ead$FUSE(r2, &(0x7f0000008240)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) getresgid(&(0x7f0000000540)=0x0, &(0x7f0000000580), &(0x7f00000005c0)) statx(0xffffffffffffffff, &(0x7f0000000740)='./file0\x00', 0x4000, 0x2, &(0x7f0000000780)) (async) statx(0xffffffffffffffff, &(0x7f0000000740)='./file0\x00', 0x4000, 0x2, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000880)={{{@in=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@private2}}, &(0x7f0000000980)=0xe8) r14 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r14, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@remote, @in=@local}}, {{@in6=@initdev}, 0x0, @in6=@private0}}, &(0x7f0000000640)=0xe8) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r14, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@private0}}, &(0x7f0000000640)=0xe8) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000500)=@sr0, r15, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r14, 0xc0286405, &(0x7f0000000e00)={0x0, 0x8, {r10}, {r12}, 0x8, 0x2}) syz_fuse_handle_req(r2, &(0x7f0000006240)="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", 0x2000, &(0x7f0000000d80)={&(0x7f00000001c0)={0x50, 0xffffffffffffffda, 0xfffffffffffff001, {0x7, 0x27, 0x7fffffff, 0xa900c0, 0x3, 0xfffd, 0x1, 0x3}}, &(0x7f0000000240)={0x18, 0xfffffffffffffff5, 0x1, {0x80}}, &(0x7f0000000280)={0x18, 0x0, 0x0, {0x80000000}}, &(0x7f00000002c0)={0x18, 0xffffffffffffffda, 0x6, {0x8}}, &(0x7f0000000300)={0x18, 0x0, 0x1, {0x7}}, &(0x7f0000000340)={0x28, 0x0, 0x1, {{0xc6b, 0x9, 0x1, r8}}}, &(0x7f0000000380)={0x60, 0x0, 0xc225, {{0xffff, 0x3, 0x401, 0x284a, 0x2, 0x8b6a, 0x568, 0x4}}}, &(0x7f0000000400)={0x18, 0x0, 0x7f, {0x81}}, &(0x7f0000000440)={0x11, 0xfffffffffffffffe, 0x25ca16ce, {'\x00'}}, &(0x7f0000000480)={0x20, 0x0, 0x100, {0x0, 0x14}}, &(0x7f00000004c0)={0x78, 0xfffffffffffffffe, 0x41, {0x102c, 0x2, 0x0, {0x2, 0x100000000, 0x1, 0x7, 0x3, 0x101, 0xba94, 0xdb7d, 0x4, 0x6000, 0xffff, r16, r9, 0x800, 0x7}}}, &(0x7f0000000600)={0x90, 0x0, 0x5, {0x6, 0x2, 0x100000001, 0x101, 0xfffffffa, 0x1000, {0x3, 0x7ff, 0x7, 0xd9b, 0x5, 0x8, 0x2, 0x80, 0x5, 0x6000, 0x80000001, r6, r11, 0x6, 0x7}}}, &(0x7f00000006c0)={0x50, 0x0, 0xc3, [{0x4, 0x7, 0x1, 0xb66, '\x00'}, {0x6, 0x8, 0x1, 0x10000, '\x00'}]}, &(0x7f0000000e80)=ANY=[@ANYBLOB="a80200000000000000010000000000000200000000000000020000000000000020000000000000000000000000000000040000000100000000000000000000000000000000000004fcffffffffffffff39a8000000000000000800000000000007000000000000000080000000000000030000000040000004000000", @ANYRES32=r12, @ANYRES32=r7, @ANYBLOB="0004000007000000000000000300000000000000fdffffffffffffff02000000070000001d7d00000000000002000000000000000300000000000000008000000000000013000000000000000000010000000000050000000000000007000000000000000900000000000000000000000000000008000000000000000900000000000000000a0000ffffffff0000ffff0080000004000000", @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="f7ffffffff7f000000000000000000000000000004000000000000000b000000030000002f6465762f617564696f0000000000000000000000000000feffffffffffffff090000000000000001000000000000001f000000410000000300000000000000ff07000000000000090000000000000000080000000000000100000000000000bc00000000000000ff0f0000fe0000000300000000c0000072cc0000", @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="0030000009000000000000000300000000000000050000000000000009000000bc0700002f6465762f7070700000000000000000040000000000000000000000000000000200000000000000000800000000000005000000000001000500000000000000050000000000000002000000000000000d00000000000000060000000000000000010000000000000400000081000000090000000010000001000000", @ANYRES32=r13, @ANYRES32=r4, @ANYBLOB="02000000ffffffff00000000060020cd000000000200a600000000010000000000000000002f64bd268c1675736500000000000000eb493aa04ee33973609429944bc1fa6cd5bbafcb1f2340701f32c6a36c1a"], &(0x7f0000000c80)={0xa0, 0x0, 0x9, {{0x5, 0x2, 0x7, 0x80000000, 0x0, 0x80000000, {0x6, 0x7fff, 0x1, 0x1, 0xffffffff, 0xcb, 0x0, 0x19, 0xb903, 0x2000, 0x1, r15, r4, 0x0, 0x4000}}, {0x0, 0x4}}}, &(0x7f0000000d40)={0x20, 0x0, 0x8, {0xff, 0x0, 0x5, 0x29}}}) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0xfffffc84, 0x0, r5, {0xfffd}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) r17 = dup(0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000e40), r17) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) 06:05:07 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r4, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3cd, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) 06:05:07 executing program 5: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r4, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3eb, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) 06:05:07 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0x80045010, &(0x7f0000000080)=0xe3) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) 06:05:07 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) ioctl$int_in(r3, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r3, 0xa, 0x12) (async) poll(&(0x7f0000b2c000)=[{r4}], 0x1, 0xfffffffffffffff8) dup2(r3, r4) (async) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) fcntl$setown(r4, 0x8, r5) (async) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000000)=0x6) (async) tkill(r1, 0x14) 06:05:07 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000000)=0x4) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) 06:05:08 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0x80045017, &(0x7f0000000080)=0xe3) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) 06:05:08 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) 06:05:08 executing program 5: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r4, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3ec, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) 06:05:08 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) (async) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000000)=0x4) (async) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) 06:05:09 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) 06:05:12 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) 06:05:12 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0x80086301, &(0x7f0000000080)=0xe3) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) 06:05:12 executing program 5: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r4, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3ed, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) 06:05:12 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x186502, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, r1, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) r4 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r4}, 0x90) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000001c0), 0x0) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000ac0)) read$dsp(r4, &(0x7f0000000100)=""/120, 0x78) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) 06:05:12 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) r1 = gettid() ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) prlimit64(r1, 0xe, &(0x7f0000000000)={0x7ff, 0x4}, 0x0) (async) r2 = getpid() getpgid(r2) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000b80)) (async) tkill(r2, 0x1d) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) (async) ioctl$int_in(r3, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r4}], 0x1, 0xfffffffffffffff8) dup2(r3, r4) fcntl$setown(r4, 0x8, r1) (async) tkill(r1, 0x14) 06:05:12 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x186502, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() (async) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x3, r1, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r4}, 0x90) (async) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000001c0), 0x0) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000ac0)) (async, rerun: 32) read$dsp(r4, &(0x7f0000000100)=""/120, 0x78) (async, rerun: 32) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) (async, rerun: 32) fcntl$setsig(r2, 0xa, 0x12) (rerun: 32) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) (async, rerun: 32) dup2(r2, r3) (async, rerun: 32) fcntl$setown(r3, 0x8, r1) (async, rerun: 64) tkill(r1, 0x14) (rerun: 64) 06:05:12 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x186502, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, r1, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) r4 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r4}, 0x90) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000001c0), 0x0) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000ac0)) read$dsp(r4, &(0x7f0000000100)=""/120, 0x78) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x186502, 0x0) (async) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) gettid() (async) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x3, r1, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) (async) syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r4}, 0x90) (async) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000001c0), 0x0) (async) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000ac0)) (async) read$dsp(r4, &(0x7f0000000100)=""/120, 0x78) (async) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) (async) fcntl$setsig(r2, 0xa, 0x12) (async) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) (async) dup2(r2, r3) (async) fcntl$setown(r3, 0x8, r1) (async) tkill(r1, 0x14) (async) 06:05:13 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 1) 06:05:13 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) r4 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r4}, 0x90) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000001c0), 0x0) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000ac0)) ioctl$SNDCTL_DSP_RESET(r4, 0x5000, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000130000800000000000009d0007000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c001a801800048014000a8008000100000000000800020000000000"], 0x3c}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f0000000300)={0x328, 0x1, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x53, 0x6, "d78d06d5d676a49a8715bcdec4faaa08e8cc2e795b9d77e125b5f2a292c091947507bbbb6faf089c96297e3b0451d7470ab37c09b30f2ae3b7b4354e58b0ee64f1d9bef80749856feb962066143fcc"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x38, 0x6, "36529c5028271dbd0a73cbe00c7436f4986cf52dc40e1d1f8a94b804dd6ef7a796584c097e8f3df68d368dd5d6276cfe22ba3080"}, @NFTA_TABLE_USERDATA={0x98, 0x6, "befd9a7db914df72f4490dbf85eef0eb7efde10d76abb652c1d53a0ff95fd2ecacc9da13262b20fa484128f40888b49619c0e091af03fb270ab67280a267182f580ba20a5c63110be1d6f4ac7151e40c650c4f324a876b838f10929b4582b9332c87ceeb2ff362907a0e21ceb4bd6f05ac24a081ce73e0122ca646f0a25654f668166c9402d5e71c995491f2ea9072b772b520ed"}, @NFTA_TABLE_USERDATA={0xef, 0x6, "47d379d1c5e6b8d21d2726ed213412c11689eb41a448eb005e8fb683f0fdb47d02b8ae3f68881021bd431e1c7c1f93717508d759229b06f3dcdf4e6e10e350a1d830e95deedb7d9394d2c1f50a6dffb214633eb4e82b17159f2c3980783272df3f39b2b4c0ed16bf871c04a7688bf2f1810f66ad1eb337fa058a58e0ca41b5522c6a4362de67ececa098bd95f0beb3228a86270e7cdfd61966bb14b6e34036081150622c6abf936c667a2dccba535fac60c7c38904b84f19c7cade4b703902a90f44b03320ff0803ed3f30dcb1659495717c1dd758d070feb49280ea8d475a07505a27b60bfd3c585f536e"}, @NFTA_TABLE_USERDATA={0xdf, 0x6, "7810c2fdd1f38bcaaead2b327382136680709f187a57afd78590c2dfb349f2b949cf87ab1f09663121bd285fb4183875617948791f62a4f916cb40cfc1ae270aa07a6de1e4ad999f68d30f1fb25402097edf14dd0bb5fb797577ed4ce7a279203a9dd9f88f8dbe7789752b58c5b0a079551773e132619b0f18cfa1df46b2ab15d097ca3107c1fcc192a7b443328dfeb07269b0fd44ec4e3bdcf530f268d31037de0f43eadb22e03905b3c2b5ccd041151bdf135a4ecec0fc1361bf62cf74fe9e87f00240e7ff6b88345d4c222ba11b46b773480153ccd3dcaa513f"}]}, 0x328}, 0x1, 0x0, 0x0, 0x4004000}, 0x48010) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) 06:05:13 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0x80086601, &(0x7f0000000080)=0xe3) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) [ 2816.595712][T12817] FAULT_INJECTION: forcing a failure. [ 2816.595712][T12817] name failslab, interval 1, probability 0, space 0, times 0 [ 2816.614750][T12817] CPU: 1 PID: 12817 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 2816.624851][T12817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2816.634926][T12817] Call Trace: [ 2816.638201][T12817] [ 2816.641212][T12817] dump_stack_lvl+0x125/0x1b0 [ 2816.645900][T12817] should_fail_ex+0x496/0x5b0 [ 2816.650589][T12817] should_failslab+0x9/0x20 [ 2816.655097][T12817] __kmem_cache_alloc_node+0x6b/0x310 [ 2816.660475][T12817] ? process_vm_rw_core.constprop.0+0x1f1/0xa10 [ 2816.666718][T12817] ? __lock_acquire+0xc8f/0x5de0 [ 2816.671667][T12817] ? process_vm_rw_core.constprop.0+0x1f1/0xa10 [ 2816.677928][T12817] __kmalloc+0x4f/0x100 [ 2816.682131][T12817] process_vm_rw_core.constprop.0+0x1f1/0xa10 [ 2816.688268][T12817] ? vmalloc_dump_obj+0x290/0x290 [ 2816.693373][T12817] process_vm_rw+0x2ff/0x360 [ 2816.698016][T12817] ? process_vm_rw_core.constprop.0+0xa10/0xa10 [ 2816.704299][T12817] ? ksys_write+0x214/0x250 [ 2816.708862][T12817] ? reacquire_held_locks+0x4b0/0x4b0 [ 2816.714287][T12817] ? vfs_write+0x14c/0xdf0 [ 2816.718722][T12817] ? bit_wait_io_timeout+0x160/0x160 [ 2816.724039][T12817] ? fput+0x30/0x1a0 [ 2816.727975][T12817] ? ksys_write+0x1a7/0x250 [ 2816.732529][T12817] __x64_sys_process_vm_writev+0xe2/0x1b0 [ 2816.738298][T12817] ? syscall_enter_from_user_mode+0x26/0x80 [ 2816.744246][T12817] do_syscall_64+0x3f/0x110 [ 2816.748799][T12817] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2816.754716][T12817] RIP: 0033:0x7f6fcfc7cae9 [ 2816.759167][T12817] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2816.778818][T12817] RSP: 002b:00007f6fd098a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2816.787274][T12817] RAX: ffffffffffffffda RBX: 00007f6fcfd9c050 RCX: 00007f6fcfc7cae9 [ 2816.795280][T12817] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000002c1b [ 2816.803263][T12817] RBP: 00007f6fd098a120 R08: 0000000000000001 R09: 0000000000000000 [ 2816.811273][T12817] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000001 [ 2816.819266][T12817] R13: 000000000000006e R14: 00007f6fcfd9c050 R15: 00007f6fcfebfa48 [ 2816.827272][T12817] 06:05:13 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) (async) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000000)=0x4) (async) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) 06:05:13 executing program 5: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r4, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3ee, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) 06:05:13 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 2) [ 2817.269421][T12835] FAULT_INJECTION: forcing a failure. [ 2817.269421][T12835] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2817.283277][T12835] CPU: 1 PID: 12835 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 2817.293483][T12835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2817.303661][T12835] Call Trace: [ 2817.306973][T12835] [ 2817.309941][T12835] dump_stack_lvl+0x125/0x1b0 [ 2817.314682][T12835] should_fail_ex+0x496/0x5b0 [ 2817.319466][T12835] ? fs_reclaim_acquire+0xb0/0x150 [ 2817.324633][T12835] __should_fail_alloc_page+0xe7/0x130 [ 2817.330153][T12835] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 2817.336365][T12835] __alloc_pages+0x14e/0x4a0 [ 2817.340981][T12835] ? print_usage_bug.part.0+0x670/0x670 [ 2817.346546][T12835] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 2817.353337][T12835] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2817.359255][T12835] ? policy_nodemask+0x311/0x480 [ 2817.364214][T12835] alloc_pages_mpol+0x258/0x5f0 [ 2817.369085][T12835] ? mempolicy_in_oom_domain+0x150/0x150 [ 2817.374734][T12835] ? find_held_lock+0x2d/0x110 [ 2817.379534][T12835] vma_alloc_folio+0xad/0x220 [ 2817.384232][T12835] ? alloc_migration_target_by_mpol+0x6b0/0x6b0 [ 2817.390486][T12835] ? find_held_lock+0x2d/0x110 [ 2817.395278][T12835] ? filemap_get_read_batch+0x9b0/0x9b0 [ 2817.400846][T12835] __handle_mm_fault+0x100b/0x3d60 [ 2817.405984][T12835] ? vm_iomap_memory+0x170/0x170 [ 2817.410958][T12835] handle_mm_fault+0x478/0xa00 [ 2817.415744][T12835] __get_user_pages+0x4b2/0x1480 [ 2817.420698][T12835] ? follow_page_mask+0xda0/0xda0 [ 2817.425744][T12835] __gup_longterm_locked+0x278/0x2ab0 [ 2817.431130][T12835] ? asm_common_interrupt+0x26/0x40 [ 2817.436355][T12835] ? get_user_pages_unlocked+0x770/0x770 [ 2817.442004][T12835] ? lock_sync+0x190/0x190 [ 2817.446450][T12835] pin_user_pages_remote+0xee/0x140 [ 2817.451666][T12835] ? __gup_longterm_locked+0x2ab0/0x2ab0 [ 2817.457321][T12835] process_vm_rw_core.constprop.0+0x43d/0xa10 [ 2817.463411][T12835] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2817.469423][T12835] ? vmalloc_dump_obj+0x290/0x290 [ 2817.474479][T12835] ? asm_common_interrupt+0x26/0x40 [ 2817.479750][T12835] process_vm_rw+0x2ff/0x360 [ 2817.484373][T12835] ? process_vm_rw_core.constprop.0+0xa10/0xa10 [ 2817.490637][T12835] ? __schedule+0xeea/0x59a0 [ 2817.495278][T12835] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 2817.500951][T12835] __x64_sys_process_vm_writev+0xe2/0x1b0 [ 2817.506695][T12835] ? syscall_enter_from_user_mode+0x26/0x80 [ 2817.512605][T12835] do_syscall_64+0x3f/0x110 [ 2817.517128][T12835] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2817.523037][T12835] RIP: 0033:0x7f6fcfc7cae9 [ 2817.527464][T12835] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2817.547088][T12835] RSP: 002b:00007f6fd098a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2817.555513][T12835] RAX: ffffffffffffffda RBX: 00007f6fcfd9c050 RCX: 00007f6fcfc7cae9 [ 2817.563496][T12835] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000002c1e [ 2817.571489][T12835] RBP: 00007f6fd098a120 R08: 0000000000000001 R09: 0000000000000000 [ 2817.579482][T12835] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000001 [ 2817.587471][T12835] R13: 000000000000006e R14: 00007f6fcfd9c050 R15: 00007f6fcfebfa48 [ 2817.595470][T12835] 06:05:15 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0x800c5011, &(0x7f0000000080)=0xe3) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) 06:05:15 executing program 5: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r4, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3ef, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) 06:05:15 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 3) 06:05:15 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) (async) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) r4 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r4}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r4}, 0x90) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000001c0), 0x0) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) (async) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000ac0)) (async) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000ac0)) ioctl$SNDCTL_DSP_RESET(r4, 0x5000, 0x0) (async) ioctl$SNDCTL_DSP_RESET(r4, 0x5000, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000130000800000000000009d0007000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c001a801800048014000a8008000100000000000800020000000000"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000130000800000000000009d0007000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c001a801800048014000a8008000100000000000800020000000000"], 0x3c}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f0000000300)={0x328, 0x1, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x53, 0x6, "d78d06d5d676a49a8715bcdec4faaa08e8cc2e795b9d77e125b5f2a292c091947507bbbb6faf089c96297e3b0451d7470ab37c09b30f2ae3b7b4354e58b0ee64f1d9bef80749856feb962066143fcc"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x38, 0x6, "36529c5028271dbd0a73cbe00c7436f4986cf52dc40e1d1f8a94b804dd6ef7a796584c097e8f3df68d368dd5d6276cfe22ba3080"}, @NFTA_TABLE_USERDATA={0x98, 0x6, "befd9a7db914df72f4490dbf85eef0eb7efde10d76abb652c1d53a0ff95fd2ecacc9da13262b20fa484128f40888b49619c0e091af03fb270ab67280a267182f580ba20a5c63110be1d6f4ac7151e40c650c4f324a876b838f10929b4582b9332c87ceeb2ff362907a0e21ceb4bd6f05ac24a081ce73e0122ca646f0a25654f668166c9402d5e71c995491f2ea9072b772b520ed"}, @NFTA_TABLE_USERDATA={0xef, 0x6, "47d379d1c5e6b8d21d2726ed213412c11689eb41a448eb005e8fb683f0fdb47d02b8ae3f68881021bd431e1c7c1f93717508d759229b06f3dcdf4e6e10e350a1d830e95deedb7d9394d2c1f50a6dffb214633eb4e82b17159f2c3980783272df3f39b2b4c0ed16bf871c04a7688bf2f1810f66ad1eb337fa058a58e0ca41b5522c6a4362de67ececa098bd95f0beb3228a86270e7cdfd61966bb14b6e34036081150622c6abf936c667a2dccba535fac60c7c38904b84f19c7cade4b703902a90f44b03320ff0803ed3f30dcb1659495717c1dd758d070feb49280ea8d475a07505a27b60bfd3c585f536e"}, @NFTA_TABLE_USERDATA={0xdf, 0x6, "7810c2fdd1f38bcaaead2b327382136680709f187a57afd78590c2dfb349f2b949cf87ab1f09663121bd285fb4183875617948791f62a4f916cb40cfc1ae270aa07a6de1e4ad999f68d30f1fb25402097edf14dd0bb5fb797577ed4ce7a279203a9dd9f88f8dbe7789752b58c5b0a079551773e132619b0f18cfa1df46b2ab15d097ca3107c1fcc192a7b443328dfeb07269b0fd44ec4e3bdcf530f268d31037de0f43eadb22e03905b3c2b5ccd041151bdf135a4ecec0fc1361bf62cf74fe9e87f00240e7ff6b88345d4c222ba11b46b773480153ccd3dcaa513f"}]}, 0x328}, 0x1, 0x0, 0x0, 0x4004000}, 0x48010) (async) sendmsg$NFT_MSG_GETTABLE(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f0000000300)={0x328, 0x1, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x53, 0x6, "d78d06d5d676a49a8715bcdec4faaa08e8cc2e795b9d77e125b5f2a292c091947507bbbb6faf089c96297e3b0451d7470ab37c09b30f2ae3b7b4354e58b0ee64f1d9bef80749856feb962066143fcc"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x38, 0x6, "36529c5028271dbd0a73cbe00c7436f4986cf52dc40e1d1f8a94b804dd6ef7a796584c097e8f3df68d368dd5d6276cfe22ba3080"}, @NFTA_TABLE_USERDATA={0x98, 0x6, "befd9a7db914df72f4490dbf85eef0eb7efde10d76abb652c1d53a0ff95fd2ecacc9da13262b20fa484128f40888b49619c0e091af03fb270ab67280a267182f580ba20a5c63110be1d6f4ac7151e40c650c4f324a876b838f10929b4582b9332c87ceeb2ff362907a0e21ceb4bd6f05ac24a081ce73e0122ca646f0a25654f668166c9402d5e71c995491f2ea9072b772b520ed"}, @NFTA_TABLE_USERDATA={0xef, 0x6, "47d379d1c5e6b8d21d2726ed213412c11689eb41a448eb005e8fb683f0fdb47d02b8ae3f68881021bd431e1c7c1f93717508d759229b06f3dcdf4e6e10e350a1d830e95deedb7d9394d2c1f50a6dffb214633eb4e82b17159f2c3980783272df3f39b2b4c0ed16bf871c04a7688bf2f1810f66ad1eb337fa058a58e0ca41b5522c6a4362de67ececa098bd95f0beb3228a86270e7cdfd61966bb14b6e34036081150622c6abf936c667a2dccba535fac60c7c38904b84f19c7cade4b703902a90f44b03320ff0803ed3f30dcb1659495717c1dd758d070feb49280ea8d475a07505a27b60bfd3c585f536e"}, @NFTA_TABLE_USERDATA={0xdf, 0x6, "7810c2fdd1f38bcaaead2b327382136680709f187a57afd78590c2dfb349f2b949cf87ab1f09663121bd285fb4183875617948791f62a4f916cb40cfc1ae270aa07a6de1e4ad999f68d30f1fb25402097edf14dd0bb5fb797577ed4ce7a279203a9dd9f88f8dbe7789752b58c5b0a079551773e132619b0f18cfa1df46b2ab15d097ca3107c1fcc192a7b443328dfeb07269b0fd44ec4e3bdcf530f268d31037de0f43eadb22e03905b3c2b5ccd041151bdf135a4ecec0fc1361bf62cf74fe9e87f00240e7ff6b88345d4c222ba11b46b773480153ccd3dcaa513f"}]}, 0x328}, 0x1, 0x0, 0x0, 0x4004000}, 0x48010) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) 06:05:15 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) prlimit64(r1, 0xe, &(0x7f0000000000)={0x7ff, 0x4}, 0x0) (async) prlimit64(r1, 0xe, &(0x7f0000000000)={0x7ff, 0x4}, 0x0) getpid() (async) r2 = getpid() getpgid(r2) sched_setscheduler(r2, 0x2, &(0x7f0000000b80)) tkill(r2, 0x1d) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) (async) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) ioctl$int_in(r3, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r4}], 0x1, 0xfffffffffffffff8) dup2(r3, r4) (async) dup2(r3, r4) fcntl$setown(r4, 0x8, r1) (async) fcntl$setown(r4, 0x8, r1) tkill(r1, 0x14) (async) tkill(r1, 0x14) [ 2818.950075][T12850] FAULT_INJECTION: forcing a failure. [ 2818.950075][T12850] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2818.969932][T12850] CPU: 1 PID: 12850 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 2818.980042][T12850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2818.990120][T12850] Call Trace: [ 2818.993419][T12850] [ 2818.996362][T12850] dump_stack_lvl+0x125/0x1b0 [ 2819.001060][T12850] should_fail_ex+0x496/0x5b0 [ 2819.005746][T12850] ? fs_reclaim_acquire+0xb0/0x150 [ 2819.010893][T12850] __should_fail_alloc_page+0xe7/0x130 [ 2819.016369][T12850] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 2819.022631][T12850] __alloc_pages+0x14e/0x4a0 [ 2819.027254][T12850] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 2819.034039][T12850] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2819.039935][T12850] ? policy_nodemask+0x311/0x480 [ 2819.044900][T12850] alloc_pages_mpol+0x258/0x5f0 [ 2819.049752][T12850] ? mempolicy_in_oom_domain+0x150/0x150 [ 2819.055383][T12850] ? find_held_lock+0x2d/0x110 [ 2819.060284][T12850] vma_alloc_folio+0xad/0x220 [ 2819.064960][T12850] ? alloc_migration_target_by_mpol+0x6b0/0x6b0 [ 2819.071199][T12850] ? find_held_lock+0x2d/0x110 [ 2819.076154][T12850] ? filemap_get_read_batch+0x9b0/0x9b0 [ 2819.081727][T12850] __handle_mm_fault+0x100b/0x3d60 [ 2819.086898][T12850] ? vm_iomap_memory+0x170/0x170 [ 2819.091879][T12850] handle_mm_fault+0x478/0xa00 [ 2819.096666][T12850] __get_user_pages+0x4b2/0x1480 [ 2819.101627][T12850] ? follow_page_mask+0xda0/0xda0 [ 2819.106684][T12850] __gup_longterm_locked+0x278/0x2ab0 [ 2819.112083][T12850] ? get_user_pages_unlocked+0x770/0x770 [ 2819.117752][T12850] ? lock_sync+0x190/0x190 [ 2819.122472][T12850] pin_user_pages_remote+0xee/0x140 [ 2819.127689][T12850] ? __gup_longterm_locked+0x2ab0/0x2ab0 [ 2819.133362][T12850] process_vm_rw_core.constprop.0+0x43d/0xa10 [ 2819.139464][T12850] ? vmalloc_dump_obj+0x290/0x290 [ 2819.144527][T12850] process_vm_rw+0x2ff/0x360 [ 2819.149138][T12850] ? process_vm_rw_core.constprop.0+0xa10/0xa10 [ 2819.155395][T12850] ? ksys_write+0x214/0x250 [ 2819.159917][T12850] ? reacquire_held_locks+0x4b0/0x4b0 [ 2819.165315][T12850] ? vfs_write+0x14c/0xdf0 [ 2819.169762][T12850] ? bit_wait_io_timeout+0x160/0x160 [ 2819.175079][T12850] ? fput+0x30/0x1a0 [ 2819.178996][T12850] ? ksys_write+0x1a7/0x250 [ 2819.183521][T12850] __x64_sys_process_vm_writev+0xe2/0x1b0 [ 2819.189260][T12850] ? syscall_enter_from_user_mode+0x26/0x80 [ 2819.195167][T12850] do_syscall_64+0x3f/0x110 [ 2819.199689][T12850] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2819.205603][T12850] RIP: 0033:0x7f6fcfc7cae9 [ 2819.210110][T12850] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2819.229904][T12850] RSP: 002b:00007f6fd098a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2819.238333][T12850] RAX: ffffffffffffffda RBX: 00007f6fcfd9c050 RCX: 00007f6fcfc7cae9 [ 2819.246315][T12850] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000002c21 [ 2819.254293][T12850] RBP: 00007f6fd098a120 R08: 0000000000000001 R09: 0000000000000000 [ 2819.262272][T12850] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000001 [ 2819.270253][T12850] R13: 000000000000006e R14: 00007f6fcfd9c050 R15: 00007f6fcfebfa48 [ 2819.278341][T12850] 06:05:16 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0x800c5012, &(0x7f0000000080)=0xe3) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) 06:05:16 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 4) 06:05:16 executing program 5: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r4, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3f0, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) [ 2819.976087][T12869] FAULT_INJECTION: forcing a failure. [ 2819.976087][T12869] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2820.010071][T12869] CPU: 1 PID: 12869 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 2820.020195][T12869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2820.030254][T12869] Call Trace: [ 2820.033533][T12869] [ 2820.036460][T12869] dump_stack_lvl+0x125/0x1b0 [ 2820.041146][T12869] should_fail_ex+0x496/0x5b0 [ 2820.045830][T12869] ? fs_reclaim_acquire+0xb0/0x150 [ 2820.050964][T12869] __should_fail_alloc_page+0xe7/0x130 [ 2820.056446][T12869] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 2820.062639][T12869] __alloc_pages+0x14e/0x4a0 [ 2820.067253][T12869] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 2820.074070][T12869] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2820.079976][T12869] ? policy_nodemask+0x311/0x480 [ 2820.084924][T12869] alloc_pages_mpol+0x258/0x5f0 [ 2820.089812][T12869] ? mempolicy_in_oom_domain+0x150/0x150 [ 2820.095452][T12869] ? find_held_lock+0x2d/0x110 [ 2820.100252][T12869] vma_alloc_folio+0xad/0x220 [ 2820.104936][T12869] ? alloc_migration_target_by_mpol+0x6b0/0x6b0 [ 2820.111177][T12869] ? find_held_lock+0x2d/0x110 [ 2820.115976][T12869] ? filemap_get_read_batch+0x9b0/0x9b0 [ 2820.121573][T12869] __handle_mm_fault+0x100b/0x3d60 [ 2820.126724][T12869] ? vm_iomap_memory+0x170/0x170 [ 2820.131678][T12869] handle_mm_fault+0x478/0xa00 [ 2820.136544][T12869] __get_user_pages+0x4b2/0x1480 [ 2820.141499][T12869] ? follow_page_mask+0xda0/0xda0 [ 2820.146557][T12869] __gup_longterm_locked+0x278/0x2ab0 [ 2820.151941][T12869] ? get_user_pages_unlocked+0x770/0x770 [ 2820.157596][T12869] ? lock_sync+0x190/0x190 [ 2820.162032][T12869] pin_user_pages_remote+0xee/0x140 [ 2820.167337][T12869] ? __gup_longterm_locked+0x2ab0/0x2ab0 [ 2820.173006][T12869] process_vm_rw_core.constprop.0+0x43d/0xa10 [ 2820.179085][T12869] ? vmalloc_dump_obj+0x290/0x290 [ 2820.184146][T12869] process_vm_rw+0x2ff/0x360 [ 2820.188767][T12869] ? process_vm_rw_core.constprop.0+0xa10/0xa10 [ 2820.195032][T12869] ? ksys_write+0x214/0x250 [ 2820.199544][T12869] ? reacquire_held_locks+0x4b0/0x4b0 [ 2820.204939][T12869] ? vfs_write+0x14c/0xdf0 [ 2820.209369][T12869] ? bit_wait_io_timeout+0x160/0x160 [ 2820.214663][T12869] ? fput+0x30/0x1a0 [ 2820.218566][T12869] ? ksys_write+0x1a7/0x250 [ 2820.223075][T12869] __x64_sys_process_vm_writev+0xe2/0x1b0 [ 2820.228798][T12869] ? syscall_enter_from_user_mode+0x26/0x80 [ 2820.234704][T12869] do_syscall_64+0x3f/0x110 [ 2820.239223][T12869] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2820.245119][T12869] RIP: 0033:0x7f6fcfc7cae9 [ 2820.249533][T12869] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2820.269150][T12869] RSP: 002b:00007f6fd098a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2820.277571][T12869] RAX: ffffffffffffffda RBX: 00007f6fcfd9c050 RCX: 00007f6fcfc7cae9 [ 2820.285543][T12869] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000002c24 [ 2820.293548][T12869] RBP: 00007f6fd098a120 R08: 0000000000000001 R09: 0000000000000000 [ 2820.301522][T12869] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000001 [ 2820.309502][T12869] R13: 000000000000006e R14: 00007f6fcfd9c050 R15: 00007f6fcfebfa48 [ 2820.317503][T12869] 06:05:17 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 5) [ 2820.604427][T12872] FAULT_INJECTION: forcing a failure. [ 2820.604427][T12872] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2820.625397][T12872] CPU: 1 PID: 12872 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 2820.635694][T12872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2820.645792][T12872] Call Trace: [ 2820.649071][T12872] [ 2820.652003][T12872] dump_stack_lvl+0x125/0x1b0 [ 2820.656691][T12872] should_fail_ex+0x496/0x5b0 [ 2820.661377][T12872] ? fs_reclaim_acquire+0xb0/0x150 [ 2820.666493][T12872] __should_fail_alloc_page+0xe7/0x130 [ 2820.672002][T12872] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 2820.678209][T12872] __alloc_pages+0x14e/0x4a0 [ 2820.682813][T12872] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 2820.689603][T12872] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2820.695633][T12872] ? policy_nodemask+0x311/0x480 [ 2820.700590][T12872] alloc_pages_mpol+0x258/0x5f0 [ 2820.705452][T12872] ? mempolicy_in_oom_domain+0x150/0x150 [ 2820.711098][T12872] ? find_held_lock+0x2d/0x110 [ 2820.715883][T12872] vma_alloc_folio+0xad/0x220 [ 2820.720575][T12872] ? alloc_migration_target_by_mpol+0x6b0/0x6b0 [ 2820.726835][T12872] ? find_held_lock+0x2d/0x110 [ 2820.731620][T12872] ? filemap_get_read_batch+0x9b0/0x9b0 [ 2820.737185][T12872] __handle_mm_fault+0x100b/0x3d60 [ 2820.742321][T12872] ? vm_iomap_memory+0x170/0x170 [ 2820.747321][T12872] handle_mm_fault+0x478/0xa00 [ 2820.752108][T12872] __get_user_pages+0x4b2/0x1480 [ 2820.757063][T12872] ? follow_page_mask+0xda0/0xda0 [ 2820.762111][T12872] __gup_longterm_locked+0x278/0x2ab0 [ 2820.767511][T12872] ? get_user_pages_unlocked+0x770/0x770 [ 2820.773166][T12872] ? lock_sync+0x190/0x190 [ 2820.777623][T12872] pin_user_pages_remote+0xee/0x140 [ 2820.782839][T12872] ? __gup_longterm_locked+0x2ab0/0x2ab0 [ 2820.788498][T12872] process_vm_rw_core.constprop.0+0x43d/0xa10 [ 2820.794596][T12872] ? vmalloc_dump_obj+0x290/0x290 [ 2820.799655][T12872] process_vm_rw+0x2ff/0x360 [ 2820.804260][T12872] ? process_vm_rw_core.constprop.0+0xa10/0xa10 [ 2820.810515][T12872] ? _raw_spin_lock_irqsave+0x42/0x50 [ 2820.815909][T12872] ? lock_acquire+0x1ae/0x510 [ 2820.820632][T12872] ? handle_edge_irq+0x40a/0xcf0 [ 2820.825606][T12872] __x64_sys_process_vm_writev+0xe2/0x1b0 [ 2820.831341][T12872] ? syscall_enter_from_user_mode+0x26/0x80 [ 2820.837249][T12872] do_syscall_64+0x3f/0x110 [ 2820.841776][T12872] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2820.847688][T12872] RIP: 0033:0x7f6fcfc7cae9 [ 2820.852109][T12872] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2820.871730][T12872] RSP: 002b:00007f6fd098a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2820.880160][T12872] RAX: ffffffffffffffda RBX: 00007f6fcfd9c050 RCX: 00007f6fcfc7cae9 [ 2820.888155][T12872] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000002c27 [ 2820.896136][T12872] RBP: 00007f6fd098a120 R08: 0000000000000001 R09: 0000000000000000 [ 2820.904114][T12872] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000001 [ 2820.912091][T12872] R13: 000000000000006e R14: 00007f6fcfd9c050 R15: 00007f6fcfebfa48 [ 2820.920088][T12872] 06:05:18 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0x8010500c, &(0x7f0000000080)=0xe3) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) 06:05:18 executing program 5: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r4, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3f1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) 06:05:18 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 6) 06:05:18 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0x400) r1 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r1}, 0x90) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0), 0x0) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000ac0)) ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f0000000100)={0xf7b, 'syz1\x00'}) read$dsp(r1, &(0x7f00000001c0)=""/213, 0xd5) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000000)=0x8) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) [ 2821.961080][T12883] FAULT_INJECTION: forcing a failure. [ 2821.961080][T12883] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2821.987951][T12883] CPU: 1 PID: 12883 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 2821.998075][T12883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2822.008145][T12883] Call Trace: [ 2822.011432][T12883] [ 2822.014367][T12883] dump_stack_lvl+0x125/0x1b0 [ 2822.019094][T12883] should_fail_ex+0x496/0x5b0 [ 2822.023817][T12883] ? fs_reclaim_acquire+0xb0/0x150 [ 2822.028949][T12883] __should_fail_alloc_page+0xe7/0x130 [ 2822.034445][T12883] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 2822.040817][T12883] __alloc_pages+0x14e/0x4a0 [ 2822.045432][T12883] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 2822.052223][T12883] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2822.058134][T12883] ? policy_nodemask+0x311/0x480 [ 2822.063085][T12883] alloc_pages_mpol+0x258/0x5f0 [ 2822.067956][T12883] ? mempolicy_in_oom_domain+0x150/0x150 [ 2822.073623][T12883] ? find_held_lock+0x2d/0x110 [ 2822.078416][T12883] vma_alloc_folio+0xad/0x220 [ 2822.083116][T12883] ? alloc_migration_target_by_mpol+0x6b0/0x6b0 [ 2822.089371][T12883] ? find_held_lock+0x2d/0x110 [ 2822.094158][T12883] ? filemap_get_read_batch+0x9b0/0x9b0 [ 2822.099744][T12883] __handle_mm_fault+0x100b/0x3d60 [ 2822.104880][T12883] ? vm_iomap_memory+0x170/0x170 [ 2822.109859][T12883] handle_mm_fault+0x478/0xa00 [ 2822.114652][T12883] __get_user_pages+0x4b2/0x1480 [ 2822.119613][T12883] ? follow_page_mask+0xda0/0xda0 [ 2822.124660][T12883] __gup_longterm_locked+0x278/0x2ab0 [ 2822.130057][T12883] ? get_user_pages_unlocked+0x770/0x770 [ 2822.135700][T12883] ? lock_sync+0x190/0x190 [ 2822.140155][T12883] pin_user_pages_remote+0xee/0x140 [ 2822.145367][T12883] ? __gup_longterm_locked+0x2ab0/0x2ab0 [ 2822.151027][T12883] process_vm_rw_core.constprop.0+0x43d/0xa10 [ 2822.157124][T12883] ? vmalloc_dump_obj+0x290/0x290 [ 2822.162182][T12883] process_vm_rw+0x2ff/0x360 [ 2822.166788][T12883] ? process_vm_rw_core.constprop.0+0xa10/0xa10 [ 2822.173050][T12883] ? ksys_write+0x214/0x250 [ 2822.177571][T12883] ? reacquire_held_locks+0x4b0/0x4b0 [ 2822.182974][T12883] ? vfs_write+0x14c/0xdf0 [ 2822.187416][T12883] ? bit_wait_io_timeout+0x160/0x160 [ 2822.192725][T12883] ? fput+0x30/0x1a0 [ 2822.196638][T12883] ? ksys_write+0x1a7/0x250 [ 2822.201176][T12883] __x64_sys_process_vm_writev+0xe2/0x1b0 [ 2822.206916][T12883] ? syscall_enter_from_user_mode+0x26/0x80 [ 2822.212839][T12883] do_syscall_64+0x3f/0x110 [ 2822.217362][T12883] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2822.223270][T12883] RIP: 0033:0x7f6fcfc7cae9 [ 2822.227695][T12883] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2822.247315][T12883] RSP: 002b:00007f6fd098a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2822.255741][T12883] RAX: ffffffffffffffda RBX: 00007f6fcfd9c050 RCX: 00007f6fcfc7cae9 [ 2822.263722][T12883] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000002c2a [ 2822.271702][T12883] RBP: 00007f6fd098a120 R08: 0000000000000001 R09: 0000000000000000 [ 2822.279683][T12883] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000001 [ 2822.287667][T12883] R13: 000000000000006e R14: 00007f6fcfd9c050 R15: 00007f6fcfebfa48 [ 2822.295665][T12883] 06:05:20 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0x400) r1 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r1}, 0x90) (async) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0), 0x0) (async) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000ac0)) ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f0000000100)={0xf7b, 'syz1\x00'}) (async) read$dsp(r1, &(0x7f00000001c0)=""/213, 0xd5) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000000)=0x8) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) (async) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) 06:05:20 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 7) 06:05:20 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0x8010500d, &(0x7f0000000080)=0xe3) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) 06:05:20 executing program 5: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r4, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3f2, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) 06:05:20 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) r1 = gettid() (async) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) (async) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) (async) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) r4 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r4}, 0x90) (async) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000001c0), 0x0) (async) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000ac0)) ioctl$SNDCTL_DSP_RESET(r4, 0x5000, 0x0) (async) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) (async) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000130000800000000000009d0007000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c001a801800048014000a8008000100000000000800020000000000"], 0x3c}}, 0x0) (async) sendmsg$NFT_MSG_GETTABLE(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f0000000300)={0x328, 0x1, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x53, 0x6, "d78d06d5d676a49a8715bcdec4faaa08e8cc2e795b9d77e125b5f2a292c091947507bbbb6faf089c96297e3b0451d7470ab37c09b30f2ae3b7b4354e58b0ee64f1d9bef80749856feb962066143fcc"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x38, 0x6, "36529c5028271dbd0a73cbe00c7436f4986cf52dc40e1d1f8a94b804dd6ef7a796584c097e8f3df68d368dd5d6276cfe22ba3080"}, @NFTA_TABLE_USERDATA={0x98, 0x6, "befd9a7db914df72f4490dbf85eef0eb7efde10d76abb652c1d53a0ff95fd2ecacc9da13262b20fa484128f40888b49619c0e091af03fb270ab67280a267182f580ba20a5c63110be1d6f4ac7151e40c650c4f324a876b838f10929b4582b9332c87ceeb2ff362907a0e21ceb4bd6f05ac24a081ce73e0122ca646f0a25654f668166c9402d5e71c995491f2ea9072b772b520ed"}, @NFTA_TABLE_USERDATA={0xef, 0x6, "47d379d1c5e6b8d21d2726ed213412c11689eb41a448eb005e8fb683f0fdb47d02b8ae3f68881021bd431e1c7c1f93717508d759229b06f3dcdf4e6e10e350a1d830e95deedb7d9394d2c1f50a6dffb214633eb4e82b17159f2c3980783272df3f39b2b4c0ed16bf871c04a7688bf2f1810f66ad1eb337fa058a58e0ca41b5522c6a4362de67ececa098bd95f0beb3228a86270e7cdfd61966bb14b6e34036081150622c6abf936c667a2dccba535fac60c7c38904b84f19c7cade4b703902a90f44b03320ff0803ed3f30dcb1659495717c1dd758d070feb49280ea8d475a07505a27b60bfd3c585f536e"}, @NFTA_TABLE_USERDATA={0xdf, 0x6, "7810c2fdd1f38bcaaead2b327382136680709f187a57afd78590c2dfb349f2b949cf87ab1f09663121bd285fb4183875617948791f62a4f916cb40cfc1ae270aa07a6de1e4ad999f68d30f1fb25402097edf14dd0bb5fb797577ed4ce7a279203a9dd9f88f8dbe7789752b58c5b0a079551773e132619b0f18cfa1df46b2ab15d097ca3107c1fcc192a7b443328dfeb07269b0fd44ec4e3bdcf530f268d31037de0f43eadb22e03905b3c2b5ccd041151bdf135a4ecec0fc1361bf62cf74fe9e87f00240e7ff6b88345d4c222ba11b46b773480153ccd3dcaa513f"}]}, 0x328}, 0x1, 0x0, 0x0, 0x4004000}, 0x48010) dup2(r2, r3) (async) fcntl$setown(r3, 0x8, r1) (async) tkill(r1, 0x14) 06:05:20 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2, r1}, 0x90) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0), 0x0) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000ac0)) write$FUSE_GETXATTR(r1, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0x1}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) write$dsp(r0, &(0x7f0000000340)="3d66ae8c34871360e66c98c0f741a3384537c3f24c24e7fc2ffd72805534bef7f47897cc7dd2cdad6d2a5c447c584d927a9d25ef28e0ece0f285256bcb5522e2fc4d187f21475a4038ffe2625b52f06bca56874c417bf3d0dcf7f058bf01c2187fc85de0c7fb13d2274550b361a28bf3fba8eb4aee36993c5e8792b5f59e5c86d0a6376d9dab2db51e4dc50d953dd6a25c9c0655b243bdf17bc52808", 0x9c) r2 = gettid() ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r5}, 0x90) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000001c0), 0x0) ioctl$NS_GET_OWNER_UID(r5, 0xb704, &(0x7f0000000ac0)) ioctl$SNDCTL_DSP_RESET(r5, 0x5000, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) ioctl$int_in(r3, 0x5452, &(0x7f0000000100)=0x1000000000003e) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r4}], 0x1, 0xfffffffffffffff8) dup2(r3, r4) r6 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r6}, 0x90) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000001c0), 0x0) ioctl$NS_GET_OWNER_UID(r6, 0xb704, &(0x7f0000000ac0)) ioctl$mixer_OSS_ALSAEMULVER(r6, 0x80044df9, &(0x7f0000000040)) fcntl$setown(r4, 0x8, r2) sendmsg$xdp(r5, &(0x7f0000000540)={&(0x7f0000000140)={0x2c, 0x6, 0x0, 0x1b}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000400)="b89ae7c9a2f921a329bb9e6cb83b50a63869da48369c86467bb9f1917d9d72529b2a88c75f0ebeed75f517cb8ce9d83ed8a4b75258e4237bae21aa15ccf67218ad867ec993bf3d83f0e48abf29741211ab12a50256cb0395bb2a604b9a34720ec9b059c3d03fdf7f26101f546175325df93fd4d87425d41c15998495b1746194800cca29fe0be2d2a0d706dcac4bb37fec9558f1e3c2094eb098280f280792c28937c441e62a142066864fdbecf51d45a681bca888f3da53373960498dc160daf6", 0xc1}], 0x1, 0x0, 0x0, 0x8000}, 0x5c5f1c96f539fcc) tkill(r2, 0x14) ptrace$setregset(0x4205, r2, 0x0, &(0x7f0000000000)={&(0x7f0000000240)="847a5ca5ef876f3ac01fda681efc32161fd39808f6a53843578b88c151c9a754519af295fff69f0a2fccd92bfe4c20ef856723c6e89889890f3fe7e1d0cb911d30a073566dbbd6e147da2b698c90454745a3134c8147886a250fe2811e8c1ec094394442c06b499ab174171457d76858f0dfdee42d20f9489f2457ac182549d3901d64e3ef0bfb7c9a4809961edb6dfda0aea2f7e62fa323ccabcbf40c6b79d186b54d4466e1a34e7ce903867aefb730e03c7b75ac09c2bff9e15dd3b0580127a2b1531a4ba235cc8e22eca4f354127c40f525e9a427095cd28e23c7bbc0", 0xde}) 06:05:20 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2, r1}, 0x90) (async) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0), 0x0) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000ac0)) (async) write$FUSE_GETXATTR(r1, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0x1}}, 0x18) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) write$dsp(r0, &(0x7f0000000340)="3d66ae8c34871360e66c98c0f741a3384537c3f24c24e7fc2ffd72805534bef7f47897cc7dd2cdad6d2a5c447c584d927a9d25ef28e0ece0f285256bcb5522e2fc4d187f21475a4038ffe2625b52f06bca56874c417bf3d0dcf7f058bf01c2187fc85de0c7fb13d2274550b361a28bf3fba8eb4aee36993c5e8792b5f59e5c86d0a6376d9dab2db51e4dc50d953dd6a25c9c0655b243bdf17bc52808", 0x9c) (async) r2 = gettid() (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r5}, 0x90) (async) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000001c0), 0x0) ioctl$NS_GET_OWNER_UID(r5, 0xb704, &(0x7f0000000ac0)) ioctl$SNDCTL_DSP_RESET(r5, 0x5000, 0x0) (async) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) (async) ioctl$int_in(r3, 0x5452, &(0x7f0000000100)=0x1000000000003e) (async) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r4}], 0x1, 0xfffffffffffffff8) (async) dup2(r3, r4) (async) r6 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r6}, 0x90) (async) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000001c0), 0x0) (async) ioctl$NS_GET_OWNER_UID(r6, 0xb704, &(0x7f0000000ac0)) ioctl$mixer_OSS_ALSAEMULVER(r6, 0x80044df9, &(0x7f0000000040)) fcntl$setown(r4, 0x8, r2) (async) sendmsg$xdp(r5, &(0x7f0000000540)={&(0x7f0000000140)={0x2c, 0x6, 0x0, 0x1b}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000400)="b89ae7c9a2f921a329bb9e6cb83b50a63869da48369c86467bb9f1917d9d72529b2a88c75f0ebeed75f517cb8ce9d83ed8a4b75258e4237bae21aa15ccf67218ad867ec993bf3d83f0e48abf29741211ab12a50256cb0395bb2a604b9a34720ec9b059c3d03fdf7f26101f546175325df93fd4d87425d41c15998495b1746194800cca29fe0be2d2a0d706dcac4bb37fec9558f1e3c2094eb098280f280792c28937c441e62a142066864fdbecf51d45a681bca888f3da53373960498dc160daf6", 0xc1}], 0x1, 0x0, 0x0, 0x8000}, 0x5c5f1c96f539fcc) (async, rerun: 32) tkill(r2, 0x14) (async, rerun: 32) ptrace$setregset(0x4205, r2, 0x0, &(0x7f0000000000)={&(0x7f0000000240)="847a5ca5ef876f3ac01fda681efc32161fd39808f6a53843578b88c151c9a754519af295fff69f0a2fccd92bfe4c20ef856723c6e89889890f3fe7e1d0cb911d30a073566dbbd6e147da2b698c90454745a3134c8147886a250fe2811e8c1ec094394442c06b499ab174171457d76858f0dfdee42d20f9489f2457ac182549d3901d64e3ef0bfb7c9a4809961edb6dfda0aea2f7e62fa323ccabcbf40c6b79d186b54d4466e1a34e7ce903867aefb730e03c7b75ac09c2bff9e15dd3b0580127a2b1531a4ba235cc8e22eca4f354127c40f525e9a427095cd28e23c7bbc0", 0xde}) 06:05:20 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0x400) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r1}, 0x90) (async) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0), 0x0) (async) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000ac0)) (async) ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f0000000100)={0xf7b, 'syz1\x00'}) (async) read$dsp(r1, &(0x7f00000001c0)=""/213, 0xd5) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) (async) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000000)=0x8) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) (async) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) [ 2823.803065][T12911] FAULT_INJECTION: forcing a failure. [ 2823.803065][T12911] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2823.835810][T12911] CPU: 1 PID: 12911 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 2823.845936][T12911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2823.856023][T12911] Call Trace: [ 2823.859334][T12911] [ 2823.862292][T12911] dump_stack_lvl+0x125/0x1b0 [ 2823.867025][T12911] should_fail_ex+0x496/0x5b0 [ 2823.871772][T12911] ? fs_reclaim_acquire+0xb0/0x150 [ 2823.876936][T12911] __should_fail_alloc_page+0xe7/0x130 [ 2823.882485][T12911] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 2823.888705][T12911] __alloc_pages+0x14e/0x4a0 [ 2823.893372][T12911] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 2823.900224][T12911] ? print_usage_bug.part.0+0x670/0x670 [ 2823.905839][T12911] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2823.911762][T12911] ? policy_nodemask+0x311/0x480 [ 2823.916716][T12911] alloc_pages_mpol+0x258/0x5f0 [ 2823.921587][T12911] ? mempolicy_in_oom_domain+0x150/0x150 [ 2823.927271][T12911] ? find_held_lock+0x2d/0x110 [ 2823.932074][T12911] vma_alloc_folio+0xad/0x220 [ 2823.936765][T12911] ? alloc_migration_target_by_mpol+0x6b0/0x6b0 [ 2823.943034][T12911] ? filemap_get_read_batch+0x9b0/0x9b0 [ 2823.948639][T12911] __handle_mm_fault+0x100b/0x3d60 [ 2823.953904][T12911] ? vm_iomap_memory+0x170/0x170 [ 2823.958912][T12911] handle_mm_fault+0x478/0xa00 [ 2823.963701][T12911] __get_user_pages+0x4b2/0x1480 [ 2823.968659][T12911] ? follow_page_mask+0xda0/0xda0 [ 2823.973705][T12911] __gup_longterm_locked+0x278/0x2ab0 [ 2823.979107][T12911] ? lockdep_hardirqs_on+0x7d/0x100 [ 2823.984323][T12911] ? get_user_pages_unlocked+0x770/0x770 [ 2823.989976][T12911] ? is_valid_gup_args+0x6a/0x1e0 [ 2823.995017][T12911] ? __sanitizer_cov_trace_pc+0x14/0x60 [ 2824.000590][T12911] pin_user_pages_remote+0xee/0x140 [ 2824.005804][T12911] ? __gup_longterm_locked+0x2ab0/0x2ab0 [ 2824.011461][T12911] process_vm_rw_core.constprop.0+0x43d/0xa10 [ 2824.017560][T12911] ? vmalloc_dump_obj+0x290/0x290 [ 2824.022625][T12911] process_vm_rw+0x2ff/0x360 [ 2824.027232][T12911] ? process_vm_rw_core.constprop.0+0xa10/0xa10 [ 2824.033489][T12911] ? _raw_spin_lock_irqsave+0x42/0x50 [ 2824.038880][T12911] ? lock_acquire+0x1ae/0x510 [ 2824.043626][T12911] ? handle_edge_irq+0x40a/0xcf0 [ 2824.048601][T12911] __x64_sys_process_vm_writev+0xe2/0x1b0 [ 2824.054348][T12911] ? syscall_enter_from_user_mode+0x26/0x80 [ 2824.060268][T12911] do_syscall_64+0x3f/0x110 [ 2824.064795][T12911] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2824.070703][T12911] RIP: 0033:0x7f6fcfc7cae9 [ 2824.075130][T12911] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2824.094756][T12911] RSP: 002b:00007f6fd098a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2824.103219][T12911] RAX: ffffffffffffffda RBX: 00007f6fcfd9c050 RCX: 00007f6fcfc7cae9 [ 2824.111208][T12911] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000002c2d [ 2824.119190][T12911] RBP: 00007f6fd098a120 R08: 0000000000000001 R09: 0000000000000000 [ 2824.127188][T12911] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000001 [ 2824.135173][T12911] R13: 000000000000006e R14: 00007f6fcfd9c050 R15: 00007f6fcfebfa48 [ 2824.143174][T12911] 06:05:20 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2, r1}, 0x90) (async) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0), 0x0) (async) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000ac0)) write$FUSE_GETXATTR(r1, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0x1}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) write$dsp(r0, &(0x7f0000000340)="3d66ae8c34871360e66c98c0f741a3384537c3f24c24e7fc2ffd72805534bef7f47897cc7dd2cdad6d2a5c447c584d927a9d25ef28e0ece0f285256bcb5522e2fc4d187f21475a4038ffe2625b52f06bca56874c417bf3d0dcf7f058bf01c2187fc85de0c7fb13d2274550b361a28bf3fba8eb4aee36993c5e8792b5f59e5c86d0a6376d9dab2db51e4dc50d953dd6a25c9c0655b243bdf17bc52808", 0x9c) (async) r2 = gettid() ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r5}, 0x90) (async) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000001c0), 0x0) (async) ioctl$NS_GET_OWNER_UID(r5, 0xb704, &(0x7f0000000ac0)) (async) ioctl$SNDCTL_DSP_RESET(r5, 0x5000, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) (async) ioctl$int_in(r3, 0x5452, &(0x7f0000000100)=0x1000000000003e) (async) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r4}], 0x1, 0xfffffffffffffff8) dup2(r3, r4) (async) r6 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r6}, 0x90) (async) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000001c0), 0x0) (async) ioctl$NS_GET_OWNER_UID(r6, 0xb704, &(0x7f0000000ac0)) (async) ioctl$mixer_OSS_ALSAEMULVER(r6, 0x80044df9, &(0x7f0000000040)) (async) fcntl$setown(r4, 0x8, r2) (async) sendmsg$xdp(r5, &(0x7f0000000540)={&(0x7f0000000140)={0x2c, 0x6, 0x0, 0x1b}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000400)="b89ae7c9a2f921a329bb9e6cb83b50a63869da48369c86467bb9f1917d9d72529b2a88c75f0ebeed75f517cb8ce9d83ed8a4b75258e4237bae21aa15ccf67218ad867ec993bf3d83f0e48abf29741211ab12a50256cb0395bb2a604b9a34720ec9b059c3d03fdf7f26101f546175325df93fd4d87425d41c15998495b1746194800cca29fe0be2d2a0d706dcac4bb37fec9558f1e3c2094eb098280f280792c28937c441e62a142066864fdbecf51d45a681bca888f3da53373960498dc160daf6", 0xc1}], 0x1, 0x0, 0x0, 0x8000}, 0x5c5f1c96f539fcc) (async) tkill(r2, 0x14) (async) ptrace$setregset(0x4205, r2, 0x0, &(0x7f0000000000)={&(0x7f0000000240)="847a5ca5ef876f3ac01fda681efc32161fd39808f6a53843578b88c151c9a754519af295fff69f0a2fccd92bfe4c20ef856723c6e89889890f3fe7e1d0cb911d30a073566dbbd6e147da2b698c90454745a3134c8147886a250fe2811e8c1ec094394442c06b499ab174171457d76858f0dfdee42d20f9489f2457ac182549d3901d64e3ef0bfb7c9a4809961edb6dfda0aea2f7e62fa323ccabcbf40c6b79d186b54d4466e1a34e7ce903867aefb730e03c7b75ac09c2bff9e15dd3b0580127a2b1531a4ba235cc8e22eca4f354127c40f525e9a427095cd28e23c7bbc0", 0xde}) 06:05:20 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 8) [ 2824.370115][T12928] FAULT_INJECTION: forcing a failure. [ 2824.370115][T12928] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2824.383568][T12928] CPU: 1 PID: 12928 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 2824.393669][T12928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2824.403759][T12928] Call Trace: [ 2824.407071][T12928] [ 2824.410030][T12928] dump_stack_lvl+0x125/0x1b0 [ 2824.414762][T12928] should_fail_ex+0x496/0x5b0 [ 2824.419499][T12928] ? fs_reclaim_acquire+0xb0/0x150 [ 2824.424665][T12928] __should_fail_alloc_page+0xe7/0x130 [ 2824.430187][T12928] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 2824.436402][T12928] __alloc_pages+0x14e/0x4a0 [ 2824.441019][T12928] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 2824.447811][T12928] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2824.453725][T12928] ? policy_nodemask+0x311/0x480 [ 2824.458686][T12928] alloc_pages_mpol+0x258/0x5f0 [ 2824.463564][T12928] ? mempolicy_in_oom_domain+0x150/0x150 [ 2824.469216][T12928] ? find_held_lock+0x2d/0x110 [ 2824.474020][T12928] vma_alloc_folio+0xad/0x220 [ 2824.478714][T12928] ? alloc_migration_target_by_mpol+0x6b0/0x6b0 [ 2824.484970][T12928] ? find_held_lock+0x2d/0x110 [ 2824.489768][T12928] ? filemap_get_read_batch+0x9b0/0x9b0 [ 2824.495334][T12928] __handle_mm_fault+0x100b/0x3d60 [ 2824.500470][T12928] ? vm_iomap_memory+0x170/0x170 [ 2824.505537][T12928] handle_mm_fault+0x478/0xa00 [ 2824.510330][T12928] __get_user_pages+0x4b2/0x1480 [ 2824.515292][T12928] ? follow_page_mask+0xda0/0xda0 [ 2824.520688][T12928] __gup_longterm_locked+0x278/0x2ab0 [ 2824.526090][T12928] ? get_user_pages_unlocked+0x770/0x770 [ 2824.531740][T12928] ? lock_sync+0x190/0x190 [ 2824.536189][T12928] pin_user_pages_remote+0xee/0x140 [ 2824.541407][T12928] ? __gup_longterm_locked+0x2ab0/0x2ab0 [ 2824.547066][T12928] process_vm_rw_core.constprop.0+0x43d/0xa10 [ 2824.553259][T12928] ? vmalloc_dump_obj+0x290/0x290 [ 2824.558321][T12928] process_vm_rw+0x2ff/0x360 [ 2824.562926][T12928] ? process_vm_rw_core.constprop.0+0xa10/0xa10 [ 2824.569184][T12928] ? ksys_write+0x214/0x250 [ 2824.573707][T12928] ? reacquire_held_locks+0x4b0/0x4b0 [ 2824.579129][T12928] ? vfs_write+0x14c/0xdf0 [ 2824.583584][T12928] ? bit_wait_io_timeout+0x160/0x160 [ 2824.588919][T12928] ? fput+0x30/0x1a0 [ 2824.592840][T12928] ? ksys_write+0x1a7/0x250 [ 2824.597376][T12928] __x64_sys_process_vm_writev+0xe2/0x1b0 [ 2824.603131][T12928] ? syscall_enter_from_user_mode+0x26/0x80 [ 2824.609060][T12928] do_syscall_64+0x3f/0x110 [ 2824.613594][T12928] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2824.619506][T12928] RIP: 0033:0x7f6fcfc7cae9 [ 2824.623930][T12928] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2824.643566][T12928] RSP: 002b:00007f6fd098a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2824.652005][T12928] RAX: ffffffffffffffda RBX: 00007f6fcfd9c050 RCX: 00007f6fcfc7cae9 [ 2824.659987][T12928] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000002c30 06:05:21 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) ioctl$SNDCTL_DSP_POST(r1, 0x5008, 0x0) 06:05:21 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0x80105013, &(0x7f0000000080)=0xe3) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) [ 2824.667969][T12928] RBP: 00007f6fd098a120 R08: 0000000000000001 R09: 0000000000000000 [ 2824.675951][T12928] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000001 [ 2824.683931][T12928] R13: 000000000000006e R14: 00007f6fcfd9c050 R15: 00007f6fcfebfa48 [ 2824.691928][T12928] 06:05:21 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 9) 06:05:21 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) read$dsp(r0, &(0x7f0000000600)=""/72, 0x48) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@bridge_setlink={0x3c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r5}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x4, 0x0, 0x1, {0x14, 0xa, 0x0, 0x1, [{0x8, 0x1}, {0x8, 0x2}]}}]}]}, 0x3c}}, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@bridge_setlink={0x3c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r8, 0x0, 0x10}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x4, 0x0, 0x1, {0x14, 0xa, 0x0, 0x1, [{0x8, 0x1}, {0x8, 0x2}]}}]}]}, 0x3c}}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x34, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xe9}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x4804c}, 0x20048011) tkill(r1, 0x14) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0}, &(0x7f0000000280)=0xc) process_vm_readv(r10, &(0x7f0000000440)=[{&(0x7f0000000380)=""/185, 0xb9}, {&(0x7f00000002c0)=""/96, 0x60}], 0x2, &(0x7f00000005c0)=[{&(0x7f0000000480)=""/13, 0xd}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000000580)}], 0x3, 0x0) 06:05:21 executing program 5: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r4, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3f3, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) 06:05:21 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) r4 = getpid() getpgid(r4) sched_setscheduler(r4, 0x2, &(0x7f0000000b80)) r5 = fanotify_init(0x4, 0x1) fcntl$setown(r5, 0x8, r4) tkill(r1, 0x14) 06:05:22 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 10) 06:05:22 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0x80105014, &(0x7f0000000080)=0xe3) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) [ 2825.641146][T12960] FAULT_INJECTION: forcing a failure. [ 2825.641146][T12960] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2825.659393][T12960] CPU: 1 PID: 12960 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 2825.669519][T12960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2825.679610][T12960] Call Trace: [ 2825.682922][T12960] [ 2825.685893][T12960] dump_stack_lvl+0x125/0x1b0 [ 2825.690619][T12960] should_fail_ex+0x496/0x5b0 [ 2825.695401][T12960] ? fs_reclaim_acquire+0xb0/0x150 [ 2825.700520][T12960] __should_fail_alloc_page+0xe7/0x130 [ 2825.706004][T12960] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 2825.712198][T12960] __alloc_pages+0x14e/0x4a0 [ 2825.716816][T12960] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 2825.723638][T12960] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2825.729570][T12960] ? policy_nodemask+0x311/0x480 [ 2825.734522][T12960] alloc_pages_mpol+0x258/0x5f0 [ 2825.739382][T12960] ? mempolicy_in_oom_domain+0x150/0x150 [ 2825.745027][T12960] ? find_held_lock+0x2d/0x110 [ 2825.749829][T12960] vma_alloc_folio+0xad/0x220 [ 2825.754515][T12960] ? alloc_migration_target_by_mpol+0x6b0/0x6b0 [ 2825.760758][T12960] ? find_held_lock+0x2d/0x110 [ 2825.765537][T12960] ? filemap_get_read_batch+0x9b0/0x9b0 [ 2825.771101][T12960] __handle_mm_fault+0x100b/0x3d60 [ 2825.776227][T12960] ? vm_iomap_memory+0x170/0x170 [ 2825.781209][T12960] handle_mm_fault+0x478/0xa00 [ 2825.785982][T12960] __get_user_pages+0x4b2/0x1480 [ 2825.790937][T12960] ? follow_page_mask+0xda0/0xda0 [ 2825.796024][T12960] __gup_longterm_locked+0x278/0x2ab0 [ 2825.801408][T12960] ? get_user_pages_unlocked+0x770/0x770 [ 2825.807047][T12960] ? lock_sync+0x190/0x190 [ 2825.811496][T12960] pin_user_pages_remote+0xee/0x140 [ 2825.816725][T12960] ? __gup_longterm_locked+0x2ab0/0x2ab0 [ 2825.822534][T12960] process_vm_rw_core.constprop.0+0x43d/0xa10 [ 2825.828622][T12960] ? asm_common_interrupt+0x26/0x40 [ 2825.833828][T12960] ? lockdep_hardirqs_on+0x7d/0x100 [ 2825.839027][T12960] ? vmalloc_dump_obj+0x290/0x290 [ 2825.844062][T12960] process_vm_rw+0x2ff/0x360 [ 2825.848658][T12960] ? process_vm_rw_core.constprop.0+0xa10/0xa10 [ 2825.854898][T12960] ? ksys_write+0x214/0x250 [ 2825.859412][T12960] ? reacquire_held_locks+0x4b0/0x4b0 [ 2825.864799][T12960] ? vfs_write+0x14c/0xdf0 [ 2825.869225][T12960] ? bit_wait_io_timeout+0x160/0x160 [ 2825.874520][T12960] ? fput+0x30/0x1a0 [ 2825.878423][T12960] ? ksys_write+0x1a7/0x250 [ 2825.882934][T12960] __x64_sys_process_vm_writev+0xe2/0x1b0 [ 2825.888658][T12960] ? syscall_enter_from_user_mode+0x26/0x80 [ 2825.894560][T12960] do_syscall_64+0x3f/0x110 [ 2825.899072][T12960] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2825.905085][T12960] RIP: 0033:0x7f6fcfc7cae9 [ 2825.909496][T12960] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2825.929113][T12960] RSP: 002b:00007f6fd098a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2825.937525][T12960] RAX: ffffffffffffffda RBX: 00007f6fcfd9c050 RCX: 00007f6fcfc7cae9 [ 2825.945490][T12960] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000002c36 [ 2825.953455][T12960] RBP: 00007f6fd098a120 R08: 0000000000000001 R09: 0000000000000000 [ 2825.961423][T12960] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000002 [ 2825.969400][T12960] R13: 000000000000006e R14: 00007f6fcfd9c050 R15: 00007f6fcfebfa48 [ 2825.977385][T12960] 06:05:22 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) ioctl$SNDCTL_DSP_POST(r1, 0x5008, 0x0) 06:05:22 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) read$dsp(r0, &(0x7f0000000600)=""/72, 0x48) (async, rerun: 64) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) (rerun: 64) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) r1 = gettid() (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r2, 0xa, 0x12) (async) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) (async, rerun: 32) fcntl$setown(r3, 0x8, r1) (async, rerun: 32) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) (async, rerun: 32) r6 = socket(0x10, 0x80002, 0x0) (rerun: 32) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@bridge_setlink={0x3c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r5}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x4, 0x0, 0x1, {0x14, 0xa, 0x0, 0x1, [{0x8, 0x1}, {0x8, 0x2}]}}]}]}, 0x3c}}, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@bridge_setlink={0x3c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r8, 0x0, 0x10}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x4, 0x0, 0x1, {0x14, 0xa, 0x0, 0x1, [{0x8, 0x1}, {0x8, 0x2}]}}]}]}, 0x3c}}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x34, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xe9}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x4804c}, 0x20048011) tkill(r1, 0x14) (async) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0}, &(0x7f0000000280)=0xc) process_vm_readv(r10, &(0x7f0000000440)=[{&(0x7f0000000380)=""/185, 0xb9}, {&(0x7f00000002c0)=""/96, 0x60}], 0x2, &(0x7f00000005c0)=[{&(0x7f0000000480)=""/13, 0xd}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000000580)}], 0x3, 0x0) 06:05:22 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 11) 06:05:22 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) read$dsp(r0, &(0x7f0000000600)=""/72, 0x48) (async) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) r1 = gettid() ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) (async) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) (async, rerun: 32) fcntl$setsig(r2, 0xa, 0x12) (async, rerun: 32) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) (async) fcntl$setown(r3, 0x8, r1) (async) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) (async, rerun: 32) r6 = socket(0x10, 0x80002, 0x0) (rerun: 32) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@bridge_setlink={0x3c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r5}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x4, 0x0, 0x1, {0x14, 0xa, 0x0, 0x1, [{0x8, 0x1}, {0x8, 0x2}]}}]}]}, 0x3c}}, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) (async) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@bridge_setlink={0x3c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r8, 0x0, 0x10}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x4, 0x0, 0x1, {0x14, 0xa, 0x0, 0x1, [{0x8, 0x1}, {0x8, 0x2}]}}]}]}, 0x3c}}, 0x0) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x34, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xe9}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x4804c}, 0x20048011) (async) tkill(r1, 0x14) (async) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0}, &(0x7f0000000280)=0xc) process_vm_readv(r10, &(0x7f0000000440)=[{&(0x7f0000000380)=""/185, 0xb9}, {&(0x7f00000002c0)=""/96, 0x60}], 0x2, &(0x7f00000005c0)=[{&(0x7f0000000480)=""/13, 0xd}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000000580)}], 0x3, 0x0) 06:05:23 executing program 5: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r4, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3f4, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) 06:05:23 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 12) 06:05:23 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0x801c581f, &(0x7f0000000080)=0xe3) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) [ 2827.096808][T12994] FAULT_INJECTION: forcing a failure. [ 2827.096808][T12994] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2827.110984][T12994] CPU: 1 PID: 12994 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 2827.121104][T12994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2827.131191][T12994] Call Trace: [ 2827.134497][T12994] [ 2827.137442][T12994] dump_stack_lvl+0x125/0x1b0 [ 2827.142171][T12994] should_fail_ex+0x496/0x5b0 [ 2827.146898][T12994] ? fs_reclaim_acquire+0xb0/0x150 [ 2827.152057][T12994] __should_fail_alloc_page+0xe7/0x130 [ 2827.157565][T12994] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 2827.163737][T12994] __alloc_pages+0x14e/0x4a0 [ 2827.168350][T12994] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 2827.175126][T12994] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2827.181025][T12994] ? policy_nodemask+0x311/0x480 [ 2827.185966][T12994] alloc_pages_mpol+0x258/0x5f0 [ 2827.190815][T12994] ? mempolicy_in_oom_domain+0x150/0x150 [ 2827.196444][T12994] ? find_held_lock+0x2d/0x110 [ 2827.201211][T12994] vma_alloc_folio+0xad/0x220 [ 2827.205888][T12994] ? alloc_migration_target_by_mpol+0x6b0/0x6b0 [ 2827.212159][T12994] ? find_held_lock+0x2d/0x110 [ 2827.216947][T12994] ? filemap_get_read_batch+0x9b0/0x9b0 [ 2827.222516][T12994] __handle_mm_fault+0x100b/0x3d60 [ 2827.227638][T12994] ? vm_iomap_memory+0x170/0x170 [ 2827.232589][T12994] handle_mm_fault+0x478/0xa00 [ 2827.237356][T12994] __get_user_pages+0x4b2/0x1480 [ 2827.242292][T12994] ? follow_page_mask+0xda0/0xda0 [ 2827.247347][T12994] __gup_longterm_locked+0x278/0x2ab0 [ 2827.252722][T12994] ? get_user_pages_unlocked+0x770/0x770 [ 2827.258350][T12994] ? lock_sync+0x190/0x190 [ 2827.262775][T12994] pin_user_pages_remote+0xee/0x140 [ 2827.267973][T12994] ? __gup_longterm_locked+0x2ab0/0x2ab0 [ 2827.273614][T12994] process_vm_rw_core.constprop.0+0x43d/0xa10 [ 2827.279689][T12994] ? vmalloc_dump_obj+0x290/0x290 [ 2827.284741][T12994] process_vm_rw+0x2ff/0x360 [ 2827.289330][T12994] ? process_vm_rw_core.constprop.0+0xa10/0xa10 [ 2827.295582][T12994] ? ksys_write+0x214/0x250 [ 2827.300083][T12994] ? reacquire_held_locks+0x4b0/0x4b0 [ 2827.305473][T12994] ? vfs_write+0x14c/0xdf0 [ 2827.309916][T12994] ? bit_wait_io_timeout+0x160/0x160 [ 2827.315210][T12994] ? asm_common_interrupt+0x26/0x40 [ 2827.320415][T12994] __x64_sys_process_vm_writev+0xe2/0x1b0 [ 2827.326147][T12994] ? __ia32_sys_process_vm_readv+0x1b0/0x1b0 [ 2827.332154][T12994] do_syscall_64+0x3f/0x110 [ 2827.336669][T12994] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2827.342593][T12994] RIP: 0033:0x7f6fcfc7cae9 [ 2827.347008][T12994] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2827.366618][T12994] RSP: 002b:00007f6fd098a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2827.375029][T12994] RAX: ffffffffffffffda RBX: 00007f6fcfd9c050 RCX: 00007f6fcfc7cae9 [ 2827.383000][T12994] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000002c3c [ 2827.390973][T12994] RBP: 00007f6fd098a120 R08: 0000000000000001 R09: 0000000000000000 [ 2827.398941][T12994] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000002 [ 2827.406919][T12994] R13: 000000000000006e R14: 00007f6fcfd9c050 R15: 00007f6fcfebfa48 [ 2827.414898][T12994] 06:05:24 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 13) [ 2827.681979][T12998] FAULT_INJECTION: forcing a failure. [ 2827.681979][T12998] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2827.701172][T12998] CPU: 0 PID: 12998 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 2827.711337][T12998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2827.721414][T12998] Call Trace: [ 2827.724728][T12998] 06:05:24 executing program 5: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r4, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3f5, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) [ 2827.727692][T12998] dump_stack_lvl+0x125/0x1b0 [ 2827.732531][T12998] should_fail_ex+0x496/0x5b0 [ 2827.737226][T12998] ? fs_reclaim_acquire+0xb0/0x150 [ 2827.742349][T12998] __should_fail_alloc_page+0xe7/0x130 [ 2827.747828][T12998] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 2827.753997][T12998] __alloc_pages+0x14e/0x4a0 [ 2827.758599][T12998] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 2827.765552][T12998] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2827.771474][T12998] ? policy_nodemask+0x311/0x480 [ 2827.776435][T12998] alloc_pages_mpol+0x258/0x5f0 [ 2827.781348][T12998] ? mempolicy_in_oom_domain+0x150/0x150 [ 2827.786986][T12998] ? find_held_lock+0x2d/0x110 [ 2827.791763][T12998] vma_alloc_folio+0xad/0x220 [ 2827.796455][T12998] ? alloc_migration_target_by_mpol+0x6b0/0x6b0 [ 2827.802736][T12998] ? find_held_lock+0x2d/0x110 [ 2827.807533][T12998] __handle_mm_fault+0xe06/0x3d60 [ 2827.812588][T12998] ? vm_iomap_memory+0x170/0x170 [ 2827.817979][T12998] handle_mm_fault+0x478/0xa00 [ 2827.822755][T12998] __get_user_pages+0x4b2/0x1480 [ 2827.827798][T12998] ? follow_page_mask+0xda0/0xda0 [ 2827.832843][T12998] __gup_longterm_locked+0x278/0x2ab0 [ 2827.838262][T12998] ? get_user_pages_unlocked+0x770/0x770 [ 2827.843938][T12998] ? lock_sync+0x190/0x190 [ 2827.848375][T12998] pin_user_pages_remote+0xee/0x140 [ 2827.853589][T12998] ? __gup_longterm_locked+0x2ab0/0x2ab0 [ 2827.859225][T12998] process_vm_rw_core.constprop.0+0x43d/0xa10 [ 2827.865320][T12998] ? vmalloc_dump_obj+0x290/0x290 [ 2827.870378][T12998] process_vm_rw+0x2ff/0x360 [ 2827.874990][T12998] ? process_vm_rw_core.constprop.0+0xa10/0xa10 [ 2827.881236][T12998] ? ksys_write+0x214/0x250 [ 2827.885782][T12998] ? reacquire_held_locks+0x4b0/0x4b0 [ 2827.891191][T12998] ? vfs_write+0x14c/0xdf0 [ 2827.895630][T12998] ? bit_wait_io_timeout+0x160/0x160 [ 2827.900928][T12998] ? fput+0x30/0x1a0 [ 2827.904832][T12998] ? ksys_write+0x1a7/0x250 [ 2827.909346][T12998] __x64_sys_process_vm_writev+0xe2/0x1b0 [ 2827.915069][T12998] ? syscall_enter_from_user_mode+0x26/0x80 [ 2827.920964][T12998] do_syscall_64+0x3f/0x110 [ 2827.925498][T12998] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2827.931397][T12998] RIP: 0033:0x7f6fcfc7cae9 [ 2827.935813][T12998] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2827.955425][T12998] RSP: 002b:00007f6fd09ab0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2827.963852][T12998] RAX: ffffffffffffffda RBX: 00007f6fcfd9bf80 RCX: 00007f6fcfc7cae9 [ 2827.971837][T12998] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000002c3e [ 2827.979812][T12998] RBP: 00007f6fd09ab120 R08: 0000000000000001 R09: 0000000000000000 [ 2827.987784][T12998] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000002 [ 2827.995769][T12998] R13: 000000000000000b R14: 00007f6fcfd9bf80 R15: 00007f6fcfebfa48 [ 2828.003792][T12998] 06:05:24 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) (async) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) gettid() (async) r1 = gettid() pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r2, 0xa, 0x12) (async) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) (async) dup2(r2, r3) r4 = getpid() getpgid(r4) sched_setscheduler(r4, 0x2, &(0x7f0000000b80)) (async) sched_setscheduler(r4, 0x2, &(0x7f0000000b80)) fanotify_init(0x4, 0x1) (async) r5 = fanotify_init(0x4, 0x1) fcntl$setown(r5, 0x8, r4) tkill(r1, 0x14) 06:05:24 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045002, &(0x7f0000000080)=0xe3) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) 06:05:24 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 14) [ 2828.495202][T13014] FAULT_INJECTION: forcing a failure. [ 2828.495202][T13014] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2828.509202][T13014] CPU: 1 PID: 13014 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 2828.519311][T13014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2828.529391][T13014] Call Trace: [ 2828.532705][T13014] [ 2828.535645][T13014] dump_stack_lvl+0x125/0x1b0 [ 2828.540389][T13014] should_fail_ex+0x496/0x5b0 [ 2828.545121][T13014] ? fs_reclaim_acquire+0xb0/0x150 [ 2828.550285][T13014] __should_fail_alloc_page+0xe7/0x130 [ 2828.556570][T13014] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 2828.562773][T13014] __alloc_pages+0x14e/0x4a0 [ 2828.567386][T13014] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 2828.574197][T13014] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2828.580113][T13014] ? policy_nodemask+0x311/0x480 [ 2828.585068][T13014] alloc_pages_mpol+0x258/0x5f0 [ 2828.589942][T13014] ? mempolicy_in_oom_domain+0x150/0x150 [ 2828.595596][T13014] ? find_held_lock+0x2d/0x110 [ 2828.600392][T13014] vma_alloc_folio+0xad/0x220 [ 2828.605087][T13014] ? alloc_migration_target_by_mpol+0x6b0/0x6b0 [ 2828.611363][T13014] ? find_held_lock+0x2d/0x110 [ 2828.616162][T13014] ? filemap_get_read_batch+0x9b0/0x9b0 [ 2828.621735][T13014] __handle_mm_fault+0x100b/0x3d60 [ 2828.626871][T13014] ? vm_iomap_memory+0x170/0x170 [ 2828.631865][T13014] handle_mm_fault+0x478/0xa00 [ 2828.636655][T13014] __get_user_pages+0x4b2/0x1480 [ 2828.641617][T13014] ? follow_page_mask+0xda0/0xda0 [ 2828.646662][T13014] __gup_longterm_locked+0x278/0x2ab0 [ 2828.652068][T13014] ? get_user_pages_unlocked+0x770/0x770 [ 2828.657727][T13014] ? lock_sync+0x190/0x190 [ 2828.662188][T13014] pin_user_pages_remote+0xee/0x140 [ 2828.667409][T13014] ? __gup_longterm_locked+0x2ab0/0x2ab0 [ 2828.673069][T13014] process_vm_rw_core.constprop.0+0x43d/0xa10 [ 2828.679162][T13014] ? vmalloc_dump_obj+0x290/0x290 [ 2828.684227][T13014] process_vm_rw+0x2ff/0x360 [ 2828.688832][T13014] ? process_vm_rw_core.constprop.0+0xa10/0xa10 [ 2828.699599][T13014] ? ksys_write+0x214/0x250 [ 2828.704126][T13014] ? reacquire_held_locks+0x4b0/0x4b0 [ 2828.709520][T13014] ? vfs_write+0x14c/0xdf0 [ 2828.713959][T13014] ? bit_wait_io_timeout+0x160/0x160 [ 2828.719267][T13014] ? fput+0x30/0x1a0 [ 2828.723180][T13014] ? ksys_write+0x1a7/0x250 [ 2828.727709][T13014] __x64_sys_process_vm_writev+0xe2/0x1b0 [ 2828.733451][T13014] ? syscall_enter_from_user_mode+0x26/0x80 [ 2828.739361][T13014] do_syscall_64+0x3f/0x110 [ 2828.743886][T13014] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2828.749799][T13014] RIP: 0033:0x7f6fcfc7cae9 [ 2828.754225][T13014] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2828.773848][T13014] RSP: 002b:00007f6fd098a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2828.782292][T13014] RAX: ffffffffffffffda RBX: 00007f6fcfd9c050 RCX: 00007f6fcfc7cae9 [ 2828.790293][T13014] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000002c42 [ 2828.798307][T13014] RBP: 00007f6fd098a120 R08: 0000000000000001 R09: 0000000000000000 [ 2828.806289][T13014] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000002 [ 2828.814354][T13014] R13: 000000000000006e R14: 00007f6fcfd9c050 R15: 00007f6fcfebfa48 [ 2828.822347][T13014] 06:05:27 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 15) 06:05:27 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) ioctl$SNDCTL_DSP_POST(r1, 0x5008, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) (async) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) (async) pipe2(&(0x7f0000000000), 0x800) (async) ioctl$SNDCTL_DSP_POST(r1, 0x5008, 0x0) (async) 06:05:27 executing program 1: mknod(&(0x7f0000000000)='./file0\x00', 0x80, 0x800) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r2 = gettid() ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) ioctl$int_in(r3, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r4}], 0x1, 0xfffffffffffffff8) dup2(r3, r4) fcntl$setown(r4, 0x8, r2) tkill(r2, 0x14) 06:05:27 executing program 5: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r4, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3f6, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) 06:05:27 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045003, &(0x7f0000000080)=0xe3) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) 06:05:27 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045004, &(0x7f0000000080)=0xe3) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) 06:05:27 executing program 1: mknod(&(0x7f0000000000)='./file0\x00', 0x80, 0x800) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) (async) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) (async) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) r2 = gettid() ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) ioctl$int_in(r3, 0x5452, &(0x7f0000000200)=0x1000000000003e) (async) fcntl$setsig(r3, 0xa, 0x12) (async) poll(&(0x7f0000b2c000)=[{r4}], 0x1, 0xfffffffffffffff8) (async) dup2(r3, r4) fcntl$setown(r4, 0x8, r2) tkill(r2, 0x14) 06:05:28 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 16) [ 2831.576765][T13054] FAULT_INJECTION: forcing a failure. [ 2831.576765][T13054] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2831.590650][T13054] CPU: 1 PID: 13054 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 2831.600837][T13054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2831.610915][T13054] Call Trace: [ 2831.614214][T13054] [ 2831.617170][T13054] dump_stack_lvl+0x125/0x1b0 [ 2831.621907][T13054] should_fail_ex+0x496/0x5b0 [ 2831.626645][T13054] ? fs_reclaim_acquire+0xb0/0x150 [ 2831.631807][T13054] __should_fail_alloc_page+0xe7/0x130 [ 2831.637322][T13054] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 2831.643532][T13054] __alloc_pages+0x14e/0x4a0 [ 2831.648174][T13054] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 2831.654996][T13054] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2831.665713][T13054] ? policy_nodemask+0x311/0x480 [ 2831.670719][T13054] alloc_pages_mpol+0x258/0x5f0 [ 2831.675624][T13054] ? mempolicy_in_oom_domain+0x150/0x150 [ 2831.681304][T13054] ? find_held_lock+0x2d/0x110 [ 2831.686128][T13054] vma_alloc_folio+0xad/0x220 [ 2831.690867][T13054] ? alloc_migration_target_by_mpol+0x6b0/0x6b0 [ 2831.697146][T13054] ? find_held_lock+0x2d/0x110 [ 2831.701942][T13054] ? filemap_get_read_batch+0x9b0/0x9b0 [ 2831.707513][T13054] __handle_mm_fault+0x100b/0x3d60 [ 2831.712650][T13054] ? vm_iomap_memory+0x170/0x170 [ 2831.717646][T13054] handle_mm_fault+0x478/0xa00 [ 2831.722435][T13054] __get_user_pages+0x4b2/0x1480 [ 2831.727394][T13054] ? follow_page_mask+0xda0/0xda0 [ 2831.732443][T13054] __gup_longterm_locked+0x278/0x2ab0 [ 2831.737849][T13054] ? get_user_pages_unlocked+0x770/0x770 [ 2831.743518][T13054] ? lock_sync+0x190/0x190 [ 2831.747984][T13054] pin_user_pages_remote+0xee/0x140 [ 2831.753210][T13054] ? __gup_longterm_locked+0x2ab0/0x2ab0 [ 2831.758869][T13054] process_vm_rw_core.constprop.0+0x43d/0xa10 [ 2831.764961][T13054] ? vmalloc_dump_obj+0x290/0x290 [ 2831.770025][T13054] process_vm_rw+0x2ff/0x360 [ 2831.774628][T13054] ? process_vm_rw_core.constprop.0+0xa10/0xa10 [ 2831.781056][T13054] ? ksys_write+0x214/0x250 [ 2831.785602][T13054] ? reacquire_held_locks+0x4b0/0x4b0 [ 2831.791004][T13054] ? vfs_write+0x14c/0xdf0 [ 2831.795450][T13054] ? irqentry_enter+0x2c/0x50 [ 2831.800139][T13054] ? rcu_is_watching+0x12/0xb0 [ 2831.804940][T13054] __x64_sys_process_vm_writev+0xe2/0x1b0 [ 2831.810678][T13054] ? syscall_enter_from_user_mode+0x26/0x80 [ 2831.816587][T13054] do_syscall_64+0x3f/0x110 [ 2831.821198][T13054] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2831.827114][T13054] RIP: 0033:0x7f6fcfc7cae9 [ 2831.831557][T13054] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2831.851191][T13054] RSP: 002b:00007f6fd098a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2831.859617][T13054] RAX: ffffffffffffffda RBX: 00007f6fcfd9c050 RCX: 00007f6fcfc7cae9 [ 2831.867620][T13054] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000002c48 06:05:28 executing program 5: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r4, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3f7, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) [ 2831.875600][T13054] RBP: 00007f6fd098a120 R08: 0000000000000001 R09: 0000000000000000 [ 2831.883579][T13054] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000002 [ 2831.891573][T13054] R13: 000000000000006e R14: 00007f6fcfd9c050 R15: 00007f6fcfebfa48 [ 2831.899571][T13054] 06:05:29 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) r1 = gettid() (async) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) (async) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r2, 0xa, 0x12) (async) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) (async) dup2(r2, r3) r4 = getpid() getpgid(r4) (async) sched_setscheduler(r4, 0x2, &(0x7f0000000b80)) (async) r5 = fanotify_init(0x4, 0x1) fcntl$setown(r5, 0x8, r4) (async) tkill(r1, 0x14) 06:05:29 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045006, &(0x7f0000000080)=0xe3) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) 06:05:29 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 17) 06:05:32 executing program 1: mknod(&(0x7f0000000000)='./file0\x00', 0x80, 0x800) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) (async) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) r2 = gettid() (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) (async) ioctl$int_in(r3, 0x5452, &(0x7f0000000200)=0x1000000000003e) (async) fcntl$setsig(r3, 0xa, 0x12) (async, rerun: 32) poll(&(0x7f0000b2c000)=[{r4}], 0x1, 0xfffffffffffffff8) (async, rerun: 32) dup2(r3, r4) (async) fcntl$setown(r4, 0x8, r2) (async) tkill(r2, 0x14) 06:05:32 executing program 5: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r4, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3f8, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) 06:05:32 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 18) 06:05:32 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045007, &(0x7f0000000080)=0xe3) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) 06:05:32 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) r5 = openat$incfs(r1, &(0x7f0000000140)='.pending_reads\x00', 0x100, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000380)={'ip_vti0\x00', r3, 0x7800, 0x80, 0x9, 0x1, {{0x3c, 0x4, 0x1, 0x1, 0xf0, 0x65, 0x0, 0x40, 0x2f, 0x0, @loopback, @multicast1, {[@ssrr={0x89, 0x23, 0x88, [@loopback, @multicast2, @multicast2, @remote, @broadcast, @local, @remote, @remote]}, @timestamp_prespec={0x44, 0x1c, 0xe7, 0x3, 0xd, [{@local, 0x1e}, {@multicast2, 0x5}, {@broadcast, 0x8}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0xc8, 0x0, 0x9, [0x5, 0x3]}, @timestamp={0x44, 0x14, 0x84, 0x0, 0x3, [0x0, 0x280, 0x1, 0x0]}, @timestamp_addr={0x44, 0x34, 0xc8, 0x1, 0x4, [{@private=0xa010100, 0x5}, {@multicast1, 0x8}, {@private=0xa010101, 0x7}, {@local, 0xae}, {@empty, 0xeeb}, {@local, 0x7ff}]}, @ssrr={0x89, 0xb, 0x7d, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop, @timestamp_prespec={0x44, 0xc, 0x6a, 0x3, 0x8, [{@broadcast, 0x2cbea267}]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x6, [0x1ff, 0x6, 0x8, 0x0, 0x3, 0x80, 0x9, 0xce, 0x6, 0x0]}]}}}}}) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@bridge_setlink={0x3c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r9}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x4, 0x0, 0x1, {0x14, 0xa, 0x0, 0x1, [{0x8, 0x1}, {0x8, 0x2}]}}]}]}, 0x3c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000580)={'syztnl1\x00', &(0x7f0000000540)={'syztnl1\x00', r9, 0x700, 0x1, 0xff47fda9, 0x100000, {{0x6, 0x4, 0x1, 0x5, 0x18, 0x65, 0x0, 0x3, 0x29, 0x0, @multicast1, @remote, {[@noop]}}}}}) r11 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r13 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@bridge_setlink={0x3c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r12}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x4, 0x0, 0x1, {0x14, 0xa, 0x0, 0x1, [{0x8, 0x1}, {0x8, 0x2}]}}]}]}, 0x3c}}, 0x0) r14 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r16 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r16, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0a0000000008003ed0e30900000000000000ad569033d86a5d3393a60ea7150a1b25080000004b9fee9439c51e1a0efe86b8f2dbb1a12407b6c8a53c1528267fdc5a79b9532bd26b298494daf88751cd7964dfb3841ada30078b4b21d23a3f05af0900000098ee595dd83ec3067600"/140, @ANYRES32=r15, @ANYBLOB="00000000000000001c001a801800048014000a8008000100000000000800020000000000"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)=@ipv6_delroute={0x74, 0x19, 0x400, 0x70bd2d, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xfa, 0xfe, 0x4, 0x0, 0x5, 0x2600}, [@RTA_OIF={0x8, 0x4, r6}, @RTA_GATEWAY={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @RTA_OIF={0x8, 0x4, r7}, @RTA_EXPIRES={0x8, 0x17, 0xfa4}, @RTA_PRIORITY={0x8, 0x6, 0x3}, @RTA_OIF={0x8, 0x4, r12}, @RTA_PRIORITY={0x8, 0x6, 0x25}, @RTA_MARK={0x8, 0x10, 0x5}, @RTA_MULTIPATH={0xc, 0x9, {0x400, 0x24, 0x3, r15}}]}, 0x74}, 0x1, 0x0, 0x0, 0x10000014}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@bridge_setlink={0x3c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x4, 0x0, 0x1, {0x14, 0xa, 0x0, 0x1, [{0x8, 0x1}, {0x8, 0x2}]}}]}]}, 0x3c}}, 0x0) poll(&(0x7f0000000100)=[{r1, 0x421}, {r4, 0x20}, {r0}, {r0, 0x4}], 0x4, 0x2) ioctl$SNDCTL_DSP_GETOSPACE(r1, 0x8010500c, &(0x7f0000000040)) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) [ 2835.607415][T13088] FAULT_INJECTION: forcing a failure. [ 2835.607415][T13088] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2835.624036][T13088] CPU: 1 PID: 13088 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 2835.634165][T13088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2835.644238][T13088] Call Trace: [ 2835.647557][T13088] [ 2835.650519][T13088] dump_stack_lvl+0x125/0x1b0 [ 2835.655254][T13088] should_fail_ex+0x496/0x5b0 [ 2835.659991][T13088] ? fs_reclaim_acquire+0xb0/0x150 [ 2835.665147][T13088] __should_fail_alloc_page+0xe7/0x130 [ 2835.670664][T13088] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 2835.676881][T13088] __alloc_pages+0x14e/0x4a0 [ 2835.681495][T13088] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 2835.688278][T13088] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2835.694176][T13088] ? policy_nodemask+0x311/0x480 [ 2835.699139][T13088] alloc_pages_mpol+0x258/0x5f0 [ 2835.704048][T13088] ? mempolicy_in_oom_domain+0x150/0x150 [ 2835.709683][T13088] ? find_held_lock+0x2d/0x110 [ 2835.714452][T13088] vma_alloc_folio+0xad/0x220 [ 2835.719125][T13088] ? alloc_migration_target_by_mpol+0x6b0/0x6b0 [ 2835.725362][T13088] ? find_held_lock+0x2d/0x110 [ 2835.730134][T13088] ? filemap_get_read_batch+0x9b0/0x9b0 [ 2835.735683][T13088] __handle_mm_fault+0x100b/0x3d60 [ 2835.740803][T13088] ? vm_iomap_memory+0x170/0x170 [ 2835.745780][T13088] handle_mm_fault+0x478/0xa00 [ 2835.750553][T13088] __get_user_pages+0x4b2/0x1480 [ 2835.755491][T13088] ? follow_page_mask+0xda0/0xda0 [ 2835.760512][T13088] ? __gup_longterm_locked+0xc90/0x2ab0 [ 2835.766055][T13088] __gup_longterm_locked+0x278/0x2ab0 [ 2835.771444][T13088] ? get_user_pages_unlocked+0x770/0x770 [ 2835.777076][T13088] ? lock_sync+0x190/0x190 [ 2835.781507][T13088] pin_user_pages_remote+0xee/0x140 [ 2835.786706][T13088] ? __gup_longterm_locked+0x2ab0/0x2ab0 [ 2835.792344][T13088] process_vm_rw_core.constprop.0+0x43d/0xa10 [ 2835.798424][T13088] ? vmalloc_dump_obj+0x290/0x290 [ 2835.803457][T13088] process_vm_rw+0x2ff/0x360 [ 2835.808045][T13088] ? process_vm_rw_core.constprop.0+0xa10/0xa10 [ 2835.814315][T13088] ? ksys_write+0x214/0x250 [ 2835.818840][T13088] ? reacquire_held_locks+0x4b0/0x4b0 [ 2835.824220][T13088] ? vfs_write+0x14c/0xdf0 [ 2835.828647][T13088] ? bit_wait_io_timeout+0x160/0x160 [ 2835.833941][T13088] ? fput+0x30/0x1a0 [ 2835.837845][T13088] ? ksys_write+0x1a7/0x250 [ 2835.842364][T13088] __x64_sys_process_vm_writev+0xe2/0x1b0 [ 2835.848089][T13088] ? syscall_enter_from_user_mode+0x26/0x80 [ 2835.853981][T13088] do_syscall_64+0x3f/0x110 [ 2835.858487][T13088] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2835.864407][T13088] RIP: 0033:0x7f6fcfc7cae9 [ 2835.868816][T13088] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2835.888420][T13088] RSP: 002b:00007f6fd098a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2835.896832][T13088] RAX: ffffffffffffffda RBX: 00007f6fcfd9c050 RCX: 00007f6fcfc7cae9 [ 2835.904797][T13088] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000002c4e [ 2835.912761][T13088] RBP: 00007f6fd098a120 R08: 0000000000000001 R09: 0000000000000000 [ 2835.920726][T13088] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000002 [ 2835.928702][T13088] R13: 000000000000006e R14: 00007f6fcfd9c050 R15: 00007f6fcfebfa48 [ 2835.936718][T13088] 06:05:32 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 19) 06:05:32 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) ioctl$int_in(r3, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r4}], 0x1, 0xfffffffffffffff8) dup2(r3, r4) fcntl$setown(r4, 0x8, r1) tkill(r1, 0x14) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$SNDCTL_DSP_RESET(r5, 0x5000, 0x0) [ 2836.160211][T13095] FAULT_INJECTION: forcing a failure. [ 2836.160211][T13095] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2836.176801][T13095] CPU: 1 PID: 13095 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 2836.186921][T13095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2836.197011][T13095] Call Trace: [ 2836.200321][T13095] [ 2836.203277][T13095] dump_stack_lvl+0x125/0x1b0 [ 2836.208005][T13095] should_fail_ex+0x496/0x5b0 [ 2836.212745][T13095] ? fs_reclaim_acquire+0xb0/0x150 [ 2836.217906][T13095] __should_fail_alloc_page+0xe7/0x130 [ 2836.223426][T13095] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 2836.229644][T13095] __alloc_pages+0x14e/0x4a0 [ 2836.234335][T13095] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 2836.241164][T13095] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2836.247107][T13095] ? policy_nodemask+0x311/0x480 [ 2836.252099][T13095] alloc_pages_mpol+0x258/0x5f0 [ 2836.257000][T13095] ? mempolicy_in_oom_domain+0x150/0x150 [ 2836.262698][T13095] ? find_held_lock+0x2d/0x110 [ 2836.267521][T13095] vma_alloc_folio+0xad/0x220 [ 2836.272243][T13095] ? alloc_migration_target_by_mpol+0x6b0/0x6b0 [ 2836.278527][T13095] ? find_held_lock+0x2d/0x110 [ 2836.283343][T13095] ? filemap_get_read_batch+0x9b0/0x9b0 [ 2836.288943][T13095] __handle_mm_fault+0x100b/0x3d60 [ 2836.294111][T13095] ? vm_iomap_memory+0x170/0x170 [ 2836.299127][T13095] handle_mm_fault+0x478/0xa00 [ 2836.303950][T13095] __get_user_pages+0x4b2/0x1480 06:05:32 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045008, &(0x7f0000000080)=0xe3) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) [ 2836.308936][T13095] ? follow_page_mask+0xda0/0xda0 [ 2836.314025][T13095] __gup_longterm_locked+0x278/0x2ab0 [ 2836.319467][T13095] ? get_user_pages_unlocked+0x770/0x770 [ 2836.325151][T13095] ? lock_sync+0x190/0x190 [ 2836.329629][T13095] pin_user_pages_remote+0xee/0x140 [ 2836.334876][T13095] ? __gup_longterm_locked+0x2ab0/0x2ab0 [ 2836.340562][T13095] process_vm_rw_core.constprop.0+0x43d/0xa10 [ 2836.346690][T13095] ? vmalloc_dump_obj+0x290/0x290 [ 2836.351791][T13095] process_vm_rw+0x2ff/0x360 06:05:32 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async, rerun: 64) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) (async, rerun: 64) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) (async) r5 = openat$incfs(r1, &(0x7f0000000140)='.pending_reads\x00', 0x100, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000380)={'ip_vti0\x00', r3, 0x7800, 0x80, 0x9, 0x1, {{0x3c, 0x4, 0x1, 0x1, 0xf0, 0x65, 0x0, 0x40, 0x2f, 0x0, @loopback, @multicast1, {[@ssrr={0x89, 0x23, 0x88, [@loopback, @multicast2, @multicast2, @remote, @broadcast, @local, @remote, @remote]}, @timestamp_prespec={0x44, 0x1c, 0xe7, 0x3, 0xd, [{@local, 0x1e}, {@multicast2, 0x5}, {@broadcast, 0x8}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0xc8, 0x0, 0x9, [0x5, 0x3]}, @timestamp={0x44, 0x14, 0x84, 0x0, 0x3, [0x0, 0x280, 0x1, 0x0]}, @timestamp_addr={0x44, 0x34, 0xc8, 0x1, 0x4, [{@private=0xa010100, 0x5}, {@multicast1, 0x8}, {@private=0xa010101, 0x7}, {@local, 0xae}, {@empty, 0xeeb}, {@local, 0x7ff}]}, @ssrr={0x89, 0xb, 0x7d, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop, @timestamp_prespec={0x44, 0xc, 0x6a, 0x3, 0x8, [{@broadcast, 0x2cbea267}]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x6, [0x1ff, 0x6, 0x8, 0x0, 0x3, 0x80, 0x9, 0xce, 0x6, 0x0]}]}}}}}) (async, rerun: 64) r8 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) (async) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@bridge_setlink={0x3c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r9}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x4, 0x0, 0x1, {0x14, 0xa, 0x0, 0x1, [{0x8, 0x1}, {0x8, 0x2}]}}]}]}, 0x3c}}, 0x0) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000580)={'syztnl1\x00', &(0x7f0000000540)={'syztnl1\x00', r9, 0x700, 0x1, 0xff47fda9, 0x100000, {{0x6, 0x4, 0x1, 0x5, 0x18, 0x65, 0x0, 0x3, 0x29, 0x0, @multicast1, @remote, {[@noop]}}}}}) (async, rerun: 32) r11 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r13 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@bridge_setlink={0x3c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r12}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x4, 0x0, 0x1, {0x14, 0xa, 0x0, 0x1, [{0x8, 0x1}, {0x8, 0x2}]}}]}]}, 0x3c}}, 0x0) r14 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) (async, rerun: 32) r16 = socket(0x10, 0x80002, 0x0) (rerun: 32) sendmsg$nl_route(r16, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0a0000000008003ed0e30900000000000000ad569033d86a5d3393a60ea7150a1b25080000004b9fee9439c51e1a0efe86b8f2dbb1a12407b6c8a53c1528267fdc5a79b9532bd26b298494daf88751cd7964dfb3841ada30078b4b21d23a3f05af0900000098ee595dd83ec3067600"/140, @ANYRES32=r15, @ANYBLOB="00000000000000001c001a801800048014000a8008000100000000000800020000000000"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)=@ipv6_delroute={0x74, 0x19, 0x400, 0x70bd2d, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xfa, 0xfe, 0x4, 0x0, 0x5, 0x2600}, [@RTA_OIF={0x8, 0x4, r6}, @RTA_GATEWAY={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @RTA_OIF={0x8, 0x4, r7}, @RTA_EXPIRES={0x8, 0x17, 0xfa4}, @RTA_PRIORITY={0x8, 0x6, 0x3}, @RTA_OIF={0x8, 0x4, r12}, @RTA_PRIORITY={0x8, 0x6, 0x25}, @RTA_MARK={0x8, 0x10, 0x5}, @RTA_MULTIPATH={0xc, 0x9, {0x400, 0x24, 0x3, r15}}]}, 0x74}, 0x1, 0x0, 0x0, 0x10000014}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@bridge_setlink={0x3c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x4, 0x0, 0x1, {0x14, 0xa, 0x0, 0x1, [{0x8, 0x1}, {0x8, 0x2}]}}]}]}, 0x3c}}, 0x0) (async) poll(&(0x7f0000000100)=[{r1, 0x421}, {r4, 0x20}, {r0}, {r0, 0x4}], 0x4, 0x2) (async, rerun: 32) ioctl$SNDCTL_DSP_GETOSPACE(r1, 0x8010500c, &(0x7f0000000040)) (async, rerun: 32) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) [ 2836.356430][T13095] ? process_vm_rw_core.constprop.0+0xa10/0xa10 [ 2836.362721][T13095] ? ksys_write+0x214/0x250 [ 2836.367266][T13095] ? reacquire_held_locks+0x4b0/0x4b0 [ 2836.372687][T13095] ? vfs_write+0x14c/0xdf0 [ 2836.377165][T13095] ? bit_wait_io_timeout+0x160/0x160 [ 2836.382507][T13095] ? fput+0x30/0x1a0 [ 2836.386436][T13095] ? ksys_write+0x1a7/0x250 [ 2836.390984][T13095] __x64_sys_process_vm_writev+0xe2/0x1b0 [ 2836.396757][T13095] ? syscall_enter_from_user_mode+0x26/0x80 [ 2836.402695][T13095] do_syscall_64+0x3f/0x110 [ 2836.407249][T13095] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2836.413181][T13095] RIP: 0033:0x7f6fcfc7cae9 [ 2836.417628][T13095] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2836.437270][T13095] RSP: 002b:00007f6fd098a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2836.445727][T13095] RAX: ffffffffffffffda RBX: 00007f6fcfd9c050 RCX: 00007f6fcfc7cae9 [ 2836.453732][T13095] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000002c51 [ 2836.461727][T13095] RBP: 00007f6fd098a120 R08: 0000000000000001 R09: 0000000000000000 [ 2836.469699][T13095] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000002 [ 2836.477707][T13095] R13: 000000000000006e R14: 00007f6fcfd9c050 R15: 00007f6fcfebfa48 [ 2836.485701][T13095] 06:05:33 executing program 5: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r4, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3f9, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) 06:05:33 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) r1 = gettid() r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) ioctl$int_in(r3, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r4}], 0x1, 0xfffffffffffffff8) (async) dup2(r3, r4) (async) fcntl$setown(r4, 0x8, r1) (async) tkill(r1, 0x14) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$SNDCTL_DSP_RESET(r5, 0x5000, 0x0) [ 2836.598455][ T1232] ieee802154 phy0 wpan0: encryption failed: -22 [ 2836.616313][ T1232] ieee802154 phy1 wpan1: encryption failed: -22 06:05:33 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 20) [ 2836.889437][T13120] FAULT_INJECTION: forcing a failure. [ 2836.889437][T13120] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2836.907865][T13120] CPU: 1 PID: 13120 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 2836.917972][T13120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2836.928031][T13120] Call Trace: [ 2836.931313][T13120] [ 2836.934244][T13120] dump_stack_lvl+0x125/0x1b0 [ 2836.938930][T13120] should_fail_ex+0x496/0x5b0 [ 2836.943615][T13120] ? fs_reclaim_acquire+0xb0/0x150 [ 2836.948751][T13120] __should_fail_alloc_page+0xe7/0x130 [ 2836.954252][T13120] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 2836.960420][T13120] __alloc_pages+0x14e/0x4a0 [ 2836.965034][T13120] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 2836.971849][T13120] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2836.977765][T13120] ? policy_nodemask+0x311/0x480 [ 2836.982716][T13120] alloc_pages_mpol+0x258/0x5f0 [ 2836.987586][T13120] ? mempolicy_in_oom_domain+0x150/0x150 [ 2836.993240][T13120] ? find_held_lock+0x2d/0x110 [ 2836.998026][T13120] vma_alloc_folio+0xad/0x220 [ 2837.002717][T13120] ? alloc_migration_target_by_mpol+0x6b0/0x6b0 [ 2837.008977][T13120] ? find_held_lock+0x2d/0x110 [ 2837.013766][T13120] ? filemap_get_read_batch+0x9b0/0x9b0 [ 2837.019337][T13120] __handle_mm_fault+0x100b/0x3d60 [ 2837.024471][T13120] ? vm_iomap_memory+0x170/0x170 [ 2837.029443][T13120] handle_mm_fault+0x478/0xa00 [ 2837.034233][T13120] __get_user_pages+0x4b2/0x1480 [ 2837.039189][T13120] ? follow_page_mask+0xda0/0xda0 [ 2837.044235][T13120] __gup_longterm_locked+0x278/0x2ab0 [ 2837.049632][T13120] ? get_user_pages_unlocked+0x770/0x770 [ 2837.055285][T13120] ? lock_sync+0x190/0x190 [ 2837.059734][T13120] pin_user_pages_remote+0xee/0x140 [ 2837.064951][T13120] ? __gup_longterm_locked+0x2ab0/0x2ab0 [ 2837.070615][T13120] process_vm_rw_core.constprop.0+0x43d/0xa10 [ 2837.076709][T13120] ? vmalloc_dump_obj+0x290/0x290 [ 2837.081767][T13120] process_vm_rw+0x2ff/0x360 [ 2837.086374][T13120] ? process_vm_rw_core.constprop.0+0xa10/0xa10 [ 2837.092631][T13120] ? ksys_write+0x214/0x250 [ 2837.097154][T13120] ? reacquire_held_locks+0x4b0/0x4b0 [ 2837.102554][T13120] ? vfs_write+0x14c/0xdf0 [ 2837.107107][T13120] ? bit_wait_io_timeout+0x160/0x160 [ 2837.112416][T13120] ? fput+0x30/0x1a0 [ 2837.116332][T13120] ? ksys_write+0x1a7/0x250 [ 2837.120857][T13120] __x64_sys_process_vm_writev+0xe2/0x1b0 [ 2837.126587][T13120] ? syscall_enter_from_user_mode+0x26/0x80 [ 2837.132492][T13120] do_syscall_64+0x3f/0x110 [ 2837.137013][T13120] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2837.142917][T13120] RIP: 0033:0x7f6fcfc7cae9 [ 2837.147342][T13120] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2837.166968][T13120] RSP: 002b:00007f6fd098a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2837.175396][T13120] RAX: ffffffffffffffda RBX: 00007f6fcfd9c050 RCX: 00007f6fcfc7cae9 [ 2837.183376][T13120] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000002c54 [ 2837.191352][T13120] RBP: 00007f6fd098a120 R08: 0000000000000001 R09: 0000000000000000 [ 2837.199330][T13120] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000002 [ 2837.207307][T13120] R13: 000000000000006e R14: 00007f6fcfd9c050 R15: 00007f6fcfebfa48 [ 2837.215302][T13120] 06:05:36 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) r4 = dup2(r2, r3) r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000100)=0xc) fcntl$setown(r5, 0x8, r1) tkill(r1, 0x14) 06:05:36 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) ioctl$int_in(r3, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r4}], 0x1, 0xfffffffffffffff8) dup2(r3, r4) fcntl$setown(r4, 0x8, r1) tkill(r1, 0x14) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$SNDCTL_DSP_RESET(r5, 0x5000, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) (async) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) gettid() (async) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) (async) ioctl$int_in(r3, 0x5452, &(0x7f0000000200)=0x1000000000003e) (async) fcntl$setsig(r3, 0xa, 0x12) (async) poll(&(0x7f0000b2c000)=[{r4}], 0x1, 0xfffffffffffffff8) (async) dup2(r3, r4) (async) fcntl$setown(r4, 0x8, r1) (async) tkill(r1, 0x14) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) ioctl$SNDCTL_DSP_RESET(r5, 0x5000, 0x0) (async) 06:05:36 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async, rerun: 64) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) (rerun: 64) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) r5 = openat$incfs(r1, &(0x7f0000000140)='.pending_reads\x00', 0x100, 0x10) (async, rerun: 32) socket$inet_udplite(0x2, 0x2, 0x88) (async, rerun: 32) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000380)={'ip_vti0\x00', r3, 0x7800, 0x80, 0x9, 0x1, {{0x3c, 0x4, 0x1, 0x1, 0xf0, 0x65, 0x0, 0x40, 0x2f, 0x0, @loopback, @multicast1, {[@ssrr={0x89, 0x23, 0x88, [@loopback, @multicast2, @multicast2, @remote, @broadcast, @local, @remote, @remote]}, @timestamp_prespec={0x44, 0x1c, 0xe7, 0x3, 0xd, [{@local, 0x1e}, {@multicast2, 0x5}, {@broadcast, 0x8}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0xc8, 0x0, 0x9, [0x5, 0x3]}, @timestamp={0x44, 0x14, 0x84, 0x0, 0x3, [0x0, 0x280, 0x1, 0x0]}, @timestamp_addr={0x44, 0x34, 0xc8, 0x1, 0x4, [{@private=0xa010100, 0x5}, {@multicast1, 0x8}, {@private=0xa010101, 0x7}, {@local, 0xae}, {@empty, 0xeeb}, {@local, 0x7ff}]}, @ssrr={0x89, 0xb, 0x7d, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop, @timestamp_prespec={0x44, 0xc, 0x6a, 0x3, 0x8, [{@broadcast, 0x2cbea267}]}, @timestamp={0x44, 0x2c, 0xe4, 0x0, 0x6, [0x1ff, 0x6, 0x8, 0x0, 0x3, 0x80, 0x9, 0xce, 0x6, 0x0]}]}}}}}) (rerun: 32) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@bridge_setlink={0x3c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r9}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x4, 0x0, 0x1, {0x14, 0xa, 0x0, 0x1, [{0x8, 0x1}, {0x8, 0x2}]}}]}]}, 0x3c}}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000580)={'syztnl1\x00', &(0x7f0000000540)={'syztnl1\x00', r9, 0x700, 0x1, 0xff47fda9, 0x100000, {{0x6, 0x4, 0x1, 0x5, 0x18, 0x65, 0x0, 0x3, 0x29, 0x0, @multicast1, @remote, {[@noop]}}}}}) r11 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) (async) r13 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@bridge_setlink={0x3c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r12}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x4, 0x0, 0x1, {0x14, 0xa, 0x0, 0x1, [{0x8, 0x1}, {0x8, 0x2}]}}]}]}, 0x3c}}, 0x0) r14 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) (async) r16 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r16, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0a0000000008003ed0e30900000000000000ad569033d86a5d3393a60ea7150a1b25080000004b9fee9439c51e1a0efe86b8f2dbb1a12407b6c8a53c1528267fdc5a79b9532bd26b298494daf88751cd7964dfb3841ada30078b4b21d23a3f05af0900000098ee595dd83ec3067600"/140, @ANYRES32=r15, @ANYBLOB="00000000000000001c001a801800048014000a8008000100000000000800020000000000"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)=@ipv6_delroute={0x74, 0x19, 0x400, 0x70bd2d, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xfa, 0xfe, 0x4, 0x0, 0x5, 0x2600}, [@RTA_OIF={0x8, 0x4, r6}, @RTA_GATEWAY={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @RTA_OIF={0x8, 0x4, r7}, @RTA_EXPIRES={0x8, 0x17, 0xfa4}, @RTA_PRIORITY={0x8, 0x6, 0x3}, @RTA_OIF={0x8, 0x4, r12}, @RTA_PRIORITY={0x8, 0x6, 0x25}, @RTA_MARK={0x8, 0x10, 0x5}, @RTA_MULTIPATH={0xc, 0x9, {0x400, 0x24, 0x3, r15}}]}, 0x74}, 0x1, 0x0, 0x0, 0x10000014}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@bridge_setlink={0x3c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x4, 0x0, 0x1, {0x14, 0xa, 0x0, 0x1, [{0x8, 0x1}, {0x8, 0x2}]}}]}]}, 0x3c}}, 0x0) (async) poll(&(0x7f0000000100)=[{r1, 0x421}, {r4, 0x20}, {r0}, {r0, 0x4}], 0x4, 0x2) (async) ioctl$SNDCTL_DSP_GETOSPACE(r1, 0x8010500c, &(0x7f0000000040)) (async) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) 06:05:36 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045009, &(0x7f0000000080)=0xe3) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) 06:05:36 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 21) 06:05:36 executing program 5: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r4, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3fa, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) [ 2840.270465][T13140] FAULT_INJECTION: forcing a failure. [ 2840.270465][T13140] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2840.313122][T13140] CPU: 0 PID: 13140 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 2840.323273][T13140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2840.333374][T13140] Call Trace: [ 2840.336677][T13140] [ 2840.339618][T13140] dump_stack_lvl+0x125/0x1b0 [ 2840.344319][T13140] should_fail_ex+0x496/0x5b0 [ 2840.349024][T13140] ? fs_reclaim_acquire+0xb0/0x150 [ 2840.354154][T13140] __should_fail_alloc_page+0xe7/0x130 [ 2840.359648][T13140] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 2840.365838][T13140] __alloc_pages+0x14e/0x4a0 [ 2840.370461][T13140] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 2840.377256][T13140] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2840.383227][T13140] ? policy_nodemask+0x311/0x480 [ 2840.388233][T13140] alloc_pages_mpol+0x258/0x5f0 [ 2840.393122][T13140] ? mempolicy_in_oom_domain+0x150/0x150 [ 2840.398774][T13140] ? find_held_lock+0x2d/0x110 [ 2840.403562][T13140] vma_alloc_folio+0xad/0x220 [ 2840.408270][T13140] ? alloc_migration_target_by_mpol+0x6b0/0x6b0 [ 2840.414536][T13140] ? find_held_lock+0x2d/0x110 [ 2840.419337][T13140] ? filemap_get_read_batch+0x9b0/0x9b0 [ 2840.424903][T13140] __handle_mm_fault+0x100b/0x3d60 [ 2840.430039][T13140] ? vm_iomap_memory+0x170/0x170 [ 2840.435017][T13140] handle_mm_fault+0x478/0xa00 [ 2840.439809][T13140] __get_user_pages+0x4b2/0x1480 [ 2840.444772][T13140] ? follow_page_mask+0xda0/0xda0 [ 2840.449837][T13140] __gup_longterm_locked+0x278/0x2ab0 [ 2840.455254][T13140] ? get_user_pages_unlocked+0x770/0x770 [ 2840.460908][T13140] ? lock_sync+0x190/0x190 [ 2840.465357][T13140] pin_user_pages_remote+0xee/0x140 [ 2840.470573][T13140] ? __gup_longterm_locked+0x2ab0/0x2ab0 [ 2840.476228][T13140] process_vm_rw_core.constprop.0+0x43d/0xa10 [ 2840.482325][T13140] ? vmalloc_dump_obj+0x290/0x290 [ 2840.487360][T13140] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2840.493582][T13140] process_vm_rw+0x2ff/0x360 [ 2840.498191][T13140] ? process_vm_rw_core.constprop.0+0xa10/0xa10 [ 2840.504703][T13140] ? ksys_write+0x214/0x250 [ 2840.509224][T13140] ? reacquire_held_locks+0x4b0/0x4b0 [ 2840.514634][T13140] ? vfs_write+0x14c/0xdf0 [ 2840.519109][T13140] ? bit_wait_io_timeout+0x160/0x160 [ 2840.524428][T13140] ? fput+0x30/0x1a0 [ 2840.528346][T13140] ? ksys_write+0x1a7/0x250 [ 2840.532871][T13140] __x64_sys_process_vm_writev+0xe2/0x1b0 [ 2840.538609][T13140] ? syscall_enter_from_user_mode+0x26/0x80 [ 2840.544520][T13140] do_syscall_64+0x3f/0x110 [ 2840.549041][T13140] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2840.554946][T13140] RIP: 0033:0x7f6fcfc7cae9 [ 2840.559367][T13140] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2840.579006][T13140] RSP: 002b:00007f6fd098a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2840.587439][T13140] RAX: ffffffffffffffda RBX: 00007f6fcfd9c050 RCX: 00007f6fcfc7cae9 [ 2840.595419][T13140] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000002c57 [ 2840.603417][T13140] RBP: 00007f6fd098a120 R08: 0000000000000001 R09: 0000000000000000 [ 2840.611395][T13140] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000002 [ 2840.619370][T13140] R13: 000000000000006e R14: 00007f6fcfd9c050 R15: 00007f6fcfebfa48 [ 2840.627366][T13140] 06:05:37 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 22) 06:05:37 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc004500a, &(0x7f0000000080)=0xe3) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) 06:05:37 executing program 5: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r4, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3fb, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) [ 2841.210169][T13153] FAULT_INJECTION: forcing a failure. [ 2841.210169][T13153] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2841.225107][T13153] CPU: 0 PID: 13153 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 2841.235225][T13153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2841.245589][T13153] Call Trace: [ 2841.248914][T13153] [ 2841.251893][T13153] dump_stack_lvl+0x125/0x1b0 [ 2841.256624][T13153] should_fail_ex+0x496/0x5b0 [ 2841.261335][T13153] ? fs_reclaim_acquire+0xb0/0x150 [ 2841.266466][T13153] __should_fail_alloc_page+0xe7/0x130 [ 2841.271956][T13153] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 2841.278140][T13153] __alloc_pages+0x14e/0x4a0 [ 2841.282749][T13153] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 2841.289822][T13153] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2841.295834][T13153] ? policy_nodemask+0x311/0x480 [ 2841.300841][T13153] alloc_pages_mpol+0x258/0x5f0 [ 2841.305844][T13153] ? mempolicy_in_oom_domain+0x150/0x150 [ 2841.311555][T13153] ? find_held_lock+0x2d/0x110 [ 2841.316352][T13153] vma_alloc_folio+0xad/0x220 [ 2841.321704][T13153] ? alloc_migration_target_by_mpol+0x6b0/0x6b0 [ 2841.328004][T13153] ? find_held_lock+0x2d/0x110 [ 2841.332824][T13153] __handle_mm_fault+0xe06/0x3d60 [ 2841.337875][T13153] ? vm_iomap_memory+0x170/0x170 [ 2841.342852][T13153] handle_mm_fault+0x478/0xa00 [ 2841.347645][T13153] __get_user_pages+0x4b2/0x1480 [ 2841.352610][T13153] ? follow_page_mask+0xda0/0xda0 [ 2841.357685][T13153] __gup_longterm_locked+0x278/0x2ab0 [ 2841.363090][T13153] ? get_user_pages_unlocked+0x770/0x770 [ 2841.368758][T13153] ? lock_sync+0x190/0x190 [ 2841.373206][T13153] pin_user_pages_remote+0xee/0x140 [ 2841.378420][T13153] ? __gup_longterm_locked+0x2ab0/0x2ab0 [ 2841.384080][T13153] process_vm_rw_core.constprop.0+0x43d/0xa10 [ 2841.390180][T13153] ? vmalloc_dump_obj+0x290/0x290 [ 2841.395220][T13153] ? lockdep_hardirqs_on+0x7d/0x100 [ 2841.400463][T13153] process_vm_rw+0x2ff/0x360 [ 2841.405079][T13153] ? process_vm_rw_core.constprop.0+0xa10/0xa10 [ 2841.411376][T13153] ? ksys_write+0x214/0x250 [ 2841.415908][T13153] ? reacquire_held_locks+0x4b0/0x4b0 [ 2841.421312][T13153] ? vfs_write+0x14c/0xdf0 [ 2841.425845][T13153] ? bit_wait_io_timeout+0x160/0x160 [ 2841.431173][T13153] ? fput+0x30/0x1a0 [ 2841.435092][T13153] ? ksys_write+0x1a7/0x250 [ 2841.439626][T13153] __x64_sys_process_vm_writev+0xe2/0x1b0 [ 2841.445366][T13153] ? syscall_enter_from_user_mode+0x26/0x80 [ 2841.451282][T13153] do_syscall_64+0x3f/0x110 [ 2841.455811][T13153] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2841.461719][T13153] RIP: 0033:0x7f6fcfc7cae9 [ 2841.466147][T13153] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2841.485771][T13153] RSP: 002b:00007f6fd09690c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2841.494195][T13153] RAX: ffffffffffffffda RBX: 00007f6fcfd9c120 RCX: 00007f6fcfc7cae9 [ 2841.502177][T13153] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000002c5b [ 2841.510160][T13153] RBP: 00007f6fd0969120 R08: 0000000000000001 R09: 0000000000000000 [ 2841.518139][T13153] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000002 [ 2841.526132][T13153] R13: 000000000000006e R14: 00007f6fcfd9c120 R15: 00007f6fcfebfa48 [ 2841.534128][T13153] 06:05:38 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 23) [ 2841.820079][T13162] FAULT_INJECTION: forcing a failure. [ 2841.820079][T13162] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2841.833911][T13162] CPU: 1 PID: 13162 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 2841.844010][T13162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2841.854073][T13162] Call Trace: [ 2841.857352][T13162] [ 2841.860288][T13162] dump_stack_lvl+0x125/0x1b0 [ 2841.864988][T13162] should_fail_ex+0x496/0x5b0 [ 2841.869712][T13162] ? fs_reclaim_acquire+0xb0/0x150 [ 2841.874870][T13162] __should_fail_alloc_page+0xe7/0x130 [ 2841.880376][T13162] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 2841.886587][T13162] __alloc_pages+0x14e/0x4a0 [ 2841.891223][T13162] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 2841.898018][T13162] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2841.903929][T13162] ? policy_nodemask+0x311/0x480 [ 2841.908886][T13162] alloc_pages_mpol+0x258/0x5f0 [ 2841.913763][T13162] ? mempolicy_in_oom_domain+0x150/0x150 [ 2841.919508][T13162] ? find_held_lock+0x2d/0x110 [ 2841.924296][T13162] vma_alloc_folio+0xad/0x220 [ 2841.928989][T13162] ? alloc_migration_target_by_mpol+0x6b0/0x6b0 [ 2841.935246][T13162] ? find_held_lock+0x2d/0x110 [ 2841.940040][T13162] ? filemap_get_read_batch+0x9b0/0x9b0 [ 2841.945606][T13162] __handle_mm_fault+0x100b/0x3d60 [ 2841.950915][T13162] ? vm_iomap_memory+0x170/0x170 [ 2841.955899][T13162] handle_mm_fault+0x478/0xa00 [ 2841.960688][T13162] __get_user_pages+0x4b2/0x1480 [ 2841.965643][T13162] ? follow_page_mask+0xda0/0xda0 [ 2841.970691][T13162] __gup_longterm_locked+0x278/0x2ab0 [ 2841.976091][T13162] ? get_user_pages_unlocked+0x770/0x770 [ 2841.981743][T13162] ? lock_sync+0x190/0x190 [ 2841.986189][T13162] pin_user_pages_remote+0xee/0x140 [ 2841.991405][T13162] ? __gup_longterm_locked+0x2ab0/0x2ab0 [ 2841.997064][T13162] process_vm_rw_core.constprop.0+0x43d/0xa10 [ 2842.003159][T13162] ? vmalloc_dump_obj+0x290/0x290 [ 2842.008220][T13162] process_vm_rw+0x2ff/0x360 [ 2842.012824][T13162] ? process_vm_rw_core.constprop.0+0xa10/0xa10 [ 2842.019080][T13162] ? ksys_write+0x214/0x250 [ 2842.023599][T13162] ? reacquire_held_locks+0x4b0/0x4b0 [ 2842.029084][T13162] ? vfs_write+0x14c/0xdf0 [ 2842.033524][T13162] ? bit_wait_io_timeout+0x160/0x160 [ 2842.038856][T13162] ? fput+0x30/0x1a0 [ 2842.042770][T13162] ? ksys_write+0x1a7/0x250 [ 2842.047298][T13162] __x64_sys_process_vm_writev+0xe2/0x1b0 [ 2842.053036][T13162] ? syscall_enter_from_user_mode+0x26/0x80 [ 2842.058942][T13162] do_syscall_64+0x3f/0x110 [ 2842.063471][T13162] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2842.069376][T13162] RIP: 0033:0x7f6fcfc7cae9 [ 2842.073888][T13162] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2842.093529][T13162] RSP: 002b:00007f6fd098a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2842.101954][T13162] RAX: ffffffffffffffda RBX: 00007f6fcfd9c050 RCX: 00007f6fcfc7cae9 [ 2842.109931][T13162] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000002c5e [ 2842.117909][T13162] RBP: 00007f6fd098a120 R08: 0000000000000001 R09: 0000000000000000 [ 2842.125892][T13162] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000002 [ 2842.133878][T13162] R13: 000000000000006e R14: 00007f6fcfd9c050 R15: 00007f6fcfebfa48 [ 2842.141885][T13162] 06:05:38 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc004500b, &(0x7f0000000080)=0xe3) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) 06:05:38 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 24) [ 2842.391262][T13168] FAULT_INJECTION: forcing a failure. [ 2842.391262][T13168] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2842.405298][T13168] CPU: 1 PID: 13168 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 2842.415414][T13168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2842.425470][T13168] Call Trace: [ 2842.428749][T13168] [ 2842.431747][T13168] dump_stack_lvl+0x125/0x1b0 [ 2842.436470][T13168] should_fail_ex+0x496/0x5b0 [ 2842.441198][T13168] ? fs_reclaim_acquire+0xb0/0x150 [ 2842.446342][T13168] __should_fail_alloc_page+0xe7/0x130 [ 2842.451846][T13168] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 2842.458042][T13168] __alloc_pages+0x14e/0x4a0 [ 2842.462639][T13168] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 2842.469438][T13168] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2842.475485][T13168] ? policy_nodemask+0x311/0x480 [ 2842.480480][T13168] alloc_pages_mpol+0x258/0x5f0 [ 2842.485383][T13168] ? mempolicy_in_oom_domain+0x150/0x150 [ 2842.491071][T13168] ? find_held_lock+0x2d/0x110 [ 2842.495889][T13168] vma_alloc_folio+0xad/0x220 [ 2842.500605][T13168] ? alloc_migration_target_by_mpol+0x6b0/0x6b0 [ 2842.506886][T13168] ? find_held_lock+0x2d/0x110 [ 2842.511700][T13168] ? filemap_get_read_batch+0x9b0/0x9b0 [ 2842.517302][T13168] __handle_mm_fault+0x100b/0x3d60 [ 2842.522479][T13168] ? vm_iomap_memory+0x170/0x170 [ 2842.527488][T13168] handle_mm_fault+0x478/0xa00 [ 2842.532321][T13168] __get_user_pages+0x4b2/0x1480 [ 2842.537306][T13168] ? follow_page_mask+0xda0/0xda0 [ 2842.542388][T13168] __gup_longterm_locked+0x278/0x2ab0 [ 2842.547827][T13168] ? get_user_pages_unlocked+0x770/0x770 [ 2842.553506][T13168] ? lock_sync+0x190/0x190 [ 2842.557987][T13168] pin_user_pages_remote+0xee/0x140 [ 2842.563243][T13168] ? __gup_longterm_locked+0x2ab0/0x2ab0 [ 2842.568951][T13168] process_vm_rw_core.constprop.0+0x43d/0xa10 [ 2842.575085][T13168] ? vmalloc_dump_obj+0x290/0x290 [ 2842.580177][T13168] process_vm_rw+0x2ff/0x360 [ 2842.584813][T13168] ? process_vm_rw_core.constprop.0+0xa10/0xa10 [ 2842.591101][T13168] ? ksys_write+0x214/0x250 [ 2842.595623][T13168] ? reacquire_held_locks+0x4b0/0x4b0 [ 2842.601024][T13168] ? vfs_write+0x14c/0xdf0 [ 2842.605475][T13168] ? bit_wait_io_timeout+0x160/0x160 [ 2842.610801][T13168] ? fput+0x30/0x1a0 [ 2842.614748][T13168] ? ksys_write+0x1a7/0x250 [ 2842.619299][T13168] __x64_sys_process_vm_writev+0xe2/0x1b0 [ 2842.625056][T13168] ? syscall_enter_from_user_mode+0x26/0x80 [ 2842.630970][T13168] do_syscall_64+0x3f/0x110 [ 2842.635517][T13168] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2842.641442][T13168] RIP: 0033:0x7f6fcfc7cae9 [ 2842.645871][T13168] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2842.665526][T13168] RSP: 002b:00007f6fd098a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2842.673982][T13168] RAX: ffffffffffffffda RBX: 00007f6fcfd9c050 RCX: 00007f6fcfc7cae9 [ 2842.681979][T13168] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000002c61 [ 2842.689987][T13168] RBP: 00007f6fd098a120 R08: 0000000000000001 R09: 0000000000000000 [ 2842.698003][T13168] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000002 [ 2842.705977][T13168] R13: 000000000000006e R14: 00007f6fcfd9c050 R15: 00007f6fcfebfa48 [ 2842.713997][T13168] 06:05:39 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) r4 = dup2(r2, r3) r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000100)=0xc) fcntl$setown(r5, 0x8, r1) tkill(r1, 0x14) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) (async) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) gettid() (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) (async) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) (async) fcntl$setsig(r2, 0xa, 0x12) (async) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) (async) dup2(r2, r3) (async) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000100)=0xc) (async) fcntl$setown(r5, 0x8, r1) (async) tkill(r1, 0x14) (async) 06:05:41 executing program 5: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r4, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3fc, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) 06:05:41 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000100)) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000080)=0x4) mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x50, r0, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r3}, 0x90) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0), 0x0) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000ac0)) write$dsp(r2, &(0x7f00000003c0)="34930cb956290900436bf8dee938bef7e502000000c4fd3d577596e9c4894c2b45ccc5d1dc6d459272bd8b76fb41b2529ecb85c7b2d2bcd9571cc2a300008226ca36f6f068f805cc1901a044da7a0a8697222e7f32bd9c9e9be4bd0cfe3fda1723fb4be9eb1c948305438ef92518188649ecc80150fd82dc279c453f5b5892c89f4b0af1e3954a317d56295248902bc49cfcec13e9cf41ba45c9f2332172932e7ad88f83c3b7ddb3e008a83dfd78671e524d44bde8ca1940a48f2ec4f952bf071c81b8bcfc959192a593717bfea2cfebedc0f76c8480d64d343ccf5a515fbbb2860f885ed787f9583e83cc435ce95a1b1ecd3e7e893e0aaafe3ebec82e672f24392bcb25794f79e5d170a73c8c296c2ff3b650b416ccd8dd0cfa831d809e9a1eebe4c80e444bb53d3c7db8758e794c85060be97ded4fff0e593bf93f0ed72a4a45c1ca552eae6f6ba55bcab6d608fa076e27c348f5e52f9dd86b4775fdb697305959d3db4d97d73bf1c2eb6e466ddeb74c90f9b15735f0dd2ad08b1d6a3d8e782cd2d871ef6f80ffeca79ff29ec284bc2abf00429a5175afea89d389febc2b3e17", 0x1a1) 06:05:41 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 25) 06:05:41 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc004500d, &(0x7f0000000080)=0xe3) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) 06:05:41 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x105802, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r1}, 0x90) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0), 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000ac0)) write$FUSE_GETXATTR(r1, &(0x7f00000000c0)={0xfffffffffffffe85, 0xfffffffffffffffe}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r2 = gettid() pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) syz_open_procfs(r5, &(0x7f0000000300)='syscall\x00') ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) ioctl$int_in(r3, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f00000004c0)=[{0xffffffffffffffff, 0x840a}, {0xffffffffffffffff, 0x1405}, {0xffffffffffffffff, 0x400}, {0xffffffffffffffff, 0x6008}, {0xffffffffffffffff, 0x243c}, {0xffffffffffffffff, 0x8000}, {}, {0xffffffffffffffff, 0x222}], 0x0, 0x7) r6 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r7 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountstats\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000ac0)) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000340)=0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r7}, 0x90) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000001c0), 0x0) ioctl$NS_GET_OWNER_UID(r7, 0xb704, &(0x7f0000000380)) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000040)={0x400, 0x2, 0x6, 0x0, 0x1}) dup2(r3, r4) fcntl$setown(r4, 0x8, r2) tkill(r2, 0x14) [ 2844.976959][T13189] FAULT_INJECTION: forcing a failure. [ 2844.976959][T13189] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2844.990507][T13189] CPU: 1 PID: 13189 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 2845.002971][T13189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2845.013053][T13189] Call Trace: [ 2845.016422][T13189] [ 2845.019352][T13189] dump_stack_lvl+0x125/0x1b0 [ 2845.024050][T13189] should_fail_ex+0x496/0x5b0 [ 2845.028743][T13189] ? fs_reclaim_acquire+0xb0/0x150 [ 2845.033893][T13189] __should_fail_alloc_page+0xe7/0x130 [ 2845.039389][T13189] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 2845.045591][T13189] __alloc_pages+0x14e/0x4a0 [ 2845.050240][T13189] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 2845.057066][T13189] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2845.062978][T13189] ? policy_nodemask+0x311/0x480 [ 2845.067933][T13189] alloc_pages_mpol+0x258/0x5f0 [ 2845.072828][T13189] ? mempolicy_in_oom_domain+0x150/0x150 [ 2845.078466][T13189] ? find_held_lock+0x2d/0x110 [ 2845.083249][T13189] vma_alloc_folio+0xad/0x220 [ 2845.087949][T13189] ? alloc_migration_target_by_mpol+0x6b0/0x6b0 [ 2845.094198][T13189] ? find_held_lock+0x2d/0x110 [ 2845.098989][T13189] ? filemap_get_read_batch+0x9b0/0x9b0 [ 2845.104541][T13189] __handle_mm_fault+0x100b/0x3d60 [ 2845.109660][T13189] ? vm_iomap_memory+0x170/0x170 [ 2845.114876][T13189] handle_mm_fault+0x478/0xa00 [ 2845.119667][T13189] __get_user_pages+0x4b2/0x1480 [ 2845.124616][T13189] ? follow_page_mask+0xda0/0xda0 [ 2845.129750][T13189] __gup_longterm_locked+0x278/0x2ab0 [ 2845.135166][T13189] ? get_user_pages_unlocked+0x770/0x770 [ 2845.140842][T13189] ? lock_sync+0x190/0x190 [ 2845.145289][T13189] ? mark_held_locks+0x9f/0xe0 [ 2845.150094][T13189] pin_user_pages_remote+0xee/0x140 [ 2845.155302][T13189] ? __gup_longterm_locked+0x2ab0/0x2ab0 [ 2845.160945][T13189] process_vm_rw_core.constprop.0+0x43d/0xa10 [ 2845.167048][T13189] ? vmalloc_dump_obj+0x290/0x290 [ 2845.172136][T13189] ? rcu_is_watching+0x12/0xb0 [ 2845.176932][T13189] process_vm_rw+0x2ff/0x360 [ 2845.181715][T13189] ? process_vm_rw_core.constprop.0+0xa10/0xa10 [ 2845.187961][T13189] ? ksys_write+0x214/0x250 [ 2845.192497][T13189] ? reacquire_held_locks+0x4b0/0x4b0 [ 2845.197993][T13189] ? vfs_write+0x14c/0xdf0 [ 2845.202443][T13189] ? bit_wait_io_timeout+0x160/0x160 [ 2845.207733][T13189] ? fput+0x30/0x1a0 [ 2845.211637][T13189] ? ksys_write+0x1a7/0x250 [ 2845.216154][T13189] __x64_sys_process_vm_writev+0xe2/0x1b0 [ 2845.221879][T13189] ? syscall_enter_from_user_mode+0x26/0x80 [ 2845.227773][T13189] do_syscall_64+0x3f/0x110 [ 2845.232288][T13189] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2845.238380][T13189] RIP: 0033:0x7f6fcfc7cae9 [ 2845.243342][T13189] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2845.262963][T13189] RSP: 002b:00007f6fd098a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2845.271474][T13189] RAX: ffffffffffffffda RBX: 00007f6fcfd9c050 RCX: 00007f6fcfc7cae9 [ 2845.279676][T13189] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000002c64 [ 2845.287732][T13189] RBP: 00007f6fd098a120 R08: 0000000000000001 R09: 0000000000000000 [ 2845.296056][T13189] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000002 [ 2845.304639][T13189] R13: 000000000000006e R14: 00007f6fcfd9c050 R15: 00007f6fcfebfa48 [ 2845.312683][T13189] 06:05:42 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 26) 06:05:42 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000100)) (async) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000080)=0x4) (async) mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x50, r0, 0x0) (async) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) (async) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r3}, 0x90) (async) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0), 0x0) (async) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000ac0)) (async) write$dsp(r2, &(0x7f00000003c0)="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", 0x1a1) 06:05:42 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045010, &(0x7f0000000080)=0xe3) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) 06:05:42 executing program 5: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r4, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3fd, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) [ 2845.768841][T13195] FAULT_INJECTION: forcing a failure. [ 2845.768841][T13195] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2845.786450][T13195] CPU: 1 PID: 13195 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 2845.796587][T13195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2845.806679][T13195] Call Trace: [ 2845.809998][T13195] [ 2845.812970][T13195] dump_stack_lvl+0x125/0x1b0 [ 2845.817700][T13195] should_fail_ex+0x496/0x5b0 [ 2845.822705][T13195] ? fs_reclaim_acquire+0xb0/0x150 [ 2845.827835][T13195] __should_fail_alloc_page+0xe7/0x130 [ 2845.833930][T13195] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 2845.840118][T13195] __alloc_pages+0x14e/0x4a0 [ 2845.844734][T13195] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 2845.851555][T13195] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2845.857482][T13195] ? policy_nodemask+0x311/0x480 [ 2845.862443][T13195] alloc_pages_mpol+0x258/0x5f0 [ 2845.867315][T13195] ? mempolicy_in_oom_domain+0x150/0x150 [ 2845.872970][T13195] ? find_held_lock+0x2d/0x110 [ 2845.877781][T13195] vma_alloc_folio+0xad/0x220 [ 2845.882475][T13195] ? alloc_migration_target_by_mpol+0x6b0/0x6b0 [ 2845.888736][T13195] ? find_held_lock+0x2d/0x110 [ 2845.893527][T13195] ? filemap_get_read_batch+0x9b0/0x9b0 [ 2845.899098][T13195] __handle_mm_fault+0x100b/0x3d60 [ 2845.904276][T13195] ? vm_iomap_memory+0x170/0x170 [ 2845.909255][T13195] handle_mm_fault+0x478/0xa00 [ 2845.914045][T13195] __get_user_pages+0x4b2/0x1480 [ 2845.919004][T13195] ? follow_page_mask+0xda0/0xda0 [ 2845.924053][T13195] __gup_longterm_locked+0x278/0x2ab0 [ 2845.930333][T13195] ? get_user_pages_unlocked+0x770/0x770 [ 2845.935984][T13195] ? lock_sync+0x190/0x190 [ 2845.940433][T13195] pin_user_pages_remote+0xee/0x140 [ 2845.945754][T13195] ? __gup_longterm_locked+0x2ab0/0x2ab0 [ 2845.951959][T13195] process_vm_rw_core.constprop.0+0x43d/0xa10 [ 2845.958157][T13195] ? vmalloc_dump_obj+0x290/0x290 [ 2845.963230][T13195] process_vm_rw+0x2ff/0x360 [ 2845.967845][T13195] ? process_vm_rw_core.constprop.0+0xa10/0xa10 [ 2845.974103][T13195] ? _raw_spin_lock_irqsave+0x42/0x50 [ 2845.979500][T13195] ? lock_acquire+0x1ae/0x510 [ 2845.984225][T13195] ? handle_edge_irq+0x40a/0xcf0 [ 2845.989188][T13195] __x64_sys_process_vm_writev+0xe2/0x1b0 [ 2845.994928][T13195] ? syscall_enter_from_user_mode+0x26/0x80 [ 2846.000968][T13195] do_syscall_64+0x3f/0x110 [ 2846.005517][T13195] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2846.011435][T13195] RIP: 0033:0x7f6fcfc7cae9 [ 2846.015860][T13195] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2846.035574][T13195] RSP: 002b:00007f6fd098a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2846.044016][T13195] RAX: ffffffffffffffda RBX: 00007f6fcfd9c050 RCX: 00007f6fcfc7cae9 [ 2846.052023][T13195] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000002c67 [ 2846.060004][T13195] RBP: 00007f6fd098a120 R08: 0000000000000001 R09: 0000000000000000 [ 2846.068803][T13195] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000002 [ 2846.076806][T13195] R13: 000000000000006e R14: 00007f6fcfd9c050 R15: 00007f6fcfebfa48 [ 2846.084823][T13195] 06:05:42 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 27) [ 2846.488697][T13212] FAULT_INJECTION: forcing a failure. [ 2846.488697][T13212] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2846.504112][T13212] CPU: 1 PID: 13212 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 2846.514220][T13212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2846.524331][T13212] Call Trace: [ 2846.527797][T13212] [ 2846.530753][T13212] dump_stack_lvl+0x125/0x1b0 [ 2846.535476][T13212] should_fail_ex+0x496/0x5b0 [ 2846.540295][T13212] ? fs_reclaim_acquire+0xb0/0x150 [ 2846.545455][T13212] __should_fail_alloc_page+0xe7/0x130 [ 2846.550985][T13212] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 2846.557284][T13212] __alloc_pages+0x14e/0x4a0 [ 2846.561928][T13212] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 2846.568753][T13212] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2846.574675][T13212] ? policy_nodemask+0x311/0x480 [ 2846.579635][T13212] alloc_pages_mpol+0x258/0x5f0 [ 2846.584544][T13212] ? mempolicy_in_oom_domain+0x150/0x150 [ 2846.590344][T13212] ? find_held_lock+0x2d/0x110 [ 2846.595184][T13212] vma_alloc_folio+0xad/0x220 [ 2846.599886][T13212] ? alloc_migration_target_by_mpol+0x6b0/0x6b0 [ 2846.606143][T13212] ? find_held_lock+0x2d/0x110 [ 2846.610950][T13212] ? filemap_get_read_batch+0x9b0/0x9b0 [ 2846.616519][T13212] __handle_mm_fault+0x100b/0x3d60 [ 2846.621832][T13212] ? vm_iomap_memory+0x170/0x170 [ 2846.626807][T13212] handle_mm_fault+0x478/0xa00 [ 2846.631596][T13212] __get_user_pages+0x4b2/0x1480 [ 2846.636557][T13212] ? follow_page_mask+0xda0/0xda0 [ 2846.642299][T13212] ? __gup_longterm_locked+0x2160/0x2ab0 [ 2846.647958][T13212] __gup_longterm_locked+0x278/0x2ab0 [ 2846.653367][T13212] ? get_user_pages_unlocked+0x770/0x770 [ 2846.659022][T13212] ? lock_sync+0x190/0x190 [ 2846.663486][T13212] pin_user_pages_remote+0xee/0x140 [ 2846.668700][T13212] ? __gup_longterm_locked+0x2ab0/0x2ab0 [ 2846.674356][T13212] process_vm_rw_core.constprop.0+0x43d/0xa10 [ 2846.680553][T13212] ? vmalloc_dump_obj+0x290/0x290 [ 2846.685622][T13212] process_vm_rw+0x2ff/0x360 [ 2846.690240][T13212] ? process_vm_rw_core.constprop.0+0xa10/0xa10 [ 2846.696606][T13212] ? ksys_write+0x214/0x250 [ 2846.701217][T13212] ? reacquire_held_locks+0x4b0/0x4b0 [ 2846.706700][T13212] ? vfs_write+0x14c/0xdf0 [ 2846.711150][T13212] ? bit_wait_io_timeout+0x160/0x160 [ 2846.716465][T13212] ? fput+0x30/0x1a0 [ 2846.720377][T13212] ? ksys_write+0x1a7/0x250 [ 2846.724903][T13212] __x64_sys_process_vm_writev+0xe2/0x1b0 [ 2846.730914][T13212] ? syscall_enter_from_user_mode+0x26/0x80 [ 2846.736842][T13212] do_syscall_64+0x3f/0x110 [ 2846.741369][T13212] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2846.747280][T13212] RIP: 0033:0x7f6fcfc7cae9 [ 2846.751705][T13212] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2846.771328][T13212] RSP: 002b:00007f6fd098a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2846.779768][T13212] RAX: ffffffffffffffda RBX: 00007f6fcfd9c050 RCX: 00007f6fcfc7cae9 [ 2846.787754][T13212] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000002c6a [ 2846.796348][T13212] RBP: 00007f6fd098a120 R08: 0000000000000001 R09: 0000000000000000 [ 2846.804336][T13212] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000002 [ 2846.812403][T13212] R13: 000000000000006e R14: 00007f6fcfd9c050 R15: 00007f6fcfebfa48 [ 2846.820404][T13212] 06:05:43 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045012, &(0x7f0000000080)=0xe3) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) 06:05:44 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) (async, rerun: 32) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async, rerun: 32) r1 = gettid() ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) (async) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) (async) fcntl$setsig(r2, 0xa, 0x12) (async, rerun: 32) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) (async, rerun: 32) r4 = dup2(r2, r3) (async) r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000100)=0xc) (async, rerun: 64) fcntl$setown(r5, 0x8, r1) (async, rerun: 64) tkill(r1, 0x14) 06:05:44 executing program 5: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r4, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3fe, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) 06:05:44 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 28) 06:05:44 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045013, &(0x7f0000000080)=0xe3) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) 06:05:44 executing program 3: openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x105802, 0x0) (async) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x105802, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r1}, 0x90) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0), 0x0) (async) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0), 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000ac0)) write$FUSE_GETXATTR(r1, &(0x7f00000000c0)={0xfffffffffffffe85, 0xfffffffffffffffe}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r2 = gettid() pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000140)) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) syz_open_procfs(r5, &(0x7f0000000300)='syscall\x00') ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) ioctl$int_in(r3, 0x5452, &(0x7f0000000200)=0x1000000000003e) (async) ioctl$int_in(r3, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r3, 0xa, 0x12) (async) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f00000004c0)=[{0xffffffffffffffff, 0x840a}, {0xffffffffffffffff, 0x1405}, {0xffffffffffffffff, 0x400}, {0xffffffffffffffff, 0x6008}, {0xffffffffffffffff, 0x243c}, {0xffffffffffffffff, 0x8000}, {}, {0xffffffffffffffff, 0x222}], 0x0, 0x7) (async) poll(&(0x7f00000004c0)=[{0xffffffffffffffff, 0x840a}, {0xffffffffffffffff, 0x1405}, {0xffffffffffffffff, 0x400}, {0xffffffffffffffff, 0x6008}, {0xffffffffffffffff, 0x243c}, {0xffffffffffffffff, 0x8000}, {}, {0xffffffffffffffff, 0x222}], 0x0, 0x7) r6 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r7 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountstats\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), 0x0) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000ac0)) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000ac0)) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000340)=0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r7}, 0x90) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000001c0), 0x0) ioctl$NS_GET_OWNER_UID(r7, 0xb704, &(0x7f0000000380)) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000040)={0x400, 0x2, 0x6, 0x0, 0x1}) dup2(r3, r4) fcntl$setown(r4, 0x8, r2) (async) fcntl$setown(r4, 0x8, r2) tkill(r2, 0x14) [ 2847.954830][T13228] FAULT_INJECTION: forcing a failure. [ 2847.954830][T13228] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2847.970858][T13228] CPU: 1 PID: 13228 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 2847.980963][T13228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2847.991051][T13228] Call Trace: [ 2847.994357][T13228] [ 2847.997320][T13228] dump_stack_lvl+0x125/0x1b0 [ 2848.002059][T13228] should_fail_ex+0x496/0x5b0 [ 2848.006805][T13228] ? fs_reclaim_acquire+0xb0/0x150 [ 2848.011980][T13228] __should_fail_alloc_page+0xe7/0x130 [ 2848.017494][T13228] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 2848.023683][T13228] __alloc_pages+0x14e/0x4a0 [ 2848.028312][T13228] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 2848.035107][T13228] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2848.041016][T13228] ? policy_nodemask+0x311/0x480 [ 2848.045967][T13228] alloc_pages_mpol+0x258/0x5f0 [ 2848.050840][T13228] ? mempolicy_in_oom_domain+0x150/0x150 [ 2848.056490][T13228] ? lock_release+0x3b8/0x680 [ 2848.061190][T13228] vma_alloc_folio+0xad/0x220 [ 2848.065882][T13228] ? alloc_migration_target_by_mpol+0x6b0/0x6b0 [ 2848.072137][T13228] ? find_held_lock+0x2d/0x110 [ 2848.076921][T13228] ? filemap_get_read_batch+0x9b0/0x9b0 [ 2848.082484][T13228] __handle_mm_fault+0x100b/0x3d60 [ 2848.087616][T13228] ? vm_iomap_memory+0x170/0x170 [ 2848.092589][T13228] handle_mm_fault+0x478/0xa00 [ 2848.097378][T13228] __get_user_pages+0x4b2/0x1480 [ 2848.102357][T13228] ? follow_page_mask+0xda0/0xda0 [ 2848.107417][T13228] __gup_longterm_locked+0x278/0x2ab0 [ 2848.112816][T13228] ? get_user_pages_unlocked+0x770/0x770 [ 2848.118468][T13228] ? lock_sync+0x190/0x190 [ 2848.122917][T13228] pin_user_pages_remote+0xee/0x140 [ 2848.128134][T13228] ? __gup_longterm_locked+0x2ab0/0x2ab0 [ 2848.133791][T13228] process_vm_rw_core.constprop.0+0x43d/0xa10 [ 2848.139889][T13228] ? vmalloc_dump_obj+0x290/0x290 [ 2848.144966][T13228] process_vm_rw+0x2ff/0x360 [ 2848.149568][T13228] ? process_vm_rw_core.constprop.0+0xa10/0xa10 [ 2848.155820][T13228] ? ksys_write+0x214/0x250 [ 2848.160343][T13228] ? reacquire_held_locks+0x4b0/0x4b0 [ 2848.165741][T13228] ? vfs_write+0x14c/0xdf0 [ 2848.170182][T13228] ? bit_wait_io_timeout+0x160/0x160 [ 2848.175531][T13228] ? asm_common_interrupt+0x26/0x40 [ 2848.180791][T13228] __x64_sys_process_vm_writev+0xe2/0x1b0 [ 2848.186521][T13228] ? __ia32_sys_process_vm_readv+0x1b0/0x1b0 [ 2848.192527][T13228] do_syscall_64+0x3f/0x110 [ 2848.197046][T13228] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2848.202956][T13228] RIP: 0033:0x7f6fcfc7cae9 [ 2848.207395][T13228] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2848.227019][T13228] RSP: 002b:00007f6fd098a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2848.235443][T13228] RAX: ffffffffffffffda RBX: 00007f6fcfd9c050 RCX: 00007f6fcfc7cae9 [ 2848.243543][T13228] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000002c6d [ 2848.251522][T13228] RBP: 00007f6fd098a120 R08: 0000000000000001 R09: 0000000000000000 [ 2848.259502][T13228] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000002 [ 2848.267480][T13228] R13: 000000000000006e R14: 00007f6fcfd9c050 R15: 00007f6fcfebfa48 [ 2848.275472][T13228] 06:05:45 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 29) [ 2848.642241][T13240] FAULT_INJECTION: forcing a failure. [ 2848.642241][T13240] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2848.666397][T13240] CPU: 1 PID: 13240 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 2848.676517][T13240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2848.686595][T13240] Call Trace: [ 2848.689875][T13240] [ 2848.692821][T13240] dump_stack_lvl+0x125/0x1b0 [ 2848.697614][T13240] should_fail_ex+0x496/0x5b0 [ 2848.702312][T13240] ? fs_reclaim_acquire+0xb0/0x150 [ 2848.707445][T13240] __should_fail_alloc_page+0xe7/0x130 [ 2848.712936][T13240] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 2848.719112][T13240] __alloc_pages+0x14e/0x4a0 [ 2848.723722][T13240] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 2848.730548][T13240] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2848.736456][T13240] ? policy_nodemask+0x311/0x480 [ 2848.741426][T13240] alloc_pages_mpol+0x258/0x5f0 [ 2848.746320][T13240] ? mempolicy_in_oom_domain+0x150/0x150 [ 2848.751972][T13240] ? find_held_lock+0x2d/0x110 [ 2848.756756][T13240] vma_alloc_folio+0xad/0x220 [ 2848.761622][T13240] ? alloc_migration_target_by_mpol+0x6b0/0x6b0 [ 2848.767875][T13240] ? find_held_lock+0x2d/0x110 [ 2848.772651][T13240] ? filemap_get_read_batch+0x9b0/0x9b0 [ 2848.778211][T13240] __handle_mm_fault+0x100b/0x3d60 [ 2848.783346][T13240] ? vm_iomap_memory+0x170/0x170 [ 2848.788356][T13240] handle_mm_fault+0x478/0xa00 [ 2848.793136][T13240] __get_user_pages+0x4b2/0x1480 [ 2848.798100][T13240] ? follow_page_mask+0xda0/0xda0 [ 2848.803143][T13240] __gup_longterm_locked+0x278/0x2ab0 [ 2848.808527][T13240] ? get_user_pages_unlocked+0x770/0x770 [ 2848.814172][T13240] ? lock_sync+0x190/0x190 [ 2848.818615][T13240] pin_user_pages_remote+0xee/0x140 [ 2848.823834][T13240] ? __gup_longterm_locked+0x2ab0/0x2ab0 [ 2848.829530][T13240] process_vm_rw_core.constprop.0+0x43d/0xa10 [ 2848.835666][T13240] ? vmalloc_dump_obj+0x290/0x290 06:05:45 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045014, &(0x7f0000000080)=0xe3) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) [ 2848.840762][T13240] process_vm_rw+0x2ff/0x360 [ 2848.845398][T13240] ? process_vm_rw_core.constprop.0+0xa10/0xa10 [ 2848.851694][T13240] ? vfs_write+0x14c/0xdf0 [ 2848.856182][T13240] ? rcu_is_watching+0x12/0xb0 [ 2848.860987][T13240] ? __rseq_handle_notify_resume+0x5f2/0x1010 [ 2848.867115][T13240] ? folio_memcg_unlock+0x280/0x280 [ 2848.872359][T13240] ? ksys_write+0x1a7/0x250 [ 2848.876920][T13240] __x64_sys_process_vm_writev+0xe2/0x1b0 [ 2848.882698][T13240] ? syscall_enter_from_user_mode+0x26/0x80 [ 2848.888644][T13240] do_syscall_64+0x3f/0x110 [ 2848.893204][T13240] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2848.899145][T13240] RIP: 0033:0x7f6fcfc7cae9 [ 2848.903596][T13240] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2848.923771][T13240] RSP: 002b:00007f6fd098a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2848.932226][T13240] RAX: ffffffffffffffda RBX: 00007f6fcfd9c050 RCX: 00007f6fcfc7cae9 [ 2848.940230][T13240] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000002c70 [ 2848.948236][T13240] RBP: 00007f6fd098a120 R08: 0000000000000001 R09: 0000000000000000 [ 2848.956238][T13240] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000002 [ 2848.964234][T13240] R13: 000000000000006e R14: 00007f6fcfd9c050 R15: 00007f6fcfebfa48 [ 2848.972308][T13240] 06:05:46 executing program 5: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r4, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3e80000, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) 06:05:46 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000002a00)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x48}, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r1, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) r2 = gettid() ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000080)=0xe3) openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) dup2(r1, 0xffffffffffffffff) bind$rds(r0, &(0x7f0000000140)={0x2, 0x4e24, @local}, 0x10) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r4}], 0x1, 0x2) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x40, 0x30040) dup2(r0, r5) fcntl$setown(r4, 0x8, r2) tkill(r2, 0x14) 06:05:46 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 30) 06:05:46 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000100)) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000080)=0x4) (async, rerun: 32) mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x50, r0, 0x0) (async, rerun: 32) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r3}, 0x90) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0), 0x0) (async) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000ac0)) (async, rerun: 32) write$dsp(r2, &(0x7f00000003c0)="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", 0x1a1) (rerun: 32) 06:05:46 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045015, &(0x7f0000000080)=0xe3) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) [ 2849.876248][T13258] FAULT_INJECTION: forcing a failure. [ 2849.876248][T13258] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2849.893575][T13258] CPU: 1 PID: 13258 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 2849.903700][T13258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2849.913782][T13258] Call Trace: [ 2849.917081][T13258] [ 2849.920019][T13258] dump_stack_lvl+0x125/0x1b0 [ 2849.924724][T13258] should_fail_ex+0x496/0x5b0 [ 2849.929432][T13258] ? fs_reclaim_acquire+0xb0/0x150 [ 2849.934565][T13258] __should_fail_alloc_page+0xe7/0x130 [ 2849.940076][T13258] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 2849.946263][T13258] __alloc_pages+0x14e/0x4a0 [ 2849.950965][T13258] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 2849.957761][T13258] ? print_usage_bug.part.0+0x670/0x670 [ 2849.963337][T13258] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2849.969270][T13258] ? policy_nodemask+0x311/0x480 [ 2849.974241][T13258] alloc_pages_mpol+0x258/0x5f0 [ 2849.979116][T13258] ? mempolicy_in_oom_domain+0x150/0x150 [ 2849.984769][T13258] ? find_held_lock+0x2d/0x110 [ 2849.989573][T13258] vma_alloc_folio+0xad/0x220 [ 2849.994273][T13258] ? alloc_migration_target_by_mpol+0x6b0/0x6b0 [ 2850.000547][T13258] ? filemap_get_read_batch+0x9b0/0x9b0 [ 2850.006125][T13258] __handle_mm_fault+0x100b/0x3d60 [ 2850.011266][T13258] ? vm_iomap_memory+0x170/0x170 [ 2850.016340][T13258] handle_mm_fault+0x478/0xa00 [ 2850.021136][T13258] __get_user_pages+0x4b2/0x1480 [ 2850.026118][T13258] ? follow_page_mask+0xda0/0xda0 [ 2850.031167][T13258] ? down_read+0x470/0x470 [ 2850.035609][T13258] __gup_longterm_locked+0x278/0x2ab0 [ 2850.041024][T13258] ? get_user_pages_unlocked+0x770/0x770 [ 2850.046683][T13258] ? lock_sync+0x190/0x190 [ 2850.051135][T13258] pin_user_pages_remote+0xee/0x140 [ 2850.056363][T13258] ? __gup_longterm_locked+0x2ab0/0x2ab0 [ 2850.062028][T13258] process_vm_rw_core.constprop.0+0x43d/0xa10 [ 2850.068131][T13258] ? vmalloc_dump_obj+0x290/0x290 [ 2850.073201][T13258] process_vm_rw+0x2ff/0x360 [ 2850.077840][T13258] ? process_vm_rw_core.constprop.0+0xa10/0xa10 [ 2850.084098][T13258] ? ksys_write+0x214/0x250 [ 2850.088627][T13258] ? reacquire_held_locks+0x4b0/0x4b0 [ 2850.094031][T13258] ? vfs_write+0x14c/0xdf0 [ 2850.098522][T13258] ? bit_wait_io_timeout+0x160/0x160 [ 2850.103844][T13258] __x64_sys_process_vm_writev+0xe2/0x1b0 [ 2850.109610][T13258] do_syscall_64+0x3f/0x110 [ 2850.114152][T13258] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2850.120063][T13258] RIP: 0033:0x7f6fcfc7cae9 [ 2850.124487][T13258] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2850.144114][T13258] RSP: 002b:00007f6fd098a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2850.152547][T13258] RAX: ffffffffffffffda RBX: 00007f6fcfd9c050 RCX: 00007f6fcfc7cae9 [ 2850.160536][T13258] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000002c73 [ 2850.168537][T13258] RBP: 00007f6fd098a120 R08: 0000000000000001 R09: 0000000000000000 [ 2850.176533][T13258] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000002 [ 2850.184531][T13258] R13: 000000000000006e R14: 00007f6fcfd9c050 R15: 00007f6fcfebfa48 [ 2850.192550][T13258] 06:05:47 executing program 5: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r4, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x2, 0x0) 06:05:47 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 31) [ 2850.527767][T13272] FAULT_INJECTION: forcing a failure. [ 2850.527767][T13272] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2850.542157][T13272] CPU: 1 PID: 13272 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 2850.552341][T13272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2850.562419][T13272] Call Trace: [ 2850.565697][T13272] [ 2850.568621][T13272] dump_stack_lvl+0x125/0x1b0 [ 2850.573508][T13272] should_fail_ex+0x496/0x5b0 [ 2850.578250][T13272] ? fs_reclaim_acquire+0xb0/0x150 [ 2850.583424][T13272] __should_fail_alloc_page+0xe7/0x130 [ 2850.588953][T13272] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 2850.595181][T13272] __alloc_pages+0x14e/0x4a0 [ 2850.599825][T13272] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 2850.606656][T13272] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2850.612607][T13272] ? policy_nodemask+0x311/0x480 [ 2850.617598][T13272] alloc_pages_mpol+0x258/0x5f0 [ 2850.622504][T13272] ? mempolicy_in_oom_domain+0x150/0x150 [ 2850.628192][T13272] ? find_held_lock+0x2d/0x110 [ 2850.633024][T13272] vma_alloc_folio+0xad/0x220 [ 2850.637759][T13272] ? alloc_migration_target_by_mpol+0x6b0/0x6b0 [ 2850.644057][T13272] ? find_held_lock+0x2d/0x110 [ 2850.648877][T13272] ? filemap_get_read_batch+0x9b0/0x9b0 [ 2850.654481][T13272] __handle_mm_fault+0x100b/0x3d60 [ 2850.659659][T13272] ? vm_iomap_memory+0x170/0x170 [ 2850.664734][T13272] handle_mm_fault+0x478/0xa00 [ 2850.669662][T13272] __get_user_pages+0x4b2/0x1480 [ 2850.674785][T13272] ? follow_page_mask+0xda0/0xda0 [ 2850.679857][T13272] ? down_read+0x470/0x470 [ 2850.684345][T13272] __gup_longterm_locked+0x278/0x2ab0 [ 2850.689786][T13272] ? get_user_pages_unlocked+0x770/0x770 [ 2850.695560][T13272] ? lock_sync+0x190/0x190 [ 2850.700047][T13272] pin_user_pages_remote+0xee/0x140 [ 2850.705329][T13272] ? __gup_longterm_locked+0x2ab0/0x2ab0 [ 2850.711042][T13272] process_vm_rw_core.constprop.0+0x43d/0xa10 [ 2850.717177][T13272] ? vmalloc_dump_obj+0x290/0x290 [ 2850.722409][T13272] process_vm_rw+0x2ff/0x360 [ 2850.727059][T13272] ? process_vm_rw_core.constprop.0+0xa10/0xa10 [ 2850.733350][T13272] ? ksys_write+0x214/0x250 [ 2850.737902][T13272] ? reacquire_held_locks+0x4b0/0x4b0 [ 2850.743351][T13272] ? vfs_write+0x14c/0xdf0 [ 2850.747857][T13272] ? bit_wait_io_timeout+0x160/0x160 [ 2850.753204][T13272] ? fput+0x30/0x1a0 [ 2850.757132][T13272] ? ksys_write+0x1a7/0x250 [ 2850.761654][T13272] __x64_sys_process_vm_writev+0xe2/0x1b0 [ 2850.767388][T13272] ? syscall_enter_from_user_mode+0x26/0x80 [ 2850.773388][T13272] do_syscall_64+0x3f/0x110 [ 2850.777915][T13272] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2850.783829][T13272] RIP: 0033:0x7f6fcfc7cae9 [ 2850.788255][T13272] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2850.807965][T13272] RSP: 002b:00007f6fd098a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2850.816393][T13272] RAX: ffffffffffffffda RBX: 00007f6fcfd9c050 RCX: 00007f6fcfc7cae9 06:05:47 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045018, &(0x7f0000000080)=0xe3) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) 06:05:47 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000540)='smaps_rollup\x00') r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r1}, 0x90) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0), 0x0) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000ac0)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {r2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r5 = syz_open_procfs(0x0, &(0x7f0000000bc0)='maps\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r5}, 0x90) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000001c0), 0x0) sendmsg$nl_route(r4, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)=@ipv6_delrule={0x88, 0x21, 0x200, 0x70bd2b, 0x25dfdbfb, {0xa, 0x120, 0x80, 0x2, 0x3, 0x0, 0x0, 0x2}, [@FRA_SRC={0x14, 0x2, @empty}, @FRA_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x8001}, @FRA_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @empty}, @FRA_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40800}, 0x4004) ioctl$NS_GET_OWNER_UID(r5, 0xb704, &(0x7f0000000ac0)) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x7, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}]}, &(0x7f0000000600)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x8, 0x9, 0xe34}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f00000006c0)=[{0x1, 0x3, 0x3, 0xc}, {0x4, 0x4, 0xb, 0x7}, {0x2, 0x1, 0xc, 0x8}, {0x1, 0x5, 0xc, 0xc}], 0x10, 0x7}, 0x90) sendmsg$nl_route(r3, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)=@getlink={0xd4, 0x12, 0x4, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x100, 0x28030}, [@IFLA_NET_NS_FD={0x8, 0x1c, r1}, @IFLA_TXQLEN={0x8, 0xd, 0xfa}, @IFLA_TXQLEN={0x8, 0xd, 0x4}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x9}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x7f}, @IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x1c, 0x5, 0x0, 0x1, [@IFLA_BRPORT_FLUSH={0x4}, @IFLA_BRPORT_ISOLATED={0x5, 0x21, 0x1}, @IFLA_BRPORT_PROXYARP={0x5}, @IFLA_BRPORT_FLUSH={0x4}]}}}, @IFLA_IFALIASn={0x4}, @IFLA_XDP={0x4c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}, @IFLA_XDP_FD={0x8, 0x1, r3}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r6}, @IFLA_XDP_FD={0x8, 0x1, r2}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r4}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r5}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r1}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x8}]}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x6}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40}, 0x24000800) sendmsg$nl_route(r3, &(0x7f00000011c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv4_getaddr={0x20, 0x16, 0x800, 0x70bd2c, 0x25dfdbfc, {0x2, 0x10, 0x8e, 0xfe}, [@IFA_FLAGS={0x8, 0x8, 0x400}]}, 0x20}}, 0x20004000) write$dsp(r1, &(0x7f0000002380)="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"/4480, 0x1180) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {r2}}, './file0\x00'}) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000580)={0x0, 0x9, 0xbed, 0x7bc, 0x8, 0x8001}, 0x14) mmap$dsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8, 0x2010, r7, 0x0) [ 2850.824374][T13272] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000002c76 [ 2850.832354][T13272] RBP: 00007f6fd098a120 R08: 0000000000000001 R09: 0000000000000000 [ 2850.840339][T13272] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000002 [ 2850.848318][T13272] R13: 000000000000006e R14: 00007f6fcfd9c050 R15: 00007f6fcfebfa48 [ 2850.856318][T13272] 06:05:47 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x105802, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r1}, 0x90) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0), 0x0) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000ac0)) write$FUSE_GETXATTR(r1, &(0x7f00000000c0)={0xfffffffffffffe85, 0xfffffffffffffffe}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async, rerun: 64) r2 = gettid() (rerun: 64) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) syz_open_procfs(r5, &(0x7f0000000300)='syscall\x00') ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) (async) ioctl$int_in(r3, 0x5452, &(0x7f0000000200)=0x1000000000003e) (async) fcntl$setsig(r3, 0xa, 0x12) (async) poll(&(0x7f00000004c0)=[{0xffffffffffffffff, 0x840a}, {0xffffffffffffffff, 0x1405}, {0xffffffffffffffff, 0x400}, {0xffffffffffffffff, 0x6008}, {0xffffffffffffffff, 0x243c}, {0xffffffffffffffff, 0x8000}, {}, {0xffffffffffffffff, 0x222}], 0x0, 0x7) (async) r6 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) r7 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountstats\x00') (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000ac0)) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000340)=0x9) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r7}, 0x90) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000001c0), 0x0) (async, rerun: 32) ioctl$NS_GET_OWNER_UID(r7, 0xb704, &(0x7f0000000380)) (rerun: 32) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000040)={0x400, 0x2, 0x6, 0x0, 0x1}) dup2(r3, r4) (async) fcntl$setown(r4, 0x8, r2) (async) tkill(r2, 0x14) 06:05:47 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x24080, 0x144) write$FUSE_GETXATTR(r1, &(0x7f00000000c0)={0x18}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r2 = gettid() r3 = syz_io_uring_complete(0x0) pidfd_getfd(0xffffffffffffffff, r3, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) ioctl$int_in(r4, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r4, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r5}], 0x1, 0xfffffffffffffff8) dup2(r4, r5) fcntl$setown(r5, 0x8, r2) tkill(r2, 0x14) 06:05:47 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 32) 06:05:47 executing program 5: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r4, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3, 0x0) [ 2851.369197][T13295] FAULT_INJECTION: forcing a failure. [ 2851.369197][T13295] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2851.384649][T13295] CPU: 1 PID: 13295 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 2851.394776][T13295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2851.404875][T13295] Call Trace: [ 2851.408185][T13295] [ 2851.411148][T13295] dump_stack_lvl+0x125/0x1b0 [ 2851.415980][T13295] should_fail_ex+0x496/0x5b0 [ 2851.420709][T13295] ? fs_reclaim_acquire+0xb0/0x150 [ 2851.425852][T13295] __should_fail_alloc_page+0xe7/0x130 [ 2851.431365][T13295] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 2851.437557][T13295] __alloc_pages+0x14e/0x4a0 [ 2851.442196][T13295] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 2851.449260][T13295] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2851.455198][T13295] ? policy_nodemask+0x311/0x480 [ 2851.460171][T13295] alloc_pages_mpol+0x258/0x5f0 [ 2851.465047][T13295] ? mempolicy_in_oom_domain+0x150/0x150 [ 2851.470789][T13295] ? find_held_lock+0x2d/0x110 [ 2851.475591][T13295] vma_alloc_folio+0xad/0x220 [ 2851.480282][T13295] ? alloc_migration_target_by_mpol+0x6b0/0x6b0 [ 2851.486542][T13295] ? find_held_lock+0x2d/0x110 [ 2851.491337][T13295] ? filemap_get_read_batch+0x9b0/0x9b0 [ 2851.496909][T13295] __handle_mm_fault+0x100b/0x3d60 [ 2851.502049][T13295] ? vm_iomap_memory+0x170/0x170 [ 2851.507026][T13295] handle_mm_fault+0x478/0xa00 [ 2851.511816][T13295] __get_user_pages+0x4b2/0x1480 [ 2851.516774][T13295] ? follow_page_mask+0xda0/0xda0 [ 2851.521826][T13295] ? down_read+0x470/0x470 [ 2851.526732][T13295] __gup_longterm_locked+0x41a/0x2ab0 [ 2851.532134][T13295] ? get_user_pages_unlocked+0x770/0x770 [ 2851.537789][T13295] ? lock_sync+0x190/0x190 [ 2851.542253][T13295] pin_user_pages_remote+0xee/0x140 [ 2851.547473][T13295] ? __gup_longterm_locked+0x2ab0/0x2ab0 [ 2851.553226][T13295] process_vm_rw_core.constprop.0+0x43d/0xa10 [ 2851.559324][T13295] ? vmalloc_dump_obj+0x290/0x290 [ 2851.564382][T13295] process_vm_rw+0x2ff/0x360 [ 2851.569517][T13295] ? process_vm_rw_core.constprop.0+0xa10/0xa10 [ 2851.576141][T13295] ? ksys_write+0x214/0x250 [ 2851.581060][T13295] ? reacquire_held_locks+0x4b0/0x4b0 [ 2851.586652][T13295] ? vfs_write+0x14c/0xdf0 [ 2851.591116][T13295] ? bit_wait_io_timeout+0x160/0x160 [ 2851.596436][T13295] ? fput+0x30/0x1a0 [ 2851.600353][T13295] ? ksys_write+0x1a7/0x250 [ 2851.604914][T13295] __x64_sys_process_vm_writev+0xe2/0x1b0 [ 2851.610711][T13295] ? syscall_enter_from_user_mode+0x26/0x80 [ 2851.616723][T13295] do_syscall_64+0x3f/0x110 [ 2851.621368][T13295] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2851.627306][T13295] RIP: 0033:0x7f6fcfc7cae9 [ 2851.631748][T13295] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2851.651378][T13295] RSP: 002b:00007f6fd098a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2851.659802][T13295] RAX: ffffffffffffffda RBX: 00007f6fcfd9c050 RCX: 00007f6fcfc7cae9 [ 2851.667788][T13295] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000002c79 [ 2851.675766][T13295] RBP: 00007f6fd098a120 R08: 0000000000000001 R09: 0000000000000000 [ 2851.683923][T13295] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000002 [ 2851.691943][T13295] R13: 000000000000006e R14: 00007f6fcfd9c050 R15: 00007f6fcfebfa48 [ 2851.699955][T13295] 06:05:49 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000540)='smaps_rollup\x00') r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r1}, 0x90) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0), 0x0) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000ac0)) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {r2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) (async) r5 = syz_open_procfs(0x0, &(0x7f0000000bc0)='maps\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r5}, 0x90) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000001c0), 0x0) sendmsg$nl_route(r4, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)=@ipv6_delrule={0x88, 0x21, 0x200, 0x70bd2b, 0x25dfdbfb, {0xa, 0x120, 0x80, 0x2, 0x3, 0x0, 0x0, 0x2}, [@FRA_SRC={0x14, 0x2, @empty}, @FRA_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x8001}, @FRA_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @empty}, @FRA_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40800}, 0x4004) (async) ioctl$NS_GET_OWNER_UID(r5, 0xb704, &(0x7f0000000ac0)) (async) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x7, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}]}, &(0x7f0000000600)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x8, 0x9, 0xe34}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f00000006c0)=[{0x1, 0x3, 0x3, 0xc}, {0x4, 0x4, 0xb, 0x7}, {0x2, 0x1, 0xc, 0x8}, {0x1, 0x5, 0xc, 0xc}], 0x10, 0x7}, 0x90) sendmsg$nl_route(r3, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)=@getlink={0xd4, 0x12, 0x4, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x100, 0x28030}, [@IFLA_NET_NS_FD={0x8, 0x1c, r1}, @IFLA_TXQLEN={0x8, 0xd, 0xfa}, @IFLA_TXQLEN={0x8, 0xd, 0x4}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x9}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x7f}, @IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x1c, 0x5, 0x0, 0x1, [@IFLA_BRPORT_FLUSH={0x4}, @IFLA_BRPORT_ISOLATED={0x5, 0x21, 0x1}, @IFLA_BRPORT_PROXYARP={0x5}, @IFLA_BRPORT_FLUSH={0x4}]}}}, @IFLA_IFALIASn={0x4}, @IFLA_XDP={0x4c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}, @IFLA_XDP_FD={0x8, 0x1, r3}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r6}, @IFLA_XDP_FD={0x8, 0x1, r2}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r4}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r5}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r1}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x8}]}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x6}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40}, 0x24000800) (async) sendmsg$nl_route(r3, &(0x7f00000011c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv4_getaddr={0x20, 0x16, 0x800, 0x70bd2c, 0x25dfdbfc, {0x2, 0x10, 0x8e, 0xfe}, [@IFA_FLAGS={0x8, 0x8, 0x400}]}, 0x20}}, 0x20004000) (async) write$dsp(r1, &(0x7f0000002380)="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"/4480, 0x1180) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {r2}}, './file0\x00'}) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000580)={0x0, 0x9, 0xbed, 0x7bc, 0x8, 0x8001}, 0x14) (async) mmap$dsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8, 0x2010, r7, 0x0) 06:05:49 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) (async) r1 = open(&(0x7f0000000000)='./file0\x00', 0x24080, 0x144) write$FUSE_GETXATTR(r1, &(0x7f00000000c0)={0x18}, 0x18) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) r2 = gettid() r3 = syz_io_uring_complete(0x0) pidfd_getfd(0xffffffffffffffff, r3, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) (async) ioctl$int_in(r4, 0x5452, &(0x7f0000000200)=0x1000000000003e) (async) fcntl$setsig(r4, 0xa, 0x12) (async) poll(&(0x7f0000b2c000)=[{r5}], 0x1, 0xfffffffffffffff8) dup2(r4, r5) fcntl$setown(r5, 0x8, r2) (async) tkill(r2, 0x14) 06:05:49 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045022, &(0x7f0000000080)=0xe3) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) 06:05:49 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 33) 06:05:49 executing program 5: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r4, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x4, 0x0) 06:05:49 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000002a00)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x48}, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r1, &(0x7f00000000c0)={0x18}, 0xffffff54) (async) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) (async, rerun: 32) r2 = gettid() (async, rerun: 32) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000080)=0xe3) (rerun: 32) openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) dup2(r1, 0xffffffffffffffff) (async) bind$rds(r0, &(0x7f0000000140)={0x2, 0x4e24, @local}, 0x10) (async, rerun: 64) fcntl$setsig(r3, 0xa, 0x12) (async, rerun: 64) poll(&(0x7f0000b2c000)=[{r4}], 0x1, 0x2) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x40, 0x30040) dup2(r0, r5) (async) fcntl$setown(r4, 0x8, r2) tkill(r2, 0x14) 06:05:49 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) (async) r1 = open(&(0x7f0000000000)='./file0\x00', 0x24080, 0x144) write$FUSE_GETXATTR(r1, &(0x7f00000000c0)={0x18}, 0x18) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r2 = gettid() (async, rerun: 32) r3 = syz_io_uring_complete(0x0) (rerun: 32) pidfd_getfd(0xffffffffffffffff, r3, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) (async, rerun: 64) ioctl$int_in(r4, 0x5452, &(0x7f0000000200)=0x1000000000003e) (async, rerun: 64) fcntl$setsig(r4, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r5}], 0x1, 0xfffffffffffffff8) (async) dup2(r4, r5) fcntl$setown(r5, 0x8, r2) (async) tkill(r2, 0x14) [ 2852.931328][T13320] FAULT_INJECTION: forcing a failure. [ 2852.931328][T13320] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2852.945540][T13320] CPU: 1 PID: 13320 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 2852.955661][T13320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2852.965751][T13320] Call Trace: [ 2852.969067][T13320] [ 2852.972026][T13320] dump_stack_lvl+0x125/0x1b0 [ 2852.976760][T13320] should_fail_ex+0x496/0x5b0 [ 2852.981493][T13320] ? fs_reclaim_acquire+0xb0/0x150 [ 2852.986654][T13320] __should_fail_alloc_page+0xe7/0x130 [ 2852.992168][T13320] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 2852.998385][T13320] __alloc_pages+0x14e/0x4a0 [ 2853.003035][T13320] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 2853.009865][T13320] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2853.015821][T13320] ? policy_nodemask+0x311/0x480 [ 2853.020818][T13320] alloc_pages_mpol+0x258/0x5f0 [ 2853.025719][T13320] ? mempolicy_in_oom_domain+0x150/0x150 06:05:49 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$dsp(r2, &(0x7f0000000000)="6f3865f28eb7ad1761582133d3a26254d1a96e6931da97f4972f1a26d6b27e173de6aff431dcd712ff009fd894a7d8e52a6d9d2b7d3e8aeaf688e2cd5158d3a1693adfea7bf39e61f9e6a6cb98765b04f56593d4e8539fe34b9bd387b75b9c35043fac5c217f58", 0x67) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) ioctl$int_in(r3, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r4}], 0x1, 0xfffffffffffffff8) dup2(r3, r4) fcntl$setown(r4, 0x8, r1) tkill(r1, 0x14) [ 2853.031409][T13320] ? find_held_lock+0x2d/0x110 [ 2853.036230][T13320] vma_alloc_folio+0xad/0x220 [ 2853.041038][T13320] ? alloc_migration_target_by_mpol+0x6b0/0x6b0 [ 2853.047321][T13320] ? find_held_lock+0x2d/0x110 [ 2853.052143][T13320] ? filemap_get_read_batch+0x9b0/0x9b0 [ 2853.057740][T13320] __handle_mm_fault+0x100b/0x3d60 [ 2853.062909][T13320] ? vm_iomap_memory+0x170/0x170 [ 2853.067921][T13320] handle_mm_fault+0x478/0xa00 [ 2853.072747][T13320] __get_user_pages+0x4b2/0x1480 [ 2853.077743][T13320] ? follow_page_mask+0xda0/0xda0 [ 2853.082819][T13320] ? down_read+0x470/0x470 [ 2853.087377][T13320] __gup_longterm_locked+0x278/0x2ab0 [ 2853.092817][T13320] ? get_user_pages_unlocked+0x770/0x770 [ 2853.098498][T13320] ? lock_sync+0x190/0x190 [ 2853.102978][T13320] pin_user_pages_remote+0xee/0x140 [ 2853.108228][T13320] ? __gup_longterm_locked+0x2ab0/0x2ab0 [ 2853.113924][T13320] process_vm_rw_core.constprop.0+0x43d/0xa10 [ 2853.120068][T13320] ? vmalloc_dump_obj+0x290/0x290 [ 2853.125167][T13320] process_vm_rw+0x2ff/0x360 [ 2853.129800][T13320] ? process_vm_rw_core.constprop.0+0xa10/0xa10 [ 2853.136090][T13320] ? ksys_write+0x214/0x250 [ 2853.140642][T13320] ? reacquire_held_locks+0x4b0/0x4b0 [ 2853.146067][T13320] ? vfs_write+0x14c/0xdf0 [ 2853.150543][T13320] ? bit_wait_io_timeout+0x160/0x160 [ 2853.155880][T13320] ? fput+0x30/0x1a0 [ 2853.159823][T13320] ? ksys_write+0x1a7/0x250 [ 2853.164381][T13320] __x64_sys_process_vm_writev+0xe2/0x1b0 [ 2853.170128][T13320] ? syscall_enter_from_user_mode+0x26/0x80 [ 2853.176043][T13320] do_syscall_64+0x3f/0x110 [ 2853.180560][T13320] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2853.186486][T13320] RIP: 0033:0x7f6fcfc7cae9 [ 2853.190944][T13320] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2853.210594][T13320] RSP: 002b:00007f6fd098a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2853.219013][T13320] RAX: ffffffffffffffda RBX: 00007f6fcfd9c050 RCX: 00007f6fcfc7cae9 [ 2853.226988][T13320] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000002c7c [ 2853.234973][T13320] RBP: 00007f6fd098a120 R08: 0000000000000001 R09: 0000000000000000 [ 2853.242966][T13320] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000002 [ 2853.250939][T13320] R13: 000000000000006e R14: 00007f6fcfd9c050 R15: 00007f6fcfebfa48 [ 2853.258928][T13320] 06:05:50 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000002a00)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x48}, 0x0) (async) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r1, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) (async, rerun: 32) r2 = gettid() (rerun: 32) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000080)=0xe3) (async, rerun: 64) openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) (async, rerun: 64) dup2(r1, 0xffffffffffffffff) (async) bind$rds(r0, &(0x7f0000000140)={0x2, 0x4e24, @local}, 0x10) fcntl$setsig(r3, 0xa, 0x12) (async) poll(&(0x7f0000b2c000)=[{r4}], 0x1, 0x2) (async) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x40, 0x30040) dup2(r0, r5) (async, rerun: 64) fcntl$setown(r4, 0x8, r2) (async, rerun: 64) tkill(r2, 0x14) 06:05:50 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) r1 = gettid() r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$dsp(r2, &(0x7f0000000000)="6f3865f28eb7ad1761582133d3a26254d1a96e6931da97f4972f1a26d6b27e173de6aff431dcd712ff009fd894a7d8e52a6d9d2b7d3e8aeaf688e2cd5158d3a1693adfea7bf39e61f9e6a6cb98765b04f56593d4e8539fe34b9bd387b75b9c35043fac5c217f58", 0x67) (async) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) (async) ioctl$int_in(r3, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r3, 0xa, 0x12) (async) poll(&(0x7f0000b2c000)=[{r4}], 0x1, 0xfffffffffffffff8) (async) dup2(r3, r4) (async) fcntl$setown(r4, 0x8, r1) tkill(r1, 0x14) 06:05:50 executing program 5: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r4, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x5, 0x0) 06:05:50 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 34) [ 2853.795938][T13353] FAULT_INJECTION: forcing a failure. [ 2853.795938][T13353] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2853.813844][T13353] CPU: 1 PID: 13353 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 2853.823981][T13353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2853.834067][T13353] Call Trace: [ 2853.837355][T13353] [ 2853.840295][T13353] dump_stack_lvl+0x125/0x1b0 [ 2853.844998][T13353] should_fail_ex+0x496/0x5b0 [ 2853.849754][T13353] ? fs_reclaim_acquire+0xb0/0x150 [ 2853.854892][T13353] __should_fail_alloc_page+0xe7/0x130 [ 2853.860414][T13353] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 2853.866611][T13353] __alloc_pages+0x14e/0x4a0 [ 2853.871244][T13353] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 2853.878027][T13353] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2853.883946][T13353] ? policy_nodemask+0x311/0x480 [ 2853.888931][T13353] alloc_pages_mpol+0x258/0x5f0 [ 2853.893792][T13353] ? mempolicy_in_oom_domain+0x150/0x150 [ 2853.899430][T13353] ? find_held_lock+0x2d/0x110 [ 2853.904201][T13353] vma_alloc_folio+0xad/0x220 [ 2853.908891][T13353] ? alloc_migration_target_by_mpol+0x6b0/0x6b0 [ 2853.915159][T13353] ? find_held_lock+0x2d/0x110 [ 2853.919935][T13353] ? filemap_get_read_batch+0x9b0/0x9b0 [ 2853.925492][T13353] __handle_mm_fault+0x100b/0x3d60 [ 2853.930617][T13353] ? vm_iomap_memory+0x170/0x170 [ 2853.935573][T13353] handle_mm_fault+0x478/0xa00 [ 2853.940347][T13353] __get_user_pages+0x4b2/0x1480 [ 2853.945302][T13353] ? follow_page_mask+0xda0/0xda0 [ 2853.950356][T13353] __gup_longterm_locked+0x278/0x2ab0 [ 2853.955846][T13353] ? get_user_pages_unlocked+0x770/0x770 [ 2853.961516][T13353] ? lock_sync+0x190/0x190 [ 2853.965983][T13353] pin_user_pages_remote+0xee/0x140 [ 2853.971187][T13353] ? __gup_longterm_locked+0x2ab0/0x2ab0 [ 2853.976829][T13353] process_vm_rw_core.constprop.0+0x43d/0xa10 [ 2853.982907][T13353] ? vmalloc_dump_obj+0x290/0x290 [ 2853.987967][T13353] process_vm_rw+0x2ff/0x360 [ 2853.992598][T13353] ? process_vm_rw_core.constprop.0+0xa10/0xa10 [ 2854.001621][T13353] ? ksys_write+0x214/0x250 [ 2854.006136][T13353] ? reacquire_held_locks+0x4b0/0x4b0 [ 2854.011520][T13353] ? vfs_write+0x14c/0xdf0 [ 2854.015950][T13353] ? bit_wait_io_timeout+0x160/0x160 [ 2854.021244][T13353] ? fput+0x30/0x1a0 [ 2854.025145][T13353] ? ksys_write+0x1a7/0x250 [ 2854.029754][T13353] __x64_sys_process_vm_writev+0xe2/0x1b0 [ 2854.035506][T13353] ? syscall_enter_from_user_mode+0x26/0x80 [ 2854.041490][T13353] do_syscall_64+0x3f/0x110 [ 2854.045998][T13353] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2854.051889][T13353] RIP: 0033:0x7f6fcfc7cae9 [ 2854.056306][T13353] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2854.075918][T13353] RSP: 002b:00007f6fd098a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2854.084383][T13353] RAX: ffffffffffffffda RBX: 00007f6fcfd9c050 RCX: 00007f6fcfc7cae9 [ 2854.092388][T13353] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000002c7f [ 2854.100388][T13353] RBP: 00007f6fd098a120 R08: 0000000000000001 R09: 0000000000000000 [ 2854.108368][T13353] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000002 [ 2854.116339][T13353] R13: 000000000000006e R14: 00007f6fcfd9c050 R15: 00007f6fcfebfa48 [ 2854.124330][T13353] 06:05:53 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000540)='smaps_rollup\x00') r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r1}, 0x90) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0), 0x0) (async) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000ac0)) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {r2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r5 = syz_open_procfs(0x0, &(0x7f0000000bc0)='maps\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r5}, 0x90) (async) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000001c0), 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)=@ipv6_delrule={0x88, 0x21, 0x200, 0x70bd2b, 0x25dfdbfb, {0xa, 0x120, 0x80, 0x2, 0x3, 0x0, 0x0, 0x2}, [@FRA_SRC={0x14, 0x2, @empty}, @FRA_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x8001}, @FRA_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @empty}, @FRA_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40800}, 0x4004) (async) ioctl$NS_GET_OWNER_UID(r5, 0xb704, &(0x7f0000000ac0)) (async) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x7, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}]}, &(0x7f0000000600)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x8, 0x9, 0xe34}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f00000006c0)=[{0x1, 0x3, 0x3, 0xc}, {0x4, 0x4, 0xb, 0x7}, {0x2, 0x1, 0xc, 0x8}, {0x1, 0x5, 0xc, 0xc}], 0x10, 0x7}, 0x90) sendmsg$nl_route(r3, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)=@getlink={0xd4, 0x12, 0x4, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x100, 0x28030}, [@IFLA_NET_NS_FD={0x8, 0x1c, r1}, @IFLA_TXQLEN={0x8, 0xd, 0xfa}, @IFLA_TXQLEN={0x8, 0xd, 0x4}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x9}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x7f}, @IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x1c, 0x5, 0x0, 0x1, [@IFLA_BRPORT_FLUSH={0x4}, @IFLA_BRPORT_ISOLATED={0x5, 0x21, 0x1}, @IFLA_BRPORT_PROXYARP={0x5}, @IFLA_BRPORT_FLUSH={0x4}]}}}, @IFLA_IFALIASn={0x4}, @IFLA_XDP={0x4c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}, @IFLA_XDP_FD={0x8, 0x1, r3}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r6}, @IFLA_XDP_FD={0x8, 0x1, r2}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r4}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r5}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r1}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x8}]}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x6}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40}, 0x24000800) (async) sendmsg$nl_route(r3, &(0x7f00000011c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv4_getaddr={0x20, 0x16, 0x800, 0x70bd2c, 0x25dfdbfc, {0x2, 0x10, 0x8e, 0xfe}, [@IFA_FLAGS={0x8, 0x8, 0x400}]}, 0x20}}, 0x20004000) (async) write$dsp(r1, &(0x7f0000002380)="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"/4480, 0x1180) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {r2}}, './file0\x00'}) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000580)={0x0, 0x9, 0xbed, 0x7bc, 0x8, 0x8001}, 0x14) (async) mmap$dsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8, 0x2010, r7, 0x0) 06:05:53 executing program 5: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r4, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x7, 0x0) 06:05:53 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 35) 06:05:53 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045035, &(0x7f0000000080)=0xe3) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) [ 2857.118443][T13365] FAULT_INJECTION: forcing a failure. [ 2857.118443][T13365] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2857.138749][T13365] CPU: 1 PID: 13365 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 2857.148867][T13365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2857.158945][T13365] Call Trace: [ 2857.162237][T13365] [ 2857.165181][T13365] dump_stack_lvl+0x125/0x1b0 [ 2857.169870][T13365] should_fail_ex+0x496/0x5b0 [ 2857.174571][T13365] ? fs_reclaim_acquire+0xb0/0x150 [ 2857.179685][T13365] __should_fail_alloc_page+0xe7/0x130 [ 2857.185156][T13365] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 2857.191313][T13365] __alloc_pages+0x14e/0x4a0 [ 2857.195911][T13365] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 2857.202684][T13365] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2857.208579][T13365] ? policy_nodemask+0x311/0x480 [ 2857.213525][T13365] alloc_pages_mpol+0x258/0x5f0 [ 2857.218394][T13365] ? mempolicy_in_oom_domain+0x150/0x150 [ 2857.224154][T13365] ? find_held_lock+0x2d/0x110 [ 2857.228975][T13365] vma_alloc_folio+0xad/0x220 [ 2857.233683][T13365] ? alloc_migration_target_by_mpol+0x6b0/0x6b0 [ 2857.239971][T13365] ? find_held_lock+0x2d/0x110 [ 2857.244759][T13365] ? filemap_get_read_batch+0x9b0/0x9b0 [ 2857.250339][T13365] __handle_mm_fault+0x100b/0x3d60 [ 2857.255529][T13365] ? vm_iomap_memory+0x170/0x170 [ 2857.260502][T13365] handle_mm_fault+0x478/0xa00 [ 2857.265279][T13365] __get_user_pages+0x4b2/0x1480 [ 2857.270255][T13365] ? follow_page_mask+0xda0/0xda0 [ 2857.275285][T13365] __gup_longterm_locked+0x278/0x2ab0 [ 2857.280654][T13365] ? asm_common_interrupt+0x26/0x40 [ 2857.286118][T13365] ? get_user_pages_unlocked+0x770/0x770 [ 2857.291799][T13365] ? lock_sync+0x190/0x190 [ 2857.296258][T13365] pin_user_pages_remote+0xee/0x140 [ 2857.301463][T13365] ? __gup_longterm_locked+0x2ab0/0x2ab0 [ 2857.307099][T13365] process_vm_rw_core.constprop.0+0x43d/0xa10 [ 2857.313195][T13365] ? vmalloc_dump_obj+0x290/0x290 [ 2857.318369][T13365] process_vm_rw+0x2ff/0x360 [ 2857.322958][T13365] ? process_vm_rw_core.constprop.0+0xa10/0xa10 [ 2857.329207][T13365] ? ksys_write+0x214/0x250 [ 2857.333739][T13365] ? reacquire_held_locks+0x4b0/0x4b0 [ 2857.339145][T13365] ? vfs_write+0x14c/0xdf0 [ 2857.343566][T13365] ? bit_wait_io_timeout+0x160/0x160 [ 2857.348884][T13365] ? fput+0x30/0x1a0 [ 2857.352785][T13365] ? ksys_write+0x1a7/0x250 [ 2857.357318][T13365] __x64_sys_process_vm_writev+0xe2/0x1b0 [ 2857.363046][T13365] ? syscall_enter_from_user_mode+0x26/0x80 [ 2857.368945][T13365] do_syscall_64+0x3f/0x110 [ 2857.373457][T13365] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2857.379368][T13365] RIP: 0033:0x7f6fcfc7cae9 [ 2857.383786][T13365] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2857.403393][T13365] RSP: 002b:00007f6fd098a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2857.411813][T13365] RAX: ffffffffffffffda RBX: 00007f6fcfd9c050 RCX: 00007f6fcfc7cae9 [ 2857.419780][T13365] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000002c82 [ 2857.427747][T13365] RBP: 00007f6fd098a120 R08: 0000000000000001 R09: 0000000000000000 [ 2857.435796][T13365] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000002 [ 2857.443773][T13365] R13: 000000000000006e R14: 00007f6fcfd9c050 R15: 00007f6fcfebfa48 [ 2857.451766][T13365] 06:05:54 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 36) 06:05:54 executing program 5: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r4, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x8, 0x0) [ 2857.751093][T13371] FAULT_INJECTION: forcing a failure. [ 2857.751093][T13371] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2857.765330][T13371] CPU: 1 PID: 13371 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 2857.775455][T13371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2857.785626][T13371] Call Trace: [ 2857.788936][T13371] [ 2857.791895][T13371] dump_stack_lvl+0x125/0x1b0 [ 2857.796633][T13371] should_fail_ex+0x496/0x5b0 [ 2857.801377][T13371] ? fs_reclaim_acquire+0xb0/0x150 [ 2857.806552][T13371] __should_fail_alloc_page+0xe7/0x130 [ 2857.812058][T13371] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 2857.818229][T13371] __alloc_pages+0x14e/0x4a0 [ 2857.822832][T13371] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 2857.829746][T13371] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2857.835691][T13371] ? policy_nodemask+0x311/0x480 [ 2857.840764][T13371] alloc_pages_mpol+0x258/0x5f0 [ 2857.845666][T13371] ? mempolicy_in_oom_domain+0x150/0x150 [ 2857.851351][T13371] ? find_held_lock+0x2d/0x110 [ 2857.856164][T13371] vma_alloc_folio+0xad/0x220 [ 2857.860865][T13371] ? alloc_migration_target_by_mpol+0x6b0/0x6b0 [ 2857.867107][T13371] ? find_held_lock+0x2d/0x110 [ 2857.871875][T13371] ? filemap_get_read_batch+0x9b0/0x9b0 [ 2857.877442][T13371] __handle_mm_fault+0x100b/0x3d60 [ 2857.882589][T13371] ? vm_iomap_memory+0x170/0x170 [ 2857.887554][T13371] handle_mm_fault+0x478/0xa00 [ 2857.892318][T13371] ? follow_page_mask+0x2/0xda0 [ 2857.897167][T13371] __get_user_pages+0x4b2/0x1480 [ 2857.902105][T13371] ? follow_page_mask+0xda0/0xda0 [ 2857.907133][T13371] __gup_longterm_locked+0x278/0x2ab0 [ 2857.912508][T13371] ? get_user_pages_unlocked+0x770/0x770 [ 2857.918135][T13371] ? lock_sync+0x190/0x190 [ 2857.922557][T13371] pin_user_pages_remote+0xee/0x140 [ 2857.927754][T13371] ? __gup_longterm_locked+0x2ab0/0x2ab0 [ 2857.933392][T13371] process_vm_rw_core.constprop.0+0x43d/0xa10 [ 2857.939506][T13371] ? vmalloc_dump_obj+0x290/0x290 [ 2857.944566][T13371] process_vm_rw+0x2ff/0x360 [ 2857.949176][T13371] ? process_vm_rw_core.constprop.0+0xa10/0xa10 [ 2857.955413][T13371] ? ksys_write+0x214/0x250 [ 2857.959914][T13371] ? reacquire_held_locks+0x4b0/0x4b0 [ 2857.965291][T13371] ? vfs_write+0x14c/0xdf0 [ 2857.969709][T13371] ? bit_wait_io_timeout+0x160/0x160 [ 2857.975017][T13371] ? fput+0x30/0x1a0 [ 2857.978947][T13371] ? ksys_write+0x1a7/0x250 [ 2857.983481][T13371] __x64_sys_process_vm_writev+0xe2/0x1b0 [ 2857.989225][T13371] ? syscall_enter_from_user_mode+0x26/0x80 [ 2857.995115][T13371] do_syscall_64+0x3f/0x110 [ 2857.999625][T13371] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2858.005513][T13371] RIP: 0033:0x7f6fcfc7cae9 [ 2858.009917][T13371] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2858.029519][T13371] RSP: 002b:00007f6fd098a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2858.037926][T13371] RAX: ffffffffffffffda RBX: 00007f6fcfd9c050 RCX: 00007f6fcfc7cae9 06:05:54 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045878, &(0x7f0000000080)=0xe3) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) [ 2858.045900][T13371] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000002c85 [ 2858.053885][T13371] RBP: 00007f6fd098a120 R08: 0000000000000001 R09: 0000000000000000 [ 2858.061851][T13371] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000002 [ 2858.069816][T13371] R13: 000000000000006e R14: 00007f6fcfd9c050 R15: 00007f6fcfebfa48 [ 2858.077794][T13371] 06:05:54 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$dsp(r0, &(0x7f0000000100)="43fdb37d604e4aee16e61a175a79f17f8a478640eb0ef216798b901a3a5dddcb0d2172d29a5c16950d84e3e6befc11be25e355d86488abaf4a1ae6c6fa3b2d60094a47c6b92d2fcb", 0x48) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) fallocate(r3, 0x21, 0x6, 0x6) read$dsp(r0, &(0x7f0000000000)=""/53, 0x35) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) 06:05:54 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) (async) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$dsp(r2, &(0x7f0000000000)="6f3865f28eb7ad1761582133d3a26254d1a96e6931da97f4972f1a26d6b27e173de6aff431dcd712ff009fd894a7d8e52a6d9d2b7d3e8aeaf688e2cd5158d3a1693adfea7bf39e61f9e6a6cb98765b04f56593d4e8539fe34b9bd387b75b9c35043fac5c217f58", 0x67) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) (async) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) ioctl$int_in(r3, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r4}], 0x1, 0xfffffffffffffff8) (async) poll(&(0x7f0000b2c000)=[{r4}], 0x1, 0xfffffffffffffff8) dup2(r3, r4) fcntl$setown(r4, 0x8, r1) tkill(r1, 0x14) (async) tkill(r1, 0x14) 06:05:54 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 37) 06:05:55 executing program 5: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r4, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0xf, 0x0) [ 2858.506729][T13393] FAULT_INJECTION: forcing a failure. [ 2858.506729][T13393] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2858.520708][T13393] CPU: 1 PID: 13393 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 2858.530826][T13393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2858.540911][T13393] Call Trace: [ 2858.544222][T13393] [ 2858.547174][T13393] dump_stack_lvl+0x125/0x1b0 [ 2858.551878][T13393] should_fail_ex+0x496/0x5b0 [ 2858.556619][T13393] ? fs_reclaim_acquire+0xb0/0x150 [ 2858.561766][T13393] __should_fail_alloc_page+0xe7/0x130 [ 2858.567258][T13393] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 2858.573458][T13393] __alloc_pages+0x14e/0x4a0 [ 2858.578075][T13393] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 2858.585488][T13393] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2858.591390][T13393] ? policy_nodemask+0x311/0x480 [ 2858.596343][T13393] alloc_pages_mpol+0x258/0x5f0 [ 2858.601236][T13393] ? mempolicy_in_oom_domain+0x150/0x150 [ 2858.606910][T13393] ? find_held_lock+0x2d/0x110 [ 2858.611690][T13393] vma_alloc_folio+0xad/0x220 [ 2858.616376][T13393] ? alloc_migration_target_by_mpol+0x6b0/0x6b0 [ 2858.622642][T13393] ? find_held_lock+0x2d/0x110 [ 2858.627462][T13393] ? filemap_get_read_batch+0x9b0/0x9b0 [ 2858.633031][T13393] __handle_mm_fault+0x100b/0x3d60 [ 2858.638182][T13393] ? vm_iomap_memory+0x170/0x170 [ 2858.643162][T13393] handle_mm_fault+0x478/0xa00 [ 2858.647940][T13393] __get_user_pages+0x4b2/0x1480 [ 2858.652896][T13393] ? follow_page_mask+0xda0/0xda0 [ 2858.657939][T13393] ? down_read+0x470/0x470 [ 2858.662389][T13393] __gup_longterm_locked+0x278/0x2ab0 [ 2858.668303][T13393] ? get_user_pages_unlocked+0x770/0x770 [ 2858.673957][T13393] ? lock_sync+0x190/0x190 [ 2858.678408][T13393] pin_user_pages_remote+0xee/0x140 [ 2858.683654][T13393] ? __gup_longterm_locked+0x2ab0/0x2ab0 [ 2858.689341][T13393] process_vm_rw_core.constprop.0+0x43d/0xa10 [ 2858.695449][T13393] ? vmalloc_dump_obj+0x290/0x290 [ 2858.700518][T13393] process_vm_rw+0x2ff/0x360 [ 2858.705144][T13393] ? process_vm_rw_core.constprop.0+0xa10/0xa10 [ 2858.711410][T13393] ? ksys_write+0x214/0x250 [ 2858.715919][T13393] ? reacquire_held_locks+0x4b0/0x4b0 [ 2858.721299][T13393] ? vfs_write+0x14c/0xdf0 [ 2858.725730][T13393] ? bit_wait_io_timeout+0x160/0x160 [ 2858.731019][T13393] ? fput+0x30/0x1a0 [ 2858.734919][T13393] ? ksys_write+0x1a7/0x250 [ 2858.739430][T13393] __x64_sys_process_vm_writev+0xe2/0x1b0 [ 2858.745150][T13393] ? syscall_enter_from_user_mode+0x26/0x80 [ 2858.751063][T13393] do_syscall_64+0x3f/0x110 [ 2858.755586][T13393] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2858.761482][T13393] RIP: 0033:0x7f6fcfc7cae9 [ 2858.765924][T13393] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2858.785552][T13393] RSP: 002b:00007f6fd098a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2858.793966][T13393] RAX: ffffffffffffffda RBX: 00007f6fcfd9c050 RCX: 00007f6fcfc7cae9 [ 2858.801931][T13393] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000002c88 [ 2858.809899][T13393] RBP: 00007f6fd098a120 R08: 0000000000000001 R09: 0000000000000000 [ 2858.817865][T13393] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000002 [ 2858.825835][T13393] R13: 000000000000006e R14: 00007f6fcfd9c050 R15: 00007f6fcfebfa48 [ 2858.833814][T13393] 06:05:55 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 38) 06:05:55 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045878, &(0x7f0000000080)=0xe3) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) [ 2859.194832][T13405] FAULT_INJECTION: forcing a failure. [ 2859.194832][T13405] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2859.216959][T13405] CPU: 1 PID: 13405 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 2859.227068][T13405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2859.237135][T13405] Call Trace: [ 2859.240432][T13405] [ 2859.243375][T13405] dump_stack_lvl+0x125/0x1b0 [ 2859.248066][T13405] should_fail_ex+0x496/0x5b0 [ 2859.252765][T13405] ? fs_reclaim_acquire+0xb0/0x150 [ 2859.257908][T13405] __should_fail_alloc_page+0xe7/0x130 [ 2859.263382][T13405] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 2859.269573][T13405] __alloc_pages+0x14e/0x4a0 [ 2859.274216][T13405] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 2859.281130][T13405] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2859.287163][T13405] ? policy_nodemask+0x311/0x480 [ 2859.292152][T13405] alloc_pages_mpol+0x258/0x5f0 [ 2859.297039][T13405] ? mempolicy_in_oom_domain+0x150/0x150 [ 2859.302688][T13405] ? find_held_lock+0x2d/0x110 [ 2859.307472][T13405] vma_alloc_folio+0xad/0x220 [ 2859.312204][T13405] ? alloc_migration_target_by_mpol+0x6b0/0x6b0 [ 2859.318562][T13405] ? find_held_lock+0x2d/0x110 [ 2859.323360][T13405] ? filemap_get_read_batch+0x9b0/0x9b0 [ 2859.328982][T13405] __handle_mm_fault+0x100b/0x3d60 [ 2859.334122][T13405] ? vm_iomap_memory+0x170/0x170 [ 2859.339118][T13405] handle_mm_fault+0x478/0xa00 [ 2859.343910][T13405] __get_user_pages+0x4b2/0x1480 [ 2859.348887][T13405] ? follow_page_mask+0xda0/0xda0 [ 2859.353934][T13405] __gup_longterm_locked+0x278/0x2ab0 [ 2859.359369][T13405] ? get_user_pages_unlocked+0x770/0x770 [ 2859.365022][T13405] ? lock_sync+0x190/0x190 [ 2859.369468][T13405] pin_user_pages_remote+0xee/0x140 [ 2859.374683][T13405] ? __gup_longterm_locked+0x2ab0/0x2ab0 [ 2859.380345][T13405] process_vm_rw_core.constprop.0+0x43d/0xa10 [ 2859.386439][T13405] ? vmalloc_dump_obj+0x290/0x290 [ 2859.391496][T13405] process_vm_rw+0x2ff/0x360 [ 2859.396102][T13405] ? process_vm_rw_core.constprop.0+0xa10/0xa10 [ 2859.402358][T13405] ? ksys_write+0x214/0x250 [ 2859.406880][T13405] ? reacquire_held_locks+0x4b0/0x4b0 [ 2859.412273][T13405] ? vfs_write+0x14c/0xdf0 [ 2859.416715][T13405] ? bit_wait_io_timeout+0x160/0x160 [ 2859.422022][T13405] ? fput+0x30/0x1a0 [ 2859.425961][T13405] ? ksys_write+0x1a7/0x250 [ 2859.430519][T13405] __x64_sys_process_vm_writev+0xe2/0x1b0 [ 2859.436255][T13405] ? syscall_enter_from_user_mode+0x26/0x80 [ 2859.442162][T13405] do_syscall_64+0x3f/0x110 [ 2859.446692][T13405] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2859.452600][T13405] RIP: 0033:0x7f6fcfc7cae9 [ 2859.457025][T13405] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2859.476645][T13405] RSP: 002b:00007f6fd098a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2859.485074][T13405] RAX: ffffffffffffffda RBX: 00007f6fcfd9c050 RCX: 00007f6fcfc7cae9 [ 2859.493058][T13405] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000002c8b [ 2859.501040][T13405] RBP: 00007f6fd098a120 R08: 0000000000000001 R09: 0000000000000000 [ 2859.509025][T13405] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000002 [ 2859.517011][T13405] R13: 000000000000006e R14: 00007f6fcfd9c050 R15: 00007f6fcfebfa48 [ 2859.525009][T13405] 06:05:58 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18, 0xfffffffffffffff5}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) 06:05:58 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 39) 06:05:58 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0189436, &(0x7f0000000080)=0xe3) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) 06:05:58 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) r1 = gettid() ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$dsp(r0, &(0x7f0000000100)="43fdb37d604e4aee16e61a175a79f17f8a478640eb0ef216798b901a3a5dddcb0d2172d29a5c16950d84e3e6befc11be25e355d86488abaf4a1ae6c6fa3b2d60094a47c6b92d2fcb", 0x48) (async) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) (async) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) (async) fallocate(r3, 0x21, 0x6, 0x6) (async) read$dsp(r0, &(0x7f0000000000)=""/53, 0x35) fcntl$setsig(r2, 0xa, 0x12) (async) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) (async) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) 06:05:58 executing program 5: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r4, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3cb, 0x0) 06:05:58 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18, 0xfffffffffffffff5}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) (async) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) [ 2861.811080][T13423] FAULT_INJECTION: forcing a failure. [ 2861.811080][T13423] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2861.825596][T13423] CPU: 1 PID: 13423 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 2861.835707][T13423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2861.845885][T13423] Call Trace: [ 2861.849184][T13423] [ 2861.852128][T13423] dump_stack_lvl+0x125/0x1b0 [ 2861.856856][T13423] should_fail_ex+0x496/0x5b0 [ 2861.861591][T13423] ? fs_reclaim_acquire+0xb0/0x150 [ 2861.866761][T13423] __should_fail_alloc_page+0xe7/0x130 [ 2861.872258][T13423] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 2861.878460][T13423] __alloc_pages+0x14e/0x4a0 [ 2861.883089][T13423] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 2861.889870][T13423] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2861.895782][T13423] ? policy_nodemask+0x311/0x480 [ 2861.900722][T13423] alloc_pages_mpol+0x258/0x5f0 [ 2861.905575][T13423] ? mempolicy_in_oom_domain+0x150/0x150 [ 2861.911212][T13423] ? find_held_lock+0x2d/0x110 [ 2861.915982][T13423] vma_alloc_folio+0xad/0x220 [ 2861.920688][T13423] ? alloc_migration_target_by_mpol+0x6b0/0x6b0 [ 2861.926944][T13423] ? find_held_lock+0x2d/0x110 [ 2861.931745][T13423] ? filemap_get_read_batch+0x9b0/0x9b0 [ 2861.937347][T13423] __handle_mm_fault+0x100b/0x3d60 [ 2861.942501][T13423] ? vm_iomap_memory+0x170/0x170 [ 2861.947460][T13423] handle_mm_fault+0x478/0xa00 [ 2861.952235][T13423] __get_user_pages+0x4b2/0x1480 [ 2861.957181][T13423] ? follow_page_mask+0xda0/0xda0 [ 2861.962210][T13423] ? down_read+0x470/0x470 [ 2861.966649][T13423] __gup_longterm_locked+0x278/0x2ab0 [ 2861.972030][T13423] ? get_user_pages_unlocked+0x770/0x770 [ 2861.977672][T13423] ? lock_sync+0x190/0x190 [ 2861.982124][T13423] pin_user_pages_remote+0xee/0x140 [ 2861.987332][T13423] ? __gup_longterm_locked+0x2ab0/0x2ab0 [ 2861.992971][T13423] process_vm_rw_core.constprop.0+0x43d/0xa10 [ 2861.999042][T13423] ? asm_common_interrupt+0x26/0x40 [ 2862.004240][T13423] ? vmalloc_dump_obj+0x290/0x290 [ 2862.009276][T13423] process_vm_rw+0x2ff/0x360 [ 2862.013862][T13423] ? process_vm_rw_core.constprop.0+0xa10/0xa10 [ 2862.020106][T13423] ? vfs_write+0x14c/0xdf0 [ 2862.024527][T13423] ? rcu_is_watching+0x12/0xb0 [ 2862.029295][T13423] ? folio_memcg_unlock+0x280/0x280 [ 2862.034493][T13423] ? ksys_write+0x1a7/0x250 [ 2862.039001][T13423] __x64_sys_process_vm_writev+0xe2/0x1b0 [ 2862.044720][T13423] ? syscall_enter_from_user_mode+0x26/0x80 [ 2862.050612][T13423] do_syscall_64+0x3f/0x110 [ 2862.055121][T13423] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2862.061012][T13423] RIP: 0033:0x7f6fcfc7cae9 [ 2862.065420][T13423] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2862.085026][T13423] RSP: 002b:00007f6fd098a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2862.093432][T13423] RAX: ffffffffffffffda RBX: 00007f6fcfd9c050 RCX: 00007f6fcfc7cae9 [ 2862.101396][T13423] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000002c8e [ 2862.109359][T13423] RBP: 00007f6fd098a120 R08: 0000000000000001 R09: 0000000000000000 [ 2862.117331][T13423] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000002 [ 2862.125301][T13423] R13: 000000000000006e R14: 00007f6fcfd9c050 R15: 00007f6fcfebfa48 [ 2862.133277][T13423] 06:05:58 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18, 0xfffffffffffffff5}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) (async, rerun: 32) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) (rerun: 32) 06:05:59 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r2, 0xa, 0x12) r4 = getpid() getpgid(r4) sched_setscheduler(r4, 0x2, &(0x7f0000000b80)) sched_setaffinity(r4, 0x8, &(0x7f0000000000)=0xffffffffffffffff) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) tkill(r1, 0x14) 06:05:59 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 40) 06:05:59 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) fcntl$getown(r1, 0x9) 06:05:59 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc020660b, &(0x7f0000000080)=0xe3) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) 06:05:59 executing program 5: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r4, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3cc, 0x0) [ 2863.073233][T13448] FAULT_INJECTION: forcing a failure. [ 2863.073233][T13448] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2863.093340][T13448] CPU: 1 PID: 13448 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 2863.103463][T13448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2863.113556][T13448] Call Trace: [ 2863.116864][T13448] [ 2863.119822][T13448] dump_stack_lvl+0x125/0x1b0 [ 2863.124558][T13448] should_fail_ex+0x496/0x5b0 [ 2863.129291][T13448] ? fs_reclaim_acquire+0xb0/0x150 [ 2863.134455][T13448] __should_fail_alloc_page+0xe7/0x130 [ 2863.139975][T13448] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 2863.146190][T13448] __alloc_pages+0x14e/0x4a0 [ 2863.150836][T13448] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 2863.157643][T13448] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2863.163549][T13448] ? policy_nodemask+0x311/0x480 [ 2863.168520][T13448] alloc_pages_mpol+0x258/0x5f0 [ 2863.173397][T13448] ? mempolicy_in_oom_domain+0x150/0x150 [ 2863.179031][T13448] ? find_held_lock+0x2d/0x110 [ 2863.183800][T13448] vma_alloc_folio+0xad/0x220 [ 2863.188479][T13448] ? alloc_migration_target_by_mpol+0x6b0/0x6b0 [ 2863.194747][T13448] ? find_held_lock+0x2d/0x110 [ 2863.199541][T13448] ? filemap_get_read_batch+0x9b0/0x9b0 [ 2863.205088][T13448] __handle_mm_fault+0x100b/0x3d60 [ 2863.210207][T13448] ? vm_iomap_memory+0x170/0x170 [ 2863.215156][T13448] handle_mm_fault+0x478/0xa00 [ 2863.219924][T13448] __get_user_pages+0x4b2/0x1480 [ 2863.224863][T13448] ? follow_page_mask+0xda0/0xda0 [ 2863.229889][T13448] __gup_longterm_locked+0x278/0x2ab0 [ 2863.235304][T13448] ? get_user_pages_unlocked+0x770/0x770 [ 2863.240939][T13448] ? lock_sync+0x190/0x190 [ 2863.245387][T13448] pin_user_pages_remote+0xee/0x140 [ 2863.250617][T13448] ? __gup_longterm_locked+0x2ab0/0x2ab0 [ 2863.256276][T13448] process_vm_rw_core.constprop.0+0x43d/0xa10 [ 2863.262354][T13448] ? vmalloc_dump_obj+0x290/0x290 [ 2863.267385][T13448] process_vm_rw+0x2ff/0x360 [ 2863.271975][T13448] ? process_vm_rw_core.constprop.0+0xa10/0xa10 [ 2863.278216][T13448] ? ksys_write+0x214/0x250 [ 2863.282720][T13448] ? reacquire_held_locks+0x4b0/0x4b0 [ 2863.288109][T13448] ? vfs_write+0x14c/0xdf0 [ 2863.292540][T13448] ? bit_wait_io_timeout+0x160/0x160 [ 2863.297832][T13448] ? fput+0x30/0x1a0 [ 2863.301734][T13448] ? ksys_write+0x1a7/0x250 [ 2863.306243][T13448] __x64_sys_process_vm_writev+0xe2/0x1b0 [ 2863.311962][T13448] ? syscall_enter_from_user_mode+0x26/0x80 [ 2863.318030][T13448] do_syscall_64+0x3f/0x110 [ 2863.322538][T13448] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2863.328463][T13448] RIP: 0033:0x7f6fcfc7cae9 [ 2863.332882][T13448] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2863.352933][T13448] RSP: 002b:00007f6fd098a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2863.361904][T13448] RAX: ffffffffffffffda RBX: 00007f6fcfd9c050 RCX: 00007f6fcfc7cae9 [ 2863.369871][T13448] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000002c91 [ 2863.377846][T13448] RBP: 00007f6fd098a120 R08: 0000000000000001 R09: 0000000000000000 [ 2863.385813][T13448] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000002 [ 2863.393784][T13448] R13: 000000000000006e R14: 00007f6fcfd9c050 R15: 00007f6fcfebfa48 [ 2863.401783][T13448] 06:06:00 executing program 5: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r4, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3cd, 0x0) 06:06:00 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 41) 06:06:00 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x2) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) 06:06:00 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) (async) fcntl$getown(r1, 0x9) [ 2863.960402][T13467] FAULT_INJECTION: forcing a failure. [ 2863.960402][T13467] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2863.974179][T13467] CPU: 1 PID: 13467 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 2863.984278][T13467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2863.994337][T13467] Call Trace: [ 2863.997615][T13467] [ 2864.000543][T13467] dump_stack_lvl+0x125/0x1b0 [ 2864.005226][T13467] should_fail_ex+0x496/0x5b0 [ 2864.009914][T13467] ? fs_reclaim_acquire+0xb0/0x150 [ 2864.015029][T13467] __should_fail_alloc_page+0xe7/0x130 [ 2864.020499][T13467] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 2864.026665][T13467] __alloc_pages+0x14e/0x4a0 [ 2864.031281][T13467] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 2864.038087][T13467] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2864.043988][T13467] ? policy_nodemask+0x311/0x480 [ 2864.048926][T13467] alloc_pages_mpol+0x258/0x5f0 [ 2864.053777][T13467] ? mempolicy_in_oom_domain+0x150/0x150 [ 2864.059413][T13467] ? find_held_lock+0x2d/0x110 [ 2864.064182][T13467] vma_alloc_folio+0xad/0x220 [ 2864.068882][T13467] ? alloc_migration_target_by_mpol+0x6b0/0x6b0 [ 2864.075134][T13467] ? find_held_lock+0x2d/0x110 [ 2864.079933][T13467] ? filemap_get_read_batch+0x9b0/0x9b0 [ 2864.085498][T13467] __handle_mm_fault+0x100b/0x3d60 [ 2864.090636][T13467] ? vm_iomap_memory+0x170/0x170 [ 2864.095609][T13467] handle_mm_fault+0x478/0xa00 [ 2864.100395][T13467] __get_user_pages+0x4b2/0x1480 [ 2864.105347][T13467] ? follow_page_mask+0xda0/0xda0 [ 2864.110393][T13467] __gup_longterm_locked+0x278/0x2ab0 [ 2864.115786][T13467] ? get_user_pages_unlocked+0x770/0x770 [ 2864.121447][T13467] ? lock_sync+0x190/0x190 [ 2864.125891][T13467] pin_user_pages_remote+0xee/0x140 [ 2864.131102][T13467] ? __gup_longterm_locked+0x2ab0/0x2ab0 [ 2864.136753][T13467] process_vm_rw_core.constprop.0+0x43d/0xa10 [ 2864.142847][T13467] ? vmalloc_dump_obj+0x290/0x290 [ 2864.147902][T13467] process_vm_rw+0x2ff/0x360 [ 2864.152503][T13467] ? process_vm_rw_core.constprop.0+0xa10/0xa10 [ 2864.158775][T13467] ? rcu_is_watching+0x12/0xb0 [ 2864.163569][T13467] ? folio_memcg_unlock+0x280/0x280 [ 2864.168792][T13467] ? ksys_write+0x1a7/0x250 [ 2864.173320][T13467] __x64_sys_process_vm_writev+0xe2/0x1b0 [ 2864.179054][T13467] ? syscall_enter_from_user_mode+0x26/0x80 [ 2864.184961][T13467] do_syscall_64+0x3f/0x110 [ 2864.189494][T13467] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2864.195418][T13467] RIP: 0033:0x7f6fcfc7cae9 [ 2864.199844][T13467] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2864.219464][T13467] RSP: 002b:00007f6fd098a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2864.227890][T13467] RAX: ffffffffffffffda RBX: 00007f6fcfd9c050 RCX: 00007f6fcfc7cae9 [ 2864.235871][T13467] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000002c94 [ 2864.243848][T13467] RBP: 00007f6fd098a120 R08: 0000000000000001 R09: 0000000000000000 [ 2864.251826][T13467] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000002 [ 2864.259810][T13467] R13: 000000000000006e R14: 00007f6fcfd9c050 R15: 00007f6fcfebfa48 [ 2864.267812][T13467] 06:06:02 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) (async) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) (async) fcntl$getown(r1, 0x9) 06:06:02 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 42) 06:06:02 executing program 5: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r4, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3ce, 0x0) 06:06:02 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x4) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) 06:06:02 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() (async) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) (async) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) (async, rerun: 32) fcntl$setsig(r2, 0xa, 0x12) (async, rerun: 32) r4 = getpid() getpgid(r4) (async) sched_setscheduler(r4, 0x2, &(0x7f0000000b80)) sched_setaffinity(r4, 0x8, &(0x7f0000000000)=0xffffffffffffffff) (async) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) (async) tkill(r1, 0x14) 06:06:02 executing program 1: openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) (async) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) gettid() (async) r1 = gettid() ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$dsp(r0, &(0x7f0000000100)="43fdb37d604e4aee16e61a175a79f17f8a478640eb0ef216798b901a3a5dddcb0d2172d29a5c16950d84e3e6befc11be25e355d86488abaf4a1ae6c6fa3b2d60094a47c6b92d2fcb", 0x48) (async) write$dsp(r0, &(0x7f0000000100)="43fdb37d604e4aee16e61a175a79f17f8a478640eb0ef216798b901a3a5dddcb0d2172d29a5c16950d84e3e6befc11be25e355d86488abaf4a1ae6c6fa3b2d60094a47c6b92d2fcb", 0x48) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) (async) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) fallocate(r3, 0x21, 0x6, 0x6) read$dsp(r0, &(0x7f0000000000)=""/53, 0x35) fcntl$setsig(r2, 0xa, 0x12) (async) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) [ 2866.531079][T13496] FAULT_INJECTION: forcing a failure. [ 2866.531079][T13496] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2866.551740][T13496] CPU: 1 PID: 13496 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 2866.561856][T13496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2866.572005][T13496] Call Trace: [ 2866.575297][T13496] [ 2866.578226][T13496] dump_stack_lvl+0x125/0x1b0 [ 2866.582916][T13496] should_fail_ex+0x496/0x5b0 [ 2866.587607][T13496] ? fs_reclaim_acquire+0xb0/0x150 [ 2866.592741][T13496] __should_fail_alloc_page+0xe7/0x130 [ 2866.598231][T13496] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 2866.604414][T13496] __alloc_pages+0x14e/0x4a0 [ 2866.609049][T13496] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 2866.615868][T13496] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2866.621822][T13496] ? policy_nodemask+0x311/0x480 [ 2866.626773][T13496] alloc_pages_mpol+0x258/0x5f0 [ 2866.631723][T13496] ? mempolicy_in_oom_domain+0x150/0x150 [ 2866.637383][T13496] ? find_held_lock+0x2d/0x110 [ 2866.642152][T13496] vma_alloc_folio+0xad/0x220 [ 2866.646830][T13496] ? alloc_migration_target_by_mpol+0x6b0/0x6b0 [ 2866.653081][T13496] ? find_held_lock+0x2d/0x110 [ 2866.657866][T13496] ? filemap_get_read_batch+0x9b0/0x9b0 [ 2866.663422][T13496] __handle_mm_fault+0x100b/0x3d60 [ 2866.668545][T13496] ? vm_iomap_memory+0x170/0x170 [ 2866.673512][T13496] handle_mm_fault+0x478/0xa00 [ 2866.678298][T13496] __get_user_pages+0x4b2/0x1480 [ 2866.683243][T13496] ? follow_page_mask+0xda0/0xda0 [ 2866.688276][T13496] __gup_longterm_locked+0x278/0x2ab0 [ 2866.693670][T13496] ? get_user_pages_unlocked+0x770/0x770 [ 2866.699313][T13496] ? lock_sync+0x190/0x190 [ 2866.703755][T13496] pin_user_pages_remote+0xee/0x140 [ 2866.708976][T13496] ? __gup_longterm_locked+0x2ab0/0x2ab0 [ 2866.714620][T13496] process_vm_rw_core.constprop.0+0x43d/0xa10 [ 2866.720710][T13496] ? vmalloc_dump_obj+0x290/0x290 [ 2866.725775][T13496] process_vm_rw+0x2ff/0x360 [ 2866.730371][T13496] ? process_vm_rw_core.constprop.0+0xa10/0xa10 [ 2866.736617][T13496] ? ksys_write+0x214/0x250 [ 2866.741135][T13496] ? reacquire_held_locks+0x4b0/0x4b0 [ 2866.746535][T13496] ? vfs_write+0x14c/0xdf0 [ 2866.750985][T13496] ? bit_wait_io_timeout+0x160/0x160 [ 2866.756313][T13496] ? fput+0x30/0x1a0 [ 2866.760222][T13496] ? ksys_write+0x1a7/0x250 [ 2866.764736][T13496] __x64_sys_process_vm_writev+0xe2/0x1b0 [ 2866.770548][T13496] ? syscall_enter_from_user_mode+0x26/0x80 [ 2866.776444][T13496] do_syscall_64+0x3f/0x110 [ 2866.780954][T13496] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2866.786846][T13496] RIP: 0033:0x7f6fcfc7cae9 [ 2866.791259][T13496] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2866.810870][T13496] RSP: 002b:00007f6fd098a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2866.819288][T13496] RAX: ffffffffffffffda RBX: 00007f6fcfd9c050 RCX: 00007f6fcfc7cae9 [ 2866.827261][T13496] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000002c97 [ 2866.835249][T13496] RBP: 00007f6fd098a120 R08: 0000000000000001 R09: 0000000000000000 [ 2866.843218][T13496] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000002 [ 2866.851186][T13496] R13: 000000000000006e R14: 00007f6fcfd9c050 R15: 00007f6fcfebfa48 [ 2866.859177][T13496] 06:06:03 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 43) 06:06:03 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x10) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) [ 2867.223126][T13505] FAULT_INJECTION: forcing a failure. [ 2867.223126][T13505] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2867.237870][T13505] CPU: 1 PID: 13505 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 2867.247990][T13505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2867.258081][T13505] Call Trace: [ 2867.261383][T13505] [ 2867.264341][T13505] dump_stack_lvl+0x125/0x1b0 06:06:03 executing program 5: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r4, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3cf, 0x0) [ 2867.269067][T13505] should_fail_ex+0x496/0x5b0 [ 2867.273794][T13505] ? fs_reclaim_acquire+0xb0/0x150 [ 2867.278946][T13505] __should_fail_alloc_page+0xe7/0x130 [ 2867.284473][T13505] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 2867.290690][T13505] __alloc_pages+0x14e/0x4a0 [ 2867.295335][T13505] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 2867.302166][T13505] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2867.308133][T13505] ? policy_nodemask+0x311/0x480 [ 2867.313118][T13505] alloc_pages_mpol+0x258/0x5f0 [ 2867.318007][T13505] ? mempolicy_in_oom_domain+0x150/0x150 [ 2867.323660][T13505] ? find_held_lock+0x2d/0x110 [ 2867.328482][T13505] vma_alloc_folio+0xad/0x220 [ 2867.333174][T13505] ? alloc_migration_target_by_mpol+0x6b0/0x6b0 [ 2867.339438][T13505] ? find_held_lock+0x2d/0x110 [ 2867.344250][T13505] ? filemap_get_read_batch+0x9b0/0x9b0 [ 2867.349834][T13505] __handle_mm_fault+0x100b/0x3d60 [ 2867.355184][T13505] ? vm_iomap_memory+0x170/0x170 [ 2867.360161][T13505] handle_mm_fault+0x478/0xa00 [ 2867.364954][T13505] __get_user_pages+0x4b2/0x1480 [ 2867.369922][T13505] ? follow_page_mask+0xda0/0xda0 [ 2867.374956][T13505] __gup_longterm_locked+0x278/0x2ab0 [ 2867.380337][T13505] ? get_user_pages_unlocked+0x770/0x770 [ 2867.385986][T13505] ? lock_sync+0x190/0x190 [ 2867.390434][T13505] pin_user_pages_remote+0xee/0x140 [ 2867.395664][T13505] ? __gup_longterm_locked+0x2ab0/0x2ab0 [ 2867.401308][T13505] process_vm_rw_core.constprop.0+0x43d/0xa10 [ 2867.407412][T13505] ? vmalloc_dump_obj+0x290/0x290 [ 2867.412506][T13505] process_vm_rw+0x2ff/0x360 [ 2867.417147][T13505] ? process_vm_rw_core.constprop.0+0xa10/0xa10 [ 2867.423437][T13505] ? ksys_write+0x214/0x250 [ 2867.427988][T13505] ? reacquire_held_locks+0x4b0/0x4b0 [ 2867.433424][T13505] ? vfs_write+0x14c/0xdf0 [ 2867.437891][T13505] ? bit_wait_io_timeout+0x160/0x160 [ 2867.443221][T13505] ? fput+0x30/0x1a0 [ 2867.447157][T13505] ? ksys_write+0x1a7/0x250 [ 2867.451707][T13505] __x64_sys_process_vm_writev+0xe2/0x1b0 [ 2867.457471][T13505] ? syscall_enter_from_user_mode+0x26/0x80 [ 2867.463413][T13505] do_syscall_64+0x3f/0x110 [ 2867.467963][T13505] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2867.473899][T13505] RIP: 0033:0x7f6fcfc7cae9 [ 2867.478349][T13505] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2867.497998][T13505] RSP: 002b:00007f6fd098a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2867.506452][T13505] RAX: ffffffffffffffda RBX: 00007f6fcfd9c050 RCX: 00007f6fcfc7cae9 [ 2867.514465][T13505] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000002c9a [ 2867.522463][T13505] RBP: 00007f6fd098a120 R08: 0000000000000001 R09: 0000000000000000 [ 2867.530437][T13505] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000002 [ 2867.538421][T13505] R13: 000000000000006e R14: 00007f6fcfd9c050 R15: 00007f6fcfebfa48 [ 2867.546439][T13505] 06:06:04 executing program 5: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r4, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3d0, 0x0) 06:06:04 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 44) 06:06:04 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x2000) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) [ 2867.949975][T13521] FAULT_INJECTION: forcing a failure. [ 2867.949975][T13521] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2867.972677][T13521] CPU: 1 PID: 13521 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 2867.982807][T13521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2867.992908][T13521] Call Trace: [ 2867.996224][T13521] [ 2867.999187][T13521] dump_stack_lvl+0x125/0x1b0 [ 2868.003924][T13521] should_fail_ex+0x496/0x5b0 [ 2868.008661][T13521] ? fs_reclaim_acquire+0xb0/0x150 [ 2868.013826][T13521] __should_fail_alloc_page+0xe7/0x130 [ 2868.019359][T13521] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 2868.025580][T13521] __alloc_pages+0x14e/0x4a0 [ 2868.030232][T13521] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 2868.037235][T13521] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2868.043183][T13521] ? policy_nodemask+0x311/0x480 [ 2868.048170][T13521] alloc_pages_mpol+0x258/0x5f0 [ 2868.053071][T13521] ? mempolicy_in_oom_domain+0x150/0x150 [ 2868.058758][T13521] ? find_held_lock+0x2d/0x110 [ 2868.063582][T13521] vma_alloc_folio+0xad/0x220 [ 2868.068308][T13521] ? alloc_migration_target_by_mpol+0x6b0/0x6b0 [ 2868.074597][T13521] ? find_held_lock+0x2d/0x110 [ 2868.079416][T13521] ? filemap_get_read_batch+0x9b0/0x9b0 [ 2868.085016][T13521] __handle_mm_fault+0x100b/0x3d60 [ 2868.090190][T13521] ? vm_iomap_memory+0x170/0x170 [ 2868.095205][T13521] handle_mm_fault+0x478/0xa00 [ 2868.100051][T13521] __get_user_pages+0x4b2/0x1480 [ 2868.105047][T13521] ? follow_page_mask+0xda0/0xda0 [ 2868.110130][T13521] __gup_longterm_locked+0x278/0x2ab0 [ 2868.115560][T13521] ? get_user_pages_unlocked+0x770/0x770 [ 2868.121249][T13521] ? lock_sync+0x190/0x190 [ 2868.125709][T13521] pin_user_pages_remote+0xee/0x140 [ 2868.130954][T13521] ? __gup_longterm_locked+0x2ab0/0x2ab0 [ 2868.136605][T13521] process_vm_rw_core.constprop.0+0x43d/0xa10 [ 2868.142689][T13521] ? vmalloc_dump_obj+0x290/0x290 [ 2868.147751][T13521] process_vm_rw+0x2ff/0x360 [ 2868.152346][T13521] ? process_vm_rw_core.constprop.0+0xa10/0xa10 [ 2868.158600][T13521] ? ksys_write+0x214/0x250 [ 2868.163154][T13521] ? reacquire_held_locks+0x4b0/0x4b0 [ 2868.168547][T13521] ? vfs_write+0x14c/0xdf0 [ 2868.172987][T13521] ? bit_wait_io_timeout+0x160/0x160 [ 2868.178285][T13521] ? fput+0x30/0x1a0 [ 2868.182197][T13521] ? ksys_write+0x1a7/0x250 [ 2868.186737][T13521] __x64_sys_process_vm_writev+0xe2/0x1b0 [ 2868.192470][T13521] ? syscall_enter_from_user_mode+0x26/0x80 [ 2868.198386][T13521] do_syscall_64+0x3f/0x110 [ 2868.202941][T13521] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2868.208870][T13521] RIP: 0033:0x7f6fcfc7cae9 [ 2868.213288][T13521] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2868.232903][T13521] RSP: 002b:00007f6fd098a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2868.241316][T13521] RAX: ffffffffffffffda RBX: 00007f6fcfd9c050 RCX: 00007f6fcfc7cae9 [ 2868.249289][T13521] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000002c9d [ 2868.257258][T13521] RBP: 00007f6fd098a120 R08: 0000000000000001 R09: 0000000000000000 [ 2868.265405][T13521] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000002 [ 2868.273376][T13521] R13: 000000000000006e R14: 00007f6fcfd9c050 R15: 00007f6fcfebfa48 [ 2868.281355][T13521] 06:06:07 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18, 0xfffffffffffffffe}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) 06:06:07 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 45) 06:06:07 executing program 5: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r4, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3d1, 0x0) 06:06:07 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x4000) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) 06:06:07 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r2, 0xa, 0x12) r4 = getpid() getpgid(r4) sched_setscheduler(r4, 0x2, &(0x7f0000000b80)) sched_setaffinity(r4, 0x8, &(0x7f0000000000)=0xffffffffffffffff) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) tkill(r1, 0x14) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) (async) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) gettid() (async) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) (async) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) (async) fcntl$setsig(r2, 0xa, 0x12) (async) getpid() (async) getpgid(r4) (async) sched_setscheduler(r4, 0x2, &(0x7f0000000b80)) (async) sched_setaffinity(r4, 0x8, &(0x7f0000000000)=0xffffffffffffffff) (async) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) (async) dup2(r2, r3) (async) tkill(r1, 0x14) (async) 06:06:07 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000000), 0x614000, 0x8) socket$unix(0x1, 0x1, 0x0) fcntl$setsig(r0, 0xa, 0x30) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) 06:06:07 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18, 0xfffffffffffffffe}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) (async) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18, 0xfffffffffffffffe}, 0x18) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) (async) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) (async) [ 2871.169854][T13540] FAULT_INJECTION: forcing a failure. [ 2871.169854][T13540] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2871.183390][T13540] CPU: 1 PID: 13540 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 2871.193498][T13540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2871.203600][T13540] Call Trace: [ 2871.206909][T13540] [ 2871.209873][T13540] dump_stack_lvl+0x125/0x1b0 [ 2871.214604][T13540] should_fail_ex+0x496/0x5b0 [ 2871.219339][T13540] ? fs_reclaim_acquire+0xb0/0x150 [ 2871.224502][T13540] __should_fail_alloc_page+0xe7/0x130 [ 2871.230030][T13540] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 2871.236257][T13540] __alloc_pages+0x14e/0x4a0 [ 2871.240893][T13540] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 2871.247691][T13540] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2871.253646][T13540] ? policy_nodemask+0x311/0x480 [ 2871.258603][T13540] alloc_pages_mpol+0x258/0x5f0 [ 2871.263457][T13540] ? mempolicy_in_oom_domain+0x150/0x150 [ 2871.269102][T13540] ? find_held_lock+0x2d/0x110 [ 2871.273873][T13540] vma_alloc_folio+0xad/0x220 [ 2871.278550][T13540] ? alloc_migration_target_by_mpol+0x6b0/0x6b0 [ 2871.284797][T13540] ? find_held_lock+0x2d/0x110 [ 2871.289565][T13540] ? filemap_get_read_batch+0x9b0/0x9b0 [ 2871.295111][T13540] __handle_mm_fault+0x100b/0x3d60 [ 2871.300227][T13540] ? vm_iomap_memory+0x170/0x170 [ 2871.305176][T13540] handle_mm_fault+0x478/0xa00 [ 2871.309945][T13540] ? follow_page_mask+0x2/0xda0 [ 2871.314797][T13540] __get_user_pages+0x4b2/0x1480 [ 2871.319765][T13540] ? follow_page_mask+0xda0/0xda0 [ 2871.324793][T13540] __gup_longterm_locked+0x278/0x2ab0 [ 2871.330169][T13540] ? get_user_pages_unlocked+0x770/0x770 [ 2871.335799][T13540] ? lock_sync+0x190/0x190 [ 2871.340220][T13540] pin_user_pages_remote+0xee/0x140 [ 2871.345411][T13540] ? __gup_longterm_locked+0x2ab0/0x2ab0 [ 2871.351066][T13540] process_vm_rw_core.constprop.0+0x43d/0xa10 [ 2871.357487][T13540] ? vmalloc_dump_obj+0x290/0x290 [ 2871.362531][T13540] process_vm_rw+0x2ff/0x360 [ 2871.367122][T13540] ? process_vm_rw_core.constprop.0+0xa10/0xa10 [ 2871.373356][T13540] ? ksys_write+0x214/0x250 [ 2871.377861][T13540] ? reacquire_held_locks+0x4b0/0x4b0 [ 2871.383238][T13540] ? vfs_write+0x14c/0xdf0 [ 2871.387658][T13540] ? bit_wait_io_timeout+0x160/0x160 [ 2871.392945][T13540] ? asm_common_interrupt+0x26/0x40 [ 2871.398146][T13540] __x64_sys_process_vm_writev+0xe2/0x1b0 [ 2871.403865][T13540] ? __ia32_sys_process_vm_readv+0x1b0/0x1b0 [ 2871.409866][T13540] do_syscall_64+0x3f/0x110 [ 2871.414371][T13540] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2871.420268][T13540] RIP: 0033:0x7f6fcfc7cae9 [ 2871.424676][T13540] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2871.444283][T13540] RSP: 002b:00007f6fd098a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2871.452692][T13540] RAX: ffffffffffffffda RBX: 00007f6fcfd9c050 RCX: 00007f6fcfc7cae9 [ 2871.460664][T13540] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000002ca0 [ 2871.468650][T13540] RBP: 00007f6fd098a120 R08: 0000000000000001 R09: 0000000000000000 [ 2871.476613][T13540] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000002 [ 2871.484578][T13540] R13: 000000000000006e R14: 00007f6fcfd9c050 R15: 00007f6fcfebfa48 [ 2871.492553][T13540] 06:06:08 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18, 0xfffffffffffffffe}, 0x18) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) 06:06:08 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x20000) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) 06:06:08 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000000), 0x8000, 0x44001) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) poll(&(0x7f0000000040)=[{r1, 0x400}, {r0, 0x144c}, {r2, 0x2424}], 0x3, 0x6) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) poll(&(0x7f0000000100)=[{r2}], 0x1, 0x8) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) 06:06:08 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) (async) r1 = syz_open_dev$admmidi(&(0x7f0000000000), 0x8000, 0x44001) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) poll(&(0x7f0000000040)=[{r1, 0x400}, {r0, 0x144c}, {r2, 0x2424}], 0x3, 0x6) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) (async) poll(&(0x7f0000000100)=[{r2}], 0x1, 0x8) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) 06:06:08 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) r1 = gettid() (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) (async) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) (async) openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000000), 0x614000, 0x8) (async) socket$unix(0x1, 0x1, 0x0) fcntl$setsig(r0, 0xa, 0x30) (async) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) (async) dup2(r2, r3) (async) fcntl$setown(r3, 0x8, r1) (async) tkill(r1, 0x14) 06:06:08 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 46) 06:06:08 executing program 5: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r4, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3d2, 0x0) 06:06:08 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) syz_open_dev$admmidi(&(0x7f0000000000), 0x8000, 0x44001) (async) r1 = syz_open_dev$admmidi(&(0x7f0000000000), 0x8000, 0x44001) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) poll(&(0x7f0000000040)=[{r1, 0x400}, {r0, 0x144c}, {r2, 0x2424}], 0x3, 0x6) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) poll(&(0x7f0000000100)=[{r2}], 0x1, 0x8) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) [ 2872.104775][T13581] FAULT_INJECTION: forcing a failure. [ 2872.104775][T13581] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2872.137749][T13581] CPU: 1 PID: 13581 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 2872.147956][T13581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2872.158011][T13581] Call Trace: [ 2872.161288][T13581] [ 2872.164216][T13581] dump_stack_lvl+0x125/0x1b0 [ 2872.168907][T13581] should_fail_ex+0x496/0x5b0 [ 2872.173596][T13581] ? fs_reclaim_acquire+0xb0/0x150 [ 2872.178734][T13581] __should_fail_alloc_page+0xe7/0x130 [ 2872.184248][T13581] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 2872.190451][T13581] __alloc_pages+0x14e/0x4a0 [ 2872.195049][T13581] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 2872.201816][T13581] ? print_usage_bug.part.0+0x670/0x670 [ 2872.207376][T13581] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2872.213272][T13581] ? policy_nodemask+0x311/0x480 [ 2872.218223][T13581] alloc_pages_mpol+0x258/0x5f0 [ 2872.223078][T13581] ? mempolicy_in_oom_domain+0x150/0x150 [ 2872.228715][T13581] ? find_held_lock+0x2d/0x110 [ 2872.233519][T13581] vma_alloc_folio+0xad/0x220 [ 2872.238206][T13581] ? alloc_migration_target_by_mpol+0x6b0/0x6b0 [ 2872.244479][T13581] ? filemap_get_read_batch+0x9b0/0x9b0 [ 2872.250047][T13581] __handle_mm_fault+0x100b/0x3d60 [ 2872.255181][T13581] ? vm_iomap_memory+0x170/0x170 [ 2872.260152][T13581] handle_mm_fault+0x478/0xa00 [ 2872.264941][T13581] __get_user_pages+0x4b2/0x1480 [ 2872.269907][T13581] ? follow_page_mask+0xda0/0xda0 [ 2872.274939][T13581] ? down_read+0x470/0x470 [ 2872.279375][T13581] __gup_longterm_locked+0x278/0x2ab0 [ 2872.284867][T13581] ? get_user_pages_unlocked+0x770/0x770 [ 2872.290536][T13581] ? lock_sync+0x190/0x190 [ 2872.294986][T13581] pin_user_pages_remote+0xee/0x140 [ 2872.300197][T13581] ? __gup_longterm_locked+0x2ab0/0x2ab0 [ 2872.305851][T13581] process_vm_rw_core.constprop.0+0x43d/0xa10 [ 2872.311948][T13581] ? vmalloc_dump_obj+0x290/0x290 [ 2872.317001][T13581] process_vm_rw+0x2ff/0x360 [ 2872.321605][T13581] ? process_vm_rw_core.constprop.0+0xa10/0xa10 [ 2872.327858][T13581] ? ksys_write+0x214/0x250 [ 2872.332379][T13581] ? reacquire_held_locks+0x4b0/0x4b0 [ 2872.337777][T13581] ? vfs_write+0x14c/0xdf0 [ 2872.342216][T13581] ? bit_wait_io_timeout+0x160/0x160 [ 2872.347600][T13581] ? fput+0x30/0x1a0 [ 2872.351530][T13581] ? ksys_write+0x1a7/0x250 [ 2872.356063][T13581] __x64_sys_process_vm_writev+0xe2/0x1b0 [ 2872.361797][T13581] ? syscall_enter_from_user_mode+0x26/0x80 [ 2872.367711][T13581] do_syscall_64+0x3f/0x110 [ 2872.372233][T13581] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2872.378144][T13581] RIP: 0033:0x7f6fcfc7cae9 [ 2872.382570][T13581] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 06:06:09 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x40000) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) [ 2872.402202][T13581] RSP: 002b:00007f6fd098a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2872.410632][T13581] RAX: ffffffffffffffda RBX: 00007f6fcfd9c050 RCX: 00007f6fcfc7cae9 [ 2872.418696][T13581] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000002ca3 [ 2872.426679][T13581] RBP: 00007f6fd098a120 R08: 0000000000000001 R09: 0000000000000000 [ 2872.434655][T13581] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000002 [ 2872.442640][T13581] R13: 000000000000006e R14: 00007f6fcfd9c050 R15: 00007f6fcfebfa48 [ 2872.450653][T13581] 06:06:12 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 47) 06:06:12 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0xe, &(0x7f00000001c0)=""/158, &(0x7f0000000040)=0x9e) 06:06:12 executing program 5: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r4, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3d3, 0x0) 06:06:12 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@bridge_setlink={0x3c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r5}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x4, 0x0, 0x1, {0x14, 0xa, 0x0, 0x1, [{0x8, 0x1}, {0x8, 0x2}]}}]}]}, 0x3c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0xb, 0x0, 0x4}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xfc}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x5}, 0x4004010) fcntl$setsig(r2, 0xa, 0x3c) tkill(r1, 0x14) 06:06:12 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000a80080001000000000008000200000000005475a1fd7a42a582c8e72ab134ed3abe23c87421fb66d41f42da02423aeb87be4899ce41cc302f68ac"], 0x3c}}, 0x0) fcntl$setsig(r4, 0xa, 0x30) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) ioctl$int_in(r5, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r5, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r6}], 0x1, 0xfffffffffffffff8) dup2(r5, r6) fcntl$setown(r6, 0x8, r1) tkill(r1, 0x14) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000380)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x20, 0xfff, 0x1, 0xfdb, 0x1, 0xfffffffffffffff8}, {0x4, 0x5c, 0x3, 0x2, 0xe82b, 0x800}], ['\x00', '\x00', '\x00']}) [ 2875.848569][T13604] FAULT_INJECTION: forcing a failure. [ 2875.848569][T13604] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2875.864669][T13604] CPU: 1 PID: 13604 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 2875.874798][T13604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2875.884856][T13604] Call Trace: [ 2875.888569][T13604] [ 2875.891499][T13604] dump_stack_lvl+0x125/0x1b0 [ 2875.896196][T13604] should_fail_ex+0x496/0x5b0 [ 2875.900903][T13604] ? fs_reclaim_acquire+0xb0/0x150 [ 2875.906026][T13604] __should_fail_alloc_page+0xe7/0x130 [ 2875.911498][T13604] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 2875.917671][T13604] __alloc_pages+0x14e/0x4a0 [ 2875.922260][T13604] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 2875.929030][T13604] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2875.934923][T13604] ? policy_nodemask+0x311/0x480 [ 2875.939856][T13604] alloc_pages_mpol+0x258/0x5f0 [ 2875.944705][T13604] ? mempolicy_in_oom_domain+0x150/0x150 [ 2875.950336][T13604] ? find_held_lock+0x2d/0x110 [ 2875.955101][T13604] vma_alloc_folio+0xad/0x220 [ 2875.959773][T13604] ? alloc_migration_target_by_mpol+0x6b0/0x6b0 [ 2875.966018][T13604] ? find_held_lock+0x2d/0x110 [ 2875.970815][T13604] ? filemap_get_read_batch+0x9b0/0x9b0 [ 2875.976369][T13604] __handle_mm_fault+0x100b/0x3d60 [ 2875.981484][T13604] ? vm_iomap_memory+0x170/0x170 [ 2875.986433][T13604] handle_mm_fault+0x478/0xa00 [ 2875.991202][T13604] __get_user_pages+0x4b2/0x1480 [ 2875.996144][T13604] ? follow_page_mask+0xda0/0xda0 [ 2876.001168][T13604] __gup_longterm_locked+0x278/0x2ab0 [ 2876.006546][T13604] ? get_user_pages_unlocked+0x770/0x770 [ 2876.012194][T13604] ? lock_sync+0x190/0x190 [ 2876.016623][T13604] pin_user_pages_remote+0xee/0x140 [ 2876.021819][T13604] ? __gup_longterm_locked+0x2ab0/0x2ab0 [ 2876.027459][T13604] process_vm_rw_core.constprop.0+0x43d/0xa10 [ 2876.033534][T13604] ? vmalloc_dump_obj+0x290/0x290 [ 2876.038576][T13604] process_vm_rw+0x2ff/0x360 [ 2876.043173][T13604] ? process_vm_rw_core.constprop.0+0xa10/0xa10 [ 2876.049411][T13604] ? ksys_write+0x214/0x250 [ 2876.054008][T13604] ? reacquire_held_locks+0x4b0/0x4b0 [ 2876.059391][T13604] ? vfs_write+0x14c/0xdf0 [ 2876.063811][T13604] ? bit_wait_io_timeout+0x160/0x160 [ 2876.069115][T13604] ? fput+0x30/0x1a0 [ 2876.073036][T13604] ? ksys_write+0x1a7/0x250 [ 2876.077548][T13604] __x64_sys_process_vm_writev+0xe2/0x1b0 [ 2876.083269][T13604] ? syscall_enter_from_user_mode+0x26/0x80 [ 2876.089158][T13604] do_syscall_64+0x3f/0x110 [ 2876.093670][T13604] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2876.099569][T13604] RIP: 0033:0x7f6fcfc7cae9 [ 2876.103981][T13604] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2876.123615][T13604] RSP: 002b:00007f6fd098a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2876.132059][T13604] RAX: ffffffffffffffda RBX: 00007f6fcfd9c050 RCX: 00007f6fcfc7cae9 [ 2876.140025][T13604] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000002ca6 [ 2876.147990][T13604] RBP: 00007f6fd098a120 R08: 0000000000000001 R09: 0000000000000000 [ 2876.155958][T13604] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000002 [ 2876.163921][T13604] R13: 000000000000006e R14: 00007f6fcfd9c050 R15: 00007f6fcfebfa48 [ 2876.172002][T13604] 06:06:12 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async, rerun: 64) r1 = gettid() (async, rerun: 64) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) (rerun: 32) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) (async) openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000000), 0x614000, 0x8) (async) socket$unix(0x1, 0x1, 0x0) fcntl$setsig(r0, 0xa, 0x30) (async) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) (async) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) 06:06:12 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) r1 = gettid() (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) (async) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) (async) fcntl$setsig(r2, 0xa, 0x12) (async) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) (async) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@bridge_setlink={0x3c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r5}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x4, 0x0, 0x1, {0x14, 0xa, 0x0, 0x1, [{0x8, 0x1}, {0x8, 0x2}]}}]}]}, 0x3c}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0xb, 0x0, 0x4}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xfc}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x5}, 0x4004010) (async) fcntl$setsig(r2, 0xa, 0x3c) (async) tkill(r1, 0x14) 06:06:13 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 48) 06:06:13 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) r1 = gettid() (async) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000a80080001000000000008000200000000005475a1fd7a42a582c8e72ab134ed3abe23c87421fb66d41f42da02423aeb87be4899ce41cc302f68ac"], 0x3c}}, 0x0) fcntl$setsig(r4, 0xa, 0x30) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) (async) ioctl$int_in(r5, 0x5452, &(0x7f0000000200)=0x1000000000003e) (async) fcntl$setsig(r5, 0xa, 0x12) (async) poll(&(0x7f0000b2c000)=[{r6}], 0x1, 0xfffffffffffffff8) dup2(r5, r6) (async) fcntl$setown(r6, 0x8, r1) (async) tkill(r1, 0x14) (async) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000380)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x20, 0xfff, 0x1, 0xfdb, 0x1, 0xfffffffffffffff8}, {0x4, 0x5c, 0x3, 0x2, 0xe82b, 0x800}], ['\x00', '\x00', '\x00']}) 06:06:13 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) (async) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0xe, &(0x7f00000001c0)=""/158, &(0x7f0000000040)=0x9e) (async) getsockopt$inet6_tcp_buf(r1, 0x6, 0xe, &(0x7f00000001c0)=""/158, &(0x7f0000000040)=0x9e) [ 2876.676024][T13626] FAULT_INJECTION: forcing a failure. [ 2876.676024][T13626] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2876.714172][T13626] CPU: 0 PID: 13626 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 2876.724307][T13626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2876.734405][T13626] Call Trace: [ 2876.737718][T13626] [ 2876.740682][T13626] dump_stack_lvl+0x125/0x1b0 [ 2876.745413][T13626] should_fail_ex+0x496/0x5b0 [ 2876.750130][T13626] __should_fail_alloc_page+0xe7/0x130 [ 2876.755624][T13626] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 2876.761810][T13626] __alloc_pages+0x14e/0x4a0 [ 2876.766446][T13626] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 2876.773246][T13626] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2876.779165][T13626] ? policy_nodemask+0x311/0x480 [ 2876.784211][T13626] alloc_pages_mpol+0x258/0x5f0 [ 2876.789082][T13626] ? mempolicy_in_oom_domain+0x150/0x150 [ 2876.795160][T13626] ? find_held_lock+0x2d/0x110 [ 2876.800024][T13626] vma_alloc_folio+0xad/0x220 [ 2876.804738][T13626] ? alloc_migration_target_by_mpol+0x6b0/0x6b0 [ 2876.811038][T13626] ? find_held_lock+0x2d/0x110 [ 2876.815863][T13626] __handle_mm_fault+0xe06/0x3d60 [ 2876.820933][T13626] ? vm_iomap_memory+0x170/0x170 [ 2876.825916][T13626] handle_mm_fault+0x478/0xa00 [ 2876.830708][T13626] __get_user_pages+0x4b2/0x1480 [ 2876.835680][T13626] ? follow_page_mask+0xda0/0xda0 [ 2876.840732][T13626] __gup_longterm_locked+0x278/0x2ab0 [ 2876.846137][T13626] ? get_user_pages_unlocked+0x770/0x770 [ 2876.851879][T13626] ? lock_sync+0x190/0x190 [ 2876.856415][T13626] pin_user_pages_remote+0xee/0x140 [ 2876.861630][T13626] ? __gup_longterm_locked+0x2ab0/0x2ab0 [ 2876.867290][T13626] process_vm_rw_core.constprop.0+0x43d/0xa10 [ 2876.873385][T13626] ? vmalloc_dump_obj+0x290/0x290 [ 2876.878442][T13626] process_vm_rw+0x2ff/0x360 [ 2876.883054][T13626] ? process_vm_rw_core.constprop.0+0xa10/0xa10 [ 2876.889328][T13626] ? _raw_spin_lock_irqsave+0x42/0x50 [ 2876.894899][T13626] ? lock_acquire+0x1ae/0x510 [ 2876.899632][T13626] ? handle_edge_irq+0x40a/0xcf0 [ 2876.904594][T13626] __x64_sys_process_vm_writev+0xe2/0x1b0 [ 2876.910334][T13626] ? syscall_enter_from_user_mode+0x26/0x80 [ 2876.916243][T13626] do_syscall_64+0x3f/0x110 [ 2876.920769][T13626] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2876.926683][T13626] RIP: 0033:0x7f6fcfc7cae9 [ 2876.931115][T13626] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2876.950741][T13626] RSP: 002b:00007f6fd09690c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2876.959176][T13626] RAX: ffffffffffffffda RBX: 00007f6fcfd9c120 RCX: 00007f6fcfc7cae9 [ 2876.967176][T13626] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000002caa 06:06:13 executing program 5: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r4, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3d4, 0x0) [ 2876.975154][T13626] RBP: 00007f6fd0969120 R08: 0000000000000001 R09: 0000000000000000 [ 2876.983143][T13626] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000002 [ 2876.991211][T13626] R13: 000000000000006e R14: 00007f6fcfd9c120 R15: 00007f6fcfebfa48 [ 2876.999207][T13626] 06:06:13 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 49) 06:06:13 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000000c0)={0x18}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) 06:06:14 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) r1 = gettid() (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) (async) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) (async) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) (async) dup2(r2, r3) (async) fcntl$setown(r3, 0x8, r1) (async) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) (async) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@bridge_setlink={0x3c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r5}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x4, 0x0, 0x1, {0x14, 0xa, 0x0, 0x1, [{0x8, 0x1}, {0x8, 0x2}]}}]}]}, 0x3c}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0xb, 0x0, 0x4}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xfc}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x5}, 0x4004010) (async) fcntl$setsig(r2, 0xa, 0x3c) tkill(r1, 0x14) 06:06:14 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000000c0)={0x18}, 0x18) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) r1 = gettid() ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) (async) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r2, 0xa, 0x12) (async, rerun: 32) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) (rerun: 32) dup2(r2, r3) (async) fcntl$setown(r3, 0x8, r1) (async) tkill(r1, 0x14) [ 2877.371861][T13643] FAULT_INJECTION: forcing a failure. [ 2877.371861][T13643] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2877.435112][T13643] CPU: 1 PID: 13643 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 2877.445250][T13643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2877.455306][T13643] Call Trace: [ 2877.458594][T13643] [ 2877.461527][T13643] dump_stack_lvl+0x125/0x1b0 [ 2877.466219][T13643] should_fail_ex+0x496/0x5b0 [ 2877.470907][T13643] ? fs_reclaim_acquire+0xb0/0x150 [ 2877.476043][T13643] __should_fail_alloc_page+0xe7/0x130 [ 2877.482058][T13643] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 2877.488254][T13643] __alloc_pages+0x14e/0x4a0 [ 2877.492859][T13643] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 2877.499661][T13643] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2877.505595][T13643] ? policy_nodemask+0x311/0x480 [ 2877.510540][T13643] alloc_pages_mpol+0x258/0x5f0 [ 2877.515396][T13643] ? mempolicy_in_oom_domain+0x150/0x150 [ 2877.521064][T13643] ? do_raw_spin_lock+0x11f/0x2b0 [ 2877.526097][T13643] ? find_held_lock+0x2d/0x110 [ 2877.530873][T13643] vma_alloc_folio+0xad/0x220 [ 2877.535551][T13643] ? alloc_migration_target_by_mpol+0x6b0/0x6b0 [ 2877.541792][T13643] ? find_held_lock+0x2d/0x110 [ 2877.546575][T13643] ? filemap_get_read_batch+0x9b0/0x9b0 [ 2877.552132][T13643] __handle_mm_fault+0x100b/0x3d60 [ 2877.557257][T13643] ? vm_iomap_memory+0x170/0x170 [ 2877.562212][T13643] handle_mm_fault+0x478/0xa00 [ 2877.567519][T13643] __get_user_pages+0x4b2/0x1480 [ 2877.572482][T13643] ? follow_page_mask+0xda0/0xda0 [ 2877.577517][T13643] __gup_longterm_locked+0x278/0x2ab0 [ 2877.582899][T13643] ? get_user_pages_unlocked+0x770/0x770 [ 2877.588535][T13643] ? lock_sync+0x190/0x190 [ 2877.592964][T13643] pin_user_pages_remote+0xee/0x140 [ 2877.598197][T13643] ? __gup_longterm_locked+0x2ab0/0x2ab0 [ 2877.603849][T13643] process_vm_rw_core.constprop.0+0x43d/0xa10 [ 2877.609938][T13643] ? vmalloc_dump_obj+0x290/0x290 [ 2877.614980][T13643] process_vm_rw+0x2ff/0x360 [ 2877.619577][T13643] ? process_vm_rw_core.constprop.0+0xa10/0xa10 [ 2877.625914][T13643] ? ksys_write+0x214/0x250 [ 2877.630442][T13643] ? reacquire_held_locks+0x4b0/0x4b0 [ 2877.635831][T13643] ? vfs_write+0x14c/0xdf0 [ 2877.640261][T13643] ? bit_wait_io_timeout+0x160/0x160 [ 2877.645582][T13643] ? fput+0x30/0x1a0 [ 2877.649513][T13643] ? ksys_write+0x1a7/0x250 [ 2877.654025][T13643] __x64_sys_process_vm_writev+0xe2/0x1b0 [ 2877.659751][T13643] ? syscall_enter_from_user_mode+0x26/0x80 [ 2877.665659][T13643] do_syscall_64+0x3f/0x110 [ 2877.670179][T13643] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2877.676074][T13643] RIP: 0033:0x7f6fcfc7cae9 [ 2877.680510][T13643] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2877.700237][T13643] RSP: 002b:00007f6fd098a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2877.708683][T13643] RAX: ffffffffffffffda RBX: 00007f6fcfd9c050 RCX: 00007f6fcfc7cae9 [ 2877.716678][T13643] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000002cad [ 2877.724654][T13643] RBP: 00007f6fd098a120 R08: 0000000000000001 R09: 0000000000000000 [ 2877.732626][T13643] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000002 [ 2877.740595][T13643] R13: 000000000000006e R14: 00007f6fcfd9c050 R15: 00007f6fcfebfa48 [ 2877.748597][T13643] 06:06:14 executing program 5: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r4, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3d5, 0x0) 06:06:14 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0xffff0001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) r4 = dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@bridge_setlink={0x3c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r6}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x4, 0x0, 0x1, {0x14, 0xa, 0x0, 0x1, [{0x8, 0x1}, {0x8, 0x2}]}}]}]}, 0x3c}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000040)={r7, 0xcc4b, 0x200000000000000, 0xc3}) 06:06:14 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 50) 06:06:14 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000000c0)={0x18}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) (async) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000000c0)={0x18}, 0x18) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) gettid() (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) (async) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) (async) fcntl$setsig(r2, 0xa, 0x12) (async) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) (async) dup2(r2, r3) (async) fcntl$setown(r3, 0x8, r1) (async) tkill(r1, 0x14) (async) [ 2878.128011][T13666] FAULT_INJECTION: forcing a failure. [ 2878.128011][T13666] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2878.142821][T13666] CPU: 1 PID: 13666 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 2878.152920][T13666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2878.162978][T13666] Call Trace: [ 2878.166254][T13666] [ 2878.169177][T13666] dump_stack_lvl+0x125/0x1b0 [ 2878.173867][T13666] should_fail_ex+0x496/0x5b0 [ 2878.178550][T13666] ? fs_reclaim_acquire+0xb0/0x150 [ 2878.183674][T13666] __should_fail_alloc_page+0xe7/0x130 [ 2878.189153][T13666] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 2878.195428][T13666] __alloc_pages+0x14e/0x4a0 [ 2878.200024][T13666] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 2878.206794][T13666] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2878.213209][T13666] ? policy_nodemask+0x311/0x480 [ 2878.218144][T13666] alloc_pages_mpol+0x258/0x5f0 [ 2878.222995][T13666] ? mempolicy_in_oom_domain+0x150/0x150 [ 2878.228624][T13666] ? find_held_lock+0x2d/0x110 [ 2878.233411][T13666] vma_alloc_folio+0xad/0x220 [ 2878.238105][T13666] ? alloc_migration_target_by_mpol+0x6b0/0x6b0 [ 2878.244365][T13666] ? find_held_lock+0x2d/0x110 [ 2878.249161][T13666] ? filemap_get_read_batch+0x9b0/0x9b0 [ 2878.254718][T13666] __handle_mm_fault+0x100b/0x3d60 [ 2878.259837][T13666] ? vm_iomap_memory+0x170/0x170 [ 2878.264792][T13666] handle_mm_fault+0x478/0xa00 [ 2878.269564][T13666] __get_user_pages+0x4b2/0x1480 [ 2878.274499][T13666] ? follow_page_mask+0xda0/0xda0 [ 2878.279613][T13666] __gup_longterm_locked+0x278/0x2ab0 [ 2878.284987][T13666] ? get_user_pages_unlocked+0x770/0x770 [ 2878.290618][T13666] ? lock_sync+0x190/0x190 [ 2878.295047][T13666] pin_user_pages_remote+0xee/0x140 [ 2878.300245][T13666] ? __gup_longterm_locked+0x2ab0/0x2ab0 [ 2878.305879][T13666] process_vm_rw_core.constprop.0+0x43d/0xa10 [ 2878.311954][T13666] ? vmalloc_dump_obj+0x290/0x290 [ 2878.317007][T13666] process_vm_rw+0x2ff/0x360 [ 2878.321609][T13666] ? process_vm_rw_core.constprop.0+0xa10/0xa10 [ 2878.327866][T13666] ? ksys_write+0x214/0x250 [ 2878.332371][T13666] ? reacquire_held_locks+0x4b0/0x4b0 [ 2878.337747][T13666] ? vfs_write+0x14c/0xdf0 [ 2878.342187][T13666] ? bit_wait_io_timeout+0x160/0x160 [ 2878.347481][T13666] ? fput+0x30/0x1a0 [ 2878.351379][T13666] ? ksys_write+0x1a7/0x250 [ 2878.355888][T13666] __x64_sys_process_vm_writev+0xe2/0x1b0 [ 2878.361605][T13666] ? syscall_enter_from_user_mode+0x26/0x80 [ 2878.367580][T13666] do_syscall_64+0x3f/0x110 [ 2878.372086][T13666] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2878.377977][T13666] RIP: 0033:0x7f6fcfc7cae9 [ 2878.382383][T13666] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2878.401991][T13666] RSP: 002b:00007f6fd098a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2878.410414][T13666] RAX: ffffffffffffffda RBX: 00007f6fcfd9c050 RCX: 00007f6fcfc7cae9 [ 2878.418379][T13666] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000002cb0 [ 2878.426343][T13666] RBP: 00007f6fd098a120 R08: 0000000000000001 R09: 0000000000000000 [ 2878.434308][T13666] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000002 [ 2878.442279][T13666] R13: 000000000000006e R14: 00007f6fcfd9c050 R15: 00007f6fcfebfa48 [ 2878.450255][T13666] 06:06:15 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) r1 = gettid() ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0xffff0001) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) (async) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) (async) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) r4 = dup2(r2, r3) (async) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) (async) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) (async) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@bridge_setlink={0x3c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r6}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x4, 0x0, 0x1, {0x14, 0xa, 0x0, 0x1, [{0x8, 0x1}, {0x8, 0x2}]}}]}]}, 0x3c}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000040)={r7, 0xcc4b, 0x200000000000000, 0xc3}) 06:06:17 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000a80080001000000000008000200000000005475a1fd7a42a582c8e72ab134ed3abe23c87421fb66d41f42da02423aeb87be4899ce41cc302f68ac"], 0x3c}}, 0x0) fcntl$setsig(r4, 0xa, 0x30) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) ioctl$int_in(r5, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r5, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r6}], 0x1, 0xfffffffffffffff8) dup2(r5, r6) fcntl$setown(r6, 0x8, r1) tkill(r1, 0x14) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000380)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x20, 0xfff, 0x1, 0xfdb, 0x1, 0xfffffffffffffff8}, {0x4, 0x5c, 0x3, 0x2, 0xe82b, 0x800}], ['\x00', '\x00', '\x00']}) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) (async) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) gettid() (async) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) (async) socket(0x10, 0x80002, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000a80080001000000000008000200000000005475a1fd7a42a582c8e72ab134ed3abe23c87421fb66d41f42da02423aeb87be4899ce41cc302f68ac"], 0x3c}}, 0x0) (async) fcntl$setsig(r4, 0xa, 0x30) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) (async) ioctl$int_in(r5, 0x5452, &(0x7f0000000200)=0x1000000000003e) (async) fcntl$setsig(r5, 0xa, 0x12) (async) poll(&(0x7f0000b2c000)=[{r6}], 0x1, 0xfffffffffffffff8) (async) dup2(r5, r6) (async) fcntl$setown(r6, 0x8, r1) (async) tkill(r1, 0x14) (async) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000380)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x20, 0xfff, 0x1, 0xfdb, 0x1, 0xfffffffffffffff8}, {0x4, 0x5c, 0x3, 0x2, 0xe82b, 0x800}], ['\x00', '\x00', '\x00']}) (async) 06:06:18 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0xe, &(0x7f00000001c0)=""/158, &(0x7f0000000040)=0x9e) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) (async) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) (async) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) (async) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) (async) getsockopt$inet6_tcp_buf(r1, 0x6, 0xe, &(0x7f00000001c0)=""/158, &(0x7f0000000040)=0x9e) (async) 06:06:18 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) gettid() ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000200)=0x1000000000003e) clock_getres(0x0, &(0x7f0000000000)) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f00000000c0)) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000100), 0x4) clock_getres(0x0, &(0x7f0000000140)) shmdt(0x0) clock_gettime(0x0, &(0x7f0000000240)) pselect6(0x40, &(0x7f0000000180)={0x2, 0x9, 0xfffffffffffffffc, 0x81}, &(0x7f0000000280)={0x0, 0x5, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x8000}, &(0x7f0000000200)={0x9, 0xffffffffffffffff, 0x0, 0x1}, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={[0x3]}, 0x8}) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r3 = syz_clone3(&(0x7f0000000580)={0x100, 0x0, &(0x7f00000003c0), &(0x7f0000000400)=0x0, {0x24}, 0x0, 0x0, &(0x7f00000004c0)=""/68, &(0x7f0000000540)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x4}, 0x58) sched_rr_get_interval(r3, &(0x7f0000000600)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000640)='cgroup.procs\x00', 0x2, 0x0) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000406a0509022d0001010000800904001f020301000009210000000122000009058103000006ff000905020300"/63], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000e80)={0x24, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="002281000000085858830400f0486a9d9ea7ba05f79e668063de00000034c0bbd900000000000000004754a2288c22bc3c100d66000e000073f06d4d2234a670d288478ac6df0a23429d9b2758780d2d69d27d23db09007aec863bc5929966846be29cf6d20879acc0200a48a74cecd0ef1e8295c3e207f6f6f5c0e336a7280131bf33050d960cb3f0edb49e86d9b5a585cd"], &(0x7f0000000e40)={0x0, 0x21, 0x9, {0x9}}}, &(0x7f0000001140)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) pselect6(0x40, &(0x7f0000001180)={0x0, 0x0, 0x101}, 0x0, &(0x7f0000001200)={0x56, 0x0, 0x0, 0x81, 0x0, 0x0, 0x1}, &(0x7f0000001240), 0x0) sched_rr_get_interval(r4, &(0x7f0000001340)) syz_clone3(&(0x7f0000001600)={0x401000000, &(0x7f0000001380), &(0x7f00000013c0)=0x0, &(0x7f0000001400), {0x3d}, &(0x7f0000001440)=""/194, 0xc2, 0x0, &(0x7f00000015c0)=[0x0, 0x0], 0x2}, 0x58) sched_rr_get_interval(r5, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000018c0), 0x2, 0x0) 06:06:18 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) r1 = gettid() ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0xffff0001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) (async) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) (async) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) (async) r4 = dup2(r2, r3) (async) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) (async) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@bridge_setlink={0x3c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r6}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x4, 0x0, 0x1, {0x14, 0xa, 0x0, 0x1, [{0x8, 0x1}, {0x8, 0x2}]}}]}]}, 0x3c}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000040)={r7, 0xcc4b, 0x200000000000000, 0xc3}) 06:06:18 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 51) 06:06:18 executing program 5: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r4, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3d6, 0x0) [ 2881.796854][T13696] FAULT_INJECTION: forcing a failure. [ 2881.796854][T13696] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2881.812595][T13696] CPU: 1 PID: 13696 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 2881.822715][T13696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2881.832801][T13696] Call Trace: [ 2881.836098][T13696] [ 2881.839032][T13696] dump_stack_lvl+0x125/0x1b0 [ 2881.843725][T13696] should_fail_ex+0x496/0x5b0 [ 2881.848437][T13696] ? fs_reclaim_acquire+0xb0/0x150 [ 2881.853558][T13696] __should_fail_alloc_page+0xe7/0x130 [ 2881.859046][T13696] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 2881.865244][T13696] __alloc_pages+0x14e/0x4a0 [ 2881.869841][T13696] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 2881.876613][T13696] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2881.882514][T13696] ? policy_nodemask+0x311/0x480 [ 2881.887474][T13696] alloc_pages_mpol+0x258/0x5f0 [ 2881.892636][T13696] ? mempolicy_in_oom_domain+0x150/0x150 [ 2881.898361][T13696] ? find_held_lock+0x2d/0x110 [ 2881.903168][T13696] vma_alloc_folio+0xad/0x220 [ 2881.907868][T13696] ? alloc_migration_target_by_mpol+0x6b0/0x6b0 [ 2881.914124][T13696] ? find_held_lock+0x2d/0x110 [ 2881.918908][T13696] ? filemap_get_read_batch+0x9b0/0x9b0 [ 2881.924473][T13696] __handle_mm_fault+0x100b/0x3d60 [ 2881.929605][T13696] ? vm_iomap_memory+0x170/0x170 [ 2881.934587][T13696] handle_mm_fault+0x478/0xa00 [ 2881.939375][T13696] __get_user_pages+0x4b2/0x1480 [ 2881.944411][T13696] ? follow_page_mask+0xda0/0xda0 [ 2881.949456][T13696] __gup_longterm_locked+0x278/0x2ab0 [ 2881.954850][T13696] ? get_user_pages_unlocked+0x770/0x770 [ 2881.960494][T13696] ? lock_sync+0x190/0x190 [ 2881.964936][T13696] pin_user_pages_remote+0xee/0x140 [ 2881.970147][T13696] ? __gup_longterm_locked+0x2ab0/0x2ab0 [ 2881.975802][T13696] process_vm_rw_core.constprop.0+0x43d/0xa10 [ 2881.981895][T13696] ? vmalloc_dump_obj+0x290/0x290 [ 2881.986949][T13696] process_vm_rw+0x2ff/0x360 [ 2881.991550][T13696] ? process_vm_rw_core.constprop.0+0xa10/0xa10 [ 2881.997800][T13696] ? _raw_spin_lock_irqsave+0x42/0x50 [ 2882.003188][T13696] ? lock_acquire+0x1ae/0x510 [ 2882.007921][T13696] ? handle_edge_irq+0x40a/0xcf0 [ 2882.012895][T13696] __x64_sys_process_vm_writev+0xe2/0x1b0 [ 2882.018632][T13696] ? syscall_enter_from_user_mode+0x26/0x80 [ 2882.024535][T13696] do_syscall_64+0x3f/0x110 [ 2882.029067][T13696] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2882.034967][T13696] RIP: 0033:0x7f6fcfc7cae9 [ 2882.039387][T13696] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2882.059005][T13696] RSP: 002b:00007f6fd098a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2882.067518][T13696] RAX: ffffffffffffffda RBX: 00007f6fcfd9c050 RCX: 00007f6fcfc7cae9 [ 2882.075493][T13696] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000002cb3 [ 2882.083474][T13696] RBP: 00007f6fd098a120 R08: 0000000000000001 R09: 0000000000000000 [ 2882.091451][T13696] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000002 [ 2882.099427][T13696] R13: 000000000000006e R14: 00007f6fcfd9c050 R15: 00007f6fcfebfa48 [ 2882.107419][T13696] 06:06:18 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 52) 06:06:19 executing program 5: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r4, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3d7, 0x0) [ 2882.533540][T13709] FAULT_INJECTION: forcing a failure. [ 2882.533540][T13709] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2882.552026][T13709] CPU: 1 PID: 13709 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 2882.562138][T13709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2882.572227][T13709] Call Trace: [ 2882.575534][T13709] [ 2882.578464][T13709] dump_stack_lvl+0x125/0x1b0 [ 2882.583159][T13709] should_fail_ex+0x496/0x5b0 [ 2882.587859][T13709] ? fs_reclaim_acquire+0xb0/0x150 [ 2882.593005][T13709] __should_fail_alloc_page+0xe7/0x130 [ 2882.598490][T13709] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 2882.604665][T13709] __alloc_pages+0x14e/0x4a0 [ 2882.609265][T13709] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 2882.616042][T13709] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2882.621960][T13709] ? policy_nodemask+0x311/0x480 [ 2882.626935][T13709] alloc_pages_mpol+0x258/0x5f0 [ 2882.631810][T13709] ? mempolicy_in_oom_domain+0x150/0x150 [ 2882.637485][T13709] ? find_held_lock+0x2d/0x110 [ 2882.642290][T13709] vma_alloc_folio+0xad/0x220 [ 2882.646971][T13709] ? alloc_migration_target_by_mpol+0x6b0/0x6b0 [ 2882.653221][T13709] ? find_held_lock+0x2d/0x110 [ 2882.658018][T13709] ? filemap_get_read_batch+0x9b0/0x9b0 [ 2882.663573][T13709] __handle_mm_fault+0x100b/0x3d60 [ 2882.668698][T13709] ? vm_iomap_memory+0x170/0x170 [ 2882.673688][T13709] handle_mm_fault+0x478/0xa00 [ 2882.678485][T13709] __get_user_pages+0x4b2/0x1480 [ 2882.683445][T13709] ? follow_page_mask+0xda0/0xda0 [ 2882.688502][T13709] ? down_read+0x470/0x470 [ 2882.692966][T13709] __gup_longterm_locked+0x278/0x2ab0 [ 2882.698371][T13709] ? get_user_pages_unlocked+0x770/0x770 [ 2882.704008][T13709] ? lock_sync+0x190/0x190 [ 2882.708437][T13709] pin_user_pages_remote+0xee/0x140 [ 2882.713650][T13709] ? __gup_longterm_locked+0x2ab0/0x2ab0 [ 2882.719311][T13709] process_vm_rw_core.constprop.0+0x43d/0xa10 [ 2882.725411][T13709] ? vmalloc_dump_obj+0x290/0x290 [ 2882.730501][T13709] process_vm_rw+0x2ff/0x360 [ 2882.735124][T13709] ? process_vm_rw_core.constprop.0+0xa10/0xa10 [ 2882.741397][T13709] ? ksys_write+0x214/0x250 [ 2882.745927][T13709] ? reacquire_held_locks+0x4b0/0x4b0 [ 2882.751322][T13709] ? vfs_write+0x14c/0xdf0 [ 2882.755759][T13709] ? bit_wait_io_timeout+0x160/0x160 [ 2882.761078][T13709] ? fput+0x30/0x1a0 [ 2882.765007][T13709] ? ksys_write+0x1a7/0x250 [ 2882.769522][T13709] __x64_sys_process_vm_writev+0xe2/0x1b0 [ 2882.775249][T13709] ? syscall_enter_from_user_mode+0x26/0x80 [ 2882.781175][T13709] do_syscall_64+0x3f/0x110 [ 2882.785725][T13709] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2882.791644][T13709] RIP: 0033:0x7f6fcfc7cae9 [ 2882.796074][T13709] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2882.815709][T13709] RSP: 002b:00007f6fd098a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2882.824145][T13709] RAX: ffffffffffffffda RBX: 00007f6fcfd9c050 RCX: 00007f6fcfc7cae9 [ 2882.832120][T13709] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000002cb6 [ 2882.840089][T13709] RBP: 00007f6fd098a120 R08: 0000000000000001 R09: 0000000000000000 [ 2882.848062][T13709] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000002 [ 2882.856043][T13709] R13: 000000000000006e R14: 00007f6fcfd9c050 R15: 00007f6fcfebfa48 [ 2882.864027][T13709] [ 2882.871977][ T5183] usb 2-1: new high-speed USB device number 45 using dummy_hcd 06:06:19 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 53) [ 2883.160145][T13715] FAULT_INJECTION: forcing a failure. [ 2883.160145][T13715] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2883.174617][T13715] CPU: 1 PID: 13715 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 2883.184722][T13715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2883.194797][T13715] Call Trace: [ 2883.198123][T13715] [ 2883.201060][T13715] dump_stack_lvl+0x125/0x1b0 [ 2883.205759][T13715] should_fail_ex+0x496/0x5b0 [ 2883.210449][T13715] ? should_fail_ex+0x6/0x5b0 [ 2883.215223][T13715] __should_fail_alloc_page+0xe7/0x130 [ 2883.220696][T13715] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 2883.226871][T13715] __alloc_pages+0x14e/0x4a0 [ 2883.231473][T13715] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 2883.238268][T13715] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2883.244221][T13715] ? policy_nodemask+0x311/0x480 [ 2883.249169][T13715] alloc_pages_mpol+0x258/0x5f0 [ 2883.254026][T13715] ? mempolicy_in_oom_domain+0x150/0x150 [ 2883.259663][T13715] ? find_held_lock+0x2d/0x110 [ 2883.264449][T13715] vma_alloc_folio+0xad/0x220 [ 2883.269157][T13715] ? alloc_migration_target_by_mpol+0x6b0/0x6b0 [ 2883.275558][T13715] ? find_held_lock+0x2d/0x110 [ 2883.280626][T13715] ? filemap_get_read_batch+0x9b0/0x9b0 [ 2883.286186][T13715] __handle_mm_fault+0x100b/0x3d60 [ 2883.291323][T13715] ? vm_iomap_memory+0x170/0x170 [ 2883.296314][T13715] handle_mm_fault+0x478/0xa00 [ 2883.301202][T13715] __get_user_pages+0x4b2/0x1480 [ 2883.306146][T13715] ? follow_page_mask+0xda0/0xda0 [ 2883.311179][T13715] __gup_longterm_locked+0x278/0x2ab0 [ 2883.316575][T13715] ? asm_common_interrupt+0x26/0x40 [ 2883.321787][T13715] ? get_user_pages_unlocked+0x770/0x770 [ 2883.327423][T13715] ? lock_sync+0x190/0x190 [ 2883.331854][T13715] pin_user_pages_remote+0xee/0x140 [ 2883.337059][T13715] ? __gup_longterm_locked+0x2ab0/0x2ab0 [ 2883.342705][T13715] process_vm_rw_core.constprop.0+0x43d/0xa10 [ 2883.348783][T13715] ? asm_common_interrupt+0x26/0x40 [ 2883.354028][T13715] ? lockdep_hardirqs_on+0x7d/0x100 [ 2883.359234][T13715] ? vmalloc_dump_obj+0x290/0x290 [ 2883.364274][T13715] process_vm_rw+0x2ff/0x360 [ 2883.368864][T13715] ? process_vm_rw_core.constprop.0+0xa10/0xa10 [ 2883.375112][T13715] ? ksys_write+0x214/0x250 [ 2883.379620][T13715] ? reacquire_held_locks+0x4b0/0x4b0 [ 2883.384999][T13715] ? vfs_write+0x14c/0xdf0 [ 2883.389425][T13715] ? bit_wait_io_timeout+0x160/0x160 [ 2883.394720][T13715] ? fput+0x30/0x1a0 [ 2883.398642][T13715] ? ksys_write+0x1a7/0x250 [ 2883.403157][T13715] __x64_sys_process_vm_writev+0xe2/0x1b0 [ 2883.408893][T13715] ? syscall_enter_from_user_mode+0x26/0x80 [ 2883.414792][T13715] do_syscall_64+0x3f/0x110 [ 2883.419302][T13715] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2883.425197][T13715] RIP: 0033:0x7f6fcfc7cae9 [ 2883.429697][T13715] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2883.449308][T13715] RSP: 002b:00007f6fd098a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2883.457724][T13715] RAX: ffffffffffffffda RBX: 00007f6fcfd9c050 RCX: 00007f6fcfc7cae9 [ 2883.466054][T13715] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000002cb9 [ 2883.474066][T13715] RBP: 00007f6fd098a120 R08: 0000000000000001 R09: 0000000000000000 [ 2883.482035][T13715] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000002 [ 2883.490002][T13715] R13: 000000000000006e R14: 00007f6fcfd9c050 R15: 00007f6fcfebfa48 [ 2883.497990][T13715] 06:06:20 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 54) [ 2883.536099][ T5183] usb 2-1: no configurations [ 2883.554395][ T5183] usb 2-1: can't read configurations, error -22 06:06:20 executing program 5: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r4, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3d8, 0x0) [ 2883.715275][ T5183] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 2883.746068][T13719] FAULT_INJECTION: forcing a failure. [ 2883.746068][T13719] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2883.763074][T13719] CPU: 1 PID: 13719 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 2883.773467][T13719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2883.783534][T13719] Call Trace: [ 2883.786827][T13719] [ 2883.789773][T13719] dump_stack_lvl+0x125/0x1b0 [ 2883.794487][T13719] should_fail_ex+0x496/0x5b0 [ 2883.799193][T13719] ? fs_reclaim_acquire+0xb0/0x150 [ 2883.804359][T13719] __should_fail_alloc_page+0xe7/0x130 [ 2883.809829][T13719] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 2883.815992][T13719] __alloc_pages+0x14e/0x4a0 [ 2883.820671][T13719] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 2883.827439][T13719] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2883.833331][T13719] ? policy_nodemask+0x311/0x480 [ 2883.838278][T13719] alloc_pages_mpol+0x258/0x5f0 [ 2883.843135][T13719] ? mempolicy_in_oom_domain+0x150/0x150 [ 2883.848767][T13719] ? find_held_lock+0x2d/0x110 [ 2883.853546][T13719] vma_alloc_folio+0xad/0x220 [ 2883.858234][T13719] ? alloc_migration_target_by_mpol+0x6b0/0x6b0 [ 2883.864470][T13719] ? find_held_lock+0x2d/0x110 [ 2883.869237][T13719] ? filemap_get_read_batch+0x9b0/0x9b0 [ 2883.874784][T13719] __handle_mm_fault+0x100b/0x3d60 [ 2883.879896][T13719] ? vm_iomap_memory+0x170/0x170 [ 2883.884841][T13719] ? follow_page_mask+0x161/0xda0 [ 2883.889860][T13719] handle_mm_fault+0x478/0xa00 [ 2883.894650][T13719] __get_user_pages+0x4b2/0x1480 [ 2883.899592][T13719] ? follow_page_mask+0xda0/0xda0 [ 2883.904629][T13719] ? down_read+0x470/0x470 [ 2883.909083][T13719] __gup_longterm_locked+0x278/0x2ab0 [ 2883.914465][T13719] ? get_user_pages_unlocked+0x770/0x770 [ 2883.920093][T13719] ? lock_sync+0x190/0x190 [ 2883.924516][T13719] pin_user_pages_remote+0xee/0x140 [ 2883.929709][T13719] ? __gup_longterm_locked+0x2ab0/0x2ab0 [ 2883.935343][T13719] process_vm_rw_core.constprop.0+0x43d/0xa10 [ 2883.941422][T13719] ? vmalloc_dump_obj+0x290/0x290 [ 2883.946466][T13719] process_vm_rw+0x2ff/0x360 [ 2883.951068][T13719] ? process_vm_rw_core.constprop.0+0xa10/0xa10 [ 2883.957311][T13719] ? ksys_write+0x214/0x250 [ 2883.961837][T13719] ? reacquire_held_locks+0x4b0/0x4b0 [ 2883.967300][T13719] ? vfs_write+0x14c/0xdf0 [ 2883.971724][T13719] ? bit_wait_io_timeout+0x160/0x160 [ 2883.977010][T13719] ? fput+0x30/0x1a0 [ 2883.980904][T13719] ? ksys_write+0x1a7/0x250 [ 2883.985413][T13719] __x64_sys_process_vm_writev+0xe2/0x1b0 [ 2883.991132][T13719] ? syscall_enter_from_user_mode+0x26/0x80 [ 2883.997024][T13719] do_syscall_64+0x3f/0x110 [ 2884.001528][T13719] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2884.007413][T13719] RIP: 0033:0x7f6fcfc7cae9 [ 2884.011825][T13719] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2884.031439][T13719] RSP: 002b:00007f6fd098a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2884.039872][T13719] RAX: ffffffffffffffda RBX: 00007f6fcfd9c050 RCX: 00007f6fcfc7cae9 [ 2884.047839][T13719] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000002cbc [ 2884.055815][T13719] RBP: 00007f6fd098a120 R08: 0000000000000001 R09: 0000000000000000 [ 2884.063798][T13719] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000002 [ 2884.071772][T13719] R13: 000000000000006e R14: 00007f6fcfd9c050 R15: 00007f6fcfebfa48 [ 2884.079764][T13719] 06:06:20 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 55) [ 2884.343154][T13728] FAULT_INJECTION: forcing a failure. [ 2884.343154][T13728] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2884.361365][T13728] CPU: 1 PID: 13728 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 2884.371478][T13728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2884.381536][T13728] Call Trace: [ 2884.384828][T13728] [ 2884.387757][T13728] dump_stack_lvl+0x125/0x1b0 [ 2884.392468][T13728] should_fail_ex+0x496/0x5b0 [ 2884.397159][T13728] ? fs_reclaim_acquire+0xb0/0x150 [ 2884.402282][T13728] __should_fail_alloc_page+0xe7/0x130 [ 2884.407759][T13728] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 2884.413946][T13728] __alloc_pages+0x14e/0x4a0 [ 2884.418571][T13728] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 2884.425357][T13728] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2884.431523][T13728] ? policy_nodemask+0x311/0x480 [ 2884.436468][T13728] alloc_pages_mpol+0x258/0x5f0 [ 2884.441352][T13728] ? mempolicy_in_oom_domain+0x150/0x150 [ 2884.447014][T13728] ? find_held_lock+0x2d/0x110 [ 2884.451800][T13728] vma_alloc_folio+0xad/0x220 [ 2884.456508][T13728] ? alloc_migration_target_by_mpol+0x6b0/0x6b0 [ 2884.462758][T13728] ? find_held_lock+0x2d/0x110 [ 2884.467571][T13728] ? filemap_get_read_batch+0x9b0/0x9b0 [ 2884.473152][T13728] __handle_mm_fault+0x100b/0x3d60 [ 2884.478313][T13728] ? vm_iomap_memory+0x170/0x170 [ 2884.483289][T13728] handle_mm_fault+0x478/0xa00 [ 2884.488101][T13728] __get_user_pages+0x4b2/0x1480 [ 2884.493068][T13728] ? follow_page_mask+0xda0/0xda0 [ 2884.498095][T13728] ? down_read+0x470/0x470 [ 2884.502518][T13728] __gup_longterm_locked+0x278/0x2ab0 [ 2884.507913][T13728] ? get_user_pages_unlocked+0x770/0x770 [ 2884.513563][T13728] ? lock_sync+0x190/0x190 [ 2884.518001][T13728] pin_user_pages_remote+0xee/0x140 [ 2884.523220][T13728] ? __gup_longterm_locked+0x2ab0/0x2ab0 [ 2884.528882][T13728] process_vm_rw_core.constprop.0+0x43d/0xa10 [ 2884.534988][T13728] ? vmalloc_dump_obj+0x290/0x290 [ 2884.540030][T13728] process_vm_rw+0x2ff/0x360 [ 2884.544625][T13728] ? process_vm_rw_core.constprop.0+0xa10/0xa10 [ 2884.550889][T13728] ? ksys_write+0x214/0x250 [ 2884.555398][T13728] ? reacquire_held_locks+0x4b0/0x4b0 [ 2884.560785][T13728] ? vfs_write+0x14c/0xdf0 [ 2884.565237][T13728] ? bit_wait_io_timeout+0x160/0x160 [ 2884.570548][T13728] ? fput+0x30/0x1a0 [ 2884.574545][T13728] ? ksys_write+0x1a7/0x250 [ 2884.579056][T13728] __x64_sys_process_vm_writev+0xe2/0x1b0 [ 2884.584795][T13728] ? syscall_enter_from_user_mode+0x26/0x80 [ 2884.590695][T13728] do_syscall_64+0x3f/0x110 [ 2884.595217][T13728] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2884.601145][T13728] RIP: 0033:0x7f6fcfc7cae9 [ 2884.605588][T13728] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2884.625232][T13728] RSP: 002b:00007f6fd098a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2884.633657][T13728] RAX: ffffffffffffffda RBX: 00007f6fcfd9c050 RCX: 00007f6fcfc7cae9 [ 2884.641650][T13728] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000002cbf [ 2884.649656][T13728] RBP: 00007f6fd098a120 R08: 0000000000000001 R09: 0000000000000000 [ 2884.657635][T13728] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000002 [ 2884.665608][T13728] R13: 000000000000006e R14: 00007f6fcfd9c050 R15: 00007f6fcfebfa48 [ 2884.673632][T13728] [ 2884.799352][ T5183] usb 2-1: device descriptor read/all, error -71 [ 2884.805993][ T5183] usb usb2-port1: attempt power cycle 06:06:22 executing program 5: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r4, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3d9, 0x0) 06:06:22 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) 06:06:22 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) gettid() (async, rerun: 32) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) (async) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000200)=0x1000000000003e) clock_getres(0x0, &(0x7f0000000000)) (async) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f00000000c0)) (async) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000100), 0x4) (async, rerun: 64) clock_getres(0x0, &(0x7f0000000140)) (async, rerun: 64) shmdt(0x0) clock_gettime(0x0, &(0x7f0000000240)) (async) pselect6(0x40, &(0x7f0000000180)={0x2, 0x9, 0xfffffffffffffffc, 0x81}, &(0x7f0000000280)={0x0, 0x5, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x8000}, &(0x7f0000000200)={0x9, 0xffffffffffffffff, 0x0, 0x1}, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={[0x3]}, 0x8}) (async) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) (async) r3 = syz_clone3(&(0x7f0000000580)={0x100, 0x0, &(0x7f00000003c0), &(0x7f0000000400)=0x0, {0x24}, 0x0, 0x0, &(0x7f00000004c0)=""/68, &(0x7f0000000540)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x4}, 0x58) sched_rr_get_interval(r3, &(0x7f0000000600)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000640)='cgroup.procs\x00', 0x2, 0x0) (async) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) (async) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000406a0509022d0001010000800904001f020301000009210000000122000009058103000006ff000905020300"/63], 0x0) (async) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000e80)={0x24, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="002281000000085858830400f0486a9d9ea7ba05f79e668063de00000034c0bbd900000000000000004754a2288c22bc3c100d66000e000073f06d4d2234a670d288478ac6df0a23429d9b2758780d2d69d27d23db09007aec863bc5929966846be29cf6d20879acc0200a48a74cecd0ef1e8295c3e207f6f6f5c0e336a7280131bf33050d960cb3f0edb49e86d9b5a585cd"], &(0x7f0000000e40)={0x0, 0x21, 0x9, {0x9}}}, &(0x7f0000001140)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) pselect6(0x40, &(0x7f0000001180)={0x0, 0x0, 0x101}, 0x0, &(0x7f0000001200)={0x56, 0x0, 0x0, 0x81, 0x0, 0x0, 0x1}, &(0x7f0000001240), 0x0) (async) sched_rr_get_interval(r4, &(0x7f0000001340)) (async) syz_clone3(&(0x7f0000001600)={0x401000000, &(0x7f0000001380), &(0x7f00000013c0)=0x0, &(0x7f0000001400), {0x3d}, &(0x7f0000001440)=""/194, 0xc2, 0x0, &(0x7f00000015c0)=[0x0, 0x0], 0x2}, 0x58) sched_rr_get_interval(r5, 0x0) (async, rerun: 64) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000018c0), 0x2, 0x0) (rerun: 64) 06:06:22 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 56) 06:06:22 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f0000000040)={0x18, 0xfffffffffffffff5}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@bridge_setlink={0x3c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r5}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x4, 0x0, 0x1, {0x14, 0xa, 0x0, 0x1, [{0x8, 0x1}, {0x8, 0x2}]}}]}]}, 0x3c}}, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001fc0)={0x0, 0x0, 0x0}, &(0x7f0000002000)=0xc) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000002040), 0x200080, 0x0) statx(r1, &(0x7f0000002080)='./file0\x00', 0x1000, 0x7ff, &(0x7f00000020c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@bridge_setlink={0x3c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r11}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x4, 0x0, 0x1, {0x14, 0xa, 0x0, 0x1, [{0x8, 0x1}, {0x8, 0x2}]}}]}]}, 0x3c}}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000021c0)=0x0) r14 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r14, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@private0}}, &(0x7f0000000640)=0xe8) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000500)=@sr0, r15, 0x0) sendmmsg$unix(r1, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="7680952c6cffd9ae2cdfbc96fda0b40f7350491573a8149a67edfccd5dbfdd1ebd5e55f31eebe3b079502c329b7985ca220c5ed36977e7e55d299e8e30647c1bc7d3f9396dafb440b3dfb01606ffcc8692984bdc625c5b44e629cdeb20664d46d35a36fba1aeaf312b8e3c5f510ebd139030cf2346dacc7f82f208e91d8e202a46ffd881dff029518841c9ad1dddbc972c554a2299f52ab3018407b1f2f9a509dd758f2f9602ea252624a3619596856f7e2d395230da3881a7b5106155642dd595fc49d8ef3d35c195454cbcf1e3de37cf6dd11fe8fa10288c6dd2512953a8c0411f7c39eca7120bdc593e0f5e2d0b1cd0a724985bc58851076f5783bd2ece9d2d0bf7413866cb969c558fbc7405bb3051eb2936740d129b6947eed6ba83a26c301e56ff464cbc0922e0803d2b4a8f304e664c471a1f1cb71f80973b843bbb9367895660bcd65adda85f83ba844e3441d2abe5070434f33fca08272b64749d1f5c965e2609c8b4b65ca286ccb5788ba5a88fa74eb6e4712c86a02f39d994b340dc775a805833158ba34b662ae483623f6c20021abcca78e79a220f0b7a4e0d254379df859fed1de20cdb4a9387c4bd7a789779838d8e174adffbd96d1dcdcf5a921933c70130587759e77b9102ddc6c0c9a42cc1cdd8541112bd1e49c099b19875f4086f300404259e37acc2fa23a403e3bcb5473cf207de9642f02552b63c080e9e6a3db10b5f409940bdc396906ed953af502af3e29673885f124888bdb13b69931d64c9b8a00e7667bc2e3d6659bade3953cd26715efed668066f7e70b682677c4202dfc3e2a63c82b03e44a5daadbd9749a45f28e3655d7ae269625985abc267d85106dde21f1f879f25cc1884116fa6abd1ce1d631ba45870e38c92974904fd83c6399a95ea7cb2d3cbb35e5ed54c3b4bc4f8401973b441d9978e619f2a13665970ca700a2bc64a39160b46d4a0bd8f5641e2fb31030cdac76bf9d40a91d5ae921a313dc043d81c5b2a7bdae15f8b613d79a1ceb0db6962d1982022070dc0a1250bb2f72add52dc6b3c277c31deeec017a1655bb806aaa5e99ebb9f2d817972ec4c4a27182d033aa385bcd825ba3647f09a18ea8c07f6aaa21228c36504d59d88406828a32cb8d51b042c67f581a93ab2055edae02d7b49b9e582e6279bd95a733f74397c3b581578659d898d862a8c159ec76815e91593056e6d124207b9b5d8820a2bbe80bbec37576e1e89d797eb9d4c5e19784b670e5e59a96f85b42fc5a5f21d8b2786fc24969c2e1cc3e5af50459de55551b56a14ed57076ff2c55ea39c079b521dc1d238fc5de5c3a371d6f86d5da4bdb0d533ee769d8aa86531361bb55f0a96b18ea693a77ce4847ab3217dfc49ffa36946e4085534bf2f1abed7e6e295adb7595426d08db51c8361742dc3bce1d62adec4ff61e7e58a34a17557cd46b68f833dc5e2f5387062791aa519f2f67adb6172f729dca8c1538b33b7d46a0ef2cb7161e6ef723ca4efee842fa8025f5518bd39b6ead61fdc9dddff6a75b1aae20a63007e65270bb30926ea0b578fa2b0327c18137e483bca1bd9929b2594cac7a927a9af2ad2579bfedbec96b709dfcb64a09e47e0ce35c015205af36ab44f6704ff27eeb2233c9bc0022963ed8293cc637c8afeee0394150ce49e2a62f1532461c8fc8d371a5231fce11cb05da847fc2f7eb87a3cb5a15fb76a6f65d9ae4a733a86ddd05dd21443b60eb9d5d8e1ed847d6eb255e71676340f7bce7eb0a44335e3958de6f9b7d309931d0467f922aadad6c62a0e9600671c17bcad75da87338652e155a50f3878f32c5fd45f04ad0e28b2c18649a0a96132456d0bf053ab0d28b79ba54a148507249b34ebbe1911e4b0c17c4cca48c00a5cc6f7fb45d0cd0e114d439a8b9356124659cfbced2a8d53103ec36aaa244ec6c75336a8637e43dcecd84aaa1b4d21cef7a24194c8e2162fe2b1362e9f5acce47f5f64e0c2333f4948f408cd561dfcd261270aa1032d1cb9ae42e52da3386c09bf82e89e03bd61c20706dfb7e3136668319f996bc9b778901a8d77b211213d89c0433fe9d565352a5127eeff7467730c107e4142075077faa98db3d244debb2cbdb33cc3e99b7ed30a0fa5f4af7a7eb3a550d2617dcef542288b354af7fae60fda7886e3630a9629452df388fc46925e4ce0ba2d836d48e4d84403b7899486d6029b91910a7bba0d19bf634f2ddc472645b7bf202c6d4ff50ccb20e289536ab9c753b6f2c2a4fca791671ad0729bd57627e0286b29088cafe53b2b089aed7b3c9d7bfb4413bb7043e2937b884ca05dbe29416edcc15574bdb74e4a42d3f8f6e32183d5f86833f009fb53121d1e119670d46ee49388c4929562052ebfb72d3cd8703f277517b5d8ffc411426392ca442013e66cf3f5936011f4831ef3352c4e30840a3234915d813f3a423626dce478d9879c30d6a0df45018ff1c636df429c332131d834acbba0defea9b4a285681b57edc0dd9fb06b2e4a36879aa3e2b20e93bf8aeffdc36f221aa4f087c382124d180cbb9536400c519259c3e66ec4b1e8f115b74f1f0731b8bc1f5e21d3145ca8c98d11556769ec683e8b8772b93643537c35c0853dd1d1b085d9a15806db4026734de4581eece44ed67d589128677202f18ee38e9d46b03c1302c691d118d2656e68fd4f5a49c1ca99f5a31ac528f6018f03964c5e2f6d629c7552f3945659001a7f566f93127a17a0ca77a0dd66de1cf337cb692a6356d2a4e2a6a0b9530d4082313ffb15a0a408e93d877bec88e1910b73498ecf71396f4ce93e2d394157fa46d3c59efb16a78d63f07170d680a8c9f739eb7cf20adf298df698bf1c53db14fe5b2cd3dc62c8754e20e3d657daf171dad9d65ee05d122d3650163e7eb6481b403359f5b8b43cff3da71ba299e5bf9b0d5c4ba46a9b7636a2ba47c35bd638bef97057f957707e2c6149d33066b1cf89667cc9d43e02e7bf734e307b2133b4f7f9cc0721020cc713d9100fec5001c14f01ebd3c7bc28820e930471e08e6ffad04fd14811110b8f951457057e1a669ea96809fa8e5ad603cee35959f347a2701c4646c3b679cb7f626f6796347ce8c012c76d354832380e22a807e44812783c5543d35f379332f005b7df0eaf3aa7ce4addfe2c830fd011e8eb7cb910c88ce59fba4de2254f25e6f7279a33800132373a1ccaa9be072e07b188b7038e8ee716199d651d7f05b69d758c932457764a8fb4843d82a2ea913bc83a60624769221e1184c046c95474bd2321b96e0974aa05799f4a658e8716357b3a7fde417f7d5d9823aa8c22454ae078c694807ea39d736ce02a488ba612105c2a0afe75b5cecd2776275a6885aa3032f5fae8d35dd34248b783bb05e5722ee1b7c998d26e624ed95bbd800a07c87a146757ebe0a54057ece60721681843c34cb57379d992770f68367a5f61f8463f415a6acb13298bf5ec5207cb00884a7c043c11c09c10bc0e3360acc654351686e59f01990daf857b2ee32761fd7e436f03087e70e0c70d0d3cb2da4d87cdd09babde8f977e38be8e74a3509a4055bc88826c7a8ec8d65a3251b972393cd18145a77bff57e1f46d040a5169cf48e35b8941573333deab848a12e6c33997438e9a2405c1db4fd04ab32a85ce4f153b8ee40a0d60e7a84acba44c4d65e960a52ea3986cabefb4c1284655d10f277e2c25746d6e5e539cd17eb171c70dfd25ee6e885f7d0ee15650a740a8004c863bc697d867820b39678aa6ee827b107973b922726b89d36c31b72dfe5c36a762eba57eff1cceaf1a46b7ddfe515c3d0078d8966f259588a3df8b620075e5ff4e9d63df06b28f8ae6ec47dd82eeb95a29ce0d4f5d55154bfd109ed10c101e3473827cb72519ea11e1277caa56cb002b3873080ed9835a0dfd8b4666b77546ac69a85dd09f7e043782de20a9dbd4bb6607130cd41ff7ea02af0ab0976dfabfefbb6b74dfa3eeaf60486a5a31c248deb0a1637ad360412165e26e8579ce671013474868547786a1bed1a4dcb5ea6e7867f49e3b21850ba540e0e9db8206c016f624f18eacdf2b506f3a7e9cd841e4bbef8e2c35ca9a010192b6cae6613336ae4aafe8b72a37c2bfe0564a786fb9c4694616dbaf84bbfa21f115ad1190208ecde09f0089ee9dacea6714ebaf15c52107c2c9a73686f6c5b14e2ebde42a49df7ca5c9a68be9f39a2f94fe59ad5889779c3f68d4489411fbad785d44c089253a72745f0f413b30151fae1e6c72ecab68cd9e3e7b4bf6cc8d71d6f28667d4963dd2219450b7cc5a8ef6d4e7900255ceedefa50d61ef9c12f9e9cf4bab6a16962ddb87678f5d89d95c09aa9fbfc7bfcacea68643f082fbc543ef486df8f0d55fa56f3fae20a7ead768c09246aa7b92b681425e9a141803ff5515383d0a636a2a8dbf12a8495bc3a4f2853309b7440ed3bf334f33f573d3545b2ba7502feba0e3934e8a377187be0bf1353470614f717319fae7e1f377524e3c849b3026942c993e93b85c5269938ec85a089a5f79b6dc6df3b740442f2c870958da1bd613f66a97302e40f6ccaaf4642305ebff3c959b11ec7acab815144870a910ea4e01ed008ac4237a2f6c20fb9407e7dfe8ebaf0ca04bebe81831b3a7bae88bdfd5997149e10f2f8ae4f94a139b3d8b1ca9646625f27bd29a6ce627f1f0179ab372f203cab4ed3e437140f54fa283d0bc9289ed055087055674debbdeefa707ba3e90d4d0e9021a08c0a7a715af55d170e9a246a05fd1a7b3b62e806d3276bd1d8c103208fc2eab06f8e5b882048d97175db43e3fe5f4c625b51e7bbb8ef5343dba4eb10893afeebba8d517c203bc7412aa60aee8c144efeeb245e8002c5717a2f6da1ed8832c41304947eed8effb563f0cdb7e9a11a687579774ef9f34093bf275e17f77f26317a8cff00f58d8799258b8af55da2586be5b76c066acf5f7d9d0d2606fcb4a5b9c6282e24cd70751ff5a63bdbab269d1dafe29b3271a1c861c95f1780b3dda81eaec7107cf609221fd778feb5f9250a4d9d7c06aef0fc4ea6b4901d4ad45a19845792656d9c1208415f460cb7c7a67f355138b0552f1fd1ae1147d1baf2777c4e71497b00fd0fe9dc5732d2b3c3c9d88409553b6743586854857d8be3884728165f76a82890f64065e4d20e1df20f7a23b0cf695f7b16cd3d84382734b6b1b6d5c56823ef8d7c43895f4057a187faf19f2de3da39a5bb14c296c0280bf535801f210959c1c50c1bf9dc21e89909f1ae2c756494d4743ed283860a277060c59244ed1b25b18e2246713f23683b53faa42960d1ba3446a847fcac1445893e829b0bd30e234cc58e12a673a1f43d489c5313d8fd9d431895ca38125ef8f57f945222d2c67bd42f07425207c0ea754793191c22e1b9e8fd9b86c3dd48a8556f6c27fe5d0a36b5f5432cad66a85966fbf321b62fd8f3b9e4a6b316f64f54ecc073e8b6e847fac01e7f8e4facaff2c28507263ac00454a58c9b98a7c9b0c9e741e4bcd12258f9eca0f7211a2f2bb3ee32bff451bd2de91737926feb9d04024ac930d36e5ad4debe599353c906acc6f789bf320c3d0353d1de77ecbf3d484d94a0281c922b386e5b849b082bc130e49211f24ffb4a83e15094ec77edd2ad351918dcdc6e9bf3b01cf4bd1853f9514e1b6ec00204904f02d16a7d859a5cd41e78c49ee98fd3fe232654826f8917522f241542c199e6f75ca35f9b0f9cc5e153d1c58b5076287d7c8ac2084b2e28e016e2a699fcd79c5a0575c76f9af17965d8e1e47dd4939911f2af7", 0x1000}], 0x1, &(0x7f0000000140)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01}}}], 0x20, 0x4040}}, {{&(0x7f0000001240)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000001540)=[{&(0x7f00000012c0)="8a8d5473a824f26e0e890a15bd89fb92bff00511b62077815eb9c5b16274669f2e5dce9b86c9551e860dfdc02565fcd68b93824727980611c47f1852bc99d4bbfcabc0b22bef9d28aa3858427aa6", 0x4e}, {&(0x7f0000001340)="f59767d51d25519ab221161dd4cc9e3a7493b438f77d1798a15be2f03c8e97b0e54e2ad72e6b480da026120060a9ee39e6d2e4df94cfb64fb67f7e48fd2a2a16dd11ce36130c1b6e07de4ac92f059975a0", 0x51}, {&(0x7f00000013c0)="15523efe0bcbfff5a91c6559223db8169bfa2cc86dd7551cf1501517df21bedb394e479d95f23ba19ec05fda9ee7b2ac118bf74de92fefd5b043fb5e0b0dc7e71f40dbb57b91b52b82062eca0e9943", 0x4f}, {&(0x7f00000001c0)="c87289361337a3e892f75c85c9f659daad9790d1d2d76bb0d703fbef80d98e03be", 0x21}, {&(0x7f0000001440)="e563c45d4d1b076878776c498d05b5f5a11da5ea76f86915d76baa9e7127ed87624ef6a65ed530b6d54cc895d32cdab46bd8d57c063c58d0d95cc323cf49c0c18d7184916d758e9867197a492ddce6ce5f29aa9a4cfc400b582f1fc4772ba555c76d32148bbb8a3e90adb533cbf6d782336288eb0dbdc40f01c0dc01f0eec01740b298dcbfef7078a889eb93c0a6c2bb58a87bb106e7331c1a0ce9a236d0a19ba7ac69f6f7f5db13e1e61af695d7dd97e067ce4092e4bd96a5cd9f42b150d538b641acb23d0cdd79eab7991b373423ddb5bfbca077", 0xd5}], 0x5, &(0x7f0000001740)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0x58, 0x24004904}}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f00000017c0)="fee83d24096c696db0a0a985eff3e51c1271359574fa188f1232df91aa174862bb8f33bd5d236d27069ac3dea46b9d36d2ab2f091de9a9489b27752a16d485a14a2bf2aa77d56489be50e729fbfb8a39d722d856bb93c1a036f944ad930856ba3a8f4d645320fb25d14c5299771b975fdf598c2ea1629d43c167f891ea4b88d2305d60578f77a226972f9ba1d98386f3a3aa5f5f7867f715a9dde4f1ef05f9705264bfc504aead", 0xa7}, {&(0x7f0000001880)="c004d7bbf9a1a85a20027293449d53c6123e5510bb465147565a08839e2d9720375ed529335521a69011e9b6f88c638fe7df18fa11637e02feab7d5958471d0d7db238c0df948a067361fd4c6d0fdd6e365c44d8a9d2bb96aad752697d85009ae25f546b293f9a0af7da22825e1d3f48886334c4", 0x74}], 0x2, 0x0, 0x0, 0x8000}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000001940)="a3bd92a8911008ce4124c874e2b2288dd388bb3ec34989302ce55d12114b099046b55d50c26b0b28add82833690646eb486001022fe611f9e9daec37a540553fd8d4edb9b59ebe3d2f0068118a52a18370de", 0x52}], 0x1, &(0x7f0000001a00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}], 0x20, 0x20000084}}, {{&(0x7f0000001a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001b80)=[{&(0x7f0000001ac0)="68ae4e90b0f595611b222dcadb55a1bc4325c26e0c2595e62350245681c2c7563ae9324c3c4a01128e844a1dbe604d7ab0e12b9a5ff21de89d2316f1eed433fbab4a9052db4bd629cee47fcb8ea1ec266c6044ad3003e25404007c9a9717f243ad06934893c6b32b68e3bd0ae1aa93b24471235c9aa1d38175e44f33d8c2caadae6cf23569eb8c787e86845d0a4644b1ada55dc6fe2f", 0x96}], 0x1, &(0x7f0000001c40)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r1, r2]}}], 0x28, 0x5}}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000001c80)="189c758e431b9946e603b71a42dd3acf52ec135a5c84ce7bcd6b969f99b999c5563804b9c782dc10239076b989a0c9f76f82f82ba75b17710924a2ea592ec26e5a2e8add9252ce171ddcb8fe20420bdf9fa2d73034dd", 0x56}], 0x1}}, {{&(0x7f0000001d40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001f40)=[{&(0x7f0000001dc0)="65fbe3f0fe97f31da5d77aa3d8ad549ee7dddd09c4ed1f038943c83e5e30ed70818b4966db18c667a84267176300bab911d828e6696c29af2c9acb550763fc9aea015bc146adb3ee187f794ff7e4f2b668677c44825c58d7d72c602975", 0x5d}, {&(0x7f0000001e40)="a282007400e51c2e9b6a53404e8b57aea3d118636f7429cd0afb50793c6a2554b40cd0dc2d749b1decf237f79d451de8f8e075f5523ac058c4f7e2615fb4cfb84522380b9e2eebabb6a93e730e9d5541d6fb4f080602e7dbda3c374432f4fbf13d23ddd50253a639412f430453756d45d3cec01b1c51b5570127b2632d83b61574736be23e8052265e6d6d17ef95f5d32e99068b65af5f200b1b714f01a19fa36fbd9fcaacd0de97af93a5563f6899fdc698986d220d853c9419dbedf6d7438995deb766d2bb10451215abc729984c4928da4e07c6d164cd2467a7e8e3fa08342a2b94aa2ad318eb13f5424f9ee06e9f16f9376ae0", 0xf5}], 0x2, &(0x7f0000002200)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r3, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [r3, r3, r2, 0xffffffffffffffff, 0xffffffffffffffff, r2, r6]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, r7}}}, @rights={{0x18, 0x1, 0x1, [r1, r8]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r9, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [r3, r12]}}, @cred={{0x1c, 0x1, 0x2, {r13, r15, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x118, 0x20008020}}], 0x7, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) r16 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x400202, 0x0) fcntl$setown(r16, 0x8, 0x0) tkill(0x0, 0x14) 06:06:22 executing program 5: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r4, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3da, 0x0) 06:06:22 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x3) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) [ 2886.456543][T13746] FAULT_INJECTION: forcing a failure. [ 2886.456543][T13746] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2886.474191][T13746] CPU: 1 PID: 13746 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 2886.484315][T13746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2886.494409][T13746] Call Trace: [ 2886.497716][T13746] [ 2886.500667][T13746] dump_stack_lvl+0x125/0x1b0 [ 2886.505371][T13746] should_fail_ex+0x496/0x5b0 [ 2886.510343][T13746] ? fs_reclaim_acquire+0xb0/0x150 [ 2886.515493][T13746] __should_fail_alloc_page+0xe7/0x130 [ 2886.521000][T13746] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 2886.527194][T13746] __alloc_pages+0x14e/0x4a0 [ 2886.531827][T13746] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 2886.538620][T13746] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2886.544531][T13746] ? policy_nodemask+0x311/0x480 [ 2886.549479][T13746] alloc_pages_mpol+0x258/0x5f0 [ 2886.554342][T13746] ? mempolicy_in_oom_domain+0x150/0x150 [ 2886.559992][T13746] ? find_held_lock+0x2d/0x110 [ 2886.564777][T13746] vma_alloc_folio+0xad/0x220 [ 2886.569817][T13746] ? alloc_migration_target_by_mpol+0x6b0/0x6b0 [ 2886.576164][T13746] ? find_held_lock+0x2d/0x110 [ 2886.580980][T13746] ? filemap_get_read_batch+0x9b0/0x9b0 [ 2886.586661][T13746] __handle_mm_fault+0x100b/0x3d60 [ 2886.591825][T13746] ? vm_iomap_memory+0x170/0x170 [ 2886.596808][T13746] handle_mm_fault+0x478/0xa00 [ 2886.601601][T13746] __get_user_pages+0x4b2/0x1480 [ 2886.606556][T13746] ? follow_page_mask+0xda0/0xda0 [ 2886.611591][T13746] ? down_read+0x470/0x470 [ 2886.616046][T13746] __gup_longterm_locked+0x278/0x2ab0 [ 2886.621484][T13746] ? get_user_pages_unlocked+0x770/0x770 [ 2886.627134][T13746] ? lock_sync+0x190/0x190 [ 2886.631584][T13746] pin_user_pages_remote+0xee/0x140 [ 2886.636819][T13746] ? __gup_longterm_locked+0x2ab0/0x2ab0 [ 2886.642511][T13746] process_vm_rw_core.constprop.0+0x43d/0xa10 [ 2886.648606][T13746] ? vmalloc_dump_obj+0x290/0x290 [ 2886.653666][T13746] process_vm_rw+0x2ff/0x360 [ 2886.658274][T13746] ? process_vm_rw_core.constprop.0+0xa10/0xa10 [ 2886.664527][T13746] ? ksys_write+0x214/0x250 [ 2886.669047][T13746] ? reacquire_held_locks+0x4b0/0x4b0 [ 2886.674444][T13746] ? vfs_write+0x14c/0xdf0 [ 2886.678882][T13746] ? bit_wait_io_timeout+0x160/0x160 [ 2886.684190][T13746] ? fput+0x30/0x1a0 [ 2886.688108][T13746] ? ksys_write+0x1a7/0x250 [ 2886.692630][T13746] __x64_sys_process_vm_writev+0xe2/0x1b0 [ 2886.698368][T13746] ? syscall_enter_from_user_mode+0x26/0x80 [ 2886.704279][T13746] do_syscall_64+0x3f/0x110 [ 2886.708801][T13746] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2886.715924][T13746] RIP: 0033:0x7f6fcfc7cae9 [ 2886.720349][T13746] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2886.739972][T13746] RSP: 002b:00007f6fd098a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2886.748396][T13746] RAX: ffffffffffffffda RBX: 00007f6fcfd9c050 RCX: 00007f6fcfc7cae9 [ 2886.756374][T13746] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000002cc2 [ 2886.764350][T13746] RBP: 00007f6fd098a120 R08: 0000000000000001 R09: 0000000000000000 [ 2886.772337][T13746] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000002 [ 2886.780323][T13746] R13: 000000000000006e R14: 00007f6fcfd9c050 R15: 00007f6fcfebfa48 [ 2886.788320][T13746] 06:06:23 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 57) [ 2887.178679][T13760] FAULT_INJECTION: forcing a failure. [ 2887.178679][T13760] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2887.199984][T13760] CPU: 1 PID: 13760 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 2887.210094][T13760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2887.220329][T13760] Call Trace: [ 2887.223608][T13760] [ 2887.226547][T13760] dump_stack_lvl+0x125/0x1b0 [ 2887.231253][T13760] should_fail_ex+0x496/0x5b0 [ 2887.235979][T13760] ? fs_reclaim_acquire+0xb0/0x150 [ 2887.241102][T13760] __should_fail_alloc_page+0xe7/0x130 [ 2887.246588][T13760] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 2887.252800][T13760] __alloc_pages+0x14e/0x4a0 [ 2887.257428][T13760] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 2887.264249][T13760] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2887.270170][T13760] ? policy_nodemask+0x311/0x480 [ 2887.275108][T13760] alloc_pages_mpol+0x258/0x5f0 [ 2887.279979][T13760] ? mempolicy_in_oom_domain+0x150/0x150 [ 2887.285650][T13760] ? find_held_lock+0x2d/0x110 [ 2887.290433][T13760] vma_alloc_folio+0xad/0x220 [ 2887.295109][T13760] ? alloc_migration_target_by_mpol+0x6b0/0x6b0 [ 2887.301365][T13760] ? find_held_lock+0x2d/0x110 [ 2887.306199][T13760] ? filemap_get_read_batch+0x9b0/0x9b0 [ 2887.311784][T13760] __handle_mm_fault+0x100b/0x3d60 [ 2887.317434][T13760] ? vm_iomap_memory+0x170/0x170 [ 2887.322391][T13760] handle_mm_fault+0x478/0xa00 [ 2887.327172][T13760] __get_user_pages+0x4b2/0x1480 [ 2887.332122][T13760] ? follow_page_mask+0xda0/0xda0 [ 2887.337191][T13760] __gup_longterm_locked+0x278/0x2ab0 [ 2887.342599][T13760] ? get_user_pages_unlocked+0x770/0x770 [ 2887.348239][T13760] ? lock_sync+0x190/0x190 [ 2887.352668][T13760] pin_user_pages_remote+0xee/0x140 [ 2887.357875][T13760] ? __gup_longterm_locked+0x2ab0/0x2ab0 [ 2887.363517][T13760] process_vm_rw_core.constprop.0+0x43d/0xa10 [ 2887.369595][T13760] ? vmalloc_dump_obj+0x290/0x290 [ 2887.374634][T13760] process_vm_rw+0x2ff/0x360 [ 2887.379232][T13760] ? process_vm_rw_core.constprop.0+0xa10/0xa10 [ 2887.385480][T13760] ? ksys_write+0x214/0x250 [ 2887.390015][T13760] ? reacquire_held_locks+0x4b0/0x4b0 [ 2887.395402][T13760] ? vfs_write+0x14c/0xdf0 [ 2887.399831][T13760] ? bit_wait_io_timeout+0x160/0x160 [ 2887.405125][T13760] ? fput+0x30/0x1a0 [ 2887.409031][T13760] ? ksys_write+0x1a7/0x250 [ 2887.413539][T13760] __x64_sys_process_vm_writev+0xe2/0x1b0 [ 2887.419274][T13760] ? syscall_enter_from_user_mode+0x26/0x80 [ 2887.425178][T13760] do_syscall_64+0x3f/0x110 [ 2887.429690][T13760] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2887.435596][T13760] RIP: 0033:0x7f6fcfc7cae9 [ 2887.440025][T13760] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2887.459635][T13760] RSP: 002b:00007f6fd098a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2887.468063][T13760] RAX: ffffffffffffffda RBX: 00007f6fcfd9c050 RCX: 00007f6fcfc7cae9 [ 2887.477177][T13760] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000002cc5 [ 2887.485146][T13760] RBP: 00007f6fd098a120 R08: 0000000000000001 R09: 0000000000000000 [ 2887.493121][T13760] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000002 [ 2887.501086][T13760] R13: 000000000000006e R14: 00007f6fcfd9c050 R15: 00007f6fcfebfa48 [ 2887.509071][T13760] 06:06:24 executing program 5: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r4, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3db, 0x0) 06:06:24 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async, rerun: 64) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x1) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) 06:06:24 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f0000000040)={0x18, 0xfffffffffffffff5}, 0x18) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) (async) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) (async) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@bridge_setlink={0x3c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r5}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x4, 0x0, 0x1, {0x14, 0xa, 0x0, 0x1, [{0x8, 0x1}, {0x8, 0x2}]}}]}]}, 0x3c}}, 0x0) (async) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001fc0)={0x0, 0x0, 0x0}, &(0x7f0000002000)=0xc) (async) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000002040), 0x200080, 0x0) (async) statx(r1, &(0x7f0000002080)='./file0\x00', 0x1000, 0x7ff, &(0x7f00000020c0)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@bridge_setlink={0x3c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r11}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x4, 0x0, 0x1, {0x14, 0xa, 0x0, 0x1, [{0x8, 0x1}, {0x8, 0x2}]}}]}]}, 0x3c}}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000021c0)=0x0) r14 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r14, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@private0}}, &(0x7f0000000640)=0xe8) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000500)=@sr0, r15, 0x0) sendmmsg$unix(r1, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="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", 0x1000}], 0x1, &(0x7f0000000140)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01}}}], 0x20, 0x4040}}, {{&(0x7f0000001240)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000001540)=[{&(0x7f00000012c0)="8a8d5473a824f26e0e890a15bd89fb92bff00511b62077815eb9c5b16274669f2e5dce9b86c9551e860dfdc02565fcd68b93824727980611c47f1852bc99d4bbfcabc0b22bef9d28aa3858427aa6", 0x4e}, {&(0x7f0000001340)="f59767d51d25519ab221161dd4cc9e3a7493b438f77d1798a15be2f03c8e97b0e54e2ad72e6b480da026120060a9ee39e6d2e4df94cfb64fb67f7e48fd2a2a16dd11ce36130c1b6e07de4ac92f059975a0", 0x51}, {&(0x7f00000013c0)="15523efe0bcbfff5a91c6559223db8169bfa2cc86dd7551cf1501517df21bedb394e479d95f23ba19ec05fda9ee7b2ac118bf74de92fefd5b043fb5e0b0dc7e71f40dbb57b91b52b82062eca0e9943", 0x4f}, {&(0x7f00000001c0)="c87289361337a3e892f75c85c9f659daad9790d1d2d76bb0d703fbef80d98e03be", 0x21}, {&(0x7f0000001440)="e563c45d4d1b076878776c498d05b5f5a11da5ea76f86915d76baa9e7127ed87624ef6a65ed530b6d54cc895d32cdab46bd8d57c063c58d0d95cc323cf49c0c18d7184916d758e9867197a492ddce6ce5f29aa9a4cfc400b582f1fc4772ba555c76d32148bbb8a3e90adb533cbf6d782336288eb0dbdc40f01c0dc01f0eec01740b298dcbfef7078a889eb93c0a6c2bb58a87bb106e7331c1a0ce9a236d0a19ba7ac69f6f7f5db13e1e61af695d7dd97e067ce4092e4bd96a5cd9f42b150d538b641acb23d0cdd79eab7991b373423ddb5bfbca077", 0xd5}], 0x5, &(0x7f0000001740)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0x58, 0x24004904}}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f00000017c0)="fee83d24096c696db0a0a985eff3e51c1271359574fa188f1232df91aa174862bb8f33bd5d236d27069ac3dea46b9d36d2ab2f091de9a9489b27752a16d485a14a2bf2aa77d56489be50e729fbfb8a39d722d856bb93c1a036f944ad930856ba3a8f4d645320fb25d14c5299771b975fdf598c2ea1629d43c167f891ea4b88d2305d60578f77a226972f9ba1d98386f3a3aa5f5f7867f715a9dde4f1ef05f9705264bfc504aead", 0xa7}, {&(0x7f0000001880)="c004d7bbf9a1a85a20027293449d53c6123e5510bb465147565a08839e2d9720375ed529335521a69011e9b6f88c638fe7df18fa11637e02feab7d5958471d0d7db238c0df948a067361fd4c6d0fdd6e365c44d8a9d2bb96aad752697d85009ae25f546b293f9a0af7da22825e1d3f48886334c4", 0x74}], 0x2, 0x0, 0x0, 0x8000}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000001940)="a3bd92a8911008ce4124c874e2b2288dd388bb3ec34989302ce55d12114b099046b55d50c26b0b28add82833690646eb486001022fe611f9e9daec37a540553fd8d4edb9b59ebe3d2f0068118a52a18370de", 0x52}], 0x1, &(0x7f0000001a00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}], 0x20, 0x20000084}}, {{&(0x7f0000001a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001b80)=[{&(0x7f0000001ac0)="68ae4e90b0f595611b222dcadb55a1bc4325c26e0c2595e62350245681c2c7563ae9324c3c4a01128e844a1dbe604d7ab0e12b9a5ff21de89d2316f1eed433fbab4a9052db4bd629cee47fcb8ea1ec266c6044ad3003e25404007c9a9717f243ad06934893c6b32b68e3bd0ae1aa93b24471235c9aa1d38175e44f33d8c2caadae6cf23569eb8c787e86845d0a4644b1ada55dc6fe2f", 0x96}], 0x1, &(0x7f0000001c40)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r1, r2]}}], 0x28, 0x5}}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000001c80)="189c758e431b9946e603b71a42dd3acf52ec135a5c84ce7bcd6b969f99b999c5563804b9c782dc10239076b989a0c9f76f82f82ba75b17710924a2ea592ec26e5a2e8add9252ce171ddcb8fe20420bdf9fa2d73034dd", 0x56}], 0x1}}, {{&(0x7f0000001d40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001f40)=[{&(0x7f0000001dc0)="65fbe3f0fe97f31da5d77aa3d8ad549ee7dddd09c4ed1f038943c83e5e30ed70818b4966db18c667a84267176300bab911d828e6696c29af2c9acb550763fc9aea015bc146adb3ee187f794ff7e4f2b668677c44825c58d7d72c602975", 0x5d}, {&(0x7f0000001e40)="a282007400e51c2e9b6a53404e8b57aea3d118636f7429cd0afb50793c6a2554b40cd0dc2d749b1decf237f79d451de8f8e075f5523ac058c4f7e2615fb4cfb84522380b9e2eebabb6a93e730e9d5541d6fb4f080602e7dbda3c374432f4fbf13d23ddd50253a639412f430453756d45d3cec01b1c51b5570127b2632d83b61574736be23e8052265e6d6d17ef95f5d32e99068b65af5f200b1b714f01a19fa36fbd9fcaacd0de97af93a5563f6899fdc698986d220d853c9419dbedf6d7438995deb766d2bb10451215abc729984c4928da4e07c6d164cd2467a7e8e3fa08342a2b94aa2ad318eb13f5424f9ee06e9f16f9376ae0", 0xf5}], 0x2, &(0x7f0000002200)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r3, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [r3, r3, r2, 0xffffffffffffffff, 0xffffffffffffffff, r2, r6]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, r7}}}, @rights={{0x18, 0x1, 0x1, [r1, r8]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r9, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [r3, r12]}}, @cred={{0x1c, 0x1, 0x2, {r13, r15, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x118, 0x20008020}}], 0x7, 0x0) (async) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) (async, rerun: 64) fcntl$setsig(r2, 0xa, 0x12) (async, rerun: 64) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) (async) dup2(r2, r3) (async, rerun: 64) r16 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x400202, 0x0) (rerun: 64) fcntl$setown(r16, 0x8, 0x0) (async) tkill(0x0, 0x14) 06:06:24 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 58) 06:06:24 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f0000000040)={0x18, 0xfffffffffffffff5}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) (async) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) (async) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@bridge_setlink={0x3c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r5}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x4, 0x0, 0x1, {0x14, 0xa, 0x0, 0x1, [{0x8, 0x1}, {0x8, 0x2}]}}]}]}, 0x3c}}, 0x0) (async) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001fc0)={0x0, 0x0, 0x0}, &(0x7f0000002000)=0xc) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000002040), 0x200080, 0x0) (async) statx(r1, &(0x7f0000002080)='./file0\x00', 0x1000, 0x7ff, &(0x7f00000020c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) (async) r12 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@bridge_setlink={0x3c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r11}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x4, 0x0, 0x1, {0x14, 0xa, 0x0, 0x1, [{0x8, 0x1}, {0x8, 0x2}]}}]}]}, 0x3c}}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000021c0)=0x0) (async) r14 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r14, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@private0}}, &(0x7f0000000640)=0xe8) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000500)=@sr0, r15, 0x0) sendmmsg$unix(r1, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="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", 0x1000}], 0x1, &(0x7f0000000140)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01}}}], 0x20, 0x4040}}, {{&(0x7f0000001240)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000001540)=[{&(0x7f00000012c0)="8a8d5473a824f26e0e890a15bd89fb92bff00511b62077815eb9c5b16274669f2e5dce9b86c9551e860dfdc02565fcd68b93824727980611c47f1852bc99d4bbfcabc0b22bef9d28aa3858427aa6", 0x4e}, {&(0x7f0000001340)="f59767d51d25519ab221161dd4cc9e3a7493b438f77d1798a15be2f03c8e97b0e54e2ad72e6b480da026120060a9ee39e6d2e4df94cfb64fb67f7e48fd2a2a16dd11ce36130c1b6e07de4ac92f059975a0", 0x51}, {&(0x7f00000013c0)="15523efe0bcbfff5a91c6559223db8169bfa2cc86dd7551cf1501517df21bedb394e479d95f23ba19ec05fda9ee7b2ac118bf74de92fefd5b043fb5e0b0dc7e71f40dbb57b91b52b82062eca0e9943", 0x4f}, {&(0x7f00000001c0)="c87289361337a3e892f75c85c9f659daad9790d1d2d76bb0d703fbef80d98e03be", 0x21}, {&(0x7f0000001440)="e563c45d4d1b076878776c498d05b5f5a11da5ea76f86915d76baa9e7127ed87624ef6a65ed530b6d54cc895d32cdab46bd8d57c063c58d0d95cc323cf49c0c18d7184916d758e9867197a492ddce6ce5f29aa9a4cfc400b582f1fc4772ba555c76d32148bbb8a3e90adb533cbf6d782336288eb0dbdc40f01c0dc01f0eec01740b298dcbfef7078a889eb93c0a6c2bb58a87bb106e7331c1a0ce9a236d0a19ba7ac69f6f7f5db13e1e61af695d7dd97e067ce4092e4bd96a5cd9f42b150d538b641acb23d0cdd79eab7991b373423ddb5bfbca077", 0xd5}], 0x5, &(0x7f0000001740)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0x58, 0x24004904}}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f00000017c0)="fee83d24096c696db0a0a985eff3e51c1271359574fa188f1232df91aa174862bb8f33bd5d236d27069ac3dea46b9d36d2ab2f091de9a9489b27752a16d485a14a2bf2aa77d56489be50e729fbfb8a39d722d856bb93c1a036f944ad930856ba3a8f4d645320fb25d14c5299771b975fdf598c2ea1629d43c167f891ea4b88d2305d60578f77a226972f9ba1d98386f3a3aa5f5f7867f715a9dde4f1ef05f9705264bfc504aead", 0xa7}, {&(0x7f0000001880)="c004d7bbf9a1a85a20027293449d53c6123e5510bb465147565a08839e2d9720375ed529335521a69011e9b6f88c638fe7df18fa11637e02feab7d5958471d0d7db238c0df948a067361fd4c6d0fdd6e365c44d8a9d2bb96aad752697d85009ae25f546b293f9a0af7da22825e1d3f48886334c4", 0x74}], 0x2, 0x0, 0x0, 0x8000}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000001940)="a3bd92a8911008ce4124c874e2b2288dd388bb3ec34989302ce55d12114b099046b55d50c26b0b28add82833690646eb486001022fe611f9e9daec37a540553fd8d4edb9b59ebe3d2f0068118a52a18370de", 0x52}], 0x1, &(0x7f0000001a00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}], 0x20, 0x20000084}}, {{&(0x7f0000001a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001b80)=[{&(0x7f0000001ac0)="68ae4e90b0f595611b222dcadb55a1bc4325c26e0c2595e62350245681c2c7563ae9324c3c4a01128e844a1dbe604d7ab0e12b9a5ff21de89d2316f1eed433fbab4a9052db4bd629cee47fcb8ea1ec266c6044ad3003e25404007c9a9717f243ad06934893c6b32b68e3bd0ae1aa93b24471235c9aa1d38175e44f33d8c2caadae6cf23569eb8c787e86845d0a4644b1ada55dc6fe2f", 0x96}], 0x1, &(0x7f0000001c40)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r1, r2]}}], 0x28, 0x5}}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000001c80)="189c758e431b9946e603b71a42dd3acf52ec135a5c84ce7bcd6b969f99b999c5563804b9c782dc10239076b989a0c9f76f82f82ba75b17710924a2ea592ec26e5a2e8add9252ce171ddcb8fe20420bdf9fa2d73034dd", 0x56}], 0x1}}, {{&(0x7f0000001d40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001f40)=[{&(0x7f0000001dc0)="65fbe3f0fe97f31da5d77aa3d8ad549ee7dddd09c4ed1f038943c83e5e30ed70818b4966db18c667a84267176300bab911d828e6696c29af2c9acb550763fc9aea015bc146adb3ee187f794ff7e4f2b668677c44825c58d7d72c602975", 0x5d}, {&(0x7f0000001e40)="a282007400e51c2e9b6a53404e8b57aea3d118636f7429cd0afb50793c6a2554b40cd0dc2d749b1decf237f79d451de8f8e075f5523ac058c4f7e2615fb4cfb84522380b9e2eebabb6a93e730e9d5541d6fb4f080602e7dbda3c374432f4fbf13d23ddd50253a639412f430453756d45d3cec01b1c51b5570127b2632d83b61574736be23e8052265e6d6d17ef95f5d32e99068b65af5f200b1b714f01a19fa36fbd9fcaacd0de97af93a5563f6899fdc698986d220d853c9419dbedf6d7438995deb766d2bb10451215abc729984c4928da4e07c6d164cd2467a7e8e3fa08342a2b94aa2ad318eb13f5424f9ee06e9f16f9376ae0", 0xf5}], 0x2, &(0x7f0000002200)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r3, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [r3, r3, r2, 0xffffffffffffffff, 0xffffffffffffffff, r2, r6]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, r7}}}, @rights={{0x18, 0x1, 0x1, [r1, r8]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r9, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [r3, r12]}}, @cred={{0x1c, 0x1, 0x2, {r13, r15, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x118, 0x20008020}}], 0x7, 0x0) (async) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) (async) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) (async) dup2(r2, r3) (async) r16 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x400202, 0x0) fcntl$setown(r16, 0x8, 0x0) (async) tkill(0x0, 0x14) [ 2887.889876][T13776] FAULT_INJECTION: forcing a failure. [ 2887.889876][T13776] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2887.910061][T13776] CPU: 1 PID: 13776 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 2887.920211][T13776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2887.930304][T13776] Call Trace: [ 2887.933598][T13776] [ 2887.936547][T13776] dump_stack_lvl+0x125/0x1b0 [ 2887.941449][T13776] should_fail_ex+0x496/0x5b0 [ 2887.946179][T13776] ? fs_reclaim_acquire+0xb0/0x150 [ 2887.951333][T13776] __should_fail_alloc_page+0xe7/0x130 [ 2887.956811][T13776] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 2887.962983][T13776] __alloc_pages+0x14e/0x4a0 [ 2887.967600][T13776] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 2887.974405][T13776] ? print_usage_bug.part.0+0x670/0x670 [ 2887.980014][T13776] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2887.985938][T13776] ? policy_nodemask+0x311/0x480 [ 2887.990899][T13776] alloc_pages_mpol+0x258/0x5f0 [ 2887.995799][T13776] ? mempolicy_in_oom_domain+0x150/0x150 [ 2888.001481][T13776] ? find_held_lock+0x2d/0x110 [ 2888.006297][T13776] vma_alloc_folio+0xad/0x220 [ 2888.011013][T13776] ? alloc_migration_target_by_mpol+0x6b0/0x6b0 [ 2888.017303][T13776] ? __handle_mm_fault+0xa09/0x3d60 [ 2888.022640][T13776] ? filemap_get_read_batch+0x9b0/0x9b0 [ 2888.028236][T13776] __handle_mm_fault+0x100b/0x3d60 [ 2888.033380][T13776] ? vm_iomap_memory+0x170/0x170 [ 2888.038366][T13776] handle_mm_fault+0x478/0xa00 [ 2888.043159][T13776] __get_user_pages+0x4b2/0x1480 [ 2888.048109][T13776] ? follow_page_mask+0xda0/0xda0 [ 2888.053166][T13776] __gup_longterm_locked+0x278/0x2ab0 [ 2888.058575][T13776] ? get_user_pages_unlocked+0x770/0x770 [ 2888.064259][T13776] ? lock_sync+0x190/0x190 [ 2888.068736][T13776] pin_user_pages_remote+0xee/0x140 [ 2888.073968][T13776] ? __gup_longterm_locked+0x2ab0/0x2ab0 [ 2888.079612][T13776] process_vm_rw_core.constprop.0+0x43d/0xa10 [ 2888.085713][T13776] ? vmalloc_dump_obj+0x290/0x290 [ 2888.090781][T13776] process_vm_rw+0x2ff/0x360 [ 2888.095378][T13776] ? process_vm_rw_core.constprop.0+0xa10/0xa10 [ 2888.101629][T13776] ? _raw_spin_lock_irqsave+0x42/0x50 [ 2888.107016][T13776] ? lock_acquire+0x1ae/0x510 [ 2888.111741][T13776] ? handle_edge_irq+0x40a/0xcf0 [ 2888.116707][T13776] __x64_sys_process_vm_writev+0xe2/0x1b0 [ 2888.122456][T13776] ? syscall_enter_from_user_mode+0x26/0x80 [ 2888.128355][T13776] do_syscall_64+0x3f/0x110 [ 2888.132893][T13776] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2888.138819][T13776] RIP: 0033:0x7f6fcfc7cae9 [ 2888.143246][T13776] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2888.162878][T13776] RSP: 002b:00007f6fd098a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2888.171309][T13776] RAX: ffffffffffffffda RBX: 00007f6fcfd9c050 RCX: 00007f6fcfc7cae9 [ 2888.179304][T13776] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000002cc8 [ 2888.187309][T13776] RBP: 00007f6fd098a120 R08: 0000000000000001 R09: 0000000000000000 [ 2888.195315][T13776] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000002 [ 2888.203304][T13776] R13: 000000000000006e R14: 00007f6fcfd9c050 R15: 00007f6fcfebfa48 [ 2888.211291][T13776] 06:06:24 executing program 5: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r4, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3dc, 0x0) 06:06:27 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv4_getroute={0x1c, 0x1a, 0x800, 0x70bd2c, 0x25dfdbfb, {0x2, 0xa0, 0x20, 0x1, 0x0, 0x3, 0xc8, 0x3, 0x700}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x95}, 0x1) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x42040, 0x0) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) 06:06:27 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 59) 06:06:27 executing program 5: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r4, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3dd, 0x0) 06:06:27 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) r1 = gettid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) (async) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) (async) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x3) (async) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) (async) dup2(r2, r3) (async) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) 06:06:27 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) gettid() (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) (async) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000200)=0x1000000000003e) (async) clock_getres(0x0, &(0x7f0000000000)) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f00000000c0)) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000100), 0x4) clock_getres(0x0, &(0x7f0000000140)) shmdt(0x0) (async) clock_gettime(0x0, &(0x7f0000000240)) (async) pselect6(0x40, &(0x7f0000000180)={0x2, 0x9, 0xfffffffffffffffc, 0x81}, &(0x7f0000000280)={0x0, 0x5, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x8000}, &(0x7f0000000200)={0x9, 0xffffffffffffffff, 0x0, 0x1}, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={[0x3]}, 0x8}) (async) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r3 = syz_clone3(&(0x7f0000000580)={0x100, 0x0, &(0x7f00000003c0), &(0x7f0000000400)=0x0, {0x24}, 0x0, 0x0, &(0x7f00000004c0)=""/68, &(0x7f0000000540)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x4}, 0x58) sched_rr_get_interval(r3, &(0x7f0000000600)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000640)='cgroup.procs\x00', 0x2, 0x0) (async) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) (async) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000406a0509022d0001010000800904001f020301000009210000000122000009058103000006ff000905020300"/63], 0x0) (async) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000e80)={0x24, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="002281000000085858830400f0486a9d9ea7ba05f79e668063de00000034c0bbd900000000000000004754a2288c22bc3c100d66000e000073f06d4d2234a670d288478ac6df0a23429d9b2758780d2d69d27d23db09007aec863bc5929966846be29cf6d20879acc0200a48a74cecd0ef1e8295c3e207f6f6f5c0e336a7280131bf33050d960cb3f0edb49e86d9b5a585cd"], &(0x7f0000000e40)={0x0, 0x21, 0x9, {0x9}}}, &(0x7f0000001140)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) pselect6(0x40, &(0x7f0000001180)={0x0, 0x0, 0x101}, 0x0, &(0x7f0000001200)={0x56, 0x0, 0x0, 0x81, 0x0, 0x0, 0x1}, &(0x7f0000001240), 0x0) sched_rr_get_interval(r4, &(0x7f0000001340)) (async) syz_clone3(&(0x7f0000001600)={0x401000000, &(0x7f0000001380), &(0x7f00000013c0)=0x0, &(0x7f0000001400), {0x3d}, &(0x7f0000001440)=""/194, 0xc2, 0x0, &(0x7f00000015c0)=[0x0, 0x0], 0x2}, 0x58) sched_rr_get_interval(r5, 0x0) (async) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000018c0), 0x2, 0x0) 06:06:27 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async, rerun: 32) r1 = gettid() (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) (async) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) (async, rerun: 32) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x3) (rerun: 32) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) (async) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) (async) tkill(r1, 0x14) [ 2891.141815][T13807] FAULT_INJECTION: forcing a failure. [ 2891.141815][T13807] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2891.162919][T13807] CPU: 1 PID: 13807 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 2891.173048][T13807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2891.183103][T13807] Call Trace: [ 2891.186386][T13807] [ 2891.189312][T13807] dump_stack_lvl+0x125/0x1b0 [ 2891.194021][T13807] should_fail_ex+0x496/0x5b0 [ 2891.198704][T13807] ? fs_reclaim_acquire+0xb0/0x150 [ 2891.203813][T13807] __should_fail_alloc_page+0xe7/0x130 [ 2891.209280][T13807] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 2891.215465][T13807] __alloc_pages+0x14e/0x4a0 [ 2891.220144][T13807] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 2891.226977][T13807] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2891.232918][T13807] ? policy_nodemask+0x311/0x480 [ 2891.237890][T13807] alloc_pages_mpol+0x258/0x5f0 [ 2891.242909][T13807] ? mempolicy_in_oom_domain+0x150/0x150 [ 2891.248567][T13807] ? find_held_lock+0x2d/0x110 [ 2891.253354][T13807] vma_alloc_folio+0xad/0x220 [ 2891.258048][T13807] ? alloc_migration_target_by_mpol+0x6b0/0x6b0 [ 2891.264310][T13807] ? find_held_lock+0x2d/0x110 [ 2891.269098][T13807] ? filemap_get_read_batch+0x9b0/0x9b0 [ 2891.274666][T13807] __handle_mm_fault+0x100b/0x3d60 [ 2891.279821][T13807] ? vm_iomap_memory+0x170/0x170 [ 2891.284800][T13807] handle_mm_fault+0x478/0xa00 [ 2891.289599][T13807] __get_user_pages+0x4b2/0x1480 [ 2891.294560][T13807] ? follow_page_mask+0xda0/0xda0 [ 2891.299600][T13807] ? down_read+0x470/0x470 [ 2891.304049][T13807] __gup_longterm_locked+0x278/0x2ab0 [ 2891.309455][T13807] ? get_user_pages_unlocked+0x770/0x770 [ 2891.315138][T13807] ? lock_sync+0x190/0x190 [ 2891.319605][T13807] pin_user_pages_remote+0xee/0x140 [ 2891.324847][T13807] ? __gup_longterm_locked+0x2ab0/0x2ab0 [ 2891.330539][T13807] process_vm_rw_core.constprop.0+0x43d/0xa10 [ 2891.336654][T13807] ? vmalloc_dump_obj+0x290/0x290 [ 2891.341713][T13807] process_vm_rw+0x2ff/0x360 [ 2891.346317][T13807] ? process_vm_rw_core.constprop.0+0xa10/0xa10 [ 2891.352601][T13807] ? ksys_write+0x214/0x250 [ 2891.357159][T13807] ? reacquire_held_locks+0x4b0/0x4b0 [ 2891.362567][T13807] ? vfs_write+0x14c/0xdf0 [ 2891.367018][T13807] ? bit_wait_io_timeout+0x160/0x160 [ 2891.372327][T13807] ? fput+0x30/0x1a0 [ 2891.376241][T13807] ? ksys_write+0x1a7/0x250 [ 2891.380767][T13807] __x64_sys_process_vm_writev+0xe2/0x1b0 [ 2891.386505][T13807] ? syscall_enter_from_user_mode+0x26/0x80 [ 2891.392421][T13807] do_syscall_64+0x3f/0x110 [ 2891.396950][T13807] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2891.402860][T13807] RIP: 0033:0x7f6fcfc7cae9 [ 2891.407808][T13807] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2891.427432][T13807] RSP: 002b:00007f6fd098a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2891.435862][T13807] RAX: ffffffffffffffda RBX: 00007f6fcfd9c050 RCX: 00007f6fcfc7cae9 [ 2891.443845][T13807] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000002ccb [ 2891.451848][T13807] RBP: 00007f6fd098a120 R08: 0000000000000001 R09: 0000000000000000 [ 2891.459840][T13807] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000002 [ 2891.467825][T13807] R13: 000000000000006e R14: 00007f6fcfd9c050 R15: 00007f6fcfebfa48 [ 2891.475825][T13807] 06:06:28 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv4_getroute={0x1c, 0x1a, 0x800, 0x70bd2c, 0x25dfdbfb, {0x2, 0xa0, 0x20, 0x1, 0x0, 0x3, 0xc8, 0x3, 0x700}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x95}, 0x1) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) r1 = gettid() pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) (async) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) (async, rerun: 64) fcntl$setsig(r2, 0xa, 0x12) (rerun: 64) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) (async) dup2(r2, r3) (async) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x42040, 0x0) fcntl$setown(r3, 0x8, r1) (async) tkill(r1, 0x14) 06:06:28 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) (async, rerun: 32) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (rerun: 32) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) 06:06:28 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 60) 06:06:28 executing program 5: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r4, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3de, 0x0) 06:06:28 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x220482, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) bind$packet(r5, &(0x7f0000000040)={0x10, 0x0, r6, 0x1, 0x0, 0x6, @random="b6c1c02b5fbb"}, 0x14) bind$packet(r4, &(0x7f0000000040)={0x10, 0x0, r6, 0x1, 0x0, 0x6, @random}, 0x14) close(r4) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) poll(&(0x7f0000000040)=[{r2, 0x8000}, {r0, 0x28}], 0x2, 0x101) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getresgid(&(0x7f0000000140)=0x0, &(0x7f00000001c0), &(0x7f0000000240)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, r8}}, './file0\x00'}) [ 2892.412133][T13828] FAULT_INJECTION: forcing a failure. [ 2892.412133][T13828] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2892.427866][T13828] CPU: 1 PID: 13828 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 2892.437979][T13828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2892.448073][T13828] Call Trace: [ 2892.451558][T13828] [ 2892.454513][T13828] dump_stack_lvl+0x125/0x1b0 [ 2892.459240][T13828] should_fail_ex+0x496/0x5b0 [ 2892.463967][T13828] ? fs_reclaim_acquire+0xb0/0x150 [ 2892.469099][T13828] __should_fail_alloc_page+0xe7/0x130 [ 2892.474577][T13828] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 2892.480773][T13828] __alloc_pages+0x14e/0x4a0 [ 2892.485508][T13828] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 2892.492315][T13828] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2892.498217][T13828] ? policy_nodemask+0x311/0x480 [ 2892.503174][T13828] alloc_pages_mpol+0x258/0x5f0 [ 2892.508083][T13828] ? mempolicy_in_oom_domain+0x150/0x150 [ 2892.513730][T13828] ? find_held_lock+0x2d/0x110 [ 2892.518506][T13828] vma_alloc_folio+0xad/0x220 [ 2892.523190][T13828] ? alloc_migration_target_by_mpol+0x6b0/0x6b0 [ 2892.529438][T13828] ? find_held_lock+0x2d/0x110 [ 2892.534237][T13828] ? filemap_get_read_batch+0x9b0/0x9b0 [ 2892.539905][T13828] __handle_mm_fault+0x100b/0x3d60 [ 2892.545038][T13828] ? vm_iomap_memory+0x170/0x170 [ 2892.550003][T13828] handle_mm_fault+0x478/0xa00 [ 2892.554796][T13828] __get_user_pages+0x4b2/0x1480 [ 2892.559786][T13828] ? follow_page_mask+0xda0/0xda0 [ 2892.564844][T13828] ? down_read+0x470/0x470 [ 2892.569270][T13828] __gup_longterm_locked+0x278/0x2ab0 [ 2892.574666][T13828] ? get_user_pages_unlocked+0x770/0x770 [ 2892.580315][T13828] ? lock_sync+0x190/0x190 [ 2892.584761][T13828] pin_user_pages_remote+0xee/0x140 [ 2892.590021][T13828] ? __gup_longterm_locked+0x2ab0/0x2ab0 [ 2892.595674][T13828] process_vm_rw_core.constprop.0+0x43d/0xa10 [ 2892.601811][T13828] ? vmalloc_dump_obj+0x290/0x290 [ 2892.606875][T13828] process_vm_rw+0x2ff/0x360 [ 2892.611484][T13828] ? process_vm_rw_core.constprop.0+0xa10/0xa10 [ 2892.617759][T13828] ? ksys_write+0x214/0x250 [ 2892.622273][T13828] ? reacquire_held_locks+0x4b0/0x4b0 [ 2892.627678][T13828] ? vfs_write+0x14c/0xdf0 [ 2892.632148][T13828] ? bit_wait_io_timeout+0x160/0x160 [ 2892.637478][T13828] ? fput+0x30/0x1a0 [ 2892.641391][T13828] ? ksys_write+0x1a7/0x250 [ 2892.645915][T13828] __x64_sys_process_vm_writev+0xe2/0x1b0 [ 2892.651643][T13828] ? syscall_enter_from_user_mode+0x26/0x80 [ 2892.657556][T13828] do_syscall_64+0x3f/0x110 [ 2892.662111][T13828] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2892.668036][T13828] RIP: 0033:0x7f6fcfc7cae9 [ 2892.672457][T13828] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2892.692084][T13828] RSP: 002b:00007f6fd098a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2892.700533][T13828] RAX: ffffffffffffffda RBX: 00007f6fcfd9c050 RCX: 00007f6fcfc7cae9 06:06:29 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x220482, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) (async) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) bind$packet(r5, &(0x7f0000000040)={0x10, 0x0, r6, 0x1, 0x0, 0x6, @random="b6c1c02b5fbb"}, 0x14) bind$packet(r4, &(0x7f0000000040)={0x10, 0x0, r6, 0x1, 0x0, 0x6, @random}, 0x14) (async) close(r4) (async) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) (async, rerun: 32) fcntl$setsig(r2, 0xa, 0x12) (rerun: 32) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) (async) poll(&(0x7f0000000040)=[{r2, 0x8000}, {r0, 0x28}], 0x2, 0x101) (async) fcntl$setown(r3, 0x8, r1) (async) tkill(r1, 0x14) (async) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async, rerun: 64) getresgid(&(0x7f0000000140)=0x0, &(0x7f00000001c0), &(0x7f0000000240)) (rerun: 64) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, r8}}, './file0\x00'}) [ 2892.708508][T13828] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000002cce [ 2892.716487][T13828] RBP: 00007f6fd098a120 R08: 0000000000000001 R09: 0000000000000000 [ 2892.724468][T13828] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000002 [ 2892.732470][T13828] R13: 000000000000006e R14: 00007f6fcfd9c050 R15: 00007f6fcfebfa48 [ 2892.740481][T13828] 06:06:29 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r1}, 0x90) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0), 0x0) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000ac0)) write$FUSE_GETXATTR(r1, &(0x7f00000000c0)={0x18}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000000)=0x7) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@bridge_setlink={0x3c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x4, 0x0, 0x1, {0x14, 0xa, 0x0, 0x1, [{0x8, 0x1}, {0x8, 0x2}]}}]}]}, 0x3c}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r5}, 0x90) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000001c0), 0x0) ioctl$NS_GET_OWNER_UID(r5, 0xb704, &(0x7f0000000ac0)) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x1407, 0x200, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004044}, 0x4) fcntl$setsig(r0, 0xa, 0x2f) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) 06:06:29 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 61) 06:06:29 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r1}, 0x90) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0), 0x0) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000ac0)) write$FUSE_GETXATTR(r1, &(0x7f00000000c0)={0x18}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000000)=0x7) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@bridge_setlink={0x3c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x4, 0x0, 0x1, {0x14, 0xa, 0x0, 0x1, [{0x8, 0x1}, {0x8, 0x2}]}}]}]}, 0x3c}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r5}, 0x90) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000001c0), 0x0) ioctl$NS_GET_OWNER_UID(r5, 0xb704, &(0x7f0000000ac0)) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x1407, 0x200, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004044}, 0x4) fcntl$setsig(r0, 0xa, 0x2f) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r1}, 0x90) (async) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0), 0x0) (async) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000ac0)) (async) write$FUSE_GETXATTR(r1, &(0x7f00000000c0)={0x18}, 0x18) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000000)=0x7) (async) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) (async) socket(0x10, 0x80002, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@bridge_setlink={0x3c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x4, 0x0, 0x1, {0x14, 0xa, 0x0, 0x1, [{0x8, 0x1}, {0x8, 0x2}]}}]}]}, 0x3c}}, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r5}, 0x90) (async) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000001c0), 0x0) (async) ioctl$NS_GET_OWNER_UID(r5, 0xb704, &(0x7f0000000ac0)) (async) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x1407, 0x200, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004044}, 0x4) (async) fcntl$setsig(r0, 0xa, 0x2f) (async) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) (async) [ 2893.147409][T13841] FAULT_INJECTION: forcing a failure. [ 2893.147409][T13841] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2893.173062][T13841] CPU: 1 PID: 13841 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 2893.183274][T13841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2893.193364][T13841] Call Trace: [ 2893.196663][T13841] [ 2893.199596][T13841] dump_stack_lvl+0x125/0x1b0 [ 2893.204284][T13841] should_fail_ex+0x496/0x5b0 [ 2893.208974][T13841] ? fs_reclaim_acquire+0xb0/0x150 [ 2893.214102][T13841] __should_fail_alloc_page+0xe7/0x130 [ 2893.219610][T13841] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 2893.225798][T13841] __alloc_pages+0x14e/0x4a0 [ 2893.230426][T13841] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 2893.237202][T13841] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2893.243101][T13841] ? policy_nodemask+0x311/0x480 [ 2893.248056][T13841] alloc_pages_mpol+0x258/0x5f0 [ 2893.252935][T13841] ? mempolicy_in_oom_domain+0x150/0x150 [ 2893.258573][T13841] ? find_held_lock+0x2d/0x110 [ 2893.263348][T13841] vma_alloc_folio+0xad/0x220 [ 2893.268029][T13841] ? alloc_migration_target_by_mpol+0x6b0/0x6b0 [ 2893.274286][T13841] ? find_held_lock+0x2d/0x110 [ 2893.279090][T13841] ? filemap_get_read_batch+0x9b0/0x9b0 [ 2893.284689][T13841] __handle_mm_fault+0x100b/0x3d60 [ 2893.289828][T13841] ? vm_iomap_memory+0x170/0x170 [ 2893.294821][T13841] handle_mm_fault+0x478/0xa00 [ 2893.299611][T13841] __get_user_pages+0x4b2/0x1480 [ 2893.304574][T13841] ? follow_page_mask+0xda0/0xda0 [ 2893.309632][T13841] __gup_longterm_locked+0x278/0x2ab0 [ 2893.315023][T13841] ? asm_common_interrupt+0x26/0x40 [ 2893.320244][T13841] ? get_user_pages_unlocked+0x770/0x770 [ 2893.325898][T13841] ? lock_sync+0x190/0x190 [ 2893.330350][T13841] pin_user_pages_remote+0xee/0x140 [ 2893.335563][T13841] ? __gup_longterm_locked+0x2ab0/0x2ab0 [ 2893.341222][T13841] process_vm_rw_core.constprop.0+0x43d/0xa10 [ 2893.347314][T13841] ? vmalloc_dump_obj+0x290/0x290 [ 2893.352370][T13841] process_vm_rw+0x2ff/0x360 [ 2893.356976][T13841] ? process_vm_rw_core.constprop.0+0xa10/0xa10 [ 2893.363228][T13841] ? _raw_spin_lock_irqsave+0x42/0x50 [ 2893.368618][T13841] ? lock_acquire+0x1ae/0x510 [ 2893.373340][T13841] ? handle_edge_irq+0x40a/0xcf0 [ 2893.378306][T13841] __x64_sys_process_vm_writev+0xe2/0x1b0 [ 2893.384050][T13841] ? syscall_enter_from_user_mode+0x26/0x80 [ 2893.389968][T13841] do_syscall_64+0x3f/0x110 [ 2893.394492][T13841] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2893.400397][T13841] RIP: 0033:0x7f6fcfc7cae9 [ 2893.404824][T13841] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2893.424448][T13841] RSP: 002b:00007f6fd098a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2893.432875][T13841] RAX: ffffffffffffffda RBX: 00007f6fcfd9c050 RCX: 00007f6fcfc7cae9 [ 2893.440855][T13841] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000002cd1 [ 2893.448833][T13841] RBP: 00007f6fd098a120 R08: 0000000000000001 R09: 0000000000000000 [ 2893.456808][T13841] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000002 [ 2893.464791][T13841] R13: 000000000000006e R14: 00007f6fcfd9c050 R15: 00007f6fcfebfa48 [ 2893.472785][T13841] 06:06:30 executing program 5: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r4, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3df, 0x0) 06:06:32 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r1}, 0x90) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0), 0x0) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000ac0)) write$FUSE_GETXATTR(r1, &(0x7f00000000c0)={0x18}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000000)=0x7) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@bridge_setlink={0x3c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x4, 0x0, 0x1, {0x14, 0xa, 0x0, 0x1, [{0x8, 0x1}, {0x8, 0x2}]}}]}]}, 0x3c}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r5}, 0x90) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000001c0), 0x0) ioctl$NS_GET_OWNER_UID(r5, 0xb704, &(0x7f0000000ac0)) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x1407, 0x200, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004044}, 0x4) fcntl$setsig(r0, 0xa, 0x2f) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r1}, 0x90) (async) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0), 0x0) (async) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000ac0)) (async) write$FUSE_GETXATTR(r1, &(0x7f00000000c0)={0x18}, 0x18) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000000)=0x7) (async) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) (async) socket(0x10, 0x80002, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@bridge_setlink={0x3c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x4, 0x0, 0x1, {0x14, 0xa, 0x0, 0x1, [{0x8, 0x1}, {0x8, 0x2}]}}]}]}, 0x3c}}, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r5}, 0x90) (async) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000001c0), 0x0) (async) ioctl$NS_GET_OWNER_UID(r5, 0xb704, &(0x7f0000000ac0)) (async) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x1407, 0x200, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004044}, 0x4) (async) fcntl$setsig(r0, 0xa, 0x2f) (async) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) (async) 06:06:32 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) r4 = dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x15, &(0x7f0000000240)=@raw=[@call={0x85, 0x0, 0x0, 0x82}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @generic={0x7, 0xa, 0x5, 0x101, 0x2}, @printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @generic={0x9, 0xc, 0x0, 0x1, 0x9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @jmp={0x5, 0x0, 0x3, 0x2, 0x7, 0x20, 0xfffffffffffffff0}, @jmp={0x5, 0x0, 0x2, 0x0, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffc}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xb}], &(0x7f0000000140)='syzkaller\x00', 0x353a, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x9, 0x2f}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000100), &(0x7f0000000300)=[{0x4, 0x5, 0xc, 0x7}, {0x4, 0x5, 0x5, 0x1}, {0x5, 0x2, 0x8, 0x3}, {0x1, 0x1, 0x10, 0x5}, {0x0, 0x1, 0xc, 0x5}], 0x10, 0x8}, 0x90) quotactl_fd$Q_QUOTAOFF(r5, 0xffffffff80000300, 0x0, 0x0) 06:06:32 executing program 5: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r4, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3e0, 0x0) 06:06:33 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 62) 06:06:33 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x9) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) 06:06:33 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x220482, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) (async, rerun: 32) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async, rerun: 32) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) (async) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) bind$packet(r5, &(0x7f0000000040)={0x10, 0x0, r6, 0x1, 0x0, 0x6, @random="b6c1c02b5fbb"}, 0x14) (async) bind$packet(r4, &(0x7f0000000040)={0x10, 0x0, r6, 0x1, 0x0, 0x6, @random}, 0x14) (async) close(r4) (async) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) (async) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) (async, rerun: 64) dup2(r2, r3) (async, rerun: 64) poll(&(0x7f0000000040)=[{r2, 0x8000}, {r0, 0x28}], 0x2, 0x101) (async) fcntl$setown(r3, 0x8, r1) (async, rerun: 64) tkill(r1, 0x14) (rerun: 64) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getresgid(&(0x7f0000000140)=0x0, &(0x7f00000001c0), &(0x7f0000000240)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, r8}}, './file0\x00'}) 06:06:33 executing program 3: openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) (async) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv4_getroute={0x1c, 0x1a, 0x800, 0x70bd2c, 0x25dfdbfb, {0x2, 0xa0, 0x20, 0x1, 0x0, 0x3, 0xc8, 0x3, 0x700}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x95}, 0x1) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) (async) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r2, 0xa, 0x12) (async) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x42040, 0x0) (async) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x42040, 0x0) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) 06:06:33 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) (async) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) r4 = dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x15, &(0x7f0000000240)=@raw=[@call={0x85, 0x0, 0x0, 0x82}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @generic={0x7, 0xa, 0x5, 0x101, 0x2}, @printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @generic={0x9, 0xc, 0x0, 0x1, 0x9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @jmp={0x5, 0x0, 0x3, 0x2, 0x7, 0x20, 0xfffffffffffffff0}, @jmp={0x5, 0x0, 0x2, 0x0, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffc}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xb}], &(0x7f0000000140)='syzkaller\x00', 0x353a, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x9, 0x2f}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000100), &(0x7f0000000300)=[{0x4, 0x5, 0xc, 0x7}, {0x4, 0x5, 0x5, 0x1}, {0x5, 0x2, 0x8, 0x3}, {0x1, 0x1, 0x10, 0x5}, {0x0, 0x1, 0xc, 0x5}], 0x10, 0x8}, 0x90) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x15, &(0x7f0000000240)=@raw=[@call={0x85, 0x0, 0x0, 0x82}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @generic={0x7, 0xa, 0x5, 0x101, 0x2}, @printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @generic={0x9, 0xc, 0x0, 0x1, 0x9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @jmp={0x5, 0x0, 0x3, 0x2, 0x7, 0x20, 0xfffffffffffffff0}, @jmp={0x5, 0x0, 0x2, 0x0, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffc}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xb}], &(0x7f0000000140)='syzkaller\x00', 0x353a, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x9, 0x2f}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000100), &(0x7f0000000300)=[{0x4, 0x5, 0xc, 0x7}, {0x4, 0x5, 0x5, 0x1}, {0x5, 0x2, 0x8, 0x3}, {0x1, 0x1, 0x10, 0x5}, {0x0, 0x1, 0xc, 0x5}], 0x10, 0x8}, 0x90) quotactl_fd$Q_QUOTAOFF(r5, 0xffffffff80000300, 0x0, 0x0) (async) quotactl_fd$Q_QUOTAOFF(r5, 0xffffffff80000300, 0x0, 0x0) 06:06:33 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) r2 = memfd_secret(0x0) ioctl$SNDCTL_DSP_GETOPTR(r2, 0x800c5012, &(0x7f0000000000)) ioctl$SNDCTL_DSP_NONBLOCK(r0, 0x500e, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{}], 0x1, 0xfffffffffffffff8) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, r1) tkill(r1, 0x14) write$dsp(r0, &(0x7f0000000100)="448da32b26405f92a14d45ab2152781ee83387150622dbd5ff3f4033c77f12f1832d311ab7cbbaef1e82c63a0738d1bdf7899643099307001fffb7746437b2dbf3595e2664440894fd51434fe01873ee21a0", 0x52) [ 2896.598637][T13883] FAULT_INJECTION: forcing a failure. [ 2896.598637][T13883] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2896.613061][T13883] CPU: 1 PID: 13883 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 2896.623187][T13883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2896.633280][T13883] Call Trace: [ 2896.636587][T13883] [ 2896.639548][T13883] dump_stack_lvl+0x125/0x1b0 [ 2896.644289][T13883] should_fail_ex+0x496/0x5b0 [ 2896.649024][T13883] ? fs_reclaim_acquire+0xb0/0x150 [ 2896.654188][T13883] __should_fail_alloc_page+0xe7/0x130 [ 2896.659706][T13883] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 2896.665920][T13883] __alloc_pages+0x14e/0x4a0 [ 2896.671009][T13883] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 2896.677837][T13883] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2896.683776][T13883] ? policy_nodemask+0x311/0x480 [ 2896.688761][T13883] alloc_pages_mpol+0x258/0x5f0 [ 2896.693660][T13883] ? mempolicy_in_oom_domain+0x150/0x150 [ 2896.699345][T13883] ? find_held_lock+0x2d/0x110 [ 2896.704185][T13883] vma_alloc_folio+0xad/0x220 [ 2896.708911][T13883] ? alloc_migration_target_by_mpol+0x6b0/0x6b0 [ 2896.715205][T13883] ? find_held_lock+0x2d/0x110 [ 2896.720017][T13883] ? filemap_get_read_batch+0x9b0/0x9b0 [ 2896.725589][T13883] __handle_mm_fault+0x100b/0x3d60 [ 2896.730726][T13883] ? vm_iomap_memory+0x170/0x170 [ 2896.735695][T13883] handle_mm_fault+0x478/0xa00 [ 2896.740483][T13883] __get_user_pages+0x4b2/0x1480 [ 2896.745439][T13883] ? follow_page_mask+0xda0/0xda0 [ 2896.750472][T13883] ? down_read+0x470/0x470 [ 2896.754911][T13883] __gup_longterm_locked+0x278/0x2ab0 [ 2896.760311][T13883] ? get_user_pages_unlocked+0x770/0x770 [ 2896.765958][T13883] ? lock_sync+0x190/0x190 [ 2896.770410][T13883] pin_user_pages_remote+0xee/0x140 [ 2896.775624][T13883] ? __gup_longterm_locked+0x2ab0/0x2ab0 [ 2896.781280][T13883] process_vm_rw_core.constprop.0+0x43d/0xa10 [ 2896.787373][T13883] ? vmalloc_dump_obj+0x290/0x290 [ 2896.792437][T13883] process_vm_rw+0x2ff/0x360 [ 2896.797040][T13883] ? process_vm_rw_core.constprop.0+0xa10/0xa10 [ 2896.803295][T13883] ? ksys_write+0x214/0x250 [ 2896.807814][T13883] ? reacquire_held_locks+0x4b0/0x4b0 [ 2896.813209][T13883] ? vfs_write+0x14c/0xdf0 [ 2896.817652][T13883] ? bit_wait_io_timeout+0x160/0x160 [ 2896.822959][T13883] ? fput+0x30/0x1a0 [ 2896.826871][T13883] ? ksys_write+0x1a7/0x250 [ 2896.831399][T13883] __x64_sys_process_vm_writev+0xe2/0x1b0 [ 2896.837129][T13883] ? syscall_enter_from_user_mode+0x26/0x80 [ 2896.843044][T13883] do_syscall_64+0x3f/0x110 [ 2896.847569][T13883] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2896.853472][T13883] RIP: 0033:0x7f6fcfc7cae9 [ 2896.857894][T13883] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2896.877518][T13883] RSP: 002b:00007f6fd098a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2896.885949][T13883] RAX: ffffffffffffffda RBX: 00007f6fcfd9c050 RCX: 00007f6fcfc7cae9 [ 2896.893928][T13883] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000002cd4 [ 2896.901913][T13883] RBP: 00007f6fd098a120 R08: 0000000000000001 R09: 0000000000000000 [ 2896.909892][T13883] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000002 [ 2896.917871][T13883] R13: 000000000000006e R14: 00007f6fcfd9c050 R15: 00007f6fcfebfa48 [ 2896.925875][T13883] 06:06:33 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x9) (async) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) 06:06:33 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 63) 06:06:33 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) (async) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) (async) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x9) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) 06:06:33 executing program 5: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r4, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3e1, 0x0) [ 2897.308847][T13896] FAULT_INJECTION: forcing a failure. [ 2897.308847][T13896] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2897.348880][T13896] CPU: 1 PID: 13896 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 2897.359097][T13896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2897.369189][T13896] Call Trace: [ 2897.372498][T13896] [ 2897.375460][T13896] dump_stack_lvl+0x125/0x1b0 [ 2897.380198][T13896] should_fail_ex+0x496/0x5b0 [ 2897.384936][T13896] ? fs_reclaim_acquire+0xb0/0x150 [ 2897.390066][T13896] __should_fail_alloc_page+0xe7/0x130 [ 2897.395552][T13896] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 2897.401839][T13896] __alloc_pages+0x14e/0x4a0 [ 2897.406457][T13896] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 2897.413252][T13896] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2897.419158][T13896] ? policy_nodemask+0x311/0x480 [ 2897.424126][T13896] alloc_pages_mpol+0x258/0x5f0 [ 2897.428987][T13896] ? mempolicy_in_oom_domain+0x150/0x150 [ 2897.434899][T13896] ? find_held_lock+0x2d/0x110 [ 2897.439719][T13896] vma_alloc_folio+0xad/0x220 [ 2897.444447][T13896] ? alloc_migration_target_by_mpol+0x6b0/0x6b0 [ 2897.450731][T13896] ? find_held_lock+0x2d/0x110 [ 2897.455884][T13896] ? filemap_get_read_batch+0x9b0/0x9b0 [ 2897.461450][T13896] __handle_mm_fault+0x100b/0x3d60 [ 2897.467118][T13896] ? vm_iomap_memory+0x170/0x170 [ 2897.472094][T13896] handle_mm_fault+0x478/0xa00 [ 2897.476895][T13896] __get_user_pages+0x4b2/0x1480 [ 2897.481854][T13896] ? follow_page_mask+0xda0/0xda0 [ 2897.486894][T13896] ? down_read+0x470/0x470 [ 2897.491431][T13896] __gup_longterm_locked+0x278/0x2ab0 [ 2897.496830][T13896] ? get_user_pages_unlocked+0x770/0x770 [ 2897.502481][T13896] ? lock_sync+0x190/0x190 [ 2897.506931][T13896] pin_user_pages_remote+0xee/0x140 [ 2897.512146][T13896] ? __gup_longterm_locked+0x2ab0/0x2ab0 [ 2897.517804][T13896] process_vm_rw_core.constprop.0+0x43d/0xa10 [ 2897.523906][T13896] ? vmalloc_dump_obj+0x290/0x290 [ 2897.528967][T13896] process_vm_rw+0x2ff/0x360 [ 2897.533578][T13896] ? process_vm_rw_core.constprop.0+0xa10/0xa10 [ 2897.539840][T13896] ? ksys_write+0x214/0x250 [ 2897.544368][T13896] ? reacquire_held_locks+0x4b0/0x4b0 [ 2897.549766][T13896] ? vfs_write+0x14c/0xdf0 [ 2897.554226][T13896] ? bit_wait_io_timeout+0x160/0x160 [ 2897.559546][T13896] ? fput+0x30/0x1a0 [ 2897.563462][T13896] ? ksys_write+0x1a7/0x250 [ 2897.567989][T13896] __x64_sys_process_vm_writev+0xe2/0x1b0 [ 2897.573730][T13896] ? syscall_enter_from_user_mode+0x26/0x80 [ 2897.579647][T13896] do_syscall_64+0x3f/0x110 [ 2897.584180][T13896] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2897.590083][T13896] RIP: 0033:0x7f6fcfc7cae9 [ 2897.594522][T13896] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2897.614161][T13896] RSP: 002b:00007f6fd098a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2897.622587][T13896] RAX: ffffffffffffffda RBX: 00007f6fcfd9c050 RCX: 00007f6fcfc7cae9 [ 2897.630589][T13896] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000002cd7 [ 2897.638577][T13896] RBP: 00007f6fd098a120 R08: 0000000000000001 R09: 0000000000000000 [ 2897.646556][T13896] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000002 [ 2897.654539][T13896] R13: 000000000000006e R14: 00007f6fcfd9c050 R15: 00007f6fcfebfa48 [ 2897.662586][T13896] 06:06:34 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 64) [ 2897.974188][T13907] FAULT_INJECTION: forcing a failure. [ 2897.974188][T13907] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2897.989702][T13907] CPU: 1 PID: 13907 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 2897.999813][T13907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2898.009893][T13907] Call Trace: [ 2898.013220][T13907] [ 2898.016166][T13907] dump_stack_lvl+0x125/0x1b0 [ 2898.020880][T13907] should_fail_ex+0x496/0x5b0 [ 2898.025578][T13907] ? fs_reclaim_acquire+0xb0/0x150 [ 2898.030733][T13907] __should_fail_alloc_page+0xe7/0x130 [ 2898.036229][T13907] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 2898.042402][T13907] __alloc_pages+0x14e/0x4a0 [ 2898.047049][T13907] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 2898.053868][T13907] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2898.059796][T13907] ? policy_nodemask+0x311/0x480 [ 2898.064784][T13907] alloc_pages_mpol+0x258/0x5f0 06:06:34 executing program 5: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r4, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3e2, 0x0) [ 2898.069678][T13907] ? mempolicy_in_oom_domain+0x150/0x150 [ 2898.075446][T13907] ? find_held_lock+0x2d/0x110 [ 2898.080262][T13907] vma_alloc_folio+0xad/0x220 [ 2898.084987][T13907] ? alloc_migration_target_by_mpol+0x6b0/0x6b0 [ 2898.091271][T13907] ? find_held_lock+0x2d/0x110 [ 2898.096092][T13907] ? filemap_get_read_batch+0x9b0/0x9b0 [ 2898.101689][T13907] __handle_mm_fault+0x100b/0x3d60 [ 2898.106854][T13907] ? vm_iomap_memory+0x170/0x170 [ 2898.111842][T13907] handle_mm_fault+0x478/0xa00 [ 2898.116629][T13907] __get_user_pages+0x4b2/0x1480 [ 2898.121587][T13907] ? follow_page_mask+0xda0/0xda0 [ 2898.126645][T13907] __gup_longterm_locked+0x278/0x2ab0 [ 2898.132043][T13907] ? get_user_pages_unlocked+0x770/0x770 [ 2898.137781][T13907] ? lock_sync+0x190/0x190 [ 2898.142253][T13907] pin_user_pages_remote+0xee/0x140 [ 2898.147471][T13907] ? __gup_longterm_locked+0x2ab0/0x2ab0 [ 2898.153130][T13907] process_vm_rw_core.constprop.0+0x43d/0xa10 [ 2898.159225][T13907] ? vmalloc_dump_obj+0x290/0x290 [ 2898.164282][T13907] process_vm_rw+0x2ff/0x360 [ 2898.168978][T13907] ? process_vm_rw_core.constprop.0+0xa10/0xa10 [ 2898.175232][T13907] ? ksys_write+0x214/0x250 [ 2898.179755][T13907] ? reacquire_held_locks+0x4b0/0x4b0 [ 2898.185161][T13907] ? vfs_write+0x14c/0xdf0 [ 2898.189608][T13907] ? bit_wait_io_timeout+0x160/0x160 [ 2898.194920][T13907] ? fput+0x30/0x1a0 [ 2898.198838][T13907] ? ksys_write+0x1a7/0x250 [ 2898.203362][T13907] __x64_sys_process_vm_writev+0xe2/0x1b0 [ 2898.209102][T13907] ? syscall_enter_from_user_mode+0x26/0x80 [ 2898.215011][T13907] do_syscall_64+0x3f/0x110 [ 2898.219535][T13907] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2898.225443][T13907] RIP: 0033:0x7f6fcfc7cae9 [ 2898.229871][T13907] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2898.249497][T13907] RSP: 002b:00007f6fd098a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2898.257928][T13907] RAX: ffffffffffffffda RBX: 00007f6fcfd9c050 RCX: 00007f6fcfc7cae9 [ 2898.265909][T13907] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000002cda [ 2898.273889][T13907] RBP: 00007f6fd098a120 R08: 0000000000000001 R09: 0000000000000000 [ 2898.281865][T13907] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000002 [ 2898.289846][T13907] R13: 000000000000006e R14: 00007f6fcfd9c050 R15: 00007f6fcfebfa48 [ 2898.297942][T13907] [ 2898.362103][ T1232] ieee802154 phy0 wpan0: encryption failed: -22 [ 2898.376469][ T1232] ieee802154 phy1 wpan1: encryption failed: -22 06:06:37 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 65) 06:06:37 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) ioctl$int_in(r3, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r4}], 0x1, 0xfffffffffffffff8) r5 = syz_open_dev$vcsa(&(0x7f0000000000), 0x6, 0x88c0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000100)=0x1) r6 = dup3(r0, r0, 0x0) r7 = getpgrp(r1) read$FUSE(r2, &(0x7f0000002280)={0x2020, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_GET_CLIENT(r6, 0xc0286405, &(0x7f0000000140)={0x7, 0x3, {r7}, {r8}, 0x3840, 0x9}) read$FUSE(r2, &(0x7f0000000240)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_OPEN(r5, &(0x7f0000000040)={0x20, 0x0, r9, {0x0, 0xa}}, 0x20) dup2(r3, r4) fcntl$setown(r4, 0x8, r1) tkill(r1, 0x14) 06:06:37 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) (async) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) memfd_secret(0x0) (async) r2 = memfd_secret(0x0) ioctl$SNDCTL_DSP_GETOPTR(r2, 0x800c5012, &(0x7f0000000000)) ioctl$SNDCTL_DSP_NONBLOCK(r0, 0x500e, 0x0) (async) ioctl$SNDCTL_DSP_NONBLOCK(r0, 0x500e, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{}], 0x1, 0xfffffffffffffff8) (async) poll(&(0x7f0000b2c000)=[{}], 0x1, 0xfffffffffffffff8) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, r1) tkill(r1, 0x14) (async) tkill(r1, 0x14) write$dsp(r0, &(0x7f0000000100)="448da32b26405f92a14d45ab2152781ee83387150622dbd5ff3f4033c77f12f1832d311ab7cbbaef1e82c63a0738d1bdf7899643099307001fffb7746437b2dbf3595e2664440894fd51434fe01873ee21a0", 0x52) 06:06:37 executing program 5: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r4, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3e3, 0x0) 06:06:37 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) (async) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) (async) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) (async) r4 = dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x15, &(0x7f0000000240)=@raw=[@call={0x85, 0x0, 0x0, 0x82}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @generic={0x7, 0xa, 0x5, 0x101, 0x2}, @printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @generic={0x9, 0xc, 0x0, 0x1, 0x9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @jmp={0x5, 0x0, 0x3, 0x2, 0x7, 0x20, 0xfffffffffffffff0}, @jmp={0x5, 0x0, 0x2, 0x0, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffc}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xb}], &(0x7f0000000140)='syzkaller\x00', 0x353a, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x9, 0x2f}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000100), &(0x7f0000000300)=[{0x4, 0x5, 0xc, 0x7}, {0x4, 0x5, 0x5, 0x1}, {0x5, 0x2, 0x8, 0x3}, {0x1, 0x1, 0x10, 0x5}, {0x0, 0x1, 0xc, 0x5}], 0x10, 0x8}, 0x90) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x15, &(0x7f0000000240)=@raw=[@call={0x85, 0x0, 0x0, 0x82}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @generic={0x7, 0xa, 0x5, 0x101, 0x2}, @printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @generic={0x9, 0xc, 0x0, 0x1, 0x9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @jmp={0x5, 0x0, 0x3, 0x2, 0x7, 0x20, 0xfffffffffffffff0}, @jmp={0x5, 0x0, 0x2, 0x0, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffc}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xb}], &(0x7f0000000140)='syzkaller\x00', 0x353a, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x9, 0x2f}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000100), &(0x7f0000000300)=[{0x4, 0x5, 0xc, 0x7}, {0x4, 0x5, 0x5, 0x1}, {0x5, 0x2, 0x8, 0x3}, {0x1, 0x1, 0x10, 0x5}, {0x0, 0x1, 0xc, 0x5}], 0x10, 0x8}, 0x90) quotactl_fd$Q_QUOTAOFF(r5, 0xffffffff80000300, 0x0, 0x0) [ 2901.261409][T13927] FAULT_INJECTION: forcing a failure. [ 2901.261409][T13927] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2901.276429][T13927] CPU: 1 PID: 13927 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 2901.286632][T13927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2901.296713][T13927] Call Trace: [ 2901.299994][T13927] [ 2901.302919][T13927] dump_stack_lvl+0x125/0x1b0 [ 2901.307623][T13927] should_fail_ex+0x496/0x5b0 [ 2901.312331][T13927] ? fs_reclaim_acquire+0xb0/0x150 [ 2901.317490][T13927] __should_fail_alloc_page+0xe7/0x130 [ 2901.323006][T13927] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 2901.329222][T13927] __alloc_pages+0x14e/0x4a0 [ 2901.333869][T13927] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 2901.340682][T13927] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2901.346600][T13927] ? policy_nodemask+0x311/0x480 [ 2901.351556][T13927] alloc_pages_mpol+0x258/0x5f0 [ 2901.356427][T13927] ? mempolicy_in_oom_domain+0x150/0x150 [ 2901.362092][T13927] ? find_held_lock+0x2d/0x110 [ 2901.366913][T13927] vma_alloc_folio+0xad/0x220 [ 2901.371619][T13927] ? alloc_migration_target_by_mpol+0x6b0/0x6b0 [ 2901.377885][T13927] ? find_held_lock+0x2d/0x110 [ 2901.382693][T13927] ? filemap_get_read_batch+0x9b0/0x9b0 [ 2901.388282][T13927] __handle_mm_fault+0x100b/0x3d60 [ 2901.393512][T13927] ? vm_iomap_memory+0x170/0x170 [ 2901.398487][T13927] handle_mm_fault+0x478/0xa00 [ 2901.403276][T13927] __get_user_pages+0x4b2/0x1480 [ 2901.408231][T13927] ? follow_page_mask+0xda0/0xda0 [ 2901.413280][T13927] __gup_longterm_locked+0x278/0x2ab0 [ 2901.418699][T13927] ? get_user_pages_unlocked+0x770/0x770 [ 2901.424370][T13927] ? lock_sync+0x190/0x190 [ 2901.428832][T13927] pin_user_pages_remote+0xee/0x140 [ 2901.434054][T13927] ? __gup_longterm_locked+0x2ab0/0x2ab0 [ 2901.440523][T13927] process_vm_rw_core.constprop.0+0x43d/0xa10 [ 2901.446641][T13927] ? vmalloc_dump_obj+0x290/0x290 [ 2901.451698][T13927] process_vm_rw+0x2ff/0x360 [ 2901.456306][T13927] ? process_vm_rw_core.constprop.0+0xa10/0xa10 [ 2901.462567][T13927] ? ksys_write+0x214/0x250 [ 2901.467090][T13927] ? reacquire_held_locks+0x4b0/0x4b0 [ 2901.472490][T13927] ? vfs_write+0x14c/0xdf0 [ 2901.476935][T13927] ? bit_wait_io_timeout+0x160/0x160 [ 2901.482428][T13927] ? fput+0x30/0x1a0 [ 2901.486348][T13927] ? ksys_write+0x1a7/0x250 [ 2901.490873][T13927] __x64_sys_process_vm_writev+0xe2/0x1b0 [ 2901.496611][T13927] ? syscall_enter_from_user_mode+0x26/0x80 [ 2901.502520][T13927] do_syscall_64+0x3f/0x110 [ 2901.507064][T13927] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2901.512987][T13927] RIP: 0033:0x7f6fcfc7cae9 [ 2901.517413][T13927] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2901.537045][T13927] RSP: 002b:00007f6fd098a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2901.545477][T13927] RAX: ffffffffffffffda RBX: 00007f6fcfd9c050 RCX: 00007f6fcfc7cae9 [ 2901.553457][T13927] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000002cdd [ 2901.561455][T13927] RBP: 00007f6fd098a120 R08: 0000000000000001 R09: 0000000000000000 [ 2901.569451][T13927] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000002 [ 2901.577445][T13927] R13: 000000000000006e R14: 00007f6fcfd9c050 R15: 00007f6fcfebfa48 [ 2901.585446][T13927] 06:06:38 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) r1 = gettid() (async) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) (async) ioctl$int_in(r3, 0x5452, &(0x7f0000000200)=0x1000000000003e) (async) fcntl$setsig(r3, 0xa, 0x12) (async) poll(&(0x7f0000b2c000)=[{r4}], 0x1, 0xfffffffffffffff8) (async) r5 = syz_open_dev$vcsa(&(0x7f0000000000), 0x6, 0x88c0) (async) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000100)=0x1) r6 = dup3(r0, r0, 0x0) r7 = getpgrp(r1) (async) read$FUSE(r2, &(0x7f0000002280)={0x2020, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_GET_CLIENT(r6, 0xc0286405, &(0x7f0000000140)={0x7, 0x3, {r7}, {r8}, 0x3840, 0x9}) (async) read$FUSE(r2, &(0x7f0000000240)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_OPEN(r5, &(0x7f0000000040)={0x20, 0x0, r9, {0x0, 0xa}}, 0x20) (async) dup2(r3, r4) (async) fcntl$setown(r4, 0x8, r1) (async) tkill(r1, 0x14) 06:06:38 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 66) 06:06:38 executing program 5: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r4, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3e4, 0x0) 06:06:38 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000000)) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) [ 2901.996935][T13941] FAULT_INJECTION: forcing a failure. [ 2901.996935][T13941] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2902.012724][T13941] CPU: 1 PID: 13941 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 2902.022840][T13941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2902.032922][T13941] Call Trace: [ 2902.036213][T13941] [ 2902.039143][T13941] dump_stack_lvl+0x125/0x1b0 [ 2902.043830][T13941] should_fail_ex+0x496/0x5b0 [ 2902.048514][T13941] ? fs_reclaim_acquire+0xb0/0x150 [ 2902.053637][T13941] __should_fail_alloc_page+0xe7/0x130 [ 2902.059646][T13941] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 2902.065822][T13941] __alloc_pages+0x14e/0x4a0 [ 2902.070443][T13941] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 2902.077219][T13941] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2902.083120][T13941] ? policy_nodemask+0x311/0x480 [ 2902.088063][T13941] alloc_pages_mpol+0x258/0x5f0 [ 2902.092917][T13941] ? mempolicy_in_oom_domain+0x150/0x150 [ 2902.098549][T13941] ? find_held_lock+0x2d/0x110 [ 2902.103321][T13941] vma_alloc_folio+0xad/0x220 [ 2902.107998][T13941] ? alloc_migration_target_by_mpol+0x6b0/0x6b0 [ 2902.114248][T13941] ? find_held_lock+0x2d/0x110 [ 2902.119038][T13941] ? filemap_get_read_batch+0x9b0/0x9b0 [ 2902.124590][T13941] __handle_mm_fault+0x100b/0x3d60 [ 2902.129707][T13941] ? vm_iomap_memory+0x170/0x170 [ 2902.134659][T13941] handle_mm_fault+0x478/0xa00 [ 2902.139428][T13941] __get_user_pages+0x4b2/0x1480 [ 2902.144374][T13941] ? follow_page_mask+0xda0/0xda0 [ 2902.149396][T13941] ? down_read+0x470/0x470 [ 2902.153818][T13941] __gup_longterm_locked+0x278/0x2ab0 [ 2902.159205][T13941] ? get_user_pages_unlocked+0x770/0x770 [ 2902.164843][T13941] ? lock_sync+0x190/0x190 [ 2902.169272][T13941] pin_user_pages_remote+0xee/0x140 [ 2902.174475][T13941] ? __gup_longterm_locked+0x2ab0/0x2ab0 [ 2902.180114][T13941] process_vm_rw_core.constprop.0+0x43d/0xa10 [ 2902.186192][T13941] ? vmalloc_dump_obj+0x290/0x290 [ 2902.191227][T13941] process_vm_rw+0x2ff/0x360 [ 2902.195828][T13941] ? process_vm_rw_core.constprop.0+0xa10/0xa10 [ 2902.202064][T13941] ? ksys_write+0x214/0x250 [ 2902.206572][T13941] ? reacquire_held_locks+0x4b0/0x4b0 [ 2902.211950][T13941] ? vfs_write+0x14c/0xdf0 [ 2902.216479][T13941] ? bit_wait_io_timeout+0x160/0x160 [ 2902.221796][T13941] ? fput+0x30/0x1a0 [ 2902.225695][T13941] ? ksys_write+0x1a7/0x250 [ 2902.230201][T13941] __x64_sys_process_vm_writev+0xe2/0x1b0 [ 2902.235918][T13941] ? syscall_enter_from_user_mode+0x26/0x80 [ 2902.241807][T13941] do_syscall_64+0x3f/0x110 [ 2902.246310][T13941] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2902.252197][T13941] RIP: 0033:0x7f6fcfc7cae9 [ 2902.256604][T13941] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2902.276211][T13941] RSP: 002b:00007f6fd098a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2902.284621][T13941] RAX: ffffffffffffffda RBX: 00007f6fcfd9c050 RCX: 00007f6fcfc7cae9 [ 2902.295105][T13941] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000002ce0 [ 2902.303067][T13941] RBP: 00007f6fd098a120 R08: 0000000000000001 R09: 0000000000000000 [ 2902.311032][T13941] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000002 [ 2902.319002][T13941] R13: 000000000000006e R14: 00007f6fcfd9c050 R15: 00007f6fcfebfa48 [ 2902.326984][T13941] 06:06:39 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 67) [ 2902.623550][T13951] FAULT_INJECTION: forcing a failure. [ 2902.623550][T13951] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2902.637975][T13951] CPU: 1 PID: 13951 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 2902.648073][T13951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2902.658146][T13951] Call Trace: [ 2902.661442][T13951] [ 2902.664387][T13951] dump_stack_lvl+0x125/0x1b0 [ 2902.669079][T13951] should_fail_ex+0x496/0x5b0 [ 2902.673776][T13951] ? fs_reclaim_acquire+0xb0/0x150 [ 2902.678933][T13951] __should_fail_alloc_page+0xe7/0x130 [ 2902.684419][T13951] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 2902.690601][T13951] __alloc_pages+0x14e/0x4a0 [ 2902.695232][T13951] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 2902.702049][T13951] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2902.707980][T13951] ? policy_nodemask+0x311/0x480 [ 2902.712954][T13951] alloc_pages_mpol+0x258/0x5f0 [ 2902.717823][T13951] ? mempolicy_in_oom_domain+0x150/0x150 [ 2902.723506][T13951] ? find_held_lock+0x2d/0x110 [ 2902.728399][T13951] vma_alloc_folio+0xad/0x220 [ 2902.733180][T13951] ? alloc_migration_target_by_mpol+0x6b0/0x6b0 [ 2902.739441][T13951] ? find_held_lock+0x2d/0x110 [ 2902.744258][T13951] ? filemap_get_read_batch+0x9b0/0x9b0 [ 2902.749843][T13951] __handle_mm_fault+0x100b/0x3d60 [ 2902.754987][T13951] ? vm_iomap_memory+0x170/0x170 [ 2902.759983][T13951] handle_mm_fault+0x478/0xa00 [ 2902.764761][T13951] __get_user_pages+0x4b2/0x1480 [ 2902.769723][T13951] ? follow_page_mask+0xda0/0xda0 [ 2902.774772][T13951] __gup_longterm_locked+0x278/0x2ab0 [ 2902.780176][T13951] ? get_user_pages_unlocked+0x770/0x770 [ 2902.785846][T13951] ? lock_sync+0x190/0x190 [ 2902.790296][T13951] pin_user_pages_remote+0xee/0x140 [ 2902.795536][T13951] ? __gup_longterm_locked+0x2ab0/0x2ab0 [ 2902.801215][T13951] process_vm_rw_core.constprop.0+0x43d/0xa10 [ 2902.807313][T13951] ? asm_common_interrupt+0x26/0x40 [ 2902.812545][T13951] ? vmalloc_dump_obj+0x290/0x290 [ 2902.817590][T13951] process_vm_rw+0x2ff/0x360 [ 2902.822197][T13951] ? process_vm_rw_core.constprop.0+0xa10/0xa10 [ 2902.828455][T13951] ? ksys_write+0x214/0x250 [ 2902.832965][T13951] ? reacquire_held_locks+0x4b0/0x4b0 [ 2902.838376][T13951] ? vfs_write+0x14c/0xdf0 [ 2902.842807][T13951] ? bit_wait_io_timeout+0x160/0x160 [ 2902.848123][T13951] ? fput+0x30/0x1a0 [ 2902.852235][T13951] ? ksys_write+0x1a7/0x250 [ 2902.856789][T13951] __x64_sys_process_vm_writev+0xe2/0x1b0 [ 2902.862563][T13951] ? syscall_enter_from_user_mode+0x26/0x80 [ 2902.868585][T13951] do_syscall_64+0x3f/0x110 06:06:39 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) (async) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000000)) (async, rerun: 64) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) (rerun: 64) [ 2902.873151][T13951] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2902.879084][T13951] RIP: 0033:0x7f6fcfc7cae9 [ 2902.883534][T13951] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2902.903266][T13951] RSP: 002b:00007f6fd098a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2902.911720][T13951] RAX: ffffffffffffffda RBX: 00007f6fcfd9c050 RCX: 00007f6fcfc7cae9 [ 2902.919726][T13951] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000002ce3 [ 2902.927726][T13951] RBP: 00007f6fd098a120 R08: 0000000000000001 R09: 0000000000000000 [ 2902.935703][T13951] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000002 [ 2902.943684][T13951] R13: 000000000000006e R14: 00007f6fcfd9c050 R15: 00007f6fcfebfa48 [ 2902.952468][T13951] 06:06:39 executing program 5: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r4, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3e5, 0x0) 06:06:39 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 68) [ 2903.268487][T13962] FAULT_INJECTION: forcing a failure. [ 2903.268487][T13962] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2903.282918][T13962] CPU: 1 PID: 13962 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 2903.293047][T13962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2903.303133][T13962] Call Trace: [ 2903.306439][T13962] [ 2903.309400][T13962] dump_stack_lvl+0x125/0x1b0 [ 2903.314225][T13962] should_fail_ex+0x496/0x5b0 [ 2903.319047][T13962] ? fs_reclaim_acquire+0xb0/0x150 [ 2903.324212][T13962] __should_fail_alloc_page+0xe7/0x130 [ 2903.329734][T13962] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 2903.335947][T13962] __alloc_pages+0x14e/0x4a0 [ 2903.340594][T13962] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 2903.347413][T13962] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2903.353352][T13962] ? policy_nodemask+0x311/0x480 [ 2903.358328][T13962] alloc_pages_mpol+0x258/0x5f0 [ 2903.363228][T13962] ? mempolicy_in_oom_domain+0x150/0x150 [ 2903.368908][T13962] ? find_held_lock+0x2d/0x110 [ 2903.373719][T13962] vma_alloc_folio+0xad/0x220 [ 2903.378447][T13962] ? alloc_migration_target_by_mpol+0x6b0/0x6b0 [ 2903.384741][T13962] ? find_held_lock+0x2d/0x110 [ 2903.389545][T13962] ? filemap_get_read_batch+0x9b0/0x9b0 [ 2903.395098][T13962] __handle_mm_fault+0x100b/0x3d60 [ 2903.400239][T13962] ? vm_iomap_memory+0x170/0x170 [ 2903.405190][T13962] handle_mm_fault+0x478/0xa00 [ 2903.409974][T13962] __get_user_pages+0x4b2/0x1480 [ 2903.414943][T13962] ? follow_page_mask+0xda0/0xda0 [ 2903.419975][T13962] __gup_longterm_locked+0x278/0x2ab0 [ 2903.425360][T13962] ? get_user_pages_unlocked+0x770/0x770 [ 2903.431003][T13962] ? lock_sync+0x190/0x190 [ 2903.435434][T13962] pin_user_pages_remote+0xee/0x140 [ 2903.440721][T13962] ? __gup_longterm_locked+0x2ab0/0x2ab0 [ 2903.446361][T13962] process_vm_rw_core.constprop.0+0x43d/0xa10 [ 2903.452464][T13962] ? asm_common_interrupt+0x26/0x40 [ 2903.457689][T13962] ? lockdep_hardirqs_on+0x7d/0x100 [ 2903.462882][T13962] ? vmalloc_dump_obj+0x290/0x290 [ 2903.467919][T13962] process_vm_rw+0x2ff/0x360 [ 2903.472526][T13962] ? process_vm_rw_core.constprop.0+0xa10/0xa10 [ 2903.478767][T13962] ? ksys_write+0x214/0x250 [ 2903.483270][T13962] ? reacquire_held_locks+0x4b0/0x4b0 [ 2903.488647][T13962] ? vfs_write+0x14c/0xdf0 [ 2903.493070][T13962] ? bit_wait_io_timeout+0x160/0x160 [ 2903.498356][T13962] ? fput+0x30/0x1a0 [ 2903.502254][T13962] ? ksys_write+0x1a7/0x250 [ 2903.506756][T13962] __x64_sys_process_vm_writev+0xe2/0x1b0 [ 2903.512499][T13962] ? syscall_enter_from_user_mode+0x26/0x80 [ 2903.518431][T13962] do_syscall_64+0x3f/0x110 [ 2903.522945][T13962] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2903.528842][T13962] RIP: 0033:0x7f6fcfc7cae9 [ 2903.533279][T13962] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2903.552886][T13962] RSP: 002b:00007f6fd098a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2903.561295][T13962] RAX: ffffffffffffffda RBX: 00007f6fcfd9c050 RCX: 00007f6fcfc7cae9 [ 2903.569264][T13962] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000002ce6 [ 2903.577233][T13962] RBP: 00007f6fd098a120 R08: 0000000000000001 R09: 0000000000000000 [ 2903.585205][T13962] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000002 [ 2903.593170][T13962] R13: 000000000000006e R14: 00007f6fcfd9c050 R15: 00007f6fcfebfa48 [ 2903.601144][T13962] 06:06:40 executing program 5: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r4, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3e6, 0x0) 06:06:42 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 69) 06:06:42 executing program 5: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r4, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3e7, 0x0) 06:06:42 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) (async) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) r2 = memfd_secret(0x0) ioctl$SNDCTL_DSP_GETOPTR(r2, 0x800c5012, &(0x7f0000000000)) ioctl$SNDCTL_DSP_NONBLOCK(r0, 0x500e, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{}], 0x1, 0xfffffffffffffff8) dup2(0xffffffffffffffff, 0xffffffffffffffff) (async) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, r1) (async) fcntl$setown(0xffffffffffffffff, 0x8, r1) tkill(r1, 0x14) write$dsp(r0, &(0x7f0000000100)="448da32b26405f92a14d45ab2152781ee83387150622dbd5ff3f4033c77f12f1832d311ab7cbbaef1e82c63a0738d1bdf7899643099307001fffb7746437b2dbf3595e2664440894fd51434fe01873ee21a0", 0x52) (async) write$dsp(r0, &(0x7f0000000100)="448da32b26405f92a14d45ab2152781ee83387150622dbd5ff3f4033c77f12f1832d311ab7cbbaef1e82c63a0738d1bdf7899643099307001fffb7746437b2dbf3595e2664440894fd51434fe01873ee21a0", 0x52) 06:06:43 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x4300c2, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r2}, 0x90) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0), 0x0) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000ac0)) r3 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r3}, 0x90) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0), 0x0) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000ac0)) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) r6 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r6}, 0x90) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000001c0), 0x0) ioctl$NS_GET_OWNER_UID(r6, 0xb704, &(0x7f0000000ac0)) ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000200)=0x1000000000003e) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f0000000500)={0x2, 0x5ccc, 0xe9, &(0x7f0000000540)=""/233}) fcntl$setsig(r4, 0xa, 0x12) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x2f, 0x8, 0xc3, 0x76d38bfa, 0x11, @loopback, @loopback, 0x20, 0x20, 0x2b784959, 0x5}}) sendmsg$nl_route(r6, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="04000b00060003000100000008000500", @ANYRES32=r7, @ANYBLOB="0800010001000000100008800c000100000000000000000106000700020000000600070007000000"], 0x74}, 0x1, 0x0, 0x0, 0x4c000}, 0x20008025) poll(&(0x7f0000b2c000)=[{r5}], 0x1, 0xfffffffffffffff8) dup2(r4, r5) fcntl$setown(r5, 0x8, r1) tkill(r1, 0x14) 06:06:43 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 70) 06:06:43 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) ioctl$int_in(r3, 0x5452, &(0x7f0000000200)=0x1000000000003e) (async) fcntl$setsig(r3, 0xa, 0x12) (async) poll(&(0x7f0000b2c000)=[{r4}], 0x1, 0xfffffffffffffff8) (async) r5 = syz_open_dev$vcsa(&(0x7f0000000000), 0x6, 0x88c0) (async) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000100)=0x1) r6 = dup3(r0, r0, 0x0) (async) r7 = getpgrp(r1) read$FUSE(r2, &(0x7f0000002280)={0x2020, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_GET_CLIENT(r6, 0xc0286405, &(0x7f0000000140)={0x7, 0x3, {r7}, {r8}, 0x3840, 0x9}) (async) read$FUSE(r2, &(0x7f0000000240)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_OPEN(r5, &(0x7f0000000040)={0x20, 0x0, r9, {0x0, 0xa}}, 0x20) dup2(r3, r4) (async) fcntl$setown(r4, 0x8, r1) tkill(r1, 0x14) 06:06:43 executing program 5: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r4, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3e8, 0x0) 06:06:43 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x4300c2, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r2}, 0x90) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0), 0x0) (async) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000ac0)) r3 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r3}, 0x90) (async) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0), 0x0) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000ac0)) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) (async) r6 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r6}, 0x90) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000001c0), 0x0) ioctl$NS_GET_OWNER_UID(r6, 0xb704, &(0x7f0000000ac0)) ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000200)=0x1000000000003e) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) (async) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f0000000500)={0x2, 0x5ccc, 0xe9, &(0x7f0000000540)=""/233}) fcntl$setsig(r4, 0xa, 0x12) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x2f, 0x8, 0xc3, 0x76d38bfa, 0x11, @loopback, @loopback, 0x20, 0x20, 0x2b784959, 0x5}}) sendmsg$nl_route(r6, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="04000b00060003000100000008000500", @ANYRES32=r7, @ANYBLOB="0800010001000000100008800c000100000000000000000106000700020000000600070007000000"], 0x74}, 0x1, 0x0, 0x0, 0x4c000}, 0x20008025) (async) poll(&(0x7f0000b2c000)=[{r5}], 0x1, 0xfffffffffffffff8) (async) dup2(r4, r5) (async) fcntl$setown(r5, 0x8, r1) (async) tkill(r1, 0x14) [ 2906.640662][T13988] FAULT_INJECTION: forcing a failure. [ 2906.640662][T13988] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2906.654428][T13988] CPU: 1 PID: 13988 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 2906.664528][T13988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2906.674581][T13988] Call Trace: [ 2906.677855][T13988] [ 2906.680781][T13988] dump_stack_lvl+0x125/0x1b0 [ 2906.685468][T13988] should_fail_ex+0x496/0x5b0 [ 2906.690242][T13988] ? fs_reclaim_acquire+0xb0/0x150 [ 2906.695368][T13988] __should_fail_alloc_page+0xe7/0x130 [ 2906.700840][T13988] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 2906.706994][T13988] __alloc_pages+0x14e/0x4a0 [ 2906.711584][T13988] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 2906.718372][T13988] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2906.724294][T13988] ? policy_nodemask+0x311/0x480 [ 2906.729228][T13988] alloc_pages_mpol+0x258/0x5f0 [ 2906.734080][T13988] ? mempolicy_in_oom_domain+0x150/0x150 [ 2906.739717][T13988] ? find_held_lock+0x2d/0x110 [ 2906.744681][T13988] vma_alloc_folio+0xad/0x220 [ 2906.749357][T13988] ? alloc_migration_target_by_mpol+0x6b0/0x6b0 [ 2906.755594][T13988] ? find_held_lock+0x2d/0x110 [ 2906.760361][T13988] ? filemap_get_read_batch+0x9b0/0x9b0 [ 2906.765914][T13988] __handle_mm_fault+0x100b/0x3d60 [ 2906.771036][T13988] ? vm_iomap_memory+0x170/0x170 [ 2906.775988][T13988] handle_mm_fault+0x478/0xa00 [ 2906.780762][T13988] __get_user_pages+0x4b2/0x1480 [ 2906.785705][T13988] ? follow_page_mask+0xda0/0xda0 [ 2906.790747][T13988] __gup_longterm_locked+0x278/0x2ab0 [ 2906.796133][T13988] ? get_user_pages_unlocked+0x770/0x770 [ 2906.801764][T13988] ? lock_sync+0x190/0x190 [ 2906.806208][T13988] pin_user_pages_remote+0xee/0x140 [ 2906.811445][T13988] ? __gup_longterm_locked+0x2ab0/0x2ab0 [ 2906.817116][T13988] process_vm_rw_core.constprop.0+0x43d/0xa10 [ 2906.823226][T13988] ? vmalloc_dump_obj+0x290/0x290 [ 2906.828267][T13988] process_vm_rw+0x2ff/0x360 [ 2906.832859][T13988] ? process_vm_rw_core.constprop.0+0xa10/0xa10 [ 2906.839103][T13988] ? _raw_spin_lock_irqsave+0x42/0x50 [ 2906.844480][T13988] ? lock_acquire+0x1ae/0x510 [ 2906.849179][T13988] ? handle_edge_irq+0x40a/0xcf0 [ 2906.854123][T13988] __x64_sys_process_vm_writev+0xe2/0x1b0 [ 2906.859865][T13988] ? syscall_enter_from_user_mode+0x26/0x80 [ 2906.865773][T13988] do_syscall_64+0x3f/0x110 [ 2906.870288][T13988] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2906.876220][T13988] RIP: 0033:0x7f6fcfc7cae9 [ 2906.880639][T13988] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2906.900248][T13988] RSP: 002b:00007f6fd098a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2906.908658][T13988] RAX: ffffffffffffffda RBX: 00007f6fcfd9c050 RCX: 00007f6fcfc7cae9 [ 2906.916628][T13988] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000002cec [ 2906.924596][T13988] RBP: 00007f6fd098a120 R08: 0000000000000001 R09: 0000000000000000 [ 2906.932563][T13988] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000002 [ 2906.940649][T13988] R13: 000000000000006e R14: 00007f6fcfd9c050 R15: 00007f6fcfebfa48 [ 2906.948631][T13988] 06:06:44 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async, rerun: 64) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) (async, rerun: 64) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000000)) (async) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) 06:06:44 executing program 5: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r4, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3e9, 0x0) 06:06:44 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 71) 06:06:44 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x4400, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) [ 2907.683544][T14007] FAULT_INJECTION: forcing a failure. [ 2907.683544][T14007] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2907.697646][T14007] CPU: 1 PID: 14007 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 2907.707758][T14007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2907.717843][T14007] Call Trace: [ 2907.721148][T14007] [ 2907.724199][T14007] dump_stack_lvl+0x125/0x1b0 [ 2907.728893][T14007] should_fail_ex+0x496/0x5b0 [ 2907.733598][T14007] ? fs_reclaim_acquire+0xb0/0x150 [ 2907.739449][T14007] __should_fail_alloc_page+0xe7/0x130 [ 2907.744935][T14007] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 2907.751103][T14007] __alloc_pages+0x14e/0x4a0 [ 2907.755890][T14007] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 2907.762715][T14007] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2907.768644][T14007] ? policy_nodemask+0x311/0x480 [ 2907.773686][T14007] alloc_pages_mpol+0x258/0x5f0 [ 2907.778563][T14007] ? mempolicy_in_oom_domain+0x150/0x150 [ 2907.784225][T14007] ? find_held_lock+0x2d/0x110 [ 2907.789039][T14007] vma_alloc_folio+0xad/0x220 [ 2907.793832][T14007] ? alloc_migration_target_by_mpol+0x6b0/0x6b0 [ 2907.800102][T14007] ? find_held_lock+0x2d/0x110 [ 2907.804894][T14007] ? filemap_get_read_batch+0x9b0/0x9b0 [ 2907.810469][T14007] __handle_mm_fault+0x100b/0x3d60 [ 2907.815625][T14007] ? vm_iomap_memory+0x170/0x170 [ 2907.820611][T14007] handle_mm_fault+0x478/0xa00 [ 2907.825402][T14007] __get_user_pages+0x4b2/0x1480 [ 2907.830363][T14007] ? follow_page_mask+0xda0/0xda0 [ 2907.835416][T14007] __gup_longterm_locked+0x278/0x2ab0 [ 2907.840818][T14007] ? get_user_pages_unlocked+0x770/0x770 [ 2907.846741][T14007] ? lock_sync+0x190/0x190 [ 2907.851193][T14007] pin_user_pages_remote+0xee/0x140 [ 2907.856413][T14007] ? __gup_longterm_locked+0x2ab0/0x2ab0 [ 2907.862076][T14007] process_vm_rw_core.constprop.0+0x43d/0xa10 [ 2907.868196][T14007] ? vmalloc_dump_obj+0x290/0x290 [ 2907.873262][T14007] process_vm_rw+0x2ff/0x360 [ 2907.877889][T14007] ? process_vm_rw_core.constprop.0+0xa10/0xa10 [ 2907.884140][T14007] ? ksys_write+0x214/0x250 [ 2907.888679][T14007] ? reacquire_held_locks+0x4b0/0x4b0 [ 2907.894079][T14007] ? vfs_write+0x14c/0xdf0 [ 2907.898520][T14007] ? bit_wait_io_timeout+0x160/0x160 [ 2907.903840][T14007] ? fput+0x30/0x1a0 [ 2907.907762][T14007] ? ksys_write+0x1a7/0x250 [ 2907.912380][T14007] __x64_sys_process_vm_writev+0xe2/0x1b0 [ 2907.918113][T14007] ? syscall_enter_from_user_mode+0x26/0x80 [ 2907.924024][T14007] do_syscall_64+0x3f/0x110 [ 2907.928642][T14007] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2907.935158][T14007] RIP: 0033:0x7f6fcfc7cae9 [ 2907.939585][T14007] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2907.959257][T14007] RSP: 002b:00007f6fd098a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2907.967684][T14007] RAX: ffffffffffffffda RBX: 00007f6fcfd9c050 RCX: 00007f6fcfc7cae9 [ 2907.975670][T14007] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000002cef 06:06:44 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x4400, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) (async) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) [ 2907.983648][T14007] RBP: 00007f6fd098a120 R08: 0000000000000001 R09: 0000000000000000 [ 2907.991626][T14007] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000002 [ 2907.999609][T14007] R13: 000000000000006e R14: 00007f6fcfd9c050 R15: 00007f6fcfebfa48 [ 2908.007603][T14007] 06:06:44 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x4400, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) (async) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) 06:06:47 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 72) 06:06:47 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000040)=0x3f) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) 06:06:47 executing program 5: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r4, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3ea, 0x0) [ 2910.610255][T14021] FAULT_INJECTION: forcing a failure. [ 2910.610255][T14021] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2910.626468][T14021] CPU: 1 PID: 14021 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 2910.636575][T14021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2910.646660][T14021] Call Trace: [ 2910.649963][T14021] [ 2910.652914][T14021] dump_stack_lvl+0x125/0x1b0 [ 2910.657643][T14021] should_fail_ex+0x496/0x5b0 [ 2910.662376][T14021] ? fs_reclaim_acquire+0xb0/0x150 [ 2910.667535][T14021] __should_fail_alloc_page+0xe7/0x130 [ 2910.673053][T14021] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 2910.679248][T14021] __alloc_pages+0x14e/0x4a0 [ 2910.683850][T14021] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 2910.690637][T14021] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2910.696526][T14021] ? policy_nodemask+0x311/0x480 [ 2910.701459][T14021] alloc_pages_mpol+0x258/0x5f0 [ 2910.706313][T14021] ? mempolicy_in_oom_domain+0x150/0x150 [ 2910.711938][T14021] ? find_held_lock+0x2d/0x110 [ 2910.716702][T14021] vma_alloc_folio+0xad/0x220 [ 2910.721373][T14021] ? alloc_migration_target_by_mpol+0x6b0/0x6b0 [ 2910.727614][T14021] ? find_held_lock+0x2d/0x110 [ 2910.732381][T14021] ? filemap_get_read_batch+0x9b0/0x9b0 [ 2910.737928][T14021] __handle_mm_fault+0x100b/0x3d60 [ 2910.743042][T14021] ? vm_iomap_memory+0x170/0x170 [ 2910.747989][T14021] handle_mm_fault+0x478/0xa00 [ 2910.752757][T14021] __get_user_pages+0x4b2/0x1480 [ 2910.757711][T14021] ? follow_page_mask+0xda0/0xda0 [ 2910.762746][T14021] ? down_read+0x470/0x470 [ 2910.767164][T14021] __gup_longterm_locked+0x278/0x2ab0 [ 2910.772541][T14021] ? get_user_pages_unlocked+0x770/0x770 [ 2910.778179][T14021] ? lock_sync+0x190/0x190 [ 2910.782630][T14021] pin_user_pages_remote+0xee/0x140 [ 2910.787853][T14021] ? __gup_longterm_locked+0x2ab0/0x2ab0 [ 2910.793507][T14021] process_vm_rw_core.constprop.0+0x43d/0xa10 [ 2910.799587][T14021] ? vmalloc_dump_obj+0x290/0x290 [ 2910.804622][T14021] process_vm_rw+0x2ff/0x360 [ 2910.809208][T14021] ? process_vm_rw_core.constprop.0+0xa10/0xa10 [ 2910.815501][T14021] ? ksys_write+0x214/0x250 [ 2910.820007][T14021] ? reacquire_held_locks+0x4b0/0x4b0 [ 2910.825389][T14021] ? vfs_write+0x14c/0xdf0 [ 2910.829813][T14021] ? bit_wait_io_timeout+0x160/0x160 [ 2910.835102][T14021] ? fput+0x30/0x1a0 [ 2910.839000][T14021] ? ksys_write+0x1a7/0x250 [ 2910.843504][T14021] __x64_sys_process_vm_writev+0xe2/0x1b0 [ 2910.849232][T14021] ? syscall_enter_from_user_mode+0x26/0x80 [ 2910.855125][T14021] do_syscall_64+0x3f/0x110 [ 2910.859629][T14021] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2910.865518][T14021] RIP: 0033:0x7f6fcfc7cae9 [ 2910.869922][T14021] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2910.889549][T14021] RSP: 002b:00007f6fd098a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2910.897957][T14021] RAX: ffffffffffffffda RBX: 00007f6fcfd9c050 RCX: 00007f6fcfc7cae9 06:06:47 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r2 = getpid() getpgid(r2) sched_setscheduler(r2, 0x2, &(0x7f0000000b80)) sched_setscheduler(r2, 0x0, &(0x7f0000000000)=0x100) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) ioctl$int_in(r3, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r4}], 0x1, 0xfffffffffffffff8) dup2(r3, r4) fcntl$setown(r4, 0x8, r1) tkill(r1, 0x14) 06:06:47 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x4300c2, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') (async) r2 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r2}, 0x90) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0), 0x0) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000ac0)) (async) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000ac0)) r3 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r3}, 0x90) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0), 0x0) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000ac0)) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) r6 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r6}, 0x90) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000001c0), 0x0) ioctl$NS_GET_OWNER_UID(r6, 0xb704, &(0x7f0000000ac0)) (async) ioctl$NS_GET_OWNER_UID(r6, 0xb704, &(0x7f0000000ac0)) ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0) (async) ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000200)=0x1000000000003e) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f0000000500)={0x2, 0x5ccc, 0xe9, &(0x7f0000000540)=""/233}) fcntl$setsig(r4, 0xa, 0x12) (async) fcntl$setsig(r4, 0xa, 0x12) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x2f, 0x8, 0xc3, 0x76d38bfa, 0x11, @loopback, @loopback, 0x20, 0x20, 0x2b784959, 0x5}}) sendmsg$nl_route(r6, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="04000b00060003000100000008000500", @ANYRES32=r7, @ANYBLOB="0800010001000000100008800c000100000000000000000106000700020000000600070007000000"], 0x74}, 0x1, 0x0, 0x0, 0x4c000}, 0x20008025) poll(&(0x7f0000b2c000)=[{r5}], 0x1, 0xfffffffffffffff8) (async) poll(&(0x7f0000b2c000)=[{r5}], 0x1, 0xfffffffffffffff8) dup2(r4, r5) (async) dup2(r4, r5) fcntl$setown(r5, 0x8, r1) (async) fcntl$setown(r5, 0x8, r1) tkill(r1, 0x14) 06:06:47 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) r4 = syz_open_dev$swradio(&(0x7f0000000100), 0x0, 0x2) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f00000004c0)=0xfd80000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) fcntl$setsig(r5, 0xa, 0x41) read(r4, &(0x7f0000000240)=""/170, 0xaa) dup2(r2, r3) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="00e7ffff0800010000000000080002000000000000000000000048177bb8d8dbf3774b94"], 0x3c}}, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) r10 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r10}, 0x90) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f00000001c0), 0x0) ioctl$NS_GET_OWNER_UID(r10, 0xb704, &(0x7f0000000ac0)) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r10, 0xc1105517, &(0x7f0000000380)={{0xa, 0x6, 0x7, 0x2, 'syz0\x00', 0x1}, 0x2, 0x30, 0x2, r1, 0x5, 0x1ff, 'syz1\x00', &(0x7f0000000140)=['/dev/swradio#\x00', '%\\\x00', '%,}}}\x00', '\x00', '}\x00'], 0x1a}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) dup2(r8, r9) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) [ 2910.905938][T14021] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000002cf2 [ 2910.913913][T14021] RBP: 00007f6fd098a120 R08: 0000000000000001 R09: 0000000000000000 [ 2910.921886][T14021] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000002 [ 2910.929850][T14021] R13: 000000000000006e R14: 00007f6fcfd9c050 R15: 00007f6fcfebfa48 [ 2910.937829][T14021] 06:06:47 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000040)=0x3f) (async) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) 06:06:47 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 73) 06:06:47 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x600081, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r2}, 0x90) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0), 0x0) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000ac0)) r3 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r3}, 0x90) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0), 0x0) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000ac0)) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) r4 = gettid() ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$int_in(r6, 0x5421, &(0x7f0000000200)=0x29d) fcntl$setsig(r5, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r6}], 0x1, 0xfffffffffffffff8) dup2(r5, r6) fcntl$setown(r6, 0x8, r4) tkill(r4, 0x14) 06:06:47 executing program 5: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r4, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3eb, 0x0) [ 2911.510806][T14056] FAULT_INJECTION: forcing a failure. [ 2911.510806][T14056] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2911.529400][T14056] CPU: 1 PID: 14056 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 2911.539529][T14056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2911.549615][T14056] Call Trace: [ 2911.553004][T14056] [ 2911.555955][T14056] dump_stack_lvl+0x125/0x1b0 [ 2911.560682][T14056] should_fail_ex+0x496/0x5b0 [ 2911.565423][T14056] ? fs_reclaim_acquire+0xb0/0x150 [ 2911.570575][T14056] __should_fail_alloc_page+0xe7/0x130 [ 2911.576087][T14056] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 2911.582298][T14056] __alloc_pages+0x14e/0x4a0 [ 2911.586927][T14056] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 2911.593746][T14056] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2911.599679][T14056] ? policy_nodemask+0x311/0x480 [ 2911.604652][T14056] alloc_pages_mpol+0x258/0x5f0 [ 2911.609557][T14056] ? mempolicy_in_oom_domain+0x150/0x150 [ 2911.615249][T14056] ? find_held_lock+0x2d/0x110 [ 2911.620067][T14056] vma_alloc_folio+0xad/0x220 [ 2911.624793][T14056] ? alloc_migration_target_by_mpol+0x6b0/0x6b0 [ 2911.631073][T14056] ? find_held_lock+0x2d/0x110 [ 2911.635897][T14056] ? filemap_get_read_batch+0x9b0/0x9b0 [ 2911.641480][T14056] __handle_mm_fault+0x100b/0x3d60 [ 2911.646642][T14056] ? vm_iomap_memory+0x170/0x170 [ 2911.651646][T14056] handle_mm_fault+0x478/0xa00 [ 2911.656454][T14056] __get_user_pages+0x4b2/0x1480 [ 2911.661443][T14056] ? follow_page_mask+0xda0/0xda0 [ 2911.666508][T14056] ? down_read+0x470/0x470 [ 2911.670969][T14056] __gup_longterm_locked+0x278/0x2ab0 [ 2911.676398][T14056] ? get_user_pages_unlocked+0x770/0x770 [ 2911.682072][T14056] ? lock_sync+0x190/0x190 [ 2911.686551][T14056] pin_user_pages_remote+0xee/0x140 [ 2911.691788][T14056] ? __gup_longterm_locked+0x2ab0/0x2ab0 [ 2911.697468][T14056] process_vm_rw_core.constprop.0+0x43d/0xa10 [ 2911.703586][T14056] ? vmalloc_dump_obj+0x290/0x290 [ 2911.708671][T14056] process_vm_rw+0x2ff/0x360 [ 2911.713297][T14056] ? process_vm_rw_core.constprop.0+0xa10/0xa10 [ 2911.719569][T14056] ? ksys_write+0x214/0x250 [ 2911.724114][T14056] ? reacquire_held_locks+0x4b0/0x4b0 [ 2911.729528][T14056] ? vfs_write+0x14c/0xdf0 [ 2911.733995][T14056] ? bit_wait_io_timeout+0x160/0x160 [ 2911.739305][T14056] ? fput+0x30/0x1a0 [ 2911.743221][T14056] ? ksys_write+0x1a7/0x250 [ 2911.747745][T14056] __x64_sys_process_vm_writev+0xe2/0x1b0 [ 2911.753481][T14056] ? syscall_enter_from_user_mode+0x26/0x80 [ 2911.759389][T14056] do_syscall_64+0x3f/0x110 [ 2911.763913][T14056] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2911.769829][T14056] RIP: 0033:0x7f6fcfc7cae9 [ 2911.774254][T14056] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2911.793877][T14056] RSP: 002b:00007f6fd098a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2911.802302][T14056] RAX: ffffffffffffffda RBX: 00007f6fcfd9c050 RCX: 00007f6fcfc7cae9 [ 2911.810281][T14056] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000002cf5 [ 2911.818264][T14056] RBP: 00007f6fd098a120 R08: 0000000000000001 R09: 0000000000000000 [ 2911.826244][T14056] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000002 [ 2911.834221][T14056] R13: 000000000000006e R14: 00007f6fcfd9c050 R15: 00007f6fcfebfa48 [ 2911.842221][T14056] 06:06:48 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) r1 = gettid() (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) (async) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r2, 0xa, 0x12) (async) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) (async) r4 = syz_open_dev$swradio(&(0x7f0000000100), 0x0, 0x2) (async) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f00000004c0)=0xfd80000) (async) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) fcntl$setsig(r5, 0xa, 0x41) (async) read(r4, &(0x7f0000000240)=""/170, 0xaa) dup2(r2, r3) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) (async) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="00e7ffff0800010000000000080002000000000000000000000048177bb8d8dbf3774b94"], 0x3c}}, 0x0) (async) r9 = socket$inet_udplite(0x2, 0x2, 0x88) (async) r10 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r10}, 0x90) (async) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f00000001c0), 0x0) (async) ioctl$NS_GET_OWNER_UID(r10, 0xb704, &(0x7f0000000ac0)) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r10, 0xc1105517, &(0x7f0000000380)={{0xa, 0x6, 0x7, 0x2, 'syz0\x00', 0x1}, 0x2, 0x30, 0x2, r1, 0x5, 0x1ff, 'syz1\x00', &(0x7f0000000140)=['/dev/swradio#\x00', '%\\\x00', '%,}}}\x00', '\x00', '}\x00'], 0x1a}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) (async) dup2(r8, r9) (async) fcntl$setown(r3, 0x8, r1) (async) tkill(r1, 0x14) 06:06:48 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() (async) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) r2 = getpid() getpgid(r2) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000b80)) (async, rerun: 64) sched_setscheduler(r2, 0x0, &(0x7f0000000000)=0x100) (rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) (async) ioctl$int_in(r3, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r4}], 0x1, 0xfffffffffffffff8) (async, rerun: 32) dup2(r3, r4) (async, rerun: 32) fcntl$setown(r4, 0x8, r1) (async) tkill(r1, 0x14) 06:06:48 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 74) 06:06:48 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) (async) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) (async) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) r4 = syz_open_dev$swradio(&(0x7f0000000100), 0x0, 0x2) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f00000004c0)=0xfd80000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) fcntl$setsig(r5, 0xa, 0x41) read(r4, &(0x7f0000000240)=""/170, 0xaa) (async) read(r4, &(0x7f0000000240)=""/170, 0xaa) dup2(r2, r3) socket$inet_udplite(0x2, 0x2, 0x88) (async) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="00e7ffff0800010000000000080002000000000000000000000048177bb8d8dbf3774b94"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="00e7ffff0800010000000000080002000000000000000000000048177bb8d8dbf3774b94"], 0x3c}}, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) r10 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r10}, 0x90) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f00000001c0), 0x0) ioctl$NS_GET_OWNER_UID(r10, 0xb704, &(0x7f0000000ac0)) (async) ioctl$NS_GET_OWNER_UID(r10, 0xb704, &(0x7f0000000ac0)) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r10, 0xc1105517, &(0x7f0000000380)={{0xa, 0x6, 0x7, 0x2, 'syz0\x00', 0x1}, 0x2, 0x30, 0x2, r1, 0x5, 0x1ff, 'syz1\x00', &(0x7f0000000140)=['/dev/swradio#\x00', '%\\\x00', '%,}}}\x00', '\x00', '}\x00'], 0x1a}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) dup2(r8, r9) (async) dup2(r8, r9) fcntl$setown(r3, 0x8, r1) (async) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) (async) tkill(r1, 0x14) [ 2912.296702][T14078] FAULT_INJECTION: forcing a failure. [ 2912.296702][T14078] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2912.328658][T14078] CPU: 1 PID: 14078 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 2912.338771][T14078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2912.348841][T14078] Call Trace: [ 2912.352129][T14078] [ 2912.355059][T14078] dump_stack_lvl+0x125/0x1b0 [ 2912.359767][T14078] should_fail_ex+0x496/0x5b0 [ 2912.364578][T14078] ? fs_reclaim_acquire+0xb0/0x150 [ 2912.369735][T14078] __should_fail_alloc_page+0xe7/0x130 [ 2912.375213][T14078] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 2912.381374][T14078] __alloc_pages+0x14e/0x4a0 [ 2912.385990][T14078] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 2912.392829][T14078] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2912.398764][T14078] ? policy_nodemask+0x311/0x480 [ 2912.403770][T14078] alloc_pages_mpol+0x258/0x5f0 [ 2912.408667][T14078] ? mempolicy_in_oom_domain+0x150/0x150 [ 2912.414345][T14078] ? find_held_lock+0x2d/0x110 [ 2912.419152][T14078] vma_alloc_folio+0xad/0x220 [ 2912.423861][T14078] ? alloc_migration_target_by_mpol+0x6b0/0x6b0 [ 2912.430105][T14078] ? find_held_lock+0x2d/0x110 [ 2912.434898][T14078] ? filemap_get_read_batch+0x9b0/0x9b0 [ 2912.440494][T14078] __handle_mm_fault+0x100b/0x3d60 [ 2912.445625][T14078] ? vm_iomap_memory+0x170/0x170 [ 2912.450585][T14078] handle_mm_fault+0x478/0xa00 [ 2912.455363][T14078] __get_user_pages+0x4b2/0x1480 [ 2912.460308][T14078] ? follow_page_mask+0xda0/0xda0 [ 2912.465343][T14078] __gup_longterm_locked+0x278/0x2ab0 [ 2912.470728][T14078] ? get_user_pages_unlocked+0x770/0x770 [ 2912.476391][T14078] ? lock_sync+0x190/0x190 [ 2912.480858][T14078] pin_user_pages_remote+0xee/0x140 [ 2912.486087][T14078] ? __gup_longterm_locked+0x2ab0/0x2ab0 [ 2912.491745][T14078] process_vm_rw_core.constprop.0+0x43d/0xa10 [ 2912.497850][T14078] ? vmalloc_dump_obj+0x290/0x290 [ 2912.502918][T14078] process_vm_rw+0x2ff/0x360 [ 2912.507525][T14078] ? process_vm_rw_core.constprop.0+0xa10/0xa10 [ 2912.513773][T14078] ? ksys_write+0x214/0x250 [ 2912.518280][T14078] ? reacquire_held_locks+0x4b0/0x4b0 [ 2912.523784][T14078] ? vfs_write+0x14c/0xdf0 [ 2912.528247][T14078] ? bit_wait_io_timeout+0x160/0x160 [ 2912.533565][T14078] __x64_sys_process_vm_writev+0xe2/0x1b0 [ 2912.539309][T14078] do_syscall_64+0x3f/0x110 [ 2912.543825][T14078] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2912.549721][T14078] RIP: 0033:0x7f6fcfc7cae9 [ 2912.554243][T14078] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2912.573895][T14078] RSP: 002b:00007f6fd098a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2912.582330][T14078] RAX: ffffffffffffffda RBX: 00007f6fcfd9c050 RCX: 00007f6fcfc7cae9 06:06:49 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) (async, rerun: 64) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async, rerun: 64) r1 = gettid() (async) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async, rerun: 32) r2 = getpid() getpgid(r2) sched_setscheduler(r2, 0x2, &(0x7f0000000b80)) (async, rerun: 64) sched_setscheduler(r2, 0x0, &(0x7f0000000000)=0x100) (rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) ioctl$int_in(r3, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r3, 0xa, 0x12) (async) poll(&(0x7f0000b2c000)=[{r4}], 0x1, 0xfffffffffffffff8) (async) dup2(r3, r4) (async) fcntl$setown(r4, 0x8, r1) (async) tkill(r1, 0x14) [ 2912.590315][T14078] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000002cf8 [ 2912.598313][T14078] RBP: 00007f6fd098a120 R08: 0000000000000001 R09: 0000000000000000 [ 2912.606282][T14078] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000002 [ 2912.614248][T14078] R13: 000000000000006e R14: 00007f6fcfd9c050 R15: 00007f6fcfebfa48 [ 2912.622252][T14078] 06:06:49 executing program 5: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r4, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3ec, 0x0) 06:06:49 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 75) [ 2912.974661][T14089] FAULT_INJECTION: forcing a failure. [ 2912.974661][T14089] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2912.990413][T14089] CPU: 0 PID: 14089 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 2913.000526][T14089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2913.010630][T14089] Call Trace: [ 2913.013936][T14089] [ 2913.016895][T14089] dump_stack_lvl+0x125/0x1b0 [ 2913.021643][T14089] should_fail_ex+0x496/0x5b0 [ 2913.026384][T14089] ? fs_reclaim_acquire+0xb0/0x150 [ 2913.031561][T14089] __should_fail_alloc_page+0xe7/0x130 [ 2913.037082][T14089] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 2913.043296][T14089] __alloc_pages+0x14e/0x4a0 [ 2913.047936][T14089] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2913.054139][T14089] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 2913.060963][T14089] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2913.066902][T14089] ? policy_nodemask+0x311/0x480 [ 2913.071887][T14089] alloc_pages_mpol+0x258/0x5f0 [ 2913.076793][T14089] ? mempolicy_in_oom_domain+0x150/0x150 [ 2913.082449][T14089] ? find_held_lock+0x2d/0x110 [ 2913.087236][T14089] vma_alloc_folio+0xad/0x220 [ 2913.091930][T14089] ? alloc_migration_target_by_mpol+0x6b0/0x6b0 [ 2913.098183][T14089] ? find_held_lock+0x2d/0x110 [ 2913.102970][T14089] ? filemap_get_read_batch+0x9b0/0x9b0 [ 2913.108563][T14089] __handle_mm_fault+0x100b/0x3d60 [ 2913.113787][T14089] ? vm_iomap_memory+0x170/0x170 [ 2913.118762][T14089] handle_mm_fault+0x478/0xa00 [ 2913.123559][T14089] __get_user_pages+0x4b2/0x1480 [ 2913.128522][T14089] ? follow_page_mask+0xda0/0xda0 [ 2913.133579][T14089] __gup_longterm_locked+0x278/0x2ab0 [ 2913.138983][T14089] ? get_user_pages_unlocked+0x770/0x770 [ 2913.144635][T14089] ? lock_sync+0x190/0x190 [ 2913.149089][T14089] pin_user_pages_remote+0xee/0x140 [ 2913.154305][T14089] ? __gup_longterm_locked+0x2ab0/0x2ab0 [ 2913.159964][T14089] process_vm_rw_core.constprop.0+0x43d/0xa10 [ 2913.166071][T14089] ? vmalloc_dump_obj+0x290/0x290 [ 2913.171135][T14089] process_vm_rw+0x2ff/0x360 [ 2913.175740][T14089] ? process_vm_rw_core.constprop.0+0xa10/0xa10 [ 2913.181997][T14089] ? ksys_write+0x214/0x250 [ 2913.186520][T14089] ? reacquire_held_locks+0x4b0/0x4b0 [ 2913.191926][T14089] ? vfs_write+0x14c/0xdf0 [ 2913.196370][T14089] ? bit_wait_io_timeout+0x160/0x160 [ 2913.201684][T14089] ? fput+0x30/0x1a0 [ 2913.205602][T14089] ? ksys_write+0x1a7/0x250 [ 2913.210141][T14089] __x64_sys_process_vm_writev+0xe2/0x1b0 [ 2913.215895][T14089] ? syscall_enter_from_user_mode+0x26/0x80 [ 2913.221816][T14089] do_syscall_64+0x3f/0x110 [ 2913.226346][T14089] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2913.232265][T14089] RIP: 0033:0x7f6fcfc7cae9 [ 2913.236692][T14089] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2913.256318][T14089] RSP: 002b:00007f6fd09ab0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2913.264747][T14089] RAX: ffffffffffffffda RBX: 00007f6fcfd9bf80 RCX: 00007f6fcfc7cae9 [ 2913.272732][T14089] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000002cfa [ 2913.280714][T14089] RBP: 00007f6fd09ab120 R08: 0000000000000001 R09: 0000000000000000 [ 2913.288706][T14089] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000002 [ 2913.296693][T14089] R13: 000000000000000b R14: 00007f6fcfd9bf80 R15: 00007f6fcfebfa48 [ 2913.304690][T14089] 06:06:50 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 76) 06:06:52 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000040)=0x3f) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) (async) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) (async) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000040)=0x3f) (async) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) (async) 06:06:52 executing program 5: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r4, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3ed, 0x0) 06:06:52 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 77) 06:06:52 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r1}, 0x90) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0), 0x0) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000ac0)) r2 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r2}, 0x90) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0), 0x0) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000ac0)) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000000)=0x9) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r3 = gettid() pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) ioctl$int_in(r4, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r4, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r5}], 0x1, 0xfffffffffffffff8) dup2(r4, r5) r6 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r6}, 0x90) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000001c0), 0x0) ioctl$NS_GET_OWNER_UID(r6, 0xb704, &(0x7f0000000ac0)) openat$cgroup_ro(r6, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ptrace$ARCH_SET_CPUID(0x1e, r3, 0x1, 0x1012) fcntl$setown(r5, 0x8, r3) tkill(r3, 0x14) 06:06:52 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x600081, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r2}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r2}, 0x90) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0), 0x0) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000ac0)) (async) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000ac0)) syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') (async) r3 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r3}, 0x90) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0), 0x0) (async) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0), 0x0) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000ac0)) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) r4 = gettid() ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$int_in(r6, 0x5421, &(0x7f0000000200)=0x29d) (async) ioctl$int_in(r6, 0x5421, &(0x7f0000000200)=0x29d) fcntl$setsig(r5, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r6}], 0x1, 0xfffffffffffffff8) dup2(r5, r6) (async) dup2(r5, r6) fcntl$setown(r6, 0x8, r4) tkill(r4, 0x14) 06:06:52 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') (async) r1 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r1}, 0x90) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0), 0x0) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000ac0)) r2 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r2}, 0x90) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0), 0x0) (async) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0), 0x0) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000ac0)) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000000)=0x9) (async) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000000)=0x9) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r3 = gettid() pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) ioctl$int_in(r4, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r4, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r5}], 0x1, 0xfffffffffffffff8) dup2(r4, r5) (async) dup2(r4, r5) r6 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r6}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r6}, 0x90) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000001c0), 0x0) (async) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000001c0), 0x0) ioctl$NS_GET_OWNER_UID(r6, 0xb704, &(0x7f0000000ac0)) (async) ioctl$NS_GET_OWNER_UID(r6, 0xb704, &(0x7f0000000ac0)) openat$cgroup_ro(r6, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ptrace$ARCH_SET_CPUID(0x1e, r3, 0x1, 0x1012) fcntl$setown(r5, 0x8, r3) tkill(r3, 0x14) 06:06:52 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 78) 06:06:53 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() r2 = dup(r0) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) ioctl$int_in(r3, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r4}], 0x1, 0xfffffffffffffff8) dup2(r3, r4) fcntl$setown(r4, 0x8, r1) tkill(r1, 0x14) 06:06:53 executing program 5: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r4, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3ee, 0x0) 06:06:53 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 79) 06:06:53 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() (async) r2 = dup(r0) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) ioctl$int_in(r3, 0x5452, &(0x7f0000000200)=0x1000000000003e) (async) fcntl$setsig(r3, 0xa, 0x12) (async) poll(&(0x7f0000b2c000)=[{r4}], 0x1, 0xfffffffffffffff8) (async) dup2(r3, r4) (async) fcntl$setown(r4, 0x8, r1) (async) tkill(r1, 0x14) 06:06:53 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 80) 06:06:57 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000280)="a7", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000002cc0)={0x0, 0x2}, 0x8) sendto$inet(r2, &(0x7f0000000000)='5', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0), 0x8) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) 06:06:57 executing program 5: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r4, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3ef, 0x0) 06:06:57 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 81) 06:06:57 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) r1 = gettid() (async) r2 = dup(r0) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) (async) ioctl$int_in(r3, 0x5452, &(0x7f0000000200)=0x1000000000003e) (async) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r4}], 0x1, 0xfffffffffffffff8) dup2(r3, r4) (async) fcntl$setown(r4, 0x8, r1) (async) tkill(r1, 0x14) 06:06:57 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) (async) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x600081, 0x0) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r2}, 0x90) (async) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0), 0x0) (async) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000ac0)) r3 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r3}, 0x90) (async) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0), 0x0) (async) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000ac0)) (async) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) (async) r4 = gettid() ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) (async) syz_open_dev$ptys(0xc, 0x3, 0x1) (async) ioctl$int_in(r6, 0x5421, &(0x7f0000000200)=0x29d) (async) fcntl$setsig(r5, 0xa, 0x12) (async) poll(&(0x7f0000b2c000)=[{r6}], 0x1, 0xfffffffffffffff8) dup2(r5, r6) (async) fcntl$setown(r6, 0x8, r4) (async) tkill(r4, 0x14) 06:06:57 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r1}, 0x90) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0), 0x0) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000ac0)) (async, rerun: 32) r2 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r2}, 0x90) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0), 0x0) (async, rerun: 64) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000ac0)) (async, rerun: 64) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000000)=0x9) (async) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async, rerun: 32) r3 = gettid() (rerun: 32) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) ioctl$int_in(r4, 0x5452, &(0x7f0000000200)=0x1000000000003e) (async, rerun: 32) fcntl$setsig(r4, 0xa, 0x12) (async, rerun: 32) poll(&(0x7f0000b2c000)=[{r5}], 0x1, 0xfffffffffffffff8) dup2(r4, r5) r6 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r6}, 0x90) (async) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000001c0), 0x0) (async, rerun: 64) ioctl$NS_GET_OWNER_UID(r6, 0xb704, &(0x7f0000000ac0)) (async, rerun: 64) openat$cgroup_ro(r6, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ptrace$ARCH_SET_CPUID(0x1e, r3, 0x1, 0x1012) (async, rerun: 64) fcntl$setown(r5, 0x8, r3) (rerun: 64) tkill(r3, 0x14) 06:06:57 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 82) 06:06:57 executing program 5: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r4, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3f0, 0x0) 06:06:57 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0xfffffffc}}, 0x18) r1 = syz_open_dev$dmmidi(&(0x7f0000000000), 0x76e, 0x400000) ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r2 = gettid() pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) ioctl$int_in(r3, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r4}], 0x1, 0xfffffffffffffff8) dup2(r3, r4) fcntl$setown(r4, 0x8, r2) tkill(r2, 0x14) 06:06:57 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000280)="a7", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000002cc0)={0x0, 0x2}, 0x8) sendto$inet(r2, &(0x7f0000000000)='5', 0x1, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0), 0x8) (async) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) 06:06:57 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0xfffffffc}}, 0x18) (async) r1 = syz_open_dev$dmmidi(&(0x7f0000000000), 0x76e, 0x400000) ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, &(0x7f0000000040)) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) r2 = gettid() pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) (async, rerun: 64) ioctl$int_in(r3, 0x5452, &(0x7f0000000200)=0x1000000000003e) (rerun: 64) fcntl$setsig(r3, 0xa, 0x12) (async) poll(&(0x7f0000b2c000)=[{r4}], 0x1, 0xfffffffffffffff8) (async) dup2(r3, r4) (async) fcntl$setown(r4, 0x8, r2) (async) tkill(r2, 0x14) 06:06:58 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0xfffffffc}}, 0x18) r1 = syz_open_dev$dmmidi(&(0x7f0000000000), 0x76e, 0x400000) ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r2 = gettid() pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) ioctl$int_in(r3, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r4}], 0x1, 0xfffffffffffffff8) dup2(r3, r4) fcntl$setown(r4, 0x8, r2) tkill(r2, 0x14) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) (async) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0xfffffffc}}, 0x18) (async) syz_open_dev$dmmidi(&(0x7f0000000000), 0x76e, 0x400000) (async) ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, &(0x7f0000000040)) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) gettid() (async) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) (async) ioctl$int_in(r3, 0x5452, &(0x7f0000000200)=0x1000000000003e) (async) fcntl$setsig(r3, 0xa, 0x12) (async) poll(&(0x7f0000b2c000)=[{r4}], 0x1, 0xfffffffffffffff8) (async) dup2(r3, r4) (async) fcntl$setown(r4, 0x8, r2) (async) tkill(r2, 0x14) (async) 06:06:58 executing program 5: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r4, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3f1, 0x0) 06:06:58 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 83) [ 2921.832997][T14202] FAULT_INJECTION: forcing a failure. [ 2921.832997][T14202] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2921.853206][T14202] CPU: 1 PID: 14202 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 2921.863314][T14202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2921.873455][T14202] Call Trace: [ 2921.876730][T14202] [ 2921.879662][T14202] dump_stack_lvl+0x125/0x1b0 [ 2921.884344][T14202] should_fail_ex+0x496/0x5b0 [ 2921.889026][T14202] ? fs_reclaim_acquire+0xb0/0x150 [ 2921.894137][T14202] __should_fail_alloc_page+0xe7/0x130 [ 2921.899606][T14202] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 2921.905767][T14202] __alloc_pages+0x14e/0x4a0 [ 2921.910357][T14202] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 2921.917119][T14202] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2921.923012][T14202] ? policy_nodemask+0x311/0x480 [ 2921.928301][T14202] alloc_pages_mpol+0x258/0x5f0 [ 2921.933151][T14202] ? mempolicy_in_oom_domain+0x150/0x150 [ 2921.938789][T14202] ? find_held_lock+0x2d/0x110 [ 2921.943572][T14202] vma_alloc_folio+0xad/0x220 [ 2921.948273][T14202] ? alloc_migration_target_by_mpol+0x6b0/0x6b0 [ 2921.954516][T14202] ? find_held_lock+0x2d/0x110 [ 2921.959286][T14202] ? filemap_get_read_batch+0x9b0/0x9b0 [ 2921.964835][T14202] __handle_mm_fault+0x100b/0x3d60 [ 2921.969955][T14202] ? vm_iomap_memory+0x170/0x170 [ 2921.974911][T14202] handle_mm_fault+0x478/0xa00 [ 2921.979679][T14202] __get_user_pages+0x4b2/0x1480 [ 2921.984616][T14202] ? follow_page_mask+0xda0/0xda0 [ 2921.989661][T14202] __gup_longterm_locked+0x278/0x2ab0 [ 2921.995053][T14202] ? get_user_pages_unlocked+0x770/0x770 [ 2922.000775][T14202] ? lock_sync+0x190/0x190 [ 2922.005203][T14202] pin_user_pages_remote+0xee/0x140 [ 2922.010406][T14202] ? __gup_longterm_locked+0x2ab0/0x2ab0 [ 2922.016040][T14202] process_vm_rw_core.constprop.0+0x43d/0xa10 [ 2922.022107][T14202] ? asm_common_interrupt+0x26/0x40 [ 2922.027303][T14202] ? lockdep_hardirqs_on+0x7d/0x100 [ 2922.032503][T14202] ? vmalloc_dump_obj+0x290/0x290 [ 2922.037536][T14202] process_vm_rw+0x2ff/0x360 [ 2922.042118][T14202] ? process_vm_rw_core.constprop.0+0xa10/0xa10 [ 2922.048362][T14202] ? vfs_write+0x14c/0xdf0 [ 2922.052785][T14202] ? rcu_is_watching+0x12/0xb0 [ 2922.057552][T14202] ? folio_memcg_unlock+0x280/0x280 [ 2922.062769][T14202] ? ksys_write+0x1a7/0x250 [ 2922.067291][T14202] __x64_sys_process_vm_writev+0xe2/0x1b0 [ 2922.073010][T14202] ? syscall_enter_from_user_mode+0x26/0x80 [ 2922.078911][T14202] do_syscall_64+0x3f/0x110 [ 2922.083418][T14202] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2922.089305][T14202] RIP: 0033:0x7f6fcfc7cae9 [ 2922.093715][T14202] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2922.113318][T14202] RSP: 002b:00007f6fd098a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2922.121727][T14202] RAX: ffffffffffffffda RBX: 00007f6fcfd9c050 RCX: 00007f6fcfc7cae9 06:06:58 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002440)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000089e24f9f9d97c4104ad2d4348c8cc96b48d58cf8e8acfde2daae5b8b69c4b", @ANYRES32=r6, @ANYBLOB="00000000000000001c001a801800048014000a8008000100000000000800020000000000"], 0x3c}}, 0x0) sendmsg$unix(r7, &(0x7f0000002400)={&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002380)=[{&(0x7f0000000240)="8bbdb8562f0f6f0c9806663a64269a87a6776bb69c6734cf58a8bc522b262d58a556fcd8a8be4b434c915a038b59366a00f03659a6543ed0f4a5b20614bf791a623abef2f27d6b3346d121431e283c33c964f80f72ec35b2951f1905b6f9633828bf934940448d0ff913e9f62e359820520593ea89f4eae9f12fcd2b41aed3227a6d78d3366142e2ec8ac9f231acb07ac17bc57a858101add5a922", 0x9b}, {&(0x7f0000000100)="20f7d69bb2767a", 0x7}, {&(0x7f0000000300)="350a6df4d317bf2e72591b6c410cbbd94ce92bc5ec55139ed976659766c4ebbd38c32ea0ecf002860056e20114ce630df0278927881a12ca1119c8a0cc84889de332d652696e320b58a23aaec2c1b51eecb118e5362c4b1e43e1", 0x5a}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000000140)="f9b573245ce1ced83466f0edc25130476ac79772880aa1ddca8283ff23464f649595bddc", 0x24}, {&(0x7f0000001380)="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", 0x1000}], 0x6, &(0x7f00000001c0), 0x0, 0xc4}, 0x8081) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000002680)={'raw\x00', 0x94, "46550ce103a1cc0d4a4e770269b9754d1b90db84d5a6a0e45f05d6a1296c27600a6f2e360a60ea14a53d3f67243ef50e48769aba1f0226039399d6bf84ca2274fdfe2a14e3525f1dfa3f61cbccfa111bdbcb07fa0af27bc77345a42a7b61cbde4e9f20f1fb17426c8c435f35eaca8971022687d9fa57e15054e9039fabf31e79b14530389be34bc31f9bd08ca16e27c5c3e979bc"}, &(0x7f00000024c0)=0xb8) ioctl$int_in(r3, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r3, 0xa, 0x12) sendmsg$nl_route(r2, &(0x7f0000002580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002540)={&(0x7f00000025c0)=ANY=[@ANYBLOB="70000000160001002bbd7000fcdbdf25022002c8", @ANYRES32=r6, @ANYBLOB="1400030064766d7270310000000000000000000008000400ac14143608000100ffffffff0800040064010101140003007665746830000000000000000000000008000400e0000002080001000a01010008000200ac1414bb793b391ea51c57d968b77b9f3d28875cc8e42a442bb3"], 0x70}, 0x1, 0x0, 0x0, 0x94}, 0x10) poll(&(0x7f0000b2c000)=[{r4}], 0x1, 0xfffffffffffffff8) dup2(r3, r4) fcntl$setown(r4, 0x8, r1) tkill(r1, 0x14) fcntl$getflags(r0, 0x1) [ 2922.129692][T14202] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000002d13 [ 2922.137660][T14202] RBP: 00007f6fd098a120 R08: 0000000000000001 R09: 0000000000000000 [ 2922.145624][T14202] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000002 [ 2922.153592][T14202] R13: 000000000000006e R14: 00007f6fcfd9c050 R15: 00007f6fcfebfa48 [ 2922.162538][T14202] 06:06:59 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x3) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x482000, 0x0) write$dsp(r4, &(0x7f0000000100)="7360f690e07904496e04c5629016f0a999e3863ed15999b93dc449298c11d988418121bc03fc08e1539922f0d7e69fd8284ce88bed3f342220b1b109eb587fd0d09903e6641d0b9f05", 0x49) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) 06:07:01 executing program 5: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r4, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3f2, 0x0) 06:07:01 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 84) 06:07:01 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() (async) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) (async, rerun: 64) r7 = socket(0x10, 0x80002, 0x0) (rerun: 64) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002440)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000089e24f9f9d97c4104ad2d4348c8cc96b48d58cf8e8acfde2daae5b8b69c4b", @ANYRES32=r6, @ANYBLOB="00000000000000001c001a801800048014000a8008000100000000000800020000000000"], 0x3c}}, 0x0) (async) sendmsg$unix(r7, &(0x7f0000002400)={&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002380)=[{&(0x7f0000000240)="8bbdb8562f0f6f0c9806663a64269a87a6776bb69c6734cf58a8bc522b262d58a556fcd8a8be4b434c915a038b59366a00f03659a6543ed0f4a5b20614bf791a623abef2f27d6b3346d121431e283c33c964f80f72ec35b2951f1905b6f9633828bf934940448d0ff913e9f62e359820520593ea89f4eae9f12fcd2b41aed3227a6d78d3366142e2ec8ac9f231acb07ac17bc57a858101add5a922", 0x9b}, {&(0x7f0000000100)="20f7d69bb2767a", 0x7}, {&(0x7f0000000300)="350a6df4d317bf2e72591b6c410cbbd94ce92bc5ec55139ed976659766c4ebbd38c32ea0ecf002860056e20114ce630df0278927881a12ca1119c8a0cc84889de332d652696e320b58a23aaec2c1b51eecb118e5362c4b1e43e1", 0x5a}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000000140)="f9b573245ce1ced83466f0edc25130476ac79772880aa1ddca8283ff23464f649595bddc", 0x24}, {&(0x7f0000001380)="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", 0x1000}], 0x6, &(0x7f00000001c0), 0x0, 0xc4}, 0x8081) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000002680)={'raw\x00', 0x94, "46550ce103a1cc0d4a4e770269b9754d1b90db84d5a6a0e45f05d6a1296c27600a6f2e360a60ea14a53d3f67243ef50e48769aba1f0226039399d6bf84ca2274fdfe2a14e3525f1dfa3f61cbccfa111bdbcb07fa0af27bc77345a42a7b61cbde4e9f20f1fb17426c8c435f35eaca8971022687d9fa57e15054e9039fabf31e79b14530389be34bc31f9bd08ca16e27c5c3e979bc"}, &(0x7f00000024c0)=0xb8) ioctl$int_in(r3, 0x5452, &(0x7f0000000200)=0x1000000000003e) (async, rerun: 64) fcntl$setsig(r3, 0xa, 0x12) (async, rerun: 64) sendmsg$nl_route(r2, &(0x7f0000002580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002540)={&(0x7f00000025c0)=ANY=[@ANYBLOB="70000000160001002bbd7000fcdbdf25022002c8", @ANYRES32=r6, @ANYBLOB="1400030064766d7270310000000000000000000008000400ac14143608000100ffffffff0800040064010101140003007665746830000000000000000000000008000400e0000002080001000a01010008000200ac1414bb793b391ea51c57d968b77b9f3d28875cc8e42a442bb3"], 0x70}, 0x1, 0x0, 0x0, 0x94}, 0x10) poll(&(0x7f0000b2c000)=[{r4}], 0x1, 0xfffffffffffffff8) (async, rerun: 32) dup2(r3, r4) (async, rerun: 32) fcntl$setown(r4, 0x8, r1) (async) tkill(r1, 0x14) fcntl$getflags(r0, 0x1) 06:07:01 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) r1 = gettid() (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x3) (async) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) (async) fcntl$setsig(r2, 0xa, 0x12) (async) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) (async) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x482000, 0x0) write$dsp(r4, &(0x7f0000000100)="7360f690e07904496e04c5629016f0a999e3863ed15999b93dc449298c11d988418121bc03fc08e1539922f0d7e69fd8284ce88bed3f342220b1b109eb587fd0d09903e6641d0b9f05", 0x49) (async) fcntl$setown(r3, 0x8, r1) (async) tkill(r1, 0x14) 06:07:01 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a801800048014000a8008000100000000002600020000000000"], 0x3c}}, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) dup2(r7, r0) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) [ 2925.453064][T14241] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 06:07:02 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 85) 06:07:02 executing program 5: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r4, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3f3, 0x0) 06:07:02 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) (async) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002440)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000089e24f9f9d97c4104ad2d4348c8cc96b48d58cf8e8acfde2daae5b8b69c4b", @ANYRES32=r6, @ANYBLOB="00000000000000001c001a801800048014000a8008000100000000000800020000000000"], 0x3c}}, 0x0) (async) sendmsg$unix(r7, &(0x7f0000002400)={&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002380)=[{&(0x7f0000000240)="8bbdb8562f0f6f0c9806663a64269a87a6776bb69c6734cf58a8bc522b262d58a556fcd8a8be4b434c915a038b59366a00f03659a6543ed0f4a5b20614bf791a623abef2f27d6b3346d121431e283c33c964f80f72ec35b2951f1905b6f9633828bf934940448d0ff913e9f62e359820520593ea89f4eae9f12fcd2b41aed3227a6d78d3366142e2ec8ac9f231acb07ac17bc57a858101add5a922", 0x9b}, {&(0x7f0000000100)="20f7d69bb2767a", 0x7}, {&(0x7f0000000300)="350a6df4d317bf2e72591b6c410cbbd94ce92bc5ec55139ed976659766c4ebbd38c32ea0ecf002860056e20114ce630df0278927881a12ca1119c8a0cc84889de332d652696e320b58a23aaec2c1b51eecb118e5362c4b1e43e1", 0x5a}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000000140)="f9b573245ce1ced83466f0edc25130476ac79772880aa1ddca8283ff23464f649595bddc", 0x24}, {&(0x7f0000001380)="51ec94e616bf7aea93f29ae83f15d86fddc0c7cb4c1457574c6db9d000fa310e75fae805d6fe5501cae76a6555c2bbba1ba6d83ac7f9acdc87798a73926b1f049d7dbd7e68d683fbfc8748f830c88bc03b4d24081f04a51d77e8a1f4bc81a55f3ccdaa5e2e0b7f1b9c8a32749aed36f31fbc8e94ecf7a409aed87f9ddf0a4a55a64f045c0a5b310964432d1f3ce4ec7e9ef319e59c4a34614bf4a1346528bc8fe4a9d957868cbdcbe83e0a9d66e7e6fa015626d28fea709a9cf437b260843de820916f42683c0ba44daf4f78ea3eb38c407de86a83d52bd05952761d658c95a3dbc5b50378332ef911889f3b722ebc4ecbfbb7b43fc53a8ecdd4e4c6357e0ddff767c840a1fd75a05683cbc0db6a42aebf2a6c743a41fcca5d7e137c83447c19065c84c1bfe95e28be569a5d94101b740d99846cfb34f579285481c05c2a60d5069a7ac7164ebe9293c2706becb3a58572384d73c2929b554bc9a62ef15b7a9be2e19737c63bc68b43e580238550a24f0c979873b2a37e1748c1d7679ef874ddcbdf35cc3dcf6b8547dde3d14030f2c0c0609c4b55eac99cc3694047802d76b7691e4601233bbb3aee37d7986cf9cf9f6e84716f77bddf29348b44d11b10c3acafe9d6945371ea756b4afe76a2d4125d534b1f330dab580c6c997d22e08a1b99bcb5ab03bbd71644b7b85c9561da085c8c593adc07917b50ede303d88bfe750ea51ac4caa7fc10b9a253b9ab7d9de11c963076c0db2e40aa797b7c34d70f5b32d1bad880f420fd6a65f607ed984812dbd8aaebceb529c2832173cabeb976def3a87489722e4d653de4efebf34867cc3d9f891e7aea5c9e2227287f4c1018caf771061f64333d7c2f48e6b2e644c9cb585ca9ace34b1d9212f9fcb5811db75f1849f59c6e7208a548feb3262c295ab29084a31afdc6eaacf3fed150763d6035903e7dde0422d8e6c5240c6270100ceeb1048d276605c9583223902c941912590b6d18e2a07af6d97cb36700dfbe5103e2683d7ec28bf77a984debe7dd80ec2ab8ac57a72a8f3eb4bd5099b8ba07cc09ba8dd59a474eef39623959edc2be1e6aed0566b0c068c55c648ef78169c071f87665ccec53b51896adaed9051a30ba8501ad0573dffde7d28d5ac8f367738a9c9bb0ba245c5520f056bddc146d7a2eeceea08eae6401e423d30cc1af3dec75c4a9ee6028c93768db3212c9b520725546c3a567c9bf7860fdf5a6f3e95bb752c78a21dd7b59a53007daae5c63352bc0e3d1b5e06b6bccaa45516993594a91392b6cb1ce6198a36781cd9d807383568a2fb82afe6a304c857c3fb56f3d3d29e2e5a7c88bf1a196be2e318fca3a53cc8aa8d0939bc5eda1cb549c17a3b4b1e5bc6165a2068b9444f80d213d8ace9ed8332fcec29e0abc92f77cc27631bc280e73adea1948a3fd1458db782790e039e77e8472d9d3d6bd83092a279a11f159bb8dbed87177d5277e48ee91efd2c89c7a831da8603b6040c59f8e02f8ac50a8ee4217d94dcc39808a56f43e27d8ebd4f18f2458505cbedf336c64a70f19727647838b7847da6ab5f57d3410b70f9a3a3b62846ac4b22bd0c548227e86cb7533be5472dcf41c28a4edb80a77702227c06a12859844fa5e6f79a29a6dd1b54afc7e3d9bbb7ca0af21958f2e67c4345213c06f2cd3e03a408fe509a465bd8974bcea23c8ce414878558deba7a36835bb4d55f4d957aee7f025de13ee771741b07e1d97e204793f7f100b34de4d98cd25d26844d4aa5a3f75fd9ce9410cd464b7f8f88ac3b372dd9cd1a63eea7b94c6a7f9894303eb68f74dc6d6fa1dff848900f046d52f88000039dc87dc3b4eb8c6a50b6b14992bf15318501d57c5a2f8efb287ee7d6686e5defeec374038dbede089d09418fac430f5f7c8bf3f1444d7e092f2a1fb49b12eeaa40cce6cce9e01fcdb3095b17090dff79bd37b51e1c20839795aac34d8e936b006e0e95bf6d1588ce5a5ed44561fe268fb268bbf46654064899a4b07ae36536857b38f6af95749e522c42a6b2c3c492a04b105b8633a2874713f8984191a34090378f8c13cb62e73aae61130e76d360b08f0b68be04d97519073a01c7efb3529419555e5ed9cd37b77dc3f006997e5e5ab4cbb518548e1f217b60b94b18579bbd718651eb7df8c48e70d822843eeb2dc0ee856227ea0ead103d1dc6febcc775a98e485052cadcabeddcc7beea6c223c5eedba8db7853f16c788ac7cd7a3b327ce85c492b79022cc78e8abb1e4b2925ef9a91e3b402ae0daa0997434203140cd4f20b209ab73bd4b81a7970256e238405a82715f99469aff35697be538ae108b41f191c69e3d195d0d5f3ddc9dc392597f1cb80775eef7da834d3e7051da3ec1ce8867c7ffe6d3d2b387b296f60fe9211488a1ff4110871bc5c6a48b6e47316b4e0f92e39c91a49c3aeada10defddcd5fd9c8c01b3fc282a4a6683a830ddc895faff5a9c0025170be12fb8625b5c3f69399bb38f053be511d77f619dbbce638940640dbe9b84a7d3305d725376891bfb94bbc22098474680004d2314af785372b329cd4fdc6e6d6a61f58c6b6c69ab3677f77f7737c44ef7b3dfa645ef21f02a3d6f90f87291120163ee1cf9b78d47aa77a85468b374e67e3bf87147ed1bd06c2c040cfce2f9774b5a492db462d6b0c5a9ac9063e9a3bc5d5a9604fa0ad6e24bee12f0351474c2f55fec2ac577f7b3520053d71e10bdcc04758c4704450c1172484280bb8534ccf0778c8ece2c94e99e3e4a8c590c3d64ecf1ed97673218ee9361d16f7ee9213054decf11cb847c36ab1875c4b0ffbd154c21d5ae17af7258ed340c224b7ed974e674994ad91a3f04485853bb5ef2543b5fa595d02345b082b4d46292531489da474e2a261451705113c450bf93e24e1beef738f5c3e529c9bc231447e5ec0b3e712e7160318b72d903f1ce827b44b5d376619bf7544b2fbc4f5fdd45ce50f50bf66577cfacdf6d804adef924a95cf0a0338cd4a758020f19052c0dfa4fd6ac3964ef141af586c849a15ab17634e6f1a6978878001c712a5c5a53e1fce33ec64faa2a2254ff563d1341299890b7ba439b9a7e0c58f2693b2f81e7d4f68eae438a34fd213e2bc6d76b1b2b668dc0d6660f6d99fbb0beff6d5238cef05437dcc988f68498ffee597a593925d33108b5741065be4ab45a69a4f788acaa3c62fe091a22ab5fb24beb31dbd7f9ec03a83a66a40823b3099cb348f0c2d0b02bbb35d636eee7683cd6333ed1973d8661d373ab95901de2a5845b92dbaf2367344c2596da46d9c149c4b1c20fc748bf260be2142578e7b229910f4418d4034c5a92a06bc1c4a619fe52a08a88e5db135c4b0a4616d365d7158b7b42e6c0aeeca7c03e04d3d0910f381dd12e0aadc0fe2e92871d2c49b20228ca6dea3afccb17f15293445c089d14d37c761c60c441c35924b77dbdf379d0683421566740b0ba911348cc550f889af6107fb0e5973a3c3da9f394b1c62d6e792b47a743872f286370ca5db159a6b7a02385a0330bd55f643ddb9916d39c99930ac53bb6474c2608458d88796041d9002c522d0707dc73b84d20ba1d9faee263f757fcb4241a8aa788dcf7671b84b28136219cd73f1d5d1927f8aab328dc8edf6eef11c23378acf55b04a3f0645f3fae39f0823de414e82834093ad30c2c87e8f9471aaf43c37b0a94d566faaa02228b33c0138c6137ceab4cf6dbcb675a764d4403234f6d587d6670c4d49d550d8beb670bdc56bb215e709a0e49e3cb0986d32d47aada3dc208d41a9db59e4abb1243b44d46ee2cbb5d83460876cacd9484691e9c326bc0a19791aa29b364236b497d4791a1a13639d563ee13e90fd1d42fe3082f98b601a5247c04463cf9a0ea4863ffe381489e38956d4a6260f549c1b6d4215de20a86edd23292f41b3340f5e188f937d88cefdfecddc2891922e76caadb795771aeeedcc2f26690aaef0ab0ed0e2adeb317df8aa84b8dfedc54f117456170a383d5962f6184e5e1719147b1dc7d28e9484ae816a9b5bacf2519aeaf038a17eef80aea9e514b164d135d7e6bdec3c42b22f2992fc723350b896f2e6d1bbf3e7cc0d66d215379d1232dcaa2df975c7072e4ba8ce3ca40ea1c6a64ab47b3104709d77b7a2265aa9630e890cd9c535b94ef476222fce814b62ec32e85fcd4b34308562af17905e023a1da4b60d792e709a9152836d3fde29bf03096d9fa70c4f88a88725022e1a591e2e7c990e11c4dc4262a4686ffd3c703217286bbb31302d1da2e7e13a629e8008ece69825e95235a4dceb65c4a4706ea00b21ead116e15aa4f9f294daa6100269eee18bb8262bb5b2a4d18d92b0a7cf5fb42710c792a0855c2223a36f7ee1915dba035fbb8c778f720d68fbaf583af508ef8452de144d732649f8f971e2eef334338955b87bf3fec34e5ffe75e56ae6bd05aa30c60cfd62bc0df471d13d75ff03c72a4e3d0ee51e0db540fe3ba3a7b628be6469721af063b9235282329e915559e0ccec3dae5fd10c937cb90624a99a3d103e4bd45855ca2bf8e8b25adf78cfa2d296d30b88818836684c752b01452d6ff6d4195e724d6fa3ce88270a44a7eb7608d959465e5e7c0c4e13393be938ba3dbd6b2d327b439856f0068089fc3ee64b8cfbd41cdf6c74018c85b3971296ff077498c0e16c7b3bf8ca98f57f3dbf120ad74d589f69ea5b75be0d563130e4f140f9ebffceb656adae3e04ebe0da71eb332f4e35b54dd29fbd71ab062cc65287b86c0e9f7b29ce8c6d93b5d6d8d3826937bb2494b0f7a3e1f1ae18f5f83ebe1785c762002066338975dd3d4ccaa50bd3f16bf5553e97efab4ded8aec1b56f555ecc8173bc39425ef564a0fa2f553f206ce41d3e0863aec7ef73dd2d3edcefa3e47aa7bb7dd764fddc08d42269e1bd60d6c73e82509c195977c5a217bafcc13c98738c57ca5c67b685444cf1e8a639f575f4ba10112d33a549def765664af5348b11c528dd47762ce1a8306b56095939bc8c7c944f36734918dcc13354f0a48a1d27e745ba267149cfa643b9d43f515d11cab2ba53a0fdc15cd4a4d06355d667e161345ec00acb87303fce410844c89031fbd93fa109293991053a674e81d4aa4025c9a0a67e57aef41a553e569ca465b739f053489cd5e726858f8797b4941237559a6f5aa925248dbe342f29b0840280566521a264b1ce52d466bd0fd71756a88197cbde8df1c4bcd7090fa6bfce8520fef28d2c73a2398fcbf45befb2f49faf65294b1f5d3ad12c8f03743b5dcc12f71d0003433d074132c1f8bb70b0902931316a3af31062351a570ccf3b825cb1690b187038b8ae5881e94420ac1321ac715c4b5141b0237f378f071a9f5f504ac297d09903c33496e62973c0cda0a30d1ac07139e9c48326089757f6d14c7d9eb7469527fe323ef4a0546d9679e892385c8f0c58918887e80e35572584bdc48dd86ef6c8c4b5f29c4c216361ff9bd06c7c08aebc575532be98916d3307127039630fe30b7e9d35a7c7cc759eaf800c94dd00b60e6a00508573c014e77b73a5b4bfac2b1455e95edc707e839742280fa8121f16620d17df9ca2432314caa6e5da899d64e310aba7edabd7877bcc0be84a0bf1e8fa3fc96c6912bb2951e917e9981b51ae745a999b59ec1e0e52f8274f346f6d4d0209a665aeaf16a6b565c16dcf3ff096ce24620b2713f305de849ad7ab8dea7ed4a97b0793bd32e37385eb438e809e9a43c4e08812f314bc35f77ef334c57a535e6078c1109fca4bddb28b0189c44952c1c6032e0aebbabf0", 0x1000}], 0x6, &(0x7f00000001c0), 0x0, 0xc4}, 0x8081) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) (async) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000002680)={'raw\x00', 0x94, "46550ce103a1cc0d4a4e770269b9754d1b90db84d5a6a0e45f05d6a1296c27600a6f2e360a60ea14a53d3f67243ef50e48769aba1f0226039399d6bf84ca2274fdfe2a14e3525f1dfa3f61cbccfa111bdbcb07fa0af27bc77345a42a7b61cbde4e9f20f1fb17426c8c435f35eaca8971022687d9fa57e15054e9039fabf31e79b14530389be34bc31f9bd08ca16e27c5c3e979bc"}, &(0x7f00000024c0)=0xb8) (async) ioctl$int_in(r3, 0x5452, &(0x7f0000000200)=0x1000000000003e) (async) fcntl$setsig(r3, 0xa, 0x12) (async) sendmsg$nl_route(r2, &(0x7f0000002580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002540)={&(0x7f00000025c0)=ANY=[@ANYBLOB="70000000160001002bbd7000fcdbdf25022002c8", @ANYRES32=r6, @ANYBLOB="1400030064766d7270310000000000000000000008000400ac14143608000100ffffffff0800040064010101140003007665746830000000000000000000000008000400e0000002080001000a01010008000200ac1414bb793b391ea51c57d968b77b9f3d28875cc8e42a442bb3"], 0x70}, 0x1, 0x0, 0x0, 0x94}, 0x10) (async) poll(&(0x7f0000b2c000)=[{r4}], 0x1, 0xfffffffffffffff8) (async) dup2(r3, r4) (async) fcntl$setown(r4, 0x8, r1) (async) tkill(r1, 0x14) (async) fcntl$getflags(r0, 0x1) 06:07:02 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r1, 0x8) (async) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000280)="a7", 0x1, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000002cc0)={0x0, 0x2}, 0x8) (async) sendto$inet(r2, &(0x7f0000000000)='5', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0), 0x8) (async) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) [ 2925.970537][T14256] FAULT_INJECTION: forcing a failure. [ 2925.970537][T14256] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2925.985805][T14256] CPU: 1 PID: 14256 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 2925.995925][T14256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2926.006212][T14256] Call Trace: [ 2926.009516][T14256] [ 2926.012481][T14256] dump_stack_lvl+0x125/0x1b0 [ 2926.017216][T14256] should_fail_ex+0x496/0x5b0 [ 2926.021944][T14256] ? fs_reclaim_acquire+0xb0/0x150 [ 2926.027072][T14256] __should_fail_alloc_page+0xe7/0x130 [ 2926.032552][T14256] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 2926.038740][T14256] __alloc_pages+0x14e/0x4a0 [ 2926.043350][T14256] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 2926.050124][T14256] ? print_usage_bug.part.0+0x670/0x670 [ 2926.055772][T14256] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2926.061678][T14256] ? policy_nodemask+0x311/0x480 [ 2926.068004][T14256] alloc_pages_mpol+0x258/0x5f0 [ 2926.073126][T14256] ? mempolicy_in_oom_domain+0x150/0x150 [ 2926.078764][T14256] ? find_held_lock+0x2d/0x110 [ 2926.083530][T14256] vma_alloc_folio+0xad/0x220 [ 2926.088203][T14256] ? alloc_migration_target_by_mpol+0x6b0/0x6b0 [ 2926.094455][T14256] ? __handle_mm_fault+0x524/0x3d60 [ 2926.099669][T14256] ? filemap_get_read_batch+0x9b0/0x9b0 [ 2926.105217][T14256] __handle_mm_fault+0x100b/0x3d60 [ 2926.110337][T14256] ? vm_iomap_memory+0x170/0x170 [ 2926.115285][T14256] handle_mm_fault+0x478/0xa00 [ 2926.120053][T14256] __get_user_pages+0x4b2/0x1480 [ 2926.124990][T14256] ? follow_page_mask+0xda0/0xda0 [ 2926.130019][T14256] __gup_longterm_locked+0x278/0x2ab0 [ 2926.135402][T14256] ? get_user_pages_unlocked+0x770/0x770 [ 2926.141033][T14256] ? lock_sync+0x190/0x190 [ 2926.145492][T14256] pin_user_pages_remote+0xee/0x140 [ 2926.150695][T14256] ? __gup_longterm_locked+0x2ab0/0x2ab0 [ 2926.156334][T14256] process_vm_rw_core.constprop.0+0x43d/0xa10 [ 2926.162417][T14256] ? vmalloc_dump_obj+0x290/0x290 [ 2926.167454][T14256] process_vm_rw+0x2ff/0x360 [ 2926.172040][T14256] ? process_vm_rw_core.constprop.0+0xa10/0xa10 [ 2926.178282][T14256] ? vfs_write+0x14c/0xdf0 [ 2926.182703][T14256] ? rcu_is_watching+0x12/0xb0 [ 2926.187473][T14256] ? folio_memcg_unlock+0x280/0x280 [ 2926.192755][T14256] ? ksys_write+0x1a7/0x250 [ 2926.197261][T14256] __x64_sys_process_vm_writev+0xe2/0x1b0 [ 2926.202978][T14256] ? syscall_enter_from_user_mode+0x26/0x80 [ 2926.208866][T14256] do_syscall_64+0x3f/0x110 [ 2926.213373][T14256] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2926.219268][T14256] RIP: 0033:0x7f6fcfc7cae9 [ 2926.223695][T14256] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2926.243395][T14256] RSP: 002b:00007f6fd098a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2926.251814][T14256] RAX: ffffffffffffffda RBX: 00007f6fcfd9c050 RCX: 00007f6fcfc7cae9 [ 2926.259782][T14256] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000002d19 [ 2926.267747][T14256] RBP: 00007f6fd098a120 R08: 0000000000000001 R09: 0000000000000000 [ 2926.275712][T14256] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000002 [ 2926.283687][T14256] R13: 000000000000006e R14: 00007f6fcfd9c050 R15: 00007f6fcfebfa48 [ 2926.291689][T14256] 06:07:02 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f0000000040)={0x18, 0xfffffffffffffff5, 0x0, {0xc}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x6) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) dup2(r4, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) 06:07:03 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 86) [ 2926.555296][T14265] FAULT_INJECTION: forcing a failure. [ 2926.555296][T14265] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2926.574008][T14265] CPU: 1 PID: 14265 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 2926.584123][T14265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2926.594370][T14265] Call Trace: [ 2926.597663][T14265] [ 2926.600714][T14265] dump_stack_lvl+0x125/0x1b0 [ 2926.605452][T14265] should_fail_ex+0x496/0x5b0 [ 2926.610173][T14265] ? fs_reclaim_acquire+0xb0/0x150 [ 2926.615310][T14265] __should_fail_alloc_page+0xe7/0x130 [ 2926.620833][T14265] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 2926.627047][T14265] __alloc_pages+0x14e/0x4a0 [ 2926.631692][T14265] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 2926.638512][T14265] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2926.644440][T14265] ? policy_nodemask+0x311/0x480 [ 2926.649383][T14265] alloc_pages_mpol+0x258/0x5f0 [ 2926.654245][T14265] ? mempolicy_in_oom_domain+0x150/0x150 [ 2926.659906][T14265] ? find_held_lock+0x2d/0x110 [ 2926.664683][T14265] vma_alloc_folio+0xad/0x220 [ 2926.669362][T14265] ? alloc_migration_target_by_mpol+0x6b0/0x6b0 [ 2926.675615][T14265] ? find_held_lock+0x2d/0x110 [ 2926.680435][T14265] ? filemap_get_read_batch+0x9b0/0x9b0 [ 2926.686009][T14265] __handle_mm_fault+0x100b/0x3d60 [ 2926.691149][T14265] ? vm_iomap_memory+0x170/0x170 [ 2926.696129][T14265] handle_mm_fault+0x478/0xa00 [ 2926.700911][T14265] __get_user_pages+0x4b2/0x1480 [ 2926.705852][T14265] ? follow_page_mask+0xda0/0xda0 [ 2926.710902][T14265] __gup_longterm_locked+0x278/0x2ab0 [ 2926.716298][T14265] ? get_user_pages_unlocked+0x770/0x770 [ 2926.721935][T14265] ? lock_sync+0x190/0x190 [ 2926.726380][T14265] pin_user_pages_remote+0xee/0x140 [ 2926.731673][T14265] ? __gup_longterm_locked+0x2ab0/0x2ab0 [ 2926.737318][T14265] process_vm_rw_core.constprop.0+0x43d/0xa10 [ 2926.743414][T14265] ? vmalloc_dump_obj+0x290/0x290 [ 2926.748478][T14265] process_vm_rw+0x2ff/0x360 [ 2926.753079][T14265] ? process_vm_rw_core.constprop.0+0xa10/0xa10 [ 2926.759331][T14265] ? ksys_write+0x214/0x250 [ 2926.764724][T14265] ? reacquire_held_locks+0x4b0/0x4b0 [ 2926.770105][T14265] ? vfs_write+0x14c/0xdf0 [ 2926.774544][T14265] ? bit_wait_io_timeout+0x160/0x160 [ 2926.779839][T14265] ? fput+0x30/0x1a0 [ 2926.783743][T14265] ? ksys_write+0x1a7/0x250 [ 2926.788250][T14265] __x64_sys_process_vm_writev+0xe2/0x1b0 [ 2926.793969][T14265] ? syscall_enter_from_user_mode+0x26/0x80 [ 2926.799858][T14265] do_syscall_64+0x3f/0x110 [ 2926.804364][T14265] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2926.810256][T14265] RIP: 0033:0x7f6fcfc7cae9 [ 2926.814681][T14265] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2926.834312][T14265] RSP: 002b:00007f6fd098a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2926.842725][T14265] RAX: ffffffffffffffda RBX: 00007f6fcfd9c050 RCX: 00007f6fcfc7cae9 06:07:03 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) (async) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x3) (async) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x3) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) (async) dup2(r2, r3) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x482000, 0x0) write$dsp(r4, &(0x7f0000000100)="7360f690e07904496e04c5629016f0a999e3863ed15999b93dc449298c11d988418121bc03fc08e1539922f0d7e69fd8284ce88bed3f342220b1b109eb587fd0d09903e6641d0b9f05", 0x49) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) [ 2926.850692][T14265] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000002d1c [ 2926.858675][T14265] RBP: 00007f6fd098a120 R08: 0000000000000001 R09: 0000000000000000 [ 2926.866663][T14265] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000002 [ 2926.874629][T14265] R13: 000000000000006e R14: 00007f6fcfd9c050 R15: 00007f6fcfebfa48 [ 2926.882612][T14265] 06:07:03 executing program 5: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r4, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3f4, 0x0) 06:07:03 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 87) [ 2927.254131][T14277] FAULT_INJECTION: forcing a failure. [ 2927.254131][T14277] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2927.273903][T14277] CPU: 1 PID: 14277 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 2927.284020][T14277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2927.294104][T14277] Call Trace: [ 2927.297426][T14277] [ 2927.300378][T14277] dump_stack_lvl+0x125/0x1b0 [ 2927.305097][T14277] should_fail_ex+0x496/0x5b0 [ 2927.309787][T14277] ? fs_reclaim_acquire+0xb0/0x150 [ 2927.314917][T14277] __should_fail_alloc_page+0xe7/0x130 [ 2927.320411][T14277] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 2927.326596][T14277] __alloc_pages+0x14e/0x4a0 [ 2927.331231][T14277] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 2927.338009][T14277] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2927.343923][T14277] ? policy_nodemask+0x311/0x480 [ 2927.348889][T14277] alloc_pages_mpol+0x258/0x5f0 [ 2927.353747][T14277] ? mempolicy_in_oom_domain+0x150/0x150 [ 2927.359386][T14277] ? find_held_lock+0x2d/0x110 [ 2927.364180][T14277] vma_alloc_folio+0xad/0x220 [ 2927.368913][T14277] ? alloc_migration_target_by_mpol+0x6b0/0x6b0 [ 2927.375167][T14277] ? find_held_lock+0x2d/0x110 [ 2927.379956][T14277] ? filemap_get_read_batch+0x9b0/0x9b0 [ 2927.385528][T14277] __handle_mm_fault+0x100b/0x3d60 [ 2927.390683][T14277] ? vm_iomap_memory+0x170/0x170 [ 2927.395666][T14277] handle_mm_fault+0x478/0xa00 [ 2927.400441][T14277] __get_user_pages+0x4b2/0x1480 [ 2927.405384][T14277] ? follow_page_mask+0xda0/0xda0 [ 2927.410417][T14277] __gup_longterm_locked+0x278/0x2ab0 [ 2927.415799][T14277] ? get_user_pages_unlocked+0x770/0x770 [ 2927.421438][T14277] ? lock_sync+0x190/0x190 [ 2927.425880][T14277] pin_user_pages_remote+0xee/0x140 [ 2927.431092][T14277] ? __gup_longterm_locked+0x2ab0/0x2ab0 [ 2927.436742][T14277] process_vm_rw_core.constprop.0+0x43d/0xa10 [ 2927.442841][T14277] ? vmalloc_dump_obj+0x290/0x290 [ 2927.447887][T14277] process_vm_rw+0x2ff/0x360 [ 2927.452480][T14277] ? process_vm_rw_core.constprop.0+0xa10/0xa10 [ 2927.458736][T14277] ? ksys_write+0x214/0x250 [ 2927.463247][T14277] ? reacquire_held_locks+0x4b0/0x4b0 [ 2927.468643][T14277] ? vfs_write+0x14c/0xdf0 [ 2927.473105][T14277] ? bit_wait_io_timeout+0x160/0x160 [ 2927.478429][T14277] ? fput+0x30/0x1a0 [ 2927.482336][T14277] ? ksys_write+0x1a7/0x250 [ 2927.486848][T14277] __x64_sys_process_vm_writev+0xe2/0x1b0 [ 2927.492570][T14277] ? syscall_enter_from_user_mode+0x26/0x80 [ 2927.498464][T14277] do_syscall_64+0x3f/0x110 [ 2927.502979][T14277] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2927.508874][T14277] RIP: 0033:0x7f6fcfc7cae9 [ 2927.513295][T14277] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2927.532913][T14277] RSP: 002b:00007f6fd098a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2927.541332][T14277] RAX: ffffffffffffffda RBX: 00007f6fcfd9c050 RCX: 00007f6fcfc7cae9 [ 2927.549304][T14277] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000002d1f [ 2927.557284][T14277] RBP: 00007f6fd098a120 R08: 0000000000000001 R09: 0000000000000000 [ 2927.565345][T14277] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000002 [ 2927.573345][T14277] R13: 000000000000006e R14: 00007f6fcfd9c050 R15: 00007f6fcfebfa48 [ 2927.581332][T14277] 06:07:04 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 88) 06:07:04 executing program 5: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r4, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3f5, 0x0) [ 2927.860141][T14280] FAULT_INJECTION: forcing a failure. [ 2927.860141][T14280] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2927.886127][T14280] CPU: 1 PID: 14280 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 2927.896248][T14280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2927.906340][T14280] Call Trace: [ 2927.909651][T14280] [ 2927.912600][T14280] dump_stack_lvl+0x125/0x1b0 [ 2927.917286][T14280] should_fail_ex+0x496/0x5b0 [ 2927.921985][T14280] ? fs_reclaim_acquire+0xb0/0x150 [ 2927.927128][T14280] __should_fail_alloc_page+0xe7/0x130 [ 2927.932613][T14280] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 2927.938823][T14280] __alloc_pages+0x14e/0x4a0 [ 2927.943453][T14280] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 2927.950242][T14280] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2927.956154][T14280] ? policy_nodemask+0x311/0x480 [ 2927.961102][T14280] alloc_pages_mpol+0x258/0x5f0 [ 2927.965967][T14280] ? mempolicy_in_oom_domain+0x150/0x150 [ 2927.971610][T14280] ? find_held_lock+0x2d/0x110 [ 2927.976393][T14280] vma_alloc_folio+0xad/0x220 [ 2927.981085][T14280] ? alloc_migration_target_by_mpol+0x6b0/0x6b0 [ 2927.987337][T14280] ? find_held_lock+0x2d/0x110 [ 2927.992127][T14280] ? filemap_get_read_batch+0x9b0/0x9b0 [ 2927.997701][T14280] __handle_mm_fault+0x100b/0x3d60 [ 2928.002837][T14280] ? vm_iomap_memory+0x170/0x170 [ 2928.007808][T14280] handle_mm_fault+0x478/0xa00 [ 2928.012590][T14280] __get_user_pages+0x4b2/0x1480 [ 2928.017542][T14280] ? follow_page_mask+0xda0/0xda0 [ 2928.022590][T14280] __gup_longterm_locked+0x278/0x2ab0 [ 2928.027983][T14280] ? get_user_pages_unlocked+0x770/0x770 [ 2928.033632][T14280] ? lock_sync+0x190/0x190 [ 2928.038077][T14280] pin_user_pages_remote+0xee/0x140 [ 2928.043289][T14280] ? __gup_longterm_locked+0x2ab0/0x2ab0 [ 2928.048941][T14280] process_vm_rw_core.constprop.0+0x43d/0xa10 [ 2928.055035][T14280] ? vmalloc_dump_obj+0x290/0x290 [ 2928.060101][T14280] process_vm_rw+0x2ff/0x360 [ 2928.064710][T14280] ? process_vm_rw_core.constprop.0+0xa10/0xa10 [ 2928.070960][T14280] ? ksys_write+0x214/0x250 [ 2928.075476][T14280] ? reacquire_held_locks+0x4b0/0x4b0 [ 2928.080867][T14280] ? vfs_write+0x14c/0xdf0 [ 2928.085310][T14280] ? bit_wait_io_timeout+0x160/0x160 [ 2928.090616][T14280] ? fput+0x30/0x1a0 [ 2928.094529][T14280] ? ksys_write+0x1a7/0x250 [ 2928.099067][T14280] __x64_sys_process_vm_writev+0xe2/0x1b0 [ 2928.104803][T14280] ? syscall_enter_from_user_mode+0x26/0x80 [ 2928.110706][T14280] do_syscall_64+0x3f/0x110 [ 2928.115225][T14280] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2928.121130][T14280] RIP: 0033:0x7f6fcfc7cae9 [ 2928.125554][T14280] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2928.145261][T14280] RSP: 002b:00007f6fd098a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2928.153687][T14280] RAX: ffffffffffffffda RBX: 00007f6fcfd9c050 RCX: 00007f6fcfc7cae9 [ 2928.161666][T14280] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000002d22 [ 2928.169647][T14280] RBP: 00007f6fd098a120 R08: 0000000000000001 R09: 0000000000000000 [ 2928.177623][T14280] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000002 [ 2928.185601][T14280] R13: 000000000000006e R14: 00007f6fcfd9c050 R15: 00007f6fcfebfa48 [ 2928.193594][T14280] 06:07:04 executing program 1: openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) (async) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) (async) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) (async) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a801800048014000a8008000100000000002600020000000000"], 0x3c}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) dup2(r7, r0) (async) dup2(r7, r0) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) 06:07:04 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 89) 06:07:05 executing program 5: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r4, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3f6, 0x0) 06:07:05 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 90) 06:07:07 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0xfffffffffffffffe, 0x0, {0x2000000}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) 06:07:07 executing program 5: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r4, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3f7, 0x0) 06:07:07 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 91) 06:07:08 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000240)={@void, @void, @ipv6=@dccp_packet={0xf, 0x6, "026057", 0x13f, 0x21, 0x0, @remote, @dev={0xfe, 0x80, '\x00', 0x28}, {[@dstopts={0x5e, 0x14, '\x00', [@hao={0xc9, 0x10, @loopback}, @generic={0xb9, 0x80, "d011ec4b3a9fad23409443b002ec3cf9617977de5e75ba2c567b658fe1a8269992eca961c5d586a6cbb4d517b16bfe0d4fff148e736d63707277b75765fa3f4beeefaff5d311adbab84f51031881b19ffb1c4c4087d8a41996eb469f04910bf57dfd8ede85e09734ccd4181d54a4841c716e36c2866f117d35c2740d5b1959bd"}, @ra={0x5, 0x2, 0x2}, @ra={0x5, 0x2, 0x400}, @jumbo={0xc2, 0x4, 0x7fffffff}]}], {{0x4e20, 0x4e23, 0x4, 0x1, 0xa, 0x0, 0x0, 0x3, 0x5, "08d9e6", 0x4, "4aba55"}, "165f5338b616e25937d58eafe31761fc6b35a839c4c1d6fc56d7640aed5264507c01402d6c06077cc48442491e12be416a4bdb0acf62957d5158aa791337f3c0cf6022ca47ac9590420b6729de2cc20cae5c146c8dd80631cae1c04656cc44f37f8d87d5e6d47bdbe5b8370db8d3053fbda402c5365e439370b7562cb797a9"}}}}, 0x167) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) 06:07:08 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f0000000040)={0x18, 0xfffffffffffffff5, 0x0, {0xc}}, 0x18) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async, rerun: 32) r1 = gettid() (rerun: 32) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x6) (async) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) (async, rerun: 64) fcntl$setsig(r2, 0xa, 0x12) (async, rerun: 64) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) (async) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) dup2(r4, r3) (async) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) 06:07:08 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0xfffffffffffffffe, 0x0, {0x2000000}}, 0x18) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) 06:07:08 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 92) 06:07:08 executing program 5: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r4, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3f8, 0x0) [ 2931.761137][T14322] FAULT_INJECTION: forcing a failure. [ 2931.761137][T14322] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2931.776643][T14322] CPU: 1 PID: 14322 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 2931.786755][T14322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2931.796834][T14322] Call Trace: [ 2931.800129][T14322] [ 2931.803063][T14322] dump_stack_lvl+0x125/0x1b0 [ 2931.807762][T14322] should_fail_ex+0x496/0x5b0 [ 2931.812461][T14322] ? fs_reclaim_acquire+0xb0/0x150 [ 2931.817586][T14322] __should_fail_alloc_page+0xe7/0x130 [ 2931.823069][T14322] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 2931.829245][T14322] __alloc_pages+0x14e/0x4a0 [ 2931.833859][T14322] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 2931.840660][T14322] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2931.846571][T14322] ? policy_nodemask+0x311/0x480 [ 2931.851520][T14322] alloc_pages_mpol+0x258/0x5f0 [ 2931.856385][T14322] ? mempolicy_in_oom_domain+0x150/0x150 [ 2931.862033][T14322] ? find_held_lock+0x2d/0x110 [ 2931.866827][T14322] vma_alloc_folio+0xad/0x220 [ 2931.871515][T14322] ? alloc_migration_target_by_mpol+0x6b0/0x6b0 [ 2931.877766][T14322] ? find_held_lock+0x2d/0x110 [ 2931.882552][T14322] ? filemap_get_read_batch+0x9b0/0x9b0 [ 2931.888116][T14322] __handle_mm_fault+0x100b/0x3d60 [ 2931.893257][T14322] ? vm_iomap_memory+0x170/0x170 [ 2931.898233][T14322] handle_mm_fault+0x478/0xa00 [ 2931.903018][T14322] __get_user_pages+0x4b2/0x1480 [ 2931.907970][T14322] ? follow_page_mask+0xda0/0xda0 [ 2931.913017][T14322] __gup_longterm_locked+0x278/0x2ab0 [ 2931.918418][T14322] ? get_user_pages_unlocked+0x770/0x770 [ 2931.924063][T14322] ? lock_sync+0x190/0x190 [ 2931.928507][T14322] pin_user_pages_remote+0xee/0x140 [ 2931.933720][T14322] ? __gup_longterm_locked+0x2ab0/0x2ab0 [ 2931.939377][T14322] process_vm_rw_core.constprop.0+0x43d/0xa10 [ 2931.945462][T14322] ? rcu_is_watching+0x12/0xb0 [ 2931.950243][T14322] ? vmalloc_dump_obj+0x290/0x290 [ 2931.955300][T14322] process_vm_rw+0x2ff/0x360 [ 2931.959939][T14322] ? process_vm_rw_core.constprop.0+0xa10/0xa10 [ 2931.966197][T14322] ? ksys_write+0x214/0x250 [ 2931.970808][T14322] ? reacquire_held_locks+0x4b0/0x4b0 [ 2931.976208][T14322] ? vfs_write+0x14c/0xdf0 [ 2931.980646][T14322] ? bit_wait_io_timeout+0x160/0x160 [ 2931.985954][T14322] ? fput+0x30/0x1a0 [ 2931.989869][T14322] ? ksys_write+0x1a7/0x250 [ 2931.994395][T14322] __x64_sys_process_vm_writev+0xe2/0x1b0 [ 2932.000131][T14322] ? syscall_enter_from_user_mode+0x26/0x80 [ 2932.006039][T14322] do_syscall_64+0x3f/0x110 [ 2932.010560][T14322] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2932.016465][T14322] RIP: 0033:0x7f6fcfc7cae9 [ 2932.020891][T14322] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2932.040608][T14322] RSP: 002b:00007f6fd098a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2932.049040][T14322] RAX: ffffffffffffffda RBX: 00007f6fcfd9c050 RCX: 00007f6fcfc7cae9 [ 2932.057305][T14322] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000002d2e [ 2932.065285][T14322] RBP: 00007f6fd098a120 R08: 0000000000000001 R09: 0000000000000000 [ 2932.073261][T14322] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000002 [ 2932.081244][T14322] R13: 000000000000006e R14: 00007f6fcfd9c050 R15: 00007f6fcfebfa48 [ 2932.089250][T14322] 06:07:09 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) r1 = gettid() (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r2, 0xa, 0x12) (async) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) (async) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) (async) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a801800048014000a8008000100000000002600020000000000"], 0x3c}}, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) dup2(r7, r0) fcntl$setown(r3, 0x8, r1) (async) tkill(r1, 0x14) 06:07:09 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0xfffffffffffffffe, 0x0, {0x2000000}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) (async) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0xfffffffffffffffe, 0x0, {0x2000000}}, 0x18) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) (async) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) (async) 06:07:09 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f0000000040)={0x18, 0xfffffffffffffff5, 0x0, {0xc}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x6) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) dup2(r4, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) (async) write$FUSE_GETXATTR(r0, &(0x7f0000000040)={0x18, 0xfffffffffffffff5, 0x0, {0xc}}, 0x18) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) gettid() (async) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x6) (async) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) (async) fcntl$setsig(r2, 0xa, 0x12) (async) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) (async) dup2(r4, r3) (async) fcntl$setown(r3, 0x8, r1) (async) tkill(r1, 0x14) (async) 06:07:09 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000240)={@void, @void, @ipv6=@dccp_packet={0xf, 0x6, "026057", 0x13f, 0x21, 0x0, @remote, @dev={0xfe, 0x80, '\x00', 0x28}, {[@dstopts={0x5e, 0x14, '\x00', [@hao={0xc9, 0x10, @loopback}, @generic={0xb9, 0x80, "d011ec4b3a9fad23409443b002ec3cf9617977de5e75ba2c567b658fe1a8269992eca961c5d586a6cbb4d517b16bfe0d4fff148e736d63707277b75765fa3f4beeefaff5d311adbab84f51031881b19ffb1c4c4087d8a41996eb469f04910bf57dfd8ede85e09734ccd4181d54a4841c716e36c2866f117d35c2740d5b1959bd"}, @ra={0x5, 0x2, 0x2}, @ra={0x5, 0x2, 0x400}, @jumbo={0xc2, 0x4, 0x7fffffff}]}], {{0x4e20, 0x4e23, 0x4, 0x1, 0xa, 0x0, 0x0, 0x3, 0x5, "08d9e6", 0x4, "4aba55"}, "165f5338b616e25937d58eafe31761fc6b35a839c4c1d6fc56d7640aed5264507c01402d6c06077cc48442491e12be416a4bdb0acf62957d5158aa791337f3c0cf6022ca47ac9590420b6729de2cc20cae5c146c8dd80631cae1c04656cc44f37f8d87d5e6d47bdbe5b8370db8d3053fbda402c5365e439370b7562cb797a9"}}}}, 0x167) (async) write$tun(0xffffffffffffffff, &(0x7f0000000240)={@void, @void, @ipv6=@dccp_packet={0xf, 0x6, "026057", 0x13f, 0x21, 0x0, @remote, @dev={0xfe, 0x80, '\x00', 0x28}, {[@dstopts={0x5e, 0x14, '\x00', [@hao={0xc9, 0x10, @loopback}, @generic={0xb9, 0x80, "d011ec4b3a9fad23409443b002ec3cf9617977de5e75ba2c567b658fe1a8269992eca961c5d586a6cbb4d517b16bfe0d4fff148e736d63707277b75765fa3f4beeefaff5d311adbab84f51031881b19ffb1c4c4087d8a41996eb469f04910bf57dfd8ede85e09734ccd4181d54a4841c716e36c2866f117d35c2740d5b1959bd"}, @ra={0x5, 0x2, 0x2}, @ra={0x5, 0x2, 0x400}, @jumbo={0xc2, 0x4, 0x7fffffff}]}], {{0x4e20, 0x4e23, 0x4, 0x1, 0xa, 0x0, 0x0, 0x3, 0x5, "08d9e6", 0x4, "4aba55"}, "165f5338b616e25937d58eafe31761fc6b35a839c4c1d6fc56d7640aed5264507c01402d6c06077cc48442491e12be416a4bdb0acf62957d5158aa791337f3c0cf6022ca47ac9590420b6729de2cc20cae5c146c8dd80631cae1c04656cc44f37f8d87d5e6d47bdbe5b8370db8d3053fbda402c5365e439370b7562cb797a9"}}}}, 0x167) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) (async) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) (async) tkill(r1, 0x14) 06:07:09 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 93) 06:07:09 executing program 5: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r4, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3f9, 0x0) 06:07:09 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000040)={0x34, 0x6, 0x0, {0x1, 0x2, 0xb, 0x0, '/dev/audio\x00'}}, 0x34) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) [ 2933.173352][T14346] FAULT_INJECTION: forcing a failure. [ 2933.173352][T14346] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2933.190329][T14346] CPU: 1 PID: 14346 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 2933.200714][T14346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2933.210791][T14346] Call Trace: [ 2933.214067][T14346] [ 2933.216995][T14346] dump_stack_lvl+0x125/0x1b0 [ 2933.221693][T14346] should_fail_ex+0x496/0x5b0 [ 2933.226396][T14346] ? fs_reclaim_acquire+0xb0/0x150 [ 2933.231513][T14346] __should_fail_alloc_page+0xe7/0x130 [ 2933.236984][T14346] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 2933.243145][T14346] __alloc_pages+0x14e/0x4a0 [ 2933.247749][T14346] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 2933.254525][T14346] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2933.260421][T14346] ? policy_nodemask+0x311/0x480 [ 2933.265360][T14346] alloc_pages_mpol+0x258/0x5f0 [ 2933.270212][T14346] ? mempolicy_in_oom_domain+0x150/0x150 [ 2933.275854][T14346] ? find_held_lock+0x2d/0x110 [ 2933.280650][T14346] vma_alloc_folio+0xad/0x220 [ 2933.285338][T14346] ? alloc_migration_target_by_mpol+0x6b0/0x6b0 [ 2933.291577][T14346] ? find_held_lock+0x2d/0x110 [ 2933.296348][T14346] ? filemap_get_read_batch+0x9b0/0x9b0 [ 2933.301931][T14346] __handle_mm_fault+0x100b/0x3d60 [ 2933.307053][T14346] ? vm_iomap_memory+0x170/0x170 [ 2933.312035][T14346] handle_mm_fault+0x478/0xa00 [ 2933.316838][T14346] __get_user_pages+0x4b2/0x1480 [ 2933.321782][T14346] ? follow_page_mask+0xda0/0xda0 [ 2933.326805][T14346] ? down_read+0x470/0x470 [ 2933.331221][T14346] __gup_longterm_locked+0x278/0x2ab0 [ 2933.336607][T14346] ? get_user_pages_unlocked+0x770/0x770 [ 2933.342241][T14346] ? lock_sync+0x190/0x190 [ 2933.346668][T14346] pin_user_pages_remote+0xee/0x140 [ 2933.351954][T14346] ? __gup_longterm_locked+0x2ab0/0x2ab0 [ 2933.357589][T14346] process_vm_rw_core.constprop.0+0x43d/0xa10 [ 2933.363678][T14346] ? vmalloc_dump_obj+0x290/0x290 [ 2933.368714][T14346] process_vm_rw+0x2ff/0x360 [ 2933.373388][T14346] ? process_vm_rw_core.constprop.0+0xa10/0xa10 [ 2933.379625][T14346] ? ksys_write+0x214/0x250 [ 2933.384127][T14346] ? reacquire_held_locks+0x4b0/0x4b0 [ 2933.389507][T14346] ? vfs_write+0x14c/0xdf0 [ 2933.393943][T14346] ? bit_wait_io_timeout+0x160/0x160 [ 2933.399252][T14346] ? fput+0x30/0x1a0 [ 2933.403149][T14346] ? ksys_write+0x1a7/0x250 [ 2933.407658][T14346] __x64_sys_process_vm_writev+0xe2/0x1b0 [ 2933.413392][T14346] ? syscall_enter_from_user_mode+0x26/0x80 [ 2933.419313][T14346] do_syscall_64+0x3f/0x110 [ 2933.423847][T14346] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2933.429736][T14346] RIP: 0033:0x7f6fcfc7cae9 [ 2933.434141][T14346] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2933.453751][T14346] RSP: 002b:00007f6fd098a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2933.462166][T14346] RAX: ffffffffffffffda RBX: 00007f6fcfd9c050 RCX: 00007f6fcfc7cae9 [ 2933.470132][T14346] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000002d31 [ 2933.478100][T14346] RBP: 00007f6fd098a120 R08: 0000000000000001 R09: 0000000000000000 [ 2933.486062][T14346] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000002 [ 2933.494028][T14346] R13: 000000000000006e R14: 00007f6fcfd9c050 R15: 00007f6fcfebfa48 [ 2933.502002][T14346] 06:07:10 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 94) 06:07:10 executing program 5: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r4, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3fa, 0x0) 06:07:10 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000040)={0x34, 0x6, 0x0, {0x1, 0x2, 0xb, 0x0, '/dev/audio\x00'}}, 0x34) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) 06:07:10 executing program 5: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r4, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3fb, 0x0) 06:07:11 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 95) [ 2934.603386][T14371] FAULT_INJECTION: forcing a failure. [ 2934.603386][T14371] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2934.620791][T14371] CPU: 1 PID: 14371 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 2934.630897][T14371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2934.640986][T14371] Call Trace: [ 2934.644290][T14371] [ 2934.647245][T14371] dump_stack_lvl+0x125/0x1b0 [ 2934.651969][T14371] should_fail_ex+0x496/0x5b0 [ 2934.656693][T14371] ? fs_reclaim_acquire+0xb0/0x150 [ 2934.661847][T14371] __should_fail_alloc_page+0xe7/0x130 [ 2934.667361][T14371] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 2934.673613][T14371] __alloc_pages+0x14e/0x4a0 [ 2934.678244][T14371] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 2934.685040][T14371] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2934.690951][T14371] ? policy_nodemask+0x311/0x480 [ 2934.695900][T14371] alloc_pages_mpol+0x258/0x5f0 [ 2934.700771][T14371] ? mempolicy_in_oom_domain+0x150/0x150 [ 2934.706428][T14371] ? find_held_lock+0x2d/0x110 [ 2934.711218][T14371] vma_alloc_folio+0xad/0x220 [ 2934.715911][T14371] ? alloc_migration_target_by_mpol+0x6b0/0x6b0 [ 2934.722170][T14371] ? find_held_lock+0x2d/0x110 [ 2934.726959][T14371] ? filemap_get_read_batch+0x9b0/0x9b0 [ 2934.732534][T14371] __handle_mm_fault+0x100b/0x3d60 [ 2934.737675][T14371] ? vm_iomap_memory+0x170/0x170 [ 2934.742653][T14371] handle_mm_fault+0x478/0xa00 [ 2934.747447][T14371] __get_user_pages+0x4b2/0x1480 [ 2934.752413][T14371] ? follow_page_mask+0xda0/0xda0 [ 2934.757573][T14371] __gup_longterm_locked+0x278/0x2ab0 [ 2934.762976][T14371] ? get_user_pages_unlocked+0x770/0x770 [ 2934.768628][T14371] ? lock_sync+0x190/0x190 [ 2934.773075][T14371] pin_user_pages_remote+0xee/0x140 [ 2934.778291][T14371] ? __gup_longterm_locked+0x2ab0/0x2ab0 [ 2934.783949][T14371] process_vm_rw_core.constprop.0+0x43d/0xa10 [ 2934.790038][T14371] ? asm_common_interrupt+0x26/0x40 [ 2934.795265][T14371] ? vmalloc_dump_obj+0x290/0x290 [ 2934.800328][T14371] process_vm_rw+0x2ff/0x360 [ 2934.804934][T14371] ? process_vm_rw_core.constprop.0+0xa10/0xa10 [ 2934.811219][T14371] ? ksys_write+0x214/0x250 [ 2934.815742][T14371] ? reacquire_held_locks+0x4b0/0x4b0 [ 2934.821142][T14371] ? vfs_write+0x14c/0xdf0 [ 2934.825582][T14371] ? bit_wait_io_timeout+0x160/0x160 [ 2934.830894][T14371] ? fput+0x30/0x1a0 [ 2934.834809][T14371] ? ksys_write+0x1a7/0x250 [ 2934.839333][T14371] __x64_sys_process_vm_writev+0xe2/0x1b0 [ 2934.845071][T14371] ? syscall_enter_from_user_mode+0x26/0x80 [ 2934.850981][T14371] do_syscall_64+0x3f/0x110 [ 2934.855505][T14371] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2934.861419][T14371] RIP: 0033:0x7f6fcfc7cae9 [ 2934.865842][T14371] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2934.885464][T14371] RSP: 002b:00007f6fd098a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2934.893892][T14371] RAX: ffffffffffffffda RBX: 00007f6fcfd9c050 RCX: 00007f6fcfc7cae9 [ 2934.901869][T14371] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000002d37 [ 2934.909846][T14371] RBP: 00007f6fd098a120 R08: 0000000000000001 R09: 0000000000000000 [ 2934.917821][T14371] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000002 [ 2934.925803][T14371] R13: 000000000000006e R14: 00007f6fcfd9c050 R15: 00007f6fcfebfa48 [ 2934.933801][T14371] 06:07:14 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x3951c0, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000040)) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) 06:07:14 executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a801800048014000b0900000000000000000800020000000000b7675040379332ebd601c5439ef8c821462f714f8bc1991079a7762faae7a7b57ff52a8445a895b38dd2ccef51e82d6277a6d2ea0dbde2bbdd808fbe201b61955c17210ab7b0871d14687d8deb246ac83b167e0d2ceba961a621c2f38048bf3aab48d09b166e5ce755c5e53e3fe4baaf3edbbd0d582f9a04841f9c3aaa425828966b61dc20d402dba85fa9683fda24ffa021f41c2559615e43209715f1b42c9062b348456b59608415a1f23f140004c94533290dee9350455b75ca48018cc39e7b74610836"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x180, 0x4}, 0x18) ptrace(0x10, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x9, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r8, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) (fail_nth: 96) 06:07:14 executing program 5: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r4, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3fc, 0x0) 06:07:14 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000240)={@void, @void, @ipv6=@dccp_packet={0xf, 0x6, "026057", 0x13f, 0x21, 0x0, @remote, @dev={0xfe, 0x80, '\x00', 0x28}, {[@dstopts={0x5e, 0x14, '\x00', [@hao={0xc9, 0x10, @loopback}, @generic={0xb9, 0x80, "d011ec4b3a9fad23409443b002ec3cf9617977de5e75ba2c567b658fe1a8269992eca961c5d586a6cbb4d517b16bfe0d4fff148e736d63707277b75765fa3f4beeefaff5d311adbab84f51031881b19ffb1c4c4087d8a41996eb469f04910bf57dfd8ede85e09734ccd4181d54a4841c716e36c2866f117d35c2740d5b1959bd"}, @ra={0x5, 0x2, 0x2}, @ra={0x5, 0x2, 0x400}, @jumbo={0xc2, 0x4, 0x7fffffff}]}], {{0x4e20, 0x4e23, 0x4, 0x1, 0xa, 0x0, 0x0, 0x3, 0x5, "08d9e6", 0x4, "4aba55"}, "165f5338b616e25937d58eafe31761fc6b35a839c4c1d6fc56d7640aed5264507c01402d6c06077cc48442491e12be416a4bdb0acf62957d5158aa791337f3c0cf6022ca47ac9590420b6729de2cc20cae5c146c8dd80631cae1c04656cc44f37f8d87d5e6d47bdbe5b8370db8d3053fbda402c5365e439370b7562cb797a9"}}}}, 0x167) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) gettid() (async) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) (async) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) (async) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) 06:07:14 executing program 3: ioctl$DRM_IOCTL_MODE_CURSOR2(0xffffffffffffffff, 0xc02464bb, &(0x7f0000000040)={0x0, 0x0, 0x8, 0x9, 0x2, 0x2, 0x826, 0xe46, 0x5}) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) sched_setparam(r1, &(0x7f0000000000)=0x888) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) r4 = getpid() getpgid(r4) sched_setscheduler(r4, 0x2, &(0x7f0000000b80)) tkill(r4, 0x19) 06:07:14 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x3951c0, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) r1 = gettid() (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) (async) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000040)) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1000000000003e) (async) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) (async) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) (async) tkill(r1, 0x14) [ 2937.841690][T14384] FAULT_INJECTION: forcing a failure. [ 2937.841690][T14384] name (null), interval 1, probability 0, space 0, times 1 [ 2937.854883][T14384] CPU: 1 PID: 14384 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 2937.865156][T14384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2937.875224][T14384] Call Trace: [ 2937.878520][T14384] [ 2937.881455][T14384] dump_stack_lvl+0x125/0x1b0 [ 2937.886157][T14384] should_fail_ex+0x496/0x5b0 [ 2937.890851][T14384] ? blk_mq_start_request+0x312/0x780 [ 2937.896330][T14384] null_queue_rq+0x338/0x7a0 [ 2937.900989][T14384] null_queue_rqs+0x111/0x230 [ 2937.905679][T14384] ? null_queue_rq+0x7a0/0x7a0 [ 2937.910547][T14384] ? should_fail_request+0x80/0x80 [ 2937.915680][T14384] ? lockdep_hardirqs_on+0x7d/0x100 [ 2937.920891][T14384] ? percpu_counter_add_batch+0x132/0x1f0 [ 2937.926639][T14384] __blk_mq_flush_plug_list+0xa0/0xd0 [ 2937.932034][T14384] blk_mq_flush_plug_list.part.0+0x1255/0x1e90 [ 2937.938205][T14384] ? blk_mq_try_issue_list_directly+0x590/0x590 [ 2937.944457][T14384] ? do_mpage_readpage+0x1a90/0x1a90 [ 2937.949760][T14384] blk_mq_flush_plug_list+0x62/0x80 [ 2937.954972][T14384] __blk_flush_plug+0x2c0/0x430 [ 2937.959940][T14384] ? blk_start_plug_nr_ios+0x220/0x220 [ 2937.965596][T14384] ? find_held_lock+0x2d/0x110 [ 2937.970388][T14384] blk_finish_plug+0x54/0xa0 [ 2937.975000][T14384] read_pages+0x69b/0xdb0 [ 2937.979356][T14384] ? folio_flags.constprop.0+0x150/0x150 [ 2937.985013][T14384] ? xa_clear_mark+0x40/0x40 [ 2937.989656][T14384] ? xas_load+0x42/0x140 [ 2937.993926][T14384] page_cache_ra_unbounded+0x2e7/0x5e0 [ 2937.999417][T14384] page_cache_ra_order+0x72b/0xa80 [ 2938.004553][T14384] ? inode_to_bdi+0x102/0x150 [ 2938.009251][T14384] ondemand_readahead+0x493/0x1130 [ 2938.014391][T14384] page_cache_async_ra+0x123/0x150 [ 2938.019522][T14384] filemap_fault+0xd54/0x3570 [ 2938.024229][T14384] ? blk_cgroup_congested+0x15b/0x290 [ 2938.029636][T14384] ? read_cache_page_gfp+0x120/0x120 [ 2938.034957][T14384] ? filemap_get_read_batch+0x9b0/0x9b0 [ 2938.040519][T14384] __do_fault+0x107/0x5f0 [ 2938.044864][T14384] ? filemap_get_read_batch+0x9b0/0x9b0 [ 2938.050430][T14384] __handle_mm_fault+0x3a74/0x3d60 [ 2938.055565][T14384] ? vm_iomap_memory+0x170/0x170 [ 2938.060549][T14384] handle_mm_fault+0x478/0xa00 [ 2938.065343][T14384] __get_user_pages+0x4b2/0x1480 [ 2938.070316][T14384] ? follow_page_mask+0xda0/0xda0 [ 2938.075355][T14384] ? down_read+0x470/0x470 [ 2938.079795][T14384] __gup_longterm_locked+0x278/0x2ab0 [ 2938.085281][T14384] ? get_user_pages_unlocked+0x770/0x770 [ 2938.090973][T14384] ? lock_sync+0x190/0x190 [ 2938.095489][T14384] pin_user_pages_remote+0xee/0x140 [ 2938.100715][T14384] ? __gup_longterm_locked+0x2ab0/0x2ab0 [ 2938.106378][T14384] process_vm_rw_core.constprop.0+0x43d/0xa10 [ 2938.112476][T14384] ? vmalloc_dump_obj+0x290/0x290 [ 2938.117534][T14384] process_vm_rw+0x2ff/0x360 [ 2938.122139][T14384] ? process_vm_rw_core.constprop.0+0xa10/0xa10 [ 2938.128396][T14384] ? ksys_write+0x214/0x250 [ 2938.132920][T14384] ? reacquire_held_locks+0x4b0/0x4b0 [ 2938.138491][T14384] ? vfs_write+0x14c/0xdf0 [ 2938.142936][T14384] ? bit_wait_io_timeout+0x160/0x160 [ 2938.148261][T14384] ? fput+0x30/0x1a0 [ 2938.152179][T14384] ? ksys_write+0x1a7/0x250 [ 2938.156715][T14384] __x64_sys_process_vm_writev+0xe2/0x1b0 [ 2938.162541][T14384] ? syscall_enter_from_user_mode+0x26/0x80 [ 2938.168451][T14384] do_syscall_64+0x3f/0x110 [ 2938.172975][T14384] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2938.178890][T14384] RIP: 0033:0x7f6fcfc7cae9 [ 2938.183345][T14384] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2938.203160][T14384] RSP: 002b:00007f6fd098a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2938.211763][T14384] RAX: ffffffffffffffda RBX: 00007f6fcfd9c050 RCX: 00007f6fcfc7cae9 [ 2938.219744][T14384] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000002d3a [ 2938.227726][T14384] RBP: 00007f6fd098a120 R08: 0000000000000001 R09: 0000000000000000 [ 2938.235706][T14384] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000002 [ 2938.243687][T14384] R13: 000000000000006e R14: 00007f6fcfd9c050 R15: 00007f6fcfebfa48 [ 2938.251685][T14384] [ 2938.263843][T14384] ------------[ cut here ]------------ [ 2938.269446][T14384] WARNING: CPU: 1 PID: 14384 at block/blk-mq.c:1258 blk_mq_start_request+0x643/0x780 [ 2938.279156][T14384] Modules linked in: [ 2938.283110][T14384] CPU: 1 PID: 14384 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 06:07:14 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000040)={0x34, 0x6, 0x0, {0x1, 0x2, 0xb, 0x0, '/dev/audio\x00'}}, 0x34) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0) (async) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xe3) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000040)={0x34, 0x6, 0x0, {0x1, 0x2, 0xb, 0x0, '/dev/audio\x00'}}, 0x34) (async) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) (async) [ 2938.293775][T14384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2938.304161][T14384] RIP: 0010:blk_mq_start_request+0x643/0x780 [ 2938.310215][T14384] Code: 00 00 fc ff df 48 8d 7d 10 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 2f 01 00 00 48 89 df ff 55 10 e9 64 fc ff ff e8 6d d1 42 fd <0f> 0b e9 f6 fa ff ff e8 61 d1 42 fd 0f 0b e9 06 fa ff ff e8 55 d1 [ 2938.332074][T14384] RSP: 0018:ffffc90010fced90 EFLAGS: 00010246 [ 2938.338271][T14384] RAX: 0000000000040000 RBX: ffff88801e4eb780 RCX: ffffc9000b791000 [ 2938.346390][T14384] RDX: 0000000000040000 RSI: ffffffff8445cb13 RDI: 0000000000000005 [ 2938.355337][T14384] RBP: ffff88801e4eb814 R08: 0000000000000005 R09: 0000000000000000 [ 2938.363389][T14384] R10: 0000000000000001 R11: 1ffffffff19f7069 R12: ffff88801de699f8 [ 2938.371542][T14384] R13: 0000000000000001 R14: ffff88801e4eb89d R15: ffff88801e4eb8a0 [ 2938.379662][T14384] FS: 00007f6fd098a6c0(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 2938.388739][T14384] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2938.395423][T14384] CR2: 00007fbf217ccd58 CR3: 000000007e59f000 CR4: 00000000003526f0 [ 2938.403463][T14384] Call Trace: [ 2938.406864][T14384] [ 2938.409838][T14384] ? show_regs+0x8f/0xa0 [ 2938.414195][T14384] ? __warn+0xe6/0x380 [ 2938.418333][T14384] ? blk_mq_start_request+0x643/0x780 [ 2938.423833][T14384] ? report_bug+0x3bc/0x580 [ 2938.428416][T14384] ? handle_bug+0x3c/0x70 [ 2938.434442][T14384] ? exc_invalid_op+0x17/0x40 [ 2938.439498][T14384] ? asm_exc_invalid_op+0x1a/0x20 [ 2938.444706][T14384] ? blk_mq_start_request+0x643/0x780 [ 2938.450132][T14384] ? blk_mq_start_request+0x643/0x780 [ 2938.455631][T14384] null_queue_rq+0x2e2/0x7a0 [ 2938.460334][T14384] __blk_mq_issue_directly+0xe3/0x270 [ 2938.465879][T14384] ? __blk_mq_requeue_request+0x5b0/0x5b0 [ 2938.471722][T14384] ? blk_mq_request_issue_directly+0xee/0x190 [ 2938.477962][T14384] ? blk_mq_get_budget_and_tag+0x2/0x2a0 [ 2938.483792][T14384] blk_mq_request_issue_directly+0x120/0x190 [ 2938.489875][T14384] blk_mq_plug_issue_direct+0x19e/0x670 [ 2938.495604][T14384] blk_mq_flush_plug_list.part.0+0x16b6/0x1e90 [ 2938.501855][T14384] ? blk_mq_try_issue_list_directly+0x590/0x590 [ 2938.508271][T14384] ? do_mpage_readpage+0x1a90/0x1a90 [ 2938.514181][T14384] blk_mq_flush_plug_list+0x62/0x80 [ 2938.519394][T14384] __blk_flush_plug+0x2c0/0x430 [ 2938.524397][T14384] ? blk_start_plug_nr_ios+0x220/0x220 [ 2938.529919][T14384] ? find_held_lock+0x2d/0x110 [ 2938.536155][T14384] blk_finish_plug+0x54/0xa0 [ 2938.540812][T14384] read_pages+0x69b/0xdb0 [ 2938.545402][T14384] ? folio_flags.constprop.0+0x150/0x150 [ 2938.551084][T14384] ? xa_clear_mark+0x40/0x40 [ 2938.555807][T14384] ? xas_load+0x42/0x140 [ 2938.560080][T14384] page_cache_ra_unbounded+0x2e7/0x5e0 [ 2938.565656][T14384] page_cache_ra_order+0x72b/0xa80 [ 2938.570915][T14384] ? inode_to_bdi+0x102/0x150 [ 2938.575664][T14384] ondemand_readahead+0x493/0x1130 [ 2938.580795][T14384] page_cache_async_ra+0x123/0x150 [ 2938.585973][T14384] filemap_fault+0xd54/0x3570 [ 2938.590679][T14384] ? blk_cgroup_congested+0x15b/0x290 [ 2938.596149][T14384] ? read_cache_page_gfp+0x120/0x120 [ 2938.601455][T14384] ? filemap_get_read_batch+0x9b0/0x9b0 [ 2938.607072][T14384] __do_fault+0x107/0x5f0 [ 2938.611411][T14384] ? filemap_get_read_batch+0x9b0/0x9b0 [ 2938.617045][T14384] __handle_mm_fault+0x3a74/0x3d60 [ 2938.622202][T14384] ? vm_iomap_memory+0x170/0x170 [ 2938.627238][T14384] handle_mm_fault+0x478/0xa00 [ 2938.632023][T14384] __get_user_pages+0x4b2/0x1480 [ 2938.637868][T14384] ? follow_page_mask+0xda0/0xda0 [ 2938.642912][T14384] ? down_read+0x470/0x470 [ 2938.647514][T14384] __gup_longterm_locked+0x278/0x2ab0 [ 2938.652933][T14384] ? get_user_pages_unlocked+0x770/0x770 [ 2938.658626][T14384] ? lock_sync+0x190/0x190 [ 2938.663061][T14384] pin_user_pages_remote+0xee/0x140 [ 2938.668316][T14384] ? __gup_longterm_locked+0x2ab0/0x2ab0 [ 2938.674135][T14384] process_vm_rw_core.constprop.0+0x43d/0xa10 [ 2938.680324][T14384] ? vmalloc_dump_obj+0x290/0x290 [ 2938.685480][T14384] process_vm_rw+0x2ff/0x360 [ 2938.690078][T14384] ? process_vm_rw_core.constprop.0+0xa10/0xa10 [ 2938.696402][T14384] ? ksys_write+0x214/0x250 [ 2938.700914][T14384] ? reacquire_held_locks+0x4b0/0x4b0 [ 2938.706454][T14384] ? vfs_write+0x14c/0xdf0 [ 2938.710889][T14384] ? bit_wait_io_timeout+0x160/0x160 [ 2938.716249][T14384] ? fput+0x30/0x1a0 [ 2938.720157][T14384] ? ksys_write+0x1a7/0x250 [ 2938.724739][T14384] __x64_sys_process_vm_writev+0xe2/0x1b0 [ 2938.730467][T14384] ? syscall_enter_from_user_mode+0x26/0x80 [ 2938.736469][T14384] do_syscall_64+0x3f/0x110 [ 2938.741716][T14384] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2938.747793][T14384] RIP: 0033:0x7f6fcfc7cae9 [ 2938.752235][T14384] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2938.772378][T14384] RSP: 002b:00007f6fd098a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2938.780987][T14384] RAX: ffffffffffffffda RBX: 00007f6fcfd9c050 RCX: 00007f6fcfc7cae9 [ 2938.789047][T14384] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000002d3a [ 2938.797141][T14384] RBP: 00007f6fd098a120 R08: 0000000000000001 R09: 0000000000000000 [ 2938.805199][T14384] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000002 [ 2938.813356][T14384] R13: 000000000000006e R14: 00007f6fcfd9c050 R15: 00007f6fcfebfa48 [ 2938.821394][T14384] [ 2938.824458][T14384] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2938.831735][T14384] CPU: 1 PID: 14384 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15156-g13d88ac54ddd #0 [ 2938.841810][T14384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2938.851887][T14384] Call Trace: [ 2938.855177][T14384] [ 2938.858105][T14384] dump_stack_lvl+0xd9/0x1b0 [ 2938.862713][T14384] panic+0x6dc/0x790 [ 2938.867178][T14384] ? panic_smp_self_stop+0xa0/0xa0 [ 2938.872303][T14384] ? show_trace_log_lvl+0x363/0x4f0 [ 2938.877524][T14384] ? blk_mq_start_request+0x643/0x780 [ 2938.882908][T14384] check_panic_on_warn+0xab/0xb0 [ 2938.887973][T14384] __warn+0xf2/0x380 [ 2938.891880][T14384] ? blk_mq_start_request+0x643/0x780 [ 2938.897263][T14384] report_bug+0x3bc/0x580 [ 2938.901607][T14384] handle_bug+0x3c/0x70 [ 2938.905772][T14384] exc_invalid_op+0x17/0x40 [ 2938.910284][T14384] asm_exc_invalid_op+0x1a/0x20 [ 2938.915135][T14384] RIP: 0010:blk_mq_start_request+0x643/0x780 [ 2938.921135][T14384] Code: 00 00 fc ff df 48 8d 7d 10 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 2f 01 00 00 48 89 df ff 55 10 e9 64 fc ff ff e8 6d d1 42 fd <0f> 0b e9 f6 fa ff ff e8 61 d1 42 fd 0f 0b e9 06 fa ff ff e8 55 d1 [ 2938.941588][T14384] RSP: 0018:ffffc90010fced90 EFLAGS: 00010246 [ 2938.947666][T14384] RAX: 0000000000040000 RBX: ffff88801e4eb780 RCX: ffffc9000b791000 [ 2938.955736][T14384] RDX: 0000000000040000 RSI: ffffffff8445cb13 RDI: 0000000000000005 [ 2938.963869][T14384] RBP: ffff88801e4eb814 R08: 0000000000000005 R09: 0000000000000000 [ 2938.972011][T14384] R10: 0000000000000001 R11: 1ffffffff19f7069 R12: ffff88801de699f8 [ 2938.979998][T14384] R13: 0000000000000001 R14: ffff88801e4eb89d R15: ffff88801e4eb8a0 [ 2938.988002][T14384] ? blk_mq_start_request+0x643/0x780 [ 2938.993389][T14384] null_queue_rq+0x2e2/0x7a0 [ 2938.998004][T14384] __blk_mq_issue_directly+0xe3/0x270 [ 2939.003381][T14384] ? __blk_mq_requeue_request+0x5b0/0x5b0 [ 2939.009102][T14384] ? blk_mq_request_issue_directly+0xee/0x190 [ 2939.015176][T14384] ? blk_mq_get_budget_and_tag+0x2/0x2a0 [ 2939.020813][T14384] blk_mq_request_issue_directly+0x120/0x190 [ 2939.026798][T14384] blk_mq_plug_issue_direct+0x19e/0x670 [ 2939.032429][T14384] blk_mq_flush_plug_list.part.0+0x16b6/0x1e90 [ 2939.038603][T14384] ? blk_mq_try_issue_list_directly+0x590/0x590 [ 2939.044855][T14384] ? do_mpage_readpage+0x1a90/0x1a90 [ 2939.050177][T14384] blk_mq_flush_plug_list+0x62/0x80 [ 2939.055375][T14384] __blk_flush_plug+0x2c0/0x430 [ 2939.060235][T14384] ? blk_start_plug_nr_ios+0x220/0x220 [ 2939.065697][T14384] ? find_held_lock+0x2d/0x110 [ 2939.070488][T14384] blk_finish_plug+0x54/0xa0 [ 2939.075085][T14384] read_pages+0x69b/0xdb0 [ 2939.079423][T14384] ? folio_flags.constprop.0+0x150/0x150 [ 2939.085056][T14384] ? xa_clear_mark+0x40/0x40 [ 2939.089653][T14384] ? xas_load+0x42/0x140 [ 2939.093893][T14384] page_cache_ra_unbounded+0x2e7/0x5e0 [ 2939.099358][T14384] page_cache_ra_order+0x72b/0xa80 [ 2939.104471][T14384] ? inode_to_bdi+0x102/0x150 [ 2939.109153][T14384] ondemand_readahead+0x493/0x1130 [ 2939.114270][T14384] page_cache_async_ra+0x123/0x150 [ 2939.119381][T14384] filemap_fault+0xd54/0x3570 [ 2939.124073][T14384] ? blk_cgroup_congested+0x15b/0x290 [ 2939.129467][T14384] ? read_cache_page_gfp+0x120/0x120 [ 2939.134765][T14384] ? filemap_get_read_batch+0x9b0/0x9b0 [ 2939.140316][T14384] __do_fault+0x107/0x5f0 [ 2939.144651][T14384] ? filemap_get_read_batch+0x9b0/0x9b0 [ 2939.150206][T14384] __handle_mm_fault+0x3a74/0x3d60 [ 2939.155327][T14384] ? vm_iomap_memory+0x170/0x170 [ 2939.160286][T14384] handle_mm_fault+0x478/0xa00 [ 2939.165055][T14384] __get_user_pages+0x4b2/0x1480 [ 2939.170004][T14384] ? follow_page_mask+0xda0/0xda0 [ 2939.175023][T14384] ? down_read+0x470/0x470 [ 2939.179441][T14384] __gup_longterm_locked+0x278/0x2ab0 [ 2939.184821][T14384] ? get_user_pages_unlocked+0x770/0x770 [ 2939.190453][T14384] ? lock_sync+0x190/0x190 [ 2939.194878][T14384] pin_user_pages_remote+0xee/0x140 [ 2939.200077][T14384] ? __gup_longterm_locked+0x2ab0/0x2ab0 [ 2939.205713][T14384] process_vm_rw_core.constprop.0+0x43d/0xa10 [ 2939.211878][T14384] ? vmalloc_dump_obj+0x290/0x290 [ 2939.217090][T14384] process_vm_rw+0x2ff/0x360 [ 2939.221678][T14384] ? process_vm_rw_core.constprop.0+0xa10/0xa10 [ 2939.227923][T14384] ? ksys_write+0x214/0x250 [ 2939.232432][T14384] ? reacquire_held_locks+0x4b0/0x4b0 [ 2939.237814][T14384] ? vfs_write+0x14c/0xdf0 [ 2939.242239][T14384] ? bit_wait_io_timeout+0x160/0x160 [ 2939.247528][T14384] ? fput+0x30/0x1a0 [ 2939.251460][T14384] ? ksys_write+0x1a7/0x250 [ 2939.255999][T14384] __x64_sys_process_vm_writev+0xe2/0x1b0 [ 2939.261722][T14384] ? syscall_enter_from_user_mode+0x26/0x80 [ 2939.267614][T14384] do_syscall_64+0x3f/0x110 [ 2939.272129][T14384] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2939.278026][T14384] RIP: 0033:0x7f6fcfc7cae9 [ 2939.282438][T14384] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2939.302049][T14384] RSP: 002b:00007f6fd098a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 2939.310464][T14384] RAX: ffffffffffffffda RBX: 00007f6fcfd9c050 RCX: 00007f6fcfc7cae9 [ 2939.318431][T14384] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 0000000000002d3a [ 2939.326483][T14384] RBP: 00007f6fd098a120 R08: 0000000000000001 R09: 0000000000000000 [ 2939.334453][T14384] R10: 0000000020c22fa0 R11: 0000000000000246 R12: 0000000000000002 [ 2939.342511][T14384] R13: 000000000000006e R14: 00007f6fcfd9c050 R15: 00007f6fcfebfa48 [ 2939.350492][T14384] [ 2939.353863][T14384] Kernel Offset: disabled [ 2939.358509][T14384] Rebooting in 86400 seconds..