VVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBYAAAAAEOZvHUbPBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADApQAAAP//j/n+Zw==") rename(&(0x7f00000002c0)='./file3\x00', &(0x7f0000000340)='./bus\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x648) 09:36:16 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002940), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000002a80)={0x2, 0x0, {&(0x7f0000002980)=""/117, 0x75, 0x0, 0x0, 0x3}}, 0x48) 09:36:16 executing program 2: mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 09:36:16 executing program 0: select(0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)={0x0, 0x4}) 09:36:16 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) 09:36:16 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f00000038c0)={0x2020}, 0x2020) 09:36:16 executing program 2: mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 09:36:16 executing program 2: mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) [ 278.733062][ T5371] loop1: detected capacity change from 0 to 32768 [ 278.745579][ T5371] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 278.752574][ T5371] BTRFS info (device loop1): using free space tree [ 278.781259][ T5371] BTRFS info (device loop1): enabling ssd optimizations [ 278.787334][ T5371] BTRFS info (device loop1): auto enabling async discard [ 278.826827][ T39] audit: type=1800 audit(1672997777.119:5): pid=5371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=261 res=0 errno=0 09:36:17 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0xe0) read(r0, &(0x7f0000000080)=""/94, 0x5e) shutdown(r0, 0x0) 09:36:17 executing program 0: pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f00000009c0)=r0) 09:36:17 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 09:36:17 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) 09:36:17 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 09:36:17 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0xd3, 0xd6, 0x6, 0x10, 0x856, 0xba02, 0xf4d7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x57, 0x41, 0x43, 0x0, [], [{{0x9, 0x5, 0x1, 0x2}}, {{0x9, 0x5, 0xb, 0x2}}]}}]}}]}}, 0x0) 09:36:17 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) 09:36:17 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 09:36:17 executing program 1: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@map=0x1, 0xffffffffffffffff, 0x22}, 0x10) 09:36:17 executing program 3: mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) 09:36:17 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) [ 279.250712][ T5324] usb 5-1: new high-speed USB device number 2 using dummy_hcd 09:36:17 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000180), 0x4) sendto$inet6(r0, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) 09:36:17 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) [ 279.490844][ T5324] usb 5-1: Using ep0 maxpacket: 16 [ 279.622403][ T5324] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 279.629925][ T5324] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 279.638561][ T5324] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 279.647606][ T5324] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 279.811695][ T5324] usb 5-1: New USB device found, idVendor=0856, idProduct=ba02, bcdDevice=f4.d7 [ 279.819551][ T5324] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.826595][ T5324] usb 5-1: Product: syz [ 279.829237][ T5324] usb 5-1: Manufacturer: syz [ 279.832474][ T5324] usb 5-1: SerialNumber: syz [ 279.842781][ T5324] usb 5-1: config 0 descriptor?? [ 279.885290][ T5324] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 279.895590][ T5324] ftdi_sio ttyUSB0: unknown device type: 0xf4d7 [ 280.087848][ T5324] usb 5-1: USB disconnect, device number 2 [ 280.097262][ T5324] ftdi_sio 5-1:0.0: device disconnected 09:36:18 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 09:36:18 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000001700)=ANY=[], &(0x7f0000001800)=""/144, 0x1000000, 0x90, 0x1}, 0x20) 09:36:18 executing program 3: mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) 09:36:18 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x3, 0x6, 0x5}, 0x14}}, 0x0) 09:36:18 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 09:36:18 executing program 0: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x60, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20}}, {{0x9, 0x5, 0x3, 0x2, 0x40}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x8, 0x0, 0x3, [{0x4, &(0x7f0000000140)=@string={0x4, 0x3, "71dc"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x423}}, {0xb1, &(0x7f0000000b00)=ANY=[@ANYBLOB="b103418a8691719b01dfdc9b2bf7bd64ec9fd30b766681d85d"]}]}) 09:36:18 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 09:36:19 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 09:36:19 executing program 3: mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) 09:36:19 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, 0x0, 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 09:36:19 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f00000006f92009f707d3c39ce2b3"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$hiddev(&(0x7f0000000040), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) 09:36:19 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, 0x0, 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 09:36:19 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) [ 280.980567][ T5355] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 281.077157][ T5324] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 281.371051][ T5355] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.461873][ T5324] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.470270][ T5324] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.486044][ T5324] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 281.497914][ T5324] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 281.506501][ T5324] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.517426][ T5324] usb 6-1: config 0 descriptor?? [ 281.560690][ T5355] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 281.566881][ T5355] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.579235][ T5355] usb 5-1: Product: 詁醆魱鯜撽鿬௓晶] [ 281.584421][ T5355] usb 5-1: Manufacturer: У [ 281.587626][ T5355] usb 5-1: SerialNumber: syz [ 281.900979][ T5355] cdc_ncm 5-1:1.0: bind() failure [ 281.912220][ T5355] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 281.916689][ T5355] cdc_ncm 5-1:1.1: bind() failure [ 281.925279][ T5355] usb 5-1: USB disconnect, device number 3 [ 281.943389][ T5181] udevd[5181]: setting owner of /dev/bus/usb/005/003 to uid=0, gid=0 failed: No such file or directory [ 281.995690][ T5324] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 282.014437][ T5324] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 09:36:20 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, 0x0, 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 09:36:20 executing program 0: syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x2a442) 09:36:20 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) 09:36:20 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000), 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 09:36:20 executing program 0: r0 = fsopen(&(0x7f0000000340)='securityfs\x00', 0x0) fsmount(r0, 0x0, 0x0) [ 282.842399][ T944] usb 6-1: USB disconnect, device number 2 09:36:21 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000), 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 09:36:21 executing program 1: syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)={[{@inode_readahead_blks}, {@acl}, {@jqfmt_vfsv1}, {@dioread_nolock}, {@nobh}, {@nombcache}]}, 0x45, 0x434, &(0x7f0000000900)="$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") 09:36:21 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) 09:36:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="d5"], 0x34}}, 0x0) 09:36:21 executing program 0: syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000000000)='./bus\x00', 0x2010058, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000001bfa980d000000000000000000e0ffffffffffffff0000000000000032c85a669c8200000000000000004473918bca540e153631000000ff5d0f4b06d53f4d600ad446490cf69704829f333104e3d0a53a19c7aa5352f16b3a73bd5fdd814eafb1f3e7523c770248126dc9c1c4149fb446000000001069670000"], 0xfd, 0x1218, &(0x7f0000002480)="$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") openat(0xffffffffffffff9c, &(0x7f0000000540)='./file2\x00', 0x0, 0x0) [ 283.407886][ T5483] loop1: detected capacity change from 0 to 512 09:36:21 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000), 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) [ 283.422737][ T5483] EXT4-fs: Ignoring removed nobh option [ 283.429109][ T5483] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE 09:36:21 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) [ 283.471277][ T5483] EXT4-fs error (device loop1): ext4_free_branches:1019: inode #13: comm syz-executor.1: invalid indirect mapped block 100663296 (level 2) [ 283.486550][ T5483] EXT4-fs (loop1): 1 truncate cleaned up 09:36:21 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{0x0}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) [ 283.498834][ T5485] loop0: detected capacity change from 0 to 8192 [ 283.505597][ T5483] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 283.517304][ T5485] ======================================================= [ 283.517304][ T5485] WARNING: The mand mount option has been deprecated and [ 283.517304][ T5485] and is ignored by this kernel. Remove the mand 09:36:21 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{0x0}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) [ 283.517304][ T5485] option from the mount to silence this warning. [ 283.517304][ T5485] ======================================================= 09:36:21 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x12, 0x0, 0x0) [ 283.565676][ T5172] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. 09:36:21 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{0x0}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 09:36:21 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) [ 283.609744][ T5485] syz-executor.0: attempt to access beyond end of device [ 283.609744][ T5485] loop0: rw=0, sector=64405, nr_sectors = 1 limit=8192 [ 283.619315][ T5485] Buffer I/O error on dev loop0, logical block 64405, async page read [ 283.624447][ T5485] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000fb0f) [ 283.629061][ T5485] FAT-fs (loop0): Filesystem has been set read-only [ 283.633160][ T5485] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000fb0f) [ 283.638732][ T5485] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000fb0f) [ 283.645094][ T5485] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000fb0f) [ 283.653477][ T5485] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000fb0f) [ 283.659264][ T5485] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000fb0f) [ 283.667773][ T5485] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000fb0f) [ 283.674783][ T5485] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000fb0f) [ 283.681873][ T5485] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000fb0f) [ 283.688072][ T5485] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000fb0f) [ 283.694601][ T5485] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000fb0f) [ 283.701925][ T5485] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000fb0f) [ 283.713226][ T5485] syz-executor.0: attempt to access beyond end of device [ 283.713226][ T5485] loop0: rw=0, sector=64405, nr_sectors = 1 limit=8192 [ 283.726522][ T5485] Buffer I/O error on dev loop0, logical block 64405, async page read [ 283.736301][ T39] audit: type=1800 audit(1672997782.029:6): pid=5485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="file2" dev="loop0" ino=1048592 res=0 errno=0 09:36:22 executing program 0: syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000000000)='./bus\x00', 0x2010058, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000001bfa980d000000000000000000e0ffffffffffffff0000000000000032c85a669c8200000000000000004473918bca540e153631000000ff5d0f4b06d53f4d600ad446490cf69704829f333104e3d0a53a19c7aa5352f16b3a73bd5fdd814eafb1f3e7523c770248126dc9c1c4149fb446000000001069670000"], 0xfd, 0x1218, &(0x7f0000002480)="$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") openat(0xffffffffffffff9c, &(0x7f0000000540)='./file2\x00', 0x0, 0x0) [ 283.744609][ T5485] syz-executor.0 (5485) used greatest stack depth: 21968 bytes left 09:36:22 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, 0x0, 0x0, 0x0) 09:36:22 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x8934, &(0x7f0000000180)) 09:36:22 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) 09:36:22 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, 0x0, 0x0, 0x0) 09:36:22 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, 0x0, 0x0, 0x0) 09:36:22 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000), 0x0, 0x0) 09:36:22 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) [ 283.931101][ T5512] loop0: detected capacity change from 0 to 8192 [ 283.968682][ T5512] syz-executor.0: attempt to access beyond end of device [ 283.968682][ T5512] loop0: rw=0, sector=64405, nr_sectors = 1 limit=8192 [ 283.980669][ T5512] Buffer I/O error on dev loop0, logical block 64405, async page read [ 283.990668][ T5512] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000fb0f) [ 283.999537][ T5512] FAT-fs (loop0): Filesystem has been set read-only [ 284.006038][ T5512] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000fb0f) [ 284.011739][ T5512] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000fb0f) [ 284.017571][ T5512] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000fb0f) [ 284.023892][ T5512] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000fb0f) [ 284.030678][ T5512] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000fb0f) [ 284.036895][ T5512] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000fb0f) [ 284.043451][ T5512] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000fb0f) [ 284.048898][ T5512] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000fb0f) [ 284.058109][ T5512] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000fb0f) [ 284.072949][ T5512] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000fb0f) [ 284.078464][ T5512] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000fb0f) [ 284.086505][ T5512] syz-executor.0: attempt to access beyond end of device [ 284.086505][ T5512] loop0: rw=0, sector=64405, nr_sectors = 1 limit=8192 [ 284.099715][ T5512] Buffer I/O error on dev loop0, logical block 64405, async page read [ 284.110899][ T39] audit: type=1800 audit(1672997782.389:7): pid=5512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="file2" dev="loop0" ino=1048593 res=0 errno=0 09:36:22 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) 09:36:22 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000), 0x0, 0x0) 09:36:22 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) 09:36:22 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='proc\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000340)=""/69, 0x45) getdents64(r0, &(0x7f0000000540)=""/188, 0x724) 09:36:22 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000), 0x0, 0x0) 09:36:22 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, r0, r1, 0xfffffffffffffffb, 0x0) 09:36:22 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) 09:36:22 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) 09:36:22 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) 09:36:22 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'user.', 'version=9p2000'}) 09:36:22 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) 09:36:22 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'user.', 'version=9p2000'}) 09:36:22 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) 09:36:22 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000002100)=@base={0x5, 0x4, 0x5, 0xbc01}, 0x48) 09:36:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_mems\x00', 0x275a, 0x0) 09:36:22 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, 0x0, 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) [ 284.560895][ T5324] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 284.810618][ T5324] usb 5-1: Using ep0 maxpacket: 8 [ 284.980748][ T5324] usb 5-1: unable to get BOS descriptor or descriptor too short [ 285.071095][ T5324] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.078836][ T5324] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.087629][ T5324] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 285.096551][ T5324] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 285.105209][ T5324] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 285.114142][ T5324] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 285.280655][ T5324] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 285.287424][ T5324] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.294337][ T5324] usb 5-1: Product: syz [ 285.297903][ T5324] usb 5-1: Manufacturer: syz [ 285.302462][ T5324] usb 5-1: SerialNumber: syz [ 285.583976][ T5324] cdc_ncm 5-1:1.0: bind() failure [ 285.590723][ T5324] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 285.595898][ T5324] cdc_ncm 5-1:1.1: bind() failure [ 285.603135][ T5324] usb 5-1: USB disconnect, device number 4 09:36:24 executing program 0: syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x2020004c, &(0x7f0000000300)={[{@discard}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@umask={'umask', 0x3d, 0x9}}, {}]}, 0x1, 0x14fd, &(0x7f0000001580)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) 09:36:24 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, 0x0, 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) 09:36:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_mems\x00', 0x275a, 0x0) 09:36:24 executing program 1: request_key(&(0x7f0000000440)='logon\x00', &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000540)='logon\x00', 0x0) [ 286.096057][ T5560] loop0: detected capacity change from 0 to 256 09:36:24 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$rfkill(r0, &(0x7f0000000140)={0x0, 0x0, 0x3}, 0x8) [ 286.155986][ T5560] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xec9d53fb, utbl_chksum : 0xe619d30d) 09:36:24 executing program 1: syz_emit_ethernet(0x66, &(0x7f0000000040)={@local, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private}}}}}, 0x0) 09:36:24 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, 0x0, 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) [ 286.179873][ T5560] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 25769803778) 09:36:24 executing program 0: syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x2020004c, &(0x7f0000000300)={[{@discard}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@umask={'umask', 0x3d, 0x9}}, {}]}, 0x1, 0x14fd, &(0x7f0000001580)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) 09:36:24 executing program 1: r0 = getpgid(0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000040)={0x10}, 0x10}], 0x1, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {r0, 0x0, 0xee00}}}], 0x40}, 0x0) 09:36:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_mems\x00', 0x275a, 0x0) 09:36:24 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x2, &(0x7f0000000000)=@raw=[@ldst, @alu={0x0, 0x0, 0x2}], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x9b, &(0x7f0000000080)=""/155, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 286.327362][ T5576] loop0: detected capacity change from 0 to 256 09:36:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x4b, &(0x7f0000000200), 0x8) [ 286.374970][ T5576] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xec9d53fb, utbl_chksum : 0xe619d30d) [ 286.387691][ T5576] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 25769803778) 09:36:24 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000), 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) 09:36:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000001580)=[{{&(0x7f0000000000)={0x2, 0x0, 0x0, @local}, 0x1c, 0x0}}], 0x1, 0x2400c014) 09:36:24 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000004e40)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, &(0x7f0000001200)=[{&(0x7f00000001c0)="dc", 0x1}], 0x1}}], 0x1, 0x8000) 09:36:24 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x6, 0x6ca, &(0x7f0000000000), 0x4) 09:36:24 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x48, &(0x7f0000000200), 0x8) 09:36:24 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x6, 0x4, &(0x7f0000000000), 0x4) 09:36:24 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x86}]}, &(0x7f0000000080)='syzkaller\x00', 0x1, 0x9b, &(0x7f0000000140)=""/155, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:36:24 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x6, 0x6b1, &(0x7f0000000000), 0x4) 09:36:24 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000), 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) 09:36:24 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) 09:36:24 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ppoll(&(0x7f0000002380)=[{}, {r0, 0x2082}], 0x2, 0x0, 0x0, 0x0) 09:36:24 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000004e40)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, &(0x7f0000001200)=[{&(0x7f0000000040)="95db5b4e66446bc0c0f5e76c0bfe3cbae43e5726e7db064b79e7c47622d92cdbff3e9a6f7d09febec52fd927a6692029d70eb567bf4478a32c68f071914cbebf4c9f7b2ba90f7505131d259fd5e4bb4f072cc38ea4e55bdc7ef654f3df80b6422e8e7e8801418e4ebf066eeb594c5ce2aa239cb74f66de030221ad87249cfdb99260639fa3a624a4f39433cd924b5b1f9f26ce4a3f7b7884a665594a13e1c19cc4e147ef7bffa4fc105a", 0xaa}, {&(0x7f0000000100)="644bc7c132b01eac61c5cc0e8d828ccb7a14fba59eadf22020a6a5acf1b62436e2e38c338c4ee5804148af5d84d0706274ad84f7dc7c03c5deac9b2a62fda575de78e691c3e34b6618", 0x49}, {&(0x7f00000001c0)="dc9c9dead4c9a4bb9201bce1", 0xc}, {&(0x7f0000000200)="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", 0xa4a}], 0x4}}], 0x1, 0x0) 09:36:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000240)=@mangle={'mangle\x00', 0x1f, 0x6, 0x510, 0x2d8, 0xf8, 0x0, 0xf8, 0x1c8, 0x638, 0x638, 0x638, 0x638, 0x638, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'macvlan0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast2, @local, [], [], 'pimreg1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @remote, [], [], 'batadv_slave_0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0xe}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) 09:36:24 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000), 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) 09:36:24 executing program 1: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @multicast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x29, 0x0, @empty, @multicast1}, {0x0, 0x0, 0x0, @dev}}}}}, 0x0) 09:36:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_delrule={0x1c, 0x21, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x1c}}, 0x0) 09:36:25 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x14, 0x1, &(0x7f0000000000)=@raw=[@ldst], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:36:25 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x9b, &(0x7f0000000080)=""/155, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:36:25 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) 09:36:25 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{0x0}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) 09:36:25 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x6, 0x14, &(0x7f0000000000), 0x4) 09:36:25 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x0, 0x0, 0x1, 0x1, 0x400, 0xb0c8}, 0x20) 09:36:25 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x6, 0x12, &(0x7f0000000000)=0xffffffff, 0x4) 09:36:25 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000004e40)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, &(0x7f0000001200)=[{0x0}, {&(0x7f0000000100)='d', 0x1}], 0x2}}], 0x1, 0x0) 09:36:25 executing program 1: mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x0, &(0x7f0000000480)) 09:36:25 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r0, 0x6, 0x6bf, 0x0, &(0x7f0000000480)) 09:36:26 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{0x0}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) 09:36:26 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r0, 0x6, 0x3, 0x0, &(0x7f0000000480)) 09:36:26 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) 09:36:26 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000140)=@framed={{}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x9b, &(0x7f0000000180)=""/155, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:36:26 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f2, &(0x7f0000000b80)={'tunl0\x00', &(0x7f0000000b00)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 09:36:26 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x46, 0x0, 0x0) 09:36:26 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{0x0}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) 09:36:26 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x1, 0x9b, &(0x7f0000000140)=""/155, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:36:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x1e, 0x0, 0x0) 09:36:26 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000000)=0x4, 0x4) 09:36:27 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, 0x0, 0x0, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) 09:36:27 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001740)=@bpf_lsm={0x15, 0x3, &(0x7f0000001400)=@framed, &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:36:27 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x6, 0xc, &(0x7f0000000000)=0x4, 0x4) 09:36:27 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000000)={0x400, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) 09:36:27 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000004c0)={0x80000001, {{0xa, 0x0, 0x0, @mcast2}}}, 0x90) 09:36:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000840)={0x14, r1, 0x1}, 0x14}}, 0x0) 09:36:27 executing program 1: syz_mount_image$ntfs(&(0x7f0000000000), &(0x7f000001ee80)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@umask={'umask', 0x3d, 0x100000001}}, {@gid={'gid', 0x3d, 0xee00}}, {@utf8}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x3}}, {@nls={'nls', 0x3d, 'macgaelic'}}, {@show_sys_files_yes}, {@umask={'umask', 0x3d, 0x7}}, {@show_sys_files_yes}, {@errors_continue}, {@case_sensitive_yes}, {@fmask={'fmask', 0x3d, 0x2}}]}, 0x2, 0x1ee23, &(0x7f000003dd40)="$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") r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0) write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90}, 0x90) ftruncate(0xffffffffffffffff, 0x0) write$cgroup_type(r0, &(0x7f0000000200), 0x175d9003) ftruncate(r0, 0x8800000) 09:36:27 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000), 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) 09:36:27 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, 0x0, 0x0, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) 09:36:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000840)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 289.536909][ T5671] loop1: detected capacity change from 0 to 4096 [ 289.544297][ T5671] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. 09:36:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000840)={0x14, r1, 0x1}, 0x14}}, 0x0) 09:36:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000840)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 289.607396][ T5671] ntfs: volume version 3.1. 09:36:27 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, 0x0, 0x0, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) [ 289.640287][ T5671] ntfs: (device loop1): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 289.660040][ T5671] ntfs: (device loop1): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 289.669170][ T5671] ntfs: (device loop1): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28. 09:36:28 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000), 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) 09:36:28 executing program 1: syz_mount_image$ntfs(&(0x7f0000000000), &(0x7f000001ee80)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@umask={'umask', 0x3d, 0x100000001}}, {@gid={'gid', 0x3d, 0xee00}}, {@utf8}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x3}}, {@nls={'nls', 0x3d, 'macgaelic'}}, {@show_sys_files_yes}, {@umask={'umask', 0x3d, 0x7}}, {@show_sys_files_yes}, {@errors_continue}, {@case_sensitive_yes}, {@fmask={'fmask', 0x3d, 0x2}}]}, 0x2, 0x1ee23, &(0x7f000003dd40)="$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") r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0) write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90}, 0x90) ftruncate(0xffffffffffffffff, 0x0) write$cgroup_type(r0, &(0x7f0000000200), 0x175d9003) ftruncate(r0, 0x8800000) 09:36:28 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000), 0x0, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) 09:36:28 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000140)=@framed={{}, [@ldst={0x0, 0x0, 0x2}]}, &(0x7f00000001c0)='syzkaller\x00', 0x7, 0x90, &(0x7f0000000200)=""/144, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 289.765126][ T1065] ntfs: (device loop1): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. 09:36:28 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)=""/150, 0x82, 0x96, 0x1}, 0x20) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz1\x00', 0x1ff) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@fwd={0x7}, @ptr={0xa, 0x0, 0x0, 0x2, 0x4}]}, {0x0, [0x0]}}, &(0x7f0000000180)=""/101, 0x33, 0x65, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x1, 0x6, 0x8001, 0x442, r0, 0x800, '\x00', 0x0, r1, 0x3, 0x3, 0x4, 0xf}, 0x48) 09:36:28 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0x10, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000001c0)=""/153, 0x1a, 0x99, 0x1}, 0x20) 09:36:28 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000), 0x0, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) [ 289.888392][ T5691] loop1: detected capacity change from 0 to 4096 09:36:28 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x46, 0x0, &(0x7f0000000480)) 09:36:28 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x33, 0x0, &(0x7f0000000480)) [ 289.911591][ T5691] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 289.959047][ T5691] ntfs: volume version 3.1. [ 290.003306][ T5691] ntfs: (device loop1): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 290.016341][ T5691] ntfs: (device loop1): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 290.025848][ T5691] ntfs: (device loop1): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28. 09:36:28 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x4, 0x818, 0xffffffff, 0x328, 0x578, 0x578, 0xffffffff, 0xffffffff, 0x748, 0x748, 0x748, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x300, 0x328, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @remote}, @mcast1, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @remote, @remote, @private1, @private2, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local]}}, @common=@unspec=@comment={{0x120}}]}, @REJECT={0x28}}, {{@ipv6={@private2, @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'bond_slave_1\x00', 'macvlan0\x00'}, 0x0, 0x228, 0x250, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@remote, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @dev, @mcast1, @private0, @dev, @mcast2, @dev, @dev, @mcast2, @mcast2, @private1, @loopback, @remote]}}, @common=@hbh={{0x48}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:systemd_unit_file_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x878) 09:36:28 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x15, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x1, 0x9b, &(0x7f0000000140)=""/155, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:36:28 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000), 0x0, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) 09:36:28 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x6, 0x6cd, &(0x7f0000000000), 0x4) [ 290.053186][ T1065] ntfs: (device loop1): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. 09:36:28 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x7, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) 09:36:28 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) 09:36:28 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x4, &(0x7f0000000200), 0x8) 09:36:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x21, &(0x7f0000000200), 0x8) 09:36:28 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) 09:36:28 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x4, 0x4) 09:36:28 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) 09:36:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r0, 0x6, 0x6ca, 0x0, &(0x7f0000000480)) 09:36:28 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x6, 0x18, &(0x7f0000000000), 0x4) 09:36:28 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x18, 0x0, &(0x7f0000000480)) 09:36:28 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r0, 0x6, 0x2, 0x0, &(0x7f0000000480)) 09:36:28 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000140)) 09:36:28 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) 09:36:28 executing program 0: r0 = fsopen(&(0x7f0000000040)='efivarfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='{.\x00', &(0x7f0000000080)='efivarfs\x00', 0x0) 09:36:28 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x3, [{}, {}, {}]}}) 09:36:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x19, &(0x7f0000000140)={@rand_addr=' \x01\x00'}, 0x20) 09:36:28 executing program 2: bpf$BPF_BTF_LOAD(0x10, &(0x7f0000000280)={0x0, &(0x7f00000001c0)=""/153, 0x0, 0x99}, 0x20) 09:36:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000000)=0x9, 0x4) 09:36:28 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) 09:36:28 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000004e40)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, &(0x7f0000001200)=[{&(0x7f0000000040)="95db5b4e66446bc0c0f5e76c0bfe3cbae43e5726e7db064b79e7c47622d92cdbff3e9a6f7d09febec52fd927a6692029d70eb567bf4478a32c68f071914cbebf4c9f7b2ba90f7505131d259fd5e4bb4f072cc38ea4e55bdc7ef654f3df80b6422e8e7e8801418e4ebf066eeb594c5ce2aa239cb74f66de030221ad87249cfdb99260639fa3a624a4f39433cd924b5b1f9f26ce4a3f7b7884a665594a13e1c19cc4e147ef7bffa4fc105abee4", 0xac}, {&(0x7f0000000100)="644bc7c132b01eac61c5cc0e8d828ccb7a14fba59eadf22020a6a5acf1b62436e2e38c338c4ee5804148af5d84d0706274ad84f7dc7c03c5deac9b2a62fda575de78e691c3e34b6618", 0x49}, {&(0x7f00000001c0)="dc9c9dead4c9a4bb92", 0x9}, {&(0x7f0000000200)="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", 0x4af}], 0x4}}], 0x1, 0x0) 09:36:28 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000001c0)=""/153, 0x1a, 0x99, 0x1}, 0x20) 09:36:28 executing program 0: syz_clone(0x20006400, &(0x7f0000002240), 0x0, 0x0, 0x0, &(0x7f0000002300)='[') getresuid(&(0x7f0000002380), &(0x7f00000023c0), &(0x7f0000002600)) 09:36:28 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000004e40)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, &(0x7f0000001200)=[{&(0x7f0000000040)="95db5b4e66446bc0c0f5e76c0bfe3cbae43e5726e7db064b79e7c47622d92cdbff3e9a6f7d09febec52fd927a6692029d70eb567bf4478a32c68f071914cbebf4c9f7b2ba90f7505131d259fd5e4bb4f072cc38ea4e55bdc7ef654f3df80b6422e8e7e8801418e4ebf066eeb594c5ce2aa239cb74f66de030221ad87249cfdb99260639fa3a624a4f39433cd924b5b1f9f26ce4a3f7b7884a665594a13e1c19cc4e147ef7bffa4fc105abee4", 0xac}, {&(0x7f0000000100)="644bc7c132b01eac61c5cc0e8d828ccb7a14fba59eadf22020a6a5acf1b62436e2e38c338c4ee5804148af5d84d0706274ad84f7dc7c03c5deac9b2a62fda575de78e691c3e34b6618", 0x49}, {&(0x7f00000001c0)="dc9c9dead4c9a4bb92", 0x9}, {&(0x7f0000000200)="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", 0x4af}], 0x4}}], 0x1, 0x0) 09:36:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000001c0), 0x8) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x37, 0x0, 0x0) 09:36:28 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x6, 0x10, &(0x7f0000000000)=0x2, 0x4) 09:36:28 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) 09:36:28 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x7, &(0x7f0000000140)=@framed={{}, [@ldst={0x0, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @jmp, @exit]}, &(0x7f00000001c0)='syzkaller\x00', 0x7, 0x90, &(0x7f0000000200)=""/144, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:36:28 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001740)=@bpf_lsm={0x12, 0x3, &(0x7f0000001400)=@framed, &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:36:28 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x6, 0x9, &(0x7f0000000000)=0x4, 0x4) 09:36:28 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x1, 0x9b, &(0x7f0000000140)=""/155, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:36:28 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x54) 09:36:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 09:36:28 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'bond0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB='M']}) 09:36:28 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x1}]}]}}, &(0x7f00000002c0)=""/4096, 0x2e, 0x1000, 0x1}, 0x20) 09:36:28 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0x0, 0x0, 0x2}]}}, &(0x7f00000001c0)=""/153, 0x26, 0x99, 0x1}, 0x20) 09:36:28 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x12, &(0x7f0000000040)={@dev, @loopback}, 0x10) 09:36:28 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xaa}]}, &(0x7f0000000080)='syzkaller\x00', 0x1, 0x9b, &(0x7f0000000140)=""/155, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:36:28 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000200)=@framed={{}, [@map_fd={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000080)='syzkaller\x00', 0x1, 0x9b, &(0x7f0000000140)=""/155, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:36:28 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000240), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) 09:36:28 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000001680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c, 0x0}}], 0x1, 0x2400c800) 09:36:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc) 09:36:28 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000004e40)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, &(0x7f0000001200)=[{&(0x7f0000000040)="95db5b4e66446bc0c0f5e76c0bfe3cbae43e5726e7db064b79e7c47622d92cdbff3e9a6f7d09febec52fd927a6692029d70eb567bf4478a32c68f071914cbebf4c9f7b2ba90f7505131d259fd5e4bb4f072cc38ea4e55bdc7ef654f3df80b6422e8e7e8801418e4ebf066eeb594c5ce2aa239cb74f66de030221ad87249cfdb99260639fa3a624a4f39433cd924b5b1f9f26ce4a3f7b7884a665594a13e1c19cc4e147ef7bffa4fc105abee4", 0xac}, {&(0x7f0000000100)="644bc7c132b01eac61c5cc0e8d828ccb7a14fba59eadf22020a6a5acf1b62436e2e38c338c4ee5804148af5d84d0706274ad84f7dc7c03c5deac9b2a62fda575de78e691c3e34b6618", 0x49}, {0x0}, {&(0x7f0000000200)="75e077ce34bf6becc38b4d03459ee15a624874394b7908f21e4b408055fd4deca0ac96f3a3cbf26d08c8a176699f2918ba296ab4faee4a68f7f0593b445c16cec982281f5bd24d2c79e856e526b7f491aaa48ff6178edadac8d1cfa431e36011783e2915edfdac6f46b0893606e6dac36de6c45d1c983bdb8b6c4b801bbf49af6f72aef5df2f577bd8e55497906429ba4bd3ed12987982bd649d7d71aac6c5c4b9b0588c0d564e69184f580482b8526f74f806386bc90b11cf5543e9e0fb5610a3aad947b4b297f267d2ba15fd6b9cad9e7637432160c3840c442f9041fdd40c98a860c34fa2c2fb2f7e8d334abb89ec3dae56588c55119fa4b03d4136e9f25b69c6a872af4ac5f417c4462f697744c820db25e28ef4b55258ce8a8abd29dd39804a247b85c560cd6940256d5c543ce75b1db595b268fbcb94ae32c19f40aede7f796ee35827563ada893c17fa91fc92fa73929d256fef73cc4ecd11342ee4b8204e89ebd396842ecea75285e66072de9a797fb864ac041b5ba0fde518b109777bbc4da3601fbae962b0094939ae1fac4e1219d29ad3c38b496a30afb7308af8058a4e65973fdedc08777e3f0d6ea70db335b0fd881eb00d4e2d0ee969cd8014a22517b29a3095199f51e20e63f5f7fbaf509cfa685a5844e31df6f0f8e0f7d039ed5bb785690f2008dcb59104ef82cbe814ac25a2fc3dec5e2c230312c2a21ab021fabc700eb6cc479f3103af3158eea12a9b380bce91da36d60c0f4df1107daef9d43de01859e96c0143050a7d08f0f8ed83fa623bb427ef803bd512293ec533023f0ff5cdb74a738393c5378d28bbba1c1759b721cc12cddc461e80686271737141c65d905bb3ff195112b0168846019588d464dc88a37a0e28a783334d128a306d2383561a0de3fc16668541c9c3a1e5714891aa88b2d9bceb4da6507de92f763275a4e8ff3c749f505667acc2349c948166f47219a6add71cb0226d7f204bdd4a9dfb358df6bdd76315d04491edfb6682334bd50b2186ead2feceaca4676e5d467c29bfd6312938b58755229a43a32700f430082774bd864e5f57cab33c7c40a1b97bf065553cb631a5bc65321712b65a65867b2085218a8811ff0542fc987a714feba3c0f9acf1ec0a7bea9faff3e53cf59ea49c652d9b918403df89a09959b1d29c2537e4a57db485919b167b748a5acb64066c5cfbb0c4c9ae29e89182628fc7a37d15e3d6130caf95c531834d9854cfba12e2b3818aa40f3c8d4f099025100d99c5a9f2e3a07b84fcbf1ba83040c51f8c7e21aebb15beb5a73320493d0fc9c96fe7e5623c16d3e6dfa2e2775cc11457e4945ccb8b41b185854b65e283257f54fc78a0e74e005d0211944c1a99cb95ae4aff50e996bbbc7cc6d9bc0ca94809e35206be6ed18f340bacee59f2798730e04fec4b1f9c5ae76cb7df1aa0cdf28c98330fe42fec3cc55bcdffd767712c3e29d82cfdb4824b9f9a723c79d43c2a69f4961b95bfd70499ec06f601f14c3474d9aa43e7a416a3e2e4eb73bad89c4f9dc15fadc4a542e22d967385ab71b5457e54ceda129510c980c64833b6c69d6e47cbda1bd2b3fc2cb474fb071789bc1d9a9a9535584bbae32359a0a542df7c22d635e713fc4eb5c48faf8c457e48f7141f73494eec98721e758eae3a854fab704fbaec43c995314fdbf542cfeeda66556881ea3cfab3", 0x4b8}], 0x4}}], 0x1, 0x0) 09:36:28 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}}, 0x0) 09:36:29 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001740)=@bpf_lsm={0x1c, 0x3, &(0x7f0000001400)=@framed, &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:36:29 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x4, &(0x7f0000000040)={@dev={0xac, 0x10}, @loopback}, 0x10) 09:36:29 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x43, &(0x7f0000000140)={@rand_addr=' \x01\x00'}, 0x20) 09:36:29 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) 09:36:29 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 09:36:29 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, 0x0, 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) 09:36:29 executing program 0: r0 = fsopen(&(0x7f0000000040)='vfat\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 09:36:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x19, 0x0, &(0x7f0000000480)) 09:36:29 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x0, 0x0, 0x0, 0x0, 0xc1f101cbc151d36, 0xffffffffffffffff, 0xd6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5}, 0x48) 09:36:29 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000080)='syzkaller\x00', 0x1, 0x9b, &(0x7f0000000140)=""/155, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:36:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000140)={@rand_addr=' \x01\x00'}, 0x20) 09:36:29 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x1, 0x9b, &(0x7f0000000140)=""/155, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:36:29 executing program 1: socketpair(0x2, 0x3, 0x5, &(0x7f0000000300)) 09:36:29 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x6, 0x16, &(0x7f0000000000), 0x4) 09:36:29 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f00000000c0)={'icmp6\x00'}, &(0x7f0000000100)=0x1e) 09:36:29 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000000)={'nat\x00'}, &(0x7f0000000080)=0x54) 09:36:29 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x2, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000001c0)=""/153, 0x1a, 0x99, 0x1}, 0x20) 09:36:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000001c0), 0x8) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x39, &(0x7f0000000200), 0x8) 09:36:29 executing program 3: r0 = fsopen(&(0x7f0000000100)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000140)='%[\',^($\x00', &(0x7f00000002c0)="02", 0x1) 09:36:30 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000004e40)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, &(0x7f0000001200)=[{&(0x7f0000000040)="95db5b4e66446bc0c0f5e76c0bfe3cbae43e5726e7db064b79e7c47622d92cdbff3e9a6f7d09febec52fd927a6692029d70eb567bf4478a32c68f071914cbebf4c9f7b2ba90f7505131d259fd5e4bb4f072cc38ea4e55bdc7ef654f3df80b6422e8e7e8801418e4ebf066eeb594c5ce2aa239cb74f66de030221ad87249cfdb99260639fa3a624a4f39433cd924b5b1f9f26ce4a3f7b7884a665594a13e1c19cc4e147ef7bffa4fc105a", 0xaa}, {&(0x7f0000000100)="644bc7c132b01eac61c5cc0e8d828ccb7a14fba59eadf22020a6a5acf1b62436e2e38c338c4ee5804148af5d84d0706274ad84f7dc7c03c5deac9b2a62fda575de78e691c3e34b6618", 0x49}, {&(0x7f00000001c0)="dc9c9dead4c9", 0x6}, {&(0x7f0000000200)="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", 0x4b4}], 0x4}}], 0x1, 0x0) 09:36:30 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x6, 0x24, &(0x7f0000000000)=0x4, 0x4) 09:36:30 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x5}}, &(0x7f0000000080)='syzkaller\x00', 0x1, 0x9b, &(0x7f0000000140)=""/155, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:36:30 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f00000001c0)=""/153, 0x300, 0x99, 0x1}, 0x20) 09:36:30 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xc}]}, &(0x7f0000000080)='syzkaller\x00', 0x1, 0x9b, &(0x7f0000000140)=""/155, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:36:30 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x1, 0x9b, &(0x7f0000000140)=""/155, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:36:30 executing program 1: r0 = fsopen(&(0x7f0000000040)='efivarfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x8, 0x0, 0x0, 0x0) 09:36:30 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3c, 0x0, 0x0) 09:36:30 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x1600bd78, &(0x7f0000000040)={@dev, @loopback, 0x0, 0xcb, [@private, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr, @multicast1]}, 0xffac) 09:36:30 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x4, &(0x7f0000000040)={@dev={0xac, 0x2, 0x14, 0x4}, @loopback}, 0x10) 09:36:30 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r0, 0x6, 0x8, 0x0, &(0x7f0000000480)) 09:36:30 executing program 3: bpf$MAP_CREATE(0xa, &(0x7f0000000200)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 09:36:30 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000005c0)={&(0x7f0000000400)=""/115, 0x0, 0x1000}, 0x20) 09:36:30 executing program 0: pselect6(0x40, &(0x7f0000000000), &(0x7f00000001c0)={0x6}, 0x0, 0x0, 0x0) 09:36:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x1a, 0x0, &(0x7f0000000480)) 09:36:30 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r0, 0x6, 0x7, 0x0, &(0x7f0000000480)) 09:36:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000000)=""/4096, &(0x7f0000001000)=0x1000) 09:36:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000004140)={0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000003e40)={0x24, 0x0, 0x0, 0x0, 0x0, "", [@generic="e16388b276d1e4489ad214189d51cfad1c"]}, 0x24}, {0x0, 0x9effffff00000000}], 0x2}, 0x0) 09:36:30 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) 09:36:30 executing program 0: syz_io_uring_setup(0x7b57, &(0x7f0000000340), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000003c0), 0x0) syz_io_uring_setup(0x6054, &(0x7f0000000040), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 09:36:30 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x57}]}, &(0x7f0000000080)='syzkaller\x00', 0x1, 0x9b, &(0x7f0000000140)=""/155, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:36:30 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6d}]}, &(0x7f0000000080)='syzkaller\x00', 0x1, 0x9b, &(0x7f0000000140)=""/155, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:36:30 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x6, 0x0, 0x0, 0x4) 09:36:30 executing program 1: syz_clone(0xb622d000, 0x0, 0x0, 0x0, 0x0, 0x0) 09:36:30 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x490, 0x0, 0x358, 0xffffffff, 0x210, 0x358, 0x478, 0x478, 0xffffffff, 0x478, 0x478, 0x5, 0x0, {[{{@ipv6={@remote, @remote, [], [], 'ip6gretap0\x00', 'xfrm0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@empty, @ipv4=@local, @icmp_id}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @empty, [], [], 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@private2, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, @port, @gre_key}}}, {{@ipv6={@remote, @empty, [], [], 'veth1_to_team\x00', 'geneve0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@private1, @ipv6=@rand_addr=' \x01\x00', @gre_key}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0) 09:36:30 executing program 2: openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=[0x0, 0x0], 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x4400, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) execveat(r0, 0x0, 0x0, 0x0, 0x1000) socket$inet6(0xa, 0x800, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000480)=[{0x6}]}) 09:36:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, 0x0, 0x3800}, 0x0) 09:36:30 executing program 1: openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x484c01, 0x0) 09:36:30 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) 09:36:30 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x1}, 0x1c) [ 292.077736][ T5891] process 'syz-executor.2' launched '/dev/fd/-1/./file0' with NULL argv: empty string added 09:36:30 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x8, 0x0, 0x0) 09:36:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0x4}, {}]}}) 09:36:30 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$UFFDIO_COPY(r0, 0x8940, 0x0) 09:36:30 executing program 2: sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@dstopts={{0x28, 0x29, 0x37, {0x0, 0x1, '\x00', [@calipso={0x7, 0x8}]}}}, @hoplimit={{0x14}}, @dstopts={{0x50, 0x29, 0x37, {0x0, 0x6, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0x0, 0x0, [0x0, 0x0]}}, @pad1, @calipso={0x7, 0x10, {0x0, 0x2, 0x0, 0x0, [0x0]}}, @padn]}}}, @dontfrag={{0x14}}, @pktinfo={{0x24, 0x29, 0x32, {@private0}}}, @hoplimit={{0x14}}, @hoplimit={{0x14}}, @flowinfo={{0x14}}, @hopopts={{0x30, 0x29, 0x36, {0x0, 0x2, '\x00', [@hao={0xc9, 0x10, @private1}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1}}}], 0x170}}], 0x1, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f00000003c0)=[&(0x7f00000002c0)='\'\x00'], 0x0) 09:36:30 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$netlink(r0, 0x10e, 0x4, &(0x7f0000000040)=""/55, &(0x7f0000000080)=0x37) 09:36:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0x8, 0x4) 09:36:30 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x6, 0x11, &(0x7f0000000000), 0x4) 09:36:31 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r0, 0x6, 0xc, 0x0, &(0x7f0000000480)) 09:36:31 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000440)=ANY=[], 0x0) 09:36:31 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x6, 0x24, &(0x7f0000000000), 0x4) 09:36:31 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x6, 0x6cb, &(0x7f0000000000)=0x4, 0x4) 09:36:31 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x4, &(0x7f0000000040)={@empty, @private, 0x0, 0x1, [@multicast1]}, 0x14) 09:36:31 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000004e40)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, &(0x7f0000001200)=[{&(0x7f0000000040)="95db", 0x2}, {&(0x7f0000000100)="644bc7c132b01eac61c5cc0e8d828ccb7a14fba59eadf22020a6a5acf1b62436e2e38c338c4ee5804148af5d84d0706274ad84f7dc7c03c5deac9b2a62fda575de78e691c3e34b", 0x47}, {&(0x7f00000001c0)="dc", 0x1}], 0x3}}], 0x1, 0x0) 09:36:31 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x1, 0x9b, &(0x7f0000000140)=""/155, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:36:31 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x453, 0x0, 0x0, 0x0, "a7"}, 0x14}}, 0x0) 09:36:31 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) 09:36:31 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x16}]}, &(0x7f0000000080)='syzkaller\x00', 0x1, 0x9b, &(0x7f0000000140)=""/155, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:36:31 executing program 1: openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={0x260081}, 0x18) 09:36:31 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x453, 0x0, 0x0, 0x0, "a7"}, 0x14}}, 0x0) 09:36:31 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 09:36:31 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x6, 0x15, &(0x7f0000000000), 0x4) 09:36:31 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x30, &(0x7f0000000040)={@dev, @loopback, 0x0, 0xcb, [@private, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr, @multicast1]}, 0xffac) 09:36:31 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x6, 0x6bd, &(0x7f0000000000)=0x4, 0x4) 09:36:32 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20) 09:36:32 executing program 0: unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x0) 09:36:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@private1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1b57}, 0x20) 09:36:32 executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000780)={&(0x7f0000010000/0x1000)=nil, &(0x7f000069c000/0x4000)=nil, &(0x7f0000406000/0x4000)=nil, &(0x7f0000801000/0x4000)=nil, &(0x7f0000759000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000611000/0x2000)=nil, &(0x7f00002e3000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) 09:36:32 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x270, 0xf8, 0xffffffff, 0xffffffff, 0xf8, 0xffffffff, 0x1c8, 0xffffffff, 0xffffffff, 0x1c8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@dev, @remote, [], [], 'dummy0\x00', 'caif0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d0) 09:36:32 executing program 0: r0 = fsopen(&(0x7f0000000040)='efivarfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x4, 0x0, 0x0, 0x0) 09:36:32 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x100000, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x9) execveat(r0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=[&(0x7f00000001c0)='/\x00', 0x0], &(0x7f00000003c0)=[&(0x7f0000000300)='\x00\x00^', &(0x7f0000000400)='/dev/vcsu\x00'], 0x1000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000080)) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x4400, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x9) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x4400, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x4400, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x117, 0x5, 0x0, 0x9) execveat(r3, 0x0, &(0x7f0000000280)=[&(0x7f0000000180)='\x8e\\\x00', &(0x7f00000001c0)='/\x00', 0x0], &(0x7f00000003c0)=[&(0x7f00000002c0)='\'\x00', &(0x7f0000000300)='-%\x00', &(0x7f0000000340)='/dev/vcsu\x00'], 0x1000) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f0000000200)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) execveat(r2, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=[&(0x7f0000000180)='\x8e\\\x00', &(0x7f00000001c0)='/\x00', 0x0], &(0x7f00000003c0)=[&(0x7f00000002c0)='\'\x00', &(0x7f0000000300)='-%\x00', &(0x7f0000000340)='/dev/vcsu\x00', &(0x7f0000000380)='/dev/vcsu\x00'], 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000340)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}) execveat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=[&(0x7f00000004c0)='\xcb\x00\x00\x96\xbd\'\b\xba\xcf&>\xd7\xd1t>\x8e\xbe\xa0u-\xed\xedI', &(0x7f00000001c0)='/\x00', 0x0], &(0x7f00000003c0)=[0x0, &(0x7f0000000300)='-%\x00', &(0x7f0000000500)='/dev/vcsu\x00\x04I\x8bJ\x10\xcd(\x93\xd7v\x93\x1f\x9b\v\xdf\xc6\xaa\x9e#\x9d\x0fC&fC\xcb\xb7\xad.\xf3\xb1\xf9E\xa1\x1b\xbe\x81|\x91\xf6!Y\xa3^Ax\xc2\xf1f\x80\xcd\xe0\x8d\xe9\xa0}\xa6I\xe6G\x17x\'\x02Nt>\xa7\x05d\b\xab9\x0es2\n', &(0x7f0000000440)='/dev!vc\x89u\x00\xf6\xeb@\xf5x\xf7\',yX\xbd\x87\x10\x8f\xd4\xbcs\xe1'], 0x1000) socket$inet6(0xa, 0x800, 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x80}]}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x4400, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x117, 0x5, 0x0, 0x9) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x4400, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r5, 0x117, 0x5, 0x0, 0x9) execveat(r5, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, &(0x7f0000000340)='/dev/vcsu\x00', &(0x7f0000000380)='/dev/vcsu\x00'], 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000005c0)) 09:36:32 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001740)=@bpf_lsm={0x5, 0x3, &(0x7f0000001400)=@framed, &(0x7f0000001480)='GPL\x00', 0x5, 0xe3, &(0x7f00000014c0)=""/227, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:36:32 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x6, 0x17, &(0x7f0000000000), 0x4) 09:36:32 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x1b, &(0x7f0000000000), 0x0) 09:36:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = getpgid(0x0) sendmsg$netlink(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)={0x10}, 0x10}], 0x1, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee01, 0xee00}}}], 0x20}, 0x0) 09:36:32 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001740)=@bpf_lsm={0x1b, 0x3, &(0x7f0000001400)=@framed, &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:36:32 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x4c, 0x0, &(0x7f0000000480)) 09:36:32 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xf}, {}]}]}}, &(0x7f00000002c0)=""/4096, 0x36, 0x1000, 0x1}, 0x20) 09:36:33 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000080)='syzkaller\x00', 0x1, 0x9b, &(0x7f0000000140)=""/155, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:36:33 executing program 1: syz_clone(0xb622d000, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x0) 09:36:33 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0xc}]}]}}, &(0x7f00000001c0)=""/153, 0x32, 0x99, 0x1}, 0x20) 09:36:33 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000001c0), 0x8) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x6, &(0x7f0000000200), 0x8) 09:36:33 executing program 3: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001200)={&(0x7f00000010c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f0000001140)=""/186, 0x26, 0xba, 0x1}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r0, 0x20, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000100)=""/241, 0xf1}}, 0x10) 09:36:33 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f0000000080)='syzkaller\x00', 0x1, 0x9b, &(0x7f0000000140)=""/155, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:36:33 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r0, 0x6, 0x6c5, 0x0, &(0x7f0000000480)) 09:36:33 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x20, 0x4) 09:36:33 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x6, 0x6, &(0x7f0000000140)=0x1, 0x4) 09:36:33 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, 0x0, 0x0, 0x0) 09:36:33 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001200)={&(0x7f00000010c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@enum={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000001140)=""/186, 0x2a, 0xba, 0x1}, 0x20) 09:36:33 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x50000746, 0x4) 09:36:33 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x11}}) 09:36:33 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002300)='[') getresuid(&(0x7f0000002380), &(0x7f0000000000), &(0x7f0000002600)) 09:36:33 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000004e40)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}}], 0x1, 0x0) 09:36:33 executing program 2: sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, 0x0, 0x5cb5e37991949d8) 09:36:33 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r0, 0x6, 0x10, 0x0, &(0x7f0000000480)) 09:36:33 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r0, 0x29, 0xb, 0x0, &(0x7f0000000480)) 09:36:33 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x4, 0x440, 0xffffffff, 0x328, 0x578, 0x578, 0xffffffff, 0xffffffff, 0x748, 0x748, 0x748, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@private2, @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'bond_slave_1\x00', 'macvlan0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:systemd_unit_file_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) 09:36:33 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x6, 0x25, &(0x7f0000000000)=0x4, 0x4) 09:36:33 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @private}, 0x0, 0x0, 0x0, 0x5}, 0x20) 09:36:33 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) [ 295.340119][ T6020] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 295.357852][ T6022] TCP: TCP_TX_DELAY enabled 09:36:33 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x2, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000001c0)=""/153, 0x1a, 0x99, 0x1}, 0x20) 09:36:33 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x35}, 0x21) 09:36:33 executing program 2: r0 = fsopen(&(0x7f0000000040)='efivarfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='\x00', &(0x7f00000000c0)='/dev/loop#\x00', 0x0) 09:36:33 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000), 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 09:36:33 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r0, 0x6, 0x4, 0x0, &(0x7f0000000480)) 09:36:33 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x1, &(0x7f0000000000)=@raw=[@ldst={0x0, 0x0, 0x2}], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x9b, &(0x7f0000000080)=""/155, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:36:33 executing program 1: bpf$BPF_BTF_LOAD(0x15, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20) 09:36:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$netlink(r0, &(0x7f0000004140)={0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000003e40)={0x10, 0x13, 0x1}, 0x10}], 0x1}, 0x0) 09:36:33 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x4, 0x0, 0x0) 09:36:33 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000001580)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c, 0x0}}], 0x1, 0x2400c014) 09:36:33 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x3c1800, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 09:36:33 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1}}}}) 09:36:33 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x3}]}, &(0x7f0000000080)='syzkaller\x00', 0x1, 0x9b, &(0x7f0000000140)=""/155, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:36:33 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x18, &(0x7f0000000140)={@rand_addr=' \x01\x00'}, 0x20) 09:36:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000004140)={0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000003e40)={0x24, 0x13, 0x1, 0x0, 0x0, "", [@generic="e16388b276d1e4489ad214189d51cfad04"]}, 0x24}], 0x1}, 0x0) 09:36:33 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000000c0)={0x10001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) 09:36:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000140)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 09:36:34 executing program 1: r0 = semget$private(0x0, 0x2, 0x126) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000180)=""/4096) 09:36:34 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2d}]}, &(0x7f0000000080)='syzkaller\x00', 0x1, 0x9b, &(0x7f0000000140)=""/155, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:36:34 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x1, 0x9b, &(0x7f0000000140)=""/155, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:36:34 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xaf}]}, &(0x7f0000000080)='syzkaller\x00', 0x1, 0x9b, &(0x7f0000000140)=""/155, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:36:34 executing program 1: syz_io_uring_setup(0x7b57, &(0x7f0000000340), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000003c0), &(0x7f0000000440)) syz_io_uring_setup(0x20a5, &(0x7f0000000000)={0x0, 0x3130}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 09:36:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x7246}, 0x0) 09:36:34 executing program 3: syz_io_uring_setup(0x7b57, &(0x7f0000000340), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000003c0), 0x0) syz_io_uring_setup(0x6754, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2b7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 09:36:34 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) 09:36:34 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) 09:36:34 executing program 2: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000001c0)='encrypted\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='\x1fA', r1) 09:36:34 executing program 3: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, r0, r1) 09:36:34 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000001700)=ANY=[@ANYBLOB="9feb010618"], &(0x7f0000001800)=""/144, 0xfa, 0x90, 0x1}, 0x20) 09:36:34 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x6, 0xd, 0x0, 0x4) 09:36:34 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) 09:36:35 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x6, 0x6bf, &(0x7f0000000000)=0x7fffffff, 0x4) 09:36:35 executing program 0: syz_io_uring_setup(0x4c89, &(0x7f0000000340)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000003c0), &(0x7f0000000040)) 09:36:35 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 09:36:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x6, 0x3b, 0x0, 0x0) 09:36:35 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x1600bd78, &(0x7f0000000040)={@dev, @loopback}, 0x10) 09:36:35 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x4e, &(0x7f0000000200), 0x8) 09:36:35 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) 09:36:35 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) 09:36:35 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 1) 09:36:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x10, 0x4) [ 296.932083][ T6110] FAULT_INJECTION: forcing a failure. [ 296.932083][ T6110] name failslab, interval 1, probability 0, space 0, times 1 [ 296.970354][ T6110] CPU: 3 PID: 6110 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 296.980240][ T6110] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 296.987361][ T6110] Call Trace: [ 296.990296][ T6110] [ 296.992583][ T6110] dump_stack_lvl+0xd1/0x138 [ 296.996903][ T6110] should_fail_ex.cold+0x5/0xa [ 297.000971][ T6110] ? vm_area_dup+0x7d/0x380 [ 297.004886][ T6110] should_failslab+0x9/0x20 [ 297.008204][ T6110] kmem_cache_alloc+0x5a/0x430 [ 297.011751][ T6110] vm_area_dup+0x7d/0x380 [ 297.015465][ T6110] ? mt_slot+0xa1/0x170 [ 297.018962][ T6110] ? mas_next_nentry+0x610/0xab0 [ 297.023219][ T6110] ? mas_next_node+0x547/0xa00 [ 297.027642][ T6110] ? mas_find+0x211/0xd10 [ 297.031260][ T6110] ? vm_area_alloc+0x100/0x100 [ 297.034921][ T6110] ? validate_mm_mt+0x149/0x1b0 [ 297.037972][ T6110] ? remove_vma+0x130/0x130 [ 297.042015][ T6110] ? can_vma_merge_before+0x390/0x390 [ 297.047313][ T6110] __split_vma+0xae/0x5e0 [ 297.051375][ T6110] ? vma_merge+0x2cf/0x870 [ 297.054536][ T6110] split_vma+0xa3/0xe0 [ 297.065478][ T6110] mlock_fixup+0x4f0/0x7f0 [ 297.069016][ T6110] ? mas_walk+0x4bd/0x6c0 [ 297.073124][ T6110] apply_vma_lock_flags+0x2cf/0x3d0 [ 297.078020][ T6110] ? mlock_fixup+0x7f0/0x7f0 [ 297.081458][ T6110] do_mlock+0x25a/0x6d0 [ 297.084793][ T6110] ? folio_memcg+0x320/0x320 [ 297.089085][ T6110] ? fput+0x2f/0x1a0 [ 297.093536][ T6110] __ia32_sys_mlock+0x57/0x80 [ 297.099651][ T6110] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 297.105484][ T6110] __do_fast_syscall_32+0x65/0xf0 [ 297.110197][ T6110] do_fast_syscall_32+0x33/0x70 [ 297.114450][ T6110] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 297.119851][ T6110] RIP: 0023:0xf7f47549 [ 297.122858][ T6110] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 297.138595][ T6110] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 297.148048][ T6110] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 297.154866][ T6110] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 297.162544][ T6110] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 297.168976][ T6110] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 297.176219][ T6110] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 297.182721][ T6110] 09:36:35 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) 09:36:35 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 2) 09:36:35 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x15, &(0x7f0000000140)={@rand_addr=' \x01\x00'}, 0x20) 09:36:35 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x6, 0x6cf, &(0x7f0000000000), 0x4) 09:36:35 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x9, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x1, 0x9b, &(0x7f0000000140)=""/155, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:36:35 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000000)=0x6, 0x4) 09:36:35 executing program 2: socket(0x80fe43d20ba1071, 0x0, 0x0) 09:36:35 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) 09:36:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x30, 0x0, &(0x7f0000000480)) 09:36:35 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 3) 09:36:35 executing program 1: syz_clone3(&(0x7f0000005840)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x94) 09:36:35 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 09:36:35 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x6, 0x5, &(0x7f0000000000)=0x4, 0x4) 09:36:35 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1, 0x0, 0x0, 0x0, 0x4c0}, 0x48) [ 297.562476][ T6140] FAULT_INJECTION: forcing a failure. [ 297.562476][ T6140] name failslab, interval 1, probability 0, space 0, times 0 09:36:35 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0x0, 0x0, 0x0, 0x11}]}}, &(0x7f00000001c0)=""/153, 0x26, 0x99, 0x1}, 0x20) [ 297.578462][ T6140] CPU: 2 PID: 6140 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 297.587425][ T6140] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 297.594337][ T6140] Call Trace: [ 297.597420][ T6140] [ 297.600666][ T6140] dump_stack_lvl+0xd1/0x138 [ 297.603893][ T6140] should_fail_ex.cold+0x5/0xa [ 297.607460][ T6140] ? mas_alloc_nodes+0x429/0x810 [ 297.611284][ T6140] should_failslab+0x9/0x20 [ 297.615110][ T6140] kmem_cache_alloc+0x5a/0x430 [ 297.620148][ T6140] mas_alloc_nodes+0x429/0x810 [ 297.626603][ T6140] ? find_vma+0x10c/0x1b0 [ 297.629700][ T6140] mas_preallocate+0x1bb/0x360 [ 297.633179][ T6140] __vma_adjust+0x192/0x1ae0 [ 297.639164][ T6140] ? down_write+0x157/0x220 [ 297.643656][ T6140] ? vma_expand+0xb80/0xb80 [ 297.647220][ T6140] __split_vma+0x4ce/0x5e0 [ 297.651851][ T6140] split_vma+0xa3/0xe0 [ 297.658441][ T6140] mlock_fixup+0x4f0/0x7f0 [ 297.666609][ T6140] ? mas_walk+0x4bd/0x6c0 [ 297.669701][ T6140] apply_vma_lock_flags+0x2cf/0x3d0 09:36:35 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c2000000bbbbbbbbbbbb080045"], 0x0) [ 297.676806][ T6140] ? mlock_fixup+0x7f0/0x7f0 09:36:35 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r0, 0x6, 0x6bd, 0x0, &(0x7f0000000480)) [ 297.680498][ T6140] do_mlock+0x25a/0x6d0 [ 297.684257][ T6140] ? folio_memcg+0x320/0x320 [ 297.688558][ T6140] ? fput+0x2f/0x1a0 [ 297.692816][ T6140] __ia32_sys_mlock+0x57/0x80 [ 297.696866][ T6140] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 297.703250][ T6140] __do_fast_syscall_32+0x65/0xf0 [ 297.708093][ T6140] do_fast_syscall_32+0x33/0x70 [ 297.711745][ T6140] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 297.716547][ T6140] RIP: 0023:0xf7f47549 [ 297.719539][ T6140] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 297.738010][ T6140] RSP: 002b:00000000f7f215cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 297.744090][ T6140] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 297.749837][ T6140] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 297.755623][ T6140] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 297.760749][ T6140] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 297.766821][ T6140] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 297.772080][ T6140] 09:36:36 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 4) 09:36:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r0, 0x6, 0x0, 0x0, &(0x7f0000000480)) 09:36:36 executing program 2: epoll_create1(0xa0357fa7fcec71d5) 09:36:36 executing program 3: r0 = socket(0x11, 0x2, 0x0) connect$netlink(r0, 0x0, 0x0) 09:36:36 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x9d}]}, &(0x7f0000000080)='syzkaller\x00', 0x1, 0x9b, &(0x7f0000000140)=""/155, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:36:36 executing program 1: listxattr(&(0x7f0000000140)='./file1\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) 09:36:36 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f00000001c0)=""/153, 0x1100000, 0x99}, 0x20) 09:36:36 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback={0x0, 0xa8aaaafffeaaaa1b}}, 0x1c) [ 297.886186][ T6160] FAULT_INJECTION: forcing a failure. [ 297.886186][ T6160] name failslab, interval 1, probability 0, space 0, times 0 [ 297.898629][ T6160] CPU: 1 PID: 6160 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 297.908060][ T6160] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 297.916628][ T6160] Call Trace: [ 297.920268][ T6160] [ 297.923302][ T6160] dump_stack_lvl+0xd1/0x138 [ 297.927494][ T6160] should_fail_ex.cold+0x5/0xa [ 297.932038][ T6160] should_failslab+0x9/0x20 [ 297.937533][ T6160] kmem_cache_alloc_bulk+0x6d/0x840 [ 297.945125][ T6160] ? rcu_read_lock_sched_held+0x3e/0x70 [ 297.951333][ T6160] ? trace_kmem_cache_alloc+0x35/0x100 [ 297.956094][ T6160] ? kmem_cache_alloc+0x234/0x430 [ 297.960488][ T6160] mas_alloc_nodes+0x309/0x810 [ 297.965097][ T6160] ? find_vma+0x10c/0x1b0 [ 297.969437][ T6160] mas_preallocate+0x1bb/0x360 [ 297.972989][ T6160] __vma_adjust+0x192/0x1ae0 [ 297.977376][ T6160] ? down_write+0x157/0x220 [ 297.982313][ T6160] ? vma_expand+0xb80/0xb80 [ 297.987236][ T6160] __split_vma+0x4ce/0x5e0 [ 297.994926][ T6160] split_vma+0xa3/0xe0 [ 297.997548][ T6160] mlock_fixup+0x4f0/0x7f0 [ 298.003472][ T6160] ? mas_walk+0x4bd/0x6c0 [ 298.008013][ T6160] apply_vma_lock_flags+0x2cf/0x3d0 [ 298.014266][ T6160] ? mlock_fixup+0x7f0/0x7f0 [ 298.020229][ T6160] do_mlock+0x25a/0x6d0 [ 298.025473][ T6160] ? folio_memcg+0x320/0x320 [ 298.029713][ T6160] ? fput+0x2f/0x1a0 [ 298.032843][ T6160] __ia32_sys_mlock+0x57/0x80 [ 298.037943][ T6160] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 298.048477][ T6160] __do_fast_syscall_32+0x65/0xf0 [ 298.054414][ T6160] do_fast_syscall_32+0x33/0x70 [ 298.060551][ T6160] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 298.067483][ T6160] RIP: 0023:0xf7f47549 [ 298.071233][ T6160] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 298.090545][ T6160] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 298.102348][ T6160] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 298.109697][ T6160] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 298.117582][ T6160] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 298.124293][ T6160] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 298.130847][ T6160] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 298.139694][ T6160] 09:36:36 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 5) 09:36:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x14, &(0x7f0000000140)={@rand_addr=' \x01\x00'}, 0x20) 09:36:36 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x6, 0x6bf, &(0x7f0000000000), 0x4) 09:36:36 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x48, &(0x7f0000000140)={@rand_addr=' \x01\x00'}, 0x20) 09:36:36 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@private1, 0x0, 0x0, 0x3, 0xb}, 0x20) 09:36:36 executing program 2: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, r1) [ 298.197668][ T6172] FAULT_INJECTION: forcing a failure. [ 298.197668][ T6172] name failslab, interval 1, probability 0, space 0, times 0 09:36:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x49, &(0x7f0000000200), 0x8) [ 298.212486][ T6172] CPU: 2 PID: 6172 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 298.219944][ T6172] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 298.226362][ T6172] Call Trace: [ 298.228582][ T6172] [ 298.230711][ T6172] dump_stack_lvl+0xd1/0x138 [ 298.234348][ T6172] should_fail_ex.cold+0x5/0xa [ 298.238214][ T6172] ? vm_area_dup+0x7d/0x380 [ 298.242891][ T6172] should_failslab+0x9/0x20 [ 298.246884][ T6172] kmem_cache_alloc+0x5a/0x430 [ 298.250554][ T6172] vm_area_dup+0x7d/0x380 [ 298.254705][ T6172] ? mt_slot+0xa1/0x170 09:36:36 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x6, 0x6c6, 0x0, 0x0) [ 298.258140][ T6172] ? mas_next_nentry+0x610/0xab0 [ 298.262775][ T6172] ? mas_next_node+0x547/0xa00 [ 298.267246][ T6172] ? mas_find+0x211/0xd10 [ 298.271421][ T6172] ? __vma_adjust+0x877/0x1ae0 [ 298.275835][ T6172] ? vm_area_alloc+0x100/0x100 [ 298.280086][ T6172] ? validate_mm_mt+0x149/0x1b0 [ 298.284206][ T6172] ? remove_vma+0x130/0x130 [ 298.287237][ T6172] __split_vma+0xae/0x5e0 [ 298.290346][ T6172] split_vma+0xa3/0xe0 [ 298.292885][ T6172] mlock_fixup+0x55e/0x7f0 [ 298.295817][ T6172] ? mas_walk+0x4bd/0x6c0 [ 298.298793][ T6172] apply_vma_lock_flags+0x2cf/0x3d0 [ 298.303141][ T6172] ? mlock_fixup+0x7f0/0x7f0 [ 298.307407][ T6172] do_mlock+0x25a/0x6d0 [ 298.311111][ T6172] ? folio_memcg+0x320/0x320 [ 298.315030][ T6172] ? fput+0x2f/0x1a0 [ 298.318470][ T6172] __ia32_sys_mlock+0x57/0x80 [ 298.322483][ T6172] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 298.327513][ T6172] __do_fast_syscall_32+0x65/0xf0 [ 298.331198][ T6172] do_fast_syscall_32+0x33/0x70 [ 298.334654][ T6172] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 298.339274][ T6172] RIP: 0023:0xf7f47549 [ 298.342220][ T6172] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 298.355404][ T6172] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 298.361124][ T6172] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 298.366908][ T6172] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 298.372560][ T6172] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 298.377634][ T6172] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 298.383048][ T6172] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 298.388026][ T6172] 09:36:36 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 6) 09:36:36 executing program 2: r0 = fsopen(&(0x7f0000000040)='efivarfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x5, 0x0, 0x0, 0x0) 09:36:36 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f00000001c0)=""/153, 0x26, 0x99, 0x1}, 0x20) 09:36:36 executing program 1: mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x0, 0x0) 09:36:36 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000080)='syzkaller\x00', 0x1, 0x9b, &(0x7f0000000140)=""/155, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:36:36 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x1e, 0x0, &(0x7f0000000480)) 09:36:36 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x2a, &(0x7f0000000040)={@dev, @loopback, 0x0, 0xcb, [@private, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr, @multicast1]}, 0xffac) 09:36:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x9, 0x3, 0x410, 0x118, 0xffffffff, 0xffffffff, 0x118, 0xffffffff, 0x340, 0xffffffff, 0xffffffff, 0x340, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xf8, 0x118, 0x0, {}, [@common=@ipv6header={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@private2, @mcast2, @private0, @private2, @empty, @local, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @loopback, @dev, @mcast1, @remote, @mcast1, @remote]}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'ip6erspan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) 09:36:36 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 7) 09:36:36 executing program 2: r0 = fsopen(&(0x7f0000000040)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 09:36:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000), 0x8) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) 09:36:36 executing program 3: r0 = syz_io_uring_setup(0x321b, &(0x7f0000000000)={0x0, 0x7127}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000100), 0x0, 0x0, 0x0) 09:36:36 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 8) 09:36:36 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000240)=@nat={'nat\x00', 0x1b, 0x5, 0x490, 0x0, 0xf0, 0xffffffff, 0x1e0, 0x1e0, 0x3c0, 0x3c0, 0xffffffff, 0x3c0, 0x3c0, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@broadcast, @ipv4=@multicast1, @port, @gre_key}}}, {{@ipv6={@private1, @mcast1, [], [], 'veth1_vlan\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@loopback, @gre_key, @icmp_id}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @private2, [], [], 'veth0_macvtap\x00', 'ip6erspan0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv6=@private1, @port, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv4=@broadcast, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0) [ 298.674881][ T6208] FAULT_INJECTION: forcing a failure. [ 298.674881][ T6208] name failslab, interval 1, probability 0, space 0, times 0 09:36:36 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x6, 0x6b4, &(0x7f0000000000), 0x4) 09:36:36 executing program 1: bpf$BPF_BTF_LOAD(0x1c, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20) [ 298.685361][ T6208] CPU: 3 PID: 6208 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 298.692392][ T6208] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 298.699031][ T6208] Call Trace: [ 298.701828][ T6208] [ 298.704179][ T6208] dump_stack_lvl+0xd1/0x138 09:36:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0xffffffff, 0x2}, 0x20) 09:36:37 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x6, 0x3b, &(0x7f0000000200), 0x8) [ 298.708402][ T6208] should_fail_ex.cold+0x5/0xa [ 298.712657][ T6208] should_failslab+0x9/0x20 [ 298.715914][ T6208] kmem_cache_alloc_bulk+0x6d/0x840 [ 298.719655][ T6208] ? rcu_read_lock_sched_held+0x3e/0x70 [ 298.723965][ T6208] ? trace_kmem_cache_alloc+0x35/0x100 [ 298.729015][ T6208] ? kmem_cache_alloc+0x234/0x430 [ 298.733456][ T6208] mas_alloc_nodes+0x309/0x810 [ 298.738223][ T6208] ? find_vma+0x10c/0x1b0 [ 298.741527][ T6208] mas_preallocate+0x1bb/0x360 [ 298.745377][ T6208] __vma_adjust+0x192/0x1ae0 [ 298.748986][ T6208] ? down_write+0x157/0x220 [ 298.752738][ T6208] ? vma_expand+0xb80/0xb80 [ 298.757359][ T6208] __split_vma+0x2a9/0x5e0 [ 298.761181][ T6208] split_vma+0xa3/0xe0 [ 298.765041][ T6208] mlock_fixup+0x55e/0x7f0 [ 298.769469][ T6208] ? mas_walk+0x4bd/0x6c0 [ 298.773780][ T6208] apply_vma_lock_flags+0x2cf/0x3d0 [ 298.779138][ T6208] ? mlock_fixup+0x7f0/0x7f0 [ 298.783790][ T6208] do_mlock+0x25a/0x6d0 [ 298.787908][ T6208] ? folio_memcg+0x320/0x320 [ 298.792649][ T6208] ? fput+0x2f/0x1a0 [ 298.796748][ T6208] __ia32_sys_mlock+0x57/0x80 [ 298.800105][ T6208] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 298.805138][ T6208] __do_fast_syscall_32+0x65/0xf0 [ 298.808912][ T6208] do_fast_syscall_32+0x33/0x70 [ 298.812517][ T6208] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 298.817304][ T6208] RIP: 0023:0xf7f47549 [ 298.820194][ T6208] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 298.835886][ T6208] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 298.842785][ T6208] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 298.849019][ T6208] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 298.856710][ T6208] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 298.862585][ T6208] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 298.869739][ T6208] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 298.877082][ T6208] 09:36:37 executing program 1: bpf$MAP_CREATE(0x10, &(0x7f0000000200)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 09:36:37 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x6, 0x6c9, &(0x7f0000000000), 0x4) 09:36:37 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 9) 09:36:37 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (fail_nth: 1) 09:36:37 executing program 2: unshare(0x6c060000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) ioctl$sock_proto_private(0xffffffffffffffff, 0x89eb, &(0x7f00000004c0)="1ba1b3dacc2f26cd807de7ab10bfc3650bc02bdb7a59c444c1b182f36a7eac8402ca427f5b5f1e3e4377de1505b906872366b60647e10b5c6f6c177214256a106f0005d191c68ad77940be2e3f7ba160b0b04be4b2750b94a2f353f5e1dc900db17beef4174b6f386a010b025330074bb97655fd8f4a1d132596665250794439da4747f47e17fbdcaa087754879b4fc12e77e24b26d818f0e481ee82ea952e3b2ee7d3ba56d5ad12c3b7081f9a96ac3368bed3f1457080c36f37e51742162069353b65f29e315751170083bcd11803e8062fdba1") r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f000000c140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x28}}, 0x0) recvfrom$inet6(r0, &(0x7f0000000300)=""/65, 0x41, 0x12100, &(0x7f0000000280)={0xa, 0x4e20, 0x5, @loopback, 0x3ff}, 0x1c) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000002, 0x2010, r2, 0x7df84000) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x5, @empty, 0xffffff11}, 0x1c) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000380), &(0x7f0000000400)=0xc) socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom$inet6(r1, &(0x7f0000000000)=""/35, 0xffffffffffffff13, 0x100, &(0x7f0000001880)={0xa, 0x0, 0x0, @mcast2}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'team_slave_0\x00', 0x4000}) r4 = socket(0xa, 0x3, 0x4) connect$unix(r4, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e) connect$unix(r4, &(0x7f0000000000)=@abs, 0x6e) sendto$inet6(r4, &(0x7f0000000100)="ed76010fe6848400f09521e0eac550745200a4838247cfd8fd30556634c1b40036f1c676b37550304077fb678c7c724cba472ee3b813e53247fe53a57ca46178cdc3f529e54039ed6a9a24838beeacb6383beddc10f7febc840ebfb1a87cdc9a49aec4e4e34bba440d509f9d94623eb5e4a612d9c646a0a9a5e81bafabf76fdb70bc477a3ee81b4e9d0cdc8e1de44a2afd70d3b6a29598abd708a329c4a58c354e2b4ca39a67005e76a1b61bf114afceab5af5ad902404918d84af0f4c847576c8641ef89bf84fe36d7df00f839072580bbf10c14e8a94b25dc3148c9365", 0xde, 0x4048c11, &(0x7f0000000200)={0xa, 0x4e20, 0x7, @private1, 0x3}, 0x1c) sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x600000000000004) socket(0x1000000000000010, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) socket(0x15, 0x80000, 0xfffffffb) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f000000c140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000f544fcdaaade78fc0082c2c6cc0000000000000000000000001400010010000100090001003a0edfbb9ec8adaa8a8005b16c914ad3da3fcf1f0271461c0408150b7c272bbbf41500477f17"], 0x28}}, 0x0) unshare(0x3a050300) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000000c0)={0x0, 'rose0\x00', {0x2}}) 09:36:37 executing program 3: write$cgroup_pid(0xffffffffffffffff, &(0x7f00000004c0), 0x12) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)='io.pressure\x00', 0x2, 0x0) r0 = syz_clone(0x68080200, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000100), 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040)=r0, 0x12) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) [ 299.021038][ T6226] FAULT_INJECTION: forcing a failure. [ 299.021038][ T6226] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 299.032504][ T6230] FAULT_INJECTION: forcing a failure. [ 299.032504][ T6230] name failslab, interval 1, probability 0, space 0, times 0 [ 299.035951][ T6226] CPU: 3 PID: 6226 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 299.053297][ T6226] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 299.060867][ T6226] Call Trace: [ 299.064188][ T6226] [ 299.067272][ T6226] dump_stack_lvl+0xd1/0x138 [ 299.071602][ T6226] should_fail_ex.cold+0x5/0xa [ 299.071837][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 299.074972][ T6226] prepare_alloc_pages+0x178/0x570 [ 299.090165][ T6226] __alloc_pages+0x149/0x5b0 [ 299.094255][ T6226] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 299.100133][ T6226] ? __lock_acquire+0x166e/0x56d0 [ 299.104801][ T6226] ? __lock_acquire+0xbc3/0x56d0 [ 299.109897][ T6226] __folio_alloc+0x16/0x40 [ 299.114255][ T6226] vma_alloc_folio+0x155/0x870 [ 299.118353][ T6226] ? policy_nodemask+0x1c0/0x1c0 [ 299.122866][ T6226] ? lock_chain_count+0x20/0x20 [ 299.126508][ T6226] __handle_mm_fault+0x1822/0x3c90 [ 299.130250][ T6226] ? vm_iomap_memory+0x190/0x190 [ 299.134167][ T6226] handle_mm_fault+0x1b6/0x850 [ 299.138883][ T6226] __get_user_pages+0x4f8/0xfc0 [ 299.143699][ T6226] ? follow_page_mask+0x10a0/0x10a0 [ 299.148121][ T6226] populate_vma_page_range+0x241/0x320 [ 299.152757][ T6226] __mm_populate+0x105/0x3b0 [ 299.156293][ T6226] ? faultin_vma_page_range+0x300/0x300 [ 299.160427][ T6226] ? up_write+0x1b0/0x520 [ 299.163364][ T6226] do_mlock+0x370/0x6d0 [ 299.166087][ T6226] ? folio_memcg+0x320/0x320 [ 299.169725][ T6226] ? fput+0x2f/0x1a0 [ 299.172812][ T6226] __ia32_sys_mlock+0x57/0x80 [ 299.177021][ T6226] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 299.197474][ T6226] __do_fast_syscall_32+0x65/0xf0 [ 299.202386][ T6226] do_fast_syscall_32+0x33/0x70 [ 299.207288][ T6226] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 299.213563][ T6226] RIP: 0023:0xf7f47549 [ 299.217582][ T6226] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 299.235496][ T6226] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 299.243883][ T6226] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 299.251138][ T6226] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 299.258250][ T6226] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 299.265427][ T6226] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 299.272321][ T6226] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 299.280075][ T6226] [ 299.283128][ T6230] CPU: 2 PID: 6230 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 299.292897][ T6230] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 299.307646][ T6230] Call Trace: [ 299.310550][ T6230] [ 299.314289][ T6230] dump_stack_lvl+0xd1/0x138 [ 299.319081][ T6230] should_fail_ex.cold+0x5/0xa [ 299.324399][ T6230] ? __anon_vma_prepare+0x64/0x580 [ 299.329135][ T6230] should_failslab+0x9/0x20 [ 299.338332][ T6230] kmem_cache_alloc+0x5a/0x430 [ 299.342814][ T6230] __anon_vma_prepare+0x64/0x580 [ 299.347580][ T6230] do_huge_pmd_anonymous_page+0xfc8/0x1c70 [ 299.355017][ T6230] ? hugepage_vma_check+0x24e/0x830 [ 299.359438][ T6230] __handle_mm_fault+0x2736/0x3c90 [ 299.363932][ T6230] ? vm_iomap_memory+0x190/0x190 [ 299.367755][ T6230] handle_mm_fault+0x1b6/0x850 [ 299.372241][ T6230] __get_user_pages+0x4f8/0xfc0 [ 299.377420][ T6230] ? follow_page_mask+0x10a0/0x10a0 [ 299.384583][ T6230] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 299.391017][ T6230] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 299.396592][ T6230] __gup_longterm_locked+0x1bd/0x25d0 [ 299.400154][ T6230] ? lock_release+0x810/0x810 [ 299.414643][ T6230] ? __get_user_pages+0xfc0/0xfc0 [ 299.423096][ T6230] ? down_read+0x19c/0x450 [ 299.426730][ T6230] pin_user_pages_remote+0x6c/0xb0 [ 299.431125][ T6230] process_vm_rw_core.constprop.0+0x43b/0x990 [ 299.441161][ T6230] ? vmalloc_dump_obj+0x1b0/0x1b0 [ 299.445163][ T6230] ? iovec_from_user+0x114/0x3a0 [ 299.450161][ T6230] ? __import_iovec+0x1fb/0x610 [ 299.454263][ T6230] ? iovec_from_user+0x114/0x3a0 [ 299.460835][ T6230] process_vm_rw+0x29c/0x300 [ 299.469638][ T6230] ? process_vm_rw_core.constprop.0+0x990/0x990 [ 299.476404][ T6230] ? ksys_write+0x210/0x250 [ 299.480307][ T6230] ? lock_downgrade+0x6e0/0x6e0 [ 299.484705][ T6230] ? vfs_write+0x49e/0xdd0 [ 299.488844][ T6230] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 299.494390][ T6230] ? wait_for_completion_io_timeout+0x20/0x20 [ 299.499956][ T6230] ? fput+0x2f/0x1a0 09:36:37 executing program 3: write$cgroup_pid(0xffffffffffffffff, &(0x7f00000004c0), 0x12) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)='io.pressure\x00', 0x2, 0x0) r0 = syz_clone(0x68080200, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000100), 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040)=r0, 0x12) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000004c0), 0x12) (async) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)='io.pressure\x00', 0x2, 0x0) (async) syz_clone(0x68080200, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000100), 0x0) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040)=r0, 0x12) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) (async) 09:36:37 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 10) [ 299.503066][ T6230] __ia32_sys_process_vm_writev+0xe0/0x1b0 [ 299.509834][ T6230] ? lockdep_hardirqs_on+0x7d/0x100 [ 299.514004][ T6230] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 299.519658][ T6230] __do_fast_syscall_32+0x65/0xf0 [ 299.523744][ T6230] do_fast_syscall_32+0x33/0x70 [ 299.527885][ T6230] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 299.532566][ T6230] RIP: 0023:0xf7fbf549 [ 299.535359][ T6230] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 299.535926][ T6239] FAULT_INJECTION: forcing a failure. [ 299.535926][ T6239] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 299.555455][ T6230] RSP: 002b:00000000f7fba5cc EFLAGS: 00000296 ORIG_RAX: 000000000000015c [ 299.555492][ T6230] RAX: ffffffffffffffda RBX: 00000000000000ea RCX: 0000000020000000 [ 299.555511][ T6230] RDX: 0000000000000001 RSI: 0000000020121000 RDI: 0000000000000001 [ 299.555528][ T6230] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 299.555544][ T6230] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 299.555560][ T6230] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 299.603744][ T6230] [ 299.606781][ T6239] CPU: 3 PID: 6239 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 299.614926][ T6239] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 299.622388][ T6239] Call Trace: [ 299.625179][ T6239] [ 299.627817][ T6239] dump_stack_lvl+0xd1/0x138 [ 299.632128][ T6239] should_fail_ex.cold+0x5/0xa 09:36:37 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (fail_nth: 2) [ 299.635865][ T6239] prepare_alloc_pages+0x178/0x570 [ 299.642043][ T6239] __alloc_pages+0x149/0x5b0 [ 299.645488][ T6239] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 299.651221][ T6239] ? __lock_acquire+0x166e/0x56d0 [ 299.655532][ T6239] ? __lock_acquire+0xbc3/0x56d0 [ 299.659182][ T6239] __folio_alloc+0x16/0x40 [ 299.663011][ T6239] vma_alloc_folio+0x155/0x870 [ 299.667445][ T6239] ? policy_nodemask+0x1c0/0x1c0 [ 299.669355][ T6248] FAULT_INJECTION: forcing a failure. [ 299.669355][ T6248] name failslab, interval 1, probability 0, space 0, times 0 [ 299.672255][ T6239] ? lock_chain_count+0x20/0x20 [ 299.672301][ T6239] __handle_mm_fault+0x1822/0x3c90 [ 299.672356][ T6239] ? vm_iomap_memory+0x190/0x190 [ 299.672413][ T6239] handle_mm_fault+0x1b6/0x850 [ 299.672455][ T6239] __get_user_pages+0x4f8/0xfc0 [ 299.672497][ T6239] ? follow_page_mask+0x10a0/0x10a0 [ 299.672566][ T6239] populate_vma_page_range+0x241/0x320 [ 299.672605][ T6239] __mm_populate+0x105/0x3b0 [ 299.672639][ T6239] ? faultin_vma_page_range+0x300/0x300 [ 299.672676][ T6239] ? up_write+0x1b0/0x520 [ 299.720946][ T6239] do_mlock+0x370/0x6d0 [ 299.723611][ T6239] ? folio_memcg+0x320/0x320 [ 299.726521][ T6239] ? fput+0x2f/0x1a0 [ 299.729091][ T6239] __ia32_sys_mlock+0x57/0x80 [ 299.732259][ T6239] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 299.736796][ T6239] __do_fast_syscall_32+0x65/0xf0 [ 299.740137][ T6239] do_fast_syscall_32+0x33/0x70 [ 299.743498][ T6239] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 299.747776][ T6239] RIP: 0023:0xf7f47549 [ 299.750381][ T6239] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 299.762044][ T6239] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 299.767860][ T6239] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 299.773188][ T6239] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 299.778314][ T6239] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 299.783409][ T6239] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 299.789548][ T6239] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 299.794745][ T6239] [ 299.798787][ T6248] CPU: 0 PID: 6248 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 299.806395][ T6248] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 299.812276][ T6248] Call Trace: [ 299.815005][ T6248] [ 299.817055][ T6248] dump_stack_lvl+0xd1/0x138 [ 299.821555][ T6248] should_fail_ex.cold+0x5/0xa [ 299.826152][ T6248] ? __anon_vma_prepare+0x2c6/0x580 [ 299.830842][ T6248] should_failslab+0x9/0x20 [ 299.834046][ T6248] kmem_cache_alloc+0x5a/0x430 [ 299.837397][ T6248] __anon_vma_prepare+0x2c6/0x580 [ 299.840732][ T6248] do_huge_pmd_anonymous_page+0xfc8/0x1c70 [ 299.845589][ T6248] ? hugepage_vma_check+0x24e/0x830 [ 299.850209][ T6248] __handle_mm_fault+0x2736/0x3c90 [ 299.854045][ T6248] ? vm_iomap_memory+0x190/0x190 [ 299.858373][ T6248] handle_mm_fault+0x1b6/0x850 [ 299.861877][ T6248] __get_user_pages+0x4f8/0xfc0 [ 299.865471][ T6248] ? follow_page_mask+0x10a0/0x10a0 [ 299.869772][ T6248] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 299.875562][ T6248] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 299.881313][ T6248] __gup_longterm_locked+0x1bd/0x25d0 [ 299.886278][ T6248] ? lock_release+0x810/0x810 [ 299.890233][ T6248] ? __get_user_pages+0xfc0/0xfc0 [ 299.893878][ T6248] ? down_read+0x19c/0x450 [ 299.897053][ T6248] pin_user_pages_remote+0x6c/0xb0 [ 299.900625][ T6248] process_vm_rw_core.constprop.0+0x43b/0x990 [ 299.901055][ T6250] FAULT_INJECTION: forcing a failure. [ 299.901055][ T6250] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 299.905245][ T6248] ? vmalloc_dump_obj+0x1b0/0x1b0 [ 299.918594][ T6248] ? iovec_from_user+0x114/0x3a0 [ 299.922715][ T6248] ? __import_iovec+0x1fb/0x610 [ 299.927590][ T6248] ? iovec_from_user+0x114/0x3a0 [ 299.932583][ T6248] process_vm_rw+0x29c/0x300 [ 299.937221][ T6248] ? process_vm_rw_core.constprop.0+0x990/0x990 [ 299.942927][ T6248] ? ksys_write+0x210/0x250 [ 299.946702][ T6248] ? lock_downgrade+0x6e0/0x6e0 [ 299.950715][ T6248] ? vfs_write+0x49e/0xdd0 [ 299.953793][ T6248] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 299.958237][ T6248] ? wait_for_completion_io_timeout+0x20/0x20 [ 299.961819][ T6248] ? fput+0x2f/0x1a0 [ 299.965030][ T6248] __ia32_sys_process_vm_writev+0xe0/0x1b0 09:36:38 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 11) [ 299.968870][ T6248] ? lockdep_hardirqs_on+0x7d/0x100 [ 299.972345][ T6248] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 299.977567][ T6248] __do_fast_syscall_32+0x65/0xf0 [ 299.981768][ T6248] do_fast_syscall_32+0x33/0x70 [ 299.985398][ T6248] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 299.990162][ T6248] RIP: 0023:0xf7fbf549 [ 299.993292][ T6248] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 300.012334][ T6248] RSP: 002b:00000000f7fba5cc EFLAGS: 00000296 ORIG_RAX: 000000000000015c [ 300.020088][ T6248] RAX: ffffffffffffffda RBX: 00000000000000ec RCX: 0000000020000000 [ 300.026233][ T6248] RDX: 0000000000000001 RSI: 0000000020121000 RDI: 0000000000000001 [ 300.032535][ T6248] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 300.039155][ T6248] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 300.045726][ T6248] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 300.052809][ T6248] [ 300.055432][ T6250] CPU: 3 PID: 6250 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 300.063409][ T6250] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 300.069597][ T6250] Call Trace: [ 300.071831][ T6250] [ 300.073841][ T6250] dump_stack_lvl+0xd1/0x138 [ 300.077232][ T6250] should_fail_ex.cold+0x5/0xa [ 300.080950][ T6250] prepare_alloc_pages+0x178/0x570 [ 300.083894][ T6250] __alloc_pages+0x149/0x5b0 [ 300.086508][ T6250] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 300.090732][ T6250] ? __lock_acquire+0x166e/0x56d0 [ 300.093852][ T6250] ? __lock_acquire+0xbc3/0x56d0 [ 300.097270][ T6250] __folio_alloc+0x16/0x40 [ 300.102318][ T6250] vma_alloc_folio+0x155/0x870 [ 300.107075][ T6250] ? policy_nodemask+0x1c0/0x1c0 [ 300.110380][ T6250] ? lock_chain_count+0x20/0x20 [ 300.113311][ T6250] __handle_mm_fault+0x1822/0x3c90 [ 300.116750][ T6250] ? vm_iomap_memory+0x190/0x190 [ 300.117673][ T6252] FAULT_INJECTION: forcing a failure. [ 300.117673][ T6252] name failslab, interval 1, probability 0, space 0, times 0 [ 300.120875][ T6250] handle_mm_fault+0x1b6/0x850 [ 300.120963][ T6250] __get_user_pages+0x4f8/0xfc0 [ 300.121010][ T6250] ? follow_page_mask+0x10a0/0x10a0 [ 300.141717][ T6250] populate_vma_page_range+0x241/0x320 [ 300.146427][ T6250] __mm_populate+0x105/0x3b0 [ 300.150439][ T6250] ? faultin_vma_page_range+0x300/0x300 [ 300.154854][ T6250] ? up_write+0x1b0/0x520 [ 300.158728][ T6250] do_mlock+0x370/0x6d0 [ 300.161056][ T6250] ? folio_memcg+0x320/0x320 [ 300.164157][ T6250] ? fput+0x2f/0x1a0 [ 300.167052][ T6250] __ia32_sys_mlock+0x57/0x80 [ 300.170229][ T6250] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 300.174560][ T6250] __do_fast_syscall_32+0x65/0xf0 [ 300.178213][ T6250] do_fast_syscall_32+0x33/0x70 [ 300.181089][ T6250] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 300.185154][ T6250] RIP: 0023:0xf7f47549 09:36:38 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (fail_nth: 3) [ 300.188155][ T6250] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 300.204517][ T6250] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 300.210333][ T6250] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 300.216483][ T6250] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 300.222813][ T6250] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 300.228116][ T6250] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 300.233757][ T6250] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 300.239164][ T6250] [ 300.241255][ T6252] CPU: 0 PID: 6252 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 300.248375][ T6252] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 300.254866][ T6252] Call Trace: [ 300.257336][ T6252] [ 300.259430][ T6252] dump_stack_lvl+0xd1/0x138 [ 300.262954][ T6252] should_fail_ex.cold+0x5/0xa [ 300.267074][ T6252] ? __khugepaged_enter+0x38/0x3a0 [ 300.272093][ T6252] should_failslab+0x9/0x20 [ 300.275379][ T6252] kmem_cache_alloc+0x5a/0x430 [ 300.279895][ T6252] __khugepaged_enter+0x38/0x3a0 09:36:38 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 12) [ 300.284229][ T6252] khugepaged_enter_vma+0x118/0x150 [ 300.287778][ T6252] do_huge_pmd_anonymous_page+0x1b7/0x1c70 [ 300.291376][ T6252] ? hugepage_vma_check+0x24e/0x830 [ 300.294430][ T6252] __handle_mm_fault+0x2736/0x3c90 [ 300.297477][ T6252] ? vm_iomap_memory+0x190/0x190 [ 300.300446][ T6252] handle_mm_fault+0x1b6/0x850 [ 300.303336][ T6252] __get_user_pages+0x4f8/0xfc0 [ 300.306336][ T6252] ? follow_page_mask+0x10a0/0x10a0 [ 300.309654][ T6252] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 300.313635][ T6252] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 300.318043][ T6252] __gup_longterm_locked+0x1bd/0x25d0 [ 300.320043][ T6254] FAULT_INJECTION: forcing a failure. [ 300.320043][ T6254] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 300.321905][ T6252] ? lock_release+0x810/0x810 [ 300.321947][ T6252] ? __get_user_pages+0xfc0/0xfc0 [ 300.321978][ T6252] ? down_read+0x19c/0x450 [ 300.321997][ T6252] pin_user_pages_remote+0x6c/0xb0 [ 300.322018][ T6252] process_vm_rw_core.constprop.0+0x43b/0x990 [ 300.322046][ T6252] ? vmalloc_dump_obj+0x1b0/0x1b0 [ 300.365467][ T6252] ? iovec_from_user+0x114/0x3a0 [ 300.369108][ T6252] ? __import_iovec+0x1fb/0x610 [ 300.372898][ T6252] ? iovec_from_user+0x114/0x3a0 [ 300.376819][ T6252] process_vm_rw+0x29c/0x300 [ 300.380347][ T6252] ? process_vm_rw_core.constprop.0+0x990/0x990 [ 300.385720][ T6252] ? ksys_write+0x210/0x250 [ 300.388972][ T6252] ? lock_downgrade+0x6e0/0x6e0 [ 300.392822][ T6252] ? vfs_write+0x49e/0xdd0 [ 300.396913][ T6252] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 300.402337][ T6252] ? wait_for_completion_io_timeout+0x20/0x20 [ 300.406478][ T6252] ? fput+0x2f/0x1a0 [ 300.409115][ T6252] __ia32_sys_process_vm_writev+0xe0/0x1b0 [ 300.413302][ T6252] ? lockdep_hardirqs_on+0x7d/0x100 [ 300.417041][ T6252] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 300.421500][ T6252] __do_fast_syscall_32+0x65/0xf0 [ 300.424901][ T6252] do_fast_syscall_32+0x33/0x70 [ 300.428463][ T6252] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 300.433050][ T6252] RIP: 0023:0xf7fbf549 [ 300.435695][ T6252] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 300.448887][ T6252] RSP: 002b:00000000f7fba5cc EFLAGS: 00000296 ORIG_RAX: 000000000000015c [ 300.456007][ T6252] RAX: ffffffffffffffda RBX: 00000000000000ee RCX: 0000000020000000 [ 300.461959][ T6252] RDX: 0000000000000001 RSI: 0000000020121000 RDI: 0000000000000001 [ 300.467494][ T6252] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 300.474072][ T6252] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 300.480357][ T6252] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 300.485258][ T6252] [ 300.487496][ T6254] CPU: 1 PID: 6254 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 300.495344][ T6254] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 300.502189][ T6254] Call Trace: [ 300.504842][ T6254] [ 300.507146][ T6254] dump_stack_lvl+0xd1/0x138 [ 300.510544][ T6254] should_fail_ex.cold+0x5/0xa [ 300.514330][ T6254] prepare_alloc_pages+0x178/0x570 [ 300.524524][ T6254] __alloc_pages+0x149/0x5b0 [ 300.527206][ T6254] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 300.531096][ T6254] ? __lock_acquire+0x166e/0x56d0 [ 300.534029][ T6254] ? __lock_acquire+0xbc3/0x56d0 [ 300.537225][ T6254] __folio_alloc+0x16/0x40 [ 300.541147][ T6254] vma_alloc_folio+0x155/0x870 [ 300.544536][ T6254] ? policy_nodemask+0x1c0/0x1c0 [ 300.548398][ T6254] ? lock_chain_count+0x20/0x20 [ 300.552222][ T6254] __handle_mm_fault+0x1822/0x3c90 [ 300.555622][ T6254] ? vm_iomap_memory+0x190/0x190 [ 300.559743][ T6254] handle_mm_fault+0x1b6/0x850 [ 300.563263][ T6254] __get_user_pages+0x4f8/0xfc0 [ 300.566953][ T6254] ? follow_page_mask+0x10a0/0x10a0 [ 300.570817][ T6254] populate_vma_page_range+0x241/0x320 [ 300.574583][ T6254] __mm_populate+0x105/0x3b0 [ 300.577327][ T6254] ? faultin_vma_page_range+0x300/0x300 [ 300.581455][ T6254] ? up_write+0x1b0/0x520 [ 300.584638][ T6254] do_mlock+0x370/0x6d0 [ 300.587371][ T6254] ? folio_memcg+0x320/0x320 [ 300.590318][ T6254] ? fput+0x2f/0x1a0 [ 300.593557][ T6254] __ia32_sys_mlock+0x57/0x80 [ 300.596488][ T6254] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 300.600481][ T6254] __do_fast_syscall_32+0x65/0xf0 [ 300.604057][ T6254] do_fast_syscall_32+0x33/0x70 [ 300.614993][ T6254] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 300.619666][ T6254] RIP: 0023:0xf7f47549 [ 300.622776][ T6254] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 300.637279][ T6254] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 300.643341][ T6254] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 300.649652][ T6254] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 300.655854][ T6254] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 300.661002][ T6254] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 300.665846][ T6254] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 300.670851][ T6254] 09:36:39 executing program 2: unshare(0x6c060000) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c) (async, rerun: 32) listen(r0, 0x0) (rerun: 32) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) (async) ioctl$sock_proto_private(0xffffffffffffffff, 0x89eb, &(0x7f00000004c0)="1ba1b3dacc2f26cd807de7ab10bfc3650bc02bdb7a59c444c1b182f36a7eac8402ca427f5b5f1e3e4377de1505b906872366b60647e10b5c6f6c177214256a106f0005d191c68ad77940be2e3f7ba160b0b04be4b2750b94a2f353f5e1dc900db17beef4174b6f386a010b025330074bb97655fd8f4a1d132596665250794439da4747f47e17fbdcaa087754879b4fc12e77e24b26d818f0e481ee82ea952e3b2ee7d3ba56d5ad12c3b7081f9a96ac3368bed3f1457080c36f37e51742162069353b65f29e315751170083bcd11803e8062fdba1") (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f000000c140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x28}}, 0x0) recvfrom$inet6(r0, &(0x7f0000000300)=""/65, 0x41, 0x12100, &(0x7f0000000280)={0xa, 0x4e20, 0x5, @loopback, 0x3ff}, 0x1c) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000002, 0x2010, r2, 0x7df84000) (async, rerun: 32) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x5, @empty, 0xffffff11}, 0x1c) (rerun: 32) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000380), &(0x7f0000000400)=0xc) (async) socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom$inet6(r1, &(0x7f0000000000)=""/35, 0xffffffffffffff13, 0x100, &(0x7f0000001880)={0xa, 0x0, 0x0, @mcast2}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) (async) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'team_slave_0\x00', 0x4000}) r4 = socket(0xa, 0x3, 0x4) connect$unix(r4, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e) (async) connect$unix(r4, &(0x7f0000000000)=@abs, 0x6e) (async, rerun: 64) sendto$inet6(r4, &(0x7f0000000100)="ed76010fe6848400f09521e0eac550745200a4838247cfd8fd30556634c1b40036f1c676b37550304077fb678c7c724cba472ee3b813e53247fe53a57ca46178cdc3f529e54039ed6a9a24838beeacb6383beddc10f7febc840ebfb1a87cdc9a49aec4e4e34bba440d509f9d94623eb5e4a612d9c646a0a9a5e81bafabf76fdb70bc477a3ee81b4e9d0cdc8e1de44a2afd70d3b6a29598abd708a329c4a58c354e2b4ca39a67005e76a1b61bf114afceab5af5ad902404918d84af0f4c847576c8641ef89bf84fe36d7df00f839072580bbf10c14e8a94b25dc3148c9365", 0xde, 0x4048c11, &(0x7f0000000200)={0xa, 0x4e20, 0x7, @private1, 0x3}, 0x1c) (async, rerun: 64) sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x600000000000004) (async) socket(0x1000000000000010, 0x0, 0x0) (async, rerun: 64) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) (rerun: 64) socket$alg(0x26, 0x5, 0x0) (async) socket(0x15, 0x80000, 0xfffffffb) (async, rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route_sched(r5, &(0x7f000000c140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000f544fcdaaade78fc0082c2c6cc0000000000000000000000001400010010000100090001003a0edfbb9ec8adaa8a8005b16c914ad3da3fcf1f0271461c0408150b7c272bbbf41500477f17"], 0x28}}, 0x0) (async) unshare(0x3a050300) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000000c0)={0x0, 'rose0\x00', {0x2}}) 09:36:39 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 13) 09:36:39 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (fail_nth: 4) [ 300.843160][ T6263] FAULT_INJECTION: forcing a failure. [ 300.843160][ T6263] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 300.854530][ T6263] CPU: 2 PID: 6263 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 300.861018][ T6263] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 300.866661][ T6263] Call Trace: [ 300.869468][ T6263] [ 300.871786][ T6263] dump_stack_lvl+0xd1/0x138 [ 300.875498][ T6263] should_fail_ex.cold+0x5/0xa [ 300.879621][ T6263] prepare_alloc_pages+0x178/0x570 [ 300.884229][ T6263] __alloc_pages+0x149/0x5b0 [ 300.887988][ T6263] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 300.892991][ T6263] ? __lock_acquire+0x166e/0x56d0 [ 300.897506][ T6263] ? __lock_acquire+0xbc3/0x56d0 [ 300.901617][ T6263] __folio_alloc+0x16/0x40 [ 300.904845][ T6263] vma_alloc_folio+0x155/0x870 [ 300.908294][ T6263] ? policy_nodemask+0x1c0/0x1c0 [ 300.912019][ T6263] ? lock_chain_count+0x20/0x20 [ 300.915543][ T6263] __handle_mm_fault+0x1822/0x3c90 [ 300.919780][ T6263] ? vm_iomap_memory+0x190/0x190 [ 300.923936][ T6263] handle_mm_fault+0x1b6/0x850 [ 300.928137][ T6263] __get_user_pages+0x4f8/0xfc0 [ 300.931484][ T6263] ? follow_page_mask+0x10a0/0x10a0 [ 300.935440][ T6263] populate_vma_page_range+0x241/0x320 [ 300.939496][ T6263] __mm_populate+0x105/0x3b0 [ 300.942907][ T6263] ? faultin_vma_page_range+0x300/0x300 [ 300.946411][ T6263] ? up_write+0x1b0/0x520 [ 300.949246][ T6263] do_mlock+0x370/0x6d0 [ 300.951928][ T6263] ? folio_memcg+0x320/0x320 [ 300.955502][ T6263] ? fput+0x2f/0x1a0 [ 300.958643][ T6263] __ia32_sys_mlock+0x57/0x80 [ 300.962558][ T6263] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 300.967904][ T6263] __do_fast_syscall_32+0x65/0xf0 [ 300.971807][ T6263] do_fast_syscall_32+0x33/0x70 [ 300.975320][ T6263] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 300.980408][ T6263] RIP: 0023:0xf7f47549 [ 300.984013][ T6263] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 300.999729][ T6263] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 301.005760][ T6263] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 301.011453][ T6263] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 301.017432][ T6263] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 301.023040][ T6263] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 301.028709][ T6263] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 301.034469][ T6263] 09:36:40 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 14) 09:36:40 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (fail_nth: 5) 09:36:40 executing program 3: write$cgroup_pid(0xffffffffffffffff, &(0x7f00000004c0), 0x12) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)='io.pressure\x00', 0x2, 0x0) r0 = syz_clone(0x68080200, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000100), 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040)=r0, 0x12) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000004c0), 0x12) (async) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)='io.pressure\x00', 0x2, 0x0) (async) syz_clone(0x68080200, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000100), 0x0) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040)=r0, 0x12) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) (async) [ 302.592257][ T6266] FAULT_INJECTION: forcing a failure. 09:36:40 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (fail_nth: 6) [ 302.592257][ T6266] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 302.635108][ T6274] FAULT_INJECTION: forcing a failure. [ 302.635108][ T6274] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 302.647095][ T6274] CPU: 1 PID: 6274 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 302.656981][ T6274] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 302.668804][ T6274] Call Trace: [ 302.670846][ T6274] [ 302.672734][ T6274] dump_stack_lvl+0xd1/0x138 [ 302.676609][ T6274] should_fail_ex.cold+0x5/0xa [ 302.681123][ T6274] prepare_alloc_pages+0x178/0x570 [ 302.684496][ T6274] __alloc_pages+0x149/0x5b0 [ 302.688583][ T6274] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 302.694157][ T6274] ? lock_downgrade+0x6e0/0x6e0 [ 302.698198][ T6274] alloc_pages+0x1aa/0x270 [ 302.702145][ T6274] pte_alloc_one+0x1a/0x230 [ 302.705931][ T6274] do_huge_pmd_anonymous_page+0x451/0x1c70 [ 302.711235][ T6274] __handle_mm_fault+0x2736/0x3c90 [ 302.715473][ T6274] ? vm_iomap_memory+0x190/0x190 [ 302.719692][ T6274] handle_mm_fault+0x1b6/0x850 [ 302.723513][ T6274] __get_user_pages+0x4f8/0xfc0 [ 302.728018][ T6274] ? follow_page_mask+0x10a0/0x10a0 [ 302.731677][ T6274] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 302.735411][ T6274] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 302.739273][ T6274] __gup_longterm_locked+0x1bd/0x25d0 [ 302.743209][ T6274] ? lock_release+0x810/0x810 [ 302.746412][ T6274] ? __get_user_pages+0xfc0/0xfc0 [ 302.749829][ T6274] ? down_read+0x19c/0x450 [ 302.753592][ T6274] pin_user_pages_remote+0x6c/0xb0 [ 302.757503][ T6274] process_vm_rw_core.constprop.0+0x43b/0x990 [ 302.761749][ T6274] ? vmalloc_dump_obj+0x1b0/0x1b0 [ 302.764872][ T6274] ? iovec_from_user+0x114/0x3a0 [ 302.768025][ T6274] ? __import_iovec+0x1fb/0x610 [ 302.771052][ T6274] ? iovec_from_user+0x114/0x3a0 [ 302.774017][ T6274] process_vm_rw+0x29c/0x300 [ 302.777083][ T6274] ? process_vm_rw_core.constprop.0+0x990/0x990 [ 302.780725][ T6274] ? ksys_write+0x210/0x250 [ 302.783864][ T6274] ? lock_downgrade+0x6e0/0x6e0 [ 302.788383][ T6274] ? vfs_write+0x49e/0xdd0 [ 302.791493][ T6274] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 302.795533][ T6274] ? wait_for_completion_io_timeout+0x20/0x20 [ 302.800183][ T6274] ? fput+0x2f/0x1a0 [ 302.803281][ T6274] __ia32_sys_process_vm_writev+0xe0/0x1b0 [ 302.806817][ T6274] ? lockdep_hardirqs_on+0x7d/0x100 [ 302.809815][ T6274] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 302.814551][ T6274] __do_fast_syscall_32+0x65/0xf0 [ 302.818464][ T6274] do_fast_syscall_32+0x33/0x70 [ 302.821785][ T6274] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 302.826300][ T6274] RIP: 0023:0xf7fbf549 [ 302.829176][ T6274] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 302.841246][ T6274] RSP: 002b:00000000f7fba5cc EFLAGS: 00000296 ORIG_RAX: 000000000000015c [ 302.846568][ T6274] RAX: ffffffffffffffda RBX: 00000000000000f4 RCX: 0000000020000000 [ 302.851574][ T6274] RDX: 0000000000000001 RSI: 0000000020121000 RDI: 0000000000000001 [ 302.856506][ T6274] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 302.861750][ T6274] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 302.867355][ T6274] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 302.872572][ T6274] [ 302.874881][ T6266] CPU: 3 PID: 6266 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 302.884512][ T6266] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 302.892382][ T6266] Call Trace: [ 302.895045][ T6266] [ 302.897444][ T6266] dump_stack_lvl+0xd1/0x138 [ 302.901781][ T6266] should_fail_ex.cold+0x5/0xa [ 302.905375][ T6266] prepare_alloc_pages+0x178/0x570 [ 302.910235][ T6266] __alloc_pages+0x149/0x5b0 [ 302.921697][ T6266] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 302.925434][ T6266] ? __lock_acquire+0x166e/0x56d0 [ 302.928222][ T6266] ? __lock_acquire+0xbc3/0x56d0 [ 302.931346][ T6266] __folio_alloc+0x16/0x40 [ 302.934519][ T6266] vma_alloc_folio+0x155/0x870 [ 302.938145][ T6266] ? policy_nodemask+0x1c0/0x1c0 [ 302.941917][ T6266] ? lock_chain_count+0x20/0x20 [ 302.945323][ T6266] __handle_mm_fault+0x1822/0x3c90 [ 302.949054][ T6266] ? vm_iomap_memory+0x190/0x190 [ 302.952764][ T6266] handle_mm_fault+0x1b6/0x850 [ 302.956182][ T6266] __get_user_pages+0x4f8/0xfc0 [ 302.958958][ T6266] ? follow_page_mask+0x10a0/0x10a0 [ 302.962947][ T6266] populate_vma_page_range+0x241/0x320 [ 302.967474][ T6266] __mm_populate+0x105/0x3b0 [ 302.970817][ T6266] ? faultin_vma_page_range+0x300/0x300 [ 302.975372][ T6266] ? up_write+0x1b0/0x520 [ 302.978904][ T6266] do_mlock+0x370/0x6d0 [ 302.981863][ T6266] ? folio_memcg+0x320/0x320 [ 302.985029][ T6266] ? fput+0x2f/0x1a0 [ 302.987920][ T6266] __ia32_sys_mlock+0x57/0x80 [ 302.991544][ T6266] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 302.996797][ T6266] __do_fast_syscall_32+0x65/0xf0 [ 303.000476][ T6266] do_fast_syscall_32+0x33/0x70 [ 303.004598][ T6266] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 303.008788][ T6266] RIP: 0023:0xf7f47549 [ 303.011497][ T6266] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 303.024362][ T6266] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 303.030001][ T6266] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 303.035626][ T6266] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 303.040976][ T6266] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 303.047412][ T6266] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 303.052894][ T6266] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 303.058534][ T6266] [ 303.235797][ T6279] FAULT_INJECTION: forcing a failure. [ 303.235797][ T6279] name failslab, interval 1, probability 0, space 0, times 0 09:36:41 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (fail_nth: 7) [ 303.260594][ T6279] CPU: 1 PID: 6279 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 303.269743][ T6279] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 303.276796][ T6279] Call Trace: [ 303.279670][ T6279] [ 303.282051][ T6279] dump_stack_lvl+0xd1/0x138 [ 303.286041][ T6279] should_fail_ex.cold+0x5/0xa [ 303.289326][ T6279] ? ptlock_alloc+0x21/0x70 [ 303.292030][ T6279] should_failslab+0x9/0x20 [ 303.294908][ T6279] kmem_cache_alloc+0x5a/0x430 [ 303.297656][ T6279] ptlock_alloc+0x21/0x70 [ 303.300092][ T6279] pte_alloc_one+0x6c/0x230 [ 303.303486][ T6279] do_huge_pmd_anonymous_page+0x451/0x1c70 [ 303.307616][ T6279] __handle_mm_fault+0x2736/0x3c90 [ 303.311301][ T6279] ? vm_iomap_memory+0x190/0x190 [ 303.314938][ T6279] handle_mm_fault+0x1b6/0x850 [ 303.318251][ T6279] __get_user_pages+0x4f8/0xfc0 [ 303.321649][ T6279] ? follow_page_mask+0x10a0/0x10a0 [ 303.325313][ T6279] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 303.329488][ T6279] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 303.333945][ T6279] __gup_longterm_locked+0x1bd/0x25d0 [ 303.337999][ T6279] ? lock_release+0x810/0x810 [ 303.341219][ T6279] ? __get_user_pages+0xfc0/0xfc0 [ 303.344967][ T6279] ? down_read+0x19c/0x450 [ 303.348262][ T6279] pin_user_pages_remote+0x6c/0xb0 [ 303.351960][ T6279] process_vm_rw_core.constprop.0+0x43b/0x990 [ 303.356353][ T6279] ? vmalloc_dump_obj+0x1b0/0x1b0 [ 303.359899][ T6279] ? iovec_from_user+0x114/0x3a0 [ 303.363550][ T6279] ? __import_iovec+0x1fb/0x610 [ 303.366906][ T6279] ? iovec_from_user+0x114/0x3a0 [ 303.370428][ T6279] process_vm_rw+0x29c/0x300 [ 303.373749][ T6279] ? process_vm_rw_core.constprop.0+0x990/0x990 [ 303.377980][ T6279] ? ksys_write+0x210/0x250 [ 303.381888][ T6279] ? lock_downgrade+0x6e0/0x6e0 [ 303.385691][ T6279] ? vfs_write+0x49e/0xdd0 [ 303.388758][ T6279] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 303.392981][ T6279] ? wait_for_completion_io_timeout+0x20/0x20 [ 303.397485][ T6279] ? fput+0x2f/0x1a0 [ 303.400480][ T6279] __ia32_sys_process_vm_writev+0xe0/0x1b0 [ 303.405544][ T6279] ? lockdep_hardirqs_on+0x7d/0x100 [ 303.409504][ T6279] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 303.414517][ T6279] __do_fast_syscall_32+0x65/0xf0 [ 303.418655][ T6279] do_fast_syscall_32+0x33/0x70 [ 303.422930][ T6279] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 303.427471][ T6279] RIP: 0023:0xf7fbf549 [ 303.431032][ T6279] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 303.445724][ T6279] RSP: 002b:00000000f7fba5cc EFLAGS: 00000296 ORIG_RAX: 000000000000015c [ 303.451886][ T6279] RAX: ffffffffffffffda RBX: 00000000000000f6 RCX: 0000000020000000 [ 303.457628][ T6279] RDX: 0000000000000001 RSI: 0000000020121000 RDI: 0000000000000001 [ 303.463259][ T6279] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 303.468858][ T6279] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 303.474711][ T6279] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 303.481712][ T6279] 09:36:41 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 15) 09:36:41 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (fail_nth: 8) [ 303.670090][ T6283] FAULT_INJECTION: forcing a failure. [ 303.670090][ T6283] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 303.682399][ T6283] CPU: 0 PID: 6283 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 303.685704][ T6282] FAULT_INJECTION: forcing a failure. [ 303.685704][ T6282] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 303.691729][ T6283] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 303.691744][ T6283] Call Trace: [ 303.691772][ T6283] [ 303.691780][ T6283] dump_stack_lvl+0xd1/0x138 [ 303.691813][ T6283] should_fail_ex.cold+0x5/0xa [ 303.691831][ T6283] copyin+0x19/0x120 [ 303.691849][ T6283] _copy_from_iter+0x37a/0xf40 [ 303.691869][ T6283] ? find_held_lock+0x2d/0x110 [ 303.691893][ T6283] ? csum_and_copy_from_iter+0x12e0/0x12e0 [ 303.734996][ T6283] ? __up_read+0x192/0x720 [ 303.738211][ T6283] ? down_read+0x19c/0x450 [ 303.741714][ T6283] ? up_write+0x520/0x520 [ 303.744678][ T6283] ? page_copy_sane+0xd3/0x410 [ 303.747842][ T6283] copy_page_from_iter+0x9f/0x110 [ 303.751303][ T6283] process_vm_rw_core.constprop.0+0x4cf/0x990 [ 303.755888][ T6283] ? vmalloc_dump_obj+0x1b0/0x1b0 [ 303.759913][ T6283] ? iovec_from_user+0x114/0x3a0 [ 303.763863][ T6283] ? __import_iovec+0x1fb/0x610 [ 303.767720][ T6283] ? iovec_from_user+0x114/0x3a0 [ 303.771851][ T6283] process_vm_rw+0x29c/0x300 [ 303.775658][ T6283] ? process_vm_rw_core.constprop.0+0x990/0x990 [ 303.780057][ T6283] ? ksys_write+0x210/0x250 [ 303.783747][ T6283] ? lock_downgrade+0x6e0/0x6e0 [ 303.787585][ T6283] ? vfs_write+0x49e/0xdd0 [ 303.791270][ T6283] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 303.795677][ T6283] ? wait_for_completion_io_timeout+0x20/0x20 [ 303.801166][ T6283] ? fput+0x2f/0x1a0 [ 303.804713][ T6283] __ia32_sys_process_vm_writev+0xe0/0x1b0 [ 303.808675][ T6283] ? lockdep_hardirqs_on+0x7d/0x100 [ 303.812184][ T6283] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 303.816595][ T6283] __do_fast_syscall_32+0x65/0xf0 [ 303.820086][ T6283] do_fast_syscall_32+0x33/0x70 [ 303.824102][ T6283] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 303.829848][ T6283] RIP: 0023:0xf7fbf549 [ 303.833380][ T6283] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 303.848223][ T6283] RSP: 002b:00000000f7fba5cc EFLAGS: 00000296 ORIG_RAX: 000000000000015c [ 303.853768][ T6283] RAX: ffffffffffffffda RBX: 00000000000000f8 RCX: 0000000020000000 [ 303.858932][ T6283] RDX: 0000000000000001 RSI: 0000000020121000 RDI: 0000000000000001 [ 303.864848][ T6283] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 303.870263][ T6283] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 303.876008][ T6283] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 303.882146][ T6283] [ 303.884494][ T6282] CPU: 1 PID: 6282 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 09:36:42 executing program 2: unshare(0x6c060000) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) (async) ioctl$sock_proto_private(0xffffffffffffffff, 0x89eb, &(0x7f00000004c0)="1ba1b3dacc2f26cd807de7ab10bfc3650bc02bdb7a59c444c1b182f36a7eac8402ca427f5b5f1e3e4377de1505b906872366b60647e10b5c6f6c177214256a106f0005d191c68ad77940be2e3f7ba160b0b04be4b2750b94a2f353f5e1dc900db17beef4174b6f386a010b025330074bb97655fd8f4a1d132596665250794439da4747f47e17fbdcaa087754879b4fc12e77e24b26d818f0e481ee82ea952e3b2ee7d3ba56d5ad12c3b7081f9a96ac3368bed3f1457080c36f37e51742162069353b65f29e315751170083bcd11803e8062fdba1") (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f000000c140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2800000030001400010010000100090001006761637400000000489ec945a594cc80775d05931de77322ba03eacaa5817a06b70e432f706a631f95e163deb850eb98859230c48f6701649540d9797b8fec2ccaf4b3416bcebb7853f0bf209c458c29cbafb6c7b13ab2e7f38ebe0f2ea3cae378bba6cbb71b3a263f5fb1f427f48b0f23157154f86e07bfa425bc18cde676a8a871fdad42925bb165e5b754bf93c13cd0b3c3858734d116054be4950b4a1aa519db9f847ec7bd8d042d24bf335e8a78d497cb9db0869932b930f7f360e0826e6eefb6c7a6021f81000000836e1fcf230b6805c964b0238a65b0795d95ceb2cdeb706d926f312b24d4f7332d413c38af7140c4f441c55db70536feb1dd063dae803d16aa42b60893ea9685f169b75ef54f0596b13f7d8cabea839ac1e5ea9c3f6359dc2ea3a35a917d7997d2f7435594181eb13438576f895a00"], 0x28}}, 0x0) recvfrom$inet6(r0, &(0x7f0000000300)=""/65, 0x41, 0x12100, &(0x7f0000000280)={0xa, 0x4e20, 0x5, @loopback, 0x3ff}, 0x1c) (async) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000002, 0x2010, r2, 0x7df84000) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x5, @empty, 0xffffff11}, 0x1c) (async) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000380), &(0x7f0000000400)=0xc) (async) socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom$inet6(r1, &(0x7f0000000000)=""/35, 0xffffffffffffff13, 0x100, &(0x7f0000001880)={0xa, 0x0, 0x0, @mcast2}, 0x1c) (async) r3 = accept4(r0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'team_slave_0\x00', 0x4000}) r4 = socket(0xa, 0x3, 0x4) connect$unix(r4, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e) (async) connect$unix(r4, &(0x7f0000000000)=@abs, 0x6e) (async) sendto$inet6(r4, &(0x7f0000000100)="ed76010fe6848400f09521e0eac550745200a4838247cfd8fd30556634c1b40036f1c676b37550304077fb678c7c724cba472ee3b813e53247fe53a57ca46178cdc3f529e54039ed6a9a24838beeacb6383beddc10f7febc840ebfb1a87cdc9a49aec4e4e34bba440d509f9d94623eb5e4a612d9c646a0a9a5e81bafabf76fdb70bc477a3ee81b4e9d0cdc8e1de44a2afd70d3b6a29598abd708a329c4a58c354e2b4ca39a67005e76a1b61bf114afceab5af5ad902404918d84af0f4c847576c8641ef89bf84fe36d7df00f839072580bbf10c14e8a94b25dc3148c9365", 0xde, 0x4048c11, &(0x7f0000000200)={0xa, 0x4e20, 0x7, @private1, 0x3}, 0x1c) sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x600000000000004) (async) socket(0x1000000000000010, 0x0, 0x0) (async) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) (async) socket(0x15, 0x80000, 0xfffffffb) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f000000c140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000f544fcdaaade78fc0082c2c6cc0000000000000000000000001400010010000100090001003a0edfbb9ec8adaa8a8005b16c914ad3da3fcf1f0271461c0408150b7c272bbbf41500477f17"], 0x28}}, 0x0) unshare(0x3a050300) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000000c0)={0x0, 'rose0\x00', {0x2}}) [ 303.894219][ T6282] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 303.904744][ T6282] Call Trace: [ 303.907204][ T6282] [ 303.909758][ T6282] dump_stack_lvl+0xd1/0x138 09:36:42 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (fail_nth: 9) [ 303.914146][ T6282] should_fail_ex.cold+0x5/0xa [ 303.920041][ T6282] prepare_alloc_pages+0x178/0x570 [ 303.923490][ T6282] __alloc_pages+0x149/0x5b0 [ 303.926977][ T6282] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 303.931765][ T6282] ? __lock_acquire+0x166e/0x56d0 [ 303.935497][ T6282] ? __lock_acquire+0xbc3/0x56d0 [ 303.939126][ T6282] __folio_alloc+0x16/0x40 [ 303.942556][ T6282] vma_alloc_folio+0x155/0x870 [ 303.946724][ T6282] ? policy_nodemask+0x1c0/0x1c0 [ 303.950564][ T6282] ? lock_chain_count+0x20/0x20 [ 303.953788][ T6282] __handle_mm_fault+0x1822/0x3c90 [ 303.956879][ T6282] ? vm_iomap_memory+0x190/0x190 [ 303.959921][ T6282] handle_mm_fault+0x1b6/0x850 [ 303.963405][ T6282] __get_user_pages+0x4f8/0xfc0 [ 303.967019][ T6282] ? follow_page_mask+0x10a0/0x10a0 [ 303.970578][ T6282] populate_vma_page_range+0x241/0x320 [ 303.974539][ T6282] __mm_populate+0x105/0x3b0 [ 303.978853][ T6282] ? faultin_vma_page_range+0x300/0x300 [ 303.983743][ T6282] ? up_write+0x1b0/0x520 [ 303.987274][ T6288] FAULT_INJECTION: forcing a failure. [ 303.987274][ T6288] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 303.987449][ T6282] do_mlock+0x370/0x6d0 [ 303.999389][ T6282] ? restore_fpregs_from_fpstate+0xc1/0x1c0 [ 304.004369][ T6282] ? folio_memcg+0x320/0x320 [ 304.007856][ T6282] __ia32_sys_mlock+0x57/0x80 [ 304.011652][ T6282] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 304.016567][ T6282] __do_fast_syscall_32+0x65/0xf0 [ 304.020735][ T6282] do_fast_syscall_32+0x33/0x70 [ 304.024631][ T6282] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 304.030259][ T6282] RIP: 0023:0xf7f47549 [ 304.033686][ T6282] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 304.046798][ T6282] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 304.052002][ T6282] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 304.056934][ T6282] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 304.061898][ T6282] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 304.067204][ T6282] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 304.073649][ T6282] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 304.080520][ T6282] [ 304.083447][ T6288] CPU: 0 PID: 6288 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 304.091357][ T6288] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 304.098564][ T6288] Call Trace: [ 304.101848][ T6288] [ 304.104286][ T6288] dump_stack_lvl+0xd1/0x138 [ 304.108561][ T6288] should_fail_ex.cold+0x5/0xa [ 304.112784][ T6288] prepare_alloc_pages+0x178/0x570 [ 304.116930][ T6288] __alloc_pages+0x149/0x5b0 [ 304.120555][ T6288] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 304.125444][ T6288] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 304.131007][ T6288] ? __lock_acquire+0xbc3/0x56d0 [ 304.135658][ T6288] alloc_pages+0x1aa/0x270 [ 304.139098][ T6288] pte_alloc_one+0x1a/0x230 [ 304.142985][ T6288] __pte_alloc+0x6d/0x260 [ 304.146734][ T6288] ? pmd_install+0x160/0x160 [ 304.150925][ T6288] ? hugepage_vma_check+0x24e/0x830 [ 304.155475][ T6288] __handle_mm_fault+0x38cf/0x3c90 [ 304.160096][ T6288] ? vm_iomap_memory+0x190/0x190 [ 304.164597][ T6288] handle_mm_fault+0x1b6/0x850 [ 304.168520][ T6288] do_user_addr_fault+0x475/0x1210 [ 304.175042][ T6288] ? rcu_read_lock_sched_held+0x3e/0x70 [ 304.178546][ T6288] exc_page_fault+0x98/0x170 [ 304.181357][ T6288] asm_exc_page_fault+0x26/0x30 [ 304.184289][ T6288] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 304.188013][ T6288] Code: d1 f3 a4 31 c0 0f 1f 00 c3 8d 0c ca 89 ca eb 2c 66 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 0f 1f 00 83 fa 40 72 34 89 d1 a4 31 c0 0f 1f 00 c3 89 ca eb 06 66 0f 1f 44 00 00 83 f8 12 74 [ 304.199782][ T6288] RSP: 0018:ffffc90002ae7948 EFLAGS: 00010202 [ 304.203373][ T6288] RAX: 0000000000000001 RBX: 00000000000000d8 RCX: 00000000000000d8 [ 304.208083][ T6288] RDX: 00000000000000d8 RSI: 00000000208f9f09 RDI: ffff888079817f28 [ 304.213127][ T6288] RBP: 00007fffffffef28 R08: 0000000000000001 R09: ffff888079817fff [ 304.217845][ T6288] R10: ffffed100f302fff R11: 0000000000000000 R12: ffff888079817f28 [ 304.223294][ T6288] R13: 00000000208f9f09 R14: ffff888079817f28 R15: 0000000000000000 [ 304.230553][ T6288] copyin+0xf6/0x120 [ 304.233457][ T6288] _copy_from_iter+0x37a/0xf40 [ 304.237068][ T6288] ? find_held_lock+0x2d/0x110 [ 304.240729][ T6288] ? csum_and_copy_from_iter+0x12e0/0x12e0 [ 304.245254][ T6288] ? __up_read+0x192/0x720 [ 304.248862][ T6288] ? down_read+0x19c/0x450 [ 304.252145][ T6288] ? up_write+0x520/0x520 [ 304.255358][ T6288] ? page_copy_sane+0xd3/0x410 [ 304.259122][ T6288] copy_page_from_iter+0x9f/0x110 [ 304.263313][ T6288] process_vm_rw_core.constprop.0+0x4cf/0x990 [ 304.267736][ T6288] ? vmalloc_dump_obj+0x1b0/0x1b0 [ 304.271011][ T6288] ? iovec_from_user+0x114/0x3a0 [ 304.274391][ T6288] ? __import_iovec+0x1fb/0x610 [ 304.277277][ T6288] ? iovec_from_user+0x114/0x3a0 [ 304.292991][ T6288] process_vm_rw+0x29c/0x300 [ 304.297134][ T6288] ? process_vm_rw_core.constprop.0+0x990/0x990 [ 304.303059][ T6288] ? ksys_write+0x210/0x250 [ 304.306162][ T6288] ? lock_downgrade+0x6e0/0x6e0 [ 304.309554][ T6288] ? vfs_write+0x49e/0xdd0 [ 304.312758][ T6288] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 304.316697][ T6288] ? wait_for_completion_io_timeout+0x20/0x20 [ 304.321751][ T6288] ? fput+0x2f/0x1a0 [ 304.325002][ T6288] __ia32_sys_process_vm_writev+0xe0/0x1b0 [ 304.329737][ T6288] ? lockdep_hardirqs_on+0x7d/0x100 [ 304.333475][ T6288] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 304.338190][ T6288] __do_fast_syscall_32+0x65/0xf0 [ 304.341782][ T6288] do_fast_syscall_32+0x33/0x70 [ 304.345347][ T6288] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 304.349721][ T6288] RIP: 0023:0xf7fbf549 [ 304.352421][ T6288] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 304.363584][ T6288] RSP: 002b:00000000f7fba5cc EFLAGS: 00000296 ORIG_RAX: 000000000000015c [ 304.368323][ T6288] RAX: ffffffffffffffda RBX: 00000000000000fa RCX: 0000000020000000 [ 304.373406][ T6288] RDX: 0000000000000001 RSI: 0000000020121000 RDI: 0000000000000001 [ 304.378290][ T6288] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 304.382715][ T6288] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 304.387588][ T6288] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 304.393402][ T6288] 09:36:42 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x43, 0x0, &(0x7f0000000480)) 09:36:44 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r0, 0x6, 0x6cb, 0x0, &(0x7f0000000480)) 09:36:44 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (fail_nth: 10) 09:36:44 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 16) 09:36:44 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x6, 0x0, 0x0) [ 305.987333][ T6298] FAULT_INJECTION: forcing a failure. [ 305.987333][ T6298] name fail_page_alloc, interval 1, probability 0, space 0, times 0 09:36:44 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @empty}, 0x10) [ 305.996591][ T6300] FAULT_INJECTION: forcing a failure. [ 305.996591][ T6300] name failslab, interval 1, probability 0, space 0, times 0 [ 305.997907][ T6298] CPU: 2 PID: 6298 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 306.013587][ T6298] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 306.019168][ T6298] Call Trace: [ 306.021354][ T6298] [ 306.023884][ T6298] dump_stack_lvl+0xd1/0x138 [ 306.027565][ T6298] should_fail_ex.cold+0x5/0xa [ 306.030979][ T6298] prepare_alloc_pages+0x178/0x570 [ 306.034783][ T6298] __alloc_pages+0x149/0x5b0 [ 306.037995][ T6298] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 306.042578][ T6298] ? __lock_acquire+0x166e/0x56d0 [ 306.046038][ T6298] ? __lock_acquire+0xbc3/0x56d0 [ 306.049449][ T6298] __folio_alloc+0x16/0x40 [ 306.052604][ T6298] vma_alloc_folio+0x155/0x870 [ 306.055678][ T6298] ? policy_nodemask+0x1c0/0x1c0 [ 306.058822][ T6298] ? lock_chain_count+0x20/0x20 [ 306.062416][ T6298] __handle_mm_fault+0x1822/0x3c90 [ 306.065953][ T6298] ? vm_iomap_memory+0x190/0x190 [ 306.069217][ T6298] handle_mm_fault+0x1b6/0x850 [ 306.072506][ T6298] __get_user_pages+0x4f8/0xfc0 [ 306.076009][ T6298] ? follow_page_mask+0x10a0/0x10a0 [ 306.079327][ T6298] populate_vma_page_range+0x241/0x320 [ 306.083062][ T6298] __mm_populate+0x105/0x3b0 [ 306.086155][ T6298] ? faultin_vma_page_range+0x300/0x300 [ 306.090077][ T6298] ? up_write+0x1b0/0x520 [ 306.094395][ T6298] do_mlock+0x370/0x6d0 [ 306.097946][ T6298] ? folio_memcg+0x320/0x320 [ 306.101827][ T6298] ? fput+0x2f/0x1a0 [ 306.105433][ T6298] __ia32_sys_mlock+0x57/0x80 [ 306.109889][ T6298] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 306.115570][ T6298] __do_fast_syscall_32+0x65/0xf0 [ 306.120031][ T6298] do_fast_syscall_32+0x33/0x70 [ 306.124236][ T6298] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 306.129489][ T6298] RIP: 0023:0xf7f47549 [ 306.132254][ T6298] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 306.145558][ T6298] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 09:36:44 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f0000000140)=@framed={{}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}]}, &(0x7f0000000040)='syzkaller\x00', 0x1, 0x9b, &(0x7f0000000080)=""/155, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 306.152871][ T6298] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 306.177851][ T6298] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 306.183137][ T6298] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 306.188866][ T6298] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 306.194615][ T6298] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 306.199684][ T6298] [ 306.201958][ T6300] CPU: 1 PID: 6300 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 306.210321][ T6300] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 306.217023][ T6300] Call Trace: [ 306.219331][ T6300] [ 306.221614][ T6300] dump_stack_lvl+0xd1/0x138 [ 306.225042][ T6300] should_fail_ex.cold+0x5/0xa [ 306.228445][ T6300] ? ptlock_alloc+0x21/0x70 [ 306.231591][ T6300] should_failslab+0x9/0x20 [ 306.235021][ T6300] kmem_cache_alloc+0x5a/0x430 [ 306.238837][ T6300] ptlock_alloc+0x21/0x70 [ 306.242010][ T6300] pte_alloc_one+0x6c/0x230 [ 306.245629][ T6300] __pte_alloc+0x6d/0x260 [ 306.249307][ T6300] ? pmd_install+0x160/0x160 [ 306.252759][ T6300] ? hugepage_vma_check+0x24e/0x830 [ 306.256534][ T6300] __handle_mm_fault+0x38cf/0x3c90 [ 306.260416][ T6300] ? vm_iomap_memory+0x190/0x190 [ 306.264134][ T6300] handle_mm_fault+0x1b6/0x850 [ 306.267689][ T6300] do_user_addr_fault+0x475/0x1210 [ 306.270760][ T6300] ? rcu_read_lock_sched_held+0x3e/0x70 [ 306.273899][ T6300] exc_page_fault+0x98/0x170 [ 306.276519][ T6300] asm_exc_page_fault+0x26/0x30 [ 306.279583][ T6300] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 306.283450][ T6300] Code: d1 f3 a4 31 c0 0f 1f 00 c3 8d 0c ca 89 ca eb 2c 66 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 0f 1f 00 83 fa 40 72 34 89 d1 a4 31 c0 0f 1f 00 c3 89 ca eb 06 66 0f 1f 44 00 00 83 f8 12 74 [ 306.294886][ T6300] RSP: 0018:ffffc90029d17948 EFLAGS: 00010202 [ 306.298650][ T6300] RAX: 0000000000000001 RBX: 00000000000000d8 RCX: 00000000000000d8 [ 306.303539][ T6300] RDX: 00000000000000d8 RSI: 00000000208f9f09 RDI: ffff888075617f28 [ 306.309004][ T6300] RBP: 00007fffffffef28 R08: 0000000000000001 R09: ffff888075617fff [ 306.314540][ T6300] R10: ffffed100eac2fff R11: 0000000000000000 R12: ffff888075617f28 [ 306.319964][ T6300] R13: 00000000208f9f09 R14: ffff888075617f28 R15: 0000000000000000 [ 306.325450][ T6300] copyin+0xf6/0x120 [ 306.328152][ T6300] _copy_from_iter+0x37a/0xf40 [ 306.331091][ T6300] ? find_held_lock+0x2d/0x110 [ 306.334302][ T6300] ? csum_and_copy_from_iter+0x12e0/0x12e0 [ 306.338347][ T6300] ? __up_read+0x192/0x720 [ 306.341178][ T6300] ? down_read+0x19c/0x450 [ 306.344229][ T6300] ? up_write+0x520/0x520 [ 306.346870][ T6300] ? page_copy_sane+0xd3/0x410 [ 306.349674][ T6300] copy_page_from_iter+0x9f/0x110 [ 306.352518][ T6300] process_vm_rw_core.constprop.0+0x4cf/0x990 [ 306.356923][ T6300] ? vmalloc_dump_obj+0x1b0/0x1b0 [ 306.361496][ T6300] ? iovec_from_user+0x114/0x3a0 [ 306.366131][ T6300] ? __import_iovec+0x1fb/0x610 [ 306.369530][ T6300] ? iovec_from_user+0x114/0x3a0 [ 306.372465][ T6300] process_vm_rw+0x29c/0x300 [ 306.375297][ T6300] ? process_vm_rw_core.constprop.0+0x990/0x990 [ 306.379260][ T6300] ? ksys_write+0x210/0x250 [ 306.382521][ T6300] ? lock_downgrade+0x6e0/0x6e0 [ 306.386716][ T6300] ? vfs_write+0x49e/0xdd0 [ 306.389984][ T6300] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 306.394476][ T6300] ? wait_for_completion_io_timeout+0x20/0x20 [ 306.399140][ T6300] ? fput+0x2f/0x1a0 [ 306.402554][ T6300] __ia32_sys_process_vm_writev+0xe0/0x1b0 [ 306.406929][ T6300] ? lockdep_hardirqs_on+0x7d/0x100 [ 306.411334][ T6300] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 306.416294][ T6300] __do_fast_syscall_32+0x65/0xf0 [ 306.420198][ T6300] do_fast_syscall_32+0x33/0x70 [ 306.423242][ T6300] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 306.427237][ T6300] RIP: 0023:0xf7fbf549 [ 306.430965][ T6300] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 306.447470][ T6300] RSP: 002b:00000000f7fba5cc EFLAGS: 00000296 ORIG_RAX: 000000000000015c [ 306.453785][ T6300] RAX: ffffffffffffffda RBX: 00000000000000fc RCX: 0000000020000000 [ 306.459674][ T6300] RDX: 0000000000000001 RSI: 0000000020121000 RDI: 0000000000000001 [ 306.465481][ T6300] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 306.470796][ T6300] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 306.476422][ T6300] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 306.481654][ T6300] 09:36:44 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 17) 09:36:44 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8946, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) 09:36:44 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r0, 0x6, 0x6cd, 0x0, &(0x7f0000000480)) [ 306.526824][ T6308] FAULT_INJECTION: forcing a failure. [ 306.526824][ T6308] name fail_page_alloc, interval 1, probability 0, space 0, times 0 09:36:44 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (fail_nth: 11) 09:36:44 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0x4, &(0x7f0000000200)=@framed={{}, [@call]}, &(0x7f0000000080)='syzkaller\x00', 0x1, 0x9b, &(0x7f0000000140)=""/155, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 306.552059][ T6308] CPU: 1 PID: 6308 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 306.564989][ T6308] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 306.571372][ T6308] Call Trace: [ 306.573700][ T6308] [ 306.575846][ T6308] dump_stack_lvl+0xd1/0x138 [ 306.579413][ T6308] should_fail_ex.cold+0x5/0xa [ 306.582522][ T6308] prepare_alloc_pages+0x178/0x570 [ 306.586411][ T6308] __alloc_pages+0x149/0x5b0 [ 306.589873][ T6308] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 306.595337][ T6308] ? __lock_acquire+0x166e/0x56d0 [ 306.599921][ T6308] ? __lock_acquire+0xbc3/0x56d0 [ 306.604293][ T6308] __folio_alloc+0x16/0x40 [ 306.612190][ T6308] vma_alloc_folio+0x155/0x870 [ 306.616220][ T6308] ? policy_nodemask+0x1c0/0x1c0 [ 306.619935][ T6308] ? lock_chain_count+0x20/0x20 [ 306.623465][ T6308] __handle_mm_fault+0x1822/0x3c90 [ 306.627101][ T6308] ? vm_iomap_memory+0x190/0x190 [ 306.630758][ T6308] handle_mm_fault+0x1b6/0x850 [ 306.634344][ T6308] __get_user_pages+0x4f8/0xfc0 [ 306.637862][ T6308] ? follow_page_mask+0x10a0/0x10a0 [ 306.641757][ T6308] populate_vma_page_range+0x241/0x320 [ 306.645536][ T6308] __mm_populate+0x105/0x3b0 [ 306.649030][ T6308] ? faultin_vma_page_range+0x300/0x300 [ 306.654330][ T6308] ? up_write+0x1b0/0x520 [ 306.658197][ T6308] do_mlock+0x370/0x6d0 [ 306.661768][ T6308] ? folio_memcg+0x320/0x320 [ 306.666265][ T6308] ? fput+0x2f/0x1a0 [ 306.669510][ T6308] __ia32_sys_mlock+0x57/0x80 [ 306.674548][ T6308] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 306.679869][ T6308] __do_fast_syscall_32+0x65/0xf0 [ 306.684000][ T6308] do_fast_syscall_32+0x33/0x70 [ 306.688031][ T6308] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 306.708822][ T6308] RIP: 0023:0xf7f47549 [ 306.712234][ T6308] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 306.728073][ T6308] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 306.735546][ T6308] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 306.742566][ T6308] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 306.752378][ T6308] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 306.766445][ T6308] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 306.772988][ T6308] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 306.779725][ T6308] [ 306.787973][ T6316] FAULT_INJECTION: forcing a failure. [ 306.787973][ T6316] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 306.812014][ T6316] CPU: 1 PID: 6316 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 306.821273][ T6316] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 306.829963][ T6316] Call Trace: [ 306.832885][ T6316] 09:36:45 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x71}]}, &(0x7f0000000080)='syzkaller\x00', 0x1, 0x9b, &(0x7f0000000140)=""/155, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 306.835617][ T6316] dump_stack_lvl+0xd1/0x138 [ 306.842813][ T6316] should_fail_ex.cold+0x5/0xa 09:36:45 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x6, 0x25, &(0x7f0000000000)=0x1, 0x4) [ 306.846573][ T6316] copyin+0x19/0x120 [ 306.850609][ T6316] _copy_from_iter+0x37a/0xf40 [ 306.854261][ T6316] ? find_held_lock+0x2d/0x110 [ 306.857988][ T6316] ? csum_and_copy_from_iter+0x12e0/0x12e0 [ 306.861323][ T6316] ? __up_read+0x192/0x720 [ 306.865205][ T6316] ? down_read+0x19c/0x450 09:36:45 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 18) [ 306.870132][ T6316] ? up_write+0x520/0x520 [ 306.876389][ T6316] ? page_copy_sane+0xd3/0x410 [ 306.880401][ T6316] copy_page_from_iter+0x9f/0x110 [ 306.884828][ T6316] process_vm_rw_core.constprop.0+0x4cf/0x990 [ 306.889998][ T6316] ? vmalloc_dump_obj+0x1b0/0x1b0 09:36:45 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000000), 0x3) [ 306.894392][ T6316] ? iovec_from_user+0x114/0x3a0 [ 306.901052][ T6322] FAULT_INJECTION: forcing a failure. [ 306.901052][ T6322] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 306.905260][ T6316] ? __import_iovec+0x1fb/0x610 [ 306.905316][ T6316] ? iovec_from_user+0x114/0x3a0 [ 306.905351][ T6316] process_vm_rw+0x29c/0x300 [ 306.905390][ T6316] ? process_vm_rw_core.constprop.0+0x990/0x990 [ 306.905421][ T6316] ? ksys_write+0x210/0x250 [ 306.905450][ T6316] ? lock_downgrade+0x6e0/0x6e0 [ 306.905485][ T6316] ? vfs_write+0x49e/0xdd0 [ 306.905518][ T6316] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 306.905568][ T6316] ? wait_for_completion_io_timeout+0x20/0x20 [ 306.905627][ T6316] ? fput+0x2f/0x1a0 [ 306.905668][ T6316] __ia32_sys_process_vm_writev+0xe0/0x1b0 [ 306.905702][ T6316] ? lockdep_hardirqs_on+0x7d/0x100 [ 306.905731][ T6316] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 306.905764][ T6316] __do_fast_syscall_32+0x65/0xf0 09:36:45 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0xffffffff, 0xffffffff, 0x118, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}, {{@ipv6={@private2, @ipv4={'\x00', '\xff\xff', @remote}, [], [], 'xfrm0\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "78c65d9ec6de2c27bbccb0d176a7df8af76ec7471712f666540fc8852f3c"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e0) [ 306.987643][ T6316] do_fast_syscall_32+0x33/0x70 [ 306.992482][ T6316] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 306.998023][ T6316] RIP: 0023:0xf7fbf549 [ 307.001480][ T6316] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 307.016837][ T6316] RSP: 002b:00000000f7fba5cc EFLAGS: 00000296 ORIG_RAX: 000000000000015c [ 307.024419][ T6316] RAX: ffffffffffffffda RBX: 00000000000000fe RCX: 0000000020000000 [ 307.031276][ T6316] RDX: 0000000000000001 RSI: 0000000020121000 RDI: 0000000000000001 [ 307.035966][ T6316] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 307.040396][ T6316] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 307.047021][ T6316] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 307.053758][ T6316] [ 307.056210][ T6322] CPU: 0 PID: 6322 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 307.063886][ T6322] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 307.071288][ T6322] Call Trace: [ 307.073945][ T6322] [ 307.076082][ T6322] dump_stack_lvl+0xd1/0x138 [ 307.079565][ T6322] should_fail_ex.cold+0x5/0xa [ 307.083551][ T6322] prepare_alloc_pages+0x178/0x570 [ 307.087017][ T6322] __alloc_pages+0x149/0x5b0 [ 307.090111][ T6322] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 307.095651][ T6322] ? __lock_acquire+0x166e/0x56d0 [ 307.099652][ T6322] ? __lock_acquire+0xbc3/0x56d0 [ 307.104299][ T6322] __folio_alloc+0x16/0x40 [ 307.108752][ T6322] vma_alloc_folio+0x155/0x870 [ 307.113504][ T6322] ? policy_nodemask+0x1c0/0x1c0 [ 307.118431][ T6322] ? lock_chain_count+0x20/0x20 [ 307.123188][ T6322] __handle_mm_fault+0x1822/0x3c90 [ 307.128095][ T6322] ? vm_iomap_memory+0x190/0x190 [ 307.132387][ T6322] handle_mm_fault+0x1b6/0x850 [ 307.136436][ T6322] __get_user_pages+0x4f8/0xfc0 [ 307.140454][ T6322] ? follow_page_mask+0x10a0/0x10a0 [ 307.144363][ T6322] populate_vma_page_range+0x241/0x320 [ 307.148031][ T6322] __mm_populate+0x105/0x3b0 09:36:45 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000a50000000600000095"], &(0x7f0000000080)='syzkaller\x00', 0x1, 0x9b, &(0x7f0000000140)=""/155, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 307.151161][ T6322] ? faultin_vma_page_range+0x300/0x300 [ 307.155376][ T6322] ? up_write+0x1b0/0x520 [ 307.158576][ T6322] do_mlock+0x370/0x6d0 [ 307.162486][ T6322] ? folio_memcg+0x320/0x320 [ 307.166918][ T6322] ? fput+0x2f/0x1a0 [ 307.170746][ T6322] __ia32_sys_mlock+0x57/0x80 [ 307.185488][ T6322] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 307.190120][ T6322] __do_fast_syscall_32+0x65/0xf0 [ 307.194660][ T6322] do_fast_syscall_32+0x33/0x70 [ 307.199074][ T6322] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 307.204695][ T6322] RIP: 0023:0xf7f47549 [ 307.208349][ T6322] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 307.224012][ T6322] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 307.230784][ T6322] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 307.237672][ T6322] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 307.244133][ T6322] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 307.249784][ T6322] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 307.256448][ T6322] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 307.263235][ T6322] 09:36:45 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (fail_nth: 12) 09:36:45 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x32, 0x0, 0x0) 09:36:45 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0x1, &(0x7f0000000580)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}], &(0x7f00000005c0)='GPL\x00', 0x1, 0xb5, &(0x7f0000000600)=""/181, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:36:45 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000200)={0x0, 0x2}, 0x8) [ 307.329209][ T6335] FAULT_INJECTION: forcing a failure. [ 307.329209][ T6335] name fail_usercopy, interval 1, probability 0, space 0, times 0 09:36:45 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 19) 09:36:45 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @local}}}, 0x90) [ 307.370967][ T6335] CPU: 0 PID: 6335 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 307.378900][ T6335] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 307.384443][ T6335] Call Trace: [ 307.386709][ T6335] [ 307.388595][ T6335] dump_stack_lvl+0xd1/0x138 [ 307.391807][ T6335] should_fail_ex.cold+0x5/0xa [ 307.395217][ T6335] _copy_to_user+0x2e/0x150 [ 307.399466][ T6335] simple_read_from_buffer+0xd0/0x160 [ 307.404195][ T6335] proc_fail_nth_read+0x18b/0x220 09:36:45 executing program 3: r0 = fanotify_init(0x0, 0x0) fanotify_mark(r0, 0x1, 0x21, 0xffffffffffffff9c, 0x0) [ 307.408337][ T6335] ? proc_fault_inject_read+0x220/0x220 [ 307.414264][ T6335] ? security_file_permission+0xaf/0xd0 [ 307.418287][ T6335] vfs_read+0x25b/0x930 [ 307.420964][ T6335] ? proc_fault_inject_read+0x220/0x220 [ 307.424111][ T6335] ? kernel_read+0x1c0/0x1c0 [ 307.427210][ T6335] ? __fget_files+0x26a/0x440 [ 307.430282][ T6335] ksys_read+0x12b/0x250 [ 307.433137][ T6335] ? vfs_write+0xdd0/0xdd0 [ 307.436091][ T6335] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 307.440255][ T6335] __do_fast_syscall_32+0x65/0xf0 [ 307.444097][ T6335] do_fast_syscall_32+0x33/0x70 [ 307.447657][ T6335] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 307.451780][ T6335] RIP: 0023:0xf7fbf549 [ 307.454698][ T6335] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 307.468567][ T6335] RSP: 002b:00000000f7fba600 EFLAGS: 00000282 ORIG_RAX: 0000000000000003 [ 307.474986][ T6335] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f7fba690 [ 307.480384][ T6335] RDX: 000000000000000f RSI: 00000000f734d000 RDI: 0000000000000000 [ 307.482005][ T6341] FAULT_INJECTION: forcing a failure. [ 307.482005][ T6341] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 307.485222][ T6335] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 307.499200][ T6335] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 307.504520][ T6335] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 307.510621][ T6335] [ 307.512760][ T6341] CPU: 3 PID: 6341 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 307.520716][ T6341] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 307.526580][ T6341] Call Trace: [ 307.528908][ T6341] [ 307.531014][ T6341] dump_stack_lvl+0xd1/0x138 09:36:45 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1}}]}}, &(0x7f0000000180)=""/153, 0x32, 0x99, 0x1}, 0x20) [ 307.534179][ T6341] should_fail_ex.cold+0x5/0xa [ 307.537423][ T6341] prepare_alloc_pages+0x178/0x570 [ 307.541608][ T6341] __alloc_pages+0x149/0x5b0 [ 307.544479][ T6341] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 307.549691][ T6341] ? __lock_acquire+0x166e/0x56d0 [ 307.554020][ T6341] ? __lock_acquire+0xbc3/0x56d0 [ 307.559195][ T6341] __folio_alloc+0x16/0x40 [ 307.587162][ T6341] vma_alloc_folio+0x155/0x870 [ 307.590885][ T6341] ? policy_nodemask+0x1c0/0x1c0 [ 307.594972][ T6341] ? lock_chain_count+0x20/0x20 [ 307.600464][ T6341] __handle_mm_fault+0x1822/0x3c90 [ 307.605928][ T6341] ? vm_iomap_memory+0x190/0x190 09:36:45 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) [ 307.610778][ T6341] handle_mm_fault+0x1b6/0x850 [ 307.618304][ T6341] __get_user_pages+0x4f8/0xfc0 [ 307.621946][ T6341] ? follow_page_mask+0x10a0/0x10a0 [ 307.627096][ T6341] populate_vma_page_range+0x241/0x320 [ 307.631609][ T6341] __mm_populate+0x105/0x3b0 [ 307.635866][ T6341] ? faultin_vma_page_range+0x300/0x300 [ 307.641479][ T6341] ? up_write+0x1b0/0x520 [ 307.646944][ T6341] do_mlock+0x370/0x6d0 [ 307.651165][ T6341] ? folio_memcg+0x320/0x320 [ 307.655100][ T6341] ? fput+0x2f/0x1a0 [ 307.658369][ T6341] __ia32_sys_mlock+0x57/0x80 [ 307.661669][ T6341] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 307.667481][ T6341] __do_fast_syscall_32+0x65/0xf0 [ 307.672384][ T6341] do_fast_syscall_32+0x33/0x70 [ 307.676602][ T6341] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 307.684697][ T6341] RIP: 0023:0xf7f47549 [ 307.687630][ T6341] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 307.700927][ T6341] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 307.707063][ T6341] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 307.712981][ T6341] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 307.718929][ T6341] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 307.723743][ T6341] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 307.728585][ T6341] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 307.733928][ T6341] 09:36:45 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x43, &(0x7f0000000200), 0x8) 09:36:46 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x6, &(0x7f0000000140)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @jmp, @exit]}, &(0x7f00000001c0)='syzkaller\x00', 0x7, 0x90, &(0x7f0000000200)=""/144, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:36:46 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3a, &(0x7f0000000200), 0x8) 09:36:46 executing program 3: fanotify_mark(0xffffffffffffffff, 0x1, 0x0, 0xffffffffffffff9c, 0x0) 09:36:46 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r0, 0x6, 0x6c3, 0x0, &(0x7f0000000480)) 09:36:46 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x2e}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 09:36:46 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 20) 09:36:46 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xd8}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 09:36:46 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x100000, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x9) execveat(r0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=[&(0x7f00000001c0)='/\x00', 0x0], &(0x7f00000003c0)=[&(0x7f0000000300)='\x00\x00^', &(0x7f0000000400)='/dev/vcsu\x00'], 0x1000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000080)) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x4400, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x9) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x4400, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x4400, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x117, 0x5, 0x0, 0x9) execveat(r3, 0x0, &(0x7f0000000280)=[&(0x7f0000000180)='\x8e\\\x00', &(0x7f00000001c0)='/\x00', 0x0], &(0x7f00000003c0)=[&(0x7f00000002c0)='\'\x00', &(0x7f0000000300)='-%\x00', &(0x7f0000000340)='/dev/vcsu\x00'], 0x1000) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f0000000200)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) execveat(r2, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=[&(0x7f0000000180)='\x8e\\\x00', &(0x7f00000001c0)='/\x00', 0x0], &(0x7f00000003c0)=[&(0x7f00000002c0)='\'\x00', &(0x7f0000000340)='/dev/vcsu\x00', &(0x7f0000000380)='/dev/vcsu\x00'], 0x1000) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000340)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}) execveat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=[&(0x7f00000004c0)='\xcb\x00\x00\x96\xbd\'\b\xba\xcf&>\xd7\xd1t>\x8e\xbe\xa0u-\xed\xedI', &(0x7f00000001c0)='/\x00', 0x0], &(0x7f00000003c0)=[&(0x7f00000002c0)='\'\x00', &(0x7f0000000300)='-%\x00', &(0x7f0000000500)='/dev/vcsu\x00\x04I\x8bJ\x10\xcd(\x93\xd7v\x93\x1f\x9b\v\xdf\xc6\xaa\x9e#\x9d\x0fC&fC\xcb\xb7\xad.\xf3\xb1\xf9E\xa1\x1b\xbe\x81|\x91\xf6!Y\xa3^Ax\xc2\xf1f\x80\xcd\xe0\x8d\xe9\xa0}\xa6I\xe6G\x17x\'\x02Nt>\xa7\x05d\b\xab9\x0es2\n', &(0x7f0000000440)='/dev!vc\x89u\x00\xf6\xeb@\xf5x\xf7\',yX\xbd\x87\x10\x8f\xd4\xbcs\xe1'], 0x1000) socket$inet6(0xa, 0x800, 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x1, &(0x7f0000000480)=[{0x6, 0x9, 0x80, 0x7fff}]}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x4400, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x117, 0x5, 0x0, 0x9) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x4400, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r5, 0x117, 0x5, 0x0, 0x9) execveat(r5, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=[&(0x7f0000000180)='\x8e\\\x00', &(0x7f00000001c0)='/\x00', 0x0], &(0x7f00000003c0)=[&(0x7f00000002c0)='\'\x00', &(0x7f0000000300)='-%\x00', &(0x7f0000000340)='/dev/vcsu\x00', &(0x7f0000000380)='/dev/vcsu\x00'], 0x1000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000005c0)) [ 307.884952][ T6361] FAULT_INJECTION: forcing a failure. [ 307.884952][ T6361] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 307.901574][ T6361] CPU: 0 PID: 6361 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 307.908895][ T6361] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 307.908906][ T6361] Call Trace: [ 307.908912][ T6361] [ 307.908920][ T6361] dump_stack_lvl+0xd1/0x138 [ 307.908947][ T6361] should_fail_ex.cold+0x5/0xa [ 307.908965][ T6361] prepare_alloc_pages+0x178/0x570 [ 307.908991][ T6361] __alloc_pages+0x149/0x5b0 [ 307.909011][ T6361] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 09:36:46 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xe7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) [ 307.909078][ T6361] ? __lock_acquire+0x166e/0x56d0 [ 307.909100][ T6361] ? __lock_acquire+0xbc3/0x56d0 [ 307.909119][ T6361] __folio_alloc+0x16/0x40 [ 307.909138][ T6361] vma_alloc_folio+0x155/0x870 [ 307.955974][ T6361] ? policy_nodemask+0x1c0/0x1c0 [ 307.956017][ T6361] ? lock_chain_count+0x20/0x20 [ 307.956052][ T6361] __handle_mm_fault+0x1822/0x3c90 [ 307.956132][ T6361] ? vm_iomap_memory+0x190/0x190 [ 307.956194][ T6361] handle_mm_fault+0x1b6/0x850 09:36:46 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) [ 307.956238][ T6361] __get_user_pages+0x4f8/0xfc0 [ 307.956280][ T6361] ? follow_page_mask+0x10a0/0x10a0 [ 307.956329][ T6361] populate_vma_page_range+0x241/0x320 [ 307.989683][ T6361] __mm_populate+0x105/0x3b0 [ 307.993357][ T6361] ? faultin_vma_page_range+0x300/0x300 [ 307.996732][ T6361] ? up_write+0x1b0/0x520 [ 307.999902][ T6361] do_mlock+0x370/0x6d0 [ 308.003195][ T6361] ? folio_memcg+0x320/0x320 [ 308.014757][ T6361] ? fput+0x2f/0x1a0 [ 308.017573][ T6361] __ia32_sys_mlock+0x57/0x80 [ 308.021567][ T6361] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 308.027387][ T6361] __do_fast_syscall_32+0x65/0xf0 [ 308.031918][ T6361] do_fast_syscall_32+0x33/0x70 [ 308.036325][ T6361] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 308.041695][ T6361] RIP: 0023:0xf7f47549 [ 308.044500][ T6361] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 308.060390][ T6361] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 308.067452][ T6361] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 308.073744][ T6361] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 308.079040][ T6361] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 308.083553][ T6361] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 308.088307][ T6361] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 308.093247][ T6361] [ 308.108274][ T39] kauditd_printk_skb: 4 callbacks suppressed [ 308.108294][ T39] audit: type=1326 audit(1672997806.399:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6362 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fdd549 code=0x0 09:36:46 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 21) 09:36:46 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x2, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 09:36:46 executing program 3: ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x3, 'veth0_to_team\x00'}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1001) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000240)="0f78278fc9a0975d00b9800000c00f3235010000000f300fc7a900a000000f019b00000000f30f09b805000000b9000000000f01c10f22003e360f35b9d70200000f32", 0x43}], 0x1, 0x22, &(0x7f00000002c0), 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000002c0)='.log\x00', 0xd0401, 0x12) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000300)="36660fd0ffc4c17e5bdf6736a564f30fc7b20098000066ba2000b875000000efb805000000b9000000000f01d9b9800000c00f3235000800000f300f358fc9b8930fc4c229929c3408000000", 0x4c}], 0x1, 0x7, &(0x7f00000003c0), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_io_uring_setup(0x18dd, &(0x7f00000001c0), &(0x7f0000000000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x0, 0x0) [ 308.195353][ T6378] FAULT_INJECTION: forcing a failure. [ 308.195353][ T6378] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 308.208737][ T6378] CPU: 2 PID: 6378 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 308.217351][ T6378] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 09:36:46 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x3, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) [ 308.223899][ T6378] Call Trace: [ 308.226850][ T6378] [ 308.229345][ T6378] dump_stack_lvl+0xd1/0x138 [ 308.232714][ T6378] should_fail_ex.cold+0x5/0xa [ 308.236136][ T6378] prepare_alloc_pages+0x178/0x570 [ 308.242493][ T6378] __alloc_pages+0x149/0x5b0 [ 308.245533][ T6378] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 308.252494][ T6378] ? __lock_acquire+0x166e/0x56d0 [ 308.257194][ T6378] ? __lock_acquire+0xbc3/0x56d0 [ 308.261711][ T6378] __folio_alloc+0x16/0x40 [ 308.264298][ T6378] vma_alloc_folio+0x155/0x870 [ 308.269125][ T6378] ? policy_nodemask+0x1c0/0x1c0 [ 308.274757][ T6378] ? lock_chain_count+0x20/0x20 [ 308.279281][ T6378] __handle_mm_fault+0x1822/0x3c90 [ 308.283041][ T6378] ? vm_iomap_memory+0x190/0x190 [ 308.287292][ T6378] handle_mm_fault+0x1b6/0x850 [ 308.291716][ T6378] __get_user_pages+0x4f8/0xfc0 [ 308.295979][ T6378] ? follow_page_mask+0x10a0/0x10a0 [ 308.300421][ T6378] populate_vma_page_range+0x241/0x320 [ 308.305176][ T6378] __mm_populate+0x105/0x3b0 [ 308.309138][ T6378] ? faultin_vma_page_range+0x300/0x300 [ 308.314163][ T6378] ? up_write+0x1b0/0x520 [ 308.318006][ T6378] do_mlock+0x370/0x6d0 [ 308.321406][ T6378] ? folio_memcg+0x320/0x320 [ 308.323983][ T6378] ? fput+0x2f/0x1a0 [ 308.326229][ T6378] __ia32_sys_mlock+0x57/0x80 [ 308.329055][ T6378] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 308.333843][ T6378] __do_fast_syscall_32+0x65/0xf0 [ 308.337496][ T6378] do_fast_syscall_32+0x33/0x70 [ 308.340501][ T6378] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 308.345434][ T6378] RIP: 0023:0xf7f47549 [ 308.349118][ T6378] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 308.365961][ T6378] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 308.373364][ T6378] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 308.379288][ T6378] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 308.385044][ T6378] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 308.392244][ T6378] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 308.398505][ T6378] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 308.405159][ T6378] 09:36:47 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 22) 09:36:47 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x4, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 09:36:47 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x16}, 0x48) [ 308.830357][ T6386] FAULT_INJECTION: forcing a failure. [ 308.830357][ T6386] name fail_page_alloc, interval 1, probability 0, space 0, times 0 09:36:47 executing program 3: ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x3, 'veth0_to_team\x00'}) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) (async) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1001) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000240)="0f78278fc9a0975d00b9800000c00f3235010000000f300fc7a900a000000f019b00000000f30f09b805000000b9000000000f01c10f22003e360f35b9d70200000f32", 0x43}], 0x1, 0x22, &(0x7f00000002c0), 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000002c0)='.log\x00', 0xd0401, 0x12) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000300)="36660fd0ffc4c17e5bdf6736a564f30fc7b20098000066ba2000b875000000efb805000000b9000000000f01d9b9800000c00f3235000800000f300f358fc9b8930fc4c229929c3408000000", 0x4c}], 0x1, 0x7, &(0x7f00000003c0), 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) syz_io_uring_setup(0x18dd, &(0x7f00000001c0), &(0x7f0000000000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x0, 0x0) 09:36:47 executing program 2: bpf$BPF_BTF_LOAD(0xa, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20) 09:36:47 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x5, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) [ 308.881128][ T6386] CPU: 0 PID: 6386 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 308.890023][ T6386] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 308.898385][ T6386] Call Trace: [ 308.901755][ T6386] [ 308.904533][ T6386] dump_stack_lvl+0xd1/0x138 [ 308.908477][ T6386] should_fail_ex.cold+0x5/0xa [ 308.912636][ T6386] prepare_alloc_pages+0x178/0x570 [ 308.916218][ T6386] __alloc_pages+0x149/0x5b0 [ 308.919565][ T6386] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 308.924476][ T6386] ? __lock_acquire+0x166e/0x56d0 [ 308.928224][ T6386] ? __lock_acquire+0xbc3/0x56d0 [ 308.931742][ T6386] __folio_alloc+0x16/0x40 [ 308.935141][ T6386] vma_alloc_folio+0x155/0x870 [ 308.939161][ T6386] ? policy_nodemask+0x1c0/0x1c0 [ 308.942676][ T6386] ? lock_chain_count+0x20/0x20 [ 308.945714][ T6386] __handle_mm_fault+0x1822/0x3c90 [ 308.948782][ T6386] ? vm_iomap_memory+0x190/0x190 [ 308.953118][ T6386] handle_mm_fault+0x1b6/0x850 [ 308.957562][ T6386] __get_user_pages+0x4f8/0xfc0 [ 308.960910][ T6386] ? follow_page_mask+0x10a0/0x10a0 [ 308.964710][ T6386] populate_vma_page_range+0x241/0x320 [ 308.969086][ T6386] __mm_populate+0x105/0x3b0 [ 308.973104][ T6386] ? faultin_vma_page_range+0x300/0x300 [ 308.977308][ T6386] ? up_write+0x1b0/0x520 [ 308.980319][ T6386] do_mlock+0x370/0x6d0 [ 308.983320][ T6386] ? folio_memcg+0x320/0x320 [ 308.986742][ T6386] ? fput+0x2f/0x1a0 [ 308.989595][ T6386] __ia32_sys_mlock+0x57/0x80 [ 308.993707][ T6386] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 308.998753][ T6386] __do_fast_syscall_32+0x65/0xf0 [ 309.003365][ T6386] do_fast_syscall_32+0x33/0x70 [ 309.007899][ T6386] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 309.013359][ T6386] RIP: 0023:0xf7f47549 [ 309.016391][ T6386] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 309.033662][ T6386] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 309.041322][ T6386] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 309.048148][ T6386] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 309.055419][ T6386] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 309.062644][ T6386] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 309.069008][ T6386] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 309.074981][ T6386] 09:36:47 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x8, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 09:36:47 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0xe, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 09:36:47 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x17, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 09:36:47 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 23) 09:36:47 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x6, 0x7, &(0x7f0000000000)=0x4, 0x4) 09:36:47 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x2e00, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) [ 309.198884][ T6410] FAULT_INJECTION: forcing a failure. [ 309.198884][ T6410] name fail_page_alloc, interval 1, probability 0, space 0, times 0 09:36:47 executing program 3: ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x3, 'veth0_to_team\x00'}) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) (async) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1001) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000240)="0f78278fc9a0975d00b9800000c00f3235010000000f300fc7a900a000000f019b00000000f30f09b805000000b9000000000f01c10f22003e360f35b9d70200000f32", 0x43}], 0x1, 0x22, &(0x7f00000002c0), 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000002c0)='.log\x00', 0xd0401, 0x12) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000300)="36660fd0ffc4c17e5bdf6736a564f30fc7b20098000066ba2000b875000000efb805000000b9000000000f01d9b9800000c00f3235000800000f300f358fc9b8930fc4c229929c3408000000", 0x4c}], 0x1, 0x7, &(0x7f00000003c0), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_io_uring_setup(0x18dd, &(0x7f00000001c0), &(0x7f0000000000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x0, 0x0) [ 309.211768][ T6410] CPU: 1 PID: 6410 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 309.226073][ T6410] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 309.231952][ T6410] Call Trace: [ 309.234420][ T6410] [ 309.236678][ T6410] dump_stack_lvl+0xd1/0x138 [ 309.240085][ T6410] should_fail_ex.cold+0x5/0xa [ 309.243819][ T6410] prepare_alloc_pages+0x178/0x570 [ 309.250061][ T6410] __alloc_pages+0x149/0x5b0 [ 309.254456][ T6410] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 309.260037][ T6410] ? __lock_acquire+0x166e/0x56d0 09:36:47 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0x2e}], 0x1, 0x0) [ 309.263788][ T6410] ? __lock_acquire+0xbc3/0x56d0 [ 309.267916][ T6410] __folio_alloc+0x16/0x40 [ 309.271272][ T6410] vma_alloc_folio+0x155/0x870 [ 309.274839][ T6410] ? policy_nodemask+0x1c0/0x1c0 [ 309.279251][ T6410] ? lock_chain_count+0x20/0x20 [ 309.283369][ T6410] __handle_mm_fault+0x1822/0x3c90 [ 309.287018][ T6410] ? vm_iomap_memory+0x190/0x190 [ 309.291087][ T6410] handle_mm_fault+0x1b6/0x850 [ 309.294694][ T6410] __get_user_pages+0x4f8/0xfc0 [ 309.298575][ T6410] ? follow_page_mask+0x10a0/0x10a0 09:36:47 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xf7}], 0x1, 0x0) [ 309.302106][ T6410] populate_vma_page_range+0x241/0x320 [ 309.309207][ T6410] __mm_populate+0x105/0x3b0 [ 309.312390][ T6410] ? faultin_vma_page_range+0x300/0x300 [ 309.316703][ T6410] ? up_write+0x1b0/0x520 [ 309.320055][ T6410] do_mlock+0x370/0x6d0 [ 309.323253][ T6410] ? folio_memcg+0x320/0x320 [ 309.326919][ T6410] ? fput+0x2f/0x1a0 [ 309.330055][ T6410] __ia32_sys_mlock+0x57/0x80 [ 309.333160][ T6410] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 309.338055][ T6410] __do_fast_syscall_32+0x65/0xf0 [ 309.342202][ T6410] do_fast_syscall_32+0x33/0x70 [ 309.345952][ T6410] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 309.351018][ T6410] RIP: 0023:0xf7f47549 [ 309.354024][ T6410] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 309.368376][ T6410] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 309.374511][ T6410] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 309.379228][ T6410] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 309.384176][ T6410] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 309.389335][ T6410] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 309.395519][ T6410] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 309.401263][ T6410] 09:36:47 executing program 2: socketpair(0x11, 0x3, 0xa45, &(0x7f0000000300)) 09:36:47 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18000000, 0x0, 0x2}}, &(0x7f00000001c0)=""/153, 0x1a, 0x99, 0x1}, 0x20) 09:36:47 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 24) 09:36:47 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001740)=@bpf_lsm={0x1d, 0x7, &(0x7f0000001400)=@framed={{}, [@func, @func, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000001480)='GPL\x00', 0x5, 0xe3, &(0x7f00000014c0)=""/227, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:36:47 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x18000000, 0xc, 0xc, 0x2, [@func]}}, &(0x7f00000001c0)=""/153, 0x26, 0x99, 0x1}, 0x20) 09:36:47 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x2, 0x0) 09:36:47 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x1, 0x9b, &(0x7f0000000140)=""/155, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:36:47 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @remote}, 0x10) 09:36:47 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x3, 0x0) 09:36:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000001c0), 0x8) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x36, &(0x7f0000000200), 0x8) [ 309.570185][ T6435] FAULT_INJECTION: forcing a failure. [ 309.570185][ T6435] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 309.621031][ T6435] CPU: 1 PID: 6435 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 309.629813][ T6435] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 309.638022][ T6435] Call Trace: [ 309.641154][ T6435] [ 309.643931][ T6435] dump_stack_lvl+0xd1/0x138 [ 309.648030][ T6435] should_fail_ex.cold+0x5/0xa [ 309.651730][ T6435] prepare_alloc_pages+0x178/0x570 [ 309.655730][ T6435] __alloc_pages+0x149/0x5b0 [ 309.660133][ T6435] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 309.664923][ T6435] ? __lock_acquire+0x166e/0x56d0 [ 309.668267][ T6435] ? __lock_acquire+0xbc3/0x56d0 [ 309.671088][ T6435] __folio_alloc+0x16/0x40 [ 309.673734][ T6435] vma_alloc_folio+0x155/0x870 [ 309.676416][ T6435] ? policy_nodemask+0x1c0/0x1c0 [ 309.679783][ T6435] ? lock_chain_count+0x20/0x20 [ 309.683131][ T6435] __handle_mm_fault+0x1822/0x3c90 [ 309.686314][ T6435] ? vm_iomap_memory+0x190/0x190 [ 309.689593][ T6435] handle_mm_fault+0x1b6/0x850 [ 309.692389][ T6435] __get_user_pages+0x4f8/0xfc0 [ 309.695650][ T6435] ? follow_page_mask+0x10a0/0x10a0 [ 309.698980][ T6435] populate_vma_page_range+0x241/0x320 [ 309.702419][ T6435] __mm_populate+0x105/0x3b0 [ 309.705169][ T6435] ? faultin_vma_page_range+0x300/0x300 [ 309.708550][ T6435] ? up_write+0x1b0/0x520 [ 309.711167][ T6435] do_mlock+0x370/0x6d0 [ 309.713795][ T6435] ? folio_memcg+0x320/0x320 [ 309.716775][ T6435] ? fput+0x2f/0x1a0 [ 309.719535][ T6435] __ia32_sys_mlock+0x57/0x80 [ 309.722539][ T6435] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 309.726579][ T6435] __do_fast_syscall_32+0x65/0xf0 [ 309.729805][ T6435] do_fast_syscall_32+0x33/0x70 [ 309.733629][ T6435] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 309.738323][ T6435] RIP: 0023:0xf7f47549 [ 309.741564][ T6435] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 309.753285][ T6435] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 309.758248][ T6435] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 309.764484][ T6435] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 309.770498][ T6435] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 309.776802][ T6435] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 309.782823][ T6435] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 309.788735][ T6435] 09:36:48 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 25) 09:36:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000040)={0x0, 0xfe, '\x00', [@generic={0x0, 0x7ef, "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"}]}, 0x800) 09:36:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, 0x0}}], 0x1, 0x2000c004) 09:36:48 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x4, 0x0) [ 309.868667][ T6447] FAULT_INJECTION: forcing a failure. [ 309.868667][ T6447] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 309.905251][ T6447] CPU: 2 PID: 6447 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 309.915813][ T6447] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 309.922729][ T6447] Call Trace: [ 309.926959][ T6447] [ 309.930125][ T6447] dump_stack_lvl+0xd1/0x138 [ 309.935392][ T6447] should_fail_ex.cold+0x5/0xa [ 309.940178][ T6447] prepare_alloc_pages+0x178/0x570 [ 309.945039][ T6447] __alloc_pages+0x149/0x5b0 [ 309.949476][ T6447] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 309.954548][ T6447] ? __lock_acquire+0x166e/0x56d0 [ 309.958226][ T6447] ? __lock_acquire+0xbc3/0x56d0 [ 309.961902][ T6447] __folio_alloc+0x16/0x40 [ 309.965216][ T6447] vma_alloc_folio+0x155/0x870 [ 309.968803][ T6447] ? policy_nodemask+0x1c0/0x1c0 [ 309.972362][ T6447] ? lock_chain_count+0x20/0x20 [ 309.975955][ T6447] __handle_mm_fault+0x1822/0x3c90 [ 309.979605][ T6447] ? vm_iomap_memory+0x190/0x190 [ 309.983079][ T6447] handle_mm_fault+0x1b6/0x850 [ 309.986582][ T6447] __get_user_pages+0x4f8/0xfc0 [ 309.991072][ T6447] ? follow_page_mask+0x10a0/0x10a0 [ 309.996433][ T6447] populate_vma_page_range+0x241/0x320 [ 310.001880][ T6447] __mm_populate+0x105/0x3b0 [ 310.006430][ T6447] ? faultin_vma_page_range+0x300/0x300 [ 310.011798][ T6447] ? up_write+0x1b0/0x520 [ 310.016050][ T6447] do_mlock+0x370/0x6d0 [ 310.019751][ T6447] ? folio_memcg+0x320/0x320 [ 310.022848][ T6447] ? fput+0x2f/0x1a0 [ 310.025784][ T6447] __ia32_sys_mlock+0x57/0x80 [ 310.028714][ T6447] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 310.032821][ T6447] __do_fast_syscall_32+0x65/0xf0 [ 310.035903][ T6447] do_fast_syscall_32+0x33/0x70 [ 310.038870][ T6447] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 310.042790][ T6447] RIP: 0023:0xf7f47549 [ 310.045254][ T6447] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 310.057297][ T6447] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 310.062152][ T6447] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 310.068497][ T6447] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 310.073959][ T6447] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 310.078955][ T6447] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 310.085268][ T6447] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 310.090041][ T6447] 09:36:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r0, 0x6, 0x6c4, 0x0, &(0x7f0000000480)) 09:36:48 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x7, &(0x7f0000000140)=@framed={{}, [@ldst, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @jmp, @exit]}, &(0x7f00000001c0)='syzkaller\x00', 0x7, 0x90, &(0x7f0000000200)=""/144, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:36:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x1600bd74, &(0x7f0000000200), 0x8) 09:36:48 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x95}]}, &(0x7f0000000080)='syzkaller\x00', 0x1, 0x9b, &(0x7f0000000140)=""/155, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:36:48 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x5, 0x0) 09:36:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r0, 0x6, 0x22, 0x0, &(0x7f0000000480)) 09:36:48 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x1600bd80, &(0x7f0000000040)={@dev, @loopback}, 0x10) 09:36:48 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 26) 09:36:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x4a, 0x0, 0x0) 09:36:48 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x8, 0x0) [ 310.234752][ T6467] FAULT_INJECTION: forcing a failure. 09:36:48 executing program 2: fsopen(&(0x7f0000000040)='exofs\x00', 0x0) syz_io_uring_setup(0x7b57, &(0x7f0000000340), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000003c0), &(0x7f0000000440)) [ 310.234752][ T6467] name fail_page_alloc, interval 1, probability 0, space 0, times 0 09:36:48 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@var]}}, &(0x7f0000000180)=""/153, 0x2a, 0x99, 0x1}, 0x20) [ 310.252825][ T6467] CPU: 3 PID: 6467 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 310.260877][ T6467] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 310.266943][ T6467] Call Trace: 09:36:48 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0xe, 0x0) [ 310.269184][ T6467] [ 310.276911][ T6467] dump_stack_lvl+0xd1/0x138 [ 310.280332][ T6467] should_fail_ex.cold+0x5/0xa [ 310.283780][ T6467] prepare_alloc_pages+0x178/0x570 [ 310.287575][ T6467] __alloc_pages+0x149/0x5b0 [ 310.291090][ T6467] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 310.296654][ T6467] ? __lock_acquire+0x166e/0x56d0 [ 310.300396][ T6467] ? __lock_acquire+0xbc3/0x56d0 [ 310.303697][ T6467] __folio_alloc+0x16/0x40 [ 310.307255][ T6467] vma_alloc_folio+0x155/0x870 [ 310.311551][ T6467] ? policy_nodemask+0x1c0/0x1c0 [ 310.318392][ T6467] ? lock_chain_count+0x20/0x20 [ 310.321928][ T6467] __handle_mm_fault+0x1822/0x3c90 09:36:48 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x17, 0x0) 09:36:48 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x2e00, 0x0) [ 310.326229][ T6467] ? vm_iomap_memory+0x190/0x190 [ 310.331640][ T6467] handle_mm_fault+0x1b6/0x850 [ 310.335520][ T6467] __get_user_pages+0x4f8/0xfc0 [ 310.342172][ T6467] ? follow_page_mask+0x10a0/0x10a0 [ 310.345602][ T6467] populate_vma_page_range+0x241/0x320 [ 310.350682][ T6467] __mm_populate+0x105/0x3b0 [ 310.354325][ T6467] ? faultin_vma_page_range+0x300/0x300 [ 310.358353][ T6467] ? up_write+0x1b0/0x520 [ 310.361517][ T6467] do_mlock+0x370/0x6d0 [ 310.365072][ T6467] ? folio_memcg+0x320/0x320 [ 310.370152][ T6467] ? fput+0x2f/0x1a0 [ 310.374215][ T6467] __ia32_sys_mlock+0x57/0x80 [ 310.378805][ T6467] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 310.385287][ T6467] __do_fast_syscall_32+0x65/0xf0 [ 310.389768][ T6467] do_fast_syscall_32+0x33/0x70 [ 310.394189][ T6467] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 310.399924][ T6467] RIP: 0023:0xf7f47549 [ 310.402649][ T6467] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 310.419926][ T6467] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 310.426807][ T6467] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 310.431974][ T6467] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 310.436490][ T6467] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 310.442116][ T6467] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 310.447800][ T6467] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 310.459795][ T6467] 09:36:48 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 27) 09:36:48 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 09:36:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) 09:36:48 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0xb, 0x0, 0x0, 0xfff}, 0x48) 09:36:48 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x12, 0x1, &(0x7f0000000000)=@raw=[@ldst], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 310.638983][ T6488] FAULT_INJECTION: forcing a failure. [ 310.638983][ T6488] name fail_page_alloc, interval 1, probability 0, space 0, times 0 09:36:48 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x2) [ 310.650850][ T6488] CPU: 0 PID: 6488 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 310.661152][ T6488] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 310.666652][ T6488] Call Trace: [ 310.668704][ T6488] [ 310.670553][ T6488] dump_stack_lvl+0xd1/0x138 [ 310.673570][ T6488] should_fail_ex.cold+0x5/0xa [ 310.677849][ T6488] prepare_alloc_pages+0x178/0x570 [ 310.682231][ T6488] __alloc_pages+0x149/0x5b0 [ 310.685883][ T6488] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 310.690873][ T6488] ? __lock_acquire+0x166e/0x56d0 [ 310.695612][ T6488] ? __lock_acquire+0xbc3/0x56d0 [ 310.699846][ T6488] __folio_alloc+0x16/0x40 [ 310.703355][ T6488] vma_alloc_folio+0x155/0x870 [ 310.707067][ T6488] ? policy_nodemask+0x1c0/0x1c0 [ 310.711236][ T6488] ? lock_chain_count+0x20/0x20 [ 310.715340][ T6488] __handle_mm_fault+0x1822/0x3c90 [ 310.719889][ T6488] ? vm_iomap_memory+0x190/0x190 [ 310.724671][ T6488] handle_mm_fault+0x1b6/0x850 [ 310.727697][ T6488] __get_user_pages+0x4f8/0xfc0 [ 310.730843][ T6488] ? follow_page_mask+0x10a0/0x10a0 [ 310.734128][ T6488] populate_vma_page_range+0x241/0x320 [ 310.737487][ T6488] __mm_populate+0x105/0x3b0 [ 310.741116][ T6488] ? faultin_vma_page_range+0x300/0x300 [ 310.745034][ T6488] ? up_write+0x1b0/0x520 [ 310.747746][ T6488] do_mlock+0x370/0x6d0 [ 310.750434][ T6488] ? folio_memcg+0x320/0x320 [ 310.753371][ T6488] ? fput+0x2f/0x1a0 [ 310.756088][ T6488] __ia32_sys_mlock+0x57/0x80 [ 310.760331][ T6488] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 310.766119][ T6488] __do_fast_syscall_32+0x65/0xf0 [ 310.769559][ T6488] do_fast_syscall_32+0x33/0x70 [ 310.772913][ T6488] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 310.777154][ T6488] RIP: 0023:0xf7f47549 [ 310.779781][ T6488] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 310.791875][ T6488] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 310.797994][ T6488] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 310.802448][ T6488] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 310.807402][ T6488] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 310.812180][ T6488] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 310.817266][ T6488] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 310.822020][ T6488] 09:36:49 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x6, 0x4, &(0x7f0000000000)=0x4, 0x4) 09:36:49 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001740)=@bpf_tracing={0x1a, 0x200002d8, &(0x7f0000000000)=@framed={{}, [@call]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x6e, &(0x7f0000000080)=""/110, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140), 0x8, 0x10, &(0x7f0000000180), 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff]}, 0x80) 09:36:49 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 28) 09:36:49 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x4) 09:36:49 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x1001000, 0x4) 09:36:49 executing program 3: bpf$BPF_BTF_LOAD(0x14, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20) 09:36:49 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x6) [ 310.951748][ T6503] FAULT_INJECTION: forcing a failure. [ 310.951748][ T6503] name fail_page_alloc, interval 1, probability 0, space 0, times 0 09:36:49 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000080)='syzkaller\x00', 0x1, 0x9b, &(0x7f0000000140)=""/155, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:36:49 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x7}}, &(0x7f0000000080)='syzkaller\x00', 0x1, 0x9b, &(0x7f0000000140)=""/155, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 310.990705][ T6503] CPU: 2 PID: 6503 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 310.999758][ T6503] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 311.007689][ T6503] Call Trace: [ 311.010775][ T6503] [ 311.013655][ T6503] dump_stack_lvl+0xd1/0x138 [ 311.018363][ T6503] should_fail_ex.cold+0x5/0xa 09:36:49 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x10) [ 311.023051][ T6503] prepare_alloc_pages+0x178/0x570 [ 311.027179][ T6503] __alloc_pages+0x149/0x5b0 [ 311.030586][ T6503] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 311.036170][ T6503] ? __lock_acquire+0x166e/0x56d0 09:36:49 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x17, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) [ 311.041400][ T6503] ? __lock_acquire+0xbc3/0x56d0 [ 311.046195][ T6503] __folio_alloc+0x16/0x40 [ 311.050610][ T6503] vma_alloc_folio+0x155/0x870 [ 311.055202][ T6503] ? policy_nodemask+0x1c0/0x1c0 [ 311.060038][ T6503] ? lock_chain_count+0x20/0x20 [ 311.064704][ T6503] __handle_mm_fault+0x1822/0x3c90 [ 311.069452][ T6503] ? vm_iomap_memory+0x190/0x190 [ 311.074251][ T6503] handle_mm_fault+0x1b6/0x850 [ 311.078725][ T6503] __get_user_pages+0x4f8/0xfc0 [ 311.082832][ T6503] ? follow_page_mask+0x10a0/0x10a0 [ 311.088073][ T6503] populate_vma_page_range+0x241/0x320 [ 311.091300][ T6503] __mm_populate+0x105/0x3b0 [ 311.093967][ T6503] ? faultin_vma_page_range+0x300/0x300 [ 311.097092][ T6503] ? up_write+0x1b0/0x520 [ 311.099528][ T6503] do_mlock+0x370/0x6d0 [ 311.102102][ T6503] ? folio_memcg+0x320/0x320 [ 311.105119][ T6503] ? fput+0x2f/0x1a0 [ 311.107647][ T6503] __ia32_sys_mlock+0x57/0x80 [ 311.110445][ T6503] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 311.116542][ T6503] __do_fast_syscall_32+0x65/0xf0 [ 311.120351][ T6503] do_fast_syscall_32+0x33/0x70 [ 311.123737][ T6503] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 311.131832][ T6503] RIP: 0023:0xf7f47549 [ 311.137308][ T6503] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 311.161991][ T6503] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 311.168485][ T6503] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 311.177122][ T6503] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 311.181596][ T6503] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 311.187689][ T6503] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 311.192533][ T6503] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 311.198810][ T6503] 09:36:49 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x38e) 09:36:49 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r0, 0x6, 0x6cf, 0x0, &(0x7f0000000480)) 09:36:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x20, 0xfffa}, 0x20) 09:36:49 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 29) [ 311.315033][ T6525] FAULT_INJECTION: forcing a failure. 09:36:49 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x600) [ 311.315033][ T6525] name fail_page_alloc, interval 1, probability 0, space 0, times 0 09:36:49 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xc, 0x14, 'syz1\x00'}}}, 0x28}}, 0xad64b1df3ec9512b) 09:36:49 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000140)=@framed={{}, [@jmp, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000040)='syzkaller\x00', 0x1, 0x9b, &(0x7f0000000080)=""/155, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 311.334864][ T6525] CPU: 2 PID: 6525 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 09:36:49 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x1100) [ 311.344439][ T6525] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 311.350924][ T6525] Call Trace: [ 311.353972][ T6525] [ 311.356504][ T6525] dump_stack_lvl+0xd1/0x138 [ 311.360186][ T6525] should_fail_ex.cold+0x5/0xa 09:36:49 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x1f00) [ 311.364722][ T6525] prepare_alloc_pages+0x178/0x570 [ 311.368928][ T6525] __alloc_pages+0x149/0x5b0 [ 311.372929][ T6525] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 311.378841][ T6525] ? __lock_acquire+0x166e/0x56d0 [ 311.383389][ T6525] ? __lock_acquire+0xbc3/0x56d0 [ 311.387480][ T6525] __folio_alloc+0x16/0x40 [ 311.390702][ T6525] vma_alloc_folio+0x155/0x870 [ 311.394390][ T6525] ? policy_nodemask+0x1c0/0x1c0 [ 311.398250][ T6525] ? lock_chain_count+0x20/0x20 [ 311.401814][ T6525] __handle_mm_fault+0x1822/0x3c90 [ 311.405311][ T6525] ? vm_iomap_memory+0x190/0x190 [ 311.408936][ T6525] handle_mm_fault+0x1b6/0x850 [ 311.414675][ T6525] __get_user_pages+0x4f8/0xfc0 [ 311.418004][ T6525] ? follow_page_mask+0x10a0/0x10a0 [ 311.421202][ T6525] populate_vma_page_range+0x241/0x320 [ 311.424478][ T6525] __mm_populate+0x105/0x3b0 [ 311.427598][ T6525] ? faultin_vma_page_range+0x300/0x300 [ 311.431462][ T6525] ? up_write+0x1b0/0x520 [ 311.434627][ T6525] do_mlock+0x370/0x6d0 [ 311.437457][ T6525] ? folio_memcg+0x320/0x320 [ 311.441338][ T6525] ? fput+0x2f/0x1a0 [ 311.444605][ T6525] __ia32_sys_mlock+0x57/0x80 [ 311.448568][ T6525] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 311.453892][ T6525] __do_fast_syscall_32+0x65/0xf0 [ 311.457748][ T6525] do_fast_syscall_32+0x33/0x70 [ 311.461167][ T6525] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 311.465620][ T6525] RIP: 0023:0xf7f47549 [ 311.468135][ T6525] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 311.480711][ T6525] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 311.487054][ T6525] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 311.492916][ T6525] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 311.499088][ T6525] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 311.505807][ T6525] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 311.512076][ T6525] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 311.518629][ T6525] 09:36:49 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x75}]}, &(0x7f0000000080)='syzkaller\x00', 0x1, 0x9b, &(0x7f0000000140)=""/155, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:36:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f0000000000)="caefdfcac2f452253ce38a16f50948aebee34193de2671b3c3b834ad37de9264", 0x20) 09:36:49 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 30) 09:36:49 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x2000) 09:36:49 executing program 3: request_key(&(0x7f0000000240)='asymmetric\x00', &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0) 09:36:49 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x26, 0x0, 0xc, 0xc, 0x2, [@func]}}, &(0x7f00000001c0)=""/153, 0x26, 0x99, 0x1}, 0x20) [ 311.707145][ T6542] FAULT_INJECTION: forcing a failure. 09:36:50 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x3f00) [ 311.707145][ T6542] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 311.720855][ T6542] CPU: 3 PID: 6542 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 311.728675][ T6542] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 311.735772][ T6542] Call Trace: [ 311.738208][ T6542] [ 311.740287][ T6542] dump_stack_lvl+0xd1/0x138 [ 311.743546][ T6542] should_fail_ex.cold+0x5/0xa [ 311.747317][ T6542] prepare_alloc_pages+0x178/0x570 [ 311.751711][ T6542] __alloc_pages+0x149/0x5b0 [ 311.755642][ T6542] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 311.760547][ T6542] ? __lock_acquire+0x166e/0x56d0 [ 311.763912][ T6542] ? __lock_acquire+0xbc3/0x56d0 [ 311.767113][ T6542] __folio_alloc+0x16/0x40 [ 311.770422][ T6542] vma_alloc_folio+0x155/0x870 09:36:50 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r0, 0x6, 0x6ce, 0x0, &(0x7f0000000480)) 09:36:50 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000005c00)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x24000095) 09:36:50 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x8e03) [ 311.774039][ T6542] ? policy_nodemask+0x1c0/0x1c0 [ 311.778395][ T6542] ? lock_chain_count+0x20/0x20 [ 311.781963][ T6542] __handle_mm_fault+0x1822/0x3c90 [ 311.785642][ T6542] ? vm_iomap_memory+0x190/0x190 [ 311.789387][ T6542] handle_mm_fault+0x1b6/0x850 [ 311.792565][ T6542] __get_user_pages+0x4f8/0xfc0 [ 311.796139][ T6542] ? follow_page_mask+0x10a0/0x10a0 [ 311.799754][ T6542] populate_vma_page_range+0x241/0x320 [ 311.803497][ T6542] __mm_populate+0x105/0x3b0 [ 311.806579][ T6542] ? faultin_vma_page_range+0x300/0x300 [ 311.810432][ T6542] ? up_write+0x1b0/0x520 [ 311.813516][ T6542] do_mlock+0x370/0x6d0 [ 311.816534][ T6542] ? folio_memcg+0x320/0x320 [ 311.819882][ T6542] ? fput+0x2f/0x1a0 [ 311.822903][ T6542] __ia32_sys_mlock+0x57/0x80 [ 311.826920][ T6542] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 311.831443][ T6542] __do_fast_syscall_32+0x65/0xf0 [ 311.835028][ T6542] do_fast_syscall_32+0x33/0x70 [ 311.838247][ T6542] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 311.842653][ T6542] RIP: 0023:0xf7f47549 [ 311.845611][ T6542] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 311.858481][ T6542] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 311.864318][ T6542] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 311.871299][ T6542] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 311.876589][ T6542] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 311.883539][ T6542] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 311.890366][ T6542] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 311.895814][ T6542] 09:36:50 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x20000) 09:36:50 executing program 3: syz_clone3(&(0x7f0000005840)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x52) 09:36:50 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89b0, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) 09:36:50 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 31) 09:36:50 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x110000) 09:36:50 executing program 3: syz_io_uring_setup(0xfb54, &(0x7f0000000340), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000440)) 09:36:50 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{}, {}]}}) [ 311.988537][ T6566] FAULT_INJECTION: forcing a failure. [ 311.988537][ T6566] name fail_page_alloc, interval 1, probability 0, space 0, times 0 09:36:50 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x200000) [ 311.997345][ T6566] CPU: 3 PID: 6566 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 312.006491][ T6566] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 312.013045][ T6566] Call Trace: [ 312.014995][ T6566] [ 312.016923][ T6566] dump_stack_lvl+0xd1/0x138 [ 312.019581][ T6566] should_fail_ex.cold+0x5/0xa [ 312.022462][ T6566] prepare_alloc_pages+0x178/0x570 [ 312.025535][ T6566] __alloc_pages+0x149/0x5b0 [ 312.028774][ T6566] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 312.033748][ T6566] ? __lock_acquire+0x166e/0x56d0 [ 312.037276][ T6566] ? __lock_acquire+0xbc3/0x56d0 [ 312.040330][ T6566] __folio_alloc+0x16/0x40 [ 312.042974][ T6566] vma_alloc_folio+0x155/0x870 [ 312.046286][ T6566] ? policy_nodemask+0x1c0/0x1c0 [ 312.050708][ T6566] ? lock_chain_count+0x20/0x20 [ 312.055166][ T6566] __handle_mm_fault+0x1822/0x3c90 [ 312.059302][ T6566] ? vm_iomap_memory+0x190/0x190 [ 312.063559][ T6566] handle_mm_fault+0x1b6/0x850 [ 312.068176][ T6566] __get_user_pages+0x4f8/0xfc0 [ 312.072762][ T6566] ? follow_page_mask+0x10a0/0x10a0 09:36:50 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000080)='syzkaller\x00', 0x1, 0x9b, &(0x7f0000000140)=""/155, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:36:50 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x1, &(0x7f0000000000)=@raw=[@alu={0x0, 0x0, 0x2}], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x9b, &(0x7f0000000080)=""/155, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 312.076214][ T6566] populate_vma_page_range+0x241/0x320 [ 312.081332][ T6566] __mm_populate+0x105/0x3b0 [ 312.085251][ T6566] ? faultin_vma_page_range+0x300/0x300 [ 312.089714][ T6566] ? up_write+0x1b0/0x520 [ 312.093248][ T6566] do_mlock+0x370/0x6d0 [ 312.096657][ T6566] ? folio_memcg+0x320/0x320 [ 312.100541][ T6566] ? fput+0x2f/0x1a0 [ 312.104492][ T6566] __ia32_sys_mlock+0x57/0x80 [ 312.109045][ T6566] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 312.114183][ T6566] __do_fast_syscall_32+0x65/0xf0 [ 312.118979][ T6566] do_fast_syscall_32+0x33/0x70 [ 312.123629][ T6566] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 312.129470][ T6566] RIP: 0023:0xf7f47549 [ 312.133214][ T6566] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 312.149792][ T6566] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 312.157490][ T6566] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 312.164247][ T6566] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 312.171251][ T6566] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 312.177866][ T6566] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 312.184665][ T6566] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 312.191155][ T6566] 09:36:50 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x1000000) 09:36:50 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 32) 09:36:50 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) 09:36:50 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x4000000) 09:36:50 executing program 3: setreuid(0xee00, 0xee00) syz_clone3(&(0x7f0000000440)={0x40102000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:36:50 executing program 2: socketpair(0x11, 0x2, 0x1ff, &(0x7f00000001c0)) 09:36:50 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x6000000) 09:36:50 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x548, 0x0, 0x358, 0xffffffff, 0x210, 0x358, 0x478, 0x478, 0xffffffff, 0x478, 0x478, 0x5, 0x0, {[{{@ipv6={@remote, @remote, [], [], 'ip6gretap0\x00', 'xfrm0\x00'}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@frag={{0x30}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@empty, @ipv4=@local, @icmp_id}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @empty, [], [], 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@private2, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@hl={{0x28}}, @common=@frag={{0x30}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, @port, @gre_key}}}, {{@ipv6={@remote, @empty, [], [], 'veth1_to_team\x00', 'geneve0\x00'}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@ah={{0x30}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@private1, @ipv6=@rand_addr=' \x01\x00', @gre_key}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) [ 312.324577][ T6587] FAULT_INJECTION: forcing a failure. [ 312.324577][ T6587] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 312.337011][ T6587] CPU: 2 PID: 6587 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 09:36:50 executing program 2: syz_clone3(&(0x7f0000005840)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x2, 0x0, 0x0}, 0x58) [ 312.344926][ T6587] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 312.352359][ T6587] Call Trace: [ 312.355394][ T6587] [ 312.358240][ T6587] dump_stack_lvl+0xd1/0x138 [ 312.361892][ T6587] should_fail_ex.cold+0x5/0xa [ 312.365836][ T6587] prepare_alloc_pages+0x178/0x570 [ 312.369598][ T6587] __alloc_pages+0x149/0x5b0 [ 312.373277][ T6587] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 312.378661][ T6587] ? __lock_acquire+0x166e/0x56d0 [ 312.389721][ T6587] ? __lock_acquire+0xbc3/0x56d0 [ 312.393770][ T6587] __folio_alloc+0x16/0x40 [ 312.397083][ T6587] vma_alloc_folio+0x155/0x870 [ 312.401924][ T6587] ? policy_nodemask+0x1c0/0x1c0 [ 312.405126][ T6587] ? lock_chain_count+0x20/0x20 [ 312.408138][ T6587] __handle_mm_fault+0x1822/0x3c90 [ 312.411654][ T6587] ? vm_iomap_memory+0x190/0x190 [ 312.414642][ T6587] handle_mm_fault+0x1b6/0x850 [ 312.417732][ T6587] __get_user_pages+0x4f8/0xfc0 [ 312.421251][ T6587] ? follow_page_mask+0x10a0/0x10a0 [ 312.424614][ T6587] populate_vma_page_range+0x241/0x320 [ 312.427771][ T6587] __mm_populate+0x105/0x3b0 [ 312.430932][ T6587] ? faultin_vma_page_range+0x300/0x300 [ 312.434947][ T6587] ? up_write+0x1b0/0x520 [ 312.438073][ T6587] do_mlock+0x370/0x6d0 [ 312.441074][ T6587] ? folio_memcg+0x320/0x320 [ 312.444158][ T6587] ? fput+0x2f/0x1a0 [ 312.446449][ T6587] __ia32_sys_mlock+0x57/0x80 [ 312.449154][ T6587] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 312.454116][ T6587] __do_fast_syscall_32+0x65/0xf0 [ 312.457914][ T6587] do_fast_syscall_32+0x33/0x70 [ 312.462489][ T6587] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 312.467848][ T6587] RIP: 0023:0xf7f47549 [ 312.471316][ T6587] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 312.489481][ T6587] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 312.497256][ T6587] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 312.504883][ T6587] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 312.515798][ T6587] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 312.522067][ T6587] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 312.527873][ T6587] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 312.533316][ T6587] 09:36:50 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 33) 09:36:50 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x4e, 0x0, 0x0) 09:36:50 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x2, &(0x7f0000000000)=@raw=[@ldst, @alu={0x6}], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x9b, &(0x7f0000000080)=""/155, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:36:50 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x10000000) 09:36:50 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000001}}, &(0x7f0000000040)='syzkaller\x00', 0x1, 0x9b, &(0x7f0000000080)=""/155, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:36:50 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r0, 0x6, 0x6, 0x0, &(0x7f0000000480)) [ 312.668037][ T6602] FAULT_INJECTION: forcing a failure. [ 312.668037][ T6602] name fail_page_alloc, interval 1, probability 0, space 0, times 0 09:36:50 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x1f000000) 09:36:50 executing program 2: mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[]) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/58, 0x3a) [ 312.685380][ T6602] CPU: 2 PID: 6602 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 312.694726][ T6602] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 312.702347][ T6602] Call Trace: [ 312.705212][ T6602] [ 312.707787][ T6602] dump_stack_lvl+0xd1/0x138 [ 312.711831][ T6602] should_fail_ex.cold+0x5/0xa [ 312.715617][ T6602] prepare_alloc_pages+0x178/0x570 [ 312.719222][ T6602] __alloc_pages+0x149/0x5b0 [ 312.723046][ T6602] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 09:36:51 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) [ 312.728476][ T6602] ? __lock_acquire+0x166e/0x56d0 [ 312.733379][ T6602] ? __lock_acquire+0xbc3/0x56d0 [ 312.736523][ T6602] __folio_alloc+0x16/0x40 [ 312.739319][ T6602] vma_alloc_folio+0x155/0x870 [ 312.742845][ T6602] ? policy_nodemask+0x1c0/0x1c0 [ 312.748143][ T6602] ? lock_chain_count+0x20/0x20 09:36:51 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x2012ffff) [ 312.751645][ T6602] __handle_mm_fault+0x1822/0x3c90 [ 312.755964][ T6602] ? vm_iomap_memory+0x190/0x190 [ 312.759448][ T6602] handle_mm_fault+0x1b6/0x850 [ 312.763126][ T6602] __get_user_pages+0x4f8/0xfc0 [ 312.766217][ T6602] ? follow_page_mask+0x10a0/0x10a0 [ 312.769578][ T6602] populate_vma_page_range+0x241/0x320 [ 312.772622][ T6602] __mm_populate+0x105/0x3b0 [ 312.776018][ T6602] ? faultin_vma_page_range+0x300/0x300 [ 312.780058][ T6602] ? up_write+0x1b0/0x520 [ 312.783880][ T6602] do_mlock+0x370/0x6d0 [ 312.787939][ T6602] ? folio_memcg+0x320/0x320 [ 312.791866][ T6602] ? fput+0x2f/0x1a0 [ 312.795745][ T6602] __ia32_sys_mlock+0x57/0x80 09:36:51 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000004e40)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, &(0x7f0000001200)=[{0x0}, {0x0}, {&(0x7f0000000200)='u', 0x1}], 0x3}}], 0x1, 0x0) [ 312.800014][ T6602] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 312.806705][ T6602] __do_fast_syscall_32+0x65/0xf0 [ 312.811175][ T6602] do_fast_syscall_32+0x33/0x70 [ 312.816052][ T6602] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 312.822192][ T6602] RIP: 0023:0xf7f47549 [ 312.825981][ T6602] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 312.846207][ T6602] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 312.852616][ T6602] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 312.857813][ T6602] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 312.863449][ T6602] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 312.868629][ T6602] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 312.874148][ T6602] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 312.879668][ T6602] 09:36:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getchain={0x34, 0x66, 0x5, 0x0, 0x0, {}, [{0x8}, {0x8}]}, 0x34}}, 0x0) 09:36:51 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x2092ffff) 09:36:51 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 34) 09:36:51 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@loopback}, 0x20) 09:36:51 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x8}, 0x48) 09:36:51 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x3f000000) 09:36:51 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa5}]}, &(0x7f0000000080)='syzkaller\x00', 0x1, 0x9b, &(0x7f0000000140)=""/155, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:36:51 executing program 2: r0 = syz_open_dev$rtc(&(0x7f0000000040), 0x2, 0x0) ioctl$RTC_EPOCH_READ(r0, 0x8008700d, 0x0) [ 313.023756][ T6624] FAULT_INJECTION: forcing a failure. 09:36:51 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x8e030000) [ 313.023756][ T6624] name fail_page_alloc, interval 1, probability 0, space 0, times 0 09:36:51 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x2d, &(0x7f0000000380)="d1f4c9eb45a1952fcc885547a75b00fda00b603d1afb6d22f68b1b392fe9f4feac9a93baf3dc9f9b25effc899ade8daa7ad84d413fa2c8c959508c714299818a02c880047a3d2093c11e6ff9f96195a76fa3dde1ca125df926de695cf8e0338d23b743b72f070eb15a612cc34b29cab9c406d361dd3b65d1d660b8eb3f3817915143aee367120c3e", 0x88) [ 313.050500][ T6624] CPU: 1 PID: 6624 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 313.059698][ T6624] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 313.066108][ T6624] Call Trace: [ 313.068768][ T6624] 09:36:51 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x1600bd74, 0x0, 0x0) [ 313.071366][ T6624] dump_stack_lvl+0xd1/0x138 [ 313.083518][ T6624] should_fail_ex.cold+0x5/0xa [ 313.087048][ T6624] prepare_alloc_pages+0x178/0x570 [ 313.091896][ T6624] __alloc_pages+0x149/0x5b0 [ 313.096083][ T6624] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 313.100936][ T6624] ? __lock_acquire+0x166e/0x56d0 [ 313.104951][ T6624] ? __lock_acquire+0xbc3/0x56d0 [ 313.110377][ T6624] __folio_alloc+0x16/0x40 [ 313.118139][ T6624] vma_alloc_folio+0x155/0x870 [ 313.122001][ T6624] ? policy_nodemask+0x1c0/0x1c0 [ 313.126678][ T6624] ? lock_chain_count+0x20/0x20 [ 313.130686][ T6624] __handle_mm_fault+0x1822/0x3c90 [ 313.134468][ T6624] ? vm_iomap_memory+0x190/0x190 [ 313.137933][ T6624] handle_mm_fault+0x1b6/0x850 [ 313.142540][ T6624] __get_user_pages+0x4f8/0xfc0 [ 313.146101][ T6624] ? follow_page_mask+0x10a0/0x10a0 [ 313.149777][ T6624] populate_vma_page_range+0x241/0x320 [ 313.153732][ T6624] __mm_populate+0x105/0x3b0 [ 313.157134][ T6624] ? faultin_vma_page_range+0x300/0x300 [ 313.161821][ T6624] ? up_write+0x1b0/0x520 [ 313.167619][ T6624] do_mlock+0x370/0x6d0 [ 313.173669][ T6624] ? folio_memcg+0x320/0x320 [ 313.182565][ T6624] ? fput+0x2f/0x1a0 [ 313.188214][ T6624] __ia32_sys_mlock+0x57/0x80 [ 313.191959][ T6624] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 313.198008][ T6624] __do_fast_syscall_32+0x65/0xf0 [ 313.202670][ T6624] do_fast_syscall_32+0x33/0x70 [ 313.206799][ T6624] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 313.211179][ T6624] RIP: 0023:0xf7f47549 [ 313.214161][ T6624] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 313.228796][ T6624] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 313.235460][ T6624] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 313.240589][ T6624] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 313.247113][ T6624] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 313.253137][ T6624] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 313.260563][ T6624] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 313.267121][ T6624] 09:36:51 executing program 3: syz_clone(0x2004e400, 0x0, 0x0, 0x0, 0x0, 0x0) 09:36:51 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 35) 09:36:51 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0xffff1220) 09:36:51 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_regs}) [ 313.367185][ T6642] FAULT_INJECTION: forcing a failure. [ 313.367185][ T6642] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 313.376796][ T6642] CPU: 1 PID: 6642 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 313.383730][ T6642] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 313.389691][ T6642] Call Trace: [ 313.392265][ T6642] [ 313.394174][ T6642] dump_stack_lvl+0xd1/0x138 [ 313.397307][ T6642] should_fail_ex.cold+0x5/0xa [ 313.400706][ T6642] prepare_alloc_pages+0x178/0x570 [ 313.404275][ T6642] __alloc_pages+0x149/0x5b0 [ 313.407676][ T6642] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 313.413130][ T6642] ? __lock_acquire+0x166e/0x56d0 09:36:51 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0xffff9220) 09:36:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xd00, &(0x7f0000000140)={&(0x7f0000000100)={0x1c}, 0xc}}, 0x0) [ 313.417052][ T6642] ? __lock_acquire+0xbc3/0x56d0 [ 313.421161][ T6642] __folio_alloc+0x16/0x40 [ 313.425510][ T6642] vma_alloc_folio+0x155/0x870 [ 313.430285][ T6642] ? policy_nodemask+0x1c0/0x1c0 [ 313.435757][ T6642] ? lock_chain_count+0x20/0x20 09:36:51 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x35, &(0x7f0000000200), 0x8) [ 313.439103][ T6642] __handle_mm_fault+0x1822/0x3c90 [ 313.443140][ T6642] ? vm_iomap_memory+0x190/0x190 [ 313.447185][ T6642] handle_mm_fault+0x1b6/0x850 [ 313.451091][ T6642] __get_user_pages+0x4f8/0xfc0 [ 313.455910][ T6642] ? follow_page_mask+0x10a0/0x10a0 [ 313.459663][ T6642] populate_vma_page_range+0x241/0x320 [ 313.463799][ T6642] __mm_populate+0x105/0x3b0 [ 313.467687][ T6642] ? faultin_vma_page_range+0x300/0x300 [ 313.471429][ T6642] ? up_write+0x1b0/0x520 [ 313.474663][ T6642] do_mlock+0x370/0x6d0 [ 313.478272][ T6642] ? folio_memcg+0x320/0x320 [ 313.481355][ T6642] ? fput+0x2f/0x1a0 [ 313.483847][ T6642] __ia32_sys_mlock+0x57/0x80 [ 313.486938][ T6642] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 09:36:51 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x4c00}}, &(0x7f0000000080)='syzkaller\x00', 0x1, 0x9b, &(0x7f0000000140)=""/155, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 313.491754][ T6642] __do_fast_syscall_32+0x65/0xf0 [ 313.496692][ T6642] do_fast_syscall_32+0x33/0x70 [ 313.500278][ T6642] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 313.511746][ T6642] RIP: 0023:0xf7f47549 09:36:51 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000), 0x4) [ 313.514784][ T6642] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 313.531885][ T6642] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 313.537284][ T6642] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 313.542316][ T6642] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 313.546757][ T6642] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 313.552525][ T6642] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 313.558463][ T6642] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 313.565642][ T6642] 09:36:51 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x4d, 0x0, 0x0) 09:36:51 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 36) 09:36:51 executing program 3: syz_clone(0x2004e400, 0x0, 0x0, 0x0, 0x0, 0x0) 09:36:51 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x33, 0x0, 0x0) 09:36:51 executing program 1: ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000600)={0x5, &(0x7f0000000300)=[{@none}, {}, {}, {@fixed}, {}]}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) r0 = gettid() syz_clone3(&(0x7f0000000280)={0x3a1100800, &(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0), {0xc}, &(0x7f0000000100)=""/73, 0x49, &(0x7f0000000180)=""/151, &(0x7f0000000240)=[0xffffffffffffffff, r0], 0x2}, 0x58) tkill(r1, 0x19) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) [ 313.697376][ T6665] FAULT_INJECTION: forcing a failure. [ 313.697376][ T6665] name fail_page_alloc, interval 1, probability 0, space 0, times 0 09:36:52 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x1, 0x9b, &(0x7f0000000140)=""/155, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:36:52 executing program 1: ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000600)={0x5, &(0x7f0000000300)=[{@none}, {}, {}, {@fixed}, {}]}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) r0 = gettid() syz_clone3(&(0x7f0000000280)={0x3a1100800, &(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0), {0xc}, &(0x7f0000000100)=""/73, 0x49, &(0x7f0000000180)=""/151, &(0x7f0000000240)=[0xffffffffffffffff, r0], 0x2}, 0x58) tkill(r1, 0x19) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000600)={0x5, &(0x7f0000000300)=[{@none}, {}, {}, {@fixed}, {}]}) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) (async) gettid() (async) syz_clone3(&(0x7f0000000280)={0x3a1100800, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0xc}, &(0x7f0000000100)=""/73, 0x49, &(0x7f0000000180)=""/151, &(0x7f0000000240)=[0xffffffffffffffff, r0], 0x2}, 0x58) (async) tkill(r1, 0x19) (async) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) [ 313.730916][ T6665] CPU: 3 PID: 6665 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 313.740319][ T6665] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 313.747453][ T6665] Call Trace: [ 313.750243][ T6665] [ 313.752494][ T6665] dump_stack_lvl+0xd1/0x138 [ 313.755857][ T6665] should_fail_ex.cold+0x5/0xa [ 313.759510][ T6665] prepare_alloc_pages+0x178/0x570 [ 313.765150][ T6665] __alloc_pages+0x149/0x5b0 [ 313.774825][ T6665] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 313.780837][ T6665] ? __lock_acquire+0x166e/0x56d0 [ 313.784821][ T6665] ? __lock_acquire+0xbc3/0x56d0 [ 313.789077][ T6665] __folio_alloc+0x16/0x40 [ 313.794790][ T6665] vma_alloc_folio+0x155/0x870 [ 313.800018][ T6665] ? policy_nodemask+0x1c0/0x1c0 [ 313.806610][ T6665] ? lock_chain_count+0x20/0x20 [ 313.813315][ T6665] __handle_mm_fault+0x1822/0x3c90 [ 313.819059][ T6665] ? vm_iomap_memory+0x190/0x190 [ 313.823078][ T6665] handle_mm_fault+0x1b6/0x850 [ 313.827577][ T6665] __get_user_pages+0x4f8/0xfc0 [ 313.832848][ T6665] ? follow_page_mask+0x10a0/0x10a0 [ 313.836186][ T6665] populate_vma_page_range+0x241/0x320 [ 313.840767][ T6665] __mm_populate+0x105/0x3b0 [ 313.844461][ T6665] ? faultin_vma_page_range+0x300/0x300 [ 313.848350][ T6665] ? up_write+0x1b0/0x520 [ 313.854694][ T6665] do_mlock+0x370/0x6d0 [ 313.858443][ T6665] ? folio_memcg+0x320/0x320 [ 313.863357][ T6665] ? fput+0x2f/0x1a0 [ 313.866102][ T6665] __ia32_sys_mlock+0x57/0x80 [ 313.881826][ T6665] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 313.890753][ T6665] __do_fast_syscall_32+0x65/0xf0 [ 313.894889][ T6665] do_fast_syscall_32+0x33/0x70 [ 313.898491][ T6665] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 313.910188][ T6665] RIP: 0023:0xf7f47549 [ 313.913450][ T6665] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 313.932359][ T6665] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 313.939256][ T6665] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 313.945776][ T6665] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 313.954017][ T6665] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 313.959389][ T6665] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 313.968782][ T6665] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 313.975863][ T6665] 09:36:52 executing program 2: socketpair(0x1, 0x0, 0x8000, &(0x7f0000000640)) 09:36:52 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x1, 0x9b, &(0x7f0000000140)=""/155, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:36:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback={0x0, 0x7}}, 0x1c) 09:36:52 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 37) 09:36:52 executing program 1: ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000600)={0x5, &(0x7f0000000300)=[{@none}, {}, {}, {@fixed}, {}]}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) r0 = gettid() syz_clone3(&(0x7f0000000280)={0x3a1100800, &(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0), {0xc}, &(0x7f0000000100)=""/73, 0x49, &(0x7f0000000180)=""/151, &(0x7f0000000240)=[0xffffffffffffffff, r0], 0x2}, 0x58) tkill(r1, 0x19) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 09:36:52 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x6, &(0x7f0000000140)={@rand_addr=' \x01\x00'}, 0x20) [ 314.197901][ T6685] FAULT_INJECTION: forcing a failure. [ 314.197901][ T6685] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 314.229968][ T6685] CPU: 2 PID: 6685 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 314.238938][ T6685] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 314.245676][ T6685] Call Trace: [ 314.247932][ T6685] [ 314.252268][ T6685] dump_stack_lvl+0xd1/0x138 [ 314.256508][ T6685] should_fail_ex.cold+0x5/0xa [ 314.261358][ T6685] prepare_alloc_pages+0x178/0x570 [ 314.267052][ T6685] __alloc_pages+0x149/0x5b0 [ 314.270062][ T6685] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 314.277868][ T6685] ? __lock_acquire+0x166e/0x56d0 [ 314.282981][ T6685] ? __lock_acquire+0xbc3/0x56d0 [ 314.287734][ T6685] __folio_alloc+0x16/0x40 [ 314.291517][ T6685] vma_alloc_folio+0x155/0x870 [ 314.296371][ T6685] ? policy_nodemask+0x1c0/0x1c0 [ 314.300990][ T6685] ? lock_chain_count+0x20/0x20 [ 314.305576][ T6685] __handle_mm_fault+0x1822/0x3c90 [ 314.311143][ T6685] ? vm_iomap_memory+0x190/0x190 [ 314.316064][ T6685] handle_mm_fault+0x1b6/0x850 [ 314.320922][ T6685] __get_user_pages+0x4f8/0xfc0 [ 314.325531][ T6685] ? follow_page_mask+0x10a0/0x10a0 [ 314.331104][ T6685] populate_vma_page_range+0x241/0x320 [ 314.336935][ T6685] __mm_populate+0x105/0x3b0 [ 314.343730][ T6685] ? faultin_vma_page_range+0x300/0x300 [ 314.352376][ T6685] ? up_write+0x1b0/0x520 [ 314.356499][ T6685] do_mlock+0x370/0x6d0 [ 314.360440][ T6685] ? folio_memcg+0x320/0x320 [ 314.364404][ T6685] ? fput+0x2f/0x1a0 [ 314.369018][ T6685] __ia32_sys_mlock+0x57/0x80 [ 314.373489][ T6685] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 314.379147][ T6685] __do_fast_syscall_32+0x65/0xf0 [ 314.400907][ T6685] do_fast_syscall_32+0x33/0x70 [ 314.406804][ T6685] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 314.416969][ T6685] RIP: 0023:0xf7f47549 [ 314.420274][ T6685] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 314.445166][ T6685] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 314.451590][ T6685] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 314.458371][ T6685] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 314.465097][ T6685] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 314.472053][ T6685] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 314.479820][ T6685] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 314.485712][ T6685] 09:36:52 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}, 0x1c) 09:36:52 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 38) 09:36:52 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x9, 0x3, 0x288, 0x118, 0xffffffff, 0xffffffff, 0x118, 0xffffffff, 0x340, 0xffffffff, 0xffffffff, 0x340, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}, {{@ipv6={@local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'ip6erspan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) [ 314.613701][ T6693] FAULT_INJECTION: forcing a failure. [ 314.613701][ T6693] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 314.635836][ T6693] CPU: 2 PID: 6693 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 314.644708][ T6693] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 314.653189][ T6693] Call Trace: [ 314.656160][ T6693] [ 314.659250][ T6693] dump_stack_lvl+0xd1/0x138 [ 314.663783][ T6693] should_fail_ex.cold+0x5/0xa [ 314.668233][ T6693] prepare_alloc_pages+0x178/0x570 [ 314.673198][ T6693] __alloc_pages+0x149/0x5b0 [ 314.677472][ T6693] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 314.682262][ T6693] ? __lock_acquire+0x166e/0x56d0 [ 314.686141][ T6693] ? __lock_acquire+0xbc3/0x56d0 [ 314.689612][ T6693] __folio_alloc+0x16/0x40 [ 314.693378][ T6693] vma_alloc_folio+0x155/0x870 [ 314.697249][ T6693] ? policy_nodemask+0x1c0/0x1c0 [ 314.700175][ T6693] ? lock_chain_count+0x20/0x20 [ 314.704796][ T6693] __handle_mm_fault+0x1822/0x3c90 [ 314.708975][ T6693] ? vm_iomap_memory+0x190/0x190 [ 314.712632][ T6693] handle_mm_fault+0x1b6/0x850 [ 314.715823][ T6693] __get_user_pages+0x4f8/0xfc0 [ 314.718768][ T6693] ? follow_page_mask+0x10a0/0x10a0 [ 314.722709][ T6693] populate_vma_page_range+0x241/0x320 [ 314.727276][ T6693] __mm_populate+0x105/0x3b0 [ 314.731660][ T6693] ? faultin_vma_page_range+0x300/0x300 [ 314.735484][ T6693] ? up_write+0x1b0/0x520 [ 314.738644][ T6693] do_mlock+0x370/0x6d0 [ 314.742130][ T6693] ? folio_memcg+0x320/0x320 [ 314.746345][ T6693] ? fput+0x2f/0x1a0 [ 314.749806][ T6693] __ia32_sys_mlock+0x57/0x80 [ 314.753289][ T6693] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 314.757998][ T6693] __do_fast_syscall_32+0x65/0xf0 [ 314.761386][ T6693] do_fast_syscall_32+0x33/0x70 [ 314.765430][ T6693] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 314.770355][ T6693] RIP: 0023:0xf7f47549 [ 314.774153][ T6693] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 314.788457][ T6693] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 314.793821][ T6693] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 314.799482][ T6693] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 314.805592][ T6693] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 314.811092][ T6693] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 314.816405][ T6693] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 314.821378][ T6693] [ 315.049479][ T6701] FAULT_INJECTION: forcing a failure. [ 315.049479][ T6701] name fail_page_alloc, interval 1, probability 0, space 0, times 0 09:36:53 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8d}]}, &(0x7f0000000080)='syzkaller\x00', 0x1, 0x9b, &(0x7f0000000140)=""/155, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:36:53 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 39) 09:36:53 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000), 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x166, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) timer_create(0x2, &(0x7f0000000380)={0x0, 0x30, 0x2, @tid=r0}, &(0x7f00000003c0)) process_vm_writev(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/49, 0x31}, {&(0x7f0000000040)=""/12, 0xc}, {&(0x7f0000000080)=""/202, 0xca}], 0x3, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/155, 0x9b}, {&(0x7f0000000280)=""/135, 0x87}], 0x2, 0x0) 09:36:53 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r0, &(0x7f0000009fc0)="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", 0x5ad, 0x0, 0x0, 0x0) 09:36:53 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0xb, 0x0, 0x0) 09:36:53 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000005c0)={&(0x7f0000000400)=""/115, 0x0, 0x1000, 0x0, 0x1}, 0x20) [ 315.061974][ T6701] CPU: 1 PID: 6701 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 315.074129][ T6701] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 315.081425][ T6701] Call Trace: [ 315.084609][ T6701] [ 315.087315][ T6701] dump_stack_lvl+0xd1/0x138 [ 315.091092][ T6701] should_fail_ex.cold+0x5/0xa [ 315.095335][ T6701] prepare_alloc_pages+0x178/0x570 [ 315.100063][ T6701] __alloc_pages+0x149/0x5b0 [ 315.104554][ T6701] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 315.111205][ T6701] ? __lock_acquire+0x166e/0x56d0 [ 315.114855][ T6701] ? __lock_acquire+0xbc3/0x56d0 [ 315.118643][ T6701] __folio_alloc+0x16/0x40 [ 315.122542][ T6701] vma_alloc_folio+0x155/0x870 [ 315.125364][ T6701] ? policy_nodemask+0x1c0/0x1c0 [ 315.128166][ T6701] ? lock_chain_count+0x20/0x20 [ 315.131175][ T6701] __handle_mm_fault+0x1822/0x3c90 [ 315.134737][ T6701] ? vm_iomap_memory+0x190/0x190 [ 315.138446][ T6701] handle_mm_fault+0x1b6/0x850 [ 315.142443][ T6701] __get_user_pages+0x4f8/0xfc0 [ 315.145333][ T6701] ? follow_page_mask+0x10a0/0x10a0 [ 315.148559][ T6701] populate_vma_page_range+0x241/0x320 [ 315.151781][ T6701] __mm_populate+0x105/0x3b0 09:36:53 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1b, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x1, 0x9b, &(0x7f0000000140)=""/155, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:36:53 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async, rerun: 32) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async, rerun: 32) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000), 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x166, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) (async) timer_create(0x2, &(0x7f0000000380)={0x0, 0x30, 0x2, @tid=r0}, &(0x7f00000003c0)) (async) process_vm_writev(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/49, 0x31}, {&(0x7f0000000040)=""/12, 0xc}, {&(0x7f0000000080)=""/202, 0xca}], 0x3, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/155, 0x9b}, {&(0x7f0000000280)=""/135, 0x87}], 0x2, 0x0) 09:36:53 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x3, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) [ 315.154623][ T6701] ? faultin_vma_page_range+0x300/0x300 [ 315.159784][ T6701] ? up_write+0x1b0/0x520 09:36:53 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000), 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x166, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) timer_create(0x2, &(0x7f0000000380)={0x0, 0x30, 0x2, @tid=r0}, &(0x7f00000003c0)) (async) process_vm_writev(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/49, 0x31}, {&(0x7f0000000040)=""/12, 0xc}, {&(0x7f0000000080)=""/202, 0xca}], 0x3, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/155, 0x9b}, {&(0x7f0000000280)=""/135, 0x87}], 0x2, 0x0) [ 315.162618][ T6701] do_mlock+0x370/0x6d0 [ 315.166068][ T6701] ? folio_memcg+0x320/0x320 [ 315.168982][ T6701] ? fput+0x2f/0x1a0 [ 315.171303][ T6701] __ia32_sys_mlock+0x57/0x80 [ 315.174913][ T6701] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 315.179846][ T6701] __do_fast_syscall_32+0x65/0xf0 [ 315.183425][ T6701] do_fast_syscall_32+0x33/0x70 [ 315.187308][ T6701] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 315.193402][ T6701] RIP: 0023:0xf7f47549 [ 315.197426][ T6701] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 315.212972][ T6701] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 315.218717][ T6701] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 315.224597][ T6701] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 315.230803][ T6701] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 315.237311][ T6701] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 315.245431][ T6701] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 315.266692][ T6701] 09:36:53 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 40) 09:36:53 executing program 3: fsopen(&(0x7f0000000040)='configfs\x00', 0x0) 09:36:53 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mlock(&(0x7f00008f0000/0x4000)=nil, 0x4000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() mlock(&(0x7f000031e000/0x4000)=nil, 0x4000) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 09:36:53 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$ptp(r0, 0x0, 0x0) 09:36:53 executing program 3: r0 = io_uring_setup(0x6496, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x20) 09:36:53 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x1ff) [ 315.346037][ T6728] FAULT_INJECTION: forcing a failure. [ 315.346037][ T6728] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 315.357194][ T6728] CPU: 2 PID: 6728 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 315.363792][ T6728] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 315.369545][ T6728] Call Trace: [ 315.371625][ T6728] [ 315.373596][ T6728] dump_stack_lvl+0xd1/0x138 [ 315.377012][ T6728] should_fail_ex.cold+0x5/0xa [ 315.381369][ T6728] prepare_alloc_pages+0x178/0x570 [ 315.385478][ T6728] __alloc_pages+0x149/0x5b0 [ 315.389681][ T6728] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 315.395457][ T6728] ? __lock_acquire+0x166e/0x56d0 [ 315.399600][ T6728] ? __lock_acquire+0xbc3/0x56d0 [ 315.403658][ T6728] __folio_alloc+0x16/0x40 [ 315.404523][ T6736] fuse: blksize only supported for fuseblk [ 315.407092][ T6728] vma_alloc_folio+0x155/0x870 [ 315.415918][ T6728] ? policy_nodemask+0x1c0/0x1c0 [ 315.419728][ T6728] ? lock_chain_count+0x20/0x20 [ 315.423552][ T6728] __handle_mm_fault+0x1822/0x3c90 [ 315.428041][ T6728] ? vm_iomap_memory+0x190/0x190 09:36:53 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001080), 0x2, 0x0) read$FUSE(r0, &(0x7f0000003140)={0x2020}, 0x2020) 09:36:53 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize}]}}, 0x0, 0x0, 0x0) [ 315.432199][ T6728] handle_mm_fault+0x1b6/0x850 [ 315.437304][ T6728] __get_user_pages+0x4f8/0xfc0 [ 315.441638][ T6728] ? follow_page_mask+0x10a0/0x10a0 [ 315.446288][ T6728] populate_vma_page_range+0x241/0x320 [ 315.451186][ T6728] __mm_populate+0x105/0x3b0 [ 315.458735][ T6728] ? faultin_vma_page_range+0x300/0x300 [ 315.463080][ T6728] ? up_write+0x1b0/0x520 [ 315.466588][ T6728] do_mlock+0x370/0x6d0 [ 315.469788][ T6728] ? folio_memcg+0x320/0x320 [ 315.473022][ T6728] ? fput+0x2f/0x1a0 [ 315.475401][ T6728] __ia32_sys_mlock+0x57/0x80 [ 315.478657][ T6728] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 315.482712][ T6728] __do_fast_syscall_32+0x65/0xf0 [ 315.485723][ T6728] do_fast_syscall_32+0x33/0x70 [ 315.488867][ T6728] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 315.493331][ T6728] RIP: 0023:0xf7f47549 [ 315.496251][ T6728] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 315.509699][ T6728] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 315.515981][ T6728] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 315.521429][ T6728] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 315.526370][ T6728] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 315.531302][ T6728] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 315.535764][ T6728] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 315.540571][ T6728] 09:36:53 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 41) 09:36:53 executing program 2: r0 = io_uring_setup(0x3e7a, &(0x7f0000003280)) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000040)='/\x02ev/rfkill\x00', 0x0, r0) 09:36:53 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7b}]}, &(0x7f0000000080)='syzkaller\x00', 0x1, 0x9b, &(0x7f0000000140)=""/155, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:36:53 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mlock(&(0x7f00008f0000/0x4000)=nil, 0x4000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() mlock(&(0x7f000031e000/0x4000)=nil, 0x4000) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mlock(&(0x7f00008f0000/0x4000)=nil, 0x4000) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) gettid() (async) mlock(&(0x7f000031e000/0x4000)=nil, 0x4000) (async) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) 09:36:53 executing program 3: r0 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000080)='/dev/snd/seq\x00', &(0x7f00000000c0)='./file0\x00', r1) 09:36:53 executing program 2: r0 = fsopen(&(0x7f0000002140)='squashfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) [ 315.649495][ T6747] FAULT_INJECTION: forcing a failure. [ 315.649495][ T6747] name fail_page_alloc, interval 1, probability 0, space 0, times 0 09:36:53 executing program 3: r0 = io_uring_setup(0x4a7c, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, 0x0, 0x0) 09:36:53 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mlock(&(0x7f00008f0000/0x4000)=nil, 0x4000) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) r0 = gettid() mlock(&(0x7f000031e000/0x4000)=nil, 0x4000) (async) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) [ 315.690685][ T6747] CPU: 1 PID: 6747 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 315.700039][ T6747] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 315.706964][ T6747] Call Trace: [ 315.709042][ T6747] [ 315.711049][ T6747] dump_stack_lvl+0xd1/0x138 [ 315.714517][ T6747] should_fail_ex.cold+0x5/0xa [ 315.718679][ T6747] prepare_alloc_pages+0x178/0x570 [ 315.722791][ T6747] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 315.727081][ T6747] __alloc_pages+0x149/0x5b0 [ 315.730693][ T6747] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 315.735404][ T6747] ? __lock_acquire+0x166e/0x56d0 [ 315.738690][ T6747] ? __lock_acquire+0xbc3/0x56d0 [ 315.743857][ T6747] __folio_alloc+0x16/0x40 [ 315.749014][ T6747] vma_alloc_folio+0x155/0x870 [ 315.752043][ T6747] ? policy_nodemask+0x1c0/0x1c0 [ 315.756523][ T6747] ? lock_chain_count+0x20/0x20 [ 315.760555][ T6747] __handle_mm_fault+0x1822/0x3c90 [ 315.765327][ T6747] ? vm_iomap_memory+0x190/0x190 [ 315.769044][ T6747] handle_mm_fault+0x1b6/0x850 [ 315.772581][ T6747] __get_user_pages+0x4f8/0xfc0 [ 315.776550][ T6747] ? follow_page_mask+0x10a0/0x10a0 [ 315.780809][ T6747] populate_vma_page_range+0x241/0x320 [ 315.786606][ T6747] __mm_populate+0x105/0x3b0 [ 315.791091][ T6747] ? faultin_vma_page_range+0x300/0x300 [ 315.796162][ T6747] ? up_write+0x1b0/0x520 [ 315.800716][ T6747] do_mlock+0x370/0x6d0 [ 315.804420][ T6747] ? folio_memcg+0x320/0x320 [ 315.807965][ T6747] ? fput+0x2f/0x1a0 [ 315.815741][ T6747] __ia32_sys_mlock+0x57/0x80 [ 315.819896][ T6747] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 315.825336][ T6747] __do_fast_syscall_32+0x65/0xf0 [ 315.834850][ T6747] do_fast_syscall_32+0x33/0x70 [ 315.839024][ T6747] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 315.844077][ T6747] RIP: 0023:0xf7f47549 [ 315.846949][ T6747] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 315.861904][ T6747] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 315.871758][ T6747] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 315.878871][ T6747] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 315.886857][ T6747] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 315.894356][ T6747] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 315.902327][ T6747] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 315.908375][ T6747] 09:36:54 executing program 2: r0 = fsopen(&(0x7f0000000080)='ntfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x3, 0x0, 0x0) 09:36:54 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000, 0x6, &(0x7f0000837000/0x1000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 09:36:54 executing program 3: mount$pvfs2(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x50400, &(0x7f00000000c0)={[{'[-'}]}) r0 = openat$audio1(0xffffffffffffff9c, 0x0, 0x10800, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0}, './file0/file1\x00'}) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$binfmt_script(r1, 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000580)) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, [0x3, 0x6]}) openat$dsp1(0xffffffffffffff9c, 0x0, 0x940, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000002780), 0x2, 0x0) r2 = openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r2) 09:36:54 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 42) 09:36:54 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r0, 0x6, 0x6cc, 0x0, &(0x7f0000000480)) 09:36:54 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000, 0x6, &(0x7f0000837000/0x1000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) [ 316.090190][ T6767] FAULT_INJECTION: forcing a failure. [ 316.090190][ T6767] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 316.111256][ T6767] CPU: 1 PID: 6767 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 09:36:54 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f0000001200)='./binderfs/binder1\x00', 0x0, 0x0) [ 316.120754][ T6767] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 316.129213][ T6767] Call Trace: [ 316.132031][ T6767] [ 316.139123][ T6767] dump_stack_lvl+0xd1/0x138 [ 316.144830][ T6767] should_fail_ex.cold+0x5/0xa [ 316.147784][ T6767] prepare_alloc_pages+0x178/0x570 [ 316.151794][ T6767] __alloc_pages+0x149/0x5b0 09:36:54 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000, 0x6, &(0x7f0000837000/0x1000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) [ 316.155715][ T6767] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 316.162767][ T6767] ? __lock_acquire+0x166e/0x56d0 [ 316.171489][ T6767] ? __lock_acquire+0xbc3/0x56d0 [ 316.175482][ T6767] __folio_alloc+0x16/0x40 [ 316.178669][ T6767] vma_alloc_folio+0x155/0x870 [ 316.181861][ T6767] ? policy_nodemask+0x1c0/0x1c0 [ 316.185038][ T6767] ? lock_chain_count+0x20/0x20 [ 316.187944][ T6767] __handle_mm_fault+0x1822/0x3c90 [ 316.192004][ T6767] ? vm_iomap_memory+0x190/0x190 [ 316.196835][ T6767] handle_mm_fault+0x1b6/0x850 [ 316.201290][ T6767] __get_user_pages+0x4f8/0xfc0 [ 316.205516][ T6767] ? follow_page_mask+0x10a0/0x10a0 [ 316.210348][ T6767] populate_vma_page_range+0x241/0x320 [ 316.215099][ T6767] __mm_populate+0x105/0x3b0 [ 316.219234][ T6767] ? faultin_vma_page_range+0x300/0x300 [ 316.226087][ T6767] ? up_write+0x1b0/0x520 [ 316.230575][ T6767] do_mlock+0x370/0x6d0 [ 316.234881][ T6767] ? folio_memcg+0x320/0x320 [ 316.240133][ T6767] ? fput+0x2f/0x1a0 [ 316.243416][ T6767] __ia32_sys_mlock+0x57/0x80 [ 316.247511][ T6767] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 316.254009][ T6767] __do_fast_syscall_32+0x65/0xf0 [ 316.259097][ T6767] do_fast_syscall_32+0x33/0x70 [ 316.263883][ T6767] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 316.269655][ T6767] RIP: 0023:0xf7f47549 [ 316.273176][ T6767] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 316.292852][ T6767] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 316.301321][ T6767] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 316.309038][ T6767] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 316.316245][ T6767] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 316.323414][ T6767] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 316.330697][ T6767] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 316.339933][ T6767] 09:36:54 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 43) 09:36:54 executing program 2: r0 = io_uring_setup(0x3e7a, &(0x7f0000003280)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) [ 316.460124][ T6785] FAULT_INJECTION: forcing a failure. [ 316.460124][ T6785] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 316.470722][ T6785] CPU: 1 PID: 6785 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 316.477540][ T6785] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 316.485900][ T6785] Call Trace: [ 316.489176][ T6785] [ 316.491931][ T6785] dump_stack_lvl+0xd1/0x138 [ 316.496552][ T6785] should_fail_ex.cold+0x5/0xa [ 316.500510][ T6785] prepare_alloc_pages+0x178/0x570 [ 316.506560][ T6785] __alloc_pages+0x149/0x5b0 [ 316.511007][ T6785] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 316.516818][ T6785] ? __lock_acquire+0x166e/0x56d0 [ 316.521558][ T6785] ? __lock_acquire+0xbc3/0x56d0 [ 316.526291][ T6785] __folio_alloc+0x16/0x40 [ 316.530162][ T6785] vma_alloc_folio+0x155/0x870 [ 316.535101][ T6785] ? policy_nodemask+0x1c0/0x1c0 [ 316.538807][ T6785] ? lock_chain_count+0x20/0x20 [ 316.542729][ T6785] __handle_mm_fault+0x1822/0x3c90 [ 316.547105][ T6785] ? vm_iomap_memory+0x190/0x190 [ 316.550974][ T6785] handle_mm_fault+0x1b6/0x850 [ 316.555363][ T6785] __get_user_pages+0x4f8/0xfc0 [ 316.559514][ T6785] ? follow_page_mask+0x10a0/0x10a0 [ 316.564035][ T6785] populate_vma_page_range+0x241/0x320 [ 316.571591][ T6785] __mm_populate+0x105/0x3b0 [ 316.575869][ T6785] ? faultin_vma_page_range+0x300/0x300 [ 316.580565][ T6785] ? up_write+0x1b0/0x520 [ 316.583629][ T6785] do_mlock+0x370/0x6d0 [ 316.586549][ T6785] ? folio_memcg+0x320/0x320 [ 316.589543][ T6785] ? fput+0x2f/0x1a0 [ 316.592491][ T6785] __ia32_sys_mlock+0x57/0x80 [ 316.595946][ T6785] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 316.600358][ T6785] __do_fast_syscall_32+0x65/0xf0 [ 316.603621][ T6785] do_fast_syscall_32+0x33/0x70 [ 316.606803][ T6785] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 316.611253][ T6785] RIP: 0023:0xf7f47549 [ 316.613907][ T6785] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 316.634725][ T6785] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 316.642702][ T6785] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 316.649434][ T6785] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 316.655933][ T6785] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 316.662259][ T6785] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 316.668884][ T6785] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 316.673943][ T6785] 09:36:54 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x7) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 09:36:54 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x7) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x7) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) gettid() (async) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) 09:36:54 executing program 3: mount$pvfs2(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x50400, &(0x7f00000000c0)={[{'[-'}]}) r0 = openat$audio1(0xffffffffffffff9c, 0x0, 0x10800, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0}, './file0/file1\x00'}) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$binfmt_script(r1, 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000580)) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, [0x3, 0x6]}) openat$dsp1(0xffffffffffffff9c, 0x0, 0x940, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000002780), 0x2, 0x0) r2 = openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r2) 09:36:55 executing program 2: syz_open_procfs$userns(0x0, &(0x7f0000001500)) 09:36:55 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x7) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x7) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) gettid() (async) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) 09:36:55 executing program 3: openat$fb0(0xffffffffffffff9c, &(0x7f0000003800), 0x4340, 0x0) 09:36:55 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000003240), 0x0, 0x0) r1 = io_uring_setup(0x3e7a, &(0x7f0000003280)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000003300)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) 09:36:55 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 44) 09:36:55 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000074000/0x4000)=nil, 0x4000, 0x6, 0x4000010, r1, 0xe02c1000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fdatasync(r1) mmap$fb(&(0x7f00001c0000/0x2000)=nil, 0x2000, 0x2000000, 0x13, r1, 0x52000) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 09:36:55 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) 09:36:55 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000004340), 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, 0x0, 0x0, 0x0) 09:36:55 executing program 2: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/clear_refs\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='4\x00', 0x2) 09:36:55 executing program 3: r0 = fsopen(&(0x7f0000000080)='ntfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) 09:36:55 executing program 2: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001dc0)='ns/time_for_children\x00') ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, 0x0) [ 316.841138][ T6814] FAULT_INJECTION: forcing a failure. [ 316.841138][ T6814] name fail_page_alloc, interval 1, probability 0, space 0, times 0 09:36:55 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000022c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000000c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r1, r0}}, 0x18) [ 316.864290][ T6814] CPU: 0 PID: 6814 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 316.871774][ T6814] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 316.880248][ T6814] Call Trace: [ 316.883008][ T6814] [ 316.885528][ T6814] dump_stack_lvl+0xd1/0x138 [ 316.889349][ T6814] should_fail_ex.cold+0x5/0xa [ 316.893750][ T6814] prepare_alloc_pages+0x178/0x570 [ 316.898756][ T6814] __alloc_pages+0x149/0x5b0 [ 316.902959][ T6814] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 316.909143][ T6814] ? __lock_acquire+0x166e/0x56d0 [ 316.913980][ T6814] ? __lock_acquire+0xbc3/0x56d0 [ 316.917728][ T6814] __folio_alloc+0x16/0x40 [ 316.921528][ T6814] vma_alloc_folio+0x155/0x870 [ 316.925488][ T6814] ? policy_nodemask+0x1c0/0x1c0 [ 316.929366][ T6814] ? lock_chain_count+0x20/0x20 [ 316.955684][ T6814] __handle_mm_fault+0x1822/0x3c90 [ 316.959589][ T6814] ? vm_iomap_memory+0x190/0x190 [ 316.963260][ T6814] handle_mm_fault+0x1b6/0x850 [ 316.966875][ T6814] __get_user_pages+0x4f8/0xfc0 [ 316.971184][ T6814] ? follow_page_mask+0x10a0/0x10a0 [ 316.975791][ T6814] populate_vma_page_range+0x241/0x320 [ 316.979703][ T6814] __mm_populate+0x105/0x3b0 [ 316.983227][ T6814] ? faultin_vma_page_range+0x300/0x300 [ 316.987407][ T6814] ? up_write+0x1b0/0x520 [ 316.990852][ T6814] do_mlock+0x370/0x6d0 [ 316.994188][ T6814] ? folio_memcg+0x320/0x320 [ 316.997483][ T6814] ? fput+0x2f/0x1a0 [ 317.000429][ T6814] __ia32_sys_mlock+0x57/0x80 [ 317.004016][ T6814] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 317.009058][ T6814] __do_fast_syscall_32+0x65/0xf0 [ 317.012568][ T6814] do_fast_syscall_32+0x33/0x70 [ 317.016746][ T6814] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 317.021866][ T6814] RIP: 0023:0xf7f47549 [ 317.025396][ T6814] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 317.040028][ T6814] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 317.045670][ T6814] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 317.051581][ T6814] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 317.056786][ T6814] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 317.062113][ T6814] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 317.069190][ T6814] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 317.074858][ T6814] 09:36:55 executing program 2: syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000003080)) 09:36:55 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 45) 09:36:55 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000074000/0x4000)=nil, 0x4000, 0x6, 0x4000010, r1, 0xe02c1000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fdatasync(r1) (async) mmap$fb(&(0x7f00001c0000/0x2000)=nil, 0x2000, 0x2000000, 0x13, r1, 0x52000) (async) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 09:36:55 executing program 3: r0 = epoll_create1(0x0) write$RDMA_USER_CM_CMD_QUERY(r0, 0x0, 0x0) 09:36:55 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001080), 0x2, 0x0) read$FUSE(r0, &(0x7f0000001100)={0x2020}, 0x2020) 09:36:55 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x3}) [ 317.241194][ T6833] FAULT_INJECTION: forcing a failure. [ 317.241194][ T6833] name fail_page_alloc, interval 1, probability 0, space 0, times 0 09:36:55 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup(r0) [ 317.273204][ T6833] CPU: 1 PID: 6833 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 317.280801][ T6833] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 317.287504][ T6833] Call Trace: [ 317.290524][ T6833] [ 317.292815][ T6833] dump_stack_lvl+0xd1/0x138 09:36:55 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) [ 317.296249][ T6833] should_fail_ex.cold+0x5/0xa [ 317.300626][ T6833] prepare_alloc_pages+0x178/0x570 [ 317.305006][ T6833] __alloc_pages+0x149/0x5b0 [ 317.308502][ T6833] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 09:36:55 executing program 3: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0x80086601, 0x0) [ 317.314291][ T6833] ? __lock_acquire+0x166e/0x56d0 [ 317.319402][ T6833] ? __lock_acquire+0xbc3/0x56d0 [ 317.322544][ T6833] __folio_alloc+0x16/0x40 [ 317.325385][ T6833] vma_alloc_folio+0x155/0x870 [ 317.328165][ T6833] ? policy_nodemask+0x1c0/0x1c0 [ 317.334965][ T6833] ? lock_chain_count+0x20/0x20 [ 317.337926][ T6833] __handle_mm_fault+0x1822/0x3c90 [ 317.341031][ T6833] ? vm_iomap_memory+0x190/0x190 [ 317.344181][ T6833] handle_mm_fault+0x1b6/0x850 [ 317.347488][ T6833] __get_user_pages+0x4f8/0xfc0 [ 317.350571][ T6833] ? follow_page_mask+0x10a0/0x10a0 [ 317.354036][ T6833] populate_vma_page_range+0x241/0x320 [ 317.358962][ T6833] __mm_populate+0x105/0x3b0 [ 317.362815][ T6833] ? faultin_vma_page_range+0x300/0x300 [ 317.367857][ T6833] ? up_write+0x1b0/0x520 [ 317.371610][ T6833] do_mlock+0x370/0x6d0 [ 317.376153][ T6833] ? folio_memcg+0x320/0x320 [ 317.378985][ T6833] ? fput+0x2f/0x1a0 [ 317.381634][ T6833] __ia32_sys_mlock+0x57/0x80 [ 317.385366][ T6833] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 317.390057][ T6833] __do_fast_syscall_32+0x65/0xf0 [ 317.394237][ T6833] do_fast_syscall_32+0x33/0x70 [ 317.398592][ T6833] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 317.403799][ T6833] RIP: 0023:0xf7f47549 [ 317.407553][ T6833] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 317.422575][ T6833] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 317.429731][ T6833] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 317.435296][ T6833] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 317.441224][ T6833] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 317.446763][ T6833] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 317.451627][ T6833] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 317.456474][ T6833] 09:36:55 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 46) 09:36:55 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) 09:36:55 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) r0 = gettid() (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000074000/0x4000)=nil, 0x4000, 0x6, 0x4000010, r1, 0xe02c1000) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) (rerun: 32) fdatasync(r1) mmap$fb(&(0x7f00001c0000/0x2000)=nil, 0x2000, 0x2000000, 0x13, r1, 0x52000) (async) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 09:36:55 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000004340), 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000000)='@\x00', &(0x7f0000000040)="7f", 0x1) 09:36:55 executing program 2: openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card1/oss_mixer\x00', 0x4000, 0x0) [ 317.560191][ T6852] FAULT_INJECTION: forcing a failure. 09:36:55 executing program 2: io_uring_setup(0x1be3, &(0x7f0000000000)={0x0, 0x0, 0x1}) [ 317.560191][ T6852] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 317.573230][ T6852] CPU: 3 PID: 6852 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 317.579890][ T6852] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 317.585741][ T6852] Call Trace: [ 317.587849][ T6852] [ 317.589764][ T6852] dump_stack_lvl+0xd1/0x138 09:36:55 executing program 3: openat$audio1(0xffffffffffffff9c, &(0x7f0000000300), 0x10800, 0x0) [ 317.592820][ T6852] should_fail_ex.cold+0x5/0xa [ 317.596134][ T6852] prepare_alloc_pages+0x178/0x570 [ 317.599458][ T6852] __alloc_pages+0x149/0x5b0 [ 317.602556][ T6852] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 317.607120][ T6852] ? __lock_acquire+0x166e/0x56d0 09:36:55 executing program 2: r0 = io_uring_setup(0x3e7a, &(0x7f0000003280)) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001280)={0x1, 0x0, 0x0, &(0x7f0000001200)=[{0x0}], 0x0}, 0x20) [ 317.610215][ T6852] ? __lock_acquire+0xbc3/0x56d0 [ 317.614180][ T6852] __folio_alloc+0x16/0x40 [ 317.617413][ T6852] vma_alloc_folio+0x155/0x870 [ 317.624045][ T6852] ? policy_nodemask+0x1c0/0x1c0 [ 317.628540][ T6852] ? lock_chain_count+0x20/0x20 [ 317.633121][ T6852] __handle_mm_fault+0x1822/0x3c90 [ 317.636624][ T6852] ? vm_iomap_memory+0x190/0x190 [ 317.639774][ T6852] handle_mm_fault+0x1b6/0x850 [ 317.643493][ T6852] __get_user_pages+0x4f8/0xfc0 [ 317.647042][ T6852] ? follow_page_mask+0x10a0/0x10a0 [ 317.650601][ T6852] populate_vma_page_range+0x241/0x320 [ 317.654571][ T6852] __mm_populate+0x105/0x3b0 [ 317.657872][ T6852] ? faultin_vma_page_range+0x300/0x300 [ 317.661513][ T6852] ? up_write+0x1b0/0x520 [ 317.664890][ T6852] do_mlock+0x370/0x6d0 [ 317.667725][ T6852] ? folio_memcg+0x320/0x320 [ 317.671122][ T6852] ? fput+0x2f/0x1a0 [ 317.674128][ T6852] __ia32_sys_mlock+0x57/0x80 [ 317.677422][ T6852] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 317.682162][ T6852] __do_fast_syscall_32+0x65/0xf0 [ 317.686293][ T6852] do_fast_syscall_32+0x33/0x70 [ 317.689950][ T6852] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 317.694186][ T6852] RIP: 0023:0xf7f47549 [ 317.696859][ T6852] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 317.711437][ T6852] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 317.717484][ T6852] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 317.723114][ T6852] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 317.729023][ T6852] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 317.734595][ T6852] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 317.740130][ T6852] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 317.745564][ T6852] 09:36:56 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 47) 09:36:56 executing program 3: openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x145280, 0x0) 09:36:56 executing program 2: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000003240), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 09:36:56 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f0000894000/0x3000)=nil, 0x3000, 0xa) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 09:36:56 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000020c0)='ns/pid_for_children\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') 09:36:56 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f0000894000/0x3000)=nil, 0x3000, 0xa) (async, rerun: 32) r0 = gettid() (rerun: 32) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 09:36:56 executing program 2: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000240), 0x304c1, 0x0) 09:36:56 executing program 3: r0 = fsopen(&(0x7f0000000000)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='\x00', &(0x7f0000000100)='mqueue\x00', 0x0) [ 317.917299][ T6877] FAULT_INJECTION: forcing a failure. [ 317.917299][ T6877] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 317.928344][ T6877] CPU: 1 PID: 6877 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 317.934111][ T6877] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 317.939579][ T6877] Call Trace: [ 317.941813][ T6877] [ 317.943728][ T6877] dump_stack_lvl+0xd1/0x138 [ 317.946595][ T6877] should_fail_ex.cold+0x5/0xa [ 317.949328][ T6877] prepare_alloc_pages+0x178/0x570 [ 317.952762][ T6877] __alloc_pages+0x149/0x5b0 [ 317.956695][ T6877] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 317.961779][ T6877] ? __lock_acquire+0x166e/0x56d0 [ 317.965407][ T6877] ? __lock_acquire+0xbc3/0x56d0 [ 317.970030][ T6877] __folio_alloc+0x16/0x40 [ 317.974310][ T6877] vma_alloc_folio+0x155/0x870 [ 317.979168][ T6877] ? policy_nodemask+0x1c0/0x1c0 [ 317.982921][ T6877] ? lock_chain_count+0x20/0x20 [ 317.986404][ T6877] __handle_mm_fault+0x1822/0x3c90 [ 317.989542][ T6877] ? vm_iomap_memory+0x190/0x190 [ 317.993369][ T6877] handle_mm_fault+0x1b6/0x850 [ 317.997053][ T6877] __get_user_pages+0x4f8/0xfc0 [ 318.000222][ T6877] ? follow_page_mask+0x10a0/0x10a0 [ 318.003260][ T6877] populate_vma_page_range+0x241/0x320 [ 318.006880][ T6877] __mm_populate+0x105/0x3b0 [ 318.010238][ T6877] ? faultin_vma_page_range+0x300/0x300 [ 318.014333][ T6877] ? up_write+0x1b0/0x520 [ 318.017120][ T6877] do_mlock+0x370/0x6d0 [ 318.019717][ T6877] ? folio_memcg+0x320/0x320 [ 318.023725][ T6877] ? fput+0x2f/0x1a0 [ 318.027199][ T6877] __ia32_sys_mlock+0x57/0x80 [ 318.030475][ T6877] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 318.035084][ T6877] __do_fast_syscall_32+0x65/0xf0 [ 318.038429][ T6877] do_fast_syscall_32+0x33/0x70 [ 318.041608][ T6877] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 318.046062][ T6877] RIP: 0023:0xf7f47549 [ 318.048384][ T6877] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 318.060741][ T6877] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 318.066292][ T6877] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 318.071518][ T6877] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 318.076657][ T6877] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 318.081485][ T6877] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 318.087931][ T6877] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 318.092964][ T6877] 09:36:56 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f0000894000/0x3000)=nil, 0x3000, 0xa) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) madvise(&(0x7f0000894000/0x3000)=nil, 0x3000, 0xa) (async) gettid() (async) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) 09:36:56 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000004ac0), 0x2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, 0x0) 09:36:56 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 48) 09:36:56 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) 09:36:56 executing program 2: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000021c0), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0x401c5820, 0x0) [ 318.232602][ T6891] FAULT_INJECTION: forcing a failure. 09:36:56 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000021c0), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0x80086601, 0x0) [ 318.232602][ T6891] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 318.264199][ T6891] CPU: 3 PID: 6891 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 318.273336][ T6891] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 318.279605][ T6891] Call Trace: [ 318.281969][ T6891] [ 318.283885][ T6891] dump_stack_lvl+0xd1/0x138 [ 318.287561][ T6891] should_fail_ex.cold+0x5/0xa [ 318.290891][ T6891] prepare_alloc_pages+0x178/0x570 [ 318.295558][ T6891] __alloc_pages+0x149/0x5b0 [ 318.300085][ T6891] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 318.306172][ T6891] ? __lock_acquire+0x166e/0x56d0 09:36:56 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000020c0)='ns/pid_for_children\x00') [ 318.312157][ T6891] ? __lock_acquire+0xbc3/0x56d0 [ 318.317248][ T6891] __folio_alloc+0x16/0x40 09:36:56 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xa) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000), 0x0, 0x0) madvise(&(0x7f000019b000/0x4000)=nil, 0x4000, 0xb) [ 318.320964][ T6891] vma_alloc_folio+0x155/0x870 [ 318.324715][ T6891] ? policy_nodemask+0x1c0/0x1c0 [ 318.329429][ T6891] ? lock_chain_count+0x20/0x20 [ 318.332920][ T6891] __handle_mm_fault+0x1822/0x3c90 [ 318.337785][ T6891] ? vm_iomap_memory+0x190/0x190 [ 318.341860][ T6891] handle_mm_fault+0x1b6/0x850 [ 318.346647][ T6891] __get_user_pages+0x4f8/0xfc0 [ 318.350610][ T6891] ? follow_page_mask+0x10a0/0x10a0 [ 318.355535][ T6891] populate_vma_page_range+0x241/0x320 [ 318.360324][ T6891] __mm_populate+0x105/0x3b0 [ 318.364134][ T6891] ? faultin_vma_page_range+0x300/0x300 [ 318.368472][ T6891] ? up_write+0x1b0/0x520 [ 318.372170][ T6891] do_mlock+0x370/0x6d0 [ 318.376037][ T6891] ? folio_memcg+0x320/0x320 [ 318.379500][ T6891] ? fput+0x2f/0x1a0 [ 318.382793][ T6891] __ia32_sys_mlock+0x57/0x80 [ 318.386749][ T6891] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 318.391613][ T6891] __do_fast_syscall_32+0x65/0xf0 [ 318.394847][ T6891] do_fast_syscall_32+0x33/0x70 [ 318.398216][ T6891] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 318.402394][ T6891] RIP: 0023:0xf7f47549 [ 318.405249][ T6891] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 318.420418][ T6891] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 318.428819][ T6891] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 318.435801][ T6891] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 318.442170][ T6891] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 318.449344][ T6891] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 318.456141][ T6891] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 318.462010][ T6891] 09:36:56 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000001700)=[{r0}, {}, {r0, 0x124}], 0x3, 0xeb2) 09:36:56 executing program 2: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 09:36:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x2) 09:36:56 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 49) 09:36:56 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async, rerun: 32) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async, rerun: 32) r0 = gettid() madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xa) (async) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000), 0x0, 0x0) (async) madvise(&(0x7f000019b000/0x4000)=nil, 0x4000, 0xb) 09:36:56 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x541b, 0x0) 09:36:56 executing program 3: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x495d01, 0x0) 09:36:56 executing program 3: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000d40)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) 09:36:56 executing program 2: io_uring_setup(0x5be, &(0x7f0000005f80)={0x0, 0x0, 0x200}) 09:36:56 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xa) (async) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000), 0x0, 0x0) (async) madvise(&(0x7f000019b000/0x4000)=nil, 0x4000, 0xb) [ 318.562762][ T6920] FAULT_INJECTION: forcing a failure. [ 318.562762][ T6920] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 318.580687][ T6920] CPU: 1 PID: 6920 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 09:36:56 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$dupfd(r0, 0x406, r0) [ 318.588682][ T6920] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 318.597033][ T6920] Call Trace: [ 318.599573][ T6920] [ 318.601739][ T6920] dump_stack_lvl+0xd1/0x138 [ 318.604787][ T6920] should_fail_ex.cold+0x5/0xa [ 318.608107][ T6920] prepare_alloc_pages+0x178/0x570 [ 318.611083][ T6920] __alloc_pages+0x149/0x5b0 [ 318.613878][ T6920] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 318.618137][ T6920] ? __lock_acquire+0x166e/0x56d0 [ 318.621469][ T6920] ? __lock_acquire+0xbc3/0x56d0 [ 318.624497][ T6920] __folio_alloc+0x16/0x40 [ 318.627631][ T6920] vma_alloc_folio+0x155/0x870 [ 318.631335][ T6920] ? policy_nodemask+0x1c0/0x1c0 [ 318.634313][ T6920] ? lock_chain_count+0x20/0x20 [ 318.637277][ T6920] __handle_mm_fault+0x1822/0x3c90 [ 318.641037][ T6920] ? vm_iomap_memory+0x190/0x190 [ 318.643953][ T6920] handle_mm_fault+0x1b6/0x850 [ 318.647668][ T6920] __get_user_pages+0x4f8/0xfc0 [ 318.651437][ T6920] ? follow_page_mask+0x10a0/0x10a0 [ 318.655796][ T6920] populate_vma_page_range+0x241/0x320 [ 318.659917][ T6920] __mm_populate+0x105/0x3b0 [ 318.663612][ T6920] ? faultin_vma_page_range+0x300/0x300 [ 318.667684][ T6920] ? up_write+0x1b0/0x520 [ 318.671050][ T6920] do_mlock+0x370/0x6d0 [ 318.674211][ T6920] ? folio_memcg+0x320/0x320 [ 318.677260][ T6920] ? fput+0x2f/0x1a0 [ 318.680288][ T6920] __ia32_sys_mlock+0x57/0x80 [ 318.683713][ T6920] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 318.688895][ T6920] __do_fast_syscall_32+0x65/0xf0 [ 318.693137][ T6920] do_fast_syscall_32+0x33/0x70 [ 318.697226][ T6920] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 318.702405][ T6920] RIP: 0023:0xf7f47549 [ 318.706441][ T6920] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 318.720846][ T6920] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 318.727947][ T6920] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 318.734660][ T6920] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 318.741135][ T6920] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 318.746935][ T6920] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 318.753123][ T6920] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 318.758002][ T6920] 09:36:57 executing program 3: openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/oss_mixer\x00', 0x10000, 0x0) 09:36:57 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000004340), 0x0, 0x0) lseek(r0, 0x0, 0x0) 09:36:57 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 50) 09:36:57 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x40, 0x1) ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, &(0x7f00000000c0)) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@gettclass={0x24, 0x2a, 0x100, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xc, 0xc}, {0x10, 0x2}, {0xfff1, 0x3}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x4000) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x7f) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = gettid() process_vm_writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/4, 0x4}], 0x1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/34, 0x22}, {&(0x7f0000000100)=""/64, 0x40}], 0x2, 0x0) 09:36:57 executing program 2: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x84000, 0x0) 09:36:57 executing program 3: openat$cdrom(0xffffffffffffff9c, &(0x7f0000000600), 0x800, 0x0) [ 318.856073][ T6937] FAULT_INJECTION: forcing a failure. 09:36:57 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x40, 0x1) ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, &(0x7f00000000c0)) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@gettclass={0x24, 0x2a, 0x100, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xc, 0xc}, {0x10, 0x2}, {0xfff1, 0x3}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x4000) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x7f) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = gettid() process_vm_writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/4, 0x4}], 0x1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/34, 0x22}, {&(0x7f0000000100)=""/64, 0x40}], 0x2, 0x0) syz_open_dev$vcsa(&(0x7f0000000040), 0x40, 0x1) (async) ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, &(0x7f00000000c0)) (async) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@gettclass={0x24, 0x2a, 0x100, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xc, 0xc}, {0x10, 0x2}, {0xfff1, 0x3}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x4000) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x7f) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) gettid() (async) process_vm_writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/4, 0x4}], 0x1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/34, 0x22}, {&(0x7f0000000100)=""/64, 0x40}], 0x2, 0x0) (async) [ 318.856073][ T6937] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 318.875168][ T6937] CPU: 1 PID: 6937 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 318.883063][ T6937] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 318.889486][ T6937] Call Trace: [ 318.891908][ T6937] [ 318.894407][ T6937] dump_stack_lvl+0xd1/0x138 09:36:57 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x40, 0x1) ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, &(0x7f00000000c0)) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@gettclass={0x24, 0x2a, 0x100, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xc, 0xc}, {0x10, 0x2}, {0xfff1, 0x3}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x4000) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x7f) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = gettid() process_vm_writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/4, 0x4}], 0x1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/34, 0x22}, {&(0x7f0000000100)=""/64, 0x40}], 0x2, 0x0) syz_open_dev$vcsa(&(0x7f0000000040), 0x40, 0x1) (async) ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, &(0x7f00000000c0)) (async) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@gettclass={0x24, 0x2a, 0x100, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xc, 0xc}, {0x10, 0x2}, {0xfff1, 0x3}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x4000) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x7f) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) gettid() (async) process_vm_writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/4, 0x4}], 0x1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/34, 0x22}, {&(0x7f0000000100)=""/64, 0x40}], 0x2, 0x0) (async) [ 318.897829][ T6937] should_fail_ex.cold+0x5/0xa [ 318.901767][ T6937] prepare_alloc_pages+0x178/0x570 09:36:57 executing program 2: openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card3/oss_mixer\x00', 0x0, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) [ 318.905870][ T6937] __alloc_pages+0x149/0x5b0 [ 318.909818][ T6937] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 318.915486][ T6937] ? __lock_acquire+0x166e/0x56d0 [ 318.919375][ T6937] ? __lock_acquire+0xbc3/0x56d0 [ 318.922995][ T6937] __folio_alloc+0x16/0x40 09:36:57 executing program 3: r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup2(r0, r1) [ 318.926473][ T6937] vma_alloc_folio+0x155/0x870 [ 318.931202][ T6937] ? policy_nodemask+0x1c0/0x1c0 [ 318.935319][ T6937] ? lock_chain_count+0x20/0x20 [ 318.939334][ T6937] __handle_mm_fault+0x1822/0x3c90 [ 318.946479][ T6937] ? vm_iomap_memory+0x190/0x190 [ 318.949726][ T6937] handle_mm_fault+0x1b6/0x850 [ 318.952782][ T6937] __get_user_pages+0x4f8/0xfc0 [ 318.956452][ T6937] ? follow_page_mask+0x10a0/0x10a0 [ 318.960673][ T6937] populate_vma_page_range+0x241/0x320 [ 318.964391][ T6937] __mm_populate+0x105/0x3b0 [ 318.967423][ T6937] ? faultin_vma_page_range+0x300/0x300 [ 318.971073][ T6937] ? up_write+0x1b0/0x520 [ 318.973819][ T6937] do_mlock+0x370/0x6d0 [ 318.976390][ T6937] ? folio_memcg+0x320/0x320 [ 318.980252][ T6937] ? fput+0x2f/0x1a0 [ 318.984725][ T6937] __ia32_sys_mlock+0x57/0x80 [ 318.995469][ T6937] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 319.000068][ T6937] __do_fast_syscall_32+0x65/0xf0 [ 319.004149][ T6937] do_fast_syscall_32+0x33/0x70 [ 319.007981][ T6937] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 319.013087][ T6937] RIP: 0023:0xf7f47549 [ 319.016366][ T6937] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 319.030473][ T6937] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 319.037039][ T6937] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 319.043213][ T6937] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 319.048530][ T6937] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 319.054685][ T6937] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 319.060429][ T6937] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 319.066158][ T6937] 09:36:57 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 51) 09:36:57 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000012c0), 0x2, 0x0) r1 = syz_open_procfs$userns(0x0, &(0x7f0000001500)) poll(&(0x7f0000001580)=[{r1, 0x2051}, {r0}, {}], 0x3, 0x7) 09:36:57 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000000)=')[\x00', 0x0, 0xffffffffffffffff) 09:36:57 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() tkill(r0, 0x6) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 09:36:57 executing program 3: mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000040), 0x20) 09:36:57 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004440), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="30000000040000000000000000000000060000000000000058e1552e26ffffff08"], 0x30) [ 319.158382][ T6970] FAULT_INJECTION: forcing a failure. [ 319.158382][ T6970] name fail_page_alloc, interval 1, probability 0, space 0, times 0 09:36:57 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000004340), 0x0, 0x0) read$FUSE(r0, &(0x7f0000006500)={0x2020}, 0x2020) [ 319.182892][ T6970] CPU: 1 PID: 6970 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 319.191561][ T6970] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 319.199053][ T6970] Call Trace: [ 319.202956][ T6970] [ 319.202970][ T6970] dump_stack_lvl+0xd1/0x138 [ 319.203009][ T6970] should_fail_ex.cold+0x5/0xa [ 319.203036][ T6970] prepare_alloc_pages+0x178/0x570 [ 319.203073][ T6970] __alloc_pages+0x149/0x5b0 09:36:57 executing program 2: openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x6000, 0x0) [ 319.203102][ T6970] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 319.203138][ T6970] ? __lock_acquire+0x166e/0x56d0 [ 319.203170][ T6970] ? __lock_acquire+0xbc3/0x56d0 [ 319.203204][ T6970] __folio_alloc+0x16/0x40 [ 319.203237][ T6970] vma_alloc_folio+0x155/0x870 [ 319.203293][ T6970] ? policy_nodemask+0x1c0/0x1c0 [ 319.203323][ T6970] ? lock_chain_count+0x20/0x20 [ 319.254060][ T6970] __handle_mm_fault+0x1822/0x3c90 [ 319.254117][ T6970] ? vm_iomap_memory+0x190/0x190 [ 319.254178][ T6970] handle_mm_fault+0x1b6/0x850 09:36:57 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 52) [ 319.254220][ T6970] __get_user_pages+0x4f8/0xfc0 [ 319.254260][ T6970] ? follow_page_mask+0x10a0/0x10a0 [ 319.254306][ T6970] populate_vma_page_range+0x241/0x320 [ 319.254341][ T6970] __mm_populate+0x105/0x3b0 [ 319.254372][ T6970] ? faultin_vma_page_range+0x300/0x300 [ 319.254405][ T6970] ? up_write+0x1b0/0x520 [ 319.254449][ T6970] do_mlock+0x370/0x6d0 [ 319.254489][ T6970] ? folio_memcg+0x320/0x320 [ 319.254526][ T6970] ? fput+0x2f/0x1a0 [ 319.254568][ T6970] __ia32_sys_mlock+0x57/0x80 [ 319.254604][ T6970] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 09:36:57 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 53) [ 319.254633][ T6970] __do_fast_syscall_32+0x65/0xf0 [ 319.254671][ T6970] do_fast_syscall_32+0x33/0x70 09:36:57 executing program 2: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000021c0), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0x4020940d, 0x0) [ 319.254708][ T6970] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 319.254740][ T6970] RIP: 0023:0xf7f47549 [ 319.254761][ T6970] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 319.254786][ T6970] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 319.254812][ T6970] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 319.254829][ T6970] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 319.254845][ T6970] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 319.254860][ T6970] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 319.254876][ T6970] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 319.254932][ T6970] [ 319.330141][ T6980] FAULT_INJECTION: forcing a failure. [ 319.330141][ T6980] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 319.330330][ T6980] CPU: 1 PID: 6980 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 319.330362][ T6980] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 319.330412][ T6980] Call Trace: [ 319.330422][ T6980] [ 319.330433][ T6980] dump_stack_lvl+0xd1/0x138 [ 319.330475][ T6980] should_fail_ex.cold+0x5/0xa [ 319.330506][ T6980] prepare_alloc_pages+0x178/0x570 [ 319.330551][ T6980] __alloc_pages+0x149/0x5b0 [ 319.330585][ T6980] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 319.330620][ T6980] ? __lock_acquire+0x166e/0x56d0 [ 319.330660][ T6980] ? __lock_acquire+0xbc3/0x56d0 [ 319.330696][ T6980] __folio_alloc+0x16/0x40 [ 319.330732][ T6980] vma_alloc_folio+0x155/0x870 [ 319.330767][ T6980] ? policy_nodemask+0x1c0/0x1c0 [ 319.330800][ T6980] ? lock_chain_count+0x20/0x20 [ 319.330836][ T6980] __handle_mm_fault+0x1822/0x3c90 [ 319.330884][ T6980] ? vm_iomap_memory+0x190/0x190 [ 319.330952][ T6980] handle_mm_fault+0x1b6/0x850 [ 319.331018][ T6980] __get_user_pages+0x4f8/0xfc0 [ 319.331064][ T6980] ? follow_page_mask+0x10a0/0x10a0 [ 319.331118][ T6980] populate_vma_page_range+0x241/0x320 [ 319.331158][ T6980] __mm_populate+0x105/0x3b0 [ 319.331195][ T6980] ? faultin_vma_page_range+0x300/0x300 [ 319.331234][ T6980] ? up_write+0x1b0/0x520 [ 319.331279][ T6980] do_mlock+0x370/0x6d0 [ 319.331325][ T6980] ? folio_memcg+0x320/0x320 [ 319.331367][ T6980] ? fput+0x2f/0x1a0 [ 319.331418][ T6980] __ia32_sys_mlock+0x57/0x80 [ 319.331457][ T6980] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 319.331491][ T6980] __do_fast_syscall_32+0x65/0xf0 [ 319.331534][ T6980] do_fast_syscall_32+0x33/0x70 [ 319.331575][ T6980] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 319.331612][ T6980] RIP: 0023:0xf7f47549 [ 319.331655][ T6980] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 319.331683][ T6980] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 319.331713][ T6980] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 319.331733][ T6980] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 319.331751][ T6980] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 319.331769][ T6980] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 319.331787][ T6980] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 319.331825][ T6980] [ 319.436512][ T6984] FAULT_INJECTION: forcing a failure. [ 319.436512][ T6984] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 319.702466][ T6984] CPU: 1 PID: 6984 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 319.709651][ T6984] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 319.718542][ T6984] Call Trace: [ 319.721515][ T6984] [ 319.724242][ T6984] dump_stack_lvl+0xd1/0x138 [ 319.727970][ T6984] should_fail_ex.cold+0x5/0xa [ 319.731797][ T6984] prepare_alloc_pages+0x178/0x570 [ 319.736759][ T6984] __alloc_pages+0x149/0x5b0 [ 319.741626][ T6984] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 319.746995][ T6984] ? __lock_acquire+0x166e/0x56d0 [ 319.750253][ T6984] ? __lock_acquire+0xbc3/0x56d0 [ 319.753489][ T6984] __folio_alloc+0x16/0x40 [ 319.757051][ T6984] vma_alloc_folio+0x155/0x870 [ 319.760239][ T6984] ? policy_nodemask+0x1c0/0x1c0 [ 319.763880][ T6984] ? lock_chain_count+0x20/0x20 [ 319.768122][ T6984] __handle_mm_fault+0x1822/0x3c90 [ 319.772780][ T6984] ? vm_iomap_memory+0x190/0x190 [ 319.781972][ T6984] handle_mm_fault+0x1b6/0x850 [ 319.790498][ T6984] __get_user_pages+0x4f8/0xfc0 [ 319.794441][ T6984] ? follow_page_mask+0x10a0/0x10a0 [ 319.797921][ T6984] populate_vma_page_range+0x241/0x320 [ 319.801443][ T6984] __mm_populate+0x105/0x3b0 [ 319.805748][ T6984] ? faultin_vma_page_range+0x300/0x300 [ 319.811175][ T6984] ? up_write+0x1b0/0x520 [ 319.815194][ T6984] do_mlock+0x370/0x6d0 [ 319.819274][ T6984] ? folio_memcg+0x320/0x320 [ 319.824637][ T6984] ? fput+0x2f/0x1a0 [ 319.827849][ T6984] __ia32_sys_mlock+0x57/0x80 [ 319.831608][ T6984] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 319.837028][ T6984] __do_fast_syscall_32+0x65/0xf0 [ 319.840877][ T6984] do_fast_syscall_32+0x33/0x70 [ 319.844918][ T6984] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 319.850690][ T6984] RIP: 0023:0xf7f47549 [ 319.853207][ T6984] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 319.868080][ T6984] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 319.873467][ T6984] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 319.879977][ T6984] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 319.885949][ T6984] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 319.891320][ T6984] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 319.897316][ T6984] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 319.903386][ T6984] 09:36:58 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() tkill(r0, 0x6) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) gettid() (async) tkill(r0, 0x6) (async) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) 09:36:58 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 54) 09:36:58 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000004340), 0x0, 0x0) read$FUSE(r0, &(0x7f0000006500)={0x2020}, 0x2020) [ 320.169677][ T6986] FAULT_INJECTION: forcing a failure. [ 320.169677][ T6986] name fail_page_alloc, interval 1, probability 0, space 0, times 0 09:36:58 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000003240), 0x40182, 0x0) r1 = io_uring_setup(0x3e7a, &(0x7f0000003280)={0x0, 0x0, 0x0, 0x0, 0x1e0}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000003300)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000006480), 0x4240, 0x0) stat(0x0, &(0x7f0000006640)) openat$uinput(0xffffffffffffff9c, &(0x7f00000066c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000007a00)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) [ 320.184428][ T6986] CPU: 2 PID: 6986 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 320.191656][ T6986] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 320.197329][ T6986] Call Trace: [ 320.199832][ T6986] [ 320.201920][ T6986] dump_stack_lvl+0xd1/0x138 [ 320.206093][ T6986] should_fail_ex.cold+0x5/0xa [ 320.210078][ T6986] prepare_alloc_pages+0x178/0x570 [ 320.214993][ T6986] __alloc_pages+0x149/0x5b0 [ 320.218813][ T6986] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 320.218861][ T6986] ? __lock_acquire+0x166e/0x56d0 [ 320.218908][ T6986] ? __lock_acquire+0xbc3/0x56d0 [ 320.218942][ T6986] __folio_alloc+0x16/0x40 [ 320.218977][ T6986] vma_alloc_folio+0x155/0x870 [ 320.219013][ T6986] ? policy_nodemask+0x1c0/0x1c0 [ 320.219048][ T6986] ? lock_chain_count+0x20/0x20 [ 320.219085][ T6986] __handle_mm_fault+0x1822/0x3c90 [ 320.219139][ T6986] ? vm_iomap_memory+0x190/0x190 [ 320.219209][ T6986] handle_mm_fault+0x1b6/0x850 [ 320.219255][ T6986] __get_user_pages+0x4f8/0xfc0 [ 320.219291][ T6986] ? follow_page_mask+0x10a0/0x10a0 [ 320.219334][ T6986] populate_vma_page_range+0x241/0x320 [ 320.219372][ T6986] __mm_populate+0x105/0x3b0 [ 320.219415][ T6986] ? faultin_vma_page_range+0x300/0x300 [ 320.219455][ T6986] ? up_write+0x1b0/0x520 [ 320.219500][ T6986] do_mlock+0x370/0x6d0 [ 320.219547][ T6986] ? folio_memcg+0x320/0x320 [ 320.219588][ T6986] ? fput+0x2f/0x1a0 [ 320.219654][ T6986] __ia32_sys_mlock+0x57/0x80 [ 320.219695][ T6986] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 320.219730][ T6986] __do_fast_syscall_32+0x65/0xf0 [ 320.219773][ T6986] do_fast_syscall_32+0x33/0x70 [ 320.219814][ T6986] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 320.219850][ T6986] RIP: 0023:0xf7f47549 [ 320.219868][ T6986] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 320.219902][ T6986] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 320.219931][ T6986] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 320.219950][ T6986] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 320.219969][ T6986] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 320.219987][ T6986] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 320.220005][ T6986] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 320.220040][ T6986] 09:36:58 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 55) 09:36:58 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000004340), 0x0, 0x0) read$FUSE(r0, &(0x7f0000006500)={0x2020}, 0x2020) 09:36:58 executing program 2: eventfd2(0x0, 0xc0000) [ 320.559344][ T6997] FAULT_INJECTION: forcing a failure. [ 320.559344][ T6997] name fail_page_alloc, interval 1, probability 0, space 0, times 0 09:36:58 executing program 2: io_uring_setup(0x3e7a, &(0x7f0000003280)={0x0, 0x0, 0x2}) 09:36:58 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) lseek(r0, 0x0, 0x0) [ 320.583318][ T6997] CPU: 2 PID: 6997 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 320.591452][ T6997] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 320.599174][ T6997] Call Trace: [ 320.602123][ T6997] [ 320.605445][ T6997] dump_stack_lvl+0xd1/0x138 [ 320.610590][ T6997] should_fail_ex.cold+0x5/0xa [ 320.614473][ T6997] prepare_alloc_pages+0x178/0x570 [ 320.619470][ T6997] __alloc_pages+0x149/0x5b0 [ 320.622902][ T6997] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 320.628371][ T6997] ? __lock_acquire+0x166e/0x56d0 [ 320.632420][ T6997] ? __lock_acquire+0xbc3/0x56d0 [ 320.635790][ T6997] __folio_alloc+0x16/0x40 [ 320.639158][ T6997] vma_alloc_folio+0x155/0x870 [ 320.643277][ T6997] ? policy_nodemask+0x1c0/0x1c0 [ 320.648233][ T6997] ? lock_chain_count+0x20/0x20 [ 320.653046][ T6997] __handle_mm_fault+0x1822/0x3c90 [ 320.657756][ T6997] ? vm_iomap_memory+0x190/0x190 [ 320.661932][ T6997] handle_mm_fault+0x1b6/0x850 [ 320.666292][ T6997] __get_user_pages+0x4f8/0xfc0 [ 320.670547][ T6997] ? follow_page_mask+0x10a0/0x10a0 [ 320.675179][ T6997] populate_vma_page_range+0x241/0x320 [ 320.679660][ T6997] __mm_populate+0x105/0x3b0 [ 320.683796][ T6997] ? faultin_vma_page_range+0x300/0x300 [ 320.688308][ T6997] ? up_write+0x1b0/0x520 [ 320.691837][ T6997] do_mlock+0x370/0x6d0 [ 320.695471][ T6997] ? folio_memcg+0x320/0x320 [ 320.698372][ T6997] ? fput+0x2f/0x1a0 [ 320.701016][ T6997] __ia32_sys_mlock+0x57/0x80 [ 320.704938][ T6997] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 320.711197][ T6997] __do_fast_syscall_32+0x65/0xf0 [ 320.715911][ T6997] do_fast_syscall_32+0x33/0x70 [ 320.724684][ T6997] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 320.729921][ T6997] RIP: 0023:0xf7f47549 [ 320.733151][ T6997] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 320.746839][ T6997] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 320.752410][ T6997] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 320.757958][ T6997] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 320.764576][ T6997] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 320.770969][ T6997] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 320.777164][ T6997] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 320.783429][ T6997] 09:36:59 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() tkill(r0, 0x6) (async) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 09:36:59 executing program 3: openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001540)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) 09:36:59 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000000c0)='\xca:]\x00', 0x0, 0x0) 09:36:59 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 56) 09:36:59 executing program 3: openat$cdrom(0xffffffffffffff9c, &(0x7f0000000340), 0x10de80, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$apparmor_current(r0, 0x0, 0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000580)=@hat={'permhat '}, 0x1b) 09:36:59 executing program 2: io_uring_setup(0x77bf, &(0x7f0000000000)={0x0, 0x0, 0x20}) [ 321.497455][ T7013] FAULT_INJECTION: forcing a failure. 09:36:59 executing program 3: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x512282, 0x0) [ 321.497455][ T7013] name fail_page_alloc, interval 1, probability 0, space 0, times 0 09:36:59 executing program 2: r0 = io_uring_setup(0x3e7a, &(0x7f0000003280)) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001280)={0x1, 0x0, 0x0, &(0x7f0000001200)=[{0x0}], &(0x7f0000001240)=[0xff]}, 0x20) [ 321.521880][ T7013] CPU: 1 PID: 7013 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 321.529005][ T7013] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 321.536427][ T7013] Call Trace: [ 321.539812][ T7013] [ 321.542596][ T7013] dump_stack_lvl+0xd1/0x138 [ 321.547323][ T7013] should_fail_ex.cold+0x5/0xa [ 321.552125][ T7013] prepare_alloc_pages+0x178/0x570 [ 321.558256][ T7013] __alloc_pages+0x149/0x5b0 [ 321.561720][ T7013] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 321.567871][ T7013] ? __lock_acquire+0x166e/0x56d0 [ 321.571653][ T7013] ? __lock_acquire+0xbc3/0x56d0 [ 321.578447][ T7013] __folio_alloc+0x16/0x40 [ 321.585484][ T7013] vma_alloc_folio+0x155/0x870 [ 321.589146][ T7013] ? policy_nodemask+0x1c0/0x1c0 [ 321.593588][ T7013] ? lock_chain_count+0x20/0x20 [ 321.597317][ T7013] __handle_mm_fault+0x1822/0x3c90 [ 321.600944][ T7013] ? vm_iomap_memory+0x190/0x190 [ 321.604763][ T7013] handle_mm_fault+0x1b6/0x850 [ 321.608551][ T7013] __get_user_pages+0x4f8/0xfc0 [ 321.612355][ T7013] ? follow_page_mask+0x10a0/0x10a0 [ 321.616151][ T7013] populate_vma_page_range+0x241/0x320 [ 321.620302][ T7013] __mm_populate+0x105/0x3b0 [ 321.624499][ T7013] ? faultin_vma_page_range+0x300/0x300 [ 321.629569][ T7013] ? up_write+0x1b0/0x520 [ 321.633092][ T7013] do_mlock+0x370/0x6d0 [ 321.636421][ T7013] ? folio_memcg+0x320/0x320 [ 321.640302][ T7013] ? fput+0x2f/0x1a0 [ 321.643726][ T7013] __ia32_sys_mlock+0x57/0x80 [ 321.647547][ T7013] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 321.657636][ T7013] __do_fast_syscall_32+0x65/0xf0 [ 321.661963][ T7013] do_fast_syscall_32+0x33/0x70 [ 321.665469][ T7013] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 321.670486][ T7013] RIP: 0023:0xf7f47549 [ 321.673799][ T7013] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 321.690707][ T7013] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 321.699325][ T7013] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 321.705220][ T7013] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 321.711477][ T7013] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 09:37:00 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000040)) 09:37:00 executing program 2: r0 = io_uring_setup(0x3e7a, &(0x7f0000003280)) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000000c0)=r1, 0x1) [ 321.719053][ T7013] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 321.725541][ T7013] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 321.730323][ T7013] 09:37:00 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xc0, 0x0) 09:37:00 executing program 3: r0 = io_uring_setup(0x3e7a, &(0x7f0000003280)) io_uring_enter(r0, 0x0, 0x0, 0x1f, 0x0, 0x0) 09:37:00 executing program 2: openat$cuse(0xffffffffffffff9c, &(0x7f0000004440), 0x2, 0x0) 09:37:00 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 57) 09:37:00 executing program 3: poll(0x0, 0x0, 0x3b9ac9ff) [ 322.168076][ T7035] FAULT_INJECTION: forcing a failure. [ 322.168076][ T7035] name fail_page_alloc, interval 1, probability 0, space 0, times 0 09:37:00 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, 0x0) [ 322.189799][ T7039] QAT: Invalid ioctl -805268462 [ 322.197824][ T7035] CPU: 2 PID: 7035 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 322.203854][ T7035] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 322.210744][ T7035] Call Trace: [ 322.212886][ T7035] [ 322.214891][ T7035] dump_stack_lvl+0xd1/0x138 [ 322.217843][ T7035] should_fail_ex.cold+0x5/0xa [ 322.220880][ T7035] prepare_alloc_pages+0x178/0x570 [ 322.224182][ T7035] __alloc_pages+0x149/0x5b0 [ 322.227182][ T7035] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 322.232142][ T7035] ? __lock_acquire+0x166e/0x56d0 [ 322.235630][ T7035] ? __lock_acquire+0xbc3/0x56d0 [ 322.239178][ T7035] __folio_alloc+0x16/0x40 [ 322.242297][ T7035] vma_alloc_folio+0x155/0x870 [ 322.245421][ T7035] ? policy_nodemask+0x1c0/0x1c0 [ 322.249284][ T7035] ? lock_chain_count+0x20/0x20 [ 322.253731][ T7035] __handle_mm_fault+0x1822/0x3c90 [ 322.257455][ T7035] ? vm_iomap_memory+0x190/0x190 [ 322.261193][ T7035] handle_mm_fault+0x1b6/0x850 [ 322.264695][ T7035] __get_user_pages+0x4f8/0xfc0 [ 322.267798][ T7035] ? follow_page_mask+0x10a0/0x10a0 [ 322.271119][ T7035] populate_vma_page_range+0x241/0x320 [ 322.274749][ T7035] __mm_populate+0x105/0x3b0 [ 322.278144][ T7035] ? faultin_vma_page_range+0x300/0x300 [ 322.282099][ T7035] ? up_write+0x1b0/0x520 [ 322.285256][ T7035] do_mlock+0x370/0x6d0 [ 322.288036][ T7035] ? folio_memcg+0x320/0x320 [ 322.291338][ T7035] ? fput+0x2f/0x1a0 [ 322.294118][ T7035] __ia32_sys_mlock+0x57/0x80 [ 322.298026][ T7035] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 322.304452][ T7035] __do_fast_syscall_32+0x65/0xf0 [ 322.307407][ T7035] do_fast_syscall_32+0x33/0x70 [ 322.310171][ T7035] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 322.313751][ T7035] RIP: 0023:0xf7f47549 [ 322.316169][ T7035] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 322.329070][ T7035] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 322.334388][ T7035] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 322.338974][ T7035] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 322.343639][ T7035] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 322.349416][ T7035] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 322.355023][ T7035] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 322.360650][ T7035] 09:37:00 executing program 2: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000021c0), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0x5450, 0x0) 09:37:00 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 58) 09:37:00 executing program 2: fsopen(&(0x7f0000000600)='gfs2\x00', 0x0) [ 322.485933][ T7043] FAULT_INJECTION: forcing a failure. [ 322.485933][ T7043] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 322.498121][ T7043] CPU: 2 PID: 7043 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 322.517539][ T7043] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 322.524311][ T7043] Call Trace: [ 322.526751][ T7043] [ 322.528833][ T7043] dump_stack_lvl+0xd1/0x138 [ 322.532409][ T7043] should_fail_ex.cold+0x5/0xa [ 322.535760][ T7043] prepare_alloc_pages+0x178/0x570 [ 322.538994][ T7043] __alloc_pages+0x149/0x5b0 [ 322.541615][ T7043] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 322.545440][ T7043] ? __lock_acquire+0x166e/0x56d0 09:37:00 executing program 2: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x200042, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='+-&]&*\x00', &(0x7f0000000180)='{\xc3{#\x00', 0x0) [ 322.548351][ T7043] ? __lock_acquire+0xbc3/0x56d0 [ 322.552610][ T7043] __folio_alloc+0x16/0x40 [ 322.556396][ T7043] vma_alloc_folio+0x155/0x870 [ 322.560861][ T7043] ? policy_nodemask+0x1c0/0x1c0 [ 322.564440][ T7043] ? lock_chain_count+0x20/0x20 [ 322.568086][ T7043] __handle_mm_fault+0x1822/0x3c90 [ 322.571729][ T7043] ? vm_iomap_memory+0x190/0x190 [ 322.575152][ T7043] handle_mm_fault+0x1b6/0x850 [ 322.578488][ T7043] __get_user_pages+0x4f8/0xfc0 [ 322.582352][ T7043] ? follow_page_mask+0x10a0/0x10a0 [ 322.586289][ T7043] populate_vma_page_range+0x241/0x320 [ 322.590759][ T7043] __mm_populate+0x105/0x3b0 09:37:00 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x101}}, './file0\x00'}) r2 = socket$bt_hidp(0x1f, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = openat$sysctl(0xffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x166, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) move_pages(r5, 0x1, &(0x7f0000000480)=[&(0x7f0000722000/0x1000)=nil], &(0x7f00000004c0)=[0x100, 0xff, 0x7ff], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) statx(0xffffffffffffffff, 0x0, 0x2100, 0x4, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) read$FUSE(r9, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001e80)=[{{&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000380)="df37f1f9940f8245c63996b3426a18e532f3eb5fe694d8cf9102fe837c835d286571e27fc8242460824aad936d6c1012af3926e4a708f440e59f6ea217974c2f7bcc9a47be1c38d0bb5e080000b3d997a410067e436dfdb43508d80b986cb8334afd938e240325875f897f8a6b72a650d26efe19736caddea2a802c34be89086ed954750c73839149923053bc07b673be8c76c59fb150ff8b4cdd06fca5a4ecd584c6a80168f4eb00a070c7faf4ff151b60aac1af47fa82bad5b29a30850440cc62f275bcd3f5ee4d3ee9ef620bd61cc5a34e0fe58ded59c8bfe026ee737d66deea75e312769", 0xe6}], 0x1, 0x0, 0x0, 0x40}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="e8b3f240f29204690100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000000001000000020000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESOCT=r7, @ANYRES32, @ANYBLOB="00000000200000c2ca000100d1005d691ba26db8d1ae33cf5c98c7e24d2cc1364763901fd6ba03a3107ba76ff8ac271bb1d244b7e46ce9b83cb9040817b402000000000000000cacea000000000000f40000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESOCT=r8], 0x78}}, {{&(0x7f0000001180)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000001500)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, r10}}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000001600)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001800)=[{0x0}], 0x1, 0x0, 0x0, 0x8000}}], 0x4, 0x810) mount$fuse(0x0, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000280), 0x1294040, &(0x7f00000006c0)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x2a00}}, {@default_permissions}], [{@dont_measure}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}, {@permit_directio}, {@fowner_lt={'fowner<', r7}}]}}) sendmmsg$unix(r1, &(0x7f0000000340)=[{{&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000100)="a442e5a12f0d90c29640a2d8232de940dea59a7c988a68dee7fb33e3831ec3a9ada47d1c8799a463a4671e76f9cddcfaeffe7ac7", 0x34}, {&(0x7f0000000140)="f1b8edf88b6f2b08381ced8347fb997b3b209e029a8c84f01e4066bb2b9f4043466112ac2014f7054b6e4585d31fa7be76dc5be2a5036a514e65aa3308f19ff716d868a4373071085999bf7ae0a194e1f7e3b3d610dd1a956eab9e823f284f09c8d30c1574e2edae8d2af556f8f062ea9ce06cd22882ec794d16c9ea2e005ab0dc1c90", 0x83}, {&(0x7f0000000200)="9bd81735b4293853c8407e087b54ded18144324249fcad", 0x17}, {&(0x7f0000000240)="7c6987edb718b325583c6762d040687adc2503ab121b143d53c7f0f9fbc015b01b5801aa8e122170eae7f64e715b98503820cd620e", 0x35}], 0x4, &(0x7f0000000300)=[@rights={{0x20, 0x1, 0x1, [r2, r3, r4, 0xffffffffffffffff, r6]}}, @cred={{0x18, 0x1, 0x2, {r0, r7}}}], 0x38}}], 0x1, 0x8000) [ 322.594900][ T7043] ? faultin_vma_page_range+0x300/0x300 [ 322.602957][ T7043] ? up_write+0x1b0/0x520 [ 322.605745][ T7043] do_mlock+0x370/0x6d0 [ 322.608683][ T7043] ? folio_memcg+0x320/0x320 [ 322.611587][ T7043] ? fput+0x2f/0x1a0 [ 322.616546][ T7043] __ia32_sys_mlock+0x57/0x80 [ 322.622535][ T7043] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 322.627451][ T7043] __do_fast_syscall_32+0x65/0xf0 [ 322.631296][ T7043] do_fast_syscall_32+0x33/0x70 09:37:00 executing program 2: r0 = open(&(0x7f0000008540)='./file0\x00', 0x840, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, 0x0, 0x0, 0xffffffffffffff9c) [ 322.634860][ T7043] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 322.639405][ T7043] RIP: 0023:0xf7f47549 [ 322.642275][ T7043] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 322.655712][ T7043] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 322.662100][ T7043] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 322.667466][ T7043] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 322.672709][ T7043] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 322.678100][ T7043] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 322.693174][ T7043] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 322.699437][ T7043] [ 323.180334][ T7062] FAULT_INJECTION: forcing a failure. [ 323.180334][ T7062] name fail_page_alloc, interval 1, probability 0, space 0, times 0 09:37:01 executing program 3: pselect6(0x40, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)={0x800}, &(0x7f0000000100), &(0x7f00000001c0)={&(0x7f0000000140), 0x8}) 09:37:01 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 59) 09:37:01 executing program 2: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000001c80), 0x200200) poll(&(0x7f0000000bc0)=[{r0}], 0x1, 0x0) 09:37:01 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x101}}, './file0\x00'}) (async) r2 = socket$bt_hidp(0x1f, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r4 = openat$sysctl(0xffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x166, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) (async) move_pages(r5, 0x1, &(0x7f0000000480)=[&(0x7f0000722000/0x1000)=nil], &(0x7f00000004c0)=[0x100, 0xff, 0x7ff], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) (async) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) statx(0xffffffffffffffff, 0x0, 0x2100, 0x4, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) read$FUSE(r9, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001e80)=[{{&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000380)="df37f1f9940f8245c63996b3426a18e532f3eb5fe694d8cf9102fe837c835d286571e27fc8242460824aad936d6c1012af3926e4a708f440e59f6ea217974c2f7bcc9a47be1c38d0bb5e080000b3d997a410067e436dfdb43508d80b986cb8334afd938e240325875f897f8a6b72a650d26efe19736caddea2a802c34be89086ed954750c73839149923053bc07b673be8c76c59fb150ff8b4cdd06fca5a4ecd584c6a80168f4eb00a070c7faf4ff151b60aac1af47fa82bad5b29a30850440cc62f275bcd3f5ee4d3ee9ef620bd61cc5a34e0fe58ded59c8bfe026ee737d66deea75e312769", 0xe6}], 0x1, 0x0, 0x0, 0x40}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="e8b3f240f29204690100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000000001000000020000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESOCT=r7, @ANYRES32, @ANYBLOB="00000000200000c2ca000100d1005d691ba26db8d1ae33cf5c98c7e24d2cc1364763901fd6ba03a3107ba76ff8ac271bb1d244b7e46ce9b83cb9040817b402000000000000000cacea000000000000f40000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESOCT=r8], 0x78}}, {{&(0x7f0000001180)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000001500)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, r10}}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000001600)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001800)=[{0x0}], 0x1, 0x0, 0x0, 0x8000}}], 0x4, 0x810) mount$fuse(0x0, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000280), 0x1294040, &(0x7f00000006c0)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x2a00}}, {@default_permissions}], [{@dont_measure}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}, {@permit_directio}, {@fowner_lt={'fowner<', r7}}]}}) (async) sendmmsg$unix(r1, &(0x7f0000000340)=[{{&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000100)="a442e5a12f0d90c29640a2d8232de940dea59a7c988a68dee7fb33e3831ec3a9ada47d1c8799a463a4671e76f9cddcfaeffe7ac7", 0x34}, {&(0x7f0000000140)="f1b8edf88b6f2b08381ced8347fb997b3b209e029a8c84f01e4066bb2b9f4043466112ac2014f7054b6e4585d31fa7be76dc5be2a5036a514e65aa3308f19ff716d868a4373071085999bf7ae0a194e1f7e3b3d610dd1a956eab9e823f284f09c8d30c1574e2edae8d2af556f8f062ea9ce06cd22882ec794d16c9ea2e005ab0dc1c90", 0x83}, {&(0x7f0000000200)="9bd81735b4293853c8407e087b54ded18144324249fcad", 0x17}, {&(0x7f0000000240)="7c6987edb718b325583c6762d040687adc2503ab121b143d53c7f0f9fbc015b01b5801aa8e122170eae7f64e715b98503820cd620e", 0x35}], 0x4, &(0x7f0000000300)=[@rights={{0x20, 0x1, 0x1, [r2, r3, r4, 0xffffffffffffffff, r6]}}, @cred={{0x18, 0x1, 0x2, {r0, r7}}}], 0x38}}], 0x1, 0x8000) [ 323.196501][ T7062] CPU: 3 PID: 7062 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 323.205489][ T7062] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 323.212768][ T7062] Call Trace: [ 323.215326][ T7062] [ 323.218494][ T7062] dump_stack_lvl+0xd1/0x138 [ 323.222318][ T7062] should_fail_ex.cold+0x5/0xa [ 323.226676][ T7062] prepare_alloc_pages+0x178/0x570 [ 323.231220][ T7062] __alloc_pages+0x149/0x5b0 [ 323.235930][ T7062] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 323.244863][ T7062] ? __lock_acquire+0x166e/0x56d0 [ 323.250954][ T7062] ? __lock_acquire+0xbc3/0x56d0 [ 323.255857][ T7062] __folio_alloc+0x16/0x40 [ 323.259981][ T7062] vma_alloc_folio+0x155/0x870 [ 323.265245][ T7062] ? policy_nodemask+0x1c0/0x1c0 [ 323.269265][ T7062] ? lock_chain_count+0x20/0x20 [ 323.272990][ T7062] __handle_mm_fault+0x1822/0x3c90 [ 323.277283][ T7062] ? vm_iomap_memory+0x190/0x190 [ 323.283576][ T7062] handle_mm_fault+0x1b6/0x850 [ 323.287561][ T7062] __get_user_pages+0x4f8/0xfc0 [ 323.291628][ T7062] ? follow_page_mask+0x10a0/0x10a0 [ 323.295858][ T7062] populate_vma_page_range+0x241/0x320 [ 323.301184][ T7062] __mm_populate+0x105/0x3b0 [ 323.304913][ T7062] ? faultin_vma_page_range+0x300/0x300 [ 323.309366][ T7062] ? up_write+0x1b0/0x520 [ 323.314063][ T7062] do_mlock+0x370/0x6d0 [ 323.317494][ T7062] ? folio_memcg+0x320/0x320 [ 323.320930][ T7062] ? fput+0x2f/0x1a0 [ 323.324045][ T7062] __ia32_sys_mlock+0x57/0x80 [ 323.328019][ T7062] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 323.333616][ T7062] __do_fast_syscall_32+0x65/0xf0 [ 323.337340][ T7062] do_fast_syscall_32+0x33/0x70 [ 323.341323][ T7062] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 323.347388][ T7062] RIP: 0023:0xf7f47549 [ 323.350869][ T7062] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 323.366095][ T7062] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 323.373129][ T7062] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 323.379845][ T7062] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 323.385515][ T7062] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 323.391928][ T7062] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 323.398752][ T7062] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 323.404452][ T7062] 09:37:01 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r0, &(0x7f0000001c00)={0x2020}, 0x2020) poll(&(0x7f0000000bc0)=[{r0}], 0x1, 0x0) [ 323.415698][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.440300][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 09:37:01 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000001200)='./binderfs/binder1\x00', 0x0, 0x0) r1 = eventfd2(0x40, 0x0) poll(&(0x7f0000001380)=[{}, {r1, 0x8245}, {r0}], 0x3, 0xb070) 09:37:01 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 60) 09:37:01 executing program 3: openat$damon_mk_contexts(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 09:37:01 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x101}}, './file0\x00'}) (async, rerun: 32) r2 = socket$bt_hidp(0x1f, 0x3, 0x6) (async, rerun: 32) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = openat$sysctl(0xffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x166, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) move_pages(r5, 0x1, &(0x7f0000000480)=[&(0x7f0000722000/0x1000)=nil], &(0x7f00000004c0)=[0x100, 0xff, 0x7ff], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) (async) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) statx(0xffffffffffffffff, 0x0, 0x2100, 0x4, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) read$FUSE(r9, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001e80)=[{{&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000380)="df37f1f9940f8245c63996b3426a18e532f3eb5fe694d8cf9102fe837c835d286571e27fc8242460824aad936d6c1012af3926e4a708f440e59f6ea217974c2f7bcc9a47be1c38d0bb5e080000b3d997a410067e436dfdb43508d80b986cb8334afd938e240325875f897f8a6b72a650d26efe19736caddea2a802c34be89086ed954750c73839149923053bc07b673be8c76c59fb150ff8b4cdd06fca5a4ecd584c6a80168f4eb00a070c7faf4ff151b60aac1af47fa82bad5b29a30850440cc62f275bcd3f5ee4d3ee9ef620bd61cc5a34e0fe58ded59c8bfe026ee737d66deea75e312769", 0xe6}], 0x1, 0x0, 0x0, 0x40}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="e8b3f240f29204690100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000000001000000020000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESOCT=r7, @ANYRES32, @ANYBLOB="00000000200000c2ca000100d1005d691ba26db8d1ae33cf5c98c7e24d2cc1364763901fd6ba03a3107ba76ff8ac271bb1d244b7e46ce9b83cb9040817b402000000000000000cacea000000000000f40000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESOCT=r8], 0x78}}, {{&(0x7f0000001180)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000001500)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, r10}}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000001600)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001800)=[{0x0}], 0x1, 0x0, 0x0, 0x8000}}], 0x4, 0x810) (async) mount$fuse(0x0, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000280), 0x1294040, &(0x7f00000006c0)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x2a00}}, {@default_permissions}], [{@dont_measure}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}, {@permit_directio}, {@fowner_lt={'fowner<', r7}}]}}) sendmmsg$unix(r1, &(0x7f0000000340)=[{{&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000100)="a442e5a12f0d90c29640a2d8232de940dea59a7c988a68dee7fb33e3831ec3a9ada47d1c8799a463a4671e76f9cddcfaeffe7ac7", 0x34}, {&(0x7f0000000140)="f1b8edf88b6f2b08381ced8347fb997b3b209e029a8c84f01e4066bb2b9f4043466112ac2014f7054b6e4585d31fa7be76dc5be2a5036a514e65aa3308f19ff716d868a4373071085999bf7ae0a194e1f7e3b3d610dd1a956eab9e823f284f09c8d30c1574e2edae8d2af556f8f062ea9ce06cd22882ec794d16c9ea2e005ab0dc1c90", 0x83}, {&(0x7f0000000200)="9bd81735b4293853c8407e087b54ded18144324249fcad", 0x17}, {&(0x7f0000000240)="7c6987edb718b325583c6762d040687adc2503ab121b143d53c7f0f9fbc015b01b5801aa8e122170eae7f64e715b98503820cd620e", 0x35}], 0x4, &(0x7f0000000300)=[@rights={{0x20, 0x1, 0x1, [r2, r3, r4, 0xffffffffffffffff, r6]}}, @cred={{0x18, 0x1, 0x2, {r0, r7}}}], 0x38}}], 0x1, 0x8000) 09:37:01 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ppoll(&(0x7f0000002140)=[{r0, 0x1025}], 0x1, 0x0, 0x0, 0x0) 09:37:01 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x1a1301, 0x0) write$damon_attrs(r0, &(0x7f0000000000), 0x69) 09:37:01 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004440), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)={0x28}, 0x28) 09:37:01 executing program 1: mremap(&(0x7f0000296000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000040)='}}/[($\x00'}, 0x30) r1 = accept4$rose(0xffffffffffffffff, &(0x7f00000000c0)=@short={0xb, @remote, @netrom, 0x1, @rose}, &(0x7f0000000100)=0x1c, 0x80000) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) process_vm_writev(r0, &(0x7f0000000200)=[{&(0x7f00008f9f09)=""/247, 0xf7}, {&(0x7f0000000140)=""/157, 0x9d}], 0x2, &(0x7f0000121000), 0x0, 0x0) [ 323.572411][ T7076] FAULT_INJECTION: forcing a failure. [ 323.572411][ T7076] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 323.582404][ T7076] CPU: 0 PID: 7076 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 323.591017][ T7076] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 323.597139][ T7076] Call Trace: [ 323.599424][ T7076] 09:37:01 executing program 2: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000021c0), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0x2, 0x0) [ 323.601551][ T7076] dump_stack_lvl+0xd1/0x138 [ 323.605297][ T7076] should_fail_ex.cold+0x5/0xa [ 323.609202][ T7076] prepare_alloc_pages+0x178/0x570 [ 323.614001][ T7076] __alloc_pages+0x149/0x5b0 09:37:01 executing program 1: mremap(&(0x7f0000296000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000040)='}}/[($\x00'}, 0x30) r1 = accept4$rose(0xffffffffffffffff, &(0x7f00000000c0)=@short={0xb, @remote, @netrom, 0x1, @rose}, &(0x7f0000000100)=0x1c, 0x80000) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) process_vm_writev(r0, &(0x7f0000000200)=[{&(0x7f00008f9f09)=""/247, 0xf7}, {&(0x7f0000000140)=""/157, 0x9d}], 0x2, &(0x7f0000121000), 0x0, 0x0) mremap(&(0x7f0000296000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) gettid() (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000040)='}}/[($\x00'}, 0x30) (async) accept4$rose(0xffffffffffffffff, &(0x7f00000000c0)=@short={0xb, @remote, @netrom, 0x1, @rose}, &(0x7f0000000100)=0x1c, 0x80000) (async) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) (async) process_vm_writev(r0, &(0x7f0000000200)=[{&(0x7f00008f9f09)=""/247, 0xf7}, {&(0x7f0000000140)=""/157, 0x9d}], 0x2, &(0x7f0000121000), 0x0, 0x0) (async) [ 323.618070][ T7076] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 323.623395][ T7076] ? __lock_acquire+0x166e/0x56d0 [ 323.626394][ T7076] ? __lock_acquire+0xbc3/0x56d0 [ 323.629294][ T7076] __folio_alloc+0x16/0x40 [ 323.632128][ T7076] vma_alloc_folio+0x155/0x870 [ 323.634894][ T7076] ? policy_nodemask+0x1c0/0x1c0 [ 323.637792][ T7076] ? lock_chain_count+0x20/0x20 [ 323.640590][ T7076] __handle_mm_fault+0x1822/0x3c90 [ 323.643439][ T7076] ? vm_iomap_memory+0x190/0x190 [ 323.647044][ T7076] handle_mm_fault+0x1b6/0x850 [ 323.650617][ T7076] __get_user_pages+0x4f8/0xfc0 [ 323.653919][ T7076] ? follow_page_mask+0x10a0/0x10a0 [ 323.657514][ T7076] populate_vma_page_range+0x241/0x320 [ 323.661010][ T7076] __mm_populate+0x105/0x3b0 [ 323.664351][ T7076] ? faultin_vma_page_range+0x300/0x300 [ 323.667950][ T7076] ? up_write+0x1b0/0x520 [ 323.671159][ T7076] do_mlock+0x370/0x6d0 [ 323.674490][ T7076] ? folio_memcg+0x320/0x320 [ 323.678609][ T7076] ? fput+0x2f/0x1a0 [ 323.684215][ T7076] __ia32_sys_mlock+0x57/0x80 [ 323.687257][ T7076] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 323.694193][ T7076] __do_fast_syscall_32+0x65/0xf0 [ 323.697365][ T7076] do_fast_syscall_32+0x33/0x70 [ 323.701570][ T7076] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 323.705652][ T7076] RIP: 0023:0xf7f47549 [ 323.708124][ T7076] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 323.719466][ T7076] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 323.725631][ T7076] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 323.730681][ T7076] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 323.736226][ T7076] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 323.742071][ T7076] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 323.747776][ T7076] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 323.753208][ T7076] 09:37:02 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 61) 09:37:02 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 09:37:02 executing program 2: fsopen(&(0x7f0000000080)='hfs\x00', 0x0) 09:37:02 executing program 1: mremap(&(0x7f0000296000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000040)='}}/[($\x00'}, 0x30) r1 = accept4$rose(0xffffffffffffffff, &(0x7f00000000c0)=@short={0xb, @remote, @netrom, 0x1, @rose}, &(0x7f0000000100)=0x1c, 0x80000) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) (async) process_vm_writev(r0, &(0x7f0000000200)=[{&(0x7f00008f9f09)=""/247, 0xf7}, {&(0x7f0000000140)=""/157, 0x9d}], 0x2, &(0x7f0000121000), 0x0, 0x0) 09:37:02 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000001140), 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 09:37:02 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000022c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00}}, './file0\x00'}) 09:37:02 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) preadv2(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f00000000c0)=""/205, 0xcd}], 0x2, 0x2, 0x5, 0xb) 09:37:02 executing program 2: r0 = fsopen(&(0x7f0000000340)='xfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) [ 323.865817][ T7105] FAULT_INJECTION: forcing a failure. [ 323.865817][ T7105] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 323.896577][ T7105] CPU: 1 PID: 7105 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 323.904256][ T7105] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 323.911043][ T7105] Call Trace: [ 323.913533][ T7105] [ 323.915993][ T7105] dump_stack_lvl+0xd1/0x138 [ 323.920280][ T7105] should_fail_ex.cold+0x5/0xa [ 323.924297][ T7105] prepare_alloc_pages+0x178/0x570 [ 323.928445][ T7105] __alloc_pages+0x149/0x5b0 [ 323.931652][ T7105] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 323.935590][ T7105] ? __lock_acquire+0x166e/0x56d0 [ 323.939356][ T7105] ? __lock_acquire+0xbc3/0x56d0 [ 323.942890][ T7105] __folio_alloc+0x16/0x40 [ 323.947090][ T7105] vma_alloc_folio+0x155/0x870 [ 323.951561][ T7105] ? policy_nodemask+0x1c0/0x1c0 [ 323.955669][ T7105] ? lock_chain_count+0x20/0x20 [ 323.959621][ T7105] __handle_mm_fault+0x1822/0x3c90 [ 323.963862][ T7105] ? vm_iomap_memory+0x190/0x190 [ 323.967425][ T7105] handle_mm_fault+0x1b6/0x850 [ 323.970463][ T7105] __get_user_pages+0x4f8/0xfc0 [ 323.973950][ T7105] ? follow_page_mask+0x10a0/0x10a0 [ 323.977726][ T7105] populate_vma_page_range+0x241/0x320 [ 323.981370][ T7105] __mm_populate+0x105/0x3b0 [ 323.984437][ T7105] ? faultin_vma_page_range+0x300/0x300 [ 323.988362][ T7105] ? up_write+0x1b0/0x520 [ 323.990873][ T7105] do_mlock+0x370/0x6d0 [ 323.993644][ T7105] ? folio_memcg+0x320/0x320 [ 323.997647][ T7105] ? fput+0x2f/0x1a0 [ 324.001443][ T7105] __ia32_sys_mlock+0x57/0x80 [ 324.006395][ T7105] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 324.015184][ T7105] __do_fast_syscall_32+0x65/0xf0 [ 324.018480][ T7105] do_fast_syscall_32+0x33/0x70 [ 324.021562][ T7105] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 324.026131][ T7105] RIP: 0023:0xf7f47549 [ 324.029370][ T7105] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 324.045411][ T7105] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 324.053234][ T7105] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 324.057784][ T7105] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 324.062634][ T7105] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 324.068112][ T7105] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 324.073663][ T7105] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 324.078830][ T7105] 09:37:02 executing program 3: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 09:37:02 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) preadv2(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f00000000c0)=""/205, 0xcd}], 0x2, 0x2, 0x5, 0xb) 09:37:02 executing program 2: r0 = fsopen(&(0x7f0000000000)='ext4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, 0x0, 0x0) 09:37:02 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 62) [ 324.189206][ T7114] FAULT_INJECTION: forcing a failure. 09:37:02 executing program 2: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4000) 09:37:02 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) preadv2(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f00000000c0)=""/205, 0xcd}], 0x2, 0x2, 0x5, 0xb) [ 324.189206][ T7114] name fail_page_alloc, interval 1, probability 0, space 0, times 0 09:37:02 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$vhost_msg(0xffffffffffffffff, &(0x7f0000006400)={0x1, {0x0, 0x0, 0x0}}, 0x48) openat$snapshot(0xffffffffffffff9c, &(0x7f0000006480), 0x4240, 0x0) 09:37:02 executing program 2: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0xf7}, 0x20) [ 324.230540][ T7114] CPU: 2 PID: 7114 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 324.238746][ T7114] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 324.245107][ T7114] Call Trace: [ 324.252858][ T7114] [ 324.254833][ T7114] dump_stack_lvl+0xd1/0x138 [ 324.259180][ T7114] should_fail_ex.cold+0x5/0xa [ 324.263190][ T7114] prepare_alloc_pages+0x178/0x570 [ 324.267327][ T7114] __alloc_pages+0x149/0x5b0 [ 324.270961][ T7114] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 324.276299][ T7114] ? __lock_acquire+0x166e/0x56d0 09:37:02 executing program 2: r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) fcntl$lock(r0, 0x24, &(0x7f0000000080)={0x0, 0x0, 0x8000000000000001}) [ 324.280288][ T7114] ? __lock_acquire+0xbc3/0x56d0 09:37:02 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x20000202, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mremap(&(0x7f00002e4000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f00002ce000/0x3000)=nil) [ 324.284439][ T7114] __folio_alloc+0x16/0x40 [ 324.287711][ T7114] vma_alloc_folio+0x155/0x870 [ 324.291384][ T7114] ? policy_nodemask+0x1c0/0x1c0 [ 324.295560][ T7114] ? lock_chain_count+0x20/0x20 [ 324.300087][ T7114] __handle_mm_fault+0x1822/0x3c90 [ 324.303281][ T7114] ? vm_iomap_memory+0x190/0x190 [ 324.306434][ T7114] handle_mm_fault+0x1b6/0x850 [ 324.309659][ T7114] __get_user_pages+0x4f8/0xfc0 [ 324.312684][ T7114] ? follow_page_mask+0x10a0/0x10a0 [ 324.316054][ T7114] populate_vma_page_range+0x241/0x320 [ 324.319871][ T7114] __mm_populate+0x105/0x3b0 [ 324.323414][ T7114] ? faultin_vma_page_range+0x300/0x300 [ 324.327059][ T7114] ? up_write+0x1b0/0x520 [ 324.329967][ T7114] do_mlock+0x370/0x6d0 [ 324.332791][ T7114] ? folio_memcg+0x320/0x320 [ 324.335847][ T7114] ? fput+0x2f/0x1a0 [ 324.338781][ T7114] __ia32_sys_mlock+0x57/0x80 [ 324.341955][ T7114] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 324.346623][ T7114] __do_fast_syscall_32+0x65/0xf0 [ 324.349890][ T7114] do_fast_syscall_32+0x33/0x70 [ 324.353189][ T7114] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 324.357359][ T7114] RIP: 0023:0xf7f47549 [ 324.359881][ T7114] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 324.372446][ T7114] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 324.377740][ T7114] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 324.382550][ T7114] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 324.387291][ T7114] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 324.392817][ T7114] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 324.398929][ T7114] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 324.404627][ T7114] 09:37:02 executing program 2: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000021c0), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0x40086602, 0x0) 09:37:02 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 63) 09:37:02 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x20000202, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) mremap(&(0x7f00002e4000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f00002ce000/0x3000)=nil) 09:37:02 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x20000202, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mremap(&(0x7f00002e4000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f00002ce000/0x3000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) gettid() (async) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x20000202, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) mremap(&(0x7f00002e4000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f00002ce000/0x3000)=nil) (async) 09:37:02 executing program 3: r0 = fsopen(&(0x7f0000000000)='ext4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='\x00', 0x0) 09:37:02 executing program 2: r0 = fsopen(&(0x7f0000000080)='ntfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x3) [ 324.511211][ T7139] FAULT_INJECTION: forcing a failure. [ 324.511211][ T7139] name fail_page_alloc, interval 1, probability 0, space 0, times 0 09:37:02 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000003240), 0x0, 0x0) r1 = io_uring_setup(0x3e7a, &(0x7f0000003280)) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) read$nci(r2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000003300)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) [ 324.536186][ T7139] CPU: 2 PID: 7139 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 324.544379][ T7139] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 324.551069][ T7139] Call Trace: [ 324.553706][ T7139] [ 324.556292][ T7139] dump_stack_lvl+0xd1/0x138 [ 324.560287][ T7139] should_fail_ex.cold+0x5/0xa [ 324.564237][ T7139] prepare_alloc_pages+0x178/0x570 [ 324.568370][ T7139] __alloc_pages+0x149/0x5b0 [ 324.571874][ T7139] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 324.575848][ T7139] ? __lock_acquire+0x166e/0x56d0 [ 324.578758][ T7139] ? __lock_acquire+0xbc3/0x56d0 [ 324.582163][ T7139] __folio_alloc+0x16/0x40 [ 324.585574][ T7139] vma_alloc_folio+0x155/0x870 [ 324.589174][ T7139] ? policy_nodemask+0x1c0/0x1c0 [ 324.592969][ T7139] ? lock_chain_count+0x20/0x20 [ 324.596379][ T7139] __handle_mm_fault+0x1822/0x3c90 [ 324.600536][ T7139] ? vm_iomap_memory+0x190/0x190 [ 324.605065][ T7139] handle_mm_fault+0x1b6/0x850 [ 324.608534][ T7139] __get_user_pages+0x4f8/0xfc0 [ 324.612874][ T7139] ? follow_page_mask+0x10a0/0x10a0 [ 324.617487][ T7139] populate_vma_page_range+0x241/0x320 [ 324.622260][ T7139] __mm_populate+0x105/0x3b0 [ 324.626286][ T7139] ? faultin_vma_page_range+0x300/0x300 [ 324.631310][ T7139] ? up_write+0x1b0/0x520 [ 324.634481][ T7139] do_mlock+0x370/0x6d0 [ 324.637654][ T7139] ? folio_memcg+0x320/0x320 [ 324.641397][ T7139] ? fput+0x2f/0x1a0 [ 324.644934][ T7139] __ia32_sys_mlock+0x57/0x80 09:37:02 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000070c000/0x3000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) [ 324.648821][ T7139] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 324.655634][ T7139] __do_fast_syscall_32+0x65/0xf0 [ 324.660000][ T7139] do_fast_syscall_32+0x33/0x70 [ 324.664201][ T7139] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 324.669824][ T7139] RIP: 0023:0xf7f47549 [ 324.673270][ T7139] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 324.688910][ T7139] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 324.696555][ T7139] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 324.703291][ T7139] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 324.710330][ T7139] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 324.717020][ T7139] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 324.723964][ T7139] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 324.729801][ T7139] 09:37:03 executing program 2: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x0) 09:37:03 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 64) 09:37:03 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000070c000/0x3000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 09:37:03 executing program 2: openat$urandom(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 09:37:03 executing program 3: r0 = io_uring_setup(0x3e7a, &(0x7f0000003280)) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, '\x00', [{}]}, 0x1) [ 324.819128][ T7165] FAULT_INJECTION: forcing a failure. [ 324.819128][ T7165] name fail_page_alloc, interval 1, probability 0, space 0, times 0 09:37:03 executing program 2: r0 = io_uring_setup(0x734f, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) 09:37:03 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000070c000/0x3000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) [ 324.832919][ T7165] CPU: 1 PID: 7165 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 324.844616][ T7165] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 324.853290][ T7165] Call Trace: [ 324.856081][ T7165] [ 324.858363][ T7165] dump_stack_lvl+0xd1/0x138 [ 324.862104][ T7165] should_fail_ex.cold+0x5/0xa [ 324.867045][ T7165] prepare_alloc_pages+0x178/0x570 [ 324.872175][ T7165] __alloc_pages+0x149/0x5b0 [ 324.876810][ T7165] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 324.883250][ T7165] ? __lock_acquire+0x166e/0x56d0 [ 324.890730][ T7165] ? __lock_acquire+0xbc3/0x56d0 [ 324.895114][ T7165] __folio_alloc+0x16/0x40 [ 324.899435][ T7165] vma_alloc_folio+0x155/0x870 [ 324.904134][ T7165] ? policy_nodemask+0x1c0/0x1c0 [ 324.908359][ T7165] ? lock_chain_count+0x20/0x20 [ 324.912911][ T7165] __handle_mm_fault+0x1822/0x3c90 [ 324.916731][ T7165] ? vm_iomap_memory+0x190/0x190 [ 324.920570][ T7165] handle_mm_fault+0x1b6/0x850 [ 324.923628][ T7165] __get_user_pages+0x4f8/0xfc0 [ 324.928027][ T7165] ? follow_page_mask+0x10a0/0x10a0 [ 324.933300][ T7165] populate_vma_page_range+0x241/0x320 [ 324.936990][ T7165] __mm_populate+0x105/0x3b0 [ 324.941204][ T7165] ? faultin_vma_page_range+0x300/0x300 [ 324.946641][ T7165] ? up_write+0x1b0/0x520 [ 324.951348][ T7165] do_mlock+0x370/0x6d0 [ 324.955211][ T7165] ? folio_memcg+0x320/0x320 [ 324.958492][ T7165] ? fput+0x2f/0x1a0 [ 324.961136][ T7165] __ia32_sys_mlock+0x57/0x80 [ 324.964470][ T7165] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 324.969628][ T7165] __do_fast_syscall_32+0x65/0xf0 [ 324.973714][ T7165] do_fast_syscall_32+0x33/0x70 [ 324.977436][ T7165] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 324.982552][ T7165] RIP: 0023:0xf7f47549 [ 324.985241][ T7165] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 324.999711][ T7165] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 325.007301][ T7165] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 325.013274][ T7165] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 325.024714][ T7165] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 325.031440][ T7165] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 325.043688][ T7165] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 325.050827][ T7165] 09:37:03 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 65) 09:37:03 executing program 3: openat$rtc(0xffffffffffffff9c, &(0x7f0000000f40), 0x0, 0x0) 09:37:03 executing program 2: fsopen(&(0x7f0000000040)='fuse\x00', 0x0) 09:37:03 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4000, 0x7, &(0x7f0000a95000/0x4000)=nil) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/234, 0xea}], 0x1, &(0x7f0000121000)=[{&(0x7f0000000040)=""/243, 0xf3}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0)={0x0}, &(0x7f0000000600)=0xc) ptrace$getregs(0xe, r1, 0x1000, &(0x7f0000000640)=""/252) tkill(r0, 0x3e) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000140)={0x4, 0x5, {r0}, {0xffffffffffffffff}, 0xb4, 0x80000001}) process_vm_readv(r2, &(0x7f0000000380)=[{&(0x7f0000000180)=""/206, 0xce}, {&(0x7f0000000280)=""/120, 0x78}, {&(0x7f0000000300)=""/91, 0x5b}], 0x3, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/251, 0xfb}, {&(0x7f00000004c0)=""/98, 0x62}, {&(0x7f0000000540)=""/50, 0x32}], 0x3, 0x0) 09:37:03 executing program 3: syz_open_procfs$namespace(0x0, &(0x7f0000004240)='ns/user\x00') 09:37:03 executing program 2: openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0xa4840, 0x0) chown(&(0x7f0000001d40)='./file0/file1\x00', 0x0, 0x0) [ 325.306770][ T7178] FAULT_INJECTION: forcing a failure. [ 325.306770][ T7178] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 325.333996][ T7178] CPU: 3 PID: 7178 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 325.342331][ T7178] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 325.348648][ T7178] Call Trace: [ 325.351117][ T7178] [ 325.353970][ T7178] dump_stack_lvl+0xd1/0x138 [ 325.357810][ T7178] should_fail_ex.cold+0x5/0xa [ 325.361305][ T7178] prepare_alloc_pages+0x178/0x570 [ 325.370418][ T7178] __alloc_pages+0x149/0x5b0 [ 325.373965][ T7178] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 325.381126][ T7178] ? __lock_acquire+0x166e/0x56d0 [ 325.385097][ T7178] ? __lock_acquire+0xbc3/0x56d0 [ 325.393484][ T7178] __folio_alloc+0x16/0x40 [ 325.400852][ T39] audit: type=1800 audit(1672997823.639:13): pid=7186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=1163 res=0 errno=0 [ 325.409039][ T7178] vma_alloc_folio+0x155/0x870 [ 325.409100][ T7178] ? policy_nodemask+0x1c0/0x1c0 [ 325.409125][ T7178] ? lock_chain_count+0x20/0x20 [ 325.409145][ T7178] __handle_mm_fault+0x1822/0x3c90 [ 325.448608][ T7178] ? vm_iomap_memory+0x190/0x190 [ 325.452663][ T7178] handle_mm_fault+0x1b6/0x850 [ 325.457331][ T7178] __get_user_pages+0x4f8/0xfc0 [ 325.461293][ T7178] ? follow_page_mask+0x10a0/0x10a0 [ 325.465923][ T7178] populate_vma_page_range+0x241/0x320 [ 325.470441][ T7178] __mm_populate+0x105/0x3b0 [ 325.474392][ T7178] ? faultin_vma_page_range+0x300/0x300 [ 325.478962][ T7178] ? up_write+0x1b0/0x520 [ 325.482613][ T7178] do_mlock+0x370/0x6d0 [ 325.486815][ T7178] ? folio_memcg+0x320/0x320 [ 325.491419][ T7178] ? fput+0x2f/0x1a0 [ 325.495017][ T7178] __ia32_sys_mlock+0x57/0x80 [ 325.499752][ T7178] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 325.514825][ T7178] __do_fast_syscall_32+0x65/0xf0 [ 325.520506][ T7178] do_fast_syscall_32+0x33/0x70 09:37:03 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4000, 0x7, &(0x7f0000a95000/0x4000)=nil) (async) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3) (async) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/234, 0xea}], 0x1, &(0x7f0000121000)=[{&(0x7f0000000040)=""/243, 0xf3}], 0x1, 0x0) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0)={0x0}, &(0x7f0000000600)=0xc) ptrace$getregs(0xe, r1, 0x1000, &(0x7f0000000640)=""/252) (async) tkill(r0, 0x3e) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000140)={0x4, 0x5, {r0}, {0xffffffffffffffff}, 0xb4, 0x80000001}) process_vm_readv(r2, &(0x7f0000000380)=[{&(0x7f0000000180)=""/206, 0xce}, {&(0x7f0000000280)=""/120, 0x78}, {&(0x7f0000000300)=""/91, 0x5b}], 0x3, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/251, 0xfb}, {&(0x7f00000004c0)=""/98, 0x62}, {&(0x7f0000000540)=""/50, 0x32}], 0x3, 0x0) 09:37:03 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) [ 325.525516][ T7178] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 325.530736][ T7178] RIP: 0023:0xf7f47549 [ 325.542926][ T7178] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 325.558900][ T7178] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 325.565085][ T7178] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 325.570903][ T7178] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 325.577912][ T7178] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 325.585598][ T7178] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 325.593855][ T7178] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 325.600905][ T7178] 09:37:04 executing program 3: mount$fuse(0x0, &(0x7f0000000080)='.\x00', 0x0, 0xf0, 0x0) 09:37:04 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 66) 09:37:04 executing program 2: r0 = io_uring_setup(0x3e7a, &(0x7f0000003280)) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, &(0x7f00000070c0)=[{0x0, 0x1, 0x0, 0x0, 0x0}], 0x1) 09:37:04 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4000, 0x7, &(0x7f0000a95000/0x4000)=nil) (async) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3) (async) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/234, 0xea}], 0x1, &(0x7f0000121000)=[{&(0x7f0000000040)=""/243, 0xf3}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0)={0x0}, &(0x7f0000000600)=0xc) ptrace$getregs(0xe, r1, 0x1000, &(0x7f0000000640)=""/252) tkill(r0, 0x3e) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000140)={0x4, 0x5, {r0}, {0xffffffffffffffff}, 0xb4, 0x80000001}) process_vm_readv(r2, &(0x7f0000000380)=[{&(0x7f0000000180)=""/206, 0xce}, {&(0x7f0000000280)=""/120, 0x78}, {&(0x7f0000000300)=""/91, 0x5b}], 0x3, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/251, 0xfb}, {&(0x7f00000004c0)=""/98, 0x62}, {&(0x7f0000000540)=""/50, 0x32}], 0x3, 0x0) 09:37:04 executing program 2: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$qrtrtun(r0, &(0x7f0000000040)=""/167, 0xa7) [ 325.826201][ T7198] FAULT_INJECTION: forcing a failure. [ 325.826201][ T7198] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 325.839871][ T7198] CPU: 1 PID: 7198 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 325.848790][ T7198] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 325.855557][ T7198] Call Trace: [ 325.858823][ T7198] [ 325.862013][ T7198] dump_stack_lvl+0xd1/0x138 [ 325.867064][ T7198] should_fail_ex.cold+0x5/0xa [ 325.872004][ T7198] prepare_alloc_pages+0x178/0x570 [ 325.877404][ T7198] __alloc_pages+0x149/0x5b0 [ 325.881547][ T7198] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 325.888651][ T7198] ? __lock_acquire+0x166e/0x56d0 [ 325.892657][ T7198] ? __lock_acquire+0xbc3/0x56d0 [ 325.897130][ T7198] __folio_alloc+0x16/0x40 [ 325.900611][ T7198] vma_alloc_folio+0x155/0x870 [ 325.909728][ T7198] ? policy_nodemask+0x1c0/0x1c0 [ 325.914917][ T7198] ? lock_chain_count+0x20/0x20 [ 325.920866][ T7198] __handle_mm_fault+0x1822/0x3c90 [ 325.926711][ T7198] ? vm_iomap_memory+0x190/0x190 [ 325.931155][ T7198] handle_mm_fault+0x1b6/0x850 [ 325.934489][ T7198] __get_user_pages+0x4f8/0xfc0 [ 325.938300][ T7198] ? follow_page_mask+0x10a0/0x10a0 [ 325.942979][ T7198] populate_vma_page_range+0x241/0x320 [ 325.949835][ T7198] __mm_populate+0x105/0x3b0 [ 325.954618][ T7198] ? faultin_vma_page_range+0x300/0x300 [ 325.960595][ T7198] ? up_write+0x1b0/0x520 [ 325.963096][ T7198] do_mlock+0x370/0x6d0 [ 325.965559][ T7198] ? folio_memcg+0x320/0x320 [ 325.969087][ T7198] ? fput+0x2f/0x1a0 [ 325.971142][ T7198] __ia32_sys_mlock+0x57/0x80 [ 325.973876][ T7198] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 325.977463][ T7198] __do_fast_syscall_32+0x65/0xf0 [ 325.980165][ T7198] do_fast_syscall_32+0x33/0x70 [ 325.982685][ T7198] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 325.986270][ T7198] RIP: 0023:0xf7f47549 [ 325.988891][ T7198] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 326.001118][ T7198] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 326.005680][ T7198] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 326.010044][ T7198] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 326.015016][ T7198] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 326.020875][ T7198] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 326.026787][ T7198] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 326.032875][ T7198] 09:37:04 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300), 0xc4b9e6fc867c6f68) 09:37:04 executing program 2: r0 = openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000001100), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, 0x0) 09:37:04 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 67) 09:37:04 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mremap(&(0x7f000085b000/0x4000)=nil, 0x4000, 0x3000, 0x7, &(0x7f0000221000/0x3000)=nil) msync(&(0x7f0000678000/0x4000)=nil, 0x4000, 0x2) 09:37:04 executing program 2: r0 = io_uring_setup(0x3e7a, &(0x7f0000003280)) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001280)={0x1, 0x1, 0x0, &(0x7f0000001200)=[{0x0}], 0x0}, 0x20) 09:37:04 executing program 3: r0 = openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000015c0), 0x0, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000001680)) 09:37:04 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mremap(&(0x7f000085b000/0x4000)=nil, 0x4000, 0x3000, 0x7, &(0x7f0000221000/0x3000)=nil) msync(&(0x7f0000678000/0x4000)=nil, 0x4000, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) gettid() (async) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)) (async) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) mremap(&(0x7f000085b000/0x4000)=nil, 0x4000, 0x3000, 0x7, &(0x7f0000221000/0x3000)=nil) (async) msync(&(0x7f0000678000/0x4000)=nil, 0x4000, 0x2) (async) 09:37:04 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001080), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000004100)={0x35, 0x6, 0x0, {0x0, 0x0, 0xc, 0x0, '/dev/capi20\x00'}}, 0x35) [ 326.194132][ T7210] FAULT_INJECTION: forcing a failure. [ 326.194132][ T7210] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 326.206414][ T7210] CPU: 3 PID: 7210 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 326.214745][ T7210] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 326.222511][ T7210] Call Trace: [ 326.225220][ T7210] 09:37:04 executing program 3: openat$uhid(0xffffffffffffff9c, &(0x7f0000000200), 0x802, 0x0) 09:37:04 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001080), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000004100)={0x35, 0x6, 0x0, {0x0, 0x0, 0xc, 0x0, '/dev/capi20\x00'}}, 0x35) [ 326.227764][ T7210] dump_stack_lvl+0xd1/0x138 [ 326.232180][ T7210] should_fail_ex.cold+0x5/0xa [ 326.235639][ T7210] prepare_alloc_pages+0x178/0x570 [ 326.239605][ T7210] __alloc_pages+0x149/0x5b0 [ 326.242634][ T7210] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 326.247459][ T7210] ? __lock_acquire+0x166e/0x56d0 [ 326.251723][ T7210] ? __lock_acquire+0xbc3/0x56d0 [ 326.256521][ T7210] __folio_alloc+0x16/0x40 [ 326.260006][ T7210] vma_alloc_folio+0x155/0x870 [ 326.263891][ T7210] ? policy_nodemask+0x1c0/0x1c0 [ 326.268157][ T7210] ? lock_chain_count+0x20/0x20 [ 326.272325][ T7210] __handle_mm_fault+0x1822/0x3c90 [ 326.277103][ T7210] ? vm_iomap_memory+0x190/0x190 [ 326.280689][ T7210] handle_mm_fault+0x1b6/0x850 [ 326.284068][ T7210] __get_user_pages+0x4f8/0xfc0 [ 326.287227][ T7210] ? follow_page_mask+0x10a0/0x10a0 [ 326.291084][ T7210] populate_vma_page_range+0x241/0x320 [ 326.295330][ T7210] __mm_populate+0x105/0x3b0 [ 326.298808][ T7210] ? faultin_vma_page_range+0x300/0x300 [ 326.303272][ T7210] ? up_write+0x1b0/0x520 [ 326.307017][ T7210] do_mlock+0x370/0x6d0 [ 326.310530][ T7210] ? folio_memcg+0x320/0x320 [ 326.313662][ T7210] ? fput+0x2f/0x1a0 [ 326.316468][ T7210] __ia32_sys_mlock+0x57/0x80 [ 326.320243][ T7210] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 326.324875][ T7210] __do_fast_syscall_32+0x65/0xf0 [ 326.328465][ T7210] do_fast_syscall_32+0x33/0x70 [ 326.332272][ T7210] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 326.337607][ T7210] RIP: 0023:0xf7f47549 [ 326.341036][ T7210] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 326.357280][ T7210] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 326.364206][ T7210] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 326.370084][ T7210] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 326.376409][ T7210] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 326.383147][ T7210] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 326.389028][ T7210] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 326.395534][ T7210] 09:37:04 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 68) 09:37:04 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mremap(&(0x7f000085b000/0x4000)=nil, 0x4000, 0x3000, 0x7, &(0x7f0000221000/0x3000)=nil) msync(&(0x7f0000678000/0x4000)=nil, 0x4000, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) gettid() (async) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)) (async) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) mremap(&(0x7f000085b000/0x4000)=nil, 0x4000, 0x3000, 0x7, &(0x7f0000221000/0x3000)=nil) (async) msync(&(0x7f0000678000/0x4000)=nil, 0x4000, 0x2) (async) 09:37:04 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) 09:37:04 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) 09:37:04 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) 09:37:04 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) 09:37:04 executing program 3: r0 = io_uring_setup(0x6ea9, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0xa, 0x0, 0x1) [ 326.502396][ T7235] FAULT_INJECTION: forcing a failure. [ 326.502396][ T7235] name fail_page_alloc, interval 1, probability 0, space 0, times 0 09:37:04 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0x4020940d, 0x0) [ 326.530597][ T7235] CPU: 2 PID: 7235 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 326.553692][ T7235] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 326.562026][ T7235] Call Trace: [ 326.565210][ T7235] [ 326.567990][ T7235] dump_stack_lvl+0xd1/0x138 [ 326.571946][ T7235] should_fail_ex.cold+0x5/0xa [ 326.576494][ T7235] prepare_alloc_pages+0x178/0x570 [ 326.582334][ T7235] __alloc_pages+0x149/0x5b0 [ 326.586871][ T7235] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 326.593300][ T7235] ? __lock_acquire+0x166e/0x56d0 [ 326.598134][ T7235] ? __lock_acquire+0xbc3/0x56d0 [ 326.603120][ T7235] __folio_alloc+0x16/0x40 [ 326.607769][ T7235] vma_alloc_folio+0x155/0x870 [ 326.613053][ T7235] ? policy_nodemask+0x1c0/0x1c0 [ 326.620915][ T7235] ? lock_chain_count+0x20/0x20 [ 326.624656][ T7235] __handle_mm_fault+0x1822/0x3c90 [ 326.629385][ T7235] ? vm_iomap_memory+0x190/0x190 [ 326.633831][ T7235] handle_mm_fault+0x1b6/0x850 [ 326.637782][ T7235] __get_user_pages+0x4f8/0xfc0 [ 326.642641][ T7235] ? follow_page_mask+0x10a0/0x10a0 [ 326.646627][ T7235] populate_vma_page_range+0x241/0x320 [ 326.650293][ T7235] __mm_populate+0x105/0x3b0 [ 326.654677][ T7235] ? faultin_vma_page_range+0x300/0x300 [ 326.659298][ T7235] ? up_write+0x1b0/0x520 [ 326.663417][ T7235] do_mlock+0x370/0x6d0 [ 326.666905][ T7235] ? folio_memcg+0x320/0x320 [ 326.670597][ T7235] ? fput+0x2f/0x1a0 [ 326.675038][ T7235] __ia32_sys_mlock+0x57/0x80 [ 326.679193][ T7235] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 326.684522][ T7235] __do_fast_syscall_32+0x65/0xf0 [ 326.688017][ T7235] do_fast_syscall_32+0x33/0x70 [ 326.691930][ T7235] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 326.697594][ T7235] RIP: 0023:0xf7f47549 [ 326.702052][ T7235] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 326.719550][ T7235] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 326.731043][ T7235] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 326.737593][ T7235] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 326.744882][ T7235] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 326.752772][ T7235] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 326.761067][ T7235] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 326.768411][ T7235] 09:37:05 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 69) 09:37:05 executing program 3: fsopen(&(0x7f0000000080)='nfsd\x00', 0x0) 09:37:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) [ 327.161929][ T7252] FAULT_INJECTION: forcing a failure. [ 327.161929][ T7252] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 327.207791][ T7252] CPU: 2 PID: 7252 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 327.217165][ T7252] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 327.230580][ T7252] Call Trace: [ 327.235866][ T7252] [ 327.244429][ T7252] dump_stack_lvl+0xd1/0x138 [ 327.247323][ T7252] should_fail_ex.cold+0x5/0xa [ 327.251521][ T7252] prepare_alloc_pages+0x178/0x570 [ 327.256261][ T7252] __alloc_pages+0x149/0x5b0 [ 327.260427][ T7252] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 327.266724][ T7252] ? __lock_acquire+0x166e/0x56d0 [ 327.271502][ T7252] ? __lock_acquire+0xbc3/0x56d0 [ 327.278043][ T7252] __folio_alloc+0x16/0x40 [ 327.281966][ T7252] vma_alloc_folio+0x155/0x870 [ 327.286101][ T7252] ? policy_nodemask+0x1c0/0x1c0 [ 327.290815][ T7252] ? lock_chain_count+0x20/0x20 [ 327.295966][ T7252] __handle_mm_fault+0x1822/0x3c90 [ 327.300600][ T7252] ? vm_iomap_memory+0x190/0x190 [ 327.306373][ T7252] handle_mm_fault+0x1b6/0x850 [ 327.310985][ T7252] __get_user_pages+0x4f8/0xfc0 [ 327.319358][ T7252] ? follow_page_mask+0x10a0/0x10a0 [ 327.323543][ T7252] populate_vma_page_range+0x241/0x320 [ 327.329599][ T7252] __mm_populate+0x105/0x3b0 [ 327.333303][ T7252] ? faultin_vma_page_range+0x300/0x300 [ 327.338975][ T7252] ? up_write+0x1b0/0x520 [ 327.348610][ T7252] do_mlock+0x370/0x6d0 [ 327.353804][ T7252] ? folio_memcg+0x320/0x320 [ 327.357322][ T7252] ? fput+0x2f/0x1a0 [ 327.360561][ T7252] __ia32_sys_mlock+0x57/0x80 [ 327.364491][ T7252] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 327.370062][ T7252] __do_fast_syscall_32+0x65/0xf0 [ 327.375162][ T7252] do_fast_syscall_32+0x33/0x70 [ 327.380454][ T7252] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 327.389483][ T7252] RIP: 0023:0xf7f47549 [ 327.393018][ T7252] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 327.417969][ T7252] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 327.435645][ T7252] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 327.444223][ T7252] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 327.452757][ T7252] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 09:37:05 executing program 3: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x14, 0x4093831, 0xffffffffffffffff, 0x0) [ 327.463264][ T7252] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 327.470908][ T7252] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 327.485803][ T7252] 09:37:05 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000074000/0x4000)=nil, 0x4000, 0x6, 0x4000010, r1, 0xe02c1000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fdatasync(r1) mmap$fb(&(0x7f00001c0000/0x2000)=nil, 0x2000, 0x2000000, 0x13, r1, 0x52000) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 09:37:05 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 70) [ 327.720232][ T7258] FAULT_INJECTION: forcing a failure. [ 327.720232][ T7258] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 327.750803][ T7258] CPU: 0 PID: 7258 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 327.758836][ T7258] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 327.765328][ T7258] Call Trace: [ 327.767630][ T7258] [ 327.769902][ T7258] dump_stack_lvl+0xd1/0x138 [ 327.781218][ T7258] should_fail_ex.cold+0x5/0xa [ 327.785289][ T7258] prepare_alloc_pages+0x178/0x570 [ 327.789140][ T7258] __alloc_pages+0x149/0x5b0 [ 327.793121][ T7258] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 327.798938][ T7258] ? __lock_acquire+0x166e/0x56d0 [ 327.803337][ T7258] ? __lock_acquire+0xbc3/0x56d0 [ 327.807641][ T7258] __folio_alloc+0x16/0x40 [ 327.811135][ T7258] vma_alloc_folio+0x155/0x870 [ 327.814494][ T7258] ? policy_nodemask+0x1c0/0x1c0 [ 327.817978][ T7258] ? lock_chain_count+0x20/0x20 [ 327.822038][ T7258] __handle_mm_fault+0x1822/0x3c90 [ 327.827011][ T7258] ? vm_iomap_memory+0x190/0x190 [ 327.830941][ T7258] handle_mm_fault+0x1b6/0x850 [ 327.834632][ T7258] __get_user_pages+0x4f8/0xfc0 [ 327.838384][ T7258] ? follow_page_mask+0x10a0/0x10a0 [ 327.842502][ T7258] populate_vma_page_range+0x241/0x320 [ 327.846540][ T7258] __mm_populate+0x105/0x3b0 [ 327.850088][ T7258] ? faultin_vma_page_range+0x300/0x300 [ 327.855139][ T7258] ? up_write+0x1b0/0x520 [ 327.858888][ T7258] do_mlock+0x370/0x6d0 [ 327.862721][ T7258] ? folio_memcg+0x320/0x320 [ 327.866938][ T7258] ? fput+0x2f/0x1a0 [ 327.873220][ T7258] __ia32_sys_mlock+0x57/0x80 [ 327.877259][ T7258] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 327.882807][ T7258] __do_fast_syscall_32+0x65/0xf0 [ 327.886584][ T7258] do_fast_syscall_32+0x33/0x70 [ 327.890596][ T7258] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 327.896501][ T7258] RIP: 0023:0xf7f47549 [ 327.899997][ T7258] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 327.915492][ T7258] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 327.921330][ T7258] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 327.927385][ T7258] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 327.933989][ T7258] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 327.940599][ T7258] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 327.947171][ T7258] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 327.953510][ T7258] 09:37:06 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000001c0)={'geneve0\x00', 0xd2159a3}) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = gettid() syz_io_uring_setup(0x3a55, &(0x7f0000000040)={0x0, 0x76df, 0x0, 0x3, 0x3b7}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000200)=0x0) process_vm_writev(r2, &(0x7f0000000340)=[{&(0x7f0000000240)=""/55, 0x37}, {&(0x7f0000000280)=""/147, 0x93}], 0x2, &(0x7f00000008c0)=[{&(0x7f0000000380)=""/153, 0x99}, {&(0x7f0000000440)=""/248, 0xf8}, {&(0x7f0000000540)=""/23, 0x17}, {&(0x7f0000000580)=""/222, 0xde}, {&(0x7f0000000680)=""/139, 0x8b}, {&(0x7f0000000740)=""/152, 0x98}, {&(0x7f0000000800)=""/138, 0x8a}], 0x7, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) madvise(&(0x7f00006b9000/0x1000)=nil, 0x1000, 0x64) 09:37:06 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000500), 0x7, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000280), 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000540)={0x0, "cfd2cfdc8ddea4eb7658dcb241a87be5"}) gettid() r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x3c41632c}], 0x286, 0x0) syz_clone3(&(0x7f0000000140)={0x62080000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)=0x0, {0x3c}, &(0x7f0000002d80)=""/4096, 0x1000, &(0x7f0000003d80)=""/4096, &(0x7f0000000100)=[0x0, r3, 0x0], 0x3, {r0}}, 0x58) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f00000001c0)={r4}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, &(0x7f0000000000)={0x2, 0x4, [0x80]}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000001540)={r2, "591b5f13b172f77bd6ca8eaf42e84187"}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000002980)={0x0, 0xc24, 0x20000000000003}) 09:37:06 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 71) 09:37:06 executing program 2: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000021c0), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc020660b, 0x0) [ 328.116728][ T7268] FAULT_INJECTION: forcing a failure. [ 328.116728][ T7268] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 328.141901][ T7268] CPU: 3 PID: 7268 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 328.149864][ T7268] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 328.156834][ T7268] Call Trace: [ 328.159373][ T7268] [ 328.161413][ T7268] dump_stack_lvl+0xd1/0x138 [ 328.165178][ T7268] should_fail_ex.cold+0x5/0xa [ 328.168705][ T7268] prepare_alloc_pages+0x178/0x570 [ 328.172565][ T7268] __alloc_pages+0x149/0x5b0 [ 328.175434][ T7268] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 328.181010][ T7268] ? __lock_acquire+0x166e/0x56d0 [ 328.187586][ T7268] ? __lock_acquire+0xbc3/0x56d0 [ 328.191937][ T7268] __folio_alloc+0x16/0x40 [ 328.198777][ T7268] vma_alloc_folio+0x155/0x870 [ 328.202891][ T7268] ? policy_nodemask+0x1c0/0x1c0 [ 328.206780][ T7268] ? lock_chain_count+0x20/0x20 [ 328.214647][ T7268] __handle_mm_fault+0x1822/0x3c90 [ 328.218547][ T7268] ? vm_iomap_memory+0x190/0x190 [ 328.222129][ T7268] handle_mm_fault+0x1b6/0x850 [ 328.225955][ T7268] __get_user_pages+0x4f8/0xfc0 [ 328.229910][ T7268] ? follow_page_mask+0x10a0/0x10a0 [ 328.234343][ T7268] populate_vma_page_range+0x241/0x320 [ 328.238543][ T7268] __mm_populate+0x105/0x3b0 [ 328.242391][ T7268] ? faultin_vma_page_range+0x300/0x300 09:37:06 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000003240), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) [ 328.246916][ T7268] ? up_write+0x1b0/0x520 [ 328.251046][ T7268] do_mlock+0x370/0x6d0 [ 328.256689][ T7268] ? folio_memcg+0x320/0x320 [ 328.260160][ T7268] ? fput+0x2f/0x1a0 [ 328.262749][ T7268] __ia32_sys_mlock+0x57/0x80 [ 328.265988][ T7268] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 328.270912][ T7268] __do_fast_syscall_32+0x65/0xf0 [ 328.276560][ T7268] do_fast_syscall_32+0x33/0x70 [ 328.280393][ T7268] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 328.285031][ T7268] RIP: 0023:0xf7f47549 [ 328.288305][ T7268] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 328.303361][ T7268] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 328.309701][ T7268] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 328.315860][ T7268] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 328.322489][ T7268] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 328.329319][ T7268] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 328.333845][ T7268] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 328.339309][ T7268] 09:37:06 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 72) 09:37:06 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) (async) fdatasync(r0) (async) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000001c0)={'geneve0\x00', 0xd2159a3}) (async) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) r1 = gettid() (async) syz_io_uring_setup(0x3a55, &(0x7f0000000040)={0x0, 0x76df, 0x0, 0x3, 0x3b7}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000200)=0x0) process_vm_writev(r2, &(0x7f0000000340)=[{&(0x7f0000000240)=""/55, 0x37}, {&(0x7f0000000280)=""/147, 0x93}], 0x2, &(0x7f00000008c0)=[{&(0x7f0000000380)=""/153, 0x99}, {&(0x7f0000000440)=""/248, 0xf8}, {&(0x7f0000000540)=""/23, 0x17}, {&(0x7f0000000580)=""/222, 0xde}, {&(0x7f0000000680)=""/139, 0x8b}, {&(0x7f0000000740)=""/152, 0x98}, {&(0x7f0000000800)=""/138, 0x8a}], 0x7, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) (async) madvise(&(0x7f00006b9000/0x1000)=nil, 0x1000, 0x64) 09:37:06 executing program 2: r0 = eventfd2(0x7, 0x1) read$eventfd(r0, &(0x7f0000000040), 0x8) [ 328.543143][ T7282] FAULT_INJECTION: forcing a failure. [ 328.543143][ T7282] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 328.558282][ T7282] CPU: 2 PID: 7282 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 328.566108][ T7282] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 328.572317][ T7282] Call Trace: [ 328.574878][ T7282] [ 328.577183][ T7282] dump_stack_lvl+0xd1/0x138 [ 328.580460][ T7282] should_fail_ex.cold+0x5/0xa [ 328.583789][ T7282] prepare_alloc_pages+0x178/0x570 [ 328.587627][ T7282] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 328.592106][ T7282] __alloc_pages+0x149/0x5b0 [ 328.595554][ T7282] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 328.602184][ T7282] ? __lock_acquire+0x166e/0x56d0 [ 328.607561][ T7282] ? __lock_acquire+0xbc3/0x56d0 [ 328.611681][ T7282] __folio_alloc+0x16/0x40 [ 328.628752][ T7282] vma_alloc_folio+0x155/0x870 [ 328.636323][ T7282] ? policy_nodemask+0x1c0/0x1c0 [ 328.639900][ T7282] ? lock_chain_count+0x20/0x20 [ 328.643685][ T7282] __handle_mm_fault+0x1822/0x3c90 [ 328.647976][ T7282] ? vm_iomap_memory+0x190/0x190 [ 328.653004][ T7282] handle_mm_fault+0x1b6/0x850 [ 328.657199][ T7282] __get_user_pages+0x4f8/0xfc0 [ 328.660894][ T7282] ? follow_page_mask+0x10a0/0x10a0 [ 328.664061][ T7282] populate_vma_page_range+0x241/0x320 [ 328.667548][ T7282] __mm_populate+0x105/0x3b0 [ 328.670254][ T7282] ? faultin_vma_page_range+0x300/0x300 [ 328.673992][ T7282] ? up_write+0x1b0/0x520 [ 328.676674][ T7282] do_mlock+0x370/0x6d0 [ 328.679780][ T7282] ? folio_memcg+0x320/0x320 [ 328.683701][ T7282] ? fput+0x2f/0x1a0 [ 328.686835][ T7282] __ia32_sys_mlock+0x57/0x80 [ 328.690802][ T7282] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 328.695826][ T7282] __do_fast_syscall_32+0x65/0xf0 [ 328.699866][ T7282] do_fast_syscall_32+0x33/0x70 [ 328.704037][ T7282] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 328.708522][ T7282] RIP: 0023:0xf7f47549 [ 328.711439][ T7282] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 328.727434][ T7282] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 328.733720][ T7282] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 328.739372][ T7282] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 328.745811][ T7282] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 328.752035][ T7282] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 328.758511][ T7282] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 328.765079][ T7282] [ 328.934087][ T7290] FAULT_INJECTION: forcing a failure. 09:37:07 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 73) 09:37:07 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000001c0)={'geneve0\x00', 0xd2159a3}) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = gettid() (async) syz_io_uring_setup(0x3a55, &(0x7f0000000040)={0x0, 0x76df, 0x0, 0x3, 0x3b7}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000200)=0x0) process_vm_writev(r2, &(0x7f0000000340)=[{&(0x7f0000000240)=""/55, 0x37}, {&(0x7f0000000280)=""/147, 0x93}], 0x2, &(0x7f00000008c0)=[{&(0x7f0000000380)=""/153, 0x99}, {&(0x7f0000000440)=""/248, 0xf8}, {&(0x7f0000000540)=""/23, 0x17}, {&(0x7f0000000580)=""/222, 0xde}, {&(0x7f0000000680)=""/139, 0x8b}, {&(0x7f0000000740)=""/152, 0x98}, {&(0x7f0000000800)=""/138, 0x8a}], 0x7, 0x0) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) madvise(&(0x7f00006b9000/0x1000)=nil, 0x1000, 0x64) 09:37:07 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000740), 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) [ 328.934087][ T7290] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 328.949704][ T7290] CPU: 2 PID: 7290 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 09:37:07 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x224702, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 09:37:07 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000500), 0x7, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000280), 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000540)={0x0, "cfd2cfdc8ddea4eb7658dcb241a87be5"}) (async) gettid() (async) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x3c41632c}], 0x286, 0x0) syz_clone3(&(0x7f0000000140)={0x62080000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)=0x0, {0x3c}, &(0x7f0000002d80)=""/4096, 0x1000, &(0x7f0000003d80)=""/4096, &(0x7f0000000100)=[0x0, r3, 0x0], 0x3, {r0}}, 0x58) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f00000001c0)={r4}) (async) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, &(0x7f0000000000)={0x2, 0x4, [0x80]}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000001540)={r2, "591b5f13b172f77bd6ca8eaf42e84187"}) (async) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000002980)={0x0, 0xc24, 0x20000000000003}) [ 328.958427][ T7290] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 328.966596][ T7290] Call Trace: [ 328.969908][ T7290] [ 328.972222][ T7290] dump_stack_lvl+0xd1/0x138 [ 328.975827][ T7290] should_fail_ex.cold+0x5/0xa [ 328.979967][ T7290] prepare_alloc_pages+0x178/0x570 [ 328.983010][ T7290] __alloc_pages+0x149/0x5b0 [ 328.985703][ T7290] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 328.989535][ T7290] ? __lock_acquire+0x166e/0x56d0 [ 328.993482][ T7290] ? __lock_acquire+0xbc3/0x56d0 [ 328.998534][ T7290] __folio_alloc+0x16/0x40 [ 329.002052][ T7290] vma_alloc_folio+0x155/0x870 [ 329.005443][ T7290] ? policy_nodemask+0x1c0/0x1c0 [ 329.009150][ T7290] ? lock_chain_count+0x20/0x20 [ 329.013180][ T7290] __handle_mm_fault+0x1822/0x3c90 [ 329.017930][ T7290] ? vm_iomap_memory+0x190/0x190 [ 329.022216][ T7290] handle_mm_fault+0x1b6/0x850 [ 329.025863][ T7290] __get_user_pages+0x4f8/0xfc0 09:37:07 executing program 2: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x101140, 0x0) [ 329.030102][ T7290] ? follow_page_mask+0x10a0/0x10a0 [ 329.035051][ T7290] populate_vma_page_range+0x241/0x320 [ 329.040359][ T7290] __mm_populate+0x105/0x3b0 [ 329.046185][ T7290] ? faultin_vma_page_range+0x300/0x300 [ 329.050623][ T7290] ? up_write+0x1b0/0x520 [ 329.053827][ T7290] do_mlock+0x370/0x6d0 [ 329.057207][ T7290] ? folio_memcg+0x320/0x320 [ 329.061294][ T7290] ? fput+0x2f/0x1a0 [ 329.064783][ T7290] __ia32_sys_mlock+0x57/0x80 [ 329.068867][ T7290] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 329.074580][ T7290] __do_fast_syscall_32+0x65/0xf0 [ 329.079013][ T7290] do_fast_syscall_32+0x33/0x70 [ 329.083325][ T7290] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 329.088979][ T7290] RIP: 0023:0xf7f47549 [ 329.092709][ T7290] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 329.108965][ T7290] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 329.115843][ T7290] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 329.123327][ T7290] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 329.130318][ T7290] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 329.137914][ T7290] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 329.144105][ T7290] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 329.150817][ T7290] 09:37:07 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 74) 09:37:07 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x2) 09:37:07 executing program 2: io_uring_setup(0x55c6, &(0x7f0000000000)) 09:37:07 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) gettid() (async) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) ftruncate(0xffffffffffffffff, 0x2) (async) [ 329.320067][ T7307] FAULT_INJECTION: forcing a failure. [ 329.320067][ T7307] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 329.342598][ T7307] CPU: 3 PID: 7307 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 329.351237][ T7307] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 329.358520][ T7307] Call Trace: [ 329.361496][ T7307] [ 329.363726][ T7307] dump_stack_lvl+0xd1/0x138 [ 329.367848][ T7307] should_fail_ex.cold+0x5/0xa [ 329.370805][ T7307] prepare_alloc_pages+0x178/0x570 [ 329.374095][ T7307] __alloc_pages+0x149/0x5b0 [ 329.377405][ T7307] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 329.382070][ T7307] ? __lock_acquire+0x166e/0x56d0 [ 329.385644][ T7307] ? __lock_acquire+0xbc3/0x56d0 [ 329.389281][ T7307] __folio_alloc+0x16/0x40 [ 329.392396][ T7307] vma_alloc_folio+0x155/0x870 [ 329.395940][ T7307] ? policy_nodemask+0x1c0/0x1c0 [ 329.399264][ T7307] ? lock_chain_count+0x20/0x20 [ 329.402311][ T7307] __handle_mm_fault+0x1822/0x3c90 [ 329.405512][ T7307] ? vm_iomap_memory+0x190/0x190 [ 329.409393][ T7307] handle_mm_fault+0x1b6/0x850 [ 329.416486][ T7307] __get_user_pages+0x4f8/0xfc0 [ 329.420061][ T7307] ? follow_page_mask+0x10a0/0x10a0 [ 329.424206][ T7307] populate_vma_page_range+0x241/0x320 [ 329.429799][ T7307] __mm_populate+0x105/0x3b0 [ 329.433868][ T7307] ? faultin_vma_page_range+0x300/0x300 [ 329.437945][ T7307] ? up_write+0x1b0/0x520 [ 329.441113][ T7307] do_mlock+0x370/0x6d0 [ 329.444127][ T7307] ? folio_memcg+0x320/0x320 [ 329.447788][ T7307] ? fput+0x2f/0x1a0 [ 329.450934][ T7307] __ia32_sys_mlock+0x57/0x80 [ 329.454430][ T7307] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 329.459255][ T7307] __do_fast_syscall_32+0x65/0xf0 [ 329.462263][ T7307] do_fast_syscall_32+0x33/0x70 [ 329.464977][ T7307] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 329.472964][ T7307] RIP: 0023:0xf7f47549 [ 329.476148][ T7307] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 329.491361][ T7307] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 329.497607][ T7307] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 329.504384][ T7307] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 329.510659][ T7307] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 329.528006][ T7307] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 329.533624][ T7307] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 329.539645][ T7307] 09:37:07 executing program 2: fsopen(&(0x7f0000000140)='erofs\x00', 0x0) 09:37:07 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) gettid() (async) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) ftruncate(0xffffffffffffffff, 0x2) (async) [ 331.456555][ T7325] FAULT_INJECTION: forcing a failure. [ 331.456555][ T7325] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 331.467819][ T7325] CPU: 3 PID: 7325 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 09:37:09 executing program 2: fsopen(&(0x7f0000002140)='squashfs\x00', 0x0) 09:37:09 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 75) 09:37:09 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mprotect(&(0x7f0000542000/0x1000)=nil, 0x1000, 0x0) move_pages(0x0, 0x4, &(0x7f0000000040)=[&(0x7f0000305000/0x4000)=nil, &(0x7f000034f000/0x1000)=nil, &(0x7f00008cf000/0x4000)=nil, &(0x7f000028c000/0x2000)=nil], &(0x7f0000000080)=[0xffff], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xfffffffffffffece}], 0x1, 0x0) 09:37:09 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2001, 0x0) read$FUSE(r0, 0x0, 0x0) 09:37:09 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000500), 0x7, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000280), 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000540)={0x0, "cfd2cfdc8ddea4eb7658dcb241a87be5"}) gettid() r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x3c41632c}], 0x286, 0x0) syz_clone3(&(0x7f0000000140)={0x62080000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)=0x0, {0x3c}, &(0x7f0000002d80)=""/4096, 0x1000, &(0x7f0000003d80)=""/4096, &(0x7f0000000100)=[0x0, r3, 0x0], 0x3, {r0}}, 0x58) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f00000001c0)={r4}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, &(0x7f0000000000)={0x2, 0x4, [0x80]}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000001540)={r2, "591b5f13b172f77bd6ca8eaf42e84187"}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000002980)={0x0, 0xc24, 0x20000000000003}) syz_open_dev$mouse(&(0x7f0000000500), 0x7, 0x0) (async) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000280), 0x2) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000540)={0x0, "cfd2cfdc8ddea4eb7658dcb241a87be5"}) (async) gettid() (async) getpid() (async) process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x3c41632c}], 0x286, 0x0) (async) syz_clone3(&(0x7f0000000140)={0x62080000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x3c}, &(0x7f0000002d80)=""/4096, 0x1000, &(0x7f0000003d80)=""/4096, &(0x7f0000000100)=[0x0, r3, 0x0], 0x3, {r0}}, 0x58) (async) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f00000001c0)={r4}) (async) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, &(0x7f0000000000)={0x2, 0x4, [0x80]}) (async) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000001540)={r2, "591b5f13b172f77bd6ca8eaf42e84187"}) (async) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000002980)={0x0, 0xc24, 0x20000000000003}) (async) [ 331.475704][ T7325] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 331.483809][ T7325] Call Trace: [ 331.486623][ T7325] [ 331.488787][ T7325] dump_stack_lvl+0xd1/0x138 [ 331.492053][ T7325] should_fail_ex.cold+0x5/0xa [ 331.496003][ T7325] prepare_alloc_pages+0x178/0x570 [ 331.499980][ T7325] __alloc_pages+0x149/0x5b0 [ 331.503665][ T7325] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 331.508941][ T7325] ? __lock_acquire+0x166e/0x56d0 [ 331.514144][ T7325] ? __lock_acquire+0xbc3/0x56d0 [ 331.518302][ T7325] __folio_alloc+0x16/0x40 [ 331.522169][ T7325] vma_alloc_folio+0x155/0x870 [ 331.539166][ T7325] ? policy_nodemask+0x1c0/0x1c0 [ 331.543665][ T7325] ? lock_chain_count+0x20/0x20 [ 331.548011][ T7325] __handle_mm_fault+0x1822/0x3c90 [ 331.552825][ T7325] ? vm_iomap_memory+0x190/0x190 [ 331.556697][ T7325] handle_mm_fault+0x1b6/0x850 [ 331.560489][ T7325] __get_user_pages+0x4f8/0xfc0 [ 331.564004][ T7325] ? follow_page_mask+0x10a0/0x10a0 [ 331.568091][ T7325] populate_vma_page_range+0x241/0x320 [ 331.573049][ T7325] __mm_populate+0x105/0x3b0 [ 331.577129][ T7325] ? faultin_vma_page_range+0x300/0x300 [ 331.581227][ T7325] ? up_write+0x1b0/0x520 [ 331.584288][ T7325] do_mlock+0x370/0x6d0 [ 331.587744][ T7325] ? folio_memcg+0x320/0x320 [ 331.591682][ T7325] ? fput+0x2f/0x1a0 [ 331.594787][ T7325] __ia32_sys_mlock+0x57/0x80 [ 331.599064][ T7325] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 331.604866][ T7325] __do_fast_syscall_32+0x65/0xf0 [ 331.609365][ T7325] do_fast_syscall_32+0x33/0x70 [ 331.612682][ T7325] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 331.617001][ T7325] RIP: 0023:0xf7f47549 [ 331.620428][ T7325] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 331.635065][ T7325] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 331.642095][ T7325] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 331.648528][ T7325] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 331.654606][ T7325] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 331.660760][ T7325] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 331.667433][ T7325] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 331.673472][ T7325] 09:37:09 executing program 2: r0 = io_uring_setup(0x3e7a, &(0x7f0000003280)) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0x13, 0x0, 0x0) 09:37:09 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0x40049409, &(0x7f0000000340)={{0x1, 0x1, 0x18}, './file0\x00'}) 09:37:10 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mprotect(&(0x7f0000542000/0x1000)=nil, 0x1000, 0x0) move_pages(0x0, 0x4, &(0x7f0000000040)=[&(0x7f0000305000/0x4000)=nil, &(0x7f000034f000/0x1000)=nil, &(0x7f00008cf000/0x4000)=nil, &(0x7f000028c000/0x2000)=nil], &(0x7f0000000080)=[0xffff], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (async) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xfffffffffffffece}], 0x1, 0x0) 09:37:10 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 76) 09:37:10 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async, rerun: 32) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async, rerun: 32) mprotect(&(0x7f0000542000/0x1000)=nil, 0x1000, 0x0) (async) move_pages(0x0, 0x4, &(0x7f0000000040)=[&(0x7f0000305000/0x4000)=nil, &(0x7f000034f000/0x1000)=nil, &(0x7f00008cf000/0x4000)=nil, &(0x7f000028c000/0x2000)=nil], &(0x7f0000000080)=[0xffff], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (async) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xfffffffffffffece}], 0x1, 0x0) [ 331.822990][ T7349] FAULT_INJECTION: forcing a failure. [ 331.822990][ T7349] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 331.834875][ T7349] CPU: 2 PID: 7349 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 331.844068][ T7349] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 331.851816][ T7349] Call Trace: [ 331.854463][ T7349] [ 331.857586][ T7349] dump_stack_lvl+0xd1/0x138 [ 331.862005][ T7349] should_fail_ex.cold+0x5/0xa [ 331.865926][ T7349] prepare_alloc_pages+0x178/0x570 [ 331.872235][ T7349] __alloc_pages+0x149/0x5b0 [ 331.876293][ T7349] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 331.882289][ T7349] ? __lock_acquire+0x166e/0x56d0 [ 331.886725][ T7349] ? __lock_acquire+0xbc3/0x56d0 [ 331.891031][ T7349] __folio_alloc+0x16/0x40 [ 331.894787][ T7349] vma_alloc_folio+0x155/0x870 [ 331.898905][ T7349] ? policy_nodemask+0x1c0/0x1c0 [ 331.903218][ T7349] ? lock_chain_count+0x20/0x20 [ 331.907710][ T7349] __handle_mm_fault+0x1822/0x3c90 [ 331.911934][ T7349] ? vm_iomap_memory+0x190/0x190 [ 331.916621][ T7349] handle_mm_fault+0x1b6/0x850 [ 331.920713][ T7349] __get_user_pages+0x4f8/0xfc0 [ 331.924680][ T7349] ? follow_page_mask+0x10a0/0x10a0 [ 331.929271][ T7349] populate_vma_page_range+0x241/0x320 [ 331.933724][ T7349] __mm_populate+0x105/0x3b0 [ 331.937761][ T7349] ? faultin_vma_page_range+0x300/0x300 [ 331.942357][ T7349] ? up_write+0x1b0/0x520 [ 331.945944][ T7349] do_mlock+0x370/0x6d0 [ 331.950390][ T7349] ? folio_memcg+0x320/0x320 [ 331.954826][ T7349] ? fput+0x2f/0x1a0 [ 331.958144][ T7349] __ia32_sys_mlock+0x57/0x80 [ 331.962831][ T7349] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 331.969849][ T7349] __do_fast_syscall_32+0x65/0xf0 [ 331.974496][ T7349] do_fast_syscall_32+0x33/0x70 [ 331.977885][ T7349] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 331.982427][ T7349] RIP: 0023:0xf7f47549 [ 331.985273][ T7349] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 332.001899][ T7349] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 332.009246][ T7349] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 332.016556][ T7349] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 332.023109][ T7349] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 332.030203][ T7349] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 332.037918][ T7349] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 332.044708][ T7349] 09:37:10 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 77) 09:37:10 executing program 3: r0 = fsopen(&(0x7f0000000080)='ntfs\x00', 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) 09:37:10 executing program 2: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000021c0), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0x5421, 0x0) 09:37:10 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) r1 = openat$damon_attrs(0xffffff9c, &(0x7f0000000040), 0x94280, 0x5) preadv2(r1, &(0x7f0000000540)=[{&(0x7f0000000080)=""/182, 0xb6}, {&(0x7f0000000140)=""/21, 0x15}, {&(0x7f0000000180)=""/207, 0xcf}, {&(0x7f0000000280)=""/49, 0x31}, {&(0x7f00000002c0)=""/8, 0x8}, {&(0x7f0000000300)=""/217, 0xd9}, {&(0x7f0000000400)=""/140, 0x8c}, {&(0x7f00000004c0)=""/72, 0x48}], 0x8, 0x0, 0xfffffffc, 0x1a) 09:37:10 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0x541b, 0x0) 09:37:10 executing program 2: r0 = fsopen(&(0x7f0000000080)='ntfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) [ 332.239055][ T7363] FAULT_INJECTION: forcing a failure. [ 332.239055][ T7363] name fail_page_alloc, interval 1, probability 0, space 0, times 0 09:37:10 executing program 3: r0 = fsopen(&(0x7f00000000c0)='ntfs3\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 09:37:10 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) r1 = openat$damon_attrs(0xffffff9c, &(0x7f0000000040), 0x94280, 0x5) preadv2(r1, &(0x7f0000000540)=[{&(0x7f0000000080)=""/182, 0xb6}, {&(0x7f0000000140)=""/21, 0x15}, {&(0x7f0000000180)=""/207, 0xcf}, {&(0x7f0000000280)=""/49, 0x31}, {&(0x7f00000002c0)=""/8, 0x8}, {&(0x7f0000000300)=""/217, 0xd9}, {&(0x7f0000000400)=""/140, 0x8c}, {&(0x7f00000004c0)=""/72, 0x48}], 0x8, 0x0, 0xfffffffc, 0x1a) [ 332.278488][ T7363] CPU: 0 PID: 7363 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 332.287822][ T7363] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 332.297333][ T7363] Call Trace: [ 332.300537][ T7363] [ 332.303112][ T7363] dump_stack_lvl+0xd1/0x138 [ 332.307659][ T7363] should_fail_ex.cold+0x5/0xa [ 332.312244][ T7363] prepare_alloc_pages+0x178/0x570 [ 332.315874][ T7363] __alloc_pages+0x149/0x5b0 [ 332.319266][ T7363] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 332.324349][ T7363] ? __lock_acquire+0x166e/0x56d0 [ 332.327948][ T7363] ? __lock_acquire+0xbc3/0x56d0 [ 332.331486][ T7363] __folio_alloc+0x16/0x40 [ 332.334778][ T7363] vma_alloc_folio+0x155/0x870 [ 332.339105][ T7363] ? policy_nodemask+0x1c0/0x1c0 [ 332.343481][ T7363] ? lock_chain_count+0x20/0x20 [ 332.346948][ T7363] __handle_mm_fault+0x1822/0x3c90 [ 332.350880][ T7363] ? vm_iomap_memory+0x190/0x190 [ 332.355229][ T7363] handle_mm_fault+0x1b6/0x850 [ 332.359519][ T7363] __get_user_pages+0x4f8/0xfc0 [ 332.363073][ T7363] ? follow_page_mask+0x10a0/0x10a0 [ 332.366957][ T7363] populate_vma_page_range+0x241/0x320 [ 332.370843][ T7363] __mm_populate+0x105/0x3b0 [ 332.374124][ T7363] ? faultin_vma_page_range+0x300/0x300 [ 332.378522][ T7363] ? up_write+0x1b0/0x520 [ 332.382220][ T7363] do_mlock+0x370/0x6d0 [ 332.385759][ T7363] ? folio_memcg+0x320/0x320 [ 332.390445][ T7363] ? fput+0x2f/0x1a0 [ 332.394028][ T7363] __ia32_sys_mlock+0x57/0x80 [ 332.397929][ T7363] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 332.403005][ T7363] __do_fast_syscall_32+0x65/0xf0 [ 332.406990][ T7363] do_fast_syscall_32+0x33/0x70 [ 332.411032][ T7363] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 332.424525][ T7363] RIP: 0023:0xf7f47549 [ 332.427776][ T7363] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 332.443446][ T7363] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 332.449165][ T7363] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 332.456136][ T7363] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 332.463698][ T7363] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 332.469735][ T7363] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 332.476094][ T7363] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 332.483897][ T7363] 09:37:10 executing program 2: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000021c0), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0x801c581f, 0x0) 09:37:10 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 78) 09:37:10 executing program 3: openat$damon_attrs(0xffffffffffffff9c, &(0x7f0000003900), 0x109280, 0x0) 09:37:10 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) r1 = openat$damon_attrs(0xffffff9c, &(0x7f0000000040), 0x94280, 0x5) preadv2(r1, &(0x7f0000000540)=[{&(0x7f0000000080)=""/182, 0xb6}, {&(0x7f0000000140)=""/21, 0x15}, {&(0x7f0000000180)=""/207, 0xcf}, {&(0x7f0000000280)=""/49, 0x31}, {&(0x7f00000002c0)=""/8, 0x8}, {&(0x7f0000000300)=""/217, 0xd9}, {&(0x7f0000000400)=""/140, 0x8c}, {&(0x7f00000004c0)=""/72, 0x48}], 0x8, 0x0, 0xfffffffc, 0x1a) 09:37:11 executing program 3: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) fcntl$getown(r0, 0x9) [ 332.740847][ T7382] FAULT_INJECTION: forcing a failure. [ 332.740847][ T7382] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 332.791803][ T7382] CPU: 2 PID: 7382 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 332.804536][ T7382] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 332.810543][ T7382] Call Trace: [ 332.812786][ T7382] [ 332.815124][ T7382] dump_stack_lvl+0xd1/0x138 [ 332.820324][ T7382] should_fail_ex.cold+0x5/0xa [ 332.826384][ T7382] prepare_alloc_pages+0x178/0x570 [ 332.836161][ T7382] __alloc_pages+0x149/0x5b0 [ 332.841209][ T7382] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 332.846873][ T7382] ? __lock_acquire+0x166e/0x56d0 [ 332.856475][ T7382] ? __lock_acquire+0xbc3/0x56d0 [ 332.862067][ T7382] __folio_alloc+0x16/0x40 [ 332.868907][ T7382] vma_alloc_folio+0x155/0x870 [ 332.873006][ T7382] ? policy_nodemask+0x1c0/0x1c0 [ 332.877587][ T7382] ? lock_chain_count+0x20/0x20 [ 332.882545][ T7382] __handle_mm_fault+0x1822/0x3c90 [ 332.887301][ T7382] ? vm_iomap_memory+0x190/0x190 [ 332.892176][ T7382] handle_mm_fault+0x1b6/0x850 [ 332.897620][ T7382] __get_user_pages+0x4f8/0xfc0 [ 332.903044][ T7382] ? follow_page_mask+0x10a0/0x10a0 [ 332.908299][ T7382] populate_vma_page_range+0x241/0x320 [ 332.912783][ T7382] __mm_populate+0x105/0x3b0 [ 332.916523][ T7382] ? faultin_vma_page_range+0x300/0x300 [ 332.922234][ T7382] ? up_write+0x1b0/0x520 [ 332.927600][ T7382] do_mlock+0x370/0x6d0 [ 332.930952][ T7382] ? folio_memcg+0x320/0x320 [ 332.935399][ T7382] ? fput+0x2f/0x1a0 [ 332.939265][ T7382] __ia32_sys_mlock+0x57/0x80 [ 332.943617][ T7382] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 332.950382][ T7382] __do_fast_syscall_32+0x65/0xf0 [ 332.954484][ T7382] do_fast_syscall_32+0x33/0x70 [ 332.958712][ T7382] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 332.964089][ T7382] RIP: 0023:0xf7f47549 [ 332.967368][ T7382] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 332.984290][ T7382] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 332.991648][ T7382] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 332.998882][ T7382] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 333.005862][ T7382] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 333.013127][ T7382] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 333.019654][ T7382] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 333.026684][ T7382] 09:37:11 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 79) 09:37:11 executing program 3: r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000003f00), 0x1, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000003f80)) 09:37:11 executing program 2: mount_setattr(0xffffffffffffffff, 0x0, 0x1800, &(0x7f0000001380)={0x100089, 0x7c}, 0x20) 09:37:11 executing program 1: madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00000004c0)=""/252, 0xfc}], 0x1, &(0x7f0000000480)=[{&(0x7f0000000140)=""/173, 0xad}, {&(0x7f0000000200)=""/255, 0xff}, {&(0x7f0000000300)=""/186, 0xba}, {&(0x7f00000003c0)=""/152, 0x98}], 0x4, 0x0) 09:37:11 executing program 2: open$dir(&(0x7f0000000080)='./file0\x00', 0xf07f, 0x0) [ 333.178809][ T7390] FAULT_INJECTION: forcing a failure. [ 333.178809][ T7390] name fail_page_alloc, interval 1, probability 0, space 0, times 0 09:37:11 executing program 3: r0 = fsopen(&(0x7f0000000000)='sysv\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000040)='async\x00', 0x0, 0x0) [ 333.204492][ T7390] CPU: 3 PID: 7390 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 333.219788][ T39] audit: type=1800 audit(1672997831.499:14): pid=7396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=1163 res=0 errno=0 09:37:11 executing program 3: io_uring_setup(0x13e7a, &(0x7f0000000040)) 09:37:11 executing program 1: madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00000004c0)=""/252, 0xfc}], 0x1, &(0x7f0000000480)=[{&(0x7f0000000140)=""/173, 0xad}, {&(0x7f0000000200)=""/255, 0xff}, {&(0x7f0000000300)=""/186, 0xba}, {&(0x7f00000003c0)=""/152, 0x98}], 0x4, 0x0) [ 333.226299][ T7390] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 333.226322][ T7390] Call Trace: [ 333.226333][ T7390] [ 333.226346][ T7390] dump_stack_lvl+0xd1/0x138 [ 333.226392][ T7390] should_fail_ex.cold+0x5/0xa [ 333.226424][ T7390] prepare_alloc_pages+0x178/0x570 [ 333.226468][ T7390] __alloc_pages+0x149/0x5b0 [ 333.226501][ T7390] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 333.270338][ T7390] ? __lock_acquire+0x166e/0x56d0 [ 333.274174][ T7390] ? __lock_acquire+0xbc3/0x56d0 [ 333.278644][ T7390] __folio_alloc+0x16/0x40 [ 333.282047][ T7390] vma_alloc_folio+0x155/0x870 [ 333.286424][ T7390] ? policy_nodemask+0x1c0/0x1c0 [ 333.290871][ T7390] ? lock_chain_count+0x20/0x20 [ 333.295677][ T7390] __handle_mm_fault+0x1822/0x3c90 [ 333.300144][ T7390] ? vm_iomap_memory+0x190/0x190 [ 333.303566][ T7390] handle_mm_fault+0x1b6/0x850 [ 333.307452][ T7390] __get_user_pages+0x4f8/0xfc0 [ 333.311745][ T7390] ? follow_page_mask+0x10a0/0x10a0 [ 333.315854][ T7390] populate_vma_page_range+0x241/0x320 [ 333.319945][ T7390] __mm_populate+0x105/0x3b0 [ 333.323092][ T7390] ? faultin_vma_page_range+0x300/0x300 [ 333.326918][ T7390] ? up_write+0x1b0/0x520 [ 333.329734][ T7390] do_mlock+0x370/0x6d0 [ 333.332711][ T7390] ? folio_memcg+0x320/0x320 [ 333.336691][ T7390] ? fput+0x2f/0x1a0 [ 333.339349][ T7390] __ia32_sys_mlock+0x57/0x80 [ 333.342412][ T7390] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 333.346827][ T7390] __do_fast_syscall_32+0x65/0xf0 [ 333.351094][ T7390] do_fast_syscall_32+0x33/0x70 [ 333.355048][ T7390] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 333.359584][ T7390] RIP: 0023:0xf7f47549 [ 333.362742][ T7390] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 333.375883][ T7390] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 333.381338][ T7390] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 333.386391][ T7390] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 333.392007][ T7390] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 333.398193][ T7390] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 333.404411][ T7390] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 333.410113][ T7390] 09:37:11 executing program 3: mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x110000}, 0x20) 09:37:11 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 80) 09:37:11 executing program 1: madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00000004c0)=""/252, 0xfc}], 0x1, &(0x7f0000000480)=[{&(0x7f0000000140)=""/173, 0xad}, {&(0x7f0000000200)=""/255, 0xff}, {&(0x7f0000000300)=""/186, 0xba}, {&(0x7f00000003c0)=""/152, 0x98}], 0x4, 0x0) 09:37:11 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000b80), 0x2, 0x0) poll(&(0x7f0000000bc0)=[{r0, 0x4214}], 0x1, 0x80000001) 09:37:11 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) fcntl$lock(r0, 0x5, &(0x7f0000000000)) 09:37:11 executing program 2: fsopen(&(0x7f0000000080)='ext2\x00', 0x0) 09:37:11 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000003240), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000318"]) [ 333.565656][ T7413] FAULT_INJECTION: forcing a failure. [ 333.565656][ T7413] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 333.576859][ T7413] CPU: 0 PID: 7413 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 333.586355][ T7413] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 333.593372][ T7413] Call Trace: [ 333.595979][ T7413] [ 333.598245][ T7413] dump_stack_lvl+0xd1/0x138 [ 333.601625][ T7413] should_fail_ex.cold+0x5/0xa [ 333.605408][ T7413] prepare_alloc_pages+0x178/0x570 [ 333.609884][ T7413] __alloc_pages+0x149/0x5b0 [ 333.613325][ T7413] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 333.618418][ T7413] ? __lock_acquire+0x166e/0x56d0 [ 333.621676][ T7413] ? __lock_acquire+0xbc3/0x56d0 [ 333.625588][ T7413] __folio_alloc+0x16/0x40 [ 333.629194][ T7413] vma_alloc_folio+0x155/0x870 [ 333.633316][ T7413] ? policy_nodemask+0x1c0/0x1c0 [ 333.637531][ T7413] ? lock_chain_count+0x20/0x20 [ 333.641290][ T7413] __handle_mm_fault+0x1822/0x3c90 [ 333.645710][ T7413] ? vm_iomap_memory+0x190/0x190 [ 333.650551][ T7413] handle_mm_fault+0x1b6/0x850 [ 333.655587][ T7413] __get_user_pages+0x4f8/0xfc0 [ 333.660310][ T7413] ? follow_page_mask+0x10a0/0x10a0 [ 333.664417][ T7413] populate_vma_page_range+0x241/0x320 [ 333.669436][ T7413] __mm_populate+0x105/0x3b0 [ 333.672946][ T7413] ? faultin_vma_page_range+0x300/0x300 [ 333.677966][ T7413] ? up_write+0x1b0/0x520 [ 333.681725][ T7413] do_mlock+0x370/0x6d0 [ 333.685906][ T7413] ? folio_memcg+0x320/0x320 [ 333.689982][ T7413] ? fput+0x2f/0x1a0 [ 333.693671][ T7413] __ia32_sys_mlock+0x57/0x80 [ 333.697604][ T7413] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 333.705194][ T7413] __do_fast_syscall_32+0x65/0xf0 [ 333.709364][ T7413] do_fast_syscall_32+0x33/0x70 [ 333.713316][ T7413] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 333.718749][ T7413] RIP: 0023:0xf7f47549 [ 333.722578][ T7413] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 333.738676][ T7413] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 333.755158][ T7413] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 333.773517][ T7413] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 333.779658][ T7413] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 333.785879][ T7413] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 333.790909][ T7413] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 333.795935][ T7413] 09:37:12 executing program 1: madvise(&(0x7f00008ce000/0x1000)=nil, 0x1000, 0x17) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munmap(&(0x7f0000670000/0x4000)=nil, 0x4000) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mbind(&(0x7f0000840000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000080)=0x6, 0x7, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000092a000/0x1000)=nil, 0x1000, &(0x7f0000000040)='\x00') mbind(&(0x7f00007f4000/0x6000)=nil, 0x6000, 0x0, &(0x7f00000000c0)=0xfffffffffffffffe, 0xfffffff7, 0x2) 09:37:12 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 81) [ 333.874578][ T7415] autofs4:pid:7415:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.50331649), cmd(0xc0189375) [ 333.908587][ T7419] FAULT_INJECTION: forcing a failure. [ 333.908587][ T7419] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 333.911376][ T7415] autofs4:pid:7415:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 333.923001][ T7419] CPU: 0 PID: 7419 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 333.935331][ T7419] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 333.942008][ T7419] Call Trace: [ 333.944455][ T7419] [ 333.946747][ T7419] dump_stack_lvl+0xd1/0x138 [ 333.950428][ T7419] should_fail_ex.cold+0x5/0xa [ 333.954265][ T7419] prepare_alloc_pages+0x178/0x570 [ 333.958062][ T7419] __alloc_pages+0x149/0x5b0 [ 333.961423][ T7419] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 333.966139][ T7419] ? __lock_acquire+0x166e/0x56d0 [ 333.969935][ T7419] ? __lock_acquire+0xbc3/0x56d0 [ 333.973842][ T7419] __folio_alloc+0x16/0x40 [ 333.977265][ T7419] vma_alloc_folio+0x155/0x870 [ 333.981619][ T7419] ? policy_nodemask+0x1c0/0x1c0 [ 333.985455][ T7419] ? lock_chain_count+0x20/0x20 [ 333.990089][ T7419] __handle_mm_fault+0x1822/0x3c90 [ 333.994237][ T7419] ? vm_iomap_memory+0x190/0x190 [ 333.999400][ T7419] handle_mm_fault+0x1b6/0x850 [ 334.003242][ T7419] __get_user_pages+0x4f8/0xfc0 [ 334.007159][ T7419] ? follow_page_mask+0x10a0/0x10a0 [ 334.011556][ T7419] populate_vma_page_range+0x241/0x320 [ 334.016091][ T7419] __mm_populate+0x105/0x3b0 [ 334.019770][ T7419] ? faultin_vma_page_range+0x300/0x300 [ 334.024267][ T7419] ? up_write+0x1b0/0x520 [ 334.028143][ T7419] do_mlock+0x370/0x6d0 [ 334.031517][ T7419] ? folio_memcg+0x320/0x320 [ 334.035238][ T7419] ? fput+0x2f/0x1a0 [ 334.038214][ T7419] __ia32_sys_mlock+0x57/0x80 [ 334.042109][ T7419] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 334.047608][ T7419] __do_fast_syscall_32+0x65/0xf0 [ 334.052106][ T7419] do_fast_syscall_32+0x33/0x70 [ 334.055982][ T7419] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 334.060936][ T7419] RIP: 0023:0xf7f47549 [ 334.063797][ T7419] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 334.079662][ T7419] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 334.086416][ T7419] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 334.093411][ T7419] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 334.100658][ T7419] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 334.107232][ T7419] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 334.113445][ T7419] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 334.121220][ T7419] 09:37:12 executing program 3: pselect6(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f00000001c0)={&(0x7f0000000140), 0x8}) 09:37:12 executing program 1: madvise(&(0x7f00008ce000/0x1000)=nil, 0x1000, 0x17) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) munmap(&(0x7f0000670000/0x4000)=nil, 0x4000) (async) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mbind(&(0x7f0000840000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000080)=0x6, 0x7, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000092a000/0x1000)=nil, 0x1000, &(0x7f0000000040)='\x00') (async, rerun: 64) mbind(&(0x7f00007f4000/0x6000)=nil, 0x6000, 0x0, &(0x7f00000000c0)=0xfffffffffffffffe, 0xfffffff7, 0x2) (rerun: 64) 09:37:12 executing program 2: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000021c0), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 09:37:12 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 82) 09:37:12 executing program 1: madvise(&(0x7f00008ce000/0x1000)=nil, 0x1000, 0x17) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munmap(&(0x7f0000670000/0x4000)=nil, 0x4000) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mbind(&(0x7f0000840000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000080)=0x6, 0x7, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000092a000/0x1000)=nil, 0x1000, &(0x7f0000000040)='\x00') mbind(&(0x7f00007f4000/0x6000)=nil, 0x6000, 0x0, &(0x7f00000000c0)=0xfffffffffffffffe, 0xfffffff7, 0x2) madvise(&(0x7f00008ce000/0x1000)=nil, 0x1000, 0x17) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) munmap(&(0x7f0000670000/0x4000)=nil, 0x4000) (async) gettid() (async) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) mbind(&(0x7f0000840000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000080)=0x6, 0x7, 0x0) (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000092a000/0x1000)=nil, 0x1000, &(0x7f0000000040)='\x00') (async) mbind(&(0x7f00007f4000/0x6000)=nil, 0x6000, 0x0, &(0x7f00000000c0)=0xfffffffffffffffe, 0xfffffff7, 0x2) (async) 09:37:12 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000003240), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 09:37:12 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) io_uring_setup(0x7a22, &(0x7f0000000080)={0x0, 0x0, 0xa2, 0x0, 0x0, 0x0, r0}) [ 334.348803][ T7431] FAULT_INJECTION: forcing a failure. [ 334.348803][ T7431] name fail_page_alloc, interval 1, probability 0, space 0, times 0 09:37:12 executing program 3: openat$dsp1(0xffffffffffffff9c, &(0x7f0000001740), 0x940, 0x0) [ 334.369026][ T7431] CPU: 0 PID: 7431 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 334.376877][ T7431] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 334.383122][ T7431] Call Trace: [ 334.385292][ T7431] 09:37:12 executing program 2: r0 = fsopen(&(0x7f0000000040)='qnx6\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000000)='qnx6\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c) [ 334.387474][ T7431] dump_stack_lvl+0xd1/0x138 [ 334.391313][ T7431] should_fail_ex.cold+0x5/0xa [ 334.395295][ T7431] prepare_alloc_pages+0x178/0x570 [ 334.399617][ T7431] __alloc_pages+0x149/0x5b0 [ 334.404028][ T7431] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 334.410553][ T7431] ? __lock_acquire+0x166e/0x56d0 [ 334.415467][ T7431] ? __lock_acquire+0xbc3/0x56d0 [ 334.420074][ T7431] __folio_alloc+0x16/0x40 [ 334.424407][ T7431] vma_alloc_folio+0x155/0x870 [ 334.429264][ T7431] ? policy_nodemask+0x1c0/0x1c0 [ 334.434008][ T7431] ? lock_chain_count+0x20/0x20 [ 334.437858][ T7431] __handle_mm_fault+0x1822/0x3c90 [ 334.442327][ T7431] ? vm_iomap_memory+0x190/0x190 [ 334.446995][ T7431] handle_mm_fault+0x1b6/0x850 [ 334.451579][ T7431] __get_user_pages+0x4f8/0xfc0 [ 334.456079][ T7431] ? follow_page_mask+0x10a0/0x10a0 [ 334.460932][ T7431] populate_vma_page_range+0x241/0x320 [ 334.465119][ T7431] __mm_populate+0x105/0x3b0 [ 334.469043][ T7431] ? faultin_vma_page_range+0x300/0x300 [ 334.473552][ T7431] ? up_write+0x1b0/0x520 [ 334.477120][ T7431] do_mlock+0x370/0x6d0 [ 334.481078][ T7431] ? folio_memcg+0x320/0x320 [ 334.485277][ T7431] ? fput+0x2f/0x1a0 [ 334.488857][ T7431] __ia32_sys_mlock+0x57/0x80 [ 334.493543][ T7431] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 334.499944][ T7431] __do_fast_syscall_32+0x65/0xf0 [ 334.504837][ T7431] do_fast_syscall_32+0x33/0x70 [ 334.509655][ T7431] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 334.515769][ T7431] RIP: 0023:0xf7f47549 [ 334.519740][ T7431] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 334.537842][ T7431] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 334.560301][ T7431] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 334.565745][ T7431] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 334.571669][ T7431] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 334.579454][ T7431] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 334.586044][ T7431] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 334.593834][ T7431] 09:37:13 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 09:37:13 executing program 3: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x125c00, 0x0) 09:37:13 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 83) [ 334.735156][ T7453] QAT: Invalid ioctl 26129 09:37:13 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000000040)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) r1 = epoll_create1(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r1, &(0x7f0000000140)=[{}], 0x1, 0xb64, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x8000002}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20040090, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x2204c001, &(0x7f0000000340)={0xa, 0x2, 0x0, @empty, 0x3ff}, 0x1c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040)=0x100000000007bf, 0x4) sendto$inet6(r2, &(0x7f0000000440)='9', 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000004c0)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) fdatasync(r3) recvmmsg(r3, &(0x7f0000004f80)=[{{&(0x7f0000000080)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000000100)=""/73, 0x49}], 0x1, &(0x7f00000001c0)=""/195, 0xc3}, 0x4}, {{&(0x7f00000002c0)=@xdp, 0x80, &(0x7f0000001840)=[{&(0x7f0000000340)=""/18, 0x12}, {&(0x7f0000000380)=""/161, 0xa1}, {&(0x7f0000000440)=""/56, 0x38}, {&(0x7f0000000480)=""/203, 0xcb}, {&(0x7f0000000580)=""/132, 0x84}, {&(0x7f0000000640)=""/77, 0x4d}, {&(0x7f00000006c0)=""/224, 0xe0}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/122, 0x7a}], 0x9, &(0x7f00000018c0)=""/112, 0x70}, 0x2}, {{&(0x7f0000001940)=@qipcrtr, 0x80, &(0x7f0000001bc0)=[{&(0x7f00000019c0)=""/226, 0xe2}, {&(0x7f0000001ac0)=""/22, 0x16}, {&(0x7f0000001b00)=""/139, 0x8b}], 0x3, &(0x7f0000001c00)=""/131, 0x83}, 0x8}, {{&(0x7f0000001cc0)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001d40)=""/215, 0xd7}], 0x1, &(0x7f0000001e80)=""/202, 0xca}, 0xffffff77}, {{0x0, 0x0, &(0x7f0000002180)=[{&(0x7f0000001f80)=""/125, 0x7d}, {&(0x7f0000002000)=""/216, 0xd8}, {&(0x7f0000002100)=""/86, 0x56}], 0x3, &(0x7f00000021c0)=""/4096, 0x1000}, 0x3}, {{&(0x7f00000031c0)=@x25, 0x80, &(0x7f0000003640)=[{&(0x7f0000003240)=""/63, 0x3f}, {&(0x7f0000003280)}, {&(0x7f00000032c0)=""/240, 0xf0}, {&(0x7f00000033c0)=""/113, 0x71}, {&(0x7f0000003440)=""/72, 0x48}, {&(0x7f00000034c0)=""/189, 0xbd}, {&(0x7f0000003580)=""/18, 0x12}, {&(0x7f00000035c0)=""/100, 0x64}], 0x8}}, {{0x0, 0x0, &(0x7f00000046c0)=[{&(0x7f0000003680)=""/4096, 0x1000}, {&(0x7f0000004680)=""/52, 0x34}], 0x2}, 0x2}, {{&(0x7f0000004700)=@qipcrtr, 0x80, &(0x7f00000049c0)=[{&(0x7f0000004780)=""/60, 0x3c}, {&(0x7f00000047c0)}, {&(0x7f0000004800)=""/132, 0x84}, {&(0x7f00000048c0)=""/253, 0xfd}], 0x4, &(0x7f0000004a00)=""/217, 0xd9}, 0x7}, {{0x0, 0x0, &(0x7f0000004b40)=[{&(0x7f0000004b00)=""/30, 0x1e}], 0x1}, 0x95}, {{&(0x7f0000004b80)=@nfc, 0x80, &(0x7f0000004ec0)=[{&(0x7f0000004c00)=""/167, 0xa7}, {&(0x7f0000004cc0)=""/15, 0xf}, {&(0x7f0000004d00)=""/135, 0x87}, {&(0x7f0000004dc0)=""/205, 0xcd}], 0x4, &(0x7f0000004f00)=""/96, 0x60}, 0x1}], 0xa, 0x20002, 0x0) 09:37:13 executing program 3: fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000001200)='./binderfs/binder1\x00', 0x0, 0x0) poll(0x0, 0x0, 0x0) 09:37:13 executing program 2: openat$cdrom(0xffffffffffffff9c, &(0x7f0000000600), 0x800, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000680)) write$FUSE_OPEN(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) [ 334.794570][ T7454] FAULT_INJECTION: forcing a failure. 09:37:13 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000007e40), 0x2, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup2(r0, r1) [ 334.794570][ T7454] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 334.813140][ T7454] CPU: 2 PID: 7454 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 334.819644][ T7454] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 334.825581][ T7454] Call Trace: [ 334.827942][ T7454] [ 334.830808][ T7454] dump_stack_lvl+0xd1/0x138 [ 334.834779][ T7454] should_fail_ex.cold+0x5/0xa 09:37:13 executing program 2: r0 = io_uring_setup(0x6ea9, &(0x7f0000000000)) io_uring_enter(r0, 0x0, 0x5975, 0x1, &(0x7f0000000080), 0x8) [ 334.839143][ T7454] prepare_alloc_pages+0x178/0x570 [ 334.845073][ T7454] __alloc_pages+0x149/0x5b0 [ 334.848510][ T7454] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 334.853324][ T7454] ? __lock_acquire+0x166e/0x56d0 [ 334.857172][ T7454] ? __lock_acquire+0xbc3/0x56d0 [ 334.860827][ T7454] __folio_alloc+0x16/0x40 [ 334.864153][ T7454] vma_alloc_folio+0x155/0x870 [ 334.867550][ T7454] ? policy_nodemask+0x1c0/0x1c0 [ 334.871136][ T7454] ? lock_chain_count+0x20/0x20 [ 334.875092][ T7454] __handle_mm_fault+0x1822/0x3c90 [ 334.879763][ T7454] ? vm_iomap_memory+0x190/0x190 [ 334.884257][ T7454] handle_mm_fault+0x1b6/0x850 [ 334.887824][ T7454] __get_user_pages+0x4f8/0xfc0 [ 334.891519][ T7454] ? follow_page_mask+0x10a0/0x10a0 [ 334.895520][ T7454] populate_vma_page_range+0x241/0x320 [ 334.900365][ T7454] __mm_populate+0x105/0x3b0 [ 334.903716][ T7454] ? faultin_vma_page_range+0x300/0x300 [ 334.907816][ T7454] ? up_write+0x1b0/0x520 [ 334.910766][ T7454] do_mlock+0x370/0x6d0 [ 334.913578][ T7454] ? folio_memcg+0x320/0x320 [ 334.916794][ T7454] ? fput+0x2f/0x1a0 [ 334.919453][ T7454] __ia32_sys_mlock+0x57/0x80 [ 334.922570][ T7454] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 334.926899][ T7454] __do_fast_syscall_32+0x65/0xf0 [ 334.930095][ T7454] do_fast_syscall_32+0x33/0x70 [ 334.933262][ T7454] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 334.937753][ T7454] RIP: 0023:0xf7f47549 [ 334.941013][ T7454] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 334.954644][ T7454] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 334.961271][ T7454] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 334.967623][ T7454] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 334.974299][ T7454] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 334.980814][ T7454] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 334.987488][ T7454] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 334.994812][ T7454] 09:37:13 executing program 3: r0 = io_uring_setup(0x3e7a, &(0x7f0000003280)) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0x13, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x20) 09:37:13 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 84) 09:37:13 executing program 3: openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x2803, 0x0) [ 335.235648][ T7469] FAULT_INJECTION: forcing a failure. 09:37:13 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000000040)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) r1 = epoll_create1(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_pwait(r1, &(0x7f0000000140)=[{}], 0x1, 0xb64, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x8000002}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20040090, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x2204c001, &(0x7f0000000340)={0xa, 0x2, 0x0, @empty, 0x3ff}, 0x1c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040)=0x100000000007bf, 0x4) sendto$inet6(r2, &(0x7f0000000440)='9', 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000004c0)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) fdatasync(r3) recvmmsg(r3, &(0x7f0000004f80)=[{{&(0x7f0000000080)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000000100)=""/73, 0x49}], 0x1, &(0x7f00000001c0)=""/195, 0xc3}, 0x4}, {{&(0x7f00000002c0)=@xdp, 0x80, &(0x7f0000001840)=[{&(0x7f0000000340)=""/18, 0x12}, {&(0x7f0000000380)=""/161, 0xa1}, {&(0x7f0000000440)=""/56, 0x38}, {&(0x7f0000000480)=""/203, 0xcb}, {&(0x7f0000000580)=""/132, 0x84}, {&(0x7f0000000640)=""/77, 0x4d}, {&(0x7f00000006c0)=""/224, 0xe0}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/122, 0x7a}], 0x9, &(0x7f00000018c0)=""/112, 0x70}, 0x2}, {{&(0x7f0000001940)=@qipcrtr, 0x80, &(0x7f0000001bc0)=[{&(0x7f00000019c0)=""/226, 0xe2}, {&(0x7f0000001ac0)=""/22, 0x16}, {&(0x7f0000001b00)=""/139, 0x8b}], 0x3, &(0x7f0000001c00)=""/131, 0x83}, 0x8}, {{&(0x7f0000001cc0)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001d40)=""/215, 0xd7}], 0x1, &(0x7f0000001e80)=""/202, 0xca}, 0xffffff77}, {{0x0, 0x0, &(0x7f0000002180)=[{&(0x7f0000001f80)=""/125, 0x7d}, {&(0x7f0000002000)=""/216, 0xd8}, {&(0x7f0000002100)=""/86, 0x56}], 0x3, &(0x7f00000021c0)=""/4096, 0x1000}, 0x3}, {{&(0x7f00000031c0)=@x25, 0x80, &(0x7f0000003640)=[{&(0x7f0000003240)=""/63, 0x3f}, {&(0x7f0000003280)}, {&(0x7f00000032c0)=""/240, 0xf0}, {&(0x7f00000033c0)=""/113, 0x71}, {&(0x7f0000003440)=""/72, 0x48}, {&(0x7f00000034c0)=""/189, 0xbd}, {&(0x7f0000003580)=""/18, 0x12}, {&(0x7f00000035c0)=""/100, 0x64}], 0x8}}, {{0x0, 0x0, &(0x7f00000046c0)=[{&(0x7f0000003680)=""/4096, 0x1000}, {&(0x7f0000004680)=""/52, 0x34}], 0x2}, 0x2}, {{&(0x7f0000004700)=@qipcrtr, 0x80, &(0x7f00000049c0)=[{&(0x7f0000004780)=""/60, 0x3c}, {&(0x7f00000047c0)}, {&(0x7f0000004800)=""/132, 0x84}, {&(0x7f00000048c0)=""/253, 0xfd}], 0x4, &(0x7f0000004a00)=""/217, 0xd9}, 0x7}, {{0x0, 0x0, &(0x7f0000004b40)=[{&(0x7f0000004b00)=""/30, 0x1e}], 0x1}, 0x95}, {{&(0x7f0000004b80)=@nfc, 0x80, &(0x7f0000004ec0)=[{&(0x7f0000004c00)=""/167, 0xa7}, {&(0x7f0000004cc0)=""/15, 0xf}, {&(0x7f0000004d00)=""/135, 0x87}, {&(0x7f0000004dc0)=""/205, 0xcd}], 0x4, &(0x7f0000004f00)=""/96, 0x60}, 0x1}], 0xa, 0x20002, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) gettid() (async) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000000040)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) epoll_create1(0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) epoll_pwait(r1, &(0x7f0000000140)=[{}], 0x1, 0xb64, 0x0, 0x0) (async) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x8000002}, 0x1c) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20040090, 0x0, 0x0) (async) sendto$inet6(r2, 0x0, 0x0, 0x2204c001, &(0x7f0000000340)={0xa, 0x2, 0x0, @empty, 0x3ff}, 0x1c) (async) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040)=0x100000000007bf, 0x4) (async) sendto$inet6(r2, &(0x7f0000000440)='9', 0x1, 0x0, 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000004c0)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) write$binfmt_script(r3, &(0x7f0000000200)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) fdatasync(r3) (async) recvmmsg(r3, &(0x7f0000004f80)=[{{&(0x7f0000000080)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000000100)=""/73, 0x49}], 0x1, &(0x7f00000001c0)=""/195, 0xc3}, 0x4}, {{&(0x7f00000002c0)=@xdp, 0x80, &(0x7f0000001840)=[{&(0x7f0000000340)=""/18, 0x12}, {&(0x7f0000000380)=""/161, 0xa1}, {&(0x7f0000000440)=""/56, 0x38}, {&(0x7f0000000480)=""/203, 0xcb}, {&(0x7f0000000580)=""/132, 0x84}, {&(0x7f0000000640)=""/77, 0x4d}, {&(0x7f00000006c0)=""/224, 0xe0}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/122, 0x7a}], 0x9, &(0x7f00000018c0)=""/112, 0x70}, 0x2}, {{&(0x7f0000001940)=@qipcrtr, 0x80, &(0x7f0000001bc0)=[{&(0x7f00000019c0)=""/226, 0xe2}, {&(0x7f0000001ac0)=""/22, 0x16}, {&(0x7f0000001b00)=""/139, 0x8b}], 0x3, &(0x7f0000001c00)=""/131, 0x83}, 0x8}, {{&(0x7f0000001cc0)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001d40)=""/215, 0xd7}], 0x1, &(0x7f0000001e80)=""/202, 0xca}, 0xffffff77}, {{0x0, 0x0, &(0x7f0000002180)=[{&(0x7f0000001f80)=""/125, 0x7d}, {&(0x7f0000002000)=""/216, 0xd8}, {&(0x7f0000002100)=""/86, 0x56}], 0x3, &(0x7f00000021c0)=""/4096, 0x1000}, 0x3}, {{&(0x7f00000031c0)=@x25, 0x80, &(0x7f0000003640)=[{&(0x7f0000003240)=""/63, 0x3f}, {&(0x7f0000003280)}, {&(0x7f00000032c0)=""/240, 0xf0}, {&(0x7f00000033c0)=""/113, 0x71}, {&(0x7f0000003440)=""/72, 0x48}, {&(0x7f00000034c0)=""/189, 0xbd}, {&(0x7f0000003580)=""/18, 0x12}, {&(0x7f00000035c0)=""/100, 0x64}], 0x8}}, {{0x0, 0x0, &(0x7f00000046c0)=[{&(0x7f0000003680)=""/4096, 0x1000}, {&(0x7f0000004680)=""/52, 0x34}], 0x2}, 0x2}, {{&(0x7f0000004700)=@qipcrtr, 0x80, &(0x7f00000049c0)=[{&(0x7f0000004780)=""/60, 0x3c}, {&(0x7f00000047c0)}, {&(0x7f0000004800)=""/132, 0x84}, {&(0x7f00000048c0)=""/253, 0xfd}], 0x4, &(0x7f0000004a00)=""/217, 0xd9}, 0x7}, {{0x0, 0x0, &(0x7f0000004b40)=[{&(0x7f0000004b00)=""/30, 0x1e}], 0x1}, 0x95}, {{&(0x7f0000004b80)=@nfc, 0x80, &(0x7f0000004ec0)=[{&(0x7f0000004c00)=""/167, 0xa7}, {&(0x7f0000004cc0)=""/15, 0xf}, {&(0x7f0000004d00)=""/135, 0x87}, {&(0x7f0000004dc0)=""/205, 0xcd}], 0x4, &(0x7f0000004f00)=""/96, 0x60}, 0x1}], 0xa, 0x20002, 0x0) (async) [ 335.235648][ T7469] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 335.260713][ T7469] CPU: 0 PID: 7469 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 335.272376][ T7469] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 335.280700][ T7469] Call Trace: [ 335.284093][ T7469] [ 335.287254][ T7469] dump_stack_lvl+0xd1/0x138 [ 335.291636][ T7469] should_fail_ex.cold+0x5/0xa [ 335.295552][ T7469] prepare_alloc_pages+0x178/0x570 [ 335.303561][ T7469] ? release_pages+0xcb1/0x1330 [ 335.306464][ T7469] __alloc_pages+0x149/0x5b0 [ 335.309288][ T7469] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 335.313363][ T7469] ? __lock_acquire+0xbc3/0x56d0 [ 335.316682][ T7469] alloc_pages+0x1aa/0x270 [ 335.327254][ T7469] pte_alloc_one+0x1a/0x230 [ 335.331065][ T7469] __pte_alloc+0x6d/0x260 [ 335.334382][ T7469] ? pmd_install+0x160/0x160 [ 335.337606][ T7469] ? hugepage_vma_check+0x24e/0x830 [ 335.341910][ T7469] __handle_mm_fault+0x38cf/0x3c90 [ 335.346100][ T7469] ? vm_iomap_memory+0x190/0x190 [ 335.349926][ T7469] handle_mm_fault+0x1b6/0x850 [ 335.353918][ T7469] __get_user_pages+0x4f8/0xfc0 [ 335.357333][ T7469] ? follow_page_mask+0x10a0/0x10a0 [ 335.360830][ T7469] populate_vma_page_range+0x241/0x320 [ 335.364311][ T7469] __mm_populate+0x105/0x3b0 [ 335.367603][ T7469] ? faultin_vma_page_range+0x300/0x300 [ 335.371650][ T7469] ? up_write+0x1b0/0x520 [ 335.374738][ T7469] do_mlock+0x370/0x6d0 [ 335.378246][ T7469] ? folio_memcg+0x320/0x320 [ 335.381702][ T7469] ? fput+0x2f/0x1a0 [ 335.384312][ T7469] __ia32_sys_mlock+0x57/0x80 [ 335.386970][ T7469] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 335.390797][ T7469] __do_fast_syscall_32+0x65/0xf0 [ 335.393606][ T7469] do_fast_syscall_32+0x33/0x70 [ 335.397104][ T7469] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 335.401016][ T7469] RIP: 0023:0xf7f47549 [ 335.403651][ T7469] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 335.419127][ T7469] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 335.428853][ T7469] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 335.435494][ T7469] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 335.443059][ T7469] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 335.450435][ T7469] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 335.457478][ T7469] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 335.463957][ T7469] 09:37:13 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 85) 09:37:13 executing program 3: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) fstat(r0, &(0x7f0000000680)) 09:37:13 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000000040)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) r1 = epoll_create1(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) epoll_pwait(r1, &(0x7f0000000140)=[{}], 0x1, 0xb64, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x8000002}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20040090, 0x0, 0x0) (async) sendto$inet6(r2, 0x0, 0x0, 0x2204c001, &(0x7f0000000340)={0xa, 0x2, 0x0, @empty, 0x3ff}, 0x1c) (async) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040)=0x100000000007bf, 0x4) (async) sendto$inet6(r2, &(0x7f0000000440)='9', 0x1, 0x0, 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000004c0)) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000200)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) fdatasync(r3) recvmmsg(r3, &(0x7f0000004f80)=[{{&(0x7f0000000080)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000000100)=""/73, 0x49}], 0x1, &(0x7f00000001c0)=""/195, 0xc3}, 0x4}, {{&(0x7f00000002c0)=@xdp, 0x80, &(0x7f0000001840)=[{&(0x7f0000000340)=""/18, 0x12}, {&(0x7f0000000380)=""/161, 0xa1}, {&(0x7f0000000440)=""/56, 0x38}, {&(0x7f0000000480)=""/203, 0xcb}, {&(0x7f0000000580)=""/132, 0x84}, {&(0x7f0000000640)=""/77, 0x4d}, {&(0x7f00000006c0)=""/224, 0xe0}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/122, 0x7a}], 0x9, &(0x7f00000018c0)=""/112, 0x70}, 0x2}, {{&(0x7f0000001940)=@qipcrtr, 0x80, &(0x7f0000001bc0)=[{&(0x7f00000019c0)=""/226, 0xe2}, {&(0x7f0000001ac0)=""/22, 0x16}, {&(0x7f0000001b00)=""/139, 0x8b}], 0x3, &(0x7f0000001c00)=""/131, 0x83}, 0x8}, {{&(0x7f0000001cc0)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001d40)=""/215, 0xd7}], 0x1, &(0x7f0000001e80)=""/202, 0xca}, 0xffffff77}, {{0x0, 0x0, &(0x7f0000002180)=[{&(0x7f0000001f80)=""/125, 0x7d}, {&(0x7f0000002000)=""/216, 0xd8}, {&(0x7f0000002100)=""/86, 0x56}], 0x3, &(0x7f00000021c0)=""/4096, 0x1000}, 0x3}, {{&(0x7f00000031c0)=@x25, 0x80, &(0x7f0000003640)=[{&(0x7f0000003240)=""/63, 0x3f}, {&(0x7f0000003280)}, {&(0x7f00000032c0)=""/240, 0xf0}, {&(0x7f00000033c0)=""/113, 0x71}, {&(0x7f0000003440)=""/72, 0x48}, {&(0x7f00000034c0)=""/189, 0xbd}, {&(0x7f0000003580)=""/18, 0x12}, {&(0x7f00000035c0)=""/100, 0x64}], 0x8}}, {{0x0, 0x0, &(0x7f00000046c0)=[{&(0x7f0000003680)=""/4096, 0x1000}, {&(0x7f0000004680)=""/52, 0x34}], 0x2}, 0x2}, {{&(0x7f0000004700)=@qipcrtr, 0x80, &(0x7f00000049c0)=[{&(0x7f0000004780)=""/60, 0x3c}, {&(0x7f00000047c0)}, {&(0x7f0000004800)=""/132, 0x84}, {&(0x7f00000048c0)=""/253, 0xfd}], 0x4, &(0x7f0000004a00)=""/217, 0xd9}, 0x7}, {{0x0, 0x0, &(0x7f0000004b40)=[{&(0x7f0000004b00)=""/30, 0x1e}], 0x1}, 0x95}, {{&(0x7f0000004b80)=@nfc, 0x80, &(0x7f0000004ec0)=[{&(0x7f0000004c00)=""/167, 0xa7}, {&(0x7f0000004cc0)=""/15, 0xf}, {&(0x7f0000004d00)=""/135, 0x87}, {&(0x7f0000004dc0)=""/205, 0xcd}], 0x4, &(0x7f0000004f00)=""/96, 0x60}, 0x1}], 0xa, 0x20002, 0x0) [ 335.621374][ T7482] FAULT_INJECTION: forcing a failure. [ 335.621374][ T7482] name failslab, interval 1, probability 0, space 0, times 0 [ 335.633240][ T7482] CPU: 1 PID: 7482 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 335.644070][ T7482] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 335.652799][ T7482] Call Trace: [ 335.655868][ T7482] [ 335.658883][ T7482] dump_stack_lvl+0xd1/0x138 [ 335.662759][ T7482] should_fail_ex.cold+0x5/0xa [ 335.667664][ T7482] ? ptlock_alloc+0x21/0x70 [ 335.670408][ T7482] should_failslab+0x9/0x20 [ 335.673302][ T7482] kmem_cache_alloc+0x5a/0x430 [ 335.676480][ T7482] ptlock_alloc+0x21/0x70 [ 335.680182][ T7482] pte_alloc_one+0x6c/0x230 [ 335.683461][ T7482] __pte_alloc+0x6d/0x260 [ 335.686925][ T7482] ? pmd_install+0x160/0x160 [ 335.690620][ T7482] ? hugepage_vma_check+0x24e/0x830 [ 335.695929][ T7482] __handle_mm_fault+0x38cf/0x3c90 [ 335.701033][ T7482] ? vm_iomap_memory+0x190/0x190 [ 335.707103][ T7482] handle_mm_fault+0x1b6/0x850 [ 335.711656][ T7482] __get_user_pages+0x4f8/0xfc0 [ 335.715958][ T7482] ? follow_page_mask+0x10a0/0x10a0 [ 335.723617][ T7482] populate_vma_page_range+0x241/0x320 [ 335.731589][ T7482] __mm_populate+0x105/0x3b0 [ 335.735408][ T7482] ? faultin_vma_page_range+0x300/0x300 [ 335.740452][ T7482] ? up_write+0x1b0/0x520 [ 335.743692][ T7482] do_mlock+0x370/0x6d0 [ 335.751628][ T7482] ? folio_memcg+0x320/0x320 [ 335.755789][ T7482] ? fput+0x2f/0x1a0 [ 335.760274][ T7482] __ia32_sys_mlock+0x57/0x80 [ 335.768632][ T7482] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 335.775519][ T7482] __do_fast_syscall_32+0x65/0xf0 [ 335.784390][ T7482] do_fast_syscall_32+0x33/0x70 [ 335.789843][ T7482] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 335.794255][ T7482] RIP: 0023:0xf7f47549 [ 335.797730][ T7482] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 335.824663][ T7482] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 335.834127][ T7482] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 335.843533][ T7482] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 335.855511][ T7482] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 335.862873][ T7482] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 09:37:14 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 09:37:14 executing program 3: openat$nci(0xffffffffffffff9c, &(0x7f0000000f00), 0x2, 0x0) 09:37:14 executing program 2: openat$capi20(0xffffffffffffff9c, &(0x7f0000001240), 0x400, 0x0) [ 335.869985][ T7482] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 335.876206][ T7482] 09:37:14 executing program 2: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000001c80), 0x200200) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, 0x0) 09:37:14 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 86) 09:37:14 executing program 1: madvise(&(0x7f000028c000/0x2000)=nil, 0x2000, 0xd) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000), 0x0, 0x0) 09:37:14 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$damon_schemes(r0, 0x0, 0x0) 09:37:14 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pwrite64(r0, &(0x7f0000000c00)="82", 0x1, 0x0) 09:37:14 executing program 1: madvise(&(0x7f000028c000/0x2000)=nil, 0x2000, 0xd) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000), 0x0, 0x0) [ 336.017035][ T7502] FAULT_INJECTION: forcing a failure. [ 336.017035][ T7502] name failslab, interval 1, probability 0, space 0, times 0 [ 336.028457][ T7502] CPU: 2 PID: 7502 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 336.047051][ T7502] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 336.054149][ T7502] Call Trace: [ 336.057656][ T7502] [ 336.060055][ T7502] dump_stack_lvl+0xd1/0x138 [ 336.064088][ T7502] should_fail_ex.cold+0x5/0xa [ 336.068226][ T7502] ? ptlock_alloc+0x21/0x70 [ 336.072231][ T7502] should_failslab+0x9/0x20 [ 336.076764][ T7502] kmem_cache_alloc+0x5a/0x430 09:37:14 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004440), 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) 09:37:14 executing program 1: madvise(&(0x7f000028c000/0x2000)=nil, 0x2000, 0xd) (async, rerun: 64) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async, rerun: 64) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000), 0x0, 0x0) [ 336.081545][ T7502] ptlock_alloc+0x21/0x70 [ 336.086466][ T7502] pte_alloc_one+0x6c/0x230 [ 336.089918][ T7502] __pte_alloc+0x6d/0x260 [ 336.092868][ T7502] ? pmd_install+0x160/0x160 [ 336.095866][ T7502] ? hugepage_vma_check+0x24e/0x830 [ 336.100886][ T7502] __handle_mm_fault+0x38cf/0x3c90 [ 336.105245][ T7502] ? vm_iomap_memory+0x190/0x190 [ 336.109082][ T7502] handle_mm_fault+0x1b6/0x850 09:37:14 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$fb(r0, 0x0, 0xc) [ 336.112582][ T7502] __get_user_pages+0x4f8/0xfc0 [ 336.115885][ T7502] ? follow_page_mask+0x10a0/0x10a0 [ 336.119133][ T7502] populate_vma_page_range+0x241/0x320 [ 336.122542][ T7502] __mm_populate+0x105/0x3b0 [ 336.125284][ T7502] ? faultin_vma_page_range+0x300/0x300 [ 336.128471][ T7502] ? up_write+0x1b0/0x520 [ 336.131899][ T7502] do_mlock+0x370/0x6d0 [ 336.135513][ T7502] ? folio_memcg+0x320/0x320 [ 336.140751][ T7502] ? fput+0x2f/0x1a0 [ 336.143940][ T7502] __ia32_sys_mlock+0x57/0x80 [ 336.148093][ T7502] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 336.152987][ T7502] __do_fast_syscall_32+0x65/0xf0 [ 336.157396][ T7502] do_fast_syscall_32+0x33/0x70 [ 336.161506][ T7502] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 336.166601][ T7502] RIP: 0023:0xf7f47549 [ 336.169858][ T7502] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 336.184060][ T7502] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 336.190197][ T7502] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 336.195980][ T7502] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 336.203090][ T7502] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 336.209090][ T7502] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 336.215360][ T7502] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 336.221063][ T7502] 09:37:14 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000002340), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc020660b, 0x0) 09:37:14 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 87) 09:37:14 executing program 2: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f00000015c0), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) 09:37:14 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() mbind(&(0x7f000028a000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000040)=0x7, 0x1, 0x0) get_mempolicy(&(0x7f00000000c0), &(0x7f0000000100), 0x8, &(0x7f000074f000/0x1000)=nil, 0x3) mbind(&(0x7f0000723000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000080)=0x401, 0x8, 0x5) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 09:37:14 executing program 2: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f00000015c0), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) 09:37:14 executing program 3: openat$audio1(0xffffffffffffff9c, 0x0, 0x484280, 0x0) 09:37:14 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() (async) mbind(&(0x7f000028a000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000040)=0x7, 0x1, 0x0) get_mempolicy(&(0x7f00000000c0), &(0x7f0000000100), 0x8, &(0x7f000074f000/0x1000)=nil, 0x3) (async) mbind(&(0x7f0000723000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000080)=0x401, 0x8, 0x5) (async) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) [ 336.413255][ T7527] FAULT_INJECTION: forcing a failure. [ 336.413255][ T7527] name fail_page_alloc, interval 1, probability 0, space 0, times 0 09:37:14 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$fb(r0, 0x0, 0x0) 09:37:14 executing program 3: openat$cdrom(0xffffffffffffff9c, &(0x7f0000000340), 0x10de80, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000580)=@hat={'permhat '}, 0x1b) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_current(r1, &(0x7f0000000580)=@hat={'permhat '}, 0x1b) [ 336.432525][ T7527] CPU: 2 PID: 7527 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 336.441652][ T7527] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 336.449089][ T7527] Call Trace: [ 336.452064][ T7527] [ 336.454425][ T7527] dump_stack_lvl+0xd1/0x138 [ 336.458781][ T7527] should_fail_ex.cold+0x5/0xa [ 336.462556][ T7527] prepare_alloc_pages+0x178/0x570 [ 336.466625][ T7527] __alloc_pages+0x149/0x5b0 [ 336.470353][ T7527] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 336.476581][ T7527] ? __lock_acquire+0x166e/0x56d0 [ 336.480732][ T7527] ? __lock_acquire+0xbc3/0x56d0 [ 336.482298][ T7540] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 336.484938][ T7527] __folio_alloc+0x16/0x40 [ 336.484984][ T7527] vma_alloc_folio+0x155/0x870 [ 336.485018][ T7527] ? policy_nodemask+0x1c0/0x1c0 [ 336.485049][ T7527] ? lock_chain_count+0x20/0x20 [ 336.485082][ T7527] __handle_mm_fault+0x1822/0x3c90 [ 336.504954][ T7540] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 336.507259][ T7527] ? vm_iomap_memory+0x190/0x190 [ 336.507319][ T7527] handle_mm_fault+0x1b6/0x850 [ 336.507358][ T7527] __get_user_pages+0x4f8/0xfc0 [ 336.508198][ T7538] dlm: non-version read from control device 0 [ 336.533888][ T7527] ? follow_page_mask+0x10a0/0x10a0 [ 336.538277][ T7527] populate_vma_page_range+0x241/0x320 [ 336.542925][ T7527] __mm_populate+0x105/0x3b0 [ 336.546783][ T7527] ? faultin_vma_page_range+0x300/0x300 [ 336.552086][ T7527] ? up_write+0x1b0/0x520 [ 336.555660][ T7527] do_mlock+0x370/0x6d0 [ 336.559439][ T7527] ? folio_memcg+0x320/0x320 [ 336.563459][ T7527] ? fput+0x2f/0x1a0 [ 336.566717][ T7527] __ia32_sys_mlock+0x57/0x80 [ 336.570674][ T7527] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 336.576139][ T7527] __do_fast_syscall_32+0x65/0xf0 [ 336.580833][ T7527] do_fast_syscall_32+0x33/0x70 [ 336.584841][ T7527] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 336.589911][ T7527] RIP: 0023:0xf7f47549 [ 336.593985][ T7527] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 336.611379][ T7527] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 336.618601][ T7527] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 336.624732][ T7527] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 336.630724][ T7527] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 336.636835][ T7527] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 336.642982][ T7527] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 336.649188][ T7527] 09:37:15 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 88) 09:37:15 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() (async) mbind(&(0x7f000028a000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000040)=0x7, 0x1, 0x0) get_mempolicy(&(0x7f00000000c0), &(0x7f0000000100), 0x8, &(0x7f000074f000/0x1000)=nil, 0x3) (async) mbind(&(0x7f0000723000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000080)=0x401, 0x8, 0x5) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 09:37:15 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000003240), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) 09:37:15 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000003240), 0x0, 0x0) r1 = io_uring_setup(0x3e7a, &(0x7f0000003280)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) 09:37:15 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid_for_children\x00') [ 336.834250][ T7550] FAULT_INJECTION: forcing a failure. [ 336.834250][ T7550] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 336.883774][ T7550] CPU: 2 PID: 7550 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 336.892952][ T7550] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 336.899587][ T7550] Call Trace: [ 336.902191][ T7550] [ 336.904545][ T7550] dump_stack_lvl+0xd1/0x138 [ 336.908045][ T7550] should_fail_ex.cold+0x5/0xa [ 336.911221][ T7550] prepare_alloc_pages+0x178/0x570 [ 336.914590][ T7550] __alloc_pages+0x149/0x5b0 [ 336.917643][ T7550] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 336.923903][ T7550] ? __lock_acquire+0x166e/0x56d0 [ 336.928904][ T7550] ? __lock_acquire+0xbc3/0x56d0 [ 336.933208][ T7550] __folio_alloc+0x16/0x40 [ 336.936868][ T7550] vma_alloc_folio+0x155/0x870 [ 336.940962][ T7550] ? policy_nodemask+0x1c0/0x1c0 [ 336.945920][ T7550] ? lock_chain_count+0x20/0x20 [ 336.949978][ T7550] __handle_mm_fault+0x1822/0x3c90 [ 336.959183][ T7550] ? vm_iomap_memory+0x190/0x190 [ 336.964591][ T7550] handle_mm_fault+0x1b6/0x850 [ 336.968006][ T7550] __get_user_pages+0x4f8/0xfc0 [ 336.971080][ T7550] ? follow_page_mask+0x10a0/0x10a0 [ 336.975449][ T7550] populate_vma_page_range+0x241/0x320 [ 336.978890][ T7550] __mm_populate+0x105/0x3b0 [ 336.981828][ T7550] ? faultin_vma_page_range+0x300/0x300 [ 336.985181][ T7550] ? up_write+0x1b0/0x520 [ 336.988505][ T7550] do_mlock+0x370/0x6d0 [ 336.991070][ T7550] ? folio_memcg+0x320/0x320 [ 336.995811][ T7550] ? fput+0x2f/0x1a0 [ 336.999652][ T7550] __ia32_sys_mlock+0x57/0x80 [ 337.003113][ T7550] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 337.008100][ T7550] __do_fast_syscall_32+0x65/0xf0 [ 337.012763][ T7550] do_fast_syscall_32+0x33/0x70 [ 337.016594][ T7550] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 337.022225][ T7550] RIP: 0023:0xf7f47549 [ 337.026380][ T7550] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 337.038155][ T7550] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 337.045463][ T7550] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 337.052950][ T7550] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 337.060069][ T7550] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 337.068450][ T7550] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 337.073833][ T7550] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 337.078504][ T7550] 09:37:15 executing program 2: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000021c0), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0189436, 0x0) 09:37:15 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 89) 09:37:15 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001080), 0x2, 0x0) read$FUSE(r0, &(0x7f0000003140)={0x2020}, 0x2020) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) read$FUSE(r1, &(0x7f0000001100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r0, &(0x7f0000000480)={0x90, 0xffffffffffffffda, r2}, 0x90) 09:37:15 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f000076b000/0x4000)=nil, 0x4000, 0x3000001, r0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 09:37:15 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000002340), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189436, 0x0) 09:37:15 executing program 3: openat$snapshot(0xffffffffffffff9c, &(0x7f0000003800), 0x40000, 0x0) [ 337.288283][ T7556] FAULT_INJECTION: forcing a failure. [ 337.288283][ T7556] name fail_page_alloc, interval 1, probability 0, space 0, times 0 09:37:15 executing program 2: io_uring_setup(0x3e7a, &(0x7f0000003280)={0x0, 0x0, 0x400}) 09:37:15 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) r0 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f000076b000/0x4000)=nil, 0x4000, 0x3000001, r0) (async) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) [ 337.360591][ T7556] CPU: 2 PID: 7556 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 337.367378][ T7556] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 337.373907][ T7556] Call Trace: [ 337.377077][ T7556] [ 337.379938][ T7556] dump_stack_lvl+0xd1/0x138 [ 337.384471][ T7556] should_fail_ex.cold+0x5/0xa [ 337.390348][ T7556] prepare_alloc_pages+0x178/0x570 [ 337.395502][ T7556] __alloc_pages+0x149/0x5b0 09:37:15 executing program 2: syz_open_procfs$userns(0x0, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000015c0), 0x10d000, 0x0) [ 337.402698][ T7556] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 337.409410][ T7556] ? __lock_acquire+0x166e/0x56d0 [ 337.413783][ T7556] ? __lock_acquire+0xbc3/0x56d0 [ 337.418242][ T7556] __folio_alloc+0x16/0x40 09:37:15 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) r0 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f000076b000/0x4000)=nil, 0x4000, 0x3000001, r0) (async) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) [ 337.422116][ T7556] vma_alloc_folio+0x155/0x870 [ 337.425540][ T7556] ? policy_nodemask+0x1c0/0x1c0 [ 337.428987][ T7556] ? lock_chain_count+0x20/0x20 [ 337.432098][ T7556] __handle_mm_fault+0x1822/0x3c90 [ 337.435024][ T7556] ? vm_iomap_memory+0x190/0x190 [ 337.438075][ T7556] handle_mm_fault+0x1b6/0x850 [ 337.441077][ T7556] __get_user_pages+0x4f8/0xfc0 [ 337.444173][ T7556] ? follow_page_mask+0x10a0/0x10a0 [ 337.447493][ T7556] populate_vma_page_range+0x241/0x320 [ 337.450708][ T7556] __mm_populate+0x105/0x3b0 [ 337.453570][ T7556] ? faultin_vma_page_range+0x300/0x300 [ 337.456656][ T7556] ? up_write+0x1b0/0x520 [ 337.459304][ T7556] do_mlock+0x370/0x6d0 [ 337.461897][ T7556] ? folio_memcg+0x320/0x320 [ 337.464828][ T7556] ? fput+0x2f/0x1a0 [ 337.467509][ T7556] __ia32_sys_mlock+0x57/0x80 [ 337.471593][ T7556] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 337.476382][ T7556] __do_fast_syscall_32+0x65/0xf0 [ 337.482060][ T7556] do_fast_syscall_32+0x33/0x70 [ 337.485970][ T7556] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 337.492679][ T7556] RIP: 0023:0xf7f47549 [ 337.496173][ T7556] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 337.517882][ T7556] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 337.523913][ T7556] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 337.529941][ T7556] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 337.535912][ T7556] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 337.541381][ T7556] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 337.548414][ T7556] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 337.554517][ T7556] 09:37:15 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 90) 09:37:15 executing program 2: r0 = fsopen(&(0x7f00000000c0)='ntfs3\x00', 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000000)='^]::\'.n^:\xf2\x00', &(0x7f0000000040)='./file0\x00', r1) 09:37:15 executing program 3: r0 = eventfd2(0x7, 0x0) read$eventfd(r0, &(0x7f0000000040), 0x8) [ 337.729663][ T7580] FAULT_INJECTION: forcing a failure. [ 337.729663][ T7580] name fail_page_alloc, interval 1, probability 0, space 0, times 0 09:37:16 executing program 3: r0 = fsopen(&(0x7f0000000000)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0xffffff9c, 0x0, 0x0, 0xffffffffffffffff) 09:37:16 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000801000/0x4000)=nil, 0x4000, 0x8000, 0x7, &(0x7f00007b0000/0x8000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() gettid() mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) [ 337.755630][ T7580] CPU: 1 PID: 7580 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 337.764953][ T7580] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 337.772736][ T7580] Call Trace: [ 337.775703][ T7580] 09:37:16 executing program 3: madvise(&(0x7f000028c000/0x2000)=nil, 0x2000, 0xd) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000), 0x0, 0x0) [ 337.778883][ T7580] dump_stack_lvl+0xd1/0x138 [ 337.783899][ T7580] should_fail_ex.cold+0x5/0xa [ 337.788185][ T7580] prepare_alloc_pages+0x178/0x570 [ 337.792376][ T7580] __alloc_pages+0x149/0x5b0 [ 337.796059][ T7580] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 337.801583][ T7580] ? __lock_acquire+0x166e/0x56d0 [ 337.805241][ T7580] ? __lock_acquire+0xbc3/0x56d0 [ 337.810593][ T7580] __folio_alloc+0x16/0x40 [ 337.815199][ T7580] vma_alloc_folio+0x155/0x870 [ 337.819573][ T7580] ? policy_nodemask+0x1c0/0x1c0 [ 337.823459][ T7580] ? lock_chain_count+0x20/0x20 [ 337.828121][ T7580] __handle_mm_fault+0x1822/0x3c90 [ 337.832258][ T7580] ? vm_iomap_memory+0x190/0x190 [ 337.836042][ T7580] handle_mm_fault+0x1b6/0x850 [ 337.840394][ T7580] __get_user_pages+0x4f8/0xfc0 [ 337.845330][ T7580] ? follow_page_mask+0x10a0/0x10a0 [ 337.850522][ T7580] populate_vma_page_range+0x241/0x320 [ 337.855478][ T7580] __mm_populate+0x105/0x3b0 [ 337.858533][ T7580] ? faultin_vma_page_range+0x300/0x300 [ 337.862702][ T7580] ? up_write+0x1b0/0x520 [ 337.866238][ T7580] do_mlock+0x370/0x6d0 [ 337.869187][ T7580] ? folio_memcg+0x320/0x320 [ 337.872928][ T7580] ? fput+0x2f/0x1a0 [ 337.875684][ T7580] __ia32_sys_mlock+0x57/0x80 [ 337.878653][ T7580] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 337.884882][ T7580] __do_fast_syscall_32+0x65/0xf0 [ 337.888452][ T7580] do_fast_syscall_32+0x33/0x70 [ 337.896769][ T7580] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 337.902363][ T7580] RIP: 0023:0xf7f47549 [ 337.905343][ T7580] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 337.922469][ T7580] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 337.930342][ T7580] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 337.939873][ T7580] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 337.951361][ T7580] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 09:37:16 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000500), 0x7, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000280), 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000540)={0x0, "cfd2cfdc8ddea4eb7658dcb241a87be5"}) gettid() r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x3c41632c}], 0x286, 0x0) syz_clone3(&(0x7f0000000140)={0x62080000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)=0x0, {0x3c}, &(0x7f0000002d80)=""/4096, 0x1000, &(0x7f0000003d80)=""/4096, &(0x7f0000000100)=[0x0, r3, 0x0], 0x3, {r0}}, 0x58) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f00000001c0)={r4}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, &(0x7f0000000000)={0x2, 0x4, [0x80]}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000001540)={r2, "591b5f13b172f77bd6ca8eaf42e84187"}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000002980)={0x0, 0xc24, 0x20000000000003}) [ 337.957276][ T7580] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 337.968209][ T7580] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 337.976915][ T7580] 09:37:16 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000801000/0x4000)=nil, 0x4000, 0x8000, 0x7, &(0x7f00007b0000/0x8000)=nil) (async, rerun: 32) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (rerun: 32) r0 = gettid() (async, rerun: 32) gettid() (async, rerun: 32) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 09:37:16 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000001c0)={'geneve0\x00', 0xd2159a3}) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = gettid() syz_io_uring_setup(0x3a55, &(0x7f0000000040)={0x0, 0x76df, 0x0, 0x3, 0x3b7}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000200)=0x0) process_vm_writev(r2, &(0x7f0000000340)=[{&(0x7f0000000240)=""/55, 0x37}, {&(0x7f0000000280)=""/147, 0x93}], 0x2, &(0x7f00000008c0)=[{&(0x7f0000000380)=""/153, 0x99}, {&(0x7f0000000440)=""/248, 0xf8}, {&(0x7f0000000540)=""/23, 0x17}, {&(0x7f0000000580)=""/222, 0xde}, {&(0x7f0000000680)=""/139, 0x8b}, {&(0x7f0000000740)=""/152, 0x98}, {&(0x7f0000000800)=""/138, 0x8a}], 0x7, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) madvise(&(0x7f00006b9000/0x1000)=nil, 0x1000, 0x64) 09:37:16 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 91) 09:37:16 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000801000/0x4000)=nil, 0x4000, 0x8000, 0x7, &(0x7f00007b0000/0x8000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() gettid() (async) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) [ 338.147911][ T7598] FAULT_INJECTION: forcing a failure. [ 338.147911][ T7598] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 338.157656][ T7598] CPU: 1 PID: 7598 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 338.165527][ T7598] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 338.172181][ T7598] Call Trace: [ 338.174878][ T7598] [ 338.177015][ T7598] dump_stack_lvl+0xd1/0x138 [ 338.180562][ T7598] should_fail_ex.cold+0x5/0xa [ 338.183740][ T7598] prepare_alloc_pages+0x178/0x570 [ 338.187357][ T7598] __alloc_pages+0x149/0x5b0 [ 338.190013][ T7598] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 338.193809][ T7598] ? __lock_acquire+0x166e/0x56d0 [ 338.196689][ T7598] ? __lock_acquire+0xbc3/0x56d0 [ 338.199766][ T7598] __folio_alloc+0x16/0x40 [ 338.202409][ T7598] vma_alloc_folio+0x155/0x870 [ 338.205789][ T7598] ? policy_nodemask+0x1c0/0x1c0 [ 338.213917][ T7598] ? lock_chain_count+0x20/0x20 [ 338.218111][ T7598] __handle_mm_fault+0x1822/0x3c90 [ 338.222104][ T7598] ? vm_iomap_memory+0x190/0x190 [ 338.226028][ T7598] handle_mm_fault+0x1b6/0x850 [ 338.230026][ T7598] __get_user_pages+0x4f8/0xfc0 [ 338.233697][ T7598] ? follow_page_mask+0x10a0/0x10a0 [ 338.236719][ T7598] populate_vma_page_range+0x241/0x320 [ 338.253411][ T7598] __mm_populate+0x105/0x3b0 [ 338.257978][ T7598] ? faultin_vma_page_range+0x300/0x300 [ 338.264690][ T7598] ? up_write+0x1b0/0x520 [ 338.267464][ T7598] do_mlock+0x370/0x6d0 [ 338.271350][ T7598] ? folio_memcg+0x320/0x320 [ 338.275798][ T7598] ? fput+0x2f/0x1a0 [ 338.278905][ T7598] __ia32_sys_mlock+0x57/0x80 [ 338.282107][ T7598] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 338.287247][ T7598] __do_fast_syscall_32+0x65/0xf0 [ 338.291953][ T7598] do_fast_syscall_32+0x33/0x70 [ 338.296775][ T7598] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 338.303500][ T7598] RIP: 0023:0xf7f47549 [ 338.308777][ T7598] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 338.326262][ T7598] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 338.334674][ T7598] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 338.343255][ T7598] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 338.350875][ T7598] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 338.360223][ T7598] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 338.368913][ T7598] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 338.375427][ T7598] 09:37:16 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 92) 09:37:16 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$binfmt_elf32(r0, 0x0, 0x0) [ 338.898605][ T7610] FAULT_INJECTION: forcing a failure. [ 338.898605][ T7610] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 338.919654][ T7610] CPU: 1 PID: 7610 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 338.929954][ T7610] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 338.939461][ T7610] Call Trace: [ 338.942125][ T7610] [ 338.945683][ T7610] dump_stack_lvl+0xd1/0x138 [ 338.949600][ T7610] should_fail_ex.cold+0x5/0xa [ 338.953902][ T7610] prepare_alloc_pages+0x178/0x570 [ 338.958214][ T7610] __alloc_pages+0x149/0x5b0 [ 338.962574][ T7610] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 338.972452][ T7610] ? __lock_acquire+0x166e/0x56d0 [ 338.976805][ T7610] ? __lock_acquire+0xbc3/0x56d0 [ 338.981053][ T7610] __folio_alloc+0x16/0x40 [ 338.984662][ T7610] vma_alloc_folio+0x155/0x870 [ 338.987839][ T7610] ? policy_nodemask+0x1c0/0x1c0 [ 338.991727][ T7610] ? lock_chain_count+0x20/0x20 [ 338.996066][ T7610] __handle_mm_fault+0x1822/0x3c90 [ 339.000098][ T7610] ? vm_iomap_memory+0x190/0x190 [ 339.004375][ T7610] handle_mm_fault+0x1b6/0x850 [ 339.008170][ T7610] __get_user_pages+0x4f8/0xfc0 [ 339.011769][ T7610] ? follow_page_mask+0x10a0/0x10a0 [ 339.015473][ T7610] populate_vma_page_range+0x241/0x320 [ 339.019841][ T7610] __mm_populate+0x105/0x3b0 [ 339.023533][ T7610] ? faultin_vma_page_range+0x300/0x300 [ 339.027869][ T7610] ? up_write+0x1b0/0x520 [ 339.031226][ T7610] do_mlock+0x370/0x6d0 [ 339.034781][ T7610] ? folio_memcg+0x320/0x320 [ 339.038823][ T7610] ? fput+0x2f/0x1a0 [ 339.042095][ T7610] __ia32_sys_mlock+0x57/0x80 [ 339.046338][ T7610] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 339.053248][ T7610] __do_fast_syscall_32+0x65/0xf0 [ 339.058695][ T7610] do_fast_syscall_32+0x33/0x70 [ 339.063175][ T7610] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 339.069714][ T7610] RIP: 0023:0xf7f47549 [ 339.073538][ T7610] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 339.087238][ T7610] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 339.093065][ T7610] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 339.100387][ T7610] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 339.107192][ T7610] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 339.112390][ T7610] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 339.119404][ T7610] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 339.127484][ T7610] 09:37:17 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 93) 09:37:17 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) poll(&(0x7f00000030c0)=[{}, {r0}], 0x2, 0x4) 09:37:17 executing program 3: r0 = io_uring_setup(0x6ea9, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x14, 0x0, 0x1) 09:37:17 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f00007bc000/0x2000)=nil, 0x2000, 0x800000, 0x6, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 09:37:17 executing program 2: fsopen(&(0x7f0000000080)='exfat\x00', 0x0) [ 339.394542][ T7613] FAULT_INJECTION: forcing a failure. [ 339.394542][ T7613] name fail_page_alloc, interval 1, probability 0, space 0, times 0 09:37:17 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f00007bc000/0x2000)=nil, 0x2000, 0x800000, 0x6, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f00007bc000/0x2000)=nil, 0x2000, 0x800000, 0x6, &(0x7f0000130000/0x800000)=nil) (async) gettid() (async) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) [ 339.428321][ T7613] CPU: 3 PID: 7613 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 339.435619][ T7613] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 339.442030][ T7613] Call Trace: [ 339.445254][ T7613] [ 339.448197][ T7613] dump_stack_lvl+0xd1/0x138 [ 339.452582][ T7613] should_fail_ex.cold+0x5/0xa [ 339.456857][ T7613] prepare_alloc_pages+0x178/0x570 [ 339.461443][ T7613] __alloc_pages+0x149/0x5b0 [ 339.465351][ T7613] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 339.470448][ T7613] ? __lock_acquire+0x166e/0x56d0 [ 339.474054][ T7613] ? __lock_acquire+0xbc3/0x56d0 [ 339.477793][ T7613] __folio_alloc+0x16/0x40 [ 339.481479][ T7613] vma_alloc_folio+0x155/0x870 [ 339.485270][ T7613] ? policy_nodemask+0x1c0/0x1c0 [ 339.488762][ T7613] ? lock_chain_count+0x20/0x20 [ 339.492338][ T7613] __handle_mm_fault+0x1822/0x3c90 [ 339.496917][ T7613] ? vm_iomap_memory+0x190/0x190 [ 339.502886][ T7613] handle_mm_fault+0x1b6/0x850 [ 339.508033][ T7613] __get_user_pages+0x4f8/0xfc0 [ 339.512396][ T7613] ? follow_page_mask+0x10a0/0x10a0 [ 339.517277][ T7613] populate_vma_page_range+0x241/0x320 [ 339.522415][ T7613] __mm_populate+0x105/0x3b0 09:37:17 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001080), 0x2, 0x0) read$FUSE(r0, &(0x7f0000003140)={0x2020, 0x0, 0x0}, 0x2020) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001080), 0x2, 0x0) write$FUSE_INIT(r2, &(0x7f00000007c0)={0x50, 0x0, r1}, 0x50) 09:37:17 executing program 2: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000002940), 0x0, 0x0) mmap$dsp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 09:37:17 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f00007bc000/0x2000)=nil, 0x2000, 0x800000, 0x6, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 09:37:17 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x34}]}) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) [ 339.526395][ T7613] ? faultin_vma_page_range+0x300/0x300 [ 339.531502][ T7613] ? up_write+0x1b0/0x520 [ 339.535639][ T7613] do_mlock+0x370/0x6d0 [ 339.539143][ T7613] ? folio_memcg+0x320/0x320 [ 339.542993][ T7613] ? fput+0x2f/0x1a0 [ 339.546148][ T7613] __ia32_sys_mlock+0x57/0x80 [ 339.550014][ T7613] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 339.556087][ T7613] __do_fast_syscall_32+0x65/0xf0 [ 339.560709][ T7613] do_fast_syscall_32+0x33/0x70 [ 339.565159][ T7613] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 339.571044][ T7613] RIP: 0023:0xf7f47549 [ 339.574199][ T7613] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 339.590395][ T7613] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 339.598295][ T7613] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 339.605985][ T7613] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 339.614158][ T7613] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 339.620771][ T7613] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 339.628478][ T7613] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 339.636662][ T7613] 09:37:18 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 94) 09:37:18 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, 0x0, 0x0) 09:37:18 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async, rerun: 32) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async, rerun: 32) r0 = gettid() r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x34}]}) (async, rerun: 64) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (rerun: 64) 09:37:18 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x9c}, 0x30) 09:37:18 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x301040, 0x0) fcntl$getownex(r0, 0x10, 0x0) 09:37:18 executing program 3: r0 = io_uring_setup(0x3e7a, &(0x7f0000003280)) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r1) [ 339.905558][ T7640] FAULT_INJECTION: forcing a failure. [ 339.905558][ T7640] name fail_page_alloc, interval 1, probability 0, space 0, times 0 09:37:18 executing program 3: r0 = fsopen(&(0x7f0000000000)='jffs2\x00', 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000080)='/\b\xd5\x9eFsnd/leq\x00', &(0x7f00000000c0)='./file0\x00', r1) 09:37:18 executing program 2: mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x100001}, 0x20) [ 339.972606][ T7640] CPU: 3 PID: 7640 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 339.998321][ T7640] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 340.005510][ T7640] Call Trace: [ 340.007839][ T7640] [ 340.009874][ T7640] dump_stack_lvl+0xd1/0x138 [ 340.013558][ T7640] should_fail_ex.cold+0x5/0xa [ 340.018005][ T7640] prepare_alloc_pages+0x178/0x570 [ 340.022840][ T7640] __alloc_pages+0x149/0x5b0 [ 340.027154][ T7640] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 340.033441][ T7640] ? __lock_acquire+0x166e/0x56d0 [ 340.038052][ T7640] ? __lock_acquire+0xbc3/0x56d0 [ 340.042533][ T7640] __folio_alloc+0x16/0x40 [ 340.047237][ T7640] vma_alloc_folio+0x155/0x870 [ 340.050792][ T7640] ? policy_nodemask+0x1c0/0x1c0 [ 340.054238][ T7640] ? lock_chain_count+0x20/0x20 [ 340.058429][ T7640] __handle_mm_fault+0x1822/0x3c90 [ 340.063035][ T7640] ? vm_iomap_memory+0x190/0x190 [ 340.066707][ T7640] handle_mm_fault+0x1b6/0x850 [ 340.069849][ T7640] __get_user_pages+0x4f8/0xfc0 [ 340.073052][ T7640] ? follow_page_mask+0x10a0/0x10a0 [ 340.076720][ T7640] populate_vma_page_range+0x241/0x320 [ 340.080420][ T7640] __mm_populate+0x105/0x3b0 [ 340.083627][ T7640] ? faultin_vma_page_range+0x300/0x300 [ 340.088476][ T7640] ? up_write+0x1b0/0x520 [ 340.092388][ T7640] do_mlock+0x370/0x6d0 [ 340.095847][ T7640] ? folio_memcg+0x320/0x320 [ 340.099308][ T7640] ? fput+0x2f/0x1a0 [ 340.102260][ T7640] __ia32_sys_mlock+0x57/0x80 [ 340.106392][ T7640] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 340.111279][ T7640] __do_fast_syscall_32+0x65/0xf0 [ 340.114841][ T7640] do_fast_syscall_32+0x33/0x70 [ 340.118730][ T7640] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 340.124130][ T7640] RIP: 0023:0xf7f47549 [ 340.127056][ T7640] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 340.141680][ T7640] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 340.148657][ T7640] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 340.154739][ T7640] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 340.160650][ T7640] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 340.167285][ T7640] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 340.174213][ T7640] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 340.180737][ T7640] 09:37:18 executing program 2: openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) 09:37:18 executing program 3: r0 = io_uring_setup(0x3e7a, &(0x7f0000003280)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) 09:37:18 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 95) 09:37:18 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x34}]}) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) gettid() (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x34}]}) (async) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) 09:37:18 executing program 2: io_uring_setup(0x293b, &(0x7f0000000000)={0x0, 0x1e21, 0x8}) 09:37:18 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x2}}, 0x20) [ 340.435677][ T7662] FAULT_INJECTION: forcing a failure. [ 340.435677][ T7662] name fail_page_alloc, interval 1, probability 0, space 0, times 0 09:37:18 executing program 3: syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000000040)='./file0\x00', 0x80, &(0x7f0000000240)=ANY=[], 0xfd, 0x1105, &(0x7f00000020c0)="$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") r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$UHID_CREATE(r0, &(0x7f00000003c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x0}}, 0x120) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="14000000246837f73199aee6fdb9291b3091ec1a2d41d227975ad8ec030f5919f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdf", 0x80}, {&(0x7f0000001480)="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", 0xc39}], 0x2) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) fdatasync(r2) recvfrom$unix(r2, &(0x7f00000000c0)=""/18, 0x12, 0x1, &(0x7f0000000300)=@file={0x0, './bus\x00'}, 0x6e) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) dup2(r1, r0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r4 = open(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x103a42, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r4, &(0x7f00000001c0)='./file0\x00') creat(&(0x7f00000002c0)='./bus\x00', 0x0) [ 340.447526][ T7662] CPU: 0 PID: 7662 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 340.454146][ T7662] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 340.461934][ T7662] Call Trace: [ 340.464602][ T7662] [ 340.466658][ T7662] dump_stack_lvl+0xd1/0x138 [ 340.469619][ T7662] should_fail_ex.cold+0x5/0xa [ 340.472739][ T7662] prepare_alloc_pages+0x178/0x570 [ 340.477053][ T7662] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 340.482000][ T7662] __alloc_pages+0x149/0x5b0 [ 340.485060][ T7662] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 340.489414][ T7662] ? __lock_acquire+0x166e/0x56d0 [ 340.493108][ T7662] ? __lock_acquire+0xbc3/0x56d0 [ 340.496309][ T7662] __folio_alloc+0x16/0x40 [ 340.499151][ T7662] vma_alloc_folio+0x155/0x870 [ 340.502211][ T7662] ? policy_nodemask+0x1c0/0x1c0 [ 340.505634][ T7662] ? lock_chain_count+0x20/0x20 [ 340.508703][ T7662] __handle_mm_fault+0x1822/0x3c90 [ 340.511925][ T7662] ? vm_iomap_memory+0x190/0x190 [ 340.515432][ T7662] handle_mm_fault+0x1b6/0x850 [ 340.518930][ T7662] __get_user_pages+0x4f8/0xfc0 [ 340.522561][ T7662] ? follow_page_mask+0x10a0/0x10a0 [ 340.526782][ T7662] populate_vma_page_range+0x241/0x320 [ 340.530270][ T7662] __mm_populate+0x105/0x3b0 [ 340.533116][ T7662] ? faultin_vma_page_range+0x300/0x300 [ 340.536509][ T7662] ? up_write+0x1b0/0x520 [ 340.539318][ T7662] do_mlock+0x370/0x6d0 [ 340.542253][ T7662] ? folio_memcg+0x320/0x320 [ 340.546005][ T7662] ? fput+0x2f/0x1a0 [ 340.549933][ T7662] __ia32_sys_mlock+0x57/0x80 [ 340.553613][ T7662] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 340.559603][ T7662] __do_fast_syscall_32+0x65/0xf0 [ 340.568450][ T7662] do_fast_syscall_32+0x33/0x70 [ 340.573104][ T7662] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 340.582782][ T7662] RIP: 0023:0xf7f47549 [ 340.585660][ T7662] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 340.598969][ T7662] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 340.604779][ T7662] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 340.610739][ T7662] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 340.616402][ T7662] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 340.621470][ T7662] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 340.627045][ T7662] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 340.632230][ T7662] 09:37:18 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001080), 0x2, 0x0) write$FUSE_DIRENTPLUS(r0, 0x0, 0x10) 09:37:18 executing program 2: r0 = fsopen(&(0x7f00000000c0)='ntfs3\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='dirsync\x00', 0x0, 0x0) 09:37:18 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 96) [ 340.809975][ T7681] FAULT_INJECTION: forcing a failure. [ 340.809975][ T7681] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 340.817113][ T7671] loop3: detected capacity change from 0 to 8192 [ 340.891247][ T7671] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 340.912031][ T7671] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 340.925307][ T7671] REISERFS (device loop3): using ordered data mode [ 340.925481][ T7681] CPU: 3 PID: 7681 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 340.934600][ T7671] reiserfs: using flush barriers [ 340.943721][ T7681] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 340.943754][ T7681] Call Trace: [ 340.943763][ T7681] [ 340.943776][ T7681] dump_stack_lvl+0xd1/0x138 [ 340.943822][ T7681] should_fail_ex.cold+0x5/0xa [ 340.943855][ T7681] prepare_alloc_pages+0x178/0x570 [ 340.943902][ T7681] __alloc_pages+0x149/0x5b0 [ 340.943936][ T7681] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 340.981821][ T7671] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 340.983592][ T7681] ? __lock_acquire+0x166e/0x56d0 [ 340.983646][ T7681] ? __lock_acquire+0xbc3/0x56d0 [ 341.007789][ T7681] __folio_alloc+0x16/0x40 [ 341.010938][ T7681] vma_alloc_folio+0x155/0x870 [ 341.016696][ T7681] ? policy_nodemask+0x1c0/0x1c0 [ 341.019609][ T7681] ? lock_chain_count+0x20/0x20 [ 341.023837][ T7681] __handle_mm_fault+0x1822/0x3c90 [ 341.027161][ T7681] ? vm_iomap_memory+0x190/0x190 [ 341.031210][ T7681] handle_mm_fault+0x1b6/0x850 [ 341.035038][ T7681] __get_user_pages+0x4f8/0xfc0 [ 341.042286][ T7681] ? follow_page_mask+0x10a0/0x10a0 [ 341.050595][ T7681] populate_vma_page_range+0x241/0x320 [ 341.055982][ T7681] __mm_populate+0x105/0x3b0 [ 341.061993][ T7681] ? faultin_vma_page_range+0x300/0x300 [ 341.067920][ T7681] ? up_write+0x1b0/0x520 [ 341.072072][ T7681] do_mlock+0x370/0x6d0 [ 341.075771][ T7681] ? folio_memcg+0x320/0x320 [ 341.078953][ T7681] ? fput+0x2f/0x1a0 [ 341.082381][ T7681] __ia32_sys_mlock+0x57/0x80 [ 341.087596][ T7681] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 341.092865][ T7671] REISERFS (device loop3): checking transaction log (loop3) [ 341.093577][ T7681] __do_fast_syscall_32+0x65/0xf0 [ 341.105814][ T7681] do_fast_syscall_32+0x33/0x70 09:37:19 executing program 2: mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) [ 341.110443][ T7681] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 341.118606][ T7681] RIP: 0023:0xf7f47549 [ 341.124943][ T7681] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 341.140798][ T7681] RSP: 002b:00000000f7f425cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 341.148216][ T7681] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 341.154678][ T7681] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 341.160336][ T7681] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 341.165733][ T7681] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 341.171188][ T7681] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 341.176227][ T7681] [ 341.282871][ T7671] REISERFS (device loop3): Using r5 hash to sort names [ 341.297907][ T7671] ================================================================== [ 341.305032][ T7671] BUG: KASAN: out-of-bounds in leaf_paste_entries+0x44d/0x910 [ 341.311975][ T7671] Read of size 18446744073709551586 at addr ffff88802858bfa4 by task syz-executor.3/7671 [ 341.326997][ T7671] [ 341.332693][ T7671] CPU: 2 PID: 7671 Comm: syz-executor.3 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 341.347289][ T7671] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 341.353671][ T7671] Call Trace: [ 341.361812][ T7671] [ 341.364327][ T7671] dump_stack_lvl+0xd1/0x138 [ 341.368073][ T7671] print_report+0x15e/0x45d [ 341.372149][ T7671] ? __phys_addr+0xc8/0x140 [ 341.375822][ T7671] ? leaf_paste_entries+0x44d/0x910 [ 341.380753][ T7671] kasan_report+0xbf/0x1f0 [ 341.384661][ T7671] ? do_fast_syscall_32+0x33/0x70 [ 341.389496][ T7671] ? leaf_paste_entries+0x44d/0x910 [ 341.394132][ T7671] kasan_check_range+0x141/0x190 [ 341.398811][ T7671] memmove+0x24/0x60 [ 341.402640][ T7671] leaf_paste_entries+0x44d/0x910 [ 341.406967][ T7671] balance_leaf+0x917d/0xde40 [ 341.410845][ T7671] ? reiserfs_prepare_for_journal+0x162/0x2b0 [ 341.416871][ T7671] ? fix_nodes+0x14cf/0x8660 [ 341.420991][ T7671] ? replace_key+0x170/0x170 [ 341.424995][ T7671] do_balance+0x319/0x810 [ 341.428981][ T7671] ? get_right_neighbor_position+0x170/0x170 [ 341.434434][ T7671] ? wait_for_completion_io_timeout+0x20/0x20 [ 341.438995][ T7671] reiserfs_paste_into_item+0x767/0x8e0 [ 341.443193][ T7671] ? reiserfs_delete_object+0x210/0x210 [ 341.447143][ T7671] ? search_by_entry_key+0x960/0x960 [ 341.450777][ T7671] ? reiserfs_new_inode+0x323/0x2190 [ 341.454647][ T7671] ? r5_hash+0xaf/0xd0 [ 341.457570][ T7671] ? make_cpu_key+0x26/0x2a0 [ 341.460871][ T7671] reiserfs_add_entry+0x8cb/0xcf0 [ 341.464170][ T7671] ? reiserfs_lookup+0x490/0x490 [ 341.467564][ T7671] ? wait_for_completion_io_timeout+0x20/0x20 [ 341.471742][ T7671] ? dquot_get_next_dqblk+0x180/0x180 [ 341.475405][ T7671] ? rwlock_bug.part.0+0x90/0x90 [ 341.478661][ T7671] reiserfs_mkdir+0x683/0x990 [ 341.482589][ T7671] ? reiserfs_mknod+0x710/0x710 [ 341.486190][ T7671] ? down_write+0x157/0x220 [ 341.489657][ T7671] ? down_write_killable+0x250/0x250 [ 341.493834][ T7671] reiserfs_xattr_init+0x57e/0xc30 [ 341.497933][ T7671] reiserfs_fill_super+0x212b/0x2e90 [ 341.503002][ T7671] ? reiserfs_remount+0x1540/0x1540 [ 341.507857][ T7671] ? sget+0x476/0x580 [ 341.511282][ T7671] ? snprintf+0xbf/0x100 [ 341.514866][ T7671] mount_bdev+0x351/0x410 [ 341.518096][ T7671] ? reiserfs_remount+0x1540/0x1540 [ 341.530849][ T7671] ? reiserfs_kill_sb+0x1e0/0x1e0 [ 341.534889][ T7671] legacy_get_tree+0x109/0x220 [ 341.538929][ T7671] vfs_get_tree+0x8d/0x2f0 [ 341.542595][ T7671] path_mount+0x132a/0x1e20 [ 341.546627][ T7671] ? kmem_cache_free+0xee/0x5c0 [ 341.551073][ T7671] ? finish_automount+0x960/0x960 [ 341.555355][ T7671] ? putname+0x102/0x140 [ 341.558417][ T7671] __ia32_sys_mount+0x282/0x300 [ 341.561930][ T7671] ? __x64_sys_mount+0x300/0x300 [ 341.566113][ T7671] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 341.571399][ T7671] __do_fast_syscall_32+0x65/0xf0 [ 341.575680][ T7671] do_fast_syscall_32+0x33/0x70 [ 341.579449][ T7671] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 341.583831][ T7671] RIP: 0023:0xf7f53549 [ 341.586613][ T7671] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 341.601596][ T7671] RSP: 002b:00000000f7f4e410 EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 341.607590][ T7671] RAX: ffffffffffffffda RBX: 00000000f7f4e480 RCX: 0000000020000040 [ 341.614036][ T7671] RDX: 0000000020001100 RSI: 0000000000000080 RDI: 00000000f7f4e4c0 [ 341.619383][ T7671] RBP: 00000000f7f4e4c0 R08: 0000000000000000 R09: 0000000000000000 [ 341.624937][ T7671] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 341.630942][ T7671] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 341.636860][ T7671] [ 341.639307][ T7671] [ 341.641141][ T7671] The buggy address belongs to the physical page: [ 341.645965][ T7671] page:ffffea0000a162c0 refcount:2 mapcount:0 mapping:ffff888019b55ff8 index:0x213 pfn:0x2858b [ 341.652835][ T7671] memcg:ffff8880159a8000 [ 341.656049][ T7671] aops:def_blk_aops ino:700003 [ 341.660087][ T7671] flags: 0xfff00000002032(referenced|lru|active|private|node=0|zone=1|lastcpupid=0x7ff) [ 341.667229][ T7671] raw: 00fff00000002032 ffffea0000a16288 ffffea000098b3c8 ffff888019b55ff8 [ 341.672443][ T7671] raw: 0000000000000213 ffff888012b27000 00000002ffffffff ffff8880159a8000 [ 341.677467][ T7671] page dumped because: kasan: bad access detected [ 341.681187][ T7671] page_owner tracks the page as allocated [ 341.684658][ T7671] page last allocated via order 0, migratetype Movable, gfp_mask 0x148c48(GFP_NOFS|__GFP_NOFAIL|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE), pid 7671, tgid 7668 (syz-executor.3), ts 341272555936, free_ts 340291187812 [ 341.697187][ T7671] get_page_from_freelist+0x119c/0x2ce0 [ 341.700862][ T7671] __alloc_pages_slowpath.constprop.0+0x36b/0x23d0 [ 341.705304][ T7671] __alloc_pages+0x4aa/0x5b0 [ 341.708120][ T7671] alloc_pages+0x1aa/0x270 [ 341.711382][ T7671] folio_alloc+0x20/0x70 [ 341.715001][ T7671] filemap_alloc_folio+0x362/0x450 [ 341.719600][ T7671] __filemap_get_folio+0x32c/0xd80 [ 341.723675][ T7671] pagecache_get_page+0x2e/0x280 [ 341.727642][ T7671] __getblk_slow+0x1f4/0x1030 [ 341.731547][ T7671] __getblk_gfp+0x72/0x80 [ 341.735172][ T7671] search_by_key+0x3ac/0x3bf0 [ 341.738272][ T7671] reiserfs_read_locked_inode+0x158/0x2160 [ 341.742416][ T7671] reiserfs_fill_super+0x1273/0x2e90 [ 341.746620][ T7671] mount_bdev+0x351/0x410 [ 341.749900][ T7671] legacy_get_tree+0x109/0x220 [ 341.753589][ T7671] vfs_get_tree+0x8d/0x2f0 [ 341.756532][ T7671] page last free stack trace: [ 341.760132][ T7671] free_pcp_prepare+0x65c/0xc00 [ 341.764064][ T7671] free_unref_page_list+0x176/0xcd0 [ 341.768046][ T7671] release_pages+0xcb1/0x1330 [ 341.771416][ T7671] tlb_batch_pages_flush+0xa8/0x1a0 [ 341.775265][ T7671] unmap_page_range+0x2258/0x3c30 [ 341.779103][ T7671] unmap_single_vma+0x190/0x2a0 [ 341.782762][ T7671] unmap_vmas+0x226/0x370 [ 341.785942][ T7671] exit_mmap+0x18d/0x7b0 [ 341.789102][ T7671] __mmput+0x128/0x4c0 [ 341.792212][ T7671] mmput+0x60/0x70 [ 341.794914][ T7671] do_exit+0x9ac/0x2950 [ 341.797989][ T7671] do_group_exit+0xd4/0x2a0 [ 341.801345][ T7671] __ia32_sys_exit_group+0x3e/0x50 [ 341.805054][ T7671] __do_fast_syscall_32+0x65/0xf0 [ 341.808819][ T7671] do_fast_syscall_32+0x33/0x70 [ 341.812337][ T7671] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 341.816807][ T7671] [ 341.818563][ T7671] Memory state around the buggy address: [ 341.822481][ T7671] ffff88802858be80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 341.829561][ T7671] ffff88802858bf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 341.836907][ T7671] >ffff88802858bf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 341.842569][ T7671] ^ [ 341.846544][ T7671] ffff88802858c000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 341.852316][ T7671] ffff88802858c080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 341.858209][ T7671] ================================================================== [ 341.874212][ T7671] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 341.881061][ T7671] CPU: 2 PID: 7671 Comm: syz-executor.3 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 341.890685][ T7671] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 341.898141][ T7671] Call Trace: [ 341.901034][ T7671] [ 341.904263][ T7671] dump_stack_lvl+0xd1/0x138 [ 341.911669][ T7671] panic+0x2cc/0x626 [ 341.914413][ T7671] ? panic_print_sys_info.part.0+0x110/0x110 [ 341.920220][ T7671] ? preempt_schedule_thunk+0x1a/0x20 [ 341.925407][ T7671] ? preempt_schedule_common+0x59/0xc0 [ 341.929804][ T7671] check_panic_on_warn.cold+0x19/0x35 [ 341.934473][ T7671] end_report.part.0+0x36/0x73 [ 341.940396][ T7671] ? leaf_paste_entries+0x44d/0x910 09:37:20 executing program 2: r0 = io_uring_setup(0x41e3, &(0x7f0000000000)={0x0, 0x0, 0x40}) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0xb, 0x0, 0x1) [ 341.945005][ T7671] kasan_report.cold+0xa/0xf 09:37:20 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) (fail_nth: 97) [ 341.956512][ T7671] ? do_fast_syscall_32+0x33/0x70 [ 341.961686][ T7671] ? leaf_paste_entries+0x44d/0x910 [ 341.965200][ T7671] kasan_check_range+0x141/0x190 [ 341.968749][ T7671] memmove+0x24/0x60 [ 341.971732][ T7671] leaf_paste_entries+0x44d/0x910 [ 341.975481][ T7671] balance_leaf+0x917d/0xde40 [ 341.978571][ T7671] ? reiserfs_prepare_for_journal+0x162/0x2b0 [ 341.982431][ T7671] ? fix_nodes+0x14cf/0x8660 [ 341.986126][ T7671] ? replace_key+0x170/0x170 [ 341.993528][ T7671] do_balance+0x319/0x810 [ 341.997021][ T7671] ? get_right_neighbor_position+0x170/0x170 [ 342.002516][ T7671] ? wait_for_completion_io_timeout+0x20/0x20 [ 342.007433][ T7671] reiserfs_paste_into_item+0x767/0x8e0 [ 342.011703][ T7671] ? reiserfs_delete_object+0x210/0x210 [ 342.017893][ T7671] ? search_by_entry_key+0x960/0x960 [ 342.025365][ T7671] ? reiserfs_new_inode+0x323/0x2190 [ 342.028888][ T7671] ? r5_hash+0xaf/0xd0 [ 342.031615][ T7671] ? make_cpu_key+0x26/0x2a0 [ 342.034569][ T7671] reiserfs_add_entry+0x8cb/0xcf0 [ 342.037696][ T7671] ? reiserfs_lookup+0x490/0x490 [ 342.040839][ T7671] ? wait_for_completion_io_timeout+0x20/0x20 [ 342.044619][ T7671] ? dquot_get_next_dqblk+0x180/0x180 [ 342.048002][ T7671] ? rwlock_bug.part.0+0x90/0x90 [ 342.051056][ T7671] reiserfs_mkdir+0x683/0x990 [ 342.054124][ T7671] ? reiserfs_mknod+0x710/0x710 [ 342.057172][ T7671] ? down_write+0x157/0x220 [ 342.059721][ T7671] ? down_write_killable+0x250/0x250 [ 342.063283][ T7671] reiserfs_xattr_init+0x57e/0xc30 [ 342.067088][ T7671] reiserfs_fill_super+0x212b/0x2e90 [ 342.070840][ T7671] ? reiserfs_remount+0x1540/0x1540 [ 342.075512][ T7671] ? sget+0x476/0x580 [ 342.079264][ T7671] ? snprintf+0xbf/0x100 [ 342.083486][ T7671] mount_bdev+0x351/0x410 [ 342.088046][ T7671] ? reiserfs_remount+0x1540/0x1540 [ 342.093945][ T7671] ? reiserfs_kill_sb+0x1e0/0x1e0 [ 342.098230][ T7671] legacy_get_tree+0x109/0x220 [ 342.101572][ T7691] FAULT_INJECTION: forcing a failure. [ 342.101572][ T7691] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 342.111206][ T7671] vfs_get_tree+0x8d/0x2f0 [ 342.114332][ T7671] path_mount+0x132a/0x1e20 [ 342.117607][ T7671] ? kmem_cache_free+0xee/0x5c0 [ 342.122015][ T7671] ? finish_automount+0x960/0x960 [ 342.126894][ T7671] ? putname+0x102/0x140 [ 342.130390][ T7671] __ia32_sys_mount+0x282/0x300 [ 342.134667][ T7671] ? __x64_sys_mount+0x300/0x300 [ 342.138882][ T7671] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 342.144846][ T7671] __do_fast_syscall_32+0x65/0xf0 [ 342.149438][ T7671] do_fast_syscall_32+0x33/0x70 [ 342.154627][ T7671] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 342.161083][ T7671] RIP: 0023:0xf7f53549 [ 342.165204][ T7671] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 342.181995][ T7671] RSP: 002b:00000000f7f4e410 EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 342.189810][ T7671] RAX: ffffffffffffffda RBX: 00000000f7f4e480 RCX: 0000000020000040 [ 342.196952][ T7671] RDX: 0000000020001100 RSI: 0000000000000080 RDI: 00000000f7f4e4c0 [ 342.203840][ T7671] RBP: 00000000f7f4e4c0 R08: 0000000000000000 R09: 0000000000000000 [ 342.210783][ T7671] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 342.218570][ T7671] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 342.225932][ T7671] [ 342.228695][ T7691] CPU: 0 PID: 7691 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c #0 [ 342.237548][ T7691] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 342.245163][ T7691] Call Trace: [ 342.247599][ T7691] [ 342.249868][ T7691] dump_stack_lvl+0xd1/0x138 [ 342.253892][ T7691] should_fail_ex.cold+0x5/0xa [ 342.258416][ T7691] prepare_alloc_pages+0x178/0x570 [ 342.262805][ T7691] __alloc_pages+0x149/0x5b0 [ 342.266399][ T7691] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 342.271347][ T7691] ? __lock_acquire+0x166e/0x56d0 [ 342.275406][ T7691] ? __lock_acquire+0xbc3/0x56d0 [ 342.279221][ T7691] __folio_alloc+0x16/0x40 [ 342.283199][ T7691] vma_alloc_folio+0x155/0x870 [ 342.286755][ T7691] ? policy_nodemask+0x1c0/0x1c0 [ 342.290340][ T7691] ? lock_chain_count+0x20/0x20 [ 342.294445][ T7691] __handle_mm_fault+0x1822/0x3c90 [ 342.299146][ T7691] ? vm_iomap_memory+0x190/0x190 [ 342.303497][ T7691] handle_mm_fault+0x1b6/0x850 [ 342.307626][ T7691] __get_user_pages+0x4f8/0xfc0 [ 342.312303][ T7691] ? follow_page_mask+0x10a0/0x10a0 [ 342.316579][ T7691] populate_vma_page_range+0x241/0x320 [ 342.320746][ T7691] __mm_populate+0x105/0x3b0 [ 342.324440][ T7691] ? faultin_vma_page_range+0x300/0x300 [ 342.328936][ T7691] ? up_write+0x1b0/0x520 [ 342.332680][ T7691] do_mlock+0x370/0x6d0 [ 342.335867][ T7691] ? folio_memcg+0x320/0x320 [ 342.339781][ T7691] ? fput+0x2f/0x1a0 [ 342.343204][ T7691] __ia32_sys_mlock+0x57/0x80 [ 342.347300][ T7691] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 342.352299][ T7691] __do_fast_syscall_32+0x65/0xf0 [ 342.356219][ T7691] do_fast_syscall_32+0x33/0x70 [ 342.359637][ T7691] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 342.363824][ T7691] RIP: 0023:0xf7f47549 [ 342.366800][ T7691] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 342.378234][ T7691] RSP: 002b:00000000f7f005cc EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 342.384343][ T7691] RAX: ffffffffffffffda RBX: 00000000201b5000 RCX: 0000000000400000 [ 342.391678][ T7691] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 342.397795][ T7691] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 342.403316][ T7691] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 342.410246][ T7691] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 342.415585][ T7691] [ 342.418566][ T7671] Kernel Offset: disabled [ 342.423159][ T7671] Rebooting in 86400 seconds.. VM DIAGNOSIS: 09:37:20 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff88802c841d60 RCX=0000000000000000 RDX=ffff88801db69d40 RSI=ffffffff8176542d RDI=0000000000000005 RBP=0000000000000002 RSP=ffffc9000631f978 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000003 R13=ffffed10059083ad R14=0000000000000001 R15=dffffc0000000000 RIP=ffffffff8176542f RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe2c9c71c000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe2c9c71a000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f6a1be9a1bd CR3=000000000c48e000 CR4=00150ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=f8afed0633b5a9e457540703642fb4e0 XMM01=8b02436fb3693c238d1ab8396b693fce XMM02=cd5339ff1e16de06d0d2e8074c383b1f XMM03=5869f67046b19de3c8954bd11dbe7093 XMM04=000000000000000000000000000000b8 XMM05=000000000000000000800100000000b8 XMM06=00000000000000000000000000800100 XMM07=00800100000000b8000000b800800100 XMM08=96000000ca00000076000000f2000000 XMM09=00000000000000000000000000000000 XMM10=c6dd86ed268a26da6c48d49981d832d0 XMM11=44b791193f2073e5333cba7284ac269a XMM12=0d0c0f0e09080b0a0504070601000302 XMM13=0c0f0e0d080b0a090407060500030201 XMM14=00000000000000000000000000005440 XMM15=00000000000000000000000000000040 info registers vcpu 1 RAX=0000000000000003 RBX=0000000000000000 RCX=0000000000000001 RDX=0000000000000000 RSI=0000000000000003 RDI=0000000000000000 RBP=ffffffff8c7919c0 RSP=ffffc9000371e800 R8 =0000000000000000 R9 =ffffffff8e72d717 R10=fffffbfff1ce5ae2 R11=1ffffffff1cbc7a4 R12=ffff888022380000 R13=ffff888022380a38 R14=00000000ffffffff R15=ffff88803fffa700 RIP=ffffffff8a06437e RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000000c000100090 ffffffff 00c00000 GS =0000 ffff88802c700000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe7418665000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe7418663000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000000099e6f7 CR3=000000001e886000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=30303033396130303030663778302826 XMM01=293030303478302f3030303339613030 XMM02=000000000000000041a230d7a0000000 XMM03=00000000000000000000000000000000 XMM04=7a696d696e696d20636578650d006567 XMM05=650a016873616d7320636578650a0065 XMM06=7563657865110073746e696820636578 XMM07=78650800737472617473657220726f74 XMM08=616d7320636578650a00657a696d696e XMM09=110073746e696820636578650a016873 XMM10=7472617473657220726f747563657865 XMM11=65786509006e65672063657865080073 XMM12=65657320636578650a007a7a75662063 XMM13=0c086c61746f7420636578650a007364 XMM14=756210016564696c6c6f632063657865 XMM15=00000000000000000000000000000000 info registers vcpu 2 RAX=0000000000000054 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8478c9c5 RDI=ffffffff91ed4f00 RBP=ffffffff91ed4ec0 RSP=ffffc900074f6970 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000037363754 R12=0000000000000000 R13=0000000000000054 R14=ffffffff8478c960 R15=0000000000000000 RIP=ffffffff8478c9ef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802c800000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe3648e1a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe3648e18000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000000f94f0c CR3=0000000076d1a000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=0000000000000000bfe62e42fefa39ef XMM02=000000000000000040f3241146bc9bbb XMM03=000000000000031d000000000000031c XMM04=0000000000000a940000000000000a93 XMM05=000000000000031d000000000000031c XMM06=000000000000031f000000000000031e XMM07=00000000000003210000000000000320 XMM08=00000000000003230000000000000322 XMM09=00000000000003250000000000000324 XMM10=00000000000003270000000000000326 XMM11=00000000000003290000000000000328 XMM12=000000000000032b000000000000032a XMM13=00000000000001470000000000000146 XMM14=00000000000001490000000000000148 XMM15=00000000000000000000000000000000 info registers vcpu 3 RAX=dffffc0000000000 RBX=0000000000000001 RCX=0000000000000000 RDX=00000000000035ce RSI=ffffffff8135ce36 RDI=ffffffff8f9ff170 RBP=ffffc900005d8938 RSP=ffffc900005d8880 R8 =ffffffff8c606440 R9 =ffffc900005d8924 R10=fffff520000bb129 R11=0000000000094001 R12=ffffc900005d8925 R13=ffffc900005d88f0 R14=ffffffff8135ce35 R15=00000000000035ce RIP=ffffffff8138858f RFL=00000806 [-O---P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c900000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe4eb8678000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe4eb8676000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000f5b8f0 CR3=000000001e886000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=0000000000000000413386d000000000 XMM03=32322035312e322e302e303120343738 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000