4aa8a5d20ef51cc9535141d151729c08c42b3a56c8c9e565216a91ea1a900a3f950cf486b0b7b1e85f303c39b2a95587cd85068e9c156ead69b50ee35d5f9d90f78fc664bd96de02e505c732bb26d99b0415ff67c4638feeac9b4550a2f8e28d7871ae2897b857f57407c7ca3f657038bebed70e701", &(0x7f0000000100)=""/204, &(0x7f0000000200)="a451d15c9c1b64d5bad3790d54fac60421b25a4805b95591db8066be83373473f437f397ed0e0d9389", &(0x7f0000000240)="3e8522ffdaf47ca1fdff214e985912567f75f4453d49004a9891b2c8276dd6f95d59e46eb1ca49c07db3eed9758344ee0e670db1bc426acaa1b9f4b820fa60d6768f1c", 0x1, r4}, 0x38) 18:25:02 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) 18:25:02 executing program 1: r0 = syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='ns/pid\x00'}, 0x30) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='ns/pid\x00'}, 0x30) r1 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000030c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x50) syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/pid\x00') [ 2494.999999][ T839] FAULT_INJECTION: forcing a failure. [ 2494.999999][ T839] name failslab, interval 1, probability 0, space 0, times 0 [ 2495.037260][ T839] CPU: 0 PID: 839 Comm: syz-executor.5 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2495.047290][ T839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2495.057181][ T839] Call Trace: [ 2495.060304][ T839] [ 2495.063084][ T839] dump_stack_lvl+0x151/0x1b7 [ 2495.067592][ T839] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2495.073054][ T839] dump_stack+0x15/0x17 [ 2495.077044][ T839] should_fail+0x3c6/0x510 [ 2495.081308][ T839] __should_failslab+0xa4/0xe0 [ 2495.085908][ T839] ? anon_vma_fork+0xf7/0x4e0 [ 2495.090497][ T839] should_failslab+0x9/0x20 [ 2495.094836][ T839] slab_pre_alloc_hook+0x37/0xd0 [ 2495.099613][ T839] ? anon_vma_fork+0xf7/0x4e0 [ 2495.104127][ T839] kmem_cache_alloc+0x44/0x200 [ 2495.108723][ T839] anon_vma_fork+0xf7/0x4e0 [ 2495.113061][ T839] ? anon_vma_name+0x43/0x70 [ 2495.117488][ T839] ? vm_area_dup+0x17a/0x230 [ 2495.121928][ T839] copy_mm+0xa3a/0x13e0 [ 2495.125923][ T839] ? copy_signal+0x610/0x610 [ 2495.130427][ T839] ? __init_rwsem+0xd6/0x1c0 [ 2495.134853][ T839] ? copy_signal+0x4e3/0x610 [ 2495.139277][ T839] copy_process+0x12bc/0x3260 [ 2495.143788][ T839] ? proc_fail_nth_write+0x20b/0x290 [ 2495.148909][ T839] ? fsnotify_perm+0x6a/0x5d0 [ 2495.153420][ T839] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2495.158376][ T839] ? vfs_write+0x9ec/0x1110 [ 2495.162709][ T839] kernel_clone+0x21e/0x9e0 [ 2495.167051][ T839] ? file_end_write+0x1c0/0x1c0 [ 2495.171736][ T839] ? create_io_thread+0x1e0/0x1e0 [ 2495.176597][ T839] ? mutex_unlock+0xb2/0x260 [ 2495.181021][ T839] ? __mutex_lock_slowpath+0x10/0x10 [ 2495.186144][ T839] __x64_sys_clone+0x23f/0x290 [ 2495.190742][ T839] ? __do_sys_vfork+0x130/0x130 [ 2495.195444][ T839] ? ksys_write+0x260/0x2c0 [ 2495.199770][ T839] ? debug_smp_processor_id+0x17/0x20 [ 2495.204981][ T839] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2495.210877][ T839] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2495.216350][ T839] do_syscall_64+0x3d/0xb0 [ 2495.220603][ T839] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2495.226333][ T839] RIP: 0033:0x7fdfd1d08ae9 [ 2495.230700][ T839] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 18:25:02 executing program 5: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 57) 18:25:02 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) [ 2495.250149][ T839] RSP: 002b:00007fdfd0a8b078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2495.258384][ T839] RAX: ffffffffffffffda RBX: 00007fdfd1e27f80 RCX: 00007fdfd1d08ae9 [ 2495.266195][ T839] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022001200 [ 2495.274007][ T839] RBP: 00007fdfd0a8b120 R08: 0000000000000000 R09: 0000000000000000 [ 2495.281929][ T839] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2495.289745][ T839] R13: 000000000000000b R14: 00007fdfd1e27f80 R15: 00007fff62717c48 [ 2495.297555][ T839] [ 2495.322925][ T876] FAULT_INJECTION: forcing a failure. [ 2495.322925][ T876] name failslab, interval 1, probability 0, space 0, times 0 [ 2495.335484][ T876] CPU: 1 PID: 876 Comm: syz-executor.5 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2495.345633][ T876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2495.355527][ T876] Call Trace: [ 2495.358652][ T876] [ 2495.361443][ T876] dump_stack_lvl+0x151/0x1b7 [ 2495.365951][ T876] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2495.371413][ T876] dump_stack+0x15/0x17 [ 2495.375400][ T876] should_fail+0x3c6/0x510 [ 2495.379661][ T876] __should_failslab+0xa4/0xe0 [ 2495.384262][ T876] ? anon_vma_fork+0x1df/0x4e0 [ 2495.388853][ T876] should_failslab+0x9/0x20 [ 2495.393199][ T876] slab_pre_alloc_hook+0x37/0xd0 [ 2495.397968][ T876] ? anon_vma_fork+0x1df/0x4e0 [ 2495.402569][ T876] kmem_cache_alloc+0x44/0x200 [ 2495.407174][ T876] anon_vma_fork+0x1df/0x4e0 [ 2495.411596][ T876] copy_mm+0xa3a/0x13e0 [ 2495.415594][ T876] ? copy_signal+0x610/0x610 [ 2495.420019][ T876] ? __init_rwsem+0xd6/0x1c0 [ 2495.424441][ T876] ? copy_signal+0x4e3/0x610 [ 2495.428872][ T876] copy_process+0x12bc/0x3260 [ 2495.433390][ T876] ? proc_fail_nth_write+0x20b/0x290 [ 2495.438631][ T876] ? fsnotify_perm+0x6a/0x5d0 [ 2495.443141][ T876] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2495.448089][ T876] ? vfs_write+0x9ec/0x1110 [ 2495.452432][ T876] kernel_clone+0x21e/0x9e0 [ 2495.456766][ T876] ? file_end_write+0x1c0/0x1c0 [ 2495.461462][ T876] ? create_io_thread+0x1e0/0x1e0 [ 2495.466312][ T876] ? mutex_unlock+0xb2/0x260 [ 2495.470838][ T876] ? __mutex_lock_slowpath+0x10/0x10 [ 2495.475948][ T876] __x64_sys_clone+0x23f/0x290 [ 2495.480548][ T876] ? __do_sys_vfork+0x130/0x130 [ 2495.485232][ T876] ? ksys_write+0x260/0x2c0 [ 2495.489574][ T876] ? debug_smp_processor_id+0x17/0x20 [ 2495.494782][ T876] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2495.500740][ T876] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2495.506150][ T876] do_syscall_64+0x3d/0xb0 [ 2495.510406][ T876] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2495.516132][ T876] RIP: 0033:0x7fdfd1d08ae9 [ 2495.520388][ T876] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2495.539843][ T876] RSP: 002b:00007fdfd0a8b078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2495.548074][ T876] RAX: ffffffffffffffda RBX: 00007fdfd1e27f80 RCX: 00007fdfd1d08ae9 [ 2495.555919][ T876] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022001200 [ 2495.563695][ T876] RBP: 00007fdfd0a8b120 R08: 0000000000000000 R09: 0000000000000000 [ 2495.571510][ T876] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2495.579319][ T876] R13: 000000000000000b R14: 00007fdfd1e27f80 R15: 00007fff62717c48 [ 2495.587135][ T876] 18:25:03 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000600)=@generic={&(0x7f00000005c0)='./file0\x00', 0x0, 0x10}, 0x18) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000640)=r3) (async) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000640)=r3) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='pids.events\x00', 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000940)=@generic={&(0x7f0000000900)='./file0\x00', 0x0, 0x20}, 0x18) (async) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000940)=@generic={&(0x7f0000000900)='./file0\x00', 0x0, 0x20}, 0x18) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000980)={r3, r6}, 0xc) recvmsg(r5, 0x0, 0x40000003) recvmsg(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000680)=""/128, 0x80}, {&(0x7f0000000700)=""/156, 0x9c}, {&(0x7f00000007c0)=""/95, 0x5f}], 0x3}, 0x40000000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000240)={&(0x7f0000000040)=@qipcrtr, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)=""/226, 0xe2}, {&(0x7f00000003c0)=""/242, 0xf2}], 0x2, &(0x7f00000004c0)=""/76, 0x4c}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000540)='!\x00'}, 0x30) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000540)='!\x00'}, 0x30) close(r1) 18:25:03 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xd, 0x11}, 0x48) 18:25:03 executing program 2: socketpair(0x6, 0x0, 0x7, &(0x7f0000000040)) 18:25:03 executing program 1: syz_clone(0x0, 0x0, 0xfffffffffffffe68, 0x0, 0x0, 0x0) 18:25:03 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000540), 0x48) 18:25:03 executing program 5: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 58) 18:25:03 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000540), 0x48) 18:25:03 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xd, 0x12}, 0x48) 18:25:03 executing program 2: socketpair(0x6, 0x0, 0x7, &(0x7f0000000040)) [ 2495.835073][ T888] FAULT_INJECTION: forcing a failure. [ 2495.835073][ T888] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2495.849225][ T888] CPU: 0 PID: 888 Comm: syz-executor.5 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2495.859362][ T888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2495.869258][ T888] Call Trace: [ 2495.872377][ T888] [ 2495.875161][ T888] dump_stack_lvl+0x151/0x1b7 [ 2495.879673][ T888] ? io_uring_drop_tctx_refs+0x190/0x190 18:25:03 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000540), 0x48) [ 2495.885143][ T888] ? __schedule+0xcc6/0x1580 [ 2495.889566][ T888] dump_stack+0x15/0x17 [ 2495.893557][ T888] should_fail+0x3c6/0x510 [ 2495.897812][ T888] should_fail_alloc_page+0x5a/0x80 [ 2495.902844][ T888] prepare_alloc_pages+0x15c/0x700 [ 2495.907791][ T888] ? __alloc_pages_bulk+0xe60/0xe60 [ 2495.912830][ T888] __alloc_pages+0x138/0x5e0 [ 2495.917252][ T888] ? prep_new_page+0x110/0x110 [ 2495.921855][ T888] ? is_bpf_text_address+0x172/0x190 [ 2495.926970][ T888] ? stack_trace_save+0x1c0/0x1c0 [ 2495.931835][ T888] ? __kernel_text_address+0x9b/0x110 [ 2495.937042][ T888] pte_alloc_one+0x73/0x1b0 [ 2495.941397][ T888] ? pfn_modify_allowed+0x2f0/0x2f0 [ 2495.946413][ T888] __pte_alloc+0x86/0x350 [ 2495.950580][ T888] ? free_pgtables+0x280/0x280 [ 2495.955182][ T888] ? __stack_depot_save+0x34/0x470 [ 2495.960121][ T888] ? anon_vma_clone+0x9a/0x500 [ 2495.964734][ T888] copy_page_range+0x28a8/0x2f90 [ 2495.969497][ T888] ? __kasan_slab_alloc+0xb1/0xe0 [ 2495.974364][ T888] ? slab_post_alloc_hook+0x53/0x2c0 [ 2495.979486][ T888] ? kernel_clone+0x21e/0x9e0 [ 2495.983995][ T888] ? do_syscall_64+0x3d/0xb0 [ 2495.988415][ T888] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2495.994333][ T888] ? pfn_valid+0x1e0/0x1e0 [ 2495.998588][ T888] ? rwsem_write_trylock+0x15b/0x290 [ 2496.003697][ T888] ? vma_interval_tree_augment_rotate+0x1d0/0x1d0 [ 2496.009948][ T888] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 2496.015498][ T888] ? __rb_insert_augmented+0x5de/0x610 [ 2496.020799][ T888] copy_mm+0xc7e/0x13e0 [ 2496.024791][ T888] ? copy_signal+0x610/0x610 [ 2496.029217][ T888] ? __init_rwsem+0xd6/0x1c0 [ 2496.033639][ T888] ? copy_signal+0x4e3/0x610 [ 2496.038065][ T888] copy_process+0x12bc/0x3260 [ 2496.042579][ T888] ? proc_fail_nth_write+0x20b/0x290 [ 2496.047697][ T888] ? fsnotify_perm+0x6a/0x5d0 [ 2496.052217][ T888] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2496.057159][ T888] ? vfs_write+0x9ec/0x1110 [ 2496.061502][ T888] kernel_clone+0x21e/0x9e0 [ 2496.065843][ T888] ? file_end_write+0x1c0/0x1c0 [ 2496.070528][ T888] ? create_io_thread+0x1e0/0x1e0 [ 2496.075388][ T888] ? mutex_unlock+0xb2/0x260 [ 2496.079810][ T888] ? __mutex_lock_slowpath+0x10/0x10 [ 2496.084943][ T888] __x64_sys_clone+0x23f/0x290 [ 2496.089536][ T888] ? __do_sys_vfork+0x130/0x130 [ 2496.094222][ T888] ? ksys_write+0x260/0x2c0 [ 2496.098560][ T888] ? debug_smp_processor_id+0x17/0x20 [ 2496.103777][ T888] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2496.109668][ T888] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2496.115135][ T888] do_syscall_64+0x3d/0xb0 [ 2496.119386][ T888] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2496.125111][ T888] RIP: 0033:0x7fdfd1d08ae9 [ 2496.129371][ T888] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2496.148809][ T888] RSP: 002b:00007fdfd0a8b078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2496.157055][ T888] RAX: ffffffffffffffda RBX: 00007fdfd1e27f80 RCX: 00007fdfd1d08ae9 [ 2496.164953][ T888] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022001200 [ 2496.172772][ T888] RBP: 00007fdfd0a8b120 R08: 0000000000000000 R09: 0000000000000000 18:25:03 executing program 1: syz_clone(0x0, 0x0, 0xfffffffffffffe68, 0x0, 0x0, 0x0) 18:25:03 executing program 0: syz_clone(0x1f0d9080, 0x0, 0xfffffea0, 0x0, 0x0, 0x0) gettid() r0 = getpid() syz_open_procfs$namespace(r0, 0x0) r1 = getpid() r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) openat$cgroup(r2, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup(r2, &(0x7f0000001640)='syz0\x00', 0x200002, 0x0) r4 = perf_event_open$cgroup(&(0x7f00000015c0)={0x3, 0x80, 0xff, 0x80, 0x20, 0x8, 0x0, 0x0, 0x14000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x4, @perf_bp={&(0x7f0000001580), 0x9}, 0x3001, 0x8000000000000001, 0x8, 0x2, 0x40, 0x800, 0x5, 0x0, 0x5, 0x0, 0x6}, r3, 0x0, 0xffffffffffffffff, 0x11) bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=@base={0x0, 0xdfe, 0xca2, 0x3, 0x1000, r4, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x5}, 0x48) perf_event_open(&(0x7f00000006c0)={0x3, 0x80, 0xe1, 0x41, 0x7, 0x0, 0x0, 0x7fff, 0x10002, 0x6, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000680), 0x2}, 0x80010, 0x6eb, 0x5, 0x0, 0x3c, 0x6, 0xa61e, 0x0, 0x6}, 0xffffffffffffffff, 0x5, r4, 0x9) syz_open_procfs$namespace(r1, 0x0) syz_open_procfs$namespace(r1, &(0x7f0000000500)='ns/user\x00') r5 = syz_clone(0x6000, &(0x7f0000000040)="aefa6173ad616ed82357a961dace2a259bbe121ed4fb5fb1feed6bbc91571ff2c26f1e9f32ae3bbed38e9ee3ea93aae2b6b1fca7f1614bac115ff5efbd03f4aacbd98e9d3a74dce1b56013c310131ab2ddd28b392e5f7cce9f0fa34c4a6f9ac1539067edc539bfaa8392927f065fbe8505f00b578625e2d4202a2e1691f55d818d3df7c47c5d85526ad5dc56b0a37d61246586923342b594f411b7c0e3291229bf41465767ad6d655b3fe50a271154654f4f111fc9dbde5da2424b6b24c081b4ae689b15b5d9f476f52782c0ce802f5a7a252cd6d464a678514989c736ac9db52bf7fe3ac99dc22f59e9", 0xea, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="2ae060139ad38790106db7dff003cb8729a75976856da2da375cf91c6a7fd8c7dd2c5cd656399e332cfcbb6395bd7a379a01c19d386d16c5af77bfac2281c26ba01fa4e632905192b8c38196f185364a602ca9c88664978e119d2e0fbf361bcaceff8816d17545e190b6dee476c114645b3be9bd395ade10966290076967e0bb5401ce6c72165e6768bd") r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0x0, 0x3, 0x8}, 0xc) r7 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r8 = openat$cgroup(r7, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r8, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) perf_event_open(&(0x7f00000005c0)={0x4, 0x80, 0x8, 0x7f, 0x1, 0x6, 0x0, 0xb23f, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x450, 0x8000000000000001}, 0x1000, 0x6, 0x9, 0x3, 0x7fff, 0x1f, 0x4, 0x0, 0x7ff, 0x0, 0x401}, r5, 0x6, 0xffffffffffffffff, 0x9) r9 = openat$cgroup_ro(r8, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r9, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r9}, 0x20) r10 = openat$cgroup_ro(r9, &(0x7f0000000540)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) openat$cgroup_int(r10, &(0x7f0000000580)='cpu.weight\x00', 0x2, 0x0) openat$cgroup_ro(r9, &(0x7f0000000640)='blkio.bfq.time\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r9}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x3, &(0x7f00000002c0)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @alu={0x4, 0x1, 0x3, 0x0, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffc}], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0xe, 0x80000001, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000400)=[0xffffffffffffffff, r6, r9], 0x0, 0x10, 0x80}, 0x90) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280)=r5, 0x12) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/time_for_children\x00') [ 2496.180752][ T888] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2496.188559][ T888] R13: 000000000000000b R14: 00007fdfd1e27f80 R15: 00007fff62717c48 [ 2496.196376][ T888] 18:25:03 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) (async) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000600)=@generic={&(0x7f00000005c0)='./file0\x00', 0x0, 0x10}, 0x18) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000640)=r3) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='pids.events\x00', 0x0, 0x0) (async) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000940)=@generic={&(0x7f0000000900)='./file0\x00', 0x0, 0x20}, 0x18) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000980)={r3, r6}, 0xc) (async, rerun: 32) recvmsg(r5, 0x0, 0x40000003) (rerun: 32) recvmsg(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000680)=""/128, 0x80}, {&(0x7f0000000700)=""/156, 0x9c}, {&(0x7f00000007c0)=""/95, 0x5f}], 0x3}, 0x40000000) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000240)={&(0x7f0000000040)=@qipcrtr, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)=""/226, 0xe2}, {&(0x7f00000003c0)=""/242, 0xf2}], 0x2, &(0x7f00000004c0)=""/76, 0x4c}, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000540)='!\x00'}, 0x30) (async, rerun: 64) close(r1) (rerun: 64) 18:25:03 executing program 2: socketpair(0x6, 0x0, 0x7, &(0x7f0000000040)) 18:25:03 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xd, 0x13}, 0x48) 18:25:03 executing program 1: syz_clone(0x0, 0x0, 0xfffffffffffffe68, 0x0, 0x0, 0x0) 18:25:03 executing program 5: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 59) 18:25:04 executing program 2: socketpair(0x10, 0x2, 0x8, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000), 0x4) 18:25:04 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xd, 0x14}, 0x48) 18:25:04 executing program 2: socketpair(0x10, 0x2, 0x8, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000), 0x4) 18:25:04 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xd, 0x15}, 0x48) [ 2496.686641][ T916] FAULT_INJECTION: forcing a failure. [ 2496.686641][ T916] name fail_page_alloc, interval 1, probability 0, space 0, times 0 18:25:04 executing program 2: socketpair(0x10, 0x2, 0x8, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000), 0x4) [ 2496.771183][ T916] CPU: 0 PID: 916 Comm: syz-executor.5 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2496.781280][ T916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2496.791172][ T916] Call Trace: [ 2496.794297][ T916] [ 2496.797073][ T916] dump_stack_lvl+0x151/0x1b7 [ 2496.801584][ T916] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2496.807056][ T916] dump_stack+0x15/0x17 [ 2496.811044][ T916] should_fail+0x3c6/0x510 [ 2496.815296][ T916] should_fail_alloc_page+0x5a/0x80 [ 2496.820332][ T916] prepare_alloc_pages+0x15c/0x700 [ 2496.825340][ T916] ? __alloc_pages+0x5e0/0x5e0 [ 2496.829885][ T916] ? __alloc_pages_bulk+0xe60/0xe60 [ 2496.834914][ T916] __alloc_pages+0x138/0x5e0 [ 2496.839338][ T916] ? prep_new_page+0x110/0x110 [ 2496.843940][ T916] ? __this_cpu_preempt_check+0x13/0x20 [ 2496.849320][ T916] ? __mod_node_page_state+0xac/0xf0 [ 2496.854464][ T916] pte_alloc_one+0x73/0x1b0 [ 2496.858783][ T916] ? pfn_modify_allowed+0x2f0/0x2f0 [ 2496.863812][ T916] __pte_alloc+0x86/0x350 [ 2496.867978][ T916] ? free_pgtables+0x280/0x280 [ 2496.872584][ T916] ? _raw_spin_lock+0xa4/0x1b0 [ 2496.877179][ T916] ? __kasan_check_write+0x14/0x20 [ 2496.882127][ T916] copy_page_range+0x28a8/0x2f90 [ 2496.886896][ T916] ? __kasan_slab_alloc+0xb1/0xe0 [ 2496.891758][ T916] ? slab_post_alloc_hook+0x53/0x2c0 [ 2496.896880][ T916] ? do_syscall_64+0x3d/0xb0 [ 2496.901311][ T916] ? pfn_valid+0x1e0/0x1e0 [ 2496.905559][ T916] ? rwsem_write_trylock+0x15b/0x290 [ 2496.910677][ T916] ? vma_interval_tree_augment_rotate+0x1d0/0x1d0 [ 2496.916927][ T916] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 2496.922484][ T916] ? __rb_insert_augmented+0x5de/0x610 [ 2496.927780][ T916] copy_mm+0xc7e/0x13e0 [ 2496.931781][ T916] ? copy_signal+0x610/0x610 [ 2496.936197][ T916] ? __init_rwsem+0xd6/0x1c0 [ 2496.940623][ T916] ? copy_signal+0x4e3/0x610 [ 2496.945052][ T916] copy_process+0x12bc/0x3260 [ 2496.949563][ T916] ? proc_fail_nth_write+0x20b/0x290 [ 2496.954683][ T916] ? fsnotify_perm+0x6a/0x5d0 [ 2496.959203][ T916] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2496.964148][ T916] ? vfs_write+0x9ec/0x1110 [ 2496.968621][ T916] kernel_clone+0x21e/0x9e0 [ 2496.972949][ T916] ? file_end_write+0x1c0/0x1c0 [ 2496.977642][ T916] ? create_io_thread+0x1e0/0x1e0 [ 2496.982496][ T916] ? mutex_unlock+0xb2/0x260 [ 2496.986926][ T916] ? __mutex_lock_slowpath+0x10/0x10 [ 2496.992045][ T916] __x64_sys_clone+0x23f/0x290 [ 2496.996646][ T916] ? __do_sys_vfork+0x130/0x130 [ 2497.001329][ T916] ? ksys_write+0x260/0x2c0 [ 2497.005714][ T916] ? debug_smp_processor_id+0x17/0x20 [ 2497.010885][ T916] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2497.016783][ T916] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2497.022457][ T916] do_syscall_64+0x3d/0xb0 [ 2497.026705][ T916] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2497.032434][ T916] RIP: 0033:0x7fdfd1d08ae9 [ 2497.036682][ T916] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2497.056147][ T916] RSP: 002b:00007fdfd0a8b078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2497.064406][ T916] RAX: ffffffffffffffda RBX: 00007fdfd1e27f80 RCX: 00007fdfd1d08ae9 18:25:04 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xd, 0x16}, 0x48) 18:25:04 executing program 0: syz_clone(0x1f0d9080, 0x0, 0xfffffea0, 0x0, 0x0, 0x0) gettid() r0 = getpid() syz_open_procfs$namespace(r0, 0x0) r1 = getpid() r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) openat$cgroup(r2, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup(r2, &(0x7f0000001640)='syz0\x00', 0x200002, 0x0) r4 = perf_event_open$cgroup(&(0x7f00000015c0)={0x3, 0x80, 0xff, 0x80, 0x20, 0x8, 0x0, 0x0, 0x14000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x4, @perf_bp={&(0x7f0000001580), 0x9}, 0x3001, 0x8000000000000001, 0x8, 0x2, 0x40, 0x800, 0x5, 0x0, 0x5, 0x0, 0x6}, r3, 0x0, 0xffffffffffffffff, 0x11) bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=@base={0x0, 0xdfe, 0xca2, 0x3, 0x1000, r4, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x5}, 0x48) perf_event_open(&(0x7f00000006c0)={0x3, 0x80, 0xe1, 0x41, 0x7, 0x0, 0x0, 0x7fff, 0x10002, 0x6, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000680), 0x2}, 0x80010, 0x6eb, 0x5, 0x0, 0x3c, 0x6, 0xa61e, 0x0, 0x6}, 0xffffffffffffffff, 0x5, r4, 0x9) syz_open_procfs$namespace(r1, 0x0) syz_open_procfs$namespace(r1, &(0x7f0000000500)='ns/user\x00') r5 = syz_clone(0x6000, &(0x7f0000000040)="aefa6173ad616ed82357a961dace2a259bbe121ed4fb5fb1feed6bbc91571ff2c26f1e9f32ae3bbed38e9ee3ea93aae2b6b1fca7f1614bac115ff5efbd03f4aacbd98e9d3a74dce1b56013c310131ab2ddd28b392e5f7cce9f0fa34c4a6f9ac1539067edc539bfaa8392927f065fbe8505f00b578625e2d4202a2e1691f55d818d3df7c47c5d85526ad5dc56b0a37d61246586923342b594f411b7c0e3291229bf41465767ad6d655b3fe50a271154654f4f111fc9dbde5da2424b6b24c081b4ae689b15b5d9f476f52782c0ce802f5a7a252cd6d464a678514989c736ac9db52bf7fe3ac99dc22f59e9", 0xea, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="2ae060139ad38790106db7dff003cb8729a75976856da2da375cf91c6a7fd8c7dd2c5cd656399e332cfcbb6395bd7a379a01c19d386d16c5af77bfac2281c26ba01fa4e632905192b8c38196f185364a602ca9c88664978e119d2e0fbf361bcaceff8816d17545e190b6dee476c114645b3be9bd395ade10966290076967e0bb5401ce6c72165e6768bd") r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0x0, 0x3, 0x8}, 0xc) r7 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r8 = openat$cgroup(r7, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r8, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) perf_event_open(&(0x7f00000005c0)={0x4, 0x80, 0x8, 0x7f, 0x1, 0x6, 0x0, 0xb23f, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x450, 0x8000000000000001}, 0x1000, 0x6, 0x9, 0x3, 0x7fff, 0x1f, 0x4, 0x0, 0x7ff, 0x0, 0x401}, r5, 0x6, 0xffffffffffffffff, 0x9) r9 = openat$cgroup_ro(r8, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r9, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r9}, 0x20) r10 = openat$cgroup_ro(r9, &(0x7f0000000540)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) openat$cgroup_int(r10, &(0x7f0000000580)='cpu.weight\x00', 0x2, 0x0) openat$cgroup_ro(r9, &(0x7f0000000640)='blkio.bfq.time\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r9}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x3, &(0x7f00000002c0)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @alu={0x4, 0x1, 0x3, 0x0, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffc}], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0xe, 0x80000001, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000400)=[0xffffffffffffffff, r6, r9], 0x0, 0x10, 0x80}, 0x90) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280)=r5, 0x12) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/time_for_children\x00') [ 2497.072182][ T916] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022001200 [ 2497.079991][ T916] RBP: 00007fdfd0a8b120 R08: 0000000000000000 R09: 0000000000000000 [ 2497.087812][ T916] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2497.095619][ T916] R13: 000000000000000b R14: 00007fdfd1e27f80 R15: 00007fff62717c48 [ 2497.103434][ T916] 18:25:04 executing program 1: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@map=0x1, 0xffffffffffffffff, 0x27, 0x10, 0x0, @link_id=0xffffffffffffffff}, 0x20) syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) 18:25:04 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xd, 0x17}, 0x48) 18:25:04 executing program 2: ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x313) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000000)={0xa, &(0x7f0000000080)=[{0x7, 0x8, 0x4, 0x7}, {0x7f, 0x1, 0x1f, 0x20}, {0x4, 0x6b, 0x0, 0x5}, {0x7fff, 0x2, 0xa3, 0x1}, {0x8001, 0x6, 0x20, 0x5}, {0x6c5, 0x20, 0x4, 0x7f}, {0x1f, 0x1f, 0x7f, 0x408000}, {0x2, 0x1f, 0xe1, 0x3}, {0x20, 0x6, 0xcb, 0xb92d}, {0x0, 0x1, 0x5, 0x2}]}) socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) 18:25:04 executing program 5: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 60) 18:25:04 executing program 2: ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x313) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000000)={0xa, &(0x7f0000000080)=[{0x7, 0x8, 0x4, 0x7}, {0x7f, 0x1, 0x1f, 0x20}, {0x4, 0x6b, 0x0, 0x5}, {0x7fff, 0x2, 0xa3, 0x1}, {0x8001, 0x6, 0x20, 0x5}, {0x6c5, 0x20, 0x4, 0x7f}, {0x1f, 0x1f, 0x7f, 0x408000}, {0x2, 0x1f, 0xe1, 0x3}, {0x20, 0x6, 0xcb, 0xb92d}, {0x0, 0x1, 0x5, 0x2}]}) (async) socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) 18:25:04 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xd, 0x18}, 0x48) 18:25:04 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup(r1, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r2, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r2, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r3, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r3}, 0x20) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r3}, 0x8) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup(r5, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r6, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r3}, 0x8) openat$cgroup_pressure(r7, &(0x7f0000000100)='cpu.pressure\x00', 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x20, 0x1ff, 0x38, 0x200, r3, 0x3, '\x00', 0x0, r4, 0x5, 0x5, 0x2}, 0x48) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000240)='./file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@map=r8, r9, 0x8, 0x10, 0x0, @link_id=0xffffffffffffffff}, 0x20) r10 = openat$cgroup_ro(r6, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r10, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r10}, 0x20) r11 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r10}, 0x8) recvmsg$unix(r11, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r11) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000040)=0x8000000000000000) recvmsg(r12, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) close(r13) r14 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) openat$cgroup(r14, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup(r14, &(0x7f0000001640)='syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x2, 0x6, 0x7f, 0x0, 0x6, 0x20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x80000000}, 0xb000, 0x2, 0x9, 0x0, 0x2, 0x895, 0xc5a8, 0x0, 0x7fffffff, 0x0, 0x8}, r14, 0xe, r10, 0x8) 18:25:04 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xd, 0x19}, 0x48) 18:25:04 executing program 2: ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x313) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) (async) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000000)={0xa, &(0x7f0000000080)=[{0x7, 0x8, 0x4, 0x7}, {0x7f, 0x1, 0x1f, 0x20}, {0x4, 0x6b, 0x0, 0x5}, {0x7fff, 0x2, 0xa3, 0x1}, {0x8001, 0x6, 0x20, 0x5}, {0x6c5, 0x20, 0x4, 0x7f}, {0x1f, 0x1f, 0x7f, 0x408000}, {0x2, 0x1f, 0xe1, 0x3}, {0x20, 0x6, 0xcb, 0xb92d}, {0x0, 0x1, 0x5, 0x2}]}) (async) socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) 18:25:04 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xd, 0x1a}, 0x48) 18:25:04 executing program 2: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000080)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={r0, 0x17c9}, 0xc) socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) 18:25:05 executing program 0: socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x43, 0x1}, 0x1}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000080)="4aa5e18112fc1f4d302aa41d609c4498fa50cb5a3d2b3f4d5200ff16244bbf85a6cb6d697f34bfa01bf6d34abf2a595e2e0add4b67ed7b13bf28802bfca687f811a569952c42f1d9eb799a2a5fff873045f3d05962f4a11b4bce58c05ae3288e74703d6d40e554c73562e5b4f9445c7003dfda728529fbb67f7e451b9e9c4232e7e25a668da182bd8602b9515cb7828fbf4d537c0964ec5a70f3c2fc0926bf68b0e1eae82608474e1dab6c8b19142ba687a452b09c3c", 0xb6}, {&(0x7f0000000140)="60bc7c6edf85d31db572efb4d474391d8bda9a9f714b886e9d99d5c3e1edde6517f2d84da08ab7da4da26efd78c6846de5cae446da606e4a1eec4a72", 0x3c}, {&(0x7f0000000180)="2b4eb84c5bb3aa216c638d7eaba94fe22caa0115eef4219a0a94fa6505c61038acd804e90baa8e3f70f5d5ecbebc94838c36b474c443f68a9dc1670b74f0c515551c053ff2f33573f38a13f7336b208fda700b47b284ad8742e2", 0x5a}], 0x3, &(0x7f0000000240)="9571a310f207c636a758a0a8c0144825c2935c229a5a8b4e477df7", 0x1b, 0x40088d0}, 0x44040) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup(r1, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r2, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r2, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r3, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r3}, 0x20) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r3}, 0x8) recvmsg$unix(r4, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup(r5, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r6, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r7 = openat$cgroup_ro(r6, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r7, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r7}, 0x20) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r7}, 0x8) recvmsg$unix(r8, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x2, 0x400, 0x8000, 0x102, r4, 0x2, '\x00', 0x0, r8, 0x2, 0x0, 0x5, 0x7}, 0x48) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000480), 0x8) r11 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0)={r10}, 0x8) r12 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@o_path={&(0x7f0000000300)='./file0\x00', 0x0, 0x4018, r9}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000800)={@cgroup=r10, 0x12, 0x0, 0x7ff, &(0x7f0000000600)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000840)={@map=r11, r12, 0x17, 0x3000, r10, @prog_id, r13}, 0x20) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r14, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000000000070000008520000002000000d50bf8fffcffffff85100000080000000097ac24c0e2f831f03000fcffffff185100000600000000000000000000001b00000000000e7cee6f0014d08c097371af91e9e3cabd8d78e61f700be8cdd3266ff4c4f699a0e5ae5a665f8f66b10e26d3899fef18fed930cb592707cfffcbf46c32938840b37bf546e45a406e78d2bb0cc34495f6edeba706c65ad735c3198278f8240634a026230b6ed88e", @ANYRESHEX=r14], &(0x7f0000000340)='syzkaller\x00', 0x615, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0xf, 0x7, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0x1, r9, r10], 0x0, 0x10, 0x4}, 0x53) 18:25:05 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup(r1, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r2, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) openat$cgroup_ro(r2, 0x0, 0x0, 0x0) (async) r3 = openat$cgroup_ro(r2, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r3, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r3}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r3}, 0x8) (async) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r3}, 0x8) openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) (async) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) openat$cgroup(r5, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) (async) r6 = openat$cgroup(r5, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r6, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r3}, 0x8) (async) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r3}, 0x8) openat$cgroup_pressure(r7, &(0x7f0000000100)='cpu.pressure\x00', 0x2, 0x0) (async) openat$cgroup_pressure(r7, &(0x7f0000000100)='cpu.pressure\x00', 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x20, 0x1ff, 0x38, 0x200, r3, 0x3, '\x00', 0x0, r4, 0x5, 0x5, 0x2}, 0x48) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000240)='./file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@map=r8, r9, 0x8, 0x10, 0x0, @link_id=0xffffffffffffffff}, 0x20) r10 = openat$cgroup_ro(r6, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r10, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r10}, 0x20) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r10, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r10}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r10}, 0x8) (async) r11 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r10}, 0x8) recvmsg$unix(r11, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r11) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000040)=0x8000000000000000) (async) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000040)=0x8000000000000000) recvmsg(r12, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) close(r13) r14 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) openat$cgroup(r14, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup(r14, &(0x7f0000001640)='syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x2, 0x6, 0x7f, 0x0, 0x6, 0x20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x80000000}, 0xb000, 0x2, 0x9, 0x0, 0x2, 0x895, 0xc5a8, 0x0, 0x7fffffff, 0x0, 0x8}, r14, 0xe, r10, 0x8) 18:25:05 executing program 1: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@map=0x1, 0xffffffffffffffff, 0x27, 0x10, 0x0, @link_id=0xffffffffffffffff}, 0x20) syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) 18:25:05 executing program 2: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000080)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={r0, 0x17c9}, 0xc) (async, rerun: 64) socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) (rerun: 64) [ 2497.788872][ T983] FAULT_INJECTION: forcing a failure. [ 2497.788872][ T983] name failslab, interval 1, probability 0, space 0, times 0 [ 2497.854486][ T983] CPU: 1 PID: 983 Comm: syz-executor.5 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2497.864496][ T983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2497.874385][ T983] Call Trace: [ 2497.877510][ T983] [ 2497.880288][ T983] dump_stack_lvl+0x151/0x1b7 [ 2497.884805][ T983] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2497.890270][ T983] dump_stack+0x15/0x17 [ 2497.894259][ T983] should_fail+0x3c6/0x510 [ 2497.898514][ T983] __should_failslab+0xa4/0xe0 [ 2497.903115][ T983] ? vm_area_dup+0x26/0x230 [ 2497.907454][ T983] should_failslab+0x9/0x20 [ 2497.911792][ T983] slab_pre_alloc_hook+0x37/0xd0 [ 2497.916565][ T983] ? vm_area_dup+0x26/0x230 [ 2497.920905][ T983] kmem_cache_alloc+0x44/0x200 [ 2497.925507][ T983] vm_area_dup+0x26/0x230 [ 2497.929728][ T983] copy_mm+0x9a1/0x13e0 [ 2497.933670][ T983] ? copy_signal+0x610/0x610 [ 2497.938101][ T983] ? __init_rwsem+0xd6/0x1c0 [ 2497.942521][ T983] ? copy_signal+0x4e3/0x610 [ 2497.946957][ T983] copy_process+0x12bc/0x3260 [ 2497.951462][ T983] ? proc_fail_nth_write+0x20b/0x290 [ 2497.956579][ T983] ? fsnotify_perm+0x6a/0x5d0 [ 2497.961105][ T983] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2497.966042][ T983] ? vfs_write+0x9ec/0x1110 [ 2497.970381][ T983] kernel_clone+0x21e/0x9e0 [ 2497.974718][ T983] ? file_end_write+0x1c0/0x1c0 [ 2497.979411][ T983] ? create_io_thread+0x1e0/0x1e0 [ 2497.984286][ T983] ? mutex_unlock+0xb2/0x260 [ 2497.988692][ T983] ? __mutex_lock_slowpath+0x10/0x10 [ 2497.993813][ T983] __x64_sys_clone+0x23f/0x290 [ 2497.998411][ T983] ? __do_sys_vfork+0x130/0x130 [ 2498.003099][ T983] ? ksys_write+0x260/0x2c0 [ 2498.007439][ T983] ? debug_smp_processor_id+0x17/0x20 [ 2498.012668][ T983] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2498.018568][ T983] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2498.024017][ T983] do_syscall_64+0x3d/0xb0 [ 2498.028273][ T983] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2498.033998][ T983] RIP: 0033:0x7fdfd1d08ae9 [ 2498.038280][ T983] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2498.057699][ T983] RSP: 002b:00007fdfd0a8b078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2498.065956][ T983] RAX: ffffffffffffffda RBX: 00007fdfd1e27f80 RCX: 00007fdfd1d08ae9 [ 2498.073746][ T983] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022001200 [ 2498.081558][ T983] RBP: 00007fdfd0a8b120 R08: 0000000000000000 R09: 0000000000000000 [ 2498.089370][ T983] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2498.097180][ T983] R13: 000000000000000b R14: 00007fdfd1e27f80 R15: 00007fff62717c48 18:25:05 executing program 5: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 61) 18:25:05 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xd, 0x1b}, 0x48) 18:25:05 executing program 2: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000080)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={r0, 0x17c9}, 0xc) (async) socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) 18:25:05 executing program 0: socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x43, 0x1}, 0x1}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000080)="4aa5e18112fc1f4d302aa41d609c4498fa50cb5a3d2b3f4d5200ff16244bbf85a6cb6d697f34bfa01bf6d34abf2a595e2e0add4b67ed7b13bf28802bfca687f811a569952c42f1d9eb799a2a5fff873045f3d05962f4a11b4bce58c05ae3288e74703d6d40e554c73562e5b4f9445c7003dfda728529fbb67f7e451b9e9c4232e7e25a668da182bd8602b9515cb7828fbf4d537c0964ec5a70f3c2fc0926bf68b0e1eae82608474e1dab6c8b19142ba687a452b09c3c", 0xb6}, {&(0x7f0000000140)="60bc7c6edf85d31db572efb4d474391d8bda9a9f714b886e9d99d5c3e1edde6517f2d84da08ab7da4da26efd78c6846de5cae446da606e4a1eec4a72", 0x3c}, {&(0x7f0000000180)="2b4eb84c5bb3aa216c638d7eaba94fe22caa0115eef4219a0a94fa6505c61038acd804e90baa8e3f70f5d5ecbebc94838c36b474c443f68a9dc1670b74f0c515551c053ff2f33573f38a13f7336b208fda700b47b284ad8742e2", 0x5a}], 0x3, &(0x7f0000000240)="9571a310f207c636a758a0a8c0144825c2935c229a5a8b4e477df7", 0x1b, 0x40088d0}, 0x44040) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup(r1, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r2, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r2, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r3, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r3}, 0x20) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r3}, 0x8) recvmsg$unix(r4, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup(r5, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r6, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r7 = openat$cgroup_ro(r6, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r7, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r7}, 0x20) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r7}, 0x8) recvmsg$unix(r8, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x2, 0x400, 0x8000, 0x102, r4, 0x2, '\x00', 0x0, r8, 0x2, 0x0, 0x5, 0x7}, 0x48) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000480), 0x8) r11 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0)={r10}, 0x8) r12 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@o_path={&(0x7f0000000300)='./file0\x00', 0x0, 0x4018, r9}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000800)={@cgroup=r10, 0x12, 0x0, 0x7ff, &(0x7f0000000600)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000840)={@map=r11, r12, 0x17, 0x3000, r10, @prog_id, r13}, 0x20) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r14, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000000000070000008520000002000000d50bf8fffcffffff85100000080000000097ac24c0e2f831f03000fcffffff185100000600000000000000000000001b00000000000e7cee6f0014d08c097371af91e9e3cabd8d78e61f700be8cdd3266ff4c4f699a0e5ae5a665f8f66b10e26d3899fef18fed930cb592707cfffcbf46c32938840b37bf546e45a406e78d2bb0cc34495f6edeba706c65ad735c3198278f8240634a026230b6ed88e", @ANYRESHEX=r14], &(0x7f0000000340)='syzkaller\x00', 0x615, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0xf, 0x7, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0x1, r9, r10], 0x0, 0x10, 0x4}, 0x53) 18:25:05 executing program 1: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@map=0x1, 0xffffffffffffffff, 0x27, 0x10, 0x0, @link_id=0xffffffffffffffff}, 0x20) (async) syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) 18:25:05 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup(r1, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r2, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) (async) r3 = openat$cgroup_ro(r2, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r3, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r3}, 0x20) (async) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r3}, 0x8) (async) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup(r5, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r6, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) (async) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r3}, 0x8) openat$cgroup_pressure(r7, &(0x7f0000000100)='cpu.pressure\x00', 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x20, 0x1ff, 0x38, 0x200, r3, 0x3, '\x00', 0x0, r4, 0x5, 0x5, 0x2}, 0x48) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000240)='./file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@map=r8, r9, 0x8, 0x10, 0x0, @link_id=0xffffffffffffffff}, 0x20) r10 = openat$cgroup_ro(r6, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r10, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r10}, 0x20) (async) r11 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r10}, 0x8) recvmsg$unix(r11, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r11) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000040)=0x8000000000000000) (async) recvmsg(r12, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) (async) close(r13) (async) r14 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) openat$cgroup(r14, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup(r14, &(0x7f0000001640)='syz0\x00', 0x200002, 0x0) (async) perf_event_open$cgroup(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x2, 0x6, 0x7f, 0x0, 0x6, 0x20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x80000000}, 0xb000, 0x2, 0x9, 0x0, 0x2, 0x895, 0xc5a8, 0x0, 0x7fffffff, 0x0, 0x8}, r14, 0xe, r10, 0x8) 18:25:05 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xd, 0x1c}, 0x48) [ 2498.105005][ T983] 18:25:05 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x7, &(0x7f0000000000)=[{0x70a, 0x73, 0x62, 0x80000001}, {0x2, 0xff, 0x2b, 0xb7}, {0x1ff, 0x80, 0x1, 0x8000}, {0x8, 0x1f, 0x2, 0x7}, {0xfffc, 0x7f, 0xf7, 0x9}, {0x2, 0x6, 0x44, 0x4}, {0x7fff, 0x0, 0x8, 0x15}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x440000, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000100)) socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) 18:25:05 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r2}, 0x8) close(r1) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00'}, 0x18) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)=@o_path={&(0x7f0000000080)='./file0\x00', r3}, 0x18) 18:25:05 executing program 1: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpid() syz_open_procfs$namespace(r0, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x9, 0x4, 0x7, 0xf8, 0x0, 0x5, 0x8048, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x240, 0x5babf7bc, 0xe4e95d1, 0x0, 0x3, 0x4, 0x98, 0x0, 0x3f, 0x0, 0x8000000000000000}, r0, 0x7, 0xffffffffffffffff, 0x8) 18:25:05 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x7, &(0x7f0000000000)=[{0x70a, 0x73, 0x62, 0x80000001}, {0x2, 0xff, 0x2b, 0xb7}, {0x1ff, 0x80, 0x1, 0x8000}, {0x8, 0x1f, 0x2, 0x7}, {0xfffc, 0x7f, 0xf7, 0x9}, {0x2, 0x6, 0x44, 0x4}, {0x7fff, 0x0, 0x8, 0x15}]}) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x440000, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x440000, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000100)) socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) 18:25:05 executing program 0: socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x43, 0x1}, 0x1}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000080)="4aa5e18112fc1f4d302aa41d609c4498fa50cb5a3d2b3f4d5200ff16244bbf85a6cb6d697f34bfa01bf6d34abf2a595e2e0add4b67ed7b13bf28802bfca687f811a569952c42f1d9eb799a2a5fff873045f3d05962f4a11b4bce58c05ae3288e74703d6d40e554c73562e5b4f9445c7003dfda728529fbb67f7e451b9e9c4232e7e25a668da182bd8602b9515cb7828fbf4d537c0964ec5a70f3c2fc0926bf68b0e1eae82608474e1dab6c8b19142ba687a452b09c3c", 0xb6}, {&(0x7f0000000140)="60bc7c6edf85d31db572efb4d474391d8bda9a9f714b886e9d99d5c3e1edde6517f2d84da08ab7da4da26efd78c6846de5cae446da606e4a1eec4a72", 0x3c}, {&(0x7f0000000180)="2b4eb84c5bb3aa216c638d7eaba94fe22caa0115eef4219a0a94fa6505c61038acd804e90baa8e3f70f5d5ecbebc94838c36b474c443f68a9dc1670b74f0c515551c053ff2f33573f38a13f7336b208fda700b47b284ad8742e2", 0x5a}], 0x3, &(0x7f0000000240)="9571a310f207c636a758a0a8c0144825c2935c229a5a8b4e477df7", 0x1b, 0x40088d0}, 0x44040) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup(r1, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r2, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r2, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r3, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r3}, 0x20) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r3}, 0x8) recvmsg$unix(r4, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup(r5, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r6, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r7 = openat$cgroup_ro(r6, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r7, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r7}, 0x20) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r7}, 0x8) recvmsg$unix(r8, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x2, 0x400, 0x8000, 0x102, r4, 0x2, '\x00', 0x0, r8, 0x2, 0x0, 0x5, 0x7}, 0x48) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000480), 0x8) r11 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0)={r10}, 0x8) r12 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@o_path={&(0x7f0000000300)='./file0\x00', 0x0, 0x4018, r9}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000800)={@cgroup=r10, 0x12, 0x0, 0x7ff, &(0x7f0000000600)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000840)={@map=r11, r12, 0x17, 0x3000, r10, @prog_id, r13}, 0x20) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r14, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000000000070000008520000002000000d50bf8fffcffffff85100000080000000097ac24c0e2f831f03000fcffffff185100000600000000000000000000001b00000000000e7cee6f0014d08c097371af91e9e3cabd8d78e61f700be8cdd3266ff4c4f699a0e5ae5a665f8f66b10e26d3899fef18fed930cb592707cfffcbf46c32938840b37bf546e45a406e78d2bb0cc34495f6edeba706c65ad735c3198278f8240634a026230b6ed88e", @ANYRESHEX=r14], &(0x7f0000000340)='syzkaller\x00', 0x615, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0xf, 0x7, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0x1, r9, r10], 0x0, 0x10, 0x4}, 0x53) [ 2498.192120][ T1003] FAULT_INJECTION: forcing a failure. [ 2498.192120][ T1003] name failslab, interval 1, probability 0, space 0, times 0 [ 2498.249619][ T1003] CPU: 0 PID: 1003 Comm: syz-executor.5 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2498.259734][ T1003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2498.269734][ T1003] Call Trace: [ 2498.272861][ T1003] [ 2498.275639][ T1003] dump_stack_lvl+0x151/0x1b7 [ 2498.280150][ T1003] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2498.285621][ T1003] dump_stack+0x15/0x17 [ 2498.289621][ T1003] should_fail+0x3c6/0x510 [ 2498.293861][ T1003] __should_failslab+0xa4/0xe0 [ 2498.298462][ T1003] ? anon_vma_clone+0x9a/0x500 [ 2498.303061][ T1003] should_failslab+0x9/0x20 [ 2498.307400][ T1003] slab_pre_alloc_hook+0x37/0xd0 [ 2498.312175][ T1003] ? anon_vma_clone+0x9a/0x500 [ 2498.316774][ T1003] kmem_cache_alloc+0x44/0x200 [ 2498.321372][ T1003] anon_vma_clone+0x9a/0x500 [ 2498.325803][ T1003] anon_vma_fork+0x91/0x4e0 [ 2498.330140][ T1003] ? anon_vma_name+0x43/0x70 [ 2498.334566][ T1003] ? vm_area_dup+0x17a/0x230 [ 2498.338997][ T1003] copy_mm+0xa3a/0x13e0 [ 2498.342991][ T1003] ? copy_signal+0x610/0x610 [ 2498.347413][ T1003] ? __init_rwsem+0xd6/0x1c0 [ 2498.351842][ T1003] ? copy_signal+0x4e3/0x610 [ 2498.356299][ T1003] copy_process+0x12bc/0x3260 [ 2498.360778][ T1003] ? proc_fail_nth_write+0x20b/0x290 [ 2498.366011][ T1003] ? fsnotify_perm+0x6a/0x5d0 [ 2498.370517][ T1003] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2498.375470][ T1003] ? vfs_write+0x9ec/0x1110 [ 2498.379806][ T1003] kernel_clone+0x21e/0x9e0 [ 2498.384142][ T1003] ? file_end_write+0x1c0/0x1c0 [ 2498.388834][ T1003] ? create_io_thread+0x1e0/0x1e0 [ 2498.393685][ T1003] ? mutex_unlock+0xb2/0x260 [ 2498.398112][ T1003] ? __mutex_lock_slowpath+0x10/0x10 [ 2498.403238][ T1003] __x64_sys_clone+0x23f/0x290 [ 2498.407834][ T1003] ? __do_sys_vfork+0x130/0x130 [ 2498.412522][ T1003] ? ksys_write+0x260/0x2c0 [ 2498.416862][ T1003] ? debug_smp_processor_id+0x17/0x20 [ 2498.422070][ T1003] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2498.427974][ T1003] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2498.433443][ T1003] do_syscall_64+0x3d/0xb0 [ 2498.437693][ T1003] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2498.443556][ T1003] RIP: 0033:0x7fdfd1d08ae9 [ 2498.447811][ T1003] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2498.467686][ T1003] RSP: 002b:00007fdfd0a8b078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2498.475931][ T1003] RAX: ffffffffffffffda RBX: 00007fdfd1e27f80 RCX: 00007fdfd1d08ae9 [ 2498.483743][ T1003] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022001200 [ 2498.491552][ T1003] RBP: 00007fdfd0a8b120 R08: 0000000000000000 R09: 0000000000000000 18:25:05 executing program 5: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 62) 18:25:05 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x7, &(0x7f0000000000)=[{0x70a, 0x73, 0x62, 0x80000001}, {0x2, 0xff, 0x2b, 0xb7}, {0x1ff, 0x80, 0x1, 0x8000}, {0x8, 0x1f, 0x2, 0x7}, {0xfffc, 0x7f, 0xf7, 0x9}, {0x2, 0x6, 0x44, 0x4}, {0x7fff, 0x0, 0x8, 0x15}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x440000, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000100)) (async) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000100)) socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) 18:25:05 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xd, 0x1d}, 0x48) 18:25:05 executing program 1: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = getpid() syz_open_procfs$namespace(r0, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x9, 0x4, 0x7, 0xf8, 0x0, 0x5, 0x8048, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x240, 0x5babf7bc, 0xe4e95d1, 0x0, 0x3, 0x4, 0x98, 0x0, 0x3f, 0x0, 0x8000000000000000}, r0, 0x7, 0xffffffffffffffff, 0x8) 18:25:05 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r2}, 0x8) close(r1) (async) close(r1) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00'}, 0x18) (async) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00'}, 0x18) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)=@o_path={&(0x7f0000000080)='./file0\x00', r3}, 0x18) 18:25:05 executing program 0: socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x43, 0x1}, 0x1}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000080)="4aa5e18112fc1f4d302aa41d609c4498fa50cb5a3d2b3f4d5200ff16244bbf85a6cb6d697f34bfa01bf6d34abf2a595e2e0add4b67ed7b13bf28802bfca687f811a569952c42f1d9eb799a2a5fff873045f3d05962f4a11b4bce58c05ae3288e74703d6d40e554c73562e5b4f9445c7003dfda728529fbb67f7e451b9e9c4232e7e25a668da182bd8602b9515cb7828fbf4d537c0964ec5a70f3c2fc0926bf68b0e1eae82608474e1dab6c8b19142ba687a452b09c3c", 0xb6}, {&(0x7f0000000140)="60bc7c6edf85d31db572efb4d474391d8bda9a9f714b886e9d99d5c3e1edde6517f2d84da08ab7da4da26efd78c6846de5cae446da606e4a1eec4a72", 0x3c}, {&(0x7f0000000180)="2b4eb84c5bb3aa216c638d7eaba94fe22caa0115eef4219a0a94fa6505c61038acd804e90baa8e3f70f5d5ecbebc94838c36b474c443f68a9dc1670b74f0c515551c053ff2f33573f38a13f7336b208fda700b47b284ad8742e2", 0x5a}], 0x3, &(0x7f0000000240)="9571a310f207c636a758a0a8c0144825c2935c229a5a8b4e477df7", 0x1b, 0x40088d0}, 0x44040) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup(r1, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r2, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r2, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r3, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r3}, 0x20) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r3}, 0x8) recvmsg$unix(r4, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup(r5, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r6, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r7 = openat$cgroup_ro(r6, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r7, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r7}, 0x20) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r7}, 0x8) recvmsg$unix(r8, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x2, 0x400, 0x8000, 0x102, r4, 0x2, '\x00', 0x0, r8, 0x2, 0x0, 0x5, 0x7}, 0x48) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000480), 0x8) r11 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0)={r10}, 0x8) r12 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@o_path={&(0x7f0000000300)='./file0\x00', 0x0, 0x4018, r9}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000800)={@cgroup=r10, 0x12, 0x0, 0x7ff, &(0x7f0000000600)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000840)={@map=r11, r12, 0x17, 0x3000, r10, @prog_id, r13}, 0x20) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000000000070000008520000002000000d50bf8fffcffffff85100000080000000097ac24c0e2f831f03000fcffffff185100000600000000000000000000001b00000000000e7cee6f0014d08c097371af91e9e3cabd8d78e61f700be8cdd3266ff4c4f699a0e5ae5a665f8f66b10e26d3899fef18fed930cb592707cfffcbf46c32938840b37bf546e45a406e78d2bb0cc34495f6edeba706c65ad735c3198278f8240634a026230b6ed88e", @ANYRESHEX=r14], &(0x7f0000000340)='syzkaller\x00', 0x615, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0xf, 0x7, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0x1, r9, r10], 0x0, 0x10, 0x4}, 0x53) [ 2498.499362][ T1003] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2498.507176][ T1003] R13: 000000000000000b R14: 00007fdfd1e27f80 R15: 00007fff62717c48 [ 2498.514990][ T1003] 18:25:05 executing program 1: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpid() syz_open_procfs$namespace(r0, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x9, 0x4, 0x7, 0xf8, 0x0, 0x5, 0x8048, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x240, 0x5babf7bc, 0xe4e95d1, 0x0, 0x3, 0x4, 0x98, 0x0, 0x3f, 0x0, 0x8000000000000000}, r0, 0x7, 0xffffffffffffffff, 0x8) syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (async) getpid() (async) syz_open_procfs$namespace(r0, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x9, 0x4, 0x7, 0xf8, 0x0, 0x5, 0x8048, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x240, 0x5babf7bc, 0xe4e95d1, 0x0, 0x3, 0x4, 0x98, 0x0, 0x3f, 0x0, 0x8000000000000000}, r0, 0x7, 0xffffffffffffffff, 0x8) (async) 18:25:05 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xd, 0x1e}, 0x48) 18:25:05 executing program 2: socketpair(0x10, 0xa, 0x0, &(0x7f0000000000)) [ 2498.561196][ T1034] FAULT_INJECTION: forcing a failure. [ 2498.561196][ T1034] name failslab, interval 1, probability 0, space 0, times 0 [ 2498.574154][ T1034] CPU: 0 PID: 1034 Comm: syz-executor.5 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2498.584226][ T1034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2498.594122][ T1034] Call Trace: [ 2498.597243][ T1034] [ 2498.600024][ T1034] dump_stack_lvl+0x151/0x1b7 [ 2498.604539][ T1034] ? io_uring_drop_tctx_refs+0x190/0x190 18:25:05 executing program 1: syz_clone(0x22001200, 0x0, 0xfffffffffffffe67, 0x0, 0x0, 0x0) 18:25:05 executing program 1: syz_clone(0x22001200, 0x0, 0xfffffffffffffe67, 0x0, 0x0, 0x0) [ 2498.610175][ T1034] dump_stack+0x15/0x17 [ 2498.614169][ T1034] should_fail+0x3c6/0x510 [ 2498.618426][ T1034] __should_failslab+0xa4/0xe0 [ 2498.623023][ T1034] ? anon_vma_clone+0x9a/0x500 [ 2498.627623][ T1034] should_failslab+0x9/0x20 [ 2498.631967][ T1034] slab_pre_alloc_hook+0x37/0xd0 [ 2498.636730][ T1034] ? anon_vma_clone+0x9a/0x500 [ 2498.641335][ T1034] kmem_cache_alloc+0x44/0x200 [ 2498.645941][ T1034] anon_vma_clone+0x9a/0x500 [ 2498.650361][ T1034] anon_vma_fork+0x91/0x4e0 [ 2498.655131][ T1034] ? anon_vma_name+0x43/0x70 18:25:06 executing program 1: syz_clone(0x22001200, 0x0, 0xfffffffffffffe67, 0x0, 0x0, 0x0) [ 2498.659831][ T1034] ? vm_area_dup+0x17a/0x230 [ 2498.664253][ T1034] copy_mm+0xa3a/0x13e0 [ 2498.668250][ T1034] ? copy_signal+0x610/0x610 [ 2498.672669][ T1034] ? __init_rwsem+0xd6/0x1c0 [ 2498.677104][ T1034] ? copy_signal+0x4e3/0x610 [ 2498.681526][ T1034] copy_process+0x12bc/0x3260 [ 2498.686067][ T1034] ? proc_fail_nth_write+0x20b/0x290 [ 2498.691161][ T1034] ? fsnotify_perm+0x6a/0x5d0 [ 2498.695678][ T1034] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2498.700724][ T1034] ? vfs_write+0x9ec/0x1110 [ 2498.705152][ T1034] kernel_clone+0x21e/0x9e0 [ 2498.709487][ T1034] ? file_end_write+0x1c0/0x1c0 [ 2498.714171][ T1034] ? create_io_thread+0x1e0/0x1e0 [ 2498.719269][ T1034] ? mutex_unlock+0xb2/0x260 [ 2498.723706][ T1034] ? __mutex_lock_slowpath+0x10/0x10 [ 2498.728822][ T1034] __x64_sys_clone+0x23f/0x290 [ 2498.733530][ T1034] ? __do_sys_vfork+0x130/0x130 [ 2498.738198][ T1034] ? ksys_write+0x260/0x2c0 [ 2498.742542][ T1034] ? debug_smp_processor_id+0x17/0x20 [ 2498.747744][ T1034] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2498.753656][ T1034] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2498.759204][ T1034] do_syscall_64+0x3d/0xb0 [ 2498.763447][ T1034] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2498.769176][ T1034] RIP: 0033:0x7fdfd1d08ae9 [ 2498.773427][ T1034] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2498.792869][ T1034] RSP: 002b:00007fdfd0a8b078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2498.801427][ T1034] RAX: ffffffffffffffda RBX: 00007fdfd1e27f80 RCX: 00007fdfd1d08ae9 18:25:06 executing program 5: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 63) 18:25:06 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xd, 0x21}, 0x48) 18:25:06 executing program 2: socketpair(0x10, 0xa, 0x0, &(0x7f0000000000)) 18:25:06 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open$cgroup(&(0x7f00000012c0)={0x2, 0x80, 0x6, 0x7, 0x7, 0x3c, 0x0, 0x7, 0x5082, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x81, 0x4, @perf_config_ext={0x9, 0x8c1}, 0x460a, 0x1ff, 0x724, 0x3, 0x7, 0x8, 0x7f, 0x0, 0x2e, 0x0, 0x8d6}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000013c0)={r0, r1, 0x0, 0xb, &(0x7f0000001340)='\\[%\x92%:$.$&\x00'}, 0x30) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000001280)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000001180)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/174, 0xae}], 0x2, &(0x7f00000011c0)=ANY=[@ANYBLOB="1d0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000010000000000000000100000001000000"], 0x88}, 0x2001) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r5 = openat$cgroup(r4, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup(r4, &(0x7f0000001640)='syz0\x00', 0x200002, 0x0) r7 = perf_event_open$cgroup(&(0x7f00000015c0)={0x3, 0x80, 0xff, 0x80, 0x20, 0x8, 0x0, 0x0, 0x14000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fd, 0x4, @perf_bp={&(0x7f0000001580), 0x9}, 0x3001, 0xfffffffffffffff9, 0x8, 0x4, 0x2, 0x800, 0x5, 0x0, 0x5, 0x0, 0x6}, r6, 0x0, 0xffffffffffffffff, 0x11) bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=@base={0x0, 0xdfe, 0xca2, 0x3, 0x1000, r7, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x5}, 0x48) r8 = openat$cgroup_ro(r5, &(0x7f0000001400)='freezer.self_freezing\x00', 0x0, 0x0) openat$cgroup(r8, &(0x7f0000001440)='syz0\x00', 0x200002, 0x0) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f0000001480)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40042409, 0x1) 18:25:06 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) (async) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r2}, 0x8) (async) close(r1) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00'}, 0x18) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)=@o_path={&(0x7f0000000080)='./file0\x00', r3}, 0x18) 18:25:06 executing program 0: socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x43, 0x1}, 0x1}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000080)="4aa5e18112fc1f4d302aa41d609c4498fa50cb5a3d2b3f4d5200ff16244bbf85a6cb6d697f34bfa01bf6d34abf2a595e2e0add4b67ed7b13bf28802bfca687f811a569952c42f1d9eb799a2a5fff873045f3d05962f4a11b4bce58c05ae3288e74703d6d40e554c73562e5b4f9445c7003dfda728529fbb67f7e451b9e9c4232e7e25a668da182bd8602b9515cb7828fbf4d537c0964ec5a70f3c2fc0926bf68b0e1eae82608474e1dab6c8b19142ba687a452b09c3c", 0xb6}, {&(0x7f0000000140)="60bc7c6edf85d31db572efb4d474391d8bda9a9f714b886e9d99d5c3e1edde6517f2d84da08ab7da4da26efd78c6846de5cae446da606e4a1eec4a72", 0x3c}, {&(0x7f0000000180)="2b4eb84c5bb3aa216c638d7eaba94fe22caa0115eef4219a0a94fa6505c61038acd804e90baa8e3f70f5d5ecbebc94838c36b474c443f68a9dc1670b74f0c515551c053ff2f33573f38a13f7336b208fda700b47b284ad8742e2", 0x5a}], 0x3, &(0x7f0000000240)="9571a310f207c636a758a0a8c0144825c2935c229a5a8b4e477df7", 0x1b, 0x40088d0}, 0x44040) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup(r1, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r2, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r2, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r3, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r3}, 0x20) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r3}, 0x8) recvmsg$unix(r4, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup(r5, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r6, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r7 = openat$cgroup_ro(r6, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r7, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r7}, 0x20) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r7}, 0x8) recvmsg$unix(r8, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x2, 0x400, 0x8000, 0x102, r4, 0x2, '\x00', 0x0, r8, 0x2, 0x0, 0x5, 0x7}, 0x48) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000480), 0x8) r11 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0)={r10}, 0x8) r12 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@o_path={&(0x7f0000000300)='./file0\x00', 0x0, 0x4018, r9}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000800)={@cgroup=r10, 0x12, 0x0, 0x7ff, &(0x7f0000000600)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000840)={@map=r11, r12, 0x17, 0x3000, r10, @prog_id, r13}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000000000070000008520000002000000d50bf8fffcffffff85100000080000000097ac24c0e2f831f03000fcffffff185100000600000000000000000000001b00000000000e7cee6f0014d08c097371af91e9e3cabd8d78e61f700be8cdd3266ff4c4f699a0e5ae5a665f8f66b10e26d3899fef18fed930cb592707cfffcbf46c32938840b37bf546e45a406e78d2bb0cc34495f6edeba706c65ad735c3198278f8240634a026230b6ed88e", @ANYRESHEX], &(0x7f0000000340)='syzkaller\x00', 0x615, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0xf, 0x7, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0x1, r9, r10], 0x0, 0x10, 0x4}, 0x53) 18:25:06 executing program 2: socketpair(0x10, 0xa, 0x0, &(0x7f0000000000)) socketpair(0x10, 0xa, 0x0, &(0x7f0000000000)) (async) 18:25:06 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xd, 0x22}, 0x48) [ 2498.809247][ T1034] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022001200 [ 2498.817046][ T1034] RBP: 00007fdfd0a8b120 R08: 0000000000000000 R09: 0000000000000000 [ 2498.824859][ T1034] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2498.832793][ T1034] R13: 000000000000000b R14: 00007fdfd1e27f80 R15: 00007fff62717c48 [ 2498.840866][ T1034] 18:25:06 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000012c0)={0x2, 0x80, 0x6, 0x7, 0x7, 0x3c, 0x0, 0x7, 0x5082, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x81, 0x4, @perf_config_ext={0x9, 0x8c1}, 0x460a, 0x1ff, 0x724, 0x3, 0x7, 0x8, 0x7f, 0x0, 0x2e, 0x0, 0x8d6}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x4) (async) r1 = perf_event_open$cgroup(&(0x7f00000012c0)={0x2, 0x80, 0x6, 0x7, 0x7, 0x3c, 0x0, 0x7, 0x5082, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x81, 0x4, @perf_config_ext={0x9, 0x8c1}, 0x460a, 0x1ff, 0x724, 0x3, 0x7, 0x8, 0x7f, 0x0, 0x2e, 0x0, 0x8d6}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000013c0)={r0, r1, 0x0, 0xb, &(0x7f0000001340)='\\[%\x92%:$.$&\x00'}, 0x30) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000001280)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000001180)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/174, 0xae}], 0x2, &(0x7f00000011c0)=ANY=[@ANYBLOB="1d0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000010000000000000000100000001000000"], 0x88}, 0x2001) (async) recvmsg$unix(r2, &(0x7f0000001280)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000001180)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/174, 0xae}], 0x2, &(0x7f00000011c0)=ANY=[@ANYBLOB="1d0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000010000000000000000100000001000000"], 0x88}, 0x2001) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r5 = openat$cgroup(r4, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup(r4, &(0x7f0000001640)='syz0\x00', 0x200002, 0x0) r7 = perf_event_open$cgroup(&(0x7f00000015c0)={0x3, 0x80, 0xff, 0x80, 0x20, 0x8, 0x0, 0x0, 0x14000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fd, 0x4, @perf_bp={&(0x7f0000001580), 0x9}, 0x3001, 0xfffffffffffffff9, 0x8, 0x4, 0x2, 0x800, 0x5, 0x0, 0x5, 0x0, 0x6}, r6, 0x0, 0xffffffffffffffff, 0x11) bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=@base={0x0, 0xdfe, 0xca2, 0x3, 0x1000, r7, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x5}, 0x48) r8 = openat$cgroup_ro(r5, &(0x7f0000001400)='freezer.self_freezing\x00', 0x0, 0x0) openat$cgroup(r8, &(0x7f0000001440)='syz0\x00', 0x200002, 0x0) (async) openat$cgroup(r8, &(0x7f0000001440)='syz0\x00', 0x200002, 0x0) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f0000001480)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40042409, 0x1) (async) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40042409, 0x1) 18:25:06 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000080)=""/36, 0x24}, {&(0x7f0000000100)=""/6, 0x6}], 0x2, &(0x7f0000000180)}, 0x60) close(r1) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) close(r1) 18:25:06 executing program 0: socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x43, 0x1}, 0x1}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000080)="4aa5e18112fc1f4d302aa41d609c4498fa50cb5a3d2b3f4d5200ff16244bbf85a6cb6d697f34bfa01bf6d34abf2a595e2e0add4b67ed7b13bf28802bfca687f811a569952c42f1d9eb799a2a5fff873045f3d05962f4a11b4bce58c05ae3288e74703d6d40e554c73562e5b4f9445c7003dfda728529fbb67f7e451b9e9c4232e7e25a668da182bd8602b9515cb7828fbf4d537c0964ec5a70f3c2fc0926bf68b0e1eae82608474e1dab6c8b19142ba687a452b09c3c", 0xb6}, {&(0x7f0000000140)="60bc7c6edf85d31db572efb4d474391d8bda9a9f714b886e9d99d5c3e1edde6517f2d84da08ab7da4da26efd78c6846de5cae446da606e4a1eec4a72", 0x3c}, {&(0x7f0000000180)="2b4eb84c5bb3aa216c638d7eaba94fe22caa0115eef4219a0a94fa6505c61038acd804e90baa8e3f70f5d5ecbebc94838c36b474c443f68a9dc1670b74f0c515551c053ff2f33573f38a13f7336b208fda700b47b284ad8742e2", 0x5a}], 0x3, &(0x7f0000000240)="9571a310f207c636a758a0a8c0144825c2935c229a5a8b4e477df7", 0x1b, 0x40088d0}, 0x44040) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup(r1, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r2, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r2, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r3, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r3}, 0x20) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r3}, 0x8) recvmsg$unix(r4, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup(r5, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r6, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r7 = openat$cgroup_ro(r6, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r7, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r7}, 0x20) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r7}, 0x8) recvmsg$unix(r8, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x2, 0x400, 0x8000, 0x102, r4, 0x2, '\x00', 0x0, r8, 0x2, 0x0, 0x5, 0x7}, 0x48) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000480), 0x8) bpf$ITER_CREATE(0x21, &(0x7f00000002c0)={r10}, 0x8) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@o_path={&(0x7f0000000300)='./file0\x00', 0x0, 0x4018, r9}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000800)={@cgroup=r10, 0x12, 0x0, 0x7ff, &(0x7f0000000600)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000000000070000008520000002000000d50bf8fffcffffff85100000080000000097ac24c0e2f831f03000fcffffff185100000600000000000000000000001b00000000000e7cee6f0014d08c097371af91e9e3cabd8d78e61f700be8cdd3266ff4c4f699a0e5ae5a665f8f66b10e26d3899fef18fed930cb592707cfffcbf46c32938840b37bf546e45a406e78d2bb0cc34495f6edeba706c65ad735c3198278f8240634a026230b6ed88e", @ANYRESHEX], &(0x7f0000000340)='syzkaller\x00', 0x615, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0xf, 0x7, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0x1, r9, r10], 0x0, 0x10, 0x4}, 0x53) 18:25:06 executing program 2: socketpair(0x10, 0x80000, 0x8, &(0x7f0000000040)) [ 2498.898996][ T1076] FAULT_INJECTION: forcing a failure. [ 2498.898996][ T1076] name failslab, interval 1, probability 0, space 0, times 0 [ 2498.935759][ T1076] CPU: 0 PID: 1076 Comm: syz-executor.5 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2498.946116][ T1076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2498.956093][ T1076] Call Trace: [ 2498.959298][ T1076] [ 2498.962079][ T1076] dump_stack_lvl+0x151/0x1b7 [ 2498.966591][ T1076] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2498.972060][ T1076] dump_stack+0x15/0x17 [ 2498.976045][ T1076] should_fail+0x3c6/0x510 [ 2498.980308][ T1076] __should_failslab+0xa4/0xe0 [ 2498.984907][ T1076] ? anon_vma_clone+0x9a/0x500 [ 2498.989601][ T1076] should_failslab+0x9/0x20 [ 2498.994128][ T1076] slab_pre_alloc_hook+0x37/0xd0 [ 2498.998912][ T1076] ? anon_vma_clone+0x9a/0x500 [ 2499.003510][ T1076] kmem_cache_alloc+0x44/0x200 [ 2499.008189][ T1076] anon_vma_clone+0x9a/0x500 [ 2499.012617][ T1076] anon_vma_fork+0x91/0x4e0 [ 2499.016957][ T1076] ? anon_vma_name+0x43/0x70 [ 2499.021380][ T1076] ? vm_area_dup+0x17a/0x230 [ 2499.025807][ T1076] copy_mm+0xa3a/0x13e0 [ 2499.029804][ T1076] ? copy_signal+0x610/0x610 [ 2499.034227][ T1076] ? __init_rwsem+0xd6/0x1c0 [ 2499.038652][ T1076] ? copy_signal+0x4e3/0x610 [ 2499.043118][ T1076] copy_process+0x12bc/0x3260 [ 2499.047591][ T1076] ? proc_fail_nth_write+0x20b/0x290 [ 2499.052714][ T1076] ? fsnotify_perm+0x6a/0x5d0 [ 2499.057230][ T1076] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2499.062176][ T1076] ? vfs_write+0x9ec/0x1110 [ 2499.066611][ T1076] kernel_clone+0x21e/0x9e0 [ 2499.070952][ T1076] ? file_end_write+0x1c0/0x1c0 [ 2499.076189][ T1076] ? create_io_thread+0x1e0/0x1e0 [ 2499.081010][ T1076] ? mutex_unlock+0xb2/0x260 [ 2499.085435][ T1076] ? __mutex_lock_slowpath+0x10/0x10 [ 2499.090561][ T1076] __x64_sys_clone+0x23f/0x290 [ 2499.095157][ T1076] ? __do_sys_vfork+0x130/0x130 [ 2499.099839][ T1076] ? ksys_write+0x260/0x2c0 [ 2499.104182][ T1076] ? debug_smp_processor_id+0x17/0x20 [ 2499.109479][ T1076] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2499.115481][ T1076] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2499.121601][ T1076] do_syscall_64+0x3d/0xb0 [ 2499.125837][ T1076] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2499.131564][ T1076] RIP: 0033:0x7fdfd1d08ae9 [ 2499.135821][ T1076] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2499.155263][ T1076] RSP: 002b:00007fdfd0a8b078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2499.163542][ T1076] RAX: ffffffffffffffda RBX: 00007fdfd1e27f80 RCX: 00007fdfd1d08ae9 [ 2499.171318][ T1076] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022001200 [ 2499.179389][ T1076] RBP: 00007fdfd0a8b120 R08: 0000000000000000 R09: 0000000000000000 [ 2499.187202][ T1076] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 18:25:06 executing program 5: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 64) 18:25:06 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xd, 0x23}, 0x48) 18:25:06 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = perf_event_open$cgroup(&(0x7f00000012c0)={0x2, 0x80, 0x6, 0x7, 0x7, 0x3c, 0x0, 0x7, 0x5082, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x81, 0x4, @perf_config_ext={0x9, 0x8c1}, 0x460a, 0x1ff, 0x724, 0x3, 0x7, 0x8, 0x7f, 0x0, 0x2e, 0x0, 0x8d6}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000013c0)={r0, r1, 0x0, 0xb, &(0x7f0000001340)='\\[%\x92%:$.$&\x00'}, 0x30) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) recvmsg$unix(r2, &(0x7f0000001280)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000001180)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/174, 0xae}], 0x2, &(0x7f00000011c0)=ANY=[@ANYBLOB="1d0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000010000000000000000100000001000000"], 0x88}, 0x2001) (async) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r5 = openat$cgroup(r4, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) (async) r6 = openat$cgroup(r4, &(0x7f0000001640)='syz0\x00', 0x200002, 0x0) r7 = perf_event_open$cgroup(&(0x7f00000015c0)={0x3, 0x80, 0xff, 0x80, 0x20, 0x8, 0x0, 0x0, 0x14000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fd, 0x4, @perf_bp={&(0x7f0000001580), 0x9}, 0x3001, 0xfffffffffffffff9, 0x8, 0x4, 0x2, 0x800, 0x5, 0x0, 0x5, 0x0, 0x6}, r6, 0x0, 0xffffffffffffffff, 0x11) bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=@base={0x0, 0xdfe, 0xca2, 0x3, 0x1000, r7, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x5}, 0x48) r8 = openat$cgroup_ro(r5, &(0x7f0000001400)='freezer.self_freezing\x00', 0x0, 0x0) openat$cgroup(r8, &(0x7f0000001440)='syz0\x00', 0x200002, 0x0) (async) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f0000001480)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40042409, 0x1) 18:25:06 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000080)=""/36, 0x24}, {&(0x7f0000000100)=""/6, 0x6}], 0x2, &(0x7f0000000180)}, 0x60) close(r1) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) close(r1) 18:25:06 executing program 2: socketpair(0x10, 0x80000, 0x8, &(0x7f0000000040)) 18:25:06 executing program 0: socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x43, 0x1}, 0x1}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000080)="4aa5e18112fc1f4d302aa41d609c4498fa50cb5a3d2b3f4d5200ff16244bbf85a6cb6d697f34bfa01bf6d34abf2a595e2e0add4b67ed7b13bf28802bfca687f811a569952c42f1d9eb799a2a5fff873045f3d05962f4a11b4bce58c05ae3288e74703d6d40e554c73562e5b4f9445c7003dfda728529fbb67f7e451b9e9c4232e7e25a668da182bd8602b9515cb7828fbf4d537c0964ec5a70f3c2fc0926bf68b0e1eae82608474e1dab6c8b19142ba687a452b09c3c", 0xb6}, {&(0x7f0000000140)="60bc7c6edf85d31db572efb4d474391d8bda9a9f714b886e9d99d5c3e1edde6517f2d84da08ab7da4da26efd78c6846de5cae446da606e4a1eec4a72", 0x3c}, {&(0x7f0000000180)="2b4eb84c5bb3aa216c638d7eaba94fe22caa0115eef4219a0a94fa6505c61038acd804e90baa8e3f70f5d5ecbebc94838c36b474c443f68a9dc1670b74f0c515551c053ff2f33573f38a13f7336b208fda700b47b284ad8742e2", 0x5a}], 0x3, &(0x7f0000000240)="9571a310f207c636a758a0a8c0144825c2935c229a5a8b4e477df7", 0x1b, 0x40088d0}, 0x44040) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup(r1, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r2, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r2, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r3, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r3}, 0x20) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r3}, 0x8) recvmsg$unix(r4, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup(r5, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r6, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r7 = openat$cgroup_ro(r6, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r7, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r7}, 0x20) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r7}, 0x8) recvmsg$unix(r8, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x2, 0x400, 0x8000, 0x102, r4, 0x2, '\x00', 0x0, r8, 0x2, 0x0, 0x5, 0x7}, 0x48) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000480), 0x8) bpf$ITER_CREATE(0x21, &(0x7f00000002c0)={r10}, 0x8) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@o_path={&(0x7f0000000300)='./file0\x00', 0x0, 0x4018, r9}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000000000070000008520000002000000d50bf8fffcffffff85100000080000000097ac24c0e2f831f03000fcffffff185100000600000000000000000000001b00000000000e7cee6f0014d08c097371af91e9e3cabd8d78e61f700be8cdd3266ff4c4f699a0e5ae5a665f8f66b10e26d3899fef18fed930cb592707cfffcbf46c32938840b37bf546e45a406e78d2bb0cc34495f6edeba706c65ad735c3198278f8240634a026230b6ed88e", @ANYRESHEX], &(0x7f0000000340)='syzkaller\x00', 0x615, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0xf, 0x7, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0x1, r9, r10], 0x0, 0x10, 0x4}, 0x53) [ 2499.195538][ T1076] R13: 000000000000000b R14: 00007fdfd1e27f80 R15: 00007fff62717c48 [ 2499.203350][ T1076] 18:25:06 executing program 2: socketpair(0x10, 0x80000, 0x8, &(0x7f0000000040)) 18:25:06 executing program 0: socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x43, 0x1}, 0x1}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000080)="4aa5e18112fc1f4d302aa41d609c4498fa50cb5a3d2b3f4d5200ff16244bbf85a6cb6d697f34bfa01bf6d34abf2a595e2e0add4b67ed7b13bf28802bfca687f811a569952c42f1d9eb799a2a5fff873045f3d05962f4a11b4bce58c05ae3288e74703d6d40e554c73562e5b4f9445c7003dfda728529fbb67f7e451b9e9c4232e7e25a668da182bd8602b9515cb7828fbf4d537c0964ec5a70f3c2fc0926bf68b0e1eae82608474e1dab6c8b19142ba687a452b09c3c", 0xb6}, {&(0x7f0000000140)="60bc7c6edf85d31db572efb4d474391d8bda9a9f714b886e9d99d5c3e1edde6517f2d84da08ab7da4da26efd78c6846de5cae446da606e4a1eec4a72", 0x3c}, {&(0x7f0000000180)="2b4eb84c5bb3aa216c638d7eaba94fe22caa0115eef4219a0a94fa6505c61038acd804e90baa8e3f70f5d5ecbebc94838c36b474c443f68a9dc1670b74f0c515551c053ff2f33573f38a13f7336b208fda700b47b284ad8742e2", 0x5a}], 0x3, &(0x7f0000000240)="9571a310f207c636a758a0a8c0144825c2935c229a5a8b4e477df7", 0x1b, 0x40088d0}, 0x44040) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup(r1, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r2, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r2, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r3, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r3}, 0x20) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r3}, 0x8) recvmsg$unix(r4, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup(r5, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r6, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r7 = openat$cgroup_ro(r6, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r7, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r7}, 0x20) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r7}, 0x8) recvmsg$unix(r8, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x2, 0x400, 0x8000, 0x102, r4, 0x2, '\x00', 0x0, r8, 0x2, 0x0, 0x5, 0x7}, 0x48) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000480), 0x8) bpf$ITER_CREATE(0x21, &(0x7f00000002c0)={r10}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000000000070000008520000002000000d50bf8fffcffffff85100000080000000097ac24c0e2f831f03000fcffffff185100000600000000000000000000001b00000000000e7cee6f0014d08c097371af91e9e3cabd8d78e61f700be8cdd3266ff4c4f699a0e5ae5a665f8f66b10e26d3899fef18fed930cb592707cfffcbf46c32938840b37bf546e45a406e78d2bb0cc34495f6edeba706c65ad735c3198278f8240634a026230b6ed88e", @ANYRESHEX], &(0x7f0000000340)='syzkaller\x00', 0x615, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0xf, 0x7, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0x1, r9, r10], 0x0, 0x10, 0x4}, 0x53) 18:25:06 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000080)=""/36, 0x24}, {&(0x7f0000000100)=""/6, 0x6}], 0x2, &(0x7f0000000180)}, 0x60) close(r1) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000080)=""/36, 0x24}, {&(0x7f0000000100)=""/6, 0x6}], 0x2, &(0x7f0000000180)}, 0x60) (async) close(r1) (async) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) (async) close(r1) (async) 18:25:06 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xd, 0x300}, 0x48) 18:25:06 executing program 2: unlink(&(0x7f0000000180)='./file0\x00') socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) 18:25:06 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xd, 0x500}, 0x48) [ 2499.307810][ T1111] FAULT_INJECTION: forcing a failure. [ 2499.307810][ T1111] name failslab, interval 1, probability 0, space 0, times 0 [ 2499.331911][ T1111] CPU: 1 PID: 1111 Comm: syz-executor.5 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2499.342006][ T1111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2499.351907][ T1111] Call Trace: [ 2499.355024][ T1111] [ 2499.357802][ T1111] dump_stack_lvl+0x151/0x1b7 [ 2499.362314][ T1111] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2499.367807][ T1111] dump_stack+0x15/0x17 [ 2499.371769][ T1111] should_fail+0x3c6/0x510 [ 2499.376189][ T1111] __should_failslab+0xa4/0xe0 [ 2499.380780][ T1111] ? anon_vma_fork+0xf7/0x4e0 [ 2499.385292][ T1111] should_failslab+0x9/0x20 [ 2499.389633][ T1111] slab_pre_alloc_hook+0x37/0xd0 [ 2499.394406][ T1111] ? anon_vma_fork+0xf7/0x4e0 [ 2499.398921][ T1111] kmem_cache_alloc+0x44/0x200 [ 2499.403521][ T1111] anon_vma_fork+0xf7/0x4e0 [ 2499.407864][ T1111] ? anon_vma_name+0x43/0x70 [ 2499.412286][ T1111] ? vm_area_dup+0x17a/0x230 [ 2499.416718][ T1111] copy_mm+0xa3a/0x13e0 [ 2499.420774][ T1111] ? copy_signal+0x610/0x610 [ 2499.425136][ T1111] ? __init_rwsem+0xd6/0x1c0 [ 2499.429561][ T1111] ? copy_signal+0x4e3/0x610 [ 2499.434073][ T1111] copy_process+0x12bc/0x3260 [ 2499.438586][ T1111] ? proc_fail_nth_write+0x20b/0x290 [ 2499.443707][ T1111] ? fsnotify_perm+0x6a/0x5d0 [ 2499.448359][ T1111] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2499.453565][ T1111] ? vfs_write+0x9ec/0x1110 [ 2499.457912][ T1111] kernel_clone+0x21e/0x9e0 [ 2499.462236][ T1111] ? file_end_write+0x1c0/0x1c0 [ 2499.466926][ T1111] ? create_io_thread+0x1e0/0x1e0 [ 2499.472069][ T1111] ? mutex_unlock+0xb2/0x260 [ 2499.476755][ T1111] ? __mutex_lock_slowpath+0x10/0x10 [ 2499.481975][ T1111] __x64_sys_clone+0x23f/0x290 [ 2499.486565][ T1111] ? __do_sys_vfork+0x130/0x130 [ 2499.491340][ T1111] ? ksys_write+0x260/0x2c0 [ 2499.495684][ T1111] ? debug_smp_processor_id+0x17/0x20 [ 2499.500886][ T1111] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2499.506787][ T1111] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2499.512260][ T1111] do_syscall_64+0x3d/0xb0 [ 2499.516547][ T1111] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2499.522564][ T1111] RIP: 0033:0x7fdfd1d08ae9 [ 2499.526824][ T1111] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2499.546258][ T1111] RSP: 002b:00007fdfd0a8b078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 18:25:06 executing program 5: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 65) 18:25:06 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) close(r1) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup(r2, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r3, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r4 = openat$cgroup_ro(r3, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r4, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r4}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r4}, 0x8) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup(r5, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r6, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r7 = openat$cgroup_ro(r6, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r7, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r7}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r7}, 0x8) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r4, r7}, 0xc) 18:25:06 executing program 0: socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x43, 0x1}, 0x1}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000080)="4aa5e18112fc1f4d302aa41d609c4498fa50cb5a3d2b3f4d5200ff16244bbf85a6cb6d697f34bfa01bf6d34abf2a595e2e0add4b67ed7b13bf28802bfca687f811a569952c42f1d9eb799a2a5fff873045f3d05962f4a11b4bce58c05ae3288e74703d6d40e554c73562e5b4f9445c7003dfda728529fbb67f7e451b9e9c4232e7e25a668da182bd8602b9515cb7828fbf4d537c0964ec5a70f3c2fc0926bf68b0e1eae82608474e1dab6c8b19142ba687a452b09c3c", 0xb6}, {&(0x7f0000000140)="60bc7c6edf85d31db572efb4d474391d8bda9a9f714b886e9d99d5c3e1edde6517f2d84da08ab7da4da26efd78c6846de5cae446da606e4a1eec4a72", 0x3c}, {&(0x7f0000000180)="2b4eb84c5bb3aa216c638d7eaba94fe22caa0115eef4219a0a94fa6505c61038acd804e90baa8e3f70f5d5ecbebc94838c36b474c443f68a9dc1670b74f0c515551c053ff2f33573f38a13f7336b208fda700b47b284ad8742e2", 0x5a}], 0x3, &(0x7f0000000240)="9571a310f207c636a758a0a8c0144825c2935c229a5a8b4e477df7", 0x1b, 0x40088d0}, 0x44040) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup(r1, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r2, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r2, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r3, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r3}, 0x20) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r3}, 0x8) recvmsg$unix(r4, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup(r5, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r6, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r7 = openat$cgroup_ro(r6, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r7, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r7}, 0x20) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r7}, 0x8) recvmsg$unix(r8, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x2, 0x400, 0x8000, 0x102, r4, 0x2, '\x00', 0x0, r8, 0x2, 0x0, 0x5, 0x7}, 0x48) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000480), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000000000070000008520000002000000d50bf8fffcffffff85100000080000000097ac24c0e2f831f03000fcffffff185100000600000000000000000000001b00000000000e7cee6f0014d08c097371af91e9e3cabd8d78e61f700be8cdd3266ff4c4f699a0e5ae5a665f8f66b10e26d3899fef18fed930cb592707cfffcbf46c32938840b37bf546e45a406e78d2bb0cc34495f6edeba706c65ad735c3198278f8240634a026230b6ed88e", @ANYRESHEX], &(0x7f0000000340)='syzkaller\x00', 0x615, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0xf, 0x7, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0x1, r9, r10], 0x0, 0x10, 0x4}, 0x53) 18:25:06 executing program 2: unlink(&(0x7f0000000180)='./file0\x00') socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) 18:25:06 executing program 1: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9d, 0x9d, 0x7, [@datasec={0x9, 0x1, 0x0, 0xf, 0x1, [{0x4, 0x1}], "fe"}, @restrict={0x8, 0x0, 0x0, 0xb, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3, 0x9a}}, @struct={0x9, 0x2, 0x0, 0x4, 0x1, 0x5, [{0xe, 0x2, 0x1}, {0x7, 0x2, 0x5}]}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x1, 0x4}, {0x6, 0x2}, {0x3, 0x4}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3, 0x10000}}]}, {0x0, [0x0, 0x0, 0x61, 0x30, 0x61]}}, &(0x7f0000000200)=""/254, 0xbf, 0xfe, 0x1, 0x7f}, 0x20) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup(r1, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r2, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r2, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r3, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r3}, 0x20) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r3}, 0x8) recvmsg$unix(r4, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup(r5, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r6, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r7 = openat$cgroup_ro(r6, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r7, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r7}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r7}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@jmp={0x5, 0x0, 0x8, 0x9, 0x4, 0xc, 0x4}, @call={0x85, 0x0, 0x0, 0x40}, @ldst={0x0, 0x1, 0x2, 0x5, 0x8, 0xffffffffffffffc0, 0x7ffffffffffffff7}]}, &(0x7f00000000c0)='GPL\x00', 0x200, 0x13, &(0x7f0000000100)=""/19, 0x0, 0x60, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000340)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x4, 0xc, 0x5, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[r4, 0xffffffffffffffff, r7], 0x0, 0x10, 0x81}, 0x90) r8 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)={[{0x2d, 'net_prio'}]}, 0xa) syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) 18:25:06 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xd, 0x600}, 0x48) 18:25:06 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xd, 0x700}, 0x48) 18:25:06 executing program 2: unlink(&(0x7f0000000180)='./file0\x00') (async) unlink(&(0x7f0000000180)='./file0\x00') socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) [ 2499.554501][ T1111] RAX: ffffffffffffffda RBX: 00007fdfd1e27f80 RCX: 00007fdfd1d08ae9 [ 2499.562337][ T1111] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022001200 [ 2499.570235][ T1111] RBP: 00007fdfd0a8b120 R08: 0000000000000000 R09: 0000000000000000 [ 2499.578041][ T1111] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2499.585854][ T1111] R13: 000000000000000b R14: 00007fdfd1e27f80 R15: 00007fff62717c48 [ 2499.593670][ T1111] 18:25:06 executing program 0: socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x43, 0x1}, 0x1}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000080)="4aa5e18112fc1f4d302aa41d609c4498fa50cb5a3d2b3f4d5200ff16244bbf85a6cb6d697f34bfa01bf6d34abf2a595e2e0add4b67ed7b13bf28802bfca687f811a569952c42f1d9eb799a2a5fff873045f3d05962f4a11b4bce58c05ae3288e74703d6d40e554c73562e5b4f9445c7003dfda728529fbb67f7e451b9e9c4232e7e25a668da182bd8602b9515cb7828fbf4d537c0964ec5a70f3c2fc0926bf68b0e1eae82608474e1dab6c8b19142ba687a452b09c3c", 0xb6}, {&(0x7f0000000140)="60bc7c6edf85d31db572efb4d474391d8bda9a9f714b886e9d99d5c3e1edde6517f2d84da08ab7da4da26efd78c6846de5cae446da606e4a1eec4a72", 0x3c}, {&(0x7f0000000180)="2b4eb84c5bb3aa216c638d7eaba94fe22caa0115eef4219a0a94fa6505c61038acd804e90baa8e3f70f5d5ecbebc94838c36b474c443f68a9dc1670b74f0c515551c053ff2f33573f38a13f7336b208fda700b47b284ad8742e2", 0x5a}], 0x3, &(0x7f0000000240)="9571a310f207c636a758a0a8c0144825c2935c229a5a8b4e477df7", 0x1b, 0x40088d0}, 0x44040) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup(r1, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r2, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r2, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r3, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r3}, 0x20) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r3}, 0x8) recvmsg$unix(r4, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup(r5, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r6, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r7 = openat$cgroup_ro(r6, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r7, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r7}, 0x20) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r7}, 0x8) recvmsg$unix(r8, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x2, 0x400, 0x8000, 0x102, r4, 0x2, '\x00', 0x0, r8, 0x2, 0x0, 0x5, 0x7}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000000000070000008520000002000000d50bf8fffcffffff85100000080000000097ac24c0e2f831f03000fcffffff185100000600000000000000000000001b00000000000e7cee6f0014d08c097371af91e9e3cabd8d78e61f700be8cdd3266ff4c4f699a0e5ae5a665f8f66b10e26d3899fef18fed930cb592707cfffcbf46c32938840b37bf546e45a406e78d2bb0cc34495f6edeba706c65ad735c3198278f8240634a026230b6ed88e", @ANYRESHEX], &(0x7f0000000340)='syzkaller\x00', 0x615, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0xf, 0x7, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0x1, r9, 0xffffffffffffffff], 0x0, 0x10, 0x4}, 0x53) 18:25:06 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xd, 0x900}, 0x48) 18:25:06 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) ioctl$TUNGETVNETBE(r0, 0x800454df, &(0x7f0000000000)=0x1) socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) 18:25:06 executing program 0: socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x43, 0x1}, 0x1}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000080)="4aa5e18112fc1f4d302aa41d609c4498fa50cb5a3d2b3f4d5200ff16244bbf85a6cb6d697f34bfa01bf6d34abf2a595e2e0add4b67ed7b13bf28802bfca687f811a569952c42f1d9eb799a2a5fff873045f3d05962f4a11b4bce58c05ae3288e74703d6d40e554c73562e5b4f9445c7003dfda728529fbb67f7e451b9e9c4232e7e25a668da182bd8602b9515cb7828fbf4d537c0964ec5a70f3c2fc0926bf68b0e1eae82608474e1dab6c8b19142ba687a452b09c3c", 0xb6}, {&(0x7f0000000140)="60bc7c6edf85d31db572efb4d474391d8bda9a9f714b886e9d99d5c3e1edde6517f2d84da08ab7da4da26efd78c6846de5cae446da606e4a1eec4a72", 0x3c}, {&(0x7f0000000180)="2b4eb84c5bb3aa216c638d7eaba94fe22caa0115eef4219a0a94fa6505c61038acd804e90baa8e3f70f5d5ecbebc94838c36b474c443f68a9dc1670b74f0c515551c053ff2f33573f38a13f7336b208fda700b47b284ad8742e2", 0x5a}], 0x3, &(0x7f0000000240)="9571a310f207c636a758a0a8c0144825c2935c229a5a8b4e477df7", 0x1b, 0x40088d0}, 0x44040) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup(r1, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r2, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r2, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r3, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r3}, 0x20) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r3}, 0x8) recvmsg$unix(r4, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup(r5, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r6, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r7 = openat$cgroup_ro(r6, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r7, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r7}, 0x20) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r7}, 0x8) recvmsg$unix(r8, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000000000070000008520000002000000d50bf8fffcffffff85100000080000000097ac24c0e2f831f03000fcffffff185100000600000000000000000000001b00000000000e7cee6f0014d08c097371af91e9e3cabd8d78e61f700be8cdd3266ff4c4f699a0e5ae5a665f8f66b10e26d3899fef18fed930cb592707cfffcbf46c32938840b37bf546e45a406e78d2bb0cc34495f6edeba706c65ad735c3198278f8240634a026230b6ed88e", @ANYRESHEX], &(0x7f0000000340)='syzkaller\x00', 0x615, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0xf, 0x7, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x4}, 0x53) [ 2499.636659][ T1132] FAULT_INJECTION: forcing a failure. [ 2499.636659][ T1132] name failslab, interval 1, probability 0, space 0, times 0 [ 2499.686086][ T1132] CPU: 1 PID: 1132 Comm: syz-executor.5 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2499.696184][ T1132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2499.706073][ T1132] Call Trace: [ 2499.709195][ T1132] [ 2499.711970][ T1132] dump_stack_lvl+0x151/0x1b7 [ 2499.716486][ T1132] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2499.721952][ T1132] dump_stack+0x15/0x17 [ 2499.726236][ T1132] should_fail+0x3c6/0x510 [ 2499.730506][ T1132] __should_failslab+0xa4/0xe0 [ 2499.735086][ T1132] ? vm_area_dup+0x26/0x230 [ 2499.739421][ T1132] should_failslab+0x9/0x20 [ 2499.743909][ T1132] slab_pre_alloc_hook+0x37/0xd0 [ 2499.748670][ T1132] ? vm_area_dup+0x26/0x230 [ 2499.753011][ T1132] kmem_cache_alloc+0x44/0x200 [ 2499.757611][ T1132] vm_area_dup+0x26/0x230 [ 2499.761779][ T1132] copy_mm+0x9a1/0x13e0 [ 2499.765769][ T1132] ? copy_signal+0x610/0x610 [ 2499.770195][ T1132] ? __init_rwsem+0xd6/0x1c0 [ 2499.774620][ T1132] ? copy_signal+0x4e3/0x610 [ 2499.779049][ T1132] copy_process+0x12bc/0x3260 [ 2499.783573][ T1132] ? proc_fail_nth_write+0x20b/0x290 [ 2499.788679][ T1132] ? fsnotify_perm+0x6a/0x5d0 [ 2499.793193][ T1132] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2499.798232][ T1132] ? vfs_write+0x9ec/0x1110 [ 2499.802569][ T1132] kernel_clone+0x21e/0x9e0 [ 2499.806909][ T1132] ? file_end_write+0x1c0/0x1c0 [ 2499.811595][ T1132] ? create_io_thread+0x1e0/0x1e0 [ 2499.816456][ T1132] ? mutex_unlock+0xb2/0x260 [ 2499.820971][ T1132] ? __mutex_lock_slowpath+0x10/0x10 [ 2499.826280][ T1132] __x64_sys_clone+0x23f/0x290 [ 2499.830876][ T1132] ? __do_sys_vfork+0x130/0x130 [ 2499.835556][ T1132] ? ksys_write+0x260/0x2c0 [ 2499.840158][ T1132] ? debug_smp_processor_id+0x17/0x20 [ 2499.845625][ T1132] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2499.851528][ T1132] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2499.857126][ T1132] do_syscall_64+0x3d/0xb0 [ 2499.861370][ T1132] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2499.867095][ T1132] RIP: 0033:0x7fdfd1d08ae9 [ 2499.871355][ T1132] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2499.890791][ T1132] RSP: 002b:00007fdfd0a8b078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2499.899032][ T1132] RAX: ffffffffffffffda RBX: 00007fdfd1e27f80 RCX: 00007fdfd1d08ae9 [ 2499.906853][ T1132] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022001200 [ 2499.914746][ T1132] RBP: 00007fdfd0a8b120 R08: 0000000000000000 R09: 0000000000000000 [ 2499.922559][ T1132] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 18:25:07 executing program 5: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 66) 18:25:07 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) close(r1) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) openat$cgroup(r2, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) (async) r3 = openat$cgroup(r2, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r3, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) (async) openat$cgroup_pressure(r3, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r4 = openat$cgroup_ro(r3, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r4, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r4}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r4}, 0x8) openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) (async) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) openat$cgroup(r5, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) (async) r6 = openat$cgroup(r5, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r6, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) (async) openat$cgroup_pressure(r6, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r7 = openat$cgroup_ro(r6, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r7, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r7}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r7}, 0x8) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r4, r7}, 0xc) 18:25:07 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) ioctl$TUNGETVNETBE(r0, 0x800454df, &(0x7f0000000000)=0x1) (async, rerun: 64) socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) (rerun: 64) 18:25:07 executing program 0: socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x43, 0x1}, 0x1}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000080)="4aa5e18112fc1f4d302aa41d609c4498fa50cb5a3d2b3f4d5200ff16244bbf85a6cb6d697f34bfa01bf6d34abf2a595e2e0add4b67ed7b13bf28802bfca687f811a569952c42f1d9eb799a2a5fff873045f3d05962f4a11b4bce58c05ae3288e74703d6d40e554c73562e5b4f9445c7003dfda728529fbb67f7e451b9e9c4232e7e25a668da182bd8602b9515cb7828fbf4d537c0964ec5a70f3c2fc0926bf68b0e1eae82608474e1dab6c8b19142ba687a452b09c3c", 0xb6}, {&(0x7f0000000140)="60bc7c6edf85d31db572efb4d474391d8bda9a9f714b886e9d99d5c3e1edde6517f2d84da08ab7da4da26efd78c6846de5cae446da606e4a1eec4a72", 0x3c}, {&(0x7f0000000180)="2b4eb84c5bb3aa216c638d7eaba94fe22caa0115eef4219a0a94fa6505c61038acd804e90baa8e3f70f5d5ecbebc94838c36b474c443f68a9dc1670b74f0c515551c053ff2f33573f38a13f7336b208fda700b47b284ad8742e2", 0x5a}], 0x3, &(0x7f0000000240)="9571a310f207c636a758a0a8c0144825c2935c229a5a8b4e477df7", 0x1b, 0x40088d0}, 0x44040) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup(r1, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r2, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r2, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r3, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r3}, 0x20) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r3}, 0x8) recvmsg$unix(r4, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup(r5, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r6, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r7 = openat$cgroup_ro(r6, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r7, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r7}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r7}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000000000070000008520000002000000d50bf8fffcffffff85100000080000000097ac24c0e2f831f03000fcffffff185100000600000000000000000000001b00000000000e7cee6f0014d08c097371af91e9e3cabd8d78e61f700be8cdd3266ff4c4f699a0e5ae5a665f8f66b10e26d3899fef18fed930cb592707cfffcbf46c32938840b37bf546e45a406e78d2bb0cc34495f6edeba706c65ad735c3198278f8240634a026230b6ed88e", @ANYRESHEX], &(0x7f0000000340)='syzkaller\x00', 0x615, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0xf, 0x7, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x4}, 0x53) 18:25:07 executing program 1: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9d, 0x9d, 0x7, [@datasec={0x9, 0x1, 0x0, 0xf, 0x1, [{0x4, 0x1}], "fe"}, @restrict={0x8, 0x0, 0x0, 0xb, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3, 0x9a}}, @struct={0x9, 0x2, 0x0, 0x4, 0x1, 0x5, [{0xe, 0x2, 0x1}, {0x7, 0x2, 0x5}]}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x1, 0x4}, {0x6, 0x2}, {0x3, 0x4}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3, 0x10000}}]}, {0x0, [0x0, 0x0, 0x61, 0x30, 0x61]}}, &(0x7f0000000200)=""/254, 0xbf, 0xfe, 0x1, 0x7f}, 0x20) (async) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup(r1, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r2, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) (async) r3 = openat$cgroup_ro(r2, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r3, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r3}, 0x20) (async) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r3}, 0x8) recvmsg$unix(r4, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup(r5, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r6, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) (async) r7 = openat$cgroup_ro(r6, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r7, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r7}, 0x20) (async) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r7}, 0x8) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@jmp={0x5, 0x0, 0x8, 0x9, 0x4, 0xc, 0x4}, @call={0x85, 0x0, 0x0, 0x40}, @ldst={0x0, 0x1, 0x2, 0x5, 0x8, 0xffffffffffffffc0, 0x7ffffffffffffff7}]}, &(0x7f00000000c0)='GPL\x00', 0x200, 0x13, &(0x7f0000000100)=""/19, 0x0, 0x60, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000340)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x4, 0xc, 0x5, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[r4, 0xffffffffffffffff, r7], 0x0, 0x10, 0x81}, 0x90) r8 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)={[{0x2d, 'net_prio'}]}, 0xa) (async) syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) 18:25:07 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xd, 0xa00}, 0x48) [ 2499.930364][ T1132] R13: 000000000000000b R14: 00007fdfd1e27f80 R15: 00007fff62717c48 [ 2499.938197][ T1132] 18:25:07 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xd, 0xb00}, 0x48) 18:25:07 executing program 0: socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x43, 0x1}, 0x1}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000080)="4aa5e18112fc1f4d302aa41d609c4498fa50cb5a3d2b3f4d5200ff16244bbf85a6cb6d697f34bfa01bf6d34abf2a595e2e0add4b67ed7b13bf28802bfca687f811a569952c42f1d9eb799a2a5fff873045f3d05962f4a11b4bce58c05ae3288e74703d6d40e554c73562e5b4f9445c7003dfda728529fbb67f7e451b9e9c4232e7e25a668da182bd8602b9515cb7828fbf4d537c0964ec5a70f3c2fc0926bf68b0e1eae82608474e1dab6c8b19142ba687a452b09c3c", 0xb6}, {&(0x7f0000000140)="60bc7c6edf85d31db572efb4d474391d8bda9a9f714b886e9d99d5c3e1edde6517f2d84da08ab7da4da26efd78c6846de5cae446da606e4a1eec4a72", 0x3c}, {&(0x7f0000000180)="2b4eb84c5bb3aa216c638d7eaba94fe22caa0115eef4219a0a94fa6505c61038acd804e90baa8e3f70f5d5ecbebc94838c36b474c443f68a9dc1670b74f0c515551c053ff2f33573f38a13f7336b208fda700b47b284ad8742e2", 0x5a}], 0x3, &(0x7f0000000240)="9571a310f207c636a758a0a8c0144825c2935c229a5a8b4e477df7", 0x1b, 0x40088d0}, 0x44040) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup(r1, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r2, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r2, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r3, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r3}, 0x20) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r3}, 0x8) recvmsg$unix(r4, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup(r5, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r6, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r7 = openat$cgroup_ro(r6, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r7, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r7}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000000000070000008520000002000000d50bf8fffcffffff85100000080000000097ac24c0e2f831f03000fcffffff185100000600000000000000000000001b00000000000e7cee6f0014d08c097371af91e9e3cabd8d78e61f700be8cdd3266ff4c4f699a0e5ae5a665f8f66b10e26d3899fef18fed930cb592707cfffcbf46c32938840b37bf546e45a406e78d2bb0cc34495f6edeba706c65ad735c3198278f8240634a026230b6ed88e", @ANYRESHEX], &(0x7f0000000340)='syzkaller\x00', 0x615, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0xf, 0x7, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x4}, 0x53) 18:25:07 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) ioctl$TUNGETVNETBE(r0, 0x800454df, &(0x7f0000000000)=0x1) (async) socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) [ 2499.982155][ T1164] FAULT_INJECTION: forcing a failure. [ 2499.982155][ T1164] name failslab, interval 1, probability 0, space 0, times 0 [ 2500.003983][ T1164] CPU: 1 PID: 1164 Comm: syz-executor.5 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2500.014422][ T1164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2500.024317][ T1164] Call Trace: [ 2500.027445][ T1164] [ 2500.030222][ T1164] dump_stack_lvl+0x151/0x1b7 [ 2500.034727][ T1164] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2500.040198][ T1164] ? avc_denied+0x1b0/0x1b0 [ 2500.044540][ T1164] dump_stack+0x15/0x17 [ 2500.048527][ T1164] should_fail+0x3c6/0x510 [ 2500.052784][ T1164] __should_failslab+0xa4/0xe0 [ 2500.057389][ T1164] ? vm_area_dup+0x26/0x230 [ 2500.061944][ T1164] should_failslab+0x9/0x20 [ 2500.066233][ T1164] slab_pre_alloc_hook+0x37/0xd0 [ 2500.071011][ T1164] ? vm_area_dup+0x26/0x230 [ 2500.075346][ T1164] kmem_cache_alloc+0x44/0x200 18:25:07 executing program 1: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9d, 0x9d, 0x7, [@datasec={0x9, 0x1, 0x0, 0xf, 0x1, [{0x4, 0x1}], "fe"}, @restrict={0x8, 0x0, 0x0, 0xb, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3, 0x9a}}, @struct={0x9, 0x2, 0x0, 0x4, 0x1, 0x5, [{0xe, 0x2, 0x1}, {0x7, 0x2, 0x5}]}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x1, 0x4}, {0x6, 0x2}, {0x3, 0x4}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3, 0x10000}}]}, {0x0, [0x0, 0x0, 0x61, 0x30, 0x61]}}, &(0x7f0000000200)=""/254, 0xbf, 0xfe, 0x1, 0x7f}, 0x20) (async) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup(r1, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r2, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) (async) r3 = openat$cgroup_ro(r2, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r3, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r3}, 0x20) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r3}, 0x8) recvmsg$unix(r4, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) (async) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup(r5, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r6, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) (async) r7 = openat$cgroup_ro(r6, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r7, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r7}, 0x20) (async) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r7}, 0x8) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@jmp={0x5, 0x0, 0x8, 0x9, 0x4, 0xc, 0x4}, @call={0x85, 0x0, 0x0, 0x40}, @ldst={0x0, 0x1, 0x2, 0x5, 0x8, 0xffffffffffffffc0, 0x7ffffffffffffff7}]}, &(0x7f00000000c0)='GPL\x00', 0x200, 0x13, &(0x7f0000000100)=""/19, 0x0, 0x60, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000340)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x4, 0xc, 0x5, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[r4, 0xffffffffffffffff, r7], 0x0, 0x10, 0x81}, 0x90) r8 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)={[{0x2d, 'net_prio'}]}, 0xa) (async) syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) 18:25:07 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) close(r1) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup(r2, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r3, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r4 = openat$cgroup_ro(r3, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r4, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r4}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r4}, 0x8) (async) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup(r5, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r6, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) (async) r7 = openat$cgroup_ro(r6, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r7, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r7}, 0x20) (async, rerun: 64) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r7}, 0x8) (rerun: 64) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r4, r7}, 0xc) 18:25:07 executing program 0: socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x43, 0x1}, 0x1}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000080)="4aa5e18112fc1f4d302aa41d609c4498fa50cb5a3d2b3f4d5200ff16244bbf85a6cb6d697f34bfa01bf6d34abf2a595e2e0add4b67ed7b13bf28802bfca687f811a569952c42f1d9eb799a2a5fff873045f3d05962f4a11b4bce58c05ae3288e74703d6d40e554c73562e5b4f9445c7003dfda728529fbb67f7e451b9e9c4232e7e25a668da182bd8602b9515cb7828fbf4d537c0964ec5a70f3c2fc0926bf68b0e1eae82608474e1dab6c8b19142ba687a452b09c3c", 0xb6}, {&(0x7f0000000140)="60bc7c6edf85d31db572efb4d474391d8bda9a9f714b886e9d99d5c3e1edde6517f2d84da08ab7da4da26efd78c6846de5cae446da606e4a1eec4a72", 0x3c}, {&(0x7f0000000180)="2b4eb84c5bb3aa216c638d7eaba94fe22caa0115eef4219a0a94fa6505c61038acd804e90baa8e3f70f5d5ecbebc94838c36b474c443f68a9dc1670b74f0c515551c053ff2f33573f38a13f7336b208fda700b47b284ad8742e2", 0x5a}], 0x3, &(0x7f0000000240)="9571a310f207c636a758a0a8c0144825c2935c229a5a8b4e477df7", 0x1b, 0x40088d0}, 0x44040) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup(r1, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r2, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r2, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r3, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r3}, 0x20) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r3}, 0x8) recvmsg$unix(r4, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup(r5, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r6, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) openat$cgroup_ro(r6, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000000000070000008520000002000000d50bf8fffcffffff85100000080000000097ac24c0e2f831f03000fcffffff185100000600000000000000000000001b00000000000e7cee6f0014d08c097371af91e9e3cabd8d78e61f700be8cdd3266ff4c4f699a0e5ae5a665f8f66b10e26d3899fef18fed930cb592707cfffcbf46c32938840b37bf546e45a406e78d2bb0cc34495f6edeba706c65ad735c3198278f8240634a026230b6ed88e", @ANYRESHEX], &(0x7f0000000340)='syzkaller\x00', 0x615, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0xf, 0x7, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x4}, 0x53) [ 2500.079948][ T1164] vm_area_dup+0x26/0x230 [ 2500.084108][ T1164] copy_mm+0x9a1/0x13e0 [ 2500.088104][ T1164] ? copy_signal+0x610/0x610 [ 2500.092530][ T1164] ? __init_rwsem+0xd6/0x1c0 [ 2500.096959][ T1164] ? copy_signal+0x4e3/0x610 [ 2500.101498][ T1164] copy_process+0x12bc/0x3260 [ 2500.106008][ T1164] ? proc_fail_nth_write+0x20b/0x290 [ 2500.111121][ T1164] ? fsnotify_perm+0x6a/0x5d0 [ 2500.115629][ T1164] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2500.120580][ T1164] ? vfs_write+0x9ec/0x1110 [ 2500.124918][ T1164] kernel_clone+0x21e/0x9e0 [ 2500.129255][ T1164] ? file_end_write+0x1c0/0x1c0 [ 2500.133946][ T1164] ? create_io_thread+0x1e0/0x1e0 [ 2500.138802][ T1164] ? mutex_unlock+0xb2/0x260 [ 2500.143928][ T1164] ? __mutex_lock_slowpath+0x10/0x10 [ 2500.149310][ T1164] __x64_sys_clone+0x23f/0x290 [ 2500.153912][ T1164] ? __do_sys_vfork+0x130/0x130 [ 2500.158680][ T1164] ? ksys_write+0x260/0x2c0 [ 2500.163035][ T1164] ? debug_smp_processor_id+0x17/0x20 [ 2500.168233][ T1164] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2500.174129][ T1164] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2500.179691][ T1164] do_syscall_64+0x3d/0xb0 [ 2500.183940][ T1164] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2500.189765][ T1164] RIP: 0033:0x7fdfd1d08ae9 [ 2500.194025][ T1164] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2500.214011][ T1164] RSP: 002b:00007fdfd0a8b078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2500.222259][ T1164] RAX: ffffffffffffffda RBX: 00007fdfd1e27f80 RCX: 00007fdfd1d08ae9 18:25:07 executing program 5: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 67) 18:25:07 executing program 1: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='\xbd:{[%') syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) 18:25:07 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xd, 0xc00}, 0x48) 18:25:07 executing program 0: socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x43, 0x1}, 0x1}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000080)="4aa5e18112fc1f4d302aa41d609c4498fa50cb5a3d2b3f4d5200ff16244bbf85a6cb6d697f34bfa01bf6d34abf2a595e2e0add4b67ed7b13bf28802bfca687f811a569952c42f1d9eb799a2a5fff873045f3d05962f4a11b4bce58c05ae3288e74703d6d40e554c73562e5b4f9445c7003dfda728529fbb67f7e451b9e9c4232e7e25a668da182bd8602b9515cb7828fbf4d537c0964ec5a70f3c2fc0926bf68b0e1eae82608474e1dab6c8b19142ba687a452b09c3c", 0xb6}, {&(0x7f0000000140)="60bc7c6edf85d31db572efb4d474391d8bda9a9f714b886e9d99d5c3e1edde6517f2d84da08ab7da4da26efd78c6846de5cae446da606e4a1eec4a72", 0x3c}, {&(0x7f0000000180)="2b4eb84c5bb3aa216c638d7eaba94fe22caa0115eef4219a0a94fa6505c61038acd804e90baa8e3f70f5d5ecbebc94838c36b474c443f68a9dc1670b74f0c515551c053ff2f33573f38a13f7336b208fda700b47b284ad8742e2", 0x5a}], 0x3, &(0x7f0000000240)="9571a310f207c636a758a0a8c0144825c2935c229a5a8b4e477df7", 0x1b, 0x40088d0}, 0x44040) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup(r1, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r2, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r2, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r3, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r3}, 0x20) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r3}, 0x8) recvmsg$unix(r4, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup(r5, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r6, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000000000070000008520000002000000d50bf8fffcffffff85100000080000000097ac24c0e2f831f03000fcffffff185100000600000000000000000000001b00000000000e7cee6f0014d08c097371af91e9e3cabd8d78e61f700be8cdd3266ff4c4f699a0e5ae5a665f8f66b10e26d3899fef18fed930cb592707cfffcbf46c32938840b37bf546e45a406e78d2bb0cc34495f6edeba706c65ad735c3198278f8240634a026230b6ed88e", @ANYRESHEX], &(0x7f0000000340)='syzkaller\x00', 0x615, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0xf, 0x7, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x4}, 0x53) 18:25:07 executing program 4: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) openat$cgroup(r0, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000001640)='syz0\x00', 0x200002, 0x0) r2 = perf_event_open$cgroup(&(0x7f00000015c0)={0x3, 0x80, 0xff, 0x80, 0x20, 0x8, 0x0, 0x0, 0x14000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x4, @perf_bp={&(0x7f0000001580), 0x9}, 0x3001, 0x8000000000000001, 0x8, 0x2, 0x40, 0x800, 0x5, 0x0, 0x5, 0x0, 0x6}, r1, 0x0, 0xffffffffffffffff, 0x11) bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=@base={0x0, 0xdfe, 0xca2, 0x3, 0x1000, r2, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x5}, 0x48) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x80000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) close(r4) 18:25:07 executing program 2: socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)={0xffffffffffffffff}) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x8, r0}, 0x18) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r1, &(0x7f00000000c0)="ebc8a8f0c4650ca50a5ef54582393f6c40693cf3a4b7255fcbbd2e56525f99a170cb22987f6b2dacb0ea8be87bec3bcc58d64f923bbe14cc18109fc70f7c60be4d8b129e3908ad9a0f00722e44b5f74b", &(0x7f0000000140)=""/185}, 0x20) 18:25:07 executing program 2: socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)={0xffffffffffffffff}) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x8, r0}, 0x18) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r1, &(0x7f00000000c0)="ebc8a8f0c4650ca50a5ef54582393f6c40693cf3a4b7255fcbbd2e56525f99a170cb22987f6b2dacb0ea8be87bec3bcc58d64f923bbe14cc18109fc70f7c60be4d8b129e3908ad9a0f00722e44b5f74b", &(0x7f0000000140)=""/185}, 0x20) [ 2500.230497][ T1164] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022001200 [ 2500.238650][ T1164] RBP: 00007fdfd0a8b120 R08: 0000000000000000 R09: 0000000000000000 [ 2500.246465][ T1164] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2500.254280][ T1164] R13: 000000000000000b R14: 00007fdfd1e27f80 R15: 00007fff62717c48 [ 2500.262091][ T1164] 18:25:07 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xd, 0xd00}, 0x48) 18:25:07 executing program 0: socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x43, 0x1}, 0x1}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000080)="4aa5e18112fc1f4d302aa41d609c4498fa50cb5a3d2b3f4d5200ff16244bbf85a6cb6d697f34bfa01bf6d34abf2a595e2e0add4b67ed7b13bf28802bfca687f811a569952c42f1d9eb799a2a5fff873045f3d05962f4a11b4bce58c05ae3288e74703d6d40e554c73562e5b4f9445c7003dfda728529fbb67f7e451b9e9c4232e7e25a668da182bd8602b9515cb7828fbf4d537c0964ec5a70f3c2fc0926bf68b0e1eae82608474e1dab6c8b19142ba687a452b09c3c", 0xb6}, {&(0x7f0000000140)="60bc7c6edf85d31db572efb4d474391d8bda9a9f714b886e9d99d5c3e1edde6517f2d84da08ab7da4da26efd78c6846de5cae446da606e4a1eec4a72", 0x3c}, {&(0x7f0000000180)="2b4eb84c5bb3aa216c638d7eaba94fe22caa0115eef4219a0a94fa6505c61038acd804e90baa8e3f70f5d5ecbebc94838c36b474c443f68a9dc1670b74f0c515551c053ff2f33573f38a13f7336b208fda700b47b284ad8742e2", 0x5a}], 0x3, &(0x7f0000000240)="9571a310f207c636a758a0a8c0144825c2935c229a5a8b4e477df7", 0x1b, 0x40088d0}, 0x44040) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup(r1, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r2, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r2, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r3, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r3}, 0x20) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r3}, 0x8) recvmsg$unix(r4, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) openat$cgroup(r5, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000000000070000008520000002000000d50bf8fffcffffff85100000080000000097ac24c0e2f831f03000fcffffff185100000600000000000000000000001b00000000000e7cee6f0014d08c097371af91e9e3cabd8d78e61f700be8cdd3266ff4c4f699a0e5ae5a665f8f66b10e26d3899fef18fed930cb592707cfffcbf46c32938840b37bf546e45a406e78d2bb0cc34495f6edeba706c65ad735c3198278f8240634a026230b6ed88e", @ANYRESHEX], &(0x7f0000000340)='syzkaller\x00', 0x615, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0xf, 0x7, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x4}, 0x53) [ 2500.299944][ T1186] FAULT_INJECTION: forcing a failure. [ 2500.299944][ T1186] name failslab, interval 1, probability 0, space 0, times 0 [ 2500.314653][ T1186] CPU: 1 PID: 1186 Comm: syz-executor.5 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2500.325168][ T1186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2500.335063][ T1186] Call Trace: [ 2500.338186][ T1186] [ 2500.340961][ T1186] dump_stack_lvl+0x151/0x1b7 18:25:07 executing program 1: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='\xbd:{[%') syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='\xbd:{[%') (async) syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 18:25:07 executing program 1: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='\xbd:{[%') syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2500.345524][ T1186] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2500.350956][ T1186] dump_stack+0x15/0x17 [ 2500.354938][ T1186] should_fail+0x3c6/0x510 [ 2500.359276][ T1186] __should_failslab+0xa4/0xe0 [ 2500.363876][ T1186] ? anon_vma_clone+0x9a/0x500 [ 2500.368489][ T1186] should_failslab+0x9/0x20 [ 2500.372818][ T1186] slab_pre_alloc_hook+0x37/0xd0 [ 2500.377589][ T1186] ? anon_vma_clone+0x9a/0x500 [ 2500.382272][ T1186] kmem_cache_alloc+0x44/0x200 [ 2500.386964][ T1186] anon_vma_clone+0x9a/0x500 [ 2500.391568][ T1186] anon_vma_fork+0x91/0x4e0 [ 2500.395913][ T1186] ? anon_vma_name+0x4c/0x70 18:25:07 executing program 1: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) syz_clone(0x2d025380, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2500.400417][ T1186] ? vm_area_dup+0x17a/0x230 [ 2500.404839][ T1186] copy_mm+0xa3a/0x13e0 [ 2500.408833][ T1186] ? copy_signal+0x610/0x610 [ 2500.413261][ T1186] ? __init_rwsem+0xd6/0x1c0 [ 2500.417685][ T1186] ? copy_signal+0x4e3/0x610 [ 2500.422112][ T1186] copy_process+0x12bc/0x3260 [ 2500.426627][ T1186] ? proc_fail_nth_write+0x20b/0x290 [ 2500.431750][ T1186] ? fsnotify_perm+0x6a/0x5d0 [ 2500.436259][ T1186] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2500.441204][ T1186] ? vfs_write+0x9ec/0x1110 [ 2500.445551][ T1186] kernel_clone+0x21e/0x9e0 [ 2500.449886][ T1186] ? file_end_write+0x1c0/0x1c0 [ 2500.454576][ T1186] ? create_io_thread+0x1e0/0x1e0 [ 2500.459431][ T1186] ? mutex_unlock+0xb2/0x260 [ 2500.463952][ T1186] ? __mutex_lock_slowpath+0x10/0x10 [ 2500.469064][ T1186] __x64_sys_clone+0x23f/0x290 [ 2500.473762][ T1186] ? __do_sys_vfork+0x130/0x130 [ 2500.478440][ T1186] ? ksys_write+0x260/0x2c0 [ 2500.482791][ T1186] ? debug_smp_processor_id+0x17/0x20 [ 2500.487989][ T1186] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2500.493894][ T1186] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2500.499358][ T1186] do_syscall_64+0x3d/0xb0 [ 2500.503604][ T1186] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2500.509332][ T1186] RIP: 0033:0x7fdfd1d08ae9 [ 2500.513586][ T1186] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2500.533146][ T1186] RSP: 002b:00007fdfd0a8b078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2500.541383][ T1186] RAX: ffffffffffffffda RBX: 00007fdfd1e27f80 RCX: 00007fdfd1d08ae9 18:25:07 executing program 5: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 68) 18:25:07 executing program 1: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) (async) syz_clone(0x2d025380, 0x0, 0x0, 0x0, 0x0, 0x0) 18:25:07 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xd, 0xe00}, 0x48) 18:25:07 executing program 2: socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)={0xffffffffffffffff}) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x8, r0}, 0x18) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r1, &(0x7f00000000c0)="ebc8a8f0c4650ca50a5ef54582393f6c40693cf3a4b7255fcbbd2e56525f99a170cb22987f6b2dacb0ea8be87bec3bcc58d64f923bbe14cc18109fc70f7c60be4d8b129e3908ad9a0f00722e44b5f74b", &(0x7f0000000140)=""/185}, 0x20) socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x8, r0}, 0x18) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r1, &(0x7f00000000c0)="ebc8a8f0c4650ca50a5ef54582393f6c40693cf3a4b7255fcbbd2e56525f99a170cb22987f6b2dacb0ea8be87bec3bcc58d64f923bbe14cc18109fc70f7c60be4d8b129e3908ad9a0f00722e44b5f74b", &(0x7f0000000140)=""/185}, 0x20) (async) 18:25:07 executing program 0: socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x43, 0x1}, 0x1}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000080)="4aa5e18112fc1f4d302aa41d609c4498fa50cb5a3d2b3f4d5200ff16244bbf85a6cb6d697f34bfa01bf6d34abf2a595e2e0add4b67ed7b13bf28802bfca687f811a569952c42f1d9eb799a2a5fff873045f3d05962f4a11b4bce58c05ae3288e74703d6d40e554c73562e5b4f9445c7003dfda728529fbb67f7e451b9e9c4232e7e25a668da182bd8602b9515cb7828fbf4d537c0964ec5a70f3c2fc0926bf68b0e1eae82608474e1dab6c8b19142ba687a452b09c3c", 0xb6}, {&(0x7f0000000140)="60bc7c6edf85d31db572efb4d474391d8bda9a9f714b886e9d99d5c3e1edde6517f2d84da08ab7da4da26efd78c6846de5cae446da606e4a1eec4a72", 0x3c}, {&(0x7f0000000180)="2b4eb84c5bb3aa216c638d7eaba94fe22caa0115eef4219a0a94fa6505c61038acd804e90baa8e3f70f5d5ecbebc94838c36b474c443f68a9dc1670b74f0c515551c053ff2f33573f38a13f7336b208fda700b47b284ad8742e2", 0x5a}], 0x3, &(0x7f0000000240)="9571a310f207c636a758a0a8c0144825c2935c229a5a8b4e477df7", 0x1b, 0x40088d0}, 0x44040) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup(r1, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r2, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r2, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r3, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r3}, 0x20) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r3}, 0x8) recvmsg$unix(r4, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000000000070000008520000002000000d50bf8fffcffffff85100000080000000097ac24c0e2f831f03000fcffffff185100000600000000000000000000001b00000000000e7cee6f0014d08c097371af91e9e3cabd8d78e61f700be8cdd3266ff4c4f699a0e5ae5a665f8f66b10e26d3899fef18fed930cb592707cfffcbf46c32938840b37bf546e45a406e78d2bb0cc34495f6edeba706c65ad735c3198278f8240634a026230b6ed88e", @ANYRESHEX], &(0x7f0000000340)='syzkaller\x00', 0x615, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0xf, 0x7, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x4}, 0x53) 18:25:07 executing program 4: openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) (async) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) openat$cgroup(r0, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000001640)='syz0\x00', 0x200002, 0x0) r2 = perf_event_open$cgroup(&(0x7f00000015c0)={0x3, 0x80, 0xff, 0x80, 0x20, 0x8, 0x0, 0x0, 0x14000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x4, @perf_bp={&(0x7f0000001580), 0x9}, 0x3001, 0x8000000000000001, 0x8, 0x2, 0x40, 0x800, 0x5, 0x0, 0x5, 0x0, 0x6}, r1, 0x0, 0xffffffffffffffff, 0x11) bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=@base={0x0, 0xdfe, 0xca2, 0x3, 0x1000, r2, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x5}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=@base={0x0, 0xdfe, 0xca2, 0x3, 0x1000, r2, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x5}, 0x48) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x80000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) (async) recvmsg(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) close(r4) 18:25:07 executing program 1: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) (async) syz_clone(0x2d025380, 0x0, 0x0, 0x0, 0x0, 0x0) 18:25:07 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xd, 0xf00}, 0x48) 18:25:07 executing program 2: socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000640)={&(0x7f0000000380), 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/190, 0xbe}, {&(0x7f00000004c0)=""/9, 0x9}, {&(0x7f0000000500)=""/160, 0xa0}], 0x3, &(0x7f0000000600)=[@cred={{0x1c}}], 0x20}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) [ 2500.549195][ T1186] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022001200 [ 2500.557005][ T1186] RBP: 00007fdfd0a8b120 R08: 0000000000000000 R09: 0000000000000000 [ 2500.564817][ T1186] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2500.572804][ T1186] R13: 000000000000000b R14: 00007fdfd1e27f80 R15: 00007fff62717c48 [ 2500.580613][ T1186] 18:25:07 executing program 0: socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x43, 0x1}, 0x1}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000080)="4aa5e18112fc1f4d302aa41d609c4498fa50cb5a3d2b3f4d5200ff16244bbf85a6cb6d697f34bfa01bf6d34abf2a595e2e0add4b67ed7b13bf28802bfca687f811a569952c42f1d9eb799a2a5fff873045f3d05962f4a11b4bce58c05ae3288e74703d6d40e554c73562e5b4f9445c7003dfda728529fbb67f7e451b9e9c4232e7e25a668da182bd8602b9515cb7828fbf4d537c0964ec5a70f3c2fc0926bf68b0e1eae82608474e1dab6c8b19142ba687a452b09c3c", 0xb6}, {&(0x7f0000000140)="60bc7c6edf85d31db572efb4d474391d8bda9a9f714b886e9d99d5c3e1edde6517f2d84da08ab7da4da26efd78c6846de5cae446da606e4a1eec4a72", 0x3c}, {&(0x7f0000000180)="2b4eb84c5bb3aa216c638d7eaba94fe22caa0115eef4219a0a94fa6505c61038acd804e90baa8e3f70f5d5ecbebc94838c36b474c443f68a9dc1670b74f0c515551c053ff2f33573f38a13f7336b208fda700b47b284ad8742e2", 0x5a}], 0x3, &(0x7f0000000240)="9571a310f207c636a758a0a8c0144825c2935c229a5a8b4e477df7", 0x1b, 0x40088d0}, 0x44040) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup(r1, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r2, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r2, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r3, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r3}, 0x20) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r3}, 0x8) recvmsg$unix(r4, &(0x7f0000002400)={&(0x7f0000002200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000000000070000008520000002000000d50bf8fffcffffff85100000080000000097ac24c0e2f831f03000fcffffff185100000600000000000000000000001b00000000000e7cee6f0014d08c097371af91e9e3cabd8d78e61f700be8cdd3266ff4c4f699a0e5ae5a665f8f66b10e26d3899fef18fed930cb592707cfffcbf46c32938840b37bf546e45a406e78d2bb0cc34495f6edeba706c65ad735c3198278f8240634a026230b6ed88e", @ANYRESHEX], &(0x7f0000000340)='syzkaller\x00', 0x615, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0xf, 0x7, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x4}, 0x53) 18:25:07 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000001b40)=@base={0x0, 0x0, 0x0, 0x0, 0x34d4, 0x1}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0], 0x0, 0x8, &(0x7f00000000c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000180)}}, 0x10) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_ext={0x1c, 0x9, &(0x7f0000000440)=@raw=[@map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80000001}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x17b6}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x1}, @jmp={0x5, 0x0, 0x7, 0x8, 0x1, 0x8, 0xffffffffffffffff}], &(0x7f0000000300)='GPL\x00', 0x800, 0x0, 0x0, 0x41000, 0x1c, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0x4, 0xffff, 0xfffffff8}, 0x10, 0x2e7ed, 0xffffffffffffffff, 0x6, &(0x7f0000000540)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000580)=[{0x1, 0x2, 0xb, 0xc}, {0x5, 0x5, 0x1}, {0x2, 0x4, 0x6, 0x5}, {0x1, 0x3, 0x2, 0x4}, {0x4, 0x1, 0x5, 0x5}, {0x4, 0x3, 0xe, 0x6}], 0x10, 0x5}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r1, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000006c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000700)=[0x0], &(0x7f0000000740)=[0x0], 0x0, 0x8, &(0x7f0000000780)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@ifindex=r0, 0x7, 0x0, 0x2, &(0x7f0000000300), 0x0, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) 18:25:07 executing program 4: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) openat$cgroup(r0, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) (async) openat$cgroup(r0, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000001640)='syz0\x00', 0x200002, 0x0) r2 = perf_event_open$cgroup(&(0x7f00000015c0)={0x3, 0x80, 0xff, 0x80, 0x20, 0x8, 0x0, 0x0, 0x14000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x4, @perf_bp={&(0x7f0000001580), 0x9}, 0x3001, 0x8000000000000001, 0x8, 0x2, 0x40, 0x800, 0x5, 0x0, 0x5, 0x0, 0x6}, r1, 0x0, 0xffffffffffffffff, 0x11) bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=@base={0x0, 0xdfe, 0xca2, 0x3, 0x1000, r2, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x5}, 0x48) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x80000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) (async) recvmsg(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) close(r4) [ 2500.644655][ T1237] FAULT_INJECTION: forcing a failure. [ 2500.644655][ T1237] name failslab, interval 1, probability 0, space 0, times 0 [ 2500.673423][ T1237] CPU: 0 PID: 1237 Comm: syz-executor.5 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2500.683518][ T1237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2500.693415][ T1237] Call Trace: [ 2500.696539][ T1237] [ 2500.699327][ T1237] dump_stack_lvl+0x151/0x1b7 [ 2500.703826][ T1237] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2500.709300][ T1237] dump_stack+0x15/0x17 [ 2500.713289][ T1237] should_fail+0x3c6/0x510 [ 2500.717537][ T1237] __should_failslab+0xa4/0xe0 [ 2500.722133][ T1237] ? anon_vma_clone+0x9a/0x500 [ 2500.726735][ T1237] should_failslab+0x9/0x20 [ 2500.731074][ T1237] slab_pre_alloc_hook+0x37/0xd0 [ 2500.735849][ T1237] ? anon_vma_clone+0x9a/0x500 [ 2500.740449][ T1237] kmem_cache_alloc+0x44/0x200 [ 2500.745063][ T1237] anon_vma_clone+0x9a/0x500 [ 2500.749485][ T1237] anon_vma_fork+0x91/0x4e0 [ 2500.753824][ T1237] ? anon_vma_name+0x4c/0x70 [ 2500.758243][ T1237] ? vm_area_dup+0x17a/0x230 [ 2500.762908][ T1237] copy_mm+0xa3a/0x13e0 [ 2500.766896][ T1237] ? copy_signal+0x610/0x610 [ 2500.771321][ T1237] ? __init_rwsem+0xd6/0x1c0 [ 2500.775748][ T1237] ? copy_signal+0x4e3/0x610 [ 2500.780172][ T1237] copy_process+0x12bc/0x3260 [ 2500.784686][ T1237] ? proc_fail_nth_write+0x20b/0x290 [ 2500.789804][ T1237] ? fsnotify_perm+0x6a/0x5d0 [ 2500.794322][ T1237] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2500.799367][ T1237] ? vfs_write+0x9ec/0x1110 [ 2500.803700][ T1237] kernel_clone+0x21e/0x9e0 [ 2500.808043][ T1237] ? file_end_write+0x1c0/0x1c0 [ 2500.812726][ T1237] ? create_io_thread+0x1e0/0x1e0 [ 2500.817585][ T1237] ? mutex_unlock+0xb2/0x260 [ 2500.822012][ T1237] ? __mutex_lock_slowpath+0x10/0x10 [ 2500.827134][ T1237] __x64_sys_clone+0x23f/0x290 [ 2500.831737][ T1237] ? __do_sys_vfork+0x130/0x130 [ 2500.836422][ T1237] ? ksys_write+0x260/0x2c0 [ 2500.840762][ T1237] ? debug_smp_processor_id+0x17/0x20 [ 2500.845967][ T1237] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2500.851870][ T1237] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2500.857424][ T1237] do_syscall_64+0x3d/0xb0 [ 2500.861765][ T1237] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2500.867527][ T1237] RIP: 0033:0x7fdfd1d08ae9 [ 2500.871924][ T1237] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 18:25:08 executing program 5: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 69) 18:25:08 executing program 2: socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) (async) socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000640)={&(0x7f0000000380), 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/190, 0xbe}, {&(0x7f00000004c0)=""/9, 0x9}, {&(0x7f0000000500)=""/160, 0xa0}], 0x3, &(0x7f0000000600)=[@cred={{0x1c}}], 0x20}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) 18:25:08 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xd, 0x1100}, 0x48) 18:25:08 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1c, 0x2, 0x3, 0xbbbf, 0x1000, 0xffffffffffffffff, 0x7832, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x5}, 0x48) 18:25:08 executing program 0: socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x43, 0x1}, 0x1}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000080)="4aa5e18112fc1f4d302aa41d609c4498fa50cb5a3d2b3f4d5200ff16244bbf85a6cb6d697f34bfa01bf6d34abf2a595e2e0add4b67ed7b13bf28802bfca687f811a569952c42f1d9eb799a2a5fff873045f3d05962f4a11b4bce58c05ae3288e74703d6d40e554c73562e5b4f9445c7003dfda728529fbb67f7e451b9e9c4232e7e25a668da182bd8602b9515cb7828fbf4d537c0964ec5a70f3c2fc0926bf68b0e1eae82608474e1dab6c8b19142ba687a452b09c3c", 0xb6}, {&(0x7f0000000140)="60bc7c6edf85d31db572efb4d474391d8bda9a9f714b886e9d99d5c3e1edde6517f2d84da08ab7da4da26efd78c6846de5cae446da606e4a1eec4a72", 0x3c}, {&(0x7f0000000180)="2b4eb84c5bb3aa216c638d7eaba94fe22caa0115eef4219a0a94fa6505c61038acd804e90baa8e3f70f5d5ecbebc94838c36b474c443f68a9dc1670b74f0c515551c053ff2f33573f38a13f7336b208fda700b47b284ad8742e2", 0x5a}], 0x3, &(0x7f0000000240)="9571a310f207c636a758a0a8c0144825c2935c229a5a8b4e477df7", 0x1b, 0x40088d0}, 0x44040) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup(r1, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r2, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r2, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r3, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r3}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r3}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000000000070000008520000002000000d50bf8fffcffffff85100000080000000097ac24c0e2f831f03000fcffffff185100000600000000000000000000001b00000000000e7cee6f0014d08c097371af91e9e3cabd8d78e61f700be8cdd3266ff4c4f699a0e5ae5a665f8f66b10e26d3899fef18fed930cb592707cfffcbf46c32938840b37bf546e45a406e78d2bb0cc34495f6edeba706c65ad735c3198278f8240634a026230b6ed88e", @ANYRESHEX], &(0x7f0000000340)='syzkaller\x00', 0x615, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0xf, 0x7, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x4}, 0x53) 18:25:08 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000001b40)=@base={0x0, 0x0, 0x0, 0x0, 0x34d4, 0x1}, 0x48) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0], 0x0, 0x8, &(0x7f00000000c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000180)}}, 0x10) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_ext={0x1c, 0x9, &(0x7f0000000440)=@raw=[@map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80000001}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x17b6}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x1}, @jmp={0x5, 0x0, 0x7, 0x8, 0x1, 0x8, 0xffffffffffffffff}], &(0x7f0000000300)='GPL\x00', 0x800, 0x0, 0x0, 0x41000, 0x1c, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0x4, 0xffff, 0xfffffff8}, 0x10, 0x2e7ed, 0xffffffffffffffff, 0x6, &(0x7f0000000540)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000580)=[{0x1, 0x2, 0xb, 0xc}, {0x5, 0x5, 0x1}, {0x2, 0x4, 0x6, 0x5}, {0x1, 0x3, 0x2, 0x4}, {0x4, 0x1, 0x5, 0x5}, {0x4, 0x3, 0xe, 0x6}], 0x10, 0x5}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r1, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000006c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000700)=[0x0], &(0x7f0000000740)=[0x0], 0x0, 0x8, &(0x7f0000000780)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@ifindex=r0, 0x7, 0x0, 0x2, &(0x7f0000000300), 0x0, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2500.891367][ T1237] RSP: 002b:00007fdfd0a8b078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2500.899609][ T1237] RAX: ffffffffffffffda RBX: 00007fdfd1e27f80 RCX: 00007fdfd1d08ae9 [ 2500.907427][ T1237] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022001200 [ 2500.915319][ T1237] RBP: 00007fdfd0a8b120 R08: 0000000000000000 R09: 0000000000000000 [ 2500.923150][ T1237] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2500.930937][ T1237] R13: 000000000000000b R14: 00007fdfd1e27f80 R15: 00007fff62717c48 [ 2500.938751][ T1237] 18:25:08 executing program 2: socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000640)={&(0x7f0000000380), 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/190, 0xbe}, {&(0x7f00000004c0)=""/9, 0x9}, {&(0x7f0000000500)=""/160, 0xa0}], 0x3, &(0x7f0000000600)=[@cred={{0x1c}}], 0x20}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) 18:25:08 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xd, 0x1200}, 0x48) 18:25:08 executing program 0: socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x43, 0x1}, 0x1}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000080)="4aa5e18112fc1f4d302aa41d609c4498fa50cb5a3d2b3f4d5200ff16244bbf85a6cb6d697f34bfa01bf6d34abf2a595e2e0add4b67ed7b13bf28802bfca687f811a569952c42f1d9eb799a2a5fff873045f3d05962f4a11b4bce58c05ae3288e74703d6d40e554c73562e5b4f9445c7003dfda728529fbb67f7e451b9e9c4232e7e25a668da182bd8602b9515cb7828fbf4d537c0964ec5a70f3c2fc0926bf68b0e1eae82608474e1dab6c8b19142ba687a452b09c3c", 0xb6}, {&(0x7f0000000140)="60bc7c6edf85d31db572efb4d474391d8bda9a9f714b886e9d99d5c3e1edde6517f2d84da08ab7da4da26efd78c6846de5cae446da606e4a1eec4a72", 0x3c}, {&(0x7f0000000180)="2b4eb84c5bb3aa216c638d7eaba94fe22caa0115eef4219a0a94fa6505c61038acd804e90baa8e3f70f5d5ecbebc94838c36b474c443f68a9dc1670b74f0c515551c053ff2f33573f38a13f7336b208fda700b47b284ad8742e2", 0x5a}], 0x3, &(0x7f0000000240)="9571a310f207c636a758a0a8c0144825c2935c229a5a8b4e477df7", 0x1b, 0x40088d0}, 0x44040) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup(r1, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r2, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r2, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, r3, 0x0, 0x39, 0xffffffffffffffff, @prog_fd=r3}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000000000070000008520000002000000d50bf8fffcffffff85100000080000000097ac24c0e2f831f03000fcffffff185100000600000000000000000000001b00000000000e7cee6f0014d08c097371af91e9e3cabd8d78e61f700be8cdd3266ff4c4f699a0e5ae5a665f8f66b10e26d3899fef18fed930cb592707cfffcbf46c32938840b37bf546e45a406e78d2bb0cc34495f6edeba706c65ad735c3198278f8240634a026230b6ed88e", @ANYRESHEX], &(0x7f0000000340)='syzkaller\x00', 0x615, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0xf, 0x7, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x4}, 0x53) 18:25:08 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000001b40)=@base={0x0, 0x0, 0x0, 0x0, 0x34d4, 0x1}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0], 0x0, 0x8, &(0x7f00000000c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000180)}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_ext={0x1c, 0x9, &(0x7f0000000440)=@raw=[@map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80000001}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x17b6}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x1}, @jmp={0x5, 0x0, 0x7, 0x8, 0x1, 0x8, 0xffffffffffffffff}], &(0x7f0000000300)='GPL\x00', 0x800, 0x0, 0x0, 0x41000, 0x1c, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0x4, 0xffff, 0xfffffff8}, 0x10, 0x2e7ed, 0xffffffffffffffff, 0x6, &(0x7f0000000540)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000580)=[{0x1, 0x2, 0xb, 0xc}, {0x5, 0x5, 0x1}, {0x2, 0x4, 0x6, 0x5}, {0x1, 0x3, 0x2, 0x4}, {0x4, 0x1, 0x5, 0x5}, {0x4, 0x3, 0xe, 0x6}], 0x10, 0x5}, 0x90) (async) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_ext={0x1c, 0x9, &(0x7f0000000440)=@raw=[@map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80000001}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x17b6}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x1}, @jmp={0x5, 0x0, 0x7, 0x8, 0x1, 0x8, 0xffffffffffffffff}], &(0x7f0000000300)='GPL\x00', 0x800, 0x0, 0x0, 0x41000, 0x1c, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0x4, 0xffff, 0xfffffff8}, 0x10, 0x2e7ed, 0xffffffffffffffff, 0x6, &(0x7f0000000540)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000580)=[{0x1, 0x2, 0xb, 0xc}, {0x5, 0x5, 0x1}, {0x2, 0x4, 0x6, 0x5}, {0x1, 0x3, 0x2, 0x4}, {0x4, 0x1, 0x5, 0x5}, {0x4, 0x3, 0xe, 0x6}], 0x10, 0x5}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r1, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000006c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000700)=[0x0], &(0x7f0000000740)=[0x0], 0x0, 0x8, &(0x7f0000000780)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@ifindex=r0, 0x7, 0x0, 0x2, &(0x7f0000000300), 0x0, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2500.997496][ T1266] FAULT_INJECTION: forcing a failure. [ 2500.997496][ T1266] name failslab, interval 1, probability 0, space 0, times 0 [ 2501.015833][ T1266] CPU: 0 PID: 1266 Comm: syz-executor.5 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2501.026124][ T1266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2501.036007][ T1266] Call Trace: [ 2501.039128][ T1266] [ 2501.041991][ T1266] dump_stack_lvl+0x151/0x1b7 18:25:08 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xd, 0x1300}, 0x48) 18:25:08 executing program 2: ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000100)) socketpair(0x2c, 0x0, 0x8, &(0x7f0000000140)) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={0x1, &(0x7f0000000080)="fa3f0fb32912c9ad4c91779ab61d246b9200fe5eb59040c57082d051f87444090a8ac5db9243917ab32a618fe9b15e3d38241b730c642c7e0306368605b96f9c0c2dc7af563c7d6d46869363ab9739d9a0d9e548a67fd42d61150a0c4ba5b67021988a2db2da614abcd162361348"}, 0x20) [ 2501.046506][ T1266] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2501.051981][ T1266] dump_stack+0x15/0x17 [ 2501.055963][ T1266] should_fail+0x3c6/0x510 [ 2501.060223][ T1266] __should_failslab+0xa4/0xe0 [ 2501.064823][ T1266] ? anon_vma_fork+0xf7/0x4e0 [ 2501.069328][ T1266] should_failslab+0x9/0x20 [ 2501.073788][ T1266] slab_pre_alloc_hook+0x37/0xd0 [ 2501.078530][ T1266] ? anon_vma_fork+0xf7/0x4e0 [ 2501.083050][ T1266] kmem_cache_alloc+0x44/0x200 [ 2501.087647][ T1266] anon_vma_fork+0xf7/0x4e0 [ 2501.092943][ T1266] ? anon_vma_name+0x43/0x70 [ 2501.097625][ T1266] ? vm_area_dup+0x17a/0x230 [ 2501.102055][ T1266] copy_mm+0xa3a/0x13e0 [ 2501.106048][ T1266] ? copy_signal+0x610/0x610 [ 2501.110473][ T1266] ? __init_rwsem+0xd6/0x1c0 [ 2501.114905][ T1266] ? copy_signal+0x4e3/0x610 [ 2501.119329][ T1266] copy_process+0x12bc/0x3260 [ 2501.123841][ T1266] ? proc_fail_nth_write+0x20b/0x290 [ 2501.128953][ T1266] ? fsnotify_perm+0x6a/0x5d0 [ 2501.133470][ T1266] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2501.138411][ T1266] ? vfs_write+0x9ec/0x1110 [ 2501.142754][ T1266] kernel_clone+0x21e/0x9e0 [ 2501.147131][ T1266] ? file_end_write+0x1c0/0x1c0 [ 2501.151882][ T1266] ? create_io_thread+0x1e0/0x1e0 [ 2501.156741][ T1266] ? mutex_unlock+0xb2/0x260 [ 2501.161183][ T1266] ? __mutex_lock_slowpath+0x10/0x10 [ 2501.166564][ T1266] __x64_sys_clone+0x23f/0x290 [ 2501.171145][ T1266] ? __do_sys_vfork+0x130/0x130 [ 2501.175828][ T1266] ? ksys_write+0x260/0x2c0 [ 2501.180185][ T1266] ? debug_smp_processor_id+0x17/0x20 [ 2501.185378][ T1266] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2501.191281][ T1266] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2501.196752][ T1266] do_syscall_64+0x3d/0xb0 [ 2501.201001][ T1266] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2501.206731][ T1266] RIP: 0033:0x7fdfd1d08ae9 [ 2501.210984][ T1266] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2501.230609][ T1266] RSP: 002b:00007fdfd0a8b078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2501.238858][ T1266] RAX: ffffffffffffffda RBX: 00007fdfd1e27f80 RCX: 00007fdfd1d08ae9 18:25:08 executing program 5: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 70) 18:25:08 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xd, 0x1400}, 0x48) 18:25:08 executing program 1: r0 = syz_clone(0x22023200, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)='/\xc5}\')\'#\x00'}, 0x30) 18:25:08 executing program 2: ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000100)) socketpair(0x2c, 0x0, 0x8, &(0x7f0000000140)) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={0x1, &(0x7f0000000080)="fa3f0fb32912c9ad4c91779ab61d246b9200fe5eb59040c57082d051f87444090a8ac5db9243917ab32a618fe9b15e3d38241b730c642c7e0306368605b96f9c0c2dc7af563c7d6d46869363ab9739d9a0d9e548a67fd42d61150a0c4ba5b67021988a2db2da614abcd162361348"}, 0x20) 18:25:08 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1c, 0x2, 0x3, 0xbbbf, 0x1000, 0xffffffffffffffff, 0x7832, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x5}, 0x48) 18:25:08 executing program 0: socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x43, 0x1}, 0x1}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000080)="4aa5e18112fc1f4d302aa41d609c4498fa50cb5a3d2b3f4d5200ff16244bbf85a6cb6d697f34bfa01bf6d34abf2a595e2e0add4b67ed7b13bf28802bfca687f811a569952c42f1d9eb799a2a5fff873045f3d05962f4a11b4bce58c05ae3288e74703d6d40e554c73562e5b4f9445c7003dfda728529fbb67f7e451b9e9c4232e7e25a668da182bd8602b9515cb7828fbf4d537c0964ec5a70f3c2fc0926bf68b0e1eae82608474e1dab6c8b19142ba687a452b09c3c", 0xb6}, {&(0x7f0000000140)="60bc7c6edf85d31db572efb4d474391d8bda9a9f714b886e9d99d5c3e1edde6517f2d84da08ab7da4da26efd78c6846de5cae446da606e4a1eec4a72", 0x3c}, {&(0x7f0000000180)="2b4eb84c5bb3aa216c638d7eaba94fe22caa0115eef4219a0a94fa6505c61038acd804e90baa8e3f70f5d5ecbebc94838c36b474c443f68a9dc1670b74f0c515551c053ff2f33573f38a13f7336b208fda700b47b284ad8742e2", 0x5a}], 0x3, &(0x7f0000000240)="9571a310f207c636a758a0a8c0144825c2935c229a5a8b4e477df7", 0x1b, 0x40088d0}, 0x44040) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup(r1, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r2, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) openat$cgroup_ro(r2, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000000000070000008520000002000000d50bf8fffcffffff85100000080000000097ac24c0e2f831f03000fcffffff185100000600000000000000000000001b00000000000e7cee6f0014d08c097371af91e9e3cabd8d78e61f700be8cdd3266ff4c4f699a0e5ae5a665f8f66b10e26d3899fef18fed930cb592707cfffcbf46c32938840b37bf546e45a406e78d2bb0cc34495f6edeba706c65ad735c3198278f8240634a026230b6ed88e", @ANYRESHEX], &(0x7f0000000340)='syzkaller\x00', 0x615, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0xf, 0x7, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x4}, 0x53) 18:25:08 executing program 1: r0 = syz_clone(0x22023200, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)='/\xc5}\')\'#\x00'}, 0x30) 18:25:08 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xd, 0x1500}, 0x48) 18:25:08 executing program 2: ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000100)) (async) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000100)) socketpair(0x2c, 0x0, 0x8, &(0x7f0000000140)) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={0x1, &(0x7f0000000080)="fa3f0fb32912c9ad4c91779ab61d246b9200fe5eb59040c57082d051f87444090a8ac5db9243917ab32a618fe9b15e3d38241b730c642c7e0306368605b96f9c0c2dc7af563c7d6d46869363ab9739d9a0d9e548a67fd42d61150a0c4ba5b67021988a2db2da614abcd162361348"}, 0x20) [ 2501.247088][ T1266] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022001200 [ 2501.254989][ T1266] RBP: 00007fdfd0a8b120 R08: 0000000000000000 R09: 0000000000000000 [ 2501.262796][ T1266] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2501.270608][ T1266] R13: 000000000000000b R14: 00007fdfd1e27f80 R15: 00007fff62717c48 [ 2501.278447][ T1266] 18:25:08 executing program 0: socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x43, 0x1}, 0x1}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000080)="4aa5e18112fc1f4d302aa41d609c4498fa50cb5a3d2b3f4d5200ff16244bbf85a6cb6d697f34bfa01bf6d34abf2a595e2e0add4b67ed7b13bf28802bfca687f811a569952c42f1d9eb799a2a5fff873045f3d05962f4a11b4bce58c05ae3288e74703d6d40e554c73562e5b4f9445c7003dfda728529fbb67f7e451b9e9c4232e7e25a668da182bd8602b9515cb7828fbf4d537c0964ec5a70f3c2fc0926bf68b0e1eae82608474e1dab6c8b19142ba687a452b09c3c", 0xb6}, {&(0x7f0000000140)="60bc7c6edf85d31db572efb4d474391d8bda9a9f714b886e9d99d5c3e1edde6517f2d84da08ab7da4da26efd78c6846de5cae446da606e4a1eec4a72", 0x3c}, {&(0x7f0000000180)="2b4eb84c5bb3aa216c638d7eaba94fe22caa0115eef4219a0a94fa6505c61038acd804e90baa8e3f70f5d5ecbebc94838c36b474c443f68a9dc1670b74f0c515551c053ff2f33573f38a13f7336b208fda700b47b284ad8742e2", 0x5a}], 0x3, &(0x7f0000000240)="9571a310f207c636a758a0a8c0144825c2935c229a5a8b4e477df7", 0x1b, 0x40088d0}, 0x44040) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup(r1, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r2, &(0x7f0000001500)='memory.pressure\x00', 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000000000070000008520000002000000d50bf8fffcffffff85100000080000000097ac24c0e2f831f03000fcffffff185100000600000000000000000000001b00000000000e7cee6f0014d08c097371af91e9e3cabd8d78e61f700be8cdd3266ff4c4f699a0e5ae5a665f8f66b10e26d3899fef18fed930cb592707cfffcbf46c32938840b37bf546e45a406e78d2bb0cc34495f6edeba706c65ad735c3198278f8240634a026230b6ed88e", @ANYRESHEX], &(0x7f0000000340)='syzkaller\x00', 0x615, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0xf, 0x7, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x4}, 0x53) 18:25:08 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xd, 0x1600}, 0x48) 18:25:08 executing program 0: socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x43, 0x1}, 0x1}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000080)="4aa5e18112fc1f4d302aa41d609c4498fa50cb5a3d2b3f4d5200ff16244bbf85a6cb6d697f34bfa01bf6d34abf2a595e2e0add4b67ed7b13bf28802bfca687f811a569952c42f1d9eb799a2a5fff873045f3d05962f4a11b4bce58c05ae3288e74703d6d40e554c73562e5b4f9445c7003dfda728529fbb67f7e451b9e9c4232e7e25a668da182bd8602b9515cb7828fbf4d537c0964ec5a70f3c2fc0926bf68b0e1eae82608474e1dab6c8b19142ba687a452b09c3c", 0xb6}, {&(0x7f0000000140)="60bc7c6edf85d31db572efb4d474391d8bda9a9f714b886e9d99d5c3e1edde6517f2d84da08ab7da4da26efd78c6846de5cae446da606e4a1eec4a72", 0x3c}, {&(0x7f0000000180)="2b4eb84c5bb3aa216c638d7eaba94fe22caa0115eef4219a0a94fa6505c61038acd804e90baa8e3f70f5d5ecbebc94838c36b474c443f68a9dc1670b74f0c515551c053ff2f33573f38a13f7336b208fda700b47b284ad8742e2", 0x5a}], 0x3, &(0x7f0000000240)="9571a310f207c636a758a0a8c0144825c2935c229a5a8b4e477df7", 0x1b, 0x40088d0}, 0x44040) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) openat$cgroup(r1, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000000000070000008520000002000000d50bf8fffcffffff85100000080000000097ac24c0e2f831f03000fcffffff185100000600000000000000000000001b00000000000e7cee6f0014d08c097371af91e9e3cabd8d78e61f700be8cdd3266ff4c4f699a0e5ae5a665f8f66b10e26d3899fef18fed930cb592707cfffcbf46c32938840b37bf546e45a406e78d2bb0cc34495f6edeba706c65ad735c3198278f8240634a026230b6ed88e", @ANYRESHEX], &(0x7f0000000340)='syzkaller\x00', 0x615, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0xf, 0x7, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x4}, 0x53) [ 2501.340283][ T1294] FAULT_INJECTION: forcing a failure. [ 2501.340283][ T1294] name failslab, interval 1, probability 0, space 0, times 0 [ 2501.354636][ T1294] CPU: 1 PID: 1294 Comm: syz-executor.5 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2501.364919][ T1294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2501.374813][ T1294] Call Trace: [ 2501.377938][ T1294] [ 2501.380736][ T1294] dump_stack_lvl+0x151/0x1b7 [ 2501.385231][ T1294] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2501.390699][ T1294] dump_stack+0x15/0x17 [ 2501.394689][ T1294] should_fail+0x3c6/0x510 [ 2501.399109][ T1294] __should_failslab+0xa4/0xe0 [ 2501.403695][ T1294] ? anon_vma_fork+0x1df/0x4e0 [ 2501.408565][ T1294] should_failslab+0x9/0x20 [ 2501.413070][ T1294] slab_pre_alloc_hook+0x37/0xd0 [ 2501.417916][ T1294] ? anon_vma_fork+0x1df/0x4e0 [ 2501.422517][ T1294] kmem_cache_alloc+0x44/0x200 [ 2501.427113][ T1294] anon_vma_fork+0x1df/0x4e0 [ 2501.431537][ T1294] copy_mm+0xa3a/0x13e0 [ 2501.435620][ T1294] ? copy_signal+0x610/0x610 [ 2501.440046][ T1294] ? __init_rwsem+0xd6/0x1c0 [ 2501.444504][ T1294] ? copy_signal+0x4e3/0x610 [ 2501.448894][ T1294] copy_process+0x12bc/0x3260 [ 2501.453417][ T1294] ? proc_fail_nth_write+0x20b/0x290 [ 2501.458534][ T1294] ? fsnotify_perm+0x6a/0x5d0 [ 2501.463053][ T1294] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2501.467993][ T1294] ? vfs_write+0x9ec/0x1110 [ 2501.472330][ T1294] kernel_clone+0x21e/0x9e0 [ 2501.476673][ T1294] ? file_end_write+0x1c0/0x1c0 [ 2501.481359][ T1294] ? create_io_thread+0x1e0/0x1e0 [ 2501.486231][ T1294] ? mutex_unlock+0xb2/0x260 [ 2501.490827][ T1294] ? __mutex_lock_slowpath+0x10/0x10 [ 2501.496001][ T1294] __x64_sys_clone+0x23f/0x290 [ 2501.500542][ T1294] ? __do_sys_vfork+0x130/0x130 [ 2501.505227][ T1294] ? ksys_write+0x260/0x2c0 [ 2501.509567][ T1294] ? debug_smp_processor_id+0x17/0x20 [ 2501.514773][ T1294] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2501.520816][ T1294] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2501.526282][ T1294] do_syscall_64+0x3d/0xb0 [ 2501.530623][ T1294] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2501.536430][ T1294] RIP: 0033:0x7fdfd1d08ae9 [ 2501.540775][ T1294] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2501.560523][ T1294] RSP: 002b:00007fdfd0a8b078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2501.568766][ T1294] RAX: ffffffffffffffda RBX: 00007fdfd1e27f80 RCX: 00007fdfd1d08ae9 [ 2501.576596][ T1294] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022001200 18:25:08 executing program 5: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 71) 18:25:08 executing program 2: socketpair(0x11, 0x0, 0x8, &(0x7f00000000c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='f2fs_map_blocks\x00'}, 0x10) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000140)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000001c0), &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000240)=[{}, {}], 0x10, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000040), 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000100)='f2fs_map_blocks\x00') r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000480), 0x8) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) 18:25:08 executing program 0: socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x43, 0x1}, 0x1}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000080)="4aa5e18112fc1f4d302aa41d609c4498fa50cb5a3d2b3f4d5200ff16244bbf85a6cb6d697f34bfa01bf6d34abf2a595e2e0add4b67ed7b13bf28802bfca687f811a569952c42f1d9eb799a2a5fff873045f3d05962f4a11b4bce58c05ae3288e74703d6d40e554c73562e5b4f9445c7003dfda728529fbb67f7e451b9e9c4232e7e25a668da182bd8602b9515cb7828fbf4d537c0964ec5a70f3c2fc0926bf68b0e1eae82608474e1dab6c8b19142ba687a452b09c3c", 0xb6}, {&(0x7f0000000140)="60bc7c6edf85d31db572efb4d474391d8bda9a9f714b886e9d99d5c3e1edde6517f2d84da08ab7da4da26efd78c6846de5cae446da606e4a1eec4a72", 0x3c}, {&(0x7f0000000180)="2b4eb84c5bb3aa216c638d7eaba94fe22caa0115eef4219a0a94fa6505c61038acd804e90baa8e3f70f5d5ecbebc94838c36b474c443f68a9dc1670b74f0c515551c053ff2f33573f38a13f7336b208fda700b47b284ad8742e2", 0x5a}], 0x3, &(0x7f0000000240)="9571a310f207c636a758a0a8c0144825c2935c229a5a8b4e477df7", 0x1b, 0x40088d0}, 0x44040) openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000000000070000008520000002000000d50bf8fffcffffff85100000080000000097ac24c0e2f831f03000fcffffff185100000600000000000000000000001b00000000000e7cee6f0014d08c097371af91e9e3cabd8d78e61f700be8cdd3266ff4c4f699a0e5ae5a665f8f66b10e26d3899fef18fed930cb592707cfffcbf46c32938840b37bf546e45a406e78d2bb0cc34495f6edeba706c65ad735c3198278f8240634a026230b6ed88e", @ANYRESHEX], &(0x7f0000000340)='syzkaller\x00', 0x615, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0xf, 0x7, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x4}, 0x53) 18:25:08 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xd, 0x1700}, 0x48) 18:25:08 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1c, 0x2, 0x3, 0xbbbf, 0x1000, 0xffffffffffffffff, 0x7832, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x5}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) (async) close(r1) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1c, 0x2, 0x3, 0xbbbf, 0x1000, 0xffffffffffffffff, 0x7832, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x5}, 0x48) (async) 18:25:08 executing program 1: r0 = syz_clone(0x22023200, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)='/\xc5}\')\'#\x00'}, 0x30) [ 2501.584386][ T1294] RBP: 00007fdfd0a8b120 R08: 0000000000000000 R09: 0000000000000000 [ 2501.592194][ T1294] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2501.600091][ T1294] R13: 000000000000000b R14: 00007fdfd1e27f80 R15: 00007fff62717c48 [ 2501.607909][ T1294] 18:25:08 executing program 0: socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x43, 0x1}, 0x1}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000080)="4aa5e18112fc1f4d302aa41d609c4498fa50cb5a3d2b3f4d5200ff16244bbf85a6cb6d697f34bfa01bf6d34abf2a595e2e0add4b67ed7b13bf28802bfca687f811a569952c42f1d9eb799a2a5fff873045f3d05962f4a11b4bce58c05ae3288e74703d6d40e554c73562e5b4f9445c7003dfda728529fbb67f7e451b9e9c4232e7e25a668da182bd8602b9515cb7828fbf4d537c0964ec5a70f3c2fc0926bf68b0e1eae82608474e1dab6c8b19142ba687a452b09c3c", 0xb6}, {&(0x7f0000000140)="60bc7c6edf85d31db572efb4d474391d8bda9a9f714b886e9d99d5c3e1edde6517f2d84da08ab7da4da26efd78c6846de5cae446da606e4a1eec4a72", 0x3c}, {&(0x7f0000000180)="2b4eb84c5bb3aa216c638d7eaba94fe22caa0115eef4219a0a94fa6505c61038acd804e90baa8e3f70f5d5ecbebc94838c36b474c443f68a9dc1670b74f0c515551c053ff2f33573f38a13f7336b208fda700b47b284ad8742e2", 0x5a}], 0x3, &(0x7f0000000240)="9571a310f207c636a758a0a8c0144825c2935c229a5a8b4e477df7", 0x1b, 0x40088d0}, 0x44040) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000000000070000008520000002000000d50bf8fffcffffff85100000080000000097ac24c0e2f831f03000fcffffff185100000600000000000000000000001b00000000000e7cee6f0014d08c097371af91e9e3cabd8d78e61f700be8cdd3266ff4c4f699a0e5ae5a665f8f66b10e26d3899fef18fed930cb592707cfffcbf46c32938840b37bf546e45a406e78d2bb0cc34495f6edeba706c65ad735c3198278f8240634a026230b6ed88e", @ANYRESHEX], &(0x7f0000000340)='syzkaller\x00', 0x615, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0xf, 0x7, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x4}, 0x53) 18:25:08 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xd, 0x1800}, 0x48) 18:25:08 executing program 0: socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000000000070000008520000002000000d50bf8fffcffffff85100000080000000097ac24c0e2f831f03000fcffffff185100000600000000000000000000001b00000000000e7cee6f0014d08c097371af91e9e3cabd8d78e61f700be8cdd3266ff4c4f699a0e5ae5a665f8f66b10e26d3899fef18fed930cb592707cfffcbf46c32938840b37bf546e45a406e78d2bb0cc34495f6edeba706c65ad735c3198278f8240634a026230b6ed88e", @ANYRESHEX], &(0x7f0000000340)='syzkaller\x00', 0x615, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0xf, 0x7, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x4}, 0x53) [ 2501.637065][ T1316] FAULT_INJECTION: forcing a failure. [ 2501.637065][ T1316] name failslab, interval 1, probability 0, space 0, times 0 [ 2501.651140][ T1316] CPU: 1 PID: 1316 Comm: syz-executor.5 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2501.661246][ T1316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2501.671138][ T1316] Call Trace: [ 2501.674264][ T1316] [ 2501.677038][ T1316] dump_stack_lvl+0x151/0x1b7 18:25:09 executing program 0: socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000000000070000008520000002000000d50bf8fffcffffff85100000080000000097ac24c0e2f831f03000fcffffff185100000600000000000000000000001b00000000000e7cee6f0014d08c097371af91e9e3cabd8d78e61f700be8cdd3266ff4c4f699a0e5ae5a665f8f66b10e26d3899fef18fed930cb592707cfffcbf46c32938840b37bf546e45a406e78d2bb0cc34495f6edeba706c65ad735c3198278f8240634a026230b6ed88e", @ANYRESHEX], &(0x7f0000000340)='syzkaller\x00', 0x615, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0xf, 0x7, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x4}, 0x53) 18:25:09 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xd, 0x1900}, 0x48) 18:25:09 executing program 0: socketpair(0x10, 0x0, 0x8, &(0x7f0000000040)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000000000070000008520000002000000d50bf8fffcffffff85100000080000000097ac24c0e2f831f03000fcffffff185100000600000000000000000000001b00000000000e7cee6f0014d08c097371af91e9e3cabd8d78e61f700be8cdd3266ff4c4f699a0e5ae5a665f8f66b10e26d3899fef18fed930cb592707cfffcbf46c32938840b37bf546e45a406e78d2bb0cc34495f6edeba706c65ad735c3198278f8240634a026230b6ed88e", @ANYRESHEX], &(0x7f0000000340)='syzkaller\x00', 0x615, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0xf, 0x7, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x4}, 0x53) [ 2501.681553][ T1316] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2501.687633][ T1316] dump_stack+0x15/0x17 [ 2501.691622][ T1316] should_fail+0x3c6/0x510 [ 2501.695973][ T1316] __should_failslab+0xa4/0xe0 [ 2501.700559][ T1316] ? anon_vma_fork+0xf7/0x4e0 [ 2501.705075][ T1316] should_failslab+0x9/0x20 [ 2501.709431][ T1316] slab_pre_alloc_hook+0x37/0xd0 [ 2501.714185][ T1316] ? anon_vma_fork+0xf7/0x4e0 [ 2501.718704][ T1316] kmem_cache_alloc+0x44/0x200 [ 2501.723310][ T1316] anon_vma_fork+0xf7/0x4e0 [ 2501.727641][ T1316] ? anon_vma_name+0x43/0x70 [ 2501.732065][ T1316] ? vm_area_dup+0x17a/0x230 [ 2501.736496][ T1316] copy_mm+0xa3a/0x13e0 [ 2501.740489][ T1316] ? copy_signal+0x610/0x610 [ 2501.744912][ T1316] ? __init_rwsem+0xd6/0x1c0 [ 2501.749335][ T1316] ? copy_signal+0x4e3/0x610 [ 2501.753885][ T1316] copy_process+0x12bc/0x3260 [ 2501.758405][ T1316] ? proc_fail_nth_write+0x20b/0x290 [ 2501.763523][ T1316] ? fsnotify_perm+0x6a/0x5d0 [ 2501.768033][ T1316] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2501.773258][ T1316] ? vfs_write+0x9ec/0x1110 [ 2501.777596][ T1316] kernel_clone+0x21e/0x9e0 [ 2501.781958][ T1316] ? file_end_write+0x1c0/0x1c0 [ 2501.786621][ T1316] ? create_io_thread+0x1e0/0x1e0 [ 2501.791483][ T1316] ? mutex_unlock+0xb2/0x260 [ 2501.795909][ T1316] ? __mutex_lock_slowpath+0x10/0x10 [ 2501.801030][ T1316] __x64_sys_clone+0x23f/0x290 [ 2501.805634][ T1316] ? __do_sys_vfork+0x130/0x130 [ 2501.810591][ T1316] ? ksys_write+0x260/0x2c0 [ 2501.814919][ T1316] ? debug_smp_processor_id+0x17/0x20 [ 2501.820123][ T1316] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2501.826023][ T1316] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2501.831493][ T1316] do_syscall_64+0x3d/0xb0 [ 2501.835744][ T1316] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2501.841473][ T1316] RIP: 0033:0x7fdfd1d08ae9 [ 2501.845728][ T1316] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2501.865169][ T1316] RSP: 002b:00007fdfd0a8b078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2501.873499][ T1316] RAX: ffffffffffffffda RBX: 00007fdfd1e27f80 RCX: 00007fdfd1d08ae9 [ 2501.881309][ T1316] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022001200 [ 2501.889129][ T1316] RBP: 00007fdfd0a8b120 R08: 0000000000000000 R09: 0000000000000000 [ 2501.896931][ T1316] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2501.904752][ T1316] R13: 000000000000000b R14: 00007fdfd1e27f80 R15: 00007fff62717c48 [ 2501.912662][ T1316] [ 2501.915683][ T1316] ================================================================== [ 2501.923569][ T1316] BUG: KASAN: double-free or invalid-free in kfree+0xc8/0x220 [ 2501.930867][ T1316] [ 2501.933027][ T1316] CPU: 0 PID: 1316 Comm: syz-executor.5 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2501.943102][ T1316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2501.952997][ T1316] Call Trace: [ 2501.956118][ T1316] [ 2501.958892][ T1316] dump_stack_lvl+0x151/0x1b7 [ 2501.963406][ T1316] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2501.968869][ T1316] ? __wake_up_klogd+0xd5/0x110 [ 2501.973555][ T1316] ? panic+0x751/0x751 [ 2501.977459][ T1316] ? kfree+0xc8/0x220 [ 2501.981287][ T1316] print_address_description+0x87/0x3b0 [ 2501.986665][ T1316] ? kfree+0xc8/0x220 [ 2501.990479][ T1316] ? kfree+0xc8/0x220 [ 2501.994297][ T1316] kasan_report_invalid_free+0x6b/0xa0 [ 2501.999596][ T1316] ____kasan_slab_free+0x13e/0x160 [ 2502.004545][ T1316] __kasan_slab_free+0x11/0x20 [ 2502.009146][ T1316] slab_free_freelist_hook+0xbd/0x190 [ 2502.014358][ T1316] ? anon_vma_name_free+0x15/0x20 [ 2502.019215][ T1316] kfree+0xc8/0x220 [ 2502.022857][ T1316] anon_vma_name_free+0x15/0x20 [ 2502.027543][ T1316] vm_area_free_no_check+0xa6/0x130 [ 2502.032577][ T1316] copy_mm+0xefb/0x13e0 [ 2502.036572][ T1316] ? copy_signal+0x610/0x610 [ 2502.040993][ T1316] ? __init_rwsem+0xd6/0x1c0 [ 2502.045424][ T1316] ? copy_signal+0x4e3/0x610 [ 2502.049847][ T1316] copy_process+0x12bc/0x3260 [ 2502.054359][ T1316] ? proc_fail_nth_write+0x20b/0x290 [ 2502.059480][ T1316] ? fsnotify_perm+0x6a/0x5d0 [ 2502.063997][ T1316] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2502.069060][ T1316] ? vfs_write+0x9ec/0x1110 [ 2502.073397][ T1316] kernel_clone+0x21e/0x9e0 [ 2502.077734][ T1316] ? file_end_write+0x1c0/0x1c0 [ 2502.082419][ T1316] ? create_io_thread+0x1e0/0x1e0 [ 2502.087278][ T1316] ? mutex_unlock+0xb2/0x260 [ 2502.091718][ T1316] ? __mutex_lock_slowpath+0x10/0x10 [ 2502.096827][ T1316] __x64_sys_clone+0x23f/0x290 [ 2502.101425][ T1316] ? __do_sys_vfork+0x130/0x130 [ 2502.106112][ T1316] ? ksys_write+0x260/0x2c0 [ 2502.110452][ T1316] ? debug_smp_processor_id+0x17/0x20 [ 2502.115659][ T1316] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2502.121560][ T1316] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2502.127031][ T1316] do_syscall_64+0x3d/0xb0 [ 2502.131282][ T1316] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2502.137007][ T1316] RIP: 0033:0x7fdfd1d08ae9 [ 2502.141266][ T1316] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2502.161756][ T1316] RSP: 002b:00007fdfd0a8b078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2502.171553][ T1316] RAX: ffffffffffffffda RBX: 00007fdfd1e27f80 RCX: 00007fdfd1d08ae9 [ 2502.179820][ T1316] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022001200 [ 2502.187612][ T1316] RBP: 00007fdfd0a8b120 R08: 0000000000000000 R09: 0000000000000000 [ 2502.195510][ T1316] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2502.203408][ T1316] R13: 000000000000000b R14: 00007fdfd1e27f80 R15: 00007fff62717c48 [ 2502.211225][ T1316] [ 2502.214111][ T1316] [ 2502.216257][ T1316] Allocated by task 26154: [ 2502.220506][ T1316] __kasan_slab_alloc+0xb1/0xe0 [ 2502.225192][ T1316] slab_post_alloc_hook+0x53/0x2c0 [ 2502.230138][ T1316] kmem_cache_alloc+0xf5/0x200 [ 2502.234737][ T1316] vm_area_alloc+0x24/0x130 [ 2502.239081][ T1316] mmap_region+0xb5d/0x1b60 [ 2502.243416][ T1316] do_mmap+0x776/0xe50 [ 2502.247325][ T1316] vm_mmap_pgoff+0x1dd/0x450 [ 2502.251750][ T1316] vm_mmap+0x8d/0xb0 [ 2502.255483][ T1316] elf_map+0x19c/0x240 [ 2502.259388][ T1316] load_elf_binary+0xfe0/0x2750 [ 2502.264073][ T1316] bprm_execve+0x7ae/0x14a0 [ 2502.268413][ T1316] do_execveat_common+0x565/0x710 [ 2502.273285][ T1316] __x64_sys_execve+0x92/0xb0 [ 2502.277792][ T1316] do_syscall_64+0x3d/0xb0 [ 2502.282042][ T1316] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2502.287770][ T1316] [ 2502.289947][ T1316] Last potentially related work creation: [ 2502.295494][ T1316] kasan_save_stack+0x3b/0x60 [ 2502.300027][ T1316] __kasan_record_aux_stack+0xd3/0xf0 [ 2502.305214][ T1316] kasan_record_aux_stack_noalloc+0xb/0x10 [ 2502.310854][ T1316] call_rcu+0x133/0x12a0 [ 2502.314934][ T1316] vm_area_free_no_check+0xff/0x130 [ 2502.319972][ T1316] vm_area_free+0x53/0x60 [ 2502.324145][ T1316] exit_mmap+0x50d/0x6f0 [ 2502.328217][ T1316] __mmput+0x95/0x310 [ 2502.332039][ T1316] mmput+0x5b/0x170 [ 2502.335680][ T1316] copy_process+0x2766/0x3260 [ 2502.340194][ T1316] kernel_clone+0x21e/0x9e0 [ 2502.344531][ T1316] __x64_sys_clone+0x23f/0x290 [ 2502.349130][ T1316] do_syscall_64+0x3d/0xb0 [ 2502.353390][ T1316] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2502.359116][ T1316] [ 2502.361284][ T1316] The buggy address belongs to the object at ffff88812d6b3000 [ 2502.361284][ T1316] which belongs to the cache vm_area_struct of size 232 [ 2502.375433][ T1316] The buggy address is located 88 bytes inside of [ 2502.375433][ T1316] 232-byte region [ffff88812d6b3000, ffff88812d6b30e8) [ 2502.388458][ T1316] The buggy address belongs to the page: [ 2502.393927][ T1316] page:ffffea0004b5acc0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12d6b3 [ 2502.403985][ T1316] flags: 0x4000000000000200(slab|zone=1) [ 2502.409465][ T1316] raw: 4000000000000200 0000000000000000 0000000200000001 ffff8881001bdb00 [ 2502.417889][ T1316] raw: 0000000000000000 00000000000d000d 00000001ffffffff 0000000000000000 [ 2502.426299][ T1316] page dumped because: kasan: bad access detected [ 2502.432541][ T1316] page_owner tracks the page as allocated [ 2502.438098][ T1316] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 25516, ts 1315170675468, free_ts 1314870558742 [ 2502.454325][ T1316] post_alloc_hook+0x1a3/0x1b0 [ 2502.458927][ T1316] prep_new_page+0x1b/0x110 [ 2502.463390][ T1316] get_page_from_freelist+0x3550/0x35d0 [ 2502.468986][ T1316] __alloc_pages+0x206/0x5e0 [ 2502.473372][ T1316] new_slab+0x9a/0x4e0 [ 2502.477296][ T1316] ___slab_alloc+0x39e/0x830 [ 2502.481705][ T1316] __slab_alloc+0x4a/0x90 [ 2502.485873][ T1316] kmem_cache_alloc+0x134/0x200 [ 2502.490560][ T1316] vm_area_dup+0x26/0x230 [ 2502.494723][ T1316] copy_mm+0x9a1/0x13e0 [ 2502.498715][ T1316] copy_process+0x12bc/0x3260 [ 2502.503236][ T1316] kernel_clone+0x21e/0x9e0 [ 2502.507566][ T1316] __x64_sys_clone+0x23f/0x290 [ 2502.512169][ T1316] do_syscall_64+0x3d/0xb0 [ 2502.516422][ T1316] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2502.522149][ T1316] page last free stack trace: [ 2502.526666][ T1316] free_unref_page_prepare+0x7c8/0x7d0 [ 2502.531961][ T1316] free_unref_page+0xe6/0x730 [ 2502.536470][ T1316] __free_pages+0x61/0xf0 [ 2502.540636][ T1316] __free_slab+0xec/0x1d0 [ 2502.544801][ T1316] __unfreeze_partials+0x165/0x1a0 [ 2502.549748][ T1316] put_cpu_partial+0xc4/0x120 [ 2502.554261][ T1316] __slab_free+0x1c8/0x290 [ 2502.558521][ T1316] ___cache_free+0x109/0x120 [ 2502.562943][ T1316] qlink_free+0x4d/0x90 [ 2502.566939][ T1316] qlist_free_all+0x44/0xb0 [ 2502.571272][ T1316] kasan_quarantine_reduce+0x15a/0x180 [ 2502.576566][ T1316] __kasan_slab_alloc+0x2f/0xe0 [ 2502.581281][ T1316] slab_post_alloc_hook+0x53/0x2c0 [ 2502.586201][ T1316] kmem_cache_alloc+0xf5/0x200 [ 2502.590806][ T1316] jbd2__journal_start+0x150/0x710 [ 2502.595756][ T1316] __ext4_journal_start_sb+0xfa/0x2c0 [ 2502.600959][ T1316] [ 2502.603127][ T1316] Memory state around the buggy address: [ 2502.608601][ T1316] ffff88812d6b2f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2502.616496][ T1316] ffff88812d6b2f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2502.624393][ T1316] >ffff88812d6b3000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2502.632288][ T1316] ^ 18:25:09 executing program 5: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 72) 18:25:09 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xd, 0x1a00}, 0x48) 18:25:09 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000000000070000008520000002000000d50bf8fffcffffff85100000080000000097ac24c0e2f831f03000fcffffff185100000600000000000000000000001b00000000000e7cee6f0014d08c097371af91e9e3cabd8d78e61f700be8cdd3266ff4c4f699a0e5ae5a665f8f66b10e26d3899fef18fed930cb592707cfffcbf46c32938840b37bf546e45a406e78d2bb0cc34495f6edeba706c65ad735c3198278f8240634a026230b6ed88e", @ANYRESHEX], &(0x7f0000000340)='syzkaller\x00', 0x615, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0xf, 0x7, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x4}, 0x53) 18:25:09 executing program 2: socketpair(0x11, 0x0, 0x8, &(0x7f00000000c0)) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='f2fs_map_blocks\x00'}, 0x10) (async) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000140)) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000001c0), &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000240)=[{}, {}], 0x10, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) (async, rerun: 64) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000040), 0x10) (rerun: 64) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000100)='f2fs_map_blocks\x00') r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000480), 0x8) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) 18:25:09 executing program 1: syz_clone(0x22001200, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = gettid() gettid() syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/ipc\x00') 18:25:09 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f0000002640)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x87}, 0x4}}, 0x10, &(0x7f00000024c0)=[{&(0x7f0000000100)="4c091c80ea39592f8e94b6b960f00fdac06e0a697948d14dc013dd08ba77032b19d82d07e4fcb5bb284b30c3eea09426d8127ebc6e62498111aa235b447f138800162d0fcede9bac1fd2c97fc07decdbd29c6cc232fd3725304f4a07be8102de01b4f110db45da90fbc2c6c3938056062a051cb40b7d82971853407adfc6695ca93a5fb2", 0x84}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="aca7e3c007cc9042f8d0db7673501ad0936bde279ce6b0fff737c34e2d74786f033174c8f457255a96c405d4fc6cdaee6b7d2e40e83bbeb85c1b34769df113dacbc11095658bf96db25b2384650ad32df6da3a5921486dedb15076855b11f2a7732550938a730f971cdc849a85594e957e22db891fd10732705dc9152ff0c886f71a95c80199c70d47cc42c4012a27ac019a7db872c2580cb829205ce999136ea1e305c6ac4c24984cfdddfd2b2b97f29873c016db148a4b96b188a0d2b0e6f578c185c12fa57154233bb78fc12e365117ea0a40c60b504b5ac07242e4a2c9986762", 0xe2}, {&(0x7f0000000040)="78d0f7f757fd47509f8891134f893f2f0c221ce97977264efec2bf99914bf9", 0x1f}, {&(0x7f0000000080)="213a88f71eb78ae49ffec754c3928e27dea94999f02ad87806bc0a62c76bdfd25152d5eac46eeb241100f1174f4c4e76dc41a9", 0x33}, {&(0x7f00000014c0)="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", 0x1000}, {&(0x7f00000001c0)="52728b526fb5657444d71e11ab78e5fcdec4ee34cf63a91c87471fa01878fd63861c1355a3ddf04543019b193ba88bcbececfcb2a2840b78b7fcd0571ef0851cd0cd2f1137a4fb6402f6acd58cfd87dbf74a97dfbac880d5c44dfda550972d2a7d2756de57e003c806af5b3aa957da90a34b03a56bc6eafda2ee98b946db58b8465a63fadfc7e2fc3026b20c37d0cee8ea474bc84995032a7d4131f4cc56", 0x9e}], 0x7, &(0x7f0000002540)="44ba6979d176d6f198b05345e5ac06768b70c87922524935fb538ce68d716f191f94a0ae21732abd3e6e166f556916a400f8cd9ac854fb6cafd09d93d4f1e278a6bb5a32b1fb85a37e572f5980317f841fdadd709636a41e64226591ca25ef6eda2ed4ef732ed460deb0dfef21aef78d813c4c6403720d5fd2d5ec892401614cb65822181b7bfd8576e37b0498a8a79c0b594a329aeab038090c210630b6b788436e8ddbb5c0669f73deeb64745c7bb9fcf667bbb99f2ff66a38402bf01d12c7c19ef8793198193eea6c2a8605c3fedddbc75ae4f4d283", 0xd7, 0x20000011}, 0x24048840) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/245, 0xf5}, 0x0) close(r1) 18:25:10 executing program 0: bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 18:25:10 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xd, 0x1b00}, 0x48) 18:25:10 executing program 2: socketpair(0x11, 0x0, 0x8, &(0x7f00000000c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='f2fs_map_blocks\x00'}, 0x10) (async) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000140)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000001c0), &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000240)=[{}, {}], 0x10, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000040), 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000100)='f2fs_map_blocks\x00') r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000480), 0x8) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) (rerun: 32) [ 2502.639068][ T1316] ffff88812d6b3080: 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc [ 2502.646980][ T1316] ffff88812d6b3100: fc fc fc fc fc 00 00 00 00 00 00 00 00 00 00 00 [ 2502.654858][ T1316] ================================================================== [ 2502.662753][ T1316] Disabling lock debugging due to kernel taint [ 2502.722131][ T1356] general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN [ 2502.733698][ T1356] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 2502.741942][ T1356] CPU: 1 PID: 1356 Comm: syz-executor.5 Tainted: G B 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2502.753390][ T1356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2502.763291][ T1356] RIP: 0010:__rb_insert_augmented+0x91/0x610 [ 2502.769105][ T1356] Code: 00 74 08 4c 89 ef e8 7e b8 2b ff 49 8b 45 00 a8 01 0f 85 60 05 00 00 48 89 5d a0 48 89 45 c0 48 8d 58 08 49 89 de 49 c1 ee 03 <43> 80 3c 26 00 74 08 48 89 df e8 50 b8 2b ff 48 89 d8 48 8b 1b 4c [ 2502.788556][ T1356] RSP: 0018:ffffc900028178f8 EFLAGS: 00010202 [ 2502.794442][ T1356] RAX: 0000000000000000 RBX: 0000000000000008 RCX: dffffc0000000000 [ 2502.802256][ T1356] RDX: ffffffff81a4c130 RSI: ffff88810be62c30 RDI: ffff88811aa812a8 [ 2502.810069][ T1356] RBP: ffffc90002817960 R08: dffffc0000000000 R09: ffff88811aa812b0 [ 2502.817878][ T1356] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 2502.825688][ T1356] R13: ffff88812d6b3058 R14: 0000000000000001 R15: ffff88812de7e3d0 [ 2502.833504][ T1356] FS: 00007fdfd0a8b6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 2502.842265][ T1356] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2502.848688][ T1356] CR2: 00007fdfd0a8aff8 CR3: 000000010ef66000 CR4: 00000000003506a0 [ 2502.856503][ T1356] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2502.864311][ T1356] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2502.872127][ T1356] Call Trace: [ 2502.875248][ T1356] [ 2502.878025][ T1356] ? __die_body+0x62/0xb0 [ 2502.882200][ T1356] ? die_addr+0x9f/0xd0 [ 2502.886184][ T1356] ? exc_general_protection+0x311/0x4b0 [ 2502.891576][ T1356] ? asm_exc_general_protection+0x27/0x30 [ 2502.897133][ T1356] ? anon_vma_interval_tree_iter_next+0x390/0x390 [ 2502.903374][ T1356] ? __rb_insert_augmented+0x91/0x610 [ 2502.908577][ T1356] ? anon_vma_interval_tree_iter_next+0x390/0x390 [ 2502.914824][ T1356] vma_interval_tree_insert_after+0x2be/0x2d0 [ 2502.921035][ T1356] copy_mm+0xba2/0x13e0 [ 2502.925149][ T1356] ? copy_signal+0x610/0x610 [ 2502.929567][ T1356] ? __init_rwsem+0xd6/0x1c0 [ 2502.934013][ T1356] ? copy_signal+0x4e3/0x610 [ 2502.938423][ T1356] copy_process+0x12bc/0x3260 [ 2502.942934][ T1356] ? proc_fail_nth_write+0x20b/0x290 [ 2502.948054][ T1356] ? fsnotify_perm+0x6a/0x5d0 [ 2502.952565][ T1356] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2502.957510][ T1356] ? vfs_write+0x9ec/0x1110 [ 2502.961854][ T1356] kernel_clone+0x21e/0x9e0 [ 2502.966192][ T1356] ? file_end_write+0x1c0/0x1c0 [ 2502.970886][ T1356] ? create_io_thread+0x1e0/0x1e0 [ 2502.975741][ T1356] ? mutex_unlock+0xb2/0x260 [ 2502.980164][ T1356] ? __mutex_lock_slowpath+0x10/0x10 [ 2502.985289][ T1356] __x64_sys_clone+0x23f/0x290 [ 2502.989900][ T1356] ? __do_sys_vfork+0x130/0x130 [ 2502.994577][ T1356] ? ksys_write+0x260/0x2c0 [ 2502.998915][ T1356] ? debug_smp_processor_id+0x17/0x20 [ 2503.004306][ T1356] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2503.010295][ T1356] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2503.015763][ T1356] do_syscall_64+0x3d/0xb0 [ 2503.020049][ T1356] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2503.025747][ T1356] RIP: 0033:0x7fdfd1d08ae9 [ 2503.030173][ T1356] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2503.049610][ T1356] RSP: 002b:00007fdfd0a8b078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2503.057857][ T1356] RAX: ffffffffffffffda RBX: 00007fdfd1e27f80 RCX: 00007fdfd1d08ae9 [ 2503.065667][ T1356] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022001200 [ 2503.073501][ T1356] RBP: 00007fdfd0a8b120 R08: 0000000000000000 R09: 0000000000000000 [ 2503.081291][ T1356] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2503.089108][ T1356] R13: 000000000000000b R14: 00007fdfd1e27f80 R15: 00007fff62717c48 [ 2503.096920][ T1356] [ 2503.099776][ T1356] Modules linked in: [ 2503.103674][ T1356] ---[ end trace 5efd4facddd48a37 ]--- [ 2503.109020][ T1356] RIP: 0010:__rb_insert_augmented+0x91/0x610 [ 2503.115150][ T1356] Code: 00 74 08 4c 89 ef e8 7e b8 2b ff 49 8b 45 00 a8 01 0f 85 60 05 00 00 48 89 5d a0 48 89 45 c0 48 8d 58 08 49 89 de 49 c1 ee 03 <43> 80 3c 26 00 74 08 48 89 df e8 50 b8 2b ff 48 89 d8 48 8b 1b 4c [ 2503.134834][ T1356] RSP: 0018:ffffc900028178f8 EFLAGS: 00010202 [ 2503.140825][ T1356] RAX: 0000000000000000 RBX: 0000000000000008 RCX: dffffc0000000000 [ 2503.148591][ T1356] RDX: ffffffff81a4c130 RSI: ffff88810be62c30 RDI: ffff88811aa812a8 [ 2503.156734][ T1356] RBP: ffffc90002817960 R08: dffffc0000000000 R09: ffff88811aa812b0 [ 2503.164601][ T1356] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 2503.172397][ T1356] R13: ffff88812d6b3058 R14: 0000000000000001 R15: ffff88812de7e3d0 [ 2503.180214][ T1356] FS: 00007fdfd0a8b6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 2503.188951][ T1356] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2503.195395][ T1356] CR2: 00005555571b4430 CR3: 000000010ef66000 CR4: 00000000003506b0 [ 2503.203224][ T1356] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2503.211011][ T1356] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2503.218836][ T1356] Kernel panic - not syncing: Fatal exception [ 2503.224731][ T1356] Kernel Offset: disabled [ 2503.228850][ T1356] Rebooting in 86400 seconds..